last executing test programs: 36.820200718s ago: executing program 2 (id=4426): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1a, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x44}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @tracing=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1a, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x44}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @tracing=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0xa, 0x8000, @l2={'ib', 0x3a, 'macvlan1\x00'}}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x24000054) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0xa, 0x8000, @l2={'ib', 0x3a, 'macvlan1\x00'}}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x24000054) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r4, 0x1}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r4, 0x1}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r5) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r5) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x100, r6, 0x904, 0x70bd28, 0x25dfdc00, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xca0f}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfe}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x4df8118ada61d47b}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xffff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6a}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x4880) 36.729470236s ago: executing program 2 (id=4429): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000108000000300000000000000", @ANYRES32, @ANYBLOB="00000000000e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @loopback, 0x4}, 0x1c) r4 = socket$nl_crypto(0x10, 0x3, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000300)={0x1d, r8, 0x2, {0x0, 0xf0}, 0xc295a7c9ee09b05c}, 0x18) bind$can_j1939(r5, &(0x7f0000000b80)={0x1d, r6, 0x2, {0x1, 0x0, 0x4}, 0xfe}, 0x18) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x1, {0x2, 0xff, 0x2}, 0x2}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008080}, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'pcbc(fcrypt-generic)\x00'}}}, 0xe0}}, 0x0) sendmsg$nl_crypto(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)={0x34, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000004}, 0x80) splice(r9, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000b80)={@link_local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2c96ed", 0x0, 0x3b, 0x0, @dev, @local}}}}, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r11, 0xc058671e, &(0x7f0000000340)={{'\x00', 0x3}, {0x7}, 0xc0, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)="fe4d90485b7ad04cc6b06f67e71fa8ffbd8a90df941b7c98d41db9ab65f48567231cb6b328c4b8e0b9cc51997c7d78db66138688c5f7f00b5c9aea4553688d3811b0c4de01e23f6c588c467377ac5106fae307aba970289fb002dabcdeb342fe7a231d136ed81bdfca954ee55b4ca4f2600f21e98ed7b30c07700e0eec28639a4a7d9d7e9384fbd84f2b1b5ed2c389ae51de0d272463f04b84dddfc17792d215ab91cf6f920055ed8923e308f16539bfdf6b1d5d162b958082047a496c0fbac8ce38d99a8b62be39529e8540594f98e91df4b326e08b32423f96ec30339a", 0xde, 0x0, &(0x7f0000000640)={0x2, 0xc0, {0x0, 0xc, 0x2e, "69dad107efabd89e7824ac4c97bec12c11f35fdf2d0984b25f3af337ec8c0f1da6284fbcafd77aa0395e53b47b6b", 0x85, "af6bad784ff570395b79b007500f78798f4103ec0aeccc8a726d57d4725ab432d2c8099509dadd116ebaf9664cebce47b498f1793e3d637ae85977d9f5ae48c42780b50739889e659d80d6e741c1758e4df1c9fb32684fd10a77d5db39bded750e025f854de59e3eeb7ca9662906a21fbb0f4c2d5675067e194065a5e36ae4ba7cc042ad21"}, 0xbb, "16f7777b34a3a3edae5bab80258c9cd485f7eb13fdfe7f7f7198a34aa96ba23e702cb5168d39d32f3bee76b3ba9709b6b25c7789096e68532e2c8b83975ba590251a21ddfa09d6a09d1143409840efc0a9fdba71b9b4f650e0433bfef6dbd8a334fb3a06ee340f388d33681c464025a07abdcb8fe5cd2b94b669cf96044869699feff6ee0bdd2c8483646ab2c35347228a9854a3929c30b1bc574c95727a89dda16dd52be025601e3c4c6de42062aa6e92bf3fe6f7b4dd332ac284"}, 0x187}) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) 36.186427531s ago: executing program 4 (id=4441): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000007000000000000000000300004802c0001800a"], 0x84}}, 0x0) (async, rerun: 32) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0xd, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4855}, 0xc091) (async, rerun: 32) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYRESHEX=r4], 0x270}}, 0x0) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, 0xffffffffffffffff}, 0x4) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x1a, &(0x7f0000000400)=@framed={{}, [@printk={@u, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x1b}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91}, 0x94) 36.070311126s ago: executing program 4 (id=4442): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x2, &(0x7f0000001100)=""/4109, &(0x7f00000000c0)=0x100d) (async, rerun: 32) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) accept(0xffffffffffffffff, 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) (async) r4 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x8a, &(0x7f0000000040)=0x7e, 0x4) (async) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f0000002140)={{r1}, "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"}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 64) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc804f9fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) (async, rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x6, 0x8, 0xf, 0x3788}, 0x10) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 35.989142913s ago: executing program 4 (id=4445): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a0000000400000006000000ff00000042", @ANYRES16=r1, @ANYRES16=r1], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000080), 0x619, r2}, 0x38) r3 = socket(0x6, 0x4, 0x9) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @private=0xa010102}, 0x3, 0x4, 0x0, 0x3}}, 0x2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00030004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000ffdbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00020000000c008f0008000000000000000c009000fdffffffffffffff4d0834776d9e153c9d59c37c0d599a19"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) 35.905099106s ago: executing program 4 (id=4448): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x40, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3c}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}]}, 0x40}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x8) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x0, @none, 0x8, 0x2}, 0xe) listen(r1, 0x0) close(0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r3, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0xfd, 0xe5, 0x0, 0x6, 0x4, 0x6, 0x0, 0xf, 0x8}, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001e008d2a00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="80"], 0x30}}, 0x0) r6 = syz_init_net_socket$x25(0x3, 0x5, 0x3) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f0000000180)) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 35.870538196s ago: executing program 2 (id=4450): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0c00cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @remote, @dev, @remote}}}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000f14010038bd7004fadbdf25090045006973736d000000000800010000000000080003000100"], 0x34}, 0x1, 0x0, 0x0, 0x48801}, 0x20008040) 35.812225025s ago: executing program 2 (id=4453): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x8004b706, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x8c, r3, 0xe096044a3fc9e6f1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfd}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x47, 0xac, "23b1777739907d3ba22b8225016f053e86abba5fad1cc9c9f6326db0962d030c79a8691681cdca85bc58e71f8423aa48ab68190bb54e9fe3e0775ca6c236ea88d9663d"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) close(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) 35.677301389s ago: executing program 4 (id=4454): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) r1 = socket(0x2c, 0x3, 0xffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0xfffffffc) recvmmsg(r1, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000780), 0x0, &(0x7f0000000800)=""/161, 0xa1}, 0x1}, {{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000680)=""/105, 0x69}], 0x2}, 0xb}], 0x2, 0x100, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4a22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e6e219fb9eefb5fb4379bdfb4d068af61a1ca447fc88758e2a60", @ANYRES16=r6, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006000000"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) close(0x4) r8 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r8, 0x0, 0x0, 0x4000000) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}}, 0x5c) setsockopt$MRT6_FLUSH(r9, 0x29, 0xd4, &(0x7f0000000240), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000f00000000000061102c00000000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00'}, 0x18) 35.574441604s ago: executing program 4 (id=4455): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4000, @broadcast}, 0x10, 0x0}, 0x0) 35.570636287s ago: executing program 2 (id=4456): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r3, 0xc040ff0b, 0x110c2300fe) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="82ef", 0x2}], 0x1}}], 0x1, 0x4400c800) (async) write(r0, &(0x7f0000000440)="7d79b2fe1671370dfed8eeb59eea8b6a261804d87b03f573278c3dd1b899994f60eee17158b1f2213fd952fa2e4580c35b16a83a8ced2215c993e2a9c9d348219f", 0x41) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)="5afb194ddebc95dcd8839fc0a5ecb47d498a28c6f1629ecdec359aee4b872cc2753b44553912fd97ad3b86df16dd3ba0465a6a68cb4fec9712bb5fe10da4f0e483728ae89dcf7127be9d57662b0c5c94756ee06aa974e31712ef08efca6679a7b4415d06f00ec4d9b6b01ad324764bd4fb736c3d60bc4e528111746972772f", 0x7f}], 0x1, 0x0, 0x0, 0xc000}], 0x1, 0x41) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000004c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r7, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0) write$tun(r4, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) 35.442617301s ago: executing program 32 (id=4455): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4000, @broadcast}, 0x10, 0x0}, 0x0) 35.229665898s ago: executing program 2 (id=4458): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x25, 0x10}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r7, 0x0, 0xcf, &(0x7f0000000040)=0xfe, 0x4) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000060c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006140)=@delchain={0x2c, 0x65, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0xb, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 35.228971919s ago: executing program 33 (id=4458): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x25, 0x10}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r7, 0x0, 0xcf, &(0x7f0000000040)=0xfe, 0x4) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000060c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006140)=@delchain={0x2c, 0x65, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0xb, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 3.797172866s ago: executing program 0 (id=5122): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="18000a0417a82e0e07830000fdffffff9500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001a00), r1) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x28, r2, 0x409, 0x70bd26, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0xc0d0}, 0x4028044) (async) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x3, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x800}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) (async) sendto$packet(r0, &(0x7f00000000c0)="f4416eb4e859495d589fefa788a8", 0xe, 0x0, &(0x7f0000002780)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) 2.99822958s ago: executing program 0 (id=5123): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 0', 0xb) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000002c0012800b0001006d616373656300001c00028006000840000000000500070000000006050009"], 0x4c}}, 0x0) 2.991652001s ago: executing program 0 (id=5128): socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, 0x0, &(0x7f0000000540)) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f00000002c0)=0x5f53, 0x4) socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x6, 0x0, 0xfffffffb}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000003300)={0x2, [], 0x6, "0cbbcfd90c1d8d"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000003300)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x6, "0cbbcfd90c1d8d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000001300)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x9, "39d735012ff73b"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000002300)={r6, 0x2}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x7, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x7, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket(0x10, 0x3, 0x0) (async) r10 = socket(0x10, 0x3, 0x0) getsockopt$netlink(r10, 0x10e, 0x4, &(0x7f0000000080)=""/124, &(0x7f0000000040)=0x7c) (async) getsockopt$netlink(r10, 0x10e, 0x4, &(0x7f0000000080)=""/124, &(0x7f0000000040)=0x7c) recvmsg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000000)=0x40000005, 0x4) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d4e496b"], 0x2c}}, 0x60040050) sendto$inet6(r2, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bind$inet6(r0, 0x0, 0xffffffffffffff47) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x0) 2.737409019s ago: executing program 0 (id=5137): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@setlink={0x64, 0x13, 0x29, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x43644, 0x6c114}, [@IFLA_AF_SPEC={0x3c, 0x1a, 0x0, 0x1, [@AF_INET6={0x34, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2c}]}, @AF_MPLS={0x4}]}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x40}]}, 0x64}, 0x1, 0x0, 0x0, 0x8881}, 0x20040000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) r2 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="3303200071fd140000007ef52f555f2a0c9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0xfdef, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x62}, 0x14) 2.716585499s ago: executing program 0 (id=5138): syz_init_net_socket$ax25(0x27, 0x0, 0xc3) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x7fff, 0x1ff, 0xfffffff3, 0xc, 0x8000}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb001480080018"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0xfffffffffffffe19}}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x34}, 0x1, 0x2}, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) getsockopt$ax25_int(r3, 0x101, 0x9, &(0x7f0000000080), &(0x7f0000000040)=0x4) 2.62351655s ago: executing program 0 (id=5141): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x3c}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r4, 0x0, 0x46, 0x4f, 0x0, &(0x7f0000000500)=""/74, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000040)=[{&(0x7f00000001c0)="580000001400192340834b80044d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e00000000", 0x58}], 0x1) r7 = socket(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080), 0x4) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x8, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r10, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRES64=r10], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc8040) sendmmsg(r3, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)="bade3d1c972f42703f77f272f5c4ced6e1a45f85b8ab100936e23ea33bd08b1011e27807ba6321e15067c3dbbc98d2ceb210ce25ec89d98c67ac9f9685657ae92099e74535", 0x45}], 0x1}}], 0x1, 0x0) splice(r3, 0x0, r0, 0x0, 0x7ffff000, 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0x800000) 1.31924172s ago: executing program 1 (id=5180): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9, 0x0, 0x1, 0x2, 0x8001, 0xd626}, 0x20) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = accept$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x3, @netrom}, [@rose, @netrom, @remote, @remote, @netrom, @null]}, &(0x7f0000000380)=0x48) r3 = accept$netrom(r2, &(0x7f0000000200)={{0x3, @default}, [@remote, @null, @remote, @rose, @rose, @remote, @default, @rose]}, &(0x7f00000000c0)=0x48) getsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000280)=0x10, &(0x7f00000002c0)=0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYRES32=r1], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) accept4(r4, 0x0, 0x0, 0x80000) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x100000b, 0x13012, r1, 0x0) 1.21842762s ago: executing program 1 (id=5182): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x527d}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000540)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000040)={r3, @in6={{0x2, 0x0, 0x0, @empty}}}, &(0x7f0000000300)=0x90) socket$vsock_stream(0x28, 0x1, 0x0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) writev(r4, &(0x7f0000000780)=[{&(0x7f0000000600)="ec5569bda3d35e", 0x7}], 0x1) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 910.377663ms ago: executing program 5 (id=5191): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0xffffffffffffff8a, &(0x7f0000000000)="e6", 0x9, 0x1, 0xd45, 0x1012, 0xc7, 0x2, 0x7, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x10fffffc, 0x10000, 0x0, 0xfffffffe}, 0x10) write(r2, &(0x7f0000000000)="240000001a00590214f9f407000904101f00000000000000000000000800040001000000", 0x24) 910.170393ms ago: executing program 5 (id=5192): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="f0000000120003", @ANYRES16], 0xf0}}, 0x0) 860.131798ms ago: executing program 5 (id=5194): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r1 = socket$inet6(0xa, 0xa, 0x0) sendmmsg$inet6(r1, &(0x7f0000000640)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0x400}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x1}], 0x1}}], 0x2, 0x4008040) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x79}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @local}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) socket$vsock_stream(0x28, 0x1, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r0}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0xf, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x16, 0x701, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x854) 747.120685ms ago: executing program 5 (id=5196): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000004e1720910c2a6d6051e5f0f72a3ac6801a07c0aef4c083e89d057ca3b85c90f6cd19c0665336d17500d90880a964d2485d1ebec14e7d461d1cc29cdd8c87290ebacafaa4c7216ee42446c7180edb4a7f033060019108586ff1895d22"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) socketpair(0x22, 0x2, 0x4, &(0x7f0000005fc0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0x80}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000017c0)={r5, &(0x7f0000001700), &(0x7f0000001780), 0x3}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0xa, [@var={0x1, 0x0, 0x0, 0xe, 0x4, 0x1}, @ptr={0xe, 0x0, 0x0, 0x2, 0x2}, @var={0x1, 0x0, 0x0, 0xe, 0x1, 0x2}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x66, 0x0, 0xc}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x4, 0x2}, @ptr={0xb, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x2e, 0x5f, 0x30, 0x61, 0x5f, 0x5f, 0x0, 0x5f]}}, &(0x7f00000006c0)=""/158, 0x7a, 0x9e, 0x1, 0x7}, 0x28) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r9, &(0x7f00000016c0)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14, 0x7}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010120, @broadcast, {[@timestamp={0x44, 0x4, 0x96, 0x0, 0x1}]}}, "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"}}, 0xfce) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={r1, 0xffffffffffffffff}, 0x4) pipe(&(0x7f00000007c0)={0xffffffffffffffff}) ioctl$FICLONERANGE(r12, 0x4020940d, &(0x7f0000000a80)={{r12}, 0x1, 0x1, 0x9}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000940)={'dvmrp1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x24, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2b3, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_fd, @alu={0x4, 0x1, 0xd, 0x1, 0x3}, @jmp={0x5, 0x0, 0x7, 0x2, 0x6, 0xfffffffffffffff4, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @alu={0x4, 0x0, 0x5, 0x5, 0x5, 0x0, 0x8}, @alu={0x7, 0x0, 0x4, 0xa, 0x1, 0x18, 0xffffffffffffffff}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x3, 0xe9, &(0x7f0000000340)=""/233, 0x41100, 0x2, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000580)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x0, 0x4, 0x544}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[r11, r12], &(0x7f0000000800)=[{0x2, 0x4, 0x9, 0x7}, {0x3, 0x1, 0x4, 0x2}, {0x1, 0x5, 0x6, 0x6}, {0x0, 0x2, 0x7, 0x3}], 0x10, 0x200}, 0x94) r13 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x4000800) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x7ffffffe, 0x600, 0x1}}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@ipv4_newnexthop={0x68, 0x68, 0x200, 0x70bd29, 0x25dfdbfd, {0x2, 0x0, 0x4, 0x0, 0x2}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG={0x8, 0x1, r2}}}, @NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_RES_GROUP={0x34, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xffc0}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7af}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x30c}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x8}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7fffffff}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x98}]}]}, 0x68}}, 0x0) 701.400388ms ago: executing program 6 (id=5197): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, 0x0, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffff, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x41ad, 0x1, 0x1}, {0x0, 0x9, 0x9, 0x6, 0x3, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c0001"], 0xd4}}, 0x4000010) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r8 = socket(0x10, 0x803, 0x2) (rerun: 32) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9], 0x3c}}, 0x0) 554.435382ms ago: executing program 6 (id=5198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000040)=0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xb, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x5}, 0x90) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffff, 0x10}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8}, {{0x1, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) 553.434188ms ago: executing program 3 (id=5199): recvmmsg(0xffffffffffffffff, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001000)=""/253, 0xfd}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/43, 0x2b}, {&(0x7f0000002140)=""/125, 