last executing test programs: 5.460038185s ago: executing program 1 (id=1481): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) write$cgroup_int(r3, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x0, 0x4d032, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000001580)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) (async) socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x6, 0x4) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ldst={0x3, 0x3, 0x6, 0x0, 0xa, 0x2, 0xf1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0xa}, 0x94) (async) splice(r0, &(0x7f0000000180)=0x7, r4, &(0x7f00000003c0)=0x6, 0xffffffffffffffff, 0xe) (async) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, 0x0, &(0x7f0000000100)) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r10, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) (async) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x1a8, r10, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8c5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x33}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x138, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff8001}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4ed8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x1a8}}, 0x10) (async) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14010000120020002bbd7000fbdbdf2511bc7f064e214e24060000000500000006000000040000000100000029f000000500000007000000", @ANYRES32=0x0, @ANYBLOB="e2000000ff0000000900000009000000c7"], 0x114}, 0x1, 0x0, 0x0, 0x4048081}, 0x4000000) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) 5.216134174s ago: executing program 1 (id=1485): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) unshare(0x62040200) shutdown(0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r3, r3, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4, 0x5}}}]}, 0x34}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="a00000002100390d0000000000000000e0000001000000000000000000000000ffffffff0000000000000000000000000000000000030000020000a0ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r0], 0xa0}, 0x1, 0x0, 0x0, 0x8800}, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000008000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ffffffff0000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r10, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r11, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r12, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r8, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f01640000000500530001000000080005000a"], 0x54}}, 0x0) 3.530018365s ago: executing program 1 (id=1503): r0 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="0a000000010001", 0x7) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x40, 0x4}, 0x4}}, 0x10) r2 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="500200001600000227bd7000ffdbdf25fe8000000000000000000000000000aa", @ANYRES32=0x0, @ANYRES32, @ANYRES8, @ANYRESHEX=r2, @ANYRES32=r0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x250}, 0x1, 0x0, 0x0, 0x2004c010}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000300000004000000000000000c0002800500010000000000440002800c000280050001000000000006000340000000002c000180140003000000000000000000000000000000000014000400fe8000000000000000000000000000aa080007400000000018000680"], 0xb4}}, 0x0) unshare(0x6a040000) unshare(0x44000000) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x7, 0x4932, 0x7f, 0x2, 0x1}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7a, 0x0, &(0x7f0000000040)=0xc00) close(r1) r4 = socket$kcm(0x29, 0x7, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f0000000100)={0x2, 0x0, '\x00', 0x0, &(0x7f00000000c0)}) socket$inet6_mptcp(0xa, 0x1, 0x106) 2.895587526s ago: executing program 0 (id=1509): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x4600, 0x1c089}}, 0x20}, 0x1, 0x0, 0x0, 0x20081}, 0x8050) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, 0x25, 0x301, 0x670bd24, 0x25dfdbfd, {0x15}, [@nested={0x10, 0x131, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24008002) 2.242526833s ago: executing program 0 (id=1514): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="07000000070000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000fffffff20000b705000008000000850000006ae100009500000000000000f95a02779cb79157a88995979d85ccd5cc81f7240b72092c54e41b53dd3d61c2563e887654e5128b93"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x25, 0x5, 0xffff0000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x7, 0x20, 0xffff34a8, 0x2, {{0x1c, 0x4, 0x1, 0x9, 0x70, 0x68, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@rr={0x7, 0x17, 0x98, [@multicast1, @remote, @broadcast, @rand_addr=0x64010100, @remote]}, @rr={0x7, 0x7, 0x69, [@remote]}, @timestamp={0x44, 0x24, 0x21, 0x0, 0x4, [0x8, 0x0, 0xffffffff, 0x7, 0x8001, 0xffffffff, 0x80000000, 0x9]}, @timestamp_prespec={0x44, 0xc, 0x1f, 0x3, 0x1, [{@broadcast, 0x41e}]}, @timestamp={0x44, 0xc, 0x7e, 0x0, 0x2, [0x7, 0x2af]}]}}}}}) bind$packet(r2, &(0x7f0000000a40)={0x11, 0x18, r3, 0x1, 0x55, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xe1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x1, 0xfff3}, {0x0, 0x1}, {0x10, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x60, 0x2, [@TCA_FLOW_EMATCHES={0x5c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xfbff, 0x7, 0x6}, {{0x1, 0x1, 0x1, 0x1}, {0x2, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x3, 0xa}, {0x72, 0x4, 0x10, 0x80}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xffff}, {0x10, 0x2, 0x1, "f18d"}}}]}, @TCA_EMATCH_TREE_HDR={0x3, 0x1, {0x1000}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) connect$inet(r4, &(0x7f0000000a00)={0x2, 0x4e22, @local}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socketpair(0x0, 0xa, 0x5003, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0xb6, &(0x7f0000000300), 0x0, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x6a, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r1, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], 0x0, 0xfc, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0xbe, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000b00)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000227bd7000ffdbdf25190000004c00018014000200626f6e645f736c6176655f3100000000080003000100000008000100", @ANYRES32=r11, @ANYBLOB="1400020076657468315f6d616376746170000000080003000300000008000100", @ANYRES32=r12, @ANYBLOB="d1d7821fea99f83782b20ca8ca943f176a862e777f895fbd00002c0e4b3564121face95fe9b2228444e23546da4fd62316e9434b7cfd05bffa9369d6344031fea12a7ba44657cfbcf4931173dbea8b80e4366168fdd7930f976df0552c54ffe0d758f03bdd5af125b86248585350a2b3237a5fa99cf48dc800bf5f53859caad628fdccf04bd8f4feee"], 0x60}}, 0x0) 2.144264616s ago: executing program 3 (id=1515): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004780)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="32a4", 0x2}], 0x1, 0x0, 0x0, 0x4800}], 0x1, 0x80) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000001040)=[{}], &(0x7f0000000100)=0x41) 2.143736894s ago: executing program 4 (id=1516): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) (async) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x41, &(0x7f00000003c0)=[{}], 0x8, 0x10, &(0x7f0000000400), &(0x7f0000000500), 0x8, 0xee, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f00000005c0)={0x1, 0x1, 0xb, 0x6, @vifc_lcl_ifindex=r7, @loopback}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x4b) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x4b) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) (async) bind$netlink(r8, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000100)={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x6, [@broadcast, @private=0xa010100, @private=0xa010100, @broadcast, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x28) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000000)=0x4, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) 2.041896234s ago: executing program 4 (id=1518): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000140)={0x8, 'macsec0\x00', {'wlan1\x00'}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x11, &(0x7f0000001540)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.971038549s ago: executing program 3 (id=1519): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000001c0)={@local, 0x0}, &(0x7f0000000200)=0x14) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x3, {0x0, 0x1, 0x1}, 0xfe}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x80000000, 0x1}}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0x0, 0x859f, 0x1, @loopback, @empty, 0x20, 0x80, 0x101, 0xa}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0xa4, r1, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x76}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(r7, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32, @ANYBLOB="000000000014fb9c59000100626f6e64000000000c0002800800000000", @ANYRESOCT=r7, @ANYRESOCT=r7], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.796261805s ago: executing program 4 (id=1520): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e2a, 0xc, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x8}, 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0xd, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xffffd2ec}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x6}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) 1.794916707s ago: executing program 0 (id=1521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x226, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffff7a, 0xffffffff, 0x210, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x88, 0x88, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x0, {0x4}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x3, 0x6, '\x00', {0x3}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000640)={0x2, 0x4ea0, @empty}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0xb, &(0x7f0000000200)=0x6, 0x4) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='dvmrp1\x00', 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000700)=ANY=[@ANYRES8=0x0, @ANYRES8=r2, @ANYRESHEX, @ANYRESHEX=r5, @ANYRES8=r2, @ANYRESHEX=r4, @ANYRESHEX, @ANYRESDEC=r6], 0x48) r7 = openat$cgroup_devices(r6, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\t\n'], 0xa) syz_emit_ethernet(0x7a, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) write$rfkill(r8, &(0x7f0000000240)={0xcb2, 0x4, 0x1}, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x109000, 0x0) close(r9) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x0, 0x6361, 0x5, 0x9, 0x6}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x401}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) 1.717989918s ago: executing program 4 (id=1522): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ipvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020400) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x2, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x22428, 0x800}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x800) 1.585344439s ago: executing program 3 (id=1523): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080003000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a0004004ac92f9d35ed00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaaaa000006000200010000000a000400aaaaaaaaaabb0000100005800a000400b25b12b8e5000000140035006d6163766c616e30"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x3000000, 0x0, 0x4000001}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x3000000, 0x0, 0x4000001}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x16, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff6eb, 0x0, 0x0, 0x0, 0xa}, [@generic={0x91, 0x1, 0x1, 0x50}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa4}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x54, &(0x7f0000000480)=""/84}, 0x94) 1.408258429s ago: executing program 4 (id=1524): unshare(0x2c020400) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xbf}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x68, &(0x7f0000000200)}, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df2508000100000000000900"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) 1.403602126s ago: executing program 0 (id=1525): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c, 0x0}, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = socket$vsock_stream(0x28, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$int_in(r7, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0xfffffef8, 0xffffffffffffffff}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x2005c040}, 0x0) connect$vsock_stream(r7, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r7, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9, 0x0, 0x8}, 0x18) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x300000000000000, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000780)={r5}, &(0x7f0000002dc0)=0x8) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1, 0x2}, 0x10) getsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f00000002c0), &(0x7f0000000300)=0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) bind$xdp(r2, &(0x7f0000000140)={0x2c, 0x1c, r1}, 0x10) 1.26006916s ago: executing program 4 (id=1526): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x466d01, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r1, 0x0, 0x1}, 0x50) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000240), &(0x7f0000000300)='%-5lx \x00'}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8dffff"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x9, [@fwd={0x7}, @func_proto, @var={0x4, 0x0, 0x0, 0xe, 0x4}, @func={0xc, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x0, 0x2e, 0x2e]}}, 0x0, 0x55}, 0x28) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) epoll_wait(r3, &(0x7f0000000380), 0x0, 0x6) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) unshare(0x6a040000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES8=r3, @ANYBLOB="1e0000002000000000000000b6956b425c66da9a255ea280dbd7d30643b5bf90c14942cc3e3a2c61c5c626df6692ebc6d330180e29349612b1136c5fcb154da81e8e8914de9d7ddedc9cf9babbd502d455ea2a8307ae67bcbf3b4247d7ab211a4372e903104be7d33973a40c974889d1d1fa867dcd1b6c3f586468e22b02495bdb2404b80cc130c4b641200ce059e76234ccfd1beab17b398e18695bcf44e10df6d0e14b1d74bffecc9ed3aa5a5cfee1ba4956f875a8fe6cc933378db0cf1c", @ANYRES32, @ANYRES64=0x0], 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000080)='syz0\x00', 0x1ff) openat$cgroup(r6, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000500)={0x90, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x64, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x53, 0x5, "54936794e095b0de000b05cc2d3390c38ca8338128d64fe9efcf0000000021821a5c96ab8ac825c632f8860dbceffb35e5d4ba0e79c60f7b52fa65748f6d8c25ebc96be6b220ae83d030a17ecb2b67"}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x90}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r8, {0xb}, {0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x40000) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/89, 0x59}, {&(0x7f0000000140)=""/174, 0xae}], 0x2, 0x2, 0x3) 1.211938339s ago: executing program 3 (id=1527): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@phonet, &(0x7f0000000080)=0x80, 0x800) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x5, 0x2, 0x3, 0x5, 0x1, 0x5, 0xc7, 0x0, 0xce, 0x2, 0xb, 0x1, 0x2, 0x2}, 0xe) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = accept4$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x800) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000180)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x2}}, 0x10, &(0x7f0000000480)=[{&(0x7f00000001c0)="73d2e90775434e85347d9e39e356062f7a205fddec5c0233a25cd9498b8268bdb55a23dfdfbff9fb9a7f722f871ae8f085c0752b09cd63f97ecf6d70b4c6b1e23ad71696c1e42b0580e2a4f357fc3fc9c7c659c2b96dfb00f13423c602d6f349611398225cf207f85d606f9dac523c9f49eabb67479bd98130657a36ed72518a92c2b6334b37aee2cf1c457bb59e65629f935d596c23c442c29c94bbfe96a99acd11fc26192711d779c01b8681bf24c44d6e2972ffb78838da526425ace11207e6515467508b34d53170fa87be8d95", 0xcf}, {&(0x7f00000002c0)="1c29751c72ce3621db67bd14cd0b30d0b2aec721b3b505847a7213b00fcd53be52d89ef72250ff219d9fe29a0bfce46860611d5c115b7b3a9687ebe4ec6d640209f28cef2346e79abe1781c2d6cdff44aa35ec6a7ef6574c954560f23890a96d32b4a5e9fbd119e7e1264c4ca6854dd5c6f77888b81471695ecf5a4e58bf4c087b79a3d7d5ce33da657e8067b3812431e1b1682e6e4fc3f0908d8b2839c598badd73215099a6ba2f8876be6f7bbed73cde3a14a095c610e22a8424c470da37a32c3a00b0599f5e11208a", 0xca}, {&(0x7f00000003c0)="76f73f0e8763728453aca70d016259656a93a75273ed6fb397e092f81a87ec5bcba1275dcd89f4a94107961853bc633aeb231cc9865d013a6f85e4d8c47281dacdfbe84ae77c69503578b5cfff2ea5e280ca2d1e9c4700130775f799a482f602dd1d7cb16b24d5b517e854bcffbdf006e4254bf220b1d0b4efd60905e454791d60e66d052ebdc5f9ab810c285a44d36a100b688e28ded9d6ef11bd8058128fccf5b01a791f45c0314dfc4fcbe8b5ee1316c0b5b2", 0xb4}], 0x3, &(0x7f00000004c0)="b8a439f3b83f1d1dcc92360ff0bdf15d094cd21349d586972ea2830fce0e6a6211ac9d3a1b10f3e6ee20bc99bd321b4b33252c5e0f91a75f017e4d68e807789a13957d53df4ad6a6abb24d3aee1f2bb6da8103057886dac37c3c5001c8f45f737588d06e0fd856a3c77e2bc9ae66f56711f74f30a56cc38ca5b55c8fa5686275daa682cd05c50deecdaed94f15bd0be30a8cca5f8e62d7e47a605842b70b40ac13d20d70ce95d740af92c75337c358d88cc7917e1a63a6bb504b47eeb122ad0e8f6a4d7969e0d0f7ed367ab342abe5a6e65fd090c471ea34062a03967a4b309430cc5c74e66f12de9ae0be17554a928edc738b2f9409215c", 0xf8, 0x808}, 0x4000000) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000600)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000640)=0xb07, 0x4) getsockname$inet(r0, &(0x7f0000000680)={0x2, 0x0, @loopback}, &(0x7f00000006c0)=0x10) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x50, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x64}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x20000010) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x40, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000880)={'syz_tun\x00', @local}) close(r2) bind$rds(0xffffffffffffffff, &(0x7f00000008c0)={0x2, 0x4e20, @local}, 0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000900)={0x0, 0x1ff}, &(0x7f0000000940)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000980)={r4, 0x6}, &(0x7f00000009c0)=0x8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000a00)=0x1, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ac0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r5, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x40) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ec0)={0x1, 0x58, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000f00), 0x4) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000fc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3}, 0x50) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001080)=@o_path={&(0x7f0000001040)='./file0\x00', 0x0, 0x8, r1}, 0x18) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x12, &(0x7f0000000c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x90}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@jmp={0x5, 0x1, 0x0, 0x6, 0x6, 0xfffffffffffffffc}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000d00)='syzkaller\x00', 0x6, 0xcc, &(0x7f0000000d40)=""/204, 0x41000, 0x40, '\x00', r8, 0x0, r9, 0x8, &(0x7f0000000f40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000f80)={0x2, 0xf, 0x2, 0x100}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[r10, r1, r11, 0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x94) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000011c0)={@multicast1, @rand_addr=0x64010102, 0x0, "a6e8092041582e52c8a2d3f3d602bb5db211826be635629538b17fdc8b06f6d3", 0x0, 0x0, 0x0, 0x15}, 0x3c) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x20, r5, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0xc}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x1) writev(r11, &(0x7f0000001500)=[{&(0x7f0000001300)="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", 0xff}, {&(0x7f0000001400)="265f19c80fc9cd7f1f128d587dc0b7bedd329c7dae5f4aafae80f1570e68baf66f058a225c1eb0dfb39b11ac909dbc254e70601974f531f8e40c251591908c9d649abf6d0776d6bc3b2dcae45d6361ec7394c6f73c9cb62d0a9762f59b3d8630ee681ce4f3bf99015b6cb8fdacac86d6cde07867af485b44eaa5ffd7e7af80ce1fea87d274b25fa8f512332456aabaaeded4b0cccd4470f04fa0ac82030d51b129d3c50f433f6b521478e6de529a2428952ce733f237c30d2d0479f029aaa6e810f3b0f63cc27621fbd3ed7127a0dd9958cabad43f47e762b4e9ff9cf6539ce19da658e304d68a22", 0xe8}], 0x2) sendmmsg$alg(r0, &(0x7f0000002080)=[{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001540)="cfcc8ba6d453f4a8daaab7b8dc177ac1181fd337c79e9432ddd19c343e7b44f6f6db282fe40cb3cea52449890f87158eebe1ec5612c893398f4d96f86ad2217b264b9118d3d2bb234994b26e7951e44f8a57e2dd4a94893ab85e67e3f4a45c741ea56e05a993c67105176255d2ad980cc2fd994be9e471f047b7608ee49b4d4a59a21ddbc73808056a6d55dbf5eba327e7de360129d85a4198c5675f14e699a16adac560d455c34d001e4bfca15ae59e4561b669c99a8c14cb68", 0xba}, {&(0x7f0000001600)="ed01ff997490a9e5843c2baba61fc81cf4c905d5d8183197a9604e9fa3315380f8ca5eb97fd61b9ea9ca6edee36090cae8c9bea4c956f628983a659237b6d3abbc24ce9060c5bc27131fc393301809d84b31dca077a0f2c6f16f276ad5e9fc1c826532a563f5525a55b4a3f538aec367bf5f3519fe845b53bdcfa3e78d013fa799c4802f5141f01f3a3bf9f9380c959c845675", 0x93}, {&(0x7f00000016c0)="c9667a689c1cece09227617843695367acaacab49cc810dc289bb3828e109c53ce4f584246635c25ca10c91d9d97e459b7fcc9970c02f448fd4a0ae9beab7317120cc01c152b80fee56793503de655e5acd8e513880c7c23cbc000592d6762176117025f5bb0f5ba8982d1484eba2a557503caf5f9cdc814ef3f69bbe1770124d8052a6fe22b828ece48eb14b48da84cca9040", 0x93}, {&(0x7f0000001780)="c3f9db0e2fd79f0f864c1b8c8ef96b1b61e66ee17b119d83b40d96617aacb24c718a51f7d35151b5c452fd7f3540233d8459c3afc05c248d97b46268e7ec4315dcfd8ad9b5da2fed7aa23d39bd0a9ea2922f015f485d068efd035be67545a89698cc85eaa0789ef65ecdbd441a5c20f3631e1bd63a3f25423910671c5b234246d4a5", 0x82}, {&(0x7f0000001840)="2390633c8a2f4a3ffc916e64451aa3e0aa786a39cb38da0226e76bace534512658087f843b6c7f8f02275998ecb2d06b860f093d8cebe5c8e365a9deee77374ce2db95c9322f416120cce77460186f1c7478d3d667c0f4de746472124b8d361bde0b4b53753e5974bb3db02d56f98a8db4148394dcec100e30da4f805d84baec12fc92c3aa75a2eb823638e9220dc2a7d0417ad4e621704fdbf98a675e88c8c71a57", 0xa2}, {&(0x7f0000001900)}, {&(0x7f0000001940)="8e771a8e2a1e3ef9d2ebc6466e3882bc60ecca5c4c76b879c631fca5c84b0bc9368be6462f7e83a31493aec39540e7042ce8810222f9ea280701d0e4f42bf320dbd7e04d6b77410f6e09febc1bf5d063ddf0500b6cf7670717df9de22cd6598b828e1830d0c13e0fd4c9f4598ee584ffe2f2ca1c27adda0315c477ee941ff6aaa60e746dec8dce15a68859c0755aa7bb88fc5f662d893726e134799d06f2664d640052897016d9af904b2efd75ddfaf5fde8ddc39cfbccf1aa841426a4b7193624d7c198dc5b5754b976f0a50b7107f181bd31f82ba103734b60889aa6e9ac2d235b5a4d66c5170b2af951777082", 0xee}], 0x7, &(0x7f0000001ac0)=[@assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0x9}], 0x30, 0x4}, {0x0, 0x0, &(0x7f0000001b00), 0x0, &(0x7f0000001b40)=[@assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18}, @iv={0xf0, 