last executing test programs: 3.035135795s ago: executing program 1 (id=4185): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}}, 0x40040) socket$inet6(0x10, 0x3, 0x0) r2 = epoll_create(0x400) pipe(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000000)=0x6ab7, 0x1) recvmmsg(r4, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@nl=@unspec, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/190}], 0x0, &(0x7f0000000140)=""/21}, 0x3}], 0x40000000000022b, 0x45833af92e4bbbfe, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) close(0x4) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) 2.694941091s ago: executing program 4 (id=4189): getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0xd453}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x931b, 0x39e3, 0xfff, 0x7, 0x40, 0x4, 0x1, {r0, @in={{0x2, 0x4e23, @loopback}}, 0x86e7, 0x5, 0x37e, 0x1, 0x3}}, &(0x7f0000000140)=0xb0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000001c0)={r1, 0x7, 0x1, 0xfffffffb}, &(0x7f0000000200)=0x10) (async) r3 = socket$netlink(0x10, 0x3, 0x8) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x5, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x7800, 0x801f, 0x9, 0x1}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev, 0x0}, &(0x7f00000003c0)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) (async, rerun: 32) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x29, 0x85, 0x8, 0x3b7, 0x3, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x700, 0x8, 0x2}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2d46b6c17577db2c}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xb0, r4, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0xb0}}, 0x8000) (async, rerun: 64) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), r3) (rerun: 64) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r11, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x408c1) r12 = accept(r3, 0x0, &(0x7f0000000840)) (async) r13 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r13, 0x84, 0x9, &(0x7f0000000880)={r1, @in={{0x2, 0x4e20, @local}}, 0xfffffff8, 0x9, 0x5, 0x10001, 0x8a, 0x7, 0x89}, 0x9c) getuid() (async, rerun: 64) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) r16 = openat$cgroup_ro(r14, &(0x7f0000000980)='cpuacct.usage_percpu\x00', 0x0, 0x0) (async, rerun: 64) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f00000009c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5, 0x0, 0x3, 0x3, 0x3, 0x9}, &(0x7f0000000a00)=0x20) (async, rerun: 64) sendmsg$nl_route_sched(r12, &(0x7f0000002240)={&(0x7f0000000a40), 0xc, &(0x7f0000002200)={&(0x7f0000000a80)=@newchain={0x1764, 0x64, 0x8, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xe, 0x8}, {0xb, 0xb}, {0x1, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc78, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0xff}, @TCA_FW_POLICE={0xc64, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x10001}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x80, 0x5d, 0xc, {0xc, 0x1, 0x5, 0xff00, 0xe647, 0x8001}, {0x4, 0x0, 0x8001, 0xe, 0x5d97, 0xffff}, 0x8, 0x0, 0xfffffff9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x1000, 0x560, 0xbae, 0x9, 0x2, 0x9, 0x6, 0x6, 0xffff, 0x8, 0x0, 0xffff0000, 0x7fffffff, 0x3, 0x8, 0x200, 0xe, 0x9, 0xf, 0x2, 0x8001, 0xe, 0x4, 0x4, 0x8000, 0x7ff, 0xffffffff, 0xfffffffd, 0x6, 0x3, 0xdd0b, 0x9, 0x0, 0xa0, 0xb8, 0x0, 0xfffffff8, 0x9, 0x7, 0x400000, 0x81, 0x1, 0x8001, 0x2, 0x4, 0x8, 0x2, 0xfffffffb, 0x9, 0x7, 0xffffffec, 0xb5, 0xfff, 0x3, 0x9, 0xfffff37a, 0x1000, 0x40, 0x1ee000, 0xfffffffd, 0xffff, 0x1000, 0xfff, 0x40, 0xad000000, 0x2, 0x8001, 0xffff, 0x0, 0x7, 0x7, 0x7, 0x7ff, 0xe8f, 0x1, 0x2, 0x4, 0x0, 0x3, 0x80, 0x8, 0x9, 0x7fff, 0x6, 0x5, 0x4, 0x1000, 0x9f2, 0x9, 0x6a38, 0x8, 0x80000001, 0x0, 0xfffffffd, 0x8001, 0xfffffffd, 0xe1, 0x80000001, 0x390, 0x5, 0x7, 0xa6a, 0x5, 0x2, 0x152e, 0x8, 0x480f, 0x3, 0xc9fb, 0x7fffffff, 0x7, 0x7, 0x7, 0x2, 0x8, 0x200, 0x1, 0x6, 0xa0c, 0x0, 0x9, 0x0, 0x7ae9, 0x3, 0x100, 0xfffffff7, 0xaee, 0xf, 0x200, 0x6, 0x8, 0xc, 0x101, 0xffff, 0xfffffff8, 0x1, 0x3, 0x6d54000, 0x4, 0x101, 0x6, 0x2, 0x2, 0x8, 0xee, 0x8, 0x218, 0xd, 0x3, 0x8, 0x8, 0x1, 0x1, 0x1, 0x27, 0x7, 0x9, 0x3, 0x100, 0xffffffff, 0x6, 0xcc8, 0x9, 0x8, 0x101, 0x270, 0x5, 0x5, 0x3ff, 0x9, 0x0, 0xe, 0x5, 0xfffffffd, 0x1, 0x4f, 0x5, 0x4, 0x0, 0x7, 0x2, 0xced5, 0x401, 0xf, 0x6, 0xfffffffd, 0x5, 0x2, 0xd, 0x400, 0x52, 0x7, 0x1, 0xfffffff7, 0x1000, 0x1, 0xab5, 0xfff, 0x1b000, 0x0, 0x2, 0xffffffff, 0x1, 0x4, 0x0, 0x9, 0x5, 0x4000000, 0x0, 0x3, 0x400, 0x7f, 0x2, 0x8, 0x6, 0x6, 0xfffffeff, 0xb9bd, 0x10000, 0x7, 0x3, 0x2, 0x1, 0x3ff, 0x10001, 0x6, 0x1, 0xc, 0x0, 0x6, 0x6, 0x0, 0x1, 0xffff1dce, 0x1f6, 0x3, 0x2, 0x7, 0x7, 0x4, 0x7, 0xffff78fb, 0xfffffffb, 0x3, 0x1, 0x1dc8, 0x6, 0x8dc, 0x2, 0x200, 0x9, 0x800, 0x1, 0x2, 0x0, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x4, 0x80, 0x2, 0x7, 0x0, 0x3, 0x6, 0x7, 0x7, 0xc6c9, 0x6, 0x2, 0x3, 0xfffffff6, 0x7d, 0x29, 0x3, 0x0, 0x0, 0x9, 0x7, 0x5, 0x9, 0x7fe000, 0x9, 0x3, 0x7, 0x9, 0x6, 0x7fffffff, 0x80000001, 0xdc2e, 0x8eaf, 0x8, 0x24f6, 0x5, 0xd, 0x7a34, 0x10000, 0x1, 0x3, 0x5, 0x3, 0x2339, 0x31, 0x0, 0x0, 0xffffffff, 0x1, 0x2, 0x2, 0x2, 0x61, 0x9, 0x1, 0xff, 0xfffffe01, 0xf1, 0x6, 0x3, 0x9, 0x6, 0x4, 0x9, 0x1, 0xfffffffa, 0x32dd, 0x5, 0x7, 0x697, 0x8, 0x0, 0x1, 0x2, 0x3, 0x1, 0x400, 0x3, 0x5, 0x4, 0x3, 0x942, 0x10000, 0x5, 0x3, 0x601b427, 0x1, 0x37, 0xe9, 0x71, 0x800, 0x7, 0x7d0, 0x8, 0x3, 0x8a19, 0x3, 0x100, 0xb, 0x89fa, 0x8, 0x9, 0x9, 0x5, 0x2, 0x2, 0x1, 0x80000000, 0x7fff, 0x6635, 0x3, 0x9, 0x8, 0xfff, 0xb699, 0x3, 0xffffffff, 0x5, 0x725, 0x80000001, 0x1, 0x5, 0x6, 0x20000, 0x7, 0xfffffffc, 0x5, 0x3, 0x8, 0x5, 0x2, 0xb, 0x2, 0xaf, 0xfffffffb, 0x0, 0x8000, 0xbe4c, 0x7, 0x4, 0x400, 0x1, 0x1, 0x6, 0x2, 0x0, 0x3, 0x3, 0x7, 0x0, 0x400, 0x200000, 0x7, 0x2, 0x8000, 0xfff, 0x7ff, 0x2, 0x8, 0xf, 0xf0, 0x1, 0xffff, 0x20623e0a, 0x1, 0x3, 0x9, 0x1, 0x3, 0x8, 0x8, 0x3, 0x5, 0x2, 0x2, 0x2c8, 0x3, 0x2faa0f4e, 0x9, 0x4, 0x2000, 0x1ff, 0x8000, 0x7, 0x10000, 0x1, 0x26, 0x2, 0x2, 0x935, 0x7, 0x80, 0x8, 0x2, 0xffffffc0, 0x2, 0x10000, 0x0, 0x1, 0x8, 0x1, 0x3a, 0x3, 0x6, 0x1, 0x5, 0xb, 0x67, 0x52a, 0x3, 0x0, 0x3, 0x8, 0xfffffffc, 0xe9f3, 0x800, 0x8, 0x200, 0x10001, 0x6, 0x10001, 0xfffffff9, 0xb7, 0x5e0, 0x6, 0x8001, 0x0, 0x2, 0xee2, 0x2, 0x0, 0x100, 0x8, 0x1, 0x5, 0x4bb, 0x3ff, 0x4, 0x5, 0x1, 0x1a2, 0x9, 0xfffffffb, 0x6, 0x401, 0x7fff, 0xff, 0x6, 0x2, 0x7, 0x0, 0x6, 0x2, 0xf, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x401, 0x7f, 0x15, 0x9, 0x3, 0xffffff7f, 0x5, 0xff, 0x4, 0x1211, 0xfa, 0x152f, 0x3ff, 0x6, 0x5, 0x7, 0x8001, 0x82, 0x0, 0x2, 0xffff, 0x401, 0x59, 0x9, 0x6, 0x7, 0x101, 0x1000, 0x7, 0x2, 0x3ff, 0xfe, 0xeb3, 0x0, 0x200, 0xc, 0x9, 0x9, 0x6, 0x1ff, 0x8, 0x8, 0xe817, 0xfa, 0xffff2928, 0xdc, 0x1, 0x4, 0x4, 0x500000, 0x3, 0x1c000000, 0x78, 0x8, 0x9, 0x7, 0x1e1, 0x8, 0x4, 0x2, 0x5, 0x5, 0x6, 0xfffffff9, 0x0, 0x1, 0x4, 0x6, 0x8, 0x0, 0x3, 0x9, 0x1ff, 0x8, 0xfffffff8, 0x3, 0x4, 0x0, 0x1ff, 0x1ff, 0x9, 0x935, 0x7, 0x7ff, 0x9, 0x10, 0x3ff, 0x9, 0x68174e23, 0x1, 0x6, 0x869a, 0x0, 0x17ae, 0x100, 0x4, 0x3ff, 0x4, 0x0, 0x4, 0x6, 0x8, 0x3, 0x4, 0x1, 0xfffffc01, 0x9, 0x3, 0x10001, 0x9, 0x1, 0x7, 0x8c, 0x0, 0x40, 0x1, 0x5, 0x2, 0xa, 0xff48, 0x9, 0x4, 0x0, 0x10000, 0x5, 0x7, 0x200, 0x6, 0x4, 0x800, 0x0, 0x3, 0xb, 0x0, 0x81, 0x4, 0x4, 0x8, 0x1, 0x5, 0x2, 0x7f, 0x1, 0x9, 0x4, 0x7, 0x52, 0x0, 0xa, 0x6, 0xb0bd, 0xe2f, 0x0, 0xffff, 0x6, 0xf86, 0xdce, 0x3, 0x6, 0xa77a, 0x1, 0x5, 0x7, 0x7, 0x4, 0x1, 0x64, 0x5, 0x7f, 0xfffffffb, 0xdb, 0xa4, 0x2, 0x3ff, 0xf, 0x200, 0x1000, 0x9, 0xe0, 0x6, 0x58bc, 0xb1, 0x1, 0x0, 0xad3, 0x1, 0x7, 0xab0, 0xc, 0x3, 0x2a8b8832, 0x48c3, 0x0, 0x8000, 0x1, 0x2, 0x80000001, 0xe, 0x8, 0x5, 0x8, 0x1, 0x100, 0xc, 0x5, 0x1, 0x200, 0x4, 0x0, 0x3ff, 0x0, 0x8, 0x5, 0x7, 0x3, 0x1, 0x5, 0x4, 0x0, 0x7, 0x1dfb, 0x1, 0xfffffffc, 0x7ff, 0x9, 0x8, 0x5, 0x0, 0x3, 0x1, 0x0, 0x200, 0x5, 0x5, 0x7fffffff, 0x7, 0x81, 0x3, 0xfff, 0x5, 0x3, 0xf, 0xd, 0xbe3, 0x1, 0x4, 0x101, 0xfffffffd, 0x3, 0x40, 0x7ff, 0x1, 0xffff, 0x0, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}]}, @TCA_FW_MASK={0x8, 0x5, 0x6}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0xa6c, 0x2, [@TCA_ROUTE4_POLICE={0x850, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x9, 0x4, 0x3, 0x9, 0x81, 0x3, 0x6579, 0x5, 0xbab3, 0x6, 0x7, 0xffffffff, 0x8, 0x2, 0x7, 0x40, 0x9, 0x2, 0x3, 0xffffffff, 0x8e3, 0x5, 0x80, 0xa2, 0x2000000, 0x672, 0x3, 0x4, 0x6, 0xe, 0x9, 0x4, 0x401, 0x1, 0xbfc, 0x8000, 0x1000, 0x9, 0x6, 0x7, 0x2, 0xc619, 0xb, 0xf, 0x0, 0x9, 0x3, 0x5, 0x170, 0x6, 0x9, 0x8001, 0x9, 0xb, 0x1, 0x388, 0x40, 0x8, 0xffff, 0x4, 0xd7, 0x9, 0x6, 0x9, 0x7f, 0x2, 0x9, 0xffff, 0x1, 0x7, 0x6, 0x5, 0x5, 0x7, 0xfffffff8, 0x9, 0xe, 0x3ff, 0x8, 0x7, 0x5, 0x800, 0x8, 0x4, 0x534, 0x996, 0x9, 0x4, 0x7, 0xc, 0x7fff, 0x1000, 0x1, 0x1, 0x0, 0x2, 0x9, 0x401, 0x10000, 0x5, 0x4, 0x1000, 0x4, 0x9, 0x4, 0x8b, 0x7ff, 0x7fff, 0x1, 0x1, 0x1, 0x4, 0x2, 0x401, 0x69, 0xe, 0x9, 0x1, 0x9, 0x6, 0x6, 0xfffffe00, 0x5, 0x80000000, 0xa4, 0x500, 0x100, 0xfffffffc, 0x0, 0x5, 0x23, 0xffffffff, 0x4746, 0x68, 0x4, 0xfffffffc, 0x7, 0x6, 0x9, 0x1, 0x5, 0x2, 0x2, 0x2, 0x6, 0x5f83, 0x3, 0x4, 0xfffffffc, 0x4, 0x609, 0xf292, 0x1ff, 0x8, 0x0, 0x401, 0x849, 0xd1ab, 0x5, 0xfc6c, 0xc4, 0xb7a1, 0x10001, 0x6, 0x7fff, 0x8, 0x3bd, 0x7, 0x57, 0x7f, 0x4, 0x1ff, 0x5, 0x7fff, 0x3, 0x3, 0x3, 0x0, 0x6, 0x2, 0x93, 0x6b9, 0x9, 0x9, 0x7, 0xfffff800, 0x3c8a, 0xc38, 0x2, 0x100, 0x6, 0xca8, 0x3, 0x10001, 0x1000, 0x0, 0x0, 0x8, 0x6, 0x6, 0x1, 0x4, 0x37b4, 0x7fff, 0x2, 0xd, 0x6, 0x5, 0x3, 0x0, 0x5, 0x7, 0xcbd, 0x2, 0x4, 0x0, 0x6, 0x3, 0x2, 0x7, 0x3, 0x9d4, 0xfffffffe, 0x6910, 0x4, 0x7ff, 0x5, 0x72, 0xe2, 0x222, 0x401, 0x2, 0x11e, 0x1, 0x8, 0xd2, 0x5, 0x6, 0x80000000, 0x4a2fa12b, 0x2, 0xfffffc01, 0x7, 0x3, 0x1, 0x5, 0x2, 0x4, 0x7, 0xfffffff8, 0x0, 0x61c, 0xd, 0x2, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1ff, 0x0, 0x9, 0x1, 0x5, {0xfb, 0x0, 0x4, 0x0, 0x5, 0x9}, {0xba, 0x1, 0x7b, 0x9531, 0x4, 0x4}, 0x9, 0x0, 0xb3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x7, 0xfffffffa, 0x9, 0x4a, 0x1, 0x80000001, 0x7fffffff, 0xffff, 0x3, 0x8, 0xffff8001, 0x100, 0xfffeffff, 0xc28363ee, 0x10001, 0x174, 0x7, 0x3, 0x0, 0x8, 0x5, 0x8000, 0x8, 0x400, 0x80000000, 0x7fffffff, 0x7, 0x4, 0x4, 0x2fb, 0x11, 0x8, 0x4, 0xfffffff9, 0x1000, 0x5, 0x4, 0xfffffffd, 0x2, 0x1, 0x0, 0x0, 0x4, 0xfe3, 0x13780, 0x6, 0x7, 0x8, 0x6, 0x3, 0x0, 0x6ea, 0x4, 0x81, 0x10001, 0xfff, 0x0, 0x5, 0x9, 0x9, 0x5, 0x3, 0x8000, 0x4, 0x6, 0x972, 0x40, 0xef, 0xfffffff8, 0x6, 0xacf, 0x19a0d4f8, 0x4, 0x1, 0x7, 0x10, 0x401, 0x4, 0x8dd, 0x7, 0x4, 0x80000000, 0xfffffff8, 0x4, 0x818, 0x9, 0x95a, 0x4, 0x9e, 0xb, 0x80, 0x5, 0x2b0, 0x4, 0x9, 0x8000, 0x78, 0x1, 0x8000, 0xfffffffe, 0xfffffffb, 0x100, 0x6, 0x0, 0x2ea, 0xfffffff8, 0x3, 0xfffffff8, 0xb22, 0x0, 0x3, 0xfdb, 0xc0c, 0x5, 0x1, 0x7ff, 0x7f, 0x4, 0x2, 0xb, 0x2, 0x4, 0x81, 0x3, 0x50, 0x51, 0x1, 0x8, 0x2, 0x7, 0xe5, 0x7, 0x8, 0xd814, 0x2, 0x0, 0x9, 0x12b, 0x1, 0x9, 0x27, 0x2, 0x243, 0xfff, 0x549, 0x7, 0x8, 0x4, 0x40, 0x8, 0x80, 0x8, 0xffff, 0x8, 0x4, 0x9, 0x7f, 0x5, 0x0, 0x1, 0x1, 0x1, 0x10001, 0x2, 0x675, 0x3, 0x400, 0x1, 0x5, 0x3, 0x1, 0x1, 0x8, 0xd, 0x4, 0x4, 0x4, 0xd, 0x3, 0x3, 0x8a, 0x5, 0xc, 0x5, 0x2, 0x1000, 0xef, 0x7, 0x1, 0x101, 0x4, 0x8, 0x9, 0x2, 0x4, 0x0, 0x10000, 0x60, 0x80000000, 0x3, 0x3, 0x7, 0x0, 0x40, 0x0, 0x0, 0x80000001, 0x6, 0x2, 0x4, 0x5, 0x6, 0x8, 0x6, 0x4, 0x4, 0x6, 0x2c5, 0xffff, 0x1000, 0x7, 0x1, 0x8, 0x7, 0x800, 0x4, 0x2cdfeed, 0x0, 0x81, 0x9, 0xfffffff8, 0x7fffffff, 0x40, 0x3, 0x6, 0x3, 0x78, 0x80000000, 0x4, 0x2, 0x2, 0x6, 0x7fffffff, 0x0, 0x7fffffff, 0x2, 0x7, 0x6f, 0xd5, 0x3, 0x7, 0x7, 0x2, 0x49, 0x8]}]}, @TCA_ROUTE4_ACT={0x218, 0x6, [@m_mpls={0xd8, 0x10, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x6cd1a}, @TCA_MPLS_PROTO={0x6, 0x4, 0x200}, @TCA_MPLS_TC={0x5}]}, {0x94, 0x6, "7734c80cfa217a87c147d90f018a22cf05861723457de5029c03d22cb7c7053a76ab28c58b0048e53b0ac2863540bbeaf8f3d1336a643d4af7ca6dc7e9a7d68e9811c013f4d6e0ccfb97d6dcd7d4efff1be6e151b001b4d85f61f42b957e85d527ec4bb17629219fa1cb92b52b4e08566947436a0c3da5a195dac7bc856b64e01901235b33e28000f61dc3eaf55e9e0a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0x13c, 0x18, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x7, 0x3, 0x101, 0x9}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x572, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xe91, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x22ac, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x5, 0x8, 0x1, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfff, 0x2, 0xffffffffffffffff, 0x2, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x4, 0x3, 0x6, 0x1}}]}, {0x8b, 0x6, "05c310b87a6be0fa42637fbbd97b1aa5bf77c2a3d7649a2c8aec95c7b923cdd0cec0d7d3fb267b9be4585e3fae884b6c74fe34222c632075e31a800657727eb7259770f69dd9285863727a3d3640568ee6523337f3da95ca1d137b1efa77a365421e8aca5dc910c6dcc7cd10600e7ed729d1e9cb427e1ddd81fb24b7ce9c77e59588f09bc1c241"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x200}, @filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_HASH={0x8, 0x2, 0x1}]}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x6}]}}]}, 0x1764}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$packet(0x11, 0x3, 0x300) r17 = syz_genetlink_get_family_id$l2tp(&(0x7f00000022c0), r15) sendmsg$L2TP_CMD_TUNNEL_GET(r14, &(0x7f00000023c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x48, r17, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c020}, 0x0) (async) r18 = syz_genetlink_get_family_id$batadv(&(0x7f0000002440), r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r16, 0x89f1, &(0x7f0000002500)={'erspan0\x00', &(0x7f0000002480)={'gretap0\x00', r9, 0x1, 0x80, 0x6, 0x5, {{0xd, 0x4, 0x3, 0x8, 0x34, 0x68, 0x0, 0x2, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x8, 0x8b, 0x0, 0x9, [0x7f]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x25, 0x0, 0x4, [0x1, 0x6]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(r15, &(0x7f0000002600)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)={0x5c, r18, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r19}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4000014) 2.509485996s ago: executing program 4 (id=4192): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) r2 = socket(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0xa, 0xffff}, {}, {0xfff3, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d34}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x200008c2) (async) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r8, 0x800, 0x55007}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xf}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) socket$kcm(0xf, 0x0, 0x2) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES64=r9, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050006000000140004"], 0x58}}, 0x0) 2.165780336s ago: executing program 1 (id=4194): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000700)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x9}, 0x1c, &(0x7f00000004c0)}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x786ba9af, @mcast1, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000580)="69b1cd1aa3b6b202915f0c2951725031cb90f8c0c68e6a62e5c9fe7f7b7f2d81acf1e3faaa1fccb4f3746804283c0f71c178f3f2f232c8b5f141f6cdb4607e7e08343a0de825412157fdc9b1ef59aa5126767d5568eefb4c274d539ead6f6f87cd926a6b970176e6e667c36d0dccd243494b01fc37dc56cdf4141d95", 0x7c}], 0x1, &(0x7f0000000800)=ANY=[], 0x88}}], 0x2, 0x2400c044) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r2, r4, 0x0, 0x970b) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r6 = socket$packet(0x11, 0x2, 0x300) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r6, &(0x7f0000000480), 0x0, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000800)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000002000ffdbdf2501000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901cfd71b31121596b9ff2f518c78042fb54283c70e5cea99fa010c296ec024d37540e08ae0d466ccfdae938f23c7243c1cd110dbf90467d6c1520cc3531cb4dcb3b796d1062f1ebbecc22ac3ba1d466aa52f29c96e3f5a7ade95e9d562aa208bbb13d0ed4747516e00ed44db0d6d007bcda7a89d50fcf4b3408abf03ec657954dd03db8dd7"], 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_nat_t_type={0x1, 0x14, 0x7}]}, 0x70}, 0x1, 0x7}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r7, 0x50009401, &(0x7f0000001040)={{}, "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"}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, 0x0, &(0x7f0000000680)='GPL\x00', 0x80000, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[r7, r7, 0xffffffffffffffff], &(0x7f0000000dc0), 0x10, 0x5}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 1.763966131s ago: executing program 3 (id=4196): r0 = epoll_create1(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@ipv4_deladdr={0x98, 0x15, 0x200, 0x70bd29, 0x25dfdbfb, {0x2, 0x20, 0x5a, 0xff}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x401}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5}, @IFA_LABEL={0x14, 0x3, 'veth1_vlan\x00'}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_LABEL={0x14, 0x3, 'pimreg\x00'}, @IFA_RT_PRIORITY={0x8, 0x9, 0x101}, @IFA_LABEL={0x14, 0x3, 'vcan0\x00'}, @IFA_BROADCAST={0x8, 0x4, @private=0xa010102}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x729, 0x5, 0xfffffff8}}, @IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x98}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90224fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf250c000000080032006b35e2ff07003b000900000008003b000b000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0xc9) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a00000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="75478b480000000000000000000000000000000000000000000000005e5144b6844e3257b2101512929fcea0ad7c7d767501d4e5cb47931868a342310ee9ab1828c9fab12655671425a395faf965a1206f075e949ed4d61f0f3771b9c5fe9353926996ea63a0bcda526683e58cd758d7c7846e4eb5841206681523eeb60ea8e58b18ad23773f4f7b6e14715031a3127a4b1a6c32d5f538afac0a0774d5edf66c4eba1145887fa2975d85a3085ae65b4a0bb6e6985e271189067542d2d8e984660ff8efc1fc1a3c3eb9e81b24f2470c3932a3f9bbd03f977efe8fd92b4beb2a068286f0f0c5438870ceb14e9d0e4aeeda4c5e"], 0x50) close(0x3) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x69801}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000fedbdf2500"/20, @ANYRES32=0x0, @ANYBLOB="40000000000000000c002b80080003"], 0x2c}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff0700070026093a0914000600626f6e643000"/94], 0x78}, 0x1, 0xffffffff00000003}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r8, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r4) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r4, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x5c, r12, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000c00)=ANY=[@ANYRES16=r6, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001", @ANYBLOB="c51879b051cd37a2c76cc23baf9680bd9fc568bc3e74077e426d3cdf92b92b3dc9c791088284ae081a0a9c4173040e6ceaac1afd1ba4b691206d0e90423a2999993d5b3c65c393f3fa072dfc16c3d45ffd17b6a86946202cf902c7528165806c6bf5363507f428a3d3786b9c713973cfb083a018d0ff62b85f9c5ad09842919b6d485f7b204fb8a87a4cf0d4109b3dbe26d6e12a61a901447ae74c25ea4c2d", @ANYBLOB="f607abb947e4af1491263ec35e635045d42eb962bacb50727245746b2ae97f48ea2fd1"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r13}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000083d182dc000000002976e4140263e8e394c9c800000000000000005bb8f5718509958f5e415a917355e318a33de61c7bca8753d1285344459e7cc36eadc508180e92b4061a76a9399c37bcc3704ef67ff2d1913ca7be0c139c8c68051a0398527370f67c03205c9540926da7f0216878726b8f54"], 0x48) 1.592046746s ago: executing program 2 (id=4197): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="df", 0x1}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001900010025bdf000fbcbdf250a801400ff01fe040036000008001f00"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x240408d4) read$alg(r1, &(0x7f0000001080)=""/4130, 0x1022) 1.590749232s ago: executing program 0 (id=4198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x500, 0x0, 0x1c, {[@window={0xb, 0x3}, @timestamp={0x5, 0x2, 0xfffe, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000000)=@setneightbl={0x30, 0x43, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2}, [@NDTA_PARMS={0x1c, 0x6, 0x0, 0x1, [@NDTPA_LOCKTIME={0xc, 0xf, 0x10}, @NDTPA_ANYCAST_DELAY={0xc, 0xc, 0x5d37}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20050}, 0x40080) 1.588284153s ago: executing program 4 (id=4199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0xa, 0x300) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001780)=ANY=[@ANYBLOB="980000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b00010067461e971c700000000002800400120008000a00", @ANYRES32=0x0, @ANYBLOB="140035007675000000000044002b8008000800"/28, @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB="0a000100"], 0x98}, 0x1, 0x0, 0x0, 0x24000804}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c2042e5d30dd35e1d6c98ebf73d6fe175af41701d1e14a37c08e969cce711ce0ca2eb851cf9afba55085d3064e7089dd7656769e9c6daf10b42c8b1a9b3ec250edfe55e1e100ae711ad2dfd2927e5f6205f1c02ba72f2c09ec4090392cfe36f5b60ef484952f917e47065b0bf429a11085c6dcaf2b69f97ae4aa5469421b37f", @ANYRES16=r3, @ANYBLOB="01000000000000000000530000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00000000000600110000000000"], 0x44}}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e22, 0x3, @loopback={0x100000}, 0x6}, 0x1c) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1b, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000400"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r8 = socket(0x2, 0x80805, 0x0) listen(r8, 0x4) sendmmsg$inet_sctp(r8, &(0x7f0000007300)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x18, 0x10}], 0x1, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r9, 0x1, 0x34, &(0x7f00000000c0)=r7, 0x4) ppoll(0x0, 0x0, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) 1.529124218s ago: executing program 2 (id=4200): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) getsockname$packet(r1, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r2, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e, 0x100000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0xfff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r3, 0x1}, &(0x7f0000000140)=0x8) r4 = socket$phonet(0x23, 0x2, 0x1) sendmsg$inet(r4, &(0x7f00000034c0)={&(0x7f00000030c0)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}, 0x80) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socket$inet_sctp(0x2, 0x1, 0x84) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async) getsockname$packet(r1, 0x0, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) accept4$unix(r2, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e, 0x100000) (async) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0xfff}, &(0x7f00000000c0)=0x8) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r3, 0x1}, &(0x7f0000000140)=0x8) (async) socket$phonet(0x23, 0x2, 0x1) (async) sendmsg$inet(r4, &(0x7f00000034c0)={&(0x7f00000030c0)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}, 0x80) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) (async) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) 1.449815342s ago: executing program 2 (id=4201): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) recvfrom$packet(r0, &(0x7f0000000040)=""/140, 0x8c, 0x10040, &(0x7f0000000100)={0x11, 0x7, 0x0, 0x1, 0xfc, 0x6, @random="3f6f89f2fca6"}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000001740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001700)={&(0x7f00000001c0)={0x151c, r2, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_SOPASS={0xc3, 0x3, "993a8849872141fde6a8b6de2bd78f4ce76ca26f7c48f340695edd0f49bbaa6cca192ac17d9e089590f0e20c3706b0e1b3c3607d2ca5216a66328def649b41be2822073346561093a4d17476dd327e3ca5f30b681d83938c617ba74dd29e34f57ce95d992db099005e5787001b1d897463419506babb5ad90ace01b7cdef840e5b8076d49bb77ff901cefbee7482e2b8639b843526a64fc4eb7e7e37b1baa536dc43d1eeade361c60c5480fb902f4f5bcf4796c3c084b3c9010b728dd74cca"}, @ETHTOOL_A_WOL_SOPASS={0x94, 