last executing test programs: 4.345785975s ago: executing program 2 (id=4584): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100", 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x4, 0x0}}]}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100)={r5, 0x4, 0x0, 0x80000001}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001"], 0x98}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 3.920732534s ago: executing program 4 (id=4586): socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet(0x2b, 0x801, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x10}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x94) sendmmsg$sock(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}, {{&(0x7f0000000700)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0}}], 0x400000000000297, 0x48094) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) socket(0x10, 0x803, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r5) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000200)={'virt_wifi0\x00', @multicast}) 3.405358483s ago: executing program 2 (id=4590): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x80000) setsockopt(r7, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) recvmmsg(r7, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x19, 0x4, 0x1, 0x1, 0x64, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @ssrr={0x89, 0x13, 0x3e, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x42}, @loopback]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000180)=0x5, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) 3.400025512s ago: executing program 1 (id=4591): r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}}]}, &(0x7f00000002c0)=0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x3, @mcast1, 0x9}}, 0x0, 0x0, 0x34, 0x0, "803c790e68512c1af8264e8185596013882dd3d57833cd55a0c861d90b56916174e4a1bf1b3790058676271dd1c7418caa9211ec7a6bc9aed03849050dcf39aa1f378d258a20714a54c7de3a11a9b506"}, 0xd8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000080)=0x40000) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000000)=0x31) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x4c, r6, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x4c}, 0x2, 0x34005}, 0x0) preadv(r2, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'veth0_to_hsr\x00', @multicast}) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}]}, &(0x7f0000000180)=0x10) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0x4) writev(r11, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r13) read$alg(r12, &(0x7f0000000b80)=""/237, 0xed) socket$nl_netfilter(0x10, 0x3, 0xc) 3.254365429s ago: executing program 3 (id=4592): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) socket$inet(0xa, 0x801, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x4, 0x0}}]}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000100)={r7, 0x4, 0x0, 0x80000001}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001"], 0x98}}, 0x0) 3.023164987s ago: executing program 4 (id=4594): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r6, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) 2.75321099s ago: executing program 0 (id=4595): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100", 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x4, 0x0}}]}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100)={r5, 0x4, 0x0, 0x80000001}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001"], 0x98}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 2.400747595s ago: executing program 1 (id=4596): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x1, 0x8004) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002a00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b00)=ANY=[], 0x1f0, 0x80}], 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x30, 0x4040001}], 0x1, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) unshare(0x62040200) write$tun(0xffffffffffffffff, 0x0, 0x3e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.374853921s ago: executing program 2 (id=4597): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x1, 0x8004) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002a00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b00)=ANY=[], 0x1f0, 0x80}], 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x30, 0x4040001}], 0x1, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) unshare(0x62040200) write$tun(0xffffffffffffffff, 0x0, 0x3e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.34184316s ago: executing program 3 (id=4598): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@dev={0xac, 0x14, 0x14, 0x1a}, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390004001300034700bb5be1c3e4feff060000000000190004000400ad0002000000000000060488627df400f93132", 0x2f}], 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0xc0}}, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @empty, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x18) bind$netlink(r6, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004000000040000000000010000000000", @ANYRES32=r8, @ANYBLOB="00000000000000ff0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x48) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1e, 0x2, 0x6, &(0x7f0000000480)={0xffffffffffffffff}) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2.155534454s ago: executing program 3 (id=4599): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) unshare(0x6a040000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020600000000000000000000000500000000000000001b7f5b920d6a47d20c0000000900020200000000000000001100030068f733e31f58cbb8d061726b0000001000000000009c71bc311c55db5f8acdfedecfc288afdfa91d947df74d903dae6220d1c488b71d7e998e1d46a1f72eb7157126495e9dce8940e2ef7f7bceb6e93ebcc742c10971228d6d"], 0x58}}, 0x0) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000400"/28], 0x50) unshare(0x600) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000600), 0x4, r4, 0x4}, 0x38) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00800000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x401, @empty}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtclass={0xc4, 0x28, 0x100, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xe}, {0x6, 0x13}, {0x5, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x18, 0x3}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x74, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x5, 0xde60, 0x80000001}}, @TCA_HFSC_FSC={0x10, 0x2, {0x2, 0x3, 0x8}}, @TCA_HFSC_RSC={0x10, 0x1, {0xe322, 0x30e, 0x100}}, @TCA_HFSC_USC={0x10, 0x3, {0xc, 0x6, 0x200}}, @TCA_HFSC_FSC={0x10, 0x2, {0xe7a4, 0xc219, 0xbdc}}, @TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x1, 0x80000001}}, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0xffff, 0xa}}]}}, @TCA_RATE={0x6, 0x5, {0xe, 0x2}}]}, 0xc4}}, 0x0) unshare(0x20000400) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) recvmmsg(r5, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)=""/217, 0xd9}, {&(0x7f0000000280)=""/201, 0xc9}, {&(0x7f0000000380)=""/151, 0x97}, {&(0x7f0000000440)=""/145, 0x91}, {0xffffffffffffffff}, {&(0x7f0000000640)=""/235, 0xeb}], 0x6, &(0x7f00000007c0)=""/214, 0xd6}, 0x7}, {{&(0x7f00000008c0)=@hci, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f0000000100)=""/47, 0x2f}, {0x0}], 0x3, &(0x7f0000001b40)=""/73, 0x49}, 0x4ccc0fb}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/4, 0x4}], 0x2}, 0xffffff58}], 0x3, 0x0, &(0x7f0000002e80)) 2.095506386s ago: executing program 1 (id=4600): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000400)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440)=[@window={0x3, 0x4, 0x8}, @sack_perm, @window={0x3, 0x3, 0x4}, @sack_perm, @window={0x3, 0x678, 0x7ff}, @mss, @mss={0x2, 0x4}], 0x7) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000600)=r2, 0x4) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = getpid() syz_emit_ethernet(0x83, &(0x7f0000000500)=ANY=[@ANYRESDEC=r5], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000}, [@jmp={0x5, 0x1, 0xb, 0x1, 0x3, 0x0, 0x8}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1020, &(0x7f0000001200)=""/4128, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000003c0)=r5) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x100004, 0x620104, 0xb, 0x1}, 0x50) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r9, &(0x7f0000000080)={{0x3, @default, 0x1}, [@null, @default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bind$ax25(r9, &(0x7f0000000480)={{0x3, @null, 0x3}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000640), &(0x7f0000000680)=0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r8, 0x4}, 0x38) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mem_disconnect\x00', r11, 0x0, 0xffffffff}, 0x18) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0xffffffffffffff3c, &(0x7f0000000000)="ff", 0x0, 0x3, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x48) 1.959530868s ago: executing program 4 (id=4601): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100", 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x4, 0x0}}]}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100)={r5, 0x4, 0x0, 0x80000001}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001"], 0x98}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1.864028835s ago: executing program 0 (id=4602): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x1, 0x8004) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002a00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b00)=ANY=[], 0x1f0, 0x80}], 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x30, 0x4040001}], 0x1, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) unshare(0x62040200) write$tun(0xffffffffffffffff, 0x0, 0x3e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.720208468s ago: executing program 2 (id=4603): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000021000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3, 0xffffffffffffffff, 0x500}, 0x57) syz_emit_ethernet(0x56, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0xa, 0xf989, "f16d73c0e798"}]}}}}}}}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x160, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x124, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x104, 0x1, [@m_simple={0xcc, 0x1e, 0x0, 0x0, {{0xb}, {0xa0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x68f6, 0x6, 0x2, 0x8, 0x9}}, @TCA_DEF_DATA={0x9, 0x3, '/-@@\x00'}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}, @TCA_DEF_DATA={0x1e, 0x3, 'cpuacct.usage_percpu_user\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x4a66, 0x4, 0x3, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r5 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x6}, 0x8) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r1, {0xfffd, 0x1}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840) close(0x3) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc0118000000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r8, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r8, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 1.458970927s ago: executing program 0 (id=4604): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet(0x2b, 0x801, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}, {{&(0x7f0000000700)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0}}], 0x400000000000297, 0x48094) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) 1.424118213s ago: executing program 1 (id=4605): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800e50000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r10}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r7, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r5, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}}, 0x800) r11 = socket$inet_udplite(0x2, 0x2, 0x88) pwritev(r11, &(0x7f0000000180), 0x0, 0x8, 0x2) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=@newlink={0x4c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_MIIMON={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}}, 0x0) 1.325016027s ago: executing program 2 (id=4606): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a300000000014000000020a0300000000000000000002000003140000001100010000000000000000000000000a187b639904240561e0b40fc7cf272a8c0d2c243cb41c4c5756d5a706f03839db5356ed1f7c498ef773120872b92cda58384e329ca65b12cf45072d05fb4b984251c3c7"], 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x3fffe, 0x0, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b700000000000000950000000000000032224fe8f63a7969f662cebb579e40799c59065d7b4376eb930400000000000000caec85b6d4d9b2246ac241f8f29438966a38aad1d4a4038d68841ea3bbfdea87ae7168f29a9e87159b31aae07f1c8bad2513b45e018163649bf36200"/182], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xf2e8a000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="cc", 0x1}, {&(0x7f00000000c0)="8eabd4c0c48034d70c6006aaf0e953151d41e3aa438ad0f818f3ca6e230aa5b077a897a5165d32bd5407444338d4e74dc23e09008a2002a672aaa2b99549da614d74314e1666d923815da827281bee2de6eda534b2496123977149b4e7a4868d036ec6dc798458742e9c158e0c7d81a62785b97a0cc5", 0x76}], 0x2}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76", 0x390}], 0x1}}], 0x2, 0x4048894) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r3, &(0x7f0000000940), 0x10) clock_gettime(0xfffffffffffffff1, &(0x7f0000000040)) close(0x3) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x9, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff5}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 1.247611268s ago: executing program 3 (id=4607): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000001d00)=""/10, 0xa}, {0x0}], 0x2}, 0xc}], 0x1, 0x10000, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) unshare(0x2c060000) unshare(0x24020400) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d440fe0000000000002900000003000000", 0xfe60) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b300", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000b8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r8}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x8, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) syz_emit_ethernet(0x12e, &(0x7f0000000780)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x21, 0x4, 0x2, 0x6, 0x120, 0x66, 0x0, 0x1, 0x11, 0x0, @empty, @loopback, {[@timestamp_prespec={0x44, 0x24, 0x9c, 0x3, 0xd, [{@private=0xa010102, 0x6}, {@broadcast, 0x7de4}, {@private=0xa010102}, {@multicast1, 0x4}]}, @ssrr={0x89, 0x1b, 0x53, [@empty, @empty, @remote, @loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x28}]}, @ssrr={0x89, 0x13, 0x9e, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local, @broadcast]}, @lsrr={0x83, 0x1b, 0x59, [@rand_addr=0x64010101, @loopback, @multicast2, @rand_addr=0x64010100, @local, @multicast2]}]}}, {0x4e22, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7e4236bbcbfe3890a17a3fec479ff459a7fb2de618e4adf4b2f71af4363dddd8", "67c3360415c2bfaa22e46732f0e746302ed6cb5f42f78b28ce342e4fcee4c871ff2a94475c8acf3ab0025e18a0b8b211", "7c8e9b0841cf4869d9bcf5bf687bded45d362aa12e129f1cd99e849d", {"f586092ce1afbd8ad065eb738d5b8dec", "55d815078bd445f070595a666bbf6138"}}}}}}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x24}}, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @empty, @local, {[@routing={0x84}], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc392c91c1f824bc301b3069a02b9c86d2ffac3ed63ddee130cbc248d6a3345d3f9553db78077072d569a6633f8bdbdb1a209a8be9b6830225994f9021b57ddd6a44e8ea40b205c6cf437f45bffaef053a5916dcc6de62ee02bdb8ce3acec8ad97fc95dab1307d254790c71f32e4678957cf0121dccabe73a03c6cacbcbdaad8801b04d9836555a982c357a06e2db7e9bf62aed8cdebbb7a71a2410b929015b61f16e54bffd038996a717b9c7cc3696d8a1205e8266bf782c3a45b0e31461d6a3ed62396088833f69248b24fbf6f81dcc08b98826c3bd2325ade54f614f2d4a153e3e3527d93978483f2bfeada6b64bc43f2a725c30e843d13e6ab34cfc38d488b3ef50cd04318fac1f89905f017644cfa2de058ad399871d1316264813c2289d0b6cfeddfbca36ce93fd4a1bfc93bb74453cfbb9c6ca22320ffc9cb0a3fff046a5678c066e617cd3ac024dfead04b99877f448b78208938585c7563efe815ff0cc47da5fff521d9730ddc89f4aeceadd06f2ea6b9ae72c9407aa550a0155db3b4bc6aaa382a30552f699cb6a1af9972a8ccc483f98952dfbde3d712ea8673eacdbb77490d833fc90f0f02e7c073d2917db70831496a88defc10667dc4c1b7399191bdc7857eb090e79c332bf9f71bb5377178e6232800c93d22318dc5ab8d5dfa2f074a6c23acb61c89f2f078ec91e9817e11a4c8295c19634b5ca2df74"}}}}}, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x20, 0x0, 0x2a) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000838500000004000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x18) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x2, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1a, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="181000000000000000000000000000001800000001c6e842000000004e0e0000950000000000c574"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x27, 0xfffffffffffffffc, 0x0, 0x19, '\x00', 0x0, 0x38}, 0x94) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x74, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast}, 0x0, @random=0x5, 0x8801, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0xf7, 0x40, 0x3d, 0x4}}}}], @NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x74}, 0x1, 0x0, 0x0, 0x44}, 0x40) 1.175230786s ago: executing program 1 (id=4608): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0702000000000000000001000000040008802c000480050003000100000005000300000000020000000000000000050003000000000005000300020000000800010003000000080002000100"], 0x54}}, 0x880) syz_emit_ethernet(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a0b0400000000000000000200000088000480240001800b000100736f636b6574000014000280080002400000000308000140000000024c0001800b00010065787468647200003c000280080002400000007508000340000000590800064000000002080006400000000108000440000000b905000200070000000500020007000000140001800a00010071756f7461000000040002800900010073797a30000000000900020073797a32"], 0x17c}}, 0x40880) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r3, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) r4 = socket(0x22, 0x2, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xd2, 0xb}}, 0x1c}}, 0x0) accept4$inet(r4, 0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0x1a) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x2, &(0x7f0000000000)=0x18, 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)=@ethtool_cmd={0x45, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x87, 0x0, 0xfffffffd, 0x0, 0x1, 0xb8, 0x0, 0x80000048, [0x2, 0x89ff]}}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a", 0xa}], 0x1}, 0x0) recvmmsg(r9, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/129, 0x81}, {0x0}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x42, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000e2000008000400cdff000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 972.01631ms ago: executing program 3 (id=4609): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2, 0xffffffffffffffff, 0x500}, 0x57) syz_emit_ethernet(0x56, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0xa, 0xf989, "f16d73c0e798"}]}}}}}}}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x160, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x124, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x104, 0x1, [@m_simple={0xcc, 0x1e, 0x0, 0x0, {{0xb}, {0xa0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x68f6, 0x6, 0x2, 0x8, 0x9}}, @TCA_DEF_DATA={0x9, 0x3, '/-@@\x00'}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}, @TCA_DEF_DATA={0x1e, 0x3, 'cpuacct.usage_percpu_user\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x4a66, 0x4, 0x3, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r4 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x6}, 0x8) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r1, {0xfffd, 0x1}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840) close(0x3) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 970.699713ms ago: executing program 4 (id=4610): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x1, 0x8004) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002a00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b00)=ANY=[], 