last executing test programs: 6.645788117s ago: executing program 4 (id=1192): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0xe, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="a0000000420001000000000000000000030100000f0000007d00010000112233445566778899aabb86dd2c00001c00ff840001110000010101010253aa58fe6cbdf035bc6eae44132403b1fd606412c3258e6248ffa62e9e156d23cfd72ddb80723d4613dc929cbc86ba94e0cd05c4a639eee919c4b391a38f086b58225d45c1b4106bb4754aebb15e0feff76718ef7ff9be52ec9c00000004000280040003"], 0xa0}}, 0x0) 6.402992329s ago: executing program 4 (id=1195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000440)={0xa0, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @remote}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000440)={0xa0, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @remote}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) sendto$packet(r1, 0x0, 0x0, 0x80, &(0x7f0000000680)={0x11, 0x5, 0x0, 0x1, 0xb1, 0x6, @random="d95e786bbe90"}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000002200)={'syztnl1\x00', &(0x7f0000000540)={'gretap0\x00', 0x0, 0x80, 0x10, 0x9, 0xf0000000, {{0x3e, 0x4, 0x0, 0x0, 0xf8, 0x65, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @broadcast, {[@cipso={0x86, 0x57, 0x0, [{0x7, 0x11, "b280b3d4328e021085a49f104509fe"}, {0x0, 0x5, "ee15fc"}, {0x6, 0x5, "d5c022"}, {0x0, 0xf, "052c2aa2e00d4bdb97478543b2"}, {0x2, 0x5, "de319d"}, {0x0, 0x2}, {0x6, 0x7, "46300dc796"}, {0x5, 0x8, "b33df13ab38f"}, {0x0, 0x11, "06193a2fe58dc7b37bd5828be88852"}]}, @timestamp_addr={0x44, 0xc, 0x95, 0x1, 0x9, [{@rand_addr=0x64010100, 0x1df}]}, @timestamp_addr={0x44, 0x3c, 0x70, 0x1, 0xe, [{@broadcast, 0xb93a}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x3}, {@multicast1, 0xf6}, {@local, 0x2}, {@multicast2, 0x3}, {@loopback, 0x19a8}, {@empty, 0xfffff99a}]}, @cipso={0x86, 0x1e, 0xffffffffffffffff, [{0x7, 0x11, "475640f2215847463630b76be3ac01"}, {0x0, 0x4, '?~'}, {0x5, 0x3, "9f"}]}, @rr={0x7, 0x13, 0x3d, [@remote, @broadcast, @loopback, @local]}, @generic={0x44, 0x11, "24275589587b32ca16f55d90573f1c"}]}}}}}) socket$inet(0x2, 0xa, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r5, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x10, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="a905000000007464000100000000000000e5c06417e436a106993e1e5ad8311dabcd25ca", 0x24}], 0x1}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000022c0)={'syztnl0\x00', &(0x7f0000002240)={'syztnl1\x00', 0x0, 0x2b, 0x5, 0x2, 0x19ca5810, 0x24, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x700, 0x6, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000023c0)={'ip_vti0\x00', &(0x7f0000002300)={'sit0\x00', 0x0, 0x7800, 0x40, 0xffffffff, 0xfffff1cb, {{0x22, 0x4, 0x1, 0x16, 0x88, 0x66, 0x0, 0xc2, 0x4, 0x0, @local, @multicast1, {[@cipso={0x86, 0x32, 0x3, [{0x3, 0xf, "eafc054d1919c134c1e32e33a9"}, {0x7, 0x11, "330b7944f8de55422b6b16331a987b"}, {0x7, 0x4, '5}'}, {0x0, 0x8, "881bb5e59358"}]}, @rr={0x7, 0xf, 0xd3, [@multicast1, @empty, @private=0xa010100]}, @rr={0x7, 0x13, 0x9c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @rand_addr=0x64010101, @loopback]}, @ssrr={0x89, 0x1f, 0xbf, [@remote, @empty, @rand_addr=0x64010102, @remote, @rand_addr=0x64010101, @rand_addr=0x64010100, @multicast1]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000023c0)={'ip_vti0\x00', &(0x7f0000002300)={'sit0\x00', 0x0, 0x7800, 0x40, 0xffffffff, 0xfffff1cb, {{0x22, 0x4, 0x1, 0x16, 0x88, 0x66, 0x0, 0xc2, 0x4, 0x0, @local, @multicast1, {[@cipso={0x86, 0x32, 0x3, [{0x3, 0xf, "eafc054d1919c134c1e32e33a9"}, {0x7, 0x11, "330b7944f8de55422b6b16331a987b"}, {0x7, 0x4, '5}'}, {0x0, 0x8, "881bb5e59358"}]}, @rr={0x7, 0xf, 0xd3, [@multicast1, @empty, @private=0xa010100]}, @rr={0x7, 0x13, 0x9c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @rand_addr=0x64010101, @loopback]}, @ssrr={0x89, 0x1f, 0xbf, [@remote, @empty, @rand_addr=0x64010102, @remote, @rand_addr=0x64010101, @rand_addr=0x64010100, @multicast1]}]}}}}}) getpeername$packet(r1, &(0x7f0000002400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002440)=0x14) (async) getpeername$packet(r1, &(0x7f0000002400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002440)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000002500)={'erspan0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x7800, 0x8, 0x2, 0x4, {{0x26, 0x4, 0x1, 0x0, 0x98, 0x63, 0x0, 0x7, 0x2f, 0x0, @multicast1, @multicast2, {[@ra={0x94, 0x4}, @noop, @lsrr={0x83, 0x13, 0xc6, [@initdev={0xac, 0x1e, 0xfc, 0x0}, @multicast2, @remote, @local]}, @timestamp_addr={0x44, 0x14, 0x5b, 0x1, 0xb, [{@local, 0x2df9e1db}, {@dev={0xac, 0x14, 0x14, 0x40}, 0xcc}]}, @ssrr={0x89, 0x3, 0x53}, @cipso={0x86, 0x52, 0x1, [{0x2, 0x10, "dc3bb6fc2b465d36730b334cdf53"}, {0x0, 0x9, "dd879a383e6519"}, {0x1, 0xb, "fcfe702fae1051e721"}, {0x7, 0x2}, {0x1, 0x6, "67ddf246"}, {0x1, 0x11, "ba834b2fda834b6fe33e67b8a2c0cf"}, {0x2, 0xf, "6910d8c48e208a98ccf24d7b69"}]}]}}}}}) getpeername$packet(r1, &(0x7f0000002540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002580)=0x14) (async) getpeername$packet(r1, &(0x7f0000002540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002580)=0x14) getsockname$packet(r1, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002600)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000026c0)={'ip6_vti0\x00', &(0x7f0000002640)={'syztnl2\x00', 0x0, 0x29, 0xa8, 0x4, 0x7, 0xa, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x7, 0x6, 0x1}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000002700), &(0x7f0000002740)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000002700)=0x0, &(0x7f0000002740)=0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000002780), &(0x7f00000027c0)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000002780)=0x0, &(0x7f00000027c0)=0x4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000002a40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002800)={0x1e8, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x30, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8a3}, @ETHTOOL_A_BITSET_VALUE={0x21, 0x4, "4638f9cd4c106755fb9b5e242693d3aadb0475ad3c16b13ccf13163b0d"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) 6.349298404s ago: executing program 1 (id=1196): r0 = socket$inet6(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111b3000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x1, @private1, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000200)='wg0\x00', 0x4) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) 6.269151801s ago: executing program 2 (id=1197): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYRESDEC=r0, @ANYRES8=r0, @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4040090) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) (async) r2 = socket$kcm(0x29, 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="f1", 0x1}], 0x1}, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r7 = socket$kcm(0x29, 0x5, 0x0) r8 = openat$cgroup_ro(r1, &(0x7f0000000440)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) (async) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000130006000000850000006100000085000100070000009500000000000000a4d17bfd12dc5c64507749cf50cf374fde2b73a4fee1cb33689f39c28d9ab54cf361e016516b6d23f6ca2d48"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x16, '\x00', 0x0, @sched_cls=0x36, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendfile(r7, r1, 0x0, 0xffffffff000) (async) sendfile(r7, r1, 0x0, 0xffffffff000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYRES64=r0, @ANYRES16=r9, @ANYBLOB="7961fdffffff0004000000000000000099006c910000e02425a0af74e42b92d4c3b9adf5bfc424a4484b7b9ce94379d9edc4229361d1c68a489b6c9b349923dd4979a8cd2d50803d4a17fd197be907317cc24664b3fa328d7c5359c8037e1e9dc55703cd4c0e83cd20bc50285d697570b3828de9c44e6886c73ff36721fc1db017c42ac6b892ac1d"], 0x20}}, 0x4000054) sendmsg$NFT_BATCH(r6, &(0x7f0000000f00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000840)=ANY=[], 0x658}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x20008004) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) (async) r10 = socket$kcm(0x29, 0x5, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) write$cgroup_pressure(r10, &(0x7f0000000140)={'full'}, 0xfffffdef) (async) write$cgroup_pressure(r10, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0) (async) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0) 5.880691406s ago: executing program 3 (id=1200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3}, 0x14}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0xbf92c55f9d2f45c1, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0xc4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r3, @ANYBLOB="3a0027bd7000fedbdf2502000000800001802c0004001400010002004e20ac1414aa00000000000000001400020002004e2164010100000000000000000008000300050000000800030000000100080003000500000038000400200001000a004e24000007fffc010000000000000000000000000000070000001400020002004e220000000000000000000000004c0001800d0001007564703a73797a3100000000100001006574683a69705f76746930000c00028008000300090000001c000280080004000b000000080004000200000008000200020000000c0009800800010003000000"], 0xec}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "0a1fb0699d46dac48f29d158dbe8cfb1979e12979688dc039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c7667ce67af25166c2f0f85f36aa8867406119c2a6f1f892e31dea982c5ab0348d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b51424df36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459af0ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0x11, 0x7, 0x14, 0x5}}, @TCA_RED_MAX_P={0x8, 0x3, 0x3}]}}]}, 0x150}}, 0x4000010) r4 = socket(0x1d, 0x1, 0xf43) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000300)={0x3c, r5, 0xc00, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x40}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1ff}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7fffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x11) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000003030108000000000000003a008b61b614b4872c09a8da494a7b71438cee091c667fa71eceec221baccdeb7844317855ea30fb61ca2ca34f5af3bc6f47f2a3c85ff9022fa4412c01d786e57021d645f29b1b"], 0x14}, 0x1, 0x0, 0x0, 0x4881}, 0x4024000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x4140030, r0, 0xbabce000) 5.84410538s ago: executing program 4 (id=1201): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000004000000000000000010060851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000001400078008000840000000000800174000000004050005000a000000050001000700000005000400000000000900020073513d31000000000d0003006c6973743a736574"], 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008114) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[], 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002000)=@delchain={0x2c, 0x66, 0x49404108a2eb2df, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0xffeb, 0x1d0c5d7c03b59b98}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r6) 5.579972495s ago: executing program 3 (id=1202): unshare(0x22020600) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x18, 0xd0, 0x59}, 0x10) 5.300402888s ago: executing program 4 (id=1203): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000500)=ANY=[@ANYBLOB="8c4b5ab7b2a6a9d16816c9743de9e0ba64bea6c5cab6084d15191c378cfbc6c366f1ba211c9e2ac67842d33f821655966ea4906eb757ef7c7b700a32d8092751a9d7c0a78c31", @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf25020000001400010020010000000000000000000000000002"], 0x28}, 0x1, 0x0, 0x0, 0x8c0}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) connect$tipc(r6, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x1}}, 0x10) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020662a, &(0x7f0000000c40)={0x8000000000000001, 0x5, 0x7, 0xffffffcb, 0x7, 0x0, [{0x8000, 0xfffffffffffffff8, 0x6, '\x00', 0x400}, {0x1, 0x7, 0x4, '\x00', 0x480}, {0x7, 0x7, 0x1, '\x00', 0x2}, {0xfaf, 0x5, 0xe08, '\x00', 0x401}, {0x7ff, 0x6, 0x2, '\x00', 0x30a}, {0x7, 0x9, 0x6, '\x00', 0x8}, {0x8, 0x9, 0x3}]}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x6}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0xb64f2000) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000c00)={'macvtap0\x00', &(0x7f0000000940)=@ethtool_per_queue_op={0x4b, 0xf, [0xffffffff, 0x3cac59af, 0x6, 0x8, 0x9, 0x9, 0x3, 0x9, 0x5, 0x40, 0x431, 0x1000, 0xffffffff, 0x0, 0x8000, 0x9, 0x7, 0x2, 0xff, 0x2, 0x9, 0xc, 0x2000000, 0x80, 0x1, 0x4, 0xa, 0x0, 0x400, 0x2, 0x2, 0x0, 0x0, 0x30000, 0x2, 0x1, 0x7, 0x7, 0x400, 0x4, 0x5, 0x40f, 0x5, 0xfffffff7, 0x4, 0x401, 0x9, 0x0, 0x397a, 0x1ff, 0x6, 0x10, 0x8, 0xffffff03, 0x95, 0x8, 0x7, 0x6b5a, 0x852, 0xd064, 0xc0000, 0x24000, 0x638c0, 0xff, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x5, 0xa526, 0x9, 0x7, 0x3e5, 0x7ff, 0x3, 0x5, 0xa9, 0x3, 0xe, 0x8, 0xa, 0x8, 0xffc, 0x1, 0xe513d1c7, 0x672b7910, 0x5, 0x5, 0x4000000, 0x8, 0x0, 0x7, 0x10001, 0x8, 0xfff, 0x2, 0x1, 0x9, 0x40, 0x6, 0xeba, 0x4, 0xfffffffb, 0x1, 0x7, 0x8, 0x7, 0x7fffffff, 0x0, 0xa274, 0x0, 0x400, 0x2, 0x3, 0x200, 0x8, 0xdc, 0x6, 0x2, 0xf4b, 0x555, 0x7, 0xb4d4, 0x9, 0x1, 0x4, 0xbc], "45fa1cc64c889c57cbcfbd6a4c78a435c921ac31639641d8bcfd0287c536100c79813d693355dd1607e70e3f0bfea253935bb011d00ed5b8a01356e35109b63d891e5553b0867e961e727c91e69173458c48f0a3cf53dff797d50a536d936b96c0ec1a2eb27b5103303041456d69a782bf0db4d3550bc260b50002666235604389"}}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB="d41600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000000003841454681ad3058bb67cbb56871ec790000000000007500264fbf6caa49cb8600001e0000ffffffff0000000000003629f0dfa3fe00100000f901"], 0x50) socket$nl_route(0x10, 0x3, 0x0) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(0xffffffffffffffff, 0x40106e8c, &(0x7f0000000440)=[0x5, 0x2]) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r8) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="010000000084b508c2fa9a3d0600"], 0x14}, 0x1, 0x0, 0x0, 0x4c1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000080000000000e70d08000000181a0000e7330080e701504eddc422cb2250297c093a252c3bf3699ff2a02d5f832d9325789b2f7e959c926f3d8090ebf3e8345800e69232091bbd0f804f1aed63420acf6d406b081138cbc55a5b0b942d123b4b13febfa571b4d96e787a005fefd45fb3f2d128c7a04dc79f1662b6a9befded3b46654dc6f94f8dfe7e579eb0d18114753ab47beebecffd557ec4ac47c7a840c1f48c25a441cb0e86ec8e45c5ebc89c548cba3d45fb3a448ceeee01c50896c6b4f355427e50ccbb612fbb3431ea3e67d062f6b3f9a733947406c5543bf21086dcd365ce6b18", @ANYRES32=r7, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c0009"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 5.264968875s ago: executing program 1 (id=1204): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x171, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) syz_emit_ethernet(0xb6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="0000080001050700ffff80000600"], 0x96) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_LLC_GET_PARAMS(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0x14, 0x14, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r6, &(0x7f0000000240)='\x00', 0x1, 0x4040081, 0x0, 0x0) recvfrom$unix(r7, 0x0, 0x23, 0x40000011, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r9) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000500)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@map=r9, r8, 0x2f}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r11 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r11, &(0x7f0000000280)=[{{&(0x7f0000000100)={0xa, 0x4e27, 0x10003ff, @mcast1, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x250}}], 0x1, 0x4004804) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) close(0x4) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='p\x00\t'], 0xc) 5.251212525s ago: executing program 3 (id=1205): sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080), 0x14, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000000100000bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff00000000ae04020000000000be400300000000006504030001ed00007b130000000000007f44000000000000630a04fe000000007133ff80000000009f030000000000009500000000000000023bc065b7a379d17cf9333379fc05000000912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50bec919bc461e91a7168c5181554d1b583c587e436fe275daf51efd601b6bf01c8e8b1b526375ec5dd6fcd82e4fee5bef7af9a0200000000000000e3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f645679c294392cf538b07ce2646cb7798b3e6440c2fbdb00a3e35208b0bb1d2cd871c5548930be3835f2554b4a28610643a98d9ec21ead2ed51b104d4d91af25b84550a7925c3109b151b8b9f75d80000000eda88c658d42ecbf28bf7076c15b463bebc72f526d8e4a9e231d512381e7a78afcb913466aae7f6df70252e79166d858fc152b659da074e1320060d0b11008e59a5923906f88b53987ad1714e72ba7a5b74f0c33d39000d06a59ff61622cfd9aa58fe8d485ae2c0cc65c2a36aaec2477584b6a89adaf17b0a6041bde4cc3ed54d27f777e92b87496e6649cf728d236619074d6ebdf098bc908c423d228a40f9411fe7226a40409d6e37c4f46756d31cb46761bade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18de0ae564162a27afea62d84f3a10746443d64364f56e24e6d21053d901204a1deeed41556175cbd4041b7d301bcb72652d950ad31928b0b093778b68e2e9853c02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f98928d5e9b94ff9ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cff538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595bcf50ab32d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063b59261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6f8c3a13596c2ea3e2e04cfdce669e51731b2875353193f82ade69d0540059fe6c7fe7c00fb7502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abd47b64a1b304502dda787343ce3c95300000000010000003baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022af46667cf25c5d3038816106dec28eaeb88343261a48a18f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfeff59d54d1f92ecc4e95dd2d18383117c03987d198899b212c55318294270a1ad10d30fef7c24b78b29d83238273f4fc87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead8eaf68b0c5dda0467d35a3807000000b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ea1e717d29135753208165b9cdbae037f315c7d951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d7012c1b45f6ada1ee7baa5b6a686b50f09b7f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac4d73a008364e0602a594817031fc2ff2c32a1989e00f52f8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a3c3e6e4fd2e016820f78b796a825b3dad9ce7b37507e0b83c3ecd01549bca6a016b3e18a00c748894dc3bfe5efda8b0a477d6a6562fdee45eb16e276dee992094ba9830f6c164179e7d532d86060bea930118d3cae1b8f916b9671b7000000000040f4bee5ad2dea2d14e195265504c05bba38b095e1679f96ddef65ba5de9c8cfb6465ae4165c0689a314a6eb6b36aa705b957edef3035e14b879d4e7dc00624708042e00bf9a7f7ae5f308744770759558e4fcb99c0dc957521ef255362bf2f3966f3754e81fb9bdef22c19f5a49147b85343f9f36bcda9f64b7a5c5b2f5452f5b1de02e6f15c5640bf89d4a74d51dc233dee628c1dfbb5566b98478c174b34eb234481547e484c6af101396b6977dd668b401391c1dc54f2edccf1cabe6be9868d383eb937efdfd9ade018106f544f04fc07ad525497f65fbad3cf145396acf3b0d38e6b46e28d86880fd6f62c373000000000000000000005d194c27cd4d8f6727f59c71dc84311c0f1fb6c87081c7be9355288610c32c2d8c18bf2027212182903687f48262aea54c5f8a315c9aa4a5af1aa2c4007d1baae38c270012b7eb9411ae451204dba30f8321b07a18db97c3e0cf6a15170e515b1cc463a67a5b2b23ec5662ccfa898b8d5075647bdfb390cde56efb8fd42df12c5c8f66bdc58449ec2b38bf12f5f0a49dcbcf4e6f11c47d23fa34793a0000a1cbb1e06e9a8d2449451d7a05ec0a0d3c9716f505ddeba488c60ebf44cac05c2739694359c925148137376dd3f1330ed0e9211f73ee279cc0b5c298422395ce438f48a39ff569375e609f9e904aacc3d8011326d5e4d654c74501cf16bbf72d3984f9b4ef000000003a8a3d49fc837001e4622e58e3a4ef6b55a8dd0680d951cdb6e54ed92a9a6a0e5e494b7b7b0ef4b4bafc5d964551b2a22bfd12b0761ef07a103e51e84917ee44f860b9785e264343f6a80e9318edecf73df6940856cd56c56eb3831445833c701044aaa49439a44a624267580b3c0980d7f87437bf498f6e1915450400000000000000564a02552c0a5fedbcf4da0db6ed03b9dbc224ee76d20aaf1ac74bcb7eb6f202209e64cc4d130dcf6ab3df8ae4911deb4bb5c7df97fc348d151e834be73915f854272f69d88123f666448b6a8e73322b04fffea9cc05e4129debf311c73b4d1a244b1e5b9943028745a0b6477686740ab877315e35624d791e6f71adb1acd3e22cf472ff7e048b16c11c84da9a3b16b92665912132a4dba680052919c20e191311d8092a09f3c609823fed1bd651ce1c34de105790ba2ca3afa26647f66efbf97b109e7226c74e32beb14ff3fd6918e255fc9b42f86b0188cf885afcc9bb77a7fc3ca7ec1015af494add960f8a11422ca005f24006867cd156e0350022943e301b2c07f4d37d07b05ac2fa1f1d5a0d6eb7e992b076bd77509c26034d2a740d578476410b413591884136259693effaf27e7bcfb58efa92625fb9bd68ecca42047f6e7d24b0446ea16a310073c163d1c6aa3ba1fe76b4e88d5f98cc05c6d033e2c28b4990892230d6b4e5c083a601a25145eb22f4f77313117f8147810d95c64fb78b0a000000000000000000000000e92ba8b066e4bd82bb6003d5da8791d838bcd6eefb13000000000000000000000000000000b652ff6fbad82da75114742bc6a27cba894ef490531be709a3a3c81b267dfafa55e6f855200b4e7518682c30f40808cd5bb8f00beb63b4989cc01d8e75a182337b9f9e08430ccec9bda0134d07a9f54b60033182f5d2bb61fd130d65e68bf148d26470060c707a8cf750ca954ee63c78cd975c7f565783383f02edcb7ce4a9ed0c511d18fe32352276d72eefe0d566f97ccae16b3492f60b96574aac4f1862fb6e4932c181dbf8c68ca16b765de9edba0bf5bfb9c4950d19c0bc31db02f374ce62141160436639d4b6cb0033a47ffdc54d55f1136743b1b26946f200000000000000007590ab8f29c7accd9d11786c4ca1271cd2293b572f14a3dfcaa3467f2783fc09e3eee3fa4b82b7b6ce904e05fa797a2f7ff63e4f874bd870821f6460904e05d7a3f8295a9a5fba1e3587b9d9e878c86ba9b66c4491fcff607d9cbf156f3fc0fb8c827d4e6cac493a3e2746bd5f0f8bc024352200a4250785cdca4fe3c546972d0a56e3905d1e72c33d64f6591fe25f312f47e7ec6b4640f1f6dc4efee4b8d3cfbfcbf77bfd52f0a99adc7d359233cfea0a11f5dcb87603885f08d633e842644988d2f45a1824361b5df707f726fad22d53727b4396b3d05df34933262fdb09f19837fdc2af1c721b17d54076e25ab625ae0a4c9cd900"/3002], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xfffffffffffffe79, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x5931a207a26eb392) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xfffffffffffffe79, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x5931a207a26eb392) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000980)="00538c", 0x3}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e1e, @private=0xa010102}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000340)="062b94327d", 0x5}], 0x1}}], 0x3, 0x4000800) (async) sendmmsg$inet(r1, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000980)="00538c", 0x3}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e1e, @private=0xa010102}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000340)="062b94327d", 0x5}], 0x1}}], 0x3, 0x4000800) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000100)=@assoc_value, &(0x7f0000000000)=0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x6, 0x0) close(r6) write(r4, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fd3f00000000000009000000850000002e000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xfe79, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x8c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1af}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x200}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9a}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44000054}, 0x20004004) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x8c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1af}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x200}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9a}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44000054}, 0x20004004) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x40, r12, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x41, 0x5f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x40, r12, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x41, 0x5f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x40}}, 0x0) 4.996305632s ago: executing program 2 (id=1206): r0 = socket(0x2b, 0x800, 0x2) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000040)) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=@ipv6_delrule={0x88, 0x21, 0x100, 0x70bd2b, 0x25dfdbfe, {0xa, 0x0, 0xb0, 0x2, 