0x3, "23e2f17459084d3637626f57711e778d5ebd0f1f9396afd1f1b5fd1ec7c39e416e426826725ad08faa31471cea434e4fd8887eb6722bd8d5617778d8888b0e558e85c7e3e674ff8d044cab546c475ab38531e74114648b2b19b5658a13ed5193f6136880e2ffe195e896a14e832da79e363ee5c71465c7b024c9031b787213be25f25e3a14a5d71c06426e7783e92ecb"}, @ETHTOOL_A_WOL_SOPASS={0x5f, 0x3, "f6bba933c3d972a7e4386023fc2cc5bea7f47fe807fdc3930d261a3b27eb161c8e81caf86e66fa5e42f0ee29329fe41b94912216faaa446d5b94720b9bdca090abd64188e19ea8b0a98a34ce733074cabcc0433f8f0b25b55959cb"}, @ETHTOOL_A_WOL_MODES={0x1f0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xeb, 0x4, "b472625aab01a32ed4d32b145e69941dffd22c9d064039580eae48dbdf1802151692a78803b0c4628338230df6f167f87e79071bc43efc3494dcd04daf2c56968358bafc3a5dc6d668c2687aa0106c52fb57ba37d449499b1437378ec9c4b15beda920c30838ee67dc89a22e5fcc79386d291e74e6c6dca800cc714f0cb0f6985f4d87cd4bf51a2f7be2242d2ca18c5a0ad408629eecb321278510ab2fb0cc17cd22549432acac31c7778be8115990652dd38030d2e13e1cb178b4b1a406b06c51166ede547e2dd4aa11cd2d1ec12fefd8c29c5af539bb7968bfe209f2cba17ae522f59efc4e99"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xc9, 0x4, "006affec44a5ad330dee5966eb231d00e2dee6ffc2810e752476e99efb625cec610f81eed16fcd8ea91a0e87a469f4535202c8fd76c947efe865c000ccb03f7d34966d530c692e0abf4cea2d332aabb2387c8d9a0603d7bc0837deaccbe664681c6533de63860f16477b2487c67e823b801077f2ebde31b326b060ac6cb622c1911b48f05a80f781f4f10bfcea78a183b07f2d1dcd751a4195226f59ec69f0f9403a364ecf2347e91477e17d94d2795e35c725a4da35b0da6f93a40b04ef87724158c206df"}]}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_WOL_MODES={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}, @ETHTOOL_A_WOL_SOPASS={0xa3, 0x3, "13af95cfda7ba73e622422ac675c90ee049c591b4c51988397c21f6d3b9320f64d145d5d805301c287a56e197cfe0b2e983ea0226f13a086d3312caff846e19ca5ed5af0b232e5a7005c908ed6ad55665061c51a6240512636b0d969eca5a27474e1263e6628185d91b62e4e8232ffe393b016f8d5221a1f2ed9b4877b61bec6b025c0a82f24d88b7463b7e7b2ff4987e8ef8647152bade71ec614233d3942"}, @ETHTOOL_A_WOL_MODES={0x4}, @ETHTOOL_A_WOL_SOPASS={0x8e, 0x3, "9e58dbb14d9da3ae4609957c53a800cd2979d64d4fea588e782f5017b82c0d6c4f151d0d2c47d382a0bc77d0dd75f8c8b6e35608f61d5e041d2115ad113184daeb08d66c439c7b0b60544695e47eb648dddf89692b117d215b5ea38b1633cd857d2387a5647b49247dc3ee9bab961624c07da1a0180957c37f620e18f31368bab7be6a8a2d9620926287"}, @ETHTOOL_A_WOL_SOPASS={0x1004, 0x3, "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"}]}, 0x151c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000017c0)={&(0x7f0000001780)='task_rename\x00', 0xffffffffffffffff, 0x0, 0x200}, 0x18) close(r3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r1) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x38, r4, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x46}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004c880}, 0x5) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000001a00)={&(0x7f0000001940), 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x3c, r4, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x4c}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000001a40)="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") r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001b80)=@generic={&(0x7f0000001b40)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001cc0)={@ifindex, 0x32, 0x0, 0x80, &(0x7f0000001bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000001c00)=[0x0, 0x0, 0x0], &(0x7f0000001c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001d40)={0xfffffffb, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001d00)={@fallback=r0, r5, 0x6, 0x20, 0x0, @void, @void, @void, @value=r7, r6}, 0x20) close(r1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000001d80)={0x8, 'vxcan1\x00', {'erspan0\x00'}, 0x1}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001dc0)={r7}, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001e40)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000001f40)=0xe8) sendmsg$nl_generic(r1, &(0x7f0000002400)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000023c0)={&(0x7f0000001f80)={0x434, 0x17, 0x10, 0x70bd25, 0x25dfdbfc, {0x1f}, [@generic="b6a3480173d838d59958aaffded987919f16fcd0fc150d4e1796ea33012ac60288baf5bf24284f64a1b72a6469c7d418e392833c5def27d1e153fa91cd297551510f8ba76e14ec1d3718a6fbe2170177d23fd243b13a8061c4d6c6377e9c3637d4a9844fbdc08e7fcb2ab6f8070c8ca32e83b2b8a645184301d3d3c5e5f16c8ff2f698ed3af95cf521eea1bda3a460c3a64d3a7055e190c7980ba69de198096c08cb1935cc41fc813f44abe049d7937c57f8ca8c17ea2ac6ff46ef12785e078bf36f104d749e458a4a6b0fb7d789ae80e575b0e59859da6450ead0537848b4c4a88bcb326daf83", @nested={0x14f, 0x12b, 0x0, 0x1, [@nested={0x4, 0x129}, @generic="0acc510300450e1d12a3f558d652a24394af45a3deb88b8461db6392281951223241e18f7e1edf98c7aae8b58a3ee90eba87a63c17ad8dc8d04fe5a1de476de700c8b92e34a462126a50fc269b5837d0f930b4ff01be954cca99260a99f5b267e0a8926f09e30fd5c8c598b22b16dcc8fd67715144fbc20764fc9d919ec6c6609ec5b31d1224bbf0b58bc32f13c11bca59d1244224df3a321746146ad2505c526e0d501399403f4f2e9de5d7d0a8b6e0beddb56fe86388f2ba51dc00120f", @typed={0x14, 0x141, 0x0, 0x0, @ipv6=@loopback}, @typed={0x14, 0x12f, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @typed={0x8, 0x74, 0x0, 0x0, @pid}, @generic="fcecdcbaad8a2c3ddb46d0a048fca6904d7c015118b8d207c00ffdae133766fae581121e9c7f1984c61725a547816ac5badedecb4f4d2a505c163d0f3cef14ba30f69f6727766fb9d185bd3dbc9aa4256c052b14259a75f49b"]}, @nested={0x10, 0xf2, 0x0, 0x1, [@typed={0xc, 0x29, 0x0, 0x0, @u64=0x100}]}, @typed={0xc, 0xd, 0x0, 0x0, @u64=0x1946}, @generic="106823116b06b3c8f5088d9a79825836596f13e3c296dfbec0e0ea901caae0afea92f427504e5ebb65b4685dc9414c22574b7bc0b0f373ab0e4f44ec17938639bea6231772857b93f9191bb515a47b685e6d6d07d60036a7da032d23af2e4090a3b783540da56e", @generic="97b1b3db6f9ff226139bbb74c424789410fb0e4f637171ff9bf96d1bff596b76156ec328991289be7a7843009808ca4a66c89af01e2385da992b0b5d8aab37f00d74980b1af867021f95432eb61fa0a29811dbe59a0821816ab37ca93514cd112795f00f8817849d89500cec73dcce2db2a6f951777af990ac349c5c14c4575296f79efd53b2b58df9f8a985f619eb5b9b017bdb0f3dae1f9ec0c70c94e6c2cf3cfa2b71c238159e31f36150a7910f63ef8d6333b08cdabc827d33bfbc7a17f8b0e4c0d0aae26e7fdebec07759f8b1181c49055cb156", @typed={0x8, 0xaa, 0x0, 0x0, @ipv4=@broadcast}, @nested={0xc, 0x4a, 0x0, 0x1, [@typed={0x8, 0xc0, 0x0, 0x0, @u32}]}, @generic="6570deea9b9a210f41b9342806bf03ef08e032754138a14c95cd2e74cfd9c4be4bd5faf2564a4a1b116894e88b6678ce603a775079db1715b644816aa21392a79cad7df21dabd278bc9e88e14295fc8eeb2a72f7fb4ec10968989245dfa93321cd621e6e466e29346252a957f735380b2f", @typed={0x8, 0xfe, 0x0, 0x0, @uid=r8}]}, 0x434}, 0x1, 0x0, 0x0, 0x20000081}, 0x4800) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000004, 0x20010, r3, 0xa7c0e000) pselect6(0x40, &(0x7f0000002440)={0x4, 0x3, 0x5, 0x3, 0x8000, 0x1, 0x5, 0x5}, &(0x7f0000002480)={0x1, 0x8, 0x4, 0x80, 0x5, 0xffffffff, 0x6}, &(0x7f00000024c0)={0x7, 0x7dd, 0x9, 0x7fffffffffffffff, 0x3, 0x13b5, 0x0, 0x1}, &(0x7f0000002500)={0x0, 0x989680}, &(0x7f0000002580)={&(0x7f0000002540)={[0xe6]}, 0x8}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f00000025c0)={0x80}) close(r9) shutdown(r0, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000026c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000002780)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x34, r10, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x4, 0x3, @l2={'ib', 0x3a, 'vlan1\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.364006162s ago: executing program 0 (id=4202): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000070000000100010009"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85001000ae000000660000000000000016000000000001009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) 1.357052282s ago: executing program 2 (id=4203): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) socket$inet6(0xa, 0x3, 0xff) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000c40)={'wg2\x00', 0x0}) sendmmsg(r2, &(0x7f0000001800)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000ec0)='O', 0x1}], 0x1}}, {{&(0x7f0000000c80)=@ll={0x11, 0x19, r5, 0x1, 0x81, 0x6, @broadcast}, 0x80, 0x0}}], 0x2, 0x1) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000480005800800010065756800070002"], 0x5c}}, 0x0) 1.261442595s ago: executing program 0 (id=4204): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x700}}}}}}]}, 0x48}}, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 32) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) (rerun: 32) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x40000000) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async, rerun: 64) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async, rerun: 64) listen(r2, 0x8) (async, rerun: 64) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e1f, @empty}}, 0xfffd}, 0x90) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x7e832, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) unshare(0x24020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180500000000000000000000000000001836000005000000000000000600000095"], &(0x7f0000000540)='GPL\x00', 0x8, 0xdb, &(0x7f0000003e40)=""/219, 0x41100, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 1.25096254s ago: executing program 1 (id=4205): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r0) recvmmsg(0xffffffffffffffff, &(0x7f0000008200)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x58, &(0x7f0000000500)=[{&(0x7f0000000840)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x9}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000540)=""/237, 0xed}, {&(0x7f0000000980)=""/51, 0x33}, {&(0x7f00000000c0)=""/77, 0x4d}, {&(0x7f0000002d40)=""/4115, 0x1013}, {&(0x7f0000000640)=""/55, 0x37}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x6}], 0x5, 0x12002, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f000079b000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) socket$alg(0x26, 0x5, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$tipc(r2, &(0x7f0000000a00)={&(0x7f0000000a40)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x3, 0x3}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="aa", 0x1}], 0x1, 0x0, 0x0, 0x45}, 0x24000054) unshare(0x400) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r4, 0x104, 0x6, 0x0, &(0x7f0000000180)) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000680)={@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x0, 0x0, 0x2}}, {0x0}, 0x0, 0x40}, 0xa0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a80)=ANY=[@ANYRESOCT=0x0], 0x10}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1c00000000000000100100000de815000000", @ANYRES32=0x0, @ANYBLOB="80ee3600000000000000000010000000000000000000000007000000"], 0x30}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000227bd7000fddbdf25570000000800030008a27561c66d22e71fcb7ba4ee1e34472b3b8e575a91292e7b6f5a85780ca5b597481472a50b38bef8a6a43eb692fc26897ed9d4d959608d", @ANYRES16, @ANYBLOB="0600950008000000060095000200000006009500080000000600950007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20}, 0x4004000) socket$inet6(0xa, 0x3, 0xfffffffb) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 1.238217293s ago: executing program 2 (id=4206): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = accept4(r0, &(0x7f0000000000)=@isdn, &(0x7f0000000080)=0x80, 0x80000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x52, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xe6, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)={'ip_vti0\x00', 0x0, 0x8, 0x80, 0x6, 0x5, {{0x6, 0x4, 0x2, 0x4, 0x18, 0x68, 0x0, 0x80, 0x2b, 0x0, @empty, @private=0xa010100, {[@end, @noop]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x4, 0x5, 0xaf, 0x57, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x3f, 0x8, 0x2, 0x8}}) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r13, 0x10820, 0x400}}, 0x20}}, 0x4084) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8ad8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRES32=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r13, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000029c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002980)={&(0x7f00000006c0)={0x2290, r2, 0x400, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x40}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x10}, @ETHTOOL_A_LINKMODES_OURS={0x21a0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffc}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "448e0eacb6e23d44297c142d1742847c58a641e5ec2232c983a397dd2f5265709a7b63c37b9ae153bcc29868c0c3ac6b9428b7381bec802784d035d067e9ad2a91ca10475c81ec16f1ebd611465641d2eaec36d4a191a6af96ceea9e0f7be3ee1093b738e92aaa52c0643b7297ca823f6a10d00e8a3d88d80c91d5a7a7087af1bbe21cfc139b04a7717496c0265eb2fcb99fe8fb3e928081a9fd8c297fca3369c795652bbfe94e77d03315e285e7b63de46e5f733a573cde9c2328b50b425e92489a637d0d2ee623928678bb399c2ccc15ee3c20d44fa06aec48ca9000cfdbae6bcf7f3669bb909d7dc9451477503b4d063189e50724f435c02fb1b5d33ae3e22fe34d81dd05fac58ad539a9e86b85eda4974e2fc08673e36cef4d23e7b30109ee9378ef003faef6594b580a09e03349e45627167027a1873b6998d4a828df549f01bbc5b740b60f1e2f87959be958c59c42ca762ec416eaba72a9d094aa5379dd8b2d4c29b395e6d32f98c2929e7793103285d96ef8ddbd92f73f767cee65c554c2beee108a51dff4cc7be6089aee303e926dfb954adf6d1dbfe7df5d54d80e57e7116015f397caa17088cd546e1f5f6c4b38a3e076093429584891f2945e0aadd90c01d1f755b54347ce18f6fbeb948c1f0ae002d1ee5dfff0ec05a01e101e3d748fb61589df1addf146ab185a96b6ef2b414cdbf0bb7b4b32fbfc6abbdf054c0f740edc09c84da00f3749c12d7d9e95045dfdff6e0d9e3be0da8f11ddff7653b021e75fd3b70cea434cc9953232c979b5eea6f8bea235b52992cd1f7c91af3a85e410286274d937bf443444cc329c1d44748689905925b82d43e5f6bee59d54abef80596b084067cf9fc1121827ac201e701a6e5b7d188a6b0dc814f80f110e74f60174504c997f2b5fff39295af9ed0bfad9db91b2d5af2a9de3cfb5c57ffa4edac97c8160d058f3d02e359f26c2fa8dbbb2f1bca22e998c0f9748375c2ff2238322cd8bc9c99964cbe05b74d4c81b7de8973f59d0614618ef752170eca676a81b1e7b077860d196b01364521ac9be2570ce49950a89186a1bc6754cc35d4b5457013629678caf611580e420f9c473ac83af6619e86571c9c5428c20bfc539f8816a2be592a024b49b132c3daa15658fd0f537003da454b5d34d9870e19e98f8eb5761895c1ffefa3e091e5ac997e1c36beb341d983409e975186f27ae617f6ac5518b8355e3fbf2d62b507bac8934a2daaf06cc4e752fb4f3877413221640990e70591c52d663e37516a84741f467368b662815d8880217ff0827197ef9fba9d1b21a92a0d10536bf38cd287a61c2c5c5088d926c1a4302c365d98919034d27d9e46686a2765d324ea235bfca6d6178fdf21baa485bc1d8db47cec13a288bda6bf9219038c52ec2fff7100fa12b39e3a3b0685b759620b9760e673c6071b1cf8686c1e160acfaa0376f3494ab2fa884f83777405d91e5f7f30715422ba69d80ad54a7bcce2cac3fe1bb3e78b44be444d9843c1a43929111b93c313c5be88af546e67e161a1a969a60eca72e27d0c9da45c7471d05a752f9f7a8c5fd5f16a756d247f5fd6b394440323645ecc64365dc67c5c0992291c4d582e70950f2ff39568a3983bed839b87c7e88b9a6dc9ccb2e3f062ffc520700f6b095923af77c794c46b4c99def0f48464c44d45ab59b3d6f2f5b4273b759fe491bb5f6b2c5ce0cb1451e7396d2d3eae2c3d67e00363922be414840e39e2de26afa629b44d0d9e2577972426744c78721d8157129ba273486b4478ad466e8efcba5cfacd58e9c7a13ad2032c92ccd89f0e7acad8eff5bff6d827742640ff93909377fa791c39e532ca6c6c2400af6f6b0d74e7ce90b46238617edad771d15459cb5022c2b1e2bf40062548bb57a142841241d8f4c061a0efac48f7c899f3285b161d5386b8b722520db7bf1afa9b509687adbc9bec1d3c32a053860de62dc020982bf5705b1ff3ce74792aa5239474560e9ae24b366578e0a4bc139c0632dee8cc916f99a457595b786a0908b1b50013fffceef5cd2d93fe4377bd162d2f8f8bd5ebb6b83bc350503c1bbdf9757b34bd5746c30a33cfa70e6614cebc20b0288dd6938eaa11677d2302f9b6592ba02105780a3aadd39380f6dbea2881aef46df8729002eef22b6d10638ced92aa56c1eae0373f8273750613f1c3ab39ee36fd04d56c135c7924d83d852e9fde5da6d2c88ac6d3f71fe2516511ec1710b9ccbcfd1f8a610b61297208f7f397ee63d4cd84493c512cd56580f98b1cab0004b9ace9e508c5aefbdb7e994818571dd3699d2bc21956ae49a34f61d5853bb4e418facfc708f1ef4655f53717eacf52f0a0f1be4c4c0370c519643156b83acede4cb58fe9c1bea809cf04dd4f1cad853dbf9c84f787145206b0e4fda7fcdbd96336e4af9e7c5cb4f72792f112c2d793c9b16392bf4a4a831c622116cc8815401291c89cdbc7dbd22a27650fa20e40bc3fcc47e066623dfc63de2a611375f97b79abaf8c0ec13dda259b2855621883f772a388d2bcbfe5ae38a602600617b429184a3b53a63fa26bdf54302a65e90d18572ce529324d4c26c00b40cc52192cc9c13bdd726eb48b2104be07c8fc36129b5d223eca7e669cfcbde471dd4d60a0de5ce2c177e13409aa069d06bbcb8e393dcced58bb64bfe1a5a4bbc256c0bc4ea80d770a30a3cc8272d82ee619de41b93c5453740844aec792a3b88e56a5e2c2413454fabd0e7f0ec56384596a66af73927020d0c7c1c2b67f19aaaeb11646d54788660ab2925b1dcd193902f2b56707d674b3cd7c4d4b0848d2236a4354a8d0bdb199d1fbbea4ba95a31030959ff73d38e496e7c727ce131237a30809cbc59a46ef0eb50481d5fbe243cd29a2cb2c8eab3079cf9f88edc70af7b9997bdd2f2ea117023f5ece7378116189064e7bc41129944cf782aa7949d62b8662a63f34952dc88fbabbccb0e75d8e3d3e53b608625879e231458c99625eb495b4d3b324b7c19fcb2aa16a71559f281af4d56a2af35b251eddb1af10c67d1f1ca1088f76b82774b9f22e17780c5ada8ce95775509aac5ed03f850787b3a2553983f805f55262f911508382b5ba38bc15b1765a3dc13615f1d943f96f9be42ae47dd47701af884c2d0ac5d09771b25a9843f6c97d54a8a12591ccdbe8f9577068aae887e12bfbef7f8384754f3a5e9ec76a722e13fbd16eb3581e37c2158fbf0751875ddac60b859a16d198d6662cd13c805726695ad8068b83ac9b9638029328bac1afa705e1e225295e1be592be329ababc4ea4b2f8527a94ee990906848392afd2c6810433cb5cd9d35a764b73fd809614b47fe0d4fa1060111dfaad4b2bb89e41d9af83dbf4297e3016ca7387f9eceb16fc472c3a65189dd761402f8e353a7b0afd1e540b95607283f1417c95c15f3716e18c8f1f4459d3246b639edc561b493b60a22a5bd82c529e4982b8c8506d02803e1880bf9537dbcefa2fb2682d2df30ee70b1c1e28e769ba87f309a27131a04962b04f6c7594d86f75b23d167e2cef14b30815621fab5645996e5bd1765672892a412d805f6377d8334cd1de072d2e1054f06530265960668d468789040871b826c16d462c6661e8a45f558fd78fed96adfba0d34e013e15f7a953414ba62b7038a77d8aa5af9166a9243e64e19cee1f651f6274823476539353aea9a4b4283fc9f3c9e8cab323f1917d987317059a51da5ec6cfd3af24e1f719ecf108556b697e585ac455b3c9072dedc57b418358b8462ae8334c94675c5ad96191173b78e6df0e47e8589cf31d0d3b17982c2405664b86ba579eff159fe542b12d19947f0f43d2faa43e0961ef37abe16d5e1540b5a4e5da107acfe946404fbeda7322035d39da56313cf6a908cb4e6018bf224a2fc01ad7c42667c2ffd7820d07a3577454754da464424f306dcd5d00b10b0a5e787e8cb42691afe70a8ded759de3c8a3785e26268b21ffad69c6292ab26d81ecf8c9c659b963373c32701611a0181b86a71402a451f8dfde0a0ef100c3a9e69eb36154936cfa393406a5d372cd3c5c0f0c2360e0c127ea52ae25b8d36db1063b761a900f5f82e184ccd8079a79bf976cb0cb2526cd5b674bc0782f1c8019c3170b00744a3ce97f11d4ecb09bf8160c3fa76cf9134abde1830065516df523c70e4f77d332134522604d9358bf1528c238b9e63c5ba477ff10239a929dece5b7d648bec7befecdbc4988a9bb33db5a393c3cfcc1104f2918974a966fddf404fe3cf07b8de5eb91af8a9a5a37e43177e6493bac4f2a2c1e099c3e53666e6322fc82e4f69f997c8094ed79e07615612e0d8a8c910f4c495e7d6ee12a304592bbd6d78a736a344f628bba255ccfcbabf40ddb4fb91922cf5e3b96b1f4bd3c8fdcf73039bf3964c40d5f1567786ac2772a1c6fc8f48ed4f2c07201774387b189ea5a6c63fc9891172a9840dff4bd31e76632ce624777d63bc5e4ca392c3d8762099d3e0abc7bf864de898d4369db60582645434fb28dfeffec7ae5bb091b258d84f41b94b6cf7da57f2435165413fb02a95c06d83341cc0cc6792401cb2bcbc61ab3241308bd0c3f439ce1073d7783a63241115491198c04b286b367667f26755eb2f17267e5045cd39074f213f800f53f7dd50c0ec3763e7884cc87d561d000657d5c94b256a6b92b23a98181149387f7a20bc6c7f133d785f2742525d1e373867ec33f726b1fc71937b3bf20e90ac8c4cf341164d99b71460b947563cce87ade3e2d9b5a80dd5927113b7e43f1b4efd7515ba577539da7133dbce2c4892bcd717894ee45a8a56692b77c8f64c91595529dd2ba8a2313b316c7f207092f6f9f79432b882891213962f2273a4f3dedaf8d8044520d60ddf144ac939c347a9f1a4eb4f8a4a455eaf92920819b8e7be861d994004ef5a780a58fc1d26acf3771bc18e4c2116842915eee4b45fc1965a58b6d7773ef483f8a57a69f5d693659f7ad79595c21c8eb566583c45b902802673c718e5a5e7b7b2fb24e5690ea4371fd24bc3dbd5cdf30d6cb60e8d25fd08476f8c2ae2742c11e0b1eb84b5734242f01793fddeaba9e76e00183cf8b2dd059ad3dacb2bbc00082ba48dfb0724a1f0edd1fb6f1bfbf9f4ab53d10d0a5eebd480e50611779c9ea84bceb52c35f9ee4a264e7dc6a36523500d02e4c00b7ad68e9ea59db0c0525ed91f203d401a8a6cfba6bd17c2a185624ce62863ec0ed5ed6c4cb63ad4492e4a15b507f7509a41bf78bbdbaa6bdc9f38b7234db406a140c0706e1b936be8dfd337948bb6b2aa7d5134005d2bc45f80cd786ceab4dd0a1c718012ee7eed74719894e7e5733a884622990d7af289b82306b40a458e133e2c734a6b22df2bca90eafc7db42e0797f64bb5d9ffc309d23011de920aee6737cf4fe4e84a670c315f09eab4dad4484faad8bac5a91bbe6b13fffcd4d4ebba95294bbb7c533ca51228bd41a8ba2883726f19cf6cefbe0ae2513a514ef8de944a296421ff40c9d9bfdbe8315893dc1dd688b508d5863ddcdac2c20914dd81efc44d0a3782a5c89d8310e5378d85620c025dd7f4c5d70c89e3b77910d590b3b97b0d98fca732090b03b7d2fc03fb881d336512bbf4f9991caeffd757ea48790a077e81dac6b950bf253315729294818fd4cd88522d46331cb9cc395d8dfdb72d7aa0c9e28e558608ef0722feb39d5734fd7aaf687a0983b1a6f7faaba77e1596ae2d3a01730553f6cfd9f914931e8f574c02731c3b100e2fb614d549ab0f47372150de093bf799030d"}, @ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6dd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}]}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0x63, 0x4, "06b5565cedd023b776240d6b2e38a5036a2ba49f3182f1b0e9fa2840b5010ee9a6b051e14ab96b60cdf6eebcce15f6ce54d999e359219cd4cf7071c92dfb04509ff420f470c4826ecb53cfb76d97debe82ef241f8dda029d67dd5ef3ddebb9"}, @ETHTOOL_A_BITSET_MASK={0xac, 0x5, "0b4b986d644c989f10a064e2c08d2bb7f28b34bf41999d76666cb437010088430ba7cc8650cb6318b293670170c7feabb689efcc1d55f86a255544aaf1f22926adaaf36645232a7cefc25df7efdf3eddfc69eb8eefb85fc7199a9e0d1b431b40909c623a57f1fce7e8e2e0a6559b391fc7e184abad22d59c653cb7e471196db2b8fdf2e6653b590553ea106c04fa55be9284fb4535df67f3c83b719e4c44d59b70b8aa19166d0b4f"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_LINKMODES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKMODES_LANES={0x8}]}, 0x2290}, 0x1, 0x0, 0x0, 0x40}, 0x8000) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000200)=0x91f, 0x3) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x28, 0x11, 0x1, @private0, @mcast2, {[], {0x4e22, 0x4e22, 0x28, 0x0, @wg=@data={0x4, 0x2, 0x3, "c1ec20295ad01efe923f724ddb2e065d"}}}}}}}, 0x0) 1.163838461s ago: executing program 4 (id=4207): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000700000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d0000001801000020786c2500000000902020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x20007ffff041, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newnexthop={0x30, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x4}, {0x0, 0xfe}]}, @NHA_FDB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r6}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0xffd, &(0x7f00000004c0)=""/4093, 0x0, 0x1}, 0x94) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140e00000010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r7}, 0xa) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r0}, &(0x7f00000001c0), &(0x7f0000000900)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000095000000000800000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 1.134366537s ago: executing program 0 (id=4208): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)={0x20, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0xc, 0x1a, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x8}]}]}, 0x20}], 0x1}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) close(r0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x1, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40094}, 0x20000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xd, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c000180080001400000000324"], 0x140}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="8400f0da82805f", @ANYRES16=r6, @ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c010) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000022000103243d7002fddbdf250100"], 0x14}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r9, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x20000004) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) 1.067027064s ago: executing program 4 (id=4209): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b3a, 0x4) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000000c0)="5c6bada5", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000004c0)="99696a50f3", 0x5}, {0x0}, {0x0}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40001) 832.049306ms ago: executing program 3 (id=4210): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000059c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r5 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x40000005, 0x26}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x80c0}, 0x20084024) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x54, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x1}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x10}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x81}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x6b}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x6}, @NL80211_ATTR_BSS_CTS_PROT={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40810}, 0x4000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r6, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 728.209658ms ago: executing program 0 (id=4211): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) syz_emit_ethernet(0x11, &(0x7f0000001280)={@local, @random='\x00R\b\x00', @void, {@llc_tr={0x11, {@llc={0x4e, 0xbc, "c7"}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x12}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '.%(]\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x8040) read$alg(r2, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x5, '\x00', 0x0, r2, 0x0, 0x2, 0x3}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x6, 0x2, &(0x7f0000000040)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r4}], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, r2}, 0x94) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00\x00\x00', @ANYRES16=r1, @ANYRES32], 0x4c}}, 0x4000090) 713.568728ms ago: executing program 1 (id=4212): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x8c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x64, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xe5}, @device_a, @device_a, @random="153e00c08ce7", {0x1, 0xbe}, @value=@ver_80211n={0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, 0x40, @random=0x2, 0x0, @val, @val, @val={0x3, 0x1, 0x28}, @void, @val={0x6, 0x2, 0x97}, @val={0x2d, 0x1a, {0x300, 0x3, 0x1, 0x0, {0x40, 0xb, 0x0, 0x5, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x1, 0xfffffd13, 0x8}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x8, 0x40}}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x8c}}, 0x0) 644.031946ms ago: executing program 3 (id=4213): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000080)=0x7, 0x4) (async) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x40, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r4, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10440}}}}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000043000000", 0xfe60) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01"], 0x3c}}, 0x0) 643.208117ms ago: executing program 0 (id=4214): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10) accept$netrom(0xffffffffffffffff, &(0x7f0000000400)={{0x3, @null}, [@null, @bcast, @null, @netrom, @bcast, @bcast, @bcast, @netrom]}, &(0x7f0000000380)=0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x3, 0x6, @remote}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000011c0)={0x1, 0x58, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000012c0)={'erspan0\x00', &(0x7f0000001200)={'gre0\x00', 0x0, 0x10, 0x40, 0x787, 0xfffffffb, {{0x1b, 0x4, 0x3, 0x1, 0x6c, 0x68, 0x0, 0x3, 0x29, 0x0, @multicast2, @broadcast, {[@noop, @timestamp_addr={0x44, 0x54, 0x61, 0x1, 0x9, [{@remote, 0x5}, {@local, 0xffff8bed}, {@rand_addr=0x64010102, 0xfffffff7}, {@multicast2, 0xfffffffa}, {@loopback, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x4}, {@multicast2, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc37}, {@multicast1, 0x5}, {@multicast2, 0x3}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x58, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001d40)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001d00)={&(0x7f00000013c0)=ANY=[@ANYBLOB=',\t\x00\x00', @ANYRES16=0x0, @ANYBLOB="200026bd7000fcdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="fc00028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="fc00028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000700000008000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2c01028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400020000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="6802028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004003e20000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000b00000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000500000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040002000000080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000c0000000800070000000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400bb0e000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004001000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400c700000008000100", @ANYRES32=r4, @ANYBLOB="ac00028038000100240001006d636173745f72656a6f696e5f696e74657276466c00000000000000000000000500030003000000080004009419000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004002000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000104000008000100", @ANYRES32=r5, @ANYBLOB="f400028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000600", @ANYRES32=r6, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000800000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400000000000800070000000000"], 0x92c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40014) syz_genetlink_get_family_id$team(0x0, r0) recvfrom$netrom(r0, 0x0, 0x0, 0x12000, 0x0, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) socket$inet6_sctp(0xa, 0x1, 0x84) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000040008500000011e8ffff17110000e4ad6db9f73241a3cca984b725c0a9fd8d4a", @ANYRES32=r9, @ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x48000280) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x0, 0x10, 0x0, &(0x7f0000000280)="1d5ff8317ca952a2ba4bfee0f003876e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) 637.595671ms ago: executing program 2 (id=4215): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x32, 0xffffffffffffffff, 0x739ef000) socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x10001, @local, 0x5}, 0x1c) sendmmsg$inet(r3, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000007000000890704"], 0x18}}], 0x1, 0x4880) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r4, 0x0, 0xffffffff000) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) accept4$llc(r2, 0x0, 0x0, 0x80800) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf250100000008000100ffffffff34000480050003000100000005000300020000000500030005000000050003000500000005000300010000008a55049d4983a6200800020002", @ANYRESOCT=r0], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 604.562123ms ago: executing program 3 (id=4216): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x4}, 0x8) sendto$inet6(r0, &(0x7f0000000240)="81", 0x1, 0x4040040, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, 0x0, 0x0) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x208441, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) (async) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x3) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x2, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (async) setsockopt$sock_int(r4, 0x1, 0x23, &(0x7f0000000280)=0x18, 0x4) (async, rerun: 64) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x3, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x50, 0x2, [@TCA_FLOW_POLICE={0x4c, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x6, 0x7ff, 0x3eb, 0x0, {0xf, 0x0, 0x22c6, 0x400, 0x6}, {0x3, 0x1, 0x1000, 0xa, 0x3, 0x80000000}, 0x65, 0x5, 0x8001}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff}}]}, 0x88}}, 0x0) (async, rerun: 64) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)=""/16, 0x76, 0x10, 0x1}, 0x28) (async) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) (async, rerun: 64) r8 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) setsockopt$inet_udp_encap(r8, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4) (async) setsockopt$inet_udp_encap(r8, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x8001000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0x11, 0x148, 0x0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x1e}, 0xffffffff, 0x0, 'ip_vti0\x00', 'ip6_vti0\x00', {}, {0xff}, 0x73, 0x3, 0x20}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x5, 0x9, 0x3, 0x1]}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x6]}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xff, 'veth1_to_batadv\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) (async) setsockopt$inet_udp_encap(r8, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r10, 0x0) 543.912407ms ago: executing program 1 (id=4217): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r2, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000044}, 0xc000) (async, rerun: 32) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) close(r4) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan4\x00'}) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x3400c805) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000380)={r4}) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, 0x3, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x20015) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r6) (async) getsockname$packet(r6, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={r6}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000680)={0x0, 0x1}, &(0x7f00000006c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000700)={r10, @in6={{0xa, 0x4e24, 0x0, @local, 0x5ae}}, 0x3, 0x8, 0x2, 0xf, 0x40, 0x3, 0x4}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000007c0)={0x2, [0x0, 0x0]}, &(0x7f0000000800)=0xc) (async, rerun: 64) syz_emit_ethernet(0x4a, &(0x7f0000000840)={@random="50cfd195603b", @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x4, 0x0, 0x2}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x2, @broadcast, @mcast1, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x80, r7, 0x13c, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x8000, 0x19}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x25, 0xbe, "d9117bc693c5d88b80757c7dd6e3ed83b534572704159dec2804d90373ad7919f7"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x2}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x2ba}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xd, 0x584}}]}, 0x80}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) (async) sendmsg$NL80211_CMD_LEAVE_IBSS(r9, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r7, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24004844}, 0x84) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x1010, r6, 0xfa56b000) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000b40)={0x21, @remote, 0x4e20, 0x3, 'dh\x00', 0x1, 0x5, 0x6d}, 0x2c) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000c40)={'erspan0\x00', &(0x7f0000000b80)={'gretap0\x00', r8, 0x7800, 0x10, 0x2, 0x6, {{0x1e, 0x4, 0x1, 0x6, 0x78, 0x66, 0x0, 0xff, 0x29, 0x0, @private=0xa010102, @local, {[@end, @cipso={0x86, 0x22, 0x1, [{0x5, 0x3, "13"}, {0x7, 0x7, "6ac253cb28"}, {0x1, 0x2}, {0x2, 0x10, "42a84fba4fa9b07d951c2da7b0ea"}]}, @generic={0x94, 0x12, "cceaf954f044146803bc8b2dd12d0253"}, @timestamp_prespec={0x44, 0xc, 0x4e, 0x3, 0x7, [{@rand_addr=0x64010102, 0xcd}]}, @rr={0x7, 0x1f, 0x81, [@multicast2, @dev={0xac, 0x14, 0x14, 0x32}, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast1, @local, @broadcast, @local]}, @ra={0x94, 0x4}]}}}}}) 374.132469ms ago: executing program 1 (id=4218): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) r2 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000100)=""/106, &(0x7f0000000180)=0x6a) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x74, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x44, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x58}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x5}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_ATM={0x8}]}}]}, 0x74}}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r3, 0xfffffff9}, 0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442ffff38000000000000000000000000000aaff020000000000000000000000000001042065586000"], 0xfdef) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$IPSET_CMD_SAVE(r8, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x8, 0x6, 0x0, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x904) 257.907615ms ago: executing program 3 (id=4219): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'team_slave_0\x00', &(0x7f0000000040)=@ethtool_stats={0x37}}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x80) (async) close(r2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000005800)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4000140) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400"], 0x18}}, 0x4044004) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x3, 0x9) (async) recvmmsg(r5, &(0x7f00000086c0), 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f900"}) (async) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r6 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000003900)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_WOWLAN(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000008ac0)=ANY=[], 0xff8}, 0x1, 0x0, 0x0, 0x2404e0d0}, 0x404c845) sendmsg$alg(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x28c0}, 0x20000000) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x7}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f00000001c0)={r7, @in6={{0xa, 0x4e24, 0xffffff8c, @dev={0xfe, 0x80, '\x00', 0x43}, 0x3}}}, 0x84) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r8) sendmsg$NLBL_CALIPSO_C_LISTALL(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000009475c51f8d49bca83600186ab88d7682e649310ddcd7bf504f8b", @ANYRES16=r9, @ANYBLOB="65572abd700079dbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) 51.89797ms ago: executing program 4 (id=4220): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xcc, 0xc, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x0, 0x0, &(0x7f00000006c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) (rerun: 32) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010000700"/20, @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e30000000000000000000000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r6, 0x26, 0x0, @void}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={r7, 0x0, 0x0}, 0x10) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (rerun: 64) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffff7fe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x18) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r11, 0x1, 0x70bd2a, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x2c}}, 0x0) 0s ago: executing program 3 (id=4221): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) r2 = socket(0x10, 0x3, 0x6) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e22, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, @in6={0xa, 0x4e21, 0x0, @loopback, 0x9}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, @in={0x2, 0x4e22, @local}], 0x68) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x2], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001a00100042bd70009529df2502801407fc03900a00040000"], 0x1c}, 0x1, 0xba01, 0x0, 0x20040406}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) (async, rerun: 32) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) (rerun: 32) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r5, 0x4) kernel console output (not intermixed with test programs): :00007f7dc406a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 258.271800][T16559] RAX: ffffffffffffffda RBX: 00007f7dc33b5fa0 RCX: 00007f7dc318ebe9 [ 258.271813][T16559] RDX: 0000000000000006 RSI: 0000200000000040 RDI: 0000000000000004 [ 258.271824][T16559] RBP: 00007f7dc406a090 R08: 0000000000000000 R09: 0000000000000000 [ 258.271836][T16559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.271847][T16559] R13: 00007f7dc33b6038 R14: 00007f7dc33b5fa0 R15: 00007ffee1b0d468 [ 258.271866][T16559] [ 258.556183][T16420] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 258.687873][T16592] __nla_validate_parse: 6 callbacks suppressed [ 258.687894][T16592] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3031'. [ 258.728809][T16420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.737344][ T5181] Bluetooth: hci3: command 0x040f tx timeout [ 258.782680][T16420] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.794849][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.802366][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.811843][T16596] netlink: 'syz.1.3029': attribute type 3 has an invalid length. [ 258.820272][T16596] netlink: 'syz.1.3029': attribute type 3 has an invalid length. [ 258.884717][ T2932] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.891991][ T2932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.893749][T16596] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3029'. [ 258.915281][T16603] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 258.963481][T16612] netlink: 'syz.0.3034': attribute type 10 has an invalid length. [ 258.986007][T16612] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3034'. [ 258.998921][T16612] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 259.033081][T16612] pim6reg: entered allmulticast mode [ 259.043287][T16612] pim6reg: left allmulticast mode [ 259.060661][ T5181] Bluetooth: hci1: command tx timeout [ 259.153020][T16619] netlink: 'syz.3.3037': attribute type 1 has an invalid length. [ 259.161323][T16619] netlink: 'syz.3.3037': attribute type 3 has an invalid length. [ 259.175507][T16619] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3037'. [ 259.244732][T16420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.253990][T16627] netlink: 'syz.0.3038': attribute type 13 has an invalid length. [ 259.270857][T16627] netlink: 'syz.0.3038': attribute type 17 has an invalid length. [ 259.343192][T16627] bond0: left promiscuous mode [ 259.356482][T16627] bond_slave_0: left promiscuous mode [ 259.371082][T16627] €Â0: left promiscuous mode [ 259.376078][T16627] team0: left promiscuous mode [ 259.388746][T16627] team_slave_0: left promiscuous mode [ 259.396692][T16627] team_slave_1: left promiscuous mode [ 259.403311][T16627] geneve0: left promiscuous mode [ 259.450291][T16627] !: left promiscuous mode [ 259.469467][T16627] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 259.492190][T16637] netlink: 'syz.2.3040': attribute type 7 has an invalid length. [ 259.517542][T16637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3040'. [ 259.633484][T16646] bridge1: port 1(bond1) entered blocking state [ 259.652944][T16646] bridge1: port 1(bond1) entered disabled state [ 259.661244][T16646] bond1: entered allmulticast mode [ 259.696729][T16654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3044'. [ 259.853185][T16663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3045'. [ 259.883536][T16420] veth0_vlan: entered promiscuous mode [ 259.906749][T16420] veth1_vlan: entered promiscuous mode [ 259.916833][T16669] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3046'. [ 259.987327][T16420] veth0_macvtap: entered promiscuous mode [ 260.009002][T16420] veth1_macvtap: entered promiscuous mode [ 260.041124][T16663] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.056264][T16663] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.090447][T16420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.131730][T16663] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.153491][T16663] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.195652][T16420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.253524][T16663] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.271333][T16663] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.296691][ T9920] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.307382][T16682] tipc: Enabling of bearer rejected, failed to enable media [ 260.320758][ T9920] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.334395][ T9920] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.363789][T16663] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.394376][T16663] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.422804][T16677] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3049'. [ 260.440815][ T9920] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.453584][T16683] lo speed is unknown, defaulting to 1000 [ 260.557922][ T60] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.569852][ T60] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.606952][ T36] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.623435][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.673171][ T2932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.685539][ T2932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.763772][ T2932] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.784421][ T2932] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.817281][ T5181] Bluetooth: hci3: command 0x040f tx timeout [ 260.840039][T16701] netlink: 264 bytes leftover after parsing attributes in process `syz.0.3056'. [ 260.851903][ T2932] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.871444][ T2932] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.902767][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.920238][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.953805][T16706] tipc: Started in network mode [ 260.959556][T16706] tipc: Node identity , cluster identity 4711 [ 260.966850][T16706] tipc: Failed to set node id, please configure manually [ 260.978052][T16706] tipc: Enabling of bearer rejected, failed to enable media [ 261.035610][T16704] lo speed is unknown, defaulting to 1000 [ 261.137379][ T5181] Bluetooth: hci1: command tx timeout [ 261.460727][T16721] netlink: 'syz.4.3062': attribute type 21 has an invalid length. [ 261.495881][T16721] netlink: 'syz.4.3062': attribute type 4 has an invalid length. [ 261.566129][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 261.581325][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 261.590258][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 261.602492][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 261.611898][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 261.644206][T16726] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 261.855546][T16727] lo speed is unknown, defaulting to 1000 [ 261.870932][T16741] FAULT_INJECTION: forcing a failure. [ 261.870932][T16741] name failslab, interval 1, probability 0, space 0, times 0 [ 261.907451][T16741] CPU: 1 UID: 0 PID: 16741 Comm: syz.3.3067 Not tainted syzkaller #0 PREEMPT(full) [ 261.907484][T16741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 261.907496][T16741] Call Trace: [ 261.907503][T16741] [ 261.907511][T16741] dump_stack_lvl+0x189/0x250 [ 261.907546][T16741] ? __pfx____ratelimit+0x10/0x10 [ 261.907585][T16741] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.907608][T16741] ? __pfx__printk+0x10/0x10 [ 261.907637][T16741] ? __pfx___might_resched+0x10/0x10 [ 261.907655][T16741] ? lock_acquire+0x5f/0x360 [ 261.907684][T16741] should_fail_ex+0x414/0x560 [ 261.907711][T16741] should_failslab+0xa8/0x100 [ 261.907740][T16741] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 261.907766][T16741] ? __alloc_skb+0x112/0x2d0 [ 261.907788][T16741] __alloc_skb+0x112/0x2d0 [ 261.907807][T16741] mgmt_cmd_complete+0x49/0x590 [ 261.907824][T16741] ? trace_kmalloc+0x1f/0xd0 [ 261.907851][T16741] read_unconf_index_list+0x46e/0x510 [ 261.907880][T16741] ? kmem_cache_free+0x18f/0x400 [ 261.907907][T16741] hci_mgmt_cmd+0x9c9/0xef0 [ 261.907934][T16741] hci_sock_sendmsg+0x6ca/0xef0 [ 261.907965][T16741] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 261.907985][T16741] ? aa_sock_msg_perm+0xf1/0x1d0 [ 261.908004][T16741] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 261.908024][T16741] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 261.908044][T16741] __sock_sendmsg+0x21c/0x270 [ 261.908072][T16741] sock_write_iter+0x258/0x330 [ 