last executing test programs: 32.811387971s ago: executing program 3 (id=3531): r0 = socket(0x1f, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x200, {0x1d, 0x1, 0x8}, [@CGW_DST_IF={0x8, 0xa, r2}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x40020) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000000)={0x2a, 0x2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114e00000000008510000002000000850000004800000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000040)='9\x00\x00\x00', 0x4}], 0x1) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0xffff}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x0) 32.116763287s ago: executing program 3 (id=3539): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x7b}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) syz_emit_ethernet(0x14d, &(0x7f0000000a40)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb8100000086dd6d4f022c011311fffc0200"], 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x8a, 0x0, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x5, 0xe, 0x0, &(0x7f0000000000)="251200d800"/14, 0x0, 0x7ff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$rds(r9, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r10, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4004844) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900", @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 32.093685368s ago: executing program 1 (id=3540): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000000c0)=0x2, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x8c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x3}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xa}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x3}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xfc}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}]}]}, 0x8c}}, 0x0) 32.046644072s ago: executing program 1 (id=3541): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x5c14d826, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000280)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r6 = socket$inet_sctp(0x2, 0x5, 0x84) close(r6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x1574, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc83}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="543e8fdd985b537519e900000002060102000000000100000005000000050a0500010000000900020073797a3000000000050005000200000012000300686173683a6e65742c706f727500000005000400000000"], 0x54}, 0x1, 0x0, 0x0, 0xc040}, 0x0) sendmsg$inet_sctp(r6, &(0x7f0000000400)={0x0, 0x4000, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r8}}], 0x20, 0x2400e044}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000000c0)={r8, 0x6}, 0x8) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r10, 0x0, 0x40000000000000d, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b509020002000000739a04fe00000000b509000001000000c39a04fee1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000006bf9800000000000056080000010000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket(0x10, 0x803, 0x0) unshare(0x2040400) r12 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r12, 0x3a, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) setsockopt$inet6_tcp_int(r11, 0x6, 0x30, &(0x7f0000000180)=0xd, 0x4) 31.982401081s ago: executing program 0 (id=3542): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r2, @ANYRES8=r1, @ANYBLOB="0001000008a600004400128009000100766c616e00000000340002800600010001000000280003800c040000027f000000ff000000408e00000c000100ff7f0000fe0f0000b70bc4b27c31d5e15f1c0449ec11cb9db889a59447a8", @ANYRES32=r2, @ANYBLOB], 0x6c}, 0x1, 0xba01, 0x0, 0x8000}, 0x810) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r3, 0x0) listen(r4, 0x2) r5 = socket$unix(0x1, 0x2, 0x0) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 32) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) (rerun: 32) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x13023) sendto$inet6(r6, &(0x7f00000003c0)="44310f3e003cbda8dd78760d7ba4b502f5cc9175428393538f7b095d4fe843004557f70d241e020d4202af89388e1dcbfb1e6850d16ddaf33457ddc62ae8e418a26c967335681ef2a4a0c937eea811762eab9574141a7594d07282e011941b5cb3945295233abaed3dd518a7359b6c14d4f1fab15d886ced41f45dcd8be75022cbc19791b8f1ff98aed3e1636790a7179173689e464860c745cbe652bc1a1c9cd5", 0xa1, 0x4000000, 0x0, 0x0) (async, rerun: 64) connect$unix(r5, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x15) (async, rerun: 64) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x50) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000200)={@private2={0xfc, 0x2, '\x00', 0x1}, r2}, 0x14) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) (async, rerun: 64) sendto$inet6(r7, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) (async, rerun: 64) sendto$inet6(r7, 0x0, 0x0, 0x40000, 0x0, 0x0) (async) recvfrom(r7, &(0x7f0000001a80)=""/4058, 0xfda, 0xc0020447, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', r2, 0x2f, 0x81, 0x80, 0x7f, 0xc, @mcast2, @rand_addr=' \x01\x00', 0x8, 0x8, 0x4, 0xe768}}) 31.854920079s ago: executing program 0 (id=3544): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x89b1, &(0x7f0000000040)={'bond0\x00', 0x7fff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1={0xff, 0x0}, @loopback={0x0, 0xffff888101827518}}}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000100039042abd0798a1e80000000f0000", @ANYRES32=0x0, @ANYBLOB="011800001bb30000"], 0x20}}, 0x0) 31.106712374s ago: executing program 3 (id=3546): r0 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x147f, &(0x7f0000002d80)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "d0ca5f", 0x1449, 0x2f, 0x1, @local, @private1, {[@dstopts={0xc, 0x1, '\x00', [@pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x4}]}, @fragment={0x2, 0x0, 0x6, 0x0, 0x0, 0x4, 0x68}, @dstopts={0x0, 0xd, '\x00', [@hao={0xc9, 0x10, @private2}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x958a, [0x9, 0x76]}}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @ra={0x5, 0x2, 0x2}, @jumbo={0xc2, 0x4, 0xa}]}, @fragment={0xc, 0x0, 0x14, 0x1, 0x0, 0x2, 0x64}, @routing={0x2c, 0x14, 0x2, 0x19, 0x0, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @private2={0xfc, 0x2, '\x00', 0x2}]}, @routing={0x84, 0x6, 0x1, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3b}, @private2={0xfc, 0x2, '\x00', 0x1}, @private2]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x8d, 0x0, [0x1ff, 0x23e], "394d249bf798aa3e05eb1136a2adbee6b3dfc3aa03cf72c8e9863a778f49d82d17d968d77a05e6f6aaec68dcaa922d1d3d10fd013d092eac3e0468c723d2ae73327bd62517469fa1598c4bc6edbf8e45682f2b85187552437695c9a4c96cadc0d7d471aaec9b41f24578e0fcbfc405387569bc976260faffbf880e4eb5a1873dab7167fc4d07449ca0d9ef428a"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0xdba, 0x8, 0x0], "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"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x400, 0x2, 0x6], "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"}, {0x8, 0x88be, 0x0, {{0xd, 0x1, 0x7, 0x1, 0x1, 0x3, 0x5, 0x6}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x4, {{0x9, 0x2, 0x7, 0x3, 0x0, 0x1, 0x5, 0x9}, 0x2, {0x3, 0xfffc, 0x3, 0x7, 0x0, 0x1, 0x3, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "145da0e351b3dfdd5ce7021ee65bb457d29874c53a6164d66400e9381ea3c77485aa3591918fe2c1f852f07f09088acea99024cbc41d38ffe06b1dabbd8c78ba07223b7b341768f9548d1b7e92d7f3521b13364e14d00cc7d21e3f684e2cdb65f6d6a9c3665a10fe80888d5ae8b2ad5896fc2a4ab0ddec39bae5f894fe360f11f6e1e5ad90e84dcb9df708fd15b29da65a8170221597443a44d786c742c2f2ec01f5ff851d13b5c4a2e8300fc9d0007c28f75789b8d73fb39b7b0f3dcda573ed13eaca128c71cbe2cb7d926993df49918e7f43e2f753f36907856a30e93ddaf0aa71aef71a"}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x1, 0x0, 0xfffffffd}, 0x20}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x8, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x25, 0x2, {{0x200, 0x5, 0x1, 0x0, 0xf407}, 0xfffffffb, 0x0, 0x0, 0x4, 0x7, 0x0, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@local, @mcast1, @empty, 0x7fff, 0x2, 0x80, 0x100, 0xfffffffffffffff7, 0xf0004d, r3}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'caif0\x00', 0x0}) r6 = socket$l2tp(0x2, 0x2, 0x73) getpeername$inet(r6, &(0x7f0000000180)={0x2, 0x0, @dev}, &(0x7f00000001c0)=0x10) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000008, 0x1010, r0, 0x6bb6f000) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="14000200fe8000000000000000000000000000aa08000900", @ANYRES8=r4], 0x48}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 31.105855953s ago: executing program 2 (id=3547): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1, 0x0, 0x3}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) sendmmsg$inet6(r0, &(0x7f0000002340)=[{{&(0x7f00000000c0)={0xa, 0x4e1d, 0x0, @private2={0xfc, 0x2, '\x00', 0x11}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000000)="4f4d63304f7e1f55a1f9064dd8ec1e184ddc4fffa7a068ce1660df085c861bd04bd7f2251e9eba28c156", 0x2a}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0xe2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10000}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x2, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x74, 0x5, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_team\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}, 0x1, 0x0, 0x0, 0x20048001}, 0x40080d0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES8=r0], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000814) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0x2b, &(0x7f0000000100)=0xe, 0x4) shutdown(r0, 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040)={r6}, &(0x7f0000000100)=0x8) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000200)={0x7, 'pimreg\x00', {0x4}, 0x5}) 31.10546943s ago: executing program 4 (id=3548): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="05"], 0x1c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x40000) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a090914"], 0x44}, 0x1, 0x1000000}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$FICLONE(r4, 0x40049409, r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x48, r0, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfffffff7, 0x61}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d964a4d772"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20044080}, 0x40850) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00"/20, @ANYRES32=0x1], 0x48) (async, rerun: 64) r6 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x34, r8, 0x7, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x20000004) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) (rerun: 64) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004a00003c0000000000069078ac141400ac1e00018903c9440c05000000005354000000440400000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780800"], 0x0) 30.826678632s ago: executing program 2 (id=3549): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x0, 0xe, 0xa, &(0x7f0000000100)="e0b9e654d387dbe9abc8ac6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$tun(r2, &(0x7f00000001c0)={@void, @val={0x1, 0x0, 0xe38, 0x2, 0x2, 0x7}, @llc={@snap={0xaa, 0xaa, "b32e", '7Fx', 0x6f6ccc67d8586877, "ba1e53930bcd624e5ccab3eda287c7e73e5cc41e1fc544b35f12b879dcd01748d22721eaaa734035c2f2d2d149aec100042b725327e2fa77d532c57d8c3e8a93ae84b97b9880979ec5f827d8041eed71ca76aa10ac84b3fc4b92a3633b629af331a20c90e05ed167516a6dd239bce22b7a3925f781d177d270c8791206cdc1d486b707d328b7f1e4a582cd8c577128c178e9de8b7f957adf88ee64b522f61fa3db52307b105d440870853604eb7f37d62f068b223c761b6d"}}}, 0xcb) 30.776844794s ago: executing program 3 (id=3550): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000007d80)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000007cc0)=ANY=[@ANYBLOB="140000006a0015ff"], 0x14}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r2, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x4, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 30.776145924s ago: executing program 4 (id=3551): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000001c0)=@generic={0x2, 0x5, 0x4}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000680)=@ethtool_ts_info}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @ptr, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async, rerun: 32) socket(0x10, 0x3, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(r4, 0x0) (async, rerun: 64) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) (rerun: 64) shutdown(r4, 0x0) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdff}, 0x80) (async, rerun: 64) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x0) (rerun: 64) ppoll(&(0x7f0000000080)=[{r5}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="aed8c0d3", @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050009000000"], 0x24}}, 0x0) 30.758068371s ago: executing program 0 (id=3552): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000007800)=0xffffffff00000041, 0x8) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) (async) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) listen(r2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f0000000140)=""/19, &(0x7f0000000180)=0x13) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x1}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) socket$unix(0x1, 0x5, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004804) socket(0x2, 0x80805, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) (async) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYRES8], &(0x7f00000000c0)='GPL\x00'}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r7, &(0x7f00000001c0)="e9d4b2e60d1c80", &(0x7f0000000140)=@tcp6}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r7, &(0x7f00000001c0)="e9d4b2e60d1c80", &(0x7f0000000140)=@tcp6}, 0x20) sendmmsg$inet6(r5, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="3e558cdf3709c4ef28d376b0dcf702e70a505fce677d89b873532fe77f6da51b7fd566b40e23856bb2d54de31f7b391d35989cf27c5485a24544793b45e706765cfa1c5f355cac0598e98752e4640ffc81925f1c606b92829feea5067d6aac92817850dd2e4d13882f4036f08b216c6d6b55e53ce0", 0x75}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0x4}, {0x0}], 0x2}}, {{&(0x7f0000000200)={0xa, 0x4e24, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffff}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000280)="3b06b601954c2d8e75b1011cb2b0e6d16e14fbea978c9db4b81f9f0688e560bdb906", 0x22}, {&(0x7f0000000600)="7ac2f5fb1a7c47dcc91ba8cf634e5f63b0fb7d8b8dbc9b9f18c44b28f225a13fce726e5a27677dc31fb286f70dc2bff5b74bef78e0f6039a9eb01d11b1d292edab1d4bdf37e2f78e6abafe2de3647111f445278dc6f12101e006", 0x5a}, {&(0x7f0000000680)="ce5d14bb922641c31e3fd2a28f833ebef0e69402821e2e985741d197c62d8b26c1fbf836a2166d2ca1cfc6ee547f4d5f0238ec27b9e2806dbff2b3b4cde3c0018ed656de97127041c751caa2ed688c607c08e2649752914096499f59ed41e826c62d12a94a98db0a3b87ef01b170fdc2dfcfaf9ad7d8c4d96d4a", 0x7a}, {&(0x7f0000000480)="99b71abab97fec1001081083c876c44510b3c71236437250e9d3ed9dddb77ba3d5270ca1e5b27234e8d166", 0x2b}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000000700)="35cb1f9071542b07b41ca159d84809ef5a7f50cb54520e585db94e160007d97b0d383914ed7b78a9f74f2d6b6db3ff6c09cfa17e716fb9f9310ccb4e006a89fbd09d7b3edfe92f4917f3ca99746c8a841d5dee6abf76b457495c9718ab4f3c425078bedc1503a48fd3285c6b61e644e3b23b466bc72770eeeb4b15ff5d24b11ed8b85c9bdceaa307abaef122cf5a4a53493f6d85e964ad640a9459878620c2d14e8ce89d5edd6d9f079d34c1fe02bdf44859236355d762367bc5475c6558eb680b5a0cd0acfca1ffce99a9872d0b02251b98d07724b6f10ed79229c0d58a4917", 0xe0}], 0x6}}], 0x3, 0x20004810) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) 30.594441395s ago: executing program 1 (id=3553): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000400000000000f0400000000005f00"], 0x0, 0x28}, 0x20) (async) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000021000000000800000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x3, 0x14) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) (async) r6 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3, 0x4e20, 0x0, 0x2}, {0x0, 0x15000000000000, 0x0, 0x1, 0x8001, 0x7, 0x0, 0xd3d}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x1, 0x1}, {{@in=@empty, 0x4d6, 0x3c}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x1}}, 0xe8) (async) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) (async) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001a0069ae26bd7000000000001c000000ff00000400000000080004025720ed"], 0x24}}, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x3c, 0x0, 0x9, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xd29}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008880}, 0x24000040) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0xf503, 0x0) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x6}, 0x8) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000580)='syzkaller\x00'}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000480)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 30.593974564s ago: executing program 4 (id=3554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}}, 0x0) 30.575887155s ago: executing program 1 (id=3555): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000000c0), &(0x7f0000000240)=r1}, 0x20) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2808004508004400000006000000000000001414004e2200000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c0000000907800031312041db72e5bcf981d4aa90f67d68c0c0c080a0000000c00000009"], 0x0) r2 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}}]}, &(0x7f00000002c0)=0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02}) close(r4) socket$netlink(0x10, 0x3, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/124, 0x7c}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) write$tun(r3, &(0x7f0000001080)={@val={0x0, 0x9300}, @val={0x3, 0x4, 0x5, 0x4, 0xffff, 0x5}, @mpls={[{0x100, 0x0, 0x1}, {0xe}, {0xfffd2}, {0xa1bea}, {0x380}, {0x17}], @generic="bae4f166bad3e54efdb387fa1b8e4215420946c1609b08cf644c264e91b3690254c7b209c48a317ef796ae42fea45382990c784bc44fe4b3d47c45a895db647273d7cca1d15045925cb77bceaadf4ab0ce2dd4ae7efc1ddb27abf60b75acd5a1c2f40c7fa0fc58c40031f55adc7cfe64ac01790d1aaee81df33ada5de3953c374ba5096d1faa83f3f12725d43a2b442e213218ce1e812a09793b94d99018b670196910d2e36de37dcc5a2437bbe46c8d1740313de7e097f0b555d16d0d129fba0f38bbd3efe80f28499dc2b488d6333495e963de29ff3748fc6bbb21c8b9fc"}}, 0x105) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r8) sendmsg$NLBL_CALIPSO_C_ADD(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x24, r9, 0x6a513da061e1002b, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}}, 0x0) getsockopt$bt_hci(r2, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) r10 = socket$netlink(0x10, 0x3, 0x4) r11 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x10, 0x80800) getsockopt$IP_SET_OP_GET_BYINDEX(r10, 0x1, 0x53, &(0x7f00000011c0)={0x7, 0x7, 0x1}, &(0x7f0000001200)=0x28) setsockopt(r11, 0x3, 0x8, &(0x7f0000000080)="9ed358a52c86c0cda5ebcc875e7e5f99c9968a8d2e705dd99eb9beb2ca32092b46d46da218eff9859463e27a1ef7f6434561d395e3b16b6c9084543fe47f84", 0x3f) 30.532139419s ago: executing program 2 (id=3556): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) unshare(0x20000400) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x8, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r7, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newroute={0x4c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x2}, [@loopback]}}}]}, 