0xc, 0x0, 0x0, 0x7, 0x10012}, [@FRA_SRC={0x14, 0x2, @empty}, @FRA_DST={0x14, 0x1, @remote}, @FRA_SRC={0x14, 0x2, @loopback}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FRA_SRC={0x14, 0x2, @private1}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0xffffffc0}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 3.93760399s ago: executing program 0 (id=1211): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)={0x50, r3, 0x1, 0x70bd25, 0x2, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x220, 0x700001b, 0x148, 0x220, 0x148, 0x2f8, 0x206, 0x240, 0x2f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x200, 0x220, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'ip6tnl0\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@set={{0x40}, {{0x0, [0x5, 0x4, 0x7, 0x2, 0x1], 0x1, 0x6}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x8, 0x3, 0x590, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x4c0, 0xffffffff, 0xffffffff, 0x4c0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@local, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x781eece4fc9ea1c5, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x3, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x7ff, 0x918a, 0x10000, 'snmp\x00', 'syz1\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) 1.959688215s ago: executing program 1 (id=1212): socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc020000000000000000000000000000040012"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@gettaction={0x80, 0x32, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0xcc}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48008}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002b00)=ANY=[@ANYBLOB="60000000020603000000000000000000000000160900020073797a3100000000050001000700000014000780080013005607497408001240080000000500050002000000050004000000000014000300686173683a69702c706f72742c6970"], 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x8004) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}}, 0x0) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/pid\x00') connect(r3, &(0x7f0000000440)=@isdn={0x22, 0x7, 0x4, 0x9, 0xe1}, 0x80) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x1402, 0x200, 0x5, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r9}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x815) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000000000c6bcd41fd8"], 0x48}}, 0x410) sendmsg$can_bcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="0100000012020000ffffffff00000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000000000000cad606611b1273a59a07bafc"], 0x48}, 0x1, 0x0, 0x0, 0x4040812}, 0x1) socket$l2tp(0x2, 0x2, 0x73) unshare(0x20000400) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r10, 0x8982, &(0x7f00000004c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) 1.661892497s ago: executing program 0 (id=1213): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x3, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x1}, {{0x2}, {0xf0ffff, 0x1, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x6, 0x0, 0x7fff}}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000045}, 0x2008c014) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_int(r7, 0x0, 0x13, 0x0, &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={r2, 0x4, 0x9, 0xc}, &(0x7f00000002c0)=0x10) 1.65996962s ago: executing program 4 (id=1214): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async) r0 = socket$igmp(0x2, 0x3, 0x2) recvmmsg(r0, &(0x7f0000002040)=[{{&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000001480)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/97, 0x61}, {&(0x7f00000011c0)=""/99, 0x63}, {&(0x7f0000001240)=""/246, 0xf6}, {&(0x7f0000001340)=""/180, 0xb4}, {&(0x7f0000001400)=""/99, 0x63}], 0x6, &(0x7f0000001500)=""/107, 0x6b}, 0x2}, {{&(0x7f0000001580)=@isdn, 0x80, &(0x7f0000001880)=[{&(0x7f0000001600)=""/119, 0x77}, {&(0x7f0000001680)=""/249, 0xf9}, {&(0x7f0000001780)=""/235, 0xeb}], 0x3, &(0x7f0000001f40)=""/251, 0xfb}, 0x4}], 0x2, 0x10040, &(0x7f00000020c0)) 1.649487478s ago: executing program 1 (id=1215): r0 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f0000000200)=[{r0, 0x1210}], 0x1, 0x1ff8) sendto$inet(r0, &(0x7f0000000140)='h', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0xfff9, @broadcast}, 0x10) listen(r0, 0xda90) (async) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) 1.589070188s ago: executing program 2 (id=1216): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x11, &(0x7f0000001680)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@map_fd={0x18, 0x5, 0x1, 0x0, r0}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, r2, 0x301, 0x40}, 0x14}}, 0x4000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x50) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000000)=0x11, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x12, 0x42, 0x4, 0x2}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r5, &(0x7f0000000380), &(0x7f0000000580)=@tcp=r6}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r5, &(0x7f0000000440)="581102a0e1d7b843d33113f3689c73152705e0f9d57142fba8576b71cc35", &(0x7f0000000500)=""/175}, 0x20) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) r8 = epoll_create(0x1fc) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000380)={0x19}) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000300)=r5, 0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, 0x0, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x4000) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000002d0007012bbd7000fedbdf25077c1000080001800400dd80040003803f0002"], 0x60}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000002c45a9dfc5fde900000c00000000651820000028d7d50d4c9d7668fd6b3dc3712b55514ad894d9134a7e00fc09dafc47196c85aa547e78bdb9a73f61c5c10e5098bc3fe818e04a5bffd44d933c0ee98770a99bedd78fc228f9aaeb301a768d8ba15387d1", @ANYRES32=r3, @ANYBLOB="000000000000000079000000000000009500000000000000"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000340)={0x45, @rand_addr=0x64010101, 0x4e24, 0x401, 'nq\x00', 0x10, 0x0, 0x15}, 0x2c) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x12, 0x20, 0x0, 0x0, {0x80}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000c00), r1) r12 = socket$netlink(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r14 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/user\x00') sendmsg$DEVLINK_CMD_RELOAD(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010026bd700000000000250000000e0001006e657464657673696d000000ead102006e657464657673696d30000008008a00", @ANYRES32=r14, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) 1.447622601s ago: executing program 3 (id=1217): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0xa, 0x1234, 0xfffffffe, @loopback}, 0x1c, 0x0}, 0x8dff) r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x31}]}, 0x0}, 0xba) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) r1 = socket$kcm(0x29, 0x2, 0x0) close(r1) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000000)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4c051) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) close(r2) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r5 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendto$inet6(r5, &(0x7f00000006c0)="600000000014334000e4331e26bff073b302d6b8b34123ca000000000000000000000000000001000013099acf00000000000000", 0x34, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xd9, 0xf1ffffff, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0xd6}}}}]}, 0x78}}, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80000001}]}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) 1.330724851s ago: executing program 2 (id=1218): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0xd8, 0x8, 0xfa04, 0xd8, 0x6c02, 0x1d8, 0x194, 0x194, 0x1d8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x32}, 0x0, 0x70, 0xb0, 0x0, {0x0, 0x74020000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7d, 0x4, "744e0c8559c5a9128a6df634790dc3271e33969086733af137c08495d02d"}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x1, 0x10, [0x18, 0x2f, 0x22, 0x8, 0x1d, 0x18, 0x15, 0x2e, 0x29, 0x32, 0xe, 0x2, 0x1a, 0x31, 0x39, 0x3f], 0x0, 0x8e, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003b40), 0xffffffffffffffff) (rerun: 32) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x4040000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaa"], 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') (async, rerun: 32) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async, rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = socket(0x10, 0x3, 0x0) shutdown(r1, 0x0) (async) sendto$inet6(r3, &(0x7f0000000000), 0x0, 0x20004814, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) (async) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00') mkdirat$cgroup(r4, &(0x7f0000000000)='syz0\x00', 0x1ff) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004a00)=@newtaction={0xebc, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xea8, 0x1, [@m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x80002, 0x6d9, 0x3, 0x4, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1041}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x1, 0x4, 0x790434c2, 0x8}, 0x12, 0xa8}, [{0x7, 0x1, 0xfffffff9, 0x9, 0x67fb, 0x7}, {0x100, 0x80000000, 0x2, 0x3027, 0x7ffe, 0x8}, {0x80000000, 0x36b, 0xd, 0x517, 0x1, 0x800}, {0x8, 0xfffffff4, 0x6140e1a4, 0x9, 0x95b9, 0x6}, {0x9, 0x4, 0x6, 0xfff, 0x4, 0x10001}, {0x401, 0x6, 0xfdd, 0xc0, 0x4, 0xb}, {0x26000000, 0x31400000, 0x5, 0x401, 0x8000, 0x3}, {0x9, 0x5, 0x1, 0x6, 0xae8, 0x8}, {0x10, 0x1, 0x4, 0x4, 0x2, 0x5}, {0x21, 0x101, 0x7, 0xffffffff, 0x4, 0x6}, {0x9, 0x5, 0x4, 0x0, 0x7, 0x9}, {0x5, 0x3, 0x1, 0x3, 0x4, 0x401}, {0xfffffff9, 0x6, 0xfffffffa, 0x7, 0x8, 0x3d}, {0x0, 0x7, 0x0, 0xff, 0x6, 0x5}, {0x5, 0xfffffffb, 0x1, 0xfffffe01, 0x8, 0x1}, {0x7fff, 0x200, 0x1, 0xae0a, 0x4, 0x7ff}, {0x3, 0x9, 0x8, 0x1, 0x2, 0x4}, {0x8, 0x0, 0x275, 0x7ff, 0xb, 0xffffff23}, {0x66, 0x0, 0x7, 0x400000, 0x1, 0x3}, {0x1, 0x8, 0x8, 0x3ff, 0x3f5, 0x8}, {0x7ff, 0x1, 0xffff, 0x6, 0x0, 0xfffffdbe}, {0x8001, 0x1ff, 0x0, 0x7, 0xe00, 0xf406}, {0x3, 0x18, 0x6, 0x2, 0x1, 0x1}, {0xae, 0x80000001, 0x51, 0x5, 0x9, 0x82c}, {0x6e, 0x1, 0x4, 0x2, 0x2, 0x81}, {0x9, 0x7fffffff, 0x5, 0x8, 0x80000001, 0x362}, {0x7, 0x1, 0x7, 0xf, 0x7ff, 0x6}, {0xe655, 0xffffffff, 0x2da, 0x6, 0xfffffff8, 0xd389}, {0x0, 0x9, 0xd5e, 0xaa7c, 0x10001, 0x37}, {0x5, 0x2, 0x37, 0x8, 0x5, 0x4}, {0x3, 0x0, 0x3ff, 0x100, 0x4, 0x200}, {0x0, 0xcb8, 0xffff8000, 0x3, 0x2}, {0x6, 0x0, 0xfff, 0x4, 0x6, 0x7}, {0x28000, 0xf, 0x9, 0x3, 0xdd, 0xffffff86}, {0x5, 0x5, 0x3ff, 0x4, 0x70a, 0x7fffffff}, {0x1ff, 0x2e390d2b, 0x4, 0x4, 0x2, 0x6}, {0x4, 0x0, 0x8, 0x80000001, 0x3d5, 0x9}, {0x6, 0x40, 0x6, 0x1c000000, 0x1, 0x1000}, {0x0, 0x0, 0xb1, 0x1, 0x6, 0x10001}, {0xedd, 0x4f, 0x900, 0x3, 0x400, 0x9}, {0x1, 0x3, 0x7, 0xa, 0xff, 0x6}, {0x7dd, 0x8, 0x62182213, 0x8, 0x8000, 0x8f4c}, {0x36b, 0xb6, 0xfffffffd, 0x5f60be42, 0x8, 0x7}, {0x2, 0x3, 0x7, 0x3, 0x5, 0x3}, {0x3, 0x7182, 0x55b, 0xf0b, 0x4, 0x6}, {0x9, 0xc3c, 0xffffffb2, 0xf, 0x1000, 0x2f}, {0xc7, 0x962b, 0x1, 0x8, 0x3, 0x3ff}, {0xfffffffe, 0x800, 0x1, 0x6, 0x0, 0xa7a}, {0x6, 0x8, 0xe, 0x6, 0x8000, 0x7}, {0x0, 0x6, 0x40, 0x6, 0x0, 0x3}, {0xf, 0x0, 0x6, 0xc2, 0x6}, {0x8, 0x6, 0x6, 0xaa06, 0x2, 0x2}, {0x6, 0x0, 0xfffffffe, 0x101, 0x9, 0x4}, {0xffffff4d, 0x5, 0x2, 0x3, 0xbba8, 0x2}, {0x7, 0x70, 0x4, 0x9, 0x7}, {0x7, 0x200, 0x9, 0x1000, 0x3, 0x7f}, {0x2, 0x8, 0x9, 0x1000, 0x5, 0xffff}, {0x9, 0x4, 0x5a, 0x8, 0x3, 0x1}, {0x5, 0x836, 0x7f, 0x8, 0x8b59, 0x5}, {0x1ff, 0x7, 0x400, 0x9, 0x8, 0xd}, {0x5, 0x2, 0x7, 0x6, 0x8, 0x1}, {0x400, 0x5, 0x7, 0x0, 0x7, 0x8}, {0xffffffff, 0xd, 0x1, 0x4, 0x5}, {0x0, 0xb23, 0x101, 0x7, 0x0, 0x4}, {0x9, 0x9146, 0x0, 0x5, 0x80000001, 0x7}, {0x6925, 0x81c0b92e, 0x2, 0x39, 0x7, 0x5}, {0xf, 0xf, 0x1, 0x5c665eda, 0x9, 0xffffffff}, {0x8, 0x9, 0x401, 0x0, 0x7ba, 0x9}, {0xffffffb6, 0x4, 0x6, 0x8, 0x20, 0xc}, {0x8, 0xf, 0x8, 0x1, 0x48, 0x3}, {0x9, 0x0, 0x9c4, 0x400, 0x9, 0xc0000000}, {0x6, 0xc, 0x1, 0x6, 0x3, 0x7}, {0x8, 0x8153, 0x8000, 0x6, 0x9, 0x7}, {0x1ff, 0x80000001, 0x4, 0x6, 0xc, 0x7}, {0x7ff, 0x9, 0x3, 0xe3f6, 0x3b5, 0x4}, {0x3, 0x7, 0xd376, 0x3, 0x2d3, 0x1}, {0x2, 0xffff, 0x10000, 0x6, 0x0, 0x1}, {0x80000000, 0x6, 0x8, 0x7, 0x8, 0x7}, {0xc390, 0xfead, 0x8001, 0x1ff, 0x7, 0x3}, {0x4, 0x7fff, 0x210e, 0xf, 0x1, 0x7}, {0x2, 0xfffffc01, 0xffffff92, 0x2d447236, 0x1, 0x5}, {0x4, 0x6, 0xff, 0x7, 0x4, 0x9}, {0xfffffffe, 0x6, 0x57, 0x3, 0x8000, 0x800}, {0x8, 0xe, 0x0, 0x3, 0x8000, 0x3fd}, {0x2, 0x7, 0xb9ab, 0x81, 0x2, 0x2}, {0x100, 0x7, 0x0, 0x6, 0x8001, 0x1}, {0x7ff, 0xfffffffc, 0x0, 0x5, 0x7f, 0xee3}, {0x7000000, 0x4, 0xfffffff7, 0x3, 0x9, 0x5}, {0x8, 0x5, 0xb, 0xfffffffe, 0x5, 0x74e}, {0x9, 0x5, 0xfc000000, 0x5, 0xfffffff8, 0x4}, {0x8, 0x7, 0xe, 0x8000, 0xffff0000, 0x2}, {0x401b, 0x9, 0x96, 0xf2a, 0x400, 0x8}, {0x2, 0xb, 0x6, 0xea1, 0xf, 0x90d2}, {0x800, 0x8, 0xc04, 0xffffffff, 0x3, 0x7}, {0x4, 0x8, 0x3ff, 0x7fffffff, 0x3ef, 0x3}, {0xa, 0x7, 0x1, 0x3, 0xffffffff, 0x5}, {0xf, 0x6, 0x1, 0xeb2, 0x0, 0xbb}, {0x8000, 0x10, 0x9dc, 0x9, 0x2f, 0x9}, {0x9, 0xa572, 0x6, 0x7, 0x5}, {0x8, 0x5, 0x2, 0x9, 0x9f, 0x7}, {0xa2fd, 0x80000001, 0x4, 0x0, 0x4, 0xffff}, {0x8, 0x80, 0x2, 0x51, 0x5, 0x3ff}, {0x8d0, 0x6, 0x2, 0x80000000, 0x8001, 0xffffffff}, {0x0, 0x4, 0x0, 0xfffffffe, 0x8, 0x2}, {0x9, 0x101, 0x0, 0x1, 0x100, 0x80}, {0x7, 0x5cbd, 0x10000, 0x4, 0x7, 0x92ff}, {0x5, 0x6, 0x4, 0x9, 0x5, 0x9}, {0x9, 0xfffff98b, 0x8, 0x9, 0x2, 0x3}, {0x3, 0xff, 0x9, 0x6, 0x6, 0x10001}, {0x4, 0xffff, 0x8000, 0x3, 0x81, 0x20000}, {0x1, 0x1, 0x6, 0x7, 0x1, 0x4000}, {0x7ff, 0x3ff, 0xe40a, 0x7, 0x3, 0x10001}, {0xb, 0xd, 0x9, 0x30, 0x7, 0xebbc}, {0xa, 0x7f, 0x5, 0x9, 0xc, 0x9}, {0x1, 0x1, 0x6, 0x7b19, 0x80000, 0x4}, {0x1, 0x9, 0x0, 0x7f, 0x7, 0xf69a}, {0x0, 0x9, 0x8, 0x7, 0x4b, 0x3}, {0x51, 0x3, 0x2ed, 0xff, 0xfffffffd, 0x401}, {0x6, 0x1, 0x0, 0xdac7, 0x3, 0xd}, {0x6, 0x1006, 0x0, 0xfffffff7, 0x8, 0x3}, {0x806e, 0x9e, 0x80, 0xffffffff, 0xfffff000, 0xfffffff8}, {0x4, 0x7ff, 0x8, 0x9, 0x0, 0x73deaf7e}, {0x29, 0x4, 0x4, 0xf, 0xffffc754}, {0x4, 0x1, 0x10001, 0x3, 0x9e5, 0x538}, {0xa, 0x1, 0xffffffff, 0x8, 0x100, 0x4}, {0x4, 0x0, 0x8000, 0x1, 0x4, 0xfffff7cb}, {0x400, 0x200, 0x100000, 0x1c, 0x800, 0x1c00}, {0x3, 0x81, 0xe, 0x6, 0x4, 0x7}], [{0x3, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x5}, {}, {0x3}, {0x5, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x7}, {0x0, 0x1}, {0x4}, {0x3}, {0x6, 0x1}, {0x5}, {0x4}, {0x2}, {0x4}, {0x5}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x6c25a6da58bcaee9}, {0x226d596e0d911f29}, {0x2}, {0x1}, {0x1}, {0x4}, {0x4}, {0x3}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x6}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3}, {0x2}, {0x0, 0x1}, {0xd, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x4}, {0x5}, {0x3}, {0x2}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xebc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x80, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 856.766042ms ago: executing program 2 (id=1219): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf670000000000001506f7ff0fff070067060000200000006a0200000ee60000b4050000180000002d350000000000006507000002000000070700004a0000007d75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000005000000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b672d42961e1445ce83def332233b081df18961d6822d133bf72a4de1cc0800004537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5bb6f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767030090a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a97677400"/480], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffd0}, 0x48) 772.954953ms ago: executing program 3 (id=1220): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x301}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2267c}]}, 0x38}}, 0x40) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES8=r0], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x24}, 0x94) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000054000104000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010086ddef"], 0x38}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x0, 0x0, 0x148, 0x110, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0xff, 0x0, 'ip6erspan0\x00', 'lo\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x1, 'amanda\x00'}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xfffffffb}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0xf, {0xd}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x2, 0x7}, {0x2, 0x3}, {0x4, 0x4, 0x1}, 0xfffffffe, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000fc"], 0x38}}, 0x20044804) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, 0x7, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x80000000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={&(0x7f0000000280)="61132fc00d89590ed24a27aeae6fd90e0a86a43b8228191c760da0b2cd04cb9df1ccddfc0bfa894ff8cdff4a9d89c0efadd3d5303209dbe89e016d718b327de4a15e5c439cff92f2f32dea2652e2dcf7cc983b078fdeebad78e5eb7067db7e44bcd839a089", &(0x7f0000000300)=""/180, &(0x7f00000003c0)="7eea8291c63ee3616853be34279277dd615b4482a04020c1fb54f9e14feacf82bd64b584d0b6b9a36da7b256f7dc9f755481426cfbc4df1b6c00997c946b557a32d531a8d5753f584bda56823c35dfe1cc5e1e5276b0671100f05d81655aad08e1823519f665758e1286c7ad723a53740710f0b1b862df2ae24815366f8ba8c708e090ab9b75103dee5a9356798b02da284b9f97e1b71cae888d84480bf94558c5680d2367cc92a40ed61a356a836d99172cfbe740665772ce13c1e706bb2ea2e96acbd371743b7bcdd4", &(0x7f0000000580)="2e54b426b8c89f2fad92a5c2b07005f563457c4b5f87ea31f9acca0837ce40e2f479479e02f97b91c0c246fd79f655d2e6502ad36f3a7d69376da79a021b20e4ff7d38e6964d89e39af92189e9fa4d81c502f7ba4410ce742ffd6905705f119e0617c075df384f59db439f5822016ef9c1d57d669691c9d5f31c6e1bb682e496088d93f27c345ad705", 0x1, r5, 0x4}, 0x38) 644.286856ms ago: executing program 1 (id=1221): socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(r4, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0x6}], 0x1, 0x40002142, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r5, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r2, 0x0, r3, 0x0, 0xfea8, 0x6) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) writev(r2, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0xfe86}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000014c0)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a0858fe5c7e75ecf92e735452456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b4e271e5e6eeed34f69cfd76683e21d87e3ee8ed88df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c966efa43dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd716adbc3f0ba6055ec9790504c9f3865f47e422b1c6ba16c07d0df618cc572b36ec8e519db90a499424a7d689e6fbcc9be1abd843512ec16540c6c7c6d6e2cf50ab2014e4208c2abb0ddfd2ef9dece79389f21d7a9985903f7f01b0394d268349fa41a487bacfe8deba2ffca815ad0b1c6ffa5af2eba6d9436ad298c4e11b68451c7ff001c02ddd3ceb153a865327845349e8b817aa8ed24924f49260f8209d0ddcacf5306d9222320776162fe8396914fa22c85bc261661fa547c3063e20ca37c0862c3b9abd3da9b02e3f58d89be00003509bae9b82f60975c0687c500bb213a580f6e9f08b207d7c31748e3fda05a0cc76b1fdd563610a2bb09a57020d85026a57a178c38839b5b88cd8434d1f0308d872c7356a6445de801ff14c133bda3b42b9ca099fb3ee0d5c7a835f56ed30aa75d47cd97c329b682879290faee167334500d2fe596564f3e4064f41cf3469aaae846f1e84f3d8a7f42d98d0b6b67913c376d6bbde3027aa41b753ace165f88379981685f918ada5043800b5e0a0865dcda94df85fefa9348d6ec4e1ffbd940d023fbbd3b77d5db572981dbe40cbae9f010c1ea02718b1c4b7d0447c9d83d1afea58097a0467d6cdd47aef05f97dab63462f6ea61f4b611040b30e7cf60a499aa9d0bc50c08463f25a47d2dbc958fe1d1cf2399dcf1952987b6fcbc97bf73b12177c374c8fd56c8228fc796c958687104f4eb9d46ab80eeeeedb7096a67ee440ae92a65cbf6f81939e3d1050c67245036b5dcc13d577fbb4d9c3fbf2e2e61aa154074ae225c54e23289c4ef41a07a49a9d40f3103f4c9dfd4d750cc646adadd2e1fe24c74ce099d753d4c59d806a0b7f576ac37ac58a51a120f93162c43d16c1f7e5289c75f5f0a5b838d020040c9ce512ca35d08f42acd24cdbc2e6b1ac3c6809a5ed9e272155e9fa55349bc3ce0e3f2d1624dc60e2396b954587bbab275f38911e86b826b85730c6670a92a221cdcbf18ee0c44aec4591fcd12204b3049a1b5da1215a4cf88ecbe2d877ef975f4f661999d17d7d9ec14e0895ce25034dac4705d50ae42ca162778d0dcfc4e9180517be0daca5deb10773f93e2c61a5fe9b823218a97c35d0d7b436b2e1afb670b5a4c6dacd401afd1832c1dd96e8eba7734954070c6796cc80707441404cfe95fabf214bf03a6e4643ca559c2b8dcf1fa871114f3dc973a056c9aee7cd0ed4cbaf18298377e750869551632c1713bd8372e3f11fa02edf0a68d2c01245459d9e78597ac1eec75064024c1f3c98260d34b611ba8fa4b2022babd44b76ea70c718df8268dba447038b1539f0499603cf2d79bcc49c35a8cf38892d982d153d72253a22ae68da65e84d6399e81a14ebf89ba446630814d9dcf8914acafc8603a5396167c5aa99814af62c1c39a6ba76ad2c6c51a6d56d89fbda5334e626540ef1b1ecad53247531fcdd661a48d28a6d48bac8ef70c888b00db57edceee94425df5161e1b1a1bec9c897e01867442ed8ba000b5f75832a8ec57ef0737994b95f40eac48f3c8da5db80e965fcdf3f0bbb4439a7123b59987f0fdac96bc7ce09c013562ff7c0cb23a882828e45a51f7e748db90c5eaacfdf3657d11a348f747ddd860387de41be3376a5dabf4296bc05282cb73fcd60c4a4148d9e872ae86e30b22db1ce5452ad9fe3fea029f94a583d301e74eac1818da3f1279c63690db6e7166ddaacd1278716fa3221daaa27c98fd97b88e63208d604505ad8f31bd2b83a19f89480b71198d8a31c89cadd258ce338afe1a26b0db248c1a39fe027716e417e45bb6c9a68cab1cd6c3445e9796ee1003650e97eccdadc9bea540e2c8253652c8f1586ba7e508cd29d53467bad11eef729796dbe83d3fc0bc15762c2f1de34c6380a6725f94600a82d87ccf80948babcadec31ca654671d17de360f20aaf04f4d44951661fe8fe7731174ec3aaf330aebeaed9620f694859785a36c5f787ce35e4425ed3387710fa346f04db11255c6985fa4cdbe54d25c942264b3383d60903bd2677611850fe125b", 0xdf3}], 0x5) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 587.279867ms ago: executing program 2 (id=1222): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x14, 0x5, 0x7, 0xc, 0x0, 0x70bd29, 0x25dfdbfe, [@sadb_x_policy={0x8, 0x12, 0x4, 0x2, 0x0, 0x0, 0x9, {0x6, 0x32, 0x12, 0x3, 0x0, 0x2, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x8, 0x1, 0xb2, 0x1, 0x1}]}, 0x60}}, 0x24008084) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000300)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x4}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="e8f8e13a58be42f3fa843115cbe75aa6873f62eb44993d81cb80e05506fc5c0448d6c495484c33a170b8b321a08f06036f3bfa25c5d66cf1690d04cf321868c36cec7d0b726b5ecac1abba023e66574165482c4568057338907785535e00cc39a4f191c7abcb21257675496e1d7289e82ac291b0493f876b2e2ecd", 0x7b}], 0x1, &(0x7f0000000200)="659fae8896c50c89b5402ff159decc60bba8ac87be967c21bc8711702c4e6c0d5eabc0e0fdd4e4c6f81e671bca275f44ba736c01fac6d03dedd9fab7e19cac02ce2e2244c46bbe30324a1eea681407ba2e183f72b4fa13bff66af5fba9bd7c512e8fcc4eec5206993d4652497b0d0b17515421084393763bbeca228d54a047ee1be720de6baae261b756a1b6017d5c60aa3f4c391419b83c38ecb58764f1baf5490be15e07461c3312724ec8547e0f178765ca48f3924b2e24536f6738763dfb606b85ab7da6540e3e", 0xc9, 0x4008051}, 0x20040000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000340)=0xb, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$netlink(r3, &(0x7f0000000380), &(0x7f00000003c0)=0xc) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), r0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x138, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0xe8, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @loopback}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x40}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x0, @loopback, 0x8000}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x41}, 0x90) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000640)={0x2, 0x4e23, @empty}, 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000d80)={{r3, &(0x7f0000000680)='\x00', 0x2000, &(0x7f00000006c0)={@_ha_fsid={[0x80, 0x80]}, {0x7, 0x8, 0x10001, 0xa}}, 0x7fffffff, &(0x7f0000000700)={@_ha_fsid}, &(0x7f0000000740)=0x4}, 0x6, &(0x7f0000000cc0)=[{0x1, 0x0, &(0x7f0000000780)='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik', &(0x7f00000007c0)="8c0cdacef7f55809c5b3ac9cca6c031fb419eca4060ede9fd0004e489ba1ca41566daf9b393225ef824ff0ced849cf1c6e6d791d69e2bc0d72482c0f4b41a67f57cd0dd1f71044f32ccbb6b7db1a163cd5cf357f4af696a5b9f0eee759d7c43b4221620cb9fe45bfb92fac00c6f9d9477fd2c7340b84744a8214d3d67878599e37ed77995eb9363cfa8b8da6e2b8c1243655b4eba5c9df57fc1d6b916ead014a9be7797f1127e249756683b9538d6a0c35a77623167ea7fd7d990346c480a8f6f5fc673dbe5fecee964035526f6ab08a35bc6f605dc4d85d3220d0ef87bf8dfbc83d31008a3b5e58", 0xe8, 0x20}, {0x3, 0x6, &(0x7f00000008c0)='\xa0\xcb\x87\x9aG\xf5\xbcdL\x0ei?