0x1f0, 0x80}], 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x30, 0x4040001}], 0x1, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) unshare(0x62040200) write$tun(0xffffffffffffffff, 0x0, 0x3e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 754.309871ms ago: executing program 3 (id=4611): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000) 718.971675ms ago: executing program 1 (id=4612): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100", 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x4, 0x0}}]}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100)={r5, 0x4, 0x0, 0x80000001}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001"], 0x98}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 585.79586ms ago: executing program 4 (id=4613): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x1, 0x8004) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002a00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b00)=ANY=[], 0x1f0, 0x80}], 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x30, 0x4040001}], 0x1, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) unshare(0x62040200) write$tun(0xffffffffffffffff, 0x0, 0x3e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 520.37189ms ago: executing program 0 (id=4614): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf2504"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) recvfrom(r0, 0x0, 0x0, 0x40002000, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000000)=0x8, 0x4) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@deltclass={0x78, 0x29, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x8, 0xb}, {0x2, 0xa}, {0xfff2, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x1}}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}, @TCA_RATE={0x6, 0x5, {0x5, 0xf}}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x4, 0x6, 0x3ff}}]}}]}, 0x78}}, 0x20040089) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001000)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0xc}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x4000880) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 372.318349ms ago: executing program 0 (id=4615): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r1, 0x2, 0x6, @local}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x1, 0x4, 0x5, 0x0, 0x0, {0x7, 0x0, 0x202}}, 0x14}, 0x1, 0x0, 0x0, 0x4008840}, 0x8100) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@generic={0x7, 0x7, 0x3, 0xb89, 0xb}]}, &(0x7f00000003c0)='GPL\x00', 0x2, 0x30, &(0x7f00000004c0)=""/48, 0x41100, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x1, 0xb, 0x4, 0xfffffff4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r5, r4, 0xffffffffffffffff, r5], 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000340)='cq_reschedule\x00', r8, 0x0, 0x90000000000}, 0x18) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x20000044) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x6, 0xa7}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r10}, 0x10) r11 = socket$caif_seqpacket(0x25, 0x5, 0x3) setsockopt$CAIFSO_LINK_SELECT(r11, 0x116, 0x7f, &(0x7f0000000040)=0xffffffff, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x583e}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 142.413496ms ago: executing program 0 (id=4616): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000021000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3, 0xffffffffffffffff, 0x500}, 0x57) syz_emit_ethernet(0x56, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0xa, 0xf989, "f16d73c0e798"}]}}}}}}}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x160, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x124, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x104, 0x1, [@m_simple={0xcc, 0x1e, 0x0, 0x0, {{0xb}, {0xa0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x68f6, 0x6, 0x2, 0x8, 0x9}}, @TCA_DEF_DATA={0x9, 0x3, '/-@@\x00'}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}, @TCA_DEF_DATA={0x1e, 0x3, 'cpuacct.usage_percpu_user\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x4a66, 0x4, 0x3, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r5 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x6}, 0x8) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r1, {0xfffd, 0x1}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840) close(0x3) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc0118000000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r8, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r8, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 40.088826ms ago: executing program 4 (id=4617): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000400)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440)=[@window={0x3, 0x4, 0x8}, @sack_perm, @window={0x3, 0x3, 0x4}, @sack_perm, @window={0x3, 0x678, 0x7ff}, @mss, @mss={0x2, 0x4}], 0x7) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000600)=r2, 0x4) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = getpid() syz_emit_ethernet(0x83, &(0x7f0000000500)=ANY=[@ANYRESDEC=r5], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000}, [@jmp={0x5, 0x1, 0xb, 0x1, 0x3, 0x0, 0x8}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1020, &(0x7f0000001200)=""/4128, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000003c0)=r5) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x100004, 0x620104, 0xb, 0x1}, 0x50) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r9, &(0x7f0000000080)={{0x3, @default, 0x1}, [@null, @default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bind$ax25(r9, &(0x7f0000000480)={{0x3, @null, 0x3}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000640), &(0x7f0000000680)=0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r8, 0x4}, 0x38) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mem_disconnect\x00', r11, 0x0, 0xffffffff}, 0x18) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0xffffffffffffff3c, &(0x7f0000000000)="ff", 0x0, 0x3, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x48) 0s ago: executing program 2 (id=4618): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800e50000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r10}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r7, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r5, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}}, 0x800) r11 = socket$inet_udplite(0x2, 0x2, 0x88) pwritev(r11, &(0x7f0000000180), 0x0, 0x8, 0x2) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=@newlink={0x4c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_MIIMON={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}}, 0x0) kernel console output (not intermixed with test programs): [T18277] lo speed is unknown, defaulting to 1000 [ 443.155452][T18277] lo speed is unknown, defaulting to 1000 [ 443.408042][T18275] dvmrp8: left allmulticast mode [ 443.488850][T18301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3546'. [ 443.739471][T18312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3548'. [ 443.806563][T18315] tipc: Enabled bearer , priority 0 [ 443.817155][T18315] syzkaller0: entered promiscuous mode [ 443.823190][T18315] syzkaller0: entered allmulticast mode [ 443.864522][T18315] tipc: Resetting bearer [ 443.881470][T18314] tipc: Resetting bearer [ 443.901046][T18314] tipc: Disabling bearer [ 443.911390][T18316] syzkaller0: entered allmulticast mode [ 443.921176][T18316] syzkaller0 (unregistering): left allmulticast mode [ 444.319452][T18331] ip6tnl3: entered promiscuous mode [ 444.424988][T18333] netlink: 'syz.0.3564': attribute type 13 has an invalid length. [ 444.448581][T18333] netlink: 'syz.0.3564': attribute type 17 has an invalid length. [ 444.505335][T18333] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 444.567007][T18333] wg1 speed is unknown, defaulting to 1000 [ 444.576237][T18340] netlink: 'syz.3.3554': attribute type 6 has an invalid length. [ 444.588176][T18333] lo speed is unknown, defaulting to 1000 [ 444.596332][T18333] lo speed is unknown, defaulting to 1000 [ 444.657997][T18336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.709356][T18350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3557'. [ 444.736510][T18353] netlink: 'syz.3.3558': attribute type 4 has an invalid length. [ 444.759033][T18353] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3558'. [ 445.097939][T18366] tipc: Enabled bearer , priority 0 [ 445.108241][T18366] syzkaller0: entered promiscuous mode [ 445.116122][T18366] syzkaller0: entered allmulticast mode [ 445.131586][T18366] tipc: Resetting bearer [ 445.140410][T18365] tipc: Resetting bearer [ 445.153722][T18365] tipc: Disabling bearer [ 445.545896][T18383] veth1_to_bond: entered allmulticast mode [ 445.556866][T18383] bond_slave_1: entered promiscuous mode [ 445.572662][T18383] bond_slave_1: left promiscuous mode [ 445.578464][T18383] veth1_to_bond: left allmulticast mode [ 445.810066][T18395] dvmrp8: entered allmulticast mode [ 445.959277][T18395] wg1 speed is unknown, defaulting to 1000 [ 445.999696][T18395] lo speed is unknown, defaulting to 1000 [ 446.030951][T18395] lo speed is unknown, defaulting to 1000 [ 446.143441][T18394] dvmrp8: left allmulticast mode [ 446.200342][T18405] netlink: 'syz.2.3573': attribute type 7 has an invalid length. [ 446.226173][T18406] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0 [ 446.357315][T18410] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3575'. [ 446.456226][T18413] tipc: Enabled bearer , priority 0 [ 446.534838][T18413] syzkaller0: entered promiscuous mode [ 446.542089][T18413] syzkaller0: entered allmulticast mode [ 446.608149][T18413] tipc: Resetting bearer [ 446.633600][T18411] tipc: Resetting bearer [ 446.653247][T18411] tipc: Disabling bearer [ 447.066027][T18428] raw_sendmsg: syz.0.3581 forgot to set AF_INET. Fix it! [ 447.207304][T18442] netlink: 'syz.0.3584': attribute type 4 has an invalid length. [ 447.267463][T18442] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3584'. [ 447.405321][T18450] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3587'. [ 447.420375][T18450] batadv1: entered promiscuous mode [ 447.435614][T18450] batadv1: entered allmulticast mode [ 447.487966][T18458] netlink: 'syz.3.3586': attribute type 13 has an invalid length. [ 447.500562][T18458] netlink: 'syz.3.3586': attribute type 17 has an invalid length. [ 447.786371][T18458] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 447.835930][ T5873] lo speed is unknown, defaulting to 1000 [ 447.843571][ T5873] syz2: Port: 1 Link ACTIVE [ 447.896158][T18469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.945567][T18473] wg1 speed is unknown, defaulting to 1000 [ 447.971684][T18473] lo speed is unknown, defaulting to 1000 [ 447.981099][T18461] wg1 speed is unknown, defaulting to 1000 [ 447.989014][T18473] lo speed is unknown, defaulting to 1000 [ 448.010241][T18461] lo speed is unknown, defaulting to 1000 [ 448.086602][T18461] lo speed is unknown, defaulting to 1000 [ 448.088156][T18465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.158767][T18458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.197705][T18480] macvlan2: entered allmulticast mode [ 448.206079][T18480] veth1_vlan: entered allmulticast mode [ 448.216287][T18480] batman_adv: batadv1: Adding interface: macvlan2 [ 448.223832][T18480] batman_adv: batadv1: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.252530][T18480] batman_adv: batadv1: Interface activated: macvlan2 [ 448.443559][T18487] netlink: 'syz.0.3593': attribute type 4 has an invalid length. [ 448.480497][T18483] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3593'. [ 448.576818][T18490] netlink: 'syz.1.3596': attribute type 4 has an invalid length. [ 448.586146][T18490] netlink: 'syz.1.3596': attribute type 4 has an invalid length. [ 448.690485][T18499] netlink: 'syz.2.3598': attribute type 4 has an invalid length. [ 448.706432][T18499] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3598'. [ 448.810180][T18503] wg1 speed is unknown, defaulting to 1000 [ 448.817103][T18503] lo speed is unknown, defaulting to 1000 [ 448.824069][T18503] lo speed is unknown, defaulting to 1000 [ 448.861740][T18505] erspan0: entered allmulticast mode [ 449.016919][T18505] dvmrp8: entered allmulticast mode [ 449.155063][T18505] wg1 speed is unknown, defaulting to 1000 [ 449.177252][T18505] lo speed is unknown, defaulting to 1000 [ 449.184100][T18514] netlink: 'syz.3.3601': attribute type 4 has an invalid length. [ 449.210488][T18514] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3601'. [ 449.214119][T18505] lo speed is unknown, defaulting to 1000 [ 449.219841][ T24] lo speed is unknown, defaulting to 1000 [ 449.242978][ T24] syz2: Port: 1 Link DOWN [ 449.292251][T18504] erspan0: left allmulticast mode [ 449.300913][T18504] dvmrp8: left allmulticast mode [ 450.164418][T18538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3606'. [ 450.493537][T18541] : entered promiscuous mode [ 450.517410][T18551] netlink: 'syz.3.3611': attribute type 13 has an invalid length. [ 450.598227][T18551] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 450.625209][ T10] lo speed is unknown, defaulting to 1000 [ 450.631079][ T10] syz2: Port: 1 Link ACTIVE [ 450.655344][T18554] wg1 speed is unknown, defaulting to 1000 [ 450.669228][T18554] lo speed is unknown, defaulting to 1000 [ 450.676368][T18554] lo speed is unknown, defaulting to 1000 [ 450.692970][T18551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3611'. [ 450.749720][T18551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.787706][T18551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.798979][T18557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3613'. [ 450.862381][T18567] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3614'. [ 451.021455][T18572] wg1 speed is unknown, defaulting to 1000 [ 451.029135][T18572] lo speed is unknown, defaulting to 1000 [ 451.036193][T18572] lo speed is unknown, defaulting to 1000 [ 451.385512][T18580] wg1 speed is unknown, defaulting to 1000 [ 451.418895][T18580] lo speed is unknown, defaulting to 1000 [ 451.426776][T18580] lo speed is unknown, defaulting to 1000 [ 451.475982][T18584] wg1 speed is unknown, defaulting to 1000 [ 451.579365][T18584] lo speed is unknown, defaulting to 1000 [ 451.599176][T18588] validate_nla: 2 callbacks suppressed [ 451.599198][T18588] netlink: 'syz.2.3618': attribute type 4 has an invalid length. [ 451.604084][T18584] lo speed is unknown, defaulting to 1000 [ 451.959648][T18602] netlink: 'syz.3.3624': attribute type 4 has an invalid length. [ 451.959794][T18592] wg1 speed is unknown, defaulting to 1000 [ 451.990445][ T6022] lo speed is unknown, defaulting to 1000 [ 451.997404][T18592] lo speed is unknown, defaulting to 1000 [ 451.999735][ T6022] syz2: Port: 1 Link DOWN [ 452.413252][T18592] lo speed is unknown, defaulting to 1000 [ 452.704415][T18625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3625'. [ 452.936554][T18628] netlink: 'syz.1.3626': attribute type 4 has an invalid length. [ 452.974492][T18628] netlink: 'syz.1.3626': attribute type 4 has an invalid length. [ 453.046458][T18628] wg1 speed is unknown, defaulting to 1000 [ 453.076846][T18640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3626'. [ 453.091480][T18628] lo speed is unknown, defaulting to 1000 [ 453.109989][T18628] lo speed is unknown, defaulting to 1000 [ 453.414541][T18646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3630'. [ 453.446381][T18648] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 453.538469][T18649] rdma_rxe: rxe_newlink: failed to add lo [ 453.547330][T18653] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 453.559040][T18653] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 453.569112][T18652] erspan0: entered allmulticast mode [ 453.583144][T18652] dvmrp8: entered allmulticast mode [ 453.607730][T18652] wg1 speed is unknown, defaulting to 1000 [ 453.615020][T18652] lo speed is unknown, defaulting to 1000 [ 453.621761][T18652] lo speed is unknown, defaulting to 1000 [ 453.731609][T18651] erspan0: left allmulticast mode [ 453.755906][T18651] dvmrp8: left allmulticast mode [ 453.941428][T18662] netlink: 'syz.4.3636': attribute type 4 has an invalid length. [ 454.060633][T18669] erspan0: entered allmulticast mode [ 454.086429][T18669] dvmrp8: entered allmulticast mode [ 454.160198][T18671] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3634'. [ 454.183882][T18669] wg1 speed is unknown, defaulting to 1000 [ 454.190770][T18669] lo speed is unknown, defaulting to 1000 [ 454.207464][T18669] lo speed is unknown, defaulting to 1000 [ 454.353583][T18668] erspan0: left allmulticast mode [ 454.358870][T18668] dvmrp8: left allmulticast mode [ 454.479760][T18684] netlink: 'syz.2.3640': attribute type 4 has an invalid length. [ 454.779450][T18694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3642'. [ 455.699050][T18723] syz_tun: entered allmulticast mode [ 455.769956][T18723] dvmrp8: entered allmulticast mode [ 455.911567][T18730] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.3650'. [ 455.942616][T18723] wg1 speed is unknown, defaulting to 1000 [ 455.949557][T18723] lo speed is unknown, defaulting to 1000 [ 456.006546][T18723] lo speed is unknown, defaulting to 1000 [ 456.062163][T18733] rdma_rxe: rxe_newlink: failed to add veth1_to_hsr [ 456.201335][T18722] syz_tun: left allmulticast mode [ 456.243391][T18722] dvmrp8: left allmulticast mode [ 456.284185][T18733] sctp: [Deprecated]: syz.3.3651 (pid 18733) Use of struct sctp_assoc_value in delayed_ack socket option. [ 456.284185][T18733] Use struct sctp_sack_info instead [ 456.321555][T18740] siw: device registration error -23 [ 456.404363][T18740] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3652'. [ 456.454037][T18740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3652'. [ 456.504126][T18740] tipc: Enabling of bearer rejected, already enabled [ 456.513497][T18740] veth0_to_bridge: entered promiscuous mode [ 456.519433][T18740] veth0_to_bridge: entered allmulticast mode [ 456.537132][T18727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3649'. [ 456.712673][T18753] netlink: 'syz.3.3654': attribute type 1 has an invalid length. [ 456.720883][T18753] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3654'. [ 456.758684][T18755] sctp: [Deprecated]: syz.1.3656 (pid 18755) Use of int in max_burst socket option deprecated. [ 456.758684][T18755] Use struct sctp_assoc_value instead [ 456.830799][T18755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3656'. [ 457.027534][T18760] netlink: 'syz.1.3657': attribute type 13 has an invalid length. [ 457.037343][T18760] netlink: 'syz.1.3657': attribute type 17 has an invalid length. [ 457.224226][T18760] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 457.369683][T18760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3657'. [ 457.414047][T18763] wg1 speed is unknown, defaulting to 1000 [ 457.427528][T18760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.441929][T18760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.498553][T18763] lo speed is unknown, defaulting to 1000 [ 457.498676][T18764] wg1 speed is unknown, defaulting to 1000 [ 457.528645][T18763] lo speed is unknown, defaulting to 1000 [ 457.543150][T18764] lo speed is unknown, defaulting to 1000 [ 457.614005][T18764] lo speed is unknown, defaulting to 1000 [ 457.694613][T18774] macvlan2: entered allmulticast mode [ 457.700116][T18774] veth1_vlan: entered allmulticast mode [ 457.744560][T18774] veth1_vlan: left allmulticast mode [ 457.933044][T18781] netlink: 788 bytes leftover after parsing attributes in process `syz.2.3661'. [ 457.951749][T18777] 8021q: adding VLAN 0 to HW filter on device bond18 [ 457.986875][T18777] bond0: (slave bond18): Enslaving as an active interface with an up link [ 458.189920][T18783] wg1 speed is unknown, defaulting to 1000 [ 458.212960][T18783] lo speed is unknown, defaulting to 1000 [ 458.219856][T18783] lo speed is unknown, defaulting to 1000 [ 458.678903][T18804] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 458.857673][T18808] netlink: 'syz.0.3666': attribute type 1 