261.908097][T16741] ? __pfx_sock_write_iter+0x10/0x10 [ 261.908126][T16741] ? bpf_lsm_file_permission+0x9/0x20 [ 261.908149][T16741] ? security_file_permission+0x75/0x290 [ 261.908178][T16741] vfs_write+0x5c9/0xb30 [ 261.908206][T16741] ? __pfx_sock_write_iter+0x10/0x10 [ 261.908229][T16741] ? __pfx_vfs_write+0x10/0x10 [ 261.908260][T16741] ? __fget_files+0x2a/0x420 [ 261.908282][T16741] ksys_write+0x145/0x250 [ 261.908308][T16741] ? __pfx_ksys_write+0x10/0x10 [ 261.908331][T16741] ? rcu_is_watching+0x15/0xb0 [ 261.908352][T16741] ? rcu_is_watching+0x15/0xb0 [ 261.908373][T16741] do_syscall_64+0xfa/0x3b0 [ 261.908400][T16741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.908419][T16741] ? clear_bhb_loop+0x60/0xb0 [ 261.908439][T16741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.908456][T16741] RIP: 0033:0x7f629098ebe9 [ 261.908473][T16741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.908492][T16741] RSP: 002b:00007f6291852038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 261.908515][T16741] RAX: ffffffffffffffda RBX: 00007f6290bb5fa0 RCX: 00007f629098ebe9 [ 261.908530][T16741] RDX: 0000000000000006 RSI: 0000200000000040 RDI: 0000000000000004 [ 261.908542][T16741] RBP: 00007f6291852090 R08: 0000000000000000 R09: 0000000000000000 [ 261.908554][T16741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.908566][T16741] R13: 00007f6290bb6038 R14: 00007f6290bb5fa0 R15: 00007ffc4f566128 [ 261.908589][T16741] [ 262.260003][T16738] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 262.568779][T16761] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.595862][T16727] chnl_net:caif_netlink_parms(): no params data found [ 262.720992][ T12] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.762066][T16727] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.770541][T16727] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.779924][T16727] bridge_slave_0: entered allmulticast mode [ 262.787601][T16727] bridge_slave_0: entered promiscuous mode [ 262.802458][T16764] lo speed is unknown, defaulting to 1000 [ 262.813625][ T12] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.830542][T16727] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.839938][T16727] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.848999][T16727] bridge_slave_1: entered allmulticast mode [ 262.855967][T16727] bridge_slave_1: entered promiscuous mode [ 262.879043][T16775] lo speed is unknown, defaulting to 1000 [ 262.903761][ T12] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.919185][T16770] lo speed is unknown, defaulting to 1000 [ 262.940479][T16727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.976468][T16727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.996873][ T12] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.124275][T16727] team0: Port device team_slave_0 added [ 263.141864][T16727] team0: Port device team_slave_1 added [ 263.217124][ T51] Bluetooth: hci1: command tx timeout [ 263.229230][T16727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.239403][T16727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.266519][T16727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.280598][T16727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.288145][T16727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.315211][T16727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.417718][ T12] bond5 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 263.427708][ T12] bond5 (unregistering): (slave ip6gretap1): Releasing backup interface [ 263.506612][ T12] bond3 (unregistering): (slave gretap2): Releasing backup interface [ 263.518571][ T12] gretap2 (unregistering): left allmulticast mode [ 263.561135][ T12] team0: Port device geneve0 removed [ 263.697239][ T51] Bluetooth: hci5: command tx timeout [ 263.733876][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.746065][ T12] bond0 (unregistering): (slave €Â0): Releasing backup interface [ 263.762403][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 263.775161][ T12] bond0 (unregistering): (slave 0!): Releasing backup interface [ 263.786070][ T12] bond0 (unregistering): Released all slaves [ 263.798773][ T12] bond1 (unregistering): Released all slaves [ 263.811832][ T12] bond2 (unregistering): Released all slaves [ 263.832666][ T12] bond3 (unregistering): Released all slaves [ 263.859326][ T12] bond4 (unregistering): Released all slaves [ 263.889403][ T12] bond5 (unregistering): Released all slaves [ 263.917456][T16811] validate_nla: 7 callbacks suppressed [ 263.917477][T16811] netlink: 'syz.1.3079': attribute type 15 has an invalid length. [ 263.949282][T16811] __nla_validate_parse: 12 callbacks suppressed [ 263.949323][T16811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3079'. [ 263.990417][T16802] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 264.007611][T16802] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 264.063184][T16727] hsr_slave_0: entered promiscuous mode [ 264.076498][T16727] hsr_slave_1: entered promiscuous mode [ 264.086676][T16727] debugfs: 'hsr0' already exists in 'hsr' [ 264.094467][T16727] Cannot create hsr debugfs directory [ 264.251993][T16824] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3087'. [ 264.300549][T16833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3089'. [ 264.311878][T16833] netlink: 'syz.4.3089': attribute type 30 has an invalid length. [ 264.329510][T16833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3089'. [ 264.771072][T16859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3095'. [ 264.772165][T16861] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3096'. [ 264.812231][T16859] geneve2: entered promiscuous mode [ 264.821603][T16859] geneve2: entered allmulticast mode [ 264.905744][T16865] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3095'. [ 264.911946][T16727] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 264.946308][T16727] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 264.966801][T16727] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 264.989719][T16727] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 265.054548][T16876] batman_adv: batadv0: Removing interface: macvtap1 [ 265.065561][T16876] batman_adv: batadv0: Removing interface: vlan2 [ 265.082911][T16876] rdma_op ffff88803f80b1f0 conn xmit_rdma 0000000000000000 [ 265.110615][T16876] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3098'. [ 265.145271][T16727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.169710][T16727] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.185481][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.192707][T16880] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3100'. [ 265.192745][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.222475][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.229931][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.305356][T16882] FAULT_INJECTION: forcing a failure. [ 265.305356][T16882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.322687][T16882] CPU: 0 UID: 0 PID: 16882 Comm: syz.4.3101 Not tainted syzkaller #0 PREEMPT(full) [ 265.322716][T16882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 265.322727][T16882] Call Trace: [ 265.322735][T16882] [ 265.322743][T16882] dump_stack_lvl+0x189/0x250 [ 265.322770][T16882] ? __pfx____ratelimit+0x10/0x10 [ 265.322799][T16882] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.322819][T16882] ? __pfx__printk+0x10/0x10 [ 265.322842][T16882] ? __might_fault+0xb0/0x130 [ 265.322871][T16882] ? rcu_is_watching+0x15/0xb0 [ 265.322892][T16882] should_fail_ex+0x414/0x560 [ 265.322921][T16882] _copy_from_user+0x2d/0xb0 [ 265.322942][T16882] __sys_bpf+0x1ed/0x870 [ 265.322968][T16882] ? __pfx___sys_bpf+0x10/0x10 [ 265.322996][T16882] ? ksys_write+0x22a/0x250 [ 265.323021][T16882] ? __pfx_ksys_write+0x10/0x10 [ 265.323042][T16882] ? rcu_is_watching+0x15/0xb0 [ 265.323062][T16882] __x64_sys_bpf+0x7c/0x90 [ 265.323084][T16882] do_syscall_64+0xfa/0x3b0 [ 265.323102][T16882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.323121][T16882] ? clear_bhb_loop+0x60/0xb0 [ 265.323143][T16882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.323161][T16882] RIP: 0033:0x7f188178ebe9 [ 265.323179][T16882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.323198][T16882] RSP: 002b:00007f188255f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 265.323222][T16882] RAX: ffffffffffffffda RBX: 00007f18819b5fa0 RCX: 00007f188178ebe9 [ 265.323236][T16882] RDX: 0000000000000018 RSI: 0000200000000700 RDI: 000000000000001c [ 265.323250][T16882] RBP: 00007f188255f090 R08: 0000000000000000 R09: 0000000000000000 [ 265.323262][T16882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.323274][T16882] R13: 00007f18819b6038 R14: 00007f18819b5fa0 R15: 00007ffc54d4fa98 [ 265.323297][T16882] [ 265.591994][ T12] : left promiscuous mode [ 265.623678][T16886] pim6reg1: entered promiscuous mode [ 265.639492][T16886] pim6reg1: entered allmulticast mode [ 265.655876][ T12] tipc: Left network mode [ 265.692493][T16892] vlan2: entered allmulticast mode [ 265.750467][T16899] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3104'. [ 265.779744][ T51] Bluetooth: hci5: command tx timeout [ 265.818769][T16886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 265.826669][T16886] team0: Port device bond1 added [ 265.858924][T16727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.963394][ T12] hsr_slave_0: left promiscuous mode [ 265.973633][ T12] hsr_slave_1: left promiscuous mode [ 266.005978][ T12] pimreg (unregistering): left allmulticast mode [ 266.107060][T16909] netlink: 'syz.4.3108': attribute type 3 has an invalid length. [ 266.115501][T16909] netlink: 'syz.4.3108': attribute type 3 has an invalid length. [ 266.159240][T16912] netlink: 'syz.1.3109': attribute type 28 has an invalid length. [ 266.932273][ T12] team0 (unregistering): Port device team_slave_1 removed [ 266.945945][ T12] team0 (unregistering): Port device team_slave_0 removed [ 267.064302][T16903] lo speed is unknown, defaulting to 1000 [ 267.079254][T16727] veth0_vlan: entered promiscuous mode [ 267.153319][T16727] veth1_vlan: entered promiscuous mode [ 267.252139][T16727] veth0_macvtap: entered promiscuous mode [ 267.268598][T16928] FAULT_INJECTION: forcing a failure. [ 267.268598][T16928] name failslab, interval 1, probability 0, space 0, times 0 [ 267.282544][T16928] CPU: 0 UID: 0 PID: 16928 Comm: syz.4.3114 Not tainted syzkaller #0 PREEMPT(full) [ 267.282580][T16928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 267.282591][T16928] Call Trace: [ 267.282596][T16928] [ 267.282601][T16928] dump_stack_lvl+0x189/0x250 [ 267.282620][T16928] ? __pfx____ratelimit+0x10/0x10 [ 267.282638][T16928] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.282652][T16928] ? __pfx__printk+0x10/0x10 [ 267.282669][T16928] ? __pfx___might_resched+0x10/0x10 [ 267.282680][T16928] ? lock_acquire+0x5f/0x360 [ 267.282703][T16928] should_fail_ex+0x414/0x560 [ 267.282744][T16928] should_failslab+0xa8/0x100 [ 267.282771][T16928] __kmalloc_cache_noprof+0x70/0x3d0 [ 267.282792][T16928] ? bpf_xdp_link_attach+0x166/0x8f0 [ 267.282807][T16928] bpf_xdp_link_attach+0x166/0x8f0 [ 267.282819][T16928] ? get_pid_task+0x20/0x1f0 [ 267.282833][T16928] ? rcu_is_watching+0x15/0xb0 [ 267.282845][T16928] ? lock_release+0x4b/0x3e0 [ 267.282861][T16928] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 267.282873][T16928] ? __fget_files+0x2a/0x420 [ 267.282885][T16928] ? rcu_is_watching+0x15/0xb0 [ 267.282898][T16928] ? __fget_files+0x3a0/0x420 [ 267.282907][T16928] ? __fget_files+0x2a/0x420 [ 267.282917][T16928] ? attach_type_to_prog_type+0x40a/0x470 [ 267.282935][T16928] ? bpf_prog_attach_check_attach_type+0x39c/0x540 [ 267.282947][T16928] link_create+0x4d8/0x850 [ 267.282964][T16928] __sys_bpf+0x6dc/0x870 [ 267.282979][T16928] ? __pfx___sys_bpf+0x10/0x10 [ 267.282996][T16928] ? ksys_write+0x22a/0x250 [ 267.283011][T16928] ? __pfx_ksys_write+0x10/0x10 [ 267.283028][T16928] ? rcu_is_watching+0x15/0xb0 [ 267.283049][T16928] __x64_sys_bpf+0x7c/0x90 [ 267.283070][T16928] do_syscall_64+0xfa/0x3b0 [ 267.283087][T16928] ? rcu_is_watching+0x15/0xb0 [ 267.283102][T16928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.283113][T16928] ? clear_bhb_loop+0x60/0xb0 [ 267.283126][T16928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.283137][T16928] RIP: 0033:0x7f188178ebe9 [ 267.283149][T16928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.283160][T16928] RSP: 002b:00007f188255f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 267.283175][T16928] RAX: ffffffffffffffda RBX: 00007f18819b5fa0 RCX: 00007f188178ebe9 [ 267.283184][T16928] RDX: 0000000000000018 RSI: 0000200000000700 RDI: 000000000000001c [ 267.283191][T16928] RBP: 00007f188255f090 R08: 0000000000000000 R09: 0000000000000000 [ 267.283199][T16928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.283206][T16928] R13: 00007f18819b6038 R14: 00007f18819b5fa0 R15: 00007ffc54d4fa98 [ 267.283219][T16928] [ 267.284999][T16926] tipc: Enabled bearer , priority 0 [ 267.578713][T16727] veth1_macvtap: entered promiscuous mode [ 267.615801][T16934] syzkaller0: entered promiscuous mode [ 267.624085][T16934] syzkaller0: entered allmulticast mode [ 267.656614][T16926] tipc: Resetting bearer [ 267.680081][T16727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.710141][T16727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.745317][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.773836][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.796563][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.822697][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.857843][ T51] Bluetooth: hci5: command tx timeout [ 267.947705][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.970121][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.028494][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.039040][T16925] tipc: Resetting bearer [ 268.045655][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.055489][T16925] tipc: Disabling bearer [ 268.303538][T16974] lo speed is unknown, defaulting to 1000 [ 268.896227][ T5181] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 268.907488][ T5181] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 268.917521][ T5181] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 268.926141][ T5181] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 268.935567][ T5181] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 268.965817][T17001] lo speed is unknown, defaulting to 1000 [ 269.249584][T17001] chnl_net:caif_netlink_parms(): no params data found [ 269.306479][T17004] lo speed is unknown, defaulting to 1000 [ 269.316366][T17008] __nla_validate_parse: 3 callbacks suppressed [ 269.316387][T17008] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3130'. [ 269.443680][ T12] IPVS: stop unused estimator thread 0... [ 269.573650][T17001] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.593634][T17001] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.602479][T17001] bridge_slave_0: entered allmulticast mode [ 269.613835][T17001] bridge_slave_0: entered promiscuous mode [ 269.642157][T17001] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.652595][T17001] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.661433][T17001] bridge_slave_1: entered allmulticast mode [ 269.674645][T17001] bridge_slave_1: entered promiscuous mode [ 269.741786][T17001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.772352][T17001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.932747][T17001] team0: Port device team_slave_0 added [ 269.947359][ T51] Bluetooth: hci5: command tx timeout [ 269.975486][T17001] team0: Port device team_slave_1 added [ 270.006881][T17040] openvswitch: netlink: IP tunnel dst address not specified [ 270.022914][T17044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3139'. [ 270.032831][T17044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3139'. [ 270.086177][T17001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.099629][T17001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.157076][T17001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.171970][T17040] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3137'. [ 270.186469][T17053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3143'. [ 270.195685][T17040] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3137'. [ 270.195713][T17040] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3137'. [ 270.218347][T17053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3143'. [ 270.233000][T17001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.242668][T17001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.275861][T17001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.280633][T17057] IPv6: addrconf: prefix option has invalid lifetime [ 270.293668][T17057] IPv6: addrconf: prefix option has invalid lifetime [ 270.301638][T17057] IPv6: addrconf: prefix option has invalid lifetime [ 270.319612][T17057] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3143'. [ 270.405758][T17001] hsr_slave_0: entered promiscuous mode [ 270.420998][T17001] hsr_slave_1: entered promiscuous mode [ 270.428656][T17001] debugfs: 'hsr0' already exists in 'hsr' [ 270.434687][T17001] Cannot create hsr debugfs directory [ 270.586692][T17066] netlink: 'syz.3.3148': attribute type 21 has an invalid length. [ 270.600368][T17066] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3148'. [ 270.626771][T17066] netlink: 'syz.3.3148': attribute type 5 has an invalid length. [ 270.852003][T17083] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 270.885444][T17086] netlink: 'syz.4.3152': attribute type 1 has an invalid length. [ 270.899199][T17086] NCSI netlink: No device for ifindex 0 [ 270.974740][T17001] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 270.985354][ T51] Bluetooth: hci0: command tx timeout [ 271.003773][T17001] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 271.025368][T17001] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 271.040466][T17001] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 271.153114][T17001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.259765][T17001] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.317940][ T2932] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.325419][ T2932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.431017][ T2932] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.438808][ T2932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.587836][T17112] netlink: 'syz.2.3157': attribute type 1 has an invalid length. [ 271.844353][T17125] Bluetooth: MGMT ver 1.23 [ 271.974994][T17001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.075155][T17001] veth0_vlan: entered promiscuous mode [ 272.105860][T17001] veth1_vlan: entered promiscuous mode [ 272.131862][T17001] veth0_macvtap: entered promiscuous mode [ 272.145482][T17001] veth1_macvtap: entered promiscuous mode [ 272.162236][T17001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.178062][T17001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.194445][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.204816][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.215971][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.225364][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.278701][ T1057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.286936][ T1057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.311557][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.320313][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.754624][T17140] lo speed is unknown, defaulting to 1000 [ 273.053172][T17171] IPVS: Error connecting to the multicast addr [ 273.060421][ T51] Bluetooth: hci0: command tx timeout [ 273.182392][T17177] veth0_to_bridge: entered promiscuous mode [ 273.418501][T17171] veth0_to_bridge: left promiscuous mode [ 273.937390][T17211] lo speed is unknown, defaulting to 1000 [ 274.084336][T17218] vlan2: entered allmulticast mode [ 274.134981][T17218] bond2: entered allmulticast mode [ 274.236000][T17222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.254575][T17222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.319015][T17222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.331507][T17222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.449646][T17233] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.653618][T17253] netlink: 'syz.3.3199': attribute type 13 has an invalid length. [ 274.665625][T17253] netlink: 'syz.3.3199': attribute type 17 has an invalid length. [ 274.781261][T17253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.795804][T17262] netlink: 'syz.2.3203': attribute type 10 has an invalid length. [ 274.840849][T17262] team0: Port device dummy0 added [ 274.854898][T17263] netlink: 'syz.2.3203': attribute type 10 has an invalid length. [ 274.898852][T17263] team0: Port device dummy0 removed [ 274.913164][T17263] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 274.973903][T17272] __nla_validate_parse: 18 callbacks suppressed [ 274.973933][T17272] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3205'. [ 275.078631][T17279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3207'. [ 275.147559][ T5181] Bluetooth: hci0: command tx timeout [ 275.258025][T17293] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3209'. [ 275.341314][T17309] netlink: 'syz.4.3214': attribute type 11 has an invalid length. [ 275.355408][T17233] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.424152][T17313] netlink: 'syz.3.3212': attribute type 1 has an invalid length. [ 275.494875][T17313] 8021q: adding VLAN 0 to HW filter on device bond1 [ 275.511702][T17233] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.586466][T17306] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 275.615404][T17233] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.635373][T17306] vlan2: entered allmulticast mode [ 275.647200][T17306] veth1: entered allmulticast mode [ 275.654371][T17306] veth1: entered promiscuous mode [ 275.691137][T17306] veth1: left promiscuous mode [ 275.704935][T17306] bond1: (slave vlan2): making interface the new active one [ 275.734760][T17306] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 275.807416][T17306] veth1: entered promiscuous mode [ 275.813590][T17306] vlan2: entered promiscuous mode [ 275.819954][T17306] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 275.883924][ T1057] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.910537][ T1057] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.954582][ T2932] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.962354][T17336] openvswitch: netlink: Tunnel attr 227 out of range max 16 [ 275.978019][ T2932] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.025296][ T5870] Bluetooth: hci2: command 0x0401 tx timeout [ 276.033559][ T51] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 276.113538][T17344] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 276.556384][T17365] lo speed is unknown, defaulting to 1000 [ 276.634164][T17371] ieee802154 phy0 wpan0: encryption failed: -22 [ 276.834395][T17387] netlink: 'syz.0.3237': attribute type 2 has an invalid length. [ 276.906612][T17393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3239'. [ 277.069051][T17405] netlink: 'syz.4.3240': attribute type 1 has an invalid length. [ 277.098988][T17405] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3240'. [ 277.134769][T17405] netlink: 'syz.4.3240': attribute type 1 has an invalid length. [ 277.218342][ T51] Bluetooth: hci0: command tx timeout [ 277.229483][T17412] ieee802154 phy0 wpan0: encryption failed: -22 [ 277.252775][T17417] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3245'. [ 277.270307][T17417] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3245'. [ 277.284789][T17417] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3245'. [ 277.296155][T17417] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3245'. [ 277.309401][T17417] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3245'. [ 