last executing test programs: 45.049846128s ago: executing program 4 (id=627): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) (rerun: 32) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) socket(0x10, 0x803, 0x0) (async, rerun: 32) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x2a, 0x0, 0x1}, 0x28) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r0, 0x0) (async, rerun: 32) unshare(0x400) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 44.914628247s ago: executing program 4 (id=628): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r4, 0x1bc60, 0x1a704}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x54}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x3}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x5}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x7}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='mm_migrate_pages\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) socket$xdp(0x2c, 0x3, 0x0) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x8}, 0x20) (async) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x8}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000101010000000000000000000a0000000c00198008000100ad0400003c0001802c0001801400030000000000000000000000ffff7f00000114000400fc0000000000000000000000000000010c000280"], 0x5c}, 0x1, 0x0, 0x0, 0x8000850}, 0x24008840) 44.071385965s ago: executing program 4 (id=634): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) (rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000001c001a8018000a8000fc010000000000000000000000090000140003007369743000"/53], 0x50}}, 0x0) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYRES64], 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB="2000010021457d61faafac401c9abc942b3d742af8da27e9df303e5c936ee31eff4bff026ca2509767abca201b0efeaab7a79f6a4929ef74", @ANYRES16=r2, @ANYBLOB="01000300ac1e000100000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 32) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (rerun: 32) r6 = socket(0x10, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x834) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r8, @ANYBLOB="ddfffffdff000000140012"], 0x34}}, 0x0) (async) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r9) setsockopt$IP_VS_SO_SET_EDIT(r6, 0x0, 0x483, &(0x7f0000000380)={0xff, @broadcast, 0x4e21, 0x0, 'lblcr\x00', 0x4, 0x6f, 0x72}, 0x2c) (async) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000580)={{{@in, @in6=@remote}}, {{@in=@initdev}, 0x0, @in=@private}}, &(0x7f0000000040)=0xe8) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) (async) r10 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) listen(r10, 0x1) (async) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) 43.62327666s ago: executing program 4 (id=640): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2000000000000016000200071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff0700670200001f000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socket$netlink(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x549f41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'macvlan0\x00', 0x100}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000280), &(0x7f0000000700)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000bc0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000580)="c705e395312d4e1a5df95256a640a7570000000087eeb182", 0xffffffffffffffe6) r5 = accept4(r4, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r6, &(0x7f0000000e80)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000005c0)="d8a6c23ff2d1a2ece2b60fc01be1b2dc4bb9905b951b91e583fde714e2875992cc89594136df837ab4a47cbabaca1cb237ad6b783716d20a949c813c5abfe68d9641dcc71a8ea44c", 0x48}, {&(0x7f0000000300)="a20f17", 0x3}, {&(0x7f0000000640)="3ac5546e1044edd50b8de358f163db30461a21b5d12cbeb1b43e20c5b943ab383575f9d87db96c02199545c22953e01e452fab6e150c955261ad253b1cfe7d419a2000bd186badb5064e698354ef5e110c1dd144532dc15731908a16b7eb3475bd6d59e0ab9b233ffbeef221020b31ca737b364927cbc26f37550a9d21133b567ba2accba27b218e6ac2e67bbe26", 0x8e}, {&(0x7f0000000780)="6d159a4dbb720ea6893a33309557fdbc588103c90bac38abe4948e190fb604cba4b00312f002b9fa9b0623073de69622f85492de60d05dae395d80710fef937cd4856ee6777ec3bf5a38e79f9d35b7469b70edd4d0470eec253ffd88c5ee5918b437afdfdf497091abdb0bb43c983f7a38f3b9c93c4f4c07de69512fb054223607970f2167734e63dff64bf06c96ee", 0x8f}], 0x4, &(0x7f0000000400), 0x0, 0x4001}, {0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000c40)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0x70, 0x117, 0x2, 0x5a, "df0ab106a3dd7ed70300f5d2a16e3edde4bf76fd94828016a0d0af21bc6d5a58833ad432adc91f7a6edd045056650f1aa8a96cdff295bd76409aa8c9f26aa9c278816d790c8f15bd12159272269d265bed651b368e971cd66ca3"}, @op={0x18}, @iv={0xa8, 0x117, 0x2, 0x8e, "919ea413e9f6b682d883b80f85a9deca843b15ee5bf40f5bfbbaaf3cd61b2c6bb59509e483428ebb1f8bc31c8caac4c886a1ee88def6e9801163b646c23b935819e5aa426f5443e3383d68fd75edee2bb6cc36dbfbd1215be8b9e46b5a175707118f6503f39b33acc61ce174a8a7184477c754131766ec8969beaae047a8ec6f72d1cbf7f8a0a25a462f3ce43f0e"}, @iv={0xa0, 0x117, 0x2, 0x8b, "5a04b983cd9562e7759dc9103ed4e1f053c695debc01ee8a01ebc48450e59604f5daa5e9cd4dbbc9422c99f0008d53cf06be078264fca5dd4af5a15378c3cafff9b72bba45350dc999ded017fbd812875cabbbb57710fedb4bf2a886eb1eb8d9293f3b370201945e58e379aa4b463df0c4395224afc1044bf01843dd93fac6875c9feca9375244a99ea7db"}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x218}], 0x2, 0x20048080) sendfile(r6, r5, 0x0, 0x5) ioctl$FS_IOC_GETFSUUID(r6, 0x80111500, &(0x7f00000002c0)) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000200000005000100070000000500040003000000090002009e5acbd473797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, 0x6, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r9, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 43.584959626s ago: executing program 4 (id=643): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000a3a098c700000000ff6122314a000800eaf626eee3442844e1819c64bc35827885dbf55e7a4b36b2c504aa0c6fa8cd7a97838db5cfb84d73b2669dee9f0a47ea88165cdc1c884bb9fef1", @ANYRESHEX=r1, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20008005) r3 = getpid() r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @mcast2={0xff, 0x3}, 0x0, 0x0, 0x5, 0x40d}}) syz_emit_ethernet(0x83, &(0x7f0000000500)=ANY=[@ANYRESDEC=r3], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000140)={'sit0\x00', {0x2, 0x4e20, @broadcast}}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000003c0)=r3) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000030529bd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="000000000010000008001300", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="770bcd1205000000000000000000e0b1f4d00700d2baa36914ac58ac9d62b692be0000000000000006288e3439228a6132a60021b450879199c732"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 42.395410517s ago: executing program 4 (id=656): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bdb7, 0x25dffbfb, {0x0, 0x0, 0x0, 0x0, 0x9726, 0x51a23}, [@IFLA_PORT_SELF={0x20, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "154634e7bb72369bfc6cc8d2ff14c8bc"}]}]}, 0x40}}, 0x48800) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) (async, rerun: 32) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (rerun: 32) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000280)=[{0x1, 0x200000, {}, {0x1, 0xff, 0x2}, 0xfe}, {0x3, 0x0, {0x1, 0xf0}, {0x3ca1d9a9d3f903f4, 0xff, 0x2}, 0xfd, 0xff}, {0x0, 0xfffffffffffffffa, {0x0, 0xf0, 0x3}, {0x1}, 0x0, 0xff}], 0x60) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r2, {0x5, 0xb}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) (async) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000280)=@int=0x86, 0x4) (async, rerun: 32) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) (rerun: 32) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1020000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x98, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x27}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x99}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040}, 0x10) (async) sendmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffec9, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="01000000300200000700000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000200000003030000ae77195897cb06cc"], 0x48}}, 0x20000000) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={0x24, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 27.304228941s ago: executing program 32 (id=656): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bdb7, 0x25dffbfb, {0x0, 0x0, 0x0, 0x0, 0x9726, 0x51a23}, [@IFLA_PORT_SELF={0x20, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "154634e7bb72369bfc6cc8d2ff14c8bc"}]}]}, 0x40}}, 0x48800) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) (async, rerun: 32) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (rerun: 32) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000280)=[{0x1, 0x200000, {}, {0x1, 0xff, 0x2}, 0xfe}, {0x3, 0x0, {0x1, 0xf0}, {0x3ca1d9a9d3f903f4, 0xff, 0x2}, 0xfd, 0xff}, {0x0, 0xfffffffffffffffa, {0x0, 0xf0, 0x3}, {0x1}, 0x0, 0xff}], 0x60) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r2, {0x5, 0xb}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) (async) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000280)=@int=0x86, 0x4) (async, rerun: 32) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) (rerun: 32) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1020000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x98, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x27}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x99}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040}, 0x10) (async) sendmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffec9, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="01000000300200000700000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000200000003030000ae77195897cb06cc"], 0x48}}, 0x20000000) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={0x24, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.410109682s ago: executing program 2 (id=1145): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a89e10000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000060000000060a010400000000000000000100000008000b400000000038000480340001800a0001006d61746368000000240002800c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30000000001400000011000100"], 0xe8}}, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) setsockopt$MRT_DEL_MFC(r5, 0x0, 0xcd, &(0x7f00000002c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0x1, "a245c79409df2f1a8d07c366d8cd60fb54062133ff35e90b93cf9efbc6c4d809", 0xde, 0x7, 0x10000, 0x1}, 0x3c) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500070000001400040073"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f00000000c0), 0x4) sendmsg$kcm(r9, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x4}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000580)="27050200160014000600002fb96dbcf706e105000700810000008100", 0x1c}, {&(0x7f0000000040)="cb4e64b0af329873eef12979b76d83000c42c4f9d8bb7db4f5c055a5745a740453", 0x21}, {&(0x7f0000000080)="a8e78a1baa0d95481ad9f7e9e6952160a7c8f52da56d", 0x16}, {&(0x7f00000015c0)="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", 0xad4}], 0x4}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r7, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20002001}, 0x4) 2.384040932s ago: executing program 3 (id=1147): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) bind$ax25(r0, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x118, 0x4, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3b65055a}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3187ad88}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x647b143e}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3e0f8c56}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x20e95283}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1fb28455}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0x98, 0xc, "1f96105426139252c1b5dd3d6357ee6de5b0d42d86a6033f9e2296363c49c19e7ebe141c1c1b83810e23e4fcdfc766715b0063a2e64b15292b96f663880271cb8bb93c8b2ef9218a64e6f0cb8efb68d7501cda2b84e238864a710ae31e39ee1bedf875bd8c32083c2641a215782f7e29a73728d93666ec830048120f03e01ad3b0bffdf9761ad54756c0b5bd00a3d10c5caa462e"}]}, 0x118}, 0x1, 0x0, 0x0, 0x4}, 0x4004) r1 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000280)={'filter\x00', 0x0, [0x7, 0x5, 0xc]}, &(0x7f0000000300)=0x44) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x6}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000004c0)={r3, 0xcc, &(0x7f00000003c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x2, @private2, 0x3}, @in6={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e24, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e23, 0xffffffff, @empty, 0x3}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e20, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}]}, &(0x7f0000000500)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x98, r5, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffe00}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x45}, 0x8014) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r5, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x683bd61295308e31}, 0xc0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000900)=@buf={0xce, &(0x7f0000000800)="94fdb819b932b10a8734bba5809a15ff242002828f85437064eccc8370272549fa8c358d27112d5b5e0670a114f8ec25ac8cbfaae80fefc63dcb7a9e7701b21ce8d3d046f501015fb60447786efbbbf7cdfcb852a53c277e34ac4a03375597a771762d842e08564148f9d28f9fb0ba2dc9bac700d428b3b8acd6ce090cf7ca6e2a55840dc675c466795f7f31ed9b7b4ea4a0fc02b41b99c64a62b4c1b833b21c7a4b17bdc0e35500e3989ebb21390c0a21e14adab7f1036cf6fb74e8856807d844d9dc1c91c6e0eb56c6771140d2"}) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000940), &(0x7f0000000980)=0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r7) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000a00)={r4, @in6={{0xa, 0x4e24, 0x38, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9a9e}}, 0x9}, 0x90) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x144, r8, 0x400, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x130, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xc0, 0x4, "443ce7e1c6223d40438f93271745f4e8126f3ef678073f71ccf7efd7a1f22cdec802224cf61eff70d5da7a70954984caf0b3069700266bfb9891f8b26fc3bacc32a43b8695cc44c7351aa6394df2b5ff26c3e9a77d82f4ce59f4c7fc15118121c6d6b37dd74b37dbcae117ca845851c3ef870cdf3a762549c0cc85ab818d0230bc7f623c138f5b1964f36b38954ba98a3a70388774c7fa51602717746dad158287779e701d54dd799123f7b379928b36ed54d617c0a609e6b6377e94"}, @ETHTOOL_A_BITSET_VALUE={0x63, 0x4, "02be0947db7c78a7b438a08d6b644053d65690184ec5f4a2b94b8656417806bdf95565385a9277a9663e5e7957be4eb596a7212df7bf3f73c7fab34d36de0952b1e83924328c07be28c5d1b6ee72b43162946e85cd264f3355d0f292e46cea"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x144}}, 0x20000040) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000d40), &(0x7f0000000d80)=0x4) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000dc0)={0x0, @broadcast, 0x4e20, 0x3, 'rr\x00', 0x33, 0x3, 0x32}, 0x2c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000e00), r6) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x2c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4048054) socketpair(0x18, 0x4, 0x7, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r9, 0xf504, 0x0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r7) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r7, &(0x7f0000001080)={&(0x7f0000000f80), 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x1c, r10, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x8004) socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000001100)=0x1) 2.19143634s ago: executing program 3 (id=1151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000200)=""/100) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002040)=ANY=[@ANYBLOB="38000000540001002abd7000ffffffff07000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="0a030300ff02000000000000000000000000000186dd"], 0x38}}, 0x4008cc0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, 0x0, 0x24008040) close(r4) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xd, 0xfffffffffffffff8, 0x2, 0x8001, 0x8000059, 0x3ff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0x8, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.168280192s ago: executing program 0 (id=1152): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000180)=0x2f9, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x0, 0x9}, &(0x7f00000001c0)=0x90) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='M'], 0x8) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000140)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x100, 0x4e20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xfffffffffffffffe, 0x0, 0x72, 0x0, 0x0, 0x4}, {0x3}, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0xa, @in, 0x0, 0x4}}, 0xe8) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000240)="4abef64779f76d7f54bd8eb37b3f9607bfe218054f75244c2a9b4fee920044ae650a36650c01c168973cc989f20e93066643c0003fefc48819b9fc3eafa96918c6a303000cdc1847835742f43e16fcbdc0c17de0533b7a026494c9f0cf3e295e80c5c023960c4e01401e690fd6e3f71cdae3c2cfe5f3c253767013aef3ba6d46d4fb248b0cd96c0f54ce9d4df165ccc93ac1c76165d64625c9343ed295abee67dcf64fd793a42d9bff79857b2c6f34a69960bf88b542e1d6cd1a", 0xba}, {&(0x7f0000000300)="8410e2fdd105c19b6a9e5fe980da0509963e663240abb422e174d7fc52982486850d016ea79c32536cef355671af3e00c829230c43137f249847c8135b47ab257c9b2cfbd26d122ab6e8a5ea6c10af2741933b6f0d7abe47ee90d598ed74403720b3402e02687e8487f19efc90d04b3781c975508cecfb23eaffca41", 0x7c}, {&(0x7f0000000380)="8809b920e7fb4712cdbb5a180022cb8543c3692f0267d8c9aabe75a5fdbd8b406fbaa5a07877ef8d029935054e81bf483076671c0544104bcc1fc693e95c026ba3e6312ae66d258e65", 0x49}], 0x3) sendmmsg$inet6(r8, &(0x7f0000000a80)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_netprio_ifpriomap(r9, &(0x7f0000000080), 0x2, 0x0) r11 = epoll_create1(0x0) sendfile(r11, r10, &(0x7f00000000c0)=0xd, 0x4) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0xb0}}, 0x0) 2.046584307s ago: executing program 5 (id=1153): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000004000280080003000b"], 0x3c}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r2, 0x0, 0x4000000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4d}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r10}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYRES32=r8], 0x44}}, 0x20008040) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) 2.044805329s ago: executing program 2 (id=1163): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x40, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x62}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}, @FRA_SRC={0x14, 0x2, @private0}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x1d, &(0x7f0000000680)=0x1, 0x4) 1.835460621s ago: executing program 1 (id=1154): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x4, 0xa, 0x4, 0x4, 0xc, @rand_addr=' \x01\x00', @loopback, 0x1, 0x802f, 0x3ff, 0x4}}) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$inet(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0xd0) (async) sendmsg$inet(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0xd0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac0002800800030001000000080001001000000004000400"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0xa, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) 1.771177829s ago: executing program 1 (id=1155): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x6d) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000009400000083000000bf090000000000005509010000000000950000000000000085100000f5ffffffbf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.738561275s