has an invalid length. [ 458.868353][T18808] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3666'. [ 458.906366][T18811] netlink: 'syz.4.3667': attribute type 3 has an invalid length. [ 458.909559][T18808] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3666'. [ 459.127898][T18816] pimreg: left allmulticast mode [ 459.235568][T18819] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 460.155912][T18845] 8021q: adding VLAN 0 to HW filter on device bond20 [ 460.164658][T18845] bond0: (slave bond20): Enslaving as an active interface with an up link [ 460.205644][T18852] vlan0: entered allmulticast mode [ 460.210958][T18852] bridge0: entered allmulticast mode [ 460.217317][T18852] bridge6: port 1(vlan0) entered blocking state [ 460.223961][T18852] bridge6: port 1(vlan0) entered disabled state [ 460.231764][T18852] vlan0: entered promiscuous mode [ 460.240260][T18852] bridge0: entered promiscuous mode [ 460.328900][T18852] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 460.399518][T18855] erspan0: entered allmulticast mode [ 460.421026][T18855] dvmrp8: entered allmulticast mode [ 460.460431][T18855] wg1 speed is unknown, defaulting to 1000 [ 460.505326][T18855] lo speed is unknown, defaulting to 1000 [ 460.545084][T18855] lo speed is unknown, defaulting to 1000 [ 460.675546][T18858] dvmrp8: entered allmulticast mode [ 460.785738][T18854] erspan0: left allmulticast mode [ 460.797167][T18854] dvmrp8: left allmulticast mode [ 460.976477][T18858] wg1 speed is unknown, defaulting to 1000 [ 460.994461][T18858] lo speed is unknown, defaulting to 1000 [ 461.001129][T18858] lo speed is unknown, defaulting to 1000 [ 461.064384][T18868] __nla_validate_parse: 1 callbacks suppressed [ 461.064407][T18868] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3677'. [ 461.228003][T18873] wg1 speed is unknown, defaulting to 1000 [ 461.273676][T18875] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3683'. [ 461.283899][T18857] dvmrp8: left allmulticast mode [ 461.364949][T18884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3682'. [ 461.458675][T18873] lo speed is unknown, defaulting to 1000 [ 461.484248][T18873] lo speed is unknown, defaulting to 1000 [ 461.560032][T18890] 8021q: adding VLAN 0 to HW filter on device bond19 [ 461.610132][T18894] Ã: (slave wlan1): Releasing backup interface [ 461.651404][T18894] team0: Port device vlan0 removed [ 461.678056][T18894] bond0: (slave bond17): Releasing active interface [ 461.705416][T18894] bond0: (slave bond17): the permanent HWaddr of slave - da:7d:f7:8a:7b:f6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 461.772154][T18894] bond0: (slave bond18): making interface the new active one [ 461.799000][T18894] bond0: (slave bond18): Releasing active interface [ 461.846296][T18895] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3686'. [ 462.360392][T18919] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004 [ 462.473268][T18919] nbd1: detected capacity change from 0 to 127 [ 462.487955][ T5857] block nbd1: Receive control failed (result -32) [ 462.758461][T18928] wg1 speed is unknown, defaulting to 1000 [ 462.779662][T18928] lo speed is unknown, defaulting to 1000 [ 462.804785][T18928] lo speed is unknown, defaulting to 1000 [ 462.860001][T18932] IPVS: Scheduler module ip_vs_sip not found [ 462.891355][T18936] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 463.091026][T18947] dvmrp8: entered allmulticast mode [ 463.174787][T18952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3699'. [ 463.188849][T18953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3700'. [ 463.201775][T18947] wg1 speed is unknown, defaulting to 1000 [ 463.220090][T18947] lo speed is unknown, defaulting to 1000 [ 463.244503][T18955] netlink: 'syz.1.3698': attribute type 23 has an invalid length. [ 463.264948][T18947] lo speed is unknown, defaulting to 1000 [ 463.343360][T18953] netlink: 452 bytes leftover after parsing attributes in process `syz.0.3700'. [ 463.486044][T18945] dvmrp8: left allmulticast mode [ 463.691853][T18963] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3701'. [ 464.419923][T18987] tipc: Enabling of bearer rejected, already enabled [ 464.528372][T18991] netlink: 'syz.3.3705': attribute type 1 has an invalid length. [ 464.568472][T18993] syz_tun: entered allmulticast mode [ 464.618822][T18991] 8021q: adding VLAN 0 to HW filter on device bond14 [ 464.634680][T18993] dvmrp8: entered allmulticast mode [ 464.666396][T18997] 8021q: adding VLAN 0 to HW filter on device bond14 [ 464.678056][T18997] bond14: (slave vxcan5): The slave device specified does not support setting the MAC address [ 464.692434][T18997] bond14: (slave vxcan5): Error -95 calling set_mac_address [ 464.777603][T18993] wg1 speed is unknown, defaulting to 1000 [ 464.786184][T18993] lo speed is unknown, defaulting to 1000 [ 464.793242][T18993] lo speed is unknown, defaulting to 1000 [ 464.917785][T18991] veth15: entered promiscuous mode [ 464.940069][T18991] bond14: (slave veth15): Enslaving as an active interface with a down link [ 465.014895][T18992] syz_tun: left allmulticast mode [ 465.021738][T18992] dvmrp8: left allmulticast mode [ 465.179757][T19015] syz_tun: entered allmulticast mode [ 465.205784][T19015] dvmrp8: entered allmulticast mode [ 465.240613][T19015] wg1 speed is unknown, defaulting to 1000 [ 465.249647][T19015] lo speed is unknown, defaulting to 1000 [ 465.256695][T19015] lo speed is unknown, defaulting to 1000 [ 465.286690][T19018] netlink: 'syz.4.3712': attribute type 23 has an invalid length. [ 465.537679][T19027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3714'. [ 465.616102][T19014] syz_tun: left allmulticast mode [ 465.621384][T19014] dvmrp8: left allmulticast mode [ 465.723686][T19030] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3715'. [ 465.847420][T19035] tipc: Enabled bearer , priority 0 [ 465.855843][T19035] syzkaller0: entered promiscuous mode [ 465.861456][T19035] syzkaller0: entered allmulticast mode [ 465.874989][T19035] tipc: Resetting bearer [ 465.925269][T19034] tipc: Resetting bearer [ 465.954467][T19034] tipc: Disabling bearer [ 466.331794][T19050] netlink: 'syz.0.3721': attribute type 4 has an invalid length. [ 466.677863][T19042] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 466.702602][T19063] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3721'. [ 467.030940][T19061] batadv_slave_1: entered promiscuous mode [ 467.071651][T19046] wg1 speed is unknown, defaulting to 1000 [ 467.078340][T19076] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3723'. [ 467.082394][T19077] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3725'. [ 467.099615][T19046] lo speed is unknown, defaulting to 1000 [ 467.108860][T19046] lo speed is unknown, defaulting to 1000 [ 467.124986][T19061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3723'. [ 467.206221][T19084] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3727'. [ 467.260168][T19084] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3727'. [ 467.278120][T19081] wg1 speed is unknown, defaulting to 1000 [ 467.281664][T19084] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3727'. [ 467.301485][T19081] lo speed is unknown, defaulting to 1000 [ 467.318011][T19081] lo speed is unknown, defaulting to 1000 [ 467.339412][T19086] netlink: 'syz.1.3726': attribute type 1 has an invalid length. [ 467.350730][T19086] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3726'. [ 467.362953][T19086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3726'. [ 467.380146][T19060] batadv_slave_1: left promiscuous mode [ 467.536421][T19095] tipc: Enabled bearer , priority 0 [ 467.560671][T19095] syzkaller0: entered promiscuous mode [ 467.578234][T19095] syzkaller0: entered allmulticast mode [ 467.594471][T19100] tipc: Enabled bearer , priority 0 [ 467.626207][T19095] tipc: Resetting bearer [ 467.659463][T19100] syzkaller0: entered promiscuous mode [ 467.666547][T19100] syzkaller0: entered allmulticast mode [ 467.678550][T19094] tipc: Resetting bearer [ 467.698957][T19094] tipc: Disabling bearer [ 467.720067][T19100] tipc: Resetting bearer [ 467.728562][T19099] tipc: Resetting bearer [ 467.876726][T19099] tipc: Disabling bearer [ 467.947766][T19118] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3734'. [ 467.976864][T19108] wg1 speed is unknown, defaulting to 1000 [ 467.986358][T19108] lo speed is unknown, defaulting to 1000 [ 467.993350][T19108] lo speed is unknown, defaulting to 1000 [ 468.184434][T19124] wg1 speed is unknown, defaulting to 1000 [ 468.205765][T19124] lo speed is unknown, defaulting to 1000 [ 468.232959][T19124] lo speed is unknown, defaulting to 1000 [ 468.615905][T19131] veth0_to_bridge: left promiscuous mode [ 468.630441][T19131] veth0_to_bridge: left allmulticast mode [ 468.672694][T19131] tipc: Resetting bearer [ 468.689806][T19131] syzkaller0: left promiscuous mode [ 468.700358][T19131] syzkaller0: left allmulticast mode [ 468.711523][T19131] geneve3: left promiscuous mode [ 468.716824][T19131] geneve3: left allmulticast mode [ 468.725640][T19131] batman_adv: batadv1: Interface deactivated: macvlan2 [ 468.733561][T19131] veth1_vlan: left allmulticast mode [ 468.749399][T19131] macvlan2: left allmulticast mode [ 469.156937][T19160] tipc: Enabling of bearer rejected, already enabled [ 469.224784][T19159] tipc: Enabled bearer , priority 0 [ 469.233510][T19159] syzkaller0: entered promiscuous mode [ 469.239020][T19159] syzkaller0: entered allmulticast mode [ 469.303706][T19159] tipc: Resetting bearer [ 469.329073][T19162] tipc: Enabled bearer , priority 0 [ 469.336875][T19162] syzkaller0: entered promiscuous mode [ 469.349803][T19162] syzkaller0: entered allmulticast mode [ 469.357507][T19157] tipc: Resetting bearer [ 469.369055][T19157] tipc: Disabling bearer [ 469.383481][T19162] tipc: Resetting bearer [ 469.405020][T19161] tipc: Resetting bearer [ 469.436271][T19161] tipc: Disabling bearer [ 469.446236][T19164] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 469.534868][T19169] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 469.588603][T19171] tipc: Enabling of bearer rejected, already enabled [ 469.839563][T19179] wg1 speed is unknown, defaulting to 1000 [ 469.849268][T19179] lo speed is unknown, defaulting to 1000 [ 469.914257][T19179] lo speed is unknown, defaulting to 1000 [ 469.925005][T19183] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 469.933233][T19183] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 469.948644][T19184] tipc: Enabled bearer , priority 0 [ 469.956570][T19184] veth0_to_bridge: entered promiscuous mode [ 469.967570][T19184] veth0_to_bridge: entered allmulticast mode [ 470.049638][T19177] tipc: Disabling bearer [ 470.237316][T19195] netlink: 'syz.4.3755': attribute type 13 has an invalid length. [ 470.261154][T19195] netlink: 'syz.4.3755': attribute type 17 has an invalid length. [ 470.400319][T19195] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.430855][T19195] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 470.481222][T10008] lo speed is unknown, defaulting to 1000 [ 470.488067][T10008] syz1: Port: 1 Link ACTIVE [ 470.574144][T19197] wg1 speed is unknown, defaulting to 1000 [ 470.601078][T19197] lo speed is unknown, defaulting to 1000 [ 470.617465][T19197] lo speed is unknown, defaulting to 1000 [ 470.766132][T19202] syz_tun: entered allmulticast mode [ 470.820806][T19202] dvmrp8: entered allmulticast mode [ 470.928875][T19202] wg1 speed is unknown, defaulting to 1000 [ 470.966138][T19202] lo speed is unknown, defaulting to 1000 [ 470.992326][T19202] lo speed is unknown, defaulting to 1000 [ 471.135165][T19206] tipc: Enabled bearer , priority 0 [ 471.265714][T19206] syzkaller0: entered promiscuous mode [ 471.276527][T19206] syzkaller0: entered allmulticast mode [ 471.295446][T19221] tipc: Resetting bearer [ 471.334419][T19205] tipc: Resetting bearer [ 471.377369][T19205] tipc: Disabling bearer [ 471.980937][T19245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.260474][T19249] __nla_validate_parse: 4 callbacks suppressed [ 472.260494][T19249] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3766'. [ 472.466354][T19266] tipc: Enabled bearer , priority 0 [ 472.478266][T19266] syzkaller0: entered promiscuous mode [ 472.486563][T19266] syzkaller0: entered allmulticast mode [ 472.502465][T19266] tipc: Resetting bearer [ 472.530361][T19272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3771'. [ 472.558509][T19265] tipc: Resetting bearer [ 472.591710][T19265] tipc: Disabling bearer [ 472.867445][T19282] tipc: Enabled bearer , priority 0 [ 472.876161][T19282] syzkaller0: entered promiscuous mode [ 472.887913][T19282] syzkaller0: entered allmulticast mode [ 472.923952][T19282] tipc: Resetting bearer [ 472.941517][T19281] tipc: Resetting bearer [ 472.967238][T19281] tipc: Disabling bearer [ 473.091096][T19292] wg1 speed is unknown, defaulting to 1000 [ 473.098439][T19292] lo speed is unknown, defaulting to 1000 [ 473.106234][T19292] lo speed is unknown, defaulting to 1000 [ 473.158336][T19295] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3777'. [ 473.547944][T19306] netlink: 20824 bytes leftover after parsing attributes in process `syz.1.3778'. [ 473.582810][T19306] netlink: 'syz.1.3778': attribute type 10 has an invalid length. [ 473.659973][T19308] !: renamed from dummy0 (while UP) [ 473.878537][T19310] wg1 speed is unknown, defaulting to 1000 [ 473.904982][T19310] lo speed is unknown, defaulting to 1000 [ 473.987240][T19310] lo speed is unknown, defaulting to 1000 [ 474.053438][T19323] netlink: 'syz.1.3780': attribute type 1 has an invalid length. [ 474.061374][T19323] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3780'. [ 474.231693][T19330] wg1 speed is unknown, defaulting to 1000 [ 474.259646][T19330] lo speed is unknown, defaulting to 1000 [ 474.295434][T19330] lo speed is unknown, defaulting to 1000 [ 474.361798][T19336] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3783'. [ 474.409206][T19339] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3783'. [ 474.700959][T19349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3785'. [ 474.808675][T19352] 8021q: adding VLAN 0 to HW filter on device bond20 [ 474.848109][T19352] bond0: (slave bond20): making interface the new active one [ 474.859425][T19352] bond0: (slave bond20): Enslaving as an active interface with an up link [ 475.023869][T19349] bridge7: port 1(veth7) entered blocking state [ 475.040533][T19349] bridge7: port 1(veth7) entered disabled state [ 475.065805][T19349] veth7: entered allmulticast mode [ 475.084046][T19349] veth7: entered promiscuous mode [ 475.113191][T19365] tipc: Enabling of bearer rejected, already enabled [ 475.125128][T19365] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 475.142157][T19365] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 475.160186][T19357] bridge7: port 2(veth0_to_bond) entered blocking state [ 475.180230][T19357] bridge7: port 2(veth0_to_bond) entered disabled state [ 475.202198][T19357] veth0_to_bond: entered allmulticast mode [ 475.240973][T19357] veth0_to_bond: entered promiscuous mode [ 475.276204][T19374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3789'. [ 475.305076][T19360] vlan1: entered allmulticast mode [ 475.320497][T19360] veth1: entered allmulticast mode [ 475.354324][T19360] bridge7: port 3(vlan1) entered blocking state [ 475.365428][T19360] bridge7: port 3(vlan1) entered disabled state [ 475.375329][T19360] vlan1: entered promiscuous mode [ 475.380459][T19360] veth1: entered promiscuous mode [ 475.489796][T19383] tipc: Enabling of bearer rejected, already enabled [ 475.570891][T19386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3793'. [ 475.585343][T19383] syzkaller0: entered promiscuous mode [ 475.595793][T19383] syzkaller0: entered allmulticast mode [ 475.624673][T19388] wg1 speed is unknown, defaulting to 1000 [ 475.634081][T19388] lo speed is unknown, defaulting to 1000 [ 475.641623][T19388] lo speed is unknown, defaulting to 1000 [ 475.646688][T19382] wg1 speed is unknown, defaulting to 1000 [ 475.850694][T19382] lo speed is unknown, defaulting to 1000 [ 475.867896][T19382] lo speed is unknown, defaulting to 1000 [ 476.450254][T19409] wg1 speed is unknown, defaulting to 1000 [ 476.457654][T19409] lo speed is unknown, defaulting to 1000 [ 476.467952][T19409] lo speed is unknown, defaulting to 1000 [ 476.780556][T19417] wg1 speed is unknown, defaulting to 1000 [ 476.804671][T19417] lo speed is unknown, defaulting to 1000 [ 476.847587][T19417] lo speed is unknown, defaulting to 1000 [ 476.862515][T19423] tipc: Enabled bearer , priority 0 [ 476.950645][T19423] syzkaller0: entered promiscuous mode [ 476.971192][T19423] syzkaller0: entered allmulticast mode [ 477.018492][T19427] wg1 speed is unknown, defaulting to 1000 [ 477.038816][T19423] tipc: Resetting bearer [ 477.098300][T19422] tipc: Resetting bearer [ 477.125628][T19422] tipc: Disabling bearer [ 477.189134][T19427] lo speed is unknown, defaulting to 1000 [ 477.227216][T19427] lo speed is unknown, defaulting to 1000 [ 477.276168][T19436] tipc: Enabled bearer , priority 0 [ 477.300224][T19436] syzkaller0: entered promiscuous mode [ 477.308873][T19436] syzkaller0: entered allmulticast mode [ 477.359952][T19436] tipc: Resetting bearer [ 477.392712][T19433] tipc: Resetting bearer [ 477.412890][T19433] tipc: Disabling bearer [ 477.797834][T19453] wg1 speed is unknown, defaulting to 1000 [ 477.805435][T19453] lo speed is unknown, defaulting to 1000 [ 477.812777][T19453] lo speed is unknown, defaulting to 1000 [ 478.298465][T19464] netlink: 'syz.2.3809': attribute type 6 has an invalid length. [ 478.348751][T19469] wg1 speed is unknown, defaulting to 1000 [ 478.356287][T19469] lo speed is unknown, defaulting to 1000 [ 478.364703][T19469] lo speed is unknown, defaulting to 1000 [ 478.773503][T19483] dvmrp8: entered allmulticast mode [ 478.821301][T19482] 8021q: adding VLAN 0 to HW filter on device bond21 [ 478.834078][T19482] bond0: (slave bond21): Enslaving as an active interface with an up link [ 478.898795][T19481] wg1 speed is unknown, defaulting to 1000 [ 478.910092][T19481] lo speed is unknown, defaulting to 1000 [ 478.920265][T19481] lo speed is unknown, defaulting to 1000 [ 479.226380][T19492] tipc: Enabled bearer , priority 0 [ 479.261737][T19492] syzkaller0: entered promiscuous mode [ 479.269882][T19492] syzkaller0: entered allmulticast mode [ 479.297357][T19492] tipc: Resetting bearer [ 479.313875][T19491] tipc: Resetting bearer [ 479.320382][T19498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 479.335910][T19491] tipc: Disabling bearer [ 479.345691][T19498] tipc: Failed to remove unknown binding: 66,1,1/1650092955:3191732750/3191732752 [ 479.356635][T19495] tipc: Enabling of bearer rejected, already enabled [ 479.366737][T19498] tipc: Failed to remove unknown binding: 66,1,1/1650092955:3191732750/3191732752 [ 479.377393][T19498] tipc: Failed to remove unknown binding: 66,1,1/1650092955:3191732750/3191732752 [ 479.479796][T19501] wg1 speed is unknown, defaulting to 1000 [ 479.487603][T19501] lo speed is unknown, defaulting to 1000 [ 479.498542][T19501] lo speed is unknown, defaulting to 1000 [ 479.554639][T19507] __nla_validate_parse: 1 callbacks suppressed [ 479.554658][T19507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3822'. [ 479.595380][T19498] netlink: 788 bytes leftover after parsing attributes in process `syz.4.3819'. [ 479.639367][T19505] netlink: 'syz.0.3821': attribute type 13 has an invalid length. [ 479.977162][T19528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3826'. [ 480.105401][T19530] wg1 speed is unknown, defaulting to 1000 [ 480.117676][T19530] lo speed is unknown, defaulting to 1000 [ 480.129566][T19530] lo speed is unknown, defaulting to 1000 [ 480.436065][T19535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3829'. [ 480.457173][T19535] tipc: Enabled bearer , priority 0 [ 480.495452][T19535] syzkaller0: entered promiscuous mode [ 480.525132][T19535] syzkaller0: entered allmulticast mode [ 480.547349][T19534] tipc: Resetting bearer [ 480.589830][T19537] netlink: 'syz.0.3830': attribute type 4 has an invalid