277.334982][T17421] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 277.346592][T17417] geneve2: left promiscuous mode [ 277.423329][T17424] lo speed is unknown, defaulting to 1000 [ 277.665005][ T5873] IPVS: starting estimator thread 0... [ 277.734236][T17442] team1: entered promiscuous mode [ 277.740617][T17442] team1: entered allmulticast mode [ 277.767639][T17438] IPVS: using max 42 ests per chain, 100800 per kthread [ 278.121528][T17460] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.177744][T17462] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.244152][T17460] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.378832][T17460] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.420650][T17465] lo speed is unknown, defaulting to 1000 [ 278.475696][T17460] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.491293][T17472] netlink: 'syz.3.3261': attribute type 1 has an invalid length. [ 278.512067][T17472] netlink: 'syz.3.3261': attribute type 3 has an invalid length. [ 278.542552][T17472] netlink: 'syz.3.3261': attribute type 1 has an invalid length. [ 278.583663][T17474] netlink: 'syz.2.3262': attribute type 15 has an invalid length. [ 278.636105][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.676318][ T2932] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.700062][ T2932] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.740813][ T2932] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.764943][T17479] tipc: Started in network mode [ 278.770034][T17479] tipc: Node identity , cluster identity 4711 [ 278.776931][T17479] tipc: Failed to obtain node identity [ 278.807086][T17479] tipc: Enabling of bearer rejected, failed to enable media [ 278.936952][T17482] syzkaller0: entered promiscuous mode [ 278.943312][T17482] syzkaller0: entered allmulticast mode [ 278.943544][T17491] netlink: 'syz.0.3266': attribute type 1 has an invalid length. [ 278.963453][T17479] netlink: 'syz.2.3263': attribute type 16 has an invalid length. [ 278.992825][T17491] 8021q: adding VLAN 0 to HW filter on device bond1 [ 279.123565][T17503] syzkaller1: entered allmulticast mode [ 279.289593][T17515] syzkaller0: entered promiscuous mode [ 279.295319][T17515] syzkaller0: entered allmulticast mode [ 279.297710][ T51] Bluetooth: hci0: command 0x0405 tx timeout [ 279.850885][T17536] netlink: 'syz.1.3277': attribute type 7 has an invalid length. [ 280.302093][T17568] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 280.375665][T17573] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.383463][T17573] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.400153][T17573] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.407574][T17573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.415778][T17573] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.423546][T17573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.476691][T17575] __nla_validate_parse: 158 callbacks suppressed [ 280.476712][T17575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3290'. [ 280.478535][T17573] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 280.509985][T17575] bridge_slave_1: left allmulticast mode [ 280.516196][T17575] bridge_slave_1: left promiscuous mode [ 280.546738][T17575] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.569043][T17575] bridge_slave_0: left allmulticast mode [ 280.575959][T17575] bridge_slave_0: left promiscuous mode [ 280.586029][T17575] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.604216][T17575] bond0: (slave bridge0): Releasing backup interface [ 280.666418][T17586] lo speed is unknown, defaulting to 1000 [ 280.871755][T17600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3296'. [ 281.050115][T17611] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3297'. [ 281.077168][T17611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3297'. [ 281.189299][T17608] syzkaller0: entered promiscuous mode [ 281.195179][T17608] syzkaller0: entered allmulticast mode [ 281.286847][T17621] lo speed is unknown, defaulting to 1000 [ 281.584119][T17634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3307'. [ 281.707602][T17634] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3307'. [ 281.770309][T17642] lo speed is unknown, defaulting to 1000 [ 281.962664][T17656] lo speed is unknown, defaulting to 1000 [ 282.021197][T17656] validate_nla: 4 callbacks suppressed [ 282.021213][T17656] netlink: 'syz.2.3313': attribute type 5 has an invalid length. [ 282.037688][ T9383] IPVS: starting estimator thread 0... [ 282.040426][T17656] ieee802154 phy0 wpan0: encryption failed: -22 [ 282.127157][T17658] IPVS: using max 47 ests per chain, 112800 per kthread [ 282.301593][ T2932] IPVS: stop unused estimator thread 0... [ 282.543319][T17679] netlink: 'syz.1.3321': attribute type 2 has an invalid length. [ 282.551810][T17682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3322'. [ 282.562489][T17679] netlink: 119 bytes leftover after parsing attributes in process `syz.1.3321'. [ 282.635120][T17684] syzkaller0: entered promiscuous mode [ 282.641409][T17684] syzkaller0: entered allmulticast mode [ 282.796603][T17692] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3323'. [ 282.931624][T17694] netlink: 786 bytes leftover after parsing attributes in process `syz.2.3324'. [ 283.236091][T17715] netlink: 'syz.1.3332': attribute type 1 has an invalid length. [ 283.281648][T17713] bond2: entered promiscuous mode [ 283.303397][T17713] bond2: entered allmulticast mode [ 283.345564][T17710] geneve2: entered promiscuous mode [ 283.351527][T17710] geneve2: entered allmulticast mode [ 283.359347][T17710] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 283.374140][T17716] tipc: Enabling of bearer rejected, failed to enable media [ 283.419829][T17722] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 283.792314][T17737] syzkaller0: entered promiscuous mode [ 283.800076][T17737] syzkaller0: entered allmulticast mode [ 283.951269][T17752] netlink: 'syz.0.3342': attribute type 1 has an invalid length. [ 284.044214][T17757] FAULT_INJECTION: forcing a failure. [ 284.044214][T17757] name failslab, interval 1, probability 0, space 0, times 0 [ 284.066190][T17757] CPU: 0 UID: 0 PID: 17757 Comm: syz.2.3341 Not tainted syzkaller #0 PREEMPT(full) [ 284.066223][T17757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 284.066235][T17757] Call Trace: [ 284.066243][T17757] [ 284.066251][T17757] dump_stack_lvl+0x189/0x250 [ 284.066279][T17757] ? __pfx____ratelimit+0x10/0x10 [ 284.066307][T17757] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.066330][T17757] ? __pfx__printk+0x10/0x10 [ 284.066355][T17757] ? genl_family_rcv_msg_doit+0x267/0x300 [ 284.066381][T17757] ? __pfx___might_resched+0x10/0x10 [ 284.066400][T17757] ? lock_acquire+0x5f/0x360 [ 284.066429][T17757] should_fail_ex+0x414/0x560 [ 284.066456][T17757] should_failslab+0xa8/0x100 [ 284.066485][T17757] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 284.066511][T17757] ? __alloc_skb+0x112/0x2d0 [ 284.066531][T17757] __alloc_skb+0x112/0x2d0 [ 284.066550][T17757] netlink_ack+0x146/0xa50 [ 284.066576][T17757] ? __pfx_genl_rcv_msg+0x10/0x10 [ 284.066597][T17757] ? __kasan_slab_alloc+0x6c/0x80 [ 284.066620][T17757] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 284.066647][T17757] ? __pfx_nl802154_post_doit+0x10/0x10 [ 284.066674][T17757] ? __netlink_lookup+0xbd/0x810 [ 284.066691][T17757] ? rcu_is_watching+0x15/0xb0 [ 284.066715][T17757] netlink_rcv_skb+0x28c/0x470 [ 284.066743][T17757] ? __pfx_genl_rcv_msg+0x10/0x10 [ 284.066766][T17757] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 284.066800][T17757] ? lock_release+0x4b/0x3e0 [ 284.066829][T17757] ? down_read+0x1ad/0x2e0 [ 284.066850][T17757] genl_rcv+0x28/0x40 [ 284.066871][T17757] netlink_unicast+0x82f/0x9e0 [ 284.066902][T17757] ? __pfx_netlink_unicast+0x10/0x10 [ 284.066929][T17757] ? netlink_sendmsg+0x642/0xb30 [ 284.066945][T17757] ? skb_put+0x11b/0x210 [ 284.066965][T17757] netlink_sendmsg+0x805/0xb30 [ 284.066993][T17757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.067012][T17757] ? aa_sock_msg_perm+0xf1/0x1d0 [ 284.067031][T17757] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 284.067051][T17757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.067069][T17757] __sock_sendmsg+0x21c/0x270 [ 284.067095][T17757] ____sys_sendmsg+0x505/0x830 [ 284.067118][T17757] ? __pfx_____sys_sendmsg+0x10/0x10 [ 284.067143][T17757] ? import_iovec+0x74/0xa0 [ 284.067175][T17757] ___sys_sendmsg+0x21f/0x2a0 [ 284.067196][T17757] ? __pfx____sys_sendmsg+0x10/0x10 [ 284.067233][T17757] ? __fget_files+0x2a/0x420 [ 284.067250][T17757] ? __fget_files+0x3a0/0x420 [ 284.067271][T17757] __x64_sys_sendmsg+0x19b/0x260 [ 284.067293][T17757] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 284.067319][T17757] ? __pfx_ksys_write+0x10/0x10 [ 284.067342][T17757] ? rcu_is_watching+0x15/0xb0 [ 284.067364][T17757] ? rcu_is_watching+0x15/0xb0 [ 284.067383][T17757] do_syscall_64+0xfa/0x3b0 [ 284.067403][T17757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.067421][T17757] ? clear_bhb_loop+0x60/0xb0 [ 284.067443][T17757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.067462][T17757] RIP: 0033:0x7f7dc318ebe9 [ 284.067480][T17757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.067497][T17757] RSP: 002b:00007f7dc406a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.067519][T17757] RAX: ffffffffffffffda RBX: 00007f7dc33b5fa0 RCX: 00007f7dc318ebe9 [ 284.067535][T17757] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 284.067548][T17757] RBP: 00007f7dc406a090 R08: 0000000000000000 R09: 0000000000000000 [ 284.067561][T17757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.067572][T17757] R13: 00007f7dc33b6038 R14: 00007f7dc33b5fa0 R15: 00007ffee1b0d468 [ 284.067596][T17757] [ 284.809427][T17777] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.817330][T17777] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.040629][T17777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.055596][T17777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.185611][T17777] bond2: left promiscuous mode [ 285.191827][T17777] geneve2: left promiscuous mode [ 285.200343][T17777] bond2: left allmulticast mode [ 285.205585][T17777] geneve2: left allmulticast mode [ 285.226686][T17786] lo speed is unknown, defaulting to 1000 [ 285.295038][T17789] bond0: entered promiscuous mode [ 285.310514][T17789] bond_slave_0: entered promiscuous mode [ 285.317546][T17789] bond_slave_1: entered promiscuous mode [ 285.323689][T17789] dummy0: entered promiscuous mode [ 285.335740][T17789] bond0: left promiscuous mode [ 285.340971][T17789] bond_slave_0: left promiscuous mode [ 285.347803][T17789] bond_slave_1: left promiscuous mode [ 285.353868][T17789] dummy0: left promiscuous mode [ 285.369027][T15531] IPVS: starting estimator thread 0... [ 285.380060][T17806] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.431321][ T2932] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.445175][ T2932] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.466471][T17804] netlink: 'syz.0.3354': attribute type 11 has an invalid length. [ 285.483502][T17810] __nla_validate_parse: 8 callbacks suppressed [ 285.483521][T17810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3355'. [ 285.486927][ T30] audit: type=1800 audit(1756502943.659:10): pid=17810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3355" name="memory.events" dev="tmpfs" ino=498 res=0 errno=0 [ 285.495492][T17812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3356'. [ 285.503479][T17807] IPVS: using max 41 ests per chain, 98400 per kthread [ 285.528344][T17804] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3354'. [ 285.549945][ T30] audit: type=1804 audit(1756502943.659:11): pid=17810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3355" name="/newroot/93/memory.events" dev="tmpfs" ino=498 res=1 errno=0 [ 285.574831][T17814] netlink: 'syz.3.3355': attribute type 11 has an invalid length. [ 285.585053][T17812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3356'. [ 285.599790][T17805] netlink: 'syz.1.3353': attribute type 5 has an invalid length. [ 285.607500][T17814] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3355'. [ 285.613981][ T2932] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.626679][T17802] lo speed is unknown, defaulting to 1000 [ 285.651753][ T2932] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.735808][T17820] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3358'. [ 285.766501][T17820] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3358'. [ 285.876310][T17823] netlink: 212364 bytes leftover after parsing attributes in process `syz.2.3357'. [ 285.892115][T17825] lo speed is unknown, defaulting to 1000 [ 285.903824][T17828] siw: device registration error -23 [ 285.964260][T17828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3361'. [ 286.012228][T17828] tipc: Started in network mode [ 286.021074][T17828] tipc: Node identity 3268d4804f91, cluster identity 4711 [ 286.031185][T17828] tipc: Enabled bearer , priority 0 [ 286.043120][T17828] syzkaller0: entered promiscuous mode [ 286.057137][T17828] syzkaller0: entered allmulticast mode [ 286.103139][T17836] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3363'. [ 286.121990][T17827] tipc: Resetting bearer [ 286.145078][T17827] tipc: Disabling bearer [ 286.175723][T17836] batadv1: entered promiscuous mode [ 286.186843][T17836] batadv1: entered allmulticast mode [ 286.593342][T17874] netlink: 'syz.2.3374': attribute type 2 has an invalid length. [ 286.774312][T17874] syzkaller0: entered promiscuous mode [ 286.788342][T17874] syzkaller0: entered allmulticast mode [ 286.846795][T17899] lo speed is unknown, defaulting to 1000 [ 287.178437][T17914] dvmrp1: entered allmulticast mode [ 287.194238][T17919] syzkaller1: entered promiscuous mode [ 287.210588][T17919] syzkaller1: entered allmulticast mode [ 287.487482][ T36] vlan2: left promiscuous mode [ 288.072316][T17949] tap0: tun_chr_ioctl cmd 1074025678 [ 288.082181][T17949] tap0: group set to 0 [ 288.453474][T17961] lo speed is unknown, defaulting to 1000 [ 288.699029][T17976] lo speed is unknown, defaulting to 1000 [ 288.900057][T17984] netlink: 'syz.4.3400': attribute type 22 has an invalid length. [ 288.924298][T17984] netlink: 'syz.4.3400': attribute type 22 has an invalid length. [ 288.934740][ T2932] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.957642][ T2932] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.980407][ T2932] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.992960][ T2932] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.258781][T17989] block nbd3: server does not support multiple connections per device. [ 289.267740][T17989] block nbd3: shutting down sockets [ 289.492432][T18015] dvmrp0: entered allmulticast mode [ 290.030545][T18020] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.038953][T18020] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.756324][T18042] __nla_validate_parse: 14 callbacks suppressed [ 290.756347][T18042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3413'. [ 290.797681][T18042] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3413'. [ 290.827216][T18042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3413'. [ 290.846681][T18042] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3413'. [ 290.866959][T18042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3413'. [ 291.055319][T18020] geneve2: left promiscuous mode [ 291.067508][T18020] geneve2: left allmulticast mode [ 291.203194][ T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.237970][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.257450][ T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.266327][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.319916][ T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.358344][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.383303][T18053] delete_channel: no stack [ 291.417795][ T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.469105][ T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.518659][T18059] lo speed is unknown, defaulting to 1000 [ 291.887731][T18080] netlink: 'syz.3.3420': attribute type 13 has an invalid length. [ 292.046422][T18089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3424'. [ 292.093258][T18089] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3424'. [ 292.117886][T18089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3424'. [ 292.129364][T18094] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20004 [ 292.154874][T18094] IPVS: set_ctl: invalid protocol: 33 224.0.0.1:20003 [ 292.161038][T18089] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3424'. [ 292.186710][T18085] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3421'. [ 292.472429][T18108] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20000 [ 292.595642][T18117] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7 [ 292.677562][T18122] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 292.797065][T18131] netlink: zone id is out of range [ 292.816091][T18131] netlink: 'syz.2.3436': attribute type 1 has an invalid length. [ 293.315685][T18150] bond2 (unregistering): Released all slaves [ 293.561995][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.589739][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.631905][T18170] bond0: (slave bond_slave_0): Releasing backup interface [ 293.657073][T18170] bond0: (slave bond_slave_1): Releasing backup interface [ 293.787697][T18170] team0: Port device team_slave_0 removed [ 293.866037][T18170] team0: Port device team_slave_1 removed [ 293.888468][T18170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.907164][T18170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.975824][T18170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.989873][T18170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.064745][T18170] team0: Port device bond1 removed [ 294.113260][T18180] netlink: 'syz.2.3444': attribute type 15 has an invalid length. [ 294.123892][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.167615][ T36] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.336051][T18202] bond2: entered promiscuous mode [ 294.347925][T18202] 8021q: adding VLAN 0 to HW filter on device bond2 [ 294.751311][T18224] siw: device registration error -23 [ 295.233274][T18254] syzkaller1: entered promiscuous mode [ 295.245839][T18254] syzkaller1: entered allmulticast mode [ 295.432142][T18266] erspan0: entered promiscuous mode [ 295.568917][T18275] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8 [ 295.628820][T18280] netlink: 'syz.3.3473': attribute type 7 has an invalid length. [ 295.656809][T18279] lo speed is unknown, defaulting to 1000 [ 295.682919][T18280] : entered promiscuous mode [ 295.747570][T18281] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 295.792304][T18281] netlink: 'syz.4.3472': attribute type 4 has an invalid length. [ 295.809513][T18281] __nla_validate_parse: 17 callbacks suppressed [ 295.809533][T18281] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3472'. [ 295.868173][T18291] netlink: 'syz.0.3475': attribute type 1 has an invalid length. [ 295.941467][T18291] 8021q: adding VLAN 0 to HW filter on device bond3 [ 296.020952][T18297] netlink: 'syz.4.3479': attribute type 13 has an invalid length. [ 296.035768][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.071879][T18297] netlink: 'syz.4.3479': attribute type 17 has an invalid length. [ 296.083141][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.274663][T18305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3479'. [ 296.460626][T18297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 296.497554][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 296.551428][T18308] lo speed is unknown, defaulting to 1000 [ 296.758143][ T1057] bond1: (slave wlan0): failed to get link speed/duplex [ 296.868455][ T1057] bond1: (slave wlan0): failed to get link speed/duplex [ 296.895640][T18343] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3488'. [ 296.908687][T18343] gretap0: entered promiscuous mode [ 296.936537][T18347] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.3484'. [ 296.962678][T18347] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 296.977635][ T1057] bond1: (slave wlan0): failed to get link speed/duplex [ 297.025195][T18351] IPVS: set_ctl: invalid protocol: 137 224.0.0.1:20002 [ 297.080437][T18355] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3491'. [ 297.090292][T18355] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3491'. [ 297.100956][T18356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3492'. [ 297.117152][ T9916] bond1: (slave wlan0): failed to get link speed/duplex [ 297.227384][ T9920] bond1: (slave wlan0): failed to get link speed/duplex [ 297.260095][T18371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3497'. [ 297.274768][T18371] xfrm1: entered promiscuous mode [ 297.280389][T18371] xfrm1: entered allmulticast mode [ 297.373485][T18375] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 297.409107][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 297.429788][T18375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3498'. [ 297.537401][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 297.627821][T18385] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3501'. [ 297.867133][ T12] net_ratelimit: 2 callbacks suppressed [ 297.867159][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 297.987203][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 298.097980][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 298.207897][ T9916] bond1: (slave wlan0): failed to get link speed/duplex [ 298.337447][ T9916] bond1: (slave wlan0): failed to get link speed/duplex [ 298.447413][ T9916] bond1: (slave wlan0): failed to get link speed/duplex [ 298.567757][ T9920] bond1: (slave wlan0): failed to get link speed/duplex [ 298.588682][T18415] netlink: 'syz.1.3518': attribute type 10 has an invalid length. [ 298.631299][T18415] team0: Port device geneve0 added [ 298.677336][ T9916] bond1: (slave wlan0): failed to get link speed/duplex [ 298.798785][ T9916] bond1: (slave wlan0): failed to get link speed/duplex [ 298.864458][T18431] netlink: 'syz.1.3515': attribute type 1 has an invalid length. [ 298.877977][T18431] bridge0: port 3(erspan0) entered blocking state [ 298.884804][T18431] bridge0: port 3(erspan0) entered disabled state [ 298.895072][T18431] erspan0: entered allmulticast mode [ 298.902430][T18431] erspan0: left allmulticast mode [ 298.917135][ T9916] bond1: (slave wlan0): failed to get link speed/duplex [ 299.314796][T18438] lo speed is unknown, defaulting to 1000 [ 299.439197][T18442] netlink: 'syz.3.3519': attribute type 1 has an invalid length. [ 299.461110][T18442] tipc: Enabling of bearer rejected, failed to enable media [ 299.914099][T18458] lo speed is unknown, defaulting to 1000 [ 300.575869][T18491] syzkaller1: entered promiscuous mode [ 300.588369][T18491] syzkaller1: entered allmulticast mode [ 300.698175][T18500] bond0: entered promiscuous mode [ 300.718142][T18500] batadv0: entered promiscuous mode [ 300.723984][T18500] debugfs: 'hsr1' already exists in 'hsr' [ 300.733017][T18500] Cannot create hsr debugfs directory [ 300.741533][T18500] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 300.759151][T18500] hsr1: entered allmulticast mode [ 300.765936][T18500] bond0: entered allmulticast mode [ 300.774586][T18500] batadv0: entered allmulticast mode [ 300.782832][T18500] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 300.845337][T18505] __nla_validate_parse: 12 callbacks suppressed [ 300.845357][T18505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3536'. [ 300.872729][T18504] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3537'. [ 300.882779][T18504] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3537'. [ 300.906481][T18504] syzkaller1: entered promiscuous mode [ 300.913242][T18504] syzkaller1: entered allmulticast mode [ 300.939046][T18507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3538'. [ 300.951283][T18507] bridge_slave_1: left allmulticast