ago: executing program 2 (id=1156): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ad43"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r2, &(0x7f0000000d00)=[{{&(0x7f0000000c80)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000c40)}}], 0x1, 0x4000) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000005000080050011802efff2"], 0x20}], 0x1}, 0x300) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="00000000000007000001000000000000000000001294200c8d8a2ef2eb0831614ff8bf4afa37724e7ec462c046576ad80265177e5e4e429ebe422ffc3c94fb48959e3779871a3fb0e93616c2"], 0x14}, 0x1, 0x0, 0x0, 0x20040815}, 0x800) shutdown(r2, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0x20000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}], 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r6}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b05, &(0x7f0000000000)={'wlan1\x00'}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000100)={r8, r8, 0xfffe, 0x0, 0x0, 0xc2, 0x85, 0x15c2, 0x5886, 0x6, 0x0, 0x0, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r9, 0x400448c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) ioctl$sock_bt_hidp_HIDPCONNDEL(r9, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) 1.62303466s ago: executing program 1 (id=1157): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) syz_emit_ethernet(0x3e, &(0x7f0000000600)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x8, 0x2b, 0x0, @empty, @local, {[], {0x0, 0x3b, 0x8}}}}}}, 0x0) 1.487058261s ago: executing program 3 (id=1158): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001400)={r0}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000090000000400000003000006040000000400000007000000020000000400000004000000fcffffff002e71a0"], 0x0, 0x45, 0x0, 0x1, 0x80000001}, 0x28) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r5, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4082, 0xff2}, {0x0}], 0x2}, 0x5}], 0x1, 0x2000, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b00040000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYRESDEC=r3], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000304fcff", 0x58}], 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48090}, 0x40000) close(r7) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="6d9310000000f4dbdf25010000000c00060000000000020000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048890}, 0x880) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.129590086s ago: executing program 2 (id=1159): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2093, 0x2000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x8}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x20000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010800000000000000000000000014000780080011400000000005001500000000000500010006000000050005000a00000005000400000000000900020073797a300000000011000300686173683a69702c706f7274"], 0x60}}, 0x0) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) unshare(0x400) splice(r0, 0x0, r4, 0x0, 0x1100000000f336, 0x0) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000440)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, 0xb3, 0x1, 0xd, 0x100, 0x0, 0x4800001}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES8, @ANYRESDEC=r6, @ANYRESHEX=r6, @ANYRES64=r5, @ANYRESHEX=r1], 0x50) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) listen(r9, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) connect$unix(r10, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e) ioctl$int_in(r10, 0x5421, &(0x7f0000000080)=0x9) connect$unix(r10, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) 1.08886667s ago: executing program 0 (id=1160): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000370400000000efffffff00000000", @ANYRES32=r2, @ANYBLOB="8704050044800000240012800b000100677265746170000014000280060010004e21000008000700acc7403c"], 0x44}}, 0x20008884) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x6, @local, 0xa}, 0x1c, 0x0}}], 0x1, 0x2008c0c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {}, {0x5, 0xf}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.069458872s ago: executing program 5 (id=1161): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="620ac4ff000400007110030000000000950043"], &(0x7f0000000480)='GPL\x00'}, 0x94) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x360, 0xffffffff, 0xffffffff, 0x360, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @remote, [0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xe0, 0x110, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x1, 0xcc60, 0x5a, 0x7, 0x10}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x2, 0x2}, {0xffffffffffffffff, 0x1, 0x2}, 0x5, 0x2}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "c60d", 0x1}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0xc4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x338) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x4, 0xfffff020}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c00018030e8904e", @ANYRESHEX=r0], 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x2004c880) 929.870306ms ago: executing program 0 (id=1162): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2b, 0x80801, 0x1) shutdown(r1, 0xfffffffffffffffd) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x65, 0x3, 0xd913, 0x81, 0x1}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}}}, 0x24}}, 0x0) 875.399534ms ago: executing program 3 (id=1164): r0 = socket(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x200, {0x1d, 0x1, 0x8}, [@CGW_DST_IF={0x8, 0xa, r2}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x24}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x2, 0x2, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc040}, 0x4008000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40020) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0xffff}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x0) 873.381716ms ago: executing program 1 (id=1165): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)={0x0, 0xf}, &(0x7f0000000140)=0x8) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r5, 0x4) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x4018, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@exit, @map_fd={0x18, 0x0, 0x1, 0x0, r2}]}, &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x7b, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x2, 0x2, 0xb, 0x1000}, 0x10, r5, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[r6], 0x0, 0x10, 0x1}, 0x94) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={r1, @in={{0x2, 0x4e20, @loopback}}}, 0x84) bind$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x4, 0x0, 0x42, @local}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket(0x15, 0x5, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r11) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x1c, r12, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40c0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r9, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r12, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048091}, 0x18) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) socket$nl_netfilter(0x10, 0x3, 0xc) 854.524531ms ago: executing program 5 (id=1166): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfffffffe, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) (async) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) (async) sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x90000}, [@ldst={0x3, 0x3, 0x0, 0xb, 0x1, 0x1}, @generic={0x0, 0x4, 0x8, 0x9, 0x8}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8001}]}, &(0x7f00000001c0)='syzkaller\x00', 0x800, 0x74, &(0x7f0000000200)=""/116, 0x41100, 0x1, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8001, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0xb, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r4, 0x1], 0x0, 0x10, 0x6}, 0x94) 645.05041ms ago: executing program 3 (id=1167): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) setsockopt$sock_int(r1, 0x1, 0x3, &(0x7f00000000c0)=0x2d4, 0x4) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000100)={r1, 0x6, 0x676, 0x91}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000001c0)={@empty, @multicast1, 0x0}, &(0x7f0000000200)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000340)={'gre0\x00', r0, 0x8, 0x1, 0x40, 0x5, {{0x24, 0x4, 0x1, 0x2d, 0x90, 0x64, 0x0, 0x2, 0x29, 0x0, @multicast1, @multicast1, {[@rr={0x7, 0x7, 0xca, [@multicast1]}, @ra={0x94, 0x4}, @generic={0x44, 0x4, 'W8'}, @timestamp={0x44, 0x10, 0xd8, 0x0, 0xd, [0xa, 0x40, 0x3]}, @end, @timestamp_addr={0x44, 0x44, 0x91, 0x1, 0x3, [{@rand_addr=0x64010102, 0x4}, {@rand_addr=0x64010101, 0x80000000}, {@multicast2, 0xfffffff8}, {@remote, 0x3ff}, {@multicast1, 0x9}, {@loopback, 0x8}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x3}, {@broadcast, 0xc0000000}]}, @timestamp={0x44, 0x18, 0x5d, 0x0, 0x6, [0x401, 0x0, 0x8, 0xc40, 0xa]}]}}}}}) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000840)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000440)={0x3b4, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r2}, {0x1d4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x1d, 0x2}, {0x3, 0xff, 0x2d, 0x6}, {0x4, 0x7f, 0x9, 0x2}, {0x4, 0x6, 0x2b, 0x101}, {0xf, 0x6, 0x3, 0xb7}, {0x2, 0xc0, 0x7, 0x7}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf0fb1a95}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1fe}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x174, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x10040100}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x78, r12, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x435}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x250}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfcda}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x83cc}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8800}, 0x8044) recvfrom$x25(r4, &(0x7f0000000a40)=""/25, 0x19, 0x40000020, &(0x7f0000000a80), 0x12) recvmsg(r1, &(0x7f0000000d00)={&(0x7f0000000ac0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000b40)=""/181, 0xb5}], 0x1, &(0x7f0000000c40)=""/158, 0x9e}, 0x100) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000d40)=""/93, &(0x7f0000000dc0)=0x5d) getsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000000e00), &(0x7f0000000e40)=0x4) sendfile(r1, r10, &(0x7f0000000e80)=0x2, 0x9) sendmsg$TIPC_NL_BEARER_DISABLE(r10, &(0x7f0000001180)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001140)={&(0x7f0000000f00)={0x21c, r12, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb0a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x366}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1dc00000}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xdac}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}]}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x10000006}, 0x4) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000011c0)=0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r13, 0x660c) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x58, r11, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @GTPA_MS_ADDR6={0x14, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_MS_ADDR6={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x30008800) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001380)={'veth0_to_bridge\x00', &(0x7f0000001340)=@ethtool_ringparam={0x11, 0xfe3, 0xbf, 0x8, 0x3ff, 0x9, 0xfffff106, 0x2, 0x400}}) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001400), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r14, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x14, r15, 0x400, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000001500)={0x9}, 0x1) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000001540)=0x6, 0x4) 559.380033ms ago: executing program 0 (id=1168): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2000007}]}}]}, 0x40}}, 0x4000010) (async, rerun: 64) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (rerun: 64) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x2b1, 0x4) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) (rerun: 64) sendto$packet(r3, &(0x7f0000000440)="10030600e0ff020004004788aa96a13b", 0x10, 0x0, &(0x7f0000000140)={0x11, 0xf8, r4, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='ext4_fc_track_range\x00', r5, 0x0, 0x8000000000000080}, 0x18) r7 = socket$key(0xf, 0x3, 0x2) (async) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x5, 0x483, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x2, 0x0, 0x0, "9dfc47318ccc3455"}}, 0x48}}, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) sendfile(r7, r10, 0x0, 0x400000013) getpeername$l2tp6(r10, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000240)=0x20) (async) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r11) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=r11], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, @fallback=0x38, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) (async) connect$llc(r2, &(0x7f00000004c0)={0x1a, 0x118, 0x4a, 0xe3, 0xf, 0x24, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x10) 555.530397ms ago: executing program 5 (id=1169): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) close(r0) r1 = socket$unix(0x1, 0x5, 0x0) shutdown(r1, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12) listen(r1, 0x7) connect$unix(r1, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007110ad000000000095"], &(0x7f0000001580)='syzkaller\x00', 0x9}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) 511.189637ms ago: executing program 1 (id=1170): bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a0000000c000000b30000007f"], 0x50) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14e7ff0b7a0204be04020714056406040c5c0009003f0006160a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f", 0x50, 0x40800, 0x0, 0x0) (async) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) write$nci(0xffffffffffffffff, 0x0, 0x8) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) r1 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) (async, rerun: 64) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000c00)='GPL\x00'}, 0x90) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x500, 0x29, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000a00)={'syztnl1\x00', r2, 0x8707, 0x1, 0x80000001, 0x8, {{0x21, 0x4, 0x0, 0x3, 0x84, 0x65, 0x0, 0xff, 0x29, 0x0, @local, @private=0xa010100, {[@end, @ssrr={0x89, 0x23, 0xb8, [@rand_addr=0x64010101, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x38}, @multicast1, @multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010101]}, @end, @timestamp_addr={0x44, 0x14, 0xb3, 0x1, 0x9, [{@remote, 0x4}, {@multicast1, 0x89}]}, @timestamp={0x44, 0x8, 0x56, 0x0, 0x8, [0x7734]}, @cipso={0x86, 0x17, 0x1, [{0x2, 0x2}, {0x1, 0xf, "d2eb5052439307c35af154aff7"}]}, @timestamp_addr={0x44, 0x14, 0x7f, 0x1, 0xa, [{@loopback, 0x88}, {@loopback, 0x10}]}, @end]}}}}}) connect$can_j1939(r6, &(0x7f0000000140)={0x1d, r7}, 0x18) (async) r9 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) recvmsg$unix(r9, &(0x7f0000000f80)={&(0x7f0000000ac0)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000b40)=""/138, 0x8a}, {&(0x7f0000000fc0)=""/71, 0x47}, {&(0x7f0000000c80)=""/159, 0x9f}, {&(0x7f0000000d40)=""/158, 0x9e}], 0x4, &(0x7f0000000e00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158}, 0x40002062) sendmmsg(r6, &(0x7f000000a200)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="220733d69b211bb4a3f85730728e28424ba4cda255348a19dfc31da6b47d7904126212e0e8502fb4f3dadbbdfa5c952f12a9036dae3d2b0fc75a7bee726dc4c93d91e404a7c235d50738b60402190afaa9e06aff5bdd9087ac06c98060dd3ce9d5871751f599848cefda4e3893ed17b43fadafd1e859e9376358372d4f3cb3a0bf0fe13d15f63fee7e5753f3b19ae14a1226f1d0e748b0b0fc15af257611a13d40cc6aa716bd2733d9395d32fafe82", 0xaf}, {&(0x7f0000000400)="73fd5418cdbef924ba442463287fbdde2ab7da9d2b26d6b741a60e2aba6555bff157db432a06da33ed74145ddfec5146fe85c31fd70ec45ce1d1fe8dbf85f5e9eed99d6adec3a8a271e9fa501ef5898da20a50c603fbb5af49e0c36b53c91e33ccd527e2ba5edab0f61b9833642fcc839ced7b2ae3c5ab3c565aa52b38f42b865e07775777066808b3a7c4e70e4c05717bc6da503324a9ab9e13b738908b5e9f5b080b464098931a725cfbf8403017399050e250f8cb8b99bd8e5b138dcd386b324e381a36f63aac6099b8aa3979408d4f9db909a8d353a3dc533e2b558cd5921dbf0b33760bb481ffd108e820e871b6e19a87f8141e990d94de13dd8faee04b4e732b122fc85beb7f0163f169e9744ce609ea57fdaafd954cd8562ab91b47176ed0548096ca08ad7264c40f882894a2dbfa9bbc37bdc253a477eb4ae52faa1e6632bfc950b0209bb048349ea50d3527fbbc31a706ffe7c566551ca79d4b0e1359275f044cfbf90cd8497ed033fa064e58f0c11a1a8d18cf53866d4d7b232fb54ed86ea9654440deabd4e8ca66061633ba34a298732ba9605fe31a530f5198aa3e1d1c0fda4c036dc845c835b1959dc0b13cf15c75f58c6ef62f56588d7043c03cfeff1f7b0792e514ac00c9d7570ac95037f6fa4f0cfd7263649bd2b5342320f74ef89799307f596d5db41c683f615da96eb5a5b802fa8ecf3764f6ffd5271e66b382e0e14b81f145c22d4f90306ef02c8c8921521e46b23f72b2fdd2b4fc9a3eb6f03207ada71244714e67cbf65c138215e612a8c9a4420aa45fc39164f5cfc4f9fc014fcfd10b856c3ebd4e1e877046aaee29a642b211f356cb7ed483eda92450d5ff66ff23a20a8bb845265a2939cb34c48a2b22b33bb3e774383588b9f7a53333eb20f4c1054368e34d3acc692d3b12f746b729a122b0aa62a74f5bf0040d589f815c1bce1b4a5934384998df3ab48fe41f0b90fb4d4d8cb01bfecfc86a96d91facba50a5828a8f62bb8759f3dfaeb728e3e42744e83fbad739bd03de69d1c78f6d01b714b11a284caa1ebba69fe7d29e2cbc43db1e6d249545a7c6debd66b5b5f53d4c1d6cebcb2fa427160eb86e48047aab6ce43f7fa0d5bb1dc99ba03e65a7bf178ccba74cf71dec7712414b38f7bf98065a518366839ca4f4a1887ad28d495c1d5c4aa413128d80ab031bd7694cf1101fe9dd65e99849ce6b2e69d6e371bd1df1022e32125747356748d0d3b30fa7d2aa6394707a60b572606d7297091fb45a5534cf269f77f6fc61c92b94f141f06ba8e347667c2fb2c87de5eacf60fadc48f7d7c5516be44807b48583ecc13e00a58143e134706700d28357ac38611494311b049dd497cc5ce315051e215a57f33939d320f808f8dcdedeb60f42b71d618e272506f0bc28843d3fd337989d74600299ab187395347c5bfbb665e5bc03e27978c0b0a464355a47da458690f957122beac9bb139b4223bd156ad74bb76e6880823e52f9eb806aad122892ebd8355ff6cb15ff2e0ce7cad2219a333999318f59c986b4bee11b9f05e355fe32e98732015f17eb19db77088c55d321828bec2dd25ba0da232717e8dafed91f96636d930f3c38b46da4c5541ae963e30e89a341af805176d9e1c9c88068bd81f4acf0325d24fa76dacbff3b88615699f08ded43403b7aeecdd2bbec00e60555317a4e24828ba9e8b9a737621d8ba12fa83c963d67a5a5e5ebbf29ac272cad91786c269fc053ce3f50bb0c05926ccefcc4548d42142efbd86460ec4516aa48e34b54af6319b8c948b69a1fd0d49930d844f13cf5bd1e67c662cdca6dc5f4daf11a75a123ed0a740dfe3014515917a2b01d691803cd7c8f4c46a2fefeab1608498503df514da7c62692b3c2b927b0f09164b367a260aee0c619575891e98ec8391a0b385d4b9ca4a421e2766047cbc11264e89f7d704e7c83d7e50b1c2fa3648c90cb8f66d93f40df5ac3fdd206a3997a5efb0a2cab9c07e00165c2b1cb2c2baf1b06493c4809d1d5dd5c7e6dbc22f1385482f54d4fb96e9e8aec587fe68b7d2d033c7efe622918e0d8661c89582f50db39a3376c1684b9dcfb10ef6cca665c75e2b7e468e7cb3a15604b759b0d949f459b982181f5f423f5dfc8b209665c9763ed0545f9ebf77661559312b4", 0x5fb}, {0x0}], 0x3, &(0x7f0000002480)}}], 0x1, 0x60000800) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea0010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a010101000000000000000000000000043500000000010000000000bf0a000000000000fe8000000000000000000000000000aa000004d533"], 0x23c}}, 0x0) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000300)={r0}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf25021856ff", @ANYRES32=r12, @ANYBLOB="0800020018507f00"], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) 510.005652ms ago: executing program 3 (id=1171): r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x3}}], 0x1c) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x3}}], 0x1c) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) sendto$inet6(r0, &(0x7f0000000040)="c1", 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0x8, @loopback, 0xc5f}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000040)="c1", 