length. [ 480.616266][T19534] tipc: Disabling bearer [ 480.642573][T19539] vlan0 (unregistering): left promiscuous mode [ 480.652424][T19539] bridge0: left promiscuous mode [ 480.657601][T19539] bridge6: port 1(vlan0) entered disabled state [ 480.727987][T19545] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3830'. [ 480.761295][T19546] tipc: Enabling of bearer rejected, already enabled [ 480.851525][T19548] wg1 speed is unknown, defaulting to 1000 [ 480.901245][T19553] vlan0: left promiscuous mode [ 480.908164][T19553] ip6gretap0: left promiscuous mode [ 480.919355][T19553] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 480.926427][T19560] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 480.934401][T19553] veth7: left promiscuous mode [ 480.934616][T19553] gretap2: left promiscuous mode [ 480.949848][T19548] lo speed is unknown, defaulting to 1000 [ 480.957166][T19548] lo speed is unknown, defaulting to 1000 [ 481.087617][T19550] 8021q: adding VLAN 0 to HW filter on device bond19 [ 481.095437][T19560] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3835'. [ 481.110508][T19550] bond0: (slave bond19): Enslaving as an active interface with a down link [ 481.311477][T19578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3838'. [ 481.339668][T19576] wg1 speed is unknown, defaulting to 1000 [ 481.357442][T19576] lo speed is unknown, defaulting to 1000 [ 481.371487][T19576] lo speed is unknown, defaulting to 1000 [ 481.827234][T19598] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3843'. [ 481.908590][T19592] veth0_to_bridge: left promiscuous mode [ 481.922098][T19592] veth0_to_bridge: left allmulticast mode [ 481.990542][T19592] veth17: left promiscuous mode [ 482.005741][ T10] lo speed is unknown, defaulting to 1000 [ 482.011713][ T10] syz1: Port: 1 Link DOWN [ 482.357174][T19609] tipc: Enabling of bearer rejected, already enabled [ 482.373955][T19611] tipc: Enabling of bearer rejected, already enabled [ 482.425691][T19613] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3845'. [ 482.604787][T19621] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 482.621373][ T5988] lo speed is unknown, defaulting to 1000 [ 482.636160][ T5988] syz2: Port: 1 Link ACTIVE [ 482.669087][T19619] 8021q: adding VLAN 0 to HW filter on device bond21 [ 482.680254][T19619] bond0: (slave bond21): Enslaving as an active interface with an up link [ 482.785307][T19627] netlink: 'syz.2.3852': attribute type 4 has an invalid length. [ 482.874100][T19631] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3852'. [ 482.885822][T19630] wg1 speed is unknown, defaulting to 1000 [ 482.896416][T19630] lo speed is unknown, defaulting to 1000 [ 482.904118][T19630] lo speed is unknown, defaulting to 1000 [ 482.955401][T19634] wg1 speed is unknown, defaulting to 1000 [ 482.962868][T19634] lo speed is unknown, defaulting to 1000 [ 482.969663][T19634] lo speed is unknown, defaulting to 1000 [ 483.244707][T19648] veth1_to_bond: entered allmulticast mode [ 483.266376][T19648] bond_slave_1: entered promiscuous mode [ 483.286598][T19646] wg1 speed is unknown, defaulting to 1000 [ 483.294637][T19648] bond_slave_1: left promiscuous mode [ 483.303384][T19648] veth1_to_bond: left allmulticast mode [ 483.316013][T19646] lo speed is unknown, defaulting to 1000 [ 483.334224][T19646] lo speed is unknown, defaulting to 1000 [ 483.606161][T19651] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 484.165138][T19665] 8021q: adding VLAN 0 to HW filter on device bond22 [ 484.174298][T19665] bond0: (slave bond22): Enslaving as an active interface with an up link [ 484.781495][T19688] __nla_validate_parse: 2 callbacks suppressed [ 484.781514][T19688] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3868'. [ 484.939647][T19691] netlink: 'syz.4.3869': attribute type 13 has an invalid length. [ 484.948723][T19691] netlink: 'syz.4.3869': attribute type 17 has an invalid length. [ 485.015485][T19691] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.048691][T19691] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 485.075623][T19600] lo speed is unknown, defaulting to 1000 [ 485.103269][T19600] syz1: Port: 1 Link ACTIVE [ 485.119429][T19692] wg1 speed is unknown, defaulting to 1000 [ 485.161775][T19692] lo speed is unknown, defaulting to 1000 [ 485.233718][T19692] lo speed is unknown, defaulting to 1000 [ 485.236795][T19691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3869'. [ 485.268885][T19691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.308027][T19696] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 485.347131][T19702] wg1 speed is unknown, defaulting to 1000 [ 485.355556][T19702] lo speed is unknown, defaulting to 1000 [ 485.366655][T19702] lo speed is unknown, defaulting to 1000 [ 485.417896][T19710] tipc: Enabling of bearer rejected, already enabled [ 485.532606][T19706] netlink: 'syz.0.3872': attribute type 13 has an invalid length. [ 485.605800][T19713] tipc: Enabled bearer , priority 0 [ 485.614776][T19713] syzkaller0: entered promiscuous mode [ 485.620257][T19713] syzkaller0: entered allmulticast mode [ 485.641851][T19713] tipc: Resetting bearer [ 485.651805][T19712] tipc: Resetting bearer [ 485.666355][T19712] tipc: Disabling bearer [ 485.805189][T19720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3876'. [ 485.999936][T19725] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 486.043802][T19727] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3879'. [ 486.191364][T19730] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 486.271533][T19736] tipc: Enabling of bearer rejected, already enabled [ 486.373661][T19732] netlink: 'syz.2.3881': attribute type 13 has an invalid length. [ 486.645058][T19745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3883'. [ 486.741389][T19748] netlink: 'syz.3.3884': attribute type 2 has an invalid length. [ 486.918866][T19753] tipc: Enabled bearer , priority 0 [ 486.931235][T19753] syzkaller0: entered promiscuous mode [ 486.945116][T19753] syzkaller0: entered allmulticast mode [ 486.955371][T19753] tipc: Resetting bearer [ 486.970428][T19751] tipc: Resetting bearer [ 486.985802][T19751] tipc: Disabling bearer [ 487.084187][T19756] 8021q: adding VLAN 0 to HW filter on device bond20 [ 487.126686][T19756] bond0: (slave bond20): Enslaving as an active interface with a down link [ 487.215343][T19763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3888'. [ 487.290523][T19767] tipc: Enabled bearer , priority 0 [ 487.317043][T19767] syzkaller0: entered promiscuous mode [ 487.341682][T19767] syzkaller0: entered allmulticast mode [ 487.351495][T19771] netlink: 'syz.1.3891': attribute type 4 has an invalid length. [ 487.380045][T19767] tipc: Resetting bearer [ 487.457000][T19766] tipc: Resetting bearer [ 487.479081][T19766] tipc: Disabling bearer [ 487.490008][T19772] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3891'. [ 487.536389][T19774] netlink: 'syz.2.3892': attribute type 4 has an invalid length. [ 487.604746][T19775] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3892'. [ 487.743218][T19786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3895'. [ 488.017061][T19793] veth1_to_bond: entered allmulticast mode [ 488.026159][T19793] bond_slave_1: entered promiscuous mode [ 488.033510][T19793] bond_slave_1: left promiscuous mode [ 488.039226][T19793] veth1_to_bond: left allmulticast mode [ 488.090282][T19795] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3898'. [ 488.107516][T19797] dvmrp8: entered allmulticast mode [ 488.144587][T19797] wg1 speed is unknown, defaulting to 1000 [ 488.151733][T19797] lo speed is unknown, defaulting to 1000 [ 488.158607][T19797] lo speed is unknown, defaulting to 1000 [ 488.233662][T19796] dvmrp8: left allmulticast mode [ 488.381599][T19805] 8021q: adding VLAN 0 to HW filter on device bond22 [ 488.391565][T19805] bond0: (slave bond22): Enslaving as an active interface with an up link [ 488.577886][T19815] netlink: 'syz.0.3904': attribute type 4 has an invalid length. [ 488.726849][T19825] wg1 speed is unknown, defaulting to 1000 [ 488.734442][T19825] lo speed is unknown, defaulting to 1000 [ 488.741237][T19825] lo speed is unknown, defaulting to 1000 [ 489.620116][T19843] netlink: 'syz.2.3910': attribute type 4 has an invalid length. [ 489.655825][T19847] veth1_to_bond: entered allmulticast mode [ 489.668538][T19847] bond_slave_1: entered promiscuous mode [ 489.714941][T19847] bond_slave_1: left promiscuous mode [ 489.720687][T19847] veth1_to_bond: left allmulticast mode [ 489.849707][T19856] tipc: Enabling of bearer rejected, already enabled [ 490.221519][T19867] erspan0: entered allmulticast mode [ 490.236874][T19867] dvmrp8: entered allmulticast mode [ 490.250553][T19869] netlink: 'syz.3.3917': attribute type 4 has an invalid length. [ 490.267277][T19867] wg1 speed is unknown, defaulting to 1000 [ 490.275568][T19867] lo speed is unknown, defaulting to 1000 [ 490.285717][T19600] lo speed is unknown, defaulting to 1000 [ 490.285729][T19867] lo speed is unknown, defaulting to 1000 [ 490.302320][T19600] syz2: Port: 1 Link DOWN [ 490.336891][T19866] erspan0: left allmulticast mode [ 490.342559][T19866] dvmrp8: left allmulticast mode [ 490.370829][T19869] __nla_validate_parse: 4 callbacks suppressed [ 490.370846][T19869] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3917'. [ 490.525943][T19877] netlink: 'syz.2.3919': attribute type 13 has an invalid length. [ 490.543809][T19877] netlink: 'syz.2.3919': attribute type 17 has an invalid length. [ 490.665590][T19877] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.675760][T19877] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 490.743935][T19880] wg1 speed is unknown, defaulting to 1000 [ 490.758787][T19888] netlink: 'syz.0.3920': attribute type 13 has an invalid length. [ 490.777199][T19880] lo speed is unknown, defaulting to 1000 [ 490.785841][T19880] lo speed is unknown, defaulting to 1000 [ 490.937975][T19893] netlink: 'syz.1.3921': attribute type 13 has an invalid length. [ 491.462872][T19914] tipc: Enabling of bearer rejected, already enabled [ 491.850122][T19926] netlink: 'syz.3.3930': attribute type 4 has an invalid length. [ 491.947550][T19927] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3930'. [ 492.035015][T19929] tipc: Enabling of bearer rejected, already enabled [ 492.425115][T19938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3934'. [ 492.691449][T19947] tipc: Enabled bearer , priority 0 [ 492.705251][T19947] syzkaller0: entered promiscuous mode [ 492.710818][T19947] syzkaller0: entered allmulticast mode [ 492.719405][T19946] wg1 speed is unknown, defaulting to 1000 [ 492.727216][T19947] tipc: Resetting bearer [ 492.744040][T19945] tipc: Resetting bearer [ 492.751363][T19945] tipc: Disabling bearer [ 492.761521][T19946] lo speed is unknown, defaulting to 1000 [ 492.769784][T19946] lo speed is unknown, defaulting to 1000 [ 492.855316][T19952] veth1_to_bond: entered allmulticast mode [ 492.862103][T19952] bond_slave_1: entered promiscuous mode [ 492.868904][T19952] bond_slave_1: left promiscuous mode [ 492.877219][T19952] veth1_to_bond: left allmulticast mode [ 492.892464][T19955] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 493.001331][T19957] veth1_to_bond: entered allmulticast mode [ 493.023632][T19957] bond_slave_1: entered promiscuous mode [ 493.046762][T19957] bond_slave_1: left promiscuous mode [ 493.056296][T19957] veth1_to_bond: left allmulticast mode [ 493.232808][T19969] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 493.953574][T19985] syz_tun: entered allmulticast mode [ 493.972689][T19985] dvmrp8: entered allmulticast mode [ 493.978152][T19988] tipc: Enabling of bearer rejected, already enabled [ 494.002731][T19989] tipc: Enabled bearer , priority 0 [ 494.017664][T19985] wg1 speed is unknown, defaulting to 1000 [ 494.025574][T19989] syzkaller0: entered promiscuous mode [ 494.031087][T19989] syzkaller0: entered allmulticast mode [ 494.055015][T19985] lo speed is unknown, defaulting to 1000 [ 494.069023][T19989] tipc: Resetting bearer [ 494.076793][T19986] tipc: Resetting bearer [ 494.107074][T19986] tipc: Disabling bearer [ 494.129676][T19985] lo speed is unknown, defaulting to 1000 [ 494.386372][T19984] syz_tun: left allmulticast mode [ 494.391652][T19984] dvmrp8: left allmulticast mode [ 494.484322][T20000] veth1_to_bond: entered allmulticast mode [ 494.496626][T19998] dvmrp8: entered allmulticast mode [ 494.525000][T20000] bond_slave_1: entered promiscuous mode [ 494.581529][T20000] bond_slave_1: left promiscuous mode [ 494.587398][T20000] veth1_to_bond: left allmulticast mode [ 494.618843][T20007] netlink: 'syz.4.3955': attribute type 4 has an invalid length. [ 494.674877][ T43] lo speed is unknown, defaulting to 1000 [ 494.675407][T20001] wg1 speed is unknown, defaulting to 1000 [ 494.690721][ T43] syz1: Port: 1 Link DOWN [ 494.732370][T20003] 8021q: adding VLAN 0 to HW filter on device bond23 [ 494.739625][T20011] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3955'. [ 494.754622][T20003] bond0: (slave bond23): Enslaving as an active interface with an up link [ 494.765765][T20009] tipc: Enabling of bearer rejected, already enabled [ 494.808141][T20001] lo speed is unknown, defaulting to 1000 [ 494.823046][T20001] lo speed is unknown, defaulting to 1000 [ 494.890705][T20016] tipc: Enabling of bearer rejected, already enabled [ 494.924854][T20016] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 494.975399][T20014] dvmrp8: entered allmulticast mode [ 495.017114][T20019] erspan0: entered allmulticast mode [ 495.061644][T20014] wg1 speed is unknown, defaulting to 1000 [ 495.089108][T20014] lo speed is unknown, defaulting to 1000 [ 495.101628][T20014] lo speed is unknown, defaulting to 1000 [ 495.125533][T19997] dvmrp8: left allmulticast mode [ 495.177868][T20028] tipc: Enabled bearer , priority 0 [ 495.188843][T20028] syzkaller0: entered promiscuous mode [ 495.195937][T20028] syzkaller0: entered allmulticast mode [ 495.259979][T20028] tipc: Resetting bearer [ 495.273915][T20013] erspan0: left allmulticast mode [ 495.279207][T20013] dvmrp8: left allmulticast mode [ 495.359811][T20027] tipc: Resetting bearer [ 495.397323][T20027] tipc: Disabling bearer [ 495.500251][T20039] erspan0: entered allmulticast mode [ 495.521382][T20039] dvmrp8: entered allmulticast mode [ 495.545615][T20039] wg1 speed is unknown, defaulting to 1000 [ 495.554407][T20039] lo speed is unknown, defaulting to 1000 [ 495.570862][T20039] lo speed is unknown, defaulting to 1000 [ 495.778061][T20038] erspan0: left allmulticast mode [ 495.783691][T20038] dvmrp8: left allmulticast mode [ 495.811355][T20049] wg1 speed is unknown, defaulting to 1000 [ 495.820017][T20049] lo speed is unknown, defaulting to 1000 [ 495.839038][T20049] lo speed is unknown, defaulting to 1000 [ 495.991402][T20054] veth1_to_bond: entered allmulticast mode [ 496.041671][T20054] bond_slave_1: entered promiscuous mode [ 496.112156][T20054] bond_slave_1: left promiscuous mode [ 496.117852][T20054] veth1_to_bond: left allmulticast mode [ 496.152085][T20056] veth1_to_bond: entered allmulticast mode [ 496.173200][T20056] bond_slave_1: entered promiscuous mode [ 496.194841][T20056] bond_slave_1: left promiscuous mode [ 496.208392][T20056] veth1_to_bond: left allmulticast mode [ 496.235481][T20062] tipc: Enabled bearer , priority 0 [ 496.254323][T20062] syzkaller0: entered promiscuous mode [ 496.259934][T20062] syzkaller0: entered allmulticast mode [ 496.328912][T20062] tipc: Resetting bearer [ 496.355380][T20071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3973'. [ 496.379085][T20061] tipc: Resetting bearer [ 496.413015][T20061] tipc: Disabling bearer [ 496.578045][T20079] tipc: Enabling of bearer rejected, already enabled [ 496.597864][T20080] syz_tun: entered allmulticast mode [ 496.617035][T20082] dvmrp8: entered allmulticast mode [ 496.678008][T20077] wg1 speed is unknown, defaulting to 1000 [ 496.685244][T20077] lo speed is unknown, defaulting to 1000 [ 496.693345][T20077] lo speed is unknown, defaulting to 1000 [ 496.817445][T20076] syz_tun: left allmulticast mode [ 496.828746][T20076] dvmrp8: left allmulticast mode [ 496.941458][T20093] wg1 speed is unknown, defaulting to 1000 [ 496.949111][T20093] lo speed is unknown, defaulting to 1000 [ 496.955700][T20093] lo speed is unknown, defaulting to 1000 [ 497.174942][T20105] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3980'. [ 497.851192][T20119] 8021q: adding VLAN 0 to HW filter on device bond24 [ 497.864177][T20119] bond0: (slave bond24): Enslaving as an active interface with an up link [ 497.908278][T20124] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3985'. [ 497.981067][T20129] tipc: Enabled bearer , priority 0 [ 497.989623][T20126] tipc: Enabling of bearer rejected, already enabled [ 497.998454][T20129] syzkaller0: entered promiscuous mode [ 498.006296][T20129] syzkaller0: entered allmulticast mode [ 498.043699][T20127] tipc: Resetting bearer [ 498.073599][T20127] tipc: Disabling bearer [ 498.135002][T20134] wg1 speed is unknown, defaulting to 1000 [ 498.159221][T20134] lo speed is unknown, defaulting to 1000 [ 498.161765][T20137] tipc: Enabled bearer , priority 0 [ 498.187513][T20134] lo speed is unknown, defaulting to 1000 [ 498.190388][T20137] syzkaller0: entered promiscuous mode [ 498.207673][T20137] syzkaller0: entered allmulticast mode [ 498.216858][T20132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3988'. [ 498.277475][T20137] tipc: Resetting bearer [ 498.289933][T20135] tipc: Resetting bearer [ 498.316651][T20135] tipc: Disabling bearer [ 498.474894][T20148] veth1_to_bond: entered allmulticast mode [ 498.501863][T20148] bond_slave_1: entered promiscuous mode [ 498.533798][T20153] netlink: 'syz.1.3995': attribute type 4 has an invalid length. [ 498.544973][T20147] bond_slave_1: left promiscuous mode [ 498.555091][T20147] veth1_to_bond: left allmulticast mode [ 498.630745][T20158] tipc: Enabling of bearer rejected, already enabled [ 498.646296][T20159] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3995'. [ 498.700887][T20155] wg1 speed is unknown, defaulting to 1000 [ 498.715483][T20155] lo speed is unknown, defaulting to 1000 [ 498.723800][T20155] lo speed is unknown, defaulting to 1000 [ 498.879679][T20168] tipc: Enabled bearer , priority 0 [ 498.889098][T20168] syzkaller0: entered promiscuous mode [ 498.894904][T20168] syzkaller0: entered allmulticast mode [ 498.915007][T20168] tipc: Resetting bearer [ 498.923180][T20167] tipc: Resetting bearer [ 498.937371][T20167] tipc: Disabling bearer [ 499.012723][T20172] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4000'. [ 499.131687][T20174] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4001'. [ 499.141260][T20174] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4001'. [ 499.154570][T20174] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4001'. [ 499.170299][T20174] veth0_to_bond: left allmulticast mode [ 499.178218][T20174] veth0_to_bond: left promiscuous mode [ 499.187116][T20174] bridge7: port 2(veth0_to_bond) entered disabled state [ 499.214349][T20174] bond11: (slave batadv1): Releasing active interface [ 499.233798][T20174] bond0: (slave bond12): Releasing active interface [ 499.240663][T20174] bond0: (slave bond12): the permanent HWaddr of slave - 46:6a:84:d6:e0:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 499.258059][T20174] bond0: (slave bond13): making interface the new active one [ 499.268857][T20174] bond0: (slave bond13): Releasing active interface [ 499.275723][T20174] bond0: (slave bond14): making interface the new active one [ 499.289118][T20181] netlink: 'syz.4.4002': attribute type 4 has an invalid length. [ 499.299091][T20174] bond0: (slave bond14): Releasing active interface [ 499.443733][T20174] veth7: left allmulticast mode [ 499.465389][T20174] veth7: left promiscuous mode [ 499.480196][T20174] bridge7: port 1(veth7) entered disabled state [ 499.501686][T20174] vlan1: left promiscuous mode [ 499.511424][T20174] veth1: left promiscuous mode [ 499.522755][T20191] netlink: 'syz.3.4003': attribute type 4 has an invalid length. [ 499.528885][T20174] bridge7: port 