0x4c}}, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r1, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000240)=0x0) sendmsg$nl_generic(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x14}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0xac, 0x3a, 0x544, 0x70bd29, 0x25dfdbfc, {0x13}, [@generic="c5be6f681fe9a665e90f5777", @nested={0x8c, 0x29, 0x0, 0x1, [@typed={0x8, 0xf4, 0x0, 0x0, @pid=r10}, @generic="c7c1f4ad2705666cd8616bd186d267b9bff408f6d1155112739c7617c4b724b9b922d18b5648dd3cc216ee14392615127f86f6a4c0f128c2e4302a16d1b6da869a5c1a2c235c7de8f45aab29d07daa031a38", @typed={0x8, 0x82, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="1ac47a224987fa67c8577119625349fa0620cc71d368f4f0cefa6426915bbeb1a5e70ba3cd93"]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x4) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000080)) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r12, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x850) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r14, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) 30.442714162s ago: executing program 4 (id=3557): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea0010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a010101000000000000000000000000043500000000010000000000bf0a000000000000fe8000000000000000000000000000aa000004d533"], 0x23c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000300000000000000000000008500a1370000950000003c520000000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0}, 0x94) 30.435799194s ago: executing program 4 (id=3558): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x8001}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000780)="c244"}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r5, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r6 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000180)="98ac3c6741a40ce1997f49fba70d946a07f2178b8bc77dc9339505c7", 0x1c}, {&(0x7f0000000140)="f3e41672c645e11018dc0400000000000000a4c47b311e714b5aab5a85ab5f", 0x1f}, {&(0x7f00000002c0)="390ea240d45db5fcbed46fe54ba61b38faa36d565c3ed3685df9f01173ce90c93393750e9e37617c255ddb6d56", 0x2d}], 0x4, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000240)='F', 0x1, 0x0, &(0x7f0000000200)={0x11, 0x8100, r10, 0x1, 0xe0}, 0x14) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0x4) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) getpeername$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r11, r3, 0x2, 0x5, 0x1}, 0x50) 30.390800308s ago: executing program 0 (id=3559): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x94}]}, 0x10) 30.322649717s ago: executing program 2 (id=3560): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001940)=ANY=[@ANYBLOB="68000000100039042cbd7000eaffffff000003e4", @ANYRES32=r1, @ANYBLOB="8b000400000000004800128008000100736974003c0002800500090029000000060010000b00000008000c000000008006000d000900000006000f0003040000"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xa, 0xb}, {0xfff1, 0xfff2}, {0x2, 0xa}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_RATE={0x6, 0x5, {0xc, 0x5}}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x4}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x44440) 30.295431471s ago: executing program 2 (id=3561): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r2, 0x2, 0x6, @local}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc0000001900010000000000000000001c140000fe000001000000008400120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005001a000d00"], 0xbc}, 0x1, 0x0, 0x0, 0x4000845}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc0000001900010000000000000000001c140000fe000001000000008400120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005001a000d00"], 0xbc}, 0x1, 0x0, 0x0, 0x4000845}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) r7 = socket$nl_audit(0x10, 0x3, 0x9) getpeername$netlink(r7, 0x0, &(0x7f0000000380)) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x220, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x40) 30.213015415s ago: executing program 1 (id=3562): socket$tipc(0x1e, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r0}, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@empty, @rand_addr, 0x0}, &(0x7f0000000140)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x920, 0x40}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@local, 0x4e21, 0x2, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x32, r1, r3}, {0x2, 0x0, 0xffffffffffffffa2, 0x401, 0xffffffff, 0x3, 0x2, 0xfeaf}, {0x3, 0x3, 0x2, 0x92ff}, 0xfffffffb, 0x0, 0x2}, {{@in=@rand_addr=0x64010101, 0x4d3, 0x2b}, 0x2, @in=@rand_addr=0x64010102, 0x8, 0x1, 0x0, 0xf, 0x2, 0x7, 0x9}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c"], 0x20}}, 0x0) 30.094087232s ago: executing program 0 (id=3563): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000010) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x7}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000040)={0x3, '\apl'}, 0x4) 30.085836388s ago: executing program 2 (id=3564): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x3fa, 0x10, 0x70bd26, 0x25dfdbfc, {0x1, 0x0, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x7}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x7, 0x12, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4000007, 0x0, 0x0, 0x0, 0x6000}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}]}, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3c}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x500, 0x29, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$kcm(0xa, 0x2, 0x3a) recvmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10000) setsockopt$sock_attach_bpf(r6, 0x29, 0x21, &(0x7f0000000100), 0x4) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x34, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x6, 0x9, 0x2, 0xedf}}, @TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0xe5ae, 0x7c2, 0x8001, 0xfffffffb}}]}}, @qdisc_kind_options=@q_blackhole={0xe}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x100}]}, 0x78}}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r7, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x401}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8004) 30.075185971s ago: executing program 1 (id=3565): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 32) unshare(0x62040200) (async, rerun: 32) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e1586e8521a654fc2538faaff61c75b305f68d9e6e226e602f10e29e98c99a9db3afbe80cf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) (async) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) sendto$llc(r3, &(0x7f0000000180)="ccd0b1195f16b94bb92206c5e70b0b148b7bfbf7b57bb1c57d7138d231a4ac738a2ed63659dc6899cc1e321965e3d2b442", 0x31, 0x0, &(0x7f00000001c0)={0x1a, 0x312, 0x7f, 0x1, 0x3, 0x6, @broadcast}, 0x10) (async) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x5460, 0x0) (async) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r5, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x4000010) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000", @ANYRES32, @ANYBLOB="06001500"], 0x38}}, 0x8000) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) (async) sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 29.922603155s ago: executing program 4 (id=3566): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000b8000001294", 0x2e}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000280)={r3, 0x1, 0x1, @random="2208cded1150"}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f00000003c0)={r3, 0x1, 0x6, @remote}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) mmap(&(0x7f00006e5000/0x1000)=nil, 0x1000, 0x2000001, 0x40a8011, r4, 0x0) 29.803245456s ago: executing program 0 (id=3567): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT={0x8}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_DST={0x24, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}]}]}, 0xb8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) (async, rerun: 64) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000061000000b70000004000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async, rerun: 64) r4 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64) getsockopt$bt_hci(r4, 0x11e, 0x1, 0x0, &(0x7f0000000300)) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) (async, rerun: 64) r5 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 64) ioctl$int_in(r5, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) (async, rerun: 64) r6 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0xf0, 0x1a, 0x413, 0x0, 0x25dfdbfb, {{@in6=@remote, @in=@loopback, 0x0, 0x4be6, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x11}, 0xf, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x14}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffffffffffc, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf5, 0x0, 0x1000}, 0x0, 0x4, 0xa, 0x1, 0x1}}, 0xf0}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) sendmsg$netlink(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="180000007600"], 0x18}], 0x1, 0x0, 0x0, 0x10}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_type(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r8, &(0x7f0000000280), 0x9) (async) r9 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) 28.163198149s ago: executing program 3 (id=3568): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000006900)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000004c0)="d6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000cc0)="02", 0x1}], 0x1, &(0x7f0000000100)=ANY=[], 0x10}}], 0x2, 0x4004804) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="0207"], 0x10}}, 0x40044) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) 17.882157081s ago: executing program 3 (id=3569): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000080a0103000000000000000001000005080009400000000208000b40000000020c00064000000000000000010c00064000000000000000041c000580080001400000809b080001400000002c08000140000092000c000340000000000000000258000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000414000980100002800c0001800802"], 0xe4}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r3, 0x1, 0x3, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x5}, @GTPA_VERSION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048002}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0xa0, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_HOOK={0x4c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4dd8bb1a}, @NFTA_HOOK_DEV={0x14, 0x3, 'vcan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6c44c223}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2664dfd9}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x130}}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000080)}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) r5 = socket$kcm(0x29, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x120}}, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f0000000040)=@generic={0x3e, "7fcfd98c62bf8a25ef90e020d99b0ab4733cc6cc8525d2f2b40bfc2ca9617fa6555562245556a49849a063a528073c62efeb541a8d343f5752c609bd8bf90ae59f662bb5c7e4310c3dd1cb0e2ef90b470c8006e9008456730dfa5b41d2eb2ab01bd02344bceda60b63f71fa81d2e28e2290d05281583097e52f43cfcbe5d"}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)="3c8f7fd91caa245f43c317e817e2ad50fd9da08fbdc5c954e4c53172be0a79a27db142baa9b07b720ee581c29fc400b73bebc1ee838031a82fe4f23e3a6134f56515d48613dc3265b1f68956e7c8", 0x4e}], 0x1}, 0x4000000) 12.140887063s ago: executing program 32 (id=3567): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT={0x8}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_DST={0x24, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}]}]}, 0xb8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) (async, rerun: 64) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async, rerun: 64) r4 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64) getsockopt$bt_hci(r4, 0x11e, 0x1, 0x0, &(0x7f0000000300)) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) (async, rerun: 64) r5 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 64) ioctl$int_in(r5, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) (async, rerun: 64) r6 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0xf0, 0x1a, 0x413, 0x0, 0x25dfdbfb, {{@in6=@remote, @in=@loopback, 0x0, 0x4be6, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x11}, 0xf, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x14}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffffffffffc, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf5, 0x0, 0x1000}, 0x0, 0x4, 0xa, 0x1, 0x1}}, 0xf0}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) sendmsg$netlink(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="180000007600"], 0x18}], 0x1, 0x0, 0x0, 0x10}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_type(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r8, &(0x7f0000000280), 0x9) (async) r9 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) 8.701338807s ago: executing program 33 (id=3565): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 32) unshare(0x62040200) (async, rerun: 32) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e1586e8521a654fc2538faaff61c75b305f68d9e6e226e602f10e29e98c99a9db3afbe80cf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) (async) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) sendto$llc(r3, &(0x7f0000000180)="ccd0b1195f16b94bb92206c5e70b0b148b7bfbf7b57bb1c57d7138d231a4ac738a2ed63659dc6899cc1e321965e3d2b442", 0x31, 0x0, &(0x7f00000001c0)={0x1a, 0x312, 0x7f, 0x1, 0x3, 0x6, @broadcast}, 0x10) (async) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x5460, 0x0) (async) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r5, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x4000010) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000", @ANYRES32, @ANYBLOB="06001500"], 0x38}}, 0x8000) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) (async) sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 4.901993024s ago: executing program 34 (id=3564): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x3fa, 0x10, 0x70bd26, 0x25dfdbfc, {0x1, 0x0, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x7}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x7, 0x12, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4000007, 0x0, 0x0, 0x0, 0x6000}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}]}, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3c}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x500, 0x29, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$kcm(0xa, 0x2, 0x3a) recvmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10000) setsockopt$sock_attach_bpf(r6, 0x29, 0x21, &(0x7f0000000100), 0x4) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x34, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x6, 0x9, 0x2, 0xedf}}, @TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0xe5ae, 0x7c2, 0x8001, 0xfffffffb}}]}}, @qdisc_kind_options=@q_blackhole={0xe}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x100}]}, 0x78}}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r7, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x401}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8004) 2.710706078s ago: executing program 35 (id=3566): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000b8000001294", 0x2e}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000280)={r3, 0x1, 0x1, @random="2208cded1150"}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f00000003c0)={r3, 0x1, 0x6, @remote}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) mmap(&(0x7f00006e5000/0x1000)=nil, 0x1000, 0x2000001, 0x40a8011, r4, 0x0) 0s ago: executing program 36 (id=3569): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000080a0103000000000000000001000005080009400000000208000b40000000020c00064000000000000000010c00064000000000000000041c000580080001400000809b080001400000002c08000140000092000c000340000000000000000258000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000414000980100002800c0001800802"], 0xe4}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r3, 0x1, 0x3, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x5}, @GTPA_VERSION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048002}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0xa0, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_HOOK={0x4c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4dd8bb1a}, @NFTA_HOOK_DEV={0x14, 0x3, 'vcan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6c44c223}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2664dfd9}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x130}}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000080)}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) r5 = socket$kcm(0x29, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x120}}, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f0000000040)=@generic={0x3e, "7fcfd98c62bf8a25ef90e020d99b0ab4733cc6cc8525d2f2b40bfc2ca9617fa6555562245556a49849a063a528073c62efeb541a8d343f5752c609bd8bf90ae59f662bb5c7e4310c3dd1cb0e2ef90b470c8006e9008456730dfa5b41d2eb2ab01bd02344bceda60b63f71fa81d2e28e2290d05281583097e52f43cfcbe5d"}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)="3c8f7fd91caa245f43c317e817e2ad50fd9da08fbdc5c954e4c53172be0a79a27db142baa9b07b720ee581c29fc400b73bebc1ee838031a82fe4f23e3a6134f56515d48613dc3265b1f68956e7c8", 0x4e}], 0x1}, 0x4000000) kernel console output (not intermixed with test programs): ler0: entered allmulticast mode [ 204.889642][T13799] tipc: Resetting bearer [ 204.901311][T13799] erspan1: entered promiscuous mode [ 205.095052][T13819] tipc: Enabled bearer , priority 0 [ 205.129486][T13819] tipc: Resetting bearer [ 205.136728][T13821] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2111'. [ 205.226056][T13823] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2109'. [ 205.236762][T13818] tipc: Disabling bearer [ 205.260345][T13830] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2112'. [ 205.357454][T13839] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2115'. [ 205.421759][T13834] lo speed is unknown, defaulting to 1000 [ 205.428337][T13843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2114'. [ 205.432772][T13834] wlan1 speed is unknown, defaulting to 1000 [ 205.465305][T13845] veth0_vlan: mtu less than device minimum [ 205.603795][T13859] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2119'. [ 205.724621][T13866] can: request_module (can-proto-4) failed. [ 205.916671][T13885] tipc: Enabled bearer , priority 0 [ 205.924563][T13885] syzkaller0: entered promiscuous mode [ 205.930396][T13885] syzkaller0: entered allmulticast mode [ 205.940613][T13885] tipc: Resetting bearer [ 205.948503][T13884] tipc: Resetting bearer [ 205.955327][T13884] tipc: Disabling bearer [ 206.031614][T13888] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 206.675139][T13934] lo speed is unknown, defaulting to 1000 [ 206.693648][T13934] wlan1 speed is unknown, defaulting to 1000 [ 207.034906][T13955] netlink: 'syz.3.2141': attribute