last executing test programs: 1.728615572s ago: executing program 1 (id=4050): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x25}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="88010000", @ANYRES16=r5, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x800}, 0x24004040) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="88010000", @ANYRES16=r5, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x800}, 0x24004040) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000060c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8859}, 0x20004804) (async) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000060c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8859}, 0x20004804) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006100)=@delchain={0x24, 0x66, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006100)=@delchain={0x24, 0x66, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 1.512201453s ago: executing program 1 (id=4055): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000200)={@remote, @dev={0xac, 0x14, 0x14, 0x3e}, 0xd, 0x1}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000001380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001340)={&(0x7f00000015c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002dbd7000fddbdf250a000000080004000600000008000300050000004800068008000300ffffffff08000700", @ANYRES32=0x0, @ANYBLOB="14000400fe80000000000000000000000000002008000700", @ANYRES32=0x0, @ANYBLOB="0800060002000000080006000000000008cc37bb6b00030000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000801) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), r1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @multicast2, @dev}, &(0x7f00000004c0)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5d, &(0x7f00000005c0)=[{}], 0x8, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x99, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000009c0)={0x1, 0x58, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000a40)=0x0, &(0x7f0000000a80)=0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000f40)={&(0x7f0000000280), 0xc, &(0x7f0000000f00)={&(0x7f0000000ac0)={0x434, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd0}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6f}}}]}}, {{0x8, 0x1, r8}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r12}, {0xfc, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x40, 0xb, 0x5d, 0x40000}, {0x54, 0x2, 0x7, 0x7fff}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd391}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x434}}, 0x20008800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001000), &(0x7f0000001040)}, 0x20) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0xe, 0x0, 0x0, 0xe, 0x1, 0x5}]}, {0x0, [0x30, 0x0]}}, &(0x7f0000001240)=""/104, 0x2c, 0x68, 0x0, 0x0, 0x10000}, 0x28) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', r9, r2, 0x1, 0x3, 0x2}, 0x50) r17 = socket(0x1, 0x803, 0x0) r18 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r17], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x2, 0x8, &(0x7f00000010c0)=ANY=[@ANYBLOB="1800000001000000000000000500000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7020000000000008500000086000000850600000000"], &(0x7f0000001100)='GPL\x00', 0x7, 0x93, &(0x7f0000001140)=""/147, 0x40f00, 0x40, '\x00', r11, @fallback=0x3, r15, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001300)={0x0, 0x10, 0x5, 0xa27a}, 0x10, r7, 0xffffffffffffffff, 0x3, &(0x7f0000001480)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, r16], &(0x7f00000014c0)=[{0x4, 0x2, 0x6, 0x5}, {0x4, 0x5, 0x6, 0x5}, {0x2, 0x1, 0x10, 0x7}], 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) r19 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r19, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.506798529s ago: executing program 4 (id=4056): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x81}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200), &(0x7f0000000000)=0x6) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @empty, 0x8}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) recvmmsg(r3, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@isdn, 0x80, &(0x7f0000000600)=[{&(0x7f0000000140)=""/111, 0x6f}, {&(0x7f0000000240)=""/137, 0x89}, {&(0x7f0000000300)=""/227, 0xe3}, {&(0x7f0000000500)=""/210, 0xd2}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000000400)=""/126, 0x7e}], 0x6, &(0x7f0000000680)=""/209, 0xd1}, 0x8}], 0x1, 0x2002, &(0x7f0000000780)) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) writev(r3, &(0x7f0000001200)=[{&(0x7f0000000480)="580000001400add427323b472545b45602117fffffff81004e210e227f00e400925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_emit_ethernet(0x7e, 0x0, 0x0) 1.444929621s ago: executing program 1 (id=4057): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001200576326bd7000fbdbdf2507000000", @ANYRES64=r0, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x80d0}, 0x20004000) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000840)={'syzkaller0\x00', 0x2000}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000004c0)="f78c9ca38fff48f3f5602340dc92beb0f9be52163448412ba8", 0x19}, {&(0x7f0000000540)="ebe3a0e9796cfd161926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa693584c1ffff00004e7cb51726d260fbb37b4fe035bbb0de6d04422e8503958730480000000000000000", 0x46}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000000300)="04228283f617ffff4abde0137ca7e8847e3c48a9c25b1420", 0x18}], 0x4, &(0x7f0000000640)=[@assoc={0x18, 0x117, 0x4, 0x5}], 0x18, 0x20000054}], 0x1, 0x4040805) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) sendto$inet(r1, &(0x7f00000000c0)="d2664e3de44e5781659d1c2224a19de44fba87cf2fcf751c9b218685", 0xffffffffffffffe7, 0x2c000891, 0x0, 0x0) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r6}, 0x8) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x800000, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r8, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/15, 0xf}, {&(0x7f0000002180)=""/226, 0xe2}, {&(0x7f0000000a40)=""/202, 0xca}, {&(0x7f00000008c0)=""/7, 0x7}, {&(0x7f0000000b40)=""/216, 0xd8}, {&(0x7f0000000740)=""/122, 0x7a}, {&(0x7f0000000c40)=""/155, 0x9b}, {&(0x7f0000000940)=""/40, 0x28}], 0x8, &(0x7f0000000d80)=""/8, 0x8}, 0x47b}, {{&(0x7f00000007c0)=@qipcrtr, 0x80, &(0x7f0000001040)=[{&(0x7f0000000f40)=""/88, 0x58}, {&(0x7f0000000e40)=""/228, 0xe4}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000fc0)=""/67, 0x43}], 0x4}, 0x10001}], 0x2, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0200000004000000060000000600000000000000", @ANYRES8=r1, @ANYRES16=r6, @ANYRES32=0x0, @ANYRESHEX=r2, @ANYBLOB="00001600000000f25ba500cd39fc040000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) (async, rerun: 32) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) (rerun: 32) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) close(0x4) 1.365412594s ago: executing program 4 (id=4059): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x53) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = accept(r3, 0x0, &(0x7f0000000040)) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x1410, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x8000) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r2, 0x3}, 0x8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8e000000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbf7f00000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 1.338173123s ago: executing program 1 (id=4061): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80800) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3ff, 0x38}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x28}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x49}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0xc8a4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 1.226959507s ago: executing program 1 (id=4063): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x11) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0xff7e, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4ecd, 0x1}, 0xe) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2, @ANYRESOCT=r1], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4d2cee32ef79a0c7eb3e41dc0a72302f191d491425e63cf0b46516590a052bddc650de476b2a5a71324f0b5363a484abcdc6b365e532b6ca1d7b7310f522bbeffcd6d8da5bebd9d435948b3364c4a6695a7b2dd8e48e166eda7b14d63b754114a9111ed60da3711bad990055cd59e4d9ab18d25e9434d29a77b9b97a9ca248241d2befd2cd47700582c43dc1a85cb6c925078afbec1eadb6bdb026b16b43c852e785cd1bdb2cfc39688f"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008041) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a060000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="e4e806396f1deac847f6928b3a11bc7e623da9af5864aec94d096e397e99c047b509ebd426a08ba97bbd749b5f58b0c144ca00f9dbaf2b"], 0x0, 0xfffffef8, 0x0, 0x0, 0x200000}, 0x28) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[], 0x14}}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) 903.932455ms ago: executing program 3 (id=4064): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000300)={r2, 0x1, 0x6, @broadcast}, 0x28) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f0000000240)={0xa, 0x4f21, 0xe, @private2, 0x103}, 0x1c, 0x0}}], 0x1, 0x931766f6319eed40) (async) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0xf4) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="85100000040000000018000000000000000000000000000000950000000000040085100000fcffffff9500000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, r6, 0x0) (async) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r8, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) (async) getsockopt$bt_hci(r3, 0x84, 0x2, 0x0, &(0x7f0000000140)) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ipvlan0\x00'}) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(r9, &(0x7f0000000340)=[{&(0x7f00000005c0)="0c038198195242821ed80eabc05d6e779fdde0a3e986061b88a32a03e6109f32fcf3a8c70463b91a9ed6cf3d97d3cfdbed500b6278e9e65a698b9e1189be78e807195e8586da8760d0cfed387a6a5443d7e799bd609d5814229ba9279043d0d4052bf6210cc8f4803f075966f61f7d80ba001819bbfaea6564ad5d88ec0aa6b58e4c3bf88ad853bf35cdad34ace75fe145bf3973f03a7c2adf5d73c1192d73f1749d2dcad00aaad534978067fee71b2cff92", 0xb2}, {&(0x7f0000000680)="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", 0x1000}], 0x2, 0x4, 0x10000) setsockopt$IP_VS_SO_SET_ZERO(r8, 0x0, 0x48f, &(0x7f0000000540)={0x2f, @private=0xa010100, 0x4e24, 0x1, 'lblc\x00', 0x2, 0x4, 0x7a}, 0x2c) (async) setsockopt$packet_int(r8, 0x107, 0x10, &(0x7f00000016c0)=0x9, 0x4) (async) shutdown(r8, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) 844.740273ms ago: executing program 1 (id=4065): sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044410}, 0x4004000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x4c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x1c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "9897e014b4b77890074cefc15b7aeb68e8"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x120}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x3c0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20008011) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x6, @private1, 0xd1}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xcea, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)='j', 0x1}], 0x1}}], 0x1, 0x4000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r4, 0x1}, 0x8) 843.525831ms ago: executing program 2 (id=4066): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000180)=0x489, 0x4) (async, rerun: 64) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) (async) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r2, 0x89ee, &(0x7f0000000300)) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)={0x3, {{0x2, 0x4e23, @multicast1}}, 0x0, 0x2, [{{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e24, @broadcast}}]}, 0x190) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000001880)=0xc00, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x1}, 0x10}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) (async, rerun: 32) r6 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r6, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) r7 = socket$packet(0x11, 0x3, 0x300) (async) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r7, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r7, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x4009, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r8, r8, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x1, 0x4}], 0x10, 0x5}, 0x94) (async, rerun: 32) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) (async, rerun: 32) sendmsg$NFT_BATCH(r9, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4084}, 0x44045) (async) unshare(0x62040200) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 790.218276ms ago: executing program 3 (id=4067): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 759.392491ms ago: executing program 2 (id=4068): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$inet6(0xa, 0x2, 0x3a) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x12, 0x3fc}, 0x0, r3}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {0x5}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/4108, 0x100c}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x2}, 0x7}], 0x1, 0x40010020, 0x0) 666.044255ms ago: executing program 3 (id=4069): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000086bc64b5c006b7e40c4abced79679a3599f7867885a7ba68", @ANYRES16=r1, @ANYBLOB="0106000000000000000003000000300001801c000280080003000010000008000200ff0f0000080001001e0000000d0001007564703a73797a3000000000"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91102f00000000009560880100000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000014948dd0c5fbda91db0000000a000000", @ANYRES32, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008040) r4 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$CAIFSO_LINK_SELECT(r4, 0x116, 0x7f, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8800) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl(r5, 0x1, &(0x7f00000001c0)="0feb79dba4d547dbfc1dd208eaa30956048fec8af59ac89db5fa9990264676e2986faafd3ea5dae7bc92a1bc24e351e85f1d5bd5ddeaca8f55b490bd77a9bdc487a1216409507ef4a44e") socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @default]}, 0x48) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x80000001, 0x7ff, 0x24e, 0x80000000, 0x5}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0007000000000000002abd700040000000000000003ec63d03a63d7d196690fad2b1a0e73d1fab37e594bccc23488278aa50f8839daad1b9cd7763978ca5f30eb892321a6650066c5d60863fcf92ee9ed4d490d325d0d1da4d1645694ed3cf19bc0c25c3a67c706ab7b342184dcf4819abd6141b596c5f5016fc8f7af4de72b3469180041fa9efe9915faf38f9a8915346ca894f37ad35d1a513debd42d54f927a111f7f743c8d258f40685a6d82ff552f78700a2572e392b405caf2997cf2f89e50940c867e6dd4216c0787d2ede7f3eb7fc8b40244ee6484faca81", @ANYRES32=0x0, @ANYBLOB="802100000000000014000300776c616e300000000000000000000000080004000e040000300016802c0001802800010009000000b33ccef3b17500"/84], 0x6c}}, 0x0) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f00000000c0)=0xff, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r7, &(0x7f0000000880)=ANY=[@ANYBLOB="000008000105060003008000050062a88a5c00383a01fc010000000000000000000000000001fe80000000000000000000000000003901059078060000006431ef2d00020001fc00000000000000000000000016796569f80d000000ff0100000000000000000000000000010000000000000000"], 0x6e) unshare(0x20000400) socket(0xa, 0x3, 0x87) 663.997189ms ago: executing program 0 (id=4070): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x8e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', r2, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50) 590.177189ms ago: executing program 3 (id=4071): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030ec0007f03e3f7fffe000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0xffffffffffffff79}], 0x1}, 0x8000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000040)={'veth0_vlan\x00', @random="010000201000"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4d, 0x1, 0x3}, {0x60}, {}]}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc, 0x0, 0x0, 0x1e00}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="0007082b1dd23f39ca7dcc7942d3f900", @ANYRES32=r0, @ANYBLOB="000000000200000018350000050000000000000000000000180000000e0000000000000001800000"], &(0x7f0000000240)='GPL\x00', 0x200, 0x83, &(0x7f00000005c0)=""/131, 0x41000, 0x36, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x8, 0xa81}, 0x10, 0xffffffffffffffff, r5, 0x5, &(0x7f0000000380)=[r0, r0, r0, r0], &(0x7f0000000680)=[{0x3, 0x5, 0x5, 0x6}, {0x3, 0x3, 0x6, 0x7}, {0x3, 0x3, 0x0, 0x7}, {0x1, 0x5, 0x1, 0x5}, {0x0, 0x2, 0xf}], 0x10, 0x100}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000001c0)=r5, 0x4) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000740)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x20) sendmsg$kcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="d80000001a0081044e81f782db4cb904021d0800fe0055a1150015000200142603600e12080005007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457fffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f8775d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100000000000000000000000000d4da15", 0xd8}], 0x1}, 0x0) ioctl$TUNSETDEBUG(r4, 0x400454c9, &(0x7f0000000100)=0x2) ioctl$FIGETBSZ(r3, 0x2, &(0x7f00000000c0)) 527.190327ms ago: executing program 0 (id=4072): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="040000000000000000004e8d15b2aee2e22335297fadad000000000000850000006100000085002a"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, &(0x7f00000000c0)=0x1c) sendto(r3, &(0x7f0000000340)="47a089ffc160432f1d03d429720dfbce4657bcfc1298fe428cd648c588679c087cebd4a9f4763d80b58a885815b5893953be33d18cc17c62d5ed8d1733284c8f9356d67e7f590dbe402727e1a8bc3689d30113e7491ff850f010cc23890f976fc3489b670b5cf1cf92a3fc63f813eb11d45a661a04ae83d135ea0a13c88d5d0403a5454cd2c8e93a0454d38df871509e8c", 0x91, 0x800, &(0x7f0000000540)=@sco={0x1f, @none}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000440)="b9ff033168440372b89e14f00800a25e4113c182879e029dbaeeaa7caa23c54957f1", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001"], 0x5c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@typedef={0x3}, @var={0x4, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x0, 0x61, 0x2e]}}, 0x0, 0x3a, 0x0, 0x1}, 0x28) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0006"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x20000000, 0x8000002}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="184e00000100ff9d5667a2265945f8ff00000073d095c5978600feffffff859ff2e709000000000000005f000014505c7f4ce1f56cda2ae4f21b2ddabe9f765e92b58e697f5390d71caf8c5e3fb3325c8e2b4ea65b2b6072a885344cd88670b5dcd41f851520758b2ae9c8e3c3b8af6347f7a9e517478c21aedb2805b2850df35b6eec236a9f998952165e04f797e5baef7800"/158], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 454.325655ms ago: executing program 2 (id=4073): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0xcc, r2, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x84d3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xf}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0xcc}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000013020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b0001006772696467650e001c000244202583f9bed808000500010000000500250001000000050029000000000008000a00", @ANYRES32=r3, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) accept4$netrom(0xffffffffffffffff, &(0x7f0000000500)={{0x3, @default}, [@remote, @remote, @rose, @bcast, @null, @remote, @netrom]}, &(0x7f00000005c0)=0x48, 0x80800) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={&(0x7f00000004c0)='./file0\x00', 0x0, 0x10}, 0xffffffffffffff12) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000480)={0xffffffffffffffff, r4}, 0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x38, r2, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) 452.829302ms ago: executing program 0 (id=4074): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0x7, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000eb0bd33242fa13bc052c47bfe3105aa2a360a7924cca50931cbe1c545ab932aaa7bee3795e375adeda4dc1c06a62480d62fd50898bee5e134a089902325a28233e5381ad0376a0a8b4fec8c64d3a2c0f18146be94a6de78b98e3544ea6e1f0a39e9fb2778b21c8391ed2721aaaa04a77ed25020000000000000054898a77098acb02dc5958b7fd5ada80aeb60285f2d3ab98b59a250cc0f2efa9e917aba48512a6ada641e63acfbac012cf0b5a0e1988e128220a215ae8a502f9d5f2fc47882efdf4c0ada63f0d61ba6fd6ff376d38b0dbbda70b09f5a684bd94017b42c733e7b01fd4d82d386d4102433426613a5a819805f3491dfa183b0448bdcc609a9d5583184aef7440a284e14942301b45d493d927bb6b8cab3a7ebe3c961b2cbfd3e7e18067c257f4a92e6b3f8e7b282d35000268c219dd7c06e61d31203f0550ca54db3bbf5ee527ef2ab14d1e562b51aa7230c21501b9b400e6393c4867bbf8fd9e29094a4c6776b7d5144801f4a576e657fc76f0f3625a6dc00cfc6f3975ed13e6399b1cd2c5ad21e31f3b6f960cc317c6635ca190b199fd895f72ccb04ae0601ab8010655af99298d8afa718fd222c53be70c07cae44ababcc03d6d53c6d54873a839d983f28eaa8728639479fb59cd072fa283ddf48766ec2ebb595e186d1b9a", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 