3(vlan1) entered disabled state [ 499.564311][T20193] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4002'. [ 499.616887][T20178] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 499.701609][T20198] tipc: Enabling of bearer rejected, already enabled [ 499.863225][T20205] netlink: 'syz.2.4009': attribute type 4 has an invalid length. [ 499.965404][T20208] tipc: Enabled bearer , priority 0 [ 499.984014][T20208] syzkaller0: entered promiscuous mode [ 499.989538][T20208] syzkaller0: entered allmulticast mode [ 500.091584][T20208] tipc: Resetting bearer [ 500.115635][T20206] tipc: Resetting bearer [ 500.135239][T20206] tipc: Disabling bearer [ 500.241404][T20217] 8021q: adding VLAN 0 to HW filter on device bond25 [ 500.261685][T20217] bond0: (slave bond25): Enslaving as an active interface with an up link [ 500.291740][T20227] wg1 speed is unknown, defaulting to 1000 [ 500.385669][T20227] lo speed is unknown, defaulting to 1000 [ 500.515328][T20227] lo speed is unknown, defaulting to 1000 [ 500.594342][T20236] wg1 speed is unknown, defaulting to 1000 [ 500.663941][T20236] lo speed is unknown, defaulting to 1000 [ 500.670975][T20236] lo speed is unknown, defaulting to 1000 [ 500.960303][T20254] veth1_to_bond: entered allmulticast mode [ 500.986779][T20255] 8021q: adding VLAN 0 to HW filter on device bond26 [ 500.998372][T20255] bond0: (slave bond26): Enslaving as an active interface with an up link [ 501.007677][T20254] bond_slave_1: entered promiscuous mode [ 501.016406][T20254] bond_slave_1: left promiscuous mode [ 501.022293][T20254] veth1_to_bond: left allmulticast mode [ 501.133469][T20258] wg1 speed is unknown, defaulting to 1000 [ 501.140497][T20258] lo speed is unknown, defaulting to 1000 [ 501.151170][T20258] lo speed is unknown, defaulting to 1000 [ 501.265845][T20263] netlink: 'syz.4.4020': attribute type 4 has an invalid length. [ 501.378364][T20271] tipc: Enabling of bearer rejected, already enabled [ 501.455803][T20278] tipc: Enabling of bearer rejected, already enabled [ 501.578872][T20281] veth1_to_bond: entered allmulticast mode [ 501.595718][T20280] veth1_to_bond: left allmulticast mode [ 501.777160][T20283] wg1 speed is unknown, defaulting to 1000 [ 501.791555][T20283] lo speed is unknown, defaulting to 1000 [ 501.799880][T20283] lo speed is unknown, defaulting to 1000 [ 501.914571][T20291] __nla_validate_parse: 4 callbacks suppressed [ 501.914607][T20291] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4029'. [ 502.180977][T20294] 8021q: adding VLAN 0 to HW filter on device bond21 [ 502.327920][T20294] bond0: (slave bond21): Enslaving as an active interface with a down link [ 502.474877][T20299] veth1_to_bond: entered allmulticast mode [ 502.493211][T20309] bond_slave_1: entered promiscuous mode [ 502.517257][T20299] bond_slave_1: left promiscuous mode [ 502.526234][T20299] veth1_to_bond: left allmulticast mode [ 502.697334][T20315] tipc: Enabled bearer , priority 0 [ 502.705461][T20315] syzkaller0: entered promiscuous mode [ 502.715706][T20315] syzkaller0: entered allmulticast mode [ 502.738039][T20315] tipc: Resetting bearer [ 502.756508][T20317] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4037'. [ 502.767154][T20314] tipc: Resetting bearer [ 502.784517][T20314] tipc: Disabling bearer [ 502.852377][T20320] veth1_to_bond: entered allmulticast mode [ 502.867793][T20319] veth1_to_bond: left allmulticast mode [ 503.794598][T20351] dvmrp8: entered allmulticast mode [ 503.818349][T20351] wg1 speed is unknown, defaulting to 1000 [ 503.826311][T20351] lo speed is unknown, defaulting to 1000 [ 503.836252][T20351] lo speed is unknown, defaulting to 1000 [ 503.875144][T20354] veth1_to_bond: entered allmulticast mode [ 503.893900][T20354] bond_slave_1: entered promiscuous mode [ 503.908133][T20350] dvmrp8: left allmulticast mode [ 503.928880][T20354] bond_slave_1: left promiscuous mode [ 503.934956][T20354] veth1_to_bond: left allmulticast mode [ 504.066815][T20362] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4049'. [ 504.096743][T20364] netlink: 'syz.1.4050': attribute type 4 has an invalid length. [ 504.240953][T20372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4050'. [ 504.418776][T20379] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4053'. [ 504.466293][T20379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4053'. [ 504.482981][T20382] wg1 speed is unknown, defaulting to 1000 [ 504.495453][T20379] tipc: Enabled bearer , priority 0 [ 504.504817][T20382] lo speed is unknown, defaulting to 1000 [ 504.507248][T20379] veth0_to_bridge: entered promiscuous mode [ 504.524382][T20379] veth0_to_bridge: entered allmulticast mode [ 504.535257][T20382] lo speed is unknown, defaulting to 1000 [ 504.576915][T20375] tipc: Disabling bearer [ 504.739534][T20393] netlink: 'syz.3.4057': attribute type 4 has an invalid length. [ 504.926119][T20396] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4057'. [ 505.361882][T20410] tipc: Enabling of bearer rejected, already enabled [ 505.454652][T20405] wg1 speed is unknown, defaulting to 1000 [ 505.461444][T20405] lo speed is unknown, defaulting to 1000 [ 505.473252][T20405] lo speed is unknown, defaulting to 1000 [ 505.507176][T20413] tipc: Enabled bearer , priority 0 [ 505.516228][T20413] syzkaller0: entered promiscuous mode [ 505.516619][T20417] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4064'. [ 505.521742][T20413] syzkaller0: entered allmulticast mode [ 505.601198][T20411] tipc: Resetting bearer [ 505.630241][T20411] tipc: Disabling bearer [ 505.688261][T20420] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.4066'. [ 505.825585][T20424] 8021q: adding VLAN 0 to HW filter on device bond27 [ 505.858529][T20424] bond0: (slave bond27): Enslaving as an active interface with an up link [ 506.101041][T20437] wg1 speed is unknown, defaulting to 1000 [ 506.112311][T20437] lo speed is unknown, defaulting to 1000 [ 506.126749][T20437] lo speed is unknown, defaulting to 1000 [ 506.446243][T20443] tipc: Enabled bearer , priority 0 [ 506.462108][T20443] syzkaller0: entered promiscuous mode [ 506.486672][T20443] syzkaller0: entered allmulticast mode [ 506.631817][T20443] tipc: Resetting bearer [ 506.650465][T20441] tipc: Resetting bearer [ 506.745161][T20441] tipc: Disabling bearer [ 506.816624][T20452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4071'. [ 507.047398][T20455] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4073'. [ 507.094704][T20460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4074'. [ 507.284912][T20465] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 507.346735][T20456] 8021q: adding VLAN 0 to HW filter on device bond15 [ 507.369035][T20456] bond15: entered promiscuous mode [ 507.381146][T20456] bond15: entered allmulticast mode [ 507.393413][T20456] bond0: (slave bond15): Enslaving as an active interface with an up link [ 507.420180][T20471] erspan0: entered allmulticast mode [ 507.508354][T20471] dvmrp8: entered allmulticast mode [ 507.524445][T20462] wg1 speed is unknown, defaulting to 1000 [ 507.530401][T20475] tipc: Enabling of bearer rejected, already enabled [ 507.546325][T20471] wg1 speed is unknown, defaulting to 1000 [ 507.567595][T20462] lo speed is unknown, defaulting to 1000 [ 507.584545][T20462] lo speed is unknown, defaulting to 1000 [ 507.590887][T20471] lo speed is unknown, defaulting to 1000 [ 507.631807][T20471] lo speed is unknown, defaulting to 1000 [ 507.810183][T20478] tipc: Enabling of bearer rejected, failed to enable media [ 507.888676][T20486] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4080'. [ 507.970964][T20489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4079'. [ 507.999434][T20470] erspan0: left allmulticast mode [ 508.018956][T20470] dvmrp8: left allmulticast mode [ 508.359879][T20510] tipc: Enabled bearer , priority 0 [ 508.369775][T20510] syzkaller0: entered promiscuous mode [ 508.376596][T20510] syzkaller0: entered allmulticast mode [ 508.387706][T20513] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4082'. [ 508.397651][T20513] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4082'. [ 508.414028][T20510] tipc: Resetting bearer [ 508.434739][T20509] tipc: Resetting bearer [ 508.444214][T20509] tipc: Disabling bearer [ 508.657562][T20507] bond0: (slave bond13): Releasing backup interface [ 508.666169][T20507] bond0: (slave bond13): the permanent HWaddr of slave - 8e:9d:4e:89:60:a1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 508.713624][T20507] bond13: left promiscuous mode [ 508.730682][T20507] bond13: left allmulticast mode [ 508.774242][T20507] bond14: (slave veth15): Releasing active interface [ 508.845342][T20507] bond0: (slave bond15): Releasing backup interface [ 508.858744][T20526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4085'. [ 508.895918][T20507] bond15: left promiscuous mode [ 508.908919][T20507] bond15: left allmulticast mode [ 508.956051][T20518] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 508.973818][T20524] syz_tun: entered allmulticast mode [ 508.996508][T20538] wg1 speed is unknown, defaulting to 1000 [ 509.007283][T20538] lo speed is unknown, defaulting to 1000 [ 509.032339][T20538] lo speed is unknown, defaulting to 1000 [ 509.077053][T20540] wg1 speed is unknown, defaulting to 1000 [ 509.089532][T20540] lo speed is unknown, defaulting to 1000 [ 509.107397][T20540] lo speed is unknown, defaulting to 1000 [ 509.134409][T20519] syz_tun: left allmulticast mode [ 509.265551][T20551] tipc: Enabling of bearer rejected, already enabled [ 509.306853][T20555] wg1 speed is unknown, defaulting to 1000 [ 509.343516][T20555] lo speed is unknown, defaulting to 1000 [ 509.350357][T20555] lo speed is unknown, defaulting to 1000 [ 509.695778][T20568] tipc: Enabled bearer , priority 0 [ 509.704315][T20568] syzkaller0: entered promiscuous mode [ 509.709819][T20568] syzkaller0: entered allmulticast mode [ 509.726636][T20567] tipc: Resetting bearer [ 509.780127][T20567] tipc: Disabling bearer [ 509.799096][T20564] wg1 speed is unknown, defaulting to 1000 [ 509.806607][T20564] lo speed is unknown, defaulting to 1000 [ 509.813245][T20564] lo speed is unknown, defaulting to 1000 [ 509.998424][T20576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4094'. [ 510.310308][T20586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4097'. [ 510.340305][T20585] wg1 speed is unknown, defaulting to 1000 [ 510.354778][T20585] lo speed is unknown, defaulting to 1000 [ 510.375926][T20585] lo speed is unknown, defaulting to 1000 [ 510.478897][T20593] dvmrp8: entered allmulticast mode [ 510.485106][T20595] netlink: 'syz.1.4101': attribute type 4 has an invalid length. [ 510.519309][T20593] wg1 speed is unknown, defaulting to 1000 [ 510.526158][T20593] lo speed is unknown, defaulting to 1000 [ 510.546206][T20593] lo speed is unknown, defaulting to 1000 [ 510.626631][T20598] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4101'. [ 510.667582][T20591] dvmrp8: left allmulticast mode [ 510.974858][T20618] dvmrp8: entered allmulticast mode [ 511.010363][T20613] wg1 speed is unknown, defaulting to 1000 [ 511.029408][T20613] lo speed is unknown, defaulting to 1000 [ 511.038212][T20613] lo speed is unknown, defaulting to 1000 [ 511.139038][T20611] dvmrp8: left allmulticast mode [ 511.332398][T20628] tipc: Enabled bearer , priority 0 [ 511.339899][T20628] syzkaller0: entered promiscuous mode [ 511.369433][T20628] syzkaller0: entered allmulticast mode [ 511.414526][T20627] tipc: Resetting bearer [ 511.438021][T20627] tipc: Disabling bearer [ 511.457265][T20629] netlink: 'syz.4.4107': attribute type 4 has an invalid length. [ 511.685548][T20636] tipc: Enabling of bearer rejected, already enabled [ 511.729591][T20638] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 511.915922][T20644] netlink: 'syz.0.4114': attribute type 4 has an invalid length. [ 511.951035][T20641] wg1 speed is unknown, defaulting to 1000 [ 511.984561][T20641] lo speed is unknown, defaulting to 1000 [ 511.991207][T20641] lo speed is unknown, defaulting to 1000 [ 512.332594][T20662] wg1 speed is unknown, defaulting to 1000 [ 512.339424][T20662] lo speed is unknown, defaulting to 1000 [ 512.348117][T20662] lo speed is unknown, defaulting to 1000 [ 512.411821][T20666] tipc: Enabled bearer , priority 0 [ 512.515718][T20666] syzkaller0: entered promiscuous mode [ 512.526736][T20666] syzkaller0: entered allmulticast mode [ 512.718479][T20673] wg1 speed is unknown, defaulting to 1000 [ 512.729620][T20665] tipc: Resetting bearer [ 512.778568][T20665] tipc: Disabling bearer [ 512.819359][T20673] lo speed is unknown, defaulting to 1000 [ 512.844779][T20673] lo speed is unknown, defaulting to 1000 [ 512.908178][T20685] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 513.239462][T20694] netlink: 'syz.3.4123': attribute type 13 has an invalid length. [ 513.692810][T20707] syz_tun: entered allmulticast mode [ 513.736101][T20707] dvmrp8: entered allmulticast mode [ 513.789778][T20710] __nla_validate_parse: 3 callbacks suppressed [ 513.789801][T20710] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4126'. [ 513.897234][T20707] wg1 speed is unknown, defaulting to 1000 [ 513.917051][T20707] lo speed is unknown, defaulting to 1000 [ 513.973267][T20707] lo speed is unknown, defaulting to 1000 [ 514.067876][T20704] syz_tun: left allmulticast mode [ 514.069653][T20720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4128'. [ 514.076950][T20704] dvmrp8: left allmulticast mode [ 514.104159][T20718] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 514.115243][T20718] gretap2: left promiscuous mode [ 514.120728][T20718] macvtap1: left promiscuous mode [ 514.126423][T20718] bond11: left promiscuous mode [ 514.131540][T20718] batadv1: left promiscuous mode [ 514.154617][T20718] batadv1: left allmulticast mode [ 514.160438][T20718] ip6tnl3: left promiscuous mode [ 514.171738][T20718] vlan1: left allmulticast mode [ 514.205473][T20718] veth1: left allmulticast mode [ 514.409970][T20728] wg1 speed is unknown, defaulting to 1000 [ 514.418593][T20728] lo speed is unknown, defaulting to 1000 [ 514.443884][T20728] lo speed is unknown, defaulting to 1000 [ 514.582162][T20741] tipc: Enabling of bearer rejected, already enabled [ 514.588492][T20742] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 514.958324][T20748] wg1 speed is unknown, defaulting to 1000 [ 514.965455][T20748] lo speed is unknown, defaulting to 1000 [ 514.988416][T20748] lo speed is unknown, defaulting to 1000 [ 515.414135][T20762] syz_tun: entered allmulticast mode [ 515.431430][T20762] dvmrp8: entered allmulticast mode [ 515.475629][T20762] wg1 speed is unknown, defaulting to 1000 [ 515.483006][T20762] lo speed is unknown, defaulting to 1000 [ 515.489956][T20762] lo speed is unknown, defaulting to 1000 [ 515.556674][T20761] syz_tun: left allmulticast mode [ 515.562234][T20761] dvmrp8: left allmulticast mode [ 515.701714][T20771] wg1 speed is unknown, defaulting to 1000 [ 515.708963][T20771] lo speed is unknown, defaulting to 1000 [ 515.716476][T20771] lo speed is unknown, defaulting to 1000 [ 515.732590][T20772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4140'. [ 515.788136][T20769] bridge5: port 1(veth19) entered blocking state [ 515.797252][T20769] bridge5: port 1(veth19) entered disabled state [ 515.805357][T20769] veth19: entered allmulticast mode [ 515.812748][T20769] veth19: entered promiscuous mode [ 515.911651][T20769] bridge5: port 2(veth0_to_bond) entered blocking state [ 515.919288][T20769] bridge5: port 2(veth0_to_bond) entered disabled state [ 515.930395][T20769] veth0_to_bond: entered allmulticast mode [ 515.937676][T20769] veth0_to_bond: entered promiscuous mode [ 516.048091][T20772] vlan3: entered allmulticast mode [ 516.211847][T20772] veth1: entered allmulticast mode [ 516.228445][T20772] bridge5: port 3(vlan3) entered blocking state [ 516.245653][T20772] bridge5: port 3(vlan3) entered disabled state [ 516.275984][T20772] vlan3: entered promiscuous mode [ 516.281073][T20772] veth1: entered promiscuous mode [ 516.351745][T20784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4144'. [ 516.366339][T20779] 8021q: adding VLAN 0 to HW filter on device bond16 [ 516.374814][T20779] bond16: entered promiscuous mode [ 516.380128][T20779] bond16: entered allmulticast mode [ 516.387046][T20779] bond0: (slave bond16): Enslaving as an active interface with an up link [ 516.818408][T20807] wg1 speed is unknown, defaulting to 1000 [ 516.916884][T20810] 8021q: adding VLAN 0 to HW filter on device bond17 [ 516.982202][T20810] bond17: entered promiscuous mode [ 516.987691][T20810] bond17: entered allmulticast mode [ 516.994661][T20810] bond0: (slave bond17): Enslaving as an active interface with an up link [ 517.010304][T20807] lo speed is unknown, defaulting to 1000 [ 517.044810][T20823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4151'. [ 517.069419][T20807] lo speed is unknown, defaulting to 1000 [ 517.249970][T20825] wg1 speed is unknown, defaulting to 1000 [ 517.431697][T20835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4153'. [ 517.442489][T20825] lo speed is unknown, defaulting to 1000 [ 517.476331][T20825] lo speed is unknown, defaulting to 1000 [ 517.697299][T20846] netlink: 'syz.1.4156': attribute type 4 has an invalid length. [ 517.709037][T20849] wg1 speed is unknown, defaulting to 1000 [ 517.716430][T20849] lo speed is unknown, defaulting to 1000 [ 517.726473][T20849] lo speed is unknown, defaulting to 1000 [ 517.787543][T20846] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4156'. [ 517.918457][T20857] wg1 speed is unknown, defaulting to 1000 [ 517.934713][T20857] lo speed is unknown, defaulting to 1000 [ 517.941454][T20857] lo speed is unknown, defaulting to 1000 [ 518.057101][T20871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4161'. [ 518.129641][T20872] netlink: 'syz.4.4160': attribute type 13 has an invalid length. [ 518.220301][T20877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4162'. [ 519.320777][T20904] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4168'. [ 519.335955][T20904] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4168'. [ 519.345626][T20904] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4168'. [ 519.370086][T20904] veth0_to_bond: left allmulticast mode [ 519.379489][T20904] veth0_to_bond: left promiscuous mode [ 519.387303][T20904] bridge5: port 2(veth0_to_bond) entered disabled state [ 519.408552][T20904] bond0: (slave bond16): Releasing active interface [ 519.433160][T20904] bond0: (slave bond16): the permanent HWaddr of slave - e6:44:7f:29:d4:25 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 519.462563][T20904] bond0: (slave bond17): Releasing active interface [ 519.470862][T20904] bond18: (slave veth17): Releasing active interface [ 519.488690][T20903] netlink: 'syz.1.4169': attribute type 13 has an invalid length. [ 519.498214][T20904] bond0: (slave bond19): Releasing active interface [ 519.507385][T20904] bond0: (slave bond20): Releasing active interface [ 519.530035][T20904] bond0: (slave bond21): Releasing active interface [ 519.558665][T20904] veth19: left allmulticast mode [ 519.566207][T20904] veth19: left promiscuous mode [ 519.571393][T20904] bridge5: port 1(veth19) entered disabled state [ 519.581711][T20904] vlan3: left promiscuous mode [ 519.587270][T20904] veth1: left promiscuous mode [ 519.592925][T20904] bridge5: port 3(vlan3) entered disabled state [ 519.613712][T20912] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 519.630049][T20922] veth1_to_bond: entered allmulticast mode [ 519.649602][T20908] wg1 speed is unknown, defaulting to 1000 [ 519.656773][T20922] bond_slave_1: entered promiscuous mode [ 519.665005][T20908] lo speed is unknown, defaulting to 1000 [ 519.671699][T20922] bond_slave_1: left promiscuous mode [ 519.677441][T20922] veth1_to_bond: left allmulticast mode [ 519.684086][T20908] lo speed is unknown, defaulting to 1000 [ 519.759249][T20928] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4174'. [ 519.968173][T20938] 8021q: adding VLAN 0 to HW filter on device bond23 [ 519.977735][T20938] bond0: (slave bond23): Enslaving as an active interface