type 1 has an invalid length. [ 207.245163][T13968] tipc: Enabled bearer , priority 0 [ 207.253559][T13968] syzkaller0: entered promiscuous mode [ 207.270363][T13968] syzkaller0: entered allmulticast mode [ 207.295113][T13968] netlink: 'syz.1.2144': attribute type 7 has an invalid length. [ 207.309362][T13968] netlink: 'syz.1.2144': attribute type 8 has an invalid length. [ 207.328467][T13968] tipc: Resetting bearer [ 207.545945][T13989] 8021q: adding VLAN 0 to HW filter on device bond6 [ 207.586741][T13988] bond6: entered promiscuous mode [ 207.594962][T13988] macvlan0: entered promiscuous mode [ 207.607559][T13988] macvlan0: entered allmulticast mode [ 207.624263][T13988] bond6: entered allmulticast mode [ 207.638290][T13988] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 207.740799][T14003] vlan0: entered allmulticast mode [ 207.746083][T14003] bond10: entered allmulticast mode [ 207.764370][T14005] delete_channel: no stack [ 207.771647][T14004] vlan0: entered allmulticast mode [ 207.959265][T13965] tipc: Resetting bearer [ 207.993946][T13965] tipc: Disabling bearer [ 208.152290][T14032] lo speed is unknown, defaulting to 1000 [ 208.163817][T14032] wlan1 speed is unknown, defaulting to 1000 [ 208.278555][T14047] netlink: 'syz.2.2162': attribute type 16 has an invalid length. [ 208.289892][T14047] netlink: 'syz.2.2162': attribute type 17 has an invalid length. [ 208.367176][T14047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.375848][T14047] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.387096][T14047] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 208.403829][ T5190] lo speed is unknown, defaulting to 1000 [ 208.412509][ T5190] syz1: Port: 1 Link ACTIVE [ 208.609339][T14062] nbd0: detected capacity change from 0 to 63 [ 208.620391][T14065] block nbd0: NBD_DISCONNECT [ 208.625746][T14065] block nbd0: Disconnected due to user request. [ 208.636180][T14065] block nbd0: shutting down sockets [ 208.671066][T14062] netlink: 'syz.0.2169': attribute type 1 has an invalid length. [ 208.954505][T14083] rdma_rxe: rxe_newlink: failed to add lo [ 209.229822][T14113] __nla_validate_parse: 19 callbacks suppressed [ 209.229847][T14113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2181'. [ 209.339692][T14120] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2185'. [ 209.455779][T14125] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2186'. [ 209.524338][T14131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2188'. [ 209.593400][T14134] tipc: Enabling of bearer rejected, already enabled [ 209.738194][T14146] netlink: 'syz.4.2192': attribute type 178 has an invalid length. [ 209.819330][T14149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2194'. [ 210.001790][T14161] lo speed is unknown, defaulting to 1000 [ 210.022427][T14161] wlan1 speed is unknown, defaulting to 1000 [ 210.126195][T14174] nbd: must specify at least one socket [ 210.369890][T14195] pim6reg: entered allmulticast mode [ 210.384740][T14194] pim6reg: left allmulticast mode [ 210.497301][T14202] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 210.504930][T14202] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2209'. [ 210.529144][T14202] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 210.611409][T14213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2213'. [ 210.695790][T14223] pimreg: entered allmulticast mode [ 210.761165][T14232] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2218'. [ 210.815687][T14237] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2220'. [ 210.817171][T14235] syzkaller1: entered promiscuous mode [ 210.835185][T14235] syzkaller1: entered allmulticast mode [ 210.942923][T14245] netlink: 'syz.0.2221': attribute type 1 has an invalid length. [ 210.970312][T14245] netlink: 'syz.0.2221': attribute type 2 has an invalid length. [ 210.978295][T14245] netlink: 'syz.0.2221': attribute type 8 has an invalid length. [ 210.998404][T14245] netlink: 1148 bytes leftover after parsing attributes in process `syz.0.2221'. [ 211.186531][T14256] batman_adv: batadv0: Adding interface: ip6gretap1 [ 211.196907][T14264] netlink: 'syz.3.2228': attribute type 1 has an invalid length. [ 211.204789][T14256] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.204829][T14256] batman_adv: batadv0: Interface activated: ip6gretap1 [ 211.305330][T14273] tipc: Cannot configure node identity twice [ 211.417516][T14277] syzkaller0: entered promiscuous mode [ 211.423223][T14277] syzkaller0: entered allmulticast mode [ 211.465029][T14279] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20000 [ 211.763034][T14298] bridge7: entered allmulticast mode [ 211.773213][T14299] bridge8: entered allmulticast mode [ 211.815165][T14301] macsec0: entered allmulticast mode [ 212.073528][T14320] lo speed is unknown, defaulting to 1000 [ 212.080862][T14320] wlan1 speed is unknown, defaulting to 1000 [ 212.146878][T14326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.180336][T14320] sctp: [Deprecated]: syz.0.2242 (pid 14320) Use of int in maxseg socket option. [ 212.180336][T14320] Use struct sctp_assoc_value instead [ 212.229383][T14332] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 212.256379][T14330] lo speed is unknown, defaulting to 1000 [ 212.263057][T14330] wlan1 speed is unknown, defaulting to 1000 [ 212.460674][T14338] workqueue: Failed to create a rescuer kthread for wq "nfc15_nci_tx_wq": -EINTR [ 212.701275][T14410] validate_nla: 4 callbacks suppressed [ 212.701297][T14410] netlink: 'syz.1.2254': attribute type 8 has an invalid length. [ 212.997413][T14441] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 213.147611][T14447] lo speed is unknown, defaulting to 1000 [ 213.168378][T14447] wlan1 speed is unknown, defaulting to 1000 [ 213.169004][T14452] Unsupported ieee802154 address type: 0 [ 213.210696][T14457] mac80211_hwsim hwsim33 wlan1: entered allmulticast mode [ 213.223260][T14457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.237690][T14457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.247848][T14457] bond2: (slave vti0): Releasing backup interface [ 213.256478][T14462] netlink: 'syz.0.2269': attribute type 41 has an invalid length. [ 213.265128][T14457] bond3: (slave bridge0): Releasing active interface [ 213.276112][T14457] bond0: (slave bridge3): Releasing backup interface [ 213.283382][T14457] bridge3: left promiscuous mode [ 213.288050][T14464] netlink: 'syz.1.2267': attribute type 10 has an invalid length. [ 213.288560][T14457] bridge3: left allmulticast mode [ 213.308525][T14457] bond4: (slave bond5): Releasing backup interface [ 213.326193][T14457] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 213.333364][T14457] batman_adv: batadv0: Removing interface: ip6gretap1 [ 213.387662][T14460] lo speed is unknown, defaulting to 1000 [ 213.395753][T14460] wlan1 speed is unknown, defaulting to 1000 [ 213.639396][T14479] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 213.663642][T14481] 8021q: adding VLAN 0 to HW filter on device bond7 [ 213.690826][T14481] macvlan1: entered promiscuous mode [ 213.696246][T14481] macvlan1: entered allmulticast mode [ 213.703081][T14481] bond7: entered promiscuous mode [ 213.711905][T14481] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 213.719814][T14481] bond7: left promiscuous mode [ 213.863650][T14498] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 213.872697][T14497] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 213.908157][T14498] lo speed is unknown, defaulting to 1000 [ 213.915326][T14498] wlan1 speed is unknown, defaulting to 1000 [ 214.226957][T14516] syzkaller0: left promiscuous mode [ 214.247405][T14516] syzkaller0: left allmulticast mode [ 214.258112][T14516] tipc: Resetting bearer [ 214.313203][T14521] __nla_validate_parse: 17 callbacks suppressed [ 214.313225][T14521] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2285'. [ 214.371648][T14523] netlink: 'syz.4.2286': attribute type 1 has an invalid length. [ 214.393799][T14523] bond11: entered promiscuous mode [ 214.399819][T14523] 8021q: adding VLAN 0 to HW filter on device bond11 [ 214.427130][T14523] 8021q: adding VLAN 0 to HW filter on device bond11 [ 214.434595][T14523] bond11: (slave wireguard0): The slave device specified does not support setting the MAC address [ 214.445731][T14523] bond11: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 214.461874][T14523] bond11: (slave wireguard0): making interface the new active one [ 214.470359][T14523] wireguard0: entered promiscuous mode [ 214.478325][T14523] bond11: (slave wireguard0): Enslaving as an active interface with an up link [ 214.488471][T14524] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 214.512355][T14530] lo speed is unknown, defaulting to 1000 [ 214.569939][T14530] wlan1 speed is unknown, defaulting to 1000 [ 214.752447][T14550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2292'. [ 214.765868][T14550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2292'. [ 214.908032][T14562] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2294'. [ 214.918007][T14562] IPv6: NLM_F_REPLACE set, but no existing node found! [ 214.946128][T14562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.953455][T14562] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 214.965928][T14562] bond0: (slave ip_vti0): Error -95 calling set_mac_address [ 215.028006][T14564] netlink: 'syz.3.2295': attribute type 29 has an invalid length. [ 215.106385][T14570] tipc: Enabling of bearer rejected, already enabled [ 215.120903][T14572] syzkaller0: entered promiscuous mode [ 215.126541][T14572] syzkaller0: entered allmulticast mode [ 215.149978][T14572] tipc: Resetting bearer [ 215.229788][T14581] syz.1.2299 uses old SIOCAX25GETINFO [ 215.452950][T14587] netlink: 'syz.1.2301': attribute type 12 has an invalid length. [ 215.475093][T14591] !: renamed from dummy0 (while UP) [ 215.594080][T14605] netlink: 'syz.0.2306': attribute type 1 has an invalid length. [ 215.630451][T14605] netlink: 'syz.0.2306': attribute type 4 has an invalid length. [ 215.638476][T14605] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2306'. [ 215.673915][T14609] syz_tun: entered allmulticast mode [ 215.685980][T14609] dvmrp8: entered allmulticast mode [ 215.757713][T14609] lo speed is unknown, defaulting to 1000 [ 215.788264][T14609] wlan1 speed is unknown, defaulting to 1000 [ 215.819478][T14620] netlink: 'syz.4.2307': attribute type 23 has an invalid length. [ 215.905857][T14608] syz_tun: left allmulticast mode [ 215.911580][T14608] dvmrp8: left allmulticast mode [ 215.986476][T14630] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20002 [ 216.192141][T14643] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2318'. [ 216.262475][T14647] Unsupported ieee802154 address type: 0 [ 216.366728][T14655] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2321'. [ 216.378248][T14655] netlink: 'syz.2.2321': attribute type 6 has an invalid length. [ 216.424866][T14666] team0: Device hsr_slave_0 is of different type [ 216.527376][T12233] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 216.692655][T14680] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2329'. [ 217.328009][T14723] tipc: Enabling of bearer rejected, already enabled [ 217.345962][T14728] batadv0: entered promiscuous mode [ 217.391258][T14731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2344'. [ 217.408062][T14731] macsec0: entered promiscuous mode [ 217.415525][T14731] batadv0: entered promiscuous mode [ 217.422952][T14731] batadv0: left promiscuous mode [ 217.497089][T14743] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2346'. [ 217.710158][T14762] lo speed is unknown, defaulting to 1000 [ 217.728323][T14762] wlan1 speed is unknown, defaulting to 1000 [ 218.012411][T14785] tipc: Enabled bearer , priority 0 [ 218.036558][T14786] tipc: Enabling of bearer rejected, already enabled [ 218.049828][T14785] syzkaller0: entered promiscuous mode [ 218.061480][T14785] syzkaller0: entered allmulticast mode [ 218.100983][T14788] tipc: Resetting bearer [ 218.186513][T14786] tipc: Resetting bearer [ 218.215039][T14786] tipc: Disabling bearer [ 218.504674][T14810] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 218.519982][T14809] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 218.557723][T14815] validate_nla: 2 callbacks suppressed [ 218.557765][T14815] netlink: 'syz.2.2365': attribute type 7 has an invalid length. [ 218.643005][T14825] lo speed is unknown, defaulting to 1000 [ 218.653224][T14825] wlan1 speed is unknown, defaulting to 1000 [ 218.666826][T14824] IPVS: set_ctl: invalid protocol: 11612 172.20.20.187:21 [ 218.742200][T14843] tipc: Enabling of bearer rejected, failed to enable media [ 218.825451][T14852] netlink: 'syz.2.2375': attribute type 10 has an invalid length. [ 218.834833][T14852] team0: Device 0! is of different type [ 219.131822][T14875] netlink: 'syz.4.2381': attribute type 11 has an invalid length. [ 219.750807][T14881] lo speed is unknown, defaulting to 1000 [ 219.757679][T14881] wlan1 speed is unknown, defaulting to 1000 [ 220.244633][T14895] can: request_module (can-proto-0) failed. [ 220.574754][T14937] __nla_validate_parse: 9 callbacks suppressed [ 220.574778][T14937] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2396'. [ 220.625431][T12229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.646917][T12229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.996674][T14960] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 221.036992][T14960] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 221.077027][T14971] netlink: 528 bytes leftover after parsing attributes in process `syz.2.2402'. [ 221.145344][T14974] netlink: 'syz.4.2405': attribute type 10 has an invalid length. [ 221.180311][T14974] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.188525][T14974] bond0: (slave team0): Enslaving as an active interface with an up link [ 221.230018][T14974] netlink: 'syz.4.2405': attribute type 10 has an invalid length. [ 221.334778][T14982] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2407'. [ 221.493174][T14984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2408'. [ 221.527456][T14990] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2410'. [ 221.556819][T14990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2410'. [ 221.565737][T14987] vlan3: entered promiscuous mode [ 221.590601][T14987] bond0: entered promiscuous mode [ 221.595697][T14987] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 221.630409][T14987] vlan3: entered allmulticast mode [ 221.645938][T14987] bond0: entered allmulticast mode [ 221.656060][T14987] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 221.699132][T14990] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 221.868187][T15006] lo speed is unknown, defaulting to 1000 [ 221.910327][T14996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2411'. [ 221.925931][T15012] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2414'. [ 221.939727][T15006] wlan1 speed is unknown, defaulting to 1000 [ 221.983530][T14996] 8021q: adding VLAN 0 to HW filter on device bond12 [ 222.107632][T15014] 8021q: adding VLAN 0 to HW filter on device bond12 [ 222.135268][T15014] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address [ 222.165707][T15014] bond12: (slave vxcan3): Error -95 calling set_mac_address [ 222.392241][T15041] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2422'. [ 222.401552][T15041] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2422'. [ 222.550730][T15044] tipc: Enabled bearer , priority 0 [ 222.558278][T15044] syzkaller0: entered promiscuous mode [ 222.565144][T15044] syzkaller0: entered allmulticast mode [ 222.614565][T15044] tipc: Resetting bearer [ 222.633531][T15042] tipc: Resetting bearer [ 222.641836][T15042] tipc: Disabling bearer [ 222.793980][T15081] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 222.801268][T15081] IPv6: NLM_F_CREATE should be set when creating new route [ 222.994639][T15108] tipc: Resetting bearer [ 223.127227][T15123] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 223.168063][T15110] tipc: Resetting bearer [ 223.354115][T15137] lo speed is unknown, defaulting to 1000 [ 223.364983][T15137] wlan1 speed is unknown, defaulting to 1000 [ 223.460855][T15150] netlink: 'syz.1.2452': attribute type 19 has an invalid length. [ 223.620492][ T49] tipc: Resetting bearer [ 223.777572][T15169] netlink: 'syz.2.2458': attribute type 39 has an invalid length. [ 224.066548][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.076330][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.098104][T15194] netlink: 'syz.2.2462': attribute type 2 has an invalid length. [ 224.440878][T15210] veth1: entered promiscuous mode [ 224.446601][T15210] bridge7: entered promiscuous mode [ 224.452807][T15210] debugfs: 'hsr0' already exists in 'hsr' [ 224.458560][T15210] Cannot create hsr debugfs directory [ 224.464985][T15210] hsr0: Slave A (veth1) is not up; please bring it up to get a fully working HSR network [ 224.482068][T15210] hsr0: entered promiscuous mode [ 224.527162][T15215] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 224.632744][T15224] openvswitch: netlink: IP tunnel dst address not specified [ 224.876530][T15240] bond0 (unregistering): (slave team0): Releasing backup interface [ 224.918208][T15240] bond0 (unregistering): Released all slaves [ 224.981118][T15249] netlink: 'syz.2.2478': attribute type 14 has an invalid length. [ 224.989178][T15249] netlink: 'syz.2.2478': attribute type 13 has an invalid length. [ 225.035175][T15254] netlink: 'syz.2.2480': attribute type 1 has an invalid length. [ 225.103386][T15261] netlink: 'syz.4.2481': attribute type 10 has an invalid length. [ 225.120374][T15262] netlink: 'syz.4.2481': attribute type 10 has an invalid length. [ 225.174551][T15257] netlink: 'syz.3.2479': attribute type 1 has an invalid length. [ 225.388481][T15280] lo speed is unknown, defaulting to 1000 [ 225.403947][T15280] wlan1 speed is unknown, defaulting to 1000 [ 225.683635][T15317] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 225.696831][T15317] team0: Device ipvlan0 is already an upper device of the team interface [ 225.706117][T15319] __nla_validate_parse: 18 callbacks suppressed [ 225.706136][T15319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2497'. [ 225.721781][T15319] openvswitch: netlink: nsh attr 2560 is out of range max 3 [ 225.733484][T15319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.777478][T15321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2498'. [ 225.878949][T15326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2498'. [ 225.901629][T15326] vlan4: entered allmulticast mode [ 225.906807][T15326] bridge0: entered allmulticast mode [ 225.940561][T15326] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode [ 226.268127][T15360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2508'. [ 226.432879][T15379] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2513'. [ 226.456745][T15365] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2509'. [ 226.501777][T15383] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2514'. [ 226.613526][T15383] veth7: entered promiscuous mode [ 226.625343][T15391] netlink: 'syz.0.2517': attribute type 4 has an invalid length. [ 