\xa6\xd01\xc7J\x15S\xb6\xe9\x01\xb9\xff/Q\x8cx\x04/\xb5B', &(0x7f0000000900)="c2af7d750ac978da8caed50952866bacf281c337d2977be35317628138c40b019e738654915fbf526f86d14190a165afa44c6d5bc4fab30b58ac25", 0x3b, 0x10}, {0x1, 0x267, &(0x7f0000000940)='\x00', &(0x7f0000000980)="e4c3a164ed186557691fd724bb029c0453de0408c9351ad0f1e8cbcf23c39db5b8e34d953edc8b650f64bc29f156d5aab1f9ff32b9e20d92b1a642c264d269aa87fc26692fb7b7f71203f9afec1829616ad511834e9e4e565f423e3ccea8b878331c9b8265ba8690a5f2756713147526f1e40bbe770907bb4c27eca21917d98eeadb53a5b2991215929c52326009117bc6cc4b872f09dad2756ccc647d956929826b23fe384ceeed5d29341e874cef700bdc25e6793dff79c20718c89ce86da17283ad4d29e8fa5b4298c700f815", 0xce, 0x20}, {0x2, 0x0, &(0x7f0000000a80)='\xae,', &(0x7f0000000ac0)="ad49c00dc2ad6a15b379c0e931541189aa485fe76bbc40408946edc412f050c7a4a66d6d3ca955ee48f9c9ab2d70c7e65d4cc1299dd8689e677056feb922b6da21dfcf879bd0710b39578324a403ed77c49834533e79e224adf381156ea033ff77746db4b40a90e2b5ec2d7b7e363c89ae0857f6257aa3cf057b", 0x7a, 0xa}, {0x1, 0xf328, &(0x7f0000000b40)='wireguard\x00', &(0x7f0000000b80)="1fca2c8b903f3e133fc1726fb6eced5207447a8a93293370cfc9d84dbdeeb0f43387f082dce3f47f9c54c3c882e827d7d783b6bfe5b1cc00144073aa", 0x3c, 0x20}, {0x2, 0x1, &(0x7f0000000bc0)='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f80)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x7, '\x00', r8, r6, 0x0, 0x5, 0x2}, 0x50) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x64, r9, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000000}, 0x804) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20840000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x28, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x880) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000001440)={{r2, &(0x7f0000001280)='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff', 0x200001, &(0x7f00000012c0)={@_ha_fsid={[0x10, 0x7f]}, {0x400, 0x6, 0x5, 0x8}}, 0x40000000, &(0x7f0000001300), &(0x7f0000001340)}, {[0x5, 0x200, 0x40, 0x3]}, 0x5, 0x99, &(0x7f0000001380)=""/153}) read$nci(r10, &(0x7f00000014c0)=""/240, 0xf0) getpeername$packet(r10, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001600)=0x14) ioctl$TUNSETIFINDEX(r10, 0x400454da, &(0x7f0000001640)=r11) bpf$MAP_CREATE(0x0, &(0x7f0000001680)=@base={0x10, 0x6, 0x2, 0x3, 0x1, 0xffffffffffffffff, 0xa, '\x00', r11, r10, 0x1, 0x1}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001700)) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000001740)=0x1800, 0x4) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f00000017c0), r10) sendmsg$L2TP_CMD_TUNNEL_GET(r10, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x28, r12, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffff800}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) setsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, &(0x7f00000018c0)=0x1, 0x4) 577.520023ms ago: executing program 4 (id=1223): socket$inet6(0xa, 0x3, 0x80) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) getsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r1) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r3, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000044) (async) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r3, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000044) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) (async) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) getpeername$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) (async) getpeername$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) socket$vsock_stream(0x28, 0x1, 0x0) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000300)={0x2, 'syzkaller1\x00'}, 0x18) sendto$inet6(r1, &(0x7f0000000340)="dde8027355e1e01949e53be6908b35029361d02e43bae551e5bfe8276ae326b0be58460418554d4257eb35bd1166ae3c849e1ab4ad468436d085620f7c92c862fa1254001f4e1e5139ca662e415448ff0263110912c6c3a694669fe66175984dd8e31e716aea61bff6119e6adb2ac959a6a08e77fc09f4d40bc549833d027d2d8c3758e36882a9a66e3ad2557dce9eb752f7d58ae1aa0cbefd453b8779bb62b674f999d2d986485a755e9aede599b90ff90ce48dbff86dfe6e5aac6a83b878db14a7e7b5f71ea46ad9276df67d9b42", 0xcf, 0x4800, &(0x7f0000000440)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x20}, 0x8}, 0x1c) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000480)={0x0, 'veth1_to_team\x00', {0x1}, 0x217}) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000500)={0x2, 0x81, 0x2, 0x800, 0x1, [0x4, 0x0, 0xead, 0x7]}) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x400000, 0x0) ioctl$TUNSETLINK(r7, 0x400454cd, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000580), &(0x7f00000005c0)=0x4) ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f0000000600)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000680)={0x0, 0xfa8}, &(0x7f00000006c0)=0xc) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000700)={r9, 0x1}, 0x8) getsockopt$X25_QBITINCL(r8, 0x106, 0x1, &(0x7f0000000740), &(0x7f0000000780)=0x4) (async) getsockopt$X25_QBITINCL(r8, 0x106, 0x1, &(0x7f0000000740), &(0x7f0000000780)=0x4) accept4$nfc_llcp(r0, &(0x7f00000007c0), &(0x7f0000000840)=0x60, 0x400) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)=@newchain={0xa8, 0x64, 0x4, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffe0, 0xc}, {0xb, 0xffe0}, {0xe, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0xffffffff}, @TCA_FLOWER_KEY_ICMPV4_CODE={0x5}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0xe4d}, @TCA_FLOWER_KEY_CVLAN_PRIO={0x5, 0x4e, 0x4}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x9}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x1c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)=@newchain={0xa8, 0x64, 0x4, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffe0, 0xc}, {0xb, 0xffe0}, {0xe, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0xffffffff}, @TCA_FLOWER_KEY_ICMPV4_CODE={0x5}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0xe4d}, @TCA_FLOWER_KEY_CVLAN_PRIO={0x5, 0x4e, 0x4}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x9}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x1c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x0) r10 = socket$packet(0x11, 0xf5b2fb2bf9da21a8, 0x300) setsockopt$packet_int(r10, 0x107, 0x8, &(0x7f0000000a00)=0xc3, 0x4) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r8, 0x84, 0xc, &(0x7f0000000a40)=0xb5, 0x4) (async) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r8, 0x84, 0xc, &(0x7f0000000a40)=0xb5, 0x4) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ac0), r8) sendmsg$TIPC_NL_PUBL_GET(r8, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b00)={0x164, r11, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa57}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0xa0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa214}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x87}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xcfa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x4}]}, 0x164}, 0x1, 0x0, 0x0, 0x809}, 0x48040) (async) sendmsg$TIPC_NL_PUBL_GET(r8, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b00)={0x164, r11, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa57}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0xa0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa214}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x87}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xcfa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x4}]}, 0x164}, 0x1, 0x0, 0x0, 0x809}, 0x48040) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000fc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x15c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe}, @MPTCP_PM_ATTR_ADDR={0x6c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x200000f4}, 0x20000000) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000fc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x15c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe}, @MPTCP_PM_ATTR_ADDR={0x6c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x200000f4}, 0x20000000) 502.771029ms ago: executing program 0 (id=1224): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e008d2a00000100000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014"], 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000000000000}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) 404.32714ms ago: executing program 3 (id=1225): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0xcc, 0x30, 0x51b, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_skbmod={0x7e, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8}}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_skbmod={0x54, 0x2, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x4, 0x10000000, 0x0, 0xa}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xcc}}, 0x4056) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000400)='e', 0x1) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000080)=r3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1a, 0x16, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRESDEC=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @tracing=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff135d}, 0x94) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000080)={0x2, 0x15, 0x4, 0x20, 0x80, 0x3, 0xd, 0x3, 0x2c, 0x31, 0xa2, 0xa, 0x10, 0x84}, 0xe) sendto$inet6(r5, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7}, 0x18) connect$can_j1939(r6, &(0x7f0000000140)={0x1d, r7}, 0x18) sendmmsg(r6, &(0x7f0000005680)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f0000000340)="10959e9532e962b76f8969437a35e7ba8d36dcbd62c4f83390e3d57669194bfa4beb0549525e3e0e7dc2c8880095ad26cdacdd8b95a2ff80cf20418ac0ed6839ae0849da4a675b64ee66c632", 0x4c}, {&(0x7f00000003c0)="4571aadfb14e9d7355b8df590c8050941373b9d5ab64986159012bdc2e3eb13e5d13bbc7939a2702891ba0002552c057c76c345947881be110ed7f1fe1d314e531b86efa2173cf30c5906dc26a579006450a6e2c2e2f267234e155bdec2bf0a0781a669f2cc5a28b7717d2ebac09f55e69", 0x71}, {0x0}, {0x0}], 0x4}}], 0x2, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189, 0xbd}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000005e0000b704000000000000850000005700000095"], 0x0}, 0x94) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r9, 0x84, 0x7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000075e80000000000007112185e000000009500000000e053c13989b7b02a190000004b48834857f80ea330210405ead65e674c09cf1522"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r10}, 0xc) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfe, 0x0, 0x0) close(r5) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010127bd7002fbdbdf251000000008000300", @ANYRES32=r2, @ANYBLOB="08000600", @ANYRES16=r0], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40) 347.237017ms ago: executing program 0 (id=1226): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/480], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x1fffffff}, 0x48) 264.63093ms ago: executing program 0 (id=1227): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 8.478909ms ago: executing program 1 (id=1228): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtaction={0x9c, 0x30, 0x3, 0x70bd2b, 0x25dfdbde, {}, [{0x88, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x5}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x6, 0xfc, 0xee, 0xfffffffd}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x24, r1, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x4010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r2 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000480)="6797f04cdb6f2b8ff1c912acb0da67dc3bf442976fc916f5fe40c3a4bb8423c058dd95ffbb65d4a51d4b99564d9d6466da7ab0bd17e9281956c6ba7e10b7932de5be24106e3afc007cdf7620e0c61175af571e506a21f16330", 0x59}], 0x1}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0xb, @mcast2, 0xb}, 0x1c) sendto$inet6(r3, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x44004) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x1b, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="080100001900010000000000612afd6f00000000000000000000000000000000ac1414bb0000000000000000000000000000fffd000000000a00008000000000", @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="0000000000000000fdffffffffffffff00000000000000000400000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000fcca0d0bb2da43bf0000000000000000000000000000000000000000000000b86b6e00000002000000000044000500ac1414aa000000000000000000000000000000002b00000000000000ffffffff000000000000000000000000000000000000000007000000a8000000000000000c0008"], 0x108}, 0x1, 0x0, 0x0, 0x9}, 0x20000040) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet(r2, &(0x7f0000000580)={0x2, 0x4e23, @remote}, 0x10) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$FITRIM(r6, 0xc0185879, &(0x7f00000003c0)={0x8000000000000001, 0x9, 0x1}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa86dd6002adf700383a00fc000000000000000000000000000001ff020000000000000000000000000001020390780000000060ed906b00383a00ff01000000000000000000000000000100000000000000000000ffffac1414aa1e520b4c811ee1"], 0x0) 0s ago: executing program 0 (id=1229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000000000000700000006"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x2000000000000122, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x5a, &(0x7f0000000080)}, 0x9a) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000800)="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", 0x110}], 0x1}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0xf) sendmsg$ETHTOOL_MSG_EEE_SET(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)={0x14, r7, 0x21, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x20000000) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r4, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x2e, 0x80, [@measure_req={0x26, 0x28, {0xb3, 0x1, 0x70, "ea09e0ffdb470a8d313ea3aee81bd9d8bd590c7aaea7865a1acb212c77438f718bf5fb2416"}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x84) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r9, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000001000000000000000000000018010000786c6c250000000000202020630af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202070250000000000202020dd00f5ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r8, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="04002abd7000fedbdf252800000008000300", @ANYRES16, @ANYBLOB="04005f001200340015817137f9343332a603ccea3b7a00000a00060007c027a89c5ed5c3d8003400020202020202000004005f00060036000100000004005f0004005f00"], 0x60}, 0x1, 0x0, 0x0, 0x20048844}, 0x40010) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRESOCT], 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000) kernel console output (not intermixed with test programs): 6.868129][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.872379][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.091179][ T5619] hsr_slave_0: entered promiscuous mode [ 87.092711][ T5619] hsr_slave_1: entered promiscuous mode [ 87.129852][ T5618] hsr_slave_0: entered promiscuous mode [ 87.130993][ T5618] hsr_slave_1: entered promiscuous mode [ 87.131813][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 87.131921][ T5618] Cannot create hsr debugfs directory [ 87.133079][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.133093][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.133120][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.221647][ T5624] team0: Port device team_slave_0 added [ 87.230280][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.230298][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.230325][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.311953][ T5624] team0: Port device team_slave_1 added [ 87.366416][ T5620] hsr_slave_0: entered promiscuous mode [ 87.367276][ T5620] hsr_slave_1: entered promiscuous mode [ 87.367830][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 87.367850][ T5620] Cannot create hsr debugfs directory [ 87.451496][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.451517][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.451537][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.501016][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.501033][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.501055][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.644893][ T5627] hsr_slave_0: entered promiscuous mode [ 87.645755][ T5627] hsr_slave_1: entered promiscuous mode [ 87.646297][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 87.646322][ T5627] Cannot create hsr debugfs directory [ 87.771689][ T5624] hsr_slave_0: entered promiscuous mode [ 87.772476][ T5624] hsr_slave_1: entered promiscuous mode [ 87.773121][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 87.773142][ T5624] Cannot create hsr debugfs directory [ 87.873858][ T4937] Bluetooth: hci2: command tx timeout [ 87.874009][ T5625] Bluetooth: hci1: command tx timeout [ 87.954605][ T4937] Bluetooth: hci3: command tx timeout [ 87.954693][ T5625] Bluetooth: hci4: command tx timeout [ 88.033694][ T5625] Bluetooth: hci0: command tx timeout [ 88.188934][ T5619] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.201688][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.218143][ T5619] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.223185][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.230417][ T5619] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.251385][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.281232][ T5619] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.287173][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.364071][ T5618] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.368647][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.369539][ T5618] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.373387][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.381207][ T5618] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.401684][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.419442][ T5618] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.428281][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.544144][ T5620] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.548411][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.550009][ T5620] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.560197][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.586698][ T5620] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.591611][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.592803][ T5620] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.601539][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.679677][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.746579][ T5627] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.750173][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.751233][ T5627] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.760079][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.797832][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.798160][ T5627] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.802240][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.803028][ T5627] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.830401][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.878145][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.878259][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.939041][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.939153][ T3322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.956382][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.005156][ T5624] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.009520][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.038052][ T5624] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.040969][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.042266][ T5624] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.057445][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.080914][ T5624] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.092377][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.109091][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.142806][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.142884][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.176238][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.176332][ T3322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.308986][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.407148][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.451102][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.451220][ T3322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.473321][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.499310][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.499423][ T3322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.606323][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.687852][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.687973][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.730197][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.773036][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.773154][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.878464][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.948564][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.948673][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.955619][ T4937] Bluetooth: hci2: command tx timeout [ 89.955704][ T5625] Bluetooth: hci1: command tx timeout [ 90.017523][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.017652][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.046157][ T4937] Bluetooth: hci3: command tx timeout [ 90.046245][ T5625] Bluetooth: hci4: command tx timeout [ 90.124084][ T5625] Bluetooth: hci0: command tx timeout [ 90.363139][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.537419][ T5619] veth0_vlan: entered promiscuous mode [ 90.586722][ T5619] veth1_vlan: entered promiscuous mode [ 90.671613][ T5619] veth0_macvtap: entered promiscuous mode [ 90.718824][ T5619] veth1_macvtap: entered promiscuous mode [ 90.778590][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.814232][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.881575][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.934972][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.935124][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.935167][ T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.935207][ T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.207416][ T5618] veth0_vlan: entered promiscuous mode [ 91.329738][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.329761][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.359524][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.368382][ T5618] veth1_vlan: entered promiscuous mode [ 91.502598][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.530514][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.530538][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.615127][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.667384][ T5618] veth0_macvtap: entered promiscuous mode [ 91.692238][ T5619] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.726354][ T5618] veth1_macvtap: entered promiscuous mode [ 91.838815][ T5811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 