with an up link [ 520.042951][T20930] netlink: 'syz.4.4175': attribute type 13 has an invalid length. [ 520.134834][T20945] wg1 speed is unknown, defaulting to 1000 [ 520.141701][T20945] lo speed is unknown, defaulting to 1000 [ 520.149816][T20945] lo speed is unknown, defaulting to 1000 [ 520.498306][T20960] 8021q: adding VLAN 0 to HW filter on device bond15 [ 520.607498][T20960] bond0: (slave bond15): making interface the new active one [ 520.647732][T20960] bond0: (slave bond15): Enslaving as an active interface with an up link [ 520.799291][T20965] dvmrp8: entered allmulticast mode [ 520.860837][T20965] wg1 speed is unknown, defaulting to 1000 [ 520.975715][T20965] lo speed is unknown, defaulting to 1000 [ 521.055814][T20965] lo speed is unknown, defaulting to 1000 [ 521.126772][T20972] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4185'. [ 521.242063][T20964] dvmrp8: left allmulticast mode [ 521.406647][T20984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4187'. [ 521.591490][T20988] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4188'. [ 521.733933][T20989] 8021q: adding VLAN 0 to HW filter on device bond18 [ 521.742205][T20989] bond18: entered promiscuous mode [ 521.764464][T20989] bond18: entered allmulticast mode [ 521.770240][T20989] bond0: (slave bond18): Enslaving as an active interface with an up link [ 522.106047][T20996] netlink: 'syz.2.4190': attribute type 13 has an invalid length. [ 522.217717][T21009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4192'. [ 522.334028][T21014] wg1 speed is unknown, defaulting to 1000 [ 522.349287][T21014] lo speed is unknown, defaulting to 1000 [ 522.370764][T21014] lo speed is unknown, defaulting to 1000 [ 522.609797][T21023] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4196'. [ 522.746501][T21027] syz_tun: entered allmulticast mode [ 522.788480][T21027] dvmrp8: entered allmulticast mode [ 522.840093][T21027] wg1 speed is unknown, defaulting to 1000 [ 522.900028][T21033] dvmrp8: entered allmulticast mode [ 522.920513][T21027] lo speed is unknown, defaulting to 1000 [ 522.927316][T21027] lo speed is unknown, defaulting to 1000 [ 523.013571][T21033] wg1 speed is unknown, defaulting to 1000 [ 523.042769][T21033] lo speed is unknown, defaulting to 1000 [ 523.045635][T21026] syz_tun: left allmulticast mode [ 523.054543][T21026] dvmrp8: left allmulticast mode [ 523.070692][T21042] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4200'. [ 523.108725][T21033] lo speed is unknown, defaulting to 1000 [ 523.388293][T21031] dvmrp8: left allmulticast mode [ 523.618098][T21057] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 523.705193][T21058] pim6reg: entered allmulticast mode [ 523.727871][T21062] pim6reg: left allmulticast mode [ 524.156820][T21065] 8021q: adding VLAN 0 to HW filter on device bond24 [ 524.166855][T21065] bond0: (slave bond24): Enslaving as an active interface with an up link [ 525.006261][T21101] __nla_validate_parse: 3 callbacks suppressed [ 525.006282][T21101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4212'. [ 525.030525][T21094] netlink: 'syz.3.4211': attribute type 13 has an invalid length. [ 525.298681][T21107] wg1 speed is unknown, defaulting to 1000 [ 525.313828][T21107] lo speed is unknown, defaulting to 1000 [ 525.321087][T21107] lo speed is unknown, defaulting to 1000 [ 525.325045][T21112] erspan0: entered allmulticast mode [ 525.348482][T21112] dvmrp8: entered allmulticast mode [ 525.496887][T21112] wg1 speed is unknown, defaulting to 1000 [ 525.509821][T21121] wg1 speed is unknown, defaulting to 1000 [ 525.520044][T21112] lo speed is unknown, defaulting to 1000 [ 525.534659][T21121] lo speed is unknown, defaulting to 1000 [ 525.535809][T21126] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 525.548099][T21126] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 525.556626][T21121] lo speed is unknown, defaulting to 1000 [ 525.571616][T21112] lo speed is unknown, defaulting to 1000 [ 525.761893][T21111] erspan0: left allmulticast mode [ 525.767250][T21111] dvmrp8: left allmulticast mode [ 525.980973][T21141] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4217'. [ 526.549387][T21161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4220'. [ 526.728132][T21163] wg1 speed is unknown, defaulting to 1000 [ 526.739762][T21163] lo speed is unknown, defaulting to 1000 [ 526.747428][T21163] lo speed is unknown, defaulting to 1000 [ 526.934905][T21173] veth1_to_bond: entered allmulticast mode [ 526.941628][T21173] bond_slave_1: entered promiscuous mode [ 526.950960][T21173] bond_slave_1: left promiscuous mode [ 526.973807][T21173] veth1_to_bond: left allmulticast mode [ 526.988687][T21177] netlink: 'syz.0.4223': attribute type 13 has an invalid length. [ 527.041317][T21177] netlink: 'syz.0.4223': attribute type 17 has an invalid length. [ 527.116098][T21177] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 527.175366][T21171] wg1 speed is unknown, defaulting to 1000 [ 527.184023][T21171] lo speed is unknown, defaulting to 1000 [ 527.191364][T21171] lo speed is unknown, defaulting to 1000 [ 527.268370][T21182] netlink: 'syz.2.4227': attribute type 13 has an invalid length. [ 527.291522][T21187] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 527.488853][T21191] netlink: 'syz.0.4229': attribute type 13 has an invalid length. [ 527.949042][T21207] wg1 speed is unknown, defaulting to 1000 [ 527.956536][T21207] lo speed is unknown, defaulting to 1000 [ 527.963342][T21207] lo speed is unknown, defaulting to 1000 [ 528.159743][T21206] wg1 speed is unknown, defaulting to 1000 [ 528.341798][T21206] lo speed is unknown, defaulting to 1000 [ 528.353524][T21206] lo speed is unknown, defaulting to 1000 [ 529.079473][T21233] wg1 speed is unknown, defaulting to 1000 [ 529.088400][T21233] lo speed is unknown, defaulting to 1000 [ 529.095710][T21233] lo speed is unknown, defaulting to 1000 [ 529.501142][T21250] netlink: 'syz.2.4238': attribute type 13 has an invalid length. [ 529.923866][T21259] tipc: Enabling of bearer rejected, already enabled [ 530.127684][T21264] netlink: 'syz.2.4244': attribute type 4 has an invalid length. [ 530.303727][T21270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4246'. [ 530.357312][T21271] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4244'. [ 530.371534][T21267] wg1 speed is unknown, defaulting to 1000 [ 530.400905][T21267] lo speed is unknown, defaulting to 1000 [ 530.419846][T21267] lo speed is unknown, defaulting to 1000 [ 530.563701][T21276] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4247'. [ 530.886325][T21276] 8021q: adding VLAN 0 to HW filter on device bond22 [ 530.908528][T21276] bond0: (slave bond22): Enslaving as an active interface with a down link [ 531.059948][T21298] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 531.645154][T21314] tipc: Enabling of bearer rejected, already enabled [ 531.687139][T21315] wg1 speed is unknown, defaulting to 1000 [ 531.714575][T21315] lo speed is unknown, defaulting to 1000 [ 531.733788][T21315] lo speed is unknown, defaulting to 1000 [ 531.903595][T21320] netlink: 'syz.3.4255': attribute type 13 has an invalid length. [ 532.003746][T21327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4258'. [ 532.123501][T21333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4260'. [ 532.134718][T21333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4260'. [ 532.141285][T21335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4262'. [ 532.187481][T21337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4261'. [ 532.339649][T21343] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4263'. [ 532.424719][T21346] wg1 speed is unknown, defaulting to 1000 [ 532.431482][T21346] lo speed is unknown, defaulting to 1000 [ 532.438284][T21346] lo speed is unknown, defaulting to 1000 [ 532.465714][T21343] 8021q: adding VLAN 0 to HW filter on device bond23 [ 532.476043][T21343] bond0: (slave bond23): Enslaving as an active interface with a down link [ 532.614056][T21356] veth1_to_bond: entered allmulticast mode [ 532.635566][T21356] bond_slave_1: entered promiscuous mode [ 532.654921][T21356] bond_slave_1: left promiscuous mode [ 532.661835][T21356] veth1_to_bond: left allmulticast mode [ 532.789863][T21354] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4266'. [ 532.828853][T21366] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 533.079652][T21376] wg1 speed is unknown, defaulting to 1000 [ 533.087464][T21376] lo speed is unknown, defaulting to 1000 [ 533.096942][T21376] lo speed is unknown, defaulting to 1000 [ 533.987337][T21409] wg1 speed is unknown, defaulting to 1000 [ 534.010543][T21404] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 534.019679][T21405] netlink: 'syz.3.4276': attribute type 13 has an invalid length. [ 534.032896][T21409] lo speed is unknown, defaulting to 1000 [ 534.045587][T21409] lo speed is unknown, defaulting to 1000 [ 534.226312][T21421] netlink: 'syz.4.4282': attribute type 1 has an invalid length. [ 534.345017][T21421] 8021q: adding VLAN 0 to HW filter on device bond24 [ 534.443029][T21428] 8021q: adding VLAN 0 to HW filter on device bond24 [ 534.463208][T21428] bond24: (slave vxcan1): The slave device specified does not support setting the MAC address [ 534.477269][T21428] bond24: (slave vxcan1): Error -95 calling set_mac_address [ 534.677111][T21421] veth21: entered promiscuous mode [ 534.694919][T21421] bond24: (slave veth21): Enslaving as an active interface with a down link [ 534.865985][T21438] wg1 speed is unknown, defaulting to 1000 [ 534.890650][T21438] lo speed is unknown, defaulting to 1000 [ 534.913494][T21438] lo speed is unknown, defaulting to 1000 [ 535.406476][T21459] 8021q: adding VLAN 0 to HW filter on device bond19 [ 535.471503][T21459] bond19: entered promiscuous mode [ 535.477594][T21459] bond19: entered allmulticast mode [ 535.488944][T21459] bond0: (slave bond19): Enslaving as an active interface with an up link [ 535.520442][T21462] veth1_to_bond: entered allmulticast mode [ 535.597662][T21470] bond_slave_1: entered promiscuous mode [ 535.606875][T21462] bond_slave_1: left promiscuous mode [ 535.613772][T21462] veth1_to_bond: left allmulticast mode [ 535.784128][T21480] __nla_validate_parse: 6 callbacks suppressed [ 535.784148][T21480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4291'. [ 536.262928][T21499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4295'. [ 536.420862][T21507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4297'. [ 536.610409][T21514] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.4300'. [ 536.626824][T21512] wg1 speed is unknown, defaulting to 1000 [ 536.637531][T21512] lo speed is unknown, defaulting to 1000 [ 536.645442][T21512] lo speed is unknown, defaulting to 1000 [ 536.731497][T21517] 8021q: adding VLAN 0 to HW filter on device bond28 [ 536.741255][T21517] bond0: (slave bond28): Enslaving as an active interface with an up link [ 536.856081][T21524] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4302'. [ 537.160088][T21539] veth1_to_bond: entered allmulticast mode [ 537.169694][T21539] bond_slave_1: entered promiscuous mode [ 537.176916][T21539] bond_slave_1: left promiscuous mode [ 537.186682][T21539] veth1_to_bond: left allmulticast mode [ 537.238091][T21538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4305'. [ 537.279344][T21544] wg1 speed is unknown, defaulting to 1000 [ 537.290598][T21544] lo speed is unknown, defaulting to 1000 [ 537.298382][T21544] lo speed is unknown, defaulting to 1000 [ 537.376219][T21547] netlink: 'syz.1.4306': attribute type 1 has an invalid length. [ 537.385073][T21547] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4306'. [ 537.394815][T21547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4306'. [ 537.429061][T21552] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 537.541210][T21557] erspan0: entered allmulticast mode [ 537.580664][T21557] dvmrp8: entered allmulticast mode [ 537.657124][T21557] wg1 speed is unknown, defaulting to 1000 [ 537.672879][T21557] lo speed is unknown, defaulting to 1000 [ 537.679679][T21557] lo speed is unknown, defaulting to 1000 [ 537.759137][T21564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4310'. [ 537.848848][T21556] erspan0: left allmulticast mode [ 537.867014][T21556] dvmrp8: left allmulticast mode [ 537.997645][T21570] wg1 speed is unknown, defaulting to 1000 [ 538.011003][T21570] lo speed is unknown, defaulting to 1000 [ 538.041309][T21570] lo speed is unknown, defaulting to 1000 [ 538.150003][T21582] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4314'. [ 538.221320][T21581] erspan0: entered promiscuous mode [ 538.229222][T21581] erspan0: left promiscuous mode [ 538.511755][T21591] erspan0: entered allmulticast mode [ 538.547300][T21591] dvmrp8: entered allmulticast mode [ 538.604048][T21591] wg1 speed is unknown, defaulting to 1000 [ 538.622415][T21591] lo speed is unknown, defaulting to 1000 [ 538.637626][T21591] lo speed is unknown, defaulting to 1000 [ 538.887994][T21590] erspan0: left allmulticast mode [ 538.895670][T21590] dvmrp8: left allmulticast mode [ 538.942872][T21611] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 539.595726][T21626] wg1 speed is unknown, defaulting to 1000 [ 539.603946][T21626] lo speed is unknown, defaulting to 1000 [ 539.610711][T21626] lo speed is unknown, defaulting to 1000 [ 540.094559][T21635] wg1 speed is unknown, defaulting to 1000 [ 540.101279][T21635] lo speed is unknown, defaulting to 1000 [ 540.115254][T21635] lo speed is unknown, defaulting to 1000 [ 540.190283][T21641] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 540.485494][T21651] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 540.538805][T21651] wg1 speed is unknown, defaulting to 1000 [ 540.548222][T21651] lo speed is unknown, defaulting to 1000 [ 540.555085][T21651] lo speed is unknown, defaulting to 1000 [ 540.599696][T21660] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 541.390913][T21675] 8021q: adding VLAN 0 to HW filter on device bond25 [ 541.404038][T21675] bond0: (slave bond25): Enslaving as an active interface with a down link [ 541.508609][T21678] wg1 speed is unknown, defaulting to 1000 [ 541.536368][T21683] netlink: 'syz.3.4336': attribute type 4 has an invalid length. [ 541.566325][T21678] lo speed is unknown, defaulting to 1000 [ 541.607444][T21678] lo speed is unknown, defaulting to 1000 [ 541.630224][T21689] __nla_validate_parse: 9 callbacks suppressed [ 541.630246][T21689] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4336'. [ 541.632004][T21688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4338'. [ 541.934895][T21703] veth1_to_bond: entered allmulticast mode [ 541.941618][T21703] bond_slave_1: entered promiscuous mode [ 541.958303][T21703] bond_slave_1: left promiscuous mode [ 541.965003][T21703] veth1_to_bond: left allmulticast mode [ 542.143421][T21706] 8021q: adding VLAN 0 to HW filter on device bond29 [ 542.152432][T21706] bond0: (slave bond29): Enslaving as an active interface with an up link [ 542.177541][T21710] wg1 speed is unknown, defaulting to 1000 [ 542.187641][T21710] lo speed is unknown, defaulting to 1000 [ 542.218851][T21710] lo speed is unknown, defaulting to 1000 [ 542.543164][T21724] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4347'. [ 543.326286][T21739] wg1 speed is unknown, defaulting to 1000 [ 543.335309][T21739] lo speed is unknown, defaulting to 1000 [ 543.341826][T21739] lo speed is unknown, defaulting to 1000 [ 543.587092][T21752] netlink: 'syz.2.4351': attribute type 13 has an invalid length. [ 544.193767][T21762] veth0_to_bridge: left promiscuous mode [ 544.199577][T21762] veth0_to_bridge: left allmulticast mode [ 544.255842][T21762] bond0: left promiscuous mode [ 544.260790][T21762] bond16: left promiscuous mode [ 544.266145][T21762] bond17: left promiscuous mode [ 544.271398][T21762] bond18: left promiscuous mode [ 544.277902][T21762] bond19: left promiscuous mode [ 544.283603][T21762] bond0: left allmulticast mode [ 544.288630][T21762] bond16: left allmulticast mode [ 544.293779][T21762] bond17: left allmulticast mode [ 544.298881][T21762] bond18: left allmulticast mode [ 544.333014][T21762] bond19: left allmulticast mode [ 544.342108][T21762] veth13: left promiscuous mode [ 544.353110][T21762] veth15: left promiscuous mode [ 544.515138][T21773] wg1 speed is unknown, defaulting to 1000 [ 544.522107][T21773] lo speed is unknown, defaulting to 1000 [ 544.528845][T21773] lo speed is unknown, defaulting to 1000 [ 544.616944][T21779] netlink: 'syz.4.4359': attribute type 4 has an invalid length. [ 544.721077][T21785] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4359'. [ 544.938791][T21795] veth1_to_bond: entered allmulticast mode [ 544.945779][T21795] bond_slave_1: entered promiscuous mode [ 544.953208][T21795] bond_slave_1: left promiscuous mode [ 544.964824][T21795] veth1_to_bond: left allmulticast mode [ 545.106381][T21802] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4365'. [ 545.258229][T21806] wg1 speed is unknown, defaulting to 1000 [ 545.265368][T21806] lo speed is unknown, defaulting to 1000 [ 545.279810][T21806] lo speed is unknown, defaulting to 1000 [ 545.798038][T21810] netlink: 'syz.2.4366': attribute type 6 has an invalid length. [ 545.952206][T21818] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 546.399224][T21829] syz_tun: entered allmulticast mode [ 546.430451][T21829] dvmrp8: entered allmulticast mode [ 546.536722][T21829] wg1 speed is unknown, defaulting to 1000 [ 546.563606][T21829] lo speed is unknown, defaulting to 1000 [ 546.585892][T21829] lo speed is unknown, defaulting to 1000 [ 546.728847][T21828] syz_tun: left allmulticast mode [ 546.773075][T21828] dvmrp8: left allmulticast mode [ 547.131448][T21845] veth1_to_bond: entered allmulticast mode [ 547.139701][T21845] bond_slave_1: entered promiscuous mode [ 547.149068][T21845] bond_slave_1: left promiscuous mode [ 547.165445][T21845] veth1_to_bond: left allmulticast mode [ 547.377269][T21852] 8021q: adding VLAN 0 to HW filter on device bond30 [ 547.398551][T21852] bond0: (slave bond30): Enslaving as an active interface with an up link [ 547.514546][T21860] veth1_to_bond: entered allmulticast mode [ 547.521208][T21860] bond_slave_1: entered promiscuous mode [ 547.527916][T21860] bond_slave_1: left promiscuous mode [ 547.533792][T21860] veth1_to_bond: left allmulticast mode [ 547.676410][T21861] netlink: 'syz.0.4380': attribute type 13 has an invalid length. [ 548.189642][T21878] dvmrp8: entered allmulticast mode [ 548.216749][T21878] wg1 speed is unknown, defaulting to 1000 [ 548.224045][T21878] lo speed is unknown, defaulting to 1000 [ 548.230839][T21878] lo speed is unknown, defaulting to 1000 [ 548.369988][T21877] dvmrp8: left allmulticast mode [ 548.573140][T21893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4389'. [ 548.707262][T21902] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 548.775263][T21907] netlink: 'syz.2.4392': attribute type 4 has an invalid length. [ 548.825127][T21908] 8021q: adding VLAN 0 to HW filter on device bond20 [ 548.835117][T21908] bond0: (slave bond20): Enslaving as an active interface with an up link [ 548.913313][T21910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4392'. [ 549.059001][T21915] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4393'. [ 549.230485][T21922] netlink: 'syz.2.4394': attribute type 13 has an invalid length. [ 549.268027][T21922] netlink: 'syz.2.4394': attribute type 17 has an invalid length. [ 549.317664][T21926] wg1 speed is unknown, defaulting to 1000 [ 549.409561][T21922] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 549.495994][T21926] lo speed is unknown, defaulting to 1000 [ 549.526805][T21926] lo speed is unknown, defaulting to 1000 [ 549.779122][T21932] netlink: 'syz.3.4396': attribute type 13 has an invalid length. [ 549.831122][T21943] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 550.383148][T21954] wg1 speed is unknown, defaulting to 1000 [ 550.399351][T21954] lo speed is unknown, defaulting to 1000 [ 550.419200][T21954] lo speed is unknown, defaulting to 1000 [ 550.771420][T21964] wg1 