226.649012][T15387] erspan0: entered allmulticast mode [ 226.949067][T15413] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.012513][T15420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.068242][T15423] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2527'. [ 227.373708][T15452] netlink: 'syz.4.2536': attribute type 15 has an invalid length. [ 227.384147][T15452] netlink: 666 bytes leftover after parsing attributes in process `syz.4.2536'. [ 227.563558][T15462] lo speed is unknown, defaulting to 1000 [ 227.583110][T15462] wlan1 speed is unknown, defaulting to 1000 [ 227.591163][T15459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2538'. [ 227.950843][T15481] tipc: Resetting bearer [ 228.030932][T15479] tipc: Resetting bearer [ 228.144353][T15492] openvswitch: netlink: EtherType 0 is less than min 600 [ 228.840309][T12229] tipc: Resetting bearer [ 229.036566][T15534] lo speed is unknown, defaulting to 1000 [ 229.060463][T15534] wlan1 speed is unknown, defaulting to 1000 [ 229.813074][T15559] tipc: Resetting bearer [ 229.909481][T15565] validate_nla: 1 callbacks suppressed [ 229.909502][T15565] netlink: 'syz.1.2567': attribute type 1 has an invalid length. [ 229.943475][T15554] tipc: Resetting bearer [ 230.043638][T15565] 8021q: adding VLAN 0 to HW filter on device bond7 [ 230.073214][T15568] 8021q: adding VLAN 0 to HW filter on device bond7 [ 230.088469][T15568] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 230.100826][T15568] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 230.408315][T15584] macsec0: left allmulticast mode [ 230.419235][T15584] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 230.442723][T15584] bond2: left promiscuous mode [ 230.477774][T15584] ip6gre1: left promiscuous mode [ 230.485089][T15584] team1: left promiscuous mode [ 230.490203][T15584] team1: left allmulticast mode [ 230.497360][T15584] bridge4: left allmulticast mode [ 230.512152][T15584] ip6tnl1: left promiscuous mode [ 230.517154][T15584] ip6tnl1: left allmulticast mode [ 230.525553][T15584] bond5: left promiscuous mode [ 230.531594][T15584] bond5: left allmulticast mode [ 230.538079][T15584] bridge5: left allmulticast mode [ 230.545564][T15584] veth0_macvtap: left allmulticast mode [ 230.551511][T15584] macvtap1: left allmulticast mode [ 230.558156][T15584] hsr1: left allmulticast mode [ 230.564584][T15584] syz_tun: left allmulticast mode [ 230.570549][T15584] batadv_slave_0: left allmulticast mode [ 230.583322][T15584] bond6: left promiscuous mode [ 230.588419][T15584] macvlan0: left promiscuous mode [ 230.593603][T15584] macvlan0: left allmulticast mode [ 230.600023][T15584] bridge7: left allmulticast mode [ 230.607805][T15584] bridge8: left allmulticast mode [ 230.660358][ T8523] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.702098][ T8523] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.716311][ T8523] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.809062][ T8523] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.830603][T15605] __nla_validate_parse: 12 callbacks suppressed [ 230.830624][T15605] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2575'. [ 230.884182][T15609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2577'. [ 230.909668][T15609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.951905][ T8523] tipc: Resetting bearer [ 231.138986][T15635] Bluetooth: MGMT ver 1.23 [ 231.310821][T15649] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2585'. [ 231.330236][T15649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2585'. [ 231.474206][T15651] vlan1: entered allmulticast mode [ 231.503464][T15651] dummy0: entered allmulticast mode [ 231.579160][T15659] block nbd0: server does not support multiple connections per device. [ 231.604391][T15659] block nbd0: shutting down sockets [ 231.712783][T15672] netlink: 'syz.4.2594': attribute type 11 has an invalid length. [ 231.740071][T15672] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2594'. [ 231.914718][T15682] lo speed is unknown, defaulting to 1000 [ 231.942554][T15682] wlan1 speed is unknown, defaulting to 1000 [ 232.064740][T15692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2599'. [ 232.092050][T15682] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2596'. [ 232.438417][T15727] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2606'. [ 232.444956][T15726] tipc: Resetting bearer [ 232.463697][T15725] tipc: Resetting bearer [ 232.896347][T15756] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 232.910130][T15753] lo speed is unknown, defaulting to 1000 [ 232.916872][T15753] wlan1 speed is unknown, defaulting to 1000 [ 232.971816][ T8523] tipc: Resetting bearer [ 233.368719][T15772] nbd0: detected capacity change from 0 to 127 [ 233.376346][ T5865] block nbd0: Receive control failed (result -32) [ 233.504920][T15785] lo speed is unknown, defaulting to 1000 [ 233.522127][T15785] wlan1 speed is unknown, defaulting to 1000 [ 233.852686][T15785] netlink: 'syz.0.2626': attribute type 3 has an invalid length. [ 233.862843][T15785] syz_tun: entered allmulticast mode [ 233.881506][T15783] syz_tun: left allmulticast mode [ 233.999546][T15811] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2635'. [ 234.176875][T15827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2638'. [ 236.944844][T15839] tipc: Enabled bearer , priority 0 [ 236.991559][T15839] tipc: Disabling bearer [ 237.092665][T15859] netlink: 'syz.1.2646': attribute type 21 has an invalid length. [ 237.100947][T15859] IPv6: NLM_F_CREATE should be specified when creating new route [ 237.119698][T15859] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 237.126940][T15859] IPv6: NLM_F_CREATE should be set when creating new route [ 237.134226][T15859] IPv6: NLM_F_CREATE should be set when creating new route [ 237.141490][T15859] IPv6: NLM_F_CREATE should be set when creating new route [ 237.288885][T15866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2647'. [ 237.680941][T15878] netlink: 'syz.0.2651': attribute type 1 has an invalid length. [ 237.693889][T15878] netlink: 'syz.0.2651': attribute type 4 has an invalid length. [ 237.706211][T15878] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2651'. [ 237.734221][T15878] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2651'. [ 237.814538][T15889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2654'. [ 237.835025][T15893] vlan1: entered allmulticast mode [ 237.842100][T15893] veth1: entered allmulticast mode [ 237.950621][T15898] tipc: Enabling of bearer rejected, already enabled [ 238.044568][T15905] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2659'. [ 238.080835][T15909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2660'. [ 238.102865][T15909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2660'. [ 238.282158][T15939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2668'. [ 238.292810][T15938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2668'. [ 238.435256][T15977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2672'. [ 238.465137][T15982] netlink: 'syz.3.2674': attribute type 1 has an invalid length. [ 238.952240][T16018] lo speed is unknown, defaulting to 1000 [ 238.963014][T16018] wlan1 speed is unknown, defaulting to 1000 [ 239.099829][T16037] tipc: Enabling of bearer rejected, already enabled [ 239.994600][T16051] netlink: 'syz.1.2687': attribute type 3 has an invalid length. [ 240.354649][T16075] netlink: 'syz.0.2696': attribute type 2 has an invalid length. [ 240.603181][T16086] lo speed is unknown, defaulting to 1000 [ 240.714103][T16086] wlan1 speed is unknown, defaulting to 1000 [ 241.186781][T16131] netlink: 'syz.4.2712': attribute type 18 has an invalid length. [ 241.220207][T16135] tipc: Enabled bearer , priority 0 [ 241.230549][T16135] syzkaller0: entered promiscuous mode [ 241.236058][T16135] syzkaller0: entered allmulticast mode [ 241.252461][T16135] tipc: Resetting bearer [ 241.261245][T16134] tipc: Resetting bearer [ 241.269399][T16134] tipc: Disabling bearer [ 241.545847][T16160] lo speed is unknown, defaulting to 1000 [ 241.576611][T16166] sctp: [Deprecated]: syz.3.2723 (pid 16166) Use of struct sctp_assoc_value in delayed_ack socket option. [ 241.576611][T16166] Use struct sctp_sack_info instead [ 241.592336][T16160] wlan1 speed is unknown, defaulting to 1000 [ 241.833381][T16189] netlink: 'syz.4.2730': attribute type 21 has an invalid length. [ 241.858194][T16189] netlink: 'syz.4.2730': attribute type 22 has an invalid length. [ 241.876586][T16189] netlink: 'syz.4.2730': attribute type 23 has an invalid length. [ 241.897772][T16188] lo speed is unknown, defaulting to 1000 [ 241.907750][T16188] wlan1 speed is unknown, defaulting to 1000 [ 242.185842][T16220] validate_nla: 1 callbacks suppressed [ 242.185863][T16220] netlink: 'syz.1.2737': attribute type 8 has an invalid length. [ 242.388357][T16241] netlink: 'syz.3.2741': attribute type 12 has an invalid length. [ 242.401657][T16228] netlink: 'syz.0.2742': attribute type 4 has an invalid length. [ 242.415382][T16228] syzkaller0: entered allmulticast mode [ 242.852046][T16234] lo speed is unknown, defaulting to 1000 [ 242.872479][T16234] wlan1 speed is unknown, defaulting to 1000 [ 243.365064][T16282] __nla_validate_parse: 19 callbacks suppressed [ 243.365084][T16282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2749'. [ 243.405742][T16282] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2749'. [ 243.641226][T16312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2751'. [ 244.091129][T16329] lo speed is unknown, defaulting to 1000 [ 244.097803][T16329] wlan1 speed is unknown, defaulting to 1000 [ 244.444464][T16358] netlink: 'syz.2.2766': attribute type 11 has an invalid length. [ 244.609641][T16363] lo speed is unknown, defaulting to 1000 [ 244.626972][T16363] wlan1 speed is unknown, defaulting to 1000 [ 245.022079][T16386] lo speed is unknown, defaulting to 1000 [ 245.039768][T16386] wlan1 speed is unknown, defaulting to 1000 [ 245.494328][T16410] netlink: 'syz.2.2779': attribute type 2 has an invalid length. [ 245.578535][T16417] netlink: 'syz.2.2780': attribute type 3 has an invalid length. [ 245.595781][T16416] netlink: 'syz.2.2780': attribute type 3 has an invalid length. [ 245.668422][T16420] netlink: 'syz.2.2783': attribute type 3 has an invalid length. [ 245.682260][T16420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2783'. [ 245.881160][T16442] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2785'. [ 246.067424][T16450] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2788'. [ 246.165039][T16462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2791'. [ 246.270940][T16473] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2791'. [ 246.461656][T16460] batadv_slave_1: left promiscuous mode [ 246.481955][T16460] hsr1: left allmulticast mode [ 246.486830][T16460] syz_tun: left allmulticast mode [ 246.492283][T16460] batadv_slave_0: left allmulticast mode [ 246.507046][T16460] bond0: left promiscuous mode [ 246.515196][T16460] mac80211_hwsim hwsim28 wlan0: left allmulticast mode [ 246.528071][T16460] mac80211_hwsim hwsim33 wlan1: left allmulticast mode [ 246.536074][T16460] vlan4: left allmulticast mode [ 246.541915][T16460] bridge0: left allmulticast mode [ 246.611912][T16467] 8021q: adding VLAN 0 to HW filter on device bond13 [ 246.620456][T16467] bond0: (slave bond13): Enslaving as an active interface with an up link [ 246.642326][T16473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.692578][T16480] tap0: tun_chr_ioctl cmd 1074025677 [ 246.714210][T16480] tap0: linktype set to 805 [ 246.719197][T15968] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.727643][T15968] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.737485][T15968] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.766494][T16485] IPVS: set_ctl: invalid protocol: 4 172.20.20.68:20003 [ 246.767290][T15968] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.796651][T16485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2795'. [ 246.841718][T16485] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2795'. [ 246.971144][T16495] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 247.018517][T16502] bond11: (slave wireguard0): Releasing backup interface [ 247.032754][T16502] wireguard0: left promiscuous mode [ 247.052069][T16502] bond0: (slave bond13): Releasing backup interface [ 247.084466][T16506] tipc: Enabled bearer , priority 0 [ 247.092167][T16511] tipc: Enabling of bearer rejected, already enabled [ 247.126719][T16505] syzkaller0: entered promiscuous mode [ 247.136372][T16505] syzkaller0: entered allmulticast mode [ 247.235341][T16506] tipc: Resetting bearer [ 247.284210][T16506] tipc: Disabling bearer [ 247.418874][T16519] block nbd1: server does not support multiple connections per device. [ 247.430596][T16519] block nbd1: shutting down sockets [ 247.666142][T16534] netlink: 'syz.0.2810': attribute type 1 has an invalid length. [ 247.764859][T16541] bond10: (slave geneve3): making interface the new active one [ 247.781136][T16541] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 247.826527][T15986] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 247.839882][T15986] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 247.864927][T16534] 8021q: adding VLAN 0 to HW filter on device bond10 [ 247.885116][T15986] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 247.899106][T15986] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 247.918934][T16549] netlink: 'syz.2.2812': attribute type 29 has an invalid length. [ 248.274603][T16578] netlink: 'syz.2.2823': attribute type 12 has an invalid length. [ 248.426357][T16596] __nla_validate_parse: 5 callbacks suppressed [ 248.426387][T16596] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2829'. [ 248.521633][T16600] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2831'. [ 248.533901][T16600] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2831'. [ 248.593543][T15943] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.617482][T15943] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.636218][T16603] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 248.669226][T15943] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.678966][T15943] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.912005][T16629] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2839'. [ 249.059525][T16635] lo speed is unknown, defaulting to 1000 [ 249.068268][T16637] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 249.072930][T16635] wlan1 speed is unknown, defaulting to 1000 [ 249.407633][T16663] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2850'. [ 249.517245][T16672] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2851'. [ 249.536382][T16661] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.562075][T16667] lo speed is unknown, defaulting to 1000 [ 249.601115][T16667] wlan1 speed is unknown, defaulting to 1000 [ 249.612397][T16677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2852'. [ 249.737287][T16661] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.823422][T16661] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.968029][T16661] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.097726][T15968] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.133479][T15968] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.173722][T15968] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.212560][T15968] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.274708][T16697] tap0: tun_chr_ioctl cmd 1074025677 [ 250.308981][T16697] tap0: linktype set to 270 [ 250.406154][T16701] lo speed is unknown, defaulting to 1000 [ 250.448024][T16701] wlan1 speed is unknown, defaulting to 1000 [ 250.501650][ T5874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 250.509236][ T5874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 250.516480][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 250.528812][ T5874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 250.536387][ T5874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 250.569893][T16708] lo speed is unknown, defaulting to 1000 [ 250.576590][T16708] wlan1 speed is unknown, defaulting to 1000 [ 250.653724][T15968] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.667117][T15968] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 250.692143][T16716] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2862'. [ 250.741120][T16718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.752886][T16718] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2863'. [ 250.772049][T16718] netlink: 'syz.3.2863': attribute type 1 has an invalid length. [ 250.783230][T15968] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.793845][T15968] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 250.891271][T15968] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.908475][T15968] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 250.947568][T16729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2865'. [ 251.004437][T15968] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.017098][T15968] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 251.033841][T16708] chnl_net:caif_netlink_parms(): no params data found [ 251.045998][T16739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.104540][T16742] netlink: 'syz.1.2868': attribute type 1 has an invalid length. [ 251.170801][T16708] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.182539][T16708] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.191590][T16708] bridge_slave_0: entered allmulticast mode [ 251.199423][T16708] bridge_slave_0: entered promiscuous mode [ 251.222006][T16708] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.235835][T16708] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.249786][T16708] bridge_slave_1: entered allmulticast mode [ 251.262403][T16708] bridge_slave_1: entered promiscuous mode [ 251.293261][T15968] tipc: Resetting bearer [ 251.791761][T15968] tipc: Disabling bearer [ 251.923595][T15968] bond1 (unregistering): Released all slaves [ 251.937499][T15968] bond2 (unregistering): Released all slaves [ 251.951451][T15968] bond3 (unregistering): Released all slaves [ 251.962984][T15968] bond4 (unregistering): Released all slaves [ 251.976370][T15968] bond5 (unregistering): Released all slaves [ 251.988950][T15968] bond6 (unregistering): Released all slaves [ 251.999424][T15968] bond7 (unregistering): Released all slaves [ 252.011100][T15968] bond8 (unregistering): Released all slaves [ 252.021242][T15968] bond9 (unregistering): Released all slaves [ 252.036918][T15968] bond10 (unregistering): Released all slaves [ 252.048411][T15968] bond11 (unregistering): Released all slaves [ 252.061327][T15968] bond12 (unregistering): Released all slaves [ 252.075009][T15968] bond0 (unregistering): Released all slaves [ 252.087141][T15968] bond13 (unregistering): Released all slaves [ 252.173343][T16708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.186672][T16708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.197690][T15968] : left promiscuous mode [ 252.256900][T16775] lo speed is unknown, defaulting to 1000 [ 252.263743][T15968] tipc: Disabling bearer [ 252.288675][T15968] tipc: Left network mode [ 252.292835][T16708] team0: Port device