426.861643ms ago: executing program 4 (id=4075): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x5, 0x8) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f8010039bc9f9b72ac93751c09e35088bcdaad062cfce072bc798f53c4aa5f966e878f152ac36682e7e0ae2b1e269d626f0c08d0bf23af505ef366245b12acb4b3a2e1e0e0e88bd187b0d55c6c9628abf65a6573193f16a17e80c93a651788f3b3508419b44ac1d9f9f337906efb96d7d5d64d59432487f2e64bd1c441c7e1dbe1235ae00c4f0da540084a91629c7b5ec1d1e2648fbef7", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x20008801) 380.72124ms ago: executing program 3 (id=4076): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x40}, 0x10}, 0x94) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) unshare(0x28000600) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, 0x0, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 310.365902ms ago: executing program 2 (id=4077): r0 = socket$inet6(0xa, 0x1, 0x100) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="caef4e8e66722d9ea0786c5c2823175616000000002636088d5568da58", 0x1d}, {&(0x7f0000000100)="e6efe54af13bc3480b88f5355d59e717df8b034e027e4e6fdc62ed420092c3733a6632d8ad78e1dd06231f39c732e5c5e85b974afa0c1276c18e573aaaab329c9e0dc6ab1be47febdac0189f5f0ab0f670c505f487def1c3753849a72798b61e5ee2a62b02b66a44503383729d87ea78cc", 0x71}], 0x2}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x6d}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 305.500174ms ago: executing program 0 (id=4078): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x224, r1, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2c}}}}, [@NL80211_ATTR_HIDDEN_SSID={0x8}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3cd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_HE_OBSS_PD={0x40, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xf}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x13}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "e5f5fce07c36600e"}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "d70780a02c14b55a"}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x10}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x800}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0a}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac08, 0xfac05, 0x8]}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x224}, 0x1, 0x0, 0x0, 0x4000}, 0x8001) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r3, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x4004080) r5 = socket$kcm(0x29, 0x5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x1e, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@map_idx={0x18, 0x7}, @ldst={0x3, 0x2, 0x0, 0xb071605afec204f3, 0x0, 0x18, 0xffffffffffffffe5}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @ringbuf_query, @generic={0xfd, 0x0, 0x8, 0x40, 0x1}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x4, 0x5, &(0x7f0000000600)=""/5, 0x41000, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0xffffffff, 0x9, 0xffff8001}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r0], &(0x7f0000000700)=[{0x1, 0x5, 0x4, 0x5}], 0x10, 0x80000001}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000800)={r0, r6}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000840)={'wpan3\x00'}) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x74, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x1}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xe1ab}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc1f}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x7}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x2}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8800}, 0x80) r7 = accept(r5, &(0x7f00000009c0)=@generic, &(0x7f0000000a40)=0x80) connect$bt_rfcomm(r7, &(0x7f0000000a80)={0x1f, @none, 0xfb}, 0xa) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_SET_OP_GET_BYINDEX(r8, 0x1, 0x53, &(0x7f0000000ac0)={0x7, 0x7, 0x2}, &(0x7f0000000b00)=0x28) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b80), r7) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000d40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x110, r9, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xe8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xa}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x87, 0x3, "b7c17d117345e1aae2c1e517bbf79f8044745f8dd81ff2c37ae3a23f9129533d77300a2938684d3f20762df8cba23f582d825a0a7e32e69d29ec4f40d4faad02e3109b58909d9a5496137a4546a0e313df177382fb13129480c7251aea2f0967861b8a9f0b721cb6355ed33b9498db449e0949215c951d2062bd591b3a2fb0e7c0a95d"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x69}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "b1ca81a2cba87715c78e5c610abc189285bfe12b332fc30e"}}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}]}]}, 0x110}}, 0x1) r10 = accept4(r8, 0x0, &(0x7f0000000d80), 0x1800) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000dc0)={r5, 0x401, 0x100000001, 0x2}) write$cgroup_freezer_state(r11, &(0x7f0000000e00)='FROZEN\x00', 0x7) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x2c, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8901}, 0x842) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc7f5c595b8eb1776}, 0x4000004) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r12, 0x84, 0x16, &(0x7f0000001040)={0x6, [0x2, 0x1, 0x1, 0x7, 0x1, 0x0]}, &(0x7f0000001080)=0x10) write$rfkill(r11, &(0x7f00000010c0)={0x2, 0x7, 0x1, 0x0, 0x1}, 0x8) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000001100)) sendmsg(r8, &(0x7f0000001240)={&(0x7f0000001140)=@qipcrtr={0x2a, 0x2, 0xfffffffe}, 0x80, &(0x7f0000001200)=[{&(0x7f00000011c0)="f8826534cf3ead8148d533002fcfdb528096ea52f70ba8e19eacb021f3e714c1d024d4", 0x23}], 0x1}, 0x840) recvmsg$kcm(r10, &(0x7f00000023c0)={&(0x7f0000001280)=@tipc=@name, 0x80, &(0x7f0000002300)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000002340)=""/103, 0x67}, 0x10000) sendmsg$NL80211_CMD_START_SCHED_SCAN(r11, &(0x7f0000002540)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x5637c6f8c809457c}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x2c, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_IE={0x7, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4004) 290.779393ms ago: executing program 4 (id=4079): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="ad237f1863d2d2d1a397e2a489c4ee1564e9eefdb4b79061470cc823e53d854435579529b39d744f960b8ed0bba79f9df628ff262afb11e4c03b500df2985e8f7a86f3ab28aa6e65dc1668e18aa4168755523a88d020c8955b46806d3f69f8112e948be32c675bd54ac2a8fae35dd71d00f06ab2cea8236060d1dcf3d1edf529357f70b8e066aaf93e5b32683568c00392ab3f0f8b1ac8a2ec51caacb1cc69306d814957a18b04bec4fae32726ae9013fe17948367ec6494080c4859841ebdb4d9237640caef0b7010d47901", 0xcc}, {&(0x7f0000000d80)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df895d9907e4afb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b907e0974f1073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf4dee8512f3bac440f5d5e4bed6b897608b01eae26a54433e5f5c74a2ee3c2fc50067be05a677ff52a7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fedb679328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c", 0x3a2}, {&(0x7f0000000540)="d805d6a36cce59e7ed5a1f89dd32d02bfe653c", 0x13}], 0x3, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4004015}, 0x40) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20000001) socket(0x2b, 0x80801, 0x1) (async) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) (async) socket(0x40000000015, 0x5, 0x0) (async) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) (async) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) (async) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="ad237f1863d2d2d1a397e2a489c4ee1564e9eefdb4b79061470cc823e53d854435579529b39d744f960b8ed0bba79f9df628ff262afb11e4c03b500df2985e8f7a86f3ab28aa6e65dc1668e18aa4168755523a88d020c8955b46806d3f69f8112e948be32c675bd54ac2a8fae35dd71d00f06ab2cea8236060d1dcf3d1edf529357f70b8e066aaf93e5b32683568c00392ab3f0f8b1ac8a2ec51caacb1cc69306d814957a18b04bec4fae32726ae9013fe17948367ec6494080c4859841ebdb4d9237640caef0b7010d47901", 0xcc}, {&(0x7f0000000d80)="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", 0x3a2}, {&(0x7f0000000540)="d805d6a36cce59e7ed5a1f89dd32d02bfe653c", 0x13}], 0x3, 0x0, 0x0, 0x8004}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4004015}, 0x40) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20000001) (async) 268.066031ms ago: executing program 3 (id=4080): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0xfffffffffffffe87) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de328758952e00000000", 0x59) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5b000009000000032800"/20], 0x14}}, 0x40) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f00000004c0)}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x1) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) ioctl$sock_ax25_SIOCDELRT(r3, 0x890c, &(0x7f0000000540)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x10) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004800}, 0x8015) unshare(0x62040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES8=r0, @ANYRES16=r2, @ANYRESDEC, @ANYRESHEX=0x0, @ANYRES64], 0x30}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x4000800) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0xffffffffffffff7c) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r6, &(0x7f0000002840)=[{{0x0, 0xffffffffffffffe3, 0x0}}], 0x1, 0x4000840) listen(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="70000000887af4936e5577d5", @ANYRES16=0x0, @ANYBLOB="010029bd7000fedbdf256600000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990006000000720000000800270001000000080022010b030000080022010a00000008002700030000000800a10001000000050019010f0000000400b80008009f000500000008002201830200000400b800"], 0x70}}, 0x24044041) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 198.314202ms ago: executing program 2 (id=4081): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) 196.996653ms ago: executing program 4 (id=4082): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) epoll_create(0x9) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@const={0x5, 0x0, 0x0, 0xa, 0x4}, @func={0x2, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x61, 0x30, 0x30, 0x30]}}, &(0x7f0000000640)=""/195, 0x36, 0xc3, 0xfffffffe, 0x6, 0x10000}, 0x28) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301}], {0x14}}, 0x88}}, 0x0) (async, rerun: 32) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)=ANY=[@ANYRESDEC=r1, @ANYRESOCT, @ANYBLOB="4e89b765cacc6089777609e3dd45c52ba3fc2927fb63b33b68ba692affbc64c87512e5f4f4ab49e15ed4f5d0215241192f77c1605a1ccd22a1a02ecc7c7ed95fdf583c32ebcebd4d346b9ea7d262d47c2a788ae4eeb358a61cdeaad80cb38c5e5571fb8ee06bee98db6a6a34a2308cb0e47596ae9106c888d5203c5da186b3cd0fd644f0d44c2b7c517300e5ce67091309380236de9352e7953878b10ceead83b7ce873d0fff07c1481adc77a454bbe5458fb661faef4819fca6ab81a94e5323609509f3f7c6b3b61d832184e04fce157108a85eeacbb97c10b0ff840325ff391bcda461cd150e961c319a764acb37571d16ce9d2c2ced72ca79b6bdf688238803b83da6e56a1481945fdb0ace4fc19d211e0c495de0a030a10b7d252bc8ac33df0253a95cf3860bd6556b88d1829d380d1bb24e6b9b2078636184876b7c82083d928eed5e06f1a02f8689dd80a04b7353fefa850975cd4e2d87985e3f19d91c93113e18b7df68cc5222540e991a382cb847445526c9c463777ca24203c814a637a4d67bbcc25cbc58eca50abaf8879474078cdb594ac5f401ae2841509678cb2a42408ef7585ffddd9dd912ee00589989140ec5c87d0463adeb6cf7f96f2384ce61227959a26dfdb1e42f54156bb251b12fd56dda4e3eefda0cba12a0ba4e8a598c5ed0e8fddb8d1258d4b64a4361763958df2932ca15ea05191b81cd3fa42e2d6806a2ab35ead5366ee6a24984c69919b01405b92f9767c59140c151f56377ff011f60de3326e23699d4db8d6af21ce6ed732e96edb9ceb3522fcc39020386c166c3e2ab193df8cfb6036e075b7419c9728e9de6aab94a1fc2b1940556969afc0b64c55169ff45c5376b75a404457d18bd393a7c6b1bd186bc4c54cbfde2ae3f9d3c380170aa23386d4dc49444e2431ef90430978ae5fd5c87b92288945867edb13a77aa1797fa5fa055fba42513a244b4262f414ffe7cdb8876e5c67a5ead0a84a2ef30b716e0ce171f0e28851f07f96510b380222b421dee42d1dbc839c127f51faab905cb9063dbf1887aa9cd57c25bc23c633ae571c58b0ae0a5f7c61944c195ef283a8c5e05e291c0d68824e9bde4ca0091f34fe67ce1ef90f19ca7262e22a30bcb6de6b5ebe6162111200ad47fa8600a2b97b03692361ed7008ca40de98a4e4044a484d5004dc87a97715a209c9003f00f998b08718674faf62be478d106197407fa2b4da9fbcd80e3c6f3b7b90954c1a6f299a051435c963e5137247f6b66952d0276f126f1451ed76836f0c9f1eba7d422e90d85bdf4b840174c1fd6ace66236892b1484e56439c2d408ab65e83643ec7865c581f8ff95147e41a6b482cddd0ea91c509e30960f00ffa716f44fdac9b8f51b8e5d705a23d73d2b57abcfe0cc76dcde832fc3f8fcc9635daec8b3d079f47ff9cd3f8b1c421ef275f89903eab994c338c30e9f9df8e0fd90502d53865d6d2d9d394971d98a2ff90cf34ae05e23a3fff001cbab3605fca3ee595604907e5a0a5cc1c1a6f9b6db5fab6360dd7848080625c28f67ed681a6102de65c9b3810b598f89ef1bcf96b93b9f8889a332af25fa6fc1765828bd7ebdc5fd28e60cd3a49e62f0dfeabd1f75463df2b8d96933f4ccd4d03a251ee901306d1e11f39afd82e6d12a4456be7e21daeef7568dd497c0121ab8c4882cfc14b4311692654acc0defd44ad736796990586f04b6c9ae88acebbd2bfcec6da49959fb5a64edbc49492a7aa20deb84620de3ade6b43187db39621854fbaa34ef67ba814950af0078565bda3a0ae8e5819121ca4b5f032a7b908c79596d9487c1673195b9acc0322b09933f134b858464733faa9bd5d042b715840d6c516980020f4f0106585a94de45ce420eef0d7c11cd3664164e75ae4a83269bbf9cb22e7360a9b76dbf221adc83ee77eb4d9a48925fe17b479ffab8dcbb97b7946c80dba61ede255c6c54a4c4a274e1eba365e8195a26e4f320ccf2d7408b534ed6f50bce407f1bbd9a18e494cba503670658fd1e76a63d57a96034dea206bcd1780dd056ef7bfb8b875a7ee3304b1a8c3f39822328f82c031dabda51c7383d7e46a5b65d30830f280e0b8b547a468c0f6e5883acf5d17e7bc6cb82e94cc01ca19452095cca43d377d7a0d85cfe22709e12f0637507b4d957f63712370281705e206e22a75599cd3034964617f3f551fa516c2a9b3fa8d8493c7a9e41d525e4de43e29584631a569feaaf9afaac30126addac8c583f3ba6acd638270abb235271d1e70a46752be42dc91feea3ca7cf3da4bb9f44d65d5a15171a9dcaf9fbbb1868aeb932990f031a89b2658260959d10106460b0b9f2bd16f3ccb7748c39376ac97d96ae4bd487f3af7b14a4de29c4c14f4cfabe72debe37b9b1361ec9bf06793cff3c018807884a3205ce13f373190acec48a38a928f04852fba09a3dda00d90e468f601e0edf655e9297f7fef2a281d6803c52ba46d76c802773e80204f17c6348c4285dc63f08f6e60c805d01dea60f852d12a37b93b2a04ab37986e18db34263fec772a38ca6cbd40031f26d6cc48949ad8b2ffc59e84fae21ef303b1214de7bf10c3f53b033c37f8c3e76b50c7f1c9c845a36811000ad0728bd35cc5850d14129bf412c085f75cd7b07d65955e5d5ab7699c683f774430f49a7e2f43d5606fd27a5c7ffa8f4d11a3d5e542dfcefd0b0e4f06683a8b0679dddd6daa16c5226a86481b5aa03229cad1aabd1606a265ba13eb381a215eceafa6fcce737d5ce8c723430b90e559a39eb5efe4db13dbb52d178620f9fbc0249dd9399cd7efc6fc2dc8eec168b7eb71d9d37eac18be8bb0f6cc825127c5e01722db01bf0a4378ff1274d205abbf2b11e0e60c0a2524b71d1f32aab82b1aba99efa23e6a0c8def636dc9a8c0a63245c385828f68e489a41b6ea9621470573be8189892cb58645413ed4bf708350feeac8f8636993a8fc08fa66a6b069573b6c907bae210a787f25b44d32510e63b88d8aaa9ce89f6cc6397fd7887a2a8eb187c2e6f0eb3ffd6f47ecc7c5ebf353570abda770c8d74813e27cd996eba055844cbc8afe4ab0b26bd12e0a193b320beda76b613d88a9ebc81a2cef6de8857014d0861f1db65e16977734dc55a6064ff4e28ed9d4ac64a6657a8a1bc71a8e13136ca4c7a648e9f8d9965a1c04016112ba45b4af60042f5a8f0cc4238d48eed3a27283c511b42408e6b228a60b13f9aa7ffd8c86c28e35b57586dcfbd5bfff08f3bc62441d2a8fa8db78611e04a2a31afbddbf6d1e2769b9c39dbab10533a4faab8747d8e266c08f119888365aa430266ad2411971782f58082bc17b2769c76acd7f024ce0657e95155f51ce9f047698503252ad0bfb22d91e7eaae15fe5cc922668d84e2423da2d2018ad6eaefb2db7358d6bd328f3589cb1e8919a42f5e84d4ba6a8df96a0f3f95cf26e6de5c64f608957bc48c964ffbd31887db2544fbc421c9abe842e7354f24c995b469ebf048dcf9aadf126f41fb3fc6d22ab661c2a0db437e1d881c7a0a20c7c67b1c18f0a3707f486d2260a76e6d8aa574f1c6a9519c321d392864aa59bbca5a528b532f2e1f63f1f9e60e3248e2f425367599cc60f975ae7fc53a9c61b8401f9112c9ece54932da7b1325aebbd643e59d97004426f1d35bb52f6db965629966a49ad2bcf23b1b9148fc3b3f2a94a10f5505b6d208e37dcf00135621c56e809431e9b8225ba1bdb8d631d82c7ba06f7427c6a11b61241ff3c8693acc3f1cf455b457d6a58e0fe5eb10134b26c647ed6f3439ff5f09165c706e4ffde79addde0cd410ad656d72804af0c493a59eff25769151e5f2d8acd29d35a69c3ed7ee2e5c5a00352b374cf97455b7ccdd02b3bbc70e3c0c93dc61592719eec56e17efbe924f897596f810861df6291690fb4847945fe9d71d49e73c48f852cd6bce2b806b4708a4e7682c13e93111b20266da5d99513113ab307c27c5e3d54bef9bc05642ea90d6fdcbae22634cc98b8502b960e1dc02bbaa1e1c137f55e0a2c53b553ce4a5deae1170ca4c1e51b5726362552edc9f7828bff6196458e2633e7bce95b62b700744507908bc463c29f7b2781edb50528de9a8b19768e1f9a9d9d3ba3327805472f1d2cb1fff15c4aadfd66879f8a065079126504783627a377f5318e0d070d4de7d01c6b73b6e0785d2f2681c9af5bf4bad23114562a518f71b7cf6f4f4415f81994e78dcd1fc6df559cacfbed9dd71595cff4d9eda7e5697f46eb0043e92b1fdeee80734381759a8234f3a3579d7377ee8fa6bb27b141761385526cb6e2e73bc4ecd26de6200d48fa2c93ee6b25b918b03680831d8fc2b18470227307012033d215c872a2607d85316462f619381f84b5376d80f2d3feb684495a6c980dbfef4f35e1b9e6581a1b5881032c6fbb1d56c88ffaea2e78547b55fcc1e2cb08167f3a757de590b5d3ef196875ec2bbeda109d3a54aefb73b0b77c5596ab93e6c621b79cef2e371e4f51f5795aafd18c51855b717c39f7ab4453264453902df9d3a37c484616cd8cc5fb576aae8b9ef25768bb085e444863c815da79760e8b0cbdf776e08c5cefd38d6f123971d65691c08009cfb7297cf9966a8c199e7c4138d3448feeb0f3289ea91a1bdbbb59d7472cbb05df8fe63a4a667568fbd2c18424ee8e4e4566cecfc6bd8aa06d6544b41007f58af277af87b98a670cd79b76d430d5cc7b63bb502a62db3f7f649b6e2f77e4e0fd0febee15140f59ec12d36eef4e20a6ee24b875f2d236802f93fdeee5ee0c5d6123c4557e65dd36f21563cb33143b97954f02cc28b1897fab8c6a67cc502b27b9ed8d3061fef338ae03148b404a57e77079f546c53040597fdc812ca9a1a6f1dc698ea0563c6c497e492ebe6e1bea3c76727e110bdcb69b795c69b67de7f1663f6ba9dc5c4bb2f9d3144409ee5602cbbdc2a8ea08ac265780f20b63c380258c81f20a02db0f7e2b0c5ddca45e6be8ff9d3681a72ac9344457f2a12e0657994c66e4e329395042110f5d69b850e485048b123af3ad1ab2c3949f7d9c70e019a9508f59bcf911562f427fdcb498da08118a627034bf5e88dff3a9d38904bb566b8c704d98f80fcc4a866a64df475a87c3cf8d832f6f8abe819edfb63b0c52b61f3684efe02734484a1571f0b4d1cd19c13a3381aa857baec7639603dee0ec2cebde25d2204beb731defcdff6178ec83fd3d72602fa0ef74249d11093db35fdf1d1eee0ae81ab3e6d492ca49292a6990f627ce2364f87047c4da81758e797b72b2cc616c9c9960581c983b4f34be84672bebbd514a82303acc5258f07fb8c876a0060261a45dc963a2bd179d9f4a99b1ed29612041111a51739466fdbe30aff13461196079427f1c6a98bb82cf27da0b0594acfba0b5ff4b997bbdd8f8bab84d401ce966735765209d3d1aae08993ed78089ecdc499086807868b4562346695a01e1419bfd2e55b914f9921624c1e7ffd64a4d6376379129e82631c43c1664059d934f63bd79d5f0278d61a14a5feae0f4549d53afb6e4cee8b77ac6b4c4d9c294c3a1d309540fe2bbaeff0ce80fc6a8a85f8985fc83172ae2727b3c2ee96dcd810d19607543a0495047708fe87be406bd41d763fdca5144066890b92f1726b6f219ec1391cad5a749ea3e4ca8a2a50307f1cf3d855e22dff398f2a30b94e9ac110978edb3498568d8df76d430ba10aff71a0b5936d49e12e37f4e444740e18b9e56a811767d8d63cfccc3155bca1aec67b6df3a7c56090a95c6f261f0a719403a714e7957ec78f", @ANYRES16], 0x50) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x10, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ldst={0x1, 0x0, 0x4, 0x0, 0xa, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0xfa, &(0x7f0000000440)=""/250, 0x40f00, 0x48}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a09000000010000000000"], 0x4c}}, 0x0) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x0, 0x4}, 0x9c) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000240)={0x9, 0xe, 0x1, 0x7f, 0x80000000, 0x7, 0x2, 0x9}, 0x20) (async) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e22, @remote}, 0xd) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xd4}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x19) r7 = socket$netlink(0x10, 0x3, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r7) (async, rerun: 64) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b0000"], 0x50) (async, rerun: 64) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) ioctl$sock_bt_hci(r8, 0x800448d2, &(0x7f0000000500)) (async) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 150.585199ms ago: executing program 0 (id=4083): socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x33) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="b6400000260011", @ANYRESDEC=r3], 0xfe33) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{0xa}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x10}}, @NETEM_LOSS_GE={0x14, 0x2, {0x3, 0x9, 0xc, 0xfff}}]}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x88}}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) r6 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 126.493986ms ago: executing program 2 (id=4084): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)='l3', 0x2}], 0x3, 