mode [ 300.957493][T18507] bridge_slave_1: left promiscuous mode [ 300.963699][T18507] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.025103][T18507] bridge_slave_0: left allmulticast mode [ 301.036569][T18507] bridge_slave_0: left promiscuous mode [ 301.047024][T18507] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.213515][T18516] lo speed is unknown, defaulting to 1000 [ 301.355382][T18523] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3542'. [ 301.493698][T18516] macsec0: entered promiscuous mode [ 301.499377][T18516] syzkaller0: entered promiscuous mode [ 301.517401][T18516] syzkaller0: left promiscuous mode [ 301.569416][T18534] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3546'. [ 301.581739][T18534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3546'. [ 301.618809][T18534] bond4: entered promiscuous mode [ 301.624091][T18534] bond4: entered allmulticast mode [ 301.630163][T18534] 8021q: adding VLAN 0 to HW filter on device bond4 [ 301.732546][T18544] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3548'. [ 301.746161][T18544] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3548'. [ 301.767071][T18545] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3548'. [ 301.778034][T18535] lo speed is unknown, defaulting to 1000 [ 301.987550][T18558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.036369][T18561] lo speed is unknown, defaulting to 1000 [ 302.266411][T18583] netlink: 'syz.3.3561': attribute type 16 has an invalid length. [ 302.292139][T18585] netlink: 'syz.4.3562': attribute type 1 has an invalid length. [ 302.391455][T18592] netlink: 'syz.3.3564': attribute type 322 has an invalid length. [ 302.571783][T18611] lo speed is unknown, defaulting to 1000 [ 302.621333][T18614] ieee802154 phy0 wpan0: encryption failed: -22 [ 302.815713][T18630] tipc: Started in network mode [ 302.820879][T18630] tipc: Node identity 325905b6ac65, cluster identity 4711 [ 302.828844][T18630] tipc: Enabled bearer , priority 0 [ 302.846834][T18626] ksmbd: Unknown IPC event: 6, ignore. [ 302.853770][T18630] tipc: Disabling bearer [ 302.977625][ T12] net_ratelimit: 31 callbacks suppressed [ 302.977651][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 303.097324][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 303.207284][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 303.317431][ T2932] bond1: (slave wlan0): failed to get link speed/duplex [ 303.429638][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 303.557476][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 303.667126][ T2932] bond1: (slave wlan0): failed to get link speed/duplex [ 303.783890][ T2932] bond1: (slave wlan0): failed to get link speed/duplex [ 303.927379][ T9920] bond1: (slave wlan0): failed to get link speed/duplex [ 304.068738][ T1057] bond1: (slave wlan0): failed to get link speed/duplex [ 304.221670][T18701] netlink: 'syz.3.3590': attribute type 1 has an invalid length. [ 304.349993][T18712] tipc: Enabled bearer , priority 0 [ 304.370375][T18712] syzkaller0: entered promiscuous mode [ 304.376146][T18712] syzkaller0: entered allmulticast mode [ 304.382698][T18716] netlink: 'syz.4.3594': attribute type 10 has an invalid length. [ 304.406162][T18712] tipc: Resetting bearer [ 304.431746][T18707] tipc: Resetting bearer [ 304.470955][T18707] tipc: Disabling bearer [ 304.488048][T18716] batman_adv: batadv0: Adding interface: virt_wifi0 [ 304.494936][T18716] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.525944][T18716] batman_adv: batadv0: Interface activated: virt_wifi0 [ 304.533914][T18719] tipc: Started in network mode [ 304.539797][T18719] tipc: Node identity 32c2d6772278, cluster identity 4711 [ 304.557487][T18719] tipc: Enabled bearer , priority 0 [ 304.568982][T18718] syzkaller0: entered promiscuous mode [ 304.574635][T18718] syzkaller0: entered allmulticast mode [ 304.626248][T18718] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 304.711903][T18718] tipc: Resetting bearer [ 304.753911][T18717] tipc: Resetting bearer [ 304.882988][T18717] tipc: Disabling bearer [ 305.187174][ T30] audit: type=1800 audit(1756502963.349:12): pid=18773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3608" name="@" dev="tmpfs" ino=673 res=0 errno=0 [ 305.731591][T18820] netlink: 'syz.0.3621': attribute type 1 has an invalid length. [ 305.830263][T18820] IPVS: length: 172 != 8 [ 305.908785][T18832] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input9 [ 305.932249][T18841] __nla_validate_parse: 19 callbacks suppressed [ 305.932273][T18841] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3626'. [ 306.062707][T18855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3631'. [ 306.435997][T18880] sctp: [Deprecated]: syz.0.3637 (pid 18880) Use of int in max_burst socket option. [ 306.435997][T18880] Use struct sctp_assoc_value instead [ 306.464826][T18880] sctp: [Deprecated]: syz.0.3637 (pid 18880) Use of int in max_burst socket option. [ 306.464826][T18880] Use struct sctp_assoc_value instead [ 306.503151][T18883] netlink: 'syz.2.3639': attribute type 12 has an invalid length. [ 306.825536][T18917] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3648'. [ 306.861057][T18919] macsec2: entered promiscuous mode [ 306.866435][T18919] mac80211_hwsim hwsim49 wlan0: entered promiscuous mode [ 306.870632][T18921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3650'. [ 306.876037][T18919] macsec2: entered allmulticast mode [ 306.888557][T18919] mac80211_hwsim hwsim49 wlan0: entered allmulticast mode [ 306.896674][T18917] syzkaller1: entered promiscuous mode [ 306.922132][T18917] syzkaller1: entered allmulticast mode [ 306.988954][T18930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3652'. [ 307.003114][T18930] syz_tun: entered promiscuous mode [ 307.014995][T18930] syz_tun: left promiscuous mode [ 307.082694][T18936] netlink: 'syz.0.3654': attribute type 12 has an invalid length. [ 307.092821][T18936] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.3654'. [ 307.425259][T18958] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3663'. [ 307.437829][T18960] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3664'. [ 307.491336][T18960] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3664'. [ 307.558779][T18967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3663'. [ 307.679862][T18979] netlink: 'syz.0.3669': attribute type 1 has an invalid length. [ 307.705324][T18979] netlink: 'syz.0.3669': attribute type 1 has an invalid length. [ 307.968688][T18993] netlink: 'syz.0.3669': attribute type 1 has an invalid length. [ 307.987376][ T2932] net_ratelimit: 32 callbacks suppressed [ 307.987394][ T2932] bond1: (slave wlan0): failed to get link speed/duplex [ 308.107398][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 308.181064][T19000] : entered promiscuous mode [ 308.227573][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 308.377202][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 308.442127][T19019] lo speed is unknown, defaulting to 1000 [ 308.527866][ T9920] bond1: (slave wlan0): failed to get link speed/duplex [ 308.640284][ T9920] bond1: (slave wlan0): failed to get link speed/duplex [ 308.757790][ T36] bond1: (slave wlan0): failed to get link speed/duplex [ 308.813402][T19041] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 308.824735][T19041] gretap1: entered promiscuous mode [ 308.830545][T19041] gretap1: entered allmulticast mode [ 308.867437][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 308.977218][ T36] bond1: (slave wlan0): failed to get link speed/duplex [ 309.037714][T19053] wg1 speed is unknown, defaulting to 1000 [ 309.043628][T19053] wg1 speed is unknown, defaulting to 1000 [ 309.063393][T19053] wg1 speed is unknown, defaulting to 1000 [ 309.078723][T19053] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 309.088129][ T2932] bond1: (slave wlan0): failed to get link speed/duplex [ 309.217731][T19053] wg1 speed is unknown, defaulting to 1000 [ 309.233917][T19053] wg1 speed is unknown, defaulting to 1000 [ 309.264611][T19053] wg1 speed is unknown, defaulting to 1000 [ 309.284939][T19053] wg1 speed is unknown, defaulting to 1000 [ 309.292363][T19053] wg1 speed is unknown, defaulting to 1000 [ 309.301231][T19053] wg1 speed is unknown, defaulting to 1000 [ 309.308736][T19053] wg1 speed is unknown, defaulting to 1000 [ 309.324897][T19053] wg1 speed is unknown, defaulting to 1000 [ 309.333083][T19053] wg1 speed is unknown, defaulting to 1000 [ 309.342051][T19064] netlink: 'syz.4.3696': attribute type 1 has an invalid length. [ 309.351104][T19053] wg1 speed is unknown, defaulting to 1000 [ 309.375236][T19064] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 309.385104][T19064] batman_adv: batadv0: Removing interface: virt_wifi0 [ 309.425670][T19064] batadv0 (unregistering): left promiscuous mode [ 309.523589][T19072] lo speed is unknown, defaulting to 1000 [ 309.531026][T19072] wg1 speed is unknown, defaulting to 1000 [ 310.729397][T15529] IPVS: starting estimator thread 0... [ 310.789203][T19141] syzkaller0: entered promiscuous mode [ 310.800365][T19141] syzkaller0: entered allmulticast mode [ 310.837326][T19141] macsec1: entered promiscuous mode [ 310.837990][T19139] IPVS: using max 41 ests per chain, 98400 per kthread [ 312.891257][T19177] tipc: MTU too low for tipc bearer [ 312.924219][T19177] __nla_validate_parse: 18 callbacks suppressed [ 312.924242][T19177] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3732'. [ 313.048590][ T1336] net_ratelimit: 33 callbacks suppressed [ 313.048615][ T1336] bond1: (slave wlan0): failed to get link speed/duplex [ 313.070052][T19192] batman_adv: batadv0: Adding interface: dummy0 [ 313.076715][T19192] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.102991][T19192] batman_adv: batadv0: Interface activated: dummy0 [ 313.120484][T19201] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3736'. [ 313.142536][T19192] batadv0: mtu less than device minimum [ 313.162244][T19192] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.173705][T19192] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.184981][T19192] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.196387][T19192] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.207848][T19192] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.219552][T19192] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.231284][T19192] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.242539][T19192] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.329795][T19202] lo speed is unknown, defaulting to 1000 [ 313.336509][T19202] wg1 speed is unknown, defaulting to 1000 [ 313.391314][T19214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3740'. [ 313.417576][T19217] netlink: 'syz.0.3741': attribute type 1 has an invalid length. [ 313.425825][T19217] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3741'. [ 313.426760][T19214] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3740'. [ 313.445007][T19217] NCSI netlink: No device for ifindex 0 [ 313.790646][T19249] netlink: 'syz.1.3748': attribute type 1 has an invalid length. [ 313.823522][T19249] 8021q: adding VLAN 0 to HW filter on device bond1 [ 313.867885][T19249] bond1: (slave veth3): Enslaving as an active interface with a down link [ 313.877277][T19252] lo speed is unknown, defaulting to 1000 [ 313.884551][T19252] wg1 speed is unknown, defaulting to 1000 [ 313.894707][T19249] gretap2: entered promiscuous mode [ 313.909217][T19249] bond1: (slave gretap2): making interface the new active one [ 313.918134][T19249] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 313.989426][T19249] macvlan2: entered promiscuous mode [ 313.995053][T19249] macvlan2: entered allmulticast mode [ 314.001401][T19249] bond1: entered promiscuous mode [ 314.007530][T19249] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 314.015251][T19249] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 314.032248][T19249] bond1: left promiscuous mode [ 314.042583][T19259] netlink: 'syz.4.3750': attribute type 4 has an invalid length. [ 314.052122][T19259] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3750'. [ 314.623605][T19269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3752'. [ 314.647174][T19269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3752'. [ 314.725307][T19284] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3752'. [ 314.854633][T19293] netlink: 'syz.2.3760': attribute type 7 has an invalid length. [ 314.880950][T19293] IPVS: Unknown mcast interface: batadv0 [ 314.903283][T19293] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3760'. [ 315.096280][T19321] IPVS: length: 254 != 24 [ 315.145391][T19323] tap0: tun_chr_ioctl cmd 1074025677 [ 315.151587][T19323] tap0: linktype set to 805 [ 315.159164][T19325] tap0: tun_chr_ioctl cmd 1074025677 [ 315.164832][T19325] tap0: linktype set to 805 [ 315.224313][T19323] lo speed is unknown, defaulting to 1000 [ 315.231817][T19323] wg1 speed is unknown, defaulting to 1000 [ 315.327782][T19344] lo speed is unknown, defaulting to 1000 [ 315.334360][T19344] wg1 speed is unknown, defaulting to 1000 [ 315.474429][T19351] tc_dump_action: action bad kind [ 315.492124][T19352] bridge0: entered promiscuous mode [ 315.501038][T19352] bridge0: entered allmulticast mode [ 315.577489][T19356] lo speed is unknown, defaulting to 1000 [ 315.591450][T19356] wg1 speed is unknown, defaulting to 1000 [ 315.617479][ T51] Bluetooth: hci5: command 0x0405 tx timeout [ 315.664264][T19359] pim6reg1: entered promiscuous mode [ 315.679126][T19359] pim6reg1: entered allmulticast mode [ 315.980484][T19371] syzkaller0: entered promiscuous mode [ 315.990946][T19371] syzkaller0: entered allmulticast mode [ 316.012584][T19376] syzkaller0: entered promiscuous mode [ 316.024948][T19376] syzkaller0: entered allmulticast mode [ 316.043636][T19376] netlink: 'syz.0.3783': attribute type 21 has an invalid length. [ 316.958271][T19442] netlink: 'syz.4.3800': attribute type 1 has an invalid length. [ 317.055888][T19442] 8021q: adding VLAN 0 to HW filter on device bond5 [ 317.240452][T19451] tap0: tun_chr_ioctl cmd 1074025675 [ 317.246368][T19451] tap0: persist disabled [ 317.519307][T19484] lo speed is unknown, defaulting to 1000 [ 317.542259][T19484] wg1 speed is unknown, defaulting to 1000 [ 317.635402][T19477] syzkaller1: entered promiscuous mode [ 317.642259][T19477] syzkaller1: entered allmulticast mode [ 318.324231][T19538] __nla_validate_parse: 7 callbacks suppressed [ 318.324253][T19538] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3822'. [ 318.412329][T19545] geneve2: entered allmulticast mode [ 318.626372][T19553] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3828'. [ 318.656251][T19554] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20000 [ 318.833091][T19567] lo speed is unknown, defaulting to 1000 [ 318.843574][T19567] wg1 speed is unknown, defaulting to 1000 [ 318.905253][T19573] sock: sock_timestamping_bind_phc: sock not bind to device [ 319.079655][T19582] ip6gretap0: entered promiscuous mode [ 319.123197][ T9920] syzkaller0: tun_net_xmit 76 [ 319.128524][ T9920] syzkaller0: tun_net_xmit 48 [ 319.133476][T19580] syzkaller0: tun_net_xmit 76 [ 319.140578][T19580] tipc: Enabled bearer , priority 0 [ 319.148168][ T9389] syzkaller0: tun_net_xmit 76 [ 319.161075][T19579] tipc: Resetting bearer [ 319.234534][T19579] tipc: Disabling bearer [ 319.349813][T19591] lo speed is unknown, defaulting to 1000 [ 319.356238][T19591] wg1 speed is unknown, defaulting to 1000 [ 319.433527][T19600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3838'. [ 319.826218][T19608] team_slave_0: entered promiscuous mode [ 319.832196][T19608] team_slave_1: entered promiscuous mode [ 319.838032][T19608] geneve0: entered promiscuous mode [ 319.893042][T19608] macsec3: entered promiscuous mode [ 319.920347][T19608] team0: entered promiscuous mode [ 320.145930][T19614] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3840'. [ 320.418807][T19626] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.458095][T19626] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.538244][T19626] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.549472][T19626] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.595669][T19637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3848'. [ 320.596672][T19626] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.618525][T19626] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.780039][T19626] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.790686][T19626] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.885765][ T1057] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.927262][ T1057] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.962754][ T1057] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.973621][ T1057] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.000315][ T1057] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.011817][ T1057] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.032158][ T2932] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.057264][ T2932] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.141425][ T51] Bluetooth: hci5: command 0x0405 tx timeout [ 321.394992][T19691] syzkaller0: entered promiscuous mode [ 321.413148][T19691] syzkaller0: entered allmulticast mode [ 321.534814][T19707] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3865'. [ 322.004363][T19728] net_ratelimit: 37 callbacks suppressed [ 322.004387][T19728] openvswitch: netlink: Missing valid actions attribute. [ 322.040268][T19728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.064278][T19732] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3871'. [ 322.075499][T19732] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3871'. [ 322.175684][T19735] netlink: 'syz.4.3872': attribute type 10 has an invalid length. [ 322.190320][T19735] bond0: (slave wlan1): Opening slave failed [ 322.218507][T19739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3874'. [ 322.316300][T19743] mac80211_hwsim hwsim46 wlan1: entered allmulticast mode [ 322.672454][T19769] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3884'. [ 322.704396][T19773] netlink: 'syz.0.3881': attribute type 1 has an invalid length. [ 322.786175][T19776] gretap0: left promiscuous mode [ 322.804789][T19776] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 323.036029][T19785] lo speed is unknown, defaulting to 1000 [ 323.054088][T19785] wg1 speed is unknown, defaulting to 1000 [ 323.212252][T19797] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 323.227961][T19797] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 323.250895][T19797] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 323.601163][T19805] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.705433][T19814] __nla_validate_parse: 2 callbacks suppressed [ 323.705455][T19814] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3894'. [ 323.765681][T19805] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.831203][T19805] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.854215][T19822] lo speed is unknown, defaulting to 1000 [ 323.866713][T19822] wg1 speed is unknown, defaulting to 1000 [ 323.869346][T19824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3901'. [ 323.924305][T19824] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3901'. [ 323.935147][T19805] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.015355][ T1336] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.034769][ T1336] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.054117][ T1336] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.072277][ T1336] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.251162][T19849] tipc: Enabled bearer , priority 0 [ 324.259652][T19849] syzkaller0: entered promiscuous mode [ 324.265618][T19849] syzkaller0: entered allmulticast mode [ 324.280153][T19849] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3907'. [ 324.300439][T19848] tipc: Resetting bearer [ 324.312730][T19848] tipc: Disabling bearer [ 324.621967][T19855] FAULT_INJECTION: forcing a failure. [ 324.621967][T19855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.635899][T19855] CPU: 0 UID: 0 PID: 19855 Comm: syz.4.3908 Not tainted syzkaller #0 PREEMPT(full) [ 324.635930][T19855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 324.635942][T19855] Call Trace: [ 324.635949][T19855] [ 324.635958][T19855] dump_stack_lvl+0x189/0x250 [ 324.635985][T19855] ? __pfx____ratelimit+0x10/0x10 [ 324.636012][T19855] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.636034][T19855] ? __pfx__printk+0x10/0x10 [ 324.636064][T19855] ? __might_fault+0xb0/0x130 [ 324.636093][T19855] ? rcu_is_watching+0x15/0xb0 [ 324.636113][T19855] should_fail_ex+0x414/0x560 [ 324.636139][T19855] _copy_from_user+0x2d/0xb0 [ 324.636162][T19855] ___sys_sendmsg+0x158/0x2a0 [ 324.636183][T19855] ? __pfx____sys_sendmsg+0x10/0x10 [ 324.636217][T19855] ? __fget_files+0x2a/0x420 [ 324.636234][T19855] ? __fget_files+0x3a0/0x420 [ 324.636256][T19855] __x64_sys_sendmsg+0x19b/0x260 [ 324.636277][T19855] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 324.636302][T19855] ? __pfx_ksys_write+0x10/0x10 [ 324.636330][T19855] ? rcu_is_watching+0x15/0xb0 [ 324.636348][T19855] do_syscall_64+0xfa/0x3b0 [ 324.636368][T19855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.636387][T19855] ? clear_bhb_loop+0x60/0xb0 [ 324.636409][T19855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.636428][T19855] RIP: 0033:0x7f188178ebe9 [ 324.636446][T19855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.636463][T19855] RSP: 002b:00007f188255f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.636486][T19855] RAX: ffffffffffffffda RBX: 00007f18819b5fa0 RCX: 00007f188178ebe9 [ 324.636501][T19855] RDX: 5668a5a41429f6ce RSI: 00002000000000c0 RDI: 0000000000000003 [ 324.636515][T19855] RBP: 00007f188255f090 R08: 0000000000000000 R09: 0000000000000000 [ 324.636526][T19855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.636537][T19855] R13: 00007f18819b6038 R14: 00007f18819b5fa0 R15: 00007ffc54d4fa98 [ 324.636560][T19855] [ 324.916610][T19857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.960216][T19857] tipc: Failed to remove unknown binding: 66,1,1/0:1564897549/1564897551 [ 325.012965][T19857] tipc: Failed to remove unknown binding: 66,1,1/0:1564897549/1564897551 [ 325.034498][T19857] tipc: Failed to remove unknown binding: 66,1,1/0:1564897549/1564897551 [ 325.091953][T19862] netlink: 788 bytes leftover after parsing attributes in process `syz.0.3910'. [ 325.169818][T19865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3912'. [ 325.180654][T19865] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3912'. [ 325.863801][T19885] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3918'. [ 325.951067][T19890] FAULT_INJECTION: forcing a failure. [ 325.951067][T19890] name failslab, interval 1, probability 0, space 0, times 0 [ 325.969890][T19890] CPU: 1 UID: 0 PID: 19890 Comm: syz.0.3919 Not tainted syzkaller #0 PREEMPT(full) [ 325.969919][T19890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 325.969931][T19890] Call Trace: [ 325.969938][T19890] [ 325.969947][T19890] dump_stack_lvl+0x189/0x250 [ 325.969974][T19890] ? __pfx____ratelimit+0x10/0x10 [ 325.969999][T19890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.970020][T19890] ? __pfx__printk+0x10/0x10 [ 325.970045][T19890] ? fs_reclaim_acquire+0x7d/0x100 [ 325.970070][T19890] ? rcu_is_watching+0x15/0xb0 [ 325.970086][T19890] ? __pfx___might_resched+0x10/0x10 [ 325.970103][T19890] ? lock_acquire+0x5f/0x360 [ 325.970131][T19890] should_fail_ex+0x414/0x560 [ 325.970158][T19890] should_failslab+0xa8/0x100 [ 325.970186][T19890] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 325.970212][T19890] ? __alloc_skb+0x112/0x2d0 [ 325.970231][T19890] __alloc_skb+0x112/0x2d0 [ 325.970249][T19890] netlink_sendmsg+0x5c6/0xb30 [ 325.970272][T19890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.970291][T19890] ? aa_sock_msg_perm+0xf1/0x1d0 [ 325.970308][T19890] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 