team_slave_0 added [ 252.313524][T16775] wlan1 speed is unknown, defaulting to 1000 [ 252.324494][T16708] team0: Port device team_slave_1 added [ 252.426585][T16708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.436223][T16708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.464713][T16708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.511119][T16708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.528669][T16708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.578988][T16708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.588717][ T5874] Bluetooth: hci0: command tx timeout [ 252.618751][T15968] mac80211_hwsim hwsim20 wlan1 (unregistering): left promiscuous mode [ 252.787346][T16708] hsr_slave_0: entered promiscuous mode [ 252.801336][T16708] hsr_slave_1: entered promiscuous mode [ 252.808024][T16708] debugfs: 'hsr0' already exists in 'hsr' [ 252.813928][T16708] Cannot create hsr debugfs directory [ 252.985332][T15968] hsr_slave_0: left promiscuous mode [ 252.999418][T15968] hsr0: left allmulticast mode [ 253.004605][T15968] hsr0: left promiscuous mode [ 253.226067][T16829] lo speed is unknown, defaulting to 1000 [ 253.239479][T16832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.247920][T16829] wlan1 speed is unknown, defaulting to 1000 [ 253.409789][T16840] lo speed is unknown, defaulting to 1000 [ 253.416582][T16840] wlan1 speed is unknown, defaulting to 1000 [ 253.425690][T16842] netlink: 'syz.1.2891': attribute type 1 has an invalid length. [ 253.456074][T16842] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 253.544002][T16850] bond0: Unable to set down delay as MII monitoring is disabled [ 253.611605][T16854] __nla_validate_parse: 3 callbacks suppressed [ 253.611624][T16854] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2893'. [ 253.627855][T16854] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2893'. [ 253.680233][T16708] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 253.690369][T16708] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 253.700144][T16708] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 253.720639][T16708] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 253.745990][T15968] IPVS: stop unused estimator thread 0... [ 253.820294][T16863] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2894'. [ 253.883018][T16708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.063612][T16708] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.089226][T16869] tipc: Enabling of bearer rejected, failed to enable media [ 254.108080][T15987] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.115251][T15987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.123629][T16876] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2898'. [ 254.203424][T15987] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.210610][T15987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.347587][T16885] mac80211_hwsim hwsim2 ªªªªª": renamed from wlan0 [ 254.671214][ T5874] Bluetooth: hci0: command tx timeout [ 254.686390][T16708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.008393][T16923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2910'. [ 255.115806][T16708] veth0_vlan: entered promiscuous mode [ 255.164434][T16708] veth1_vlan: entered promiscuous mode [ 255.205295][T16708] veth0_macvtap: entered promiscuous mode [ 255.246750][T16708] veth1_macvtap: entered promiscuous mode [ 255.279453][T16708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.303727][T16708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.370679][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.382018][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.394390][T16936] netlink: 'syz.0.2913': attribute type 11 has an invalid length. [ 255.403444][T16936] netlink: 'syz.0.2913': attribute type 4 has an invalid length. [ 255.417559][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.431595][T16936] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2913'. [ 255.442979][T16938] netlink: 'syz.0.2913': attribute type 11 has an invalid length. [ 255.455763][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.459304][T16938] netlink: 'syz.0.2913': attribute type 4 has an invalid length. [ 255.505185][T16938] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2913'. [ 255.640252][T15968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.648122][T15968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.686627][T16946] tipc: Enabling of bearer rejected, failed to enable media [ 255.701268][T16948] netlink: 'syz.1.2917': attribute type 1 has an invalid length. [ 255.712414][T15968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.738770][T15968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.756835][T16948] 8021q: adding VLAN 0 to HW filter on device bond8 [ 255.882857][T16959] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 255.950655][T16959] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 256.021718][T16970] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2917'. [ 256.094201][T16948] veth9: entered promiscuous mode [ 256.121814][T16948] bond8: (slave veth9): Enslaving as an active interface with a down link [ 256.135366][T16970] erspan0: entered allmulticast mode [ 256.253131][T16980] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.2921'. [ 256.317046][T16983] tipc: Enabled bearer , priority 0 [ 256.343717][T16983] syzkaller0: entered promiscuous mode [ 256.361222][T16983] syzkaller0: entered allmulticast mode [ 256.375843][T16985] tipc: Started in network mode [ 256.384257][T16985] tipc: Node identity 867cb183377, cluster identity 4711 [ 256.391566][T16985] tipc: Enabled bearer , priority 0 [ 256.409833][T16983] lo speed is unknown, defaulting to 1000 [ 256.416743][T16985] syzkaller0: entered promiscuous mode [ 256.423572][T16985] syzkaller0: entered allmulticast mode [ 256.430407][T16983] wlan1 speed is unknown, defaulting to 1000 [ 256.441036][T16984] tipc: Resetting bearer [ 256.453971][T16984] tipc: Disabling bearer [ 256.749045][ T5874] Bluetooth: hci0: command tx timeout [ 257.209317][T16982] tipc: Resetting bearer [ 257.240214][T16982] tipc: Disabling bearer [ 257.590216][T17035] tipc: Resetting bearer [ 257.617578][T17035] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2937'. [ 257.617617][T16981] syz.0.2919: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 257.652227][T17034] tipc: Resetting bearer [ 257.685961][T16981] CPU: 0 UID: 0 PID: 16981 Comm: syz.0.2919 Not tainted syzkaller #0 PREEMPT(full) [ 257.685991][T16981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 257.686014][T16981] Call Trace: [ 257.686022][T16981] [ 257.686031][T16981] dump_stack_lvl+0x189/0x250 [ 257.686064][T16981] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 257.686093][T16981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.686117][T16981] ? __pfx__printk+0x10/0x10 [ 257.686142][T16981] ? lock_release+0x4b/0x3e0 [ 257.686172][T16981] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 257.686199][T16981] warn_alloc+0x214/0x310 [ 257.686232][T16981] ? __pfx_warn_alloc+0x10/0x10 [ 257.686266][T16981] ? __get_vm_area_node+0x28f/0x300 [ 257.686294][T16981] ? hash_netnet_create+0x741/0x1440 [ 257.686323][T16981] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 257.686365][T16981] ? alloc_pages_mpol+0x3cd/0x4a0 [ 257.686395][T16981] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 257.686426][T16981] ? rcu_is_watching+0x15/0xb0 [ 257.686446][T16981] ? hash_netnet_create+0x741/0x1440 [ 257.686472][T16981] ? hash_netnet_create+0x741/0x1440 [ 257.686496][T16981] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 257.686524][T16981] ? hash_netnet_create+0x741/0x1440 [ 257.686551][T16981] ? hash_netnet_create+0x6d5/0x1440 [ 257.686588][T16981] hash_netnet_create+0x741/0x1440 [ 257.686620][T16981] ? ip_set_create+0x4a2/0x1940 [ 257.686646][T16981] ? __pfx_hash_netnet_create+0x10/0x10 [ 257.686675][T16981] ? __nla_parse+0x40/0x60 [ 257.686704][T16981] ? __pfx_hash_netnet_create+0x10/0x10 [ 257.686732][T16981] ip_set_create+0xa94/0x1940 [ 257.686756][T16981] ? ip_set_create+0x4a2/0x1940 [ 257.686785][T16981] ? __pfx_ip_set_create+0x10/0x10 [ 257.686820][T16981] ? rcu_is_watching+0x15/0xb0 [ 257.686839][T16981] ? lock_release+0x4b/0x3e0 [ 257.686866][T16981] ? __nla_parse+0x40/0x60 [ 257.686897][T16981] nfnetlink_rcv_msg+0xb4a/0x1130 [ 257.686925][T16981] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 257.686960][T16981] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 257.687012][T16981] ? unwind_next_frame+0xa5/0x2390 [ 257.687033][T16981] ? rcu_is_watching+0x15/0xb0 [ 257.687055][T16981] netlink_rcv_skb+0x205/0x470 [ 257.687086][T16981] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 257.687113][T16981] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 257.687149][T16981] ? bpf_lsm_capable+0x9/0x20 [ 257.687185][T16981] ? security_capable+0x7e/0x2e0 [ 257.687216][T16981] nfnetlink_rcv+0x26a/0x2520 [ 257.687239][T16981] ? is_bpf_text_address+0x26/0x2b0 [ 257.687268][T16981] ? kernel_text_address+0xa5/0xe0 [ 257.687294][T16981] ? __kernel_text_address+0xd/0x40 [ 257.687317][T16981] ? unwind_get_return_address+0x4d/0x90 [ 257.687338][T16981] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 257.687361][T16981] ? arch_stack_walk+0xfc/0x150 [ 257.687389][T16981] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 257.687413][T16981] ? stack_depot_save_flags+0x40/0x860 [ 257.687437][T16981] ? __pfx_stack_trace_save+0x10/0x10 [ 257.687462][T16981] ? kasan_save_track+0x4f/0x80 [ 257.687484][T16981] ? kasan_save_track+0x3e/0x80 [ 257.687506][T16981] ? __kasan_slab_alloc+0x6c/0x80 [ 257.687528][T16981] ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 257.687552][T16981] ? kmalloc_reserve+0xbd/0x290 [ 257.687576][T16981] ? __netlink_lookup+0xbd/0x810 [ 257.687592][T16981] ? rcu_is_watching+0x15/0xb0 [ 257.687611][T16981] ? rcu_is_watching+0x15/0xb0 [ 257.687629][T16981] ? lock_release+0x4b/0x3e0 [ 257.687661][T16981] ? net_generic+0x1e/0x240 [ 257.687682][T16981] ? rcu_is_watching+0x15/0xb0 [ 257.687700][T16981] ? netlink_deliver_tap+0x2e/0x1b0 [ 257.687726][T16981] ? rcu_is_watching+0x15/0xb0 [ 257.687743][T16981] ? netlink_deliver_tap+0x2e/0x1b0 [ 257.687770][T16981] ? rcu_is_watching+0x15/0xb0 [ 257.687786][T16981] ? netlink_deliver_tap+0x2e/0x1b0 [ 257.687814][T16981] ? lock_release+0x4b/0x3e0 [ 257.687840][T16981] ? net_generic+0x1e/0x240 [ 257.687861][T16981] ? net_generic+0x1e/0x240 [ 257.687887][T16981] netlink_unicast+0x82c/0x9e0 [ 257.687916][T16981] ? __pfx_netlink_unicast+0x10/0x10 [ 257.687941][T16981] ? netlink_sendmsg+0x642/0xb30 [ 257.687956][T16981] ? skb_put+0x11b/0x210 [ 257.687975][T16981] netlink_sendmsg+0x805/0xb30 [ 257.688013][T16981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.688032][T16981] ? aa_sock_msg_perm+0xf1/0x1d0 [ 257.688050][T16981] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 257.688071][T16981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.688090][T16981] __sock_sendmsg+0x21c/0x270 [ 257.688117][T16981] ____sys_sendmsg+0x505/0x830 [ 257.688140][T16981] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.688166][T16981] ? import_iovec+0x74/0xa0 [ 257.688190][T16981] ___sys_sendmsg+0x21f/0x2a0 [ 257.688211][T16981] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.688251][T16981] ? __fget_files+0x2a/0x420 [ 257.688268][T16981] ? __fget_files+0x3a0/0x420 [ 257.688290][T16981] __x64_sys_sendmsg+0x19b/0x260 [ 257.688313][T16981] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 257.688332][T16981] ? rcu_is_watching+0x15/0xb0 [ 257.688356][T16981] ? do_user_addr_fault+0xc8a/0x1390 [ 257.688389][T16981] ? rcu_is_watching+0x15/0xb0 [ 257.688409][T16981] do_syscall_64+0xfa/0x3b0 [ 257.688428][T16981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.688447][T16981] ? clear_bhb_loop+0x60/0xb0 [ 257.688469][T16981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.688488][T16981] RIP: 0033:0x7f4d1e38ebe9 [ 257.688506][T16981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.688523][T16981] RSP: 002b:00007f4d1c5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.688546][T16981] RAX: ffffffffffffffda RBX: 00007f4d1e5b6090 RCX: 00007f4d1e38ebe9 [ 257.688568][T16981] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 257.688580][T16981] RBP: 00007f4d1e411e19 R08: 0000000000000000 R09: 0000000000000000 [ 257.688591][T16981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.688603][T16981] R13: 00007f4d1e5b6128 R14: 00007f4d1e5b6090 R15: 00007ffee1a0c328 [ 257.688626][T16981] [ 258.315734][T17044] syzkaller1: entered promiscuous mode [ 258.323568][T17044] syzkaller1: entered allmulticast mode [ 258.349470][T16981] Mem-Info: [ 258.352665][T16981] active_anon:3588 inactive_anon:0 isolated_anon:0 [ 258.352665][T16981] active_file:3212 inactive_file:39905 isolated_file:0 [ 258.352665][T16981] unevictable:768 dirty:186 writeback:0 [ 258.352665][T16981] slab_reclaimable:12710 slab_unreclaimable:133723 [ 258.352665][T16981] mapped:29085 shmem:1378 pagetables:1018 [ 258.352665][T16981] sec_pagetables:0 bounce:0 [ 258.352665][T16981] kernel_misc_reclaimable:0 [ 258.352665][T16981] free:1281888 free_pcp:19441 free_cma:0 [ 258.409881][T16981] Node 0 active_anon:14352kB inactive_anon:0kB active_file:12848kB inactive_file:159420kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116340kB dirty:744kB writeback:0kB shmem:3976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13948kB pagetables:3732kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 258.467850][T16981] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 258.470612][ T49] tipc: Resetting bearer [ 258.524075][T16981] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 258.556025][T16981] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 258.562110][T16981] Node 0 DMA32 free:1228356kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14708kB inactive_anon:0kB active_file:12848kB inactive_file:157840kB unevictable:1536kB writepending:740kB present:3129332kB managed:2557448kB mlocked:0kB bounce:0kB free_pcp:57684kB local_pcp:26928kB free_cma:0kB [ 258.594802][T16981] lowmem_reserve[]: 0 0 1 1 1 [ 258.600157][T16981] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 258.629562][T16981] lowmem_reserve[]: 0 0 0 0 0 [ 258.634330][T16981] Node 1 Normal free:3883824kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19944kB local_pcp:11636kB free_cma:0kB [ 258.666055][T16981] lowmem_reserve[]: 0 0 0 0 0 [ 258.672087][T16981] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 258.685463][T16981] Node 0 DMA32: 1768*4kB (UM) 1506*8kB (UME) 657*16kB (UME) 586*32kB (UME) 588*64kB (UME) 201*128kB (UME) 70*256kB (UM) 34*512kB (UME) 30*1024kB (UME) 5*2048kB (UME) 254*4096kB (UM) = 1228416kB [ 258.705453][T16981] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 258.717955][T16981] Node 1 Normal: 182*4kB (UE) 47*8kB (UME) 36*16kB (UME) 73*32kB (UME) 26*64kB (UME) 8*128kB (UME) 3*256kB (ME) 3*512kB (ME) 2*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3883824kB [ 258.736431][T16981] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 258.746798][T16981] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 258.756316][T16981] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 258.766193][T16981] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 258.775540][T16981] 44492 total pagecache pages [ 258.780400][T16981] 0 pages in swap cache [ 258.784574][T16981] Free swap = 124996kB [ 258.789058][T16981] Total swap = 124996kB [ 258.793235][T16981] 2097051 pages RAM [ 258.797044][T16981] 0 pages HighMem/MovableOnly [ 258.801759][T16981] 425663 pages reserved [ 258.806359][T16981] 0 pages cma reserved [ 258.838712][ T5874] Bluetooth: hci0: command tx timeout [ 258.861794][T17064] netlink: 'syz.2.2946': attribute type 16 has an invalid length. [ 258.892282][T17064] netlink: 'syz.2.2946': attribute type 3 has an invalid length. [ 258.932872][T17068] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2948'. [ 258.949006][T17064] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.2946'. [ 259.050971][T17075] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 259.091215][T17079] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2951'. [ 259.178673][T17081] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 259.186871][T17079] netlink: 'syz.2.2951': attribute type 4 has an invalid length. [ 259.206605][T17079] netlink: 'syz.2.2951': attribute type 1 has an invalid length. [ 259.306500][T17088] tipc: Enabled bearer , priority 0 [ 259.316920][T17088] syzkaller0: entered promiscuous mode [ 259.324398][T17088] syzkaller0: entered allmulticast mode [ 259.333992][T17088] tipc: Resetting bearer [ 259.418176][T17087] tipc: Resetting bearer [ 259.427579][T17087] tipc: Disabling bearer [ 259.614534][T17113] lo speed is unknown, defaulting to 1000 [ 259.622087][T17113] wlan1 speed is unknown, defaulting to 1000 [ 259.684674][T17121] netlink: 'syz.3.2963': attribute type 1 has an invalid length. [ 259.704380][T17121] netlink: 'syz.3.2963': attribute type 1 has an invalid length. [ 259.720345][T17121] netlink: 'syz.3.2963': attribute type 1 has an invalid length. [ 259.745346][T17121] 8021q: adding VLAN 0 to HW filter on device bond9 [ 259.764182][T17121] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 259.781131][T17121] bond9: (slave wlan0): Enslaving as an active interface with a down link [ 259.798321][T17128] netlink: 'syz.0.2965': attribute type 1 has an invalid length. [ 259.836970][T17128] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2965'. [ 259.853063][T17128] netlink: 'syz.0.2965': attribute type 1 has an invalid length. [ 259.940202][T17137] netlink: 'syz.3.2967': attribute type 13 has an invalid length. [ 259.977729][T17137] gretap0: refused to change device tx_queue_len [ 260.005164][T17137] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 260.028671][T17146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2967'. [ 260.311426][T17166] lo speed is unknown, defaulting to 1000 [ 260.311704][ T5865] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 260.326454][ T5865] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 260.327257][T17166] wlan1 speed is unknown, defaulting to 1000 [ 260.345299][ T5865] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 260.352052][T17172] tipc: Enabled bearer , priority 0 [ 260.382092][ T5865] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 260.390512][T17172] syzkaller0: entered promiscuous mode [ 260.396016][T17172] syzkaller0: entered allmulticast mode [ 260.404631][ T5865] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 260.431550][ T5855] syz_tun (unregistering): left promiscuous mode [ 260.457612][T17159] lo speed is unknown, defaulting to 1000 [ 260.467313][T17176] tipc: Resetting bearer [ 260.486769][T17176] tipc: Disabling bearer [ 260.503463][T17159] wlan1 speed is unknown, defaulting to 1000 [ 260.503474][T17169] lo speed is unknown, defaulting to 1000 [ 260.517755][T17169] wlan1 speed is unknown, defaulting to 1000 [ 260.646504][T17186] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2981'. [ 260.668476][T17186] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2981'. [ 260.764546][T17194] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2983'. [ 