0x0, 0x0, 0x2c040000}], 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001002abd70000002000000000000", @ANYRES32=0x0, @ANYBLOB="0801000000000000140003006e657464657673696d3000000000000008001b000800000014001680100001800c0009"], 0x50}}, 0x800) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f00000018c0)="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", 0x1000}, {&(0x7f0000001380)="625acd8f38fb2d83d2e0aa839a894c77c03015b83731793e2a2fa534307fbbf2c990592cb642f557ecb70bbe625ae3248727161901baaa286f0cd36aafeb5c1d487e8506490fe0616a2af6"}], 0x4b) recvmmsg(r0, 0x0, 0x0, 0xb, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000018000000bca3000000000000240300f840feffff720af0ff0000000071a4f1ff000000001f030000000000002e0a0200000000002600030008ff000e61145e00000000001d430000000000007a0a00fe00581c1f6114500000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e28488b0522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b669615f2710eb8df39fc8c04d2c9c196fa6facfea613569a35cde6451f2edf55ce25c7d72ec7ea85a92458c0559ca3a94727d495bd4671a55a70bc544d71d8e0257707a31936f1adf224077310a86bf447ec92c650acca8c6b0721020894b06178c32f4472d17174d6eb2b067030c5d2c12583f46d2da7fba42d4083259c7cdc8bf1f4299c248865d3c809356c3ed"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe5e, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) sendto$inet6(r0, 0x0, 0x0, 0x40800, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = socket(0x2, 0x5, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000180)={0x3c, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d6}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) 46.077324ms ago: executing program 4 (id=4085): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c014) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) (async, rerun: 32) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) r3 = epoll_create1(0x80000) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000b8000001294", 0x2e}], 0x1}, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r5) sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8814}, 0x0) (async, rerun: 32) r7 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) close(r7) (async) socket$tipc(0x1e, 0x2, 0x0) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x25, &(0x7f00000004c0)=0x8000, 0x4) (async) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e21, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xffffffff}, 0x1c) (async) getsockopt$sock_buf(r9, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) (async) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r7, &(0x7f0000000100)={0xa0028000}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x0, 0x55}, 0x28) 0s ago: executing program 0 (id=4086): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) shutdown(r0, 0x2) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r1, 0xdb9, 0x7}, &(0x7f0000000180)=0x10) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x50, r0, 0xa08da000) kernel console output (not intermixed with test programs): 16231] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 495.298208][T16193] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.309023][T16193] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.316588][T16193] bridge_slave_1: entered allmulticast mode [ 495.323652][T16193] bridge_slave_1: entered promiscuous mode [ 495.364890][T16231] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 495.438144][T16193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.455858][T16193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.488887][T16193] team0: Port device team_slave_0 added [ 495.499317][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 495.510610][T16193] team0: Port device team_slave_1 added [ 495.543942][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 495.559592][T16193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.566967][T16193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.595033][T16193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.605820][ T5181] Bluetooth: hci4: command tx timeout [ 495.611732][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 495.628789][T16193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.637010][T16193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.663296][T16193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.674377][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 495.724404][T16193] hsr_slave_0: entered promiscuous mode [ 495.732783][T16193] hsr_slave_1: entered promiscuous mode [ 495.742755][T16193] debugfs: 'hsr0' already exists in 'hsr' [ 495.750872][T16193] Cannot create hsr debugfs directory [ 495.993091][ T2983] hsr_slave_0: left promiscuous mode [ 496.002593][ T2983] hsr_slave_1: left promiscuous mode [ 496.008889][ T2983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.016960][ T2983] hsr0: left allmulticast mode [ 496.021780][ T2983] hsr0: left promiscuous mode [ 496.142807][T15987] smc: removing ib device syz0 [ 496.444879][T16193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 496.482438][T16193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 496.515081][T16193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 496.541108][T16193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 496.730991][T16265] lo speed is unknown, defaulting to 1000 [ 497.059982][T16193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.133266][T16193] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.209319][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.216526][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.271139][T15987] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.288798][T15987] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 497.298161][T15987] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 497.342835][T15987] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.350117][T15987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.429962][ T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.447816][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 497.473897][ T13] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 497.529188][T16294] __nla_validate_parse: 1 callbacks suppressed [ 497.529210][T16294] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2813'. [ 497.561516][ T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.588425][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 497.614181][ T13] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 497.628781][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.637617][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 497.638006][ T2983] IPVS: stop unused estimator thread 0... [ 497.648952][ T13] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 497.671051][T16293] lo speed is unknown, defaulting to 1000 [ 497.676957][ T5181] Bluetooth: hci4: command tx timeout [ 497.872751][T16314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2817'. [ 497.892238][T16314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2817'. [ 497.913733][T16314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2817'. [ 497.928937][T16314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2817'. [ 497.949190][T16314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2817'. [ 497.963992][T16314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2817'. [ 497.974786][T16314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2817'. [ 498.079887][T16193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.087128][T16323] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2819'. [ 498.114713][T16324] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2819'. [ 498.134176][T16193] veth0_vlan: entered promiscuous mode [ 498.173567][T16193] veth1_vlan: entered promiscuous mode [ 498.242442][T16193] veth0_macvtap: entered promiscuous mode [ 498.259019][T16333] bridge0: port 1(batadv1) entered blocking state [ 498.271410][T16333] bridge0: port 1(batadv1) entered disabled state [ 498.283845][T16333] batadv1: entered allmulticast mode [ 498.310837][T16333] batadv1: entered promiscuous mode [ 498.385146][T16193] veth1_macvtap: entered promiscuous mode [ 498.392737][T16343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 498.413693][T16193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.439494][T16193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.475290][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.508199][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.527602][ T6372] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.536720][ T6372] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.577535][T16359] net_ratelimit: 296 callbacks suppressed [ 498.577553][T16359] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 498.612225][T16360] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607) [ 498.622554][T16360] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 498.757252][ T6366] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 498.766725][ T6366] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 499.308873][T16348] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 499.389090][ T6366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.414220][ T6366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.432803][T16382] netlink: 'syz.0.2835': attribute type 10 has an invalid length. [ 499.457752][T16382] bond0: (slave wlan1): refused to change device type [ 499.470077][T16389] nbd: nbd1 already in use [ 499.496547][ T6372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.515785][ T6372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.720565][T16401] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 499.756021][ T5181] Bluetooth: hci4: command tx timeout [ 499.920967][T16422] netlink: 'syz.1.2844': attribute type 1 has an invalid length. [ 499.945633][T16422] 8021q: adding VLAN 0 to HW filter on device bond12 [ 499.965005][T16422] bond12: (slave ip6gretap2): making interface the new active one [ 499.974719][T16422] bond12: (slave ip6gretap2): Enslaving as an active interface with an up link [ 500.085741][T16426] smc: net device bond0 applied user defined pnetid SYZ2 [ 500.446851][T16422] veth7: entered promiscuous mode [ 500.500367][T16427] erspan0: entered allmulticast mode [ 500.701207][T16454] netlink: 'syz.0.2854': attribute type 10 has an invalid length. [ 500.805450][T16456] lo speed is unknown, defaulting to 1000 [ 501.164079][T16487] netlink: 'syz.0.2861': attribute type 1 has an invalid length. [ 501.376903][T16496] lo speed is unknown, defaulting to 1000 [ 501.650042][ T13] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 501.663868][ T5872] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 501.672606][ T5872] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 501.681773][ T5872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 501.690490][ T5872] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 501.698595][ T5872] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 501.740114][ T13] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 501.765628][T16509] lo speed is unknown, defaulting to 1000 [ 501.801942][ T13] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 501.838411][ T5181] Bluetooth: hci4: command tx timeout [ 501.868746][ T13] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 501.993332][T16509] chnl_net:caif_netlink_parms(): no params data found [ 502.155019][ T13] bond12 (unregistering): (slave ip6gretap2): Releasing active interface [ 502.312175][ T13] tipc: Disabling bearer [ 502.620867][ T13] bond1 (unregistering): Released all slaves [ 502.639819][ T13] bond2 (unregistering): Released all slaves [ 502.752464][ T13] bond0 (unregistering): Released all slaves [ 502.766250][ T13] bond3 (unregistering): Released all slaves [ 502.776667][ T13] bond4 (unregistering): Released all slaves [ 502.788621][ T13] bond5 (unregistering): Released all slaves [ 502.810068][ T13] bond6 (unregistering): Released all slaves [ 502.821916][ T13] bond7 (unregistering): Released all slaves [ 502.837374][ T13] bond8 (unregistering): Released all slaves [ 502.854208][ T13] bond9 (unregistering): Released all slaves [ 502.872910][ T13] bond10 (unregistering): Released all slaves [ 502.888461][ T13] bond11 (unregistering): Released all slaves [ 502.907968][ T13] bond12 (unregistering): Released all slaves [ 503.013930][ T13] : left promiscuous mode [ 503.035507][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 503.061518][T16509] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.081778][T16509] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.096941][T16509] bridge_slave_0: entered allmulticast mode [ 503.111585][T16509] bridge_slave_0: entered promiscuous mode [ 503.126989][T16509] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.134251][T16509] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.141699][T16509] bridge_slave_1: entered allmulticast mode [ 503.156353][T16509] bridge_slave_1: entered promiscuous mode [ 503.174812][ T13] tipc: Disabling bearer [ 503.184376][ T13] tipc: Left network mode [ 503.282872][T16509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.300730][T16509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.427270][T16509] team0: Port device team_slave_0 added [ 503.442980][T16509] team0: Port device team_slave_1 added [ 503.496157][T16509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.503721][T16509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.530452][T16509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.547432][T16509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.554420][T16509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.580528][T16509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.621306][T16509] hsr_slave_0: entered promiscuous mode [ 503.627739][T16509] hsr_slave_1: entered promiscuous mode [ 503.633815][T16509] debugfs: 'hsr0' already exists in 'hsr' [ 503.639768][T16509] Cannot create hsr debugfs directory [ 503.653391][ T13] hsr_slave_0: left promiscuous mode [ 503.659626][ T13] hsr_slave_1: left promiscuous mode [ 503.673949][ T13] pimreg3 (unregistering): left allmulticast mode [ 503.742078][T16592] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.758761][ T5181] Bluetooth: hci1: command tx timeout [ 503.861797][T16608] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 503.911814][T16614] __nla_validate_parse: 26 callbacks suppressed [ 503.911835][T16614] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2895'. [ 503.928985][T16614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2895'. [ 504.411588][ T13] IPVS: stop unused estimator thread 0... [ 504.435599][T16651] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2906'. [ 504.503724][T16651] syzkaller0: entered promiscuous mode [ 504.509641][T16651] syzkaller0: entered allmulticast mode [ 504.517786][T16653] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 504.528088][T16651] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 505.255443][T16509] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 505.278291][T16509] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 505.294415][T16671] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2911'. [ 505.313865][T16509] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 505.333680][T16509] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 505.369510][T16682] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2914'. [ 505.488349][T16687] netlink: 704 bytes leftover after parsing attributes in process `syz.0.2916'. [ 505.503773][T16509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.543896][T16689] veth1: entered promiscuous mode [ 505.552960][T16689] batadv_slave_0: entered promiscuous mode [ 505.563449][T16689] hsr1: Slave A (veth1) is not up; please bring it up to get a fully working HSR network [ 505.577009][T16689] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 505.588377][T16689] hsr1: entered promiscuous mode [ 505.602824][T16509] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.621103][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.628373][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.647628][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.654828][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.835642][ T5181] Bluetooth: hci1: command tx timeout [ 506.032121][T16719] IPVS: length: 4096 != 8 [ 506.122961][T16509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.162317][T16728] netlink: 'syz.3.2926': attribute type 8 has an invalid length. [ 506.179781][T16730] Unsupported ieee802154 address type: 0 [ 506.186927][T16730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2925'. [ 506.222020][T16734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2926'. [ 506.231786][T16734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2926'. [ 506.263377][T16732] ieee802154 phy0 wpan0: encryption failed: -126 [ 506.277411][T16509] veth0_vlan: entered promiscuous mode [ 506.290785][T16509] veth1_vlan: entered promiscuous mode [ 506.318721][T16734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2926'. [ 506.331415][T16737] netlink: 'syz.4.2929': attribute type 18 has an invalid length. [ 506.408403][T16509] veth0_macvtap: entered promiscuous mode [ 506.417729][T16738] tipc: Enabling of bearer rejected, already enabled [ 506.454581][T16509] veth1_macvtap: entered promiscuous mode [ 506.469235][T16743] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 506.502261][T16746] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 506.513399][T16746] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 506.531328][T16509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.558776][T16509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.594225][ T6366] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.609594][ T6366] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.621633][ T6366] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.656398][ T6366] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.747765][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.757258][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.826874][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.834756][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.888517][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.991711][T16772] netlink: 'syz.1.2863': attribute type 10 has an invalid length. [ 507.011401][T16772] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 507.032132][T16768] lo speed is unknown, defaulting to 1000 [ 507.236889][T16787] nbd: socks must be embedded in a SOCK_ITEM attr [ 507.472135][T16806] lo speed is unknown, defaulting to 1000 [ 507.567939][T16812] bridge_slave_0: left allmulticast mode [ 507.599101][T16812] bridge_slave_0: left promiscuous mode [ 507.613459][T16812] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.661049][T16812] bridge_slave_1: left allmulticast mode [ 507.668573][T16812] bridge_slave_1: left promiscuous mode [ 507.674747][T16812] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.694836][T16812] bond0: (slave bond_slave_0): Releasing backup interface [ 507.708688][T16812] bond0: (slave bond_slave_1): Releasing backup interface [ 507.725181][T16812] team0: Port device team_slave_0 removed [ 507.744896][T16812] team0: Port device team_slave_1 removed [ 507.753916][T16812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.763047][T16812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.774449][T16812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.787475][T16812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.912492][T16834] netlink: 'syz.1.2953': attribute type 13 has an invalid length. [ 507.925987][ T5181] Bluetooth: hci1: command tx timeout [ 507.943594][T16836] netlink: 'syz.2.2954': attribute type 1 has an invalid length. [ 507.967464][T16834] gretap0: refused to change device tx_queue_len [ 507.974534][T16834] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 508.008023][T16843] ieee802154 phy0 wpan0: encryption failed: -126 [ 508.010245][T16836] 8021q: adding VLAN 0 to HW filter on device bond1 [ 508.076893][T16836] 8021q: adding VLAN 0 to HW filter on device bond1 [ 508.086048][T16836] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 508.107243][T16836] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 508.140493][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.159704][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.187499][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.205895][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.391785][T16869] macvlan5: entered promiscuous mode [ 508.398486][T16869] bond0: entered promiscuous mode [ 508.404086][T16869] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 508.443424][T16868] syzkaller1: entered promiscuous mode [ 508.449198][T16868] syzkaller1: entered allmulticast mode [ 508.461906][T16868] dvmrp0: entered allmulticast mode [ 508.554966][T16878] netlink: 'syz.2.2967': attribute type 1 has an invalid length. [ 508.629685][T16879] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 508.735229][T16898] ªªªªª: renamed from bond_slave_0 [ 509.054753][T16917] lo speed is unknown, defaulting to 1000 [ 509.222703][T16949] __nla_validate_parse: 142 callbacks suppressed [ 509.222793][T16949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2987'. [ 509.308794][T16958] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 509.417310][T16966] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2994'. [ 509.995636][ T5181] Bluetooth: hci1: command tx timeout [ 519.036192][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 551.190009][T16985] tipc: Enabling of bearer rejected, already enabled [ 551.199127][T16985] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 551.206717][T16985] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 551.208149][T16987] netlink: 'syz.3.3001': attribute type 1 has an invalid length. [ 551.216167][T16985] IPVS: set_ctl: invalid protocol: 113 224.0.0.1:20000 [ 551.230281][T16988] lo speed is unknown, defaulting to 1000 [ 551.247654][T16987] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3001'. [ 551.280759][T16989] netlink: 'syz.1.2997': attribute type 1 has an invalid length. [ 551.294344][T16991] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3003'. [ 551.434869][T16998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.453303][T16998] netlink: 'syz.0.3006': attribute type 8 has an invalid length. [ 551.608771][T17007] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3008'. [ 551.653065][T17007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3008'. [ 551.675655][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 551.762252][T17018] netlink: 'syz.0.3013': attribute type 1 has an invalid length. [ 552.060693][T17043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3019'. [ 552.273863][T17061] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3024'. [ 552.304303][T17061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3024'. [ 552.406538][T17061] bond1: entered promiscuous mode [ 552.441010][T17061] bond1: entered allmulticast mode [ 552.499469][T17061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 552.659940][T17066] lo speed is unknown, defaulting to 1000 [ 552.828480][T17077] tipc: Started in network mode [ 552.855042][T17077] tipc: Node identity aee6242ee032, cluster identity 4711 [ 552.870575][T17077] tipc: Enabled bearer , priority 0 [ 552.880956][T17079] syzkaller0: entered promiscuous mode [ 552.890007][T17079] syzkaller0: entered allmulticast mode [ 552.973944][T17079] tipc: Resetting bearer [ 553.001214][T17079] tipc: Disabling bearer [ 553.015424][T17089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3031'. [ 553.071276][T17093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3033'. [ 553.083322][T17093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3033'. [ 553.409023][T17114] lo speed is unknown, defaulting to 1000 [ 553.528986][T17124] bridge_slave_0: left allmulticast mode [ 553.554381][T17124] bridge_slave_0: left promiscuous mode [ 553.574786][T17124] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.607664][T17124] bridge_slave_1: left allmulticast mode [ 553.614594][T17124] bridge_slave_1: left promiscuous mode [ 553.638842][T17124] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.682155][T17124] bond0: (slave bond_slave_0): Releasing backup interface [ 553.720029][ T5872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 553.728007][ T5872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 553.735500][ T5872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 553.740288][T17124] bond0: (slave bond_slave_1): Releasing backup interface [ 553.744319][ T5872] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 553.757840][ T5872] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 553.782423][T17124] team0: Port device team_slave_0 removed [ 553.794363][T17124] team0: Port device team_slave_1 removed [ 553.801387][T17124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.809127][T17124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.817910][T17124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.825564][T17124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.840856][T17124] bond0: (slave wlan1): Releasing backup interface [ 553.974200][T17134] lo speed is unknown, defaulting to 1000 [ 554.150858][T17163] netlink: 'syz.2.3051': attribute type 5 has an invalid length. [ 554.169947][T17163] netlink: 'syz.2.3051': attribute type 7 has an invalid length. [ 554.208258][T17134] chnl_net:caif_netlink_parms(): no params data found [ 554.233326][T17163] : entered promiscuous mode [ 554.392604][T17169] lo speed is unknown, defaulting to 1000 [ 554.509577][T17134] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.522963][T17134] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.532854][T17134] bridge_slave_0: entered allmulticast mode [ 554.541667][T17134] bridge_slave_0: entered promiscuous mode [ 554.574267][T17190] 8021q: adding VLAN 0 to HW filter on device bond3 [ 554.582219][T17134] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.589977][T17134] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.600266][T17134] bridge_slave_1: entered allmulticast mode [ 554.607988][T17134] bridge_slave_1: entered promiscuous mode [ 554.691533][T17134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.710656][T17134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.802099][T17134] team0: Port device team_slave_0 added [ 554.859987][T17134] team0: Port device team_slave_1 added [ 554.978686][T17134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.988234][T17134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.015299][T17134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.041664][T17134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.049151][T17134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.081189][T17134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.179467][T17134] hsr_slave_0: entered promiscuous mode [ 555.203114][T17134] hsr_slave_1: entered promiscuous mode [ 555.325287][T17227] netlink: 'syz.0.3066': attribute type 12 has an invalid length. [ 555.752060][T17271] netlink: 'syz.3.3078': attribute type 3 has an invalid length. [ 555.779925][T17134] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 555.820148][T17134] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 555.835639][ T5181] Bluetooth: hci0: command tx timeout [ 555.846878][T17134] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 555.874128][T17134] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 556.104286][T17134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.120808][T17134] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.141491][T15987] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.148681][T15987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.168120][ T6366] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.175272][ T6366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.247885][T17310] netlink: 'syz.0.3087': attribute type 1 has an invalid length. [ 556.331915][T17310] 8021q: adding VLAN 0 to HW filter on device bond8 [ 556.354000][T17310] __nla_validate_parse: 13 callbacks suppressed [ 556.354021][T17310] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3087'. [ 556.369698][T17320] netlink: 'syz.2.3088': attribute type 12 has an invalid length. [ 556.390748][T17310] bond0: mtu less than device minimum [ 556.482892][T17134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.508317][T17333] tipc: Enabled bearer , priority 0 [ 556.530808][T17333] syzkaller0: entered promiscuous mode [ 556.551429][T17342] Dead loop on virtual device ip6_vti0, fix it urgently! [ 556.557284][T17333] syzkaller0: entered allmulticast mode [ 556.659861][T17341] tipc: Resetting bearer [ 556.682962][T17341] tipc: Disabling bearer [ 556.744685][T17355] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3098'. [ 556.765446][T17359] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3099'. [ 556.785140][T17354] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3098'. [ 556.794053][T17363] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3100'. [ 556.804709][T17354] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3098'. [ 556.826185][T17355] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3098'. [ 556.888548][T17366] bridge1: entered promiscuous mode [ 556.893811][T17366] bridge1: entered allmulticast mode [ 556.978231][T17134] veth0_vlan: entered promiscuous mode [ 556.991236][T17380] netlink: 'syz.0.3103': attribute type 29 has an invalid length. [ 557.007114][T17134] veth1_vlan: entered promiscuous mode [ 557.049649][T17134] veth0_macvtap: entered promiscuous mode [ 557.076726][T17134] veth1_macvtap: entered promiscuous mode [ 557.118703][T17134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 557.152293][T17134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 557.227762][T17400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3107'. [ 557.451802][T15987] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.478173][T15987] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.498446][T15987] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.513904][T15987] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.825147][T15987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.849934][T15987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.901034][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.926284][ T5181] Bluetooth: hci0: command tx timeout [ 557.934730][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.964769][T17417] netlink: 'syz.0.3112': attribute type 1 has an invalid length. [ 557.981604][T17414] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3110'. [ 558.014848][T17417] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3112'. [ 558.324917][T17429] tipc: Enabled bearer , priority 0 [ 558.351376][T17429] syzkaller0: entered promiscuous mode [ 558.375087][T17429] syzkaller0: entered allmulticast mode [ 558.424426][T17429] tipc: Resetting bearer [ 558.447908][T17428] tipc: Resetting bearer [ 558.473748][T17428] tipc: Disabling bearer [ 558.729245][ T5872] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 558.738874][ T5872] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 558.746417][ T5872] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 558.758623][ T5872] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 558.766267][ T5872] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 558.862312][T17436] lo speed is unknown, defaulting to 1000 [ 558.953785][T17448] tipc: Enabled bearer , priority 0 [ 558.991730][T17451] bond0 (unregistering): Released all slaves [ 559.031544][T17448] tipc: Resetting bearer [ 559.043042][T17447] tipc: Disabling bearer [ 559.312607][T17436] chnl_net:caif_netlink_parms(): no params data found [ 559.420009][T17469] lo speed is unknown, defaulting to 1000 [ 559.481212][T17436] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.494924][T17436] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.510912][T17436] bridge_slave_0: entered allmulticast mode [ 559.530624][T17436] bridge_slave_0: entered promiscuous mode [ 559.567958][T17436] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.581332][T17436] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.593504][T17436] bridge_slave_1: entered allmulticast mode [ 559.603758][T17436] bridge_slave_1: entered promiscuous mode [ 559.641348][T17475] syz_tun: entered allmulticast mode [ 559.665708][T17436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.678937][T17436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.693739][T17475] dvmrp1: entered allmulticast mode [ 559.751748][T17474] syz_tun: left allmulticast mode [ 559.762197][T17436] team0: Port device team_slave_0 added [ 559.784157][T17436] team0: Port device team_slave_1 added [ 559.844278][T17436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.854506][T17436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.881118][T17436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.894788][T17436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.902135][T17436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.928828][T17436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.005715][ T5181] Bluetooth: hci0: command tx timeout [ 560.018167][T17436] hsr_slave_0: entered promiscuous mode [ 560.041327][T17436] hsr_slave_1: entered promiscuous mode [ 560.048089][T17436] debugfs: 'hsr0' already exists in 'hsr' [ 560.054087][T17436] Cannot create hsr debugfs directory [ 560.183236][T17502] lo speed is unknown, defaulting to 1000 [ 560.332860][T17436] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.345700][T17436] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.429274][T17436] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.445756][T17436] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.490819][T17522] netlink: 'syz.1.3139': attribute type 4 has an invalid length. [ 560.537692][T17436] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.565104][T17436] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.690900][T17436] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.706947][T17436] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.798426][ T5181] Bluetooth: hci2: command tx timeout [ 560.817362][T17535] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.828661][T17535] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.863935][T17436] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 560.899592][T17535] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.915128][T17535] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.948844][T17436] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 560.959997][T17436] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 560.979949][T17436] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 561.025264][T17535] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.039544][T17535] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.054254][T17551] syz.4.3145: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 561.076860][T17551] CPU: 0 UID: 0 PID: 17551 Comm: syz.4.3145 Not tainted syzkaller #0 PREEMPT(full) [ 561.076892][T17551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 561.076906][T17551] Call Trace: [ 561.076914][T17551] [ 561.076923][T17551] dump_stack_lvl+0x189/0x250 [ 561.076958][T17551] ? __pfx_dump_stack_lvl+0x10/0x10 [ 561.076983][T17551] ? __pfx__printk+0x10/0x10 [ 561.077019][T17551] ? lock_release+0x4b/0x3e0 [ 561.077052][T17551] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 561.077079][T17551] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 561.077105][T17551] warn_alloc+0x214/0x310 [ 561.077141][T17551] ? __pfx_warn_alloc+0x10/0x10 [ 561.077178][T17551] ? __get_vm_area_node+0x28f/0x300 [ 561.077208][T17551] ? hash_ipportip_create+0x358/0xfe0 [ 561.077233][T17551] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 561.077263][T17551] ? do_syscall_64+0xfa/0x3b0 [ 561.077300][T17551] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 561.077334][T17551] ? rcu_is_watching+0x15/0xb0 [ 561.077355][T17551] ? hash_ipportip_create+0x358/0xfe0 [ 561.077376][T17551] ? hash_ipportip_create+0x358/0xfe0 [ 561.077397][T17551] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 561.077427][T17551] ? hash_ipportip_create+0x358/0xfe0 [ 561.077449][T17551] ? hash_ipportip_create+0x2fe/0xfe0 [ 561.077473][T17551] hash_ipportip_create+0x358/0xfe0 [ 561.077500][T17551] ? __nla_parse+0x40/0x60 [ 561.077536][T17551] ? __pfx_hash_ipportip_create+0x10/0x10 [ 561.077560][T17551] ip_set_create+0xa94/0x1940 [ 561.077586][T17551] ? ip_set_create+0x4a2/0x1940 [ 561.077618][T17551] ? __pfx_ip_set_create+0x10/0x10 [ 561.077657][T17551] ? rcu_is_watching+0x15/0xb0 [ 561.077678][T17551] ? lock_release+0x4b/0x3e0 [ 561.077708][T17551] ? __nla_parse+0x40/0x60 [ 561.077742][T17551] nfnetlink_rcv_msg+0xb4a/0x1130 [ 561.077771][T17551] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 561.077810][T17551] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 561.077838][T17551] ? kasan_save_free_info+0x46/0x50 [ 561.077889][T17551] netlink_rcv_skb+0x205/0x470 [ 561.077919][T17551] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 561.077948][T17551] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 561.077986][T17551] ? bpf_lsm_capable+0x9/0x20 [ 561.078022][T17551] ? security_capable+0x7e/0x2e0 [ 561.078057][T17551] nfnetlink_rcv+0x26a/0x2520 [ 561.078085][T17551] ? __dev_queue_xmit+0x1d79/0x3b50 [ 561.078117][T17551] ? __dev_queue_xmit+0x27b/0x3b50 [ 561.078147][T17551] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 561.078173][T17551] ? __pfx___dev_queue_xmit+0x10/0x10 [ 561.078205][T17551] ? ref_tracker_free+0x63a/0x7d0 [ 561.078236][T17551] ? __asan_memcpy+0x40/0x70 [ 561.078259][T17551] ? __pfx_ref_tracker_free+0x10/0x10 [ 561.078298][T17551] ? skb_clone+0x246/0x3a0 [ 561.078325][T17551] ? __netlink_deliver_tap+0x807/0x850 [ 561.078357][T17551] ? netlink_deliver_tap+0x2e/0x1b0 [ 561.078387][T17551] ? rcu_is_watching+0x15/0xb0 [ 561.078406][T17551] ? netlink_deliver_tap+0x2e/0x1b0 [ 561.078436][T17551] ? lock_release+0x4b/0x3e0 [ 561.078473][T17551] netlink_unicast+0x82c/0x9e0 [ 561.078507][T17551] ? __pfx_netlink_unicast+0x10/0x10 [ 561.078536][T17551] ? netlink_sendmsg+0x642/0xb30 [ 561.078554][T17551] ? skb_put+0x11b/0x210 [ 561.078575][T17551] netlink_sendmsg+0x805/0xb30 [ 561.078600][T17551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.078620][T17551] ? futex_unqueue+0x22/0x240 [ 561.078642][T17551] ? aa_sock_msg_perm+0xf1/0x1d0 [ 561.078662][T17551] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 561.078685][T17551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.078704][T17551] __sock_sendmsg+0x21c/0x270 [ 561.078733][T17551] ____sys_sendmsg+0x505/0x830 [ 561.078757][T17551] ? __pfx_____sys_sendmsg+0x10/0x10 [ 561.078785][T17551] ? import_iovec+0x74/0xa0 [ 561.078810][T17551] ___sys_sendmsg+0x21f/0x2a0 [ 561.078834][T17551] ? __pfx____sys_sendmsg+0x10/0x10 [ 561.078859][T17551] ? futex_wait+0x285/0x360 [ 561.078904][T17551] ? __fget_files+0x2a/0x420 [ 561.078922][T17551] ? __fget_files+0x3a0/0x420 [ 561.078946][T17551] __x64_sys_sendmsg+0x19b/0x260 [ 561.078970][T17551] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 561.079007][T17551] ? rcu_is_watching+0x15/0xb0 [ 561.079031][T17551] ? rcu_is_watching+0x15/0xb0 [ 561.079053][T17551] do_syscall_64+0xfa/0x3b0 [ 561.079073][T17551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.079094][T17551] ? clear_bhb_loop+0x60/0xb0 [ 561.079118][T17551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.079139][T17551] RIP: 0033:0x7f4abd78ebe9 [ 561.079158][T17551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.079178][T17551] RSP: 002b:00007f4abe56e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.079202][T17551] RAX: ffffffffffffffda RBX: 00007f4abd9b6180 RCX: 00007f4abd78ebe9 [ 561.079218][T17551] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 000000000000007b [ 561.079232][T17551] RBP: 00007f4abd811e19 R08: 0000000000000000 R09: 0000000000000000 [ 561.079246][T17551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 561.079259][T17551] R13: 00007f4abd9b6218 R14: 00007f4abd9b6180 R15: 00007ffe7c41fd68 [ 561.079284][T17551] [ 561.079445][T17551] Mem-Info: [ 561.616152][T17551] active_anon:11686 inactive_anon:0 isolated_anon:0 [ 561.616152][T17551] active_file:3146 inactive_file:39967 isolated_file:0 [ 561.616152][T17551] unevictable:768 dirty:179 writeback:0 [ 561.616152][T17551] slab_reclaimable:12713 slab_unreclaimable:129221 [ 561.616152][T17551] mapped:29059 shmem:1381 pagetables:1074 [ 561.616152][T17551] sec_pagetables:0 bounce:0 [ 561.616152][T17551] kernel_misc_reclaimable:0 [ 561.616152][T17551] free:1285632 free_pcp:19429 free_cma:0 [ 561.691850][T17551] Node 0 active_anon:46744kB inactive_anon:0kB active_file:12584kB inactive_file:159668kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116236kB dirty:716kB writeback:0kB shmem:3988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12300kB pagetables:3744kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 561.731998][T17551] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 561.764637][T17551] Node 0 [ 561.765983][T17535] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.779567][T17551] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 561.779875][T17535] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.820698][T17551] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 561.827232][T17551] Node 