0x7d}, {&(0x7f00000021c0)=""/34, 0x22}, {&(0x7f0000002200)=""/246, 0xf6}, {&(0x7f0000002300)=""/177, 0xb1}], 0x8}, 0x8}, {{&(0x7f0000002440)=@qipcrtr, 0x80, &(0x7f0000002980)=[{&(0x7f00000024c0)=""/17, 0x11}, {&(0x7f0000002500)=""/14, 0xe}, {&(0x7f0000002540)=""/132, 0x84}, {&(0x7f0000002600)=""/148, 0x94}, {&(0x7f00000026c0)=""/102, 0x66}, {&(0x7f0000002740)=""/29, 0x1d}, {&(0x7f0000002780)=""/145, 0x91}, {&(0x7f0000002840)=""/22, 0x16}, {&(0x7f0000002880)=""/49, 0x31}, {&(0x7f00000028c0)=""/157, 0x9d}], 0xa, &(0x7f0000002a40)=""/98, 0x62}, 0x9}, {{&(0x7f0000002ac0)=@xdp, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002b40)}, {&(0x7f0000002b80)=""/200, 0xc8}, {&(0x7f0000002c80)=""/110, 0x6e}, {&(0x7f0000002d00)=""/98, 0x62}], 0x4}, 0x8}, {{&(0x7f0000002dc0), 0x80, &(0x7f0000002f00)=[{&(0x7f0000002e40)=""/138, 0x8a}], 0x1, &(0x7f0000002f40)=""/252, 0xfc}, 0x2}, {{&(0x7f0000003040)=@xdp, 0x80, &(0x7f00000034c0)=[{&(0x7f00000030c0)=""/92, 0x5c}, {&(0x7f0000003140)=""/40, 0x28}, {&(0x7f0000003180)=""/23, 0x17}, {&(0x7f00000031c0)=""/34, 0x22}, {&(0x7f0000003200)=""/75, 0x4b}, {&(0x7f0000003280)=""/100, 0x64}, {&(0x7f0000003300)=""/82, 0x52}, {&(0x7f0000003380)=""/177, 0xb1}, {&(0x7f0000003440)=""/109, 0x6d}], 0x9, &(0x7f0000003580)=""/140, 0x8c}, 0x3}], 0x5, 0x100, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) connect(r0, &(0x7f0000003780)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x80) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000003800)={0x3a, @loopback, 0x4e21, 0x2, 'dh\x00', 0xdad61e47e9472412, 0x5, 0x54}, 0x2c) socketpair(0x23, 0x80000, 0x6, &(0x7f0000003840)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000003880)={0x3}, 0x1) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000003900), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000039c0)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003980)={&(0x7f0000003940)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x44010) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000003a40), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000003bc0)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003b80)={&(0x7f0000003a80)={0xcc, r4, 0x200, 0x70bd27, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xe}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0xffffffff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4668}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0xfa6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1b}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x6}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x200000f0) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000003dc0)={&(0x7f0000003c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003d80)={&(0x7f0000003c40)={0x140, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x82}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x234bf52f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xec7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0x140}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) socket$kcm(0x29, 0x7, 0x0) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000003e00), &(0x7f0000003e40)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000003e80)={0x800, 0x1, 0x7, 0x1, 0xfffffff7, 0x2, 0x282, 0x800, 0x0}, &(0x7f0000003ec0)=0x20) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000003f00)={r5, 0x7}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000003f40), r6) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000003f80)=0x9, 0x4) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000003fc0)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000004000)={r5, 0x9, 0x10, 0x81, 0x100000001}, &(0x7f0000004040)=0x18) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000042c0)={&(0x7f0000004080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004280)={&(0x7f00000040c0)={0x1c0, 0x0, 0x500, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xeb9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_NODE={0xb8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x92, 0x3, "10433534b1732847070f2f7321a6cd6b36e9a9d35a1fd4f10631e4acc4d2327180462da14c1a6f2654070f2bcbedae556ef741b63bd20d5a4874d76e2897d7d82a41f7e833d59819d5a0996fbf94fc56ce253361b47a9b64f3a7b339de614bc1274d5bc44d99dba20ffe345ae1350ede280d25fcc661df51befba8439f53ebb82d3dd6e3547b66ebb9de7cd8951d"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40f9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x18005}, 0x40000000) openat$tun(0xffffffffffffff9c, &(0x7f0000004300), 0x101, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000004400)={&(0x7f0000004340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000043c0)={&(0x7f0000004380)={0x3c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts}]}, 0x3c}, 0x1, 0x0, 0x0, 0x841}, 0x40) recvmmsg(r0, &(0x7f0000004900)=[{{&(0x7f0000004440)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000004580)=[{&(0x7f00000044c0)=""/163, 0xa3}], 0x1, &(0x7f00000045c0)=""/157, 0x9d}, 0x9}, {{&(0x7f0000004680)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000004800)=[{&(0x7f0000004700)=""/239, 0xef}], 0x1, &(0x7f0000004840)=""/166, 0xa6}, 0x7}], 0x2, 0x5, &(0x7f0000004980)={0x0, 0x3938700}) socket$can_j1939(0x1d, 0x2, 0x7) socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004a00), r2) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, &(0x7f0000004ac0)={&(0x7f00000049c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004a80)={&(0x7f0000004a40)={0x20, r8, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x305bf254, 0x6b}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmmsg$alg(r1, &(0x7f0000006b40)=[{0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000004b00)="1aaf9a30478f1ad78f4a72d3eb14b016d85085158a4e32b1b0e4139eacfaf4065232930dc706a389a5731bcccf6cd0ff2ad9577011dfe80852cf3e509b9a561724d13e81e6735ece509adf63a5373ef85fcf335cb1780cdb11afb8562a20401881972643ce13760e70ce0dfd78a0ee90f22f1a54202bf277a677a0150b5d25d265949832ae9673a05ece38769ac701a8a7fe987f49cb7b6fe8254bb1", 0x9c}, {&(0x7f0000004bc0)="a8af633a5292c95e9dbc9011d5404092648c3003be6799", 0x17}, {&(0x7f0000004c00)="bc63e3f493d9aa3e69d39c726360cfcbbaff1c79b4b4400fd0923f2f03492a76521317f2bc54d03022f8ed7cbd9165fe2f8ffa589803afc0bfd61ea92bfa2c9801ea20203371c1e83e13788f32c1931346d9eb75306ee5db5315d37b7637cdd85bb46a04828e054239fe2fab0b8d5f5c14eaaf6ebd18e07f98f6b87e32e92dbcbe7fd6260b875d36c7fb196d5b2d6706da5e7bdc60d1b136ee2d14bd412a1423cf0dc8cbddef369319d519865b6be1b3a5f23b2a", 0xb4}, {&(0x7f0000004cc0)="9564db4d51ceec6ce0780c7c5ecc78c41eb81ad6bac3ef58b9fec930ed2a221f75d35e55cf5002cbc2ac330b96acfd465b9700cf70efb5e03cde487856", 0x3d}, {&(0x7f0000004d00)="26682b652adb742b27c686dd4bc997f6ca4b826c43c35d6aaea60fbeaa560f2de1f358490f4e05ac758617ca90a80ad9eeafdd1c729db7f78aca5920d10563b5a5b43ed93b2d4c3150991983684897e48d2e0c9b8039ffecb47f74bf4611bdb55642722ea018c87156cdd56cb0b7125a35f02494e2673f4f406d237431594d6a0de93410cde941066b", 0x89}, {&(0x7f0000004dc0)="748b29fa1890ba5cedefd1269924e56bb98e6b9eafce446e9b654ebd86584ea5e6a5fdeb61d11f74a4d818ba5e95a3f8dd7cf3c787182e5f68b90d1cc5c6449f361f9a376f2971a254f45791dffb44dce82fcca39e75282bb6a3cc4128f74f64cb434246f1b35544c82e1e5265a110d842d5a45d168ef4b2477dcac790f534729996e3a1204cacf979a1eae5f934c3fe7e39598a26e5a0a398363b03e24ebc1a1ccf2874c1792507e082ee637badfcb192", 0xb1}, {&(0x7f0000004e80)="d8872f26e8ee0c9f1dd67b73cfe9ae1319df07d1a29aca08c1616f5ac3fbac241491ed733439c3b3a8186368521fbcfb1e29dfe59200e7942b56e94f2064f7212ac82f54972b92b6a15485153085297e8d05d6b1ce5f4e4036fa621d4a783ae9baefaf6488e71c6a288444069e2a5054ddc346d4a05cf962045f44c3d6548bd83e76a59aebdba6f11512ffa77b6c8136008547d96bf6186931af76b25c4eff19cf65e1f0d53d22144f5fd26be7708d026b99", 0xb2}, {&(0x7f0000004f40)="e30ad21c87732bc59cf579351ec81385f3424122736adcb6320c3876eba87b0db35e7d6d82305f067ed37905fb9afdc8650dcb5d06b122cbf7fe774240bb5b66878ff402ab7faa453eef9e471fcff557e24eb010afb8935d90d9ad4ad956a0169ece497e654fd13dee72d47b444531ac16c5f1ce483fba235bf2777097fe313791a4715ab8d7", 0x86}], 0x8, 0x0, 0x0, 0x800}, {0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000005080)="5c1a42217af82b3ee6d107e4a2f24e231c80fa74561b943bce33cbde12de1a909ed94f7dcb65e15cc818c68b2f9e87d4d0ea9c438b185ce0a7964ff1e7ec69ce4f2fdaccf47be8aec1c8620a87022a2ae65e38863000c9d78f1f359615c2adfc84d1f561ea3d864918aa8ac2cedfa764bb3835ca8bfa530e3dd0af0729fbd5a1912b6a2d59d1c287574a54926ceb9eada1d6c56b4758a9fa9350a54b10341acf2444b122667ea0b543a2769eef", 0xad}, {&(0x7f0000005140)="edc7a2e39a52979a9cec6a6c72fe32c9b8ec51104aed8785e0529c6397237635b3512087fb6802edef3c3e8b9d1de0655f3eb2d8e968218f9321273ebed297fbbf269246bef37de6185d103a9668729586c016d3f3dde8d60e17157e537121fa280916f4b30d49de166d002ecd90feee40f3fc6d4340c9a754ae3a9c81aca923520049a941c612057159063ac069613b7ce94d0596aad558fed0753483e8d3fefaa61929ec59720ad889f8b7a2b394e0cb3be34eb7b62a476495f6e6657510ed337e3313ab62786f03085aef4ab6fb118d407d3b69b64ba7ec001783a886f537a5f16f2e03ad5c9bc5cdf0ef7d47918fc2b3d66de7b4d9", 0xf7}, {&(0x7f0000005240)="987eb7064d8400d3ba637fb47eba85a98466742c1433474c99", 0x19}, {&(0x7f0000005280)="df9905357b00f3550905", 0xa}], 0x4, 0x0, 0x0, 0x80}, {0x0, 0x0, &(0x7f0000006300)=[{&(0x7f0000005300)="e98b66b85727bbfc3d2d743a64dae5b998517c5ed2e26e11de673c9b958ebb240624e06359c6d7b511b5f1f42859196ca11ef76797323fc01832cc861d2ee60ad535bfd10bd7c2aa5143e6f728efc4a0446b5f476ca642ceab32b39d2298f36c4998729bf29a4003cc9db88a7508583771520dd39534c15bc5f8f77348754363681b952f193dc89321179759dbe06e9aa9f1d6b161c6b03a694cf1f97b307408c58005afc782fcff798cbf4187ca93898dd28accfc29840854c696f23e3cf2fe6f125545677fbd64a9ec5c1e6328d878f1a87278edfb3a066eb08b680030b0ae416403d155f635a4a105fe9664106b53461b91d06c7c1724091f181d6ab43da5fcc8f69b30516db84f986d3a4b0e90879a8738078f1d930354e727088b0926f5eeb320a0a28304d5907f1d7f3e0b2dab17261bcd2afca97107a9508ee193c58b6bd4e7b053e94289aea0b7add9ba927e2e4c6b73222c5fbd125331d533677b62be25d0be861f7e2b36cdc246be4ad7b23ee19431c185e0fef74983d1e88642ee9fe4e79493ac08b538adce058a5df497d58916bd3930317ba16af5aec7dc0e3b2ba8df17a45d34f47a33f345a8b5ccf5b46ea357b0102c3ec58c92309a8d0453f2ef0d07b6492f1ab3291e95c2b37176e642104feb80a9aabd1cf735a75bdf7a2b85893eb3d149f2bd98f8effdf617152352523750890ae0071975019ebeffb60a412c1e10eab881db54c7051d8138e52cf1009c8ca07f7066ac3333083cfd0ecf2c17faba658a7ab72ec822222388defc3b3721745de784890e39a228c271a1d72b5a6319c30b757be74356c35d94b8e174d9ceefb366177092a172abf4697b099404c39ade289deb878e96b0182113b33a84a3a1f4315c93726957d57a6eddd71f44eef8993af2b4e93eac2a01f3e40d974b7ec6d26d20e70534eb337168c9cd945a2195fbda82bf87611e9e8b7c53a68bf04cbde72ce0262dd016de9c21168e260996f2f014f9dc7e160839f3c576a600c2a23c77a4f413aa9c660b0617d9917b722a8cb314cac25575d21515f6896b0136ea05640bb33eae92731f71fedd95290219b94c88836dc65bfdcc32488d88950e284894f20c47714605410f7fa7f88136671c4a05285dc3ca965be0b4efb642a404f5f56cf82a4397c853d2d2ca42000c8d18aa01888988a59db39416b7bc69fcc6df31e814949404ad0b00029081d70f0a1f5d6cb5b0decded813c7b0403419b93e12de27d85138f19a0d60e0fc7d4db2627a5c9c1dcb0f2a76302258603f3ec6eeba10a429b0577203ff08d5eb8f5479f67085c1cc19fb20da6c5ef961538087d4df5b9ecd6f05c958619ed3b787749766b3b1362aee9738f60b54e60f72358ca1bd2ef0b435f4ffe8f7ce1655b8d94554f442cdca2e1b026c4ff9dec62a739ab5abd2fb535b8043cae245122314b18db48395885e632f43a28ec67b34b3981b22ae68b4e0f00f7f58bd1863b7c959cc47278afa635660709b8b28666ea08d022e7c5f4c24454f871f23b5bdf743f8058d53fe72991233295be6be8f51d95375d17228a09a2ff89445cb34b20f9e9880db197b2c3685b99222f43e62f8281749cab9eced361e311d5297f4b4b301a3c56f96ba899ac4d35b23d28b40b4bfef550840f2953d015531a6ad5a4fdb25e560631f617862ade5b3a7dd3a86ed291c33752ce20ccaf62125d020f41f92a1afba35c7692a57464860dada72da176fc1aea6b9c98a7d51741480acf93267f3b11506456c5a3f4810b79008260effda70c5b28bd6514e1d6cde4982cc96a81bdc9cfa73440ee3c97d6a2c82b77f7ad2197d5c3741a7fb3b748d2d64a02f6da55d073a33edf67cc260830e950472c3b3f38d93b166dc250d2cd1310cf8b17e25c325cd6fb90b618b9270d87e9c4c6e0ab2a86bce1f326d723965207bd487e1e1faef1aaa0a6f8d0fdfc5577a440d3b50712d1a1a3a4f934af60db32afeadeb0b9e890e7b0c62b962c7a6db6dd6e028dd51e324c6564d3dd431689840ff3f70b588c0efa8697b3db76b306af808d6167ae243637190aab1b2e8c663b80642946e29ce294be84d0ab7c50939a7e14443bc6addcd13ef317b8047e26e3bcb7f47551234290355e7457c7bea44b305597196ba9fcf26e9860a86ca24b698de018e44546736385d926b394e473aa88c2dfa38a3a16c4612116df992c5cbbb666f06ef7970211d6d7c8692747a98825aaf9193320eb45934922c71b2597accab6a3bad094881e68f30fa401f99113aebcedbf1c078d1a05b1c56e1cf6d632d80bf612f98772c01566da58cb5ebf3f6f7094b79fd2d8d835eeb5f8c7f38726fde0bd6952cc8449514ada603cb8198db815d4e781dbd056db730b808e9d6da811bce3420e2df472348ef5f610d9d4f56d05118c43b5a330848f3ab265ba0fbafaa0864aefbbd6cde9dc7207b451bba922b0e6abba7f47806392e6b4bc527912e5c9455e771ca74879d7a065eeb6bb4f98c702f36ba1a751ba882e8aabe22879ef2e07f57072dbf309f5c23f04a7201e12fcb3aaa77d994284528889c5f1e683eb81edf99f2d968c5606957b66a6da04e857dcec89e1029faa7dacdfaa6f51791c4b2a352b8384420a363ea4d295251a0cbab44ac62bbd45847cd5e671e591bddc193eab88ebafc15af4ee5c45bfbf01a9d0b817a9cf4ae7da941a91a19e350942654ae987137616b79cbadc01f8dcd86e2a1cfca22b079bb7139aac2d4fc8e918d0f7301addb1cce6928bc4a79b25576dd89d8f6c94ead5655a66198d62e0913eeb23313b355f43d67d5f38afbb31b4face568e5dc15d7972e31121678f836a9400609f934a66f8468e28122f29095780e7571b7daa680cad4cb5e47b773bca4390d35a7f799c2de96e64a43db292a9065095b61aa6a9f5fdb510f1cb6ae2a1823c429646891258c655fd05d9588c659830bcb3a77cfed4806ebe99f98d8a97bbddcd2e10cc7237fd1fd5749e4ebb82ceb36596df2876f2db6bdfaa461dffb3fb259ef9903a8f421eaa2f69cbe5901980bcbcc8e59eb010e370d48789a27a76689a3eafaface021bea2fd41d94b275ab43c7e7d0973580960da63d60199a4a78f12e4ec912b4a708fc7b79ca5be6277a6068f1438a7f8b77dab01a8bb7dcefd6263ea9716df54ff3c40b332784ca24f02d2a2c303140e94318c75272c36e22f95b837a85ae20aafc44c434eda811d3c7f68e8e17b63a0426b520fb6af9cd21b1463296648721c9c9ba343c5bd506da8cf541d171023a921bd2421ca5f4d6c8c498c9b8572f07493d170bcc4438713055169e7fc158e0975eaac0ab957536b712fdd8f34d04ec477ac20d4ad4fb5dd235ebed138d0b81d2dc02ca98156c7c7abb0d6a8d508ba1b7fe79eaae451673c11afafcf45762a7c1394a734f55bb2687c9a6eb55bf57c2b071778ec3a2e64a663ce4586c891b24b8b9e6b82a7b12ac443a6de71a9018db563409e7e366b27b3b161435caa184f70ceec64ad2982367c3f90e4b11800e86952ac6b0847677b7f77cd1b7b946660c62f9456d254d1ad55e4b44dbc2ad77a2ac631ec68761f090f515ab1b5dad3627dc1c25ef8719da36a350c779902bf2d2f86d4f717b752d5f33ff4b2f296fa324782f701bcd0289de1ab93f385584d6f66809e1d5cd0869001675aa01bf946d06ae677e3922354c6f1a705b2087a477b86500412bf39e361aaeb5986f80cdf395b72c461044f258a7f20b3321850b16ce6069b25d0e633e970cdfc468cc27cb1af1835f790764e3408be4df24516ce8882436992ac0e4ee71701ac57225dd7f351ac76d612e6c8b8fb62419b74979404ea49aa74df21f66cad93f60c7550d1778091cf2049c5546bdaafd6ff3cede4a8918f791cce790e1250fdfb4cac97b6b0f84cc380f391e9e2f1e8110ccb2b41478285d29198aba0f8070a2033cbc69d2f838ba095c36910c4b09e633e9e46051ed20d887afb9e2f001a103c9c8cd2aab8e4ad32d69fd23520d256a3de4909754f3284c2aa34351ccaece47d36b7896c5b04980c1444890768c0961f924876db517f2e32ba316da571027110ee9483dee8bef2a213c86fd5b57cbf4f83ec417efbd6f6150726c19f92334f75d14928745b8da32bbdf02f339f75ba5a97ccffb2f0458189f1bcd3fd6239592734ee5ba5d8fd6cf0734c0462b95946df3b8cf2ab9c6bfdcc4a83629ba5dc592012d3444fb231ab7553f536e8bd175d699fe27d0bedf7682f7a049a2c907c8a5ea645b31761bb2636ad11292b778eeb6bb1a8a213e2b810c5afbb21f69046bf2e98d55ddd8dd220f0543949d6643caee991ddcc545393c42a1fcb2f90c37512e2c0e9b69576ecbf7136a47dd5ac40abf5eeb48cba140a91183a1d064eb498a0721f73b06a3c7ec6db94ff05e272aea1313a618e0497213585758b649217ba1a48d46d1cd95913428d2b2ccf100fa70fe9aaf054b00e6f92e9b9ca1b44c9f570714219e774c67ecef8d2d74f5f813dc743fb299798dbdb2cc0878e76c03506d05a759013cf1cd6bc651b151199ef0a3f0c30af36d72c28017eafac2f650da5b2cdd7486b2c060e2f5fd19aa8ec1bc68f8b386385b135b9cdd1463a291f588b13a4f6625e2fbb052d60bff053cf354fca7ca3bd133b99a425b8e3bc601143783a438d0e8096658e2ee6d79683daf1f2875aa2306961c8d67c95cf762fb583f733ba5ee2ae44d5e462e473e4209a6b724c121eadce5f270565db40afb38f25aa3cf7a2856b3db360ce120bcc07e83f9da9ad3d4ab4f7ecc2505873409ffee97cced4fc00ffbe8722c2cb49de9b2843b61d59e61b733aab669cbd88c95cd02b20e4ab757c9b0c95bba169888cff3b1720994fba4b8f36a64b40782d07f3194c65bbfefb8596f29c74e840051196df81cc2663a2ec6c644e4b09779688ba839c601a2da0b48e1e951ecb15471e82e5e1ccf535ba19c76702fd24368693393a206a3c60d561d7e03fd9e48bc1756dc89513e5ab70f5154e753c8f1e1d92eeb5088f77ff6bfe62ec3906949804e81e1a6a8a5776cf80ba1c01625b7969393129b64b12992ee77f1b93734cd08b065eedcde161d39ddced9c3c3d14dce90e11b017f5d0f358d1c5301a4d3c13ed6adb2b1d1016eda044994df6c3267dcd2dc2972fffcb42829a2841ca0cb2a591bc16043b986660b1c95552524c4de197786f5e9e5698de439db1e9266ad8d361059f0810d616d25f0237af1626d4dc868fdab4d3b892b8c26ab5ccb56d26d57833e966c7ed97f55f8a892d14d2fa5dcb69a3ad999b15fbd0bec5c57890d834a36699ca2bab4ac41ef4659d8d280885df62624cdb523d374fa18e8ee5d1f5f60dd5f3bb77e7ae388a6cfab3bc6b996c193836a3cf656d5b3c83c4312431a1aa332e2cddbf489ba7aea1d58e153a854445344d2cc01d572fbe3bacc12b30c22d1312264cf046d74bfdb498b5d56144920ab425b778e1855835fb0ca9a1699ed3cd3cdd46ffe17174b06c0d5fd5400620d04d7b1fa45853a3fb20dafedc24aafd145107b489b65a6d72ecfcf01847a2821bc1729afc6e53c443600e2a37b430c0c6b713dad1ea68b68b12fcd8ee8c4618831494c4b34cceb858ca40eb10e438e0a88d781a517d65cf037762a18e05c59a161831d3e396c293f65e481150d69d433c6691e663b7f5fb1643f9712b144d60feff36c4eb0f57bf41b900fa582f919011df9e796c74a1f883ded834d9264923fd01ef3f2032e5a9bd205f9627a4ab9f7daf17b76ff6c91047a9", 0x1000}], 0x1, 0x0, 0x0, 0x4040008}, {0x0, 0x0, &(0x7f0000006540)=[{&(0x7f0000006340)="e050cd62c7192ff8b553114985a3afbe4f6749c04c4c47b72ca7acadd595d78eb9ec0507787dbaca5e8df64e4a4a81e63088bb66bcf1e6d576e0dc73125846656ad80b08ee68e6a9fbce2324b63ddc61379d1437457bbdff9c508954f208906464172d8879af407b5e41f0a131fc4b684b911aced8672ad0a2ddc088514217262a9f33825e40b2d5c93a6ffcf21836af3662060d6b25a7191cbfe86a2bb92dae41ab57562d1c6d6b49f7735d4b", 0xad}, {&(0x7f0000006400)="9db734bcacc52f3cfb953999c72d1fdb04e7af659d08479b01e2b6c2796917212d0b1820ec947131fe2c646338aa8da100fcc256e768b72cb8284433474e736921027708205cb15384f19ace0c6e60a355624c9eccb8dd75889e942fc1", 0x5d}, {&(0x7f0000006480)="b5652f2fc413f48236eda2b3d7138980b446751eb308c42e65643119a78851432825063e3e1b4c2037b9ca79127c6eb287dbbbea9299b02e711e8f7e49a16d80ebae1e3f561b2804002b8d5fd177690d2464b1265e926b03d6e84d3deda7ddf1a8f622e2ae31272101b677ecadda9eb4061f5f56ab1e670b42168e2c95b018582d4a6f80fe7de40b286d368fd7f1f45b593476", 0x93}], 0x3, &(0x7f0000006580)=[@assoc={0x18, 0x117, 0x4, 0xfffffffd}, @assoc={0x18, 0x117, 0x4, 0xff}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}, @iv={0xb0, 0x117, 0x2, 0x96, "a01bac221c6bc3fa62bb9469b93b81026579fb5a0db4a69807e5ee97cd2fdbc5da3993679a13da87ba4b4dee4b1ea37c589f4a06653fdd9a07c068498008dec87d9a75f1b5614bd591a3edcc48e04d30bc337d2545770fcd3e8069232e70818b0cedb0cad743770df328f7140f2252783eb0f6eec7a2b555f58b43e94701736126f99d5bc00ea99c5cd88aa4ac7acc3eb44e4dd1b810"}, @iv={0xa0, 0x117, 0x2, 0x86, "13dd58127512038136b9746d25fd73a54998aa839623d2c43696deaefe9a5f68fb86aff704c1362ec0cf3dc1851b4792f4deeb1f8aa085db16823138535ee8e527dfd94c91eccdb3532bf96e6bbcd3d21f4baefdde24dcf681368c7e4c40c80943771dafaf6bd0b6de34e1a82c5653fa5738f8663b738eaec6464b559fc904ad3784cfd8b52e"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x1e0, 0x400c001}, {0x0, 0x0, &(0x7f0000006900)=[{&(0x7f0000006780)=';', 0x1}, {&(0x7f00000067c0)="ca43bcfe821acf0be8599e5da01aff531d2da4cf830b5ab647de60893d6663a33f707e958792a82c19aeedad8d2d2adfc520e020594369a1eba7d2f965d0c3120649103483160ee1c2c94e00a75fdb6279d1612938dc3ba68b4703b301e8d5f94e084acafac54c268d01ebffea8cd90538d4affcdc9c3dab23085ebce4ec3db5ac8933407971173da5e148abf8ac18b5f8c066fd7a9dd342f25c01304f78a97910ea", 0xa2}, {&(0x7f0000006880)="ac626337c07890aa95ca4e3fd6f534fc3accccb9e8292caf60fb71f02b442d959b5c466f6be45340ffd875bb06994f8693d023a606f391bbd69e47e8b860f105688c208e946ee3d5b930407a9e958ce0539e786668d93e05d7ba0810d1e5a2803614e03c6745", 0x66}], 0x3, &(0x7f0000006940)=[@assoc={0x18, 0x117, 0x4, 0x7}, @iv={0x88, 0x117, 0x2, 0x70, "26947cbac86415620fb2975e0b040dbf3042396e3de4fe6a892d074cc563588265ad1587c067b5e52a120e2c3efcbfc24035ae3738436bcad36f92913c61df8c7b37bb0361f3346d05669daa0a860cf8da096c492a10b6137ab72b783a7c5158133dccc243619acc2e2fe8bf1e2f147c"}, @iv={0x110, 0x117, 0x2, 0xf6, "265e99423241ef727b41ecd33d37423c08baa248748d8365127747db87903f2dba4035d22f8dee423a8079b0e49af034e5b5a8086f98d78179ca1f0c910250c6d82b49bf646c76da3c3256d18b063ea8a6d85b476a6a99f2b9d92718ac3a28372ce419bf846ec892ad83f1364073b98ddc4f918d035fc64c926b043095f99df4588b459fc34b88ef9452eb07cbbe7148eec7d67bedc972dd4faa935c5f366ddfd15a9268c29993817013399e47d4dfa19a8a5eaf3e8b8bdb878421f84b0be0ecd478015fab0bbf5871d5a950d7797d37ea5923e5350e8f6e15ab0c6cc7e61a955b1e6147529aaa3620b5643d53d63a92aaaf8eb4f584"}, @op={0x18, 0x117, 0x3, 0x1}], 0x1c8, 0x20040090}], 0x5, 0x80) 542.576127ms ago: executing program 5 (id=5200): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="cd3e000000000000000001000308257c6ab6b8b5d2be4e756014e5003a2fbd5e3e0911d9aa42dea87c08f7e2a87c56097314b37dec94d4013e5fd6786c29000000000000e00401ab5ab4a305a378076a49b21ff2c6d2468b92768b2fe9c3592850669089c69a93f637ae1c4fde71290f58e5b4e79f13efea15815b51205805f8097afe7dc64a7a7f268290c2e50ccf605246fdba979a23b9f90d8e778120ee7461d4"], 0x14}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000040)="1a00000002000000", 0x8) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000000)="240000001e005f80004000000000000002000000000005000000e636263e0100000000ff", 0x24) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f00000000c0)={0x0, 0x9}, 0x8) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0xfdef) ioctl$FITHAW(r0, 0xc0045878) r5 = socket(0x28, 0x4, 0x5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$nl_route(r5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000007c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000b40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000b80)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="08002dbd7000fddbdf256700000008000300", @ANYRES32=r8, @ANYBLOB="2c10c500ef9f2a2c3ced2d07f4cb93d254e815abdb331dcd1ec6e1517162323b259b7e4c6f23a4f434099282569fd3966b41bc47023c0100000046c27a646bc4abaa1205b50377951736af8699ffccbe6ea7add598e7eb9e7cc492a73da2c0c2e0e50bab20bd758535d6dd502704"], 0x48}}, 0x80) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x0, 0x1, 0x3, 0xe, 0x2, 0x7}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x410, 0xffffffff, 0xd0, 0x210, 0xd0, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0x8000, 0x4, 0x1, [0x3, 0x0, 0xf800, 0x8, 0x81, 0xf1cf, 0x7, 0x8, 0x4, 0x8, 0x4, 0xff, 0xf, 0x6, 0x5, 0x1], 0xf}}, @common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"df09", 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xffffff00, 0xffffffff, 0x101000000, 0xff], 0x4e20, 0x4e22, 0x4e21, 0x4e20, 0x4, 0x1, 0x1, 0x0, 0xfffffff2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000a00)={'geneve0\x00', 0x3}) socket$inet6(0xa, 0x5, 0x1000) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 