260.773815][T17194] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2983'. [ 260.790314][T17169] chnl_net:caif_netlink_parms(): no params data found [ 260.955931][T17169] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.972539][T17169] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.980783][T17169] bridge_slave_0: entered allmulticast mode [ 260.990103][T17169] bridge_slave_0: entered promiscuous mode [ 261.010266][T17169] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.017364][T17169] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.035057][T17169] bridge_slave_1: entered allmulticast mode [ 261.053531][T17169] bridge_slave_1: entered promiscuous mode [ 261.108807][T17169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.121696][T17169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.180488][T17169] team0: Port device team_slave_0 added [ 261.220544][T17169] team0: Port device team_slave_1 added [ 261.279268][T17169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.291349][T17169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.318113][T17169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.353460][T17228] erspan0: left allmulticast mode [ 261.362226][T17228] veth0_to_bond: left allmulticast mode [ 261.378113][T17228] gretap1: left promiscuous mode [ 261.384590][T17228] ip6gre1: left allmulticast mode [ 261.394731][T17228] bond6: left promiscuous mode [ 261.400960][T17228] bond6: left allmulticast mode [ 261.407026][T17228] bridge4: left promiscuous mode [ 261.412479][T17228] bridge4: left allmulticast mode [ 261.417710][T17228] bridge5: left allmulticast mode [ 261.423587][T17228] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 261.431159][T17228] macvtap0: left promiscuous mode [ 261.439573][T17228] hsr0: left promiscuous mode [ 261.446559][T17169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.456112][T17169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.497330][T17169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.541323][T17248] tun0: tun_chr_ioctl cmd 1074025675 [ 261.556894][T17248] tun0: persist enabled [ 261.699584][T17260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2998'. [ 261.747247][T17169] hsr_slave_0: entered promiscuous mode [ 261.764359][T17169] hsr_slave_1: entered promiscuous mode [ 261.773253][T17169] debugfs: 'hsr0' already exists in 'hsr' [ 261.779153][T17169] Cannot create hsr debugfs directory [ 261.784872][T17260] dummy0: left allmulticast mode [ 261.809203][T17260] dummy0: left promiscuous mode [ 261.814289][T17260] bridge0: port 1(dummy0) entered disabled state [ 262.302656][T17303] 8021q: adding VLAN 0 to HW filter on device bond6 [ 262.337206][T17303] 8021q: adding VLAN 0 to HW filter on device bond6 [ 262.344690][T17303] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 262.360132][T17303] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 262.393046][T17308] bond6: (slave bridge0): Enslaving as an active interface with a down link [ 262.429289][ T5874] Bluetooth: hci5: command tx timeout [ 262.434700][T17169] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 262.452626][T17169] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 262.463630][T17169] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 262.490042][T17169] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 262.628816][T17169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.655187][T17169] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.673304][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.680512][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.743377][T17331] vxcan1: entered allmulticast mode [ 262.778315][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.785502][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.866852][T17169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.984790][T17350] tipc: Cannot configure node identity twice [ 263.096290][T17350] team_slave_0: entered allmulticast mode [ 263.249695][T17169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.331844][T17169] veth0_vlan: entered promiscuous mode [ 263.353597][T17169] veth1_vlan: entered promiscuous mode [ 263.418738][T17169] veth0_macvtap: entered promiscuous mode [ 263.428599][T17169] veth1_macvtap: entered promiscuous mode [ 263.466083][T17169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.497692][T17169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.518170][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.542288][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.575357][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.594320][T15944] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.710627][T15986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.729365][T15986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.766424][T15986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.776019][T15986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.134799][T17437] __nla_validate_parse: 7 callbacks suppressed [ 264.134819][T17437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3045'. [ 264.153841][T17437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3045'. [ 264.167199][T17433] netlink: 'syz.4.3045': attribute type 11 has an invalid length. [ 264.181666][T17432] netlink: 'syz.4.3045': attribute type 11 has an invalid length. [ 264.182391][ T5865] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 264.196979][ T5865] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 264.206195][ T5865] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 264.214055][ T5865] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 264.221618][ T5865] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 264.249422][T17439] lo speed is unknown, defaulting to 1000 [ 264.255906][T17439] wlan1 speed is unknown, defaulting to 1000 [ 264.316588][T17450] validate_nla: 7 callbacks suppressed [ 264.316601][T17450] netlink: 'syz.1.3050': attribute type 1 has an invalid length. [ 264.395271][T17439] chnl_net:caif_netlink_parms(): no params data found [ 264.420052][T17450] veth3: entered promiscuous mode [ 264.427589][T17450] bond0: (slave veth3): Enslaving as an active interface with an up link [ 264.447386][T17450] erspan0: entered allmulticast mode [ 264.456605][T17450] bond0: (slave erspan0): Enslaving as an active interface with an up link [ 264.509333][ T5874] Bluetooth: hci5: command tx timeout [ 264.517096][T17463] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3053'. [ 264.527938][T17463] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3053'. [ 264.537064][T17463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3053'. [ 264.543333][T17461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3052'. [ 264.573895][T17439] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.581288][T17439] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.588869][T17439] bridge_slave_0: entered allmulticast mode [ 264.596093][T17439] bridge_slave_0: entered promiscuous mode [ 264.613980][T17466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3054'. [ 264.636444][T17439] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.658751][T17439] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.667219][T17439] bridge_slave_1: entered allmulticast mode [ 264.685881][T17439] bridge_slave_1: entered promiscuous mode [ 264.717660][T17439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.733873][T17439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.793479][T17439] team0: Port device team_slave_0 added [ 264.802305][T17439] team0: Port device team_slave_1 added [ 264.817699][T17479] netlink: 'syz.1.3060': attribute type 2 has an invalid length. [ 264.827491][T17479] netlink: 'syz.1.3060': attribute type 1 has an invalid length. [ 264.836868][T17479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3060'. [ 264.851326][T17439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.851543][T17485] netlink: 'syz.1.3060': attribute type 2 has an invalid length. [ 264.858408][T17439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.867924][T17485] netlink: 'syz.1.3060': attribute type 1 has an invalid length. [ 264.900891][T17485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3060'. [ 264.908938][T17439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.922634][T17439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.930259][T17439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.958523][T17439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.036397][T17439] hsr_slave_0: entered promiscuous mode [ 265.046871][T17439] hsr_slave_1: entered promiscuous mode [ 265.053106][T17439] debugfs: 'hsr0' already exists in 'hsr' [ 265.060351][T17439] Cannot create hsr debugfs directory [ 265.113460][T17495] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3064'. [ 265.128529][T17495] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 265.188794][T17501] tipc: Resetting bearer [ 265.213518][T17500] tipc: Resetting bearer [ 265.575919][T17439] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 265.596774][T17439] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 265.613079][T17535] bridge0: entered promiscuous mode [ 265.618446][T17535] macsec1: entered promiscuous mode [ 265.627257][T17535] bridge0: port 3(macsec1) entered blocking state [ 265.634549][T17535] bridge0: port 3(macsec1) entered disabled state [ 265.641629][T17535] macsec1: entered allmulticast mode [ 265.647038][T17535] bridge0: entered allmulticast mode [ 265.656105][T17535] macsec1: left allmulticast mode [ 265.661324][T17535] bridge0: left allmulticast mode [ 265.668226][T17535] bridge0: left promiscuous mode [ 265.691516][T17439] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 265.709621][T17439] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 265.725069][ T49] tipc: Resetting bearer [ 265.904388][T17439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.938429][T17439] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.958166][T15944] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.965349][T15944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.002055][T15944] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.009218][T15944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.045206][T17439] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 266.063470][T17439] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.122615][T17566] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 266.231154][T17569] syzkaller0: entered promiscuous mode [ 266.236674][T17569] syzkaller0: entered allmulticast mode [ 266.257610][T17569] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 266.282656][ T5865] Bluetooth: hci2: command tx timeout [ 266.365390][T17439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.449589][T17439] veth0_vlan: entered promiscuous mode [ 266.471073][T17439] veth1_vlan: entered promiscuous mode [ 266.537595][T17439] veth0_macvtap: entered promiscuous mode [ 266.563387][T17439] veth1_macvtap: entered promiscuous mode [ 266.570934][T17591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.589974][ T5865] Bluetooth: hci5: command tx timeout [ 266.596336][T17439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.615234][T17594] lo speed is unknown, defaulting to 1000 [ 266.656763][T17594] wlan1 speed is unknown, defaulting to 1000 [ 266.658204][T17439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.751526][T15944] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.800738][T15944] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.834509][T15944] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.854845][T15944] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.015785][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.026237][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.065690][T15968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.087026][T15968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.759542][T17662] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 267.763423][ T5858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 267.779639][ T5858] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 267.786940][ T5858] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 267.801409][ T5858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 267.809041][ T5858] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 267.839253][T17666] lo speed is unknown, defaulting to 1000 [ 267.845880][T17666] wlan1 speed is unknown, defaulting to 1000 [ 268.076315][T17666] chnl_net:caif_netlink_parms(): no params data found [ 268.168317][T17666] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.180344][T17666] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.187795][T17666] bridge_slave_0: entered allmulticast mode [ 268.199809][T17666] bridge_slave_0: entered promiscuous mode [ 268.213901][T17666] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.223233][T17666] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.232147][T17666] bridge_slave_1: entered allmulticast mode [ 268.239369][T17666] bridge_slave_1: entered promiscuous mode [ 268.287022][T17666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.298885][T17666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.324940][T17666] team0: Port device team_slave_0 added [ 268.337336][T17666] team0: Port device team_slave_1 added [ 268.349149][ T5865] Bluetooth: hci2: command 0x041b tx timeout [ 268.366833][T17666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.375306][T17666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.403774][T17666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.417204][T17666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.426693][T17666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.457394][T17666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.502827][T17666] hsr_slave_0: entered promiscuous mode [ 268.509407][T17666] hsr_slave_1: entered promiscuous mode [ 268.515552][T17666] debugfs: 'hsr0' already exists in 'hsr' [ 268.522809][T17666] Cannot create hsr debugfs directory [ 268.670633][ T5874] Bluetooth: hci5: command tx timeout [ 268.721825][T17714] !: renamed from dummy0 (while UP) [ 268.737933][T17712] syzkaller1: entered promiscuous mode [ 268.745264][T17712] syzkaller1: entered allmulticast mode [ 268.755063][T17666] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.842240][T17666] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.052626][T17666] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.163564][T17666] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.255097][T17742] __nla_validate_parse: 62 callbacks suppressed [ 269.255120][T17742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3130'. [ 269.283777][T17666] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 269.298526][T17666] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 269.330238][T17666] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 269.383998][T17743] pim6reg: entered allmulticast mode [ 269.420696][T17666] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 269.460473][T17743] pim6reg: left allmulticast mode [ 269.724427][T17666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.790160][T17666] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.825920][T15968] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.833079][T15968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.877469][T17774] lo speed is unknown, defaulting to 1000 [ 269.890656][T17774] wlan1 speed is unknown, defaulting to 1000 [ 269.929942][T17775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3131'. [ 269.939754][ T5874] Bluetooth: hci4: command tx timeout [ 269.954766][T17773] netlink: 'syz.4.3138': attribute type 3 has an invalid length. [ 269.967915][T17773] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3138'. [ 269.986473][T17780] netlink: 'syz.4.3138': attribute type 3 has an invalid length. [ 269.996902][T17780] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3138'. [ 270.007726][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.014869][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.033877][T17780] netlink: 'syz.4.3138': attribute type 2 has an invalid length. [ 270.048116][T17773] netlink: 'syz.4.3138': attribute type 2 has an invalid length. [ 270.066174][T17773] : entered promiscuous mode [ 270.204369][T17788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3140'. [ 270.361488][T17802] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3144'. [ 270.386538][T17802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3144'. [ 270.398131][T17666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.433403][T17805] netlink: 'syz.3.3143': attribute type 4 has an invalid length. [ 270.445733][ T5874] Bluetooth: hci2: command 0x041b tx timeout [ 270.470667][T17805] netlink: 14345 bytes leftover after parsing attributes in process `syz.3.3143'. [ 270.505195][T17666] veth0_vlan: entered promiscuous mode [ 270.540868][T17666] veth1_vlan: entered promiscuous mode [ 270.546335][T17808] Bluetooth: MGMT ver 1.23 [ 270.561283][T17808] netlink: 'syz.4.3146': attribute type 4 has an invalid length. [ 270.666693][T17815] netlink: 'syz.1.3148': attribute type 16 has an invalid length. [ 270.684857][T17813] lo speed is unknown, defaulting to 1000 [ 270.697503][T17815] netlink: 'syz.1.3148': attribute type 17 has an invalid length. [ 270.707442][T17666] veth0_macvtap: entered promiscuous mode [ 270.803201][T17827] IPv6: NLM_F_REPLACE set, but no existing node found! [ 270.853437][T17815] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.860998][T17815] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.967729][T17815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.011151][T17815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.238068][T17813] wlan1 speed is unknown, defaulting to 1000 [ 271.244997][T17819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3148'. [ 271.278890][T17823] lo speed is unknown, defaulting to 1000 [ 271.285449][T17823] wlan1 speed is unknown, defaulting to 1000 [ 271.293514][T15986] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.313717][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.350989][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.362601][T17666] veth1_macvtap: entered promiscuous mode [ 271.403334][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.583066][T17666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.613431][T17666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.647057][T15986] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.670553][T17839] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3155'. [ 271.682142][T15986] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.707733][T15986] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.729714][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.771208][T15986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.788490][T15986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.798085][T17849] macsec0: entered allmulticast mode [ 271.825269][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.836155][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.965867][T17862] netlink: 'syz.3.3162': attribute type 4 has an invalid