0 DMA32 free:1231036kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:46696kB inactive_anon:0kB active_file:12584kB inactive_file:158092kB unevictable:1536kB writepending:712kB present:3129332kB managed:2557448kB mlocked:0kB bounce:0kB free_pcp:60804kB local_pcp:26176kB free_cma:0kB [ 561.834940][T17436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.873348][T17551] lowmem_reserve[]: 0 0 1 1 1 [ 561.878329][T17551] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 561.927377][T17551] lowmem_reserve[]: 0 0 0 0 0 [ 561.929844][T17436] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.932847][T17551] Node 1 Normal free:3896120kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17972kB local_pcp:9428kB free_cma:0kB [ 561.947565][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.978795][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.008307][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.015469][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.015665][T17551] lowmem_reserve[]: 0 0 0 0 0 [ 562.058438][T17551] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 562.059969][T17436] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 562.076029][T17551] Node 0 DMA32: 39*4kB (M) 16*8kB (M) 128*16kB (UME) 149*32kB (UME) 29*64kB (ME) [ 562.082087][ T5181] Bluetooth: hci0: command tx timeout [ 562.101794][T17436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 562.112172][T17551] 124*128kB (UME) 194*256kB (UME) 81*512kB (UME) 35*1024kB (UME) 5*2048kB (UM) 261*4096kB (UM) = 1231100kB [ 562.123878][ T6366] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.132899][T17551] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 562.134822][ T6366] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.146100][T17551] Node 1 Normal: 230*4kB (UE) 60*8kB (UME) 40*16kB (UME) 98*32kB (UME) 28*64kB (UME) 12*128kB (UME) 4*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3896120kB [ 562.159344][ T6366] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.173398][T17551] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 562.193210][T17551] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 562.202794][ T6366] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.214398][T17551] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 562.224904][T17551] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 562.236663][T17551] 44469 total pagecache pages [ 562.241561][T17551] 0 pages in swap cache [ 562.245980][T17551] Free swap = 124996kB [ 562.250280][T17551] Total swap = 124996kB [ 562.258553][T17551] 2097051 pages RAM [ 562.264249][ T1165] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.280324][ T1165] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.282947][T17551] 0 pages HighMem/MovableOnly [ 562.306662][T17551] 425663 pages reserved [ 562.310974][T17551] 0 pages cma reserved [ 562.421546][T17585] bridge2: entered promiscuous mode [ 562.431662][T17585] bridge2: entered allmulticast mode [ 562.449611][T17585] __nla_validate_parse: 15 callbacks suppressed [ 562.449631][T17585] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3152'. [ 562.529700][T17436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.553848][T17593] IPv6: NLM_F_CREATE should be specified when creating new route [ 562.602826][T17436] veth0_vlan: entered promiscuous mode [ 562.629425][T17436] veth1_vlan: entered promiscuous mode [ 562.684669][T17602] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20004 [ 562.696200][T17601] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3159'. [ 562.707161][T17436] veth0_macvtap: entered promiscuous mode [ 562.710820][T17598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3157'. [ 562.720800][T17436] veth1_macvtap: entered promiscuous mode [ 562.727283][T17598] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 562.739409][T17601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3159'. [ 562.748561][T17601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3159'. [ 562.753819][T17436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.793383][T17436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.834680][T15987] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.866179][T15987] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.879766][ T5181] Bluetooth: hci2: command tx timeout [ 562.911041][ T6372] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.925195][ T6372] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.981373][T17610] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 562.995630][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.009853][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.035868][T15987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.043980][T15987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.220932][T17626] netlink: 'syz.0.3114': attribute type 1 has an invalid length. [ 563.240326][T17626] netlink: 'syz.0.3114': attribute type 2 has an invalid length. [ 563.255615][T17626] netlink: 1172 bytes leftover after parsing attributes in process `syz.0.3114'. [ 563.352438][T17638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3168'. [ 563.406991][ T12] bond0: (slave bond_slave_0): interface is now down [ 563.406991][T17640] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 563.445122][ T12] bond0: (slave bond_slave_1): interface is now down [ 563.465949][ T12] bond0: now running without any active interface! [ 563.543692][T17646] sctp: [Deprecated]: syz.2.3171 (pid 17646) Use of int in max_burst socket option. [ 563.543692][T17646] Use struct sctp_assoc_value instead [ 563.566857][T17648] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 563.669017][T17653] netlink: 'syz.2.3175': attribute type 10 has an invalid length. [ 563.737004][T17651] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.744519][T17651] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.767055][T17658] netlink: 'syz.2.3175': attribute type 10 has an invalid length. [ 563.779446][ T5872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 563.787198][ T5872] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 563.795188][ T5872] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 563.806921][ T5872] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 563.824259][ T5872] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 563.850760][T17651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 563.863114][T17651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 563.932524][T17653] team0: Port device dummy0 added [ 563.952728][T17658] team0: Port device dummy0 removed [ 563.963202][T17658] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 563.976628][T17534] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.987519][T17534] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.018390][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.056167][T17670] netlink: 'syz.0.3177': attribute type 10 has an invalid length. [ 564.057967][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.090823][ T6372] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.108753][T17672] netlink: 'syz.0.3177': attribute type 10 has an invalid length. [ 564.113901][ T6372] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 564.129522][ T6372] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 564.153583][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.171583][ T5872] Bluetooth: hci0: command tx timeout [ 564.183317][T17670] team0: Port device dummy0 added [ 564.212649][T17534] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.242777][T17534] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.301302][T17672] team0: Port device dummy0 removed [ 564.320637][T17672] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 564.354358][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.394156][ T6372] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.427306][ T6372] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 564.446701][ T6372] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 564.591201][T17534] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.621099][T17534] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.753179][T17661] lo speed is unknown, defaulting to 1000 [ 564.788141][ T6372] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.818671][ T6372] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 564.834925][ T6372] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 564.977743][ T5872] Bluetooth: hci2: command tx timeout [ 564.987890][T17712] netlink: 'syz.2.3186': attribute type 21 has an invalid length. [ 565.020157][T17715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3185'. [ 565.033197][ T6372] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.046395][T17716] netlink: 'syz.2.3186': attribute type 1 has an invalid length. [ 565.046600][ T6372] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 565.064399][ T6372] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 565.077273][T17712] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3186'. [ 565.091435][T17715] veth1: entered promiscuous mode [ 565.101337][T17715] veth1: left promiscuous mode [ 565.122063][T17717] IPv6: sit1: Disabled Multicast RS [ 565.135206][T17717] sit1: entered allmulticast mode [ 565.184072][T17714] veth3: entered allmulticast mode [ 565.201945][T17713] veth5: entered allmulticast mode [ 565.214006][T17661] chnl_net:caif_netlink_parms(): no params data found [ 565.926671][ T5872] Bluetooth: hci3: command tx timeout [ 565.986494][ T6372] bond0 (unregistering): Released all slaves [ 565.999700][ T6372] bond1 (unregistering): Released all slaves [ 566.011324][ T6372] bond2 (unregistering): Released all slaves [ 566.023000][ T6372] bond3 (unregistering): Released all slaves [ 566.040005][ T6372] bond4 (unregistering): Released all slaves [ 566.050152][ T6372] bond5 (unregistering): Released all slaves [ 566.063804][ T6372] bond6 (unregistering): Released all slaves [ 566.104778][T17661] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.112409][T17661] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.124473][T17661] bridge_slave_0: entered allmulticast mode [ 566.144548][T17661] bridge_slave_0: entered promiscuous mode [ 566.202864][T17661] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.213700][T17661] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.234965][T17661] bridge_slave_1: entered allmulticast mode [ 566.244718][T17661] bridge_slave_1: entered promiscuous mode [ 566.251677][ T36] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.260502][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.270674][ T6372] tipc: Disabling bearer [ 566.276671][ T6372] tipc: Left network mode [ 566.304583][ T36] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.320592][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.379347][T17661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.405507][ T36] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.415670][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.434104][ T36] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.444997][T17744] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3191'. [ 566.454466][T17746] netlink: 'syz.1.3192': attribute type 16 has an invalid length. [ 566.462673][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.472301][T17746] netlink: 'syz.1.3192': attribute type 17 has an invalid length. [ 566.487196][T17661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.566615][T17746] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 566.613028][ T6372] hsr0: left allmulticast mode [ 566.619143][ T6372] veth1_macvtap: left promiscuous mode [ 566.624814][ T6372] veth0_macvtap: left promiscuous mode [ 566.633914][ T6372] veth1_vlan: left promiscuous mode [ 566.641988][ T6372] veth0_vlan: left promiscuous mode [ 566.761830][T17760] openvswitch: netlink: IP tunnel dst address not specified [ 566.940997][T17762] netem: incorrect ge model size [ 566.976781][T17762] netem: change failed [ 567.017608][T17661] team0: Port device team_slave_0 added [ 567.037025][ T5872] Bluetooth: hci2: command tx timeout [ 567.052048][T17661] team0: Port device team_slave_1 added [ 567.170953][T17661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.179457][T17661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.208386][T17776] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 567.240200][T17661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.263454][T17661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.295261][T17661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.324982][T17661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.367859][T17798] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 567.429544][T17661] hsr_slave_0: entered promiscuous mode [ 567.440920][T17661] hsr_slave_1: entered promiscuous mode [ 567.458904][T17661] debugfs: 'hsr0' already exists in 'hsr' [ 567.464689][T17661] Cannot create hsr debugfs directory [ 567.490607][ T6372] IPVS: stop unused estimator thread 0... [ 567.519447][T17800] __nla_validate_parse: 6 callbacks suppressed [ 567.519469][T17800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3206'. [ 567.622059][T17805] syzkaller0: entered promiscuous mode [ 567.641986][T17805] syzkaller0: entered allmulticast mode [ 567.748683][T17803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3206'. [ 567.970089][T17830] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3212'. [ 567.988694][T17830] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8) [ 568.005480][ T5872] Bluetooth: hci3: command tx timeout [ 568.022027][T17830] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 568.022550][T17834] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 568.085183][T17837] tipc: Started in network mode [ 568.090464][T17837] tipc: Node identity d228d45de033, cluster identity 4711 [ 568.103610][T17837] tipc: Enabled bearer , priority 0 [ 568.121258][T17837] syzkaller0: entered promiscuous mode [ 568.128406][T17837] syzkaller0: entered allmulticast mode [ 568.139198][T17839] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 568.141118][T17837] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3215'. [ 568.147278][T17839] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 568.232700][T17839] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 568.288288][T17836] tipc: Resetting bearer [ 568.297273][T17836] tipc: Disabling bearer [ 568.319034][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.382771][T17661] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 568.409741][T17661] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 568.448559][T17661] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 568.448877][T17841] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3217'. [ 568.476996][T17855] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.491085][T17661] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 568.506167][T17859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3219'. [ 568.529984][T17859] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3219'. [ 568.550313][T17861] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3220'. [ 568.613994][T17869] tipc: Enabled bearer , priority 10 [ 568.625516][T17869] tipc: Enabling of bearer rejected, already enabled [ 568.644042][T17873] validate_nla: 1 callbacks suppressed [ 568.644062][T17873] netlink: 'syz.1.3222': attribute type 3 has an invalid length. [ 568.691947][T17661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.712396][T17855] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.774901][T17855] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.798196][T17884] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3225'. [ 568.816540][T17661] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.842577][T17888] netlink: 404 bytes leftover after parsing attributes in process `syz.0.3226'. [ 568.933313][T17855] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.977476][T17889] netlink: 'syz.2.3227': attribute type 4 has an invalid length. [ 568.998844][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.006029][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.039024][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.046244][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.064500][T17894] tipc: Enabling of bearer rejected, failed to enable media [ 569.120130][ T5872] Bluetooth: hci2: command tx timeout [ 569.631495][T17661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.711189][T17661] veth0_vlan: entered promiscuous mode [ 569.725768][ T5865] tipc: Node number set to 840684637 [ 569.738404][T17661] veth1_vlan: entered promiscuous mode [ 569.781444][T17661] veth0_macvtap: entered promiscuous mode [ 569.794671][T17661] veth1_macvtap: entered promiscuous mode [ 569.813624][T17661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.831832][T17661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.848530][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.861629][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.878565][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.887692][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.971956][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.991324][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.022797][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.031919][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.076520][ T5872] Bluetooth: hci3: command tx timeout [ 570.102303][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 570.114492][T17956] netlink: 'syz.4.3242': attribute type 4 has an invalid length. [ 570.119137][T17954] syzkaller0: entered promiscuous mode [ 570.128100][T17954] syzkaller0: entered allmulticast mode [ 570.136609][T17955] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.148980][T17955] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.200919][T17955] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.212490][T17955] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.263025][T17959] lo speed is unknown, defaulting to 1000 [ 570.274446][T17955] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.295410][T17955] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.367672][T17965] lo speed is unknown, defaulting to 1000 [ 570.377210][T17955] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.389900][T17955] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.613255][T15987] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.625916][T15987] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.647934][ T6366] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.658381][ T6366] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.682928][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.691566][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.737665][ T6372] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.747432][T17988] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 570.747769][ T6372] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.754714][T17988] IPv6: NLM_F_CREATE should be set when creating new route [ 570.754737][T17988] IPv6: NLM_F_CREATE should be set when creating new route [ 570.883122][T17991] macvtap1: entered promiscuous mode [ 570.889729][T17991] mac80211_hwsim hwsim48 wlan1: entered promiscuous mode [ 570.979790][T18007] netlink: 'syz.3.3258': attribute type 10 has an invalid length. [ 571.003525][T18007] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.011090][T18007] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.028251][T18007] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.035477][T18007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.042976][T18007] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.050152][T18007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.062263][T18007] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 571.078691][T18007] bridge_slave_1: left allmulticast mode [ 571.092783][T18007] bridge_slave_1: left promiscuous mode [ 571.106105][T18007] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.133461][T18007] bridge_slave_0: left allmulticast mode [ 571.140483][T18007] bridge_slave_0: left promiscuous mode [ 571.149312][T18007] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.174474][T18007] bond0: (slave bridge0): Releasing backup interface [ 571.288165][T18017] netlink: 'syz.3.3258': attribute type 10 has an invalid length. [ 571.319969][T18024] lo speed is unknown, defaulting to 1000 [ 571.334814][T18017] team0: Port device dummy0 added [ 571.372860][T18033] mac80211_hwsim hwsim48 wlan1: left promiscuous mode [ 571.428165][T18036] netlink: 'syz.2.3264': attribute type 2 has an invalid length. [ 571.863638][T18060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 571.878092][T18060] netlink: 