325.970329][T19890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.970347][T19890] __sock_sendmsg+0x21c/0x270 [ 325.970371][T19890] ____sys_sendmsg+0x505/0x830 [ 325.970393][T19890] ? __pfx_____sys_sendmsg+0x10/0x10 [ 325.970417][T19890] ? import_iovec+0x74/0xa0 [ 325.970440][T19890] ___sys_sendmsg+0x21f/0x2a0 [ 325.970461][T19890] ? __pfx____sys_sendmsg+0x10/0x10 [ 325.970496][T19890] ? __fget_files+0x2a/0x420 [ 325.970511][T19890] ? __fget_files+0x3a0/0x420 [ 325.970529][T19890] __x64_sys_sendmsg+0x19b/0x260 [ 325.970548][T19890] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 325.970570][T19890] ? __pfx_ksys_write+0x10/0x10 [ 325.970591][T19890] ? rcu_is_watching+0x15/0xb0 [ 325.970610][T19890] ? rcu_is_watching+0x15/0xb0 [ 325.970630][T19890] do_syscall_64+0xfa/0x3b0 [ 325.970649][T19890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.970666][T19890] ? clear_bhb_loop+0x60/0xb0 [ 325.970686][T19890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.970703][T19890] RIP: 0033:0x7fc1bd38ebe9 [ 325.970721][T19890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.970738][T19890] RSP: 002b:00007fc1be1c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.970760][T19890] RAX: ffffffffffffffda RBX: 00007fc1bd5b5fa0 RCX: 00007fc1bd38ebe9 [ 325.970782][T19890] RDX: 5668a5a41429f6ce RSI: 00002000000000c0 RDI: 0000000000000003 [ 325.970796][T19890] RBP: 00007fc1be1c6090 R08: 0000000000000000 R09: 0000000000000000 [ 325.970807][T19890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.970819][T19890] R13: 00007fc1bd5b6038 R14: 00007fc1bd5b5fa0 R15: 00007ffe682f7e98 [ 325.970854][T19890] [ 326.043941][T19893] lo speed is unknown, defaulting to 1000 [ 326.226859][T19903] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3920'. [ 326.284302][T19893] wg1 speed is unknown, defaulting to 1000 [ 326.376106][T19903] ip6tnl0: entered promiscuous mode [ 326.385018][T19903] ip6tnl0: entered allmulticast mode [ 326.455736][T19913] lo speed is unknown, defaulting to 1000 [ 326.470014][T19913] wg1 speed is unknown, defaulting to 1000 [ 327.432525][T19945] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3935'. [ 327.513301][T19945] : entered promiscuous mode [ 327.596901][T19957] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 327.607284][T19957] bridge0: entered allmulticast mode [ 327.646620][T19961] sctp: [Deprecated]: syz.1.3938 (pid 19961) Use of int in max_burst socket option deprecated. [ 327.646620][T19961] Use struct sctp_assoc_value instead [ 327.763107][T19969] netlink: 'syz.4.3942': attribute type 3 has an invalid length. [ 327.771361][T19969] netlink: 'syz.4.3942': attribute type 3 has an invalid length. [ 327.781125][T19967] tipc: Enabled bearer , priority 0 [ 327.791133][T19967] syzkaller0: entered promiscuous mode [ 327.797976][T19967] syzkaller0: entered allmulticast mode [ 327.815938][T19967] tipc: Resetting bearer [ 327.825463][T19966] tipc: Resetting bearer [ 327.835029][T19966] tipc: Disabling bearer [ 327.942538][T19978] FAULT_INJECTION: forcing a failure. [ 327.942538][T19978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.959588][T19978] CPU: 0 UID: 0 PID: 19978 Comm: syz.1.3945 Not tainted syzkaller #0 PREEMPT(full) [ 327.959621][T19978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 327.959633][T19978] Call Trace: [ 327.959642][T19978] [ 327.959651][T19978] dump_stack_lvl+0x189/0x250 [ 327.959680][T19978] ? __pfx____ratelimit+0x10/0x10 [ 327.959708][T19978] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.959731][T19978] ? __pfx__printk+0x10/0x10 [ 327.959754][T19978] ? __might_fault+0xb0/0x130 [ 327.959793][T19978] ? rcu_is_watching+0x15/0xb0 [ 327.959813][T19978] should_fail_ex+0x414/0x560 [ 327.959839][T19978] _copy_from_iter+0x1db/0x16f0 [ 327.959861][T19978] ? rcu_is_watching+0x15/0xb0 [ 327.959878][T19978] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 327.959905][T19978] ? __pfx__copy_from_iter+0x10/0x10 [ 327.959925][T19978] ? __build_skb_around+0x257/0x3e0 [ 327.959944][T19978] ? netlink_sendmsg+0x642/0xb30 [ 327.959962][T19978] ? skb_put+0x11b/0x210 [ 327.959982][T19978] netlink_sendmsg+0x6b2/0xb30 [ 327.960004][T19978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.960023][T19978] ? aa_sock_msg_perm+0xf1/0x1d0 [ 327.960041][T19978] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 327.960062][T19978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.960079][T19978] __sock_sendmsg+0x21c/0x270 [ 327.960105][T19978] ____sys_sendmsg+0x505/0x830 [ 327.960128][T19978] ? __pfx_____sys_sendmsg+0x10/0x10 [ 327.960152][T19978] ? import_iovec+0x74/0xa0 [ 327.960175][T19978] ___sys_sendmsg+0x21f/0x2a0 [ 327.960196][T19978] ? __pfx____sys_sendmsg+0x10/0x10 [ 327.960235][T19978] ? __fget_files+0x2a/0x420 [ 327.960252][T19978] ? __fget_files+0x3a0/0x420 [ 327.960273][T19978] __x64_sys_sendmsg+0x19b/0x260 [ 327.960300][T19978] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 327.960325][T19978] ? __pfx_ksys_write+0x10/0x10 [ 327.960352][T19978] ? rcu_is_watching+0x15/0xb0 [ 327.960371][T19978] do_syscall_64+0xfa/0x3b0 [ 327.960389][T19978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.960407][T19978] ? clear_bhb_loop+0x60/0xb0 [ 327.960429][T19978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.960447][T19978] RIP: 0033:0x7f2a3c58ebe9 [ 327.960464][T19978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.960481][T19978] RSP: 002b:00007f2a3d37a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.960503][T19978] RAX: ffffffffffffffda RBX: 00007f2a3c7b5fa0 RCX: 00007f2a3c58ebe9 [ 327.960518][T19978] RDX: 5668a5a41429f6ce RSI: 00002000000000c0 RDI: 0000000000000003 [ 327.960531][T19978] RBP: 00007f2a3d37a090 R08: 0000000000000000 R09: 0000000000000000 [ 327.960543][T19978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.960554][T19978] R13: 00007f2a3c7b6038 R14: 00007f2a3c7b5fa0 R15: 00007ffff6bae198 [ 327.960577][T19978] [ 328.454611][T19990] vlan2: entered promiscuous mode [ 328.460313][T19990] vlan2: entered allmulticast mode [ 328.465465][T19990] hsr_slave_1: entered allmulticast mode [ 328.596149][T20003] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.620579][T20005] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.685820][T20012] FAULT_INJECTION: forcing a failure. [ 328.685820][T20012] name failslab, interval 1, probability 0, space 0, times 0 [ 328.699572][T20012] CPU: 0 UID: 0 PID: 20012 Comm: syz.1.3956 Not tainted syzkaller #0 PREEMPT(full) [ 328.699604][T20012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 328.699616][T20012] Call Trace: [ 328.699622][T20012] [ 328.699630][T20012] dump_stack_lvl+0x189/0x250 [ 328.699659][T20012] ? __pfx____ratelimit+0x10/0x10 [ 328.699687][T20012] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.699710][T20012] ? __pfx__printk+0x10/0x10 [ 328.699742][T20012] should_fail_ex+0x414/0x560 [ 328.699769][T20012] should_failslab+0xa8/0x100 [ 328.699798][T20012] kmem_cache_alloc_noprof+0x73/0x3c0 [ 328.699840][T20012] ? skb_clone+0x212/0x3a0 [ 328.699863][T20012] skb_clone+0x212/0x3a0 [ 328.699886][T20012] __netlink_deliver_tap+0x404/0x850 [ 328.699922][T20012] ? netlink_deliver_tap+0x2e/0x1b0 [ 328.699950][T20012] netlink_deliver_tap+0x19c/0x1b0 [ 328.699987][T20012] netlink_unicast+0x7fa/0x9e0 [ 328.700025][T20012] ? __pfx_netlink_unicast+0x10/0x10 [ 328.700049][T20012] ? netlink_sendmsg+0x642/0xb30 [ 328.700065][T20012] ? skb_put+0x11b/0x210 [ 328.700083][T20012] netlink_sendmsg+0x805/0xb30 [ 328.700104][T20012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.700123][T20012] ? aa_sock_msg_perm+0xf1/0x1d0 [ 328.700140][T20012] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 328.700161][T20012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.700178][T20012] __sock_sendmsg+0x21c/0x270 [ 328.700203][T20012] ____sys_sendmsg+0x505/0x830 [ 328.700225][T20012] ? __pfx_____sys_sendmsg+0x10/0x10 [ 328.700249][T20012] ? import_iovec+0x74/0xa0 [ 328.700272][T20012] ___sys_sendmsg+0x21f/0x2a0 [ 328.700293][T20012] ? __pfx____sys_sendmsg+0x10/0x10 [ 328.700331][T20012] ? __fget_files+0x2a/0x420 [ 328.700347][T20012] ? __fget_files+0x3a0/0x420 [ 328.700369][T20012] __x64_sys_sendmsg+0x19b/0x260 [ 328.700392][T20012] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 328.700423][T20012] ? __pfx_ksys_write+0x10/0x10 [ 328.700446][T20012] ? rcu_is_watching+0x15/0xb0 [ 328.700468][T20012] ? rcu_is_watching+0x15/0xb0 [ 328.700487][T20012] do_syscall_64+0xfa/0x3b0 [ 328.700504][T20012] ? rcu_is_watching+0x15/0xb0 [ 328.700522][T20012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.700541][T20012] ? clear_bhb_loop+0x60/0xb0 [ 328.700563][T20012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.700581][T20012] RIP: 0033:0x7f2a3c58ebe9 [ 328.700599][T20012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.700617][T20012] RSP: 002b:00007f2a3d37a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.700639][T20012] RAX: ffffffffffffffda RBX: 00007f2a3c7b5fa0 RCX: 00007f2a3c58ebe9 [ 328.700654][T20012] RDX: 5668a5a41429f6ce RSI: 00002000000000c0 RDI: 0000000000000003 [ 328.700668][T20012] RBP: 00007f2a3d37a090 R08: 0000000000000000 R09: 0000000000000000 [ 328.700680][T20012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.700691][T20012] R13: 00007f2a3c7b6038 R14: 00007f2a3c7b5fa0 R15: 00007ffff6bae198 [ 328.700712][T20012] [ 329.035438][T20015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.044469][T20015] team0: Failed to send port change of device batadv0 via netlink (err -105) [ 329.055084][T20015] team0: Failed to send options change via netlink (err -105) [ 329.063778][T20015] team0: Port device batadv0 added [ 329.072581][T20014] __nla_validate_parse: 6 callbacks suppressed [ 329.072602][T20014] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3957'. [ 329.255540][T20023] lo speed is unknown, defaulting to 1000 [ 329.262628][T20023] wg1 speed is unknown, defaulting to 1000 [ 329.332915][T20024] veth5: entered promiscuous mode [ 329.508977][T20043] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 329.529113][T20043] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 329.546385][T20043] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 329.563975][T20043] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 329.582649][T20043] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 329.633649][T20043] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 329.687768][T20051] FAULT_INJECTION: forcing a failure. [ 329.687768][T20051] name failslab, interval 1, probability 0, space 0, times 0 [ 329.742099][T20051] CPU: 0 UID: 0 PID: 20051 Comm: syz.2.3969 Not tainted syzkaller #0 PREEMPT(full) [ 329.742133][T20051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 329.742146][T20051] Call Trace: [ 329.742154][T20051] [ 329.742162][T20051] dump_stack_lvl+0x189/0x250 [ 329.742191][T20051] ? __pfx____ratelimit+0x10/0x10 [ 329.742220][T20051] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.742244][T20051] ? __pfx__printk+0x10/0x10 [ 329.742269][T20051] ? genl_family_rcv_msg_doit+0x267/0x300 [ 329.742297][T20051] ? __pfx___might_resched+0x10/0x10 [ 329.742315][T20051] ? lock_acquire+0x5f/0x360 [ 329.742345][T20051] should_fail_ex+0x414/0x560 [ 329.742373][T20051] should_failslab+0xa8/0x100 [ 329.742403][T20051] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 329.742430][T20051] ? __alloc_skb+0x112/0x2d0 [ 329.742451][T20051] __alloc_skb+0x112/0x2d0 [ 329.742470][T20051] netlink_ack+0x146/0xa50 [ 329.742495][T20051] ? __pfx_genl_rcv_msg+0x10/0x10 [ 329.742516][T20051] ? __kasan_slab_alloc+0x6c/0x80 [ 329.742539][T20051] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 329.742562][T20051] ? __pfx_nl80211_post_doit+0x10/0x10 [ 329.742582][T20051] ? __netlink_lookup+0xbd/0x810 [ 329.742599][T20051] ? rcu_is_watching+0x15/0xb0 [ 329.742706][T20051] netlink_rcv_skb+0x28c/0x470 [ 329.742757][T20051] ? __pfx_genl_rcv_msg+0x10/0x10 [ 329.742779][T20051] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 329.742809][T20051] ? lock_release+0x4b/0x3e0 [ 329.742837][T20051] ? down_read+0x1ad/0x2e0 [ 329.742858][T20051] genl_rcv+0x28/0x40 [ 329.742977][T20051] netlink_unicast+0x82f/0x9e0 [ 329.743026][T20051] ? __pfx_netlink_unicast+0x10/0x10 [ 329.743054][T20051] ? netlink_sendmsg+0x642/0xb30 [ 329.743071][T20051] ? skb_put+0x11b/0x210 [ 329.743091][T20051] netlink_sendmsg+0x805/0xb30 [ 329.743113][T20051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.743132][T20051] ? aa_sock_msg_perm+0xf1/0x1d0 [ 329.743149][T20051] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 329.743169][T20051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.743187][T20051] __sock_sendmsg+0x21c/0x270 [ 329.743213][T20051] ____sys_sendmsg+0x505/0x830 [ 329.743236][T20051] ? __pfx_____sys_sendmsg+0x10/0x10 [ 329.743260][T20051] ? import_iovec+0x74/0xa0 [ 329.743283][T20051] ___sys_sendmsg+0x21f/0x2a0 [ 329.743304][T20051] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.743342][T20051] ? __fget_files+0x2a/0x420 [ 329.743358][T20051] ? __fget_files+0x3a0/0x420 [ 329.743381][T20051] __x64_sys_sendmsg+0x19b/0x260 [ 329.743403][T20051] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 329.743429][T20051] ? __pfx_ksys_write+0x10/0x10 [ 329.743453][T20051] ? rcu_is_watching+0x15/0xb0 [ 329.743473][T20051] do_syscall_64+0xfa/0x3b0 [ 329.743492][T20051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.743510][T20051] ? clear_bhb_loop+0x60/0xb0 [ 329.743530][T20051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.743546][T20051] RIP: 0033:0x7f7dc318ebe9 [ 329.743564][T20051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.743581][T20051] RSP: 002b:00007f7dc406a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.743604][T20051] RAX: ffffffffffffffda RBX: 00007f7dc33b5fa0 RCX: 00007f7dc318ebe9 [ 329.743620][T20051] RDX: 5668a5a41429f6ce RSI: 00002000000000c0 RDI: 0000000000000003 [ 329.743634][T20051] RBP: 00007f7dc406a090 R08: 0000000000000000 R09: 0000000000000000 [ 329.743644][T20051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.743655][T20051] R13: 00007f7dc33b6038 R14: 00007f7dc33b5fa0 R15: 00007ffee1b0d468 [ 329.743676][T20051] [ 330.503245][T20079] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3977'. [ 330.633116][T20089] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.692020][T20089] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.718854][T20098] tipc: Started in network mode [ 330.724103][T20098] tipc: Node identity , cluster identity 4711 [ 330.732947][T20098] tipc: Failed to obtain node identity [ 330.743015][T20098] tipc: Enabling of bearer rejected, failed to enable media [ 330.754405][T20089] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.797612][T20098] syzkaller0: entered promiscuous mode [ 330.803367][T20098] syzkaller0: entered allmulticast mode [ 330.814118][T20100] netlink: 'syz.0.3982': attribute type 1 has an invalid length. [ 330.824641][T20089] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.910842][T20099] IPVS: length: 106 != 24 [ 330.933879][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.953275][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.979242][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.989172][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.205364][T20107] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3985'. [ 331.218096][T20105] netlink: 'syz.0.3984': attribute type 303 has an invalid length. [ 331.222853][T20107] tc_dump_action: action bad kind [ 331.235074][T20107] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3985'. [ 331.275481][T20111] netlink: get zone limit has 8 unknown bytes [ 331.416496][T20118] lo speed is unknown, defaulting to 1000 [ 331.430729][T20118] wg1 speed is unknown, defaulting to 1000 [ 331.474536][T20125] netlink: 'syz.2.3992': attribute type 10 has an invalid length. [ 331.491352][T20125] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 331.991864][T20161] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3999'. [ 332.005855][T20157] netlink: 'syz.0.3998': attribute type 1 has an invalid length. [ 332.034827][T20161] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3999'. [ 332.063463][T20161] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3999'. [ 332.080738][T20161] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3999'. [ 332.095339][T20161] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3999'. [ 332.109966][T20157] 8021q: adding VLAN 0 to HW filter on device bond5 [ 332.112979][T20161] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3999'. [ 332.165676][T20171] netlink: 'syz.1.4001': attribute type 4 has an invalid length. [ 332.215115][T20175] openvswitch: netlink: Missing valid actions attribute. [ 332.223945][T20175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.883248][T20208] bridge_slave_1 (unregistering): left allmulticast mode [ 332.913835][T20208] bridge_slave_1 (unregistering): left promiscuous mode [ 332.934486][T20208] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.642356][ T9389] wg1 speed is unknown, defaulting to 1000 [ 333.760963][T20242] netlink: 'syz.2.4023': attribute type 3 has an invalid length. [ 334.234431][T20288] netlink: 'syz.3.4037': attribute type 8 has an invalid length. [ 334.264274][T20288] __nla_validate_parse: 7 callbacks suppressed [ 334.264298][T20288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4037'. [ 334.405266][T20298] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4039'. [ 334.451756][T20302] dvmrp8: entered allmulticast mode [ 334.466562][T20301] dvmrp8: left allmulticast mode [ 334.546803][T20310] Bluetooth: MGMT ver 1.23 [ 334.753327][T20321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4047'. [ 335.008706][T20335] netlink: 'syz.3.4049': attribute type 1 has an invalid length. [ 335.056356][T20335] 8021q: adding VLAN 0 to HW filter on device bond3 [ 335.090150][T20335] batman_adv: batadv0: Interface deactivated: dummy0 [ 335.169512][T20335] batman_adv: batadv0: Removing interface: dummy0 [ 335.233194][T20335] bond3: (slave dummy0): making interface the new active one [ 335.279154][T20335] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 335.302831][T20349] netlink: 9280 bytes leftover after parsing attributes in process `syz.1.4053'. [ 335.350305][T20351] syz_tun: entered allmulticast mode [ 335.357900][T20349] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4053'. [ 335.362574][T20351] dvmrp8: entered allmulticast mode [ 335.383470][T20351] syz_tun: left allmulticast mode [ 335.393102][T20351] dvmrp8: left allmulticast mode [ 335.393883][T20349] net_ratelimit: 1 callbacks suppressed [ 335.393898][T20349] netlink: zone id is out of range [ 335.427628][T20349] netlink: zone id is out of range [ 335.441348][T20349] netlink: zone id is out of range [ 335.464647][T20349] netlink: get zone limit has 8 unknown bytes [ 335.484475][T20354] lo speed is unknown, defaulting to 1000 [ 335.488911][T20359] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4058'. [ 335.503137][T20351] netlink: 'syz.4.4054': attribute type 23 has an invalid length. [ 335.514485][T20354] wg1 speed is unknown, defaulting to 1000 [ 335.689382][T20365] lo speed is unknown, defaulting to 1000 [ 335.696555][T20365] wg1 speed is unknown, defaulting to 1000 [ 335.770611][T20373] lo speed is unknown, defaulting to 1000 [ 335.793884][T20373] wg1 speed is unknown, defaulting to 1000 [ 335.814527][T20379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4063'. [ 335.983848][T20388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4065'. [ 336.041898][T20391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4067'. [ 336.100632][T20388] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.108395][T20388] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.712492][T20415] netlink: 'syz.0.4072': attribute type 83 has an invalid length. [ 336.731303][T20415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4072'. [ 336.982685][T20433] vxcan1: entered allmulticast mode [ 337.046578][T20436] lo speed is unknown, defaulting to 1000 [ 337.089013][T20436] wg1 speed is unknown, defaulting to 1000 [ 337.104080][T20445] lo speed is unknown, defaulting to 1000 [ 337.221375][T20455] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 337.242428][T20446] lo speed is unknown, defaulting to 1000 [ 337.242483][T20445] wg1 speed is unknown, defaulting to 1000 [ 337.285259][T20446] wg1 speed is unknown, defaulting to 1000 [ 337.376148][T20478] netlink: 'syz.3.4090': attribute type 1 has an invalid length. [ 337.478349][T20482] bond4: (slave veth9): Enslaving as an active interface with a down link [ 337.523756][T20478] 8021q: adding VLAN 0 to HW filter on device bond4 [ 337.545633][T20491] tipc: Started in network mode [ 337.551126][T20491] tipc: Node identity 3205a79881f7, cluster identity 4711 [ 337.572007][T20491] tipc: Enabled bearer , priority 0 [ 337.595966][T20485] syzkaller0: entered promiscuous mode [ 337.621873][T20485] syzkaller0: entered allmulticast mode [ 337.642998][T20485] tipc: Resetting bearer [ 337.651494][T20484] tipc: Resetting bearer [ 337.659550][T20499] netlink: 'syz.3.4096': attribute type 2 has an invalid length. [ 337.671031][T20484] tipc: Disabling bearer [ 337.812439][T20502] atomic_op ffff88804ee75198 conn xmit_atomic 0000000000000000 [ 337.965192][T20516] netlink: 'syz.0.4099': attribute type 1 has an invalid length. [ 337.995568][T20507] lo speed is unknown, defaulting to 1000 [ 338.013387][T20507] wg1 speed is unknown, defaulting to 1000 [ 338.133221][T20517] lo speed is unknown, defaulting to 1000 [ 338.181536][T20517] wg1 speed is unknown, defaulting to 1000 [ 338.481062][T20554] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 338.786924][T20568] netlink: 'syz.3.4116': attribute type 1 has an invalid length. [ 338.816058][T20568] 8021q: adding VLAN 0 to HW filter on device bond5 [ 338.843477][T20568] bond5: (slave bridge2): making interface the new active one [ 338.854688][T20568] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 338.873592][T20568] bond5: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 339.074431][T20582] lo speed is unknown, defaulting to 1000 [ 339.083132][T20582] wg1 speed is unknown, defaulting to 1000 [ 339.362911][T20598] dvmrp0: left allmulticast mode [ 339.373359][T20598] dvmrp1: left allmulticast mode [ 339.712101][T20628] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 339.824058][T20635] FAULT_INJECTION: forcing a failure. [ 339.824058][T20635] name failslab, interval 1, probability 0, space 0, times 0 [ 339.840213][T20635] CPU: 0 UID: 0 PID: 20635 Comm: syz.3.4135 Not tainted syzkaller #0 PREEMPT(full) [ 339.840245][T20635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 339.840257][T20635] Call Trace: [ 339.840263][T20635] [ 339.840271][T20635] dump_stack_lvl+0x189/0x250 [ 339.840299][T20635] ? __pfx____ratelimit+0x10/0x10 [ 339.840327][T20635] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.840349][T20635] ? __pfx__printk+0x10/0x10 [ 339.840377][T20635] ? __pfx___might_resched+0x10/0x10 [ 339.840394][T20635] ? lock_acquire+0x5f/0x360 [ 339.840420][T20635] should_fail_ex+0x414/0x560 [ 339.840448][T20635] should_failslab+0xa8/0x100 [ 339.840474][T20635] __kmalloc_cache_noprof+0x70/0x3d0 [ 339.840500][T20635] ? nl80211_dump_station+0x359/0xca0 [ 339.840527][T20635] nl80211_dump_station+0x359/0xca0 [ 339.840550][T20635] ? __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 339.840574][T20635] ? kmalloc_reserve+0x136/0x290 [ 339.840591][T20635] ? __alloc_skb+0x142/0x2d0 [ 339.840616][T20635] ? netlink_dump+0x1b7/0xe90 [ 339.840648][T20635] ? __pfx_nl80211_dump_station+0x10/0x10 [ 339.840690][T20635] ? trace_kmalloc+0x1f/0xd0 [ 339.840710][T20635] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 339.840739][T20635] ? __build_skb_around+0x257/0x3e0 [ 339.840758][T20635] genl_dumpit+0x10b/0x1b0 [ 339.840782][T20635] netlink_dump+0x6e1/0xe90 [ 339.840813][T20635] ? __pfx_netlink_dump+0x10/0x10 [ 339.840857][T20635] ? genl_start+0x499/0x6c0 [ 339.840882][T20635] __netlink_dump_start+0x5cb/0x7e0 [ 339.840913][T20635] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 339.840937][T20635] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 