length. [ 271.994158][T17864] netlink: 'syz.1.3163': attribute type 27 has an invalid length. [ 272.028751][ T5874] Bluetooth: hci4: command tx timeout [ 272.032696][T17866] smc: net device bond0 applied user defined pnetid SYZ [ 272.137705][T17872] tipc: Started in network mode [ 272.163015][T17872] tipc: Node identity 0a9fe8fce047, cluster identity 4711 [ 272.176734][T17872] tipc: Enabled bearer , priority 0 [ 272.187001][T17872] syzkaller0: entered promiscuous mode [ 272.196238][T17872] syzkaller0: entered allmulticast mode [ 272.246245][T17869] tipc: Resetting bearer [ 272.285576][T17869] tipc: Disabling bearer [ 272.509353][ T5874] Bluetooth: hci2: command 0x041b tx timeout [ 272.524295][T17895] bridge2: entered allmulticast mode [ 272.564295][T17902] erspan0: entered promiscuous mode [ 272.572096][T17902] vlan2: entered promiscuous mode [ 272.765162][T17911] pim6reg: entered allmulticast mode [ 272.787963][T17911] pim6reg: left allmulticast mode [ 272.793547][T17913] Bluetooth: MGMT ver 1.23 [ 272.824331][T17913] geneve2: entered promiscuous mode [ 273.100287][ T5865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 273.107592][ T5865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 273.116492][ T5865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 273.124469][ T5865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 273.133634][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 273.163925][T17921] lo speed is unknown, defaulting to 1000 [ 273.170705][T17921] wlan1 speed is unknown, defaulting to 1000 [ 273.228797][ T5861] syz_tun (unregistering): left promiscuous mode [ 273.272173][T17924] tipc: Started in network mode [ 273.278732][T17924] tipc: Node identity 9e16dca03469, cluster identity 4711 [ 273.286083][T17924] tipc: Enabled bearer , priority 0 [ 273.321282][T17930] syzkaller0: entered promiscuous mode [ 273.327028][T17930] syzkaller0: entered allmulticast mode [ 273.356727][T17924] tipc: Resetting bearer [ 273.390047][T17924] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 273.421161][T17923] tipc: Resetting bearer [ 273.430618][T17923] tipc: Disabling bearer [ 273.482820][T17940] dvmrp1: entered allmulticast mode [ 273.552657][T17921] chnl_net:caif_netlink_parms(): no params data found [ 273.785780][T17965] openvswitch: netlink: IP tunnel dst address not specified [ 273.791617][T17921] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.809207][T17921] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.816664][T17921] bridge_slave_0: entered allmulticast mode [ 273.826497][T17968] IPVS: length: 206 != 8 [ 273.827732][T17921] bridge_slave_0: entered promiscuous mode [ 273.846281][T17921] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.858726][T17921] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.866076][T17921] bridge_slave_1: entered allmulticast mode [ 273.877151][T17921] bridge_slave_1: entered promiscuous mode [ 274.026020][T17975] tipc: Enabling of bearer rejected, failed to enable media [ 274.043248][T17921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.079737][T17921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.111698][ T5865] Bluetooth: hci4: command tx timeout [ 274.166509][T17921] team0: Port device team_slave_0 added [ 274.181562][T17921] team0: Port device team_slave_1 added [ 274.263845][T17921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.282720][T17921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.312208][T17921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.326825][T17921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.333935][T17921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.360988][T17921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.383036][T17982] lo speed is unknown, defaulting to 1000 [ 274.428451][T17982] wlan1 speed is unknown, defaulting to 1000 [ 274.484377][T17921] hsr_slave_0: entered promiscuous mode [ 274.493738][T17921] hsr_slave_1: entered promiscuous mode [ 274.505458][T17921] debugfs: 'hsr0' already exists in 'hsr' [ 274.512147][T17921] Cannot create hsr debugfs directory [ 274.518379][T17994] tap0: tun_chr_ioctl cmd 1074025677 [ 274.525679][T17994] tap0: linktype set to 780 [ 274.589877][ T5865] Bluetooth: hci2: command 0x041b tx timeout [ 274.646599][T18001] lo speed is unknown, defaulting to 1000 [ 274.674228][T18001] wlan1 speed is unknown, defaulting to 1000 [ 274.823874][T18012] __nla_validate_parse: 12 callbacks suppressed [ 274.823895][T18012] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3211'. [ 274.949581][T18014] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3212'. [ 275.007534][T17921] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 275.107453][T18014] lo speed is unknown, defaulting to 1000 [ 275.122180][T18023] validate_nla: 6 callbacks suppressed [ 275.122202][T18023] netlink: 'syz.1.3213': attribute type 13 has an invalid length. [ 275.125415][T17921] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 275.127833][T18023] netlink: 'syz.1.3213': attribute type 17 has an invalid length. [ 275.152245][ T5865] Bluetooth: hci1: command tx timeout [ 275.170856][T18014] wlan1 speed is unknown, defaulting to 1000 [ 275.330221][T18023] erspan0: left allmulticast mode [ 275.435707][T18023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.444616][T18023] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.457568][T18023] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 275.479316][T17921] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 275.533396][T17921] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 275.681017][T17921] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 275.751204][T17921] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 275.791834][T17921] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 275.810939][T17921] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 275.903099][T18061] ip6tnl1: entered promiscuous mode [ 275.909200][T18061] ip6tnl1: entered allmulticast mode [ 275.995463][T17921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.044255][T17921] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.086216][T15941] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.093415][T15941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.134552][T18070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3226'. [ 276.152667][T15941] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.159848][T15941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.191834][ T5865] Bluetooth: hci4: command tx timeout [ 276.272346][T18072] netlink: 'syz.2.3226': attribute type 2 has an invalid length. [ 276.287153][T18072] netlink: 'syz.2.3226': attribute type 1 has an invalid length. [ 276.345030][T18078] netlink: 'syz.1.3227': attribute type 2 has an invalid length. [ 276.370685][T18077] bond0: Unable to set down delay as MII monitoring is disabled [ 276.513523][T18083] lo speed is unknown, defaulting to 1000 [ 276.524960][T18083] wlan1 speed is unknown, defaulting to 1000 [ 276.543391][T17921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.638413][T17921] veth0_vlan: entered promiscuous mode [ 276.651789][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888078067400: rx timeout, send abort [ 276.661309][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888078067400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 276.675690][T17921] veth1_vlan: entered promiscuous mode [ 276.774458][T18095] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3231'. [ 276.854138][T17921] veth0_macvtap: entered promiscuous mode [ 276.894271][T18105] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 276.920590][T17921] veth1_macvtap: entered promiscuous mode [ 276.992728][T17921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.030385][T18112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3239'. [ 277.060225][T17921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.085390][T15944] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.115964][T15944] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.133575][T15944] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.155247][T15944] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.229043][ T5865] Bluetooth: hci1: command tx timeout [ 277.281581][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.302337][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.315516][T18124] lo speed is unknown, defaulting to 1000 [ 277.341652][T18124] wlan1 speed is unknown, defaulting to 1000 [ 277.348390][T15987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.364808][T15987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.903532][T18156] tipc: Enabling of bearer rejected, failed to enable media [ 278.115182][T18179] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3255'. [ 278.315380][T18192] lo speed is unknown, defaulting to 1000 [ 278.330928][T18192] wlan1 speed is unknown, defaulting to 1000 [ 278.615304][T18214] netlink: 'syz.1.3265': attribute type 1 has an invalid length. [ 278.642293][T18214] 8021q: adding VLAN 0 to HW filter on device bond1 [ 278.676331][T18212] tipc: Enabling of bearer rejected, failed to enable media [ 278.692698][T18214] 8021q: adding VLAN 0 to HW filter on device bond1 [ 278.701119][T18214] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 278.713090][T18214] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 278.945357][T18228] tipc: Enabling of bearer rejected, failed to enable media [ 278.996492][T18230] lo speed is unknown, defaulting to 1000 [ 279.008040][T18230] wlan1 speed is unknown, defaulting to 1000 [ 279.069703][T18234] lo speed is unknown, defaulting to 1000 [ 279.077307][T18234] wlan1 speed is unknown, defaulting to 1000 [ 279.169919][T18239] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 279.316028][ T5865] Bluetooth: hci1: command tx timeout [ 279.395672][T18250] netlink: 276 bytes leftover after parsing attributes in process `syz.3.3272'. [ 279.588193][T18266] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3279'. [ 279.724866][T18272] bond2: entered promiscuous mode [ 279.750599][T18272] bond2: entered allmulticast mode [ 279.756171][T18272] 8021q: adding VLAN 0 to HW filter on device bond2 [ 279.764065][T18283] netlink: 'syz.1.3282': attribute type 6 has an invalid length. [ 280.364328][T18330] netlink: 'syz.3.3293': attribute type 7 has an invalid length. [ 280.389437][T18340] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 280.534130][T18337] netlink: 'syz.4.3295': attribute type 1 has an invalid length. [ 280.568394][T18337] netlink: 'syz.4.3295': attribute type 2 has an invalid length. [ 280.583334][T18333] lo speed is unknown, defaulting to 1000 [ 280.612064][T18333] wlan1 speed is unknown, defaulting to 1000 [ 280.774554][T18349] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3297'. [ 281.061662][T18362] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3299'. [ 281.090980][T18362] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3299'. [ 281.122964][T18362] netlink: 'syz.2.3299': attribute type 4 has an invalid length. [ 281.152532][T18364] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3299'. [ 281.188152][T18361] tipc: Started in network mode [ 281.219314][T18361] tipc: Node identity 826d41c27c6e, cluster identity 4711 [ 281.246378][T18361] tipc: Enabled bearer , priority 0 [ 281.272775][T18363] syzkaller0: entered promiscuous mode [ 281.278406][T18363] syzkaller0: entered allmulticast mode [ 281.307945][T18361] tipc: Resetting bearer [ 281.326103][T18368] sch_tbf: burst 240 is lower than device lo mtu (11337746) ! [ 281.352120][T18360] tipc: Resetting bearer [ 281.377541][T18360] tipc: Disabling bearer [ 281.389979][ T5865] Bluetooth: hci1: command tx timeout [ 281.409876][T18369] sch_tbf: burst 240 is lower than device lo mtu (11337746) ! [ 281.514278][T18377] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3304'. [ 281.525959][T18377] nbd: illegal input index 65508 [ 281.666869][T18390] netdevsim netdevsim4: Direct firmware load for /. failed with error -2 [ 281.705685][T18390] netdevsim netdevsim4: Falling back to sysfs fallback for: /. [ 281.717400][T18394] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3311'. [ 281.753252][T18396] syz_tun: entered promiscuous mode [ 281.763000][T18396] vlan2: entered promiscuous mode [ 281.818336][T18401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3313'. [ 281.886385][T18404] netlink: 'syz.0.3315': attribute type 5 has an invalid length. [ 281.897450][T18401] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.904979][T18401] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.978028][T18401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.990694][T18401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.064391][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.074852][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.084295][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.097721][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.163846][T18413] tipc: Started in network mode [ 282.170488][T18413] tipc: Node identity 4a7902186d7a, cluster identity 4711 [ 282.179805][T18413] tipc: Enabled bearer , priority 0 [ 282.187242][T18413] syzkaller0: entered promiscuous mode [ 282.197373][T18413] syzkaller0: entered allmulticast mode [ 282.204848][T18415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3319'. [ 282.208933][T18413] sch_tbf: peakrate 8388608 is lower than or equals to rate 5895085808323322276 ! [ 282.231475][T18413] tipc: Resetting bearer [ 282.248001][T18415] bridge1: port 1(veth3) entered blocking state [ 282.255693][T18415] bridge1: port 1(veth3) entered disabled state [ 282.262930][T18415] veth3: entered allmulticast mode [ 282.269629][T18415] veth3: entered promiscuous mode [ 282.281402][T18415] bridge1: port 2(veth0_to_bond) entered blocking state [ 282.289035][T18415] bridge1: port 2(veth0_to_bond) entered disabled state [ 282.296179][T18415] veth0_to_bond: entered allmulticast mode [ 282.303022][T18415] veth0_to_bond: entered promiscuous mode [ 282.312535][T18413] tipc: Resetting bearer [ 282.320096][T18413] tipc: Disabling bearer [ 282.334678][T18415] vlan2: entered allmulticast mode [ 282.340186][T18415] veth0_to_hsr: entered allmulticast mode [ 282.346133][T18415] bridge1: port 3(vlan2) entered blocking state [ 282.355759][T18415] bridge1: port 3(vlan2) entered disabled state [ 282.365452][T18415] vlan2: entered promiscuous mode [ 282.370781][T18415] veth0_to_hsr: entered promiscuous mode [ 282.395592][T18420] smc: net device bond0 applied user defined pnetid SYZ2 [ 282.404812][T18420] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3320'. [ 282.424673][T18420] smc: removing net device bond0 with user defined pnetid SYZ2 [ 282.437960][T18420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.450146][T18420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.466430][T18420] bond0 (unregistering): (slave veth3): Releasing backup interface [ 282.485912][T18420] bond0 (unregistering): (slave erspan0): Releasing backup interface [ 282.510815][T18420] bond0 (unregistering): Released all slaves [ 282.535259][T18427] lo speed is unknown, defaulting to 1000 [ 282.542756][T18427] wlan1 speed is unknown, defaulting to 1000 [ 282.628343][T18436] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3324'. [ 282.642555][T18436] netlink: 'syz.1.3324': attribute type 6 has an invalid length. [ 282.651258][T18436] netlink: 'syz.1.3324': attribute type 5 has an invalid length. [ 282.727614][T18445] netlink: 'syz.1.3326': attribute type 21 has an invalid length. [ 282.727655][T18443] netlink: 'syz.1.3326': attribute type 21 has an invalid length. [ 282.737409][T18445] netlink: 'syz.1.3326': attribute type 5 has an invalid length. [ 283.085487][T18472] block nbd1: Unsupported socket: shutdown callout must be supported. [ 283.293302][T18491] pim6reg: entered allmulticast mode [ 283.315822][T18491] pim6reg: left allmulticast mode [ 283.703339][T18518] smc: adding net device bond0 with user defined pnetid SYZ2 [ 283.754786][T18525] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:6 [ 284.255785][T18554] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 284.272388][T18554] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 284.564356][ T5997] IPVS: starting estimator thread 0... [ 284.564527][T18577] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 284.586357][T18580] syzkaller0: entered promiscuous mode [ 284.594336][T18580] syzkaller0: entered allmulticast mode [ 284.680940][T18588] IPVS: using max 38 ests per chain, 91200 per kthread [ 284.770021][T18605] siw: device registration error -23 [ 284.772270][T18611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 284.851574][T18611] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 284.922695][T15986] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 285.047143][T15986] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 285.442123][T18625] delete_channel: no stack [ 285.504280][T18647] validate_nla: 3 callbacks suppressed [ 285.504300][T18647] netlink: 'syz.4.3377': attribute type 1 has an invalid length. [ 285.519427][T18647] netlink: 'syz.4.3377': attribute type 1 has an invalid length. [ 285.840147][T18669] __nla_validate_parse: 31 callbacks suppressed [ 285.840168][T18669] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3389'. [ 285.980331][T18677] ip6gretap1: entered promiscuous mode [ 286.065201][T18686] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3393'. [ 286.124248][T18696] netlink: 'syz.4.3396': attribute type 1 has an invalid length. [ 286.154695][T18696] 8021q: adding VLAN 0 to HW filter on device bond2 [ 286.172829][T18696] vlan2: entered promiscuous mode [ 286.178005][T18696] bond2: entered promiscuous mode [ 286.184268][T18696] vlan2: entered allmulticast mode [ 286.189819][T18696] bond2: entered allmulticast mode [ 286.205475][T18696] bond2: (slave gretap1): making interface the new active one [ 286.213161][T18696] gretap1: entered promiscuous mode [ 286.218524][T18696] gretap1: entered allmulticast mode [ 286.220117][T18681] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 286.227933][T18696] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 286.321173][T18704] netlink: 'syz.4.3398': attribute type 39 has an invalid length. [ 286.369359][T18709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3401'. [ 286.407766][T18709] team1: entered promiscuous mode [ 286.413849][T18709] team1: entered allmulticast mode [ 286.443637][T18715] netlink: 'syz.2.3400': attribute type 1 has an invalid length. [ 286.456102][T18715] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3400'. [ 286.577719][T18728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3401'. [ 286.982565][T18740] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3406'. [ 287.005195][T18740] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3406'. [ 287.189739][T18750] netlink: 'syz.1.3408': attribute type 2 has an invalid length. [ 287.679999][T18771] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3416'. [ 287.713442][T18774] netlink: 'syz.0.3415': attribute type 4 has an invalid length. [ 287.736172][T18775] team0 (unregistering): Port device team_slave_0 removed [ 287.760649][T18775] team0 (unregistering): Port device team_slave_1 removed [ 