speed is unknown, defaulting to 1000 [ 550.793335][T21964] lo speed is unknown, defaulting to 1000 [ 550.801196][T21964] lo speed is unknown, defaulting to 1000 [ 551.313337][T21988] veth1_to_bond: entered allmulticast mode [ 551.329125][T21988] bond_slave_1: entered promiscuous mode [ 551.344816][T21988] bond_slave_1: left promiscuous mode [ 551.356366][T21988] veth1_to_bond: left allmulticast mode [ 551.411139][T21990] netlink: 'syz.1.4409': attribute type 4 has an invalid length. [ 551.488033][T21990] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4409'. [ 551.695686][T21999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4411'. [ 551.705181][T22001] netlink: 'syz.0.4412': attribute type 4 has an invalid length. [ 551.747773][T21992] wg1 speed is unknown, defaulting to 1000 [ 551.775531][T21992] lo speed is unknown, defaulting to 1000 [ 551.800215][T21992] lo speed is unknown, defaulting to 1000 [ 551.844107][T22005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4412'. [ 552.012113][T22009] dvmrp8: entered allmulticast mode [ 552.099307][T22011] wg1 speed is unknown, defaulting to 1000 [ 552.108534][T22011] lo speed is unknown, defaulting to 1000 [ 552.136380][T22011] lo speed is unknown, defaulting to 1000 [ 552.150353][T22009] wg1 speed is unknown, defaulting to 1000 [ 552.217198][T22009] lo speed is unknown, defaulting to 1000 [ 552.224678][T22009] lo speed is unknown, defaulting to 1000 [ 552.287538][T22026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4416'. [ 552.293787][T22007] dvmrp8: left allmulticast mode [ 552.978399][T22045] netlink: 'syz.4.4422': attribute type 4 has an invalid length. [ 553.033252][T22047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4423'. [ 553.053190][T22048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4422'. [ 553.279626][T22056] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4426'. [ 553.439245][T22063] erspan0: entered allmulticast mode [ 553.467306][T22063] dvmrp8: entered allmulticast mode [ 553.481149][T22064] wg1 speed is unknown, defaulting to 1000 [ 553.494966][T22064] lo speed is unknown, defaulting to 1000 [ 553.518038][T22063] wg1 speed is unknown, defaulting to 1000 [ 553.538385][T22064] lo speed is unknown, defaulting to 1000 [ 553.556282][T22063] lo speed is unknown, defaulting to 1000 [ 553.574689][T22063] lo speed is unknown, defaulting to 1000 [ 553.651410][T22071] wg1 speed is unknown, defaulting to 1000 [ 553.676447][T22071] lo speed is unknown, defaulting to 1000 [ 553.686501][T22071] lo speed is unknown, defaulting to 1000 [ 553.806140][T22062] erspan0: left allmulticast mode [ 553.850907][T22062] dvmrp8: left allmulticast mode [ 554.080356][T22064] netlink: 'syz.3.4428': attribute type 6 has an invalid length. [ 554.254521][T22085] veth1_to_bond: entered allmulticast mode [ 554.261299][T22085] bond_slave_1: entered promiscuous mode [ 554.276656][T22085] bond_slave_1: left promiscuous mode [ 554.283461][T22085] veth1_to_bond: left allmulticast mode [ 554.304448][T22088] veth1_to_bond: entered allmulticast mode [ 554.331490][T22088] bond_slave_1: entered promiscuous mode [ 554.363607][T22089] __nla_validate_parse: 1 callbacks suppressed [ 554.363627][T22089] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4435'. [ 554.374121][T22088] bond_slave_1: left promiscuous mode [ 554.400658][T22088] veth1_to_bond: left allmulticast mode [ 554.639134][ T133] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82 [ 554.697965][T22091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4436'. [ 554.950956][T22115] erspan0: entered allmulticast mode [ 554.966622][T22115] dvmrp8: entered allmulticast mode [ 554.992653][T22115] wg1 speed is unknown, defaulting to 1000 [ 554.999923][T22115] lo speed is unknown, defaulting to 1000 [ 555.007505][T22115] lo speed is unknown, defaulting to 1000 [ 555.067545][T22114] erspan0: left allmulticast mode [ 555.073125][T22114] dvmrp8: left allmulticast mode [ 555.264200][T22124] 8021q: adding VLAN 0 to HW filter on device bond25 [ 555.273944][T22124] bond0: (slave bond25): Enslaving as an active interface with an up link [ 555.305370][T22123] wg1 speed is unknown, defaulting to 1000 [ 555.329290][T22123] lo speed is unknown, defaulting to 1000 [ 555.357647][T22123] lo speed is unknown, defaulting to 1000 [ 555.421790][T22128] erspan0: entered allmulticast mode [ 555.434619][T22128] dvmrp8: entered allmulticast mode [ 555.458261][T22128] wg1 speed is unknown, defaulting to 1000 [ 555.499074][T22128] lo speed is unknown, defaulting to 1000 [ 555.510664][T22128] lo speed is unknown, defaulting to 1000 [ 555.670170][T22127] erspan0: left allmulticast mode [ 555.676571][T22127] dvmrp8: left allmulticast mode [ 555.797485][T22147] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4449'. [ 555.835601][T22138] netlink: 'syz.0.4448': attribute type 13 has an invalid length. [ 555.879634][T22151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4450'. [ 556.120799][T22156] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 556.161021][T22156] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4452'. [ 556.170278][T22156] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4452'. [ 556.256998][T22162] wg1 speed is unknown, defaulting to 1000 [ 556.264209][T22162] lo speed is unknown, defaulting to 1000 [ 556.270886][T22162] lo speed is unknown, defaulting to 1000 [ 556.503643][T22173] 8021q: adding VLAN 0 to HW filter on device bond16 [ 556.512464][T22173] bond0: (slave bond16): Enslaving as an active interface with an up link [ 556.625276][T22180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4458'. [ 556.730544][T22185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4459'. [ 556.746461][T22184] wg1 speed is unknown, defaulting to 1000 [ 556.754497][T22184] lo speed is unknown, defaulting to 1000 [ 556.761128][T22184] lo speed is unknown, defaulting to 1000 [ 556.866354][T22190] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4461'. [ 556.916527][T22192] wg1 speed is unknown, defaulting to 1000 [ 556.928270][T22192] lo speed is unknown, defaulting to 1000 [ 556.935922][T22192] lo speed is unknown, defaulting to 1000 [ 556.954423][T22194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4463'. [ 557.143890][T22202] syzkaller1: entered allmulticast mode [ 557.409028][T22206] wg1 speed is unknown, defaulting to 1000 [ 557.416759][T22206] lo speed is unknown, defaulting to 1000 [ 557.426931][T22206] lo speed is unknown, defaulting to 1000 [ 557.562187][T22223] 8021q: adding VLAN 0 to HW filter on device bond21 [ 557.570797][T22223] bond0: (slave bond21): Enslaving as an active interface with an up link [ 557.614973][T22210] netlink: 'syz.0.4467': attribute type 13 has an invalid length. [ 557.658315][T22226] netlink: 'syz.3.4470': attribute type 13 has an invalid length. [ 557.831821][T22230] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 557.847310][T22230] netlink: 'syz.3.4472': attribute type 4 has an invalid length. [ 558.238884][T22244] wg1 speed is unknown, defaulting to 1000 [ 558.247558][T22244] lo speed is unknown, defaulting to 1000 [ 558.254390][T22244] lo speed is unknown, defaulting to 1000 [ 558.448005][T22254] netlink: 'syz.1.4476': attribute type 1 has an invalid length. [ 558.463287][T22254] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 558.475365][T22254] gretap3: entered promiscuous mode [ 558.799504][T22256] netlink: 'syz.0.4474': attribute type 6 has an invalid length. [ 559.231018][T22276] 8021q: adding VLAN 0 to HW filter on device bond26 [ 559.254738][T22276] bond0: (slave bond26): Enslaving as an active interface with an up link [ 559.536958][T22286] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 559.544297][T22286] IPv6: NLM_F_CREATE should be set when creating new route [ 559.647117][T22290] netlink: 'syz.4.4487': attribute type 13 has an invalid length. [ 559.676209][T22294] wg1 speed is unknown, defaulting to 1000 [ 559.683164][T22294] lo speed is unknown, defaulting to 1000 [ 559.689801][T22294] lo speed is unknown, defaulting to 1000 [ 559.701463][T22289] netlink: 'syz.2.4482': attribute type 13 has an invalid length. [ 559.929567][T22301] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 560.056447][T22309] veth1_to_bond: entered allmulticast mode [ 560.070279][T22309] bond_slave_1: entered promiscuous mode [ 560.086863][T22308] bond_slave_1: left promiscuous mode [ 560.093570][T22308] veth1_to_bond: left allmulticast mode [ 560.172233][T22311] wg1 speed is unknown, defaulting to 1000 [ 560.180208][T22311] lo speed is unknown, defaulting to 1000 [ 560.190830][T22311] lo speed is unknown, defaulting to 1000 [ 560.461811][T22319] __nla_validate_parse: 8 callbacks suppressed [ 560.461831][T22319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4495'. [ 560.997398][T22321] tipc: Resetting bearer [ 561.144920][T22335] wg1 speed is unknown, defaulting to 1000 [ 561.170550][T22335] lo speed is unknown, defaulting to 1000 [ 561.498366][T22346] tipc: Resetting bearer [ 561.647185][ T4627] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82 [ 561.715772][T22353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4501'. [ 561.948402][T22335] lo speed is unknown, defaulting to 1000 [ 562.104599][T22361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4503'. [ 562.264978][T22373] netlink: 'syz.0.4505': attribute type 1 has an invalid length. [ 562.323227][T22370] veth0_to_bond: left allmulticast mode [ 562.331270][T22370] veth0_to_bond: left promiscuous mode [ 562.347221][T22370] bridge5: port 2(veth0_to_bond) entered disabled state [ 562.363815][T22377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4505'. [ 562.374929][T22376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4507'. [ 562.397059][T22370] bond17: (slave wlan0): Releasing active interface [ 562.416873][T22381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4505'. [ 562.429967][T22370] bond12: (slave bridge4): Releasing active interface [ 562.484186][T22370] veth9: left allmulticast mode [ 562.505946][T22370] veth9: left promiscuous mode [ 562.511094][T22370] bridge5: port 1(veth9) entered disabled state [ 562.530194][T22370] vlan2: left allmulticast mode [ 562.538744][T22370] vlan2: left promiscuous mode [ 562.551473][T22370] veth1: left promiscuous mode [ 562.583233][T22370] bridge5: port 3(vlan2) entered disabled state [ 562.610550][T22370] bond0: (slave bond19): Releasing active interface [ 562.620401][T22370] bond0: (slave bond19): the permanent HWaddr of slave - f6:04:4c:f9:35:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 562.666531][T22370] bond0: (slave bond20): making interface the new active one [ 562.687776][T22370] batman_adv: batadv1: Removing interface: macvlan2 [ 562.708456][T22370] bond0: (slave bond20): Releasing active interface [ 562.715477][T22370] bond0: (slave bond21): making interface the new active one [ 562.726050][T22370] bond0: (slave bond21): Releasing active interface [ 562.742087][T22370] bond0: (slave bond22): making interface the new active one [ 562.751498][T22370] bond0: (slave bond22): Releasing active interface [ 562.764341][T22370] bond0: (slave bond23): making interface the new active one [ 562.784285][T22370] bond0: (slave bond23): Releasing active interface [ 562.790941][T22370] bond0: (slave bond24): making interface the new active one [ 562.800780][T22370] bond0: (slave bond24): Releasing active interface [ 562.807541][T22370] bond0: (slave bond25): making interface the new active one [ 562.827516][T22370] bond0: (slave bond25): Releasing active interface [ 562.842389][T22370] bond0: (slave bond26): making interface the new active one [ 562.854749][T22370] bond0: (slave bond26): Releasing active interface [ 562.894194][T22382] wg1 speed is unknown, defaulting to 1000 [ 562.918575][T22382] lo speed is unknown, defaulting to 1000 [ 562.929805][T22388] wg1 speed is unknown, defaulting to 1000 [ 562.940226][T22388] lo speed is unknown, defaulting to 1000 [ 562.947566][T22382] lo speed is unknown, defaulting to 1000 [ 562.958322][T22388] lo speed is unknown, defaulting to 1000 [ 563.193606][T22405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4510'. [ 563.249995][T22408] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4509'. [ 563.446137][T22415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4513'. [ 563.875336][T22429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4517'. [ 564.147394][T22435] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 564.185257][T22438] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 564.266088][T22444] syzkaller1: entered allmulticast mode [ 564.435727][T22452] netlink: 'syz.4.4523': attribute type 72 has an invalid length. [ 564.619711][T22453] 8021q: adding VLAN 0 to HW filter on device bond26 [ 564.641439][T22453] bond0: (slave bond26): Enslaving as an active interface with a down link [ 564.830767][T22459] wg1 speed is unknown, defaulting to 1000 [ 564.854800][T22459] lo speed is unknown, defaulting to 1000 [ 564.996299][T22459] lo speed is unknown, defaulting to 1000 [ 565.207918][T22467] erspan0: entered allmulticast mode [ 565.250854][T22467] dvmrp8: entered allmulticast mode [ 565.300194][T22467] wg1 speed is unknown, defaulting to 1000 [ 565.308426][T22467] lo speed is unknown, defaulting to 1000 [ 565.316028][T22467] lo speed is unknown, defaulting to 1000 [ 565.382412][T22466] erspan0: left allmulticast mode [ 565.392139][T22466] dvmrp8: left allmulticast mode [ 565.467536][T22476] __nla_validate_parse: 2 callbacks suppressed [ 565.467556][T22476] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.4528'. [ 565.523080][T22479] wg1 speed is unknown, defaulting to 1000 [ 565.546439][T22479] lo speed is unknown, defaulting to 1000 [ 565.570254][T22485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4530'. [ 565.619230][T22487] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4527'. [ 565.840996][T22481] 8021q: adding VLAN 0 to HW filter on device bond31 [ 565.851107][T22481] bond0: (slave bond31): Enslaving as an active interface with an up link [ 565.860058][T22479] lo speed is unknown, defaulting to 1000 [ 565.922635][T22495] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4532'. [ 565.980592][T22492] wg1 speed is unknown, defaulting to 1000 [ 565.980631][T22497] veth1_to_bond: entered allmulticast mode [ 565.994805][T22497] bond_slave_1: entered promiscuous mode [ 566.007741][T22496] bond_slave_1: left promiscuous mode [ 566.014742][T22496] veth1_to_bond: left allmulticast mode [ 566.058489][T22503] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.4535'. [ 566.062935][T22492] lo speed is unknown, defaulting to 1000 [ 566.113072][T22492] lo speed is unknown, defaulting to 1000 [ 566.144639][T22500] wg1 speed is unknown, defaulting to 1000 [ 566.175763][T22500] lo speed is unknown, defaulting to 1000 [ 566.200226][T22503] 8021q: adding VLAN 0 to HW filter on device bond27 [ 566.209385][T22503] bond0: (slave bond27): making interface the new active one [ 566.219388][T22503] bond0: (slave bond27): Enslaving as an active interface with an up link [ 566.282803][T22513] netlink: 'syz.1.4537': attribute type 13 has an invalid length. [ 566.306940][T22500] lo speed is unknown, defaulting to 1000 [ 566.406050][T22518] erspan0: entered allmulticast mode [ 566.435074][T22515] dvmrp8: entered allmulticast mode [ 566.493539][T22515] wg1 speed is unknown, defaulting to 1000 [ 566.523735][T22515] lo speed is unknown, defaulting to 1000 [ 566.535660][T22515] lo speed is unknown, defaulting to 1000 [ 566.577006][T22523] syzkaller1: entered allmulticast mode [ 566.627396][T22524] wg1 speed is unknown, defaulting to 1000 [ 566.669199][T22524] lo speed is unknown, defaulting to 1000 [ 566.686723][T22514] erspan0: left allmulticast mode [ 566.705842][T22514] dvmrp8: left allmulticast mode [ 566.747162][T22524] lo speed is unknown, defaulting to 1000 [ 566.798593][T22529] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4541'. [ 567.019123][T22532] wg1 speed is unknown, defaulting to 1000 [ 567.096529][T22532] lo speed is unknown, defaulting to 1000 [ 567.171651][T22542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4544'. [ 567.187132][T22532] lo speed is unknown, defaulting to 1000 [ 567.610202][T22553] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4546'. [ 567.828464][T22558] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4549'. [ 568.170916][T22574] wg1 speed is unknown, defaulting to 1000 [ 568.221461][T22574] lo speed is unknown, defaulting to 1000 [ 568.240288][T22574] lo speed is unknown, defaulting to 1000 [ 568.420100][T22586] wg1 speed is unknown, defaulting to 1000 [ 568.427825][T22586] lo speed is unknown, defaulting to 1000 [ 568.438246][T22586] lo speed is unknown, defaulting to 1000 [ 568.527668][T22592] netlink: 'syz.1.4554': attribute type 13 has an invalid length. [ 568.646299][T22594] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4555'. [ 568.916349][T22598] tipc: Enabling of bearer rejected, already enabled [ 569.615555][T22620] 8021q: adding VLAN 0 to HW filter on device bond17 [ 569.626545][T22620] bond0: (slave bond17): Enslaving as an active interface with an up link [ 569.826261][T22627] veth1_to_bond: entered allmulticast mode [ 569.833288][T22627] bond_slave_1: entered promiscuous mode [ 569.839832][T22627] bond_slave_1: left promiscuous mode [ 569.846220][T22627] veth1_to_bond: left allmulticast mode [ 569.874757][T22631] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 570.151371][T22639] wg1 speed is unknown, defaulting to 1000 [ 570.183983][T22639] lo speed is unknown, defaulting to 1000 [ 570.191012][T22639] lo speed is unknown, defaulting to 1000 [ 570.326098][T22647] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 570.377032][T22649] wg1 speed is unknown, defaulting to 1000 [ 570.386166][T22649] lo speed is unknown, defaulting to 1000 [ 570.397075][T22649] lo speed is unknown, defaulting to 1000 [ 570.524214][T22658] __nla_validate_parse: 5 callbacks suppressed [ 570.524234][T22658] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4571'. [ 571.321144][T22680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4575'. [ 571.719011][T22689] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 571.741060][T22686] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4577'. [ 571.751643][T22686] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4577'. [ 571.906399][T22695] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4579'. [ 571.938316][T22696] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4580'. [ 572.082490][T22700] syz_tun: entered allmulticast mode [ 572.101206][T22700] dvmrp8: entered allmulticast mode [ 572.158512][T22703] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4582'. [ 572.171330][T22700] wg1 speed is unknown, defaulting to 1000 [ 572.198453][T22700] lo speed is unknown, defaulting to 1000 [ 572.226518][T22700] lo speed is unknown, defaulting to 1000 [ 572.235502][T22708] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4581'. [ 572.395876][T22698] syz_tun: left allmulticast mode [ 572.404851][T22698] dvmrp8: left allmulticast mode [ 572.604373][T22724] wg1 speed is unknown, defaulting to 1000 [ 572.611244][T22724] lo speed is unknown, defaulting to 1000 [ 572.620715][T22724] lo speed is unknown, defaulting to 1000 [ 572.835403][T22736] bond0: (slave bond20): Releasing active interface [ 572.844760][T22736] bond0: (slave bond20): the permanent HWaddr of slave - 4e:67:e6:b3:94:85 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 572.862568][T22736] bond0: (slave bond21): making interface the new active one [ 572.875809][T22736] bond0: (slave bond21): Releasing active interface [ 572.882587][T22736] bond0: (slave bond22): making interface the new active one [ 572.893377][T22736] bond0: (slave bond22): Releasing active interface [ 572.902792][T22736] bond0: (slave bond23): making interface the new active one [ 572.914531][T22736] bond0: (slave bond23): Releasing active interface [ 572.921267][T22736] bond0: (slave bond24): making interface the new active one [ 572.936726][T22736] bond0: (slave bond24): Releasing active interface [ 