0x117, 0x2, 0xda, "4aedea1f7362f19e8b6f582a9561cd2e53d9486f598caa3bb84ee0223dad5a42241afbde21cfe06f474967700475fbc68bb5dd7b55a59fd328496a9e634b936024ce51b99a2a11871b74aacf1cb8c32ba477514595be45cf976a16bbaa77183fc1439696c8a28e9d8484f91d87f63709a3c17a4a7a953b533da640f2d72d46b49de6277db97504db7b5f7d8203c3764c236e8905224d8990abd4f7461ab8fc40f387b92cc01df7866c4d22de3fdb766a15bde05f7fba401e9084a6cd2d82b05c38fa2b118b010918db561dabfb0d8983559d14868cb18f93cc39"}, @assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18, 0x117, 0x4, 0x8f}, @iv={0x40, 0x117, 0x2, 0x2a, "db97341d9e3ad227fc381d6128f79209945b639789972808f83c0e5edec9d6308192cbed0cccdce58273"}], 0x1c0, 0x2000004c}, {0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001d00)="4f71abdaf9aea7f039cb8f53c4c5d3b3ab443417eeb77488dc5c1e7e", 0x1c}, {&(0x7f0000001d40)="8a3b568bfe5177c12087967ff5274a3f9d505ef4d1b6de99943f4d8cacee85d9d77dccce771e87a7f307b0fd39da88b6a53d9b7113338a12b833e69c50", 0x3d}, {&(0x7f0000001d80)="1c", 0x1}], 0x3, &(0x7f0000001e00)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0xf0, 0x117, 0x2, 0xda, "56e9069a605eaed017a9dca4b9852a8dc5344d169eb1c0ffe9518875cfb842f13ae2035200552a614e93fd70339b432838b5f86f86b8478a06774183a6e222eebdfdf2a307ecd9168fe556aa5f9e4da24415bd3961a1a6e1645f1f9f0f3f15ab06a9ceb2c36c61006ff5b67a962a7bb5ae0d06346999fb15189490b5382b7c439c96f985b2825da5ee263a7292f3f0ac6d1a3887051ac8b99d94cf5655fc00b9b6404e2efe401e1c37c93e9f884a4be164d41875f354d22b90571d35de10d636686b118ab0ec2df5176daaa2578155c4d3ce70ba9829fb9aad20"}, @iv={0xf0, 0x117, 0x2, 0xd7, "429990b0c6e964faa65e3c15c086f8ab69037688efb7030b4bdd6e995c9e297503c647c11e04129c4760a46e69d756e82dac367fcd3b4b2f1ea37d6881bf984f319e694e09cbe4de403f5d846e4ba6fcc5f04c94fc5c4dcd95917d9ef4d3f04761e2f7c61fdd7628fbbd230565f5c38769596e122b87f7c655756ac164dd9dc5189b8d95cccee9fa7e992d4db281fddeebb580c0c48a2e317eac8091f49c83a818dad8eda83818c06aa313f16fb23bb045b500983aab7f116312f171286f000fa4edd66c319edf39e9964a14a0a8437a557e9561c44ca1"}, @assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x258, 0x4000004}], 0x3, 0x8000) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000002180)={0xffffffffffffffff, r12, 0x0, r12}, 0x10) 1.136872527s ago: executing program 2 (id=1528): r0 = accept(0xffffffffffffffff, &(0x7f0000000e80)=@phonet, &(0x7f0000000f00)=0x80) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000f40)=0x5, 0x4) (async) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000f40)=0x5, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000e40)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) socket$nl_rdma(0x10, 0x3, 0x14) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a11000005"], 0x18}}, 0x0) accept4(r2, 0x0, 0x0, 0x0) (async) r4 = accept4(r2, 0x0, 0x0, 0x0) getsockopt(r1, 0x5, 0x4, &(0x7f0000000640)=""/30, &(0x7f0000000e00)=0x1e) r5 = socket(0x0, 0xa, 0x8) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000005c0)=@nat={'nat\x00', 0x19, 0x5, 0x70e, [0x2000000006c0, 0x0, 0x0, 0x2000000009d4, 0x200000000a04], 0x0, &(0x7f0000000580), &(0x7f00000006c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x9, 0x60, 0x22eb, 'bond_slave_0\x00', 'ip_vti0\x00', 'gre0\x00', 'veth1\x00', @multicast, [0x0, 0x0, 0x0, 0x0, 0xff], @random="c100abe0255e", [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0x6e, 0xd6, 0x10e, [], [@snat={'snat\x00', 0x10, {{@remote, 0xfffffffffffffffd}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffd}}], @snat={'snat\x00', 0x10, {{@remote, 0xffffffffffffffff}}}}, {0x3, 0x8, 0x1c, 'geneve0\x00', 'vlan1\x00', 'macvlan1\x00', 'batadv_slave_1\x00', @random="3f173cf2d0dd", [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], @broadcast, [0xff, 0xff, 0xff], 0x6e, 0x19e, 0x1d6, [], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0xff, 'system_u:object_r:crond_exec_t:s0\x00'}}}], @arpreply={'arpreply\x00', 0x10, {{@link_local, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x5, 0x5a, 0x200, 'wg0\x00', 'ip6_vti0\x00', 'ip6erspan0\x00', 'vlan0\x00', @broadcast, [0xff, 0x0, 0x0, 0xff], @random="0b238dc6fd6e", [0x0, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x9e, 0xd6, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x7}}}], @arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{0x9, 0x0, 0xfbfb, 'team_slave_1\x00', 'tunl0\x00', 'netpci0\x00', 'bond_slave_0\x00', @remote, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0xd6, 0xd6, 0x10e, [@connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x2, 0x1}}}, @cluster={{'cluster\x00', 0x0, 0x10}, {{0x8, 0x6, 0x2}}}], [], @arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffd}}}}, {0x11, 0x0, 0xf8, 'veth0_to_batadv\x00', 'syzkaller1\x00', 'pim6reg\x00', '\x00', @random="0885c40ef2a9", [0x0, 0x0, 0x0, 0xff], @link_local, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0x116, 0x14e, 0x186, [@ip6={{'ip6\x00', 0x0, 0x50}, {{@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xffffff00, 0xff000000, 0xffffff00], [0xff, 0xff, 0xffffff00, 0xff000000], 0xfd, 0xc, 0x0, 0x21, 0x4e24, 0x4e21, 0x4e22, 0x4e23}}}, @cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x3a80000}}}], [@snat={'snat\x00', 0x10, {{@random="e55fc5cd5c23", 0xfffffffffffffffe}}}], @snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffe}}}}]}]}, 0x786) sendmsg$netlink(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)={0x10, 0x11, 0x8, 0x70bd2a, 0x25dfdbfd}, 0x10}, {&(0x7f0000000200)={0x10, 0x41, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x10}], 0x2, 0x0, 0x0, 0x4000880}, 0x801) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000240), &(0x7f0000000540)=0x4) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000300)="c0b4c731de2d0d6e456617a686d29013d46c94017674cab566180803547b5356a8c29f6b3fe24caabc840f5d5ffac60b5beebd70586a47b3795f3f901685bc905bd0ce0060e4cbce357f8d65b5533055cbecf4ea1d495377c64f5d9e201cf25c58fe730dd09fb51f429582215b5670da68550e54ea28ce687e1bce4dd65f5da03ed8092ed6afc26d3f65a1a4e1", 0x8d}, {&(0x7f00000003c0)="8f401a33af08988f27fafbac525466a9e3676df9310a3b39d15d03f5fb2cdbe93f46fc35b07beb6e26c4c933cc46139895942d45f6927a1ef8f7cb70d8682c3f27b11e1e46cbd04ad13a76b2deb3a66a919d7e1ca1fef22b9cf1cf66ea749a816f02c01597a633c0dc6dd1fa2bc72f056044b91ae89a696848b52759f8adcfbcf3499022e33e8953a1084ae517408ab9e3b3c923b3c4012252db3aface47f2e2d8771d3aa7742e27798e", 0xaa}, {&(0x7f0000000140)="bdb2e33b605c7a41b8eee502dc51cc187844d5a9be1aa5853b98daa1b4db9375e2607b6c75be77c276808029d93b2a5cd6d7dff59d9f89aa19eb2aee0b46e659bb0eb538f3b87097db1d3276075dd8ed43d76ad7486cce5eab78e0fc23e8b45e58b2401162f0c0455ad033510ea3e6225fcc0f44330dd593a27cfdb8490e", 0x7e}, {&(0x7f0000000480)="3b00d27618f53811405ee49459d45a153fb89627da1031de855c5e07fe9bda9045d9c455462861b4bcd191ddae7a966ccef300448a907cf622963456944b53dcdd3c704d81a8f46b4309df6439f89ae25c7a94b115c17dd700e0845b467ef6fbae4526fc4f1d47928b37194a2ddf06dc8cee68a0d8e9bd9c5be2bad92cc8574e6e2f", 0x82}], 0x4, 0xfffffbff, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000300)="c0b4c731de2d0d6e456617a686d29013d46c94017674cab566180803547b5356a8c29f6b3fe24caabc840f5d5ffac60b5beebd70586a47b3795f3f901685bc905bd0ce0060e4cbce357f8d65b5533055cbecf4ea1d495377c64f5d9e201cf25c58fe730dd09fb51f429582215b5670da68550e54ea28ce687e1bce4dd65f5da03ed8092ed6afc26d3f65a1a4e1", 0x8d}, {&(0x7f00000003c0)="8f401a33af08988f27fafbac525466a9e3676df9310a3b39d15d03f5fb2cdbe93f46fc35b07beb6e26c4c933cc46139895942d45f6927a1ef8f7cb70d8682c3f27b11e1e46cbd04ad13a76b2deb3a66a919d7e1ca1fef22b9cf1cf66ea749a816f02c01597a633c0dc6dd1fa2bc72f056044b91ae89a696848b52759f8adcfbcf3499022e33e8953a1084ae517408ab9e3b3c923b3c4012252db3aface47f2e2d8771d3aa7742e27798e", 0xaa}, {&(0x7f0000000140)="bdb2e33b605c7a41b8eee502dc51cc187844d5a9be1aa5853b98daa1b4db9375e2607b6c75be77c276808029d93b2a5cd6d7dff59d9f89aa19eb2aee0b46e659bb0eb538f3b87097db1d3276075dd8ed43d76ad7486cce5eab78e0fc23e8b45e58b2401162f0c0455ad033510ea3e6225fcc0f44330dd593a27cfdb8490e", 0x7e}, {&(0x7f0000000480)="3b00d27618f53811405ee49459d45a153fb89627da1031de855c5e07fe9bda9045d9c455462861b4bcd191ddae7a966ccef300448a907cf622963456944b53dcdd3c704d81a8f46b4309df6439f89ae25c7a94b115c17dd700e0845b467ef6fbae4526fc4f1d47928b37194a2ddf06dc8cee68a0d8e9bd9c5be2bad92cc8574e6e2f", 0x82}], 0x4, 0xfffffbff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01e3170000000000000008ebcfee4e0168e5"], &(0x7f0000001f80)=""/202, 0x32, 0xca, 0xa, 0x2}, 0x28) 1.067785758s ago: executing program 3 (id=1529): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000001c0)={r5, 0x6}, &(0x7f0000000200)=0x8) r6 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) r7 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r7, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x24004059) close(r7) sendmmsg$inet_sctp(r1, &(0x7f0000000fc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x44}, {&(0x7f0000000000)=@in6={0xa, 0x4e23, 0xf, @mcast2, 0x3b4}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000002c0)="8d8847a780c2f111d138afa30a354fee4f7495226de7753d05be9cd20a43f174f38a80ff9a864f34914e99141c753b51a2ff2567b1f3a705f50e8639e8e9c700a0647f7af2faa2481aadb8d835d7cf7b56405852c8e301f909d74db0d9d18a6064f1aef6d871f4241e1f64556ff11e265a61df177811a783380b0b0d2af8be77dba8aefaa7eb57038e32868e1ac944a24ac4b5fa95532a0937e1fa51dcb84bb2866726f4eaf1dc92ffdfecdc63127526fb596ddc93616ca8776156d480f79f78774bc8a25a0d89d2", 0xc8}, {&(0x7f0000000100)="b1db8bc66a4619b9b94c0b23fdf999da0f5a94c919e7953b28626fbaaa5fd10dbda59354c5b423c7f86a837a43adc2014aeea6603bd2e18c9d92de4100621c5be1fbf9254ecb7a448d72eb840dd39765973e8f14d189bdfae2e38dc3eec0746d13ba8ea71b5fa6331d80cfe4370e12e57ddde3", 0x73}], 0x2, 0x0, 0x0, 0x804}, {&(0x7f00000001c0)=@in={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000000900)=[{&(0x7f00000003c0)="cc78adb7289e3a9982f3a6f713bb0d4a818cef6e634b2f78b84688a563c37982846a154b92b1af793a425bb12d4bfd88e64a792938a30a24b8847de489802a0fb8e5e2620a6c98b32d96a397fa41b9acff01430a056a62aa815441073460eed318ec0c4b29ecb1707aff4616e6926454efe5e30aa4912b6d8cd5b11ffe56d5e5e6c3ff3522400f59b069d48bd62f3cf7179fc30ad76e67bf9f3686c3d74cdf21582e84a20de4ddf09e", 0xa9}, {&(0x7f0000000480)="08205d23561ce6eb4bc72c1cc051e9996baa46a06b542782dfe7ce821f076938a5b1740d7efc1e877315c4e704a29f36e2ce6afc9da3a2a5cd32dec2c3a6d889567060efd6e0809f720af3d91371be4f745e65a381fc2ac66083dd6979a9cf6d33fe502f1e619b1a9e9edc3f571fc5b13b053001d5018b89f5b380c1c7515ba41b9e151b81a9d2c73f3ab7a488c17b449af44b9eed66c56c23daec24d2705db2bc58fc81501137", 0xa7}, {&(0x7f0000000540)="65a18a7a477d6884a21d9ead", 0xc}, {&(0x7f0000000580)="f98e80c9e5a9b0f953874835f704845cd16fe97b850c700ea50a40fd9ddf8af6fc94b99f1263cce943f91fa99cbe95884c4a463aabbbb14422e2c25e3d94adfbb300679f8c13ead64c72db7bc60b1703798c5452f5ba929ea798d46e1ebf41f9d49aef9d3402c52531148db9250e738d03e5c71cf916c3cd6ecb5ba2", 0x7c}, {&(0x7f0000000600)="f62ec024b9125f44c936941e1f649c0c2847758c85c5f0c630b6ab33d0627d137eb30b56f66e53ba4899ad311dc58a9cb2e490b000de410dfd47d0daed18447ea8628c9db4c4327f3fe2208fa7091e0c59d9ea8ed3accf388815ff6a54cad238965bbfa78bdc08ece1b0ed012134045738ba1be64f356e0c149c01c9fafdc85f", 0x80}, {&(0x7f0000000740)="e89431725b3975ce23a98d1c5b67ac7147c7528b0c7472d50bb34b4396360b4ba92cd73739bb0c2df08b77c7182e00214c3e1df7ec4d1353b2058cfec801210077dddd42b5f2fdcee1c3a14799175e5e82bce094474ac4208ac787113504b4ea0653990ba02503fc87ba512863d2244127c44e53011cfb16fb50b95a31b49c5c9530f185edf20a65e2fb66c4fcef5eee5f5a40d63690a958ec4da307aaf105381472986cf9", 0xa5}, {&(0x7f0000000800)="014fb74ec8dbaad0cca7e008be648f39188544486a848067afb76917e6bf71544ed70ba0b8946c49913f53fb144ea9dfbd334aaeeb3e389cae35ab3626a9e905d64ad46a44438a35d3184a2c7c4a46536efe4bfb64da1524948f1fa3a20b64cb1f2a951867fe25c0fd075ae2ae606976a4253517110ee76d389922f6a6ab898e57b4861282d0edb0d46ba71cd22e06aa1b5650e3eaf21a25f3bd9bcfb3454995a3c33c3644d467c28af2245bab39941a6c8fbbbdc492a6df286866908d9ad20d5681cb0c6e06739e658c60091a462f44f9259adc1f6067dee1", 0xd9}, {&(0x7f0000000680)="3c45151ac0970e4ee37efee39641eca2ca0fd4ccc4209013c0b0", 0x1a}], 0x8, &(0x7f0000000980)=[@dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @authinfo={0x18, 0x84, 0x6, {0xffff}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x4008, 0x6, 0x665, r5}}, @init={0x18, 0x84, 0x0, {0x5, 0x0, 0x7, 0x40}}], 0x68, 0x40810}, {&(0x7f00000006c0)=@in={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000a00)="f08beee465364cbe4d679d3694e8d93fd8b4c72365b2daa7996ff70ae2450ccc22de010362e4324c1f859027d6cdec1e9fee647f764e056a1b978e712bd0eb9a0644d9f5d6989ed96bc627fea48eb01ad6334118358bf79164e7434e20f7c6e6f3491a10ee39d81509cc33ae03746c69a4c2533b568d4bf24568f3406e58201174a5f857bc834d471bf216b8caa6812100f96f55ae31711a049c06801f3561ff0d712def9609", 0xa6}], 0x1, &(0x7f0000000b00)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x8001, 0x0, 0x2, r4}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, '\x00', 0x43}}, @sndinfo={0x20, 0x84, 0x2, {0x117, 0x20d, 0x1, 0x26d7, r4}}, @dstaddrv6={0x20, 0x84, 0x8, @empty}], 0xa0, 0x80}, {&(0x7f0000000bc0)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000000c00)="57b6384e96b31b178fb4128af38ebd17f0ac3894ad1c5d68de48ea5057a0e314f12de2069550d283c0b15ee2172325c3ad717edd62ad0ce5008fded45398f6fe4e977b77c16363f405f3dd006a15cf4c62394a7bbd508c0226c502fa5f44e0ac1f3cffa64e005408900694091b55c870ac1947f019d78e6e42dc1d8eb3ced188c584bae16afaf2c5fdb6e2f242beea83d0c502522da7ef68e5cebe013e11ef18b9e2e39f3494a81628e2ef3d2b618362e1beda824c5992373515a5ee382eaa3c98ec0edede3af90720e964699a2e5a09eab081d88eb02cf3968f325d7a3ceb61cf30e2c40e489f23591c4d0e705fa8c98491df", 0xf3}, {&(0x7f0000000d00)="b41ed307bc765fe89ceb2fb5fbbb98c94c17609106b7493b94e120fb136b0e35932d866b14fc044d34e441cb048db7e4d627ef04f3fa3ce1f84ef0b8c653584ab0382d21b2301166b7ce19546109cb47124331bfdd4571892ddfd78e70303ee4c815ceac8d4cf875f815582e5c297cc0b2713572e4888a871aae983ddbed0acd76a20dfb212b988d80995b471f8cc90eae270d1c48e3b5b1725f39df5aee2283307dbd8e1bc93591dfe149", 0xab}, {&(0x7f0000001100)="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", 0x10c}, {&(0x7f0000000e40)="da0755075b23bf645bd250ea3672b0c0725d111a2763ad65cca9916bd46632c8c0fc959c4f34ba10450dab775cada81dd209ee94b6c022bb383743009075c9d6e3743cdd3740ec2292c54e3a4ece70113b23b14b8772c74df0e7ed943be0ca130a1e7ff4b959d53ce6f68b447d85950fdc07e359fc57c9e03781dbb58de9c190c20946da2990b920c33c296e9b0bdc7a44713edd5037546cdd384fbd512e0ada248239d6f4afb6ebf09b", 0xaa}], 0x4, &(0x7f0000000f40)=[@prinfo={0x18}, @sndrcv={0x30, 0x84, 0x1, {0x100, 0x0, 0x8002, 0x9, 0x2d4a0436, 0xa, 0x0, 0x5, r4}}], 0x48, 0x2}], 0x5, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x98, 0x20, 0x8d, 0xd, 0x0, 0x2, 0x0, 0x7, 0x4, 0x0, 0x0, 0x2, 0x4}, 0xe) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvmmsg$unix(r1, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000200)=""/160, 0xa0}], 0x1}}], 0x1, 0x2, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001640), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000080)={0x50, r8, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x114}, 0x20008004) 927.180128ms ago: executing program 2 (id=1530): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) getsockopt$inet_tcp_int(r1, 0x6, 0x18, 0x0, &(0x7f0000000300)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x88c, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0xffff, 0xd, 0x81, 0x7, 0x6, 0x7, 0x9, 0x4, 0x4, 0x6, 0x3, 0x5, 0x3, 0x6, 0x6, 0xffffff8f, 0x6, 0x4, 0x6, 0x0, 0x20, 0xb, 0x5, 0x5, 0x2, 0x62, 0x9, 0xfffffff8, 0x6338, 0x70, 0x7, 0x9, 0x8, 0x9, 0x7, 0x80000000, 0x7, 0xfff, 0x2, 0x9, 0xfffdfff9, 0x6, 0xfffffffe, 0x600000, 0x6, 0x1, 0x8, 0x1, 0xbc0, 0x9bf1, 0x5, 0x2, 0x0, 0xe, 0x9, 0x1ff, 0xb9, 0xc741, 0x6, 0x5, 0x1, 0xed, 0x1, 0x8001, 0xb, 0x5b96, 0xffff, 0x2, 0x20000000, 0xff, 0x1, 0x4, 0x9, 0x401, 0x2, 0x1000, 0x101, 0x50, 0x4, 0x2, 0x1, 0x5, 0x5, 0x7, 0x8a6b, 0xfffffbff, 0x4, 0x2, 0x1, 0x9, 0x6, 0x2, 0x5, 0xffffffff, 0x80, 0x8, 0x0, 0x9, 0xfffffff4, 0x3b96, 0xfffff800, 0x8, 0x3, 0x2000f, 0xf8b, 0x10001, 0x3, 0x2, 0xa78, 0x3, 0xcb0, 0x6, 0x9, 0x9, 0x0, 0x7, 0x7fffffff, 0x7, 0x9, 0x0, 0x40, 0x8, 0x8, 0x5, 0x8c, 0xaa93, 0x800, 0x3, 0x9, 0x10001, 0x9, 0x1, 0xd12, 0x0, 0x23487474, 0x3cd2, 0xec19, 0x7, 0x5, 0x5, 0xb1, 0x2, 0x6, 0x9, 0x2, 0xaa83, 0x40, 0xff, 0x9, 0x9, 0x1, 0x5, 0x0, 0x2, 0x1, 0x4, 0x9, 0x4, 0x2, 0x7, 0xffffffff, 0x1, 0xd76a, 0x6, 0xfffffff6, 0x4, 0x1, 0xfffffffd, 0xfffffffc, 0x50, 0x7359, 0x8, 0x7, 0xb, 0xa, 0x2d5, 0x6, 0xf, 0x1, 0x773a, 0x6b7b, 0x10001, 0x3, 0x4, 0x5, 0x7, 0x4, 0x6, 0x2, 0x5, 0x0, 0x6, 0x3ff, 0x9, 0x5, 0x5, 0x0, 0x7, 0x8, 0xffff, 0x3, 0x4, 0xa, 0xae2b, 0x1, 0x6, 0x1a71, 0x0, 0x10001000, 0x0, 0x3, 0x7, 0x1, 0x1, 0x3c34, 0x6, 0x10000, 0x5, 0x7fff, 0x0, 0x8, 0x3, 0x3, 0xc, 0x100, 0x0, 0x2, 0xb, 0x5, 0xc8, 0x557c, 0x9, 0x8, 0x0, 0x3, 0x80, 0x8000, 0x7bc, 0x1, 0x8, 0x6, 0xe, 0x5, 0xfff, 0x9, 0x5, 0x279, 0x8000, 0x8, 0x9, 0x1, 0x80000000, 0x3, 0x9, 0x1ff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0xd, 0x7, 0x9, 0x6, 0x0, 0x4, 0x81, 0x1, 0x100, 0x7, 0x3f, 0x3, 0x8, 0x9, 0x2, 0x6, 0x6dbf, 0x8, 0x5, 0x12c, 0x3, 0x5, 0x5, 0x7, 0x100, 0x7, 0x8, 0x9, 0x0, 0x3, 0xffffffff, 0x200, 0xfffffffe, 0x328d, 0xfffffe01, 0x9, 0x8, 0x3, 0xffff8000, 0x4f, 0x8, 0xd, 0x3, 0x8000, 0x2, 0x17, 0x8, 0x8, 0xc, 0xffff, 0x0, 0x3, 0x2, 0x42f, 0xffffff2c, 0x5, 0xbd, 0xe0, 0x6, 0xc26, 0x8e, 0x6, 0x3, 0xe, 0x1, 0x800, 0x1bf, 0x4, 0x5, 0x4, 0x8, 0x7ce7c36c, 0x3, 0x1eb, 0x10001, 0x8, 0x5102, 0x6ce, 0x6, 0x79, 0x2, 0x5, 0xfffffff9, 0x2, 0x4e30, 0x6, 0x6, 0x2, 0x90, 0x2, 0x2, 0xc80e, 0x4, 0x5, 0x450, 0xe0, 0x9, 0x5, 0xd, 0x5, 0x5, 0x9, 0x1045800, 0xfffffffd, 0xffffffde, 0x6a4, 0x5, 0x9, 0x6, 0x1f, 0xb89, 0x6, 0x7, 0x1ff, 0x6, 0xfffff77b, 0x3, 0xffffffff, 0xfffff400, 0x6, 0x6, 0x8, 0x9, 0x2, 0x7, 0x401, 0xa7d, 0x6, 0xfffff9f3, 0x1, 0x9, 0x1, 0xb4, 0x2, 0xc, 0x8, 0x7, 0x0, 0x5891, 0x8, 0x7, 0xb, 0x0, 0x8, 0xb, 0x0, 0xff, 0x4f, 0x8, 0x33f, 0x70fc7f4f, 0x0, 0x4, 0x0, 0xc, 0x9, 0x5, 0x6, 0x3, 0x2, 0x1, 0x0, 0x2c46512a, 0x7, 0x2640, 0x0, 0x10000, 0x0, 0x9, 0x3, 0x6, 0x7fffffff, 0xdc, 0x80000000, 0x26, 0xbb16, 0x4f7, 0x9, 0xbd1, 0x44, 0xffffff7f, 0xa3, 0x1, 0x4, 0x0, 0x3, 0x2, 0x5, 0x0, 0x9, 0x4, 0x4b, 0x1, 0x8000, 0x2, 0x4, 0x2e4, 0xc7, 0x4, 0x4, 0x4, 0x81, 0xff, 0x6, 0x1, 0x10, 0x6, 0x9, 0x1, 0x4e2, 0x104, 0x7, 0x3ff, 0x10000, 0x4, 0x1, 0x101, 0x800, 0x101, 0x9, 0x6, 0x9, 0x6, 0x101, 0x9, 0x9, 0x6, 0x800, 0x101, 0xf07, 0x0, 0x2, 0x81, 0x6, 0x80000001, 0x8, 0x2, 0xee8, 0x1ff, 0x81, 0x24000, 0x6, 0x2, 0x2, 0x202, 0x10, 0x8001, 0xa, 0x8, 0x200, 0x6, 0x9, 0x8001, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x4, 0x2, 0x7, {0x3, 0x2, 0x4, 0x40, 0x6, 0x1ff}, {0x2, 0x0, 0x2, 0xcd4, 0x9, 0x8}, 0x0, 0x7ff}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc0100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "b341af", 0x18, 0x0, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, {[@dstopts={0x6c, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x800}, @calipso={0x7, 0x8, {0x1, 0x0, 0xe, 0xc2}}]}]}}}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000003e00090b000000000008000003"], 0x20}}, 0x0) 805.14979ms ago: executing program 2 (id=1531): r0 = socket$inet6_sctp(0xa, 0x4, 0x84) (async, rerun: 32) r1 = socket$key(0xf, 0x3, 0x2) (rerun: 32) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a0b020500000025bd700008dbdf2503001700db00000002004e21ac1414bb0000000000000000"], 0x28}}, 0x20008004) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000100)=ANY=[@ANYBLOB='C\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000000000001400000018000180140002006970766c616e31000000000000000000"], 0x2c}}, 0x0) (async, rerun: 32) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x1d, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @local, @rand_addr=0x3}}}}) (async) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) (async) close(r0) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) (async, rerun: 64) connect$inet(r8, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) (rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) close(r5) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES8=r8, @ANYRES64=r8, @ANYRES32=r5, @ANYRES64=0x0], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 32) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r5) syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="e10931d8640a00000000000086dd600000000018880000000000000000000000000000000000000000aa0000100000109078820000000000000038a26b94dfca9706e84aced46b0becdb3c95dab8cc2e9c5ce92b4b719dba6391533316529c062243"], 0x0) (async) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r9) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_generic(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000580)=ANY=[@ANYBLOB="b876b3b13ed2448bcd5d7ce548e6ea5c19906ab5342acf9fb9a37d6056c198261c694a21c306967e8dfda5788e857fae1db03c3b96b10991471e046431ecc7a261ed4e2d7ffa43b04d4e2aabfc7bdfa89e692432176ac4d9d250734bd3dba0e33a03bb7eba8b32409396187015c7d67f17c621c81c6eef8d48e15000ee00108be5592dd3604c3b078fd93f817f2a20f6345a497f139fc58f4689ce73cdabd95515a55671d41c674dd01ca6deff054434484e33a44864743ba8647b", @ANYRESDEC=r6], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="0100000000000000000006000009080004006401010008000500e00000020f000700756e636f6e66696e65640000"], 0x34}, 0x2, 0x34005, 0x0, 0x4008815}, 0x4) sendmmsg$inet6(r4, &(0x7f0000004ec0)=[{{&(0x7f0000000380)={0xa, 0x4e24, 0x3, @loopback}, 0x1c, &(0x7f0000000a40), 0x0, &(0x7f0000001b80)=[@dstopts={{0x40, 0x29, 0x37, {0x2c, 0x4, '\x00', [@ra={0x5, 0x2, 0x800}, @ra={0x5, 0x2, 0x2}, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @jumbo={0xc2, 0x4, 0x2}, @pad1]}}}, @rthdr={{0x78, 0x29, 0x39, {0x3a, 0xc, 0x1, 0x4, 0x0, [@loopback, @remote, @mcast1, @empty, @empty, @empty]}}}, @tclass={{0x14, 0x29, 0x43, 0x6}}, @dstopts_2292={{0x70, 0x29, 0x4, {0x73, 0xa, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x26, 0x47, "0a027584d3d6beec77c3cdde58e9f5e603799130e1f57fd073516a531689e01b8082b59c2a259de575829d2539cd39deede775f1efe5c867a50d5bad7883a8d5726c6314c0ce62"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r6}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x62, 0xa, 0x3, 0x80, 0x0, [@empty, @private1, @loopback, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast1]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}], 0x218}}, {{&(0x7f00000008c0)={0xa, 0x4e23, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x32}, 0x1c, &(0x7f0000000f40)=[{&(0x7f0000000ac0)="5b5dd545272ccf538f8c2de6e5f9c45df6a23351c0362268f430f76e39c84928a0fed3d05a9b21bd1df1e64d090a01951b365c541146ba9720967a1ad166bb4038da24a8b578a633a45897f9e7a4ea46b49614ec7d7a6be82ce472d0d6f4ab69a293345f68800a7507e76fc1ca04ca314c9d180a2016d9482e427886499f", 0x7e}, {&(0x7f0000000b40)="4862ce0eddd3ec6e2e4e8bfec2c07a765e83777dcd4c1c007230b38ff4a7dad20849367deb9a15db766a6b9b4915fef72f2c489921112997413fa3633f3072691bd0c3315daf03779f7b7f50e1f0beb6b69eeeac2509f4761c1dde0f1055d21b1f2fae17810faa5dbe87c978353336385dd4ccba1b5d2411742701ec77", 0x7d}, {&(0x7f0000000bc0)="e6b40240eb1227cb81508f30cdc16a91341f56", 