91.881298][ T5627] veth0_vlan: entered promiscuous mode [ 91.926929][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.966278][ T5627] veth1_vlan: entered promiscuous mode [ 91.971239][ T9] cfg80211: failed to load regulatory.db [ 92.006119][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.033897][ T4937] Bluetooth: hci2: command tx timeout [ 92.033950][ T5625] Bluetooth: hci1: command tx timeout [ 92.052413][ T5624] veth0_vlan: entered promiscuous mode [ 92.117947][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.118001][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.118041][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.118080][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.118162][ T4937] Bluetooth: hci3: command tx timeout [ 92.118206][ T5625] Bluetooth: hci4: command tx timeout [ 92.123453][ T5624] veth1_vlan: entered promiscuous mode [ 92.195523][ T5625] Bluetooth: hci0: command tx timeout [ 92.290168][ T5627] veth0_macvtap: entered promiscuous mode [ 92.349911][ T5627] veth1_macvtap: entered promiscuous mode [ 92.416991][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.443869][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.447036][ T5822] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8'. [ 92.485813][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.485837][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.494288][ T5624] veth0_macvtap: entered promiscuous mode [ 92.557069][ T5624] veth1_macvtap: entered promiscuous mode [ 92.561376][ T5822] syz.0.8 uses obsolete (PF_INET,SOCK_PACKET) [ 92.578845][ T5822] netlink: Conntrack attr has 1 unknown bytes [ 92.578900][ T5822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.582747][ T5620] veth0_vlan: entered promiscuous mode [ 92.624799][ T5822] macvlan0: entered promiscuous mode [ 92.625006][ T5822] macvlan0: entered allmulticast mode [ 92.625022][ T5822] veth1_vlan: entered allmulticast mode [ 92.628493][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.628514][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.677444][ T161] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.677824][ T152] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.712252][ T5620] veth1_vlan: entered promiscuous mode [ 92.775162][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.811516][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.869909][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.869934][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.013896][ T152] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.013949][ T152] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.013986][ T152] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.014020][ T152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.014063][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.014078][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.014286][ T152] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.077806][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.120996][ T5620] veth0_macvtap: entered promiscuous mode [ 93.136163][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.136186][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.167146][ T5620] veth1_macvtap: entered promiscuous mode [ 93.316270][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.316293][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.384320][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.426570][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.476488][ T152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.477939][ T161] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.478547][ T161] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.478582][ T161] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.479685][ T5833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9'. [ 93.653439][ T5839] openvswitch: netlink: Message has 8 unknown bytes. [ 93.727461][ T5835] macvlan0: left promiscuous mode [ 93.966812][ T5842] syzkaller0: entered promiscuous mode [ 93.966839][ T5842] syzkaller0: entered allmulticast mode [ 95.079851][ T5871] xt_hashlimit: size too large, truncated to 1048576 [ 96.086024][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.109743][ T5874] bridge_slave_0 (unregistering): left allmulticast mode [ 96.109769][ T5874] bridge_slave_0 (unregistering): left promiscuous mode [ 96.110988][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.294151][ T5887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17'. [ 96.362950][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.362973][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.604475][ T5893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 96.609235][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.609257][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.693685][ T5894] Zero length message leads to an empty skb [ 96.740774][ T5892] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 96.878541][ T5899] netlink: 28 bytes leftover after parsing attributes in process `syz.0.21'. [ 97.008600][ T152] IPVS: starting estimator thread 0... [ 97.039284][ T5902] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 97.115846][ T5904] IPVS: using max 34 ests per chain, 81600 per kthread [ 97.159208][ T5908] netlink: 284 bytes leftover after parsing attributes in process `syz.4.5'. [ 97.402852][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27'. [ 97.403030][ T5916] netlink: 'syz.4.27': attribute type 10 has an invalid length. [ 97.403050][ T5916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.27'. [ 97.577695][ T5916] geneve2: entered promiscuous mode [ 97.577722][ T5916] geneve2: entered allmulticast mode [ 97.720721][ T5913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24'. [ 97.799583][ T5920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24'. [ 98.003732][ T5934] netlink: 36 bytes leftover after parsing attributes in process `syz.4.29'. [ 98.058712][ T5914] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 98.065568][ T5913] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 98.088562][ T5914] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 98.465614][ T5939] macvlan1: entered promiscuous mode [ 98.486585][ T5939] macvlan1: left promiscuous mode [ 98.623489][ T5945] netlink: 128 bytes leftover after parsing attributes in process `syz.4.34'. [ 98.720782][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33'. [ 99.070831][ T5965] netlink: 'syz.0.38': attribute type 15 has an invalid length. [ 99.698984][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.45'. [ 99.956052][ T5979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.493106][ T6025] warning: `syz.4.51' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.991228][ T6038] netlink: get zone limit has 4 unknown bytes [ 101.090736][ T6049] erspan0: entered promiscuous mode [ 101.191178][ T6053] Driver unsupported XDP return value 0 on prog (id 20) dev N/A, expect packet loss! [ 101.242710][ T6043] syz_tun: entered allmulticast mode [ 101.350214][ T6053] batadv0: entered promiscuous mode [ 101.351990][ T6053] macsec0: entered promiscuous mode [ 101.352232][ T6053] macsec0: entered allmulticast mode [ 101.352250][ T6053] batadv0: entered allmulticast mode [ 101.379886][ T6053] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 101.381740][ T6053] batadv0: left allmulticast mode [ 101.382063][ T6053] batadv0: left promiscuous mode [ 101.825153][ T6072] syzkaller0: entered promiscuous mode [ 101.825179][ T6072] syzkaller0: entered allmulticast mode [ 101.906424][ T6076] netlink: 'syz.3.64': attribute type 1 has an invalid length. [ 102.015964][ T6076] Cannot find set identified by id 0 to match [ 102.106539][ T6081] syzkaller1: entered promiscuous mode [ 102.106564][ T6081] syzkaller1: entered allmulticast mode [ 102.157383][ T6086] __nla_validate_parse: 2 callbacks suppressed [ 102.157401][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'. [ 102.617433][ T6106] syzkaller0: entered promiscuous mode [ 102.617458][ T6106] syzkaller0: entered allmulticast mode [ 102.620023][ T6114] sctp: [Deprecated]: syz.0.73 (pid 6114) Use of int in max_burst socket option. [ 102.620023][ T6114] Use struct sctp_assoc_value instead [ 102.928177][ T6133] netlink: 'syz.3.75': attribute type 1 has an invalid length. [ 102.931451][ T6136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.75'. [ 103.087128][ T4937] Bluetooth: hci4: command 0x0405 tx timeout [ 103.465682][ T31] audit: type=1107 audit(1790675570.418:2): pid=6147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ÑwQSóŒ­�\†BVYÐf–ßGŒç-æ|O!7Ųw$ÜPnXïª&:æM×3±�¶BûœýýEÕ“roiÿ¥è›Âbרø†#! Hàm×_ÿ¶Rz,àn®87çÒ±¦1zÿãIWB½�a–' [ 103.598400][ T6155] netlink: 60 bytes leftover after parsing attributes in process `syz.2.78'. [ 103.598650][ T6155] netlink: 60 bytes leftover after parsing attributes in process `syz.2.78'. [ 103.598835][ T6155] netlink: 60 bytes leftover after parsing attributes in process `syz.2.78'. [ 103.599016][ T6155] netlink: 60 bytes leftover after parsing attributes in process `syz.2.78'. [ 103.599198][ T6155] netlink: 60 bytes leftover after parsing attributes in process `syz.2.78'. [ 103.599392][ T6155] netlink: 60 bytes leftover after parsing attributes in process `syz.2.78'. [ 103.599595][ T6155] netlink: 60 bytes leftover after parsing attributes in process `syz.2.78'. [ 103.599784][ T6155] netlink: 60 bytes leftover after parsing attributes in process `syz.2.78'. [ 103.805083][ T6160] netlink: zone id is out of range [ 103.805100][ T6160] netlink: zone id is out of range [ 103.805108][ T6160] netlink: zone id is out of range [ 103.805117][ T6160] netlink: zone id is out of range [ 103.805125][ T6160] netlink: zone id is out of range [ 103.805134][ T6160] netlink: zone id is out of range [ 103.805142][ T6160] netlink: zone id is out of range [ 103.805151][ T6160] netlink: zone id is out of range [ 103.805158][ T6160] netlink: zone id is out of range [ 104.672197][ T6204] netlink: 'syz.1.93': attribute type 1 has an invalid length. [ 105.390852][ T6196] syz.0.88 (6196) used greatest stack depth: 18088 bytes left [ 105.391651][ T6229] syz.1.97: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 105.391955][ T6229] CPU: 1 UID: 0 PID: 6229 Comm: syz.1.97 Not tainted syzkaller #0 PREEMPT(full) [ 105.391975][ T6229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 105.391992][ T6229] Call Trace: [ 105.392003][ T6229] [ 105.392011][ T6229] dump_stack_lvl+0xe8/0x150 [ 105.392050][ T6229] warn_alloc+0x24d/0x270 [ 105.392069][ T6229] ? kasan_save_track+0x4f/0x80 [ 105.392088][ T6229] ? kasan_save_track+0x3e/0x80 [ 105.392109][ T6229] ? __pfx_warn_alloc+0x10/0x10 [ 105.392125][ T6229] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 105.392151][ T6229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.392185][ T6229] __vmalloc_node_range_noprof+0x127/0x1540 [ 105.392235][ T6229] ? rcu_is_watching+0x16/0xb0 [ 105.392261][ T6229] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 105.392290][ T6229] ? __kmalloc_cache_noprof+0x321/0x600 [ 105.392308][ T6229] ? __kmalloc_cache_noprof+0x14d/0x600 [ 105.392326][ T6229] ? xskq_create+0x56/0x220 [ 105.392353][ T6229] xskq_create+0x148/0x220 [ 105.392375][ T6229] ? xsk_init_queue+0x8a/0xe0 [ 105.392399][ T6229] xsk_init_queue+0x8a/0xe0 [ 105.392423][ T6229] xsk_setsockopt+0x52a/0x960 [ 105.392447][ T6229] ? __pfx_xsk_setsockopt+0x10/0x10 [ 105.392468][ T6229] ? __pfx_aa_sk_perm+0x10/0x10 [ 105.392500][ T6229] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 105.392526][ T6229] ? __pfx_xsk_setsockopt+0x10/0x10 [ 105.392549][ T6229] do_sock_setsockopt+0x17c/0x1b0 [ 105.392577][ T6229] __x64_sys_setsockopt+0x13d/0x1b0 [ 105.392607][ T6229] do_syscall_64+0x166/0x520 [ 105.392632][ T6229] ? trace_irq_disable+0x3b/0x140 [ 105.392650][ T6229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.392668][ T6229] ? clear_bhb_loop+0x70/0xc0 [ 105.392691][ T6229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.392709][ T6229] RIP: 0033:0x7f5c2919e159 [ 105.392730][ T6229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.392744][ T6229] RSP: 002b:00007f5c2a07a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 105.392762][ T6229] RAX: ffffffffffffffda RBX: 00007f5c29425fa0 RCX: 00007f5c2919e159 [ 105.392776][ T6229] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 105.392786][ T6229] RBP: 00007f5c2923506b R08: 0000000000000004 R09: 0000000000000000 [ 105.392797][ T6229] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.392808][ T6229] R13: 00007f5c29426038 R14: 00007f5c29425fa0 R15: 00007ffce6c5c968 [ 105.392837][ T6229] [ 105.392899][ T6229] Mem-Info: [ 105.392911][ T6229] active_anon:9426 inactive_anon:0 isolated_anon:0 [ 105.392911][ T6229] active_file:0 inactive_file:43036 isolated_file:0 [ 105.392911][ T6229] unevictable:0 dirty:586 writeback:0 [ 105.392911][ T6229] slab_reclaimable:10155 slab_unreclaimable:93492 [ 105.392911][ T6229] mapped:29375 shmem:4163 pagetables:1184 [ 105.392911][ T6229] sec_pagetables:0 bounce:0 [ 105.392911][ T6229] kernel_misc_reclaimable:0 [ 105.392911][ T6229] free:1293877 free_pcp:10022 free_cma:0 [ 105.423055][ T6229] Node 0 active_anon:37504kB inactive_anon:0kB active_file:0kB inactive_file:171936kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117500kB dirty:2344kB writeback:0kB shmem:16552kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12208kB pagetables:4584kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 105.454285][ T6229] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 105.454505][ T6229] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 105.454783][ T6229] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 105.454923][ T6229] Node 0 DMA32 free:1216544kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:37304kB inactive_anon:0kB active_file:0kB inactive_file:171936kB unevictable:0kB writepending:2344kB zspages:0kB present:3129332kB managed:2546840kB mlocked:0kB bounce:0kB free_pcp:40384kB local_pcp:26212kB free_cma:0kB [ 105.455204][ T6229] lowmem_reserve[]: 0 0 0 0 0 [ 105.455333][ T6229] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 105.455541][ T6229] lowmem_reserve[]: 0 0 0 0 0 [ 105.455585][ T6229] Node 1 Normal free:3943604kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 105.455652][ T6229] lowmem_reserve[]: 0 0 0 0 0 [ 105.455725][ T6229] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 105.487967][ T6229] Node 0 DMA32: 35*4kB (UME) 8*8kB (UM) 14*16kB (M) 49*32kB (UME) 30*64kB (UME) 15*128kB (UME) 9*256kB (UM) 8*512kB (UME) 4*1024kB (UM) 6*2048kB (UME) 290*4096kB (M) = 1216460kB [ 105.488507][ T6229] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 105.488818][ T6229] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 7*16kB (UM) 7*32kB (UM) 5*64kB (UM) 6*128kB (UM) 5*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (M) = 3943604kB [ 105.501477][ T6229] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 105.501531][ T6229] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 105.501590][ T6229] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 105.501634][ T6229] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 105.501685][ T6229] 47020 total pagecache pages [ 105.501716][ T6229] 0 pages in swap cache [ 105.501737][ T6229] Free swap = 124996kB [ 105.501759][ T6229] Total swap = 124996kB [ 105.501789][ T6229] 2097051 pages RAM [ 105.501809][ T6229] 0 pages HighMem/MovableOnly [ 105.501824][ T6229] 428725 pages reserved [ 105.501852][ T6229] 0 pages cma reserved [ 106.186077][ T6240] bridge_slave_0: left allmulticast mode [ 106.186105][ T6240] bridge_slave_0: left promiscuous mode [ 106.186348][ T6240] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.240165][ T6240] bridge_slave_1: left allmulticast mode [ 106.240195][ T6240] bridge_slave_1: left promiscuous mode [ 106.240429][ T6240] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.331348][ T6240] bond0: (slave bond_slave_0): Releasing backup interface [ 106.369617][ T6240] bond0: (slave bond_slave_1): Releasing backup interface [ 106.407905][ T6240] team0: Port device team_slave_0 removed [ 106.424677][ T6240] team0: Port device team_slave_1 removed [ 106.425743][ T6240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.425766][ T6240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.429778][ T6240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.429802][ T6240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.461218][ T6240] net_ratelimit: 1 callbacks suppressed [ 106.461240][ T6240] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 106.575696][ T6242] team0: Mode changed to "loadbalance" [ 107.074902][ T6285] netlink: 'syz.2.109': attribute type 1 has an invalid length. [ 107.172538][ T6285] bond1: option mode: invalid value (23) [ 107.199788][ T6291] netlink: 'syz.2.109': attribute type 1 has an invalid length. [ 107.204418][ T6285] bond1 (unregistering): Released all slaves [ 107.463410][ T6275] __nla_validate_parse: 102 callbacks suppressed [ 107.463431][ T6275] netlink: 40 bytes leftover after parsing attributes in process `syz.4.108'. [ 107.463481][ T6275] netlink: 40 bytes leftover after parsing attributes in process `syz.4.108'. [ 107.512469][ T6291] bond1: option mode: invalid value (23) [ 107.537713][ T6291] bond1 (unregistering): Released all slaves [ 107.658899][ T6306] bridge0: port 3(macsec0) entered blocking state [ 107.659133][ T6306] bridge0: port 3(macsec0) entered disabled state [ 107.659340][ T6306] macsec0: entered allmulticast mode [ 107.659359][ T6306] bridge0: entered allmulticast mode [ 107.659398][ T6306] bridge0: entered promiscuous mode [ 107.712679][ T6306] macsec0: left allmulticast mode [ 107.712699][ T6306] bridge0: left allmulticast mode [ 107.862159][ T5728] bridge0: left promiscuous mode [ 108.078400][ T6319] netlink: 1516 bytes leftover after parsing attributes in process `syz.1.116'. [ 108.164708][ T6331] Bluetooth: MGMT ver 1.23 [ 108.165208][ T6333] SET target dimension over the limit! [ 108.857090][ T6363] netlink: 68 bytes leftover after parsing attributes in process `syz.1.122'. [ 109.033884][ T6369] netlink: 60 bytes leftover after parsing attributes in process `syz.3.124'. [ 109.034194][ T6369] netlink: 60 bytes leftover after parsing attributes in process `syz.3.124'. [ 109.268327][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.128'. [ 109.347412][ T6389] netlink: 132 bytes leftover after parsing attributes in process `syz.4.126'. [ 109.528048][ T6397] ieee802154 phy0 wpan0: encryption failed: -22 [ 109.529528][ T6397] netlink: 'syz.2.131': attribute type 23 has an invalid length. [ 109.529720][ T6397] netlink: 'syz.2.131': attribute type 11 has an invalid length. [ 109.650493][ T6401] netlink: 56 bytes leftover after parsing attributes in process `syz.0.132'. [ 110.158754][ T6427] ip_tables: iptables: counters copy to user failed while replacing table [ 110.450555][ T6437] netlink: 24 bytes leftover after parsing attributes in process `syz.0.138'. [ 110.486919][ T6432] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 110.724626][ T6445] bond0 (unregistering): Released all slaves [ 110.791160][ T6452] xt_TCPMSS: Only works on TCP SYN packets [ 110.846263][ T6452] netlink: zone id is out of range [ 110.876224][ T6452] netlink: zone id is out of range [ 110.876333][ T6452] netlink: zone id is out of range [ 110.876344][ T6452] netlink: zone id is out of range [ 110.877078][ T6452] netlink: zone id is out of range [ 110.910450][ T6452] netlink: zone id is out of range [ 110.936305][ T6452] netlink: zone id is out of range [ 110.936355][ T6452] netlink: zone id is out of range [ 112.660305][ T6536] __nla_validate_parse: 2 callbacks suppressed [ 112.660331][ T6536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.150'. [ 114.487839][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'. [ 114.487899][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.146'. [ 114.487925][ T6480] netlink: 'syz.1.146': attribute type 12 has an invalid length. [ 114.520201][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'. [ 114.520284][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.146'. [ 114.520364][ T6480] netlink: 'syz.1.146': attribute type 12 has an invalid length. [ 114.550190][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.151'. [ 114.562436][ T3379] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.573682][ T50] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.573736][ T50] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.573764][ T50] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.810623][ T6544] netlink: 112 bytes leftover after parsing attributes in process `syz.3.152'. [ 115.180236][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'. [ 115.621307][ T6575] netlink: 'syz.1.159': attribute type 16 has an invalid length. [ 115.621335][ T6575] netlink: 'syz.1.159': attribute type 17 has an invalid length. [ 115.763462][ T6588] netlink: 64 bytes leftover after parsing attributes in process `syz.0.157'. [ 115.798605][ T6575] net_ratelimit: 24 callbacks suppressed [ 115.798631][ T6575] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 115.862921][ T6580] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.980190][ T6582] vlan2: entered promiscuous mode [ 115.980215][ T6582] bridge0: entered promiscuous mode [ 116.144260][ T6571] syzkaller1: entered promiscuous mode [ 116.144285][ T6571] syzkaller1: entered allmulticast mode [ 116.335831][ T6578] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 116.335872][ T6578] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 116.337903][ T6578] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 116.430677][ T6578] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 116.512307][ T6578] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 116.856236][ T6611] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 116.993409][ T6621] lo: entered promiscuous mode [ 116.993434][ T6621] lo: entered allmulticast mode [ 117.021735][ T6621] netlink: 40 bytes leftover after parsing attributes in process `syz.0.166'. [ 117.021762][ T6621] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 117.972758][ T6666] netlink: NAT attribute has 8 unknown bytes [ 117.972795][ T6666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.999985][ T6667] netlink: 36 bytes leftover after parsing attributes in process `syz.1.176'. [ 118.229214][ T6675] netlink: 20 bytes leftover after parsing attributes in process `syz.3.180'. [ 118.472222][ T6700] netlink: 'syz.1.182': attribute type 21 has an invalid length. [ 118.472246][ T6700] netlink: 128 bytes leftover after parsing attributes in process `syz.1.182'. [ 118.505939][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.181'. [ 118.505962][ T6707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.181'. [ 118.559660][ T6700] netlink: 'syz.1.182': attribute type 4 has an invalid length. [ 118.559682][ T6700] netlink: 'syz.1.182': attribute type 3 has an invalid length. [ 118.559696][ T6700] netlink: 3 bytes leftover after parsing attributes in process `syz.1.182'. [ 118.567232][ T6676] netlink: 20 bytes leftover after parsing attributes in process `syz.3.180'. [ 118.567307][ T6676] nbd: device at index 64 is going down [ 118.719491][ T6690] tipc: Started in network mode [ 118.727841][ T6690] tipc: Node identity 0af0a09bac44, cluster identity 4711 [ 118.760917][ T6690] tipc: Enabled bearer , priority 0 [ 118.761836][ T6710] netlink: 2392 bytes leftover after parsing attributes in process `syz.1.182'. [ 118.779699][ T6704] netlink: 2392 bytes leftover after parsing attributes in process `syz.1.182'. [ 118.974466][ T6723] netlink: 20 bytes leftover after parsing attributes in process `syz.0.183'. [ 119.013815][ T6690] syzkaller0: entered promiscuous mode [ 119.013843][ T6690] syzkaller0: entered allmulticast mode [ 