339.840959][T20635] ? genl_get_cmd+0x7d9/0x910 [ 339.840983][T20635] ? __pfx_genl_start+0x10/0x10 [ 339.841003][T20635] ? __pfx_genl_dumpit+0x10/0x10 [ 339.841024][T20635] ? __pfx_genl_done+0x10/0x10 [ 339.841054][T20635] genl_rcv_msg+0x5da/0x790 [ 339.841079][T20635] ? __pfx_genl_rcv_msg+0x10/0x10 [ 339.841101][T20635] ? __pfx_nl80211_dump_station+0x10/0x10 [ 339.841133][T20635] ? __asan_memcpy+0x40/0x70 [ 339.841153][T20635] ? __pfx_ref_tracker_free+0x10/0x10 [ 339.841184][T20635] netlink_rcv_skb+0x208/0x470 [ 339.841212][T20635] ? __pfx_genl_rcv_msg+0x10/0x10 [ 339.841234][T20635] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 339.841266][T20635] ? lock_release+0x4b/0x3e0 [ 339.841294][T20635] ? down_read+0x1ad/0x2e0 [ 339.841313][T20635] genl_rcv+0x28/0x40 [ 339.841331][T20635] netlink_unicast+0x82f/0x9e0 [ 339.841359][T20635] ? __pfx_netlink_unicast+0x10/0x10 [ 339.841386][T20635] ? netlink_sendmsg+0x642/0xb30 [ 339.841402][T20635] ? skb_put+0x11b/0x210 [ 339.841422][T20635] netlink_sendmsg+0x805/0xb30 [ 339.841444][T20635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.841462][T20635] ? aa_sock_msg_perm+0xf1/0x1d0 [ 339.841480][T20635] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 339.841501][T20635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.841519][T20635] __sock_sendmsg+0x21c/0x270 [ 339.841545][T20635] ____sys_sendmsg+0x505/0x830 [ 339.841569][T20635] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.841593][T20635] ? import_iovec+0x74/0xa0 [ 339.841616][T20635] ___sys_sendmsg+0x21f/0x2a0 [ 339.841638][T20635] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.841676][T20635] ? __fget_files+0x2a/0x420 [ 339.841692][T20635] ? __fget_files+0x3a0/0x420 [ 339.841714][T20635] __x64_sys_sendmsg+0x19b/0x260 [ 339.841735][T20635] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 339.841760][T20635] ? __pfx_ksys_write+0x10/0x10 [ 339.841784][T20635] ? rcu_is_watching+0x15/0xb0 [ 339.841805][T20635] ? rcu_is_watching+0x15/0xb0 [ 339.841825][T20635] do_syscall_64+0xfa/0x3b0 [ 339.841854][T20635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.841873][T20635] ? clear_bhb_loop+0x60/0xb0 [ 339.841896][T20635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.841915][T20635] RIP: 0033:0x7f629098ebe9 [ 339.841933][T20635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.841951][T20635] RSP: 002b:00007f6291852038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.841973][T20635] RAX: ffffffffffffffda RBX: 00007f6290bb5fa0 RCX: 00007f629098ebe9 [ 339.841988][T20635] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 339.842001][T20635] RBP: 00007f6291852090 R08: 0000000000000000 R09: 0000000000000000 [ 339.842014][T20635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 339.842026][T20635] R13: 00007f6290bb6038 R14: 00007f6290bb5fa0 R15: 00007ffc4f566128 [ 339.842050][T20635] [ 339.926504][T20638] __nla_validate_parse: 12 callbacks suppressed [ 339.926525][T20638] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4136'. [ 339.932260][T20639] netlink: 'syz.1.4134': attribute type 5 has an invalid length. [ 340.304279][T20653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4139'. [ 340.463565][T20659] erspan0: entered promiscuous mode [ 340.475824][T20659] erspan0: left promiscuous mode [ 340.534384][T20662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4142'. [ 340.706440][T20668] netlink: 'syz.3.4146': attribute type 1 has an invalid length. [ 340.720466][T20668] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4146'. [ 340.824452][T20680] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4148'. [ 341.011398][T20675] lo speed is unknown, defaulting to 1000 [ 341.042239][T20675] wg1 speed is unknown, defaulting to 1000 [ 341.115737][T20690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4152'. [ 341.192294][T20706] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4155'. [ 341.243090][T20711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4158'. [ 341.260294][T20690] bridge3: port 1(veth3) entered blocking state [ 341.267794][T20712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4158'. [ 341.277919][T20690] bridge3: port 1(veth3) entered disabled state [ 341.278177][T20690] veth3: entered allmulticast mode [ 341.294397][T20690] veth3: entered promiscuous mode [ 341.311237][T20713] bridge3: port 2(veth0_to_bond) entered blocking state [ 341.367219][T20713] bridge3: port 2(veth0_to_bond) entered disabled state [ 341.378706][T20713] veth0_to_bond: entered allmulticast mode [ 341.392645][T20713] veth0_to_bond: entered promiscuous mode [ 341.642752][T20738] lo speed is unknown, defaulting to 1000 [ 341.705864][T20738] wg1 speed is unknown, defaulting to 1000 [ 341.746174][T20746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4166'. [ 341.798517][T20748] tipc: Enabled bearer , priority 0 [ 341.816703][T20748] syzkaller0: entered promiscuous mode [ 341.827355][T20748] syzkaller0: entered allmulticast mode [ 342.042876][T20748] tipc: Resetting bearer [ 342.081432][T20748] netlink: 'syz.3.4168': attribute type 1 has an invalid length. [ 342.100505][T20748] netlink: 'syz.3.4168': attribute type 1 has an invalid length. [ 342.125605][T20748] netlink: 'syz.3.4168': attribute type 1 has an invalid length. [ 342.145150][T20748] netlink: 'syz.3.4168': attribute type 1 has an invalid length. [ 342.186916][T20772] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 342.223496][T20747] tipc: Resetting bearer [ 342.249579][T20747] tipc: Disabling bearer [ 342.266916][T20769] tipc: Started in network mode [ 342.280077][T20769] tipc: Node identity ffff, cluster identity 4711 [ 342.300306][T20769] tipc: Node number set to 65535 [ 342.305755][T20769] tipc: Cannot configure node identity twice [ 342.376523][T20777] rdma_rxe: rxe_newlink: failed to add lo [ 342.488346][T20786] netlink: 'syz.3.4179': attribute type 1 has an invalid length. [ 342.496190][T20786] netlink: 'syz.3.4179': attribute type 6 has an invalid length. [ 342.547371][T20786] netlink: 'syz.3.4179': attribute type 3 has an invalid length. [ 342.856451][T20814] geneve2: entered promiscuous mode [ 342.869461][T20814] geneve2: entered allmulticast mode [ 342.882879][T20815] syzkaller1: entered allmulticast mode [ 343.324786][ T36] bond9 (unregistering): (slave gretap2): Releasing active interface [ 343.397924][ T36] bond8 (unregistering): (slave geneve2): Releasing active interface [ 343.671097][ T36] à (unregistering): Released all slaves [ 343.682267][ T36] smc: removing net device bond0 with user defined pnetid SYZ2 [ 343.690697][ T36] bond0 (unregistering): Released all slaves [ 343.704560][ T36] bond1 (unregistering): Released all slaves [ 343.717987][ T36] bond2 (unregistering): Released all slaves [ 343.730458][ T36] bond3 (unregistering): Released all slaves [ 343.741638][ T36] bond4 (unregistering): Released all slaves [ 343.755090][ T36] bond5 (unregistering): Released all slaves [ 343.766105][ T36] bond6 (unregistering): Released all slaves [ 343.781517][ T36] bond7 (unregistering): (slave batadv2): Releasing active interface [ 343.792346][ T36] bond7 (unregistering): Released all slaves [ 343.801956][ T36] bond8 (unregistering): Released all slaves [ 343.813171][ T36] bond9 (unregistering): Released all slaves [ 343.945622][T20844] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 343.986005][ T36] tipc: Disabling bearer [ 344.010728][ T36] tipc: Left network mode [ 344.023288][T20847] lo speed is unknown, defaulting to 1000 [ 344.058345][T20847] wg1 speed is unknown, defaulting to 1000 [ 344.498753][T20882] veth4: entered promiscuous mode [ 344.505106][T20882] veth4: entered allmulticast mode [ 344.544778][T20890] validate_nla: 3 callbacks suppressed [ 344.544794][T20890] netlink: 'syz.0.4208': attribute type 10 has an invalid length. [ 344.564755][T20890] team0: entered promiscuous mode [ 344.574361][T20890] team_slave_0: entered promiscuous mode [ 344.581098][T20890] team_slave_1: entered promiscuous mode [ 344.588971][T20890] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.598340][T20890] bridge0: port 3(team0) entered blocking state [ 344.605997][T20890] bridge0: port 3(team0) entered disabled state [ 344.616634][T20890] team0: entered allmulticast mode [ 344.622509][T20890] team_slave_0: entered allmulticast mode [ 344.634363][T20890] team_slave_1: entered allmulticast mode [ 344.712785][ T36] hsr_slave_0: left promiscuous mode [ 344.719430][ T36] hsr_slave_1: left promiscuous mode [ 345.108355][T20913] lo speed is unknown, defaulting to 1000 [ 345.116112][T20913] wg1 speed is unknown, defaulting to 1000 [ 345.299178][T20906] lo speed is unknown, defaulting to 1000 [ 345.306507][ T36] IPVS: stop unused estimator thread 0... [ 345.335149][T20906] wg1 speed is unknown, defaulting to 1000 [ 345.687276][T20943] ------------[ cut here ]------------ [ 345.692807][T20943] WARNING: CPU: 0 PID: 20943 at net/ipv6/route.c:4857 rt6_multipath_rebalance+0x455/0x8b0 [ 345.703716][T20943] Modules linked in: [ 345.707796][T20943] CPU: 0 UID: 0 PID: 20943 Comm: syz.4.4220 Not tainted syzkaller #0 PREEMPT(full) [ 345.717595][T20943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 345.727928][T20943] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0 [ 345.734423][T20943] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 5d 0a f2 f7 e9 78 fe ff ff e8 13 9f 8e f7 eb 05 e8 0c 9f 8e f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 345.754735][T20943] RSP: 0018:ffffc9000cfa6620 EFLAGS: 00010293 [ 345.760895][T20943] RAX: ffffffff8a310c1d RBX: dffffc0000000000 RCX: ffff888025c99e00 [ 345.769026][T20943] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 345.777259][T20943] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 345.785379][T20943] R10: dffffc0000000000 R11: fffff520019f4cbc R12: ffff88802f3688de [ 345.793696][T20943] R13: ffff88802f368890 R14: 0000000000000000 R15: 1ffff11005e6d112 [ 345.801940][T20943] FS: 00007f188251d6c0(0000) GS:ffff888125c1a000(0000) knlGS:0000000000000000 [ 345.811268][T20943] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 345.818106][T20943] CR2: 0000000000000000 CR3: 0000000075434000 CR4: 00000000003526f0 [ 345.826206][T20943] Call Trace: [ 345.829656][T20943] [ 345.832711][T20943] fib6_ifup+0x14a/0x180 [ 345.837133][T20943] ? __pfx_fib6_ifup+0x10/0x10 [ 345.842041][T20943] fib6_clean_node+0x24a/0x590 [ 345.846860][T20943] ? __pfx_fib6_clean_node+0x10/0x10 [ 345.852339][T20943] ? nlmsg_notify+0xf0/0x1a0 [ 345.857023][T20943] ? rtnetlink_rcv_msg+0x7cc/0xb70 [ 345.862359][T20943] ? netlink_rcv_skb+0x208/0x470 [ 345.867475][T20943] ? netlink_unicast+0x82f/0x9e0 [ 345.872564][T20943] ? rcu_is_watching+0x15/0xb0 [ 345.877771][T20943] fib6_walk_continue+0x67b/0x910 [ 345.882961][T20943] fib6_walk+0x149/0x290 [ 345.887473][T20943] __fib6_clean_all+0x234/0x380 [ 345.892541][T20943] ? __fib6_clean_all+0x9b/0x380 [ 345.897743][T20943] ? __pfx_fib6_ifup+0x10/0x10 [ 345.902556][T20943] ? __pfx___fib6_clean_all+0x10/0x10 [ 345.908027][T20943] ? __pfx_fib6_clean_node+0x10/0x10 [ 345.913359][T20943] ? __pfx_fib6_ifup+0x10/0x10 [ 345.918565][T20943] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 345.924344][T20943] rt6_sync_up+0x128/0x160 [ 345.928963][T20943] ? __pfx_rt6_sync_up+0x10/0x10 [ 345.934384][T20943] ? ipv6_mc_up+0x3da/0x580 [ 345.938968][T20943] addrconf_notify+0xd55/0x1010 [ 345.944057][T20943] notifier_call_chain+0x1b3/0x3e0 [ 345.949301][T20943] netif_state_change+0x284/0x3a0 [ 345.954665][T20943] ? __pfx_netif_state_change+0x10/0x10 [ 345.960580][T20943] ? do_set_master+0x1f7/0x6d0 [ 345.965485][T20943] ? validate_linkmsg+0x765/0x950 [ 345.970689][T20943] do_setlink+0x35de/0x41c0 [ 345.975492][T20943] ? rcu_is_watching+0x15/0xb0 [ 345.980762][T20943] ? __schedule+0x17ae/0x4cc0 [ 345.985727][T20943] ? __pfx_do_setlink+0x10/0x10 [ 345.990844][T20943] ? do_raw_spin_lock+0x121/0x290 [ 345.996316][T20943] ? rcu_is_watching+0x15/0xb0 [ 346.001435][T20943] ? rcu_is_watching+0x15/0xb0 [ 346.006724][T20943] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 346.013115][T20943] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 346.019667][T20943] ? rcu_is_watching+0x15/0xb0 [ 346.024888][T20943] ? __mutex_lock+0xd3b/0x1350 [ 346.029735][T20943] ? __mutex_lock+0x5bb/0x1350 [ 346.034718][T20943] ? rcu_is_watching+0x15/0xb0 [ 346.039587][T20943] rtnl_newlink+0x149f/0x1c70 [ 346.044312][T20943] ? netlink_sendmsg+0x805/0xb30 [ 346.049380][T20943] ? __pfx_rtnl_newlink+0x10/0x10 [ 346.054421][T20943] ? rcu_is_watching+0x15/0xb0 [ 346.059254][T20943] ? nlmon_xmit+0xb0/0x100 [ 346.063695][T20943] ? kmem_cache_free+0x18f/0x400 [ 346.068783][T20943] ? rcu_is_watching+0x15/0xb0 [ 346.073999][T20943] ? __dev_queue_xmit+0x27b/0x3b50 [ 346.079317][T20943] ? __local_bh_enable_ip+0x12d/0x1c0 [ 346.084732][T20943] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 346.090895][T20943] ? __dev_queue_xmit+0x27b/0x3b50 [ 346.096041][T20943] ? lock_release+0x4b/0x3e0 [ 346.100712][T20943] ? __dev_queue_xmit+0x27b/0x3b50 [ 346.106035][T20943] ? __dev_queue_xmit+0x27b/0x3b50 [ 346.111214][T20943] ? __dev_queue_xmit+0x1d79/0x3b50 [ 346.116606][T20943] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 346.125549][T20943] ? rcu_is_watching+0x15/0xb0 [ 346.130503][T20943] ? lock_release+0x4b/0x3e0 [ 346.135112][T20943] ? bpf_lsm_capable+0x9/0x20 [ 346.139824][T20943] ? security_capable+0x7e/0x2e0 [ 346.144880][T20943] ? __pfx_rtnl_newlink+0x10/0x10 [ 346.150263][T20943] rtnetlink_rcv_msg+0x7cc/0xb70 [ 346.155235][T20943] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 346.160831][T20943] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 346.166591][T20943] ? ref_tracker_free+0x63a/0x7d0 [ 346.172158][T20943] ? __asan_memcpy+0x40/0x70 [ 346.177168][T20943] ? __pfx_ref_tracker_free+0x10/0x10 [ 346.182603][T20943] netlink_rcv_skb+0x208/0x470 [ 346.187456][T20943] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 346.193056][T20943] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 346.198627][T20943] netlink_unicast+0x82f/0x9e0 [ 346.203830][T20943] ? __pfx_netlink_unicast+0x10/0x10 [ 346.209303][T20943] ? netlink_sendmsg+0x642/0xb30 [ 346.214735][T20943] ? skb_put+0x11b/0x210 [ 346.219318][T20943] netlink_sendmsg+0x805/0xb30 [ 346.224302][T20943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.230244][T20943] ? aa_sock_msg_perm+0xf1/0x1d0 [ 346.235391][T20943] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 346.240834][T20943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.246496][T20943] __sock_sendmsg+0x21c/0x270 [ 346.251350][T20943] ____sys_sendmsg+0x505/0x830 [ 346.256306][T20943] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.261653][T20943] ? import_iovec+0x74/0xa0 [ 346.266751][T20943] ___sys_sendmsg+0x21f/0x2a0 [ 346.271627][T20943] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.276938][T20943] ? __fget_files+0x2a/0x420 [ 346.281711][T20943] ? __fget_files+0x3a0/0x420 [ 346.286726][T20943] __x64_sys_sendmsg+0x19b/0x260 [ 346.291918][T20943] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 346.297660][T20943] ? rcu_is_watching+0x15/0xb0 [ 346.302678][T20943] ? do_user_addr_fault+0xc8a/0x1390 [ 346.308208][T20943] ? rcu_is_watching+0x15/0xb0 [ 346.313207][T20943] do_syscall_64+0xfa/0x3b0 [ 346.318074][T20943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.324181][T20943] ? clear_bhb_loop+0x60/0xb0 [ 346.329124][T20943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.335215][T20943] RIP: 0033:0x7f188178ebe9 [ 346.339907][T20943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.359889][T20943] RSP: 002b:00007f188251d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.368700][T20943] RAX: ffffffffffffffda RBX: 00007f18819b6180 RCX: 00007f188178ebe9 [ 346.376789][T20943] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000008 [ 346.385269][T20943] RBP: 00007f1881811e19 R08: 0000000000000000 R09: 0000000000000000 [ 346.393380][T20943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.401748][T20943] R13: 00007f18819b6218 R14: 00007f18819b6180 R15: 00007ffc54d4fa98 [ 346.409781][T20943] [ 346.413153][T20943] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 346.421053][T20943] CPU: 0 UID: 0 PID: 20943 Comm: syz.4.4220 Not tainted syzkaller #0 PREEMPT(full) [ 346.432100][T20943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 346.443117][T20943] Call Trace: [ 346.446555][T20943] [ 346.449947][T20943] dump_stack_lvl+0x99/0x250 [ 346.455166][T20943] ? __asan_memcpy+0x40/0x70 [ 346.460043][T20943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.465519][T20943] ? __pfx__printk+0x10/0x10 [ 346.470400][T20943] vpanic+0x281/0x750 [ 346.474769][T20943] ? __pfx__printk+0x10/0x10 [ 346.479388][T20943] ? __pfx_vpanic+0x10/0x10 [ 346.483916][T20943] ? is_bpf_text_address+0x26/0x2b0 [ 346.489694][T20943] panic+0xb9/0xc0 [ 346.493535][T20943] ? __pfx_panic+0x10/0x10 [ 346.498536][T20943] __warn+0x31b/0x4b0 [ 346.503522][T20943] ? rt6_multipath_rebalance+0x455/0x8b0 [ 346.511013][T20943] ? rt6_multipath_rebalance+0x455/0x8b0 [ 346.517514][T20943] report_bug+0x2be/0x4f0 [ 346.521987][T20943] ? rt6_multipath_rebalance+0x455/0x8b0 [ 346.528631][T20943] ? rt6_multipath_rebalance+0x455/0x8b0 [ 346.534837][T20943] ? rt6_multipath_rebalance+0x457/0x8b0 [ 346.541008][T20943] handle_bug+0x84/0x160 [ 346.545614][T20943] exc_invalid_op+0x1a/0x50 [ 346.550666][T20943] asm_exc_invalid_op+0x1a/0x20 [ 346.555876][T20943] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0 [ 346.562827][T20943] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 5d 0a f2 f7 e9 78 fe ff ff e8 13 9f 8e f7 eb 05 e8 0c 9f 8e f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 346.583423][T20943] RSP: 0018:ffffc9000cfa6620 EFLAGS: 00010293 [ 346.589600][T20943] RAX: ffffffff8a310c1d RBX: dffffc0000000000 RCX: ffff888025c99e00 [ 346.597953][T20943] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 346.606106][T20943] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 346.614437][T20943] R10: dffffc0000000000 R11: fffff520019f4cbc R12: ffff88802f3688de [ 346.622514][T20943] R13: ffff88802f368890 R14: 0000000000000000 R15: 1ffff11005e6d112 [ 346.630689][T20943] ? rt6_multipath_rebalance+0x44d/0x8b0 [ 346.636434][T20943] fib6_ifup+0x14a/0x180 [ 346.640886][T20943] ? __pfx_fib6_ifup+0x10/0x10 [ 346.645839][T20943] fib6_clean_node+0x24a/0x590 [ 346.650631][T20943] ? __pfx_fib6_clean_node+0x10/0x10 [ 346.656049][T20943] ? nlmsg_notify+0xf0/0x1a0 [ 346.660673][T20943] ? rtnetlink_rcv_msg+0x7cc/0xb70 [ 346.665983][T20943] ? netlink_rcv_skb+0x208/0x470 [ 346.670991][T20943] ? netlink_unicast+0x82f/0x9e0 [ 346.675978][T20943] ? rcu_is_watching+0x15/0xb0 [ 346.681025][T20943] fib6_walk_continue+0x67b/0x910 [ 346.686256][T20943] fib6_walk+0x149/0x290 [ 346.690715][T20943] __fib6_clean_all+0x234/0x380 [ 346.695778][T20943] ? __fib6_clean_all+0x9b/0x380 [ 346.700824][T20943] ? __pfx_fib6_ifup+0x10/0x10 [ 346.705706][T20943] ? __pfx___fib6_clean_all+0x10/0x10 [ 346.711293][T20943] ? __pfx_fib6_clean_node+0x10/0x10 [ 346.716689][T20943] ? __pfx_fib6_ifup+0x10/0x10 [ 346.721479][T20943] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 346.727131][T20943] rt6_sync_up+0x128/0x160 [ 346.731658][T20943] ? __pfx_rt6_sync_up+0x10/0x10 [ 346.736646][T20943] ? ipv6_mc_up+0x3da/0x580 [ 346.741176][T20943] addrconf_notify+0xd55/0x1010 [ 346.746037][T20943] notifier_call_chain+0x1b3/0x3e0 [ 346.751164][T20943] netif_state_change+0x284/0x3a0 [ 346.756293][T20943] ? __pfx_netif_state_change+0x10/0x10 [ 346.761944][T20943] ? do_set_master+0x1f7/0x6d0 [ 346.766706][T20943] ? validate_linkmsg+0x765/0x950 [ 346.771854][T20943] do_setlink+0x35de/0x41c0 [ 346.776461][T20943] ? rcu_is_watching+0x15/0xb0 [ 346.781325][T20943] ? __schedule+0x17ae/0x4cc0 [ 346.786009][T20943] ? __pfx_do_setlink+0x10/0x10 [ 346.791024][T20943] ? do_raw_spin_lock+0x121/0x290 [ 346.796229][T20943] ? rcu_is_watching+0x15/0xb0 [ 346.800992][T20943] ? rcu_is_watching+0x15/0xb0 [ 346.805799][T20943] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 346.811716][T20943] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 346.818052][T20943] ? rcu_is_watching+0x15/0xb0 [ 346.822989][T20943] ? __mutex_lock+0xd3b/0x1350 [ 346.827752][T20943] ? __mutex_lock+0x5bb/0x1350 [ 346.832710][T20943] ? rcu_is_watching+0x15/0xb0 [ 346.837568][T20943] rtnl_newlink+0x149f/0x1c70 [ 346.842273][T20943] ? netlink_sendmsg+0x805/0xb30 [ 346.847233][T20943] ? __pfx_rtnl_newlink+0x10/0x10 [ 346.852377][T20943] ? rcu_is_watching+0x15/0xb0 [ 346.857157][T20943] ? nlmon_xmit+0xb0/0x100 [ 346.861575][T20943] ? kmem_cache_free+0x18f/0x400 [ 346.866623][T20943] ? rcu_is_watching+0x15/0xb0 [ 346.871423][T20943] ? __dev_queue_xmit+0x27b/0x3b50 [ 346.876571][T20943] ? __local_bh_enable_ip+0x12d/0x1c0 [ 346.881960][T20943] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 346.887880][T20943] ? __dev_queue_xmit+0x27b/0x3b50 [ 346.893359][T20943] ? lock_release+0x4b/0x3e0 [ 346.898001][T20943] ? __dev_queue_xmit+0x27b/0x3b50 [ 346.903253][T20943] ? __dev_queue_xmit+0x27b/0x3b50 [ 346.908489][T20943] ? __dev_queue_xmit+0x1d79/0x3b50 [ 346.913889][T20943] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 346.919432][T20943] ? rcu_is_watching+0x15/0xb0 [ 346.924213][T20943] ? lock_release+0x4b/0x3e0 [ 346.929784][T20943] ? bpf_lsm_capable+0x9/0x20 [ 346.934614][T20943] ? security_capable+0x7e/0x2e0 [ 346.939974][T20943] ? __pfx_rtnl_newlink+0x10/0x10 [ 346.945374][T20943] rtnetlink_rcv_msg+0x7cc/0xb70 [ 346.950746][T20943] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 346.956202][T20943] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 346.961756][T20943] ? ref_tracker_free+0x63a/0x7d0 [ 346.966874][T20943] ? __asan_memcpy+0x40/0x70 [ 346.971658][T20943] ? __pfx_ref_tracker_free+0x10/0x10 [ 346.977176][T20943] netlink_rcv_skb+0x208/0x470 [ 346.982064][T20943] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 346.987622][T20943] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 346.993179][T20943] netlink_unicast+0x82f/0x9e0 [ 346.997985][T20943] ? __pfx_netlink_unicast+0x10/0x10 [ 347.003322][T20943] ? netlink_sendmsg+0x642/0xb30 [ 347.008545][T20943] ? skb_put+0x11b/0x210 [ 347.012864][T20943] netlink_sendmsg+0x805/0xb30 [ 347.017748][T20943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.023089][T20943] ? aa_sock_msg_perm+0xf1/0x1d0 [ 347.028034][T20943] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 347.033409][T20943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.038867][T20943] __sock_sendmsg+0x21c/0x270 [ 347.043812][T20943] ____sys_sendmsg+0x505/0x830 [ 347.048607][T20943] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.053904][T20943] ? import_iovec+0x74/0xa0 [ 347.058513][T20943] ___sys_sendmsg+0x21f/0x2a0 [ 347.063418][T20943] ? __pfx____sys_sendmsg+0x10/0x10 [ 347.068683][T20943] ? __fget_files+0x2a/0x420 [ 347.073333][T20943] ? __fget_files+0x3a0/0x420 [ 347.078279][T20943] __x64_sys_sendmsg+0x19b/0x260 [ 347.083699][T20943] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 347.089307][T20943] ? rcu_is_watching+0x15/0xb0 [ 347.094263][T20943] ? do_user_addr_fault+0xc8a/0x1390 [ 347.099833][T20943] ? rcu_is_watching+0x15/0xb0 [ 347.104637][T20943] do_syscall_64+0xfa/0x3b0 [ 347.109162][T20943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.115335][T20943] ? clear_bhb_loop+0x60/0xb0 [ 347.120159][T20943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.126154][T20943] RIP: 0033:0x7f188178ebe9 [ 347.130586][T20943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.150474][T20943] RSP: 002b:00007f188251d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.158918][T20943] RAX: ffffffffffffffda RBX: 00007f18819b6180 RCX: 00007f188178ebe9 [ 347.167004][T20943] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000008 [ 347.175180][T20943] RBP: 00007f1881811e19 R08: 0000000000000000 R09: 0000000000000000 [ 347.183272][T20943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.191686][T20943] R13: 00007f18819b6218 R14: 00007f18819b6180 R15: 00007ffc54d4fa98 [ 347.199847][T20943] [ 347.203496][T20943] Kernel Offset: disabled [ 347.207939][T20943] Rebooting in 86400 seconds..