0x13}, {&(0x7f0000000c80)="54dca073f4582366aa20cda13db5d920203251f01e6480d24b9e24d2aa8e4613e58afc49cf43f00e7a264b1852d3e1ba0c0173ad03faede73df6d5054a459aee28d0ca926433c592d1bba686f9b5e51f7944da5df578ac6717ccb75402c2b05d9d6613ef1e068c0955859b0a99390ab0ba030e25fe36848d1cecc3b95d00762b877be6c1366becb8ec", 0x89}, {&(0x7f0000000c00)="ad", 0x1}, {&(0x7f0000000d80)="ded3ac6f62baff62a8fd50d3401e016ca8fdceaf9fb323eec9dbdbf98668c41775922b6084488d189172c409b0dd9ebb7e0dca98ad8853e20378a26f26121c99381d85a6b1c5ca8f1e2e2e63d5badd3e6922fcc76d04ce204889e5fa34ba252aa6685f07dd0e2aab29ff30f85f5942adb502a398c5ffc431a61b518e2f7959501c805212d2edb8fb13", 0x89}, {&(0x7f0000000e40)="70b27b08ad4554e761ce319afcd47d31348b66047a542ae9d73dc8393f6788d63e68df23062f8c9d9d78b46c439bcb1a2c7714ee7db4feb0785df7238974eff74730d74e14a93b4897bec2d507169f87ae9ee46d7b8f4c61f8290721258ce2ef1be0f3a2d1507d29f764f1c5c6f7116b6fd6a6aad0e012e0a9db56326c837aaa7f272cf6b6c2457d46576668053b32af3cc1287774906c8f7aa47d543b67f4e5199d420c45b70bb1a9248d8395d9d493188eb08b2aac5b55967048ce5862fb19edf45e3899ab4d3836a56ca461267864e1c155f219e08c6863b719cd1778b62d9355cc4ec2e8a8026b1c", 0xea}], 0x7, &(0x7f0000001080)=[@flowinfo={{0x14, 0x29, 0xb, 0x401}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x73, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x1, [0x0]}]}}}, @rthdr={{0xb8, 0x29, 0x39, {0x33, 0x14, 0x1, 0x4, 0x0, [@mcast1, @remote, @private1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @loopback, @mcast1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x230e}}, @flowinfo={{0x14}}, @dstopts_2292={{0x1a0, 0x29, 0x4, {0x33, 0x30, '\x00', [@enc_lim={0x4, 0x1, 0xfc}, @generic={0x3, 0x43, "56152cac2050f780659a5aad17910e732ce94915f4b2c9f877d81ca5e937824771a434c3fd9b00a445fe8123e54c2fbb9bfc5bb009c4cf7b9a7276136e6e27ee120974"}, @generic={0x1, 0x20, "3bf6f2be7d35bc8f3472ec1fc6dd887f8a9506aed3dad6718e1e234efc1054dd"}, @pad1, @generic={0xf8, 0x32, "948eb93806106e92c1832835341763a8d9fb7e3c0b461aaff3350814a2b1fab983e22dfdf0e7902c1b86a5e3a9f2723c9658"}, @calipso={0x7, 0x0, {0x1, 0x0, 0x5, 0xf, [0x3, 0xfffffffffffffff8]}}, @generic={0x6, 0xc8, "5005862d24b5d08bb0bc559d6c87beb7fb242a5e292e4dbeabb5a9acad2f0df09ae74a0ab6926e3bc880e316429df44fb9f948044f7f0165157494a52ef4b40d4f13b1ec5ab659f2067e4753339d40cff423d1c3c0b190479cf4f82b398abfc6590eae467896606ca22cee74e353ee0cab85074d76f11bd2170b2be968a705b5af70894a97689ef0fd03f972c95a0acbe79a38f012a35df80d867385e0ee848c3ad42ed08706373b45291d53448ee3f12c55bfa96dd58ca2e96e1fbc74398195cc2a1d66b03cc883"}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}], 0x2d8}}, {{&(0x7f00000003c0)={0xa, 0x4e20, 0x40000000, @loopback, 0x67b2}, 0x1c, &(0x7f0000001580)=[{&(0x7f00000013c0)="86df2829fe3dd44cfb29deb18de3f05e1dd57cf92c1d2360b0596d2276e9d047e29ca220a12f30e29cfad8518fca87b529d2c5f74283794bebd40b91f79cdd0950", 0x41}, {&(0x7f0000001480)="5b4f76d9b7fab9c7c694d5443dd3565a9a5529e978b49d28d35fbcc58d6e12c5204d8e7dd46ed9f377a081c402083b38891818f0176e17b695b8afc1e2d006f134ff51c46007599d0d50d461367bac59a28e5c770ad199dbe14a9dd88bdad865b2f8ec9ff251d87ccaaae46e660f8153a233af44849cf30ae155f6a3b8d5b18f8866b88515f46291d48832a978eeafd24a0cd4cc97f13cfbcec4a6e6e832cf603d789b786175799e0fa1c4704737ed9efb86", 0xb2}, {&(0x7f0000001540)="eb0a13853cf68e40", 0x8}], 0x3, &(0x7f0000000700)=[@flowinfo={{0x14, 0x29, 0xb, 0x200}}, @tclass={{0x14, 0x29, 0x43, 0x80000001}}, @hopopts={{0x50, 0x29, 0x36, {0x21, 0x6, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x2, 0x6, 0xc6, 0x6, [0xaa9c, 0x1, 0x2]}}, @enc_lim={0x4, 0x1, 0x81}, @calipso={0x7, 0x0, {0x3, 0x0, 0x4, 0x7, [0x2, 0x3, 0xd0, 0x6d108000000000]}}, @hao={0xc9, 0x0, @mcast1}, @hao={0xc9, 0x0, @local}]}}}], 0x80}}, {{&(0x7f00000015c0)={0xa, 0x4e23, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1a1b}, 0x1c, &(0x7f0000004d40)=[{&(0x7f0000001940)="112e458f61ec20704504f1888b0a1269664b10a1babb09ae139ddd750ccd0ab4248b8f0486dc3fa4a7c224224717ac2cc5208dba53c5d7d2cae009d3239a72362a0de70d11806cb5b8bc2cf7af28d57507d6f6", 0x53}, {&(0x7f00000019c0)="82ed", 0x2}, {&(0x7f0000003b80)="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", 0x1000}, {&(0x7f0000004b80)="6948e8f91f1cfecb34b359197d004fd5f6aff34230b2f02b274c51eb338c1fb3151320ea7e93ec080103c1aebf275829755a0cf3a1dc126a13e8b99e1a4a01b446fe9b1ebe26a0b83556ee4aeeabd15c72952fbc8ba7800b96f1e9344b135038901433e3cb380d0ae25df26e162cb7f36a93afd89ac2d2c51e8a5d80a43482de85c90ebe59f8589811bae69cefc7bac98c30bdbfa965ea05ee9870c7121f81bfcf6954", 0xa3}, {&(0x7f0000001a00)="cc0d6d168968dd29f7ae29c212915c07ef858c9bb0828f3a50bf99be03e38360046792b3937a418295af8f19cd74fe96a453aab05db5419f3d0b42efc019ecd01193bcd4817b737553b010db35a54cbc0bd643faf8712c66713c0a8d4410337413a495bcf892e82f57c06d0cfeecd8d93e5fabd8c9ee16124fc8c1ac06e6", 0x7e}, {&(0x7f0000004c40)="2ea97fb53dadad132a7bdeb33702acb072983e1c95b76b5f18083a5d4475234c5cac0d7dcd81bbc0e665c58c99aae1787bb3d61de6fa35bfe27bf997cef3eb1a51a26385", 0x44}, {&(0x7f0000004cc0)="396be07b96e1a89c2df1f25e8fec58c3e55c4dfe64a234e920b58731dad8cf0f79b2f528ddce58720434d07b6a63ddea050131b016856e684d6204d86071b715e6dce8ef4bd21dde864912469943d2562c", 0x51}], 0x7, &(0x7f0000004dc0)=[@dstopts={{0x80, 0x29, 0x37, {0x1, 0xc, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x30, {0x1, 0xa, 0x80, 0x4, [0xff, 0x6, 0x4000000, 0x8, 0x3]}}, @generic={0x5, 0x2c, "ef0125b7877ab6f1747e1789b7954728aa8f881b05e913bc7abab6eff588e8d10946c701b14dd81d22aeec93"}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x2e, 0x64, 0x2, 0x3, 0x0, [@empty, @remote, @local, @ipv4={'\x00', '\xff\xff', @broadcast}]}}}], 0xd8}}], 0x4, 0x40) (async) shutdown(r4, 0x1) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba8783b7, 0x2}, 0x9c) (rerun: 64) 623.9853ms ago: executing program 1 (id=1532): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="04002abd7000ffdbdf25080000000600010000000000080011000000000005001300010000001777fabe90d333de7fc055844f10bd148fccc7acb11091e204fb67b452abff4ac8d62a7c2b154435315d4649c7a57d1f1709fb38d1a4b77f2aeb63997a755a600bb90a12f866ce4cf923ee341b937e3a1a6ff3830790a1b1e808cf8eaf6bdb6fc698e25b02696a81f40d44019854d292d5d81ea8f7adb355112d39bac90af40a5d884c8094772fc09e6d3569f5fd3fa3a8f9d26988730ee4c8ff4443155e6e439e5ad1f86d1a0f0a6595b9754c00e06e0d63a543851d4f7fd6f6ee4c7db0117e2b8c3790ea07d7"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x80) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES16=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x20000090) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000500)='ns/net\x00') r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x6c, r3, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x22}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x18}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x61}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7ff, 0x36}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x1a}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r10, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x81, 0x18}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x24004800) recvmmsg(r2, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000013c0)=""/199, 0xc7}], 0x1}, 0x1b28}], 0x1, 0x102, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0) sendto$inet(r2, &(0x7f0000000380)="b8", 0x1, 0x48000, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) 619.374316ms ago: executing program 2 (id=1533): getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4008091}, 0x20040000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@deltfilter={0x34, 0x2d, 0x1, 0x78bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffff, 0x3}, {0xfff3, 0xffff}, {0x4, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c014}, 0x20044000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000700)=[0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], 0x0, 0x2b, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x51, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000c40)={'erspan0\x00', &(0x7f0000000a80)={'syztnl0\x00', 0x0, 0x0, 0x8, 0x23, 0x3, {{0x15, 0x4, 0x3, 0xa, 0x54, 0x66, 0x0, 0x7, 0x29, 0x0, @multicast2, @multicast2, {[@cipso={0x86, 0x25, 0x0, [{0x7, 0xe, "64cff9b33d1c41f38edf4db2"}, {0x6, 0x11, "9d40d12813f0ab546b38e1b0809daf"}]}, @lsrr={0x83, 0x17, 0x2a, [@broadcast, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @rand_addr=0x64010102]}, @end, @end]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000180)={@broadcast, @local}, &(0x7f0000000cc0)=0x5) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r8, 0x25, 0x0, @val=@netfilter}, 0x40) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x3, 0x0, {0x0, 0x0, 0x74, r8, {0x0, 0x7}, {0x0, 0x4}, {0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, 0x0, 0x0) getsockname$packet(r10, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x8, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r11, {0xb}, {0xb, 0xffff}, {0xa, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) bind$xdp(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x4, r11, 0x12}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'syzkaller0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000d40)={'wg0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, 0x0, 0x24040054) 503.092487ms ago: executing program 1 (id=1534): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000280)={0x2, 0x3, @rand_addr=0x64010100}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x80800) getpeername$netrom(r2, 0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000005780)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000001600)=[{{&(0x7f0000000340), 0x6e, &(0x7f00000059c0)=[{&(0x7f0000000400)=""/164, 0xa4}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000000080)=""/16, 0x10}, {&(0x7f0000005800)=""/172, 0xac}, {&(0x7f00000058c0)=""/12, 0xc}, {&(0x7f0000005900)=""/145, 0x91}], 0x6, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000000600)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000680)=""/252, 0xfc}], 0x1, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f00000007c0)=@abs, 0x6e, &(0x7f0000000b00)}}, {{&(0x7f0000000b80), 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000c00)=""/79, 0x4f}, {&(0x7f0000000c80)=""/210, 0xd2}, {&(0x7f0000000840)=""/45, 0x2d}], 0x3}}, {{&(0x7f0000000e00), 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000f40)=""/235, 0xeb}, {&(0x7f0000000e80)=""/125, 0x7d}, {&(0x7f0000003780)=""/4092, 0xffc}, {&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000001080)=""/93, 0x5d}, {&(0x7f0000001100)=""/243, 0xf3}, {&(0x7f0000001200)=""/230, 0xe6}, {&(0x7f0000001300)=""/236, 0xec}, {&(0x7f0000001400)=""/144, 0x90}, {&(0x7f0000004780)=""/4096, 0x1000}], 0xa, &(0x7f0000001580)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}], 0x5, 0x2, &(0x7f00000057c0)={r3, r4+60000000}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'veth0_to_bond\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = socket$inet6(0xa, 0x6, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$l2tp(0x2, 0x2, 0x73) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe21, 0x4, @private2={0xfc, 0x2, '\x00', 0xe}, 0x7}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(0xffffffffffffffff, 0x3, &(0x7f0000000880)="ba1e7a7948e027e8d42e0add8b45a8e9853d121efb1adb55d073f1e04ba0026c4e148222a7eebdf4309f347b72947878014b5702d1099a5e3b48251f9261f8c5c7b9ecd7291533cc3f71b0bc82a676fe84662774ed919c17de71b242326d6c1fdfa058f029fd663454f7e66290e951fba283c2db2ac4f236fe44eb83cdbd7912501890b3f147ca851fad4181170560db5922986e8b6158f96d6bba6520ebbb954c4cd7667802c596eed4331b59b84ef8843ad8") r8 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r8, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000000000000000000001"], 0x48}, 0x0) setsockopt$inet_opts(r5, 0x0, 0xb, 0x0, 0xd) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000240)=""/116, &(0x7f0000000100)=0x74) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="4259d6bf3490864cdf950d5bb5c6a0a00200231c040008001b00000000001c0016801800018014000b00ffffffffffffff"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) socket$kcm(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000000c0)='>', 0x1}], 0x1000000000000361}, 0x3) close(0x3) 406.942209ms ago: executing program 0 (id=1535): syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6000001000303c0020010000000000000000000000000002ff0200000000000000000000000000010803"], 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6000001000303c0020010000000000000000000000000002ff0200000000000000000000000000010803"], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x50) r1 = accept4$rose(0xffffffffffffffff, &(0x7f00000000c0)=@full={0xb, @remote, @netrom, 0x0, [@default, @remote, @remote, @default, @netrom, @rose]}, &(0x7f00000001c0)=0x40, 0x80800) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f0000000240)) (async) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f0000000240)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="140003007665746830000000000000000000000008000100ac141402"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40004}, [@IFLA_MTU={0x8, 0x4, 0x3f9}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) 373.232246ms ago: executing program 2 (id=1536): unshare(0x2c020400) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xbf}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x68, &(0x7f0000000200)}, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df2508000100000000000900"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) 220.20477ms ago: executing program 2 (id=1537): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8d4ee222d7bd5396}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, r4, 0x100, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, r1, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x5, 0x1}, {0x5, 0x6}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) unshare(0x400) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000dc0)="d8000000180081084e81f783db4cb9040a10080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fec0ffff000000fd035c0461c1d67f6f94007134cf6efb800189b316277ce06bbaceac3c2fb14c2ee5a7cef4090f00201f373f7b9555da25364c3b10b7b91b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e003640fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1, 0x0, 0x0, 0x4788}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@typedef={0x3, 0x0, 0x0, 0x8, 0x2}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x2, 0x5}]}, {0x0, [0x2e, 0x2e, 0x5f]}}, 0x0, 0x39, 0x0, 0x1, 0x6cb}, 0x28) splice(r8, 0x0, r9, 0x0, 0xf3a, 0x6) sendto$packet(r9, &(0x7f0000000500)="2fd3bc460e70c82d75cbef8d8cd065f088b816308ea4a6c38a664b103b87b3a3c0c1ac78c1d7da05b59db654870d3772a58faef573d252be97e774f5fce44c2d97739bcc35e8345d559fe4226e1e88fea1b6fac4a7afd4b8ce06a506b31682cdca953679d80f002061656e3ad8998552128967ac254be71076fd3bd3a9dbe97e35ba476a8344fd33acac2a942f5e442bf137d95db11488fb724553d2162f3e5631d5a4212203be833ca60e4f6f622a77d0d3662ac04e762bfee0ac1162702da15d77cb6951c8ecaaad1f73371847925114987c82085b57702df5674b7b", 0xdd, 0x2000c841, &(0x7f0000000180)={0x11, 0x7, 0x0, 0x1, 0x81, 0x6, @random="37ad98bfc7e7"}, 0x14) syz_emit_ethernet(0x7c, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6003000000462f00fc000000000000000000000000000000ff0200000200000000000001042081000000892f"], 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r7, &(0x7f0000000240)={0x20000000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x6f) 173.666677ms ago: executing program 3 (id=1538): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x18) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000200)={0x1, 'wlan0\x00', {}, 0xffff}) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f00000003c0)=""/4096, 0x1000, 0x0, &(0x7f0000000080)=""/252, 0xfc}}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="550a00000000000061115400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94) 129.491106ms ago: executing program 0 (id=1539): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x800, 0x0, 0x3, 0x9}, 0x20) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x31}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="28000000000000002900000002"], 0x28}}], 0x1, 0x40) (async) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x31}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="28000000000000002900000002"], 0x28}}], 0x1, 0x40) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @loopback, 0x8000020}, 0x1c) 0s ago: executing program 1 (id=1540): syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x3c, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x33}, @srh={0x0, 0x0, 0x4, 0x0, 0x5, 0x20, 0x5}]}}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f500000200fffffffffffffbfb000067"], 0x1eb) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x4, 0x7ff, @vifc_lcl_ifindex=r3, @loopback}, 0x10) kernel console output (not intermixed with test programs): ond_slave_0): Enslaving as an active interface with an up link [ 71.022935][ T5823] team0: Port device team_slave_1 added [ 71.030886][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.040740][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.047867][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.074142][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.104586][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.135867][ T5836] Bluetooth: hci2: command tx timeout [ 71.145760][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.215129][ T5842] Bluetooth: hci1: command tx timeout [ 71.220896][ T5842] Bluetooth: hci0: command tx timeout [ 71.228360][ T5836] Bluetooth: hci4: command tx timeout [ 71.228712][ T5825] hsr_slave_0: entered promiscuous mode [ 71.240543][ T5825] hsr_slave_1: entered promiscuous mode [ 71.248988][ T5822] team0: Port device team_slave_0 added [ 71.256046][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.262997][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.289483][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.295422][ T5836] Bluetooth: hci3: command tx timeout [ 71.316129][ T5837] team0: Port device team_slave_0 added [ 71.323936][ T5822] team0: Port device team_slave_1 added [ 71.344028][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.351048][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.377663][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.393158][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.400302][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.428368][ T5837] team0: Port device team_slave_1 added [ 71.439774][ T5830] hsr_slave_0: entered promiscuous mode [ 71.446418][ T5830] hsr_slave_1: entered promiscuous mode [ 71.452733][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 71.458700][ T5830] Cannot create hsr debugfs directory [ 71.523177][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.530547][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.556719][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.572647][ T5823] hsr_slave_0: entered promiscuous mode [ 71.579003][ T5823] hsr_slave_1: entered promiscuous mode [ 71.585114][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 71.590842][ T5823] Cannot create hsr debugfs directory [ 71.614666][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.621873][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.647834][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.666706][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.673665][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.700341][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.737144][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.744116][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.770285][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.962387][ T5822] hsr_slave_0: entered promiscuous mode [ 71.969099][ T5822] hsr_slave_1: entered promiscuous mode [ 71.975403][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 71.981136][ T5822] Cannot create hsr debugfs directory [ 72.020712][ T5837] hsr_slave_0: entered promiscuous mode [ 72.027506][ T5837] hsr_slave_1: entered promiscuous mode [ 72.034003][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 72.039962][ T5837] Cannot create hsr debugfs directory [ 72.337811][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.351133][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.388337][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.419956][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.503574][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.528674][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.539205][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.558896][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.634910][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.649091][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.660106][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.672326][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.758331][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.788700][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.801484][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.819924][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.831237][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.888695][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.952454][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.959789][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.980814][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.988002][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.004175][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.014879][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.025962][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.037395][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.101148][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.176439][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.189004][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.215304][ T5836] Bluetooth: hci2: command tx timeout [ 73.219380][ T4054] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.227913][ T4054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.257086][ T4054] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.264256][ T4054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.297298][ T5836] Bluetooth: hci4: command tx timeout [ 73.302761][ T5836] Bluetooth: hci0: command tx timeout [ 73.308478][ T5842] Bluetooth: hci1: command tx timeout [ 73.323138][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.372117][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.386115][ T5836] Bluetooth: hci3: command tx timeout [ 73.395718][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.402865][ T4169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.412492][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.419954][ T4169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.487731][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.519091][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.526340][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.578483][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.585705][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.607621][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.692099][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.784202][ T5825] veth0_vlan: entered promiscuous mode [ 73.840581][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.867716][ T5825] veth1_vlan: entered promiscuous mode [ 73.894311][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.901524][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.967155][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.978915][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.986126][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.092472][ T5825] veth0_macvtap: entered promiscuous mode [ 74.111142][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.129847][ T5825] veth1_macvtap: entered promiscuous mode [ 74.187639][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.217412][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.240044][ T5830] veth0_vlan: entered promiscuous mode [ 74.264295][ T5830] veth1_vlan: entered promiscuous mode [ 74.301708][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.363314][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.391525][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.401408][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.447392][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.477690][ T5823] veth0_vlan: entered promiscuous mode [ 74.510110][ T5830] veth0_macvtap: entered promiscuous mode [ 74.562319][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.587813][ T5830] veth1_macvtap: entered promiscuous mode [ 74.601204][ T5823] veth1_vlan: entered promiscuous mode [ 74.661472][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.670786][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.721323][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.728826][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.740396][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.763307][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.793016][ T5837] veth0_vlan: entered promiscuous mode [ 74.813418][ T5822] veth0_vlan: entered promiscuous mode [ 74.833863][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.843611][ T5837] veth1_vlan: entered promiscuous mode [ 74.876623][ T5823] veth0_macvtap: entered promiscuous mode [ 74.893510][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.903903][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.923245][ T5823] veth1_macvtap: entered promiscuous mode [ 74.934060][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.944492][ T5822] veth1_vlan: entered promiscuous mode [ 74.988903][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.035857][ T5837] veth0_macvtap: entered promiscuous mode [ 75.068945][ T5938] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 75.088443][ T5837] veth1_macvtap: entered promiscuous mode [ 75.174378][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.183649][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.198968][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.228859][ C1] Illegal XDP return value 16128 on prog (id 2) dev team0, expect packet loss! [ 75.252269][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.285266][ T5942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7'. [ 75.288603][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.303001][ T5836] Bluetooth: hci2: command tx timeout [ 75.318753][ T143] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.327556][ T143] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.337785][ T5944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7'. [ 75.352577][ T5822] veth0_macvtap: entered promiscuous mode [ 75.364401][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.377785][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.378072][ T5836] block nbd0: Receive control failed (result -107) [ 75.394274][ T5146] Bluetooth: hci0: command tx timeout [ 75.396347][ T143] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.400385][ T5146] Bluetooth: hci1: command tx timeout [ 75.409389][ T5842] Bluetooth: hci4: command tx timeout [ 75.416413][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.428241][ T143] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.453812][ T143] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.468985][ T5842] Bluetooth: hci3: command tx timeout [ 75.479166][ T5943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7'. [ 75.499672][ T5822] veth1_macvtap: entered promiscuous mode [ 75.516489][ T143] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.528366][ T5842] block nbd1: Receive control failed (result -32) [ 75.549366][ T143] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.563320][ T143] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.601978][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.616087][ T5947] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1'. [ 75.628760][ T5947] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1'. [ 75.661202][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.769287][ T143] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.797959][ T143] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.819269][ T5952] Zero length message leads to an empty skb [ 76.182949][ T143] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.206481][ T143] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.224124][ T4169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.233387][ T4169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.375501][ T5842] Bluetooth: hci2: command tx timeout [ 77.455692][ T5836] Bluetooth: hci0: command tx timeout [ 77.461147][ T5836] Bluetooth: hci4: command tx timeout [ 77.466993][ T5842] Bluetooth: hci1: command tx timeout [ 77.535688][ T5842] Bluetooth: hci3: command tx timeout [ 78.843814][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.864502][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.933238][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.948312][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.987193][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.995918][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.064174][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.094455][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.164431][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.183738][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.369530][ T6012] netlink: 244 bytes leftover after parsing attributes in process `syz.0.18'. [ 80.468179][ T6005] netlink: 'syz.4.14': attribute type 10 has an invalid length. [ 80.528651][ T6005] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 80.801486][ T6026] netlink: 88 bytes leftover after parsing attributes in process `syz.1.20'. [ 80.836865][ T6031] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.853068][ T6033] syz.1.20 uses obsolete (PF_INET,SOCK_PACKET) [ 81.067790][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21'. [ 81.487959][ T6050] netlink: 16 bytes leftover after parsing attributes in process `syz.3.26'. [ 81.497182][ T6050] netlink: 24 bytes leftover after parsing attributes in process `syz.3.26'. [ 81.647717][ T6050] bond1: option primary_reselect: invalid value (255) [ 81.669707][ T6059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27'. [ 81.692580][ T6050] bond1 (unregistering): Released all slaves [ 81.981160][ T6061] netlink: 92 bytes leftover after parsing attributes in process `syz.0.27'. [ 82.012632][ T6062] netlink: 92 bytes leftover after parsing attributes in process `syz.0.27'. [ 82.074691][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29'. [ 82.420932][ T6078] openvswitch: netlink: Message has 4 unknown bytes. [ 82.462625][ T6081] lo speed is unknown, defaulting to 1000 [ 82.492827][ T6081] lo speed is unknown, defaulting to 1000 [ 82.522990][ T6081] lo speed is unknown, defaulting to 1000 [ 82.547913][ T6086] netlink: 68 bytes leftover after parsing attributes in process `syz.0.36'. [ 82.612485][ T6081] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 82.676728][ T6081] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 82.721754][ T6081] lo speed is unknown, defaulting to 1000 [ 82.742814][ T6081] lo speed is unknown, defaulting to 1000 [ 82.754602][ T6081] lo speed is unknown, defaulting to 1000 [ 82.764776][ T6081] lo speed is unknown, defaulting to 1000 [ 82.777360][ T6081] lo speed is unknown, defaulting to 1000 [ 83.309912][ T6108] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.409953][ T6111] netlink: 'syz.3.40': attribute type 2 has an invalid length. [ 83.618740][ T6116] syz_tun: entered allmulticast mode [ 83.677379][ T6114] syz_tun: left allmulticast mode [ 84.144865][ T6136] tipc: Started in network mode [ 84.158258][ T6136] tipc: Node identity 1232aa6ef1b2, cluster identity 4711 [ 84.190080][ T6141] netlink: 'syz.0.51': attribute type 27 has an invalid length. [ 84.211904][ T6136] tipc: Enabled bearer , priority 0 [ 84.241641][ T6137] syzkaller0: entered promiscuous mode [ 84.250054][ T43] IPVS: starting estimator thread 0... [ 84.256164][ T6137] syzkaller0: entered allmulticast mode [ 84.305590][ T6150] netlink: 'syz.0.51': attribute type 5 has an invalid length. [ 84.375547][ T6151] IPVS: using max 27 ests per chain, 64800 per kthread [ 84.427425][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.435877][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.618521][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.650617][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.930062][ T6138] tipc: Resetting bearer [ 84.967088][ T6138] tipc: Disabling bearer [ 85.025120][ T6150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.033728][ T6150] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.053318][ T6150] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 85.101233][ T4169] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.125489][ T4169] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.134423][ T4169] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.197512][ T4169] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.353887][ T6174] tipc: Started in network mode [ 85.359026][ T6174] tipc: Node identity 5ec447d32abc, cluster identity 4711 [ 85.366477][ T6174] tipc: Enabled bearer , priority 0 [ 85.381679][ T6174] syzkaller0: entered promiscuous mode [ 85.515286][ T6174] syzkaller0: entered allmulticast mode [ 85.636231][ T6174] tipc: Resetting bearer [ 85.679900][ T6174] tipc: Disabling bearer [ 86.763584][ T10] cfg80211: failed to load regulatory.db [ 86.803338][ T6235] netlink: 'syz.0.71': attribute type 13 has an invalid length. [ 86.954014][ T6246] sctp: [Deprecated]: syz.4.75 (pid 6246) Use of int in max_burst socket option. [ 86.954014][ T6246] Use struct sctp_assoc_value instead [ 86.988468][ T6246] sctp: [Deprecated]: syz.4.75 (pid 6246) Use of int in max_burst socket option. [ 86.988468][ T6246] Use struct sctp_assoc_value instead [ 87.004597][ T6246] sctp: [Deprecated]: syz.4.75 (pid 6246) Use of int in max_burst socket option. [ 87.004597][ T6246] Use struct sctp_assoc_value instead [ 87.019997][ T6246] sctp: [Deprecated]: syz.4.75 (pid 6246) Use of int in max_burst socket option. [ 87.019997][ T6246] Use struct sctp_assoc_value instead [ 87.064653][ T6246] sctp: [Deprecated]: syz.4.75 (pid 6246) Use of int in max_burst socket option. [ 87.064653][ T6246] Use struct sctp_assoc_value instead [ 87.083873][ T6246] sctp: [Deprecated]: syz.4.75 (pid 6246) Use of int in max_burst socket option. [ 87.083873][ T6246] Use struct sctp_assoc_value instead [ 87.099480][ T6246] sctp: [Deprecated]: syz.4.75 (pid 6246) Use of int in max_burst socket option. [ 87.099480][ T6246] Use struct sctp_assoc_value instead [ 87.115743][ T6246] sctp: [Deprecated]: syz.4.75 (pid 6246) Use of int in max_burst socket option. [ 87.115743][ T6246] Use struct sctp_assoc_value instead [ 87.131286][ T6246] sctp: [Deprecated]: syz.4.75 (pid 6246) Use of int in max_burst socket option. [ 87.131286][ T6246] Use struct sctp_assoc_value instead [ 87.165193][ T6247] veth0_to_bridge: entered promiscuous mode [ 87.182658][ T6250] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 87.205516][ T6248] veth0_to_bridge: left promiscuous mode [ 87.225425][ T6246] sctp: [Deprecated]: syz.4.75 (pid 6246) Use of int in max_burst socket option. [ 87.225425][ T6246] Use struct sctp_assoc_value instead [ 87.337204][ T6260] __nla_validate_parse: 3 callbacks suppressed [ 87.337223][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'. [ 87.412076][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'. [ 87.663290][ T6280] ieee802154 phy0 wpan0: encryption failed: -22 [ 87.874306][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.85'. [ 87.917306][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.85'. [ 87.940882][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.85'. [ 88.025385][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 88.367515][ T6308] pimreg: entered allmulticast mode [ 88.390543][ T6288] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 88.441201][ T6317] netlink: 24 bytes leftover after parsing attributes in process `syz.3.90'. [ 88.472418][ T6318] netlink: 'syz.4.91': attribute type 1 has an invalid length. [ 88.538438][ T6323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.92'. [ 88.797262][ T6331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.97'. [ 88.862577][ T6345] netlink: 20 bytes leftover after parsing attributes in process `syz.3.95'. [ 88.978078][ T6345] lo speed is unknown, defaulting to 1000 [ 89.181896][ T6363] netlink: 28 bytes leftover after parsing attributes in process `syz.2.103'. [ 89.414681][ T6350] lo speed is unknown, defaulting to 1000 [ 90.367244][ T6428] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.399514][ T6350] lo speed is unknown, defaulting to 1000 [ 91.351911][ T6477] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 91.684811][ T6493] ip6t_REJECT: ECHOREPLY is not supported [ 91.737001][ T6493] ip6t_REJECT: ECHOREPLY is not supported [ 91.810618][ T6491] lo speed is unknown, defaulting to 1000 [ 91.836391][ T6500] lo speed is unknown, defaulting to 1000 [ 92.670283][ T6546] xt_CT: You must specify a L4 protocol and not use inversions on it [ 93.505820][ T6564] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 93.552323][ T6564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.558312][ T6568] tipc: Enabled bearer , priority 0 [ 93.586889][ T6568] syzkaller0: entered promiscuous mode [ 93.596217][ T6568] syzkaller0: entered allmulticast mode [ 93.699953][ T6568] tipc: Resetting bearer [ 93.887238][ T6567] tipc: Resetting bearer [ 93.957752][ T6567] tipc: Disabling bearer [ 94.264903][ T6595] x_tables: duplicate underflow at hook 2 [ 94.346005][ T6598] netlink: 'syz.4.168': attribute type 6 has an invalid length. [ 94.356166][ T6600] __nla_validate_parse: 14 callbacks suppressed [ 94.356183][ T6600] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.169'. [ 94.421500][ T6595] syz.0.167 (6595) used greatest stack depth: 17832 bytes left [ 94.455058][ T6600] openvswitch: netlink: Flow actions attr not present in new flow. [ 94.651224][ T6607] syzkaller1: entered promiscuous mode [ 94.665498][ T6607] syzkaller1: entered allmulticast mode [ 94.684515][ T6612] netlink: 'syz.3.174': attribute type 3 has an invalid length. [ 94.781461][ T6607] lo speed is unknown, defaulting to 1000 [ 94.896001][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'. [ 95.116938][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.178'. [ 95.221569][ T6630] lo speed is unknown, defaulting to 1000 [ 95.609569][ T6649] sock: sock_timestamping_bind_phc: sock not bind to device [ 95.738937][ T6659] tipc: Started in network mode [ 95.747666][ T6659] tipc: Node identity 5eef1df67b57, cluster identity 4711 [ 95.759298][ T6659] tipc: Enabled bearer , priority 0 [ 95.776328][ T6659] syzkaller0: entered promiscuous mode [ 95.784161][ T6659] syzkaller0: entered allmulticast mode [ 96.320578][ T6679] netlink: 24 bytes leftover after parsing attributes in process `syz.2.191'. [ 96.375785][ T6680] netlink: 24 bytes leftover after parsing attributes in process `syz.2.191'. [ 96.520863][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.193'. [ 96.562577][ T6687] netlink: 20 bytes leftover after parsing attributes in process `syz.3.193'. [ 96.594847][ T6656] tipc: Resetting bearer [ 96.631764][ T6656] tipc: Disabling bearer [ 96.672689][ T6697] tipc: Enabling of bearer rejected, failed to enable media [ 96.827963][ T6702] netlink: 240 bytes leftover after parsing attributes in process `syz.1.194'. [ 96.858488][ T6691] geneve2: entered promiscuous mode [ 97.042923][ T6709] lo speed is unknown, defaulting to 1000 [ 97.495330][ T6724] netlink: 24 bytes leftover after parsing attributes in process `syz.4.200'. [ 97.632929][ T6731] netlink: 76 bytes leftover after parsing attributes in process `syz.2.202'. [ 97.965984][ T6740] netlink: 'syz.4.203': attribute type 12 has an invalid length. [ 98.370197][ T6748] netlink: 'syz.3.207': attribute type 15 has an invalid length. [ 98.378744][ T6750] netlink: 'syz.0.208': attribute type 1 has an invalid length. [ 98.401817][ T6743] lo speed is unknown, defaulting to 1000 [ 98.455562][ T6750] : entered promiscuous mode [ 98.673275][ T6764] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.679542][ T116] IPVS: starting estimator thread 0... [ 98.680071][ T6762] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 98.781947][ T6768] IPVS: using max 34 ests per chain, 81600 per kthread [ 98.841085][ T6774] macsec1: entered promiscuous mode [ 98.920570][ T6781] xt_cgroup: xt_cgroup: no path or classid specified [ 100.041166][ T6818] netlink: 'syz.1.226': attribute type 1 has an invalid length. [ 100.139410][ T6820] __nla_validate_parse: 4 callbacks suppressed [ 100.139426][ T6820] netlink: 60 bytes leftover after parsing attributes in process `syz.4.227'. [ 100.188940][ T6817] lo speed is unknown, defaulting to 1000 [ 100.644595][ T6842] openvswitch: netlink: Key type 126 is out of range max 32 [ 100.688844][ T6839] netlink: 'syz.1.231': attribute type 1 has an invalid length. [ 100.747879][ T6839] netlink: 224 bytes leftover after parsing attributes in process `syz.1.231'. [ 100.989028][ T6842] lo speed is unknown, defaulting to 1000 [ 101.002056][ T6847] can: request_module (can-proto-0) failed. [ 101.883232][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.243'. [ 101.892732][ T6880] netlink: 'syz.4.243': attribute type 5 has an invalid length. [ 101.904149][ T6880] netlink: 20 bytes leftover after parsing attributes in process `syz.4.243'. [ 102.193135][ T6887] can: request_module (can-proto-0) failed. [ 102.280365][ T6896] tipc: Enabled bearer , priority 0 [ 102.304262][ T6896] syzkaller0: entered promiscuous mode [ 102.345096][ T6896] syzkaller0: entered allmulticast mode [ 102.386428][ T6898] netlink: 'syz.4.247': attribute type 27 has an invalid length. [ 102.391254][ T6896] tipc: Resetting bearer [ 102.415360][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.423825][ T6896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.528828][ T6898] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.536602][ T6898] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.555114][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.563615][ T6909] netlink: 32 bytes leftover after parsing attributes in process `syz.0.248'. [ 102.695106][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.715086][ T6898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.732475][ T6898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.835291][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.920643][ T6904] netlink: 'syz.1.249': attribute type 32 has an invalid length. [ 102.938101][ T6904] netlink: 'syz.1.249': attribute type 1 has an invalid length. [ 102.944695][ T6902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.954449][ T6902] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.967318][ T6902] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.975387][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.991539][ T6892] tipc: Resetting bearer [ 103.021533][ T6892] tipc: Disabling bearer [ 103.035965][ T6254] lo speed is unknown, defaulting to 1000 [ 103.047388][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.058100][ T5901] lo speed is unknown, defaulting to 1000 [ 103.112039][ T6904] bond1: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 103.130359][ T6904] bond1 (unregistering): Released all slaves [ 103.161927][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.171385][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.180699][ T6916] netlink: 56 bytes leftover after parsing attributes in process `syz.4.250'. [ 103.191957][ T6916] netlink: 19 bytes leftover after parsing attributes in process `syz.4.250'. [ 103.203209][ T6916] netlink: 19 bytes leftover after parsing attributes in process `syz.4.250'. [ 103.214882][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.302744][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.252'. [ 103.445487][ T6920] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.496246][ T6920] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 103.532142][ T6920] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 103.661387][ T6938] netlink: 'syz.4.257': attribute type 1 has an invalid length. [ 103.671994][ T6938] netlink: 'syz.4.257': attribute type 3 has an invalid length. [ 103.695092][ T6938] netlink: 64 bytes leftover after parsing attributes in process `syz.4.257'. [ 103.701686][ T6942] lo speed is unknown, defaulting to 1000 [ 104.865474][ T6986] lo speed is unknown, defaulting to 1000 [ 105.164251][ T7001] nbd: nbd1 already in use [ 105.172047][ T7001] block nbd1: NBD_DISCONNECT [ 105.178112][ T7001] block nbd1: Send disconnect failed -32 [ 105.212543][ T7001] block nbd1: shutting down sockets [ 105.440798][ T7011] __nla_validate_parse: 4 callbacks suppressed [ 105.440816][ T7011] netlink: 40 bytes leftover after parsing attributes in process `syz.0.281'. [ 105.585354][ T7018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.283'. [ 105.612719][ T7018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.283'. [ 105.614447][ T7020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.284'. [ 105.891575][ T7032] ip6erspan0: entered promiscuous mode [ 105.914531][ T7034] netlink: 2 bytes leftover after parsing attributes in process `syz.1.289'. [ 106.101743][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.291'. [ 106.324328][ T7057] netlink: 'syz.0.297': attribute type 1 has an invalid length. [ 106.411071][ T7061] vlan2: entered allmulticast mode [ 106.416507][ T7061] bond1: entered allmulticast mode [ 106.447298][ T7063] netlink: 44 bytes leftover after parsing attributes in process `syz.2.299'. [ 106.467444][ T7065] warning: `syz.4.300' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.479490][ T7060] netlink: 'syz.1.298': attribute type 4 has an invalid length. [ 106.574400][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.301'. [ 106.930181][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.309'. [ 106.987289][ T7088] lo speed is unknown, defaulting to 1000 [ 107.081583][ T7097] tipc: Enabled bearer , priority 0 [ 107.134662][ T7097] tipc: Disabling bearer [ 107.177433][ T7100] pim6reg1: entered promiscuous mode [ 107.182761][ T7100] pim6reg1: entered allmulticast mode [ 107.250192][ T7103] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.286607][ T7103] bridge_slave_1 (unregistering): left allmulticast mode [ 107.293735][ T7103] bridge_slave_1 (unregistering): left promiscuous mode [ 107.302528][ T7103] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.457140][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.313'. [ 107.475730][ T7110] hsr0: entered promiscuous mode [ 107.481294][ T7110] macvlan2: entered promiscuous mode [ 107.621220][ T7115] bridge0: entered promiscuous mode [ 107.639696][ T7115] macsec1: entered promiscuous mode [ 107.646130][ T7115] bridge0: port 3(macsec1) entered blocking state [ 107.653011][ T7115] bridge0: port 3(macsec1) entered disabled state [ 107.677025][ T7115] macsec1: entered allmulticast mode [ 107.682480][ T7115] bridge0: entered allmulticast mode [ 107.691672][ T7115] macsec1: left allmulticast mode [ 107.697774][ T7115] bridge0: left allmulticast mode [ 107.704384][ T7115] bridge0: left promiscuous mode [ 107.891462][ T7128] netlink: 'syz.0.319': attribute type 1 has an invalid length. [ 107.957917][ T7128] bond2: entered promiscuous mode [ 107.963585][ T7128] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.173148][ T7145] openvswitch: netlink: Missing valid actions attribute. [ 108.201567][ T7145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.614054][ T7168] geneve2: entered promiscuous mode [ 108.622397][ T7165] syzkaller0: entered promiscuous mode [ 108.628476][ T7165] syzkaller0: entered allmulticast mode [ 108.638798][ T7165] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 108.966029][ T7186] x_tables: duplicate underflow at hook 3 [ 108.982522][ T7186] x_tables: duplicate underflow at hook 2 [ 109.776232][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.951446][ T7245] netlink: 'syz.0.355': attribute type 1 has an invalid length. [ 109.994343][ T7240] bridge_slave_0: left allmulticast mode [ 110.000884][ T7240] bridge_slave_0: left promiscuous mode [ 110.007690][ T7240] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.839280][ T7275] netlink: 'syz.4.363': attribute type 15 has an invalid length. [ 110.846422][ T7278] __nla_validate_parse: 12 callbacks suppressed [ 110.846439][ T7278] netlink: 48 bytes leftover after parsing attributes in process `syz.3.365'. [ 111.193618][ T7294] netlink: 196 bytes leftover after parsing attributes in process `syz.3.368'. [ 111.539376][ T7294] wg1: entered promiscuous mode [ 111.544352][ T7294] wg1: entered allmulticast mode [ 111.804777][ T7316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.372'. [ 111.835860][ T7316] netlink: 'syz.1.372': attribute type 13 has an invalid length. [ 111.916803][ T7318] netlink: 'syz.2.373': attribute type 1 has an invalid length. [ 111.927686][ T7318] netlink: 1 bytes leftover after parsing attributes in process `syz.2.373'. [ 112.025145][ T7325] netlink: 'syz.2.373': attribute type 16 has an invalid length. [ 112.054560][ T7316] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.062354][ T7316] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.081159][ T7325] netlink: 20 bytes leftover after parsing attributes in process `syz.2.373'. [ 112.159278][ T7316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.172552][ T7316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.330424][ T7336] pimreg: tun_chr_ioctl cmd 2147767506 [ 112.355517][ T60] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.392801][ T60] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.462618][ T60] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.480407][ T60] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.716310][ T7360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.384'. [ 112.853408][ T7365] netlink: 'syz.1.387': attribute type 1 has an invalid length. [ 112.966453][ T7365] bond1: entered promiscuous mode [ 112.972074][ T7365] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.996541][ T7366] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.012233][ T7366] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 113.024801][ T7366] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 113.038650][ T7366] bond1: (slave gre1): making interface the new active one [ 113.047287][ T7366] gre1: entered promiscuous mode [ 113.054221][ T7366] bond1: (slave gre1): Enslaving as an active interface with an up link [ 113.341752][ T7393] netlink: 'syz.0.393': attribute type 3 has an invalid length. [ 113.357673][ T7393] netlink: 132 bytes leftover after parsing attributes in process `syz.0.393'. [ 113.545838][ T7403] ieee802154 phy0 wpan0: encryption failed: -22 [ 113.683788][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.398'. [ 113.724052][ T7408] netlink: 'syz.0.398': attribute type 30 has an invalid length. [ 113.941548][ T7413] netlink: 'syz.4.401': attribute type 15 has an invalid length. [ 114.024363][ T7417] netlink: 24 bytes leftover after parsing attributes in process `syz.0.398'. [ 114.037646][ T7418] sctp: [Deprecated]: syz.1.400 (pid 7418) Use of struct sctp_assoc_value in delayed_ack socket option. [ 114.037646][ T7418] Use struct sctp_sack_info instead [ 114.067906][ T7416] netlink: 'syz.2.402': attribute type 15 has an invalid length. [ 114.107825][ T60] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.135647][ T60] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.160048][ T60] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.176142][ T60] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.348771][ T7427] netlink: zone id is out of range [ 114.354108][ T7427] netlink: zone id is out of range [ 114.360192][ T7427] netlink: set zone limit has 8 unknown bytes [ 114.556892][ T7437] netlink: 44 bytes leftover after parsing attributes in process `syz.3.407'. [ 114.702181][ T7441] batman_adv: batadv0: Adding interface: macvtap1 [ 114.712373][ T7441] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.740123][ T7441] batman_adv: batadv0: Interface activated: macvtap1 [ 114.794882][ T7445] netlink: 'syz.0.411': attribute type 10 has an invalid length. [ 114.809480][ T7445] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.824099][ T7445] bond0: (slave team0): Enslaving as an active interface with an up link [ 115.233635][ T7459] lo speed is unknown, defaulting to 1000 [ 116.080181][ T7459] netlink: 188 bytes leftover after parsing attributes in process `syz.0.415'. [ 116.519293][ T7523] netlink: 'syz.1.424': attribute type 15 has an invalid length. [ 116.546673][ T7530] vxcan1 speed is unknown, defaulting to 1000 [ 116.601147][ T7530] vxcan1 speed is unknown, defaulting to 1000 [ 116.636433][ T7530] vxcan1 speed is unknown, defaulting to 1000 [ 117.064696][ T7551] pimreg: entered allmulticast mode [ 117.416270][ T7576] netlink: 'syz.3.432': attribute type 13 has an invalid length. [ 117.441658][ T7530] infiniband syz2: set active [ 117.456678][ T116] vxcan1 speed is unknown, defaulting to 1000 [ 117.467939][ T7530] infiniband syz2: added vxcan1 [ 117.480334][ T7530] syz2: rxe_create_cq: returned err = -12 [ 117.506923][ T7530] infiniband syz2: Couldn't create ib_mad CQ [ 117.556278][ T7530] infiniband syz2: Couldn't open port 1 [ 117.719860][ T7530] RDS/IB: syz2: added [ 117.758062][ T7530] smc: adding ib device syz2 with port count 1 [ 117.764523][ T7530] smc: ib device syz2 port 1 has no pnetid [ 117.814626][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 117.832846][ T7530] vxcan1 speed is unknown, defaulting to 1000 [ 118.153887][ T7614] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 118.481859][ T7530] vxcan1 speed is unknown, defaulting to 1000 [ 118.501658][ T7632] netlink: 'syz.3.444': attribute type 15 has an invalid length. [ 118.874534][ T7642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.445'. [ 119.109821][ T7530] vxcan1 speed is unknown, defaulting to 1000 [ 119.459330][ T7662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.451'. [ 119.648708][ T7671] netlink: 'syz.1.454': attribute type 2 has an invalid length. [ 119.729136][ T7674] netlink: 24 bytes leftover after parsing attributes in process `syz.3.455'. [ 119.859101][ T7530] vxcan1 speed is unknown, defaulting to 1000 [ 119.888241][ T7684] netlink: 20 bytes leftover after parsing attributes in process `syz.4.458'. [ 119.942460][ T7678] bridge1: entered promiscuous mode [ 119.965267][ T7678] bridge1: entered allmulticast mode [ 120.243189][ T7698] netlink: 'syz.4.462': attribute type 15 has an invalid length. [ 120.292527][ T7670] delete_channel: no stack [ 120.439372][ T7530] vxcan1 speed is unknown, defaulting to 1000 [ 120.451469][ T7705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'. [ 120.774241][ T7711] netlink: 28 bytes leftover after parsing attributes in process `syz.0.466'. [ 120.784344][ T7711] netlink: 'syz.0.466': attribute type 7 has an invalid length. [ 120.792873][ T7711] netlink: 'syz.0.466': attribute type 8 has an invalid length. [ 120.800991][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'. [ 121.030037][ T7719] netlink: 20 bytes leftover after parsing attributes in process `syz.3.470'. [ 121.091522][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.470'. [ 122.122796][ T7746] netlink: 20 bytes leftover after parsing attributes in process `syz.0.478'. [ 122.429696][ T7756] netlink: 92 bytes leftover after parsing attributes in process `syz.2.481'. [ 122.456175][ T7750] netlink: 340 bytes leftover after parsing attributes in process `syz.4.479'. [ 122.477884][ T7750] netlink: 5912 bytes leftover after parsing attributes in process `syz.4.479'. [ 122.496835][ T7750] netlink: 'syz.4.479': attribute type 11 has an invalid length. [ 122.505232][ T7750] netlink: 212 bytes leftover after parsing attributes in process `syz.4.479'. [ 122.558709][ T7750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.590762][ T7763] Bluetooth: MGMT ver 1.23 [ 122.643754][ T7763] lo speed is unknown, defaulting to 1000 [ 122.647793][ T7766] netlink: 'syz.4.484': attribute type 15 has an invalid length. [ 122.673788][ T7763] vxcan1 speed is unknown, defaulting to 1000 [ 122.711728][ T7768] lo speed is unknown, defaulting to 1000 [ 122.974055][ T7786] lo speed is unknown, defaulting to 1000 [ 123.188613][ T7768] vxcan1 speed is unknown, defaulting to 1000 [ 123.725942][ T7807] syz_tun: entered promiscuous mode [ 123.802920][ T7786] vxcan1 speed is unknown, defaulting to 1000 [ 123.834839][ T7812] netlink: 20 bytes leftover after parsing attributes in process `syz.4.492'. [ 124.360798][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.499'. [ 124.571620][ T7827] xt_CT: No such helper "netbios-ns" [ 124.774074][ T7824] lo speed is unknown, defaulting to 1000 [ 124.844855][ T7842] netlink: 'syz.4.501': attribute type 15 has an invalid length. [ 124.876543][ T7824] vxcan1 speed is unknown, defaulting to 1000 [ 125.131832][ T7850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.503'. [ 125.160406][ T7848] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 125.449160][ T7858] netlink: 'syz.3.505': attribute type 11 has an invalid length. [ 125.998340][ T7883] netlink: 24 bytes leftover after parsing attributes in process `syz.1.513'. [ 126.023029][ T7883] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 126.162971][ T7886] netlink: 'syz.3.515': attribute type 1 has an invalid length. [ 126.191496][ T7886] __nla_validate_parse: 1 callbacks suppressed [ 126.191513][ T7886] netlink: 228 bytes leftover after parsing attributes in process `syz.3.515'. [ 126.335490][ T7893] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 126.445652][ T7904] netlink: 'syz.3.520': attribute type 15 has an invalid length. [ 126.510399][ T7899] tipc: Started in network mode [ 126.531140][ T7899] tipc: Node identity 9ed54125b3a6, cluster identity 4711 [ 126.552218][ T7899] tipc: Enabled bearer , priority 0 [ 126.591517][ T7916] syzkaller0: entered promiscuous mode [ 126.607364][ T7916] syzkaller0: entered allmulticast mode [ 126.703952][ T7898] tipc: Resetting bearer [ 126.764111][ T7898] tipc: Disabling bearer [ 126.924452][ T7932] netlink: 'syz.4.525': attribute type 12 has an invalid length. [ 127.010249][ T7932] netlink: 'syz.4.525': attribute type 4 has an invalid length. [ 127.029591][ T5901] lo speed is unknown, defaulting to 1000 [ 127.035874][ T5901] syz1: Port: 1 Link DOWN [ 127.103503][ T7940] netlink: 'syz.1.527': attribute type 6 has an invalid length. [ 127.127334][ T7940] netlink: 124 bytes leftover after parsing attributes in process `syz.1.527'. [ 127.162159][ T7940] digital: digital_start_poll: Unknown protocol [ 127.177936][ T7940] netlink: 52 bytes leftover after parsing attributes in process `syz.1.527'. [ 127.802581][ T7978] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 127.834059][ T7978] bond1 (unregistering): Released all slaves [ 127.882721][ T7985] netlink: 20 bytes leftover after parsing attributes in process `syz.1.537'. [ 127.928497][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'. [ 128.117158][ T7998] netlink: 40 bytes leftover after parsing attributes in process `syz.0.540'. [ 128.203280][ T8004] IPv6: addrconf: prefix option has invalid lifetime [ 128.212193][ T8005] tipc: Enabled bearer , priority 0 [ 128.260880][ T8004] netlink: 'syz.3.542': attribute type 1 has an invalid length. [ 128.273906][ T8005] syzkaller0: entered promiscuous mode [ 128.280008][ T8005] syzkaller0: entered allmulticast mode [ 128.304530][ T8008] sock: sock_timestamping_bind_phc: sock not bind to device [ 128.343071][ T8011] bond1: (slave gretap1): making interface the new active one [ 128.352075][ T8011] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 128.416578][ T8005] tipc: Resetting bearer [ 128.442170][ T8002] tipc: Resetting bearer [ 128.635904][ T8002] tipc: Disabling bearer [ 128.641185][ T8019] netlink: 20 bytes leftover after parsing attributes in process `syz.3.548'. [ 128.661401][ T8019] nbd: must specify at least one socket [ 128.696490][ T8023] netlink: 'syz.2.550': attribute type 50 has an invalid length. [ 128.719706][ T8023] netlink: 20 bytes leftover after parsing attributes in process `syz.2.550'. [ 128.859126][ T8030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.552'. [ 129.001221][ T8041] netlink: 104 bytes leftover after parsing attributes in process `syz.4.551'. [ 129.266204][ T8056] netlink: 'syz.0.560': attribute type 11 has an invalid length. [ 129.693631][ T8078] x_tables: duplicate underflow at hook 1 [ 129.889324][ T8085] netlink: 'syz.3.569': attribute type 39 has an invalid length. [ 130.084881][ T8085] hsr_slave_1 (unregistering): left promiscuous mode [ 130.316326][ T8100] tipc: Enabling of bearer rejected, failed to enable media [ 130.528361][ T8118] batadv_slave_0: mtu less than device minimum [ 130.593603][ T8125] sctp_getsockopt_maxburst: 55 callbacks suppressed [ 130.593621][ T8125] sctp: [Deprecated]: syz.0.578 (pid 8125) Use of int in max_burst socket option. [ 130.593621][ T8125] Use struct sctp_assoc_value instead [ 131.224608][ T8148] netlink: 'syz.3.586': attribute type 8 has an invalid length. [ 131.390454][ T8161] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 4, id = 0 [ 131.520748][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.545529][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.569497][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.625110][ T4169] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.771294][ T8184] netlink: 'syz.4.597': attribute type 15 has an invalid length. [ 131.899088][ T8196] tipc: Enabled bearer , priority 0 [ 131.907921][ T8196] syzkaller0: entered promiscuous mode [ 131.913872][ T8196] syzkaller0: entered allmulticast mode [ 131.938329][ T8196] tipc: Resetting bearer [ 131.970825][ T8195] tipc: Resetting bearer [ 132.016529][ T8195] tipc: Disabling bearer [ 132.079177][ T8205] ipt_REJECT: TCP_RESET invalid for non-tcp [ 132.468531][ T8217] __nla_validate_parse: 5 callbacks suppressed [ 132.468548][ T8217] netlink: 32 bytes leftover after parsing attributes in process `syz.0.608'. [ 132.821396][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.020738][ T8241] netlink: 3 bytes leftover after parsing attributes in process `syz.4.614'. [ 133.030773][ T8241] 0ªX¹¦À: renamed from caif0 [ 133.041418][ T8241] 0ªX¹¦À: entered allmulticast mode [ 133.060085][ T8241] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 133.157318][ T8248] 0ªX¹¦À: left allmulticast mode [ 133.163464][ T8248] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 133.212230][ T10] lo speed is unknown, defaulting to 1000 [ 133.218528][ T10] syz1: Port: 1 Link ACTIVE [ 133.224095][ T8246] ip6gre1: entered promiscuous mode [ 133.249929][ T8246] ip6gre1: entered allmulticast mode [ 133.268656][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.288880][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.300436][ T5839] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.405215][ T5839] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.429523][ T5839] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.468598][ T8271] netlink: 'syz.3.619': attribute type 11 has an invalid length. [ 133.487706][ T8271] netlink: 'syz.3.619': attribute type 11 has an invalid length. [ 133.507536][ T8273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.621'. [ 133.527861][ T8271] netlink: 224 bytes leftover after parsing attributes in process `syz.3.619'. [ 133.636732][ T8276] netlink: 'syz.2.623': attribute type 15 has an invalid length. [ 133.690123][ T8278] vxcan3: entered allmulticast mode [ 133.898203][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.626'. [ 134.092402][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.102107][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.155851][ T8263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.279533][ T8299] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.416570][ T8304] bond3: option arp_all_targets: invalid value (3) [ 134.424664][ T8302] netlink: 52 bytes leftover after parsing attributes in process `syz.4.631'. [ 134.460174][ T8304] bond3 (unregistering): Released all slaves [ 134.796514][ T8326] dvmrp8: entered allmulticast mode [ 134.850787][ T8326] lo speed is unknown, defaulting to 1000 [ 134.858781][ T8326] vxcan1 speed is unknown, defaulting to 1000 [ 134.883274][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.635'. [ 134.915262][ T8335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.939961][ T8335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.085490][ T8336] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.640'. [ 135.100399][ T8344] pimreg: left allmulticast mode [ 135.131900][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.641'. [ 135.144437][ T8345] netlink: 34 bytes leftover after parsing attributes in process `syz.3.641'. [ 135.229110][ T8349] netlink: 'syz.0.642': attribute type 1 has an invalid length. [ 135.252471][ T8351] netlink: 'syz.3.643': attribute type 15 has an invalid length. [ 135.523353][ T8364] IPVS: set_ctl: invalid protocol: 17900 100.1.1.2:20000 [ 135.533491][ T8364] IPVS: length: 104 != 8 [ 135.588972][ T8324] dvmrp8: left allmulticast mode [ 136.018587][ T8375] syzkaller0: entered promiscuous mode [ 136.038236][ T8375] syzkaller0: entered allmulticast mode [ 136.199289][ T8384] netlink: 'syz.2.654': attribute type 1 has an invalid length. [ 136.224296][ T8386] netlink: 'syz.3.655': attribute type 1 has an invalid length. [ 136.394682][ T8389] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 136.406021][ T8389] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 136.441452][ T8391] tipc: Enabling of bearer rejected, failed to enable media [ 136.463222][ T8380] lo speed is unknown, defaulting to 1000 [ 136.481241][ T8400] sctp: [Deprecated]: syz.4.659 (pid 8400) Use of struct sctp_assoc_value in delayed_ack socket option. [ 136.481241][ T8400] Use struct sctp_sack_info instead [ 136.481643][ T8384] macvlan3: entered promiscuous mode [ 136.503014][ T8384] macvlan3: entered allmulticast mode [ 136.518328][ T8384] bond1: entered promiscuous mode [ 136.532011][ T8384] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 136.543577][ T8384] bond1: left promiscuous mode [ 136.570913][ T8380] vxcan1 speed is unknown, defaulting to 1000 [ 136.783272][ T8418] netlink: 'syz.4.665': attribute type 15 has an invalid length. [ 136.965409][ T8427] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.164325][ T8434] netlink: 'syz.2.668': attribute type 1 has an invalid length. [ 137.615310][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 137.720996][ T8439] veth3: entered promiscuous mode [ 137.844026][ T8434] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.857010][ T8441] erspan0: entered allmulticast mode [ 137.878174][ T8441] bond2: (slave erspan0): making interface the new active one [ 137.888788][ T8441] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 137.901852][ T8456] Cannot find del_set index 4 as target [ 137.924589][ T8437] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 138.008073][ T8460] netlink: 'syz.1.678': attribute type 1 has an invalid length. [ 138.023070][ T8443] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 138.132718][ T8468] __nla_validate_parse: 6 callbacks suppressed [ 138.132736][ T8468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.678'. [ 138.143335][ T8460] bond2: entered promiscuous mode [ 138.153770][ T8460] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.241254][ T8460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.678'. [ 138.364362][ T8480] batadv_slave_1: entered promiscuous mode [ 138.412882][ T8482] lo speed is unknown, defaulting to 1000 [ 138.423745][ T8480] batadv_slave_1: left promiscuous mode [ 138.430921][ T8482] vxcan1 speed is unknown, defaulting to 1000 [ 138.436573][ T8485] netlink: 'syz.4.683': attribute type 15 has an invalid length. [ 138.524154][ T8492] hsr0: entered allmulticast mode [ 138.529399][ T8492] hsr_slave_0: entered allmulticast mode [ 138.535564][ T8492] hsr_slave_1: entered allmulticast mode [ 138.614004][ T8492] hsr_slave_0: left promiscuous mode [ 138.660319][ T8492] hsr_slave_1: left promiscuous mode [ 138.686591][ T8492] hsr0 (unregistering): left allmulticast mode [ 139.094069][ T8510] syzkaller1: entered promiscuous mode [ 139.105936][ T8510] syzkaller1: entered allmulticast mode [ 139.170381][ T8516] bridge0: entered promiscuous mode [ 139.179835][ T8516] bridge0: entered allmulticast mode [ 139.191143][ T8516] team0: Port device bridge0 added [ 139.402780][ T8525] netlink: 20 