452.883041ms ago: executing program 6 (id=5201): unshare(0x22020600) r0 = socket(0x29, 0x5, 0x0) unshare(0x2020000) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, 0x0, 0x0) 402.527913ms ago: executing program 3 (id=5202): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50005}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) socket(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendmmsg(r0, &(0x7f0000000040), 0x35, 0x4c810) 401.647369ms ago: executing program 5 (id=5203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000004800011d00000000000000000afe80ff", @ANYRES32=0x0, @ANYBLOB="000000001400010000000000000000000000000000000001080002"], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x63}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1c, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r3}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_POLICY={0x8}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x14, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040050) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8}]}}]}, 0x3c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000600)={0x0, 0x8001, 0x10}, &(0x7f0000000640)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841) recvmsg(r8, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) recvmsg(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10002) setsockopt$IP_VS_SO_SET_EDIT(r6, 0x0, 0x483, &(0x7f00000005c0)={0xff, @broadcast, 0x4e21, 0x2, 'lblcr\x00', 0x0, 0x0, 0x47}, 0x2c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = accept(r1, &(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000540)=0x80) setsockopt$MISDN_TIME_STAMP(r10, 0x0, 0x1, &(0x7f0000000580), 0x4) sendmsg$AUDIT_MAKE_EQUIV(r10, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000007c0)={0x28, 0x3f7, 0x10, 0x70bd2b, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00'}) 386.40893ms ago: executing program 1 (id=5204): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x6}, 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket(0x2d, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2d, 0x4e24, @rand_addr=0x64010100}, 0x10) (async) bind$inet(r1, &(0x7f0000000080)={0x2d, 0x4e24, @rand_addr=0x64010100}, 0x10) 367.302983ms ago: executing program 3 (id=5205): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = epoll_create(0x7) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) close(r0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpu.idle\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x970b) (async) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000000c0)={r6}) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, r9, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5000}, 0x800) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) (async, rerun: 64) getsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000280)={@private, @remote, 0x0}, &(0x7f00000002c0)=0xc) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x7800, 0x700, 0x3, 0x3, {{0x6, 0x4, 0x1, 0x27, 0x18, 0x67, 0x0, 0xef, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x2f, 0xaf, 0x7d, 0xb9d9, 0x85, @dev={0xfe, 0x80, '\x00', 0x21}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x7, 0x846, 0x2}}) sendmsg$nl_route(r6, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)=@RTM_DELMDB={0xb8, 0x55, 0x100, 0x70bd2d, 0x25dfdbfb, {0x7, r10}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x0, 0x0, 0x3, {@in6_addr=@empty, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x0, 0x3, 0x2, {@ip4=@empty, 0x400}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x0, 0x1, 0x0, {@ip4=@dev={0xac, 0x14, 0x14, 0x35}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x2, {@ip4=@private=0xa010101, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r14, 0x0, 0x2, 0x4, {@in6_addr=@mcast2}}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40008e4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1, 0x16, &(0x7f0000000140)=ANY=[@ANYRES64=r5], &(0x7f0000000100)='GPL\x00'}, 0x94) (async) openat$cgroup_ro(r2, &(0x7f0000000400)='blkio.bfq.io_queued\x00', 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xa, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000611000"/32], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) 278.511468ms ago: executing program 6 (id=5206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x7, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14}}, 0x7c}}, 0x0) 278.089059ms ago: executing program 1 (id=5207): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket(0x27, 0x6, 0x5) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x0, 0xf0, 0x3}}, 0x18) (async) sendto$inet6(r0, &(0x7f0000000040)="6e8519", 0x3, 0x7ce2350e442b0fa9, 0x0, 0x0) (async) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000100)=0x5, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x21dfdbfb, {0x0, 0x0, 0x0, r4, {0x1, 0x6}, {0xffff, 0xb}, {0xc}}}, 0x24}}, 0x40) 251.141763ms ago: executing program 3 (id=5208): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x150, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0x100}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x8, 0x1, 0x5, 0x4, 0x2, 0x16, 0x4}}]}}]}, 0x150}}, 0x0) 134.809361ms ago: executing program 1 (id=5209): r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) sendto$inet6(r1, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) getsockopt$inet6_buf(r1, 0x29, 0x3d, 0x0, &(0x7f00000000c0)) (async) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1406, 0x1}, 0x10}}, 0x0) (async, rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) 129.14519ms ago: executing program 3 (id=5210): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="187e85470b4ee6e8b246967020b559c3a92d1b00000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000006a0001000000000000009c39c743"], 0x18}}, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000000c0)={0x7f, 0x39, 0x2007, 0x2}, 0x10) socket$kcm(0x10, 0x2, 0x0) 50.065081ms ago: executing program 3 (id=5211): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) accept4(r2, 0x0, 0x0, 0x80000) (async) r4 = accept4(r2, 0x0, 0x0, 0x80000) sendmsg$xdp(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="60481a316f1aa678318d8d77bf44cced0b70bfcbc4905b8152f20c18be2eeef743f54cb7a16bbb6e3bf2fbbe9ff7481627c2561e1a6c8b02f0eb88c7f32f68b9e2423a0fe87501577efd40b70965d66b09f2cdeb159d2d3d6c095271ce37fbf7fb3712f3e95b9aacc6c1af787c5bdcfcc9b313bd46d1fc3d148d86d5ffb261ace6c45c2fbdced8e4b45e4358b95d4212e53ef729d308e08ed3e683813c1dcac50bf343bc65be49dbd852caf9a2d0656abc82adf0651c4ac76bf558a3179de6c947fb553be50db8ba2860b2483934d5d39cbcc8bc393eb926dbdb8de385f7d627982072679d9853515e79", 0xea}, {&(0x7f00000005c0)="63311794932b42fa800fe297013ca7feab7756ef7824de8a320ce51a7d2a8f9354bbec77c836bc975b39c022940880a890aff150d32e9641e2ec516273f54e5b972dfa3ba0ce3d330c754f50784dd3d120ebfa42481477f49fb6de051c98a3aff4f0cb9f1ea7841c11fe0f25b2dd3f90d203d9c390a2031dffeb947bd6b9c329a50d95eb82723641a7cdcb20a10068b5fde7f93c3ac3b2653dd2db5d3855a43ec44a301f0079ffe4437a5fe135d5fa92fa", 0xb1}, {&(0x7f00000007c0)="dba348f3686f64658eef3472e762256ef8a9583e6b06ed88c2ef46e6f984e69058e797f054e94bf370b74113ad8d0db3393d6d488248ca023e8aa857d2d69f24712bc88cbd2a39190c437931fd386fe3d82738f55e2268975f389b01d0603267672f7f2c80", 0x65}], 0x3, 0x0, 0x0, 0x20000080}, 0x440000d0) recvmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12040) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c00)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000010000000000000700070000000000000000000201000000000059a8747782b5da1441d5c1d34d0b4ba95c2ef5977af05e2ee92c70d9fc9fe73d8b3fc01014c62a4527c466b2286f9de97877400da2bad180770fdeeec16612f53a082ccf9a23073f7d83a26bbefa937a42f619ce9f197933a2bf5ff7c251e690731f4bb57c"], 0x0, 0x32, 0x0, 0x3}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001400a10cfffb00000000000002001b00", @ANYRES32=0x0, @ANYBLOB="080008000400000008000900ff07000008000100ac1414bb08000a000400000014000300697036746e6c30000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001400a10cfffb00000000000002001b00", @ANYRES32=0x0, @ANYBLOB="080008000400000008000900ff07000008000100ac1414bb08000a000400000014000300697036746e6c30000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 49.526101ms ago: executing program 6 (id=5212): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x19}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 35.865532ms ago: executing program 1 (id=5213): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4085}, 0x4) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r2, 0x8915, &(0x7f0000002400)={'veth0_virt_wifi\x00'}) r3 = socket(0x28, 0x5, 0x0) setsockopt$inet6_int(r3, 0x29, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) ioctl$FICLONE(r5, 0x40049409, r3) (async) ioctl$FICLONE(r5, 0x40049409, r3) recvmmsg(r5, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4093, 0xffd}], 0x2}, 0x101}], 0x4, 0x40000020, 0x0) (async) recvmmsg(r5, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4093, 0xffd}], 0x2}, 0x101}], 0x4, 0x40000020, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRESHEX=r6, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYRESHEX, @ANYRES64=r5, @ANYRES32, @ANYRES64=r2], 0x18c0}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r4}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r4}, 0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r8) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007002e3a2f2f140002"], 0x44}, 0x1, 0x1000000, 0x0, 0xc4}, 0x0) socket(0x25, 0x3, 0x3) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000240)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x10, 0x0, @opaque="d5838fb19a1d56d3"}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000180)) (async) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000180)) syz_emit_ethernet(0xd9, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f00000003c0)={'team_slave_1\x00', 0x8}) (async) ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f00000003c0)={'team_slave_1\x00', 0x8}) 0s ago: executing program 6 (id=5214): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @local}, 0x10) (async) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x2, @local}, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x30, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x3}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x6}]}, 0x30}}, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDFWD(r3, 0x8919, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000611060000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) kernel console output (not intermixed with test programs): emask=(null) [ 199.050423][T16977] batadv0: entered promiscuous mode [ 199.073445][T16977] batadv0: entered allmulticast mode [ 199.080288][T16982] ,cpuset=/,mems_allowed=0-1 [ 199.081721][T16977] bridge0: port 3(batadv0) entered blocking state [ 199.084923][T16982] CPU: 0 UID: 0 PID: 16982 Comm: syz.4.3210 Not tainted syzkaller #0 PREEMPT(full) [ 199.084946][T16982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 199.084958][T16982] Call Trace: [ 199.084965][T16982] [ 199.084973][T16982] dump_stack_lvl+0x189/0x250 [ 199.085000][T16982] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.085021][T16982] ? __pfx__printk+0x10/0x10 [ 199.085043][T16982] ? lock_release+0x4b/0x3e0 [ 199.085068][T16982] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 199.085088][T16982] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 199.085114][T16982] warn_alloc+0x214/0x310 [ 199.085139][T16982] ? stack_depot_save_flags+0x40/0x860 [ 199.085163][T16982] ? __pfx_warn_alloc+0x10/0x10 [ 199.085188][T16982] ? kasan_save_track+0x4f/0x80 [ 199.085209][T16982] ? xskq_create+0x56/0x170 [ 199.085230][T16982] ? xsk_init_queue+0xb0/0x110 [ 199.085250][T16982] ? xsk_setsockopt+0x4dc/0x8d0 [ 199.085269][T16982] ? do_sock_setsockopt+0x17c/0x1b0 [ 199.085285][T16982] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 199.085300][T16982] ? do_syscall_64+0xfa/0x3b0 [ 199.085323][T16982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.085344][T16982] __vmalloc_node_range_noprof+0x125/0x12f0 [ 199.085380][T16982] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 199.085404][T16982] ? xsk_setsockopt+0x462/0x8d0 [ 199.085425][T16982] ? __kasan_kmalloc+0x93/0xb0 [ 199.085447][T16982] vmalloc_user_noprof+0xad/0xf0 [ 199.085470][T16982] ? xskq_create+0xbf/0x170 [ 199.085491][T16982] xskq_create+0xbf/0x170 [ 199.085514][T16982] xsk_init_queue+0xb0/0x110 [ 199.085536][T16982] xsk_setsockopt+0x4dc/0x8d0 [ 199.085557][T16982] ? __pfx_xsk_setsockopt+0x10/0x10 [ 199.085577][T16982] ? __pfx_aa_sk_perm+0x10/0x10 [ 199.085600][T16982] ? lock_release+0x4b/0x3e0 [ 199.085623][T16982] ? aa_sock_opt_perm+0xff/0x1b0 [ 199.085647][T16982] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 199.085666][T16982] ? __pfx_xsk_setsockopt+0x10/0x10 [ 199.085686][T16982] do_sock_setsockopt+0x17c/0x1b0 [ 199.085706][T16982] __x64_sys_setsockopt+0x13f/0x1b0 [ 199.085725][T16982] do_syscall_64+0xfa/0x3b0 [ 199.085749][T16982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.085766][T16982] ? clear_bhb_loop+0x60/0xb0 [ 199.085785][T16982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.085802][T16982] RIP: 0033:0x7f4ccd78ebe9 [ 199.085818][T16982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.085835][T16982] RSP: 002b:00007f4cce55d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 199.085853][T16982] RAX: ffffffffffffffda RBX: 00007f4ccd9b5fa0 RCX: 00007f4ccd78ebe9 [ 199.085867][T16982] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 199.085878][T16982] RBP: 00007f4ccd811e19 R08: 0000000000000004 R09: 0000000000000000 [ 199.085889][T16982] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.085900][T16982] R13: 00007f4ccd9b6038 R14: 00007f4ccd9b5fa0 R15: 00007ffd89497c18 [ 199.085922][T16982] [ 199.134308][T16982] Mem-Info: [ 199.138187][T16977] bridge0: port 3(batadv0) entered disabled state [ 199.197117][T16982] active_anon:4026 inactive_anon:0 isolated_anon:0 [ 199.197117][T16982] active_file:2637 inactive_file:39890 isolated_file:0 [ 199.197117][T16982] unevictable:768 dirty:61 writeback:0 [ 199.197117][T16982] slab_reclaimable:12875 slab_unreclaimable:156246 [ 199.197117][T16982] mapped:24156 shmem:1810 pagetables:978 [ 199.197117][T16982] sec_pagetables:0 bounce:0 [ 199.197117][T16982] kernel_misc_reclaimable:0 [ 199.197117][T16982] free:1266526 free_pcp:16316 free_cma:0 [ 199.197170][T16982] Node 0 active_anon:16104kB inactive_anon:0kB active_file:10548kB inactive_file:159364kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96624kB dirty:240kB writeback:0kB shmem:5704kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14504kB pagetables:3752kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 199.197214][T16982] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 199.197258][T16982] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 199.197311][T16982] lowmem_reserve[]: 0 [ 199.222344][T16977] bridge0: port 3(batadv0) entered blocking state [ 199.285919][T16982] 2497 [ 199.288742][T16977] bridge0: port 3(batadv0) entered forwarding state [ 199.303775][T16982] 2499 [ 199.331030][T16977] netlink: 'syz.0.3208': attribute type 10 has an invalid length. [ 199.340347][T16982] 2499 [ 199.582088][ T6839] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 199.594627][ T6839] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 199.675243][T16982] 2499 [ 199.678050][T16982] Node 0 DMA32 free:1143916kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21260kB inactive_anon:0kB active_file:10548kB inactive_file:157784kB unevictable:1536kB writepending:236kB present:3129332kB managed:2557460kB mlocked:0kB bounce:0kB free_pcp:51944kB local_pcp:21408kB free_cma:0kB [ 199.717269][T16977] netlink: 'syz.0.3208': attribute type 10 has an invalid length. [ 199.725888][T16977] netlink: 'syz.0.3208': attribute type 10 has an invalid length. [ 199.770871][T16982] lowmem_reserve[]: 0 0 1 1 1 [ 199.776193][T16977] __nla_validate_parse: 17 callbacks suppressed [ 199.776209][T16977] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3208'. [ 199.791168][T16982] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 199.877320][T16982] lowmem_reserve[]: 0 0 0 0 0 [ 199.904218][T16982] Node 1 Normal free:3885824kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21580kB local_pcp:10072kB free_cma:0kB [ 199.980400][T16982] lowmem_reserve[]: 0 0 0 0 0 [ 199.988473][T16982] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 200.007678][T16982] Node 0 DMA32: 1*4kB (U) 2*8kB (ME) 215*16kB (UM) 66*32kB (UM) 88*64kB (ME) 113*128kB (UME) 273*256kB (UM) 141*512kB (UME) 79*1024kB (UME) 19*2048kB (UME) 209*4096kB (M) = 1143620kB [ 200.057577][T16982] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 200.063641][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 200.071149][T16982] Node 1 Normal: 66*4kB (UME) 27*8kB (UME) 38*16kB (UME) 78*32kB (UME) 34*64kB (UME) 11*128kB (UME) 7*256kB (UM) 2*512kB (M) 1*1024kB (M) 2*2048kB (UE) 945*4096kB (M) = 3885824kB [ 200.099774][ T5865] bond0: (slave syz_tun): Releasing backup interface [ 200.107424][T16982] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 200.121392][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 200.130068][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 200.142663][T16982] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 200.152858][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 200.161349][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 200.194051][T16982] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 200.204615][T16982] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 200.216439][T16982] 43889 total pagecache pages [ 200.224915][T16982] 0 pages in swap cache [ 200.260932][T16982] Free swap = 124996kB [ 200.265842][T16982] Total swap = 124996kB [ 200.272090][T16982] 2097051 pages RAM [ 200.305346][T16982] 0 pages HighMem/MovableOnly [ 200.310893][T16982] 425660 pages reserved [ 200.325450][T16982] 0 pages cma reserved [ 200.424901][T17024] netlink: 29 bytes leftover after parsing attributes in process `syz.2.3218'. [ 200.486001][T17026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3219'. [ 200.498782][T17024] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3218'. [ 200.507947][T17024] netlink: 'syz.2.3218': attribute type 6 has an invalid length. [ 200.523180][T17030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3220'. [ 200.539665][T17030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3220'. [ 200.543925][T16998] hsr0 speed is unknown, defaulting to 1000 [ 200.706777][ T5857] Bluetooth: hci2: command tx timeout [ 200.707889][T17048] netlink: 'syz.2.3221': attribute type 64 has an invalid length. [ 200.751494][T17048] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3221'. [ 200.842358][T16998] chnl_net:caif_netlink_parms(): no params data found [ 200.887309][T16998] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.894479][T16998] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.901853][T16998] bridge_slave_0: entered allmulticast mode [ 200.909650][T16998] bridge_slave_0: entered promiscuous mode [ 200.917611][T16998] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.926359][T16998] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.933542][T16998] bridge_slave_1: entered allmulticast mode [ 200.940484][T16998] bridge_slave_1: entered promiscuous mode [ 200.962138][T16998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.973018][T16998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.993878][T16998] team0: Port device team_slave_0 added [ 201.001386][T16998] team0: Port device team_slave_1 added [ 201.020299][T16998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.028311][T16998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.054317][T16998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.066310][T16998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.073241][T16998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.099324][T16998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.130954][T16998] hsr_slave_0: entered promiscuous mode [ 201.138493][T16998] hsr_slave_1: entered promiscuous mode [ 201.144379][T16998] debugfs: 'hsr0' already exists in 'hsr' [ 201.150660][T16998] Cannot create hsr debugfs directory [ 201.210225][T16998] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.220939][T16998] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.260812][T16998] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.272666][T16998] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.441940][T16998] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.460929][T16998] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.476466][T17078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3234'. [ 201.495839][T17080] syzkaller1: left promiscuous mode [ 201.501450][T17080] syzkaller1: left allmulticast mode [ 201.561436][T16998] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.572530][T16998] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.581444][T17089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3237'. [ 201.593604][T17090] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3237'. [ 201.634234][T17093] netlink: 'syz.4.3238': attribute type 1 has an invalid length. [ 201.693705][T17093] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.744619][T17093] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.761462][T17093] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 201.780417][T17093] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 201.851687][T17109] veth3: entered promiscuous mode [ 201.859824][T17109] bond2: (slave veth3): Enslaving as an active interface with a down link [ 201.878480][T17093] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.972762][T17121] bridge0: port 3(batadv0) entered disabled state [ 201.979411][T17121] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.986843][T17121] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.004554][T17119] tipc: New replicast peer: 255.255.255.255 [ 202.013345][T17119] tipc: Enabled bearer , priority 10 [ 202.033240][T17121] nbd: nbd0 already in use [ 202.038226][T17121] block nbd0: NBD_DISCONNECT [ 202.038997][T17130] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20002 [ 202.042843][T17121] block nbd0: Send disconnect failed -32 [ 202.065471][T17121] block nbd0: shutting down sockets [ 202.121733][T16998] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 202.134567][T16998] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 202.184583][T16998] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 202.200185][T16998] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 202.225599][ T5857] Bluetooth: hci3: command tx timeout [ 202.311004][T17144] syzkaller1: entered promiscuous mode [ 202.320344][T17144] syzkaller1: entered allmulticast mode [ 202.351285][T17157] geneve2: entered promiscuous mode [ 202.471642][T16998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.477237][T17169] netlink: 'syz.4.3261': attribute type 1 has an invalid length. [ 202.534851][T16998] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.580025][T17169] 8021q: adding VLAN 0 to HW filter on device bond3 [ 202.599080][T17174] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.674544][ T6839] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.681696][ T6839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.708971][ T6839] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.716165][ T6839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.760230][T16998] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.795969][ T5857] Bluetooth: hci2: command tx timeout [ 203.013013][T17214] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 203.042714][T16998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.126670][ T7037] tipc: Node number set to 480439548 [ 203.151673][T16998] veth0_vlan: entered promiscuous mode [ 203.173491][T16998] veth1_vlan: entered promiscuous mode [ 203.239205][T16998] veth0_macvtap: entered promiscuous mode [ 203.254498][T16998] veth1_macvtap: entered promiscuous mode [ 203.274832][T16998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.359617][T16998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.374427][ T9097] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.394755][ T9097] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.410091][ T9097] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.430875][ T9097] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.184336][ T6848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.209696][ T6848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.251497][T17260] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 204.263264][T17260] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 204.271567][T17260] gretap1: entered promiscuous mode [ 204.278119][T17260] gretap1: entered allmulticast mode [ 204.289772][ T6847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.309383][ T6847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.309440][ T5857] Bluetooth: hci3: command tx timeout [ 204.456719][T17281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.527488][T17283] team0: Device vti0 is of different type [ 205.085293][T17302] __nla_validate_parse: 17 callbacks suppressed [ 205.085311][T17302] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3304'. [ 205.143224][T17308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3304'. [ 205.152969][T17308] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.160248][T17308] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.834492][T17319] netlink: 'syz.3.3308': attribute type 1 has an invalid length. [ 205.843054][T17319] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3308'. [ 205.889510][T17328] veth0_vlan: mtu less than device minimum [ 205.897271][T17327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3312'. [ 205.936368][T17327] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.972387][T17327] bridge_slave_1 (unregistering): left allmulticast mode [ 206.002349][T17327] bridge_slave_1 (unregistering): left promiscuous mode [ 206.014785][T17327] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.023188][T17335] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3314'. [ 206.049661][T17342] netlink: zone id is out of range [ 206.054914][T17342] netlink: zone id is out of range [ 206.061917][T17342] netlink: zone id is out of range [ 206.067511][T17342] netlink: zone id is out of range [ 206.072927][T17342] netlink: zone id is out of range [ 206.079137][T17342] netlink: del zone limit has 4 unknown bytes [ 206.085772][T17341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.319192][T17369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3326'. [ 206.343606][T17369] netlink: 'syz.4.3326': attribute type 2 has an invalid length. [ 206.358574][T17370] netlink: 'syz.1.3325': attribute type 1 has an invalid length. [ 206.366727][T17369] netlink: 'syz.4.3326': attribute type 2 has an invalid length. [ 206.387818][ T5857] Bluetooth: hci3: command tx timeout [ 206.579766][ T7034] IPVS: starting estimator thread 0... [ 206.632159][T17405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3337'. [ 206.642176][T17408] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3338'. [ 206.644676][T17405] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3337'. [ 206.662139][T17407] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3338'. [ 206.686681][T17402] IPVS: using max 38 ests per chain, 91200 per kthread [ 206.742559][T17416] veth0: entered promiscuous mode [ 206.982561][T17424] hsr0 speed is unknown, defaulting to 1000 [ 207.016740][T17430] batadv_slave_1: entered promiscuous mode [ 207.052487][T17430] bond1: entered promiscuous mode [ 207.058237][T17430] bond1: entered allmulticast mode [ 207.064471][T17430] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.076726][T17429] batadv_slave_1: left promiscuous mode [ 207.546543][T17455] netlink: 'syz.1.3356': attribute type 3 has an invalid length. [ 207.738885][T17487] sctp: [Deprecated]: syz.3.3363 (pid 17487) Use of int in maxseg socket option. [ 207.738885][T17487] Use struct sctp_assoc_value instead [ 207.898900][ T7034] IPVS: starting estimator thread 0... [ 207.937055][T17510] tc_dump_action: action bad kind [ 208.006855][T17507] IPVS: using max 40 ests per chain, 96000 per kthread [ 208.071938][T17523] netlink: 'syz.4.3376': attribute type 10 has an invalid length. [ 208.108395][T17523] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 208.120084][ T6848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.135170][ T6848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.347835][T17551] netlink: 'syz.3.3385': attribute type 62 has an invalid length. [ 208.438156][T17559] veth0: entered promiscuous mode [ 208.465984][ T5857] Bluetooth: hci3: command tx timeout [ 208.495638][T17566] netlink: 'syz.3.3391': attribute type 1 has an invalid length. [ 208.503993][T17566] netlink: 'syz.3.3391': attribute type 1 has an invalid length. [ 208.507193][T17558] veth0: left promiscuous mode [ 208.526704][T17566] netlink: 'syz.3.3391': attribute type 1 has an invalid length. [ 208.619617][T17574] lo: entered allmulticast mode [ 208.650972][T17571] lo: left allmulticast mode [ 208.719294][T17587] tipc: Enabled bearer , priority 0 [ 208.726933][T17587] syzkaller0: entered promiscuous mode [ 208.732476][T17587] syzkaller0: entered allmulticast mode [ 208.750256][T17587] tipc: Resetting bearer [ 208.761505][T17587] team0: Device ip6gre1 is of different type [ 208.803188][T17585] tipc: Resetting bearer [ 208.818012][T17585] tipc: Disabling bearer [ 209.975404][T17601] netlink: 'syz.3.3403': attribute type 11 has an invalid length. [ 210.034104][T17601] netlink: 'syz.3.3403': attribute type 11 has an invalid length. [ 210.045675][T17604] net_ratelimit: 3 callbacks suppressed [ 210.045692][T17604] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 210.085817][T17601] netlink: 'syz.3.3403': attribute type 11 has an invalid length. [ 210.110376][T17601] netlink: 'syz.3.3403': attribute type 11 has an invalid length. [ 210.118904][T17601] __nla_validate_parse: 28 callbacks suppressed [ 210.118919][T17601] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3403'. [ 210.141081][T17603] ip6erspan0: entered promiscuous mode [ 210.191062][T17601] netlink: 'syz.3.3403': attribute type 11 has an invalid length. [ 210.199104][T17601] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3403'. [ 210.234121][T17601] netlink: 'syz.3.3403': attribute type 11 has an invalid length. [ 210.243775][T17601] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3403'. [ 210.270822][T17601] netlink: 'syz.3.3403': attribute type 11 has an invalid length. [ 210.278855][T17601] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3403'. [ 210.309662][T17601] netlink: 'syz.3.3403': attribute type 11 has an invalid length. [ 210.317693][T17601] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3403'. [ 210.346115][T17601] netlink: 'syz.3.3403': attribute type 11 has an invalid length. [ 210.354054][T17601] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3403'. [ 210.402522][T17623] team0 (unregistering): Port device team_slave_0 removed [ 210.434710][T17623] team0 (unregistering): Port device team_slave_1 removed [ 210.490046][T17601] netlink: 'syz.3.3403': attribute type 11 has an invalid length. [ 210.498196][T17601] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3403'. [ 210.544712][T17601] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3403'. [ 210.609769][T17601] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3403'. [ 210.638230][T17641] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3416'. [ 210.738667][T17654] syzkaller1: entered promiscuous mode [ 210.744165][T17654] syzkaller1: entered allmulticast mode [ 210.821770][T17658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.882086][T17661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.087646][T17679] validate_nla: 7 callbacks suppressed [ 211.087663][T17679] netlink: 'syz.2.3430': attribute type 1 has an invalid length. [ 211.244936][T17701] netlink: 'syz.0.3436': attribute type 21 has an invalid length. [ 211.279992][T17703] netlink: 'syz.0.3436': attribute type 21 has an invalid length. [ 211.735032][T17722] dvmrp1: entered allmulticast mode [ 212.032716][T17749] IPVS: set_ctl: invalid protocol: 115 172.20.20.43:20001 [ 212.040224][T17751] netlink: 'syz.4.3453': attribute type 4 has an invalid length. [ 212.084822][T17751] bond4: entered promiscuous mode [ 212.092324][T17751] bond4: entered allmulticast mode [ 212.097932][T17751] 8021q: adding VLAN 0 to HW filter on device bond4 [ 212.129676][T17751] bond4 (unregistering): Released all slaves [ 212.214164][T17771] gretap0: entered promiscuous mode [ 212.224755][T17771] batadv_slave_1: entered promiscuous mode [ 212.233573][T17771] debugfs: 'hsr1' already exists in 'hsr' [ 212.243510][T17771] Cannot create hsr debugfs directory [ 212.269196][T17775] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 212.428672][T17785] syzkaller1: entered promiscuous mode [ 212.434273][T17785] syzkaller1: entered allmulticast mode [ 212.540970][T17795] macvlan0: entered allmulticast mode [ 212.554291][T17795] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 212.671316][T17811] netlink: 'syz.3.3474': attribute type 39 has an invalid length. [ 212.681537][T17809] "syz.4.3475" (17809) uses obsolete ecb(arc4) skcipher [ 213.508511][T17912] IPv6: NLM_F_CREATE should be specified when creating new route [ 213.851043][T17953] sctp: [Deprecated]: syz.0.3509 (pid 17953) Use of struct sctp_assoc_value in delayed_ack socket option. [ 213.851043][T17953] Use struct sctp_sack_info instead [ 214.044593][T17978] Bluetooth: MGMT ver 1.23 [ 214.114560][T17987] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 214.302745][T17995] netlink: 'syz.4.3520': attribute type 83 has an invalid length. [ 214.306734][ T5857] Bluetooth: hci0: command tx timeout [ 214.462153][T18020] netlink: zone id is out of range [ 214.473072][T18020] netlink: get zone limit has 8 unknown bytes [ 214.687847][T18048] netlink: 'syz.2.3541': attribute type 4 has an invalid length. [ 214.731227][T18051] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:20003 [ 214.896149][T18071] netlink: 'syz.4.3549': attribute type 4 has an invalid length. [ 214.913423][T18073] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 214.953297][T18075] vlan2: entered allmulticast mode [ 214.966392][T18075] veth1: entered allmulticast mode [ 215.442587][T18121] __nla_validate_parse: 64 callbacks suppressed [ 215.442600][T18121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3568'. [ 215.672520][T18128] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3569'. [ 215.807010][T18142] dvmrp0: entered allmulticast mode [ 216.243898][ T7034] IPVS: starting estimator thread 0... [ 216.277607][T18190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3590'. [ 216.335329][T18188] IPVS: using max 58 ests per chain, 139200 per kthread [ 216.880178][T18204] bond0: entered promiscuous mode [ 216.885903][T18204] bond_slave_0: entered promiscuous mode [ 216.901325][T18204] bond_slave_1: entered promiscuous mode [ 216.980649][T18209] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 217.059165][T18218] openvswitch: netlink: Key type 85 is out of range max 32 [ 217.125545][T18221] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3600'. [ 217.220579][T18224] netlink: 'syz.2.3601': attribute type 16 has an invalid length. [ 217.229092][T18224] netlink: 'syz.2.3601': attribute type 3 has an invalid length. [ 217.237360][T18224] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3601'. [ 217.324800][ T9095] nci: nci_ntf_packet: unknown ntf opcode 0x110 [ 217.326198][T18228] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 217.340165][T18227] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 217.355446][ T5867] Bluetooth: hci3: command 0x0405 tx timeout [ 217.422621][T18245] syz.0.3605: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 217.441780][T18245] CPU: 1 UID: 0 PID: 18245 Comm: syz.0.3605 Not tainted syzkaller #0 PREEMPT(full) [ 217.441807][T18245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 217.441818][T18245] Call Trace: [ 217.441825][T18245] [ 217.441832][T18245] dump_stack_lvl+0x189/0x250 [ 217.441859][T18245] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.441880][T18245] ? __pfx__printk+0x10/0x10 [ 217.441902][T18245] ? lock_release+0x4b/0x3e0 [ 217.441929][T18245] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 217.441951][T18245] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 217.441972][T18245] warn_alloc+0x214/0x310 [ 217.441997][T18245] ? stack_depot_save_flags+0x40/0x860 [ 217.442021][T18245] ? __pfx_warn_alloc+0x10/0x10 [ 217.442055][T18245] ? kasan_save_track+0x4f/0x80 [ 217.442076][T18245] ? xskq_create+0x56/0x170 [ 217.442098][T18245] ? xsk_init_queue+0xb0/0x110 [ 217.442118][T18245] ? xsk_setsockopt+0x4dc/0x8d0 [ 217.442137][T18245] ? do_sock_setsockopt+0x17c/0x1b0 [ 217.442153][T18245] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 217.442169][T18245] ? do_syscall_64+0xfa/0x3b0 [ 217.442192][T18245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.442213][T18245] __vmalloc_node_range_noprof+0x125/0x12f0 [ 217.442251][T18245] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 217.442275][T18245] ? xsk_setsockopt+0x462/0x8d0 [ 217.442297][T18245] ? __kasan_kmalloc+0x93/0xb0 [ 217.442320][T18245] vmalloc_user_noprof+0xad/0xf0 [ 217.442344][T18245] ? xskq_create+0xbf/0x170 [ 217.442366][T18245] xskq_create+0xbf/0x170 [ 217.442389][T18245] xsk_init_queue+0xb0/0x110 [ 217.442411][T18245] xsk_setsockopt+0x4dc/0x8d0 [ 217.442433][T18245] ? __pfx_xsk_setsockopt+0x10/0x10 [ 217.442452][T18245] ? __pfx_aa_sk_perm+0x10/0x10 [ 217.442474][T18245] ? lock_release+0x4b/0x3e0 [ 217.442495][T18245] ? aa_sock_opt_perm+0xff/0x1b0 [ 217.442511][T18245] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 217.442528][T18245] ? __pfx_xsk_setsockopt+0x10/0x10 [ 217.442547][T18245] do_sock_setsockopt+0x17c/0x1b0 [ 217.442564][T18245] __x64_sys_setsockopt+0x13f/0x1b0 [ 217.442584][T18245] do_syscall_64+0xfa/0x3b0 [ 217.442609][T18245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.442626][T18245] ? clear_bhb_loop+0x60/0xb0 [ 217.442646][T18245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.442665][T18245] RIP: 0033:0x7f0046f8ebe9 [ 217.442681][T18245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.442697][T18245] RSP: 002b:00007f0047e3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 217.442716][T18245] RAX: ffffffffffffffda RBX: 00007f00471b5fa0 RCX: 00007f0046f8ebe9 [ 217.442736][T18245] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 217.442751][T18245] RBP: 00007f0047011e19 R08: 0000000000000004 R09: 0000000000000000 [ 217.442763][T18245] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.442776][T18245] R13: 00007f00471b6038 R14: 00007f00471b5fa0 R15: 00007ffcdb3c70a8 [ 217.442797][T18245] [ 217.442856][T18245] Mem-Info: [ 217.637897][T18255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3608'. [ 217.641866][T18245] active_anon:3641 inactive_anon:0 isolated_anon:0 [ 217.641866][T18245] active_file:2637 inactive_file:39899 isolated_file:0 [ 217.641866][T18245] unevictable:768 dirty:124 writeback:0 [ 217.641866][T18245] slab_reclaimable:13676 slab_unreclaimable:160305 [ 217.641866][T18245] mapped:29917 shmem:1360 pagetables:1106 [ 217.641866][T18245] sec_pagetables:0 bounce:0 [ 217.641866][T18245] kernel_misc_reclaimable:0 [ 217.641866][T18245] free:1261065 free_pcp:15086 free_cma:0 [ 217.652464][T18255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3608'. [ 217.658884][T18245] Node 0 active_anon:14564kB inactive_anon:0kB active_file:10548kB inactive_file:159400kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119668kB dirty:492kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15076kB pagetables:4264kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 217.855682][T18245] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 217.904870][T18245] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 217.939078][T18245] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 217.948189][T18245] Node 0 DMA32 free:1142068kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14448kB inactive_anon:0kB active_file:10548kB inactive_file:157828kB unevictable:1536kB writepending:488kB present:3129332kB managed:2557460kB mlocked:0kB bounce:0kB free_pcp:40104kB local_pcp:20900kB free_cma:0kB [ 217.987788][T18245] lowmem_reserve[]: 0 0 1 1 1 [ 217.992596][T18245] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 218.043731][T18245] lowmem_reserve[]: 0 0 0 0 0 [ 218.049896][T18245] Node 1 Normal free:3886884kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20512kB local_pcp:10976kB free_cma:0kB [ 218.091176][T18245] lowmem_reserve[]: 0 0 0 0 0 [ 218.102817][T18245] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 218.116440][T18245] Node 0 DMA32: 949*4kB (UM) 340*8kB (UME) 246*16kB (ME) 71*32kB (ME) 90*64kB (UME) 76*128kB (UM) 235*256kB (UME) 128*512kB (UME) 77*1024kB (UME) 18*2048kB (UM) 213*4096kB (UM) = 1142068kB [ 218.138393][T18245] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 218.172800][T18245] Node 1 Normal: 171*4kB (UME) 35*8kB (UME) 38*16kB (UME) 88*32kB (UME) 38*64kB (UME) 11*128kB (UME) 7*256kB (UM) 2*512kB (M) 1*1024kB (M) 2*2048kB (UE) 945*4096kB (M) = 3886884kB [ 218.194108][T18245] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 218.210652][T18245] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 218.220224][T18245] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 218.231611][T18245] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 218.241281][T18245] 43895 total pagecache pages [ 218.246638][T18245] 0 pages in swap cache [ 218.253105][T18245] Free swap = 124996kB [ 218.261248][T18245] Total swap = 124996kB [ 218.265949][T18245] 2097051 pages RAM [ 218.269850][T18245] 0 pages HighMem/MovableOnly [ 218.274602][T18245] 425660 pages reserved [ 218.279086][T18245] 0 pages cma reserved [ 218.289222][T18280] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3615'. [ 218.365731][T18282] block nbd0: server does not support multiple connections per device. [ 218.374197][T18282] block nbd0: shutting down sockets [ 218.486529][T18301] netlink: 'syz.1.3621': attribute type 1 has an invalid length. [ 218.564773][T18307] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.573132][T18307] team0: Failed to send port change of device bond1 via netlink (err -105) [ 218.581893][T18307] team0: Failed to send options change via netlink (err -105) [ 218.590725][T18307] team0: Port device bond1 added [ 218.596502][ T6839] team0: Failed to send port change of device bond1 via netlink (err -105) [ 218.763607][T18320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3627'. [ 218.774499][T18320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3627'. [ 218.792878][T18322] vlan0: entered allmulticast mode [ 218.799543][T18322] mac80211_hwsim hwsim24 wlan0: entered allmulticast mode [ 218.959944][T18344] netlink: 'syz.2.3633': attribute type 21 has an invalid length. [ 218.971060][T18344] netlink: 'syz.2.3633': attribute type 21 has an invalid length. [ 219.702653][T18413] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.788240][T18413] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.820049][T18413] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.891776][T18413] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.049753][ T6842] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.062034][T18440] netlink: 'syz.2.3663': attribute type 2 has an invalid length. [ 220.107653][ T6842] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.136792][ T6840] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.164040][ T9097] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.474654][T18475] 8021q: adding VLAN 0 to HW filter on device bond2 [ 220.487181][T18480] __nla_validate_parse: 19 callbacks suppressed [ 220.487198][T18480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3675'. [ 220.488007][T18475] team0: Failed to send port change of device bond2 via netlink (err -105) [ 220.493675][T18480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3675'. [ 220.502952][T18475] team0: Failed to send options change via netlink (err -105) [ 220.529606][T18475] team0: Port device bond2 added [ 220.535892][T18474] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 220.554510][T18470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3672'. [ 220.760688][T18505] netlink: 'syz.1.3682': attribute type 3 has an invalid length. [ 220.852070][T18519] : entered promiscuous mode [ 220.898210][T18524] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3690'. [ 220.907428][T18524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3690'. [ 220.923370][T18524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3690'. [ 221.467778][T18563] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3699'. [ 221.542736][T18577] netlink: 'syz.2.3704': attribute type 4 has an invalid length. [ 221.600627][T18581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3705'. [ 221.733284][T18593] dvmrp1: entered allmulticast mode [ 221.745507][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 221.890585][T18605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3713'. [ 221.926165][T18600] netlink: 'syz.0.3712': attribute type 1 has an invalid length. [ 221.944328][T18605] netem: change failed [ 221.944484][T18600] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3712'. [ 222.211073][T18629] "syz.0.3719" (18629) uses obsolete ecb(arc4) skcipher [ 222.373583][T18647] netlink: 'syz.4.3725': attribute type 2 has an invalid length. [ 222.415216][T18647] netlink: 'syz.4.3725': attribute type 1 has an invalid length. [ 222.506979][T18658] netlink: 'syz.4.3730': attribute type 1 has an invalid length. [ 222.780038][T18687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.846298][ T6839] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 222.859938][ T6839] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 222.875986][ T7037] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 222.935822][ T7037] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 222.999074][T18703] vlan2: entered promiscuous mode [ 223.151758][T18709] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 223.188423][T18709] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 223.371063][T18723] wg1: entered promiscuous mode [ 223.455465][ T7037] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 223.491780][ T6842] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.522481][ T6842] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.538734][ T6842] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.559397][ T6842] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.652002][T18757] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 223.750629][T18764] netlink: 'syz.1.3761': attribute type 10 has an invalid length. [ 224.320125][T18776] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.338741][T18774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.601737][T18800] netlink: 'syz.1.3771': attribute type 1 has an invalid length. [ 224.707100][T18800] bond3: (slave gretap1): making interface the new active one [ 224.719139][T18800] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 224.849744][T18825] delete_channel: no stack [ 225.889511][T18882] bridge1: entered promiscuous mode [ 225.894765][T18882] bridge1: entered allmulticast mode [ 225.991628][T18893] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 226.023505][T18878] __nla_validate_parse: 16 callbacks suppressed [ 226.023526][T18878] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3792'. [ 226.044336][T18894] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3795'. [ 226.083840][T18894] netlink: zone id is out of range [ 226.109581][T18894] netlink: zone id is out of range [ 226.120978][T18894] netlink: zone id is out of range [ 226.130309][T18894] netlink: zone id is out of range [ 226.137765][T18904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3798'. [ 226.146890][T18908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.193627][T18894] netlink: get zone limit has 8 unknown bytes [ 226.246238][T18911] netlink: 'syz.0.3799': attribute type 62 has an invalid length. [ 226.247148][T18914] netlink: 'syz.0.3799': attribute type 62 has an invalid length. [ 226.296666][T18920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3803'. [ 226.335055][T18920] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3803'. [ 226.355340][T18920] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3803'. [ 226.364334][T18920] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3803'. [ 226.389032][T18925] veth5: entered allmulticast mode [ 226.394722][T18927] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.421445][T18920] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3803'. [ 226.423962][T18933] sctp: [Deprecated]: syz.0.3807 (pid 18933) Use of int in maxseg socket option. [ 226.423962][T18933] Use struct sctp_assoc_value instead [ 226.579081][T18941] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3808'. [ 226.594676][T18947] netlink: 'syz.4.3811': attribute type 12 has an invalid length. [ 226.607786][T18947] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3811'. [ 226.849813][T18980] tipc: Started in network mode [ 226.866712][T18980] tipc: Node identity ac1414aa, cluster identity 4711 [ 226.891207][T18980] tipc: Enabled bearer , priority 10 [ 226.947407][T18980] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 227.105264][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 227.542221][T19037] netlink: 'syz.3.3833': attribute type 2 has an invalid length. [ 227.638678][T19050] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 228.005219][ T9] tipc: Node number set to 2886997162 [ 228.020752][T19087] tipc: Enabled bearer , priority 0 [ 228.058001][T19087] syzkaller0: entered promiscuous mode [ 228.063935][T19087] syzkaller0: entered allmulticast mode [ 228.072920][T19087] tipc: Resetting bearer [ 228.090870][T19086] tipc: Resetting bearer [ 228.161553][T19086] tipc: Disabling bearer [ 228.184299][T19089] netlink: 'syz.1.3851': attribute type 4 has an invalid length. [ 228.438176][T19114] netlink: 'syz.0.3862': attribute type 17 has an invalid length. [ 228.450091][T19114] gretap0: entered promiscuous mode [ 228.469913][T19114] gretap0: left promiscuous mode [ 228.479839][T19116] net_ratelimit: 1 callbacks suppressed [ 228.479900][T19116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.616099][T19106] hsr0 speed is unknown, defaulting to 1000 [ 228.722790][T19125] batman_adv: batadv0: Adding interface: wlan1 [ 228.748329][T19125] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.781548][T19125] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 229.130411][T19164] nbd: must specify at least one socket [ 229.380698][T19177] netlink: 'syz.2.3874': attribute type 1 has an invalid length. [ 229.422350][T19182] bridge_slave_0: left allmulticast mode [ 229.438732][T19182] bridge_slave_0: left promiscuous mode [ 229.452298][T19182] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.484721][T19182] bridge_slave_1: left allmulticast mode [ 229.508081][T19182] bridge_slave_1: left promiscuous mode [ 229.522661][T19182] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.559981][T19182] bond0: (slave bond_slave_0): Releasing backup interface [ 229.622475][T19182] bond0: (slave bond_slave_1): Releasing backup interface [ 229.653592][T19182] team0: Port device team_slave_0 removed [ 229.672196][T19204] netlink: 'syz.3.3881': attribute type 1 has an invalid length. [ 229.686008][T19182] team0: Port device team_slave_1 removed [ 229.699358][T19182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.707294][T19182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.715701][T19182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.723339][T19182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.735403][T19182] bond0: (slave wlan1): Releasing backup interface [ 229.749871][T19182] bond1: (slave wireguard0): Releasing backup interface [ 229.758294][T19182] wireguard0: left promiscuous mode [ 229.769982][T19182] bond2: (slave veth3): Releasing active interface [ 229.831301][T19205] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 229.857823][T19205] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 229.869829][T19205] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 229.874599][T19211] netlink: 'syz.0.3882': attribute type 32 has an invalid length. [ 229.898371][T19211] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 229.964852][T19218] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 230.012746][T19215] veth0: entered promiscuous mode [ 230.023736][T19213] veth0: left promiscuous mode [ 230.306008][T19240] nbd0: detected capacity change from 0 to 127 [ 230.362831][T19264] netlink: 'syz.1.3895': attribute type 29 has an invalid length. [ 230.373038][T19264] netlink: 'syz.1.3895': attribute type 29 has an invalid length. [ 230.461722][T19271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.480533][T19271] sctp: [Deprecated]: syz.4.3898 (pid 19271) Use of int in max_burst socket option. [ 230.480533][T19271] Use struct sctp_assoc_value instead [ 230.559173][T19284] netlink: 'syz.4.3901': attribute type 4 has an invalid length. [ 230.897399][T19307] openvswitch: netlink: IPv4 tun info is not correct [ 231.048492][ T5867] block nbd0: Receive control failed (result -32) [ 231.104398][T19323] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 231.118542][T19323] __nla_validate_parse: 21 callbacks suppressed [ 231.118563][T19323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3914'. [ 231.154431][T19325] netlink: 'syz.3.3916': attribute type 1 has an invalid length. [ 231.198133][T19325] bond4: (slave bridge1): making interface the new active one [ 231.201592][T19330] can: request_module (can-proto-0) failed. [ 231.208337][T19325] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 231.222578][T19323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3914'. [ 231.261654][T19336] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3918'. [ 231.270951][T19336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3918'. [ 231.294667][T19336] veth7: entered allmulticast mode [ 231.356943][T19345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3922'. [ 231.650264][T19374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3931'. [ 231.659608][T19377] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3929'. [ 231.909578][T19393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3936'. [ 231.999980][T19407] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3934'. [ 232.107599][T19414] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3941'. [ 232.652814][T19458] syzkaller1: entered promiscuous mode [ 232.660860][T19458] syzkaller1: entered allmulticast mode [ 232.971693][T19488] delete_channel: no stack [ 233.052634][T19494] Unsupported ieee802154 address type: 0 [ 233.059711][T19494] validate_nla: 2 callbacks suppressed [ 233.059728][T19494] netlink: 'syz.2.3965': attribute type 1 has an invalid length. [ 233.100480][T19494] 8021q: adding VLAN 0 to HW filter on device bond2 [ 233.687634][T19570] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.923635][T19598] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 233.934100][T19598] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 233.947919][T19598] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 234.181224][T19621] 8021q: VLANs not supported on wg1 [ 235.185568][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 235.386742][T19702] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 235.774913][T19747] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 235.872631][T19750] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}zë' [ 235.890810][T19750] CPU: 1 UID: 0 PID: 19750 Comm: syz.3.4036 Not tainted syzkaller #0 PREEMPT(full) [ 235.890838][T19750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 235.890849][T19750] Call Trace: [ 235.890855][T19750] [ 235.890863][T19750] dump_stack_lvl+0x189/0x250 [ 235.890890][T19750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.890909][T19750] ? __pfx__printk+0x10/0x10 [ 235.890929][T19750] ? kernfs_root+0x1c/0x230 [ 235.890950][T19750] ? kernfs_path_from_node+0x2f/0x290 [ 235.890968][T19750] ? kernfs_path_from_node+0x250/0x290 [ 235.890985][T19750] ? kernfs_path_from_node+0x2f/0x290 [ 235.891005][T19750] sysfs_warn_dup+0x8e/0xa0 [ 235.891022][T19750] sysfs_do_create_link_sd+0xc0/0x110 [ 235.891041][T19750] device_add_class_symlinks+0x1cf/0x240 [ 235.891062][T19750] device_add+0x475/0xb50 [ 235.891080][T19750] wiphy_register+0x1ba6/0x28d0 [ 235.891111][T19750] ? __pfx_wiphy_register+0x10/0x10 [ 235.891133][T19750] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 235.891154][T19750] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 235.891174][T19750] ieee80211_register_hw+0x3425/0x4080 [ 235.891200][T19750] ? ieee80211_register_hw+0x1471/0x4080 [ 235.891222][T19750] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 235.891242][T19750] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 235.891267][T19750] ? __hrtimer_setup+0x187/0x210 [ 235.891283][T19750] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 235.891309][T19750] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 235.891343][T19750] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 235.891363][T19750] ? trace_kmalloc+0x1f/0xd0 [ 235.891382][T19750] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 235.891403][T19750] ? kstrndup+0xbf/0x160 [ 235.891423][T19750] hwsim_new_radio_nl+0xea4/0x1b10 [ 235.891445][T19750] ? __pfx___nla_validate_parse+0x10/0x10 [ 235.891475][T19750] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 235.891501][T19750] ? __nla_parse+0x40/0x60 [ 235.891526][T19750] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 235.891550][T19750] genl_family_rcv_msg_doit+0x215/0x300 [ 235.891572][T19750] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 235.891597][T19750] ? bpf_lsm_capable+0x9/0x20 [ 235.891629][T19750] ? security_capable+0x7e/0x2e0 [ 235.891655][T19750] genl_rcv_msg+0x60e/0x790 [ 235.891676][T19750] ? __pfx_genl_rcv_msg+0x10/0x10 [ 235.891693][T19750] ? __kasan_slab_alloc+0x6c/0x80 [ 235.891713][T19750] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 235.891734][T19750] ? __netlink_lookup+0xbd/0x810 [ 235.891747][T19750] ? rcu_is_watching+0x15/0xb0 [ 235.891766][T19750] netlink_rcv_skb+0x208/0x470 [ 235.891789][T19750] ? __pfx_genl_rcv_msg+0x10/0x10 [ 235.891807][T19750] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 235.891832][T19750] ? lock_release+0x4b/0x3e0 [ 235.891857][T19750] ? down_read+0x1ad/0x2e0 [ 235.891872][T19750] genl_rcv+0x28/0x40 [ 235.891888][T19750] netlink_unicast+0x82c/0x9e0 [ 235.891911][T19750] ? __pfx_netlink_unicast+0x10/0x10 [ 235.891931][T19750] ? netlink_sendmsg+0x642/0xb30 [ 235.891953][T19750] ? skb_put+0x11b/0x210 [ 235.891970][T19750] netlink_sendmsg+0x805/0xb30 [ 235.891997][T19750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.892021][T19750] ? aa_sock_msg_perm+0xf1/0x1d0 [ 235.892037][T19750] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 235.892055][T19750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.892078][T19750] __sock_sendmsg+0x21c/0x270 [ 235.892100][T19750] ____sys_sendmsg+0x505/0x830 [ 235.892119][T19750] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.892140][T19750] ? import_iovec+0x74/0xa0 [ 235.892160][T19750] ___sys_sendmsg+0x21f/0x2a0 [ 235.892178][T19750] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.892212][T19750] ? __fget_files+0x2a/0x420 [ 235.892234][T19750] ? __fget_files+0x3a0/0x420 [ 235.892262][T19750] __x64_sys_sendmsg+0x19b/0x260 [ 235.892281][T19750] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 235.892297][T19750] ? rcu_is_watching+0x15/0xb0 [ 235.892318][T19750] ? do_user_addr_fault+0xc8a/0x1390 [ 235.892345][T19750] ? rcu_is_watching+0x15/0xb0 [ 235.892363][T19750] do_syscall_64+0xfa/0x3b0 [ 235.892386][T19750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.892404][T19750] ? clear_bhb_loop+0x60/0xb0 [ 235.892422][T19750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.892439][T19750] RIP: 0033:0x7f0e5418ebe9 [ 235.892454][T19750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.892470][T19750] RSP: 002b:00007f0e5502f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.892487][T19750] RAX: ffffffffffffffda RBX: 00007f0e543b6180 RCX: 00007f0e5418ebe9 [ 235.892499][T19750] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 235.892508][T19750] RBP: 00007f0e54211e19 R08: 0000000000000000 R09: 0000000000000000 [ 235.892518][T19750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.892528][T19750] R13: 00007f0e543b6218 R14: 00007f0e543b6180 R15: 00007fff05d4bf08 [ 235.892548][T19750] [ 236.428742][T19763] __nla_validate_parse: 16 callbacks suppressed [ 236.428760][T19763] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4040'. [ 236.572353][T19774] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4042'. [ 236.604715][T19779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.632436][T19778] syzkaller1: entered promiscuous mode [ 236.642404][T19778] syzkaller1: entered allmulticast mode [ 236.674885][T19782] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4047'. [ 236.792308][T19784] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 236.852757][T19794] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 236.868617][T19790] netlink: 'syz.3.4049': attribute type 21 has an invalid length. [ 236.877727][T19790] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4049'. [ 236.887200][T19790] netlink: 'syz.3.4049': attribute type 4 has an invalid length. [ 236.895202][T19790] netlink: 'syz.3.4049': attribute type 5 has an invalid length. [ 236.902933][T19790] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4049'. [ 236.931605][T19790] netlink: 'syz.3.4049': attribute type 21 has an invalid length. [ 236.943002][T19790] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4049'. [ 236.960062][T19790] netlink: 'syz.3.4049': attribute type 4 has an invalid length. [ 236.968782][T19790] netlink: 'syz.3.4049': attribute type 5 has an invalid length. [ 236.981210][T19790] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4049'. [ 237.000467][T19790] lo: entered promiscuous mode [ 237.020856][T19790] netlink: 'syz.3.4049': attribute type 2 has an invalid length. [ 237.029768][T19790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.058455][T19810] veth9: entered allmulticast mode [ 237.161631][T19817] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4055'. [ 237.172083][T19817] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4055'. [ 237.229586][T19822] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4057'. [ 237.463600][T19841] bond0: option mode: unable to set because the bond device has slaves [ 237.684634][T19861] netlink: 'syz.0.4069': attribute type 13 has an invalid length. [ 237.697108][T19861] macvtap0: refused to change device tx_queue_len [ 237.741674][T19865] netlink: 'syz.0.4071': attribute type 3 has an invalid length. [ 238.042158][T19896] openvswitch: netlink: Message has 4 unknown bytes. [ 238.050318][T19896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.391736][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888028309000: rx timeout, send abort [ 238.400313][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888028309000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 238.603756][T19921] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 238.913461][T19919] netlink: 'syz.4.4086': attribute type 2 has an invalid length. [ 238.957635][T19931] syzkaller1: entered promiscuous mode [ 238.963208][T19931] syzkaller1: entered allmulticast mode [ 238.983047][T19933] veth: renamed from dummy0 (while UP) [ 239.009509][T19933] openvswitch: netlink: IP tunnel dst address not specified [ 239.082889][T19939] veth0: entered promiscuous mode [ 239.194073][T19947] netlink: 'syz.1.4097': attribute type 6 has an invalid length. [ 239.700633][T19961] netlink: 'syz.3.4101': attribute type 1 has an invalid length. [ 239.716044][T19962] netlink: 'syz.1.4099': attribute type 1 has an invalid length. [ 239.740663][T19961] 8021q: adding VLAN 0 to HW filter on device bond5 [ 239.797018][T19961] 8021q: adding VLAN 0 to HW filter on device bond5 [ 239.807077][T19961] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 239.819387][T19961] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 239.860267][T19964] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 239.878499][T19964] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 239.905891][T19962] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 239.911801][T19992] netlink: 'syz.4.4106': attribute type 6 has an invalid length. [ 239.918095][T19962] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 239.938065][T19992] netlink: 'syz.4.4106': attribute type 5 has an invalid length. [ 239.961470][T19980] veth1: entered promiscuous mode [ 239.971025][T19980] bond5: (slave veth1): Enslaving as an active interface with a down link [ 239.992288][T19984] vlan2: entered allmulticast mode [ 240.001412][T19984] bond5: entered allmulticast mode [ 240.129460][T20011] netlink: 'syz.3.4111': attribute type 1 has an invalid length. [ 240.350766][T20041] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.502107][T20050] netlink: 'syz.4.4126': attribute type 10 has an invalid length. [ 240.573282][T20050] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 240.652352][T20062] pim6reg1: entered promiscuous mode [ 240.673112][T20062] pim6reg1: entered allmulticast mode [ 241.315952][T20094] tipc: Started in network mode [ 241.327570][T20094] tipc: Node identity 8e05a881d215, cluster identity 4711 [ 241.346073][T20094] tipc: Enabled bearer , priority 0 [ 241.364106][T20084] tipc: Enabling of bearer rejected, already enabled [ 241.383003][T20098] netlink: 'syz.4.4138': attribute type 23 has an invalid length. [ 241.394630][T20083] syzkaller0: entered promiscuous mode [ 241.401239][T20083] syzkaller0: entered allmulticast mode [ 241.434170][T20081] tipc: Resetting bearer [ 241.459343][T20081] tipc: Disabling bearer [ 241.478860][T20107] netlink: 'syz.4.4141': attribute type 2 has an invalid length. [ 241.493705][T20109] __nla_validate_parse: 153 callbacks suppressed [ 241.493723][T20109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4142'. [ 241.521181][T20105] gre1: entered promiscuous mode [ 241.526649][T20105] gre1: entered allmulticast mode [ 241.565009][T20114] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4140'. [ 241.607245][T20118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4144'. [ 241.607378][T20114] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 241.640539][T20118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4144'. [ 241.665965][T20114] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.673451][T20114] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.713616][T20121] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 241.733978][T20128] tunl0: entered promiscuous mode [ 241.773114][T20128] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4145'. [ 242.780685][T20185] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 242.926943][T20201] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4164'. [ 243.089799][T20225] IPv6: NLM_F_REPLACE set, but no existing node found! [ 243.223723][T20238] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4175'. [ 243.291331][T20246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4176'. [ 243.340430][T20246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4176'. [ 243.357496][T20246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4176'. [ 243.621221][T20279] veth1_to_bond: entered promiscuous mode [ 243.862350][T20304] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 243.870749][T20304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.926961][T20308] tun0: tun_chr_ioctl cmd 1074025675 [ 243.932586][T20308] tun0: persist disabled [ 244.284121][T20332] hsr0 speed is unknown, defaulting to 1000 [ 244.303054][T20342] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 244.451477][T20350] siw: device registration error -23 [ 245.088095][T20379] hsr0 speed is unknown, defaulting to 1000 [ 245.303955][T20416] validate_nla: 5 