119.014509][ T6690] tipc: Resetting bearer [ 119.152921][ T6723] vlan3: entered promiscuous mode [ 119.152946][ T6723] gretap0: entered promiscuous mode [ 119.186987][ T6670] tipc: Resetting bearer [ 119.300181][ T6735] Bluetooth: MGMT ver 1.23 [ 119.436959][ T5623] udevd[5623]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 119.520250][ T5623] udevd[5623]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 122.218325][ T6670] tipc: Disabling bearer [ 122.331935][ T1229] tipc: Node number set to 2796855451 [ 122.744403][ T6804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.971848][ T6811] xt_hashlimit: size too large, truncated to 1048576 [ 123.010562][ T6814] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 123.058299][ T6804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.162464][ T6797] __nla_validate_parse: 6 callbacks suppressed [ 123.162487][ T6797] netlink: 48 bytes leftover after parsing attributes in process `syz.1.196'. [ 123.167066][ T6800] netlink: 48 bytes leftover after parsing attributes in process `syz.1.196'. [ 123.602073][ T6833] netlink: 'syz.2.201': attribute type 4 has an invalid length. [ 123.602097][ T6833] netlink: 152 bytes leftover after parsing attributes in process `syz.2.201'. [ 123.625250][ T6834] netlink: 'syz.2.201': attribute type 4 has an invalid length. [ 123.625274][ T6834] netlink: 152 bytes leftover after parsing attributes in process `syz.2.201'. [ 123.680737][ T6837] syzkaller1: entered promiscuous mode [ 123.680763][ T6837] syzkaller1: entered allmulticast mode [ 124.339741][ T6858] netlink: 'syz.0.205': attribute type 2 has an invalid length. [ 124.365239][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.205'. [ 124.534706][ T6863] ip6t_hbh: unknown flags AD [ 125.071973][ T6891] ip_tables: iptables: counters copy to user failed while replacing table [ 125.319926][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.218'. [ 125.568344][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.221'. [ 125.573433][ T6917] Bluetooth: ISO socket layer initialized [ 125.790658][ T6925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.178175][ T6933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.201773][ T6933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.220118][ T6934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.223137][ T6932] batadv0: entered allmulticast mode [ 126.371407][ T6945] netlink: 16 bytes leftover after parsing attributes in process `syz.1.229'. [ 126.371445][ T6945] netlink: 164 bytes leftover after parsing attributes in process `syz.1.229'. [ 126.480503][ T6947] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 126.508990][ T6948] netlink: 'syz.1.231': attribute type 1 has an invalid length. [ 126.805284][ T6960] netlink: 'syz.0.232': attribute type 12 has an invalid length. [ 126.860431][ T6964] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 126.980159][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 127.014400][ T6970] netlink: NAT attribute has 4 unknown bytes [ 127.014441][ T6970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.193415][ T6959] __nla_validate_parse: 34 callbacks suppressed [ 128.193440][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 128.225233][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 128.225330][ T6959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.268784][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 128.306346][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 128.306444][ T6959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.336736][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 128.354822][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 128.448206][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 128.473800][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 128.481256][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 128.511478][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 129.416922][ T38] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.416961][ T38] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.417007][ T38] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.417034][ T38] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.417072][ T38] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.417098][ T38] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.417136][ T38] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.417163][ T38] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.430125][ T6981] x_tables: duplicate underflow at hook 1 [ 129.638484][ T6984] geneve2: entered promiscuous mode [ 129.638510][ T6984] geneve2: entered allmulticast mode [ 129.666255][ T161] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.666310][ T161] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.666347][ T161] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.666382][ T161] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.747203][ T6988] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 129.747231][ T6988] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 129.920097][ T6998] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 129.965976][ T7001] syzkaller0: entered promiscuous mode [ 129.966003][ T7001] syzkaller0: entered allmulticast mode [ 130.058519][ T7003] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 130.348382][ T7011] block nbd0: server does not support multiple connections per device. [ 130.369284][ T7011] block nbd0: shutting down sockets [ 130.492661][ T7016] netlink: NAT attribute has 4 unknown bytes [ 130.492699][ T7016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.646702][ T7016] bond1: Removing last ns target with arp_interval on [ 131.353831][ T51] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.354465][ T38] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.354505][ T38] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.354542][ T38] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.877254][ T7065] syzkaller1: entered allmulticast mode [ 132.035881][ T7070] sch_tbf: peakrate 257 is lower than or equals to rate 13227048128461824939 ! [ 132.202787][ T5785] bond_slave_0: entered promiscuous mode [ 132.202829][ T5785] bond_slave_1: entered promiscuous mode [ 132.203382][ T5785] bond_slave_0: left promiscuous mode [ 132.203405][ T5785] bond_slave_1: left promiscuous mode [ 132.277868][ T7075] veth5: entered promiscuous mode [ 132.325577][ T7079] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 132.619509][ T7083] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 132.918989][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.919056][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.108198][ T7117] netlink: 'syz.2.275': attribute type 11 has an invalid length. [ 133.122170][ T7117] netlink: 'syz.2.275': attribute type 11 has an invalid length. [ 133.301146][ T7128] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 133.416077][ T7138] syzkaller0: entered promiscuous mode [ 133.416104][ T7138] syzkaller0: entered allmulticast mode [ 133.423436][ T7138] TC_ACT_REPEAT abuse ? [ 133.561496][ T7147] netlink: 'syz.4.281': attribute type 1 has an invalid length. [ 133.587852][ T7140] pim6reg: entered allmulticast mode [ 134.094317][ T7158] nbd: socks must be embedded in a SOCK_ITEM attr [ 134.108766][ T7158] block nbd0: shutting down sockets [ 134.147312][ T7163] __nla_validate_parse: 44 callbacks suppressed [ 134.147335][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.290'. [ 134.221080][ T7165] netlink: 24 bytes leftover after parsing attributes in process `syz.1.292'. [ 134.241705][ T7158] netlink: 'syz.4.289': attribute type 2 has an invalid length. [ 134.241728][ T7158] netlink: 'syz.4.289': attribute type 2 has an invalid length. [ 134.327407][ T7169] netlink: 'syz.0.293': attribute type 1 has an invalid length. [ 134.327430][ T7169] netlink: 84 bytes leftover after parsing attributes in process `syz.0.293'. [ 134.327446][ T7169] netlink: 'syz.0.293': attribute type 2 has an invalid length. [ 134.327459][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.293'. [ 134.484485][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.289'. [ 134.539793][ T7170] netlink: 16 bytes leftover after parsing attributes in process `syz.1.292'. [ 134.705527][ T7177] netlink: 'syz.3.296': attribute type 10 has an invalid length. [ 134.906622][ T7183] veth0: entered promiscuous mode [ 134.913409][ T7187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.949415][ T7183] veth0: left promiscuous mode [ 135.003105][ T7194] netlink: 'syz.3.299': attribute type 10 has an invalid length. [ 135.145922][ T7194] team0 (unregistering): Port device team_slave_0 removed [ 135.178964][ T7198] No such timeout policy "syz0" [ 135.192009][ T7194] team0 (unregistering): Port device team_slave_1 removed [ 135.356896][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.302'. [ 135.392263][ T7202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.302'. [ 135.510753][ T7207] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 136.241793][ T7200] netlink: 'syz.2.300': attribute type 4 has an invalid length. [ 136.555151][ T7236] atomic_op ffff88802b0eb9e0 conn xmit_atomic 0000000000000000 [ 137.818770][ T7269] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 137.836600][ T7269] netlink: 132 bytes leftover after parsing attributes in process `syz.3.315'. [ 137.938679][ T7276] netlink: 24 bytes leftover after parsing attributes in process `syz.1.316'. [ 138.015768][ T7273] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 138.233006][ T7279] netlink: 'syz.2.318': attribute type 1 has an invalid length. [ 138.825773][ T7279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.893890][ T7293] bond0: (slave geneve2): making interface the new active one [ 138.907354][ T7293] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 139.176236][ T7306] bridge_slave_0: left allmulticast mode [ 139.176267][ T7306] bridge_slave_0: left promiscuous mode [ 139.176495][ T7306] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.285125][ T7317] netlink: 'syz.3.328': attribute type 1 has an invalid length. [ 139.286599][ T7312] bridge_slave_1: left allmulticast mode [ 139.286627][ T7312] bridge_slave_1: left promiscuous mode [ 139.286875][ T7312] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.482488][ T7366] veth0: entered promiscuous mode [ 140.698145][ T7365] veth0: left promiscuous mode [ 141.352430][ T7391] bridge2: entered allmulticast mode [ 141.712322][ T7419] netlink: 'syz.3.349': attribute type 1 has an invalid length. [ 141.871674][ T7427] __nla_validate_parse: 1 callbacks suppressed [ 141.871700][ T7427] netlink: 28 bytes leftover after parsing attributes in process `syz.3.349'. [ 142.140323][ T7425] bond1: (slave geneve2): making interface the new active one [ 142.159798][ T7425] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 142.171818][ T60] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 142.178023][ T3371] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 142.178172][ T3371] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 142.224896][ T7427] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.774906][ T3371] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 143.177205][ T7457] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 143.177323][ T7457] syzkaller0: linktype set to 8 [ 143.440939][ T7464] netlink: 'syz.2.354': attribute type 1 has an invalid length. [ 143.953844][ T7486] netlink: 28 bytes leftover after parsing attributes in process `syz.1.357'. [ 143.953874][ T7486] netlink: 28 bytes leftover after parsing attributes in process `syz.1.357'. [ 143.958638][ T7487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.357'. [ 143.958667][ T7487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.357'. [ 143.958866][ T7487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.357'. [ 143.958885][ T7487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.357'. [ 144.738251][ T60] IPVS: starting estimator thread 0... [ 144.761360][ T7524] IPVS: lblc: TCP 127.0.0.1:21 - no destination available [ 144.830035][ T7530] IPVS: using max 30 ests per chain, 72000 per kthread [ 145.760221][ T7548] xt_IDLETIMER: timeout value is too big [ 147.869362][ T7553] netlink: 'syz.2.372': attribute type 10 has an invalid length. [ 147.991598][ T7559] netlink: 116 bytes leftover after parsing attributes in process `syz.3.373'. [ 148.381436][ T7577] tipc: Started in network mode [ 148.381471][ T7577] tipc: Node identity 4e67853ddc9a, cluster identity 4711 [ 148.390098][ T7577] tipc: Enabled bearer , priority 0 [ 148.441952][ T7571] syzkaller0: entered promiscuous mode [ 148.441980][ T7571] syzkaller0: entered allmulticast mode [ 151.516435][ T7593] tipc: Resetting bearer [ 151.516905][ T7596] lo: Caught tx_queue_len zero misconfig [ 151.518873][ T7569] tipc: Resetting bearer [ 151.548827][ T7569] tipc: Disabling bearer [ 151.685076][ T1229] tipc: Node number set to 2466088253 [ 151.768347][ T7614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.383'. [ 151.768377][ T7614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.768397][ T7614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.797302][ T7614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.797421][ T7614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.082511][ T7636] netlink: 'syz.1.387': attribute type 28 has an invalid length. [ 152.082535][ T7636] netlink: 'syz.1.387': attribute type 3 has an invalid length. [ 152.082578][ T7636] netlink: 132 bytes leftover after parsing attributes in process `syz.1.387'. [ 152.466442][ T7645] netlink: 24 bytes leftover after parsing attributes in process `syz.3.390'. [ 152.536601][ T7645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.390'. [ 152.871587][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.393'. [ 152.972537][ T7664] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 152.993978][ T7669] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 153.444336][ T7684] sctp: [Deprecated]: syz.3.399 (pid 7684) Use of int in maxseg socket option. [ 153.444336][ T7684] Use struct sctp_assoc_value instead [ 154.911408][ T7624] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 154.921766][ T7647] netlink: 'syz.0.391': attribute type 1 has an invalid length. [ 154.921833][ T7647] netlink: 'syz.0.391': attribute type 1 has an invalid length. [ 155.297570][ T7700] netlink: 36 bytes leftover after parsing attributes in process `syz.4.404'. [ 155.544477][ T7713] netlink: 52 bytes leftover after parsing attributes in process `syz.0.409'. [ 155.569777][ T7713] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.570559][ T7713] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.609102][ T7713] netlink: 76 bytes leftover after parsing attributes in process `syz.0.409'. [ 155.609311][ T7713] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.609440][ T7713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.609808][ T7713] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.609980][ T7713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.673651][ T7713] netlink: 52 bytes leftover after parsing attributes in process `syz.0.409'. [ 155.716889][ T7713] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.717280][ T7713] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.778604][ T7713] lo: left promiscuous mode [ 155.778631][ T7713] lo: left allmulticast mode [ 155.832384][ T7719] netlink: 52 bytes leftover after parsing attributes in process `syz.0.409'. [ 156.282957][ T7713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.298525][ T7732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.463272][ T7741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.415'. [ 156.463299][ T7741] netlink: 2 bytes leftover after parsing attributes in process `syz.4.415'. [ 156.472520][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.415'. [ 156.472544][ T7741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.415'. [ 156.512301][ T7713] veth1_vlan: left allmulticast mode [ 156.518775][ T7713] macvlan0: left allmulticast mode [ 156.734554][ T7713] vlan3: left promiscuous mode [ 156.734578][ T7713] gretap0: left promiscuous mode [ 156.859186][ T7721] netlink: 504 bytes leftover after parsing attributes in process `syz.3.412'. [ 156.918124][ T7741] gretap0: entered promiscuous mode [ 156.918325][ T7741] macsec1: entered promiscuous mode [ 156.918508][ T7741] macsec1: entered allmulticast mode [ 156.918524][ T7741] gretap0: entered allmulticast mode [ 156.946744][ T38] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.946793][ T38] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.946829][ T38] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.946864][ T38] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.205015][ T7755] netlink: 'syz.0.422': attribute type 2 has an invalid length. [ 157.287095][ T7755] syzkaller1: entered promiscuous mode [ 157.287120][ T7755] syzkaller1: entered allmulticast mode [ 157.669387][ T7764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.696565][ T7764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.179792][ T7764] gretap0: left allmulticast mode [ 158.195957][ T3322] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.195995][ T3322] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.196033][ T3322] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.196060][ T3322] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.196097][ T3322] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.196124][ T3322] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.196158][ T3322] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.196185][ T3322] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.983176][ T7798] openvswitch: netlink: VLAN attribute unexpected. [ 159.511016][ T7817] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135179 [ 159.511051][ T7817] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135178 [ 159.511082][ T7817] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135177 [ 159.511105][ T7817] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135176 [ 159.511128][ T7817] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135175 [ 159.511161][ T7817] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135174 [ 159.511184][ T7817] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135173 [ 159.511222][ T7817] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135172 [ 159.511245][ T7817] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135171 [ 159.511268][ T7817] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135170 [ 159.511291][ T7817] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135169 [ 159.511314][ T7817] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135168 [ 159.511336][ T7817] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135167 [ 159.511358][ T7817] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135166 [ 159.511381][ T7817] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135165 [ 159.511509][ T7817] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135164 [ 159.511533][ T7817] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135163 [ 159.511556][ T7817] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135162 [ 159.511578][ T7817] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135161 [ 159.511601][ T7817] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135160 [ 159.511623][ T7817] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135159 [ 159.511646][ T7817] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135158 [ 159.511669][ T7817] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135157 [ 159.511692][ T7817] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135156 [ 159.511715][ T7817] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135155 [ 159.511738][ T7817] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135154 [ 159.511761][ T7817] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135153 [ 159.511783][ T7817] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135152 [ 159.511805][ T7817] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135151 [ 159.511828][ T7817] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135150 [ 159.511850][ T7817] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135149 [ 159.511873][ T7817] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135148 [ 159.511895][ T7817] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135147 [ 159.511918][ T7817] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135146 [ 159.512841][ T7818] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135179 [ 159.512868][ T7818] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135178 [ 159.512891][ T7818] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135177 [ 159.512914][ T7818] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135176 [ 159.512937][ T7818] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135175 [ 159.512960][ T7818] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135174 [ 159.512983][ T7818] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135173 [ 159.513006][ T7818] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135172 [ 159.513037][ T7818] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135171 [ 159.513061][ T7818] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135170 [ 159.513091][ T7818] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135169 [ 159.513114][ T7818] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135168 [ 159.513137][ T7818] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135167 [ 159.513160][ T7818] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135166 [ 159.513182][ T7818] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135165 [ 159.513205][ T7818] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135164 [ 159.513227][ T7818] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135163 [ 159.513250][ T7818] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135162 [ 159.513273][ T7818] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135161 [ 159.513296][ T7818] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135160 [ 159.513319][ T7818] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135159 [ 159.513341][ T7818] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135158 [ 159.513364][ T7818] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135157 [ 159.513387][ T7818] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135156 [ 159.513410][ T7818] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135155 [ 159.513433][ T7818] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135154 [ 159.513455][ T7818] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135153 [ 159.513478][ T7818] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135152 [ 159.531450][ T7818] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135151 [ 159.531483][ T7818] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135150 [ 159.531506][ T7818] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135149 [ 159.531527][ T7818] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135148 [ 159.531549][ T7818] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135147 [ 159.531570][ T7818] tipc: Failed to remove unknown binding: 66,0,0/0:3350135145/3350135146 [ 160.395524][ T7836] __nla_validate_parse: 241 callbacks suppressed [ 160.395542][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.444'. [ 160.575263][ T7846] netlink: 'syz.4.447': attribute type 1 has an invalid length. [ 160.711620][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.447'. [ 160.776120][ T7846] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.824102][ T7848] vlan2: entered allmulticast mode [ 160.824132][ T7848] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 160.864968][ T7858] netlink: 2 bytes leftover after parsing attributes in process `syz.2.450'. [ 161.226784][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.452'. [ 161.320361][ T7875] vlan2: entered promiscuous mode [ 161.320387][ T7875] macvlan0: entered promiscuous mode [ 161.353101][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.452'. [ 161.368385][ T7881] netlink: 24 bytes leftover after parsing attributes in process `syz.2.454'. [ 161.711020][ T7899] netlink: 68 bytes leftover after parsing attributes in process `syz.3.458'. [ 161.796681][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.458'. [ 161.912334][ T7907] netlink: 68 bytes leftover after parsing attributes in process `syz.3.458'. [ 162.850001][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.458'. [ 162.874377][ T7923] netlink: 'syz.0.462': attribute type 1 has an invalid length. [ 162.874398][ T7923] netlink: 'syz.0.462': attribute type 2 has an invalid length. [ 163.327049][ T7941] tc action pedit unable to extract header offset for header type (0x4) [ 163.327075][ T7941] tc action pedit unable to extract header offset for header type (0x4) [ 163.327088][ T7941] tc action pedit unable to extract header offset for header type (0x4) [ 163.327101][ T7941] tc action pedit unable to extract header offset for header type (0x4) [ 163.327114][ T7941] tc action pedit unable to extract header offset for header type (0x4) [ 163.327139][ T7941] tc action pedit unable to extract header offset for header type (0x4) [ 163.327151][ T7941] tc action pedit unable to extract header offset for header type (0x4) [ 163.327165][ T7941] tc action pedit unable to extract header offset for header type (0x4) [ 163.327178][ T7941] tc action pedit unable to extract header offset for header type (0x4) [ 163.327191][ T7941] tc action pedit unable to extract header offset for header type (0x4) [ 163.327217][ T7941] 0: reclassify loop, rule prio 0, protocol 800 [ 163.556136][ T7948] netlink: 'syz.4.469': attribute type 1 has an invalid length. [ 163.639704][ T7948] 8021q: adding VLAN 0 to HW filter on device bond4 [ 163.652920][ T7948] bond3: (slave bond4): making interface the new active one [ 163.664009][ T7948] bond3: (slave bond4): Enslaving as an active interface with an up link [ 163.856020][ T7948] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 164.569484][ T7980] netlink: 'syz.0.474': attribute type 11 has an invalid length. [ 165.096846][ T8001] openvswitch: netlink: IPv4 tunnel dst address is zero [ 165.700331][ T8026] __nla_validate_parse: 7 callbacks suppressed [ 165.700353][ T8026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.484'. [ 165.720400][ T8026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.484'. [ 165.720438][ T8026] netlink: 60 bytes leftover after parsing attributes in process `syz.1.484'. [ 165.970289][ T8057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.176960][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.490'. [ 166.272382][ T8014] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 166.530109][ T8084] tipc: Started in network mode [ 166.530144][ T8084] tipc: Node identity 4e4476d17108, cluster identity 4711 [ 166.530321][ T8084] tipc: Enabled bearer , priority 0 [ 166.533116][ T8084] syzkaller0: entered promiscuous mode [ 166.533142][ T8084] syzkaller0: entered allmulticast mode [ 166.719979][ T8084] tipc: Resetting bearer [ 166.755870][ T8082] tipc: Resetting bearer [ 166.831866][ T8082] tipc: Disabling bearer [ 167.334652][ T8123] netlink: 72 bytes leftover after parsing attributes in process `syz.1.499'. [ 167.764737][ T8134] netlink: Unknown conntrack attr (0) [ 168.057826][ T8141] FAULT_INJECTION: forcing a failure. [ 168.057826][ T8141] name failslab, interval 1, probability 0, space 0, times 1 [ 168.057868][ T8141] CPU: 0 UID: 0 PID: 8141 Comm: syz.3.504 Not tainted syzkaller #0 PREEMPT(full) [ 168.057892][ T8141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 168.057906][ T8141] Call Trace: [ 168.057915][ T8141] [ 168.057925][ T8141] dump_stack_lvl+0xe8/0x150 [ 168.057976][ T8141] should_fail_ex+0x410/0x560 [ 168.058005][ T8141] ? __alloc_skb+0x1db/0x7a0 [ 168.058034][ T8141] should_failslab+0xa8/0x100 [ 168.058063][ T8141] ? __alloc_skb+0x1db/0x7a0 [ 168.058087][ T8141] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 168.058126][ T8141] ? __alloc_skb+0x1db/0x7a0 [ 168.058174][ T8141] __alloc_skb+0x1db/0x7a0 [ 168.058207][ T8141] tcp_stream_alloc_skb+0x3f/0x580 [ 168.058239][ T8141] tcp_sendmsg_locked+0x138c/0x5400 [ 168.058323][ T8141] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 168.058361][ T8141] ? tcp_sendmsg+0x21/0x50 [ 168.058390][ T8141] ? __local_bh_enable_ip+0xd6/0x140 [ 168.058425][ T8141] tcp_sendmsg+0x2f/0x50 [ 168.058452][ T8141] ? __pfx_inet_sendmsg+0x10/0x10 [ 168.058473][ T8141] sock_sendmsg_nosec+0x10e/0x180 [ 168.058513][ T8141] ____sys_sendmsg+0x54e/0x850 [ 168.058552][ T8141] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.058593][ T8141] ? import_iovec+0x73/0xa0 [ 168.058627][ T8141] ___sys_sendmsg+0x2a5/0x360 [ 168.058657][ T8141] ? __lock_acquire+0x747/0x2de0 [ 168.058685][ T8141] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.058723][ T8141] ? kstrtouint+0x6e/0xe0 [ 168.058775][ T8141] ? __fget_files+0x2a/0x420 [ 168.058806][ T8141] ? __fget_files+0x3a2/0x420 [ 168.058848][ T8141] __sys_sendmmsg+0x273/0x4d0 [ 168.058887][ T8141] ? __pfx___sys_sendmmsg+0x10/0x10 [ 168.058930][ T8141] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 168.058983][ T8141] ? rcu_is_watching+0x16/0xb0 [ 168.059020][ T8141] __x64_sys_sendmmsg+0xa0/0xc0 [ 168.059055][ T8141] do_syscall_64+0x166/0x520 [ 168.059086][ T8141] ? trace_irq_disable+0x3b/0x140 [ 168.059108][ T8141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.059132][ T8141] ? clear_bhb_loop+0x70/0xc0 [ 168.059159][ T8141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.059191][ T8141] RIP: 0033:0x7f176ef9e159 [ 168.059222][ T8141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.059240][ T8141] RSP: 002b:00007f176fe5d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 168.059269][ T8141] RAX: ffffffffffffffda RBX: 00007f176f225fa0 RCX: 00007f176ef9e159 [ 168.059286][ T8141] RDX: 0000000000000003 RSI: 0000200000000f40 RDI: 0000000000000003 [ 168.059300][ T8141] RBP: 00007f176fe5d090 R08: 0000000000000000 R09: 0000000000000000 [ 168.059312][ T8141] R10: 0000000000004080 R11: 0000000000000246 R12: 0000000000000001 [ 168.059326][ T8141] R13: 00007f176f226038 R14: 00007f176f225fa0 R15: 00007fff8a02f518 [ 168.059363][ T8141] [ 168.420422][ T8144] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 168.531696][ T8144] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 168.546379][ T8144] bond1 (unregistering): Released all slaves [ 168.636839][ T8147] syzkaller1: entered promiscuous mode [ 168.636863][ T8147] syzkaller1: entered allmulticast mode [ 168.724712][ T8150] netlink: 'syz.0.505': attribute type 30 has an invalid length. [ 168.769662][ T8157] sctp: [Deprecated]: syz.4.508 (pid 8157) Use of int in maxseg socket option. [ 168.769662][ T8157] Use struct sctp_assoc_value instead [ 169.087059][ T8169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.513'. [ 169.246601][ T8173] netlink: 7 bytes leftover after parsing attributes in process `syz.3.514'. [ 170.123793][ T8215] IPVS: Unknown mcast interface: vxcan1 [ 170.609158][ T8233] syzkaller1: entered promiscuous mode [ 170.609183][ T8233] syzkaller1: entered allmulticast mode [ 170.611676][ T8232] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 170.635165][ T8232] netlink: 'syz.2.526': attribute type 1 has an invalid length. [ 170.636517][ T8233] netlink: 'syz.2.526': attribute type 1 has an invalid length. [ 171.305279][ T8264] x_tables: duplicate underflow at hook 2 [ 171.305746][ T8264] x_tables: duplicate underflow at hook 3 [ 171.306165][ T8264] mac80211_hwsim hwsim10 wlan0: Caught tx_queue_len zero misconfig [ 171.509171][ T8272] netlink: 32 bytes leftover after parsing attributes in process `syz.4.534'. [ 171.512343][ T8272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.534'. [ 171.667199][ T8275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.535'. [ 171.667432][ T8275] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 171.978130][ T8286] netlink: 268 bytes leftover after parsing attributes in process `syz.4.539'. [ 171.978250][ T8286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.539'. [ 172.003473][ T8286] xt_hashlimit: max too large, truncated to 1048576 [ 172.006766][ T8286] No such timeout policy "syz1" [ 172.049996][ T8286] macsec2: entered promiscuous mode [ 172.148801][ T8294] netlink: 'syz.2.542': attribute type 12 has an invalid length. [ 172.150080][ T8294] netlink: 32 bytes leftover after parsing attributes in process `syz.2.542'. [ 172.150541][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.542'. [ 172.150578][ T8294] netlink: 32 bytes leftover after parsing attributes in process `syz.2.542'. [ 172.150594][ T8294] netlink: 24 bytes leftover after parsing attributes in process `syz.2.542'. [ 172.400342][ T8301] netlink: 20 bytes leftover after parsing attributes in process `syz.2.545'. [ 172.402668][ T8299] netlink: 'syz.4.543': attribute type 1 has an invalid length. [ 172.707335][ T8318] netlink: 'syz.2.549': attribute type 1 has an invalid length. [ 173.351108][ T8330] bond3: entered promiscuous mode [ 173.351134][ T8330] bond3: entered allmulticast mode [ 173.370462][ T5625] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 173.373705][ T5625] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 173.376080][ T5625] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 173.697128][ T8354] sctp: [Deprecated]: syz.3.553 (pid 8354) Use of int in max_burst socket option deprecated. [ 173.697128][ T8354] Use struct sctp_assoc_value instead [ 174.265254][ T8386] netlink: 'syz.3.564': attribute type 4 has an invalid length. [ 175.210098][ T8429] openvswitch: netlink: Flow actions attr not present in new flow. [ 175.474163][ T5625] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 175.926844][ T8453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.931696][ T8453] ip_tables: iptables: counters copy to user failed while replacing table [ 176.002345][ T8455] netlink: 'syz.0.579': attribute type 30 has an invalid length. [ 177.067234][ T8499] netlink: 'syz.1.591': attribute type 21 has an invalid length. [ 177.412269][ T8513] netlink: 'syz.3.594': attribute type 1 has an invalid length. [ 177.601807][ T8520] __nla_validate_parse: 42 callbacks suppressed [ 177.601833][ T8520] netlink: 16 bytes leftover after parsing attributes in process `syz.4.596'. [ 177.646586][ T8520] ip_tables: iptables: counters copy to user failed while replacing table [ 177.820726][ T8500] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 178.409958][ T8500] bond1 (unregistering): Released all slaves [ 178.503060][ T8504] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 178.527961][ T8513] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 178.612669][ T8514] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 178.637908][ T8514] bond2 (unregistering): Released all slaves [ 178.745883][ T8515] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 178.790037][ T8524] bridge3: entered promiscuous mode [ 178.999272][ T8554] syzkaller1: entered allmulticast mode [ 179.044977][ T6417] IPVS: starting estimator thread 0... [ 179.046686][ T8540] syzkaller1: entered promiscuous mode [ 179.105482][ T8560] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 179.134871][ T8556] IPVS: using max 29 ests per chain, 69600 per kthread [ 179.592667][ T8578] syzkaller0: entered promiscuous mode [ 179.592692][ T8578] syzkaller0: entered allmulticast mode [ 179.883694][ T8587] gtp0: entered promiscuous mode [ 179.883720][ T8587] gtp0: entered allmulticast mode [ 179.888539][ T8588] netlink: 'syz.4.609': attribute type 1 has an invalid length. [ 180.063898][ T8592] netlink: 'syz.0.612': attribute type 23 has an invalid length. [ 180.122030][ T8588] bond5: entered promiscuous mode [ 180.131121][ T8588] 8021q: adding VLAN 0 to HW filter on device bond5 [ 180.318456][ T8592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.612'. [ 180.611269][ T8611] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 180.718569][ T8609] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 181.185434][ T8631] netlink: 36 bytes leftover after parsing attributes in process `syz.4.622'. [ 181.263306][ T8602] netlink: 'syz.1.614': attribute type 15 has an invalid length. [ 181.263333][ T8602] netlink: 24 bytes leftover after parsing attributes in process `syz.1.614'. [ 181.402859][ T8640] tc_dump_action: action bad kind [ 181.413726][ T8645] netlink: 76 bytes leftover after parsing attributes in process `syz.3.627'. [ 181.449428][ T8646] netlink: 48 bytes leftover after parsing attributes in process `syz.2.626'. [ 181.728469][ T8650] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.729448][ T8650] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.162988][ T8666] : option downdelay: invalid value (18446744073709547007) [ 182.163016][ T8666] : option downdelay: allowed values 0 - 2147483647 [ 182.183833][ T8666]  (unregistering): Released all slaves [ 184.305562][ T8635] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 184.726494][ T8692] macsec1: entered promiscuous mode [ 185.011639][ T8702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.640'. [ 185.636445][ T8719] netlink: 59 bytes leftover after parsing attributes in process `syz.1.644'. [ 186.202525][ T8737] netlink: 964 bytes leftover after parsing attributes in process `syz.2.646'. [ 186.259738][ T8745] x_tables: duplicate underflow at hook 1 [ 186.620687][ T8756] netlink: 'syz.0.650': attribute type 5 has an invalid length. [ 187.380403][ T8794] netlink: 'syz.3.656': attribute type 10 has an invalid length. [ 187.380513][ T8796] netlink: 'syz.3.656': attribute type 10 has an invalid length. [ 188.058393][ T8773] netlink: 132 bytes leftover after parsing attributes in process `syz.0.655'. [ 188.102879][ T8759] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 188.599491][ T8814] netlink: 'syz.3.661': attribute type 15 has an invalid length. [ 188.599516][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.661'. [ 188.696069][ T6419] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 188.697613][ T3371] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 188.697655][ T3371] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 188.697692][ T3371] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 189.324666][ T8841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.670'. [ 189.520902][ T8845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.672'. [ 189.617819][ T8853] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 189.619979][ T8854] netlink: 32 bytes leftover after parsing attributes in process `syz.2.672'. [ 189.620073][ T8854] netlink: 32 bytes leftover after parsing attributes in process `syz.2.672'. [ 189.683818][ T8853] netlink: 'syz.3.675': attribute type 10 has an invalid length. [ 189.957811][ T8864] netlink: 964 bytes leftover after parsing attributes in process `syz.0.678'. [ 189.957839][ T8864] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 190.096804][ T8866] netlink: 'syz.4.677': attribute type 1 has an invalid length. [ 190.096832][ T8866] netlink: 236 bytes leftover after parsing attributes in process `syz.4.677'. [ 190.245226][ T8868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.679'. [ 191.550118][ T8921] tipc: Started in network mode [ 191.550157][ T8921] tipc: Node identity e292d61df292, cluster identity 4711 [ 191.550343][ T8921] tipc: Enabled bearer , priority 0 [ 191.838941][ T8928] netlink: 16 bytes leftover after parsing attributes in process `syz.4.692'. [ 192.209816][ T8921] tipc: Disabling bearer [ 192.476880][ T8937] netlink: 2 bytes leftover after parsing attributes in process `syz.1.695'. [ 192.670785][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.696'. [ 192.922016][ T8955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.699'. [ 192.968187][ T6419] tipc: Subscription rejected, illegal request [ 193.059640][ T8956] netlink: 20 bytes leftover after parsing attributes in process `syz.3.704'. [ 193.137499][ T8962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.701'. [ 194.285300][ T9014] netlink: 'syz.4.716': attribute type 4 has an invalid length. [ 194.359530][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.439835][ T9019] No such timeout policy "s" [ 194.439863][ T9019] netlink: Failed to associated timeout policy 's' [ 194.441482][ T9018] No such timeout policy "s" [ 194.441496][ T9018] netlink: Failed to associated timeout policy 's' [ 195.506648][ T9061] netlink: 72 bytes leftover after parsing attributes in process `syz.1.725'. [ 195.605908][ T9065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.728'. [ 195.605940][ T9065] netlink: 20 bytes leftover after parsing attributes in process `syz.4.728'. [ 195.978415][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.729'. [ 196.085463][ T9072] vlan3: entered allmulticast mode [ 196.085496][ T9072] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 196.126329][ T9072] batman_adv: batadv0: Adding interface: vlan3 [ 196.126352][ T9072] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.126384][ T9072] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 196.349408][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.730'. [ 196.448499][ T9085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.732'. [ 196.517731][ T9085] netlink: 28 bytes leftover after parsing attributes in process `syz.1.732'. [ 196.888736][ T9095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.889074][ T9095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.889402][ T9095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.889738][ T9095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.932305][ T9095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.932687][ T9095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.933009][ T9095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.933341][ T9095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.972664][ T9095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.973008][ T9095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.011915][ T9102] netlink: 16 bytes leftover after parsing attributes in process `syz.4.736'. [ 197.072391][ T9102] ipvlan1: entered promiscuous mode [ 197.090629][ T9102] ipvlan1: left promiscuous mode [ 197.179258][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.737'. [ 197.224504][ T9114] nbd: must specify a size in bytes for the device [ 198.497576][ T9161] netlink: 'syz.0.750': attribute type 3 has an invalid length. [ 198.497603][ T9161] netlink: 152 bytes leftover after parsing attributes in process `syz.0.750'. [ 199.577964][ T9178] netlink: 'syz.0.755': attribute type 1 has an invalid length. [ 199.910813][ T9194] netlink: 'syz.0.755': attribute type 10 has an invalid length. [ 200.237437][ T9197] netlink: 'syz.0.758': attribute type 21 has an invalid length. [ 200.613081][ T9217] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 200.888665][ T9215] xt_CT: No such helper "netbios-ns" [ 201.107815][ T9197] netlink: 'syz.0.758': attribute type 4 has an invalid length. [ 201.107838][ T9197] netlink: 'syz.0.758': attribute type 5 has an invalid length. [ 201.107851][ T9197] __nla_validate_parse: 8 callbacks suppressed [ 201.107863][ T9197] netlink: 3 bytes leftover after parsing attributes in process `syz.0.758'. [ 201.323295][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.761'. [ 201.458891][ T9239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.472795][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.761'. [ 201.473017][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.761'. [ 201.473191][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.761'. [ 201.473358][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.761'. [ 201.474975][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.761'. [ 201.498239][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.761'. [ 201.869869][ T9257] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 202.570078][ T9278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.645952][ T9278] batadv_slave_1: entered promiscuous mode [ 202.653026][ T9278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.730717][ T9283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.862817][ T9283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.881814][ T9289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.940906][ T9276] batadv_slave_1: left promiscuous mode [ 203.513014][ T51] nci: nci_ntf_packet: unknown ntf opcode 0x123 [ 203.539149][ T9319] netlink: 60 bytes leftover after parsing attributes in process `syz.4.771'. [ 203.848594][ T9331] netlink: 'syz.2.774': attribute type 10 has an invalid length. [ 203.893940][ T9331] team0: Port device dummy0 added [ 204.064072][ T9350] netlink: 72 bytes leftover after parsing attributes in process `syz.3.777'. [ 206.236218][ T9314] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 206.236387][ T9330] netlink: 'syz.2.774': attribute type 2 has an invalid length. [ 206.236404][ T9330] __nla_validate_parse: 2 callbacks suppressed [ 206.236416][ T9330] netlink: 224 bytes leftover after parsing attributes in process `syz.2.774'. [ 206.595678][ T9358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.779'. [ 206.624840][ T9357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.678951][ T5633] Bluetooth: hci1: command 0x0406 tx timeout [ 206.679040][ T5633] Bluetooth: hci3: command 0x0406 tx timeout [ 206.679072][ T5633] Bluetooth: hci2: command 0x0406 tx timeout [ 206.705524][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.781'. [ 206.705545][ T9360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.781'. [ 206.705568][ T9360] netlink: 'syz.4.781': attribute type 6 has an invalid length. [ 206.705580][ T9360] netlink: 'syz.4.781': attribute type 5 has an invalid length. [ 206.705706][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.781'. [ 206.705719][ T9360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.781'. [ 206.705737][ T9360] netlink: 'syz.4.781': attribute type 6 has an invalid length. [ 206.705748][ T9360] netlink: 'syz.4.781': attribute type 5 has an invalid length. [ 206.766176][ T9366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.769253][ T9358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.779'. [ 206.812600][ T9357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.937011][ T9368] net_ratelimit: 56 callbacks suppressed [ 206.937033][ T9368] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.981618][ T9368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.782'. [ 207.172942][ T9378] netlink: 84 bytes leftover after parsing attributes in process `syz.4.787'. [ 207.184171][ T9378] netlink: 64 bytes leftover after parsing attributes in process `syz.4.787'. [ 207.719876][ T9399] batman_adv: batadv0: Adding interface: syzkaller0 [ 207.719896][ T9399] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.719928][ T9399] batman_adv: batadv0: Interface activated: syzkaller0 [ 207.796430][ T9405] xt_TCPMSS: Only works on TCP SYN packets [ 208.001304][ T9393] bridge_slave_1: left allmulticast mode [ 208.001334][ T9393] bridge_slave_1: left promiscuous mode [ 208.001582][ T9393] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.075798][ T9393] bridge_slave_0: left allmulticast mode [ 208.075855][ T9393] bridge_slave_0: left promiscuous mode [ 208.077539][ T9393] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.528695][ T9396] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 208.661447][ T9423] ip_tables: iptables: counters copy to user failed while replacing table [ 208.742971][ T9396] batman_adv: batadv0: Removing interface: syzkaller0 [ 209.238398][ T9438] nbd: must specify at least one socket [ 209.638025][ T9438] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 209.661452][ T9438] bond2 (unregistering): Released all slaves [ 209.857425][ T9445] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 210.095235][ T9458] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 210.397498][ T9472] netlink: 'syz.1.805': attribute type 16 has an invalid length. [ 210.447590][ T9472] netlink: 'syz.1.805': attribute type 16 has an invalid length. [ 210.447739][ T9472] netlink: 'syz.1.805': attribute type 16 has an invalid length. [ 210.447885][ T9472] netlink: 'syz.1.805': attribute type 16 has an invalid length. [ 210.448025][ T9472] netlink: 'syz.1.805': attribute type 16 has an invalid length. [ 210.471585][ T9461] openvswitch: netlink: Flow key attr not present in new flow. [ 210.869994][ T9484] openvswitch: netlink: IP tunnel TTL not specified. [ 211.117457][ T9499] syzkaller0: entered promiscuous mode [ 211.117482][ T9499] syzkaller0: entered allmulticast mode [ 211.335122][ T161] tipc: Subscription rejected, illegal request [ 211.576057][ T9520] __nla_validate_parse: 39 callbacks suppressed [ 211.576081][ T9520] netlink: 60 bytes leftover after parsing attributes in process `syz.4.818'. [ 211.639593][ T9481] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 212.118010][ T9539] netlink: 96 bytes leftover after parsing attributes in process `syz.0.824'. [ 212.141684][ T9526] bond2: entered promiscuous mode [ 212.141709][ T9526] bond2: entered allmulticast mode [ 212.192296][ T9539] vlan4: entered allmulticast mode [ 212.192321][ T9539] gretap0: entered allmulticast mode [ 212.285708][ T9542] validate_nla: 28 callbacks suppressed [ 212.285731][ T9542] netlink: 'syz.2.826': attribute type 1 has an invalid length. [ 212.425508][ T9542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.826'. [ 212.431067][ T9547] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 212.468640][ T9548] gretap1: entered allmulticast mode [ 212.481339][ T9548] bond1: (slave gretap1): making interface the new active one [ 212.501422][ T9548] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 212.740606][ T9568] netlink: 28 bytes leftover after parsing attributes in process `syz.1.828'. [ 213.431197][ T9590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.687126][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.835'. [ 214.117127][ T9608] netlink: 'syz.2.839': attribute type 3 has an invalid length. [ 214.158966][ T9608] netlink: 'syz.2.839': attribute type 1 has an invalid length. [ 214.158992][ T9608] netlink: 'syz.2.839': attribute type 268 has an invalid length. [ 214.159009][ T9608] netlink: 224 bytes leftover after parsing attributes in process `syz.2.839'. [ 214.417216][ T9621] ip6gretap1: entered promiscuous mode [ 214.437673][ T9619] syzkaller0: entered promiscuous mode [ 214.437700][ T9619] syzkaller0: entered allmulticast mode [ 214.462538][ T9619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.842'. [ 214.521807][ T9619] tipc: Enabled bearer , priority 0 [ 214.578461][ T9617] tipc: Resetting bearer [ 214.756673][ T9617] tipc: Disabling bearer [ 215.066470][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.849'. [ 215.281375][ T9639] 8021q: adding VLAN 0 to HW filter on device bond1 [ 215.282343][ T9642] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 215.282882][ T9644] tc_dump_action: action bad kind [ 215.353763][ T9653] netlink: 'syz.3.851': attribute type 1 has an invalid length. [ 215.596236][ T9653] veth5: entered allmulticast mode [ 215.700967][ T9674] netlink: 72 bytes leftover after parsing attributes in process `syz.0.854'. [ 215.812385][ T9654] veth5: entered allmulticast mode [ 215.854957][ T9661] tc_dump_action: action bad kind [ 216.569368][ T9705] netlink: 104 bytes leftover after parsing attributes in process `syz.4.864'. [ 216.862559][ T9717] netlink: 40 bytes leftover after parsing attributes in process `syz.2.866'. [ 216.877280][ T9720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.869'. [ 216.968581][ T9719] netlink: 244 bytes leftover after parsing attributes in process `syz.4.869'. [ 216.968609][ T9719] netlink: 'syz.4.869': attribute type 1 has an invalid length. [ 217.015612][ T9717] vxcan2: entered allmulticast mode [ 217.057351][ T9725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.868'. [ 217.241023][ T9732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'. [ 217.268278][ T9734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'. [ 217.535446][ T9738] netlink: 'syz.1.872': attribute type 1 has an invalid length. [ 217.554449][ T9700] netlink: 'syz.3.862': attribute type 3 has an invalid length. [ 217.554472][ T9700] netlink: 20 bytes leftover after parsing attributes in process `syz.3.862'. [ 217.874779][ T9725] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 218.028451][ T9748] netlink: 20 bytes leftover after parsing attributes in process `syz.4.874'. [ 218.030284][ T9738] 8021q: adding VLAN 0 to HW filter on device bond2 [ 218.117584][ T9742] bond2: (slave gretap1): making interface the new active one [ 218.120992][ T9742] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 218.794856][ T9777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.876'. [ 218.832069][ T9778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.879'. [ 218.832105][ T9778] netlink: 'syz.1.879': attribute type 15 has an invalid length. [ 218.842426][ T9772] vlan2: entered promiscuous mode [ 218.842502][ T9772] macvlan0: entered promiscuous mode [ 218.992906][ T9783] netlink: 'syz.1.879': attribute type 15 has an invalid length. [ 219.144414][ T9778] netlink: 'syz.1.879': attribute type 15 has an invalid length. [ 219.193716][ T6417] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 219.193755][ T6417] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 60387 - 0 [ 219.194762][ T6417] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 219.194794][ T6417] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 60387 - 0 [ 219.194836][ T6417] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 219.194863][ T6417] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 60387 - 0 [ 219.194931][ T6417] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 219.194958][ T6417] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 60387 - 0 [ 219.195789][ T9783] netlink: 'syz.1.879': attribute type 15 has an invalid length. [ 220.076024][ T9838] netlink: 'syz.4.894': attribute type 58 has an invalid length. [ 220.108684][ T9835] sock: sock_set_timeout: `syz.0.893' (pid 9835) tries to set negative timeout [ 220.108715][ T9835] sock: sock_set_timeout: `syz.0.893' (pid 9835) tries to set negative timeout [ 220.108736][ T9835] sock: sock_set_timeout: `syz.0.893' (pid 9835) tries to set negative timeout [ 220.108756][ T9835] sock: sock_set_timeout: `syz.0.893' (pid 9835) tries to set negative timeout [ 220.108775][ T9835] sock: sock_set_timeout: `syz.0.893' (pid 9835) tries to set negative timeout [ 220.108795][ T9835] sock: sock_set_timeout: `syz.0.893' (pid 9835) tries to set negative timeout [ 220.108815][ T9835] sock: sock_set_timeout: `syz.0.893' (pid 9835) tries to set negative timeout [ 220.108836][ T9835] sock: sock_set_timeout: `syz.0.893' (pid 9835) tries to set negative timeout [ 220.108855][ T9835] sock: sock_set_timeout: `syz.0.893' (pid 9835) tries to set negative timeout [ 220.108875][ T9835] sock: sock_set_timeout: `syz.0.893' (pid 9835) tries to set negative timeout [ 222.028773][ T9892] x_tables: duplicate underflow at hook 1 [ 222.389033][ T9895] __nla_validate_parse: 19 callbacks suppressed [ 222.389050][ T9895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.909'. [ 223.519934][ T9857] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 223.902731][ T9906] netlink: 6 bytes leftover after parsing attributes in process `syz.4.913'. [ 224.218970][ T9915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.915'. [ 224.373670][ T31] audit: type=1800 audit(1790675691.318:3): pid=9926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.916" name="memory.events" dev="tmpfs" ino=912 res=0 errno=0 [ 224.447704][ T9931] block nbd0: server does not support multiple connections per device. [ 224.448036][ T9931] block nbd0: shutting down sockets [ 225.730082][ T9965] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 225.908139][ T9955] netlink: 'syz.0.929': attribute type 1 has an invalid length. [ 226.493965][ T9982] syzkaller1: entered promiscuous mode [ 226.493991][ T9982] syzkaller1: entered allmulticast mode [ 226.866704][ T9991] bridge0: port 1(wlan1) entered blocking state [ 226.866879][ T9991] bridge0: port 1(wlan1) entered disabled state [ 226.867076][ T9991] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 226.888773][ T9991] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 227.026564][ T9995] netlink: 32 bytes leftover after parsing attributes in process `syz.3.938'. [ 227.290842][T10009] veth6: entered allmulticast mode [ 227.387247][T10009] veth8: entered allmulticast mode [ 227.466813][T10009] veth10: entered allmulticast mode [ 227.518359][T10009] veth12: entered allmulticast mode [ 227.585536][T10009] veth14: entered allmulticast mode [ 227.674928][T10014] syzkaller0: entered promiscuous mode [ 227.674955][T10014] syzkaller0: entered allmulticast mode [ 227.696867][T10015] tipc: Enabled bearer , priority 0 [ 227.729190][T10009] veth16: entered allmulticast mode [ 227.759964][T10009] veth18: entered allmulticast mode [ 227.826671][T10015] tipc: Resetting bearer [ 227.882505][T10009] veth20: entered allmulticast mode [ 227.927868][T10013] tipc: Resetting bearer [ 228.049122][T10013] tipc: Disabling bearer [ 228.140642][T10047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.424011][T10059] netlink: 32 bytes leftover after parsing attributes in process `syz.2.951'. [ 228.676245][T10066] xt_hashlimit: size too large, truncated to 1048576 [ 228.953825][T10084] lo: entered promiscuous mode [ 228.954266][T10084] tunl0: entered promiscuous mode [ 228.956507][T10084] gre0: entered promiscuous mode [ 228.995249][T10084] gretap0: entered promiscuous mode [ 228.995628][T10084] erspan0: entered promiscuous mode [ 229.027366][T10084] ip_vti0: entered promiscuous mode [ 229.027792][T10084] ip6_vti0: entered promiscuous mode [ 229.028168][T10084] sit0: entered promiscuous mode [ 229.028503][T10084] ip6tnl0: entered promiscuous mode [ 229.071254][T10084] ip6gre0: entered promiscuous mode [ 229.071844][T10084] syz_tun: entered promiscuous mode [ 229.072331][T10084] ip6gretap0: entered promiscuous mode [ 229.072765][T10084] vcan0: entered promiscuous mode [ 229.116065][T10084] bond0: entered promiscuous mode [ 229.116090][T10084] bond_slave_0: entered promiscuous mode [ 229.116383][T10084] bond_slave_1: entered promiscuous mode [ 229.117473][T10084] team0: entered promiscuous mode [ 229.117490][T10084] team_slave_0: entered promiscuous mode [ 229.117677][T10084] team_slave_1: entered promiscuous mode [ 229.118295][T10084] nlmon0: entered promiscuous mode [ 229.118944][T10084] batadv0: entered promiscuous mode [ 229.227982][T10084] veth0: entered promiscuous mode [ 229.228501][T10084] veth1: entered promiscuous mode [ 229.260257][T10084] wg1: entered promiscuous mode [ 229.260744][T10084] wg2: entered promiscuous mode [ 229.261433][T10084] veth0_to_bridge: entered promiscuous mode [ 229.384680][T10084] bridge_slave_0: entered promiscuous mode [ 229.386481][T10084] veth1_to_bridge: entered promiscuous mode [ 229.389399][T10084] bridge_slave_1: entered promiscuous mode [ 229.419031][T10084] veth0_to_bond: entered promiscuous mode [ 229.444103][T10084] veth1_to_bond: entered promiscuous mode [ 229.444717][T10084] veth0_to_team: entered promiscuous mode [ 229.446887][T10084] veth1_to_team: entered promiscuous mode [ 229.447513][T10084] veth1_to_batadv: entered promiscuous mode [ 229.447929][T10084] batadv_slave_1: entered promiscuous mode [ 229.450819][T10084] xfrm0: entered promiscuous mode [ 229.451235][T10084] veth0_to_hsr: entered promiscuous mode [ 229.495402][T10084] veth1_to_hsr: entered promiscuous mode [ 229.861277][T10098] netlink: 32 bytes leftover after parsing attributes in process `syz.0.963'. [ 229.920180][T10102] netlink: 32 bytes leftover after parsing attributes in process `syz.0.963'. [ 230.096058][T10114] net_ratelimit: 2 callbacks suppressed [ 230.096080][T10114] openvswitch: netlink: Message has 4 unknown bytes. [ 230.169164][T10121] ip_tables: iptables: counters copy to user failed while replacing table [ 230.412386][T10116] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 230.571201][T10131] netlink: 'syz.4.970': attribute type 1 has an invalid length. [ 230.571227][T10131] netlink: 248 bytes leftover after parsing attributes in process `syz.4.970'. [ 230.798731][T10136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.971'. [ 230.918950][T10139] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 231.256441][T10142] syzkaller0: entered promiscuous mode [ 231.256473][T10142] syzkaller0: entered allmulticast mode [ 231.422018][T10152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.974'. [ 231.490010][T10154] netlink: 'syz.3.975': attribute type 21 has an invalid length. [ 231.490039][T10154] netlink: 128 bytes leftover after parsing attributes in process `syz.3.975'. [ 231.589298][T10155] IPv6: NLM_F_CREATE should be specified when creating new route [ 231.589651][T10155] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 231.589665][T10155] IPv6: NLM_F_CREATE should be set when creating new route [ 231.589733][T10155] IPv6: NLM_F_CREATE should be set when creating new route [ 231.589761][T10155] IPv6: NLM_F_CREATE should be set when creating new route [ 231.614070][T10155] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.974'. [ 232.580124][T10182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.978'. [ 235.932744][T10154] netlink: 'syz.3.975': attribute type 4 has an invalid length. [ 235.932768][T10154] netlink: 'syz.3.975': attribute type 3 has an invalid length. [ 235.932781][T10154] netlink: 3 bytes leftover after parsing attributes in process `syz.3.975'. [ 236.392577][T10201] netlink: 24 bytes leftover after parsing attributes in process `syz.0.982'. [ 236.401286][T10203] netlink: 24 bytes leftover after parsing attributes in process `syz.0.982'. [ 236.559220][T10194] bond3: ARP target 9.0.0.0 is already present [ 236.559250][T10194] bond3: option arp_ip_target: invalid value (9) [ 236.596947][T10194] bond3 (unregistering): Released all slaves [ 236.657364][T10208] tipc: Enabling of bearer rejected, failed to enable media [ 236.720098][ T6417] IPVS: starting estimator thread 0... [ 236.805543][T10216] IPVS: using max 27 ests per chain, 64800 per kthread [ 236.956165][T10224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.989'. [ 237.214586][T10231] 8021q: adding VLAN 0 to HW filter on device bond4 [ 237.307716][T10224] netlink: 24 bytes leftover after parsing attributes in process `syz.3.989'. [ 237.335185][T10231] bond4 (unregistering): Released all slaves [ 237.431037][T10238] tunl0: Caught tx_queue_len zero misconfig [ 237.431096][T10238] netlink: 280 bytes leftover after parsing attributes in process `syz.0.993'. [ 237.434934][T10224] netlink: 48 bytes leftover after parsing attributes in process `syz.3.989'. [ 237.526807][T10238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.993'. [ 237.550517][T10242] ip_tables: iptables: counters copy to user failed while replacing table [ 237.670496][T10244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.995'. [ 237.670522][T10244] netlink: 'syz.2.995': attribute type 1 has an invalid length. [ 237.820319][T10250] netlink: 'syz.4.996': attribute type 1 has an invalid length. [ 237.983338][T10266] block nbd0: not configured, cannot reconfigure [ 238.007815][T10266] x_tables: duplicate underflow at hook 2 [ 238.036552][T10266] netlink: 'syz.1.998': attribute type 1 has an invalid length. [ 238.036580][T10266] netlink: 212 bytes leftover after parsing attributes in process `syz.1.998'. [ 238.036627][T10266] netlink: 'syz.1.998': attribute type 1 has an invalid length. [ 238.142745][T10269] lo: left promiscuous mode [ 238.182657][T10269] tunl0: left promiscuous mode [ 238.190174][T10269] gre0: left promiscuous mode [ 238.230857][T10269] gretap0: left promiscuous mode [ 238.271866][T10269] erspan0: left promiscuous mode [ 238.302459][T10269] ip_vti0: left promiscuous mode [ 238.321708][T10269] ip6_vti0: left promiscuous mode [ 238.323419][T10269] sit0: left promiscuous mode [ 238.346420][T10269] ip6tnl0: left promiscuous mode [ 238.353016][T10269] ip6gre0: left promiscuous mode [ 238.370656][T10269] syz_tun: left promiscuous mode [ 238.379886][T10269] ip6gretap0: left promiscuous mode [ 238.381814][T10269] vcan0: left promiscuous mode [ 238.383016][T10269] bond0: left promiscuous mode [ 238.414196][T10269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.415241][T10269] team0: left promiscuous mode [ 238.437149][T10269] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.438274][T10269] nlmon0: left promiscuous mode [ 238.439430][T10269] batadv0: left promiscuous mode [ 238.441158][T10269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.441938][T10269] veth0: left promiscuous mode [ 238.458281][T10269] veth1: left promiscuous mode [ 238.488994][T10269] wg1: left promiscuous mode [ 238.511578][T10269] wg2: left promiscuous mode [ 238.518867][T10269] veth0_to_bridge: left promiscuous mode [ 238.522756][T10269] bridge_slave_0: left promiscuous mode [ 238.536813][T10269] veth1_to_bridge: left promiscuous mode [ 238.539734][T10269] bridge_slave_1: left promiscuous mode [ 238.542009][T10269] veth0_to_bond: left promiscuous mode [ 238.563920][T10269] bond_slave_0: left promiscuous mode [ 238.566641][T10269] veth1_to_bond: left promiscuous mode [ 238.571797][T10269] bond_slave_1: left promiscuous mode [ 238.572966][T10269] veth0_to_team: left promiscuous mode [ 238.597220][T10269] team_slave_0: left promiscuous mode [ 238.598505][T10269] veth1_to_team: left promiscuous mode [ 238.599824][T10269] team_slave_1: left promiscuous mode [ 238.600898][T10269] veth1_to_batadv: left promiscuous mode [ 238.602147][T10269] batadv_slave_1: left promiscuous mode [ 238.621442][T10269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.670717][T10269] xfrm0: left promiscuous mode [ 238.672561][T10269] veth0_to_hsr: left promiscuous mode [ 238.686433][T10269] veth1_to_hsr: left promiscuous mode [ 238.688300][T10269] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 238.688324][T10269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.693389][T10269] veth1_vlan: left promiscuous mode [ 238.730707][T10269] veth0_vlan: left promiscuous mode [ 238.732809][T10269] veth0_vlan: entered promiscuous mode [ 238.746427][T10269] veth1_vlan: entered promiscuous mode [ 238.765072][T10269] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 238.766394][T10269] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 238.767591][T10269] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 238.768861][T10269] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 238.877548][T10269] 8021q: adding VLAN 0 to HW filter on device bond1 [ 238.935078][T10269] 8021q: adding VLAN 0 to HW filter on device bond2 [ 238.936875][T10269] bond3: left promiscuous mode [ 238.937280][T10269] 8021q: adding VLAN 0 to HW filter on device bond3 [ 238.968296][T10269] 8021q: adding VLAN 0 to HW filter on device bond4 [ 238.972118][T10269] ip6gretap0: entered promiscuous mode [ 239.056191][T10269] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 239.548946][T10294] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 239.635037][T10293] x_tables: duplicate underflow at hook 2 [ 239.818858][T10308] tipc: Enabling of bearer rejected, failed to enable media [ 239.819057][T10313] bridge0: port 3(syz_tun) entered blocking state [ 239.819237][T10313] bridge0: port 3(syz_tun) entered disabled state [ 239.819402][T10313] syz_tun: entered allmulticast mode [ 239.863166][T10313] syz_tun: entered promiscuous mode [ 240.147157][ T3322] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.147197][ T3322] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.264111][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.264147][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.264184][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.264211][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.264247][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.264274][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.901473][T10346] tipc: Started in network mode [ 240.901508][T10346] tipc: Node identity e0000002, cluster identity 4711 [ 240.901564][T10346] tipc: Enabling of bearer rejected, failed to enable media [ 241.847982][T10365] __nla_validate_parse: 7 callbacks suppressed [ 241.848003][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1023'. [ 242.270168][T10376] netlink: 'syz.4.1027': attribute type 219 has an invalid length. [ 242.375354][T10377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1027'. [ 242.559825][T10386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1030'. [ 242.656009][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1031'. [ 242.656034][T10389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1031'. [ 246.160621][T10377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1027'. [ 246.162209][T10381] ip6tnl0: Caught tx_queue_len zero misconfig [ 246.163128][T10385] macsec0: entered promiscuous mode [ 246.188389][T10385] macsec0: left promiscuous mode [ 246.240616][T10386] veth1_macvtap: left promiscuous mode [ 246.378837][T10395] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”à�I�ƺ¥þ àø§% [ 246.550406][T10406] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1034'. [ 246.628198][T10412] netlink: 'syz.0.1035': attribute type 1 has an invalid length. [ 246.888253][T10412] bond5 (unregistering): Released all slaves [ 247.014430][T10426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.241866][T10439] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1043'. [ 247.278774][T10437] IPVS: Unknown mcast interface: macsec0 [ 247.371742][T10448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1044'. [ 248.228934][T10457] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 248.311666][T10466] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1050'. [ 248.328108][T10468] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1050'. [ 248.332943][T10470] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1050'. [ 248.438498][T10473] netlink: 'syz.2.1053': attribute type 3 has an invalid length. [ 248.568815][T10479] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1055'. [ 248.569237][T10479] 8021q: VLANs not supported on ip6_vti0 [ 248.570400][T10479] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1055'. [ 248.634128][T10479] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1055'. [ 249.057252][T10486] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 249.143415][T10498] syzkaller0: entered promiscuous mode [ 249.143441][T10498] syzkaller0: entered allmulticast mode [ 249.171950][T10497] tipc: Enabled bearer , priority 0 [ 249.172286][T10497] tipc: Enabling of bearer rejected, already enabled [ 249.190327][T10497] tipc: Enabling of bearer rejected, already enabled [ 249.190668][T10497] tipc: Enabling of bearer rejected, already enabled [ 249.190981][T10497] tipc: Enabling of bearer rejected, already enabled [ 249.191352][T10497] tipc: Enabling of bearer rejected, already enabled [ 249.191681][T10497] tipc: Enabling of bearer rejected, already enabled [ 249.191999][T10497] tipc: Enabling of bearer rejected, already enabled [ 249.192313][T10497] tipc: Enabling of bearer rejected, already enabled [ 249.192647][T10497] tipc: Enabling of bearer rejected, already enabled [ 249.192964][T10497] tipc: Enabling