287.904358][T18771] syzkaller0: entered promiscuous mode [ 287.924086][T18771] syzkaller0: entered allmulticast mode [ 287.955760][T18793] xt_limit: Overflow, try lower: 604147548/4200216962 [ 288.103353][T18800] netlink: 'syz.3.3422': attribute type 1 has an invalid length. [ 288.252626][T18800] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3422'. [ 288.263348][T18800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3422'. [ 288.422115][T18811] team0 (unregistering): Port device team_slave_0 removed [ 288.451228][T18811] team0 (unregistering): Port device team_slave_1 removed [ 288.621035][T18824] tipc: Enabled bearer , priority 0 [ 288.638337][T18824] syzkaller0: entered promiscuous mode [ 288.648437][T18824] syzkaller0: entered allmulticast mode [ 288.693912][T18824] tipc: Resetting bearer [ 288.710343][T18822] tipc: Resetting bearer [ 288.727119][T18822] tipc: Disabling bearer [ 288.804486][T18840] syz_tun: entered allmulticast mode [ 288.815230][T18838] syz_tun: left allmulticast mode [ 288.909637][T18846] netlink: 'syz.2.3435': attribute type 1 has an invalid length. [ 289.029619][T18857] netlink: 'syz.0.3438': attribute type 16 has an invalid length. [ 289.161925][T18857] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.169556][T18857] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.245942][T18857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.257642][T18857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.345967][T18868] xfrm0: entered allmulticast mode [ 289.352388][T12231] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.362145][T12231] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.373937][T12231] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.383942][T12231] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.410566][T18872] mac80211_hwsim hwsim51 wlan0: entered promiscuous mode [ 289.465454][T12231] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.488481][T12231] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.503398][T12231] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.513975][T12231] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.548305][T18881] tipc: Enabled bearer , priority 0 [ 289.570225][T18881] syzkaller0: entered promiscuous mode [ 289.578184][T18881] syzkaller0: entered allmulticast mode [ 289.598251][T18881] tipc: Resetting bearer [ 289.615230][T18880] tipc: Resetting bearer [ 289.622910][T18880] tipc: Disabling bearer [ 290.220749][T18942] openvswitch: netlink: Flow key attr not present in new flow. [ 290.974524][T18969] validate_nla: 1 callbacks suppressed [ 290.974542][T18969] netlink: 'syz.2.3464': attribute type 1 has an invalid length. [ 291.192953][T18976] __nla_validate_parse: 10 callbacks suppressed [ 291.192975][T18976] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3469'. [ 291.230575][T18983] veth4: entered allmulticast mode [ 291.235909][T18976] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3469'. [ 291.245711][T18976] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3469'. [ 291.278226][T18986] netlink: 'syz.0.3470': attribute type 3 has an invalid length. [ 291.322670][T18976] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3469'. [ 291.332456][T18976] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3469'. [ 291.348620][T18976] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3469'. [ 291.477193][T18995] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3473'. [ 291.499503][T18995] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3473'. [ 291.604030][T18976] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3469'. [ 291.605184][T19002] netlink: 'syz.1.3475': attribute type 10 has an invalid length. [ 291.615240][T18976] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3469'. [ 291.726011][T19011] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 292.335131][T19054] netlink: 'syz.3.3487': attribute type 2 has an invalid length. [ 292.377077][T19051] tap0: tun_chr_ioctl cmd 1074025677 [ 292.383098][T19051] tap0: linktype set to 0 [ 292.587531][T19073] tipc: Enabled bearer , priority 0 [ 292.597275][T19073] syzkaller0: entered promiscuous mode [ 292.606753][T19073] syzkaller0: entered allmulticast mode [ 292.635815][T19073] tipc: Resetting bearer [ 292.652517][T19073] tipc: Disabling bearer [ 293.145865][T19119] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 293.241277][T19125] dvmrp8: entered allmulticast mode [ 293.247638][T19124] dvmrp8: left allmulticast mode [ 293.624173][T19155] netlink: 'syz.1.3519': attribute type 1 has an invalid length. [ 293.744887][T19165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.853306][T19177] lo speed is unknown, defaulting to 1000 [ 293.860239][T19177] wlan1 speed is unknown, defaulting to 1000 [ 294.110251][T19187] tipc: Enabled bearer , priority 0 [ 294.159994][T19187] syzkaller0: entered promiscuous mode [ 294.165850][T19187] syzkaller0: entered allmulticast mode [ 294.172359][T19187] tipc: Resetting bearer [ 294.194538][T19186] tipc: Resetting bearer [ 294.248172][T19186] tipc: Disabling bearer [ 295.423319][T19223] netlink: 'syz.2.3538': attribute type 1 has an invalid length. [ 295.468409][T19223] 8021q: adding VLAN 0 to HW filter on device bond1 [ 295.603490][T19223] bond1: (slave bridge1): making interface the new active one [ 295.643108][T19223] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 295.660334][T19233] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 295.759584][ T1087] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 295.775798][T19235] bond0: (slave bond_slave_1): Releasing backup interface [ 296.518466][T19266] __nla_validate_parse: 20 callbacks suppressed [ 296.518485][T19266] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3548'. [ 296.537676][T19264] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3546'. [ 296.548295][T19270] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3548'. [ 296.551225][T19264] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3546'. [ 296.569346][T19264] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3546'. [ 296.593701][T19264] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3546'. [ 296.607468][T19270] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3548'. [ 296.624678][T19270] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3548'. [ 296.679615][T19270] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3548'. [ 296.691144][T19270] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3548'. [ 296.844756][T19277] netlink: 'syz.3.3550': attribute type 9 has an invalid length. [ 297.121449][T19300] tipc: Enabled bearer , priority 0 [ 297.196964][T19292] tipc: Resetting bearer [ 297.223032][T19292] tipc: Disabling bearer [ 297.294398][T19309] veth1_to_bond: entered allmulticast mode [ 297.306405][T19308] bond0: (slave bond_slave_1): Releasing backup interface [ 297.352861][T19308] veth1_to_bond (unregistering): left allmulticast mode [ 297.513778][T15944] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.808058][T15944] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.906418][T15944] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.954691][T19326] netlink: 'syz.4.3566': attribute type 10 has an invalid length. [ 297.982026][T19322] lo speed is unknown, defaulting to 1000 [ 297.993029][T15944] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.827933][T19326] veth0_vlan: left promiscuous mode [ 306.077209][T19326] veth0_vlan: entered promiscuous mode [ 308.247894][T19326] team0: Device veth0_vlan failed to register rx_handler [ 311.228320][T19322] wlan1 speed is unknown, defaulting to 1000 [ 312.146695][T19331] lo speed is unknown, defaulting to 1000 [ 316.057857][T19331] wlan1 speed is unknown, defaulting to 1000 [ 345.087710][ T5874] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 345.307911][ T5874] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 345.568101][ T5874] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 346.016609][ T5874] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 346.457405][ T5874] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 348.446402][ T5874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 348.846994][ T5874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 349.047927][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 349.477383][ T5858] Bluetooth: hci3: command tx timeout [ 350.227358][ T5858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 350.896698][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 351.557146][ T5858] Bluetooth: hci3: command tx timeout [ 352.447938][ T5874] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 352.927160][ T5874] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 353.227354][ T5860] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 353.508139][ T5860] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 353.655561][ T5860] Bluetooth: hci3: command tx timeout [ 353.687365][ T5859] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 353.824132][ T5859] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 354.827706][ T5859] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 355.478467][ T5859] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 355.715973][ T5859] Bluetooth: hci3: command tx timeout [ 355.807295][ T5858] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 355.907641][ T5858] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 357.507855][ T5858] Bluetooth: hci0: command tx timeout [ 358.526168][ T5858] Bluetooth: hci7: command tx timeout [ 359.327861][ T5874] Bluetooth: hci6: command tx timeout [ 359.577449][ T5865] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 359.578048][ T5874] Bluetooth: hci0: command tx timeout [ 359.958146][ T5874] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 360.296921][ T5874] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 360.616524][ T5874] Bluetooth: hci7: command tx timeout [ 360.798514][ T5865] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 361.216857][ T5865] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 361.406114][ T5874] Bluetooth: hci6: command tx timeout [ 361.688316][ T5874] Bluetooth: hci0: command tx timeout [ 362.687041][ T5874] Bluetooth: hci7: command tx timeout [ 363.497512][ T5874] Bluetooth: hci6: command tx timeout [ 363.807290][ T5874] Bluetooth: hci0: command tx timeout [ 364.207379][ T5874] Bluetooth: hci4: command tx timeout [ 364.784156][ T5874] Bluetooth: hci7: command tx timeout [ 365.577933][ T5874] Bluetooth: hci6: command tx timeout [ 366.308120][ T5874] Bluetooth: hci4: command tx timeout [ 368.376951][ T5874] Bluetooth: hci4: command tx timeout [ 370.447957][ T5874] Bluetooth: hci4: command tx timeout [ 370.887928][T15968] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.088256][T15968] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.457488][T19346] lo speed is unknown, defaulting to 1000 [ 385.698100][T19346] wlan1 speed is unknown, defaulting to 1000 [ 385.717760][ T5858] Bluetooth: hci5: command 0x0406 tx timeout [ 390.588459][T15968] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.388155][T19350] lo speed is unknown, defaulting to 1000 [ 393.127103][T19352] lo speed is unknown, defaulting to 1000 [ 397.816665][T15968] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.797384][T19350] wlan1 speed is unknown, defaulting to 1000 [ 406.878406][T19352] wlan1 speed is unknown, defaulting to 1000 [ 406.991751][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 407.114735][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 407.203667][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 407.523905][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 407.667910][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 407.928415][ T5858] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 407.984163][ T5858] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 408.166927][ T5865] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 408.285196][ T5865] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 408.365045][ T5865] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 408.417172][ T5865] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 408.488118][ T5865] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 408.654755][ T5860] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 408.686453][ T5860] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 408.795601][ T5860] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 408.866671][ T5860] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 408.904933][ T5860] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 408.975367][ T5859] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 409.193932][ T5860] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 409.247831][ T5860] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 409.316415][ T5859] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 409.386328][ T5859] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 409.408147][ T5859] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 409.646088][ T5865] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 409.827517][ T5865] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 410.125599][ T5858] Bluetooth: hci2: command tx timeout [ 411.233368][ T5858] Bluetooth: hci8: command tx timeout [ 411.263212][ T5865] Bluetooth: hci5: command tx timeout [ 411.716041][ T5865] Bluetooth: hci9: command tx timeout [ 412.017963][T19361] lo speed is unknown, defaulting to 1000 [ 412.118484][ T5865] Bluetooth: hci10: command tx timeout [ 412.205063][ T5865] Bluetooth: hci2: command tx timeout [ 412.444735][T19361] wlan1 speed is unknown, defaulting to 1000 [ 412.458043][T15968] bridge_slave_1: left allmulticast mode [ 412.464238][T15968] bridge_slave_1: left promiscuous mode [ 412.471003][T15968] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.481506][T15968] bridge_slave_0: left allmulticast mode [ 412.487173][T15968] bridge_slave_0: left promiscuous mode [ 412.493475][T15968] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.544485][T15968] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 412.553557][T15968] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 412.600853][T15968] bond2 (unregistering): (slave gretap1): Releasing active interface [ 412.609747][T15968] gretap1 (unregistering): left promiscuous mode [ 412.616099][T15968] gretap1 (unregistering): left allmulticast mode [ 412.629910][T15968] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffc000: 0000 [#1] SMP KASAN PTI [ 412.641835][T15968] KASAN: probably user-memory-access in range [0x00000000fffe0000-0x00000000fffe0007] [ 412.651405][T15968] CPU: 0 UID: 0 PID: 15968 Comm: kworker/u8:30 Not tainted syzkaller #0 PREEMPT(full) [ 412.661070][T15968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 412.671134][T15968] Workqueue: netns cleanup_net [ 412.675949][T15968] RIP: 0010:mld_clear_delrec+0x3a5/0x660 [ 412.681585][T15968] Code: ff ff ff e8 ed 2b 41 01 89 c5 31 ff 89 c6 e8 62 00 87 f7 85 ed 74 40 e8 19 fc 86 f7 eb 05 e8 12 fc 86 f7 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 cc 67 ea f7 4d 8b 27 49 8d 7f 30 [ 412.701192][T15968] RSP: 0018:ffffc9000b4f74b0 EFLAGS: 00010206 [ 412.707257][T15968] RAX: 000000001fffc000 RBX: ffff888023fc0538 RCX: ffff888025e01e00 [ 412.715225][T15968] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 412.723193][T15968] RBP: 0000000000000000 R08: ffffffff8fa38637 R09: 1ffffffff1f470c6 [ 412.731167][T15968] R10: dffffc0000000000 R11: fffffbfff1f470c7 R12: ffff888031535c28 [ 412.739155][T15968] R13: dffffc0000000000 R14: ffff888031535c00 R15: 00000000fffe0000 [ 412.747146][T15968] FS: 0000000000000000(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 412.756065][T15968] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 412.762641][T15968] CR2: 00007fdf84cd9030 CR3: 000000000df36000 CR4: 00000000003526f0 [ 412.770643][T15968] Call Trace: [ 412.773973][T15968] [ 412.776901][T15968] ? ipv6_mc_down+0x2a3/0x360 [ 412.781582][T15968] ipv6_mc_destroy_dev+0x45/0x5a0 [ 412.786609][T15968] addrconf_ifdown+0x139e/0x1880 [ 412.791556][T15968] ? tls_dev_event+0x717/0xec0 [ 412.796321][T15968] ? __pfx_addrconf_ifdown+0x10/0x10 [ 412.801603][T15968] ? lock_release+0x4b/0x3e0 [ 412.806201][T15968] ? net_generic+0x1e/0x240 [ 412.810713][T15968] ? __pfx_tls_dev_event+0x10/0x10 [ 412.815846][T15968] addrconf_notify+0x1bc/0x1010 [ 412.820704][T15968] notifier_call_chain+0x1b3/0x3e0 [ 412.825818][T15968] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 412.832239][T15968] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 412.839017][T15968] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 412.845274][T15968] ? sysfs_remove_group+0x236/0x2c0 [ 412.850470][T15968] ? net_generic+0x1e/0x240 [ 412.854989][T15968] ops_undo_list+0x3dc/0x990 [ 412.859572][T15968] ? __pfx_ops_undo_list+0x10/0x10 [ 412.864672][T15968] ? do_raw_spin_unlock+0x122/0x240 [ 412.869872][T15968] cleanup_net+0x4c5/0x800 [ 412.874313][T15968] ? __pfx_cleanup_net+0x10/0x10 [ 412.879251][T15968] ? rcu_is_watching+0x15/0xb0 [ 412.884026][T15968] ? process_scheduled_works+0x9ef/0x17b0 [ 412.889737][T15968] ? process_scheduled_works+0x9ef/0x17b0 [ 412.895459][T15968] process_scheduled_works+0xae1/0x17b0 [ 412.901039][T15968] ? __pfx_process_scheduled_works+0x10/0x10 [ 412.907036][T15968] worker_thread+0x8a0/0xda0 [ 412.911658][T15968] kthread+0x70e/0x8a0 [ 412.915733][T15968] ? __pfx_worker_thread+0x10/0x10 [ 412.920850][T15968] ? __pfx_kthread+0x10/0x10 [ 412.925445][T15968] ? rcu_is_watching+0x15/0xb0 [ 412.930208][T15968] ? __pfx_kthread+0x10/0x10 [ 412.934806][T15968] ret_from_fork+0x3f9/0x770 [ 412.939394][T15968] ? __pfx_ret_from_fork+0x10/0x10 [ 412.944586][T15968] ? __switch_to_asm+0x39/0x70 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 412.949351][T15968] ? __switch_to_asm+0x33/0x70 [ 412.954131][T15968] ? __pfx_kthread+0x10/0x10 [ 412.958724][T15968] ret_from_fork_asm+0x1a/0x30 [ 412.963510][T15968] [ 412.966533][T15968] Modules linked in: [ 412.971999][T15968] ---[ end trace 0000000000000000 ]--- [ 412.984123][T15968] RIP: 0010:mld_clear_delrec+0x3a5/0x660 [ 412.989955][T15968] Code: ff ff ff e8 ed 2b 41 01 89 c5 31 ff 89 c6 e8 62 00 87 f7 85 ed 74 40 e8 19 fc 86 f7 eb 05 e8 12 fc 86 f7 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 cc 67 ea f7 4d 8b 27 49 8d 7f 30 [ 413.027466][T15968] RSP: 0018:ffffc9000b4f74b0 EFLAGS: 00010206 [ 413.034159][T15968] RAX: 000000001fffc000 RBX: ffff888023fc0538 RCX: ffff888025e01e00 [ 413.045252][T15968] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 413.053401][T15968] RBP: 0000000000000000 R08: ffffffff8fa38637 R09: 1ffffffff1f470c6 [ 413.064084][T15968] R10: dffffc0000000000 R11: fffffbfff1f470c7 R12: ffff888031535c28 [ 413.073382][T15968] R13: dffffc0000000000 R14: ffff888031535c00 R15: 00000000fffe0000 [ 413.085970][T15968] FS: 0000000000000000(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 413.097675][T15968] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 413.104759][T15968] CR2: 0000560a2d340fb0 CR3: 000000000df36000 CR4: 00000000003526f0 [ 413.112865][T15968] Kernel panic - not syncing: Fatal exception [ 413.119328][T15968] Kernel Offset: disabled [ 413.123673][T15968] Rebooting in 86400 seconds..