callbacks suppressed [ 245.303972][T20416] netlink: 'syz.2.4224': attribute type 83 has an invalid length. [ 245.326009][T20418] netlink: 'syz.2.4224': attribute type 83 has an invalid length. [ 246.036061][T20456] veth0_to_team: entered promiscuous mode [ 246.041952][T20456] veth0_to_team: entered allmulticast mode [ 246.143394][T20463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.210283][T20463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.367934][T20483] netlink: 'syz.1.4245': attribute type 7 has an invalid length. [ 246.513892][T20497] macsec1: entered promiscuous mode [ 246.519686][T20497] macsec1: entered allmulticast mode [ 246.641554][T20508] netlink: 'syz.0.4254': attribute type 2 has an invalid length. [ 246.735022][T20514] netlink: 'syz.1.4257': attribute type 39 has an invalid length. [ 246.913283][T20536] __nla_validate_parse: 83 callbacks suppressed [ 246.913301][T20536] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4264'. [ 246.932378][T20536] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4264'. [ 246.943203][T20536] netlink: zone id is out of range [ 246.949554][T20536] netlink: get zone limit has 8 unknown bytes [ 247.013992][T20541] netlink: 'syz.1.4267': attribute type 1 has an invalid length. [ 247.072049][T20547] bridge0: port 3(batadv0) entered disabled state [ 247.084945][T20547] bridge_slave_0: left allmulticast mode [ 247.102359][T20547] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.126353][T20547] bridge_slave_1: left allmulticast mode [ 247.134106][T20547] bridge_slave_1: left promiscuous mode [ 247.148173][T20547] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.169028][T20547] bond0: (slave bond_slave_0): Releasing backup interface [ 247.192817][T20547] bond0: (slave bond_slave_1): Releasing backup interface [ 247.214593][T20547] team0: Port device team_slave_0 removed [ 247.231564][T20547] team0: Port device team_slave_1 removed [ 247.243614][T20547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.251416][T20547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.259823][T20547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.267491][T20547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.284415][T20554] bridge_slave_0: left allmulticast mode [ 247.319261][T20554] bridge_slave_0: left promiscuous mode [ 247.330676][T20554] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.344847][T20554] bridge_slave_1: left allmulticast mode [ 247.353520][T20554] bridge_slave_1: left promiscuous mode [ 247.368837][T20554] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.382671][T20554] bond0: (slave bond_slave_0): Releasing backup interface [ 247.391926][T20565] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 247.395690][T20554] bond_slave_0: left promiscuous mode [ 247.409058][T20554] bond0: (slave bond_slave_1): Releasing backup interface [ 247.418011][T20554] bond_slave_1: left promiscuous mode [ 247.426599][T20554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.434070][T20554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.444783][T20554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.452552][T20554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.465915][T20554] bond3: (slave gretap1): Releasing active interface [ 247.488437][ T7034] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 247.609083][T20579] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4274'. [ 247.651342][T20578] tipc: Enabling of bearer rejected, failed to enable media [ 247.861049][T20607] can: request_module (can-proto-0) failed. [ 247.994381][T20617] IPv6: NLM_F_CREATE should be specified when creating new route [ 248.006902][T20617] netlink: 'syz.4.4287': attribute type 1 has an invalid length. [ 248.015050][T20617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4287'. [ 248.024823][T20617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4287'. [ 248.028004][T20628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4290'. [ 248.052750][T20628] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4290'. [ 248.109102][T20634] netlink: 'syz.3.4291': attribute type 10 has an invalid length. [ 248.118009][T20634] batman_adv: batadv0: Removing interface: wlan1 [ 248.127253][T20634] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 248.225982][T15944] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 248.253513][T20648] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4296'. [ 248.319047][T20655] netlink: 'syz.2.4298': attribute type 21 has an invalid length. [ 248.473047][T20661] tunl0: left promiscuous mode [ 248.870585][T20661] batadv0: left promiscuous mode [ 248.875700][T20661] batadv0: left allmulticast mode [ 249.168318][T20661] bridge_slave_0: left promiscuous mode [ 249.238429][T20661] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 249.309389][T20711] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 249.372744][T20716] nbd: must specify an index to disconnect [ 249.396889][T20719] pim6reg: entered allmulticast mode [ 249.414625][T20720] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 249.473757][T20722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4312'. [ 249.592022][T20729] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4315'. [ 249.644589][T20737] dvmrp0: entered allmulticast mode [ 249.730377][ T5867] Bluetooth: hci3: link tx timeout [ 249.735854][ T5867] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 250.111927][T20776] tipc: Enabling of bearer rejected, already enabled [ 250.179916][T20791] netlink: 'syz.2.4332': attribute type 1 has an invalid length. [ 250.237043][T20791] 8021q: adding VLAN 0 to HW filter on device bond3 [ 250.281165][T20802] 8021q: adding VLAN 0 to HW filter on device bond3 [ 250.300207][T20802] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 250.311914][T20802] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 250.367579][T20791] veth3: entered promiscuous mode [ 250.375002][T20791] bond3: (slave veth3): Enslaving as an active interface with a down link [ 250.475252][T20791] nbd4: detected capacity change from 0 to 127 [ 250.485571][ T5857] block nbd4: Receive control failed (result -32) [ 251.185216][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 251.300446][T20889] netlink: 'syz.1.4358': attribute type 1 has an invalid length. [ 251.335421][T20892] netlink: 'syz.1.4358': attribute type 1 has an invalid length. [ 251.363195][T20895] netlink: 'syz.3.4360': attribute type 39 has an invalid length. [ 251.745460][ T5857] Bluetooth: hci3: command 0x0405 tx timeout [ 255.676420][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 282.545338][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 291.505508][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 302.704686][T20941] netlink: 'syz.3.4371': attribute type 3 has an invalid length. [ 302.891434][T20963] netlink: 'syz.0.4379': attribute type 21 has an invalid length. [ 302.907166][T20963] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 303.002766][T20973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.024891][T20969] __nla_validate_parse: 22 callbacks suppressed [ 303.024926][T20969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4382'. [ 303.041863][T20969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4382'. [ 303.506674][T20985] team0 (unregistering): Port device team_slave_0 removed [ 303.516102][T20985] team0 (unregistering): Port device team_slave_1 removed [ 303.525034][T20985] team0 (unregistering): Port device bond1 removed [ 303.690418][T15946] IPVS: starting estimator thread 0... [ 303.712564][T20998] netlink: 51 bytes leftover after parsing attributes in process `syz.0.4390'. [ 303.795342][T20996] IPVS: using max 38 ests per chain, 91200 per kthread [ 303.825404][ T5857] Bluetooth: hci5: command 0x0406 tx timeout [ 303.996391][T21029] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 304.020907][T21032] tipc: Enabling of bearer rejected, failed to enable media [ 304.108160][T21039] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4399'. [ 304.312473][T21056] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4405'. [ 304.437142][T21070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4410'. [ 304.472348][T21074] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4411'. [ 304.514505][T21077] netlink: 'syz.2.4412': attribute type 1 has an invalid length. [ 304.546135][T21077] 8021q: adding VLAN 0 to HW filter on device bond4 [ 304.553331][T21077] netlink: 'syz.2.4412': attribute type 1 has an invalid length. [ 304.564983][T21077] netlink: 'syz.2.4412': attribute type 1 has an invalid length. [ 304.576017][T21077] netlink: 'syz.2.4412': attribute type 1 has an invalid length. [ 304.584011][T21077] netlink: 'syz.2.4412': attribute type 1 has an invalid length. [ 304.592715][T21077] netlink: 'syz.2.4412': attribute type 1 has an invalid length. [ 304.601120][T21077] netlink: 'syz.2.4412': attribute type 1 has an invalid length. [ 304.609065][T21077] netlink: 'syz.2.4412': attribute type 1 has an invalid length. [ 304.674890][T21085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4414'. [ 304.738861][T21087] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4416'. [ 304.830219][T21093] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4419'. [ 305.090220][T21121] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 305.162649][T21130] 8021q: adding VLAN 0 to HW filter on device bond6 [ 305.174727][T21130] bond5: (slave bond6): making interface the new active one [ 305.182771][T21130] bond5: (slave bond6): Enslaving as an active interface with an up link [ 305.203052][T21130] bond5: entered promiscuous mode [ 305.211651][T21130] bond6: entered promiscuous mode [ 305.217325][T21130] bond5: entered allmulticast mode [ 305.223177][T21130] bond6: entered allmulticast mode [ 305.229396][T21130] 8021q: adding VLAN 0 to HW filter on device bond5 [ 305.448091][T21154] veth0: entered promiscuous mode [ 305.499534][T21153] veth0: left promiscuous mode [ 305.567321][T21163] hsr_slave_0: left promiscuous mode [ 306.061823][T21203] macvlan2: entered promiscuous mode [ 306.095520][T21203] macvlan2: entered allmulticast mode [ 307.389730][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 307.398969][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 307.406830][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 307.414425][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 307.422339][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 307.491184][T21236] hsr0 speed is unknown, defaulting to 1000 [ 307.604554][T21236] chnl_net:caif_netlink_parms(): no params data found [ 307.643033][T21236] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.651026][T21236] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.658334][T21236] bridge_slave_0: entered allmulticast mode [ 307.664830][T21236] bridge_slave_0: entered promiscuous mode [ 307.672783][T21236] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.680194][T21236] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.687466][T21236] bridge_slave_1: entered allmulticast mode [ 307.693956][T21236] bridge_slave_1: entered promiscuous mode [ 307.714022][T21236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.724683][T21236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.747767][T21236] team0: Port device team_slave_0 added [ 307.754636][T21236] team0: Port device team_slave_1 added [ 307.773168][T21236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.780777][T21236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.807372][T21236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.819623][T21236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.827026][T21236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.853189][T21236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.882761][T21236] hsr_slave_0: entered promiscuous mode [ 307.889413][T21236] hsr_slave_1: entered promiscuous mode [ 307.895865][T21236] debugfs: 'hsr0' already exists in 'hsr' [ 307.901596][T21236] Cannot create hsr debugfs directory [ 307.973418][T21236] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 307.982270][T21236] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 307.991308][T21236] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 307.999847][T21236] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 308.019991][T21236] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.027114][T21236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.034395][T21236] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.041496][T21236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.079557][T21236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.099719][ T6842] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.108369][ T6842] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.121800][T21236] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.133746][ T6839] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.140836][ T6839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.153404][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.160577][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.316399][T21260] validate_nla: 64 callbacks suppressed [ 308.316416][T21260] netlink: 'syz.1.4462': attribute type 1 has an invalid length. [ 308.344901][T21257] dvmrp0: entered allmulticast mode [ 308.369919][T21236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.377703][T21260] __nla_validate_parse: 13 callbacks suppressed [ 308.377718][T21260] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4462'. [ 308.412243][T21261] dvmrp0: left allmulticast mode [ 308.429107][T21261] dvmrp1: left allmulticast mode [ 308.514298][T21276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4465'. [ 308.621345][ T5867] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 308.622912][T21284] netlink: zone id is out of range [ 308.646292][T21284] netlink: del zone limit has 4 unknown bytes [ 308.655475][ T5867] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 308.666509][ T5867] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 308.686599][ T5867] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 308.694240][ T5867] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 308.959252][T21300] netlink: 'syz.3.4471': attribute type 10 has an invalid length. [ 308.980359][T21285] hsr0 speed is unknown, defaulting to 1000 [ 308.994957][T21300] team0: Device hsr_slave_0 failed to register rx_handler [ 309.022324][T21236] veth0_vlan: entered promiscuous mode [ 309.056947][T21236] veth1_vlan: entered promiscuous mode [ 309.144810][T21236] veth0_macvtap: entered promiscuous mode [ 309.167991][T21236] veth1_macvtap: entered promiscuous mode [ 309.184235][T21316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4475'. [ 309.206508][T21236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.237946][T21236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.261385][ T9095] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.300136][ T9095] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.318677][ T9095] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.330247][ T9095] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.458627][ T6839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.477009][ T6839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.497915][T21333] : renamed from hsr0 (while UP) [ 309.507948][ T5867] Bluetooth: hci1: command tx timeout [ 309.530124][ T9095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.551922][ T9095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.588095][T21285] chnl_net:caif_netlink_parms(): no params data found [ 309.658747][T21342] tipc: Started in network mode [ 309.674516][T21342] tipc: Node identity ac1414aa, cluster identity 4711 [ 309.702224][T21342] tipc: Enabled bearer , priority 10 [ 309.711082][T21337] netlink: 'syz.0.4481': attribute type 6 has an invalid length. [ 309.721418][T21337] netlink: 'syz.0.4481': attribute type 6 has an invalid length. [ 309.800958][T21285] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.811755][T21285] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.824060][T21285] bridge_slave_0: entered allmulticast mode [ 309.831608][T21285] bridge_slave_0: entered promiscuous mode [ 309.873664][T21285] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.885625][T21285] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.902896][T21285] bridge_slave_1: entered allmulticast mode [ 309.912554][T21285] bridge_slave_1: entered promiscuous mode [ 309.962601][T21285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.033009][T21285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.052021][T21365] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4487'. [ 310.298974][T21285] team0: Port device team_slave_0 added [ 310.340203][T21285] team0: Port device team_slave_1 added [ 310.456052][T21285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.463030][T21285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.521858][T21285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.551628][T21285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.560881][T21285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.590084][T21285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.674633][T21399] nla_validate_range_unsigned: 5 callbacks suppressed [ 310.674652][T21399] netlink: 'syz.0.4498': attribute type 11 has an invalid length. [ 310.691742][T21399] netlink: 'syz.0.4498': attribute type 11 has an invalid length. [ 310.709560][T21399] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4498'. [ 310.736198][T21285] hsr_slave_0: entered promiscuous mode [ 310.742565][T21285] hsr_slave_1: entered promiscuous mode [ 310.749687][T21285] debugfs: 'hsr0' already exists in 'hsr' [ 310.759280][T21285] Cannot create hsr debugfs directory [ 310.795692][ T5867] Bluetooth: hci4: command tx timeout [ 310.825849][T20676] tipc: Node number set to 2886997162 [ 310.909978][T21416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4504'. [ 310.988541][T21420] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4506'. [ 311.009490][T21426] netlink: 'syz.3.4508': attribute type 1 has an invalid length. [ 311.030739][T21426] netlink: 'syz.3.4508': attribute type 2 has an invalid length. [ 311.053457][T21431] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 311.077360][T21426] netlink: 'syz.3.4508': attribute type 1 has an invalid length. [ 311.086902][T21426] netlink: 'syz.3.4508': attribute type 2 has an invalid length. [ 311.213843][T21440] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4513'. [ 311.230785][T21442] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4515'. [ 311.249745][T21285] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 311.274139][T21446] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4516'. [ 311.275272][T21285] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 311.293199][T21442] netlink: 'syz.0.4515': attribute type 4 has an invalid length. [ 311.328712][T21285] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 311.358617][T21285] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 311.531695][T21285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.550738][T21285] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.579103][ T6839] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.586255][ T6839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.589063][ T5867] Bluetooth: hci1: command tx timeout [ 311.604226][ T6839] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.611406][ T6839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.761430][T21285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.906185][T21285] veth0_vlan: entered promiscuous mode [ 311.915995][T21285] veth1_vlan: entered promiscuous mode [ 311.936728][T21285] veth0_macvtap: entered promiscuous mode [ 311.945619][T21285] veth1_macvtap: entered promiscuous mode [ 311.961337][T21285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.974452][T21285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.987766][ T9097] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.014579][ T9097] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.024539][ T9097] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.034417][ T9097] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.321971][ T6840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.344177][ T6840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.369099][ T9097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.377715][ T9097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.522139][T21538] smc: net device erspan0 applied user defined pnetid SYZ0 [ 312.530710][T21539] netlink: 'syz.6.4535': attribute type 1 has an invalid length. [ 312.554483][T21545] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 312.564426][T21538] vlan2: entered allmulticast mode [ 312.570676][T21538] veth1: entered allmulticast mode [ 312.678810][T21551] 8021q: adding VLAN 0 to HW filter on device bond6 [ 312.799251][ T5933] IPVS: starting estimator thread 0... [ 312.822383][T21568] netdevsim netdevsim6: Direct firmware load for ..€ failed with error -2 [ 312.853306][T21568] netdevsim netdevsim6: Falling back to sysfs fallback for: ..