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0x8, @loopback, 0xc5f}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r0}) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000072128d0100000000fbdbdf25017c00000c0004000900000000000000fe3a8bc0136d9d57000000000000050915ee82898e3ed1093d83c23fe1f020d3b67f9947506bde4611c0dae8ee96147b87bed22ac89996deafe80b454c79a04a2c2ae9c67b18e9b43c1a973ffbfb59259548e8ec485a238f8d0aa4d3eba31b55251372e858bffb4d2255c6ed0877ec13623a0421e98480f16b2f213c5d1d0cbc37f4ad25"], 0x20}}, 0x4011) 366.19489ms ago: executing program 5 (id=1172): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0x465f}, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'pimreg\x00'}) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710445000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 255.3388ms ago: executing program 0 (id=1173): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000370400000000efffffff00000000", @ANYRES32=r2, @ANYBLOB="8704050044800000240012800b000100677265746170000014000280060010004e21000008000700acc7403c"], 0x44}}, 0x20008884) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x6, @local, 0xa}, 0x1c, 0x0}}], 0x1, 0x2008c0c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {}, {0x5, 0xf}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 234.739497ms ago: executing program 5 (id=1174): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) (async) r1 = socket(0x1e, 0x5, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r1, &(0x7f00000002c0), 0x0, 0x40010000, 0x0) (async, rerun: 32) sendmmsg$inet(r1, &(0x7f0000000880), 0x0, 0x40480dc) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="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", 0x700}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000100005800900"], 0x48}}, 0x40004) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a010100000000000000000000000000000004d233000000ac1414aa00000000000000000000000001000000000000000e00000000000000040000000000000001800000000000000800000000000000f707001000000000f0aa0000000000000200000000000000020000000000000004000000000000000400000000000000020000000000000008c900008a262721080000002b3d7000073500000a0003001000000000000000ff0000000200008008000c000a000000"], 0x100}, 0x1, 0x0, 0x0, 0x63a0f7cf031481fc}, 0x48000) (async) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r11) (async, rerun: 32) syz_init_net_socket$x25(0x9, 0x5, 0x0) (rerun: 32) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000340)=0x8, 0x4) 162.712972ms ago: executing program 1 (id=1175): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=ANY=[@ANYBLOB="3c0000003e000701feffffff00000000017c0000040042800b0000000600060080997d7f53ac72d064001480080034c5688494190009000000040017"], 0x3c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc040) 150.654407ms ago: executing program 0 (id=1176): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syz_tun\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r3}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x6, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc74, 0x0, 0xffffffff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10, {0x7, 0x0, 0xba6d, 0x0, 0x0, 0x7}}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff9}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x494}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x4, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@updpolicy={0xc0, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x2}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x5}]}, 0xc0}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0xb}, {0x6}, {0xf, 0x8}}}, 0x24}}, 0x4000d) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@gettaction={0x18, 0x32, 0x9408f9ce2610ee65, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x14040800}, 0x0) 83.461404ms ago: executing program 2 (id=1177): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@delneigh={0x28, 0x1d, 0x1, 0x8a, 0x0, {0x7, 0x0, 0x0, r3, 0x8, 0x12}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x28}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@mpls_delroute={0x170, 0x19, 0x4, 0x70bd27, 0x25dfdbfb, {0x1c, 0x80, 0x14, 0x70, 0xfe, 0x1, 0xfe, 0x0, 0x1c00}, [@RTA_NEWDST={0x84, 0x13, [{0x7}, {0x2}, {0x100, 0x0, 0x1}, {0xd}, {}, {0x9, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x1}, {0x6}, {0x81, 0x0, 0x1}, {0x7ff}, {0xfffa1}, {0x5, 0x0, 0x1}, {0xff801}, {0x7, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x783d}, {0x5}, {0x9}, {0x1000}, {0x5}, {0x95d6, 0x0, 0x1}, {0x101, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x3}, {0x0, 0x0, 0x1}, {0x8de8, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0xd}, {0x1}]}, @RTA_DST={0x8, 0x1, {0x400, 0x0, 0x1}}, @RTA_NEWDST={0x84, 0x13, [{0x2, 0x0, 0x1}, {0x101}, {0x100, 0x0, 0x1}, {0x401}, {0x9}, {0xf202d, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x576}, {0x7, 0x0, 0x1}, {0x100}, {0x1}, {0x9, 0x0, 0x1}, {0x3}, {0x0, 0x0, 0x1}, {0x7ff}, {0xd9b9, 0x0, 0x1}, {0xea, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x4, 0x0, 0x1}, {}, {0x4}, {0x6, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x9a8, 0x0, 0x1}, {0x400, 0x0, 0x1}, {0x2}, {0x9, 0x0, 0x1}, {0x200}, {0x60, 0x0, 0x1}, {0x2}, {0x5}, {0x2}]}, @RTA_OIF={0x8, 0x4, r3}, @RTA_VIA={0x14, 0x12, {0x3, "be78d5a8bb376579173274a48e1f"}}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x2, 0x81, r1}}, @RTA_VIA={0x14, 0x12, {0x1, "bf2bb5a3ae553f089cff182f65a3"}}, @RTA_DST={0x8, 0x1, {0x9, 0x0, 0x1}}]}, 0x170}}, 0x0) 0s ago: executing program 2 (id=1178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000300)=0x4000800) connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000000}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000e40)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "eb8f2777c39a00", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x4, &(0x7f0000000380)=@ccm_128={{0x303}, "0100", "42445d3442566c289a6ff45de29f1606", "58f725db", '\v\x00'}, 0x28) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0x3, 0x1, 0x7, 0x76de216430c33922, @mcast1, @loopback, 0x8000, 0x7, 0x3, 0x400}}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000004c0)={r5, 0x3, 0x6}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r6, 0x0, 0x1, 0x0, 0x0) r7 = socket(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bind$unix(r7, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) getpid() kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.98' (ED25519) to the list of known hosts. [ 80.783593][ T5851] cgroup: Unknown subsys name 'net' [ 80.935302][ T5851] cgroup: Unknown subsys name 'cpuset' [ 80.944637][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.446054][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.805761][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.821981][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.832128][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.840365][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.864710][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.897075][ T5871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.904867][ T5871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.913088][ T5871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.918575][ T5866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.920720][ T5871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.927956][ T5866] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.943907][ T5866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.951439][ T5866] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.973964][ T5866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.981807][ T5866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.028911][ T5866] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.041516][ T5866] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.049145][ T5866] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.059371][ T5866] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.067073][ T5866] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.147938][ T5866] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.159445][ T5866] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.167228][ T5866] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.175384][ T5866] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.183955][ T5866] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.648299][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 85.749978][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 85.762976][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 85.890895][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 85.937193][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.947725][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.956048][ T5865] bridge_slave_0: entered allmulticast mode [ 85.967053][ T5865] bridge_slave_0: entered promiscuous mode [ 86.004681][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.012297][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.019417][ T5865] bridge_slave_1: entered allmulticast mode [ 86.027331][ T5865] bridge_slave_1: entered promiscuous mode [ 86.109021][ T5877] chnl_net:caif_netlink_parms(): no params data found [ 86.133813][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.141945][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.149068][ T5870] bridge_slave_0: entered allmulticast mode [ 86.156543][ T5870] bridge_slave_0: entered promiscuous mode [ 86.167057][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.202770][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.209954][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.217682][ T5870] bridge_slave_1: entered allmulticast mode [ 86.224865][ T5870] bridge_slave_1: entered promiscuous mode [ 86.234305][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.310772][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.317970][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.325595][ T5861] bridge_slave_0: entered allmulticast mode [ 86.332923][ T5861] bridge_slave_0: entered promiscuous mode [ 86.364225][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.371435][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.378567][ T5874] bridge_slave_0: entered allmulticast mode [ 86.386192][ T5874] bridge_slave_0: entered promiscuous mode [ 86.417168][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.424489][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.431736][ T5861] bridge_slave_1: entered allmulticast mode [ 86.438792][ T5861] bridge_slave_1: entered promiscuous mode [ 86.463188][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.470339][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.477754][ T5874] bridge_slave_1: entered allmulticast mode [ 86.484853][ T5874] bridge_slave_1: entered promiscuous mode [ 86.508184][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.520689][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.532676][ T5865] team0: Port device team_slave_0 added [ 86.580721][ T5865] team0: Port device team_slave_1 added [ 86.589503][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.607938][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.620546][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.669123][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.734891][ T5870] team0: Port device team_slave_0 added [ 86.743480][ T5874] team0: Port device team_slave_0 added [ 86.752023][ T5874] team0: Port device team_slave_1 added [ 86.790893][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.801681][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.835596][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.871132][ T5861] team0: Port device team_slave_0 added [ 86.898656][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.907077][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.918291][ T5877] bridge_slave_0: entered allmulticast mode [ 86.926388][ T5877] bridge_slave_0: entered promiscuous mode [ 86.960146][ T5870] team0: Port device team_slave_1 added [ 86.981822][ T51] Bluetooth: hci1: command tx timeout [ 86.983179][ T5866] Bluetooth: hci0: command tx timeout [ 86.999971][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.007217][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.037037][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.049893][ T5861] team0: Port device team_slave_1 added [ 87.060185][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.067703][ T5866] Bluetooth: hci2: command tx timeout [ 87.077679][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.084925][ T5877] bridge_slave_1: entered allmulticast mode [ 87.097159][ T5877] bridge_slave_1: entered promiscuous mode [ 87.141425][ T5866] Bluetooth: hci3: command tx timeout [ 87.184725][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.191929][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.217946][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.230383][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.237760][ T5866] Bluetooth: hci4: command tx timeout [ 87.241802][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.273258][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.288262][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.295438][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.322509][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.355057][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.367871][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.377773][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.385444][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.412986][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.460070][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.467466][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.493724][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.506445][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.513483][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.539437][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.609386][ T5877] team0: Port device team_slave_0 added [ 87.633962][ T5874] hsr_slave_0: entered promiscuous mode [ 87.640944][ T5874] hsr_slave_1: entered promiscuous mode [ 87.652167][ T5865] hsr_slave_0: entered promiscuous mode [ 87.658400][ T5865] hsr_slave_1: entered promiscuous mode [ 87.664956][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 87.670771][ T5865] Cannot create hsr debugfs directory [ 87.680462][ T5877] team0: Port device team_slave_1 added [ 87.703687][ T5870] hsr_slave_0: entered promiscuous mode [ 87.710099][ T5870] hsr_slave_1: entered promiscuous mode [ 87.716617][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 87.722634][ T5870] Cannot create hsr debugfs directory [ 87.828258][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.835502][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.861992][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.874511][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.881550][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.907465][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.936054][ T5861] hsr_slave_0: entered promiscuous mode [ 87.942318][ T5861] hsr_slave_1: entered promiscuous mode [ 87.948279][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 87.954054][ T5861] Cannot create hsr debugfs directory [ 88.158677][ T5877] hsr_slave_0: entered promiscuous mode [ 88.166098][ T5877] hsr_slave_1: entered promiscuous mode [ 88.172510][ T5877] debugfs: 'hsr0' already exists in 'hsr' [ 88.178248][ T5877] Cannot create hsr debugfs directory [ 88.504832][ T5865] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.545087][ T5865] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.569330][ T5865] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.579032][ T5865] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.644142][ T5874] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.664661][ T5874] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.678022][ T5874] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.688523][ T5874] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.757216][ T5870] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.779607][ T5870] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.800285][ T5870] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.809852][ T5870] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.900453][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.910373][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.923777][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.946095][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.062927][ T5866] Bluetooth: hci0: command tx timeout [ 89.062935][ T51] Bluetooth: hci1: command tx timeout [ 89.063352][ T5877] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.087003][ T5877] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.106796][ T5877] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.118406][ T5877] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.138357][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.147686][ T5866] Bluetooth: hci2: command tx timeout [ 89.215283][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.223244][ T5866] Bluetooth: hci3: command tx timeout [ 89.242797][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.278800][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.295468][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.302396][ T5866] Bluetooth: hci4: command tx timeout [ 89.302767][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.333935][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.341071][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.372765][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.396556][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.435773][ T3016] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.442915][ T3016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.462651][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.469741][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.492078][ T5865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.508642][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.515996][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.537712][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.606645][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.613839][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.696774][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.711138][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.739808][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.746988][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.808432][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.815613][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.834764][ T5877] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.867623][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.874817][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.935559][ T994] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.942781][ T994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.050637][ T5877] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.072507][ T5877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.114886][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.140604][ T5861] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.154687][ T5861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.265242][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.406598][ T5865] veth0_vlan: entered promiscuous mode [ 90.436383][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.504619][ T5865] veth1_vlan: entered promiscuous mode [ 90.516302][ T5874] veth0_vlan: entered promiscuous mode [ 90.606212][ T5874] veth1_vlan: entered promiscuous mode [ 