bytes leftover after parsing attributes in process `syz.0.693'. [ 139.462003][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.693'. [ 139.561554][ T8533] xfrm1: entered allmulticast mode [ 139.869480][ T8552] xt_NFQUEUE: number of queues (1024) out of range (got 66558) [ 140.355539][ T8529] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.694'. [ 140.649222][ T8574] netlink: 20 bytes leftover after parsing attributes in process `syz.4.705'. [ 140.687649][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.706'. [ 140.770370][ T8553] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 140.827961][ T8575] lo speed is unknown, defaulting to 1000 [ 140.830791][ T8582] netlink: 'syz.4.705': attribute type 72 has an invalid length. [ 140.873349][ T8575] vxcan1 speed is unknown, defaulting to 1000 [ 140.881488][ T8582] netlink: 40 bytes leftover after parsing attributes in process `syz.4.705'. [ 141.014388][ T8585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.042256][ T8590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.709'. [ 141.088399][ T8593] netlink: 60 bytes leftover after parsing attributes in process `syz.1.710'. [ 141.437835][ T8617] xt_connbytes: Forcing CT accounting to be enabled [ 141.776529][ T8630] lo speed is unknown, defaulting to 1000 [ 141.838657][ T8630] vxcan1 speed is unknown, defaulting to 1000 [ 142.574381][ T8664] netlink: 'syz.0.731': attribute type 8 has an invalid length. [ 143.043887][ T8695] netlink: 'syz.1.739': attribute type 6 has an invalid length. [ 143.073594][ T8697] vlan2: entered allmulticast mode [ 143.079285][ T8697] dummy0: entered allmulticast mode [ 143.471239][ T8712] __nla_validate_parse: 5 callbacks suppressed [ 143.471256][ T8712] netlink: 112 bytes leftover after parsing attributes in process `syz.4.742'. [ 143.621641][ T8708] lo speed is unknown, defaulting to 1000 [ 143.668435][ T8708] vxcan1 speed is unknown, defaulting to 1000 [ 143.682254][ T8719] x_tables: duplicate underflow at hook 4 [ 143.688581][ T8719] syz_tun: entered allmulticast mode [ 143.885818][ T8726] bond0: (slave team0): Releasing backup interface [ 143.918085][ T8729] netlink: 12 bytes leftover after parsing attributes in process `syz.3.749'. [ 143.929757][ T8726] bridge_slave_0: left allmulticast mode [ 143.962696][ T8726] bridge_slave_0: left promiscuous mode [ 143.973070][ T8726] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.983250][ T8726] bridge_slave_1: left allmulticast mode [ 143.989359][ T8726] bridge_slave_1: left promiscuous mode [ 143.995326][ T8726] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.010683][ T8726] bond0: (slave bond_slave_0): Releasing backup interface [ 144.020257][ T8734] netlink: 232 bytes leftover after parsing attributes in process `syz.2.748'. [ 144.032616][ T8726] bond0: (slave bond_slave_1): Releasing backup interface [ 144.044694][ T8726] team0: Port device team_slave_0 removed [ 144.053115][ T8726] team0: Port device team_slave_1 removed [ 144.059466][ T8726] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.069382][ T8726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.074420][ T8735] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.087700][ T8735] netlink: 48 bytes leftover after parsing attributes in process `syz.3.749'. [ 144.087824][ T8726] batman_adv: batadv0: Interface deactivated: macvtap1 [ 144.103912][ T8726] batman_adv: batadv0: Removing interface: macvtap1 [ 144.115251][ T8727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.748'. [ 144.128595][ T8727] netlink: 16 bytes leftover after parsing attributes in process `syz.2.748'. [ 144.138557][ T8727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.748'. [ 144.148085][ T8727] netlink: 16 bytes leftover after parsing attributes in process `syz.2.748'. [ 144.174399][ T8727] netlink: 5 bytes leftover after parsing attributes in process `syz.2.748'. [ 144.213436][ T8729] bond3: entered promiscuous mode [ 144.220103][ T8729] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.260663][ T8733] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.268168][ T8733] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 144.280215][ T8733] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 144.307441][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.748'. [ 144.328647][ T8743] vlan2: entered allmulticast mode [ 144.333786][ T8743] bridge_slave_0: entered allmulticast mode [ 144.356573][ T8719] syz_tun: left allmulticast mode [ 144.610814][ T8757] xt_TCPMSS: Only works on TCP SYN packets [ 144.683427][ T8736] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 145.219243][ T8783] delete_channel: no stack [ 145.626523][ T8821] netlink: 'syz.0.772': attribute type 15 has an invalid length. [ 145.674753][ T8825] syzkaller0: entered promiscuous mode [ 145.708725][ T8825] syzkaller0: entered allmulticast mode [ 145.729625][ T8833] TC_ACT_REPEAT abuse ? [ 146.095111][ T5842] Bluetooth: hci2: command 0x0401 tx timeout [ 146.255109][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.442402][ T8869] netlink: 'syz.3.780': attribute type 11 has an invalid length. [ 146.460997][ T8869] netlink: 'syz.3.780': attribute type 11 has an invalid length. [ 146.570554][ T8855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.433028][ T8908] tipc: Enabled bearer , priority 0 [ 147.448072][ T8908] syzkaller0: entered promiscuous mode [ 147.453590][ T8908] syzkaller0: entered allmulticast mode [ 147.478023][ T8907] tipc: Resetting bearer [ 147.506301][ T8907] tipc: Disabling bearer [ 148.084176][ T8937] netlink: 'syz.3.804': attribute type 2 has an invalid length. [ 148.119989][ T8937] netlink: 'syz.3.804': attribute type 2 has an invalid length. [ 148.177677][ T8941] netlink: 'syz.4.806': attribute type 15 has an invalid length. [ 148.333131][ T8953] bond3: entered promiscuous mode [ 148.338499][ T8953] bond3: entered allmulticast mode [ 148.344196][ T8953] 8021q: adding VLAN 0 to HW filter on device bond3 [ 148.505332][ T8966] __nla_validate_parse: 12 callbacks suppressed [ 148.505440][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.812'. [ 148.550097][ T8966] syzkaller0: entered promiscuous mode [ 148.566780][ T8966] syzkaller0: entered allmulticast mode [ 148.592969][ T8970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.814'. [ 148.633496][ T8970] 8021q: adding VLAN 0 to HW filter on device bond4 [ 148.821392][ T8982] netlink: 16 bytes leftover after parsing attributes in process `syz.1.818'. [ 148.830725][ T8982] netlink: 24 bytes leftover after parsing attributes in process `syz.1.818'. [ 148.877020][ T8982] bond3: option primary_reselect: invalid value (255) [ 148.890240][ T8982] bond3 (unregistering): Released all slaves [ 149.530005][ T9027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.832'. [ 149.682738][ T9035] netlink: 44 bytes leftover after parsing attributes in process `syz.4.834'. [ 149.791419][ T9040] syzkaller0: entered promiscuous mode [ 149.798972][ T9040] syzkaller0: entered allmulticast mode [ 149.967990][ T9052] geneve2: entered promiscuous mode [ 149.978214][ T4054] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.003213][ T9055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.841'. [ 150.015161][ T4054] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.040605][ T4054] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.051029][ T4054] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.079779][ T9052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.841'. [ 150.091645][ T9052] IPVS: Error connecting to the multicast addr [ 150.149247][ T9060] No such timeout policy "syz0" [ 150.164731][ T9060] netlink: 28 bytes leftover after parsing attributes in process `syz.4.843'. [ 150.406131][ T9077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.850'. [ 150.514249][ T9081] : renamed from bond_slave_0 (while UP) [ 151.319356][ T9112] netlink: 'syz.1.858': attribute type 2 has an invalid length. [ 151.765737][ T9138] syzkaller0: entered promiscuous mode [ 151.835108][ T9138] syzkaller0: entered allmulticast mode [ 152.019651][ T9144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.063931][ T9144] bond0: (slave rose0): Enslaving as an active interface with an up link [ 152.356505][ T9166] netlink: 'syz.0.873': attribute type 1 has an invalid length. [ 152.467958][ T9166] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 152.505995][ T4054] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 152.506693][ T9166] 8021q: adding VLAN 0 to HW filter on device bond3 [ 152.625254][ T7959] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 152.731121][ T9187] Cannot find del_set index 2 as target [ 153.047538][ T9195] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.049490][ T5842] Bluetooth: hci4: link tx timeout [ 153.060753][ T5842] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.096230][ T9201] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 153.103661][ T9201] bond2: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 154.025765][ T9238] __nla_validate_parse: 6 callbacks suppressed [ 154.025788][ T9238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'. [ 154.053448][ T9236] netlink: 'syz.0.889': attribute type 15 has an invalid length. [ 154.339383][ T9257] netlink: 20 bytes leftover after parsing attributes in process `syz.4.893'. [ 154.341963][ T9255] erspan0: left allmulticast mode [ 154.388609][ T9255] syz_tun: left promiscuous mode [ 154.426989][ T9255] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 155.137048][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 155.173252][ T9290] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 155.418583][ T9305] netlink: 28 bytes leftover after parsing attributes in process `syz.4.910'. [ 155.431647][ T9305] netlink: 28 bytes leftover after parsing attributes in process `syz.4.910'. [ 155.572959][ T9314] netlink: 52 bytes leftover after parsing attributes in process `syz.4.913'. [ 155.591367][ T9319] netlink: 32 bytes leftover after parsing attributes in process `syz.1.915'. [ 155.615093][ T9318] delete_channel: no stack [ 155.961311][ T9334] netlink: 'syz.2.920': attribute type 2 has an invalid length. [ 155.981191][ T9338] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 156.024876][ T9334] lo speed is unknown, defaulting to 1000 [ 156.032709][ T9334] vxcan1 speed is unknown, defaulting to 1000 [ 156.236512][ T9357] lo speed is unknown, defaulting to 1000 [ 156.436368][ T9365] lo speed is unknown, defaulting to 1000 [ 156.441940][ T9357] vxcan1 speed is unknown, defaulting to 1000 [ 156.963096][ T9365] vxcan1 speed is unknown, defaulting to 1000 [ 157.047580][ T9376] netlink: 'syz.1.927': attribute type 1 has an invalid length. [ 157.115414][ T9379] netlink: 'syz.1.927': attribute type 11 has an invalid length. [ 157.123192][ T9379] netlink: 140 bytes leftover after parsing attributes in process `syz.1.927'. [ 157.267665][ T9376] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.335752][ T9382] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.343076][ T9382] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 157.354656][ T9382] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 157.631606][ T9394] bridge4: entered promiscuous mode [ 157.866211][ T9407] netlink: 52 bytes leftover after parsing attributes in process `syz.3.933'. [ 157.905654][ T9406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.939727][ T9406] batadv_slave_0: entered promiscuous mode [ 158.318381][ T9414] lo speed is unknown, defaulting to 1000 [ 158.346186][ T9414] vxcan1 speed is unknown, defaulting to 1000 [ 158.565755][ T9427] netlink: 20 bytes leftover after parsing attributes in process `syz.0.937'. [ 158.596198][ T9418] lo speed is unknown, defaulting to 1000 [ 158.656391][ T9426] lo speed is unknown, defaulting to 1000 [ 158.812466][ T9418] vxcan1 speed is unknown, defaulting to 1000 [ 159.206371][ T9434] vlan2: entered promiscuous mode [ 159.235216][ T9434] team0: entered promiscuous mode [ 159.540709][ T9426] vxcan1 speed is unknown, defaulting to 1000 [ 160.231181][ T9461] netlink: 136 bytes leftover after parsing attributes in process `syz.2.947'. [ 160.481379][ T9471] netlink: 116 bytes leftover after parsing attributes in process `syz.2.950'. [ 160.652303][ T9478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.951'. [ 160.834065][ T9470] lo speed is unknown, defaulting to 1000 [ 161.025123][ T9470] vxcan1 speed is unknown, defaulting to 1000 [ 161.132371][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.955'. [ 161.433171][ T9506] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 161.470122][ T9506] bond3 (unregistering): Released all slaves [ 161.971773][ T9505] lo speed is unknown, defaulting to 1000 [ 162.166869][ T9505] vxcan1 speed is unknown, defaulting to 1000 [ 162.371817][ T9515] syzkaller0: entered promiscuous mode [ 162.380467][ T9515] syzkaller0: entered allmulticast mode [ 162.599852][ T9538] x_tables: duplicate underflow at hook 3 [ 163.111386][ T5933] lo speed is unknown, defaulting to 1000 [ 163.112369][ T9549] lo speed is unknown, defaulting to 1000 [ 163.129251][ T5933] syz1: Port: 1 Link DOWN [ 163.135471][ T9560] delete_channel: no stack [ 163.140639][ T9549] vxcan1 speed is unknown, defaulting to 1000 [ 163.356874][ T9565] pim6reg: entered allmulticast mode [ 163.823890][ T9579] lo speed is unknown, defaulting to 1000 [ 163.872608][ T9579] vxcan1 speed is unknown, defaulting to 1000 [ 164.049067][ T9595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.977'. [ 164.175251][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 164.359679][ T9608] xt_recent: hitcount (4294967294) is larger than allowed maximum (65535) [ 164.444644][ T9607] lo speed is unknown, defaulting to 1000 [ 164.459836][ T9607] vxcan1 speed is unknown, defaulting to 1000 [ 165.043385][ T9621] tunl0: entered promiscuous mode [ 165.053596][ T9621] netlink: 'syz.1.983': attribute type 4 has an invalid length. [ 165.062367][ T9621] netlink: 9 bytes leftover after parsing attributes in process `syz.1.983'. [ 165.287581][ T9628] lo speed is unknown, defaulting to 1000 [ 165.308318][ T9628] vxcan1 speed is unknown, defaulting to 1000 [ 165.365060][ T9616] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 165.518737][ T9635] netlink: 'syz.0.987': attribute type 10 has an invalid length. [ 165.565041][ T9635] netlink: 40 bytes leftover after parsing attributes in process `syz.0.987'. [ 165.614048][ T9635] dummy0: entered promiscuous mode [ 165.632394][ T9635] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 165.717857][ T9651] netlink: 'syz.4.991': attribute type 3 has an invalid length. [ 165.834070][ T9660] SET target dimension over the limit! [ 165.845057][ T9660] netlink: 28 bytes leftover after parsing attributes in process `syz.0.994'. [ 166.148115][ T9672] netlink: 'syz.2.997': attribute type 1 has an invalid length. [ 166.242014][ T9672] 8021q: adding VLAN 0 to HW filter on device bond5 [ 166.296331][ T9654] lo speed is unknown, defaulting to 1000 [ 166.304125][ T9654] vxcan1 speed is unknown, defaulting to 1000 [ 166.368826][ T9682] netlink: 'syz.4.1001': attribute type 21 has an invalid length. [ 166.415256][ T9682] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1001'. [ 166.605973][ T9682] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1001'. [ 166.882921][ T9700] netlink: 'syz.0.1004': attribute type 8 has an invalid length. [ 166.922277][ T9703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1005'. [ 167.104448][ T9699] lo speed is unknown, defaulting to 1000 [ 167.155173][ T9700] lo speed is unknown, defaulting to 1000 [ 167.157063][ T9699] vxcan1 speed is unknown, defaulting to 1000 [ 167.178466][ T9713] netlink: 'syz.2.1007': attribute type 1 has an invalid length. [ 167.331813][ T9716] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1008'. [ 167.505373][ T9722] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1010'. [ 167.534088][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1011'. [ 167.547186][ T9722] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1010'. [ 167.571626][ T9722] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1010'. [ 167.877738][ T9722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.013091][ T9700] vxcan1 speed is unknown, defaulting to 1000 [ 168.034126][ T4169] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.075408][ T4169] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.162873][ T116] vxcan1 speed is unknown, defaulting to 1000 [ 168.179631][ T116] syz2: Port: 1 Link DOWN [ 168.198522][ T4169] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.216593][ T4169] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.245098][ T9754] vlan2: entered promiscuous mode [ 168.250168][ T9754] team0: entered promiscuous mode [ 168.255461][ T9754] team_slave_0: entered promiscuous mode [ 168.266224][ T116] vxcan1 speed is unknown, defaulting to 1000 [ 168.270329][ T9754] team_slave_1: entered promiscuous mode [ 168.317224][ T9761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.540416][ T9766] bond6: option ad_select: invalid value (34) [ 168.559450][ T9766] bond6 (unregistering): Released all slaves [ 168.776792][ T9778] lo speed is unknown, defaulting to 1000 [ 168.784229][ T9778] vxcan1 speed is unknown, defaulting to 1000 [ 168.798590][ T9785] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.016413][ T9795] syzkaller1: entered promiscuous mode [ 169.030677][ T9795] syzkaller1: entered allmulticast mode [ 169.434829][ T9821] netlink: 'syz.1.1032': attribute type 4 has an invalid length. [ 169.508083][ T9825] netlink: 'syz.1.1032': attribute type 4 has an invalid length. [ 170.006600][ T9842] team0: Port device team_slave_0 removed [ 170.113942][ T9839] lo speed is unknown, defaulting to 1000 [ 170.138030][ T9854] netlink: 'syz.1.1042': attribute type 15 has an invalid length. [ 170.159572][ T9839] vxcan1 speed is unknown, defaulting to 1000 [ 170.240468][ T9856] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 170.253538][ T9856] batman_adv: batadv0: Adding interface: gretap1 [ 170.260116][ T9856] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.311218][ T9856] batman_adv: batadv0: Interface activated: gretap1 [ 170.414072][ T9864] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.448091][ T9864] netlink: 'syz.4.1045': attribute type 12 has an invalid length. [ 170.521049][ T9864] netlink: 'syz.4.1045': attribute type 12 has an invalid length. [ 170.530895][ T4169] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.551543][ T4169] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.582563][ T4169] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.623066][ T4169] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.677087][ T9861] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.044216][ T9878] __nla_validate_parse: 148 callbacks suppressed [ 171.044234][ T9878] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1048'. [ 171.873841][ T9914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1057'. [ 172.406381][ T9938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1063'. [ 172.443641][ T9939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1061'. [ 172.700940][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1065'. [ 172.932391][ T9959] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1068'. [ 172.935509][ T9937] netlink: 'syz.2.1061': attribute type 1 has an invalid length. [ 173.038700][ T9945] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 173.107884][ T9946] netlink: 'syz.1.1065': attribute type 3 has an invalid length. [ 173.115746][ T9946] netlink: 'syz.1.1065': attribute type 1 has an invalid length. [ 173.158102][ T9946] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1065'. [ 173.387801][ T9991] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1073'. [ 173.490609][ T9998] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1075'. [ 173.754804][T10012] netlink: 'syz.0.1078': attribute type 5 has an invalid length. [ 173.915951][T10021] syzkaller1: entered promiscuous mode [ 173.925721][T10021] syzkaller1: entered allmulticast mode [ 173.943033][T10024] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1085'. [ 174.187587][T10041] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 174.248440][T10043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.467229][T10054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.494693][T10054] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 174.542420][ T5932] lo speed is unknown, defaulting to 1000 [ 174.553372][ T5932] syz1: Port: 1 Link ACTIVE [ 174.917650][T10098] netlink: 'syz.2.1106': attribute type 11 has an invalid length. [ 175.254192][T10120] lo speed is unknown, defaulting to 1000 [ 175.269606][T10120] vxcan1 speed is unknown, defaulting to 1000 [ 175.585483][T10148] tipc: Enabled bearer , priority 0 [ 175.593828][T10148] syzkaller0: entered promiscuous mode [ 175.601003][T10148] syzkaller0: entered allmulticast mode [ 175.709829][T10153] netlink: 'syz.1.1121': attribute type 1 has an invalid length. [ 175.832732][T10155] tipc: Resetting bearer [ 175.839810][T10153] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 175.860619][T10143] tipc: Resetting bearer [ 175.895389][T10143] tipc: Disabling bearer [ 176.228880][T10170] lo speed is unknown, defaulting to 1000 [ 176.256119][T10170] vxcan1 speed is unknown, defaulting to 1000 [ 176.315441][T10186] netlink: 'syz.1.1129': attribute type 1 has an invalid length. [ 176.346220][T10186] 8021q: adding VLAN 0 to HW filter on device bond4 [ 176.351923][T10189] netlink: 'syz.0.1130': attribute type 13 has an invalid length. [ 176.357507][T10186] __nla_validate_parse: 8 callbacks suppressed [ 176.357523][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1129'. [ 176.377231][T10186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1129'. [ 176.404239][T10189] netlink: 'syz.0.1130': attribute type 17 has an invalid length. [ 176.620197][T10189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.629560][T10189] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.638336][T10189] dummy0: left promiscuous mode [ 176.647201][T10189] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 176.717747][T10186] bond4: (slave dummy0): making interface the new active one [ 176.752193][T10186] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 177.040790][T10215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1135'. [ 177.119785][T10215] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 177.154196][T10224] netlink: 'syz.4.1136': attribute type 3 has an invalid length. [ 177.202480][T10224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1136'. [ 177.624295][T10234] lo speed is unknown, defaulting to 1000 [ 177.641138][T10234] vxcan1 speed is unknown, defaulting to 1000 [ 178.226795][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1145'. [ 178.241208][T10251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1145'. [ 178.276593][T10251] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 