€ [ 312.865937][ T5867] Bluetooth: hci4: command tx timeout [ 312.886086][T21566] IPVS: using max 45 ests per chain, 108000 per kthread [ 313.666529][ T5867] Bluetooth: hci1: command tx timeout [ 314.945460][ T5867] Bluetooth: hci4: command tx timeout [ 315.745653][ T5867] Bluetooth: hci1: command tx timeout [ 315.910565][T21586] validate_nla: 3 callbacks suppressed [ 315.910583][T21586] netlink: 'syz.3.4550': attribute type 83 has an invalid length. [ 315.947390][T21584] netlink: 'syz.5.4551': attribute type 10 has an invalid length. [ 315.988668][T21593] netlink: 'syz.0.4552': attribute type 83 has an invalid length. [ 315.988668][T21594] netlink: 'syz.0.4552': attribute type 83 has an invalid length. [ 316.059466][T21584] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 316.096559][T21604] __nla_validate_parse: 1 callbacks suppressed [ 316.096578][T21604] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4554'. [ 316.162544][T21612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4558'. [ 316.176062][T21612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4558'. [ 316.237370][T21616] openvswitch: netlink: Unknown key attributes 2 [ 316.281229][T21621] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4562'. [ 316.313331][T21619] xfrm1: entered promiscuous mode [ 316.351602][T21630] tipc: Started in network mode [ 316.372898][T21630] tipc: Node identity e0000002, cluster identity 4711 [ 316.384489][T21630] tipc: Enabling of bearer rejected, failed to enable media [ 316.579631][T21650] netlink: 'syz.3.4571': attribute type 23 has an invalid length. [ 316.730179][T21663] vlan1: entered allmulticast mode [ 316.739971][T21663] veth0_vlan: entered allmulticast mode [ 316.817023][T21673] sctp: [Deprecated]: syz.0.4579 (pid 21673) Use of struct sctp_assoc_value in delayed_ack socket option. [ 316.817023][T21673] Use struct sctp_sack_info instead [ 316.929932][T21681] ªªªªªª: renamed from vlan0 (while UP) [ 316.964323][T21687] gre1: entered promiscuous mode [ 316.985553][T21687] gre1: entered allmulticast mode [ 317.027979][ T5867] Bluetooth: hci4: command tx timeout [ 317.046176][T21694] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4585'. [ 317.111840][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 317.261219][T21705] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4588'. [ 317.378928][T21714] syzkaller0: entered promiscuous mode [ 317.385910][T21714] syzkaller0: entered allmulticast mode [ 317.464377][T21729] netlink: 'syz.0.4593': attribute type 1 has an invalid length. [ 317.501424][T21730] geneve2: entered promiscuous mode [ 317.508495][T21730] geneve2: entered allmulticast mode [ 317.550612][T21724] 8021q: adding VLAN 0 to HW filter on device bond3 [ 317.572055][T21729] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4593'. [ 317.589580][T21724] bond2: (slave bond3): making interface the new active one [ 317.598705][T21724] bond2: (slave bond3): Enslaving as an active interface with an up link [ 317.607863][T21729] bond2: entered promiscuous mode [ 317.612961][T21729] bond3: entered promiscuous mode [ 317.619665][T21729] bond2: entered allmulticast mode [ 317.624863][T21729] bond3: entered allmulticast mode [ 317.630670][T21729] 8021q: adding VLAN 0 to HW filter on device bond2 [ 317.760956][T21748] netlink: 'syz.0.4600': attribute type 7 has an invalid length. [ 317.771186][T21749] netlink: 'syz.0.4600': attribute type 7 has an invalid length. [ 317.771655][T21746] netlink: 'syz.5.4599': attribute type 64 has an invalid length. [ 317.789934][T21746] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4599'. [ 317.888265][T21757] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4601'. [ 317.949949][T21757] netlink: 'syz.5.4601': attribute type 1 has an invalid length. [ 317.973086][T21759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4604'. [ 318.127805][T21773] sctp: [Deprecated]: syz.5.4607 (pid 21773) Use of int in max_burst socket option deprecated. [ 318.127805][T21773] Use struct sctp_assoc_value instead [ 318.412422][T21806] delete_channel: no stack [ 318.633586][T21839] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 318.765712][T21851] mac80211_hwsim hwsim60 syzkaller0: entered promiscuous mode [ 318.784791][T21851] mac80211_hwsim hwsim60 syzkaller0: entered allmulticast mode [ 318.829950][T21855] bond1 (unregistering): Released all slaves [ 318.872757][T21860] ip6tnl1: entered promiscuous mode [ 318.879742][T21860] ip6tnl1: entered allmulticast mode [ 318.999288][T21867] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 319.169220][T21886] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.186357][ T5857] Bluetooth: hci2: command 0x0406 tx timeout [ 319.361771][T21904] netlink: 'syz.5.4644': attribute type 11 has an invalid length. [ 319.370962][T21904] netlink: 'syz.5.4644': attribute type 11 has an invalid length. [ 319.402685][T21905] tipc: Enabled bearer , priority 0 [ 319.428357][T21905] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode [ 319.452346][T21907] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 319.452559][T21905] mac80211_hwsim hwsim33 syzkaller0: entered allmulticast mode [ 319.523373][T21905] tipc: Resetting bearer [ 320.128439][T21977] veth1_to_bond: entered allmulticast mode [ 320.663942][T22032] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 320.904945][T21969] veth1_to_bond: left allmulticast mode [ 320.928356][T22061] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 320.946316][T22061] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 320.962711][T22061] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 321.251181][T22094] tipc: Started in network mode [ 321.264615][T22094] tipc: Node identity 1e71b8d6fee1, cluster identity 4711 [ 321.276531][T22094] tipc: Enabled bearer , priority 0 [ 321.308245][T22094] syzkaller0: MTU too low for tipc bearer [ 321.321357][T22094] tipc: Disabling bearer [ 321.478861][T22116] vlan2: entered promiscuous mode [ 321.500586][T22119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.515777][T22116] vlan2: entered allmulticast mode [ 321.527302][T22116] hsr_slave_1: entered allmulticast mode [ 321.535285][T22120] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 321.621062][T22128] tipc: Enabling of bearer rejected, failed to enable media [ 321.639293][T22132] lo: entered allmulticast mode [ 321.728482][T22140] validate_nla: 11 callbacks suppressed [ 321.728500][T22140] netlink: 'syz.6.4721': attribute type 1 has an invalid length. [ 321.751413][T22142] __nla_validate_parse: 29 callbacks suppressed [ 321.751431][T22142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4720'. [ 321.757372][T22140] bond2: entered promiscuous mode [ 321.773094][T22140] 8021q: adding VLAN 0 to HW filter on device bond2 [ 321.773631][T22142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4720'. [ 321.803356][T22140] 8021q: adding VLAN 0 to HW filter on device bond3 [ 321.811816][T22140] bond2: (slave bond3): making interface the new active one [ 321.819467][T22140] bond3: entered promiscuous mode [ 321.826867][T22140] bond2: (slave bond3): Enslaving as an active interface with an up link [ 321.837109][T22145] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4723'. [ 321.881802][T22149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4724'. [ 321.894778][T22149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4724'. [ 321.980591][T22164] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4729'. [ 322.143296][T22161] hsr0 speed is unknown, defaulting to 1000 [ 322.379670][T22183] netlink: 6 bytes leftover after parsing attributes in process `syz.5.4736'. [ 322.428034][T22183] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 322.450981][T22185] netlink: 'syz.1.4735': attribute type 4 has an invalid length. [ 322.470184][T22190] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4737'. [ 322.492483][T22190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4737'. [ 322.928043][T22235] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4748'. [ 322.991273][T22239] syz.1.4750: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 323.016352][T22239] CPU: 1 UID: 0 PID: 22239 Comm: syz.1.4750 Not tainted syzkaller #0 PREEMPT(full) [ 323.016379][T22239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 323.016401][T22239] Call Trace: [ 323.016408][T22239] [ 323.016416][T22239] dump_stack_lvl+0x189/0x250 [ 323.016443][T22239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.016462][T22239] ? __pfx__printk+0x10/0x10 [ 323.016483][T22239] ? lock_release+0x4b/0x3e0 [ 323.016507][T22239] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 323.016528][T22239] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 323.016549][T22239] warn_alloc+0x214/0x310 [ 323.016576][T22239] ? __pfx_warn_alloc+0x10/0x10 [ 323.016603][T22239] ? __get_vm_area_node+0x28f/0x300 [ 323.016626][T22239] ? nf_tables_newset+0x132b/0x2530 [ 323.016647][T22239] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 323.016669][T22239] ? unwind_get_return_address+0x4d/0x90 [ 323.016697][T22239] ? alloc_pages_mpol+0x3cd/0x4a0 [ 323.016721][T22239] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 323.016745][T22239] ? rcu_is_watching+0x15/0xb0 [ 323.016762][T22239] ? nf_tables_newset+0x132b/0x2530 [ 323.016779][T22239] ? nf_tables_newset+0x132b/0x2530 [ 323.016796][T22239] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 323.016818][T22239] ? nf_tables_newset+0x132b/0x2530 [ 323.016836][T22239] ? nft_table_lookup+0x211/0x230 [ 323.016854][T22239] ? nft_set_lookup+0x128/0x150 [ 323.016873][T22239] ? nft_hash_privsize+0xaf/0xf0 [ 323.016898][T22239] nf_tables_newset+0x132b/0x2530 [ 323.016922][T22239] ? __pfx_nf_tables_newset+0x10/0x10 [ 323.016942][T22239] ? nfnl_pernet+0x23/0x240 [ 323.016960][T22239] ? rcu_is_watching+0x15/0xb0 [ 323.016979][T22239] ? lock_release+0x4b/0x3e0 [ 323.017002][T22239] ? __nla_parse+0x40/0x60 [ 323.017028][T22239] nfnetlink_rcv+0x1132/0x2520 [ 323.017079][T22239] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 323.017107][T22239] ? ref_tracker_free+0x63a/0x7d0 [ 323.017148][T22239] ? __netlink_deliver_tap+0x807/0x850 [ 323.017171][T22239] ? netlink_deliver_tap+0x2e/0x1b0 [ 323.017196][T22239] ? lock_release+0x4b/0x3e0 [ 323.017223][T22239] netlink_unicast+0x82c/0x9e0 [ 323.017248][T22239] ? __pfx_netlink_unicast+0x10/0x10 [ 323.017269][T22239] ? netlink_sendmsg+0x642/0xb30 [ 323.017291][T22239] ? skb_put+0x11b/0x210 [ 323.017308][T22239] netlink_sendmsg+0x805/0xb30 [ 323.017336][T22239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.017359][T22239] ? futex_unqueue+0x22/0x240 [ 323.017377][T22239] ? aa_sock_msg_perm+0xf1/0x1d0 [ 323.017394][T22239] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 323.017412][T22239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.017436][T22239] __sock_sendmsg+0x21c/0x270 [ 323.017458][T22239] ____sys_sendmsg+0x505/0x830 [ 323.017477][T22239] ? __pfx_____sys_sendmsg+0x10/0x10 [ 323.017499][T22239] ? import_iovec+0x74/0xa0 [ 323.017519][T22239] ___sys_sendmsg+0x21f/0x2a0 [ 323.017537][T22239] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.017557][T22239] ? futex_wait+0x285/0x360 [ 323.017591][T22239] ? __fget_files+0x2a/0x420 [ 323.017614][T22239] ? __fget_files+0x3a0/0x420 [ 323.017642][T22239] __x64_sys_sendmsg+0x19b/0x260 [ 323.017660][T22239] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 323.017683][T22239] ? rcu_is_watching+0x15/0xb0 [ 323.017701][T22239] ? rcu_is_watching+0x15/0xb0 [ 323.017719][T22239] do_syscall_64+0xfa/0x3b0 [ 323.017743][T22239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.017760][T22239] ? clear_bhb_loop+0x60/0xb0 [ 323.017778][T22239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.017794][T22239] RIP: 0033:0x7fe5f918ebe9 [ 323.017809][T22239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.017824][T22239] RSP: 002b:00007fe5f73f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.017842][T22239] RAX: ffffffffffffffda RBX: 00007fe5f93b5fa0 RCX: 00007fe5f918ebe9 [ 323.017855][T22239] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 323.017866][T22239] RBP: 00007fe5f9211e19 R08: 0000000000000000 R09: 0000000000000000 [ 323.017877][T22239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.017887][T22239] R13: 00007fe5f93b6038 R14: 00007fe5f93b5fa0 R15: 00007ffe147d6828 [ 323.017908][T22239] [ 323.017915][T22239] Mem-Info: [ 323.443970][T22239] active_anon:3574 inactive_anon:0 isolated_anon:0 [ 323.443970][T22239] active_file:2830 inactive_file:39927 isolated_file:0 [ 323.443970][T22239] unevictable:768 dirty:107 writeback:0 [ 323.443970][T22239] slab_reclaimable:14107 slab_unreclaimable:168557 [ 323.443970][T22239] mapped:28873 shmem:1361 pagetables:1079 [ 323.443970][T22239] sec_pagetables:0 bounce:0 [ 323.443970][T22239] kernel_misc_reclaimable:0 [ 323.443970][T22239] free:1250322 free_pcp:13318 free_cma:0 [ 323.500025][T22239] Node 0 active_anon:14296kB inactive_anon:0kB active_file:11320kB inactive_file:159512kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115492kB dirty:424kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16568kB pagetables:4156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 323.536290][T22239] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 323.576105][T22239] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 323.613045][T22239] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 323.619034][T22239] Node 0 DMA32 free:1097464kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14252kB inactive_anon:0kB active_file:11320kB inactive_file:157932kB unevictable:1536kB writepending:420kB present:3129332kB managed:2557460kB mlocked:0kB bounce:0kB free_pcp:35024kB local_pcp:19916kB free_cma:0kB [ 323.670631][T22239] lowmem_reserve[]: 0 0 1 1 1 [ 323.681063][T22239] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 323.712471][T22239] lowmem_reserve[]: 0 0 0 0 0 [ 323.718345][T22239] Node 1 Normal free:3888452kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18912kB local_pcp:9248kB free_cma:0kB [ 323.762512][T22239] lowmem_reserve[]: 0 0 0 0 0 [ 323.770936][T22239] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 323.825807][T22239] Node 0 DMA32: 970*4kB (UM) 687*8kB (UM) 402*16kB (UM) 174*32kB (M) 136*64kB (ME) 86*128kB (UME) 43*256kB (M) 87*512kB (UME) 79*1024kB (UME) 19*2048kB (UME) 215*4096kB (UM) = 1097088kB [ 323.882573][T22264] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 323.893751][T22239] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 323.925231][T22239] Node 1 Normal: 171*4kB (UME) 35*8kB (UME) 38*16kB (UME) 121*32kB (UME) 44*64kB (UME) 12*128kB (UME) 7*256kB (UM) 2*512kB (M) 1*1024kB (M) 2*2048kB (UE) 945*4096kB (M) = 3888452kB [ 323.973154][T22239] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 323.982134][T22272] openvswitch: netlink: IPv6 tunnel dst address is zero [ 323.993055][T22239] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 324.026691][T22239] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 324.036456][T22273] netlink: 'syz.6.4758': attribute type 11 has an invalid length. [ 324.065734][T22239] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 324.079395][T22239] 44114 total pagecache pages [ 324.084164][T22239] 0 pages in swap cache [ 324.092548][T22275] netlink: 'syz.0.4760': attribute type 1 has an invalid length. [ 324.101048][T22275] netlink: 'syz.0.4760': attribute type 13 has an invalid length. [ 324.111333][T22239] Free swap = 124996kB [ 324.118857][T22239] Total swap = 124996kB [ 324.123025][T22239] 2097051 pages RAM [ 324.139138][T22239] 0 pages HighMem/MovableOnly [ 324.144498][T22239] 425660 pages reserved [ 324.155262][T22239] 0 pages cma reserved [ 324.501747][T22301] gtp0: entered promiscuous mode [ 324.510184][T22301] gtp0: entered allmulticast mode [ 325.072768][T22313] pim6reg: entered allmulticast mode [ 325.238963][T22371] netlink: 'syz.6.4790': attribute type 1 has an invalid length. [ 325.244742][T22373] netlink: 'syz.5.4791': attribute type 2 has an invalid length. [ 325.285458][T22378] netlink: 'syz.1.4792': attribute type 7 has an invalid length. [ 325.308452][T22376] vti0: entered allmulticast mode [ 325.328714][T22369] bond4: (slave geneve2): making interface the new active one [ 325.356906][T22369] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 325.368228][T22369] 8021q: VLANs not supported on wg1 [ 325.469745][T22378] : entered promiscuous mode [ 325.480191][ T6848] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 325.494194][ T6848] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 325.511202][ T6848] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 325.520242][ T6848] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 325.540395][T22389] netlink: 'syz.5.4796': attribute type 9 has an invalid length. [ 325.584308][ T6848] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.649023][ T6848] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.668734][ T6848] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.681223][ T6848] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.786950][T22398] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 326.141188][T22423] tipc: Enabled bearer , priority 0 [ 326.371501][T22454] netlink: 'syz.3.4815': attribute type 1 has an invalid length. [ 326.467479][T22464] netlink: 'syz.5.4816': attribute type 4 has an invalid length. [ 326.900934][T22498] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.908576][T22498] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.978173][T22498] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 327.015667][T22515] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 327.061477][T22519] validate_nla: 1 callbacks suppressed [ 327.061496][T22519] netlink: 'syz.3.4835': attribute type 1 has an invalid length. [ 327.082709][T22519] netlink: 'syz.3.4835': attribute type 2 has an invalid length. [ 327.188648][T22531] __nla_validate_parse: 20 callbacks suppressed [ 327.188666][T22531] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4839'. [ 327.221638][T22531] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4839'. [ 327.235017][T22536] netlink: 'syz.1.4840': attribute type 6 has an invalid length. [ 327.255342][ T7039] tipc: Node number set to 3758096386 [ 327.268084][T22531] veth5: entered allmulticast mode [ 327.507604][T22561] veth0_to_bridge: entered promiscuous mode [ 327.528705][T22561] veth0_to_bridge: left promiscuous mode [ 327.549050][T22567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4853'. [ 327.578758][T22568] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4852'. [ 327.625408][T22571] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4854'. [ 327.642215][T22568] bond0 (unregistering): Released all slaves [ 327.646096][T22571] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4854'. [ 327.714758][T22571] tipc: Resetting bearer [ 327.768030][T22579] IPVS: Scheduler module ip_vs_sip not found [ 327.871665][T22571] tipc: Resetting bearer [ 327.964485][T22571] tipc: Resetting bearer [ 327.978817][T22596] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4861'. [ 328.003918][T22596] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4861'. [ 328.059437][T22599] netlink: 'syz.1.4862': attribute type 10 has an invalid length. [ 328.130174][T22599] geneve1: entered promiscuous mode [ 328.144116][T22599] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 328.218072][T22613] veth1_to_bridge: entered promiscuous mode [ 328.236416][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.254888][T22615] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4867'. [ 328.308822][T22617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4868'. [ 328.414043][T22629] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 328.787334][T22658] tipc: Enabled bearer , priority 0 [ 328.795501][T22660] Bluetooth: MGMT ver 1.23 [ 328.801712][T22658] syzkaller0: entered promiscuous mode [ 328.814495][T22658] syzkaller0: entered allmulticast mode [ 328.842435][T22658] tipc: Resetting bearer [ 328.853646][T22661] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.928682][T22657] tipc: Resetting bearer [ 328.959315][T22657] tipc: Disabling bearer [ 329.858924][T22764] openvswitch: netlink: Multiple metadata blocks provided [ 329.938984][T22773] netlink: 'syz.5.4912': attribute type 4 has an invalid length. [ 329.950441][T22771] veth3: entered allmulticast mode [ 330.028190][T22779] : entered promiscuous mode [ 330.247859][T22800] tipc: Invalid UDP bearer configuration [ 330.247894][T22800] tipc: Enabling of bearer rejected, failed to enable media [ 330.265691][T22801] bond0: (slave wlan1): Releasing backup interface [ 330.273491][T22801] batman_adv: batadv0: Adding interface: wlan1 [ 330.281817][T22801] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.312842][T22801] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 330.373362][T22805] team0: No ports can be present during mode change [ 330.571278][T22834] netlink: 'syz.0.4931': attribute type 3 has an invalid length. [ 330.581170][T22838] netlink: 'syz.5.4933': attribute type 10 has an invalid length. [ 330.609180][T22834] netlink: 'syz.0.4931': attribute type 1 has an invalid length. [ 330.619646][T22840] pim6reg1: entered promiscuous mode [ 330.624965][T22840] pim6reg1: entered allmulticast mode [ 330.662356][T22834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.766854][T22838] hsr0 speed is unknown, defaulting to 1000 [ 331.148770][T22885] IPVS: length: 255 != 8 [ 331.250565][T22901] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.400921][T22910] netlink: 'syz.3.4957': attribute type 10 has an invalid length. [ 331.411733][T22908] netlink: 'syz.1.4956': attribute type 1 has an invalid length. [ 331.433853][T22910] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.457571][T22910] bond0: (slave team0): Enslaving as an active interface with an up link [ 331.529996][T22914] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 331.615558][T22910] 8021q: adding VLAN 0 to HW filter on device bond8 [ 331.796879][ T77] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.830242][ T77] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.832833][T22937] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 331.850496][ T77] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.890781][ T77] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.034314][T22955] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 332.170017][T22951] validate_nla: 6 callbacks suppressed [ 332.170034][T22951] netlink: 'syz.3.4973': attribute type 83 has an invalid length. [ 332.216664][T22973] __nla_validate_parse: 32 callbacks suppressed [ 332.216681][T22973] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4978'. [ 332.255828][T22973] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.333089][T22978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4981'. [ 332.343022][T22978] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4981'. [ 332.373977][T22991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4980'. [ 332.445924][T22979] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 332.468216][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.572688][T23004] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4984'. [ 332.686819][T23011] nbd5: detected capacity change from 0 to 127 [ 332.694084][T23022] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4989'. [ 332.705263][ T5867] block nbd5: Receive control failed (result -32) [ 332.716528][T23022] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4989'. [ 332.742379][T23022] netlink: 43 bytes leftover after parsing attributes in process `syz.5.4989'. [ 332.761894][T23022] netlink: 'syz.5.4989': attribute type 6 has an invalid length. [ 332.771902][T23022] netlink: 'syz.5.4989': attribute type 5 has an invalid length. [ 332.780734][T23022] netlink: 43 bytes leftover after parsing attributes in process `syz.5.4989'. [ 332.882358][T23031] geneve3: entered promiscuous mode [ 332.888148][T23031] geneve3: entered allmulticast mode [ 332.894830][ T77] netdevsim netdevsim6 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 332.904881][ T9095] netdevsim netdevsim6 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 332.919763][ T9095] netdevsim netdevsim6 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 332.929587][ T9095] netdevsim netdevsim6 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 333.070140][T23049] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4997'. [ 333.368867][T23074] netlink: 'syz.6.5004': attribute type 6 has an