of bearer rejected, already enabled [ 249.193283][T10497] tipc: Enabling of bearer rejected, already enabled [ 249.249337][T10497] tipc: Enabling of bearer rejected, already enabled [ 249.597135][T10510] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1062'. [ 249.732562][T10517] netlink: 'syz.0.1062': attribute type 2 has an invalid length. [ 249.732591][T10517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1062'. [ 250.013354][T10496] tipc: Resetting bearer [ 250.396292][T10496] tipc: Disabling bearer [ 250.710897][ T6977] tipc: Node number set to 268490269 [ 250.909653][T10557] netlink: 'syz.0.1069': attribute type 1 has an invalid length. [ 251.948149][T10597] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 251.986442][T10594] sctp: [Deprecated]: syz.2.1077 (pid 10594) Use of int in max_burst socket option. [ 251.986442][T10594] Use struct sctp_assoc_value instead [ 252.211011][T10603] rdma_rxe: rxe_newlink: failed to add wg2 [ 252.363989][T10613] __nla_validate_parse: 7 callbacks suppressed [ 252.364033][T10613] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1082'. [ 252.367885][T10613] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1082'. [ 252.421148][T10613] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1082'. [ 252.807447][T10623] syzkaller1: entered promiscuous mode [ 252.807473][T10623] syzkaller1: entered allmulticast mode [ 253.229759][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1091'. [ 253.308823][T10657] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1091'. [ 253.545423][T10654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.762357][T10661] syzkaller1: entered promiscuous mode [ 253.762387][T10661] syzkaller1: entered allmulticast mode [ 253.920757][T10681] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1094'. [ 253.974608][T10683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1095'. [ 254.194196][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1094'. [ 254.451873][T10697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1100'. [ 254.451901][T10697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1100'. [ 254.709825][T10709] syzkaller0: entered allmulticast mode [ 255.232348][T10731] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 255.576049][T10750] bridge0: port 3(syz_tun) entered blocking state [ 255.576221][T10750] bridge0: port 3(syz_tun) entered forwarding state [ 255.576570][T10750] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.576748][T10750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.577059][T10750] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.577223][T10750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.796124][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.880834][T10750] veth0_to_team: entered promiscuous mode [ 255.919335][T10750] 8021q: adding VLAN 0 to HW filter on device bond2 [ 255.961845][T10750] 8021q: adding VLAN 0 to HW filter on device bond3 [ 256.027223][T10750] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 256.203778][ T6419] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 256.204700][ T6419] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 256.204747][ T6419] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 256.204804][ T6419] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 256.651149][T10765] team_slave_0: entered allmulticast mode [ 257.137820][T10776] syzkaller1: entered promiscuous mode [ 257.137845][T10776] syzkaller1: entered allmulticast mode [ 257.611892][T10797] __nla_validate_parse: 6 callbacks suppressed [ 257.611916][T10797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1125'. [ 257.846749][T10807] netlink: 'syz.2.1126': attribute type 18 has an invalid length. [ 258.045107][ T6418] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.046281][ T6418] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.046743][ T161] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.046787][ T161] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.072315][T10812] bridge0: port 3(syz_tun) entered disabled state [ 258.072904][T10812] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.074189][T10812] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.109046][T10842] syzkaller0: entered promiscuous mode [ 259.109071][T10842] syzkaller0: entered allmulticast mode [ 259.543764][T10857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1135'. [ 263.222904][T10873] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 263.827976][T10966] tipc: Enabling of bearer rejected, failed to enable media [ 264.287839][T10981] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1156'. [ 264.405971][T10978] xt_CT: No such helper "snmp" [ 264.490016][T10964] netlink: 'syz.4.1151': attribute type 4 has an invalid length. [ 264.585509][T10990] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 264.823138][T10998] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1160'. [ 265.642997][T11029] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 265.682855][T11029] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1164'. [ 265.816236][T11041] mac80211_hwsim hwsim11 wlan1: Device is already in use. [ 265.901037][T11035] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 266.021079][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1166'. [ 266.041630][T11023] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1163'. [ 266.548689][T11065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1168'. [ 266.869441][T11079] netlink: 'syz.2.1172': attribute type 1 has an invalid length. [ 268.156429][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1182'. [ 268.475517][T11126] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1183'. [ 268.807919][T11136] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1186'. [ 268.829396][T11136] IPVS: Error connecting to the multicast addr [ 268.973167][T11135] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 269.017396][T11130] syzkaller1: entered promiscuous mode [ 269.017425][T11130] syzkaller1: entered allmulticast mode [ 269.404933][T11150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1189'. [ 271.049036][T11217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1203'. [ 271.379666][T11231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.740948][T11212] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 272.244604][T11248] Cannot find set identified by id 0 to match [ 272.245204][T11248] xt_recent: Unsupported userspace flags (000000c5) [ 273.234591][ T5635] Bluetooth: hci4: command 0x0405 tx timeout [ 273.984066][T11227] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 273.985336][T11230] netlink: 'syz.2.1206': attribute type 1 has an invalid length. [ 273.985360][T11230] netlink: 756 bytes leftover after parsing attributes in process `syz.2.1206'. [ 274.179749][T11250] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1212'. [ 274.674639][T11258] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1216'. [ 274.701484][T11258] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1216'. [ 275.458347][T11289] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 275.491523][T11289] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1220'. [ 275.687489][T11295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1224'. [ 275.735998][T11296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1221'. [ 275.946534][T11303] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1225'. [ 275.946564][T11303] netlink: 30 bytes leftover after parsing attributes in process `syz.3.1225'. [ 275.946584][T11303] netlink: 30 bytes leftover after parsing attributes in process `syz.3.1225'. [ 275.951201][T11307] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 276.154388][ C1] ================================================================== [ 276.154408][ C1] BUG: KASAN: double-free in rcu_free_sheaf+0x31/0x200 [ 276.154444][ C1] Free of addr ffff888067c0ea00 by task modprobe/11315 [ 276.154462][ C1] [ 276.154475][ C1] CPU: 1 UID: 0 PID: 11315 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) [ 276.154502][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 276.154517][ C1] Call Trace: [ 276.154526][ C1] [ 276.154536][ C1] dump_stack_lvl+0xe8/0x150 [ 276.154573][ C1] print_address_description+0x55/0x1e0 [ 276.154607][ C1] print_report+0x58/0x70 [ 276.154635][ C1] ? rcu_free_sheaf+0x31/0x200 [ 276.154666][ C1] kasan_report_invalid_free+0xea/0x110 [ 276.154699][ C1] ? rcu_free_sheaf+0x31/0x200 [ 276.154725][ C1] ? rcu_free_sheaf+0x31/0x200 [ 276.154749][ C1] __kasan_slab_pre_free+0x104/0x120 [ 276.154777][ C1] __rcu_free_sheaf_prepare+0x10a/0x2a0 [ 276.154809][ C1] ? rcu_core+0x8a8/0x1260 [ 276.154836][ C1] rcu_free_sheaf+0x31/0x200 [ 276.154858][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 276.154887][ C1] ? __pfx_rcu_free_sheaf+0x10/0x10 [ 276.154911][ C1] ? rcu_core+0x8a8/0x1260 [ 276.154935][ C1] rcu_core+0x926/0x1260 [ 276.154965][ C1] ? __pfx_rcu_core+0x10/0x10 [ 276.154990][ C1] ? ktime_get+0x1f5/0x220 [ 276.155014][ C1] ? lapic_next_event+0x11/0x20 [ 276.155044][ C1] handle_softirqs+0x226/0x860 [ 276.155077][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 276.155110][ C1] __irq_exit_rcu+0xcb/0x220 [ 276.155139][ C1] irq_exit_rcu+0x9/0x30 [ 276.155167][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 276.155197][ C1] [ 276.155205][ C1] [ 276.155214][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 276.155240][ C1] RIP: 0010:rcu_is_watching+0x16/0xb0 [ 276.155269][ C1] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 48 ff 05 0f 34 e9 11 e8 4a c6 3a 0a <89> c3 83 f8 08 73 66 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd d0 [ 276.155290][ C1] RSP: 0018:ffffc90002f266a8 EFLAGS: 00000202 [ 276.155312][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 8000000000000001 [ 276.155328][ C1] RDX: 0000000000000000 RSI: ffffffff8c6dac60 RDI: ffffffff8c6dac20 [ 276.155343][ C1] RBP: 1ffff920005e4d08 R08: 0000000000000000 R09: 0000000000000000 [ 276.155358][ C1] R10: ffffc90002f26858 R11: ffffffff81b293f0 R12: ffffffff8ed5c920 [ 276.155377][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000000 [ 276.155394][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 276.155425][ C1] ? rcu_is_watching+0x16/0xb0 [ 276.155453][ C1] lock_acquire+0x58/0x350 [ 276.155481][ C1] ? unwind_next_frame+0x8f/0x2550 [ 276.155508][ C1] ? kasan_save_track+0x3e/0x80 [ 276.155532][ C1] ? unwind_next_frame+0x8f/0x2550 [ 276.155558][ C1] unwind_next_frame+0xac/0x2550 [ 276.155584][ C1] ? unwind_next_frame+0x8f/0x2550 [ 276.155614][ C1] ? stack_trace_save+0xa9/0x100 [ 276.155635][ C1] ? unwind_next_frame+0x8f/0x2550 [ 276.155671][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 276.155695][ C1] arch_stack_walk+0x11b/0x150 [ 276.155724][ C1] ? kasan_save_track+0x3e/0x80 [ 276.155751][ C1] stack_trace_save+0xa9/0x100 [ 276.155773][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 276.155796][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 276.155823][ C1] ? lock_acquire+0x61/0x350 [ 276.155848][ C1] kasan_save_track+0x3e/0x80 [ 276.155872][ C1] ? kasan_save_track+0x3e/0x80 [ 276.155920][ C1] ? rcu_is_watching+0x16/0xb0 [ 276.155950][ C1] __kasan_slab_alloc+0x6c/0x80 [ 276.155977][ C1] kmem_cache_alloc_from_sheaf_noprof+0x9b/0x1b0 [ 276.156006][ C1] dst_setup+0x7e8/0x1160 [ 276.156031][ C1] ? multi_src_setup+0x35f/0x450 [ 276.156058][ C1] mas_wr_store_entry+0x34e9/0x7cf0 [ 276.156108][ C1] ? __pfx_mas_wr_store_entry+0x10/0x10 [ 276.156138][ C1] ? stack_trace_save+0xa9/0x100 [ 276.156163][ C1] ? lock_acquire+0x115/0x350 [ 276.156188][ C1] ? lock_acquire+0x115/0x350 [ 276.156213][ C1] ? __lock_acquire+0x747/0x2de0 [ 276.156240][ C1] ? __lock_acquire+0x747/0x2de0 [ 276.156288][ C1] ? unwind_next_frame+0x1baf/0x2550 [ 276.156322][ C1] ? __lock_acquire+0x747/0x2de0 [ 276.156351][ C1] ? __lock_acquire+0x747/0x2de0 [ 276.156382][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 276.156422][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 276.156452][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 276.156481][ C1] ? __slab_try_return_freelist+0x132/0x1c0 [ 276.156522][ C1] ? __refill_objects_node+0x4bb/0x5e0 [ 276.156567][ C1] ? refill_objects+0x56/0x350 [ 276.156605][ C1] ? kmem_cache_prefill_sheaf+0x2fd/0x550 [ 276.156651][ C1] ? mas_wr_walk_descend+0x574/0x8b0 [ 276.156685][ C1] ? trace_ma_write+0x87/0x1f0 [ 276.156716][ C1] mas_store_prealloc+0x803/0xc20 [ 276.156753][ C1] ? __pfx_mas_store_prealloc+0x10/0x10 [ 276.156796][ C1] vma_link+0x259/0x460 [ 276.156826][ C1] ? __pfx_vma_link+0x10/0x10 [ 276.156858][ C1] ? vm_area_alloc+0x24/0x140 [ 276.156880][ C1] ? vm_area_alloc+0x24/0x140 [ 276.156902][ C1] insert_vm_struct+0x352/0x520 [ 276.156934][ C1] __install_special_mapping+0x1d6/0x290 [ 276.156963][ C1] ? map_vdso+0x69/0x6a0 [ 276.156984][ C1] ? __pfx___install_special_mapping+0x10/0x10 [ 276.157015][ C1] ? security_mmap_addr+0x71/0x240 [ 276.157038][ C1] ? __get_unmapped_area+0x3e3/0x450 [ 276.157070][ C1] map_vdso+0x1f9/0x6a0 [ 276.157095][ C1] load_elf_binary+0x1e47/0x28d0 [ 276.157140][ C1] ? __pfx_load_elf_binary+0x10/0x10 [ 276.157175][ C1] bprm_execve+0x930/0x1590 [ 276.157221][ C1] ? __pfx_bprm_execve+0x10/0x10 [ 276.157261][ C1] ? alloc_bprm+0x582/0x640 [ 276.157284][ C1] kernel_execve+0x8c3/0x9c0 [ 276.157325][ C1] call_usermodehelper_exec_async+0x20f/0x360 [ 276.157356][ C1] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 276.157389][ C1] ret_from_fork+0x514/0xb70 [ 276.157412][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 276.157434][ C1] ? __switch_to+0xc89/0x1420 [ 276.157467][ C1] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 276.157499][ C1] ret_from_fork_asm+0x1a/0x30 [ 276.157541][ C1] [ 276.157550][ C1] [ 276.157556][ C1] Allocated by task 1110: [ 276.157568][ C1] kasan_save_track+0x3e/0x80 [ 276.157591][ C1] __kasan_kmalloc+0x93/0xb0 [ 276.157614][ C1] __kmalloc_cache_noprof+0x321/0x600 [ 276.157635][ C1] hwsim_update_pib+0x7e/0x400 [ 276.157787][ C1] hwsim_set_promiscuous_mode+0x196/0x2e0 [ 276.157815][ C1] drv_set_promiscuous_mode+0x159/0x2e0 [ 276.157856][ C1] drv_start+0x4ea/0x1010 [ 276.157878][ C1] mac802154_scan_worker+0x8e6/0xe60 [ 276.157904][ C1] process_scheduled_works+0xc3d/0x1630 [ 276.157931][ C1] worker_thread+0xa47/0xfb0 [ 276.157959][ C1] kthread+0x38b/0x480 [ 276.157978][ C1] ret_from_fork+0x514/0xb70 [ 276.157996][ C1] ret_from_fork_asm+0x1a/0x30 [ 276.158028][ C1] [ 276.158033][ C1] Freed by task 11315: [ 276.158044][ C1] kasan_save_track+0x3e/0x80 [ 276.158065][ C1] kasan_save_free_info+0x40/0x50 [ 276.158095][ C1] __kasan_slab_free+0x5c/0x80 [ 276.158118][ C1] __rcu_free_sheaf_prepare+0x12d/0x2a0 [ 276.158144][ C1] rcu_free_sheaf+0x31/0x200 [ 276.158164][ C1] rcu_core+0x926/0x1260 [ 276.158186][ C1] handle_softirqs+0x226/0x860 [ 276.158213][ C1] __irq_exit_rcu+0xcb/0x220 [ 276.158238][ C1] irq_exit_rcu+0x9/0x30 [ 276.158265][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 276.158294][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 276.158318][ C1] [ 276.158325][ C1] The buggy address belongs to the object at ffff888067c0ea00 [ 276.158325][ C1] which belongs to the cache kmalloc-64 of size 64 [ 276.158347][ C1] The buggy address is located 0 bytes inside of [ 276.158347][ C1] 64-byte region [ffff888067c0ea00, ffff888067c0ea40) [ 276.158371][ C1] [ 276.158378][ C1] The buggy address belongs to the physical page: [ 276.158409][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x67c0e [ 276.158431][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 276.158451][ C1] page_type: f5(slab) [ 276.158472][ C1] raw: 00fff00000000000 ffff88801b0418c0 dead000000000100 dead000000000122 [ 276.158492][ C1] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000 [ 276.158506][ C1] page dumped because: kasan: bad access detected [ 276.158524][ C1] page_owner tracks the page as allocated [ 276.158533][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6285, tgid 6273 (syz.2.109), ts 107147042330 [ 276.158571][ C1] post_alloc_hook+0x1f9/0x250 [ 276.158607][ C1] get_page_from_freelist+0x2209/0x2280 [ 276.158632][ C1] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 276.158657][ C1] allocate_slab+0x7d/0x620 [ 276.158686][ C1] refill_objects+0x2d5/0x350 [ 276.158714][ C1] __pcs_replace_empty_main+0x2c8/0x6c0 [ 276.158752][ C1] __kmalloc_noprof+0x47b/0x720 [ 276.158772][ C1] kobject_get_path+0xc5/0x2f0 [ 276.158806][ C1] kobject_uevent_env+0x29e/0x9e0 [ 276.158827][ C1] netdev_queue_update_kobjects+0x33a/0x6b0 [ 276.158852][ C1] netdev_register_kobject+0x277/0x350 [ 276.158876][ C1] register_netdevice+0x1433/0x1eb0 [ 276.158909][ C1] bond_newlink+0x48/0xd0 [ 276.158939][ C1] rtnl_newlink_create+0x305/0x7b0 [ 276.158972][ C1] rtnl_newlink+0x167a/0x1c30 [ 276.159000][ C1] rtnetlink_rcv_msg+0x802/0xc00 [ 276.159028][ C1] page last free pid 6273 tgid 6273 ts 107047584618 stack trace: [ 276.159046][ C1] __free_frozen_pages+0xc93/0xd90 [ 276.159080][ C1] __folio_put+0x4b3/0x590 [ 276.159111][ C1] tun_do_read+0xb76/0x28b0 [ 276.159136][ C1] tun_chr_read_iter+0x13b/0x260 [ 276.159159][ C1] vfs_read+0x595/0xa80 [ 276.159192][ C1] ksys_read+0x150/0x270 [ 276.159223][ C1] do_syscall_64+0x166/0x520 [ 276.159250][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.159274][ C1] [ 276.159280][ C1] Memory state around the buggy address: [ 276.159294][ C1] ffff888067c0e900: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 276.159311][ C1] ffff888067c0e980: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 276.159328][ C1] >ffff888067c0ea00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 276.159341][ C1] ^ [ 276.159354][ C1] ffff888067c0ea80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 276.159369][ C1] ffff888067c0eb00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 276.159382][ C1] ================================================================== [ 276.159474][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 277.197370][ C1] CPU: 1 UID: 0 PID: 11315 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) [ 277.206596][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 277.216676][ C1] Call Trace: [ 277.219985][ C1] [ 277.222847][ C1] vpanic+0x56d/0xa60 [ 277.226885][ C1] ? __pfx_vpanic+0x10/0x10 [ 277.231436][ C1] panic+0xc5/0xd0 [ 277.235188][ C1] ? __pfx_panic+0x10/0x10 [ 277.240261][ C1] check_panic_on_warn+0x89/0xb0 [ 277.245246][ C1] end_report+0x73/0x170 [ 277.249526][ C1] ? rcu_free_sheaf+0x31/0x200 [ 277.254684][ C1] kasan_report_invalid_free+0xfa/0x110 [ 277.260279][ C1] ? rcu_free_sheaf+0x31/0x200 [ 277.265089][ C1] ? rcu_free_sheaf+0x31/0x200 [ 277.269880][ C1] __kasan_slab_pre_free+0x104/0x120 [ 277.275212][ C1] __rcu_free_sheaf_prepare+0x10a/0x2a0 [ 277.280914][ C1] ? rcu_core+0x8a8/0x1260 [ 277.285378][ C1] rcu_free_sheaf+0x31/0x200 [ 277.289998][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 277.295858][ C1] ? __pfx_rcu_free_sheaf+0x10/0x10 [ 277.301115][ C1] ? rcu_core+0x8a8/0x1260 [ 277.305560][ C1] rcu_core+0x926/0x1260 [ 277.309834][ C1] ? __pfx_rcu_core+0x10/0x10 [ 277.314540][ C1] ? ktime_get+0x1f5/0x220 [ 277.318980][ C1] ? lapic_next_event+0x11/0x20 [ 277.323899][ C1] handle_softirqs+0x226/0x860 [ 277.328733][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 277.333534][ C1] __irq_exit_rcu+0xcb/0x220 [ 277.338178][ C1] irq_exit_rcu+0x9/0x30 [ 277.342480][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 277.348170][ C1] [ 277.351122][ C1] [ 277.354070][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 277.360079][ C1] RIP: 0010:rcu_is_watching+0x16/0xb0 [ 277.365511][ C1] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 48 ff 05 0f 34 e9 11 e8 4a c6 3a 0a <89> c3 83 f8 08 73 66 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd d0 [ 277.386020][ C1] RSP: 0018:ffffc90002f266a8 EFLAGS: 00000202 [ 277.392131][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 8000000000000001 [ 277.400128][ C1] RDX: 0000000000000000 RSI: ffffffff8c6dac60 RDI: ffffffff8c6dac20 [ 277.408129][ C1] RBP: 1ffff920005e4d08 R08: 0000000000000000 R09: 0000000000000000 [ 277.416658][ C1] R10: ffffc90002f26858 R11: ffffffff81b293f0 R12: ffffffff8ed5c920 [ 277.424854][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000000 [ 277.433107][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 277.439337][ C1] ? rcu_is_watching+0x16/0xb0 [ 277.444156][ C1] lock_acquire+0x58/0x350 [ 277.448607][ C1] ? unwind_next_frame+0x8f/0x2550 [ 277.453830][ C1] ? kasan_save_track+0x3e/0x80 [ 277.458709][ C1] ? unwind_next_frame+0x8f/0x2550 [ 277.463845][ C1] unwind_next_frame+0xac/0x2550 [ 277.468817][ C1] ? unwind_next_frame+0x8f/0x2550 [ 277.474090][ C1] ? stack_trace_save+0xa9/0x100 [ 277.479068][ C1] ? unwind_next_frame+0x8f/0x2550 [ 277.484237][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 277.490866][ C1] arch_stack_walk+0x11b/0x150 [ 277.495681][ C1] ? kasan_save_track+0x3e/0x80 [ 277.500597][ C1] stack_trace_save+0xa9/0x100 [ 277.505395][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 277.510813][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 277.516322][ C1] ? lock_acquire+0x61/0x350 [ 277.521058][ C1] kasan_save_track+0x3e/0x80 [ 277.525855][ C1] ? kasan_save_track+0x3e/0x80 [ 277.530759][ C1] ? rcu_is_watching+0x16/0xb0 [ 277.535557][ C1] __kasan_slab_alloc+0x6c/0x80 [ 277.540964][ C1] kmem_cache_alloc_from_sheaf_noprof+0x9b/0x1b0 [ 277.547351][ C1] dst_setup+0x7e8/0x1160 [ 277.551746][ C1] ? multi_src_setup+0x35f/0x450 [ 277.556806][ C1] mas_wr_store_entry+0x34e9/0x7cf0 [ 277.562064][ C1] ? __pfx_mas_wr_store_entry+0x10/0x10 [ 277.567645][ C1] ? stack_trace_save+0xa9/0x100 [ 277.572623][ C1] ? lock_acquire+0x115/0x350 [ 277.577435][ C1] ? lock_acquire+0x115/0x350 [ 277.582172][ C1] ? __lock_acquire+0x747/0x2de0 [ 277.587139][ C1] ? __lock_acquire+0x747/0x2de0 [ 277.592120][ C1] ? unwind_next_frame+0x1baf/0x2550 [ 277.597438][ C1] ? __lock_acquire+0x747/0x2de0 [ 277.602584][ C1] ? __lock_acquire+0x747/0x2de0 [ 277.608000][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 277.613064][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 277.619034][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 277.624923][ C1] ? __slab_try_return_freelist+0x132/0x1c0 [ 277.630872][ C1] ? __refill_objects_node+0x4bb/0x5e0 [ 277.636376][ C1] ? refill_objects+0x56/0x350 [ 277.641175][ C1] ? kmem_cache_prefill_sheaf+0x2fd/0x550 [ 277.646936][ C1] ? mas_wr_walk_descend+0x574/0x8b0 [ 277.652257][ C1] ? trace_ma_write+0x87/0x1f0 [ 277.657086][ C1] mas_store_prealloc+0x803/0xc20 [ 277.662154][ C1] ? __pfx_mas_store_prealloc+0x10/0x10 [ 277.667735][ C1] vma_link+0x259/0x460 [ 277.671920][ C1] ? __pfx_vma_link+0x10/0x10 [ 277.676720][ C1] ? vm_area_alloc+0x24/0x140 [ 277.681447][ C1] ? vm_area_alloc+0x24/0x140 [ 277.686232][ C1] insert_vm_struct+0x352/0x520 [ 277.691117][ C1] __install_special_mapping+0x1d6/0x290 [ 277.697386][ C1] ? map_vdso+0x69/0x6a0 [ 277.701656][ C1] ? __pfx___install_special_mapping+0x10/0x10 [ 277.707927][ C1] ? security_mmap_addr+0x71/0x240 [ 277.713067][ C1] ? __get_unmapped_area+0x3e3/0x450 [ 277.718379][ C1] map_vdso+0x1f9/0x6a0 [ 277.722560][ C1] load_elf_binary+0x1e47/0x28d0 [ 277.727545][ C1] ? __pfx_load_elf_binary+0x10/0x10 [ 277.732891][ C1] bprm_execve+0x930/0x1590 [ 277.737615][ C1] ? __pfx_bprm_execve+0x10/0x10 [ 277.742601][ C1] ? alloc_bprm+0x582/0x640 [ 277.747126][ C1] kernel_execve+0x8c3/0x9c0 [ 277.751757][ C1] call_usermodehelper_exec_async+0x20f/0x360 [ 277.757856][ C1] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 277.764478][ C1] ret_from_fork+0x514/0xb70 [ 277.769094][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 277.774229][ C1] ? __switch_to+0xc89/0x1420 [ 277.779155][ C1] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 277.785804][ C1] ret_from_fork_asm+0x1a/0x30 [ 277.790621][ C1] [ 277.794257][ C1] Kernel Offset: disabled [ 277.798613][ C1] Rebooting in 86400 seconds..