178.348561][ T9741] IPVS: starting estimator thread 0... [ 178.446041][T10268] IPVS: using max 27 ests per chain, 64800 per kthread [ 178.479611][T10272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1149'. [ 178.506683][T10272] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1149'. [ 178.528779][T10272] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1149'. [ 178.546332][T10269] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1148'. [ 178.927791][T10281] Bluetooth: MGMT ver 1.23 [ 179.339632][T10311] lo speed is unknown, defaulting to 1000 [ 179.350079][T10311] vxcan1 speed is unknown, defaulting to 1000 [ 179.497607][T10323] lo speed is unknown, defaulting to 1000 [ 179.524759][T10329] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 180.312766][T10323] vxcan1 speed is unknown, defaulting to 1000 [ 180.639580][T10374] bridge0: port 1(syz_tun) entered blocking state [ 180.656111][T10374] bridge0: port 1(syz_tun) entered disabled state [ 180.672712][T10374] syz_tun: entered allmulticast mode [ 180.716846][T10374] syz_tun: entered promiscuous mode [ 180.902862][T10384] netlink: zone id is out of range [ 180.908215][T10384] netlink: zone id is out of range [ 180.914950][T10384] netlink: set zone limit has 8 unknown bytes [ 180.924610][T10387] syz.3.1180 uses old SIOCAX25GETINFO [ 180.988319][ T5842] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 180.996351][ T5842] Bluetooth: hci2: command 0x0401 tx timeout [ 181.214763][T10394] IPVS: Scheduler module ip_vs_ not found [ 181.592940][T10410] lo speed is unknown, defaulting to 1000 [ 181.616098][T10410] vxcan1 speed is unknown, defaulting to 1000 [ 182.146294][T10445] __nla_validate_parse: 8 callbacks suppressed [ 182.146311][T10445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1197'. [ 182.146967][T10449] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1200'. [ 182.308224][T10456] netlink: 428 bytes leftover after parsing attributes in process `syz.1.1202'. [ 182.340812][T10456] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1202'. [ 182.517668][T10465] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1205'. [ 182.782588][T10477] netlink: 'syz.3.1209': attribute type 1 has an invalid length. [ 182.792441][T10476] Can't find ip_set type hash:n [ 182.949759][T10487] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 183.013797][T10486] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1212'. [ 183.369406][T10504] netlink: 'syz.0.1218': attribute type 22 has an invalid length. [ 183.378015][T10504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1218'. [ 183.438456][T10508] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1218'. [ 183.548368][T10514] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1221'. [ 183.596321][T10517] FAULT_INJECTION: forcing a failure. [ 183.596321][T10517] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 183.610380][T10517] CPU: 1 UID: 0 PID: 10517 Comm: syz.1.1222 Not tainted syzkaller #0 PREEMPT(full) [ 183.610418][T10517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 183.610444][T10517] Call Trace: [ 183.610451][T10517] [ 183.610458][T10517] dump_stack_lvl+0x189/0x250 [ 183.610499][T10517] ? __pfx____ratelimit+0x10/0x10 [ 183.610522][T10517] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.610539][T10517] ? __pfx__printk+0x10/0x10 [ 183.610556][T10517] ? __might_fault+0xb0/0x130 [ 183.610584][T10517] should_fail_ex+0x414/0x560 [ 183.610612][T10517] _copy_from_user+0x2d/0xb0 [ 183.610634][T10517] __sys_bpf+0x1e3/0x860 [ 183.610651][T10517] ? __pfx___sys_bpf+0x10/0x10 [ 183.610684][T10517] ? ksys_write+0x22a/0x250 [ 183.610708][T10517] ? __pfx_ksys_write+0x10/0x10 [ 183.610734][T10517] __x64_sys_bpf+0x7c/0x90 [ 183.610758][T10517] do_syscall_64+0xfa/0xfa0 [ 183.610779][T10517] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.610803][T10517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.610820][T10517] ? clear_bhb_loop+0x60/0xb0 [ 183.610841][T10517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.610858][T10517] RIP: 0033:0x7f60b018f6c9 [ 183.610882][T10517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.610896][T10517] RSP: 002b:00007f60b0f45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 183.610922][T10517] RAX: ffffffffffffffda RBX: 00007f60b03e5fa0 RCX: 00007f60b018f6c9 [ 183.610935][T10517] RDX: 0000000000000020 RSI: 00002000000002c0 RDI: 0000000000000001 [ 183.610946][T10517] RBP: 00007f60b0f45090 R08: 0000000000000000 R09: 0000000000000000 [ 183.610956][T10517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.610967][T10517] R13: 00007f60b03e6038 R14: 00007f60b03e5fa0 R15: 00007ffe3736d198 [ 183.610997][T10517] [ 184.007633][T10534] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1227'. [ 184.125534][T10539] netlink: 'syz.3.1228': attribute type 37 has an invalid length. [ 184.265482][T10549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.307298][T10552] syzkaller0: entered promiscuous mode [ 184.313313][T10552] syzkaller0: entered allmulticast mode [ 184.476572][T10558] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.480779][T10561] FAULT_INJECTION: forcing a failure. [ 184.480779][T10561] name failslab, interval 1, probability 0, space 0, times 1 [ 184.501612][T10561] CPU: 0 UID: 0 PID: 10561 Comm: syz.1.1235 Not tainted syzkaller #0 PREEMPT(full) [ 184.501636][T10561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 184.501647][T10561] Call Trace: [ 184.501654][T10561] [ 184.501662][T10561] dump_stack_lvl+0x189/0x250 [ 184.501689][T10561] ? __pfx____ratelimit+0x10/0x10 [ 184.501712][T10561] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.501734][T10561] ? __pfx__printk+0x10/0x10 [ 184.501758][T10561] ? __pfx___might_resched+0x10/0x10 [ 184.501775][T10561] ? fs_reclaim_acquire+0x7d/0x100 [ 184.501805][T10561] should_fail_ex+0x414/0x560 [ 184.501836][T10561] should_failslab+0xa8/0x100 [ 184.501856][T10561] __kvmalloc_node_noprof+0x158/0x910 [ 184.501879][T10561] ? __fget_files+0x2a/0x420 [ 184.501895][T10561] ? vmemdup_user+0x2b/0xd0 [ 184.501911][T10561] ? __fget_files+0x2a/0x420 [ 184.501932][T10561] vmemdup_user+0x2b/0xd0 [ 184.501950][T10561] map_lookup_elem+0x237/0x630 [ 184.501967][T10561] ? bpf_lsm_bpf+0x9/0x20 [ 184.501991][T10561] __sys_bpf+0x452/0x860 [ 184.502009][T10561] ? __pfx___sys_bpf+0x10/0x10 [ 184.502041][T10561] ? ksys_write+0x22a/0x250 [ 184.502067][T10561] ? __pfx_ksys_write+0x10/0x10 [ 184.502097][T10561] __x64_sys_bpf+0x7c/0x90 [ 184.502119][T10561] do_syscall_64+0xfa/0xfa0 [ 184.502139][T10561] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.502161][T10561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.502177][T10561] ? clear_bhb_loop+0x60/0xb0 [ 184.502197][T10561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.502212][T10561] RIP: 0033:0x7f60b018f6c9 [ 184.502227][T10561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.502241][T10561] RSP: 002b:00007f60b0f45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 184.502259][T10561] RAX: ffffffffffffffda RBX: 00007f60b03e5fa0 RCX: 00007f60b018f6c9 [ 184.502271][T10561] RDX: 0000000000000020 RSI: 00002000000002c0 RDI: 0000000000000001 [ 184.502281][T10561] RBP: 00007f60b0f45090 R08: 0000000000000000 R09: 0000000000000000 [ 184.502292][T10561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.502301][T10561] R13: 00007f60b03e6038 R14: 00007f60b03e5fa0 R15: 00007ffe3736d198 [ 184.502333][T10561] [ 184.862012][T10558] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.992345][T10558] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.076642][T10581] SET target dimension over the limit! [ 185.097612][T10558] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.150490][T10586] netlink: 'syz.2.1244': attribute type 15 has an invalid length. [ 185.156455][T10592] FAULT_INJECTION: forcing a failure. [ 185.156455][T10592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.179343][T10594] netlink: 'syz.0.1247': attribute type 18 has an invalid length. [ 185.203623][T10592] CPU: 1 UID: 0 PID: 10592 Comm: syz.3.1246 Not tainted syzkaller #0 PREEMPT(full) [ 185.203650][T10592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 185.203660][T10592] Call Trace: [ 185.203668][T10592] [ 185.203675][T10592] dump_stack_lvl+0x189/0x250 [ 185.203703][T10592] ? __pfx____ratelimit+0x10/0x10 [ 185.203727][T10592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.203747][T10592] ? __pfx__printk+0x10/0x10 [ 185.203765][T10592] ? __might_fault+0xb0/0x130 [ 185.203798][T10592] should_fail_ex+0x414/0x560 [ 185.203827][T10592] _copy_from_user+0x2d/0xb0 [ 185.203848][T10592] vmemdup_user+0x5e/0xd0 [ 185.203866][T10592] map_lookup_elem+0x237/0x630 [ 185.203884][T10592] ? bpf_lsm_bpf+0x9/0x20 [ 185.203905][T10592] __sys_bpf+0x452/0x860 [ 185.203921][T10592] ? __pfx___sys_bpf+0x10/0x10 [ 185.203953][T10592] ? ksys_write+0x22a/0x250 [ 185.203978][T10592] ? __pfx_ksys_write+0x10/0x10 [ 185.204005][T10592] __x64_sys_bpf+0x7c/0x90 [ 185.204028][T10592] do_syscall_64+0xfa/0xfa0 [ 185.204051][T10592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.204067][T10592] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 185.204082][T10592] ? clear_bhb_loop+0x60/0xb0 [ 185.204102][T10592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.204118][T10592] RIP: 0033:0x7f2e9438f6c9 [ 185.204133][T10592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.204146][T10592] RSP: 002b:00007f2e952b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 185.204165][T10592] RAX: ffffffffffffffda RBX: 00007f2e945e5fa0 RCX: 00007f2e9438f6c9 [ 185.204177][T10592] RDX: 0000000000000020 RSI: 00002000000002c0 RDI: 0000000000000001 [ 185.204187][T10592] RBP: 00007f2e952b5090 R08: 0000000000000000 R09: 0000000000000000 [ 185.204197][T10592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.204207][T10592] R13: 00007f2e945e6038 R14: 00007f2e945e5fa0 R15: 00007ffd2591dcb8 [ 185.204237][T10592] [ 185.497617][ T4054] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.544152][ T49] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.563391][ T49] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.594480][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.811878][T10619] IPVS: set_ctl: invalid protocol: 26219 101.0.255.255:20002 [ 185.870601][T10619] IPVS: set_ctl: invalid protocol: 26219 101.0.255.255:20002 [ 186.229043][T10643] tipc: Enabled bearer , priority 0 [ 186.253609][T10643] syzkaller0: entered promiscuous mode [ 186.260775][T10643] syzkaller0: entered allmulticast mode [ 186.917524][T10689] bond3: (slave bond_slave_0): Device is not our slave [ 186.924530][T10689] bond3: option active_slave: invalid value (bond_slave_0) [ 186.943556][T10689] bond3 (unregistering): Released all slaves [ 186.976802][T10692] bond3: (slave ip6gretap1): Removing an active aggregator [ 186.988018][T10692] bond3: (slave ip6gretap1): Releasing backup interface [ 187.012545][T10692] batman_adv: batadv0: Interface deactivated: gretap1 [ 187.019544][T10692] batman_adv: batadv0: Removing interface: gretap1 [ 187.029261][T10633] tipc: Resetting bearer [ 187.054520][T10633] tipc: Disabling bearer [ 187.192381][T10711] FAULT_INJECTION: forcing a failure. [ 187.192381][T10711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.209252][T10711] CPU: 0 UID: 0 PID: 10711 Comm: syz.2.1276 Not tainted syzkaller #0 PREEMPT(full) [ 187.209277][T10711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 187.209287][T10711] Call Trace: [ 187.209294][T10711] [ 187.209301][T10711] dump_stack_lvl+0x189/0x250 [ 187.209328][T10711] ? __pfx____ratelimit+0x10/0x10 [ 187.209353][T10711] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.209373][T10711] ? __pfx__printk+0x10/0x10 [ 187.209404][T10711] should_fail_ex+0x414/0x560 [ 187.209433][T10711] _copy_to_user+0x31/0xb0 [ 187.209455][T10711] simple_read_from_buffer+0xe1/0x170 [ 187.209481][T10711] proc_fail_nth_read+0x1b3/0x220 [ 187.209502][T10711] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 187.209523][T10711] ? rw_verify_area+0x2a6/0x4d0 [ 187.209540][T10711] ? __lock_acquire+0xab9/0xd20 [ 187.209554][T10711] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 187.209572][T10711] vfs_read+0x200/0xa30 [ 187.209590][T10711] ? fdget_pos+0x247/0x320 [ 187.209608][T10711] ? __pfx___mutex_lock+0x10/0x10 [ 187.209623][T10711] ? __pfx_vfs_read+0x10/0x10 [ 187.209645][T10711] ? __fget_files+0x2a/0x420 [ 187.209667][T10711] ? __fget_files+0x3a0/0x420 [ 187.209681][T10711] ? __fget_files+0x2a/0x420 [ 187.209706][T10711] ksys_read+0x145/0x250 [ 187.209736][T10711] ? __pfx_ksys_read+0x10/0x10 [ 187.209762][T10711] ? do_syscall_64+0xbe/0xfa0 [ 187.209790][T10711] do_syscall_64+0xfa/0xfa0 [ 187.209812][T10711] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.209834][T10711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.209851][T10711] ? clear_bhb_loop+0x60/0xb0 [ 187.209871][T10711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.209888][T10711] RIP: 0033:0x7f3a0058e0dc [ 187.209904][T10711] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 187.209917][T10711] RSP: 002b:00007f3a0149c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 187.209935][T10711] RAX: ffffffffffffffda RBX: 00007f3a007e5fa0 RCX: 00007f3a0058e0dc [ 187.209947][T10711] RDX: 000000000000000f RSI: 00007f3a0149c0a0 RDI: 0000000000000004 [ 187.209957][T10711] RBP: 00007f3a0149c090 R08: 0000000000000000 R09: 0000000000000000 [ 187.209967][T10711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.209977][T10711] R13: 00007f3a007e6038 R14: 00007f3a007e5fa0 R15: 00007ffd95889768 [ 187.210008][T10711] [ 187.526396][T10714] __nla_validate_parse: 7 callbacks suppressed [ 187.526411][T10714] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1277'. [ 187.548883][T10714] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1277'. [ 187.550185][T10721] netlink: 'syz.4.1280': attribute type 1 has an invalid length. [ 187.567722][T10714] macvlan0: entered allmulticast mode [ 187.573121][T10714] veth1_vlan: entered allmulticast mode [ 187.651599][T10722] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.671253][T10727] ip6t_srh: unknown srh match flags 4000 [ 187.837777][T10730] 8021q: VLANs not supported on nlmon0 [ 187.915835][T10736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1285'. [ 188.109568][T10737] syzkaller0: entered promiscuous mode [ 188.115258][T10737] syzkaller0: entered allmulticast mode [ 188.259532][T10760] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 188.398055][T10763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1292'. [ 190.008719][T10720] Set syz1 is full, maxelem 65536 reached [ 190.393738][T10776] lo speed is unknown, defaulting to 1000 [ 190.418211][T10776] vxcan1 speed is unknown, defaulting to 1000 [ 191.215096][ T5842] Bluetooth: hci2: command 0x0401 tx timeout [ 191.270934][T10825] xt_TCPMSS: Only works on TCP SYN packets [ 191.326340][T10828] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1308'. [ 191.357471][T10826] lo speed is unknown, defaulting to 1000 [ 191.358272][T10825] syzkaller0: entered promiscuous mode [ 191.375374][T10825] syzkaller0: entered allmulticast mode [ 191.391292][T10825] tipc: Enabling of bearer rejected, failed to enable media [ 191.400756][T10826] vxcan1 speed is unknown, defaulting to 1000 [ 191.474526][T10831] pim6reg1: entered promiscuous mode [ 191.482892][T10831] pim6reg1: entered allmulticast mode [ 191.766574][T10839] batman_adv: batadv0: Adding interface: macvtap1 [ 191.773044][T10839] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.819520][T10839] batman_adv: batadv0: Interface activated: macvtap1 [ 191.886961][T10850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1314'. [ 191.996312][T10849] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 192.403877][T10867] netlink: 'syz.2.1319': attribute type 2 has an invalid length. [ 192.509352][T10866] xt_CT: No such helper "snmp_trap" [ 192.658674][T10885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1323'. [ 192.711607][T10885] bridge7: port 1(veth3) entered blocking state [ 192.725556][T10885] bridge7: port 1(veth3) entered disabled state [ 192.736101][T10885] veth3: entered allmulticast mode [ 192.748808][T10885] veth3: entered promiscuous mode [ 192.759291][T10886] bridge7: port 2(veth0_to_bond) entered blocking state [ 192.769409][T10886] bridge7: port 2(veth0_to_bond) entered disabled state [ 192.817220][T10886] veth0_to_bond: entered allmulticast mode [ 192.828839][T10886] veth0_to_bond: entered promiscuous mode [ 192.854065][T10885] vlan3: entered allmulticast mode [ 192.859987][T10885] veth1: entered allmulticast mode [ 192.865713][T10885] bridge7: port 3(vlan3) entered blocking state [ 192.872112][T10885] bridge7: port 3(vlan3) entered disabled state [ 192.880310][T10885] vlan3: entered promiscuous mode [ 192.885593][T10885] veth1: entered promiscuous mode [ 192.891982][T10891] netlink: 'syz.4.1325': attribute type 15 has an invalid length. [ 192.900185][T10891] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1325'. [ 192.924554][T10895] debugfs: '1ùàV!‚' already exists in 'ieee80211' [ 192.976815][T10897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1326'. [ 193.048947][T10900] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1326'. [ 193.085901][T10906] netlink: 'syz.1.1328': attribute type 27 has an invalid length. [ 193.128980][T10906] tunl0: left promiscuous mode [ 193.157567][T10906] veth1_vlan: left allmulticast mode [ 193.164083][T10906] macvlan0: left allmulticast mode [ 193.178658][T10906] geneve2: left promiscuous mode [ 193.190175][T10906] bond1: left promiscuous mode [ 193.214754][T10906] gre1: left promiscuous mode [ 193.241094][T10906] bridge1: left promiscuous mode [ 193.257344][T10906] bridge1: left allmulticast mode [ 193.263387][T10906] ip6gre1: left promiscuous mode [ 193.268673][T10906] ip6gre1: left allmulticast mode [ 193.278982][T10906] bond2: left promiscuous mode [ 193.315708][T10921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1332'. [ 193.411713][T10921] netlink: 'syz.4.1332': attribute type 12 has an invalid length. [ 194.827623][T10939] tipc: Enabled bearer , priority 0 [ 194.836815][T10944] syzkaller0: entered promiscuous mode [ 194.842332][T10944] syzkaller0: entered allmulticast mode [ 194.851926][T10956] tipc: Resetting bearer [ 194.878465][T10932] lo speed is unknown, defaulting to 1000 [ 194.897952][T10932] vxcan1 speed is unknown, defaulting to 1000 [ 194.962943][T10956] tipc: Resetting bearer [ 195.016721][T10956] tipc: Disabling bearer [ 195.275727][T10980] netlink: 'syz.1.1341': attribute type 6 has an invalid length. [ 195.326265][T10982] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1341'. [ 195.349531][T10983] No such timeout policy "syz1" [ 195.450365][T10987] netlink: 'syz.1.1345': attribute type 2 has an invalid length. [ 195.561816][T10991] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 196.093838][T11000] smc: adding net device geneve0 with user defined pnetid SYZ0 [ 196.137483][T11002] lo speed is unknown, defaulting to 1000 [ 196.157139][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1347'. [ 196.170125][T11002] vxcan1 speed is unknown, defaulting to 1000 [ 196.320457][T11000] lo speed is unknown, defaulting to 1000 [ 196.338985][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 196.345221][ T5146] Bluetooth: hci1: command 0x0406 tx timeout [ 196.376329][T11015] netlink: 'syz.2.1350': attribute type 15 has an invalid length. [ 196.556037][T11000] vxcan1 speed is unknown, defaulting to 1000 [ 196.765307][T11023] tipc: Started in network mode [ 196.779077][T11023] tipc: Node identity 92ed23213aee, cluster identity 4711 [ 196.805087][T11023] tipc: Enabled bearer , priority 0 [ 196.819252][T11033] raw_sendmsg: syz.0.1355 forgot to set AF_INET. Fix it! [ 196.922641][T11031] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1354'. [ 196.933391][T11035] lo speed is unknown, defaulting to 1000 [ 196.947311][T11035] vxcan1 speed is unknown, defaulting to 1000 [ 196.963584][T11031] tipc: Resetting bearer [ 197.445781][T11047] netlink: 'syz.2.1358': attribute type 21 has an invalid length. [ 197.453725][T11047] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1358'. [ 197.503859][T11020] tipc: Disabling bearer [ 197.542569][T11047] netlink: 'syz.2.1358': attribute type 5 has an invalid length. [ 197.551059][T11047] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1358'. [ 197.662584][T11050] ¾x9ÿ: left allmulticast mode [ 197.680496][T11050] ¾x9ÿ: left promiscuous mode [ 197.689390][T11050] bridge0: port 1(1¾x9ÿ) entered disabled state [ 197.702679][T11050] bridge_slave_1: left allmulticast mode [ 197.711315][T11050] bridge_slave_1: left promiscuous mode [ 197.717885][T11050] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.732542][T11050] bond0: (slave 30): Releasing backup interface [ 197.744587][T11050] bond0: (slave bond_slave_1): Releasing backup interface [ 197.766164][T11050] team0: Port device team_slave_1 removed [ 197.772448][T11050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.780744][T11050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.789178][T11050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.796959][T11050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.807360][T11050] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 197.831988][T11045] lo speed is unknown, defaulting to 1000 [ 197.852604][T11057] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 197.886821][T11045] vxcan1 speed is unknown, defaulting to 1000 [ 198.160376][T11071] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1365'. [ 198.205410][T11071] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1365'. [ 198.239296][T11071] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1365'. [ 198.247016][T11075] netlink: 'syz.3.1367': attribute type 1 has an invalid length. [ 198.261039][T11071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1365'. [ 198.291284][T11071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1365'. [ 198.322226][T11080] netlink: 'syz.1.1368': attribute type 1 has an invalid length. [ 198.333788][T11075] bond5: entered promiscuous mode [ 198.355011][T11075] bond5: entered allmulticast mode [ 198.381031][T11071] vlan2: entered allmulticast mode [ 198.397191][T11071] team0: entered allmulticast mode [ 198.586353][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1372'. [ 198.623523][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1372'. [ 198.709639][T11100] lo speed is unknown, defaulting to 1000 [ 198.710472][T11096] syzkaller0: entered promiscuous mode [ 198.721233][T11096] syzkaller0: entered allmulticast mode [ 198.770506][T11100] vxcan1 speed is unknown, defaulting to 1000 [ 199.242331][T11121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1380'. [ 199.559104][T11129] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1382'. [ 199.624482][T11113] lo speed is unknown, defaulting to 1000 [ 199.636722][T11113] vxcan1 speed is unknown, defaulting to 1000 [ 