invalid length. [ 333.378073][T23076] netlink: 'syz.0.5006': attribute type 6 has an invalid length. [ 333.386191][T23076] netlink: 'syz.0.5006': attribute type 1 has an invalid length. [ 333.394176][T23077] netlink: 'syz.0.5006': attribute type 6 has an invalid length. [ 333.404172][T23077] netlink: 'syz.0.5006': attribute type 1 has an invalid length. [ 333.449053][T23078] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 333.546569][T23086] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.556631][T23086] bridge_slave_1 (unregistering): left allmulticast mode [ 333.563674][T23086] bridge_slave_1 (unregistering): left promiscuous mode [ 333.571058][T23086] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.266869][T23171] team0: Device ip6gre1 is of different type [ 334.284507][T23170] : left promiscuous mode [ 334.561683][T23202] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 334.650194][T23213] 8021q: adding VLAN 0 to HW filter on device bond4 [ 334.760164][T23227] geneve3: entered promiscuous mode [ 334.765596][T23227] geneve3: entered allmulticast mode [ 334.772462][ T6848] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 334.773824][T23227] netlink: 'syz.0.5051': attribute type 2 has an invalid length. [ 334.794561][T23227] netlink: 'syz.0.5051': attribute type 2 has an invalid length. [ 334.803918][ T6848] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 334.836755][ T6848] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 334.866634][ T6848] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 334.892603][T23232] bridge_slave_0: left allmulticast mode [ 334.899827][T23232] bridge_slave_0: left promiscuous mode [ 334.908081][T23232] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.139743][T23258] bridge0: entered promiscuous mode [ 335.156209][T23258] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 335.321272][T23276] 8021q: adding VLAN 0 to HW filter on device bond1 [ 335.333902][T23276] netlink: ct family unspecified [ 335.339063][T23276] openvswitch: netlink: Actions may not be safe on all matching packets [ 335.544611][T23295] vlan2: entered allmulticast mode [ 335.554154][T23295] veth1: entered allmulticast mode [ 335.573025][T23295] bond1: (slave vlan2): Opening slave failed [ 335.692058][T23325] sctp: [Deprecated]: syz.6.5077 (pid 23325) Use of struct sctp_assoc_value in delayed_ack socket option. [ 335.692058][T23325] Use struct sctp_sack_info instead [ 335.744102][T23333] sctp: [Deprecated]: syz.6.5077 (pid 23333) Use of struct sctp_assoc_value in delayed_ack socket option. [ 335.744102][T23333] Use struct sctp_sack_info instead [ 335.859467][T23341] openvswitch: netlink: IPv4 tun info is not correct [ 336.051827][T23344] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 336.108913][T23361] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 336.836322][T23384] nbd: nbd0 already in use [ 336.852777][T23388] lo: left promiscuous mode [ 336.864449][T23384] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20000 [ 336.929316][T23388] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 336.965739][T23396] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 336.974632][T23396] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 337.165401][T23416] IPVS: Error connecting to the multicast addr [ 337.301101][T23427] IPv6: NLM_F_REPLACE set, but no existing node found! [ 337.528786][T23439] __nla_validate_parse: 27 callbacks suppressed [ 337.528805][T23439] netlink: 1 bytes leftover after parsing attributes in process `syz.6.5108'. [ 337.701074][T23447] validate_nla: 8 callbacks suppressed [ 337.701093][T23447] netlink: 'syz.0.5113': attribute type 1 has an invalid length. [ 337.751763][T23450] netlink: 'syz.6.5114': attribute type 13 has an invalid length. [ 337.761327][T23450] netlink: 'syz.6.5114': attribute type 58 has an invalid length. [ 337.769528][T23450] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5114'. [ 337.994826][T23469] gtp0: entered promiscuous mode [ 338.044565][T23473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5120'. [ 338.062868][T23473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5120'. [ 338.157205][T23485] netlink: 'syz.0.5123': attribute type 8 has an invalid length. [ 338.306678][T23489] nbd6: detected capacity change from 0 to 127 [ 338.322713][ T5867] block nbd6: Receive control failed (result -32) [ 338.402827][T23509] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5131'. [ 338.413533][T23509] netlink: 'syz.6.5131': attribute type 11 has an invalid length. [ 338.423300][T23509] netlink: 'syz.6.5131': attribute type 11 has an invalid length. [ 338.431620][T23509] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5131'. [ 339.132478][T23529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.147609][T23529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5138'. [ 339.163311][T23529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5138'. [ 339.393055][T23550] syzkaller1: entered promiscuous mode [ 339.398991][T23550] syzkaller1: entered allmulticast mode [ 339.607039][T23571] tipc: Enabling of bearer rejected, already enabled [ 339.842333][T23593] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5159'. [ 339.959638][T23605] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5163'. [ 339.986048][T23605] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 340.134255][T23609] erspan0: entered promiscuous mode [ 340.147468][T23609] erspan0: entered allmulticast mode [ 340.200674][T23622] netlink: 'syz.3.5167': attribute type 7 has an invalid length. [ 340.218025][T23622] netlink: 'syz.3.5167': attribute type 8 has an invalid length. [ 340.281908][T23632] netlink: 'syz.3.5167': attribute type 1 has an invalid length. [ 340.351285][T23638] netlink: 'syz.5.5172': attribute type 1 has an invalid length. [ 340.470813][T23650] mac80211_hwsim hwsim57 wlan1: entered allmulticast mode [ 340.512433][T23650] netlink: 'syz.6.5177': attribute type 10 has an invalid length. [ 340.528654][T23650] mac80211_hwsim hwsim57 wlan1: left allmulticast mode [ 340.541326][T23650] bond0: (slave wlan1): Opening slave failed [ 340.819382][T23688] netlink: 'syz.6.5188': attribute type 4 has an invalid length. [ 340.895448][ T7035] hid (null): unknown global tag 0xe [ 340.902298][ T7035] hid (null): nested delimiters [ 341.137768][T23712] syzkaller1: entered promiscuous mode [ 341.147407][T23712] syzkaller1: entered allmulticast mode [ 341.302922][T23723] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20001 [ 341.491073][T23734] vcan0: entered allmulticast mode [ 341.562634][T23746] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 341.774869][T23758] bond0: (slave syz_tun): Releasing backup interface [ 341.790511][T23758] bond0: (slave team0): Releasing backup interface [ 341.811285][T23758] bond0: (slave bond_slave_0): Releasing backup interface [ 341.843311][T23758] bond0: (slave bond_slave_1): Releasing backup interface [ 341.861657][T23758] team0: Port device team_slave_0 removed [ 341.881673][T23758] team0: Port device team_slave_1 removed [ 341.888638][T23758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.897530][T23758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.907672][T23758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.915550][T23758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.928328][T23758] ------------[ cut here ]------------ [ 341.933853][T23758] WARNING: CPU: 0 PID: 23758 at net/ipv6/route.c:4857 rt6_multipath_rebalance+0x455/0x8b0 [ 341.943802][T23758] Modules linked in: [ 341.947722][T23758] CPU: 0 UID: 0 PID: 23758 Comm: syz.3.5211 Not tainted syzkaller #0 PREEMPT(full) [ 341.957116][T23758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 341.967196][T23758] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0 [ 341.973437][T23758] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 3d 62 f2 f7 e9 78 fe ff ff e8 73 f9 8e f7 eb 05 e8 6c f9 8e f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 45 c9 4b 01 [ 341.993083][T23758] RSP: 0018:ffffc9000dc1e620 EFLAGS: 00010293 [ 341.999177][T23758] RAX: ffffffff8a30b1bd RBX: dffffc0000000000 RCX: ffff888030191e00 [ 342.007178][T23758] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 342.015169][T23758] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 342.023141][T23758] R10: dffffc0000000000 R11: fffff52001b83cbc R12: ffff888077edccde [ 342.031155][T23758] R13: ffff888056baf490 R14: 0000000000000000 R15: 1ffff1100ad75e92 [ 342.039142][T23758] FS: 00007f0e550716c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 342.048099][T23758] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 342.054687][T23758] CR2: 0000000000000000 CR3: 00000000733f4000 CR4: 00000000003526f0 [ 342.062692][T23758] Call Trace: [ 342.065987][T23758] [ 342.068917][T23758] fib6_ifup+0x14a/0x180 [ 342.073162][T23758] ? __pfx_fib6_ifup+0x10/0x10 [ 342.077958][T23758] fib6_clean_node+0x24d/0x590 [ 342.082733][T23758] ? __pfx_fib6_clean_node+0x10/0x10 [ 342.088049][T23758] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 342.093941][T23758] ? rcu_is_watching+0x15/0xb0 [ 342.098733][T23758] fib6_walk_continue+0x678/0x910 [ 342.103762][T23758] fib6_walk+0x149/0x290 [ 342.108037][T23758] __fib6_clean_all+0x234/0x380 [ 342.112891][T23758] ? __fib6_clean_all+0x9b/0x380 [ 342.117853][T23758] ? __pfx_fib6_ifup+0x10/0x10 [ 342.122615][T23758] ? __pfx___fib6_clean_all+0x10/0x10 [ 342.128010][T23758] ? __pfx_fib6_clean_node+0x10/0x10 [ 342.133293][T23758] ? __pfx_fib6_ifup+0x10/0x10 [ 342.138083][T23758] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 342.143721][T23758] rt6_sync_up+0x128/0x160 [ 342.148164][T23758] ? __pfx_rt6_sync_up+0x10/0x10 [ 342.153106][T23758] ? ipv6_mc_up+0x3da/0x580 [ 342.157633][T23758] addrconf_notify+0xd55/0x1010 [ 342.162494][T23758] notifier_call_chain+0x1b3/0x3e0 [ 342.167631][T23758] netif_state_change+0x284/0x3a0 [ 342.172669][T23758] ? __pfx_netif_state_change+0x10/0x10 [ 342.178260][T23758] ? do_set_master+0x1f7/0x6d0 [ 342.183014][T23758] ? validate_linkmsg+0x765/0x950 [ 342.188057][T23758] do_setlink+0x35de/0x41c0 [ 342.192552][T23758] ? __kernel_text_address+0xd/0x40 [ 342.197777][T23758] ? arch_stack_walk+0xfc/0x150 [ 342.202632][T23758] ? __pfx_do_setlink+0x10/0x10 [ 342.207507][T23758] ? stack_trace_save+0x9c/0xe0 [ 342.212445][T23758] ? __mutex_trylock_common+0x153/0x260 [ 342.218013][T23758] ? __pfx___mutex_trylock_common+0x10/0x10 [ 342.223905][T23758] ? rcu_is_watching+0x15/0xb0 [ 342.228699][T23758] ? trace_contention_end+0x39/0x120 [ 342.233985][T23758] ? __mutex_lock+0x335/0x1350 [ 342.238786][T23758] ? rtnl_newlink+0x8db/0x1c70 [ 342.243560][T23758] ? __pfx___mutex_lock+0x10/0x10 [ 342.248629][T23758] ? ns_capable+0x8a/0xf0 [ 342.252964][T23758] ? rtnl_link_get_net_capable+0x16a/0x350 [ 342.258795][T23758] rtnl_newlink+0x149f/0x1c70 [ 342.263470][T23758] ? netlink_sendmsg+0x805/0xb30 [ 342.268447][T23758] ? __pfx_rtnl_newlink+0x10/0x10 [ 342.273579][T23758] ? rcu_is_watching+0x15/0xb0 [ 342.278368][T23758] ? nlmon_xmit+0xb0/0x100 [ 342.282795][T23758] ? kmem_cache_free+0x18f/0x400 [ 342.287761][T23758] ? rcu_is_watching+0x15/0xb0 [ 342.292519][T23758] ? __dev_queue_xmit+0x27b/0x3b50 [ 342.297653][T23758] ? __local_bh_enable_ip+0x12d/0x1c0 [ 342.303035][T23758] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 342.308773][T23758] ? __dev_queue_xmit+0x27b/0x3b50 [ 342.313880][T23758] ? lock_release+0x4b/0x3e0 [ 342.318523][T23758] ? __dev_queue_xmit+0x27b/0x3b50 [ 342.323637][T23758] ? __dev_queue_xmit+0x27b/0x3b50 [ 342.328788][T23758] ? __dev_queue_xmit+0x1d79/0x3b50 [ 342.333998][T23758] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 342.334892][ T7035] hid-generic 0005:0D45:1012.0001: unknown global tag 0xe [ 342.339139][T23758] ? rcu_is_watching+0x15/0xb0 [ 342.339160][T23758] ? lock_release+0x4b/0x3e0 [ 342.339183][T23758] ? bpf_lsm_capable+0x9/0x20 [ 342.339205][T23758] ? security_capable+0x7e/0x2e0 [ 342.339231][T23758] ? __pfx_rtnl_newlink+0x10/0x10 [ 342.339255][T23758] rtnetlink_rcv_msg+0x7cc/0xb70 [ 342.339281][T23758] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 342.339303][T23758] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 342.339326][T23758] ? ref_tracker_free+0x63a/0x7d0 [ 342.339350][T23758] ? __asan_memcpy+0x40/0x70 [ 342.339368][T23758] ? __pfx_ref_tracker_free+0x10/0x10 [ 342.339396][T23758] netlink_rcv_skb+0x208/0x470 [ 342.339420][T23758] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 342.339443][T23758] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 342.339476][T23758] netlink_unicast+0x82c/0x9e0 [ 342.339501][T23758] ? __pfx_netlink_unicast+0x10/0x10 [ 342.339522][T23758] ? netlink_sendmsg+0x642/0xb30 [ 342.353613][ T7035] hid-generic 0005:0D45:1012.0001: item 0 2 1 14 parsing failed [ 342.355984][T23758] ? skb_put+0x11b/0x210 [ 342.361256][ T7035] hid-generic 0005:0D45:1012.0001: probe with driver hid-generic failed with error -22 [ 342.365592][T23758] netlink_sendmsg+0x805/0xb30 [ 342.365623][T23758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.365648][T23758] ? futex_unqueue+0x22/0x240 [ 342.365674][T23758] ? aa_sock_msg_perm+0xf1/0x1d0 [ 342.365692][T23758] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 342.365711][T23758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.365736][T23758] __sock_sendmsg+0x21c/0x270 [ 342.365760][T23758] ____sys_sendmsg+0x505/0x830 [ 342.365780][T23758] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.365802][T23758] ? import_iovec+0x74/0xa0 [ 342.365822][T23758] ___sys_sendmsg+0x21f/0x2a0 [ 342.365841][T23758] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.365861][T23758] ? futex_wait+0x285/0x360 [ 342.365896][T23758] ? __fget_files+0x2a/0x420 [ 342.365919][T23758] ? __fget_files+0x3a0/0x420 [ 342.365946][T23758] __x64_sys_sendmsg+0x19b/0x260 [ 342.365964][T23758] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 342.365987][T23758] ? rcu_is_watching+0x15/0xb0 [ 342.366006][T23758] ? rcu_is_watching+0x15/0xb0 [ 342.546204][T23758] do_syscall_64+0xfa/0x3b0 [ 342.550716][T23758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.556787][T23758] ? clear_bhb_loop+0x60/0xb0 [ 342.561470][T23758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.567378][T23758] RIP: 0033:0x7f0e5418ebe9 [ 342.571790][T23758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.591410][T23758] RSP: 002b:00007f0e55071038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.599848][T23758] RAX: ffffffffffffffda RBX: 00007f0e543b5fa0 RCX: 00007f0e5418ebe9 [ 342.607859][T23758] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000007 [ 342.615857][T23758] RBP: 00007f0e54211e19 R08: 0000000000000000 R09: 0000000000000000 [ 342.623856][T23758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.631856][T23758] R13: 00007f0e543b6038 R14: 00007f0e543b5fa0 R15: 00007fff05d4bf08 [ 342.639843][T23758] [ 342.642858][T23758] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 342.650121][T23758] CPU: 0 UID: 0 PID: 23758 Comm: syz.3.5211 Not tainted syzkaller #0 PREEMPT(full) [ 342.659479][T23758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 342.669547][T23758] Call Trace: [ 342.672816][T23758] [ 342.675732][T23758] dump_stack_lvl+0x99/0x250 [ 342.680315][T23758] ? __asan_memcpy+0x40/0x70 [ 342.684899][T23758] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.690086][T23758] ? __pfx__printk+0x10/0x10 [ 342.694666][T23758] vpanic+0x281/0x750 [ 342.698641][T23758] ? __pfx__printk+0x10/0x10 [ 342.703236][T23758] ? __pfx_vpanic+0x10/0x10 [ 342.707779][T23758] ? is_bpf_text_address+0x26/0x2b0 [ 342.712973][T23758] panic+0xb9/0xc0 [ 342.716680][T23758] ? __pfx_panic+0x10/0x10 [ 342.721094][T23758] __warn+0x31b/0x4b0 [ 342.725060][T23758] ? rt6_multipath_rebalance+0x455/0x8b0 [ 342.730693][T23758] ? rt6_multipath_rebalance+0x455/0x8b0 [ 342.736328][T23758] report_bug+0x2be/0x4f0 [ 342.740643][T23758] ? rt6_multipath_rebalance+0x455/0x8b0 [ 342.746267][T23758] ? rt6_multipath_rebalance+0x455/0x8b0 [ 342.751909][T23758] ? rt6_multipath_rebalance+0x457/0x8b0 [ 342.757554][T23758] handle_bug+0x84/0x160 [ 342.761794][T23758] exc_invalid_op+0x1a/0x50 [ 342.766291][T23758] asm_exc_invalid_op+0x1a/0x20 [ 342.771150][T23758] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0 [ 342.777374][T23758] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 3d 62 f2 f7 e9 78 fe ff ff e8 73 f9 8e f7 eb 05 e8 6c f9 8e f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 45 c9 4b 01 [ 342.796966][T23758] RSP: 0018:ffffc9000dc1e620 EFLAGS: 00010293 [ 342.803038][T23758] RAX: ffffffff8a30b1bd RBX: dffffc0000000000 RCX: ffff888030191e00 [ 342.811011][T23758] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 342.818964][T23758] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 342.826916][T23758] R10: dffffc0000000000 R11: fffff52001b83cbc R12: ffff888077edccde [ 342.834869][T23758] R13: ffff888056baf490 R14: 0000000000000000 R15: 1ffff1100ad75e92 [ 342.842926][T23758] ? rt6_multipath_rebalance+0x44d/0x8b0 [ 342.848567][T23758] fib6_ifup+0x14a/0x180 [ 342.852819][T23758] ? __pfx_fib6_ifup+0x10/0x10 [ 342.857576][T23758] fib6_clean_node+0x24d/0x590 [ 342.862328][T23758] ? __pfx_fib6_clean_node+0x10/0x10 [ 342.867617][T23758] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 342.873496][T23758] ? rcu_is_watching+0x15/0xb0 [ 342.878242][T23758] fib6_walk_continue+0x678/0x910 [ 342.883252][T23758] fib6_walk+0x149/0x290 [ 342.887480][T23758] __fib6_clean_all+0x234/0x380 [ 342.892313][T23758] ? __fib6_clean_all+0x9b/0x380 [ 342.897258][T23758] ? __pfx_fib6_ifup+0x10/0x10 [ 342.902023][T23758] ? __pfx___fib6_clean_all+0x10/0x10 [ 342.907382][T23758] ? __pfx_fib6_clean_node+0x10/0x10 [ 342.912646][T23758] ? __pfx_fib6_ifup+0x10/0x10 [ 342.917391][T23758] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 342.923008][T23758] rt6_sync_up+0x128/0x160 [ 342.927409][T23758] ? __pfx_rt6_sync_up+0x10/0x10 [ 342.932327][T23758] ? ipv6_mc_up+0x3da/0x580 [ 342.936813][T23758] addrconf_notify+0xd55/0x1010 [ 342.941670][T23758] notifier_call_chain+0x1b3/0x3e0 [ 342.946773][T23758] netif_state_change+0x284/0x3a0 [ 342.951808][T23758] ? __pfx_netif_state_change+0x10/0x10 [ 342.957381][T23758] ? do_set_master+0x1f7/0x6d0 [ 342.962123][T23758] ? validate_linkmsg+0x765/0x950 [ 342.967137][T23758] do_setlink+0x35de/0x41c0 [ 342.971625][T23758] ? __kernel_text_address+0xd/0x40 [ 342.976808][T23758] ? arch_stack_walk+0xfc/0x150 [ 342.981642][T23758] ? __pfx_do_setlink+0x10/0x10 [ 342.986470][T23758] ? stack_trace_save+0x9c/0xe0 [ 342.991304][T23758] ? __mutex_trylock_common+0x153/0x260 [ 342.996846][T23758] ? __pfx___mutex_trylock_common+0x10/0x10 [ 343.002741][T23758] ? rcu_is_watching+0x15/0xb0 [ 343.007487][T23758] ? trace_contention_end+0x39/0x120 [ 343.012759][T23758] ? __mutex_lock+0x335/0x1350 [ 343.017512][T23758] ? rtnl_newlink+0x8db/0x1c70 [ 343.022262][T23758] ? __pfx___mutex_lock+0x10/0x10 [ 343.027271][T23758] ? ns_capable+0x8a/0xf0 [ 343.031586][T23758] ? rtnl_link_get_net_capable+0x16a/0x350 [ 343.037371][T23758] rtnl_newlink+0x149f/0x1c70 [ 343.042031][T23758] ? netlink_sendmsg+0x805/0xb30 [ 343.046963][T23758] ? __pfx_rtnl_newlink+0x10/0x10 [ 343.051996][T23758] ? rcu_is_watching+0x15/0xb0 [ 343.056759][T23758] ? nlmon_xmit+0xb0/0x100 [ 343.061153][T23758] ? kmem_cache_free+0x18f/0x400 [ 343.066077][T23758] ? rcu_is_watching+0x15/0xb0 [ 343.070819][T23758] ? __dev_queue_xmit+0x27b/0x3b50 [ 343.075921][T23758] ? __local_bh_enable_ip+0x12d/0x1c0 [ 343.081280][T23758] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 343.086979][T23758] ? __dev_queue_xmit+0x27b/0x3b50 [ 343.092075][T23758] ? lock_release+0x4b/0x3e0 [ 343.096655][T23758] ? __dev_queue_xmit+0x27b/0x3b50 [ 343.101772][T23758] ? __dev_queue_xmit+0x27b/0x3b50 [ 343.106877][T23758] ? __dev_queue_xmit+0x1d79/0x3b50 [ 343.112059][T23758] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 343.117156][T23758] ? rcu_is_watching+0x15/0xb0 [ 343.121900][T23758] ? lock_release+0x4b/0x3e0 [ 343.126496][T23758] ? bpf_lsm_capable+0x9/0x20 [ 343.131156][T23758] ? security_capable+0x7e/0x2e0 [ 343.136078][T23758] ? __pfx_rtnl_newlink+0x10/0x10 [ 343.141093][T23758] rtnetlink_rcv_msg+0x7cc/0xb70 [ 343.146043][T23758] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 343.151161][T23758] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 343.156624][T23758] ? ref_tracker_free+0x63a/0x7d0 [ 343.161634][T23758] ? __asan_memcpy+0x40/0x70 [ 343.166203][T23758] ? __pfx_ref_tracker_free+0x10/0x10 [ 343.171562][T23758] netlink_rcv_skb+0x208/0x470 [ 343.176312][T23758] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 343.181754][T23758] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 343.187026][T23758] netlink_unicast+0x82c/0x9e0 [ 343.191774][T23758] ? __pfx_netlink_unicast+0x10/0x10 [ 343.197048][T23758] ? netlink_sendmsg+0x642/0xb30 [ 343.202015][T23758] ? skb_put+0x11b/0x210 [ 343.206243][T23758] netlink_sendmsg+0x805/0xb30 [ 343.211028][T23758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.216300][T23758] ? futex_unqueue+0x22/0x240 [ 343.220957][T23758] ? aa_sock_msg_perm+0xf1/0x1d0 [ 343.225873][T23758] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 343.231145][T23758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.236411][T23758] __sock_sendmsg+0x21c/0x270 [ 343.241069][T23758] ____sys_sendmsg+0x505/0x830 [ 343.245825][T23758] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.251114][T23758] ? import_iovec+0x74/0xa0 [ 343.255616][T23758] ___sys_sendmsg+0x21f/0x2a0 [ 343.260277][T23758] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.265455][T23758] ? futex_wait+0x285/0x360 [ 343.269946][T23758] ? __fget_files+0x2a/0x420 [ 343.274518][T23758] ? __fget_files+0x3a0/0x420 [ 343.279182][T23758] __x64_sys_sendmsg+0x19b/0x260 [ 343.284103][T23758] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 343.289545][T23758] ? rcu_is_watching+0x15/0xb0 [ 343.294289][T23758] ? rcu_is_watching+0x15/0xb0 [ 343.299044][T23758] do_syscall_64+0xfa/0x3b0 [ 343.303551][T23758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.309600][T23758] ? clear_bhb_loop+0x60/0xb0 [ 343.314256][T23758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.320128][T23758] RIP: 0033:0x7f0e5418ebe9 [ 343.324520][T23758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.344106][T23758] RSP: 002b:00007f0e55071038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.352510][T23758] RAX: ffffffffffffffda RBX: 00007f0e543b5fa0 RCX: 00007f0e5418ebe9 [ 343.360482][T23758] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000007 [ 343.368434][T23758] RBP: 00007f0e54211e19 R08: 0000000000000000 R09: 0000000000000000 [ 343.376385][T23758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.384336][T23758] R13: 00007f0e543b6038 R14: 00007f0e543b5fa0 R15: 00007fff05d4bf08 [ 343.392294][T23758] [ 343.395570][T23758] Kernel Offset: disabled [ 343.399875][T23758] Rebooting in 86400 seconds..