90.642113][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.665418][ T5865] veth0_macvtap: entered promiscuous mode [ 90.676521][ T5865] veth1_macvtap: entered promiscuous mode [ 90.686739][ T5870] veth0_vlan: entered promiscuous mode [ 90.699447][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.730096][ T5870] veth1_vlan: entered promiscuous mode [ 90.777584][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.796842][ T5874] veth0_macvtap: entered promiscuous mode [ 90.835600][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.845791][ T5874] veth1_macvtap: entered promiscuous mode [ 90.907003][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.918488][ T5861] veth0_vlan: entered promiscuous mode [ 90.935303][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.946930][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.970659][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.979698][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.002954][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.013136][ T5870] veth0_macvtap: entered promiscuous mode [ 91.030683][ T5870] veth1_macvtap: entered promiscuous mode [ 91.051996][ T3016] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.060718][ T3016] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.105819][ T994] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.118910][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.141701][ T5866] Bluetooth: hci0: command tx timeout [ 91.142718][ T51] Bluetooth: hci1: command tx timeout [ 91.162796][ T5861] veth1_vlan: entered promiscuous mode [ 91.177604][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.221558][ T51] Bluetooth: hci2: command tx timeout [ 91.235037][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.244448][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.257126][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.302338][ T51] Bluetooth: hci3: command tx timeout [ 91.317068][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.325857][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.334541][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.345819][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.377654][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.387194][ T51] Bluetooth: hci4: command tx timeout [ 91.393334][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.439469][ T5861] veth0_macvtap: entered promiscuous mode [ 91.458771][ T5865] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.483833][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.503811][ T5861] veth1_macvtap: entered promiscuous mode [ 91.521139][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.649437][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.695169][ T5877] veth0_vlan: entered promiscuous mode [ 91.708404][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.719187][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.764970][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.799335][ T5877] veth1_vlan: entered promiscuous mode [ 91.821301][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.826803][ T994] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.829233][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.882160][ T983] cfg80211: failed to load regulatory.db [ 91.902486][ T994] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.919231][ T994] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.984498][ T5994] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 92.000291][ T994] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.161248][ T5997] 8021q: VLANs not supported on gre0 [ 92.169995][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.186434][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.209459][ T5877] veth0_macvtap: entered promiscuous mode [ 92.275639][ T5877] veth1_macvtap: entered promiscuous mode [ 92.309049][ T994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.352712][ T994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.382153][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.458557][ T6010] tipc: Started in network mode [ 92.466743][ T6010] tipc: Node identity f2893a26d518, cluster identity 4711 [ 92.482170][ T6010] tipc: Enabled bearer , priority 0 [ 92.506473][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.547391][ T6011] tipc: Enabling of bearer rejected, already enabled [ 92.558160][ T6010] syzkaller0: entered promiscuous mode [ 92.565492][ T6010] syzkaller0: entered allmulticast mode [ 92.569891][ T6015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11'. [ 92.576395][ T6017] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 92.585380][ T6015] netlink: 'syz.1.11': attribute type 1 has an invalid length. [ 92.616315][ T3016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.628759][ T6017] macvlan0: entered promiscuous mode [ 92.628924][ T3016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.648188][ T6017] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 92.677900][ T6018] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11'. [ 92.682923][ T6017] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3'. [ 92.698072][ T6018] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 92.729692][ T994] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.740202][ T994] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.757920][ T6011] syzkaller0: mtu less than device minimum [ 92.807605][ T994] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.820280][ T994] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.882444][ T6009] tipc: Resetting bearer [ 92.968524][ T6009] tipc: Disabling bearer [ 93.236994][ T51] Bluetooth: hci1: command tx timeout [ 93.237006][ T5866] Bluetooth: hci0: command tx timeout [ 93.301600][ T51] Bluetooth: hci2: command tx timeout [ 93.325365][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.341402][ T6030] netlink: 'syz.3.13': attribute type 7 has an invalid length. [ 93.352569][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.381893][ T51] Bluetooth: hci3: command tx timeout [ 93.427502][ T6035] veth3: entered promiscuous mode [ 93.465922][ T51] Bluetooth: hci4: command tx timeout [ 93.478618][ T6035] syz.1.15 uses obsolete (PF_INET,SOCK_PACKET) [ 93.609074][ T6047] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.16'. [ 93.648317][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16'. [ 93.670533][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.698353][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.781098][ T6040] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.882312][ T6053] tap0: tun_chr_ioctl cmd 1074025677 [ 93.914109][ T6053] tap0: linktype set to 826 [ 93.989420][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 94.018959][ T6060] warning: `syz.2.21' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.088909][ T6066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.22'. [ 94.132299][ T6071] netlink: 20 bytes leftover after parsing attributes in process `syz.1.23'. [ 94.204478][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24'. [ 94.226740][ T6069] Bluetooth: MGMT ver 1.23 [ 94.321577][ T6075] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.380094][ T6081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.26'. [ 95.083481][ T6119] Zero length message leads to an empty skb [ 95.151909][ T6118] Driver unsupported XDP return value 0 on prog (id 19) dev N/A, expect packet loss! [ 95.432325][ T6139] IPVS: sync thread started: state = BACKUP, mcast_ifn = team0, syncid = 4, id = 0 [ 95.579340][ T6130] netlink: 'syz.0.40': attribute type 1 has an invalid length. [ 96.498650][ T6177] openvswitch: netlink: Flow actions attr not present in new flow. [ 96.832201][ T6190] netlink: 'syz.3.54': attribute type 1 has an invalid length. [ 97.941218][ T6222] __nla_validate_parse: 12 callbacks suppressed [ 97.941234][ T6222] netlink: 16 bytes leftover after parsing attributes in process `syz.4.64'. [ 98.050717][ T6225] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 98.078118][ T6227] netlink: 'syz.3.67': attribute type 11 has an invalid length. [ 98.086848][ T6230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.68'. [ 98.108197][ T6227] netlink: 'syz.3.67': attribute type 4 has an invalid length. [ 98.126809][ T6225] veth0_to_team: entered promiscuous mode [ 98.134253][ T6225] veth0_to_team: entered allmulticast mode [ 98.135585][ T6227] netlink: 224 bytes leftover after parsing attributes in process `syz.3.67'. [ 98.159017][ T6230] tipc: Enabling not permitted [ 98.165216][ T6230] tipc: Enabling of bearer rejected, failed to enable media [ 98.190770][ T6230] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 98.249224][ T6233] tipc: Started in network mode [ 98.254383][ T6233] tipc: Node identity 464c3dc8b03d, cluster identity 4711 [ 98.267938][ T6233] tipc: Enabled bearer , priority 0 [ 98.347983][ T6237] syzkaller0: entered promiscuous mode [ 98.353844][ T6237] syzkaller0: entered allmulticast mode [ 98.447540][ T6233] netlink: 14 bytes leftover after parsing attributes in process `syz.2.69'. [ 98.526549][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.72'. [ 98.571850][ T6252] tipc: Resetting bearer [ 98.760059][ T6231] tipc: Resetting bearer [ 98.813352][ T6258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.920920][ T6258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.953582][ T6231] tipc: Disabling bearer [ 99.018799][ T6258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.137580][ T6278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.81'. [ 99.538730][ T6278] bridge_slave_1: left allmulticast mode [ 99.567820][ T6278] bridge_slave_1: left promiscuous mode [ 99.612287][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.659259][ T6278] bridge_slave_0: left allmulticast mode [ 99.682192][ T6278] bridge_slave_0: left promiscuous mode [ 99.693790][ T6278] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.102513][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.84'. [ 100.210971][ T6315] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.257370][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.86'. [ 100.316638][ T6312] sctp: [Deprecated]: syz.4.86 (pid 6312) Use of struct sctp_assoc_value in delayed_ack socket option. [ 100.316638][ T6312] Use struct sctp_sack_info instead [ 100.429596][ T6312] Bluetooth: hci4: Opcode 0x080f failed: -4 [ 100.516976][ T6330] netlink: 'syz.3.91': attribute type 15 has an invalid length. [ 100.525535][ T6325] netlink: 60 bytes leftover after parsing attributes in process `syz.2.90'. [ 100.545188][ T6325] unsupported nlmsg_type 40 [ 100.879717][ T6344] netlink: 212924 bytes leftover after parsing attributes in process `syz.2.95'. [ 100.945035][ T6344] netlink: zone id is out of range [ 100.963195][ T6344] netlink: zone id is out of range [ 100.986207][ T6344] netlink: zone id is out of range [ 101.007701][ T6344] netlink: zone id is out of range [ 101.028724][ T6344] netlink: zone id is out of range [ 101.037516][ T6344] netlink: zone id is out of range [ 101.044393][ T6344] netlink: zone id is out of range [ 101.169284][ T6333] Bluetooth: MGMT ver 1.23 [ 101.811470][ T6397] netlink: 'syz.0.104': attribute type 11 has an invalid length. [ 101.952219][ T6406] netlink: 'syz.2.107': attribute type 10 has an invalid length. [ 102.035863][ T6406] team0: Port device geneve0 added [ 102.076666][ T6410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.501350][ T51] Bluetooth: hci4: command 0x080f tx timeout [ 103.132928][ T6448] syzkaller0: create flow: hash 4118348979 index 1 [ 103.434766][ T6447] syzkaller0: delete flow: hash 4118348979 index 1 [ 104.786638][ T6509] __nla_validate_parse: 5 callbacks suppressed [ 104.786657][ T6509] netlink: 136 bytes leftover after parsing attributes in process `syz.4.124'. [ 104.906379][ T6460] tipc: Enabling of bearer rejected, failed to enable media [ 105.124110][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.127'. [ 105.275646][ T6518] bridge_slave_1: left allmulticast mode [ 105.308747][ T6518] bridge_slave_1: left promiscuous mode [ 105.320715][ T6518] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.344291][ T6518] bridge_slave_0: left allmulticast mode [ 105.365154][ T6518] bridge_slave_0: left promiscuous mode [ 105.389317][ T6518] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.689872][ T6538] netlink: 'syz.4.130': attribute type 9 has an invalid length. [ 105.731670][ T6538] netlink: 211988 bytes leftover after parsing attributes in process `syz.4.130'. [ 105.761730][ T6548] netlink: 56 bytes leftover after parsing attributes in process `syz.4.130'. [ 106.000269][ T6559] tipc: Enabled bearer , priority 0 [ 106.010550][ T6559] syzkaller0: entered promiscuous mode [ 106.018553][ T6559] syzkaller0: entered allmulticast mode [ 106.059652][ T6559] tipc: Resetting bearer [ 106.083828][ T6556] tipc: Resetting bearer [ 106.110286][ T6556] tipc: Disabling bearer [ 106.130740][ T6566] net_ratelimit: 27 callbacks suppressed [ 106.130753][ T6566] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 106.286330][ T6577] batman_adv: batadv0: Adding interface: dummy0 [ 106.301458][ T6577] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.313686][ T6578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.144'. [ 106.364289][ T6577] batman_adv: batadv0: Interface activated: dummy0 [ 106.418090][ T6576] batadv0: mtu less than device minimum [ 106.440677][ T6576] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.452695][ T6576] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.464541][ T6576] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.476357][ T6576] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.488155][ T6576] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.500126][ T6576] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.512283][ T6576] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.524171][ T6576] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.740657][ T6600] netlink: 36 bytes leftover after parsing attributes in process `syz.3.149'. [ 106.756960][ T6600] netlink: 36 bytes leftover after parsing attributes in process `syz.3.149'. [ 106.991138][ T6614] netlink: 728 bytes leftover after parsing attributes in process `syz.4.151'. [ 107.006947][ T6617] netlink: 277 bytes leftover after parsing attributes in process `syz.3.152'. [ 107.056175][ T6617] netlink: 'syz.3.152': attribute type 10 has an invalid length. [ 107.093938][ T6617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.103607][ T6617] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 107.148328][ T6617] netlink: 'syz.3.152': attribute type 10 has an invalid length. [ 107.171864][ T6617] netlink: 40 bytes leftover after parsing attributes in process `syz.3.152'. [ 107.196730][ T6617] batadv0: entered promiscuous mode [ 107.239466][ T6617] batadv0: entered allmulticast mode [ 107.282274][ T6617] bond0: (slave batadv0): Releasing backup interface [ 107.394950][ T6638] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.515160][ T6653] tap0: tun_chr_ioctl cmd 1074025675 [ 107.520946][ T6653] tap0: persist disabled [ 107.632973][ T6657] netlink: 'syz.1.165': attribute type 1 has an invalid length. [ 107.845875][ T6674] tipc: MTU too low for tipc bearer [ 108.132958][ T6681] syzkaller1: entered promiscuous mode [ 108.138882][ T6681] syzkaller1: entered allmulticast mode [ 108.169455][ T6681] netlink: 'syz.1.169': attribute type 15 has an invalid length. [ 108.212618][ T6686] ip6erspan0: entered promiscuous mode [ 109.923151][ T6759] netlink: 'syz.0.182': attribute type 1 has an invalid length. [ 109.937270][ T6759] __nla_validate_parse: 2 callbacks suppressed [ 109.937286][ T6759] netlink: 224 bytes leftover after parsing attributes in process `syz.0.182'. [ 110.717389][ T6803] ieee802154 phy0 wpan0: encryption failed: -22 [ 110.835466][ T6809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.197'. [ 111.259697][ T6838] tipc: Enabled bearer , priority 10 [ 111.296057][ T6842] netlink: 'syz.0.203': attribute type 1 has an invalid length. [ 111.321405][ T6842] netlink: 15958 bytes leftover after parsing attributes in process `syz.0.203'. [ 111.333743][ T6844] netlink: 'syz.4.204': attribute type 1 has an invalid length. [ 111.342253][ T6846] sit0: entered promiscuous mode [ 111.352016][ T6846] netlink: 'syz.1.205': attribute type 1 has an invalid length. [ 111.374227][ T6846] netlink: 1 bytes leftover after parsing attributes in process `syz.1.205'. [ 111.380229][ T6844] netlink: 228 bytes leftover after parsing attributes in process `syz.4.204'. [ 111.468399][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.204'. [ 111.568989][ T6844] team0: entered promiscuous mode [ 111.589571][ T6844] team_slave_0: entered promiscuous mode [ 111.602475][ T6844] team_slave_1: entered promiscuous mode [ 111.664245][ T6844] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 111.692937][ T6844] team0: left promiscuous mode [ 111.701440][ T6844] team_slave_0: left promiscuous mode [ 111.716853][ T6844] team_slave_1: left promiscuous mode [ 111.755457][ T6865] netlink: 'syz.0.209': attribute type 8 has an invalid length. [ 112.132625][ T6866] veth0_to_batadv: entered promiscuous mode [ 112.157515][ T6866] veth0_to_batadv: entered allmulticast mode [ 112.328034][ T6897] netlink: 168 bytes leftover after parsing attributes in process `syz.0.214'. [ 112.371839][ T5979] tipc: Node number set to 663829030 [ 112.595597][ T6917] netlink: 68 bytes leftover after parsing attributes in process `syz.4.220'. [ 112.612362][ T6917] net_ratelimit: 55 callbacks suppressed [ 112.612380][ T6917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.011940][ T6946] netlink: 64 bytes leftover after parsing attributes in process `syz.2.225'. [ 113.029685][ T6949] ksmbd: Unknown IPC event: 3, ignore. [ 113.317118][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.232'. [ 113.568043][ T6982] tipc: Resetting bearer [ 113.697540][ T6982] batman_adv: batadv0: Interface deactivated: dummy0 [ 113.714164][ T6988] syz.2.237: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 113.762709][ T6988] CPU: 0 UID: 0 PID: 6988 Comm: syz.2.237 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 113.762734][ T6988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.762753][ T6988] Call Trace: [ 113.762761][ T6988] [ 113.762769][ T6988] dump_stack_lvl+0x189/0x250 [ 113.762800][ T6988] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 113.762829][ T6988] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.762851][ T6988] ? __pfx__printk+0x10/0x10 [ 113.762878][ T6988] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 113.762900][ T6988] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 113.762930][ T6988] warn_alloc+0x214/0x310 [ 113.762965][ T6988] ? __pfx_warn_alloc+0x10/0x10 [ 113.763002][ T6988] ? __get_vm_area_node+0x28f/0x300 [ 113.763028][ T6988] ? xskq_create+0xbf/0x170 [ 113.763056][ T6988] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 113.763116][ T6988] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 113.763150][ T6988] ? __kasan_kmalloc+0x93/0xb0 [ 113.763179][ T6988] vmalloc_user_noprof+0xad/0xf0 [ 113.763205][ T6988] ? xskq_create+0xbf/0x170 [ 113.763230][ T6988] xskq_create+0xbf/0x170 [ 113.763257][ T6988] xsk_init_queue+0xb0/0x110 [ 113.763283][ T6988] xsk_setsockopt+0x57b/0x8d0 [ 113.763308][ T6988] ? __pfx_xsk_setsockopt+0x10/0x10 [ 113.763331][ T6988] ? __pfx_aa_sk_perm+0x10/0x10 [ 113.763360][ T6988] ? __fget_files+0x2a/0x420 [ 113.763374][ T6988] ? aa_sock_opt_perm+0xff/0x1b0 [ 113.763395][ T6988] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 113.763415][ T6988] ? __pfx_xsk_setsockopt+0x10/0x10 [ 113.763438][ T6988] do_sock_setsockopt+0x17c/0x1b0 [ 113.763462][ T6988] __x64_sys_setsockopt+0x13f/0x1b0 [ 113.763485][ T6988] do_syscall_64+0xfa/0x3b0 [ 113.763511][ T6988] ? lockdep_hardirqs_on+0x9c/0x150 [ 113.763536][ T6988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.763555][ T6988] ? clear_bhb_loop+0x60/0xb0 [ 113.763577][ T6988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.763595][ T6988] RIP: 0033:0x7fe188d8ebe9 [ 113.763618][ T6988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.763632][ T6988] RSP: 002b:00007fe189c10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 113.763651][ T6988] RAX: ffffffffffffffda RBX: 00007fe188fb5fa0 RCX: 00007fe188d8ebe9 [ 113.763663][ T6988] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 113.763673][ T6988] RBP: 00007fe188e11e19 R08: 0000000000000004 R09: 0000000000000000 [ 113.763684][ T6988] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 113.763694][ T6988] R13: 00007fe188fb6038 R14: 00007fe188fb5fa0 R15: 00007ffce7bd7098 [ 113.763732][ T6988] [ 113.764228][ T6988] Mem-Info: [ 113.783290][ T6982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.810748][ T6988] active_anon:4410 inactive_anon:0 isolated_anon:0 [ 113.810748][ T6988] active_file:3076 inactive_file:39836 isolated_file:0 [ 113.810748][ T6988] unevictable:768 dirty:212 writeback:0 [ 113.810748][ T6988] slab_reclaimable:10591 slab_unreclaimable:95202 [ 113.810748][ T6988] mapped:30084 shmem:1356 pagetables:1048 [ 113.810748][ T6988] sec_pagetables:0 bounce:0 [ 113.810748][ T6988] kernel_misc_reclaimable:0 [ 113.810748][ T6988] free:1331831 free_pcp:17354 free_cma:0 [ 113.821733][ T6982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.858035][ T6988] Node 0 active_anon:17640kB inactive_anon:0kB active_file:12304kB inactive_file:159140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120336kB dirty:848kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12432kB pagetables:4076kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 114.131141][ T6988] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 114.162296][ T6988] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 114.191614][ T6988] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 114.197700][ T6988] Node 0 DMA32 free:1421572kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17616kB inactive_anon:0kB active_file:12304kB inactive_file:157560kB unevictable:1536kB writepending:848kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:46960kB local_pcp:24200kB free_cma:0kB [ 114.254107][ T6988] lowmem_reserve[]: 0 0 1 1 1 [ 114.259030][ T6988] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 114.290062][ T6988] lowmem_reserve[]: 0 0 0 0 0 [ 114.294982][ T6988] Node 1 Normal free:3893108kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18880kB local_pcp:11616kB free_cma:0kB [ 114.328357][ T6988] lowmem_reserve[]: 0 0 0 0 0 [ 114.334758][ T6988] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 114.350085][ T6988] Node 0 DMA32: 1957*4kB (UM) 173*8kB (UME) 362*16kB (UME) 141*32kB (UME) 94*64kB (UME) 44*128kB (UME) 31*256kB (UME) 22*512kB (UME) 17*1024kB (UM) 9*2048kB (UM) 326*4096kB (UM) = 1421500kB [ 114.369362][ T6988] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 114.383208][ T6988] Node 1 Normal: 179*4kB (UE) 49*8kB (UME) 42*16kB (UME) 80*32kB (UME) 26*64kB (UME) 4*128kB (UME) 4*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3893108kB [ 114.401473][ T6988] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 114.411887][ T6988] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 114.421430][ T6988] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 114.431134][ T6988] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 114.440508][ T6988] 44281 total pagecache pages [ 114.445257][ T6988] 0 pages in swap cache [ 114.449436][ T6988] Free swap = 124996kB [ 114.454062][ T6988] Total swap = 124996kB [ 114.458232][ T6988] 2097051 pages RAM [ 114.462178][ T6988] 0 pages HighMem/MovableOnly [ 114.466921][ T6988] 425656 pages reserved [ 114.471136][ T6988] 0 pages cma reserved [ 114.499529][ T6989] pim6reg: entered allmulticast mode [ 114.505176][ T6990] pim6reg: left allmulticast mode [ 114.606589][ T3016] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.636347][ T3016] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.667724][ T7004] nftables ruleset with unbound chain [ 114.689910][ T3016] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.721077][ T3016] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.769435][ T6389] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.790293][ T6389] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.810449][ T6389] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.830853][ T6389] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.914047][ T7011] syzkaller1: entered promiscuous mode [ 114.924748][ T7011] syzkaller1: entered allmulticast mode [ 115.250593][ T6389] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 115.266092][ T7037] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'j8¼ [ 115.353141][ T7041] netlink: 'syz.3.252': attribute type 4 has an invalid length. [ 115.386906][ T7041] netlink: 'syz.3.252': attribute type 4 has an invalid length. [ 115.681992][ T7057] IPv6: Can't replace route, no match found [ 115.722124][ T7057] tun0: tun_chr_ioctl cmd 2147767520 [ 115.828856][ T7064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.840703][ T7064] __nla_validate_parse: 3 callbacks suppressed [ 115.840719][ T7064] netlink: 32 bytes leftover after parsing attributes in process `syz.0.262'. [ 116.042260][ T7080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.265'. [ 116.128474][ T7080] bond_slave_0: entered promiscuous mode [ 116.134366][ T7080] bond_slave_1: entered promiscuous mode [ 116.236881][ T7080] macvlan2: entered promiscuous mode [ 116.250546][ T7080] bond0: entered promiscuous mode [ 116.274437][ T7080] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 116.554833][ T7105] netlink: 36 bytes leftover after parsing attributes in process `syz.2.272'. [ 116.649865][ T7114] netlink: 84 bytes leftover after parsing attributes in process `syz.3.275'. [ 116.798090][ T7120] tipc: Started in network mode [ 116.836038][ T7120] tipc: Node identity 9ec5fb8b67fb, cluster identity 4711 [ 116.843502][ T7120] tipc: Enabled bearer , priority 0 [ 116.850503][ T7119] tipc: Enabling of bearer rejected, already enabled [ 116.861037][ T7120] syzkaller0: entered promiscuous mode [ 116.869264][ T7120] syzkaller0: entered allmulticast mode [ 116.945186][ T7119] tipc: Resetting bearer [ 117.011426][ T7117] tipc: Resetting bearer [ 117.076725][ T7138] netlink: 'syz.3.283': attribute type 1 has an invalid length. [ 117.077031][ T7117] tipc: Disabling bearer [ 117.090955][ T7138] netlink: 'syz.3.283': attribute type 2 has an invalid length. [ 117.208519][ T7147] netlink: 'syz.3.284': attribute type 1 has an invalid length. [ 117.225749][ T7147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.737764][ T7161] netlink: 676 bytes leftover after parsing attributes in process `syz.0.287'. [ 117.759240][ T7161] netlink: 676 bytes leftover after parsing attributes in process `syz.0.287'. [ 117.922529][ T7171] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.290'. [ 117.995471][ T5930] IPVS: starting estimator thread 0... [ 118.091486][ T7179] IPVS: using max 41 ests per chain, 98400 per kthread [ 118.226295][ T7195] netlink: 40 bytes leftover after parsing attributes in process `syz.3.296'. [ 118.248854][ T30] audit: type=1107 audit(1755446129.809:2): pid=7196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 118.256057][ T7195] netlink: 3 bytes leftover after parsing attributes in process `syz.3.296'. [ 118.368413][ T7194] netlink: 40 bytes leftover after parsing attributes in process `syz.3.296'. [ 118.565505][ T7209] tipc: Enabled bearer , priority 0 [ 118.576136][ T7209] syzkaller0: entered promiscuous mode [ 118.585322][ T7209] syzkaller0: entered allmulticast mode [ 118.599359][ T7208] tipc: Resetting bearer [ 118.648822][ T7208] tipc: Disabling bearer [ 118.839613][ T7234] syzkaller0: entered promiscuous mode [ 118.846241][ T7234] syzkaller0: entered allmulticast mode [ 119.001906][ T7236] veth1_macvtap: left promiscuous mode [ 119.713723][ T7268] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.724890][ T7268] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.842815][ T7268] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.872484][ T7268] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.986401][ T7268] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.010596][ T7268] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.113589][ T7268] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.124356][ T7284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.130105][ T7268] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.283007][ T7294] netlink: 'syz.3.323': attribute type 3 has an invalid length. [ 120.332614][ T7294] syz_tun: entered allmulticast mode [ 120.349147][ T3016] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.363575][ T3016] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.373352][ T7300] netlink: 'syz.4.325': attribute type 1 has an invalid length. [ 120.391546][ T3016] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.396793][ T7294] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 120.399885][ T3016] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.442352][ T7294] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 120.499631][ T7303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.524076][ T7303] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.535835][ T7303] batman_adv: batadv0: Interface activated: dummy0 [ 120.542549][ T7303] batadv0: mtu less than device minimum [ 120.565210][ T7303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.577131][ T7303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.589079][ T7303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.601037][ T7303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.613021][ T7303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.624791][ T7303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.636744][ T7303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.647987][ T7303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.685960][ T3016] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.694836][ T3016] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.728433][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.748823][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.805239][ T7293] syz_tun: left allmulticast mode [ 121.246188][ T7343] __nla_validate_parse: 6 callbacks suppressed [ 121.246396][ T7343] netlink: 20 bytes leftover after parsing attributes in process `syz.4.338'. [ 122.279514][ T7393] netlink: 24 bytes leftover after parsing attributes in process `syz.2.353'. [ 122.304163][ T7393] netlink: 24 bytes leftover after parsing attributes in process `syz.2.353'. [ 122.326418][ T7393] netlink: 56 bytes leftover after parsing attributes in process `syz.2.353'. [ 122.352857][ T7395] can: request_module (can-proto-0) failed. [ 122.922168][ T7426] netlink: 76 bytes leftover after parsing attributes in process `syz.0.361'. [ 123.312761][ T7444] netlink: 16 bytes leftover after parsing attributes in process `syz.4.366'. [ 123.590853][ T7456] xt_socket: unknown flags 0xd0 [ 123.629244][ T7441] bond_slave_1: entered allmulticast mode [ 123.676690][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.371'. [ 123.771665][ T7464] netlink: 20 bytes leftover after parsing attributes in process `syz.2.365'. [ 124.178363][ T7480] vlan2: entered allmulticast mode [ 124.183759][ T7480] bridge_slave_0: entered allmulticast mode [ 124.431363][ T7488] netlink: 'syz.1.379': attribute type 3 has an invalid length. [ 124.439059][ T7488] netlink: 666 bytes leftover after parsing attributes in process `syz.1.379'. [ 124.548346][ T7489] netlink: 'syz.2.381': attribute type 13 has an invalid length. [ 124.851862][ T5923] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 125.329626][ T7532] siw: device registration error -23 [ 125.413380][ T7533] team_slave_0: entered promiscuous mode [ 125.419214][ T7533] team_slave_1: entered promiscuous mode [ 125.428578][ T7533] macsec2: entered promiscuous mode [ 125.441508][ T7533] team0: entered promiscuous mode [ 125.448639][ T6377] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 125.701356][ T5923] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 125.740224][ T7546] vxcan1: tx address claim with dlc 0 [ 125.761037][ T7545] vxcan1: tx address claim with dlc 0 [ 125.873342][ T7549] team0: Device macvtap1 is already an upper device of the team interface [ 125.924004][ T7555] team0: Device macvtap1 is already an upper device of the team interface [ 125.939869][ T7557] netlink: 88 bytes leftover after parsing attributes in process `syz.4.398'. [ 125.960294][ T7551] netlink: 'syz.4.398': attribute type 3 has an invalid length. [ 126.442859][ T7577] bridge: RTM_NEWNEIGH with invalid ether address [ 126.447154][ T7579] __nla_validate_parse: 1 callbacks suppressed [ 126.447171][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 126.477859][ T7579] ip6tnl1: entered promiscuous mode [ 126.498244][ T7579] ip6tnl1: entered allmulticast mode [ 126.518829][ T6377] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 126.527754][ T6377] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 126.660843][ T7584] tipc: Cannot configure node identity twice [ 126.734179][ T7590] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 126.783337][ T7594] netlink: 104 bytes leftover after parsing attributes in process `syz.2.412'. [ 126.863584][ T7596] netlink: 'syz.1.409': attribute type 9 has an invalid length. [ 126.999157][ T7607] netlink: 24 bytes leftover after parsing attributes in process `syz.0.414'. [ 127.054245][ T6376] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.158657][ T7615] tipc: Can't bind to reserved service type 2 [ 127.175843][ T7615] netlink: 32 bytes leftover after parsing attributes in process `syz.2.418'. [ 127.320363][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.421'. [ 127.337432][ T7629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.347567][ T7629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.367884][ T7629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.381643][ T5938] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 127.405275][ T7629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.638820][ T7645] netlink: 132 bytes leftover after parsing attributes in process `syz.2.427'. [ 127.661810][ T7648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.425'. [ 127.702193][ T7641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.425'. [ 127.713791][ T7642] tipc: Enabling of bearer rejected, failed to enable media [ 127.942057][ T7662] syzkaller1: entered allmulticast mode [ 128.279936][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.432'. [ 128.348589][ T7677] net_ratelimit: 15 callbacks suppressed [ 128.348605][ T7677] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 128.617633][ T7684] netlink: 24 bytes leftover after parsing attributes in process `syz.0.436'. [ 128.664945][ T7687] team_slave_0: entered promiscuous mode [ 128.670766][ T7687] team_slave_1: entered promiscuous mode [ 128.676529][ T7687] geneve0: entered promiscuous mode [ 128.697158][ T7687] macsec1: entered promiscuous mode [ 128.705272][ T7687] team0: entered promiscuous mode [ 128.711030][ T7687] macsec1: entered allmulticast mode [ 128.719328][ T7687] team0: entered allmulticast mode [ 128.724689][ T7687] team_slave_0: entered allmulticast mode [ 128.730493][ T7687] team_slave_1: entered allmulticast mode [ 128.739422][ T7687] geneve0: entered allmulticast mode [ 128.749928][ T7687] team0: Device macsec1 is already an upper device of the team interface [ 128.761659][ T7687] team0: left allmulticast mode [ 128.767237][ T7692] nbd: socks must be embedded in a SOCK_ITEM attr [ 128.776246][ T7687] team_slave_0: left allmulticast mode [ 128.782871][ T7687] team_slave_1: left allmulticast mode [ 128.788442][ T7687] geneve0: left allmulticast mode [ 128.794067][ T7687] team0: left promiscuous mode [ 128.799877][ T7687] team_slave_0: left promiscuous mode [ 128.805308][ T7687] team_slave_1: left promiscuous mode [ 128.810788][ T7687] geneve0: left promiscuous mode [ 128.894555][ T7698] netlink: 'syz.1.441': attribute type 11 has an invalid length. [ 129.237287][ T7719] netlink: 'syz.4.449': attribute type 39 has an invalid length. [ 129.498357][ T7737] raw_sendmsg: syz.1.454 forgot to set AF_INET. Fix it! [ 130.051688][ T7766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.126938][ T7770] veth0: entered promiscuous mode [ 130.219721][ T7768] veth0: left promiscuous mode [ 130.501374][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 130.690909][ T7807] dvmrp8: entered allmulticast mode [ 130.789475][ T7796] dvmrp8: left allmulticast mode [ 131.088882][ T7832] sctp: [Deprecated]: syz.1.483 (pid 7832) Use of int in max_burst socket option. [ 131.088882][ T7832] Use struct sctp_assoc_value instead [ 131.655196][ T7856] netlink: 'syz.2.489': attribute type 49 has an invalid length. [ 132.203405][ T7867] __nla_validate_parse: 22 callbacks suppressed [ 132.203424][ T7867] netlink: 216 bytes leftover after parsing attributes in process `syz.0.493'. [ 132.239963][ T7867] netlink: 24 bytes leftover after parsing attributes in process `syz.0.493'. [ 132.267213][ T7867] netlink: 16 bytes leftover after parsing attributes in process `syz.0.493'. [ 132.393502][ T7871] netlink: 20 bytes leftover after parsing attributes in process `syz.4.495'. [ 132.826844][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.836538][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.581460][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 154.581413][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 179.870741][ T7909] nbd: must specify a size in bytes for the device [ 180.241713][ T7907] vlan2: entered promiscuous mode [ 180.246923][ T7907] bridge0: entered promiscuous mode [ 180.377719][ T7928] vlan2: entered promiscuous mode [ 180.405922][ T7907] netlink: 19 bytes leftover after parsing attributes in process `syz.2.504'. [ 180.425275][ T7928] bridge0: entered promiscuous mode [ 180.910595][ T7939] netlink: 204 bytes leftover after parsing attributes in process `syz.4.510'. [ 181.125534][ T7936] syz.4.510 (7936) used greatest stack depth: 17640 bytes left [ 181.235503][ T7946] netlink: 168 bytes leftover after parsing attributes in process `syz.2.513'. [ 181.250714][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.512'. [ 181.267578][ T7948] IPv6: NLM_F_REPLACE set, but no existing node found! [ 181.562856][ T7958] netlink: 192 bytes leftover after parsing attributes in process `syz.1.517'. [ 181.616926][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.517'. [ 181.739524][ T7958] netlink: 'syz.1.517': attribute type 2 has an invalid length. [ 181.757515][ T7974] tipc: Started in network mode [ 181.767337][ T7974] tipc: Node identity 7f000001, cluster identity 4711 [ 181.778062][ T7974] tipc: Enabled bearer , priority 10 [ 181.814054][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.519'. [ 182.270535][ T7996] netlink: 48 bytes leftover after parsing attributes in process `syz.3.526'. [ 182.306591][ T7998] netlink: 48 bytes leftover after parsing attributes in process `syz.3.526'. [ 182.392471][ T8003] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 182.567403][ T8016] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 182.892508][ T5938] tipc: Node number set to 2130706433 [ 182.913386][ T8028] netlink: 'syz.2.534': attribute type 3 has an invalid length. [ 182.926376][ T8034] veth1_to_batadv: entered allmulticast mode [ 183.130471][ T8036] netlink: 16 bytes leftover after parsing attributes in process `syz.0.537'. [ 183.213720][ T8043] netlink: 'syz.1.539': attribute type 1 has an invalid length. [ 183.315686][ T8043] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.418552][ T8050] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.440368][ T8050] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 183.490670][ T8050] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 183.692087][ T8054] veth5: entered promiscuous mode [ 183.757752][ T8070] smc: net device bond0 applied user defined pnetid SYZ2 [ 184.249962][ T8105] TCP: TCP_TX_DELAY enabled [ 184.273869][ T8105] syzkaller1: entered promiscuous mode [ 184.279573][ T8105] syzkaller1: entered allmulticast mode [ 184.484620][ T8113] tipc: Enabled bearer , priority 0 [ 184.556138][ T8113] syzkaller0: entered promiscuous mode [ 184.563981][ T8113] syzkaller0: entered allmulticast mode [ 184.570621][ T8113] tipc: Resetting bearer [ 184.586024][ T8112] tipc: Resetting bearer [ 185.572041][ T5930] tipc: Node number set to 4134616520 [ 185.925363][ T8112] tipc: Disabling bearer [ 185.934598][ T8117] __nla_validate_parse: 5 callbacks suppressed [ 185.934612][ T8117] netlink: 32 bytes leftover after parsing attributes in process `syz.0.559'. [ 186.083096][ T8142] tipc: Enabled bearer , priority 0 [ 186.103037][ T8142] tipc: Resetting bearer [ 186.185247][ T8141] tipc: Disabling bearer [ 186.395331][ T8161] tipc: Enabled bearer , priority 0 [ 186.405548][ T8161] veth0_to_hsr: entered promiscuous mode [ 186.416267][ T8161] veth0_to_hsr: entered allmulticast mode [ 186.429206][ T8161] tipc: Resetting bearer [ 186.453671][ T8160] tipc: Disabling bearer [ 186.473579][ T8157] netlink: 'syz.2.568': attribute type 5 has an invalid length. [ 186.481709][ T8157] bond_slave_1: left allmulticast mode [ 186.653347][ T8172] netlink: 20 bytes leftover after parsing attributes in process `syz.0.573'. [ 186.662363][ T8172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.573'. [ 186.672748][ T8172] netlink: 31 bytes leftover after parsing attributes in process `syz.0.573'. [ 186.687373][ T8172] netlink: 'syz.0.573': attribute type 3 has an invalid length. [ 186.695395][ T8172] netlink: 'syz.0.573': attribute type 2 has an invalid length. [ 186.703215][ T8172] netlink: 31 bytes leftover after parsing attributes in process `syz.0.573'. [ 186.714460][ T8172] netlink: 'syz.0.573': attribute type 2 has an invalid length. [ 186.860260][ T8186] netlink: 40 bytes leftover after parsing attributes in process `syz.2.578'. [ 186.877100][ T8186] netlink: 92 bytes leftover after parsing attributes in process `syz.2.578'. [ 187.003232][ T8193] netlink: 'syz.0.580': attribute type 4 has an invalid length. [ 187.046757][ T8193] netlink: 'syz.0.580': attribute type 4 has an invalid length. [ 187.178183][ T8198] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 187.221398][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 187.299270][ T8205] tipc: Enabling of bearer rejected, failed to enable media [ 187.362647][ T8210] netlink: 200 bytes leftover after parsing attributes in process `syz.2.585'. [ 187.375708][ T8210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.585'. [ 187.789761][ T8230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.591'. [ 188.339394][ T8247] openvswitch: netlink: Missing key (keys=40, expected=100) [ 188.419161][ T8253] tipc: Enabled bearer , priority 0 [ 188.429854][ T8253] syzkaller0: entered promiscuous mode [ 188.439278][ T8253] syzkaller0: entered allmulticast mode [ 188.544388][ T8257] netlink: set zone limit has 8 unknown bytes [ 188.601229][ T8253] nbd3: detected capacity change from 0 to 63 [ 188.613462][ T51] block nbd3: Receive control failed (result -32) [ 188.639151][ T8252] tipc: Resetting bearer [ 188.672118][ T8252] tipc: Disabling bearer [ 188.819153][ T8269] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 188.830962][ T8269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.116811][ T8292] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.156018][ T8292] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 189.212102][ T6377] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 189.218792][ T8295] tipc: Enabling of bearer rejected, failed to enable media [ 189.363549][ T6376] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 189.364531][ T8301] tipc: Resetting bearer [ 189.605300][ T8301] batman_adv: batadv0: Interface deactivated: dummy0 [ 189.619135][ T8301] batadv0: left promiscuous mode [ 189.624468][ T8301] batadv0: left allmulticast mode [ 189.635433][ T8301] veth1_to_batadv: left allmulticast mode [ 189.667199][ T8301] ip6erspan0: left promiscuous mode [ 189.705721][ T8304] @ÿþ€: renamed from veth0_vlan [ 190.231817][ T8348] bond0: Unable to set down delay as MII monitoring is disabled [ 190.690564][ T8354] netlink: 'syz.1.629': attribute type 1 has an invalid length. [ 190.984720][ T5866] Bluetooth: hci4: command 0x080f tx timeout [ 191.163390][ T8373] sctp: [Deprecated]: syz.1.636 (pid 8373) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.163390][ T8373] Use struct sctp_sack_info instead [ 191.170213][ T8366] veth0_to_bridge: entered promiscuous mode [ 191.222009][ T8366] macsec1: entered promiscuous mode [ 191.239041][ T8379] __nla_validate_parse: 7 callbacks suppressed [ 191.239056][ T8379] netlink: 48 bytes leftover after parsing attributes in process `syz.4.634'. [ 191.261392][ T8366] macsec1: entered allmulticast mode [ 191.282978][ T8366] veth0_to_bridge: entered allmulticast mode [ 191.314587][ T8380] trusted_key: syz.2.637 sent an empty control message without MSG_MORE. [ 191.329532][ T8366] veth0_to_bridge: left allmulticast mode [ 191.337596][ T8366] veth0_to_bridge: left promiscuous mode [ 191.395523][ T8386] netlink: 'syz.2.637': attribute type 13 has an invalid length. [ 191.623325][ T8398] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.759146][ T8413] netlink: 16 bytes leftover after parsing attributes in process `syz.1.648'. [ 191.772281][ T8398] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.872884][ T8418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.650'. [ 191.875349][ T8398] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.975617][ T8398] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.065929][ T8419] netlink: 'syz.3.649': attribute type 1 has an invalid length. [ 192.074045][ T8419] nbd: error processing sock list [ 192.083977][ T8419] block nbd0: shutting down sockets [ 192.121018][ T5866] Bluetooth: hci4: link tx timeout [ 192.127649][ T5866] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 192.137245][ T5866] Bluetooth: hci4: link tx timeout [ 192.142540][ T5866] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 192.150243][ T5866] Bluetooth: hci4: link tx timeout [ 192.155491][ T5866] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 192.163288][ T5866] Bluetooth: hci4: link tx timeout [ 192.168429][ T5866] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 192.176219][ T5866] Bluetooth: hci4: link tx timeout [ 192.181592][ T5866] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 192.189356][ T5866] Bluetooth: hci4: link tx timeout [ 192.194617][ T5866] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 192.205014][ T6382] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.246216][ T6382] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.273741][ T8429] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 192.283717][ T6382] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.309246][ T8429] bridge_slave_0: left allmulticast mode [ 192.315523][ T8429] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.327235][ T8429] bridge_slave_1: left allmulticast mode [ 192.334450][ T8429] bridge_slave_1: left promiscuous mode [ 192.341890][ T8429] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.352980][ T8431] netlink: 'syz.2.652': attribute type 10 has an invalid length. [ 192.377576][ T8429] bond0: (slave bond_slave_0): Releasing backup interface [ 192.390342][ T8429] bond0: (slave bond_slave_1): Releasing backup interface [ 192.421111][ T8429] team0: Port device team_slave_0 removed [ 192.447944][ T8429] team0: Port device team_slave_1 removed [ 192.460675][ T8429] bond0: (slave macvlan0): Releasing backup interface [ 192.478147][ T8429] team0: Port device geneve0 removed [ 192.491255][ T8429] bond2: (slave ip6gretap1): Removing an active aggregator [ 192.499762][ T8429] bond2: (slave ip6gretap1): Releasing backup interface [ 192.574510][ T8431] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 192.587817][ T8431] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 192.628477][ T6377] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.864587][ T8455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.656'. [ 192.926213][ C1] vcan0: j1939_session_tx_dat: 0xffff888055200000: queue data error: -100 [ 192.936083][ C1] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 192.943863][ C1] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 192.951562][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 192.959389][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 192.967321][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 192.975177][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 192.983139][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 192.990960][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 192.998877][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.006724][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.014667][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.022519][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.025832][ T8462] netlink: 36 bytes leftover after parsing attributes in process `syz.3.659'. [ 193.030445][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.047067][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.054984][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.062838][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.070750][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.078621][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.086566][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.094424][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.102361][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.110189][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.118130][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.125989][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.133951][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.141813][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.149719][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.157578][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.165540][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.173398][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.181326][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.189158][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.197129][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.205002][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.212968][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.220807][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.228739][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.236611][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.244546][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.252397][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.260312][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.268172][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.276183][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.284047][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.291975][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.299797][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.307720][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.315576][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.323510][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.331451][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.339353][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.347194][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.355150][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.363020][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.370918][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.378778][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.386704][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.394554][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.402543][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.410453][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.418414][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.426361][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.434294][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.442142][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.450047][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.457905][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.465945][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.473810][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.481760][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.489610][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.497648][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.505502][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.513435][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.521290][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.529201][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.537057][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.545045][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.552917][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.560926][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.568785][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.576709][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.584564][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.592545][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.600464][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.608438][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.616302][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.624317][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.632165][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.640087][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.647958][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.655918][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.663796][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.671750][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.679583][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.687538][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.695408][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.703450][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.711303][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.719204][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.727057][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.735169][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.743030][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.750985][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.758835][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.766760][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.774605][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.782555][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.790375][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.798299][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.806172][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.814111][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.821961][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.830632][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.838498][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.846491][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.854346][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.862281][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.870101][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.877992][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.885819][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.893745][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.901599][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.909479][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.917347][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.925310][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.933158][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.941077][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.948918][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 194.182797][ T5866] Bluetooth: hci4: command 0x080f tx timeout [ 194.265684][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.273282][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.370627][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.670'. [ 194.386573][ T8498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.671'. [ 194.517777][ T8500] sctp: [Deprecated]: syz.3.672 (pid 8500) Use of struct sctp_assoc_value in delayed_ack socket option. [ 194.517777][ T8500] Use struct sctp_sack_info instead [ 194.684332][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.669'. [ 194.718007][ T8495] netlink: 96 bytes leftover after parsing attributes in process `syz.2.669'. [ 194.753614][ T8513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.677'. [ 195.023631][ T5951] IPVS: starting estimator thread 0... [ 195.096325][ T8528] netlink: 'syz.3.682': attribute type 1 has an invalid length. [ 195.111245][ T8520] IPVS: using max 28 ests per chain, 67200 per kthread [ 195.119988][ T8530] tipc: Enabled bearer , priority 0 [ 195.135225][ T8532] syzkaller0: entered promiscuous mode [ 195.145011][ T8532] syzkaller0: entered allmulticast mode [ 195.219451][ T8528] 8021q: adding VLAN 0 to HW filter on device bond1 [ 195.250467][ T8536] bond1: (slave bridge0): making interface the new active one [ 195.263039][ T8536] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 195.274070][ T8532] tipc: Resetting bearer [ 195.289361][ T8532] tipc: Disabling bearer [ 195.306795][ T8528] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 195.442926][ T8548] netlink: 'syz.0.685': attribute type 10 has an invalid length. [ 195.476854][ T8548] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 195.488475][ T8548] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 195.504530][ T8552] lo speed is unknown, defaulting to 1000 [ 195.513338][ T8552] lo speed is unknown, defaulting to 1000 [ 195.519824][ T8552] lo speed is unknown, defaulting to 1000 [ 195.544801][ T8552] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 195.590356][ T8552] lo speed is unknown, defaulting to 1000 [ 195.600394][ T8552] lo speed is unknown, defaulting to 1000 [ 195.618259][ T8552] lo speed is unknown, defaulting to 1000 [ 195.637546][ T8552] lo speed is unknown, defaulting to 1000 [ 195.662779][ T8553] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 195.664086][ T8552] lo speed is unknown, defaulting to 1000 [ 196.148580][ T8578] netlink: 'syz.2.695': attribute type 10 has an invalid length. [ 196.186824][ T8578] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.214412][ T8578] bond0: (slave team0): Enslaving as an active interface with an up link [ 196.466285][ T8610] __nla_validate_parse: 7 callbacks suppressed [ 196.466319][ T8610] netlink: 104 bytes leftover after parsing attributes in process `syz.2.704'. [ 196.528515][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.705'. [ 197.356580][ T8651] netlink: 'syz.3.717': attribute type 5 has an invalid length. [ 197.370100][ T8651] tipc: Enabled bearer , priority 0 [ 197.384583][ T8651] syzkaller0: entered promiscuous mode [ 197.404764][ T8651] syzkaller0: entered allmulticast mode [ 197.427756][ T8651] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 197.463629][ T8651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.717'. [ 197.499855][ T8651] tipc: Resetting bearer [ 197.534574][ T8650] tipc: Resetting bearer [ 197.580078][ T8650] tipc: Disabling bearer [ 197.765582][ T8665] bridge0: Device is already in use. [ 197.779637][ T8670] netlink: 'syz.2.723': attribute type 1 has an invalid length. [ 197.794940][ T8670] netlink: 224 bytes leftover after parsing attributes in process `syz.2.723'. [ 197.906813][ T8674] lo speed is unknown, defaulting to 1000 [ 198.316111][ T8686] macsec1: entered promiscuous mode [ 198.321642][ T8686] syzkaller0: entered promiscuous mode [ 198.354482][ T8686] syzkaller0: left promiscuous mode [ 198.515481][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.735'. [ 198.544557][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.735'. [ 198.698905][ T8719] netlink: 'syz.1.739': attribute type 6 has an invalid length. [ 198.820493][ T8726] netlink: 24 bytes leftover after parsing attributes in process `syz.1.739'. [ 198.860146][ T8728] netlink: 'syz.3.741': attribute type 1 has an invalid length. [ 198.917292][ T8726] sit0: left promiscuous mode [ 199.027323][ T8736] netlink: 48 bytes leftover after parsing attributes in process `syz.0.743'. [ 199.170075][ T8726] veth0_to_batadv: left promiscuous mode [ 199.175896][ T8726] veth0_to_batadv: left allmulticast mode [ 199.185806][ T8726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.200785][ T8726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.297656][ T8726] veth3: left promiscuous mode [ 199.307705][ T8726] veth5: left promiscuous mode [ 199.337824][ T8728] 8021q: adding VLAN 0 to HW filter on device bond2 [ 199.365894][ T6380] netdevsim netdevsim1 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.384375][ T6380] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.416684][ T6380] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.433541][ T6380] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.455707][ T8743] netlink: 'syz.3.744': attribute type 1 has an invalid length. [ 199.497322][ T8743] 8021q: adding VLAN 0 to HW filter on device bond3 [ 199.518269][ T8745] gre2: entered allmulticast mode [ 199.537253][ T8743] bond3: (slave gretap2): making interface the new active one [ 199.547203][ T8749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.746'. [ 199.549386][ T8743] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 199.802045][ T8765] netlink: 'syz.3.751': attribute type 4 has an invalid length. [ 199.812995][ T8766] netlink: 'syz.3.751': attribute type 4 has an invalid length. [ 199.820819][ T8765] netlink: 'syz.3.751': attribute type 4 has an invalid length. [ 199.869943][ T8768] bridge_slave_0: left allmulticast mode [ 199.876020][ T8768] bridge_slave_0: left promiscuous mode [ 199.882638][ T8768] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.893363][ T8768] bridge_slave_1: left allmulticast mode [ 199.899081][ T8768] bridge_slave_1: left promiscuous mode [ 199.907917][ T8768] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.946813][ T8768] bond0: (slave bond_slave_0): Releasing backup interface [ 199.974242][ T8768] bond_slave_0: left promiscuous mode [ 200.000147][ T8768] bond0: (slave bond_slave_1): Releasing backup interface [ 200.014392][ T8768] bond_slave_1: left promiscuous mode [ 200.028371][ T8768] team0: Port device team_slave_0 removed [ 200.038587][ T8768] team0: Port device team_slave_1 removed [ 200.047875][ T8768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.056802][ T8768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.066282][ T8768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.073813][ T8768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.092178][ T8768] bond0: (slave wlan1): Releasing backup interface [ 200.100031][ T8768] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 200.142609][ T983] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 200.253833][ T8781] lo speed is unknown, defaulting to 1000 [ 200.335213][ T8783] lo speed is unknown, defaulting to 1000 [ 200.547043][ T8790] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 200.577253][ T8794] netlink: 156 bytes leftover after parsing attributes in process `syz.1.757'. [ 200.588963][ T8790] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 200.608006][ T8790] IPVS: length: 163 != 106504 [ 200.696446][ T5981] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 200.949396][ T8818] netlink: 'syz.3.763': attribute type 1 has an invalid length. [ 200.955610][ T8813] openvswitch: netlink: Flow key attr not present in new flow. [ 200.976656][ T8806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.047414][ T8810] lo speed is unknown, defaulting to 1000 [ 201.650485][ T8843] lo: entered allmulticast mode [ 201.656737][ T8843] lo: left allmulticast mode [ 202.214192][ T8862] netlink: 'syz.3.776': attribute type 6 has an invalid length. [ 202.224584][ T8862] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 202.511460][ T8876] __nla_validate_parse: 2 callbacks suppressed [ 202.511479][ T8876] netlink: 76 bytes leftover after parsing attributes in process `syz.1.781'. [ 202.558485][ T8876] netlink: 'syz.1.781': attribute type 1 has an invalid length. [ 202.571759][ T8876] netlink: 'syz.1.781': attribute type 4 has an invalid length. [ 202.580878][ T8880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.783'. [ 202.594406][ T8876] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.781'. [ 202.605776][ T8880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.783'. [ 202.722366][ T8888] !: renamed from dummy0 [ 202.775926][ T8892] netlink: 24 bytes leftover after parsing attributes in process `syz.2.784'. [ 202.986719][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.785'. [ 203.061821][ T8907] netlink: 84 bytes leftover after parsing attributes in process `syz.2.788'. [ 203.062698][ T8896] lo speed is unknown, defaulting to 1000 [ 203.358520][ T8918] netlink: 884 bytes leftover after parsing attributes in process `syz.3.791'. [ 203.449836][ T8918] netlink: 76 bytes leftover after parsing attributes in process `syz.3.791'. [ 204.270580][ T8948] lo speed is unknown, defaulting to 1000 [ 204.631622][ T983] IPVS: starting estimator thread 0... [ 204.679790][ T8971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.735420][ T8969] IPVS: using max 26 ests per chain, 62400 per kthread [ 204.759059][ T8972] macsec1: entered promiscuous mode [ 204.760523][ T8976] netlink: 16 bytes leftover after parsing attributes in process `syz.3.800'. [ 204.776804][ T8972] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 204.795150][ T8972] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 204.976224][ T8981] vti0: entered promiscuous mode [ 205.014002][ T8983] netlink: 'syz.0.803': attribute type 2 has an invalid length. [ 205.266600][ T9002] netlink: 'syz.1.810': attribute type 1 has an invalid length. [ 205.326363][ T9002] bond2: entered promiscuous mode [ 205.333990][ T9002] bond2: entered allmulticast mode [ 205.339920][ T9002] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.502138][ T9017] syzkaller0: entered promiscuous mode [ 205.507761][ T9017] syzkaller0: entered allmulticast mode [ 206.213082][ T9056] netlink: 'syz.2.828': attribute type 11 has an invalid length. [ 206.285865][ T9062] netlink: 'syz.2.829': attribute type 3 has an invalid length. [ 206.370643][ T9064] veth0: entered promiscuous mode [ 206.380404][ T9064] veth0: left promiscuous mode [ 206.410886][ T9068] gretap0: entered promiscuous mode [ 206.954080][ T9097] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 206.954482][ T9096] IPVS: stopping backup sync thread 9097 ... [ 206.994133][ T9099] tipc: Enabling of bearer rejected, failed to enable media [ 207.184314][ T9108] netlink: 'syz.3.847': attribute type 7 has an invalid length. [ 207.258563][ T9108] 8021q: VLANs not supported on sit0 [ 207.688201][ T9145] netlink: 'syz.2.856': attribute type 12 has an invalid length. [ 207.701069][ T9145] __nla_validate_parse: 14 callbacks suppressed [ 207.701084][ T9145] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.856'. [ 207.725051][ T9142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.857'. [ 207.855852][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'. [ 207.936846][ T9157] netlink: 32 bytes leftover after parsing attributes in process `syz.3.861'. [ 207.981067][ T9161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.862'. [ 208.007602][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'. [ 208.021991][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'. [ 208.031705][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'. [ 208.070917][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'. [ 208.079474][ T9164] lo speed is unknown, defaulting to 1000 [ 208.144149][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'. [ 208.227407][ T9172] netlink: 'syz.0.863': attribute type 1 has an invalid length. [ 208.306023][ T9174] tipc: Enabled bearer , priority 0 [ 208.516135][ T9174] syzkaller0: entered promiscuous mode [ 208.534079][ T9174] syzkaller0: entered allmulticast mode [ 208.539329][ T9178] IPVS: Scheduler module ip_vs_ not found [ 208.648296][ T5866] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 208.657940][ T5866] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 208.667922][ T5866] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 208.676248][ T5866] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 208.701147][ T5866] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 208.730423][ T9174] tipc: Resetting bearer [ 208.777338][ T9196] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.853292][ T9173] tipc: Resetting bearer [ 208.906612][ T9173] tipc: Disabling bearer [ 208.978688][ T9199] lo speed is unknown, defaulting to 1000 [ 209.304798][ T9222] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20003 [ 209.320093][ T9199] chnl_net:caif_netlink_parms(): no params data found [ 209.330534][ T9223] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20003 [ 209.959209][ T9199] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.979293][ T9199] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.998548][ T9199] bridge_slave_0: entered allmulticast mode [ 210.008123][ T9199] bridge_slave_0: entered promiscuous mode [ 210.028929][ T9229] lo speed is unknown, defaulting to 1000 [ 210.081390][ T9199] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.088535][ T9199] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.089292][ T9257] netlink: 'syz.0.878': attribute type 1 has an invalid length. [ 210.130161][ T9199] bridge_slave_1: entered allmulticast mode [ 210.141549][ T9257] NCSI netlink: No device for ifindex 813332851 [ 210.168857][ T9199] bridge_slave_1: entered promiscuous mode [ 210.201019][ T9259] tipc: Started in network mode [ 210.231312][ T9259] tipc: Node identity da538248ea34, cluster identity 4711 [ 210.252512][ T9259] tipc: Enabled bearer , priority 0 [ 210.534240][ T9199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.638352][ T9273] tipc: Resetting bearer [ 210.679915][ T9199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.745023][ T5871] Bluetooth: hci5: command tx timeout [ 210.906989][ T9199] team0: Port device team_slave_0 added [ 210.913880][ T9269] syzkaller0: entered promiscuous mode [ 210.924573][ T9269] syzkaller0: entered allmulticast mode [ 210.969680][ T9199] team0: Port device team_slave_1 added [ 211.135191][ T9291] veth7: entered promiscuous mode [ 211.143631][ T9199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.151763][ T9199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.178512][ T9199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.200692][ T9199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.208222][ T9199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.279654][ T9199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.317632][ T9299] netlink: 'syz.0.887': attribute type 10 has an invalid length. [ 211.371315][ T983] tipc: Node number set to 812089928 [ 211.391864][ T9303] netlink: 'syz.0.887': attribute type 10 has an invalid length. [ 211.419479][ T9299] team0: Port device dummy0 added [ 211.468602][ T9303] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 211.493622][ T9303] team0: Failed to send options change via netlink (err -105) [ 211.502104][ T9303] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 211.515871][ T9303] team0: Port device dummy0 removed [ 211.528691][ T9303] dummy0: entered promiscuous mode [ 211.540128][ T9303] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 211.577312][ T9199] hsr_slave_0: entered promiscuous mode [ 211.600316][ T9199] hsr_slave_1: entered promiscuous mode [ 211.614256][ T9199] debugfs: 'hsr0' already exists in 'hsr' [ 211.634767][ T9199] Cannot create hsr debugfs directory [ 211.703925][ T5871] Bluetooth: hci3: command 0x0406 tx timeout [ 211.710397][ T5873] Bluetooth: hci1: command 0x0406 tx timeout [ 211.716884][ T5864] Bluetooth: hci2: command 0x0406 tx timeout [ 212.156599][ T9339] Unsupported ieee802154 address type: 0 [ 212.418383][ T9344] openvswitch: netlink: Flow actions attr not present in new flow. [ 212.520793][ T9199] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 212.532750][ T9199] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 212.551770][ T9354] netlink: 'syz.0.900': attribute type 1 has an invalid length. [ 212.569599][ T9199] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 212.587557][ T9199] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 212.748624][ T9199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.785969][ T9372] syzkaller1: entered allmulticast mode [ 212.810779][ T9199] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.829212][ T5866] Bluetooth: hci5: command tx timeout [ 212.853329][ T6382] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.860541][ T6382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.890967][ T6389] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.898158][ T6389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.977647][ T9380] bond0: (slave dummy0): Releasing backup interface [ 212.988269][ T9380] dummy0: left promiscuous mode [ 213.051587][ T983] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 213.093007][ T9386] __nla_validate_parse: 66 callbacks suppressed [ 213.093025][ T9386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.908'. [ 213.109742][ T983] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 213.143369][ T9386] netlink: 20 bytes leftover after parsing attributes in process `syz.1.908'. [ 213.157349][ T9386] tipc: Invalid UDP bearer configuration [ 213.157401][ T9386] tipc: Enabling of bearer rejected, failed to enable media [ 213.411597][ T983] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 213.562051][ T9413] netlink: 'syz.1.913': attribute type 4 has an invalid length. [ 213.710296][ T9199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.092996][ T9443] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 214.154587][ T9448] netlink: 20 bytes leftover after parsing attributes in process `syz.1.917'. [ 214.308455][ T9453] netlink: 36 bytes leftover after parsing attributes in process `syz.2.919'. [ 214.568817][ T9199] veth0_vlan: entered promiscuous mode [ 214.614374][ T9199] veth1_vlan: entered promiscuous mode [ 214.721852][ T9199] veth0_macvtap: entered promiscuous mode [ 214.763130][ T9199] veth1_macvtap: entered promiscuous mode [ 214.844111][ T9199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.888073][ T9199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.902386][ T5866] Bluetooth: hci5: command tx timeout [ 214.918836][ T6376] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.935682][ T9477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.926'. [ 214.942773][ T6376] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.962216][ T6376] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.993258][ T6376] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.213943][ T9496] netlink: 'syz.2.930': attribute type 15 has an invalid length. [ 215.296304][ T9498] lo speed is unknown, defaulting to 1000 [ 215.848109][ T6376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.871493][ T6376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.898183][ T9524] netlink: 'syz.0.937': attribute type 7 has an invalid length. [ 215.947360][ T9524] : entered promiscuous mode [ 216.134167][ T6376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.150358][ T9529] netlink: 348 bytes leftover after parsing attributes in process `syz.1.938'. [ 216.169885][ T6376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.189096][ T9538] netlink: 20 bytes leftover after parsing attributes in process `syz.0.941'. [ 216.227411][ T9527] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 216.246907][ T5981] IPVS: starting estimator thread 0... [ 216.282715][ T9538] Bluetooth: MGMT ver 1.23 [ 216.351493][ T9543] IPVS: using max 29 ests per chain, 69600 per kthread [ 216.548021][ T9554] vlan2: entered promiscuous mode [ 216.556491][ T9554] batadv0: entered promiscuous mode [ 216.746391][ T9574] lo speed is unknown, defaulting to 1000 [ 216.982027][ T51] Bluetooth: hci5: command tx timeout [ 217.000075][ T9571] lo speed is unknown, defaulting to 1000 [ 217.203130][ T9583] lo speed is unknown, defaulting to 1000 [ 217.480741][ T9608] netlink: 60 bytes leftover after parsing attributes in process `syz.5.957'. [ 217.529521][ T9608] netlink: 12 bytes leftover after parsing attributes in process `syz.5.957'. [ 217.551483][ T9608] netlink: 60 bytes leftover after parsing attributes in process `syz.5.957'. [ 217.661943][ T9574] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 217.812464][ T9608] "syz.5.957" (9608) uses obsolete ecb(arc4) skcipher [ 217.934740][ T9579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.207790][ T9645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.964'. [ 218.255114][ T9650] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 218.347181][ T5866] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 218.356927][ T5866] Bluetooth: hci2: command 0x0406 tx timeout [ 218.700494][ T9672] netlink: 'syz.5.968': attribute type 7 has an invalid length. [ 218.724460][ T9672] netlink: 'syz.5.968': attribute type 8 has an invalid length. [ 218.776013][ T9680] netlink: 'syz.1.971': attribute type 7 has an invalid length. [ 218.777314][ T9678] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 218.794248][ T9680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.971'. [ 218.813940][ T9678] openvswitch: netlink: IP tunnel dst address not specified [ 218.922847][ T9684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.970'. [ 218.995942][ T9684] 8021q: adding VLAN 0 to HW filter on device bond3 [ 219.158586][ T9689] bond3: (slave veth5): Enslaving as an active interface with an up link [ 219.173525][ T9702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.283155][ T9701] tipc: Enabling of bearer rejected, failed to enable media [ 219.296623][ T9708] tap0: tun_chr_ioctl cmd 35108 [ 219.387160][ T9712] netlink: 20 bytes leftover after parsing attributes in process `syz.3.977'. [ 219.706360][ T9735] netlink: 16 bytes leftover after parsing attributes in process `syz.2.982'. [ 219.743410][ T9735] netlink: 16 bytes leftover after parsing attributes in process `syz.2.982'. [ 219.821961][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.984'. [ 219.892439][ T9744] pimreg: entered allmulticast mode [ 219.911849][ T9744] netlink: 'syz.0.985': attribute type 10 has an invalid length. [ 219.947260][ T9744] syz_tun: entered promiscuous mode [ 220.018413][ T9749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.985'. [ 220.038692][ T9744] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 220.160706][ T9744] pimreg: left allmulticast mode [ 220.845256][ T9801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.998'. [ 