572.944347][T22736] bond0: (slave bond25): making interface the new active one [ 572.963022][T22736] bond0: (slave bond25): Releasing active interface [ 572.970989][T22736] bond0: (slave bond26): making interface the new active one [ 572.980528][T22736] bond0: (slave bond26): Releasing active interface [ 572.987856][T22736] bond0: (slave bond27): making interface the new active one [ 572.997277][T22736] bond0: (slave bond27): Releasing active interface [ 573.004418][T22736] bond0: (slave bond28): making interface the new active one [ 573.015905][T22736] bond0: (slave bond28): Releasing active interface [ 573.029430][T22736] bond0: (slave bond29): making interface the new active one [ 573.044959][T22736] bond0: (slave bond29): Releasing active interface [ 573.051729][T22736] bond0: (slave bond30): making interface the new active one [ 573.097818][T22740] netlink: 'syz.3.4589': attribute type 13 has an invalid length. [ 573.115855][T22736] bond0: (slave bond30): Releasing active interface [ 573.126194][T22736] bond0: (slave bond31): making interface the new active one [ 573.136591][T22736] bond0: (slave bond31): Releasing active interface [ 573.209362][T22738] wg1 speed is unknown, defaulting to 1000 [ 573.223224][T22738] lo speed is unknown, defaulting to 1000 [ 573.231468][T22738] lo speed is unknown, defaulting to 1000 [ 573.298793][T22752] wg1 speed is unknown, defaulting to 1000 [ 573.308805][T22752] lo speed is unknown, defaulting to 1000 [ 573.315858][T22752] lo speed is unknown, defaulting to 1000 [ 574.183148][T22781] erspan0: entered allmulticast mode [ 574.207624][T22781] dvmrp8: entered allmulticast mode [ 574.256595][T22785] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4598'. [ 574.266857][T22779] wg1 speed is unknown, defaulting to 1000 [ 574.281657][T22779] lo speed is unknown, defaulting to 1000 [ 574.293482][T22781] wg1 speed is unknown, defaulting to 1000 [ 574.300187][T22779] lo speed is unknown, defaulting to 1000 [ 574.311300][T22781] lo speed is unknown, defaulting to 1000 [ 574.352993][T22781] lo speed is unknown, defaulting to 1000 [ 574.439264][T22789] wg1 speed is unknown, defaulting to 1000 [ 574.482700][T22789] lo speed is unknown, defaulting to 1000 [ 574.546098][T22793] 8021q: adding VLAN 0 to HW filter on device à [ 574.557540][T22793] A link change request failed with some changes committed already. Interface à may have been left with an inconsistent configuration, please check. [ 574.651145][T22789] lo speed is unknown, defaulting to 1000 [ 574.657687][T22780] erspan0: left allmulticast mode [ 574.665261][T22780] dvmrp8: left allmulticast mode [ 574.767806][T22801] wg1 speed is unknown, defaulting to 1000 [ 574.806776][T22801] lo speed is unknown, defaulting to 1000 [ 574.814397][T22801] lo speed is unknown, defaulting to 1000 [ 574.876270][T22811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4603'. [ 575.205926][T22819] 8021q: adding VLAN 0 to HW filter on device bond18 [ 575.217093][T22819] bond0: (slave bond18): Enslaving as an active interface with an up link [ 575.239020][T22822] wg1 speed is unknown, defaulting to 1000 [ 575.247329][T22822] lo speed is unknown, defaulting to 1000 [ 575.255918][T22822] lo speed is unknown, defaulting to 1000 [ 575.551759][T22837] syz_tun: entered allmulticast mode [ 575.563337][T22837] dvmrp8: entered allmulticast mode [ 575.586233][T22837] wg1 speed is unknown, defaulting to 1000 [ 575.593392][T22837] lo speed is unknown, defaulting to 1000 [ 575.600111][T22837] lo speed is unknown, defaulting to 1000 [ 575.612284][T22838] __nla_validate_parse: 2 callbacks suppressed [ 575.612304][T22838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4609'. [ 575.792696][T22836] syz_tun: left allmulticast mode [ 575.805582][T22836] dvmrp8: left allmulticast mode [ 575.839074][T22846] wg1 speed is unknown, defaulting to 1000 [ 575.846474][T22846] lo speed is unknown, defaulting to 1000 [ 575.853295][T22846] lo speed is unknown, defaulting to 1000 [ 575.974594][T22856] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4614'. [ 575.996697][T22852] syz_tun: entered allmulticast mode [ 576.038236][T22852] dvmrp8: entered allmulticast mode [ 576.128499][T22852] wg1 speed is unknown, defaulting to 1000 [ 576.147394][T22852] lo speed is unknown, defaulting to 1000 [ 576.163013][T22852] lo speed is unknown, defaulting to 1000 [ 576.279065][T22851] syz_tun: left allmulticast mode [ 576.291009][T22851] dvmrp8: left allmulticast mode [ 576.496937][T22874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4616'. [ 576.587270][T22877] ------------[ cut here ]------------ [ 576.592832][T22877] WARNING: CPU: 0 PID: 22877 at net/ipv6/route.c:4857 rt6_multipath_rebalance+0x455/0x8b0 [ 576.602820][T22877] Modules linked in: [ 576.606763][T22877] CPU: 0 UID: 0 PID: 22877 Comm: syz.4.4617 Not tainted syzkaller #0 PREEMPT(full) [ 576.616191][T22877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 576.626337][T22877] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0 [ 576.632641][T22877] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 5d 0a f2 f7 e9 78 fe ff ff e8 13 9f 8e f7 eb 05 e8 0c 9f 8e f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 576.652316][T22877] RSP: 0018:ffffc90003e6e580 EFLAGS: 00010287 [ 576.658462][T22877] RAX: ffffffff8a310c1d RBX: dffffc0000000000 RCX: 0000000000080000 [ 576.666491][T22877] RDX: ffffc9000de92000 RSI: 0000000000015447 RDI: 0000000000015448 [ 576.674526][T22877] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 576.682558][T22877] R10: dffffc0000000000 R11: fffff520007cdca8 R12: ffff88805ed6f0de [ 576.690560][T22877] R13: ffff88805ed6f090 R14: 0000000000000000 R15: 1ffff1100bdade12 [ 576.698587][T22877] FS: 00007f79d53d56c0(0000) GS:ffff888125c1a000(0000) knlGS:0000000000000000 [ 576.707579][T22877] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 576.714215][T22877] CR2: 0000000000000000 CR3: 0000000032206000 CR4: 00000000003526f0 [ 576.722252][T22877] Call Trace: [ 576.725560][T22877] [ 576.728519][T22877] fib6_ifup+0x14a/0x180 [ 576.732839][T22877] ? __pfx_fib6_ifup+0x10/0x10 [ 576.737640][T22877] fib6_clean_node+0x24a/0x590 [ 576.742473][T22877] ? __pfx_fib6_clean_node+0x10/0x10 [ 576.747814][T22877] ? rcu_is_watching+0x15/0xb0 [ 576.752644][T22877] fib6_walk_continue+0x67b/0x910 [ 576.757714][T22877] fib6_walk+0x149/0x290 [ 576.762028][T22877] __fib6_clean_all+0x234/0x380 [ 576.766931][T22877] ? __fib6_clean_all+0x9b/0x380 [ 576.771937][T22877] ? __pfx_fib6_ifup+0x10/0x10 [ 576.776748][T22877] ? __pfx___fib6_clean_all+0x10/0x10 [ 576.782192][T22877] ? __pfx_fib6_clean_node+0x10/0x10 [ 576.787514][T22877] ? __pfx_fib6_ifup+0x10/0x10 [ 576.792344][T22877] ? addrconf_mod_dad_work+0xb9/0x120 [ 576.797752][T22877] rt6_sync_up+0x128/0x160 [ 576.802241][T22877] ? __pfx_rt6_sync_up+0x10/0x10 [ 576.807219][T22877] ? do_raw_read_unlock+0x3d/0x80 [ 576.812305][T22877] addrconf_notify+0xd55/0x1010 [ 576.817192][T22877] notifier_call_chain+0x1b3/0x3e0 [ 576.822358][T22877] __dev_notify_flags+0x21b/0x2e0 [ 576.827416][T22877] ? __pfx___dev_notify_flags+0x10/0x10 [ 576.833183][T22877] ? __dev_change_flags+0x4cc/0x6d0 [ 576.838416][T22877] ? netif_state_change+0x29e/0x3a0 [ 576.843655][T22877] ? __pfx_generic_xdp_install+0x10/0x10 [ 576.849306][T22877] ? __pfx_netif_state_change+0x10/0x10 [ 576.854912][T22877] netif_change_flags+0xe8/0x1a0 [ 576.859901][T22877] do_setlink+0xc55/0x41c0 [ 576.864386][T22877] ? rcu_is_watching+0x15/0xb0 [ 576.869266][T22877] ? __schedule+0x17ae/0x4cc0 [ 576.873983][T22877] ? __pfx_do_setlink+0x10/0x10 [ 576.878852][T22877] ? do_raw_spin_lock+0x121/0x290 [ 576.883928][T22877] ? rcu_is_watching+0x15/0xb0 [ 576.888698][T22877] ? rcu_is_watching+0x15/0xb0 [ 576.893490][T22877] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 576.899423][T22877] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 576.905795][T22877] ? rcu_is_watching+0x15/0xb0 [ 576.910596][T22877] ? __mutex_lock+0xd3b/0x1350 [ 576.915419][T22877] ? __mutex_lock+0x5bb/0x1350 [ 576.920188][T22877] ? rtnl_newlink+0x8db/0x1c70 [ 576.924990][T22877] ? __pfx___mutex_lock+0x10/0x10 [ 576.930028][T22877] ? ns_capable+0x8a/0xf0 [ 576.934389][T22877] ? rtnl_link_get_net_capable+0x16a/0x350 [ 576.940200][T22877] rtnl_newlink+0x149f/0x1c70 [ 576.944915][T22877] ? netlink_sendmsg+0x805/0xb30 [ 576.949866][T22877] ? __pfx_rtnl_newlink+0x10/0x10 [ 576.954967][T22877] ? rcu_is_watching+0x15/0xb0 [ 576.959752][T22877] ? nlmon_xmit+0xb0/0x100 [ 576.964207][T22877] ? kmem_cache_free+0x18f/0x400 [ 576.969160][T22877] ? rcu_is_watching+0x15/0xb0 [ 576.973986][T22877] ? __dev_queue_xmit+0x27b/0x3b50 [ 576.979127][T22877] ? __local_bh_enable_ip+0x12d/0x1c0 [ 576.984540][T22877] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 576.990309][T22877] ? __dev_queue_xmit+0x27b/0x3b50 [ 576.995461][T22877] ? lock_release+0x4b/0x3e0 [ 577.000067][T22877] ? __dev_queue_xmit+0x27b/0x3b50 [ 577.005202][T22877] ? __dev_queue_xmit+0x27b/0x3b50 [ 577.010328][T22877] ? __dev_queue_xmit+0x1d79/0x3b50 [ 577.015580][T22877] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 577.020713][T22877] ? rcu_is_watching+0x15/0xb0 [ 577.025516][T22877] ? lock_release+0x4b/0x3e0 [ 577.030128][T22877] ? bpf_lsm_capable+0x9/0x20 [ 577.034854][T22877] ? security_capable+0x7e/0x2e0 [ 577.039820][T22877] ? __pfx_rtnl_newlink+0x10/0x10 [ 577.044879][T22877] rtnetlink_rcv_msg+0x7cc/0xb70 [ 577.049841][T22877] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 577.055011][T22877] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 577.060489][T22877] ? ref_tracker_free+0x63a/0x7d0 [ 577.065564][T22877] ? __asan_memcpy+0x40/0x70 [ 577.070183][T22877] ? __pfx_ref_tracker_free+0x10/0x10 [ 577.075626][T22877] netlink_rcv_skb+0x208/0x470 [ 577.080407][T22877] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 577.085918][T22877] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 577.091247][T22877] netlink_unicast+0x82f/0x9e0 [ 577.096069][T22877] ? __pfx_netlink_unicast+0x10/0x10 [ 577.101397][T22877] ? netlink_sendmsg+0x642/0xb30 [ 577.106385][T22877] ? skb_put+0x11b/0x210 [ 577.110650][T22877] netlink_sendmsg+0x805/0xb30 [ 577.115456][T22877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.120767][T22877] ? aa_sock_msg_perm+0xf1/0x1d0 [ 577.125729][T22877] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 577.131031][T22877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.136365][T22877] __sock_sendmsg+0x21c/0x270 [ 577.141074][T22877] ____sys_sendmsg+0x505/0x830 [ 577.145883][T22877] ? __pfx_____sys_sendmsg+0x10/0x10 [ 577.151184][T22877] ? import_iovec+0x74/0xa0 [ 577.155755][T22877] ___sys_sendmsg+0x21f/0x2a0 [ 577.160446][T22877] ? __pfx____sys_sendmsg+0x10/0x10 [ 577.165678][T22877] ? futex_wake+0x4b2/0x560 [ 577.170232][T22877] ? __fget_files+0x2a/0x420 [ 577.174845][T22877] ? __fget_files+0x3a0/0x420 [ 577.179526][T22877] __x64_sys_sendmsg+0x19b/0x260 [ 577.184524][T22877] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 577.190028][T22877] ? rcu_is_watching+0x15/0xb0 [ 577.194877][T22877] ? rcu_is_watching+0x15/0xb0 [ 577.199672][T22877] do_syscall_64+0xfa/0x3b0 [ 577.204224][T22877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.210295][T22877] ? clear_bhb_loop+0x60/0xb0 [ 577.215024][T22877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.220948][T22877] RIP: 0033:0x7f79d718ebe9 [ 577.225402][T22877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.245063][T22877] RSP: 002b:00007f79d53d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.253548][T22877] RAX: ffffffffffffffda RBX: 00007f79d73b6090 RCX: 00007f79d718ebe9 [ 577.261525][T22877] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 0000000000000004 [ 577.269522][T22877] RBP: 00007f79d7211e19 R08: 0000000000000000 R09: 0000000000000000 [ 577.277524][T22877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.285533][T22877] R13: 00007f79d73b6128 R14: 00007f79d73b6090 R15: 00007fff5fe4b678 [ 577.293569][T22877] [ 577.296612][T22877] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 577.303920][T22877] CPU: 0 UID: 0 PID: 22877 Comm: syz.4.4617 Not tainted syzkaller #0 PREEMPT(full) [ 577.313321][T22877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 577.323421][T22877] Call Trace: [ 577.326710][T22877] [ 577.329662][T22877] dump_stack_lvl+0x99/0x250 [ 577.334267][T22877] ? __asan_memcpy+0x40/0x70 [ 577.338867][T22877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 577.344095][T22877] ? __pfx__printk+0x10/0x10 [ 577.348882][T22877] vpanic+0x281/0x750 [ 577.352888][T22877] ? __pfx__printk+0x10/0x10 [ 577.357492][T22877] ? __pfx_vpanic+0x10/0x10 [ 577.362006][T22877] ? is_bpf_text_address+0x26/0x2b0 [ 577.367229][T22877] panic+0xb9/0xc0 [ 577.370956][T22877] ? __pfx_panic+0x10/0x10 [ 577.375394][T22877] __warn+0x31b/0x4b0 [ 577.379384][T22877] ? rt6_multipath_rebalance+0x455/0x8b0 [ 577.385032][T22877] ? rt6_multipath_rebalance+0x455/0x8b0 [ 577.390675][T22877] report_bug+0x2be/0x4f0 [ 577.395019][T22877] ? rt6_multipath_rebalance+0x455/0x8b0 [ 577.400663][T22877] ? rt6_multipath_rebalance+0x455/0x8b0 [ 577.406314][T22877] ? rt6_multipath_rebalance+0x457/0x8b0 [ 577.411958][T22877] handle_bug+0x84/0x160 [ 577.416212][T22877] exc_invalid_op+0x1a/0x50 [ 577.420736][T22877] asm_exc_invalid_op+0x1a/0x20 [ 577.425591][T22877] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0 [ 577.431842][T22877] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 5d 0a f2 f7 e9 78 fe ff ff e8 13 9f 8e f7 eb 05 e8 0c 9f 8e f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 577.451460][T22877] RSP: 0018:ffffc90003e6e580 EFLAGS: 00010287 [ 577.457542][T22877] RAX: ffffffff8a310c1d RBX: dffffc0000000000 RCX: 0000000000080000 [ 577.465531][T22877] RDX: ffffc9000de92000 RSI: 0000000000015447 RDI: 0000000000015448 [ 577.473532][T22877] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 577.481526][T22877] R10: dffffc0000000000 R11: fffff520007cdca8 R12: ffff88805ed6f0de [ 577.489509][T22877] R13: ffff88805ed6f090 R14: 0000000000000000 R15: 1ffff1100bdade12 [ 577.497500][T22877] ? rt6_multipath_rebalance+0x44d/0x8b0 [ 577.503165][T22877] fib6_ifup+0x14a/0x180 [ 577.507418][T22877] ? __pfx_fib6_ifup+0x10/0x10 [ 577.512195][T22877] fib6_clean_node+0x24a/0x590 [ 577.516974][T22877] ? __pfx_fib6_clean_node+0x10/0x10 [ 577.522285][T22877] ? rcu_is_watching+0x15/0xb0 [ 577.527066][T22877] fib6_walk_continue+0x67b/0x910 [ 577.532110][T22877] fib6_walk+0x149/0x290 [ 577.536363][T22877] __fib6_clean_all+0x234/0x380 [ 577.541225][T22877] ? __fib6_clean_all+0x9b/0x380 [ 577.546184][T22877] ? __pfx_fib6_ifup+0x10/0x10 [ 577.550956][T22877] ? __pfx___fib6_clean_all+0x10/0x10 [ 577.556348][T22877] ? __pfx_fib6_clean_node+0x10/0x10 [ 577.561652][T22877] ? __pfx_fib6_ifup+0x10/0x10 [ 577.566447][T22877] ? addrconf_mod_dad_work+0xb9/0x120 [ 577.571829][T22877] rt6_sync_up+0x128/0x160 [ 577.576259][T22877] ? __pfx_rt6_sync_up+0x10/0x10 [ 577.581211][T22877] ? do_raw_read_unlock+0x3d/0x80 [ 577.586246][T22877] addrconf_notify+0xd55/0x1010 [ 577.591130][T22877] notifier_call_chain+0x1b3/0x3e0 [ 577.596249][T22877] __dev_notify_flags+0x21b/0x2e0 [ 577.601282][T22877] ? __pfx___dev_notify_flags+0x10/0x10 [ 577.606828][T22877] ? __dev_change_flags+0x4cc/0x6d0 [ 577.612036][T22877] ? netif_state_change+0x29e/0x3a0 [ 577.617256][T22877] ? __pfx_generic_xdp_install+0x10/0x10 [ 577.622904][T22877] ? __pfx_netif_state_change+0x10/0x10 [ 577.628463][T22877] netif_change_flags+0xe8/0x1a0 [ 577.633409][T22877] do_setlink+0xc55/0x41c0 [ 577.637828][T22877] ? rcu_is_watching+0x15/0xb0 [ 577.642602][T22877] ? __schedule+0x17ae/0x4cc0 [ 577.647304][T22877] ? __pfx_do_setlink+0x10/0x10 [ 577.652159][T22877] ? do_raw_spin_lock+0x121/0x290 [ 577.657198][T22877] ? rcu_is_watching+0x15/0xb0 [ 577.661987][T22877] ? rcu_is_watching+0x15/0xb0 [ 577.666768][T22877] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 577.672679][T22877] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 577.679029][T22877] ? rcu_is_watching+0x15/0xb0 [ 577.683797][T22877] ? __mutex_lock+0xd3b/0x1350 [ 577.688566][T22877] ? __mutex_lock+0x5bb/0x1350 [ 577.693342][T22877] ? rtnl_newlink+0x8db/0x1c70 [ 577.698129][T22877] ? __pfx___mutex_lock+0x10/0x10 [ 577.703159][T22877] ? ns_capable+0x8a/0xf0 [ 577.707495][T22877] ? rtnl_link_get_net_capable+0x16a/0x350 [ 577.713308][T22877] rtnl_newlink+0x149f/0x1c70 [ 577.718002][T22877] ? netlink_sendmsg+0x805/0xb30 [ 577.722951][T22877] ? __pfx_rtnl_newlink+0x10/0x10 [ 577.728012][T22877] ? rcu_is_watching+0x15/0xb0 [ 577.732786][T22877] ? nlmon_xmit+0xb0/0x100 [ 577.737215][T22877] ? kmem_cache_free+0x18f/0x400 [ 577.742175][T22877] ? rcu_is_watching+0x15/0xb0 [ 577.746943][T22877] ? __dev_queue_xmit+0x27b/0x3b50 [ 577.752065][T22877] ? __local_bh_enable_ip+0x12d/0x1c0 [ 577.757444][T22877] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 577.763170][T22877] ? __dev_queue_xmit+0x27b/0x3b50 [ 577.768291][T22877] ? lock_release+0x4b/0x3e0 [ 577.772896][T22877] ? __dev_queue_xmit+0x27b/0x3b50 [ 577.778066][T22877] ? __dev_queue_xmit+0x27b/0x3b50 [ 577.783198][T22877] ? __dev_queue_xmit+0x1d79/0x3b50 [ 577.788412][T22877] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 577.793540][T22877] ? rcu_is_watching+0x15/0xb0 [ 577.798313][T22877] ? lock_release+0x4b/0x3e0 [ 577.802920][T22877] ? bpf_lsm_capable+0x9/0x20 [ 577.807620][T22877] ? security_capable+0x7e/0x2e0 [ 577.812582][T22877] ? __pfx_rtnl_newlink+0x10/0x10 [ 577.817626][T22877] rtnetlink_rcv_msg+0x7cc/0xb70 [ 577.822602][T22877] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 577.827746][T22877] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 577.833225][T22877] ? ref_tracker_free+0x63a/0x7d0 [ 577.838265][T22877] ? __asan_memcpy+0x40/0x70 [ 577.842861][T22877] ? __pfx_ref_tracker_free+0x10/0x10 [ 577.848254][T22877] netlink_rcv_skb+0x208/0x470 [ 577.853049][T22877] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 577.858542][T22877] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 577.863873][T22877] netlink_unicast+0x82f/0x9e0 [ 577.868666][T22877] ? __pfx_netlink_unicast+0x10/0x10 [ 577.873968][T22877] ? netlink_sendmsg+0x642/0xb30 [ 577.878912][T22877] ? skb_put+0x11b/0x210 [ 577.883179][T22877] netlink_sendmsg+0x805/0xb30 [ 577.887961][T22877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.893270][T22877] ? aa_sock_msg_perm+0xf1/0x1d0 [ 577.898213][T22877] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 577.903510][T22877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.908803][T22877] __sock_sendmsg+0x21c/0x270 [ 577.913510][T22877] ____sys_sendmsg+0x505/0x830 [ 577.918290][T22877] ? __pfx_____sys_sendmsg+0x10/0x10 [ 577.923607][T22877] ? import_iovec+0x74/0xa0 [ 577.928122][T22877] ___sys_sendmsg+0x21f/0x2a0 [ 577.932826][T22877] ? __pfx____sys_sendmsg+0x10/0x10 [ 577.938032][T22877] ? futex_wake+0x4b2/0x560 [ 577.942565][T22877] ? __fget_files+0x2a/0x420 [ 577.947175][T22877] ? __fget_files+0x3a0/0x420 [ 577.951872][T22877] __x64_sys_sendmsg+0x19b/0x260 [ 577.956823][T22877] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 577.962290][T22877] ? rcu_is_watching+0x15/0xb0 [ 577.967063][T22877] ? rcu_is_watching+0x15/0xb0 [ 577.971831][T22877] do_syscall_64+0xfa/0x3b0 [ 577.976343][T22877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.982418][T22877] ? clear_bhb_loop+0x60/0xb0 [ 577.987106][T22877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.993012][T22877] RIP: 0033:0x7f79d718ebe9 [ 577.997433][T22877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.017048][T22877] RSP: 002b:00007f79d53d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 578.025472][T22877] RAX: ffffffffffffffda RBX: 00007f79d73b6090 RCX: 00007f79d718ebe9 [ 578.033450][T22877] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 0000000000000004 [ 578.041438][T22877] RBP: 00007f79d7211e19 R08: 0000000000000000 R09: 0000000000000000 [ 578.049444][T22877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 578.057433][T22877] R13: 00007f79d73b6128 R14: 00007f79d73b6090 R15: 00007fff5fe4b678 [ 578.065429][T22877] [ 578.068837][T22877] Kernel Offset: disabled [ 578.073162][T22877] Rebooting in 86400 seconds..