199.680706][T11135] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1383'. [ 200.054143][T11151] netlink: 'syz.3.1388': attribute type 96 has an invalid length. [ 200.079965][T11155] geneve0: mtu less than device minimum [ 200.107354][T11155] sctp: [Deprecated]: syz.2.1389 (pid 11155) Use of int in max_burst socket option. [ 200.107354][T11155] Use struct sctp_assoc_value instead [ 200.379926][T11166] trusted_key: syz.0.1392 sent an empty control message without MSG_MORE. [ 200.460698][T11167] netlink: 'syz.2.1391': attribute type 12 has an invalid length. [ 200.473208][T11167] netlink: 'syz.2.1391': attribute type 4 has an invalid length. [ 200.508862][T11158] lo speed is unknown, defaulting to 1000 [ 200.702163][T11158] vxcan1 speed is unknown, defaulting to 1000 [ 201.409662][T11190] netlink: 'syz.2.1398': attribute type 15 has an invalid length. [ 201.628397][T11200] netlink: 'syz.0.1400': attribute type 10 has an invalid length. [ 201.724613][T11205] lo speed is unknown, defaulting to 1000 [ 201.733088][T11205] vxcan1 speed is unknown, defaulting to 1000 [ 201.933707][T11211] netlink: 'syz.3.1405': attribute type 2 has an invalid length. [ 202.240749][T11218] lo speed is unknown, defaulting to 1000 [ 202.427007][T11218] vxcan1 speed is unknown, defaulting to 1000 [ 203.179113][T11252] __nla_validate_parse: 2 callbacks suppressed [ 203.179130][T11252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1416'. [ 203.214224][T11254] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 203.247094][T11252] ip6gretap0: entered promiscuous mode [ 203.251100][T11247] netlink: 'syz.1.1414': attribute type 3 has an invalid length. [ 203.265715][T11252] ip6gretap0: left promiscuous mode [ 203.469527][T11260] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 203.530150][T11259] bond7 (unregistering): Released all slaves [ 203.686920][T11283] netlink: 'syz.1.1419': attribute type 21 has an invalid length. [ 203.720405][T11271] tipc: Enabled bearer , priority 0 [ 203.870923][T11283] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1419'. [ 203.936379][T11276] syzkaller0: entered promiscuous mode [ 203.941884][T11276] syzkaller0: entered allmulticast mode [ 203.949332][T11276] tipc: Resetting bearer [ 203.970658][T11274] lo speed is unknown, defaulting to 1000 [ 203.986061][T11258] tipc: Resetting bearer [ 204.146656][T11298] xt_TCPMSS: Only works on TCP SYN packets [ 204.501160][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.832219][ T116] tipc: Node number set to 1954039763 [ 205.428054][T11258] tipc: Disabling bearer [ 205.436980][T11274] vxcan1 speed is unknown, defaulting to 1000 [ 205.626992][T11312] tipc: Enabling of bearer rejected, failed to enable media [ 205.827921][T11322] netlink: 'syz.2.1431': attribute type 1 has an invalid length. [ 205.848520][T11322] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1431'. [ 205.911253][T11335] sctp: [Deprecated]: syz.3.1433 (pid 11335) Use of int in max_burst socket option deprecated. [ 205.911253][T11335] Use struct sctp_assoc_value instead [ 206.077373][T11346] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1437'. [ 206.081071][T11345] netlink: 'syz.3.1436': attribute type 1 has an invalid length. [ 206.170387][T11350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1435'. [ 206.311757][T11349] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 206.323011][T11349] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 206.428363][T11345] macvlan0: entered promiscuous mode [ 206.463810][T11345] macvlan0: entered allmulticast mode [ 206.505873][T11345] bond6: entered promiscuous mode [ 206.522256][T11345] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 206.551084][T11345] bond6: left promiscuous mode [ 206.761332][T11369] netlink: 576 bytes leftover after parsing attributes in process `syz.2.1442'. [ 206.775509][T11354] lo speed is unknown, defaulting to 1000 [ 206.791849][T11354] vxcan1 speed is unknown, defaulting to 1000 [ 206.807195][T11373] Cannot find del_set index 4 as target [ 206.814772][T11373] netlink: 'syz.4.1444': attribute type 33 has an invalid length. [ 206.823238][T11373] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1444'. [ 206.879799][T11373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1444'. [ 207.084041][T11383] lo speed is unknown, defaulting to 1000 [ 207.245767][T11376] lo speed is unknown, defaulting to 1000 [ 207.367514][T11383] vxcan1 speed is unknown, defaulting to 1000 [ 207.503297][T11393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1448'. [ 207.630569][T11396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1448'. [ 207.999317][T11376] vxcan1 speed is unknown, defaulting to 1000 [ 208.030890][T11398] tipc: Failed to remove unknown binding: 66,1,1/0:1699736482/1699736484 [ 208.045560][T11398] tipc: Failed to remove unknown binding: 66,1,1/0:1699736482/1699736484 [ 208.065792][T11398] tipc: Failed to remove unknown binding: 66,1,1/0:1699736482/1699736484 [ 208.316945][T11409] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1454'. [ 208.332085][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1453'. [ 208.351389][T11409] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1454'. [ 208.411445][T11406] "syz.3.1453" (11406) uses obsolete ecb(arc4) skcipher [ 208.469846][T11418] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1455'. [ 209.157410][T11426] lo speed is unknown, defaulting to 1000 [ 209.178535][T11426] vxcan1 speed is unknown, defaulting to 1000 [ 209.263996][T11430] x_tables: duplicate underflow at hook 1 [ 209.284128][T11431] IPVS: set_ctl: invalid protocol: 60 10.1.1.2:20002 [ 209.560883][T11436] macvtap2: entered promiscuous mode [ 209.582069][T11436] macvtap2: entered allmulticast mode [ 209.588094][T11436] dummy0: entered promiscuous mode [ 209.595486][T11436] team0: Device macvtap2 failed to register rx_handler [ 209.618607][T11436] dummy0: left promiscuous mode [ 209.781327][T11443] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1462'. [ 209.817049][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1462'. [ 209.836692][T11443] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1462'. [ 209.882890][T11443] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1462'. [ 209.904673][T11443] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1462'. [ 209.933043][T11443] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1462'. [ 210.012265][T11461] netlink: 'syz.0.1467': attribute type 29 has an invalid length. [ 210.040994][T11461] netlink: 'syz.0.1467': attribute type 29 has an invalid length. [ 210.282395][T11474] sctp: [Deprecated]: syz.2.1471 (pid 11474) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.282395][T11474] Use struct sctp_sack_info instead [ 210.426649][T11482] syzkaller0: entered promiscuous mode [ 210.435099][T11482] syzkaller0: entered allmulticast mode [ 210.705860][T11493] tc_dump_action: action bad kind [ 210.744818][T11493] pimreg: tun_chr_ioctl cmd 2147767506 [ 211.277203][T11525] lo speed is unknown, defaulting to 1000 [ 211.291780][T11525] vxcan1 speed is unknown, defaulting to 1000 [ 211.299795][T11530] netlink: 'syz.1.1485': attribute type 11 has an invalid length. [ 211.508827][T11537] batadv0: entered promiscuous mode [ 211.527642][T11537] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 211.546658][T11537] batadv0: left promiscuous mode [ 211.983588][T11561] netlink: 'syz.4.1496': attribute type 1 has an invalid length. [ 212.022419][T11564] netlink: 'syz.0.1497': attribute type 15 has an invalid length. [ 212.036948][T11561] NCSI netlink: No device for ifindex 0 [ 212.335533][T11583] wg1: entered promiscuous mode [ 212.351811][T11583] wg1: entered allmulticast mode [ 212.722192][T11594] lo speed is unknown, defaulting to 1000 [ 212.750638][T11594] vxcan1 speed is unknown, defaulting to 1000 [ 212.862566][T11606] lo speed is unknown, defaulting to 1000 [ 212.999196][T11607] lo speed is unknown, defaulting to 1000 [ 213.102030][T11606] vxcan1 speed is unknown, defaulting to 1000 [ 213.975050][T11607] vxcan1 speed is unknown, defaulting to 1000 [ 214.341253][T11670] __nla_validate_parse: 134 callbacks suppressed [ 214.341273][T11670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1518'. [ 214.373775][T11670] netlink: 'syz.4.1518': attribute type 30 has an invalid length. [ 214.427833][T11674] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1519'. [ 214.591519][T11674] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1519'. [ 214.682197][T11679] syzkaller0: entered promiscuous mode [ 214.691400][T11679] syzkaller0: entered allmulticast mode [ 215.131835][T11696] lo speed is unknown, defaulting to 1000 [ 215.171126][T11696] vxcan1 speed is unknown, defaulting to 1000 [ 215.726431][T11720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1533'. [ 215.761553][T11720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1533'. [ 215.994173][T11733] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1534'. [ 216.022877][T11729] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 216.196838][T11736] netlink: 'syz.2.1537': attribute type 21 has an invalid length. [ 216.204761][T11736] IPv6: NLM_F_CREATE should be specified when creating new route [ 216.231772][T11738] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1538'. [ 216.233713][T11736] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 216.248432][T11736] IPv6: NLM_F_CREATE should be set when creating new route [ 216.255724][T11736] IPv6: NLM_F_CREATE should be set when creating new route [ 216.263075][T11736] IPv6: NLM_F_CREATE should be set when creating new route Connection to 10.128.0.241 closed by remote host. [ 217.116805][ T5825] syz_tun (unregistering): left allmulticast mode [ 217.123299][ T5825] syz_tun (unregistering): left promiscuous mode [ 217.156720][ T5825] bridge0: port 1(syz_tun) entered disabled state [ 217.717035][ T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 217.732066][ T49] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 217.750785][ T49] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 217.764714][ T143] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 20001 - 0 [ 217.773546][ T60] bridge_slave_1: left allmulticast mode [ 217.780434][ T60] bridge_slave_1: left promiscuous mode [ 217.787403][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.797427][ T60] bridge_slave_0: left allmulticast mode [ 217.803070][ T60] bridge_slave_0: left promiscuous mode [ 217.809015][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.946594][ T60] bond1 (unregistering): (slave gre1): Releasing backup interface [ 218.149353][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.159432][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.168820][ T60] bond0 (unregistering): Released all slaves [ 218.253068][ T60] bond1 (unregistering): Released all slaves [ 218.333347][ T60] bond2 (unregistering): Released all slaves [ 218.418165][ T60] bond3 (unregistering): Released all slaves [ 218.502831][ T60] bond4 (unregistering): (slave dummy0): Releasing active interface [ 218.512703][ T60] bond4 (unregistering): Released all slaves [ 218.611796][ T60] tipc: Left network mode [ 218.630250][ T60] IPVS: stopping backup sync thread 8161 ... [ 218.903183][ T60] hsr_slave_0: left promiscuous mode [ 218.909432][ T60] hsr_slave_1: left promiscuous mode [ 218.945831][ T60] pim6reg (unregistering): left allmulticast mode [ 218.967862][ T60] pimreg (unregistering): left allmulticast mode [ 219.247506][ T60] team_slave_1 (unregistering): left promiscuous mode [ 219.255254][ T60] team0 (unregistering): Port device team_slave_1 removed [ 219.287182][ T60] team_slave_0 (unregistering): left promiscuous mode [ 219.294729][ T60] team0 (unregistering): Port device team_slave_0 removed [ 219.793632][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.807615][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.879784][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.890274][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.958075][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.968513][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.026525][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.036982][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.116985][ T4054] netdevsim netdevsim3 eth5: set [1, 0] type 2 family 0 port 20001 - 0 [ 220.132529][ T4054] netdevsim netdevsim3 eth6: set [1, 0] type 2 family 0 port 20001 - 0 [ 220.147834][ T4054] netdevsim netdevsim3 eth7: set [1, 0] type 2 family 0 port 20001 - 0 [ 220.161480][ T4054] netdevsim netdevsim3 eth8: set [1, 0] type 2 family 0 port 20001 - 0 [ 220.175902][ T60] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.231100][ T60] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.288716][ T60] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.338977][ T60] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.393754][ T49] netdevsim netdevsim4 eth9: set [1, 0] type 2 family 0 port 20001 - 0 [ 220.409534][ T12] netdevsim netdevsim4 eth10: set [1, 0] type 2 family 0 port 20001 - 0 [ 220.423577][ T12] netdevsim netdevsim4 eth11: set [1, 0] type 2 family 0 port 20001 - 0 [ 220.438596][ T12] netdevsim netdevsim4 eth12: set [1, 0] type 2 family 0 port 20001 - 0 [ 220.467862][ T60] bridge_slave_1: left allmulticast mode [ 220.473521][ T60] bridge_slave_1: left promiscuous mode [ 220.479320][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.487856][ T60] bridge_slave_0: left allmulticast mode [ 220.493510][ T60] bridge_slave_0: left promiscuous mode [ 220.500025][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.741956][ T60] bond1 (unregistering): (slave gretap1): Releasing active interface [ 221.111535][ T60] bond0 (unregistering): Released all slaves [ 221.125622][ T60] bond1 (unregistering): Released all slaves [ 221.206474][ T60] bond2 (unregistering): Released all slaves [ 221.287053][ T60] bond3 (unregistering): Released all slaves [ 221.299253][ T60] bond4 (unregistering): Released all slaves [ 221.311603][ T60] bond5 (unregistering): Released all slaves [ 221.324095][ T60] bond6 (unregistering): Released all slaves [ 221.663299][ T60] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 221.676473][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.686268][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.696349][ T60] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 221.705465][ T60] bond0 (unregistering): Released all slaves [ 221.789296][ T60] bond1 (unregistering): Released all slaves [ 221.868678][ T60] bond2 (unregistering): Released all slaves [ 222.008662][ T60] tipc: Left network mode [ 222.019106][ T60] tipc: Left network mode [ 222.346302][ T60] ------------[ cut here ]------------ [ 222.351882][ T60] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 222.359305][ T60] WARNING: CPU: 1 PID: 60 at net/mac80211/driver-ops.c:366 drv_unassign_vif_chanctx+0x50b/0x7e0 [ 222.370058][ T60] Modules linked in: [ 222.374122][ T60] CPU: 1 UID: 0 PID: 60 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 222.383781][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 222.394300][ T60] Workqueue: netns cleanup_net [ 222.399112][ T60] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0 [ 222.405451][ T60] Code: 8d 8d 48 0a 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 00 42 89 8c e8 66 ff cd f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 57 e5 0a f7 90 0f 0b 90 42 80 7c 3d [ 222.425454][ T60] RSP: 0018:ffffc9000211f220 EFLAGS: 00010246 [ 222.431533][ T60] RAX: 5f0306a36dd10c00 RBX: 0000000000000000 RCX: ffff88801c368000 [ 222.439582][ T60] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 222.447609][ T60] RBP: ffff888077af97b8 R08: 0000000000000003 R09: 0000000000000004 [ 222.455658][ T60] R10: dffffc0000000000 R11: fffffbfff1bba680 R12: ffff888077afaa80 [ 222.463635][ T60] R13: ffff888077af8d80 R14: 1ffff1100ef5f2f7 R15: dffffc0000000000 [ 222.471650][ T60] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 222.480596][ T60] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 222.487201][ T60] CR2: 0000001b30a23ffc CR3: 000000000dd38000 CR4: 00000000003526f0 [ 222.495210][ T60] Call Trace: [ 222.498491][ T60] [ 222.501410][ T60] ieee80211_assign_link_chanctx+0x1ec/0xd70 [ 222.507468][ T60] __ieee80211_link_release_channel+0x33b/0x4a0 [ 222.513700][ T60] ? __pfx_ieee80211_uninit+0x10/0x10 [ 222.519090][ T60] unregister_netdevice_many_notify+0x1cde/0x2390 [ 222.525540][ T60] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 222.532307][ T60] ? __pfx_call_rcu+0x10/0x10 [ 222.537021][ T60] unregister_netdevice_queue+0x33c/0x380 [ 222.542737][ T60] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 222.549051][ T60] _cfg80211_unregister_wdev+0x165/0x590 [ 222.554705][ T60] ieee80211_remove_interfaces+0x49a/0x6e0 [ 222.560587][ T60] ? __pfx_synchronize_rcu+0x10/0x10 [ 222.565918][ T60] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 222.572242][ T60] ? rcu_is_watching+0x15/0xb0 [ 222.577085][ T60] ieee80211_unregister_hw+0x5d/0x2c0 [ 222.582448][ T60] mac80211_hwsim_del_radio+0x275/0x460 [ 222.588018][ T60] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 222.594076][ T60] hwsim_exit_net+0xef4/0xfb0 [ 222.598771][ T60] ? hwsim_exit_net+0x333/0xfb0 [ 222.603615][ T60] ? __pfx_hwsim_exit_net+0x10/0x10 [ 222.608852][ T60] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 222.614651][ T60] ops_undo_list+0x49a/0x990 [ 222.619260][ T60] ? __pfx_ops_undo_list+0x10/0x10 [ 222.624361][ T60] ? do_raw_spin_unlock+0x122/0x240 [ 222.629594][ T60] cleanup_net+0x4d8/0x820 [ 222.634030][ T60] ? __pfx_cleanup_net+0x10/0x10 [ 222.638987][ T60] ? _raw_spin_unlock_irq+0x23/0x50 [ 222.644173][ T60] ? process_scheduled_works+0x9ef/0x17b0 [ 222.649912][ T60] ? process_scheduled_works+0x9ef/0x17b0 [ 222.655637][ T60] process_scheduled_works+0xae1/0x17b0 [ 222.661185][ T60] ? __pfx_process_scheduled_works+0x10/0x10 [ 222.667197][ T60] worker_thread+0x8a0/0xda0 [ 222.671787][ T60] kthread+0x711/0x8a0 [ 222.675867][ T60] ? __pfx_worker_thread+0x10/0x10 [ 222.680962][ T60] ? __pfx_kthread+0x10/0x10 [ 222.685577][ T60] ? _raw_spin_unlock_irq+0x23/0x50 [ 222.690760][ T60] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.695969][ T60] ? __pfx_kthread+0x10/0x10 [ 222.700548][ T60] ret_from_fork+0x4bc/0x870 [ 222.705159][ T60] ? __pfx_ret_from_fork+0x10/0x10 [ 222.710258][ T60] ? __switch_to_asm+0x39/0x70 [ 222.715039][ T60] ? __switch_to_asm+0x33/0x70 [ 222.719799][ T60] ? __pfx_kthread+0x10/0x10 [ 222.724375][ T60] ret_from_fork_asm+0x1a/0x30 [ 222.729184][ T60] [ 222.732200][ T60] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 222.739460][ T60] CPU: 1 UID: 0 PID: 60 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 222.748721][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 222.758757][ T60] Workqueue: netns cleanup_net [ 222.763509][ T60] Call Trace: [ 222.766773][ T60] [ 222.769687][ T60] dump_stack_lvl+0x99/0x250 [ 222.774269][ T60] ? __asan_memcpy+0x40/0x70 [ 222.778846][ T60] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.784031][ T60] ? __pfx__printk+0x10/0x10 [ 222.788623][ T60] vpanic+0x237/0x6d0 [ 222.792607][ T60] ? __pfx_vpanic+0x10/0x10 [ 222.797110][ T60] panic+0xb9/0xc0 [ 222.800825][ T60] ? __pfx_panic+0x10/0x10 [ 222.805245][ T60] __warn+0x31b/0x4b0 [ 222.809217][ T60] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 222.814941][ T60] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 222.820653][ T60] report_bug+0x2be/0x4f0 [ 222.824979][ T60] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 222.830693][ T60] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 222.836413][ T60] ? drv_unassign_vif_chanctx+0x50d/0x7e0 [ 222.842130][ T60] handle_bug+0x84/0x160 [ 222.846371][ T60] exc_invalid_op+0x1a/0x50 [ 222.850877][ T60] asm_exc_invalid_op+0x1a/0x20 [ 222.855714][ T60] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0 [ 222.862034][ T60] Code: 8d 8d 48 0a 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 00 42 89 8c e8 66 ff cd f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 57 e5 0a f7 90 0f 0b 90 42 80 7c 3d [ 222.881627][ T60] RSP: 0018:ffffc9000211f220 EFLAGS: 00010246 [ 222.887688][ T60] RAX: 5f0306a36dd10c00 RBX: 0000000000000000 RCX: ffff88801c368000 [ 222.895649][ T60] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 222.903610][ T60] RBP: ffff888077af97b8 R08: 0000000000000003 R09: 0000000000000004 [ 222.911580][ T60] R10: dffffc0000000000 R11: fffffbfff1bba680 R12: ffff888077afaa80 [ 222.919544][ T60] R13: ffff888077af8d80 R14: 1ffff1100ef5f2f7 R15: dffffc0000000000 [ 222.927528][ T60] ieee80211_assign_link_chanctx+0x1ec/0xd70 [ 222.933525][ T60] __ieee80211_link_release_channel+0x33b/0x4a0 [ 222.939761][ T60] ? __pfx_ieee80211_uninit+0x10/0x10 [ 222.945135][ T60] unregister_netdevice_many_notify+0x1cde/0x2390 [ 222.951566][ T60] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 222.958328][ T60] ? __pfx_call_rcu+0x10/0x10 [ 222.963011][ T60] unregister_netdevice_queue+0x33c/0x380 [ 222.968725][ T60] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 222.974966][ T60] _cfg80211_unregister_wdev+0x165/0x590 [ 222.980607][ T60] ieee80211_remove_interfaces+0x49a/0x6e0 [ 222.986410][ T60] ? __pfx_synchronize_rcu+0x10/0x10 [ 222.991689][ T60] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 222.998009][ T60] ? rcu_is_watching+0x15/0xb0 [ 223.002769][ T60] ieee80211_unregister_hw+0x5d/0x2c0 [ 223.008139][ T60] mac80211_hwsim_del_radio+0x275/0x460 [ 223.013699][ T60] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 223.019786][ T60] hwsim_exit_net+0xef4/0xfb0 [ 223.024471][ T60] ? hwsim_exit_net+0x333/0xfb0 [ 223.029316][ T60] ? __pfx_hwsim_exit_net+0x10/0x10 [ 223.034509][ T60] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 223.040308][ T60] ops_undo_list+0x49a/0x990 [ 223.044893][ T60] ? __pfx_ops_undo_list+0x10/0x10 [ 223.049995][ T60] ? do_raw_spin_unlock+0x122/0x240 [ 223.055192][ T60] cleanup_net+0x4d8/0x820 [ 223.059603][ T60] ? __pfx_cleanup_net+0x10/0x10 [ 223.064531][ T60] ? _raw_spin_unlock_irq+0x23/0x50 [ 223.069730][ T60] ? process_scheduled_works+0x9ef/0x17b0 [ 223.075440][ T60] ? process_scheduled_works+0x9ef/0x17b0 [ 223.081157][ T60] process_scheduled_works+0xae1/0x17b0 [ 223.086720][ T60] ? __pfx_process_scheduled_works+0x10/0x10 [ 223.092705][ T60] worker_thread+0x8a0/0xda0 [ 223.097306][ T60] kthread+0x711/0x8a0 [ 223.101370][ T60] ? __pfx_worker_thread+0x10/0x10 [ 223.106470][ T60] ? __pfx_kthread+0x10/0x10 [ 223.111054][ T60] ? _raw_spin_unlock_irq+0x23/0x50 [ 223.116251][ T60] ? lockdep_hardirqs_on+0x9c/0x150 [ 223.121444][ T60] ? __pfx_kthread+0x10/0x10 [ 223.126028][ T60] ret_from_fork+0x4bc/0x870 [ 223.130611][ T60] ? __pfx_ret_from_fork+0x10/0x10 [ 223.135718][ T60] ? __switch_to_asm+0x39/0x70 [ 223.140469][ T60] ? __switch_to_asm+0x33/0x70 [ 223.145219][ T60] ? __pfx_kthread+0x10/0x10 [ 223.149802][ T60] ret_from_fork_asm+0x1a/0x30 [ 223.154570][ T60] [ 223.157842][ T60] Kernel Offset: disabled [ 223.162151][ T60] Rebooting in 86400 seconds..