220.857447][ T9801] tipc: Enabled bearer , priority 18 [ 221.019469][ T9812] netlink: 'syz.3.1001': attribute type 8 has an invalid length. [ 221.027412][ T9813] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1002'. [ 221.027722][ T9813] chnl_net:caif_netlink_parms(): no params data found [ 221.419736][ T9834] vlan2: entered allmulticast mode [ 221.430107][ T9834] macvtap0: entered allmulticast mode [ 221.470047][ T9838] netlink: 'syz.5.1009': attribute type 1 has an invalid length. [ 221.689764][ T9855] netlink: 'syz.1.1014': attribute type 1 has an invalid length. [ 221.737714][ T9855] bond3: (slave gretap2): making interface the new active one [ 221.747405][ T9855] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 221.817842][ T9855] vlan2: entered allmulticast mode [ 221.921597][ T9855] bond3: entered allmulticast mode [ 221.926785][ T9855] gretap2: entered allmulticast mode [ 221.953708][ T9855] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 222.924378][ T9907] tipc: Enabled bearer , priority 0 [ 222.959612][ T9907] syzkaller0: entered promiscuous mode [ 222.992380][ T9907] syzkaller0: entered allmulticast mode [ 223.040953][ T9915] Unsupported xt match [ 223.040972][ T9915] unable to load match [ 223.061763][ T9913] Unsupported xt match [ 223.061779][ T9913] unable to load match [ 223.109804][ T9907] tipc: Resetting bearer [ 223.149241][ T9907] tipc: Disabling bearer [ 223.514652][ T9943] __nla_validate_parse: 10 callbacks suppressed [ 223.514672][ T9943] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1034'. [ 223.902687][ T9951] syzkaller0: entered promiscuous mode [ 223.913869][ T9951] syzkaller0: entered allmulticast mode [ 223.942903][ T9948] lo speed is unknown, defaulting to 1000 [ 225.617379][ T9971] syzkaller1: entered promiscuous mode [ 225.624121][ T9971] syzkaller1: entered allmulticast mode [ 225.977246][T10004] netlink: 'syz.3.1046': attribute type 3 has an invalid length. [ 226.000906][T10004] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1046'. [ 226.023241][ T9998] lo speed is unknown, defaulting to 1000 [ 226.222502][T10023] macvtap1: entered allmulticast mode [ 226.228185][T10023] bridge0: entered allmulticast mode [ 226.238842][T10023] bridge0: port 1(macvtap1) entered blocking state [ 226.249877][T10023] bridge0: port 1(macvtap1) entered disabled state [ 226.289247][T10023] bridge0: left allmulticast mode [ 226.589137][T10049] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 226.650465][T10042] netlink: 'syz.3.1056': attribute type 4 has an invalid length. [ 226.691048][T10042] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1056'. [ 226.832354][T10042] Ã: renamed from bond0 [ 226.901830][T10051] lo speed is unknown, defaulting to 1000 [ 227.207711][T10075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1064'. [ 227.394059][T10076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1062'. [ 227.411252][T10076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1062'. [ 227.473000][T10082] syzkaller1: entered promiscuous mode [ 227.478585][T10082] syzkaller1: entered allmulticast mode [ 227.531493][T10084] netlink: 'syz.1.1067': attribute type 10 has an invalid length. [ 227.565236][ T30] audit: type=1804 audit(1755446239.129:3): pid=10089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1066" name="/newroot/246/cgroup.controllers" dev="tmpfs" ino=1278 res=1 errno=0 [ 227.598294][T10084] veth0_vlan: left promiscuous mode [ 227.598864][ T30] audit: type=1800 audit(1755446239.129:4): pid=10089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1066" name="cgroup.controllers" dev="tmpfs" ino=1278 res=0 errno=0 [ 227.607890][T10084] veth0_vlan: entered promiscuous mode [ 227.633773][T10084] team0: Device veth0_vlan failed to register rx_handler [ 227.640993][ T30] audit: type=1800 audit(1755446239.129:5): pid=10089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1066" name="cgroup.controllers" dev="tmpfs" ino=1278 res=0 errno=0 [ 227.669202][T10084] tipc: Resetting bearer [ 227.772304][T10093] tipc: Enabled bearer , priority 0 [ 227.779813][T10093] syzkaller0: entered promiscuous mode [ 227.786070][T10093] syzkaller0: entered allmulticast mode [ 227.799152][T10093] tipc: Resetting bearer [ 227.816561][T10092] tipc: Resetting bearer [ 227.839422][T10092] tipc: Disabling bearer [ 227.906886][T10098] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1070'. [ 227.927449][T10095] lo speed is unknown, defaulting to 1000 [ 227.999615][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1074'. [ 228.243353][T10119] netlink: 'syz.5.1079': attribute type 4 has an invalid length. [ 228.759001][T10155] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.787540][T10155] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1089'. [ 228.800825][T10154] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1088'. [ 228.844094][T10155] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1089'. [ 229.030607][T10163] netlink: 'syz.3.1091': attribute type 8 has an invalid length. [ 229.039766][T10159] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1090'. [ 229.075245][T10166] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1090'. [ 229.584375][T10196] ip6gre1: entered allmulticast mode [ 229.613592][T10203] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 229.746075][T10206] netlink: 'syz.3.1103': attribute type 1 has an invalid length. [ 229.810817][T10207] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1103'. [ 230.286893][T10224] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1108'. [ 230.545455][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1109'. [ 230.668974][T10245] netlink: 212232 bytes leftover after parsing attributes in process `syz.2.1114'. [ 230.705973][T10245] sctp: [Deprecated]: syz.2.1114 (pid 10245) Use of int in maxseg socket option. [ 230.705973][T10245] Use struct sctp_assoc_value instead [ 230.750807][T10239] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 230.838653][T10251] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1116'. [ 230.864819][T10251] bond0: entered promiscuous mode [ 230.876628][T10251] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 230.891803][T10251] team0: entered promiscuous mode [ 230.901296][ T6376] wlan1: Trigger new scan to find an IBSS to join [ 230.914481][T10251] bond0: left promiscuous mode [ 230.920236][T10251] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 230.928738][T10251] team0: left promiscuous mode [ 230.945674][T10260] netlink: 'syz.5.1119': attribute type 10 has an invalid length. [ 230.962410][T10260] team0: Port device geneve0 added [ 231.178814][T10275] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 231.460953][T10295] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.548035][T10295] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.695586][T10295] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.802918][T10313] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 231.827092][T10295] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.871977][T10311] syzkaller1: entered promiscuous mode [ 231.877692][T10311] syzkaller1: entered allmulticast mode [ 231.942374][T10320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.949373][T10320] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 231.992119][T10320] bond0: (slave ip_vti0): Error -95 calling set_mac_address [ 232.158278][ T6376] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.218343][ T6376] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.302499][ T6376] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.387465][ T6376] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.789844][T10367] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20000 [ 232.819926][T10365] netlink: 'syz.2.1145': attribute type 11 has an invalid length. [ 233.078710][T10380] netlink: 'syz.0.1152': attribute type 12 has an invalid length. [ 233.104184][T10376] tipc: Enabled bearer , priority 0 [ 233.140797][T10376] syzkaller0: entered promiscuous mode [ 233.159167][T10387] siw: device registration error -23 [ 233.169212][T10376] syzkaller0: entered allmulticast mode [ 233.223130][ T51] Bluetooth: hci0: command tx timeout [ 233.229084][ T5869] Bluetooth: hci5: command 0x0405 tx timeout [ 233.337934][T10376] tipc: Resetting bearer [ 233.358580][T10375] tipc: Resetting bearer [ 233.426997][T10375] tipc: Disabling bearer [ 233.596932][T10405] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 233.876676][ T3016] wlan1: Trigger new scan to find an IBSS to join [ 233.916155][T10413] batman_adv: batadv0: Adding interface: macvlan2 [ 233.931713][T10413] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.979728][T10413] batman_adv: batadv0: Interface activated: macvlan2 [ 234.250036][T10435] __nla_validate_parse: 19 callbacks suppressed [ 234.250057][T10435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1164'. [ 234.261701][T10434] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1162'. [ 234.629587][T10453] netlink: 165 bytes leftover after parsing attributes in process `syz.5.1169'. [ 235.024845][T10483] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1175'. [ 235.055812][T10483] openvswitch: netlink: Flow key attr not present in new flow. [ 235.087622][T10488] ------------[ cut here ]------------ [ 235.093365][T10488] WARNING: CPU: 0 PID: 10488 at net/ipv4/route.c:1269 ip_rt_bug+0x2c/0x110 [ 235.102043][T10488] Modules linked in: [ 235.106112][T10488] CPU: 0 UID: 0 PID: 10488 Comm: syz.0.1176 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 235.118235][T10488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 235.128340][T10488] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 235.133428][T10488] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 3b ab d5 f7 66 90 e8 34 ab d5 f7 31 ff 48 89 de ba 02 00 00 00 e8 b5 9b 70 ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc f3 0f [ 235.153103][T10488] RSP: 0018:ffffc9001ad6f180 EFLAGS: 00010286 [ 235.159189][T10488] RAX: a7ec5be9ca474f00 RBX: ffff8880572a83c0 RCX: a7ec5be9ca474f00 [ 235.167206][T10488] RDX: 0000000000000002 RSI: ffffffff8d9b6e87 RDI: ffffffff8be33400 [ 235.175255][T10488] RBP: 0000000000000001 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6 [ 235.183288][T10488] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: dffffc0000000000 [ 235.191313][T10488] R13: dffffc0000000000 R14: ffff8880572a83c0 R15: ffff888022aa1b00 [ 235.199308][T10488] FS: 00007fe1d097a6c0(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 235.208302][T10488] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.214939][T10488] CR2: 00007fe1d0979f98 CR3: 00000000327ce000 CR4: 00000000003526f0 [ 235.222974][T10488] Call Trace: [ 235.226292][T10488] [ 235.229250][T10488] ip_push_pending_frames+0xbe/0x150 [ 235.234610][T10488] __icmp_send+0xf87/0x12d0 [ 235.239171][T10488] ? __icmp_send+0x1b9/0x12d0 [ 235.243927][T10488] ? __pfx___icmp_send+0x10/0x10 [ 235.248968][T10488] ? ip_route_input_noref+0x98/0x250 [ 235.254335][T10488] ? __pfx_ip_route_input_noref+0x10/0x10 [ 235.257151][T10492] openvswitch: netlink: Geneve opt len 11 is not a multiple of 4. [ 235.260087][T10488] ? tcp_v4_early_demux+0x4e1/0x9d0 [ 235.271181][T10492] tc_dump_action: action bad kind [ 235.273190][T10488] ? tcp_v4_early_demux+0x5ec/0x9d0 [ 235.283453][T10488] ip_options_compile+0x80/0xb0 [ 235.288332][T10488] ip_rcv_finish_core+0xaa2/0x1c00 [ 235.293542][T10488] ip_rcv_finish+0x14c/0x2f0 [ 235.298161][T10488] NF_HOOK+0x309/0x3a0 [ 235.302297][T10488] ? __pfx_ip_rcv_finish+0x10/0x10 [ 235.307437][T10488] ? NF_HOOK+0x9a/0x3a0 [ 235.311652][T10488] ? __pfx_NF_HOOK+0x10/0x10 [ 235.316272][T10488] ? ip_rcv_core+0x7f7/0xd00 [ 235.320923][T10488] ? __pfx_ip_rcv_finish+0x10/0x10 [ 235.326138][T10488] ? __pfx_ip_rcv+0x10/0x10 [ 235.330676][T10488] __netif_receive_skb+0x143/0x380 [ 235.335873][T10488] ? netif_receive_skb+0x115/0x790 [ 235.341156][T10488] netif_receive_skb+0x1cb/0x790 [ 235.346130][T10488] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 235.352008][T10488] ? __pfx_netif_receive_skb+0x10/0x10 [ 235.357505][T10488] ? tun_rx_batched+0x160/0x730 [ 235.362416][T10488] tun_rx_batched+0x1b9/0x730 [ 235.367112][T10488] ? __lock_acquire+0xab9/0xd20 [ 235.372024][T10488] ? __pfx_tun_rx_batched+0x10/0x10 [ 235.377250][T10488] ? tun_get_user+0x266c/0x3e20 [ 235.382173][T10488] tun_get_user+0x2aa2/0x3e20 [ 235.386888][T10488] ? tun_get_user+0x6f6/0x3e20 [ 235.391707][T10488] ? tun_get_user+0x266c/0x3e20 [ 235.396577][T10488] ? aa_file_perm+0x44d/0x1550 [ 235.401399][T10488] ? __pfx_tun_get_user+0x10/0x10 [ 235.406491][T10488] ? page_table_check_set+0x18d/0x730 [ 235.411957][T10488] ? ref_tracker_alloc+0x318/0x460 [ 235.417096][T10488] ? __lock_acquire+0xab9/0xd20 [ 235.422029][T10488] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 235.427531][T10488] ? tun_get+0x1c/0x2f0 [ 235.431757][T10488] ? tun_get+0x1c/0x2f0 [ 235.435943][T10488] ? tun_get+0x1c/0x2f0 [ 235.440138][T10488] tun_chr_write_iter+0x113/0x200 [ 235.445258][T10488] vfs_write+0x5c6/0xb30 [ 235.449549][T10488] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 235.455198][T10488] ? __pfx_vfs_write+0x10/0x10 [ 235.460008][T10488] ? __fget_files+0x2a/0x420 [ 235.464656][T10488] ksys_write+0x145/0x250 [ 235.469019][T10488] ? __pfx_ksys_write+0x10/0x10 [ 235.473948][T10488] ? do_syscall_64+0xbe/0x3b0 [ 235.478664][T10488] do_syscall_64+0xfa/0x3b0 [ 235.483230][T10488] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.488450][T10488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.494655][T10488] ? clear_bhb_loop+0x60/0xb0 [ 235.499356][T10488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.505312][T10488] RIP: 0033:0x7fe1cfb8d69f [ 235.509765][T10488] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 235.529516][T10488] RSP: 002b:00007fe1d097a000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 235.538010][T10488] RAX: ffffffffffffffda RBX: 00007fe1cfdb6090 RCX: 00007fe1cfb8d69f [ 235.546061][T10488] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 235.554113][T10488] RBP: 00007fe1cfc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 235.562212][T10488] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000000 [ 235.570196][T10488] R13: 00007fe1cfdb6128 R14: 00007fe1cfdb6090 R15: 00007ffee25f0e38 [ 235.578246][T10488] [ 235.581325][T10488] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 235.588625][T10488] CPU: 0 UID: 0 PID: 10488 Comm: syz.0.1176 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 235.600688][T10488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 235.610961][T10488] Call Trace: [ 235.614235][T10488] [ 235.617162][T10488] dump_stack_lvl+0x99/0x250 [ 235.621757][T10488] ? __asan_memcpy+0x40/0x70 [ 235.626356][T10488] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.631553][T10488] ? __pfx__printk+0x10/0x10 [ 235.636161][T10488] vpanic+0x281/0x750 [ 235.640159][T10488] ? __pfx__printk+0x10/0x10 [ 235.644750][T10488] ? __pfx_vpanic+0x10/0x10 [ 235.649256][T10488] ? is_bpf_text_address+0x26/0x2b0 [ 235.654468][T10488] panic+0xb9/0xc0 [ 235.658186][T10488] ? __pfx_panic+0x10/0x10 [ 235.662627][T10488] __warn+0x31b/0x4b0 [ 235.666608][T10488] ? ip_rt_bug+0x2c/0x110 [ 235.670935][T10488] ? ip_rt_bug+0x2c/0x110 [ 235.675265][T10488] report_bug+0x2be/0x4f0 [ 235.679604][T10488] ? ip_rt_bug+0x2c/0x110 [ 235.683933][T10488] ? ip_rt_bug+0x2c/0x110 [ 235.688259][T10488] ? ip_rt_bug+0x2e/0x110 [ 235.692588][T10488] handle_bug+0x84/0x160 [ 235.696836][T10488] exc_invalid_op+0x1a/0x50 [ 235.701339][T10488] asm_exc_invalid_op+0x1a/0x20 [ 235.706196][T10488] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 235.711148][T10488] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 3b ab d5 f7 66 90 e8 34 ab d5 f7 31 ff 48 89 de ba 02 00 00 00 e8 b5 9b 70 ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc f3 0f [ 235.730840][T10488] RSP: 0018:ffffc9001ad6f180 EFLAGS: 00010286 [ 235.736910][T10488] RAX: a7ec5be9ca474f00 RBX: ffff8880572a83c0 RCX: a7ec5be9ca474f00 [ 235.744879][T10488] RDX: 0000000000000002 RSI: ffffffff8d9b6e87 RDI: ffffffff8be33400 [ 235.752850][T10488] RBP: 0000000000000001 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6 [ 235.760819][T10488] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: dffffc0000000000 [ 235.768802][T10488] R13: dffffc0000000000 R14: ffff8880572a83c0 R15: ffff888022aa1b00 [ 235.776827][T10488] ip_push_pending_frames+0xbe/0x150 [ 235.782127][T10488] __icmp_send+0xf87/0x12d0 [ 235.786656][T10488] ? __icmp_send+0x1b9/0x12d0 [ 235.791348][T10488] ? __pfx___icmp_send+0x10/0x10 [ 235.796329][T10488] ? ip_route_input_noref+0x98/0x250 [ 235.801637][T10488] ? __pfx_ip_route_input_noref+0x10/0x10 [ 235.807367][T10488] ? tcp_v4_early_demux+0x4e1/0x9d0 [ 235.812605][T10488] ? tcp_v4_early_demux+0x5ec/0x9d0 [ 235.817815][T10488] ip_options_compile+0x80/0xb0 [ 235.822665][T10488] ip_rcv_finish_core+0xaa2/0x1c00 [ 235.827796][T10488] ip_rcv_finish+0x14c/0x2f0 [ 235.832402][T10488] NF_HOOK+0x309/0x3a0 [ 235.836479][T10488] ? __pfx_ip_rcv_finish+0x10/0x10 [ 235.841600][T10488] ? NF_HOOK+0x9a/0x3a0 [ 235.845766][T10488] ? __pfx_NF_HOOK+0x10/0x10 [ 235.850364][T10488] ? ip_rcv_core+0x7f7/0xd00 [ 235.854962][T10488] ? __pfx_ip_rcv_finish+0x10/0x10 [ 235.860093][T10488] ? __pfx_ip_rcv+0x10/0x10 [ 235.864608][T10488] __netif_receive_skb+0x143/0x380 [ 235.869833][T10488] ? netif_receive_skb+0x115/0x790 [ 235.874951][T10488] netif_receive_skb+0x1cb/0x790 [ 235.879898][T10488] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 235.885704][T10488] ? __pfx_netif_receive_skb+0x10/0x10 [ 235.891183][T10488] ? tun_rx_batched+0x160/0x730 [ 235.896048][T10488] tun_rx_batched+0x1b9/0x730 [ 235.900749][T10488] ? __lock_acquire+0xab9/0xd20 [ 235.905622][T10488] ? __pfx_tun_rx_batched+0x10/0x10 [ 235.910825][T10488] ? tun_get_user+0x266c/0x3e20 [ 235.915684][T10488] tun_get_user+0x2aa2/0x3e20 [ 235.920368][T10488] ? tun_get_user+0x6f6/0x3e20 [ 235.925138][T10488] ? tun_get_user+0x266c/0x3e20 [ 235.929990][T10488] ? aa_file_perm+0x44d/0x1550 [ 235.934753][T10488] ? __pfx_tun_get_user+0x10/0x10 [ 235.939782][T10488] ? page_table_check_set+0x18d/0x730 [ 235.945176][T10488] ? ref_tracker_alloc+0x318/0x460 [ 235.950297][T10488] ? __lock_acquire+0xab9/0xd20 [ 235.955161][T10488] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 235.960639][T10488] ? tun_get+0x1c/0x2f0 [ 235.964825][T10488] ? tun_get+0x1c/0x2f0 [ 235.968981][T10488] ? tun_get+0x1c/0x2f0 [ 235.973136][T10488] tun_chr_write_iter+0x113/0x200 [ 235.978173][T10488] vfs_write+0x5c6/0xb30 [ 235.982426][T10488] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 235.987979][T10488] ? __pfx_vfs_write+0x10/0x10 [ 235.992755][T10488] ? __fget_files+0x2a/0x420 [ 235.997354][T10488] ksys_write+0x145/0x250 [ 236.001695][T10488] ? __pfx_ksys_write+0x10/0x10 [ 236.006561][T10488] ? do_syscall_64+0xbe/0x3b0 [ 236.011246][T10488] do_syscall_64+0xfa/0x3b0 [ 236.015756][T10488] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.021010][T10488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.027094][T10488] ? clear_bhb_loop+0x60/0xb0 [ 236.031783][T10488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.037706][T10488] RIP: 0033:0x7fe1cfb8d69f [ 236.042121][T10488] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 236.061733][T10488] RSP: 002b:00007fe1d097a000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 236.070163][T10488] RAX: ffffffffffffffda RBX: 00007fe1cfdb6090 RCX: 00007fe1cfb8d69f [ 236.078159][T10488] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 236.086143][T10488] RBP: 00007fe1cfc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 236.094122][T10488] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000000 [ 236.102096][T10488] R13: 00007fe1cfdb6128 R14: 00007fe1cfdb6090 R15: 00007ffee25f0e38 [ 236.110086][T10488] [ 236.113228][T10488] Kernel Offset: disabled [ 236.117546][T10488] Rebooting in 86400 seconds..