'syz.2.3271': attribute type 1 has an invalid length. [ 572.111621][T18072] netlink: 'syz.2.3273': attribute type 1 has an invalid length. [ 572.124333][T18072] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 572.155960][ T5872] Bluetooth: hci3: command tx timeout [ 572.860915][T18109] lo speed is unknown, defaulting to 1000 [ 573.023924][T18124] __nla_validate_parse: 10 callbacks suppressed [ 573.023947][T18124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3289'. [ 573.055191][T18124] xt_limit: Overflow, try lower: 604147548/4200216962 [ 573.098974][T18127] netlink: 'syz.0.3290': attribute type 10 has an invalid length. [ 573.129640][T18109] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3285'. [ 573.176752][T18109] netlink: 'syz.2.3285': attribute type 13 has an invalid length. [ 573.197603][T18130] team0 (unregistering): Port device team_slave_0 removed [ 573.207716][T18130] team0 (unregistering): Port device team_slave_1 removed [ 573.320965][T18109] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 573.373955][T18136] lo speed is unknown, defaulting to 1000 [ 573.386978][T18135] lo speed is unknown, defaulting to 1000 [ 573.501199][T18140] vlan3: entered promiscuous mode [ 573.507564][T18140] vlan3: entered allmulticast mode [ 573.512778][T18140] hsr_slave_1: entered allmulticast mode [ 573.610861][T18149] lo speed is unknown, defaulting to 1000 [ 573.639239][T18150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3296'. [ 573.716121][T18157] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3299'. [ 573.729422][T18157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3299'. [ 573.759864][T18157] bond4: entered promiscuous mode [ 573.765769][T18157] bond4: entered allmulticast mode [ 573.774277][T18157] 8021q: adding VLAN 0 to HW filter on device bond4 [ 573.789715][T18150] lo speed is unknown, defaulting to 1000 [ 573.938435][T18157] lo speed is unknown, defaulting to 1000 [ 573.956682][T18167] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3301'. [ 573.966932][T18167] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3301'. [ 574.340928][T18206] Bluetooth: MGMT ver 1.23 [ 574.507852][T18222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3315'. [ 574.517708][T18222] veth1_macvtap: left promiscuous mode [ 574.778962][T18229] validate_nla: 3 callbacks suppressed [ 574.778983][T18229] netlink: 'syz.2.3318': attribute type 1 has an invalid length. [ 574.804223][T18229] 8021q: adding VLAN 0 to HW filter on device bond5 [ 574.820508][T18229] bond5: (slave gretap1): making interface the new active one [ 574.829166][T18229] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 574.965432][T18235] netlink: 185340 bytes leftover after parsing attributes in process `syz.2.3320'. [ 574.984047][T18234] ieee802154 phy0 wpan0: encryption failed: -126 [ 575.092819][T18240] netlink: 'syz.0.3321': attribute type 7 has an invalid length. [ 575.112945][T18242] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 575.126087][T18242] netlink: 'syz.2.3322': attribute type 1 has an invalid length. [ 575.133967][T18242] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3322'. [ 575.257540][T18250] dummy0: entered promiscuous mode [ 575.264758][T18250] dummy0: left promiscuous mode [ 575.400308][T18266] netlink: 'syz.2.3327': attribute type 15 has an invalid length. [ 575.507880][T18275] netlink: 'syz.4.3330': attribute type 1 has an invalid length. [ 575.684142][T18286] netlink: 'syz.0.3336': attribute type 14 has an invalid length. [ 575.710596][T18286] netlink: 'syz.0.3336': attribute type 13 has an invalid length. [ 575.772384][T18291] netem: incorrect gi model size [ 575.790171][T18291] netem: change failed [ 575.825710][T18298] netlink: 'syz.0.3339': attribute type 29 has an invalid length. [ 575.854067][T18298] netlink: 'syz.0.3339': attribute type 13 has an invalid length. [ 576.142140][T18318] netlink: 'syz.0.3345': attribute type 12 has an invalid length. [ 576.213044][T18320] Unsupported ieee802154 address type: 0 [ 576.547233][T18344] ieee802154 phy0 wpan0: encryption failed: -126 [ 576.576056][T18346] netlink: zone id is out of range [ 576.581702][T18346] netlink: zone id is out of range [ 576.587691][T18346] netlink: zone id is out of range [ 576.596627][T18346] netlink: zone id is out of range [ 576.602019][T18346] netlink: zone id is out of range [ 576.607496][T18346] netlink: zone id is out of range [ 576.777568][ T13] bond0: (slave bond_slave_0): interface is now down [ 576.788247][T18361] syz_tun: entered promiscuous mode [ 576.793436][ T13] bond0: (slave bond_slave_1): interface is now down [ 576.819264][T18361] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 576.826044][ T13] bond0: (slave bond_slave_0): interface is now down [ 576.841307][ T13] bond0: (slave bond_slave_1): interface is now down [ 576.848591][ T13] bond0: (slave syz_tun): interface is now down [ 576.883387][T15987] bond0: (slave bond_slave_0): interface is now down [ 576.900856][T15987] bond0: (slave bond_slave_1): interface is now down [ 576.911258][T15987] bond0: (slave syz_tun): interface is now down [ 576.936248][T15987] bond0: (slave bond_slave_0): interface is now down [ 576.943254][T15987] bond0: (slave bond_slave_1): interface is now down [ 576.957805][T15987] bond0: (slave syz_tun): interface is now down [ 576.975989][ T6366] bond0: (slave bond_slave_0): interface is now down [ 576.993051][ T6366] bond0: (slave bond_slave_1): interface is now down [ 577.003461][ T6366] bond0: (slave syz_tun): interface is now down [ 577.028046][ T6366] bond0: now running without any active interface! [ 577.473631][T18408] Unsupported ieee802154 address type: 0 [ 577.919135][T18441] vxcan3: entered allmulticast mode [ 577.953243][T18438] tipc: Enabled bearer , priority 0 [ 578.021664][T18446] tipc: Resetting bearer [ 578.088642][T18437] tipc: Disabling bearer [ 578.170073][T18455] __nla_validate_parse: 17 callbacks suppressed [ 578.170094][T18455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3387'. [ 578.244043][T18455] net_ratelimit: 7 callbacks suppressed [ 578.244066][T18455] openvswitch: netlink: Message has 16 unknown bytes. [ 578.510269][T18487] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3397'. [ 578.550667][T18489] lo speed is unknown, defaulting to 1000 [ 578.584620][T18491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3399'. [ 578.654254][T18491] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 578.808074][T18499] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 578.831204][T18499] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 578.842002][T18499] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 578.882555][T18511] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3404'. [ 578.932494][T18513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 578.955608][ T5181] Bluetooth: hci3: command 0x0405 tx timeout [ 579.034199][T18519] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3408'. [ 579.108211][T18517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3404'. [ 579.254551][T18543] lo speed is unknown, defaulting to 1000 [ 579.257609][T18545] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3413'. [ 579.353756][T18551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3414'. [ 579.378910][T18536] lo speed is unknown, defaulting to 1000 [ 579.549843][T18565] bond0: (slave dummy0): Releasing backup interface [ 579.558535][T18565] bridge_slave_0: left allmulticast mode [ 579.564798][T18565] bridge_slave_0: left promiscuous mode [ 579.574363][T18565] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.585466][T18565] bridge_slave_1: left allmulticast mode [ 579.591157][T18565] bridge_slave_1: left promiscuous mode [ 579.598611][T18565] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.623739][T18565] bond0: (slave bond_slave_0): Releasing backup interface [ 579.645215][T18565] bond0: (slave bond_slave_1): Releasing backup interface [ 579.673828][T18565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.702956][T18565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.729399][T18554] macvlan2: entered allmulticast mode [ 579.755144][T18554] veth1_vlan: entered allmulticast mode [ 579.768850][T18554] veth1_vlan: left allmulticast mode [ 579.901294][T18588] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 579.910640][T18567] lo speed is unknown, defaulting to 1000 [ 579.946606][T18589] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3420'. [ 580.021944][T18592] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3424'. [ 580.050173][T18596] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.060485][T18596] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.159475][T18596] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.186504][T18596] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.281114][T18596] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.291199][T18596] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.493080][T18596] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.505806][T18596] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.593787][T15987] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.602601][T15987] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.648301][T15987] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.662218][T15987] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.691536][T15987] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.704003][T15987] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.734815][T15987] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.751078][T15987] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.792965][T18618] validate_nla: 1 callbacks suppressed [ 580.792984][T18618] netlink: 'syz.4.3432': attribute type 3 has an invalid length. [ 580.825880][T18613] lo speed is unknown, defaulting to 1000 [ 580.859161][T18618] syz_tun: entered allmulticast mode [ 580.922804][T18618] dvmrp1: left allmulticast mode [ 581.012481][T18626] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 581.087317][T18650] netlink: 'syz.0.3439': attribute type 12 has an invalid length. [ 581.110433][T18617] syz_tun: left allmulticast mode [ 581.374001][T18660] lo speed is unknown, defaulting to 1000 [ 581.402396][T18668] netlink: 'syz.3.3446': attribute type 12 has an invalid length. [ 581.426302][T18668] netlink: 'syz.3.3446': attribute type 11 has an invalid length. [ 581.674120][T18683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.734430][T18686] tipc: Started in network mode [ 581.761074][T18686] tipc: Node identity 062802361146, cluster identity 4711 [ 581.772903][T18686] tipc: Enabled bearer , priority 0 [ 581.784914][T18672] syzkaller0: entered promiscuous mode [ 581.794969][T18672] syzkaller0: entered allmulticast mode [ 581.857791][T18672] tipc: Resetting bearer [ 581.872789][T18671] tipc: Resetting bearer [ 581.910879][T18671] tipc: Disabling bearer [ 581.915721][ T5181] Bluetooth: hci0: command tx timeout [ 581.977694][T18696] netlink: 'syz.2.3453': attribute type 1 has an invalid length. [ 582.033666][T18696] netlink: 'syz.2.3453': attribute type 1 has an invalid length. [ 582.184137][T18708] tipc: New replicast peer: 255.255.255.255 [ 582.194585][T18708] tipc: Enabled bearer , priority 26 [ 582.306607][T18709] lo speed is unknown, defaulting to 1000 [ 582.470235][T18726] netlink: 'syz.2.3461': attribute type 15 has an invalid length. [ 582.492106][T18730] sctp: [Deprecated]: syz.3.3463 (pid 18730) Use of struct sctp_assoc_value in delayed_ack socket option. [ 582.492106][T18730] Use struct sctp_sack_info instead [ 582.734647][T18738] tipc: Enabling of bearer rejected, failed to enable media [ 583.111639][T18768] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 583.305561][T17852] tipc: Node number set to 1322525742 [ 583.412946][T18787] __nla_validate_parse: 20 callbacks suppressed [ 583.412967][T18787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3477'. [ 583.553318][T18792] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3478'. [ 583.583104][T18795] netlink: 'syz.4.3479': attribute type 1 has an invalid length. [ 583.601405][T18795] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3479'. [ 583.703329][T18799] lo speed is unknown, defaulting to 1000 [ 583.883152][T18809] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3482'. [ 583.908720][T18806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3483'. [ 583.959309][T18813] tipc: Started in network mode [ 583.964335][T18813] tipc: Node identity 826c949e367, cluster identity 4711 [ 583.977860][T18813] tipc: Enabled bearer , priority 0 [ 584.003150][T18813] tipc: Resetting bearer [ 584.022928][T18812] tipc: Disabling bearer [ 584.047536][T18823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3487'. [ 584.280161][T18838] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 584.299508][T18840] netlink: 'syz.0.3494': attribute type 12 has an invalid length. [ 584.328441][T18840] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.3494'. [ 584.376308][T18843] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3493'. [ 584.496047][T18853] tipc: Enabled bearer , priority 0 [ 584.504286][T18853] syzkaller0: entered promiscuous mode [ 584.511224][T18853] syzkaller0: entered allmulticast mode [ 584.570471][T18853] tipc: Resetting bearer [ 584.626457][T18852] tipc: Resetting bearer [ 584.633871][T18852] tipc: Disabling bearer [ 584.670894][T18868] lo speed is unknown, defaulting to 1000 [ 584.679636][T18868] lo speed is unknown, defaulting to 1000 [ 584.685922][T18868] lo speed is unknown, defaulting to 1000 [ 584.699754][T18868] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 584.730464][T18868] lo speed is unknown, defaulting to 1000 [ 584.746147][T18871] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3502'. [ 584.755229][T18868] lo speed is unknown, defaulting to 1000 [ 584.773729][T18868] lo speed is unknown, defaulting to 1000 [ 584.781763][T18868] lo speed is unknown, defaulting to 1000 [ 584.796602][T18868] lo speed is unknown, defaulting to 1000 [ 584.803314][T18868] lo speed is unknown, defaulting to 1000 [ 584.819764][T18868] lo speed is unknown, defaulting to 1000 [ 584.842128][T18881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3505'. [ 584.922534][T18892] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 584.969052][T18897] lo speed is unknown, defaulting to 1000 [ 584.978667][T18897] lo speed is unknown, defaulting to 1000 [ 585.143798][T18908] netlink: 'syz.2.3512': attribute type 13 has an invalid length. [ 585.162046][T18908] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 585.178416][T13773] lo speed is unknown, defaulting to 1000 [ 585.190346][T18905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.205275][T18905] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20003 [ 585.447884][T18920] lo speed is unknown, defaulting to 1000 [ 585.464481][T18920] lo speed is unknown, defaulting to 1000 [ 585.989500][T18944] lo speed is unknown, defaulting to 1000 [ 586.009854][T18944] lo speed is unknown, defaulting to 1000 [ 586.257909][T18959] IPVS: set_ctl: invalid protocol: 46 100.1.1.0:20002 [ 586.416976][T18968] pim6reg1: entered promiscuous mode [ 586.433462][T18968] pim6reg1: entered allmulticast mode [ 586.476178][T18968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 586.678521][T18989] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 586.748475][T18993] tipc: Enabling of bearer rejected, failed to enable media [ 586.920584][T19003] vlan2: entered promiscuous mode [ 586.926393][T19003] bond0: entered promiscuous mode [ 586.945941][T19003] bond_slave_0: entered promiscuous mode [ 586.956728][T19003] bond_slave_1: entered promiscuous mode [ 586.980158][T19003] tipc: Enabled bearer , priority 18 [ 587.114047][T19010] bridge_slave_0: left allmulticast mode [ 587.120337][T19010] bridge_slave_0: left promiscuous mode [ 587.128238][T19010] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.144695][T19010] bridge_slave_1: left allmulticast mode [ 587.151883][T19010] bridge_slave_1: left promiscuous mode [ 587.158980][T19010] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.174065][T19010] bond0: (slave bond_slave_0): Releasing backup interface [ 587.189247][T19010] bond0: (slave bond_slave_1): Releasing backup interface [ 587.209816][T19010] team0: Port device team_slave_0 removed [ 587.227151][T19010] team0: Port device team_slave_1 removed [ 587.239014][T19010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.247365][T19010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.260197][T19010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.269176][T19010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.300734][T19018] team0: Mode changed to "loadbalance" [ 587.379576][T19028] lo speed is unknown, defaulting to 1000 [ 587.386858][T19028] lo speed is unknown, defaulting to 1000 [ 587.905123][ T30] audit: type=1804 audit(1756125282.722:7): pid=19066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3557" name="/newroot/95/cgroup.controllers" dev="tmpfs" ino=499 res=1 errno=0 [ 588.018873][ T30] audit: type=1800 audit(1756125282.752:8): pid=19066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3557" name="cgroup.controllers" dev="tmpfs" ino=499 res=0 errno=0 [ 588.054998][ T30] audit: type=1800 audit(1756125282.752:9): pid=19066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3557" name="cgroup.controllers" dev="tmpfs" ino=499 res=0 errno=0 [ 588.095702][T17852] tipc: Node number set to 3021771934 [ 588.297275][T19098] "syz.4.3568" (19098) uses obsolete ecb(arc4) skcipher [ 588.369048][T19103] openvswitch: netlink: IP tunnel dst address not specified [ 588.529659][T19115] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 588.552708][T19115] CPU: 1 UID: 0 PID: 19115 Comm: syz.2.3572 Not tainted syzkaller #0 PREEMPT(full) [ 588.552740][T19115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 588.552755][T19115] Call Trace: [ 588.552764][T19115] [ 588.552774][T19115] dump_stack_lvl+0x189/0x250 [ 588.552823][T19115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 588.552858][T19115] ? __pfx__printk+0x10/0x10 [ 588.552894][T19115] ? kernfs_root+0x1c/0x230 [ 588.552926][T19115] ? kernfs_path_from_node+0x2f/0x290 [ 588.552950][T19115] ? kernfs_path_from_node+0x250/0x290 [ 588.552973][T19115] ? kernfs_path_from_node+0x2f/0x290 [ 588.552999][T19115] sysfs_warn_dup+0x8e/0xa0 [ 588.553020][T19115] sysfs_do_create_link_sd+0xc0/0x110 [ 588.553044][T19115] device_add_class_symlinks+0x1cf/0x240 [ 588.553069][T19115] device_add+0x475/0xb50 [ 588.553091][T19115] wiphy_register+0x1ba6/0x28d0 [ 588.553133][T19115] ? __pfx_wiphy_register+0x10/0x10 [ 588.553162][T19115] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 588.553191][T19115] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 588.553217][T19115] ieee80211_register_hw+0x3425/0x4080 [ 588.553257][T19115] ? ieee80211_register_hw+0x14e1/0x4080 [ 588.553287][T19115] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 588.553315][T19115] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 588.553351][T19115] ? __hrtimer_setup+0x187/0x210 [ 588.553370][T19115] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 588.553403][T19115] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 588.553449][T19115] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 588.553476][T19115] ? trace_kmalloc+0x1f/0xd0 [ 588.553502][T19115] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 588.553532][T19115] ? kstrndup+0xbf/0x160 [ 588.553566][T19115] hwsim_new_radio_nl+0xea4/0x1b10 [ 588.553596][T19115] ? __pfx___nla_validate_parse+0x10/0x10 [ 588.553637][T19115] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 588.553677][T19115] ? __nla_parse+0x40/0x60 [ 588.553711][T19115] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 588.553744][T19115] genl_family_rcv_msg_doit+0x215/0x300 [ 588.553775][T19115] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 588.553809][T19115] ? bpf_lsm_capable+0x9/0x20 [ 588.553838][T19115] ? security_capable+0x7e/0x2e0 [ 588.553872][T19115] genl_rcv_msg+0x60e/0x790 [ 588.553900][T19115] ? __pfx_genl_rcv_msg+0x10/0x10 [ 588.553931][T19115] ? __kasan_slab_alloc+0x6c/0x80 [ 588.553961][T19115] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 588.553990][T19115] ? __netlink_lookup+0xbd/0x810 [ 588.554009][T19115] ? rcu_is_watching+0x15/0xb0 [ 588.554036][T19115] netlink_rcv_skb+0x205/0x470 [ 588.554069][T19115] ? __pfx_genl_rcv_msg+0x10/0x10 [ 588.554095][T19115] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 588.554133][T19115] ? lock_release+0x4b/0x3e0 [ 588.554168][T19115] ? down_read+0x1ad/0x2e0 [ 588.554189][T19115] genl_rcv+0x28/0x40 [ 588.554212][T19115] netlink_unicast+0x82c/0x9e0 [ 588.554245][T19115] ? __pfx_netlink_unicast+0x10/0x10 [ 588.554275][T19115] ? netlink_sendmsg+0x642/0xb30 [ 588.554292][T19115] ? skb_put+0x11b/0x210 [ 588.554315][T19115] netlink_sendmsg+0x805/0xb30 [ 588.554339][T19115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 588.554360][T19115] ? futex_unqueue+0x22/0x240 [ 588.554382][T19115] ? aa_sock_msg_perm+0xf1/0x1d0 [ 588.554403][T19115] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 588.554426][T19115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 588.554445][T19115] __sock_sendmsg+0x21c/0x270 [ 588.554476][T19115] ____sys_sendmsg+0x505/0x830 [ 588.554502][T19115] ? __pfx_____sys_sendmsg+0x10/0x10 [ 588.554529][T19115] ? import_iovec+0x74/0xa0 [ 588.554555][T19115] ___sys_sendmsg+0x21f/0x2a0 [ 588.554578][T19115] ? __pfx____sys_sendmsg+0x10/0x10 [ 588.554603][T19115] ? futex_wait+0x285/0x360 [ 588.554647][T19115] ? __fget_files+0x2a/0x420 [ 588.554664][T19115] ? __fget_files+0x3a0/0x420 [ 588.554688][T19115] __x64_sys_sendmsg+0x19b/0x260 [ 588.554712][T19115] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 588.554740][T19115] ? rcu_is_watching+0x15/0xb0 [ 588.554760][T19115] ? rcu_is_watching+0x15/0xb0 [ 588.554781][T19115] do_syscall_64+0xfa/0x3b0 [ 588.554800][T19115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.554820][T19115] ? clear_bhb_loop+0x60/0xb0 [ 588.554843][T19115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.554862][T19115] RIP: 0033:0x7f401d38ebe9 [ 588.554882][T19115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.554901][T19115] RSP: 002b:00007f401e148038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 588.554933][T19115] RAX: ffffffffffffffda RBX: 00007f401d5b6090 RCX: 00007f401d38ebe9 [ 588.554948][T19115] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000b [ 588.554962][T19115] RBP: 00007f401d411e19 R08: 0000000000000000 R09: 0000000000000000 [ 588.554976][T19115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.554989][T19115] R13: 00007f401d5b6128 R14: 00007f401d5b6090 R15: 00007ffcb5bd3fa8 [ 588.555015][T19115] [ 589.118032][T19120] validate_nla: 4 callbacks suppressed [ 589.118052][T19120] netlink: 'syz.1.3573': attribute type 64 has an invalid length. [ 589.295251][T19137] __nla_validate_parse: 12 callbacks suppressed [ 589.295270][T19137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3578'. [ 589.383951][T19148] lo speed is unknown, defaulting to 1000 [ 589.407788][T19148] lo speed is unknown, defaulting to 1000 [ 589.647365][T19157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.655517][T19157] team0: Port device bond0 added [ 589.896679][T19167] vlan2: entered promiscuous mode [ 589.944419][T19167] vlan2: entered allmulticast mode [ 590.017226][T19167] hsr_slave_1: entered allmulticast mode [ 590.023799][T19162] lo speed is unknown, defaulting to 1000 [ 590.031256][T19162] lo speed is unknown, defaulting to 1000 [ 590.214044][T19180] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3587'. [ 590.298071][T19184] syzkaller0: entered promiscuous mode [ 590.303709][T19184] syzkaller0: entered allmulticast mode [ 590.828365][T19207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3593'. [ 591.022113][T19223] netlink: 'syz.0.3597': attribute type 1 has an invalid length. [ 591.114053][T19229] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 591.150623][T19231] caif0: entered allmulticast mode [ 591.219449][T19238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3601'. [ 591.414791][T19252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3608'. [ 591.434040][T19255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3607'. [ 591.449196][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.466940][T19254] wg1: entered allmulticast mode [ 591.505423][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.566821][T19252] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma? [ 591.649350][T19264] tipc: Started in network mode [ 591.674732][T19264] tipc: Node identity b6bd17a3737f, cluster identity 4711 [ 591.693556][T19264] tipc: Enabled bearer , priority 0 [ 591.709192][T19269] syzkaller0: entered promiscuous mode [ 591.724992][T19269] syzkaller0: entered allmulticast mode [ 591.750780][T19264] tipc: Resetting bearer [ 591.769256][T19263] tipc: Resetting bearer [ 591.780748][T19263] tipc: Disabling bearer [ 591.822716][T19275] lo speed is unknown, defaulting to 1000 [ 591.832038][T19275] lo speed is unknown, defaulting to 1000 [ 591.989767][T19279] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3612'. [ 592.121037][T19285] syzkaller0: entered promiscuous mode [ 592.129146][T19285] syzkaller0: entered allmulticast mode [ 592.260368][T19292] netlink: 'syz.3.3617': attribute type 1 has an invalid length. [ 592.387225][T19303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3620'. [ 592.568941][T19309] netlink: 'syz.3.3623': attribute type 1 has an invalid length. [ 592.602907][T19309] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3623'. [ 592.674008][T19312] netlink: 'syz.3.3624': attribute type 83 has an invalid length. [ 592.967596][T19326] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3627'. [ 593.164331][T19333] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 593.172064][ T5910] IPVS: starting estimator thread 0... [ 593.265520][T19336] IPVS: using max 39 ests per chain, 93600 per kthread [ 593.350442][ T2983] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.360293][ T2983] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.374316][ T2983] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.386682][ T2983] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.395139][ T2983] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.412711][ T2983] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.422474][ T2983] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.445705][ T2983] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.469815][T19349] netlink: 'syz.4.3633': attribute type 1 has an invalid length. [ 593.488022][T19352] sctp: [Deprecated]: syz.1.3634 (pid 19352) Use of struct sctp_assoc_value in delayed_ack socket option. [ 593.488022][T19352] Use struct sctp_sack_info instead [ 593.498079][T19349] 8021q: adding VLAN 0 to HW filter on device bond1 [ 593.621096][T19349] ipvlan2: entered allmulticast mode [ 593.628070][T19349] bond1: entered allmulticast mode [ 593.643349][T19349] bond1: (slave gretap2): making interface the new active one [ 593.651895][T19349] gretap2: entered allmulticast mode [ 593.658215][T19349] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 593.888842][T19380] netlink: 'syz.1.3642': attribute type 4 has an invalid length. [ 593.901002][T19380] netlink: 'syz.1.3642': attribute type 4 has an invalid length. [ 593.946081][T19381] lo speed is unknown, defaulting to 1000 [ 593.961314][T19381] lo speed is unknown, defaulting to 1000 [ 594.186800][T19393] xt_limit: Overflow, try lower: 604147548/4200216962 [ 594.364227][T19399] __nla_validate_parse: 2 callbacks suppressed [ 594.364248][T19399] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3647'. [ 594.692203][T19409] lo speed is unknown, defaulting to 1000 [ 594.711898][T19409] lo speed is unknown, defaulting to 1000 [ 594.722716][T19410] netlink: 'syz.4.3651': attribute type 4 has an invalid length. [ 594.792967][T19417] netlink: 'syz.4.3651': attribute type 4 has an invalid length. [ 594.850398][T19419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3654'. [ 595.050424][T19435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3657'. [ 595.061445][T19437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3658'. [ 595.191109][T19441] netlink: 'syz.2.3659': attribute type 1 has an invalid length. [ 595.200391][T19441] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3659'. [ 595.742918][T19462] syzkaller0: entered promiscuous mode [ 595.748668][T19462] syzkaller0: entered allmulticast mode [ 595.985009][T19474] ip6gre1: entered allmulticast mode [ 596.052904][T19479] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 596.088582][T19476] lo speed is unknown, defaulting to 1000 [ 596.095262][T19476] lo speed is unknown, defaulting to 1000 [ 596.169781][T19488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3671'. [ 596.186160][T19488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3671'. [ 596.197511][T19488] netlink: 'syz.1.3671': attribute type 20 has an invalid length. [ 596.239627][T19488] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3671'. [ 596.375028][T19501] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3676'. [ 596.433950][T19504] lo speed is unknown, defaulting to 1000 [ 596.442179][T19504] lo speed is unknown, defaulting to 1000 [ 596.457426][T19506] IPVS: set_ctl: invalid protocol: 47 100.1.1.2:20001 [ 596.660601][T19519] netlink: 'syz.2.3682': attribute type 1 has an invalid length. [ 596.690009][T19519] 8021q: adding VLAN 0 to HW filter on device bond6 [ 596.724495][T19523] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3683'. [ 596.834059][T19521] bond6: (slave ip6erspan0): making interface the new active one [ 596.843677][T19521] bond6: (slave ip6erspan0): Enslaving as an active interface with an up link [ 596.863946][T19525] lo speed is unknown, defaulting to 1000 [ 596.879521][T19525] lo speed is unknown, defaulting to 1000 [ 597.010934][T19539] netlink: 'syz.3.3689': attribute type 21 has an invalid length. [ 597.024232][T19537] lo speed is unknown, defaulting to 1000 [ 597.024386][T19539] netlink: 'syz.3.3689': attribute type 21 has an invalid length. [ 597.056745][T19537] lo speed is unknown, defaulting to 1000 [ 597.159874][T19544] netlink: 'syz.3.3690': attribute type 10 has an invalid length. [ 597.223783][T19544] mac80211_hwsim hwsim50 wlan1: entered promiscuous mode [ 597.239858][T19544] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 597.579005][T19566] netlink: 'syz.2.3695': attribute type 10 has an invalid length. [ 597.596942][T19566] dummy0: entered promiscuous mode [ 597.626075][T19566] dummy0: entered allmulticast mode [ 597.632854][T19566] bond0: (slave dummy0): Releasing backup interface [ 597.648431][T19566] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 597.804443][T19580] tipc: Enabling of bearer rejected, failed to enable media [ 598.493287][T19637] syz_tun: entered allmulticast mode [ 598.537791][T19637] dvmrp8: entered allmulticast mode [ 598.560391][T19637] syz_tun: left allmulticast mode [ 598.589694][T19637] dvmrp8: left allmulticast mode [ 598.694948][T19643] lo speed is unknown, defaulting to 1000 [ 598.695554][T19647] netlink: 'syz.1.3715': attribute type 1 has an invalid length. [ 598.730928][T19647] 8021q: adding VLAN 0 to HW filter on device bond2 [ 598.740792][T19643] lo speed is unknown, defaulting to 1000 [ 598.824611][T19646] bond2: (slave ip6gretap1): making interface the new active one [ 598.838170][T19646] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 598.867718][T19651] tap0: tun_chr_ioctl cmd 1074025673 [ 598.922855][T19652] tap0: tun_chr_ioctl cmd 1074025680 [ 599.101757][T19667] bridge3: port 1(veth3) entered blocking state [ 599.121274][T19667] bridge3: port 1(veth3) entered disabled state [ 599.128968][T19667] veth3: entered allmulticast mode [ 599.143886][T19667] veth3: entered promiscuous mode [ 599.163298][T19668] bridge3: port 2(veth0_to_bond) entered blocking state [ 599.188210][T19668] bridge3: port 2(veth0_to_bond) entered disabled state [ 599.196679][T19668] veth0_to_bond: entered allmulticast mode [ 599.204030][T19668] veth0_to_bond: entered promiscuous mode [ 599.506188][T19707] tipc: Enabled bearer , priority 0 [ 599.531044][T19703] tipc: Disabling bearer [ 599.699952][T19719] __nla_validate_parse: 13 callbacks suppressed [ 599.699973][T19719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3737'. [ 599.801482][T19717] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3736'. [ 599.811813][T19726] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3739'. [ 599.922383][T19736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3741'. [ 600.239766][T19761] lo speed is unknown, defaulting to 1000 [ 600.254348][T19761] lo speed is unknown, defaulting to 1000 [ 600.737804][T19786] IPVS: persistence engine module ip_vs_pe_ not found [ 600.749868][T17734] IPVS: starting estimator thread 0... [ 600.842714][T19802] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:21 [ 600.864420][T19794] IPVS: using max 33 ests per chain, 79200 per kthread [ 600.910892][T19793] validate_nla: 1 callbacks suppressed [ 600.910914][T19793] netlink: 'syz.3.3759': attribute type 3 has an invalid length. [ 600.936305][T19793] netlink: 'syz.3.3759': attribute type 3 has an invalid length. [ 601.017798][T19809] openvswitch: netlink: Tunnel attr 227 out of range max 16 [ 601.243124][T19818] lo speed is unknown, defaulting to 1000 [ 601.250096][T19818] lo speed is unknown, defaulting to 1000 [ 601.506762][T19827] tipc: Enabling of bearer rejected, failed to enable media [ 601.667981][T19830] netlink: 'syz.2.3767': attribute type 7 has an invalid length. [ 601.687932][T19832] Unsupported ieee802154 address type: 0 [ 601.695677][T19832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3768'. [ 601.717895][T19832] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3768'. [ 601.721307][T19830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3767'. [ 601.983942][T19839] ip6gre1: entered promiscuous mode [ 602.233886][T19849] delete_channel: no stack [ 602.823575][T19871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3779'. [ 602.834221][T19871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3779'. [ 603.108440][T19881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3782'. [ 603.689336][T19930] tun0: tun_chr_ioctl cmd 1074025672 [ 603.694832][T19930] tun0: ignored: set checksum disabled [ 603.888318][T19946] pim6reg1: entered promiscuous mode [ 603.893818][T19946] pim6reg1: entered allmulticast mode [ 604.093152][T19951] xfrm1: entered promiscuous mode [ 604.099312][T19951] xfrm1: entered allmulticast mode [ 604.112773][T19953] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 604.182903][T19956] tipc: Resetting bearer [ 604.300915][T19960] lo speed is unknown, defaulting to 1000 [ 604.311894][T19960] lo speed is unknown, defaulting to 1000 [ 604.549017][T19978] lo speed is unknown, defaulting to 1000 [ 604.558763][T19978] lo speed is unknown, defaulting to 1000 [ 604.666611][T19986] netlink: 'syz.4.3812': attribute type 11 has an invalid length. [ 604.679738][T19984] syzkaller0: entered promiscuous mode [ 604.687167][T19984] syzkaller0: entered allmulticast mode [ 604.694773][T19986] tipc: Enabled bearer , priority 0 [ 604.704649][T19986] syzkaller0: entered promiscuous mode [ 604.710580][T19986] syzkaller0: entered allmulticast mode [ 604.752393][T19974] tipc: Resetting bearer [ 604.769045][T19974] tipc: Disabling bearer [ 604.788788][T19993] tipc: Enabled bearer , priority 0 [ 604.811635][T19993] syzkaller0: entered promiscuous mode [ 604.822181][T19993] syzkaller0: entered allmulticast mode [ 604.857564][T19993] netlink: 'syz.2.3815': attribute type 5 has an invalid length. [ 604.891299][T20000] netlink: 'syz.3.3817': attribute type 1 has an invalid length. [ 604.910597][T19994] tipc: Resetting bearer [ 604.936390][T19992] tipc: Resetting bearer [ 604.964040][T19992] tipc: Disabling bearer [ 605.130885][T13773] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 605.283246][ T12] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 605.388479][T20032] netlink: 'syz.1.3825': attribute type 1 has an invalid length. [ 605.405250][T20034] sctp: [Deprecated]: syz.3.3827 (pid 20034) Use of int in max_burst socket option. [ 605.405250][T20034] Use struct sctp_assoc_value instead [ 605.458547][ T24] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 605.510410][T20039] xt_limit: Overflow, try lower: 604147548/4200216962 [ 605.613008][T20047] netlink: 'syz.3.3831': attribute type 15 has an invalid length. [ 605.710543][T20050] __nla_validate_parse: 9 callbacks suppressed [ 605.710565][T20050] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3833'. [ 605.722183][T20051] tipc: Enabled bearer , priority 0 [ 605.743700][T20050] pim6reg1: entered promiscuous mode [ 605.754418][T20050] pim6reg1: entered allmulticast mode [ 605.777723][T20051] lo speed is unknown, defaulting to 1000 [ 605.803325][T20051] lo speed is unknown, defaulting to 1000 [ 605.957849][T20048] tipc: Disabling bearer [ 606.068565][T20082] netlink: 146780 bytes leftover after parsing attributes in process `syz.2.3843'. [ 606.316980][ T13] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 606.328170][ T13] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 606.374806][T20104] netlink: 'syz.4.3847': attribute type 11 has an invalid length. [ 606.496820][T20117] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3851'. [ 606.546455][T20122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3852'. [ 606.585789][T13773] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 606.649569][T20128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3853'. [ 606.673056][T20128] IPv4: Oversized IP packet from 127.202.26.0 [ 606.756285][T20134] IPVS: set_ctl: invalid protocol: 107 255.255.255.255:20003 [ 606.968235][T20150] v: renamed from ip6_vti0 (while UP) [ 607.016163][T20150] netlink: 'syz.4.3860': attribute type 1 has an invalid length. [ 607.025263][T20150] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3860'. [ 607.052675][T20155] tipc: Enabled bearer , priority 0 [ 607.072164][T20155] syzkaller0: entered promiscuous mode [ 607.082156][T20155] syzkaller0: entered allmulticast mode [ 607.100235][T20155] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3861'. [ 607.120940][T20164] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3864'. [ 607.166781][T20155] tipc: Resetting bearer [ 607.199262][T20154] tipc: Resetting bearer [ 607.222519][T20154] tipc: Disabling bearer [ 607.501135][T20195] lo speed is unknown, defaulting to 1000 [ 607.520232][T20195] lo speed is unknown, defaulting to 1000 [ 607.863343][T20206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3876'. [ 608.529791][T20236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3882'. [ 608.599084][T20247] netlink: 'syz.4.3884': attribute type 1 has an invalid length. [ 608.852911][T20260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 608.893341][T20260] tipc: Failed to remove unknown binding: 66,1,1/0:2175761828/2175761830 [ 608.928496][T20260] tipc: Failed to remove unknown binding: 66,1,1/0:2175761828/2175761830 [ 608.964493][T20260] tipc: Failed to remove unknown binding: 66,1,1/0:2175761828/2175761830 [ 609.641289][T20311] bond0: entered promiscuous mode [ 609.651130][T20311] batadv0: entered promiscuous mode [ 609.657262][T20311] debugfs: 'hsr1' already exists in 'hsr' [ 609.663304][T20311] Cannot create hsr debugfs directory [ 609.671622][T20311] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 609.683465][T20311] hsr1: entered allmulticast mode [ 609.691967][T20311] bond0: entered allmulticast mode [ 609.697517][T20311] batadv0: entered allmulticast mode [ 609.703313][T20311] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 609.712147][T20311] bond0: left promiscuous mode [ 609.718538][T20311] batadv0: left promiscuous mode [ 609.755121][T20316] tipc: Enabled bearer , priority 0 [ 609.762787][T20316] syzkaller0: entered promiscuous mode [ 609.770007][T20316] syzkaller0: entered allmulticast mode [ 609.786991][T20316] tipc: Resetting bearer [ 609.810325][T20315] tipc: Resetting bearer [ 609.819715][T20315] tipc: Disabling bearer [ 609.859967][T20318] lo speed is unknown, defaulting to 1000 [ 609.866748][T20318] lo speed is unknown, defaulting to 1000 [ 610.186117][T20339] netlink: 'syz.1.3909': attribute type 1 has an invalid length. [ 610.193916][T20339] netlink: 'syz.1.3909': attribute type 1 has an invalid length. [ 610.215383][T20341] tipc: Enabled bearer , priority 0 [ 610.243986][T20341] syzkaller0: entered promiscuous mode [ 610.254679][T20341] syzkaller0: entered allmulticast mode [ 610.255760][T20348] netlink: 'syz.4.3913': attribute type 1 has an invalid length. [ 610.268063][T20341] netlink: 'syz.0.3910': attribute type 27 has an invalid length. [ 610.296966][T20350] netlink: 'syz.3.3914': attribute type 9 has an invalid length. [ 610.307482][T20340] tipc: Resetting bearer [ 610.317250][T20340] tipc: Disabling bearer [ 610.494194][T20368] tap0: tun_chr_ioctl cmd 1074025677 [ 610.510028][T20368] tap0: linktype set to 0 [ 610.632706][T20370] syzkaller1: entered promiscuous mode [ 610.638435][T20370] syzkaller1: entered allmulticast mode [ 610.762514][T20385] __nla_validate_parse: 11 callbacks suppressed [ 610.762534][T20385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3925'. [ 610.805454][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 610.818779][T20391] "syz.4.3926" (20391) uses obsolete ecb(arc4) skcipher [ 610.888233][T20398] syzkaller1: entered promiscuous mode [ 610.893907][T20398] syzkaller1: entered allmulticast mode [ 610.933228][T20404] Bluetooth: MGMT ver 1.23 [ 611.119625][T20416] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3933'. [ 611.619703][T20442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3942'. [ 611.713484][T20447] netlink: 'syz.2.3940': attribute type 10 has an invalid length. [ 611.745143][T20450] tipc: Failed to remove unknown binding: 66,1,1/3021771934:3573155497/3573155499 [ 611.757444][T13773] IPVS: starting estimator thread 0... [ 611.772424][T20444] netlink: 'syz.2.3940': attribute type 10 has an invalid length. [ 611.773282][T20450] tipc: Failed to remove unknown binding: 66,1,1/3021771934:3573155497/3573155499 [ 611.798379][T20450] tipc: Failed to remove unknown binding: 66,1,1/3021771934:3573155497/3573155499 [ 611.804335][T20447] dummy0: left promiscuous mode [ 611.814555][T20450] netlink: 788 bytes leftover after parsing attributes in process `syz.3.3943'. [ 611.833737][T20455] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3945'. [ 611.834753][T20447] dummy0: left allmulticast mode [ 611.846709][T20451] IPVS: using max 36 ests per chain, 86400 per kthread [ 611.852427][T20447] team0: Port device dummy0 added [ 611.874503][T20455] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3945'. [ 611.890022][T20455] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3945'. [ 611.931365][T20462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3946'. [ 612.142483][T20477] erspan0: entered promiscuous mode [ 612.254532][T20485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 612.278321][ T30] audit: type=1800 audit(1756125307.093:10): pid=20464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3947" name="cgroup.controllers" dev="tmpfs" ino=1391 res=0 errno=0 [ 612.432129][T20493] netlink: 'syz.1.3955': attribute type 12 has an invalid length. [ 612.440251][T20493] netlink: 'syz.1.3955': attribute type 18 has an invalid length. [ 612.451762][T20493] netlink: 'syz.1.3955': attribute type 21 has an invalid length. [ 612.460406][T20493] netlink: 'syz.1.3955': attribute type 26 has an invalid length. [ 612.576998][T20502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3957'. [ 612.593202][T20502] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3957'. [ 612.600638][T20501] lo speed is unknown, defaulting to 1000 [ 612.610082][T20501] lo speed is unknown, defaulting to 1000 [ 612.652033][T20504] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 613.431139][T20549] tipc: Enabled bearer , priority 0 [ 613.438749][T20549] syzkaller0: entered promiscuous mode [ 613.444268][T20549] syzkaller0: entered allmulticast mode [ 613.490992][T20549] tipc: Resetting bearer [ 613.513360][T20547] tipc: Resetting bearer [ 613.560579][T20547] tipc: Disabling bearer [ 613.727362][T20567] netlink: 'syz.2.3976': attribute type 1 has an invalid length. [ 613.777610][T20564] tap0: tun_chr_ioctl cmd 1074025673 [ 613.787990][T20565] tap0: tun_chr_ioctl cmd 1074025677 [ 613.793728][T20565] tap0: linktype set to 800 [ 613.840274][T20567] 8021q: adding VLAN 0 to HW filter on device bond7 [ 613.891675][T20569] bond7: (slave geneve3): making interface the new active one [ 613.919315][T20569] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 613.961466][T20564] tap0: tun_chr_ioctl cmd 1074025673 [ 613.968999][T20565] tap0: tun_chr_ioctl cmd 1074025677 [ 613.996360][T20569] syz.2.3976 (20569) used greatest stack depth: 16912 bytes left [ 614.004599][T20565] tap0: linktype set to 800 [ 614.049108][T20586] netlink: 'syz.3.3981': attribute type 10 has an invalid length. [ 614.100881][T20586] team0: Port device geneve0 added [ 614.406968][T20617] netlink: 'syz.3.3991': attribute type 1 has an invalid length. [ 614.492527][T20632] sch_tbf: burst 0 is lower than device lo mtu (1294) ! [ 614.787726][T20650] smc: net device nicvf0 applied user defined pnetid SYZ1 [ 614.888508][T20668] sctp: [Deprecated]: syz.0.4005 (pid 20668) Use of int in maxseg socket option. [ 614.888508][T20668] Use struct sctp_assoc_value instead [ 614.956831][T20677] syzkaller1: entered promiscuous mode [ 614.962426][T20677] syzkaller1: entered allmulticast mode [ 614.970305][T20675] netlink: 'syz.3.4009': attribute type 10 has an invalid length. [ 615.011338][T20675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.025429][T20675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.045847][ T6372] bond0: (slave batadv_slave_0): interface is now down [ 615.046163][T20675] batadv_slave_0: entered promiscuous mode [ 615.067265][ T12] bond0: (slave batadv_slave_0): interface is now down [ 615.073594][T20675] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 615.107250][T20687] tipc: Enabled bearer , priority 0 [ 615.114725][ T6372] bond0: (slave batadv_slave_0): interface is now down [ 615.114749][T20687] syzkaller0: entered promiscuous mode [ 615.142468][T20687] syzkaller0: entered allmulticast mode [ 615.155912][ T6372] bond0: (slave batadv_slave_0): interface is now down [ 615.181984][T20684] tipc: Resetting bearer [ 615.196522][ T12] bond0: (slave batadv_slave_0): interface is now down [ 615.208464][T20682] tipc: Resetting bearer [ 615.217665][T15987] bond0: (slave batadv_slave_0): interface is now down [ 615.255487][ T36] bond0: (slave batadv_slave_0): interface is now down [ 615.269373][T20682] tipc: Disabling bearer [ 615.276419][ T36] bond0: (slave batadv_slave_0): interface is now down [ 615.297919][ T36] bond0: (slave batadv_slave_0): interface is now down [ 615.328970][ T36] bond0: now running without any active interface! [ 615.430789][T20695] lo speed is unknown, defaulting to 1000 [ 615.530372][T20695] lo speed is unknown, defaulting to 1000 [ 615.570397][T20708] gre2: entered allmulticast mode [ 615.929243][T20732] __nla_validate_parse: 13 callbacks suppressed [ 615.929265][T20732] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4026'. [ 616.029799][T20738] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4026'. [ 616.169669][T20747] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4030'. [ 616.582824][T20760] syzkaller1: entered promiscuous mode [ 616.588756][T20760] syzkaller1: entered allmulticast mode [ 616.644319][T20778] tipc: Enabled bearer , priority 26 [ 616.672160][T20780] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 616.694629][T20780] tipc: Enabled bearer , priority 26 [ 616.727814][T20778] tipc: Enabling of bearer rejected, already enabled [ 616.820820][T20790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 616.888554][T20799] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4044'. [ 616.898162][T20799] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 616.946057][T20796] tipc: Enabled bearer , priority 0 [ 616.953502][T20800] lo speed is unknown, defaulting to 1000 [ 616.971076][T20804] "syz.4.4046" (20804) uses obsolete ecb(arc4) skcipher [ 616.984678][T20796] syzkaller0: entered promiscuous mode [ 616.998092][T20796] syzkaller0: entered allmulticast mode [ 617.007770][T20800] lo speed is unknown, defaulting to 1000 [ 617.031896][T20804] validate_nla: 1 callbacks suppressed [ 617.031918][T20804] netlink: 'syz.4.4046': attribute type 4 has an invalid length. [ 617.093371][T20796] vlan3: entered promiscuous mode [ 617.098692][T20796] bond0: entered promiscuous mode [ 617.103894][T20796] vlan3: entered allmulticast mode [ 617.114980][T20796] bond0: entered allmulticast mode [ 617.128485][T20812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4046'. [ 617.181600][T20792] tipc: Resetting bearer [ 617.219964][T20792] tipc: Disabling bearer [ 617.234991][T20804] lo speed is unknown, defaulting to 1000 [ 617.242573][T20804] lo speed is unknown, defaulting to 1000 [ 617.260389][T20817] lo speed is unknown, defaulting to 1000 [ 617.282429][T20817] lo speed is unknown, defaulting to 1000 [ 617.293828][T20820] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 617.473639][T20827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4051'. [ 617.543379][T20834] netlink: 212288 bytes leftover after parsing attributes in process `syz.2.4053'. [ 617.614285][T20845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4057'. [ 617.761058][T20856] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 617.946123][T17852] tipc: Node number set to 393085494 [ 617.951257][T20867] lo speed is unknown, defaulting to 1000 [ 617.968479][T20867] lo speed is unknown, defaulting to 1000 [ 617.974882][ T30] audit: type=1800 audit(1756125312.793:11): pid=20863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4062" name="memory.events" dev="tmpfs" ino=1519 res=0 errno=0 [ 618.039292][T20859] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 618.068944][T20863] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 618.206652][T20871] veth0: entered promiscuous mode [ 618.227073][T20872] veth0: left promiscuous mode [ 618.371745][T20887] syzkaller0: entered promiscuous mode [ 618.377782][T20887] syzkaller0: entered allmulticast mode [ 618.501442][T20897] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4071'. [ 618.555229][T20899] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 618.572529][T20901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4073'. [ 618.900295][T20925] lo speed is unknown, defaulting to 1000 [ 618.907822][T20925] lo speed is unknown, defaulting to 1000 [ 619.058327][T20939] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 619.070892][T20939] ------------[ cut here ]------------ [ 619.076511][T20939] WARNING: CPU: 0 PID: 20939 at net/ipv6/route.c:4857 rt6_multipath_rebalance+0x455/0x8b0 [ 619.086533][T20939] Modules linked in: [ 619.090473][T20939] CPU: 0 UID: 0 PID: 20939 Comm: syz.2.4084 Not tainted syzkaller #0 PREEMPT(full) [ 619.099929][T20939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 619.110064][T20939] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0 [ 619.116394][T20939] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 4d 20 f2 f7 e9 78 fe ff ff e8 03 b5 8e f7 eb 05 e8 fc b4 8e f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d5 c4 4b 01 [ 619.136081][T20939] RSP: 0018:ffffc900036d63c0 EFLAGS: 00010283 [ 619.142239][T20939] RAX: ffffffff8a30f62d RBX: dffffc0000000000 RCX: 0000000000080000 [ 619.150292][T20939] RDX: ffffc9001c9ee000 RSI: 000000000000353a RDI: 000000000000353b [ 619.151142][T20938] netlink: 'syz.4.4085': attribute type 10 has an invalid length. [ 619.158326][T20939] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 619.158347][T20939] R10: dffffc0000000000 R11: fffff520006dac70 R12: ffff88807b8e64de [ 619.158364][T20939] R13: ffff88805831d890 R14: 0000000000000000 R15: 1ffff1100b063b12 [ 619.158385][T20939] FS: 00007f401e1696c0(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 619.158404][T20939] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 619.158418][T20939] CR2: 00007f179f2e56c0 CR3: 000000004a39e000 CR4: 00000000003526f0 [ 619.158438][T20939] Call Trace: [ 619.158447][T20939] [ 619.158461][T20939] fib6_ifdown+0x401/0x4c0 [ 619.158498][T20939] ? __pfx_fib6_ifdown+0x10/0x10 [ 619.158529][T20939] fib6_clean_node+0x24d/0x590 [ 619.234524][T20939] ? __pfx_fib6_clean_node+0x10/0x10 [ 619.239865][T20939] ? kvm_sched_clock_read+0x11/0x20 [ 619.245084][T20939] ? sched_clock+0x3f/0x60 [ 619.249576][T20939] ? rcu_is_watching+0x15/0xb0 [ 619.254441][T20939] fib6_walk_continue+0x67b/0x910 [ 619.259556][T20939] fib6_walk+0x149/0x290 [ 619.263944][T20939] __fib6_clean_all+0x234/0x380 [ 619.268885][T20939] ? __fib6_clean_all+0x9b/0x380 [ 619.273874][T20939] ? __pfx_fib6_ifdown+0x10/0x10 [ 619.278899][T20939] ? __pfx___fib6_clean_all+0x10/0x10 [ 619.284322][T20939] ? __pfx_fib6_clean_node+0x10/0x10 [ 619.289750][T20939] ? __pfx_fib6_ifdown+0x10/0x10 [ 619.294741][T20939] ? __mutex_trylock_common+0x153/0x260 [ 619.300469][T20939] rt6_disable_ip+0x120/0x720 [ 619.305203][T20939] ? __queue_work+0xc56/0xfb0 [ 619.309973][T20939] ? rcu_is_watching+0x15/0xb0 [ 619.314784][T20939] ? trace_contention_end+0x39/0x120 [ 619.320159][T20939] ? __pfx_rt6_disable_ip+0x10/0x10 [ 619.325456][T20939] ? rcu_is_watching+0x15/0xb0 [ 619.330380][T20939] addrconf_ifdown+0x15d/0x1880 [ 619.335330][T20939] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 619.341035][T20939] ? tls_dev_event+0x717/0xec0 [ 619.345885][T20939] ? __pfx_addrconf_ifdown+0x10/0x10 [ 619.351240][T20939] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 619.357333][T20939] ? net_generic+0x1e/0x240 [ 619.361894][T20939] ? __pfx_tls_dev_event+0x10/0x10 [ 619.367071][T20939] addrconf_notify+0x1bc/0x1010 [ 619.371945][T20939] notifier_call_chain+0x1b3/0x3e0 [ 619.377127][T20939] __dev_notify_flags+0x18d/0x2e0 [ 619.382166][T20939] ? __pfx___dev_notify_flags+0x10/0x10 [ 619.387757][T20939] ? __dev_change_flags+0x4cc/0x6d0 [ 619.392976][T20939] ? __pfx___dev_change_flags+0x10/0x10 [ 619.398618][T20939] netif_change_flags+0xe8/0x1a0 [ 619.403603][T20939] do_setlink+0xc55/0x41c0 [ 619.408064][T20939] ? __kernel_text_address+0xd/0x40 [ 619.413329][T20939] ? arch_stack_walk+0xfc/0x150 [ 619.418251][T20939] ? __pfx_do_setlink+0x10/0x10 [ 619.423115][T20939] ? stack_trace_save+0x9c/0xe0 [ 619.428053][T20939] ? __mutex_trylock_common+0x153/0x260 [ 619.433627][T20939] ? __pfx___mutex_trylock_common+0x10/0x10 [ 619.439577][T20939] ? rcu_is_watching+0x15/0xb0 [ 619.444371][T20939] ? trace_contention_end+0x39/0x120 [ 619.449695][T20939] ? __mutex_lock+0x335/0x1350 [ 619.454474][T20939] ? rtnl_newlink+0x8db/0x1c70 [ 619.459286][T20939] ? __pfx___mutex_lock+0x10/0x10 [ 619.464386][T20939] ? full_name_hash+0x92/0xe0 [ 619.469109][T20939] ? netdev_name_node_lookup+0xdf/0x120 [ 619.474692][T20939] rtnl_newlink+0x160b/0x1c70 [ 619.479426][T20939] ? netlink_sendmsg+0x805/0xb30 [ 619.484438][T20939] ? __pfx_rtnl_newlink+0x10/0x10 [ 619.489534][T20939] ? rcu_is_watching+0x15/0xb0 [ 619.494329][T20939] ? nlmon_xmit+0xb0/0x100 [ 619.498818][T20939] ? kmem_cache_free+0x18f/0x400 [ 619.503808][T20939] ? rcu_is_watching+0x15/0xb0 [ 619.508720][T20939] ? __dev_queue_xmit+0x27b/0x3b50 [ 619.513859][T20939] ? __local_bh_enable_ip+0x12d/0x1c0 [ 619.519294][T20939] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 619.525029][T20939] ? __dev_queue_xmit+0x27b/0x3b50 [ 619.526634][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 619.530200][T20939] ? lock_release+0x4b/0x3e0 [ 619.542586][T20939] ? __dev_queue_xmit+0x27b/0x3b50 [ 619.547767][T20939] ? __dev_queue_xmit+0x27b/0x3b50 [ 619.552920][T20939] ? __dev_queue_xmit+0x1d79/0x3b50 [ 619.558182][T20939] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 619.563341][T20939] ? rcu_is_watching+0x15/0xb0 [ 619.568160][T20939] ? lock_release+0x4b/0x3e0 [ 619.572770][T20939] ? bpf_lsm_capable+0x9/0x20 [ 619.577507][T20939] ? security_capable+0x7e/0x2e0 [ 619.582476][T20939] ? __pfx_rtnl_newlink+0x10/0x10 [ 619.587567][T20939] rtnetlink_rcv_msg+0x7cf/0xb70 [ 619.592535][T20939] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 619.597731][T20939] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 619.603370][T20939] ? ref_tracker_free+0x63a/0x7d0 [ 619.608499][T20939] ? __asan_memcpy+0x40/0x70 [ 619.613137][T20939] ? __pfx_ref_tracker_free+0x10/0x10 [ 619.618596][T20939] netlink_rcv_skb+0x205/0x470 [ 619.623413][T20939] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 619.628926][T20939] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 619.634253][T20939] netlink_unicast+0x82c/0x9e0 [ 619.639089][T20939] ? __pfx_netlink_unicast+0x10/0x10 [ 619.644401][T20939] ? netlink_sendmsg+0x642/0xb30 [ 619.649404][T20939] ? skb_put+0x11b/0x210 [ 619.653667][T20939] netlink_sendmsg+0x805/0xb30 [ 619.658476][T20939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.663776][T20939] ? futex_unqueue+0x22/0x240 [ 619.668507][T20939] ? aa_sock_msg_perm+0xf1/0x1d0 [ 619.673478][T20939] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 619.678835][T20939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.684134][T20939] __sock_sendmsg+0x21c/0x270 [ 619.688866][T20939] ____sys_sendmsg+0x505/0x830 [ 619.693665][T20939] ? __pfx_____sys_sendmsg+0x10/0x10 [ 619.699007][T20939] ? import_iovec+0x74/0xa0 [ 619.703531][T20939] ___sys_sendmsg+0x21f/0x2a0 [ 619.708253][T20939] ? __pfx____sys_sendmsg+0x10/0x10 [ 619.713484][T20939] ? futex_wait+0x285/0x360 [ 619.718066][T20939] ? __fget_files+0x2a/0x420 [ 619.722665][T20939] ? __fget_files+0x3a0/0x420 [ 619.727411][T20939] __x64_sys_sendmsg+0x19b/0x260 [ 619.732372][T20939] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 619.737893][T20939] ? rcu_is_watching+0x15/0xb0 [ 619.742672][T20939] ? rcu_is_watching+0x15/0xb0 [ 619.747502][T20939] do_syscall_64+0xfa/0x3b0 [ 619.752019][T20939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.758225][T20939] ? clear_bhb_loop+0x60/0xb0 [ 619.762921][T20939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.768872][T20939] RIP: 0033:0x7f401d38ebe9 [ 619.773326][T20939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.792976][T20939] RSP: 002b:00007f401e169038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 619.801443][T20939] RAX: ffffffffffffffda RBX: 00007f401d5b5fa0 RCX: 00007f401d38ebe9 [ 619.809481][T20939] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 0000000000000006 [ 619.817516][T20939] RBP: 00007f401d411e19 R08: 0000000000000000 R09: 0000000000000000 [ 619.825553][T20939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.833569][T20939] R13: 00007f401d5b6038 R14: 00007f401d5b5fa0 R15: 00007ffcb5bd3fa8 [ 619.841629][T20939] [ 619.844689][T20939] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 619.851977][T20939] CPU: 0 UID: 0 PID: 20939 Comm: syz.2.4084 Not tainted syzkaller #0 PREEMPT(full) [ 619.861351][T20939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 619.871423][T20939] Call Trace: [ 619.874719][T20939] [ 619.877678][T20939] dump_stack_lvl+0x99/0x250 [ 619.882282][T20939] ? __asan_memcpy+0x40/0x70 [ 619.886886][T20939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 619.892093][T20939] ? __pfx__printk+0x10/0x10 [ 619.896713][T20939] vpanic+0x281/0x750 [ 619.900761][T20939] ? __pfx__printk+0x10/0x10 [ 619.905368][T20939] ? __pfx_vpanic+0x10/0x10 [ 619.909883][T20939] ? is_bpf_text_address+0x26/0x2b0 [ 619.915106][T20939] panic+0xb9/0xc0 [ 619.918835][T20939] ? __pfx_panic+0x10/0x10 [ 619.923272][T20939] __warn+0x31b/0x4b0 [ 619.927272][T20939] ? rt6_multipath_rebalance+0x455/0x8b0 [ 619.932924][T20939] ? rt6_multipath_rebalance+0x455/0x8b0 [ 619.938742][T20939] report_bug+0x2be/0x4f0 [ 619.943084][T20939] ? rt6_multipath_rebalance+0x455/0x8b0 [ 619.948745][T20939] ? rt6_multipath_rebalance+0x455/0x8b0 [ 619.954429][T20939] ? rt6_multipath_rebalance+0x457/0x8b0 [ 619.960193][T20939] handle_bug+0x84/0x160 [ 619.964451][T20939] exc_invalid_op+0x1a/0x50 [ 619.968984][T20939] asm_exc_invalid_op+0x1a/0x20 [ 619.973902][T20939] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0 [ 619.980264][T20939] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 4d 20 f2 f7 e9 78 fe ff ff e8 03 b5 8e f7 eb 05 e8 fc b4 8e f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d5 c4 4b 01 [ 620.000368][T20939] RSP: 0018:ffffc900036d63c0 EFLAGS: 00010283 [ 620.006451][T20939] RAX: ffffffff8a30f62d RBX: dffffc0000000000 RCX: 0000000000080000 [ 620.014446][T20939] RDX: ffffc9001c9ee000 RSI: 000000000000353a RDI: 000000000000353b [ 620.022482][T20939] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 620.030464][T20939] R10: dffffc0000000000 R11: fffff520006dac70 R12: ffff88807b8e64de [ 620.038449][T20939] R13: ffff88805831d890 R14: 0000000000000000 R15: 1ffff1100b063b12 [ 620.046453][T20939] ? rt6_multipath_rebalance+0x44d/0x8b0 [ 620.052217][T20939] fib6_ifdown+0x401/0x4c0 [ 620.056657][T20939] ? __pfx_fib6_ifdown+0x10/0x10 [ 620.061699][T20939] fib6_clean_node+0x24d/0x590 [ 620.066497][T20939] ? __pfx_fib6_clean_node+0x10/0x10 [ 620.071811][T20939] ? kvm_sched_clock_read+0x11/0x20 [ 620.077049][T20939] ? sched_clock+0x3f/0x60 [ 620.081491][T20939] ? rcu_is_watching+0x15/0xb0 [ 620.086270][T20939] fib6_walk_continue+0x67b/0x910 [ 620.091351][T20939] fib6_walk+0x149/0x290 [ 620.095620][T20939] __fib6_clean_all+0x234/0x380 [ 620.100509][T20939] ? __fib6_clean_all+0x9b/0x380 [ 620.105479][T20939] ? __pfx_fib6_ifdown+0x10/0x10 [ 620.110453][T20939] ? __pfx___fib6_clean_all+0x10/0x10 [ 620.115847][T20939] ? __pfx_fib6_clean_node+0x10/0x10 [ 620.121165][T20939] ? __pfx_fib6_ifdown+0x10/0x10 [ 620.126140][T20939] ? __mutex_trylock_common+0x153/0x260 [ 620.131725][T20939] rt6_disable_ip+0x120/0x720 [ 620.136434][T20939] ? __queue_work+0xc56/0xfb0 [ 620.141132][T20939] ? rcu_is_watching+0x15/0xb0 [ 620.145917][T20939] ? trace_contention_end+0x39/0x120 [ 620.151241][T20939] ? __pfx_rt6_disable_ip+0x10/0x10 [ 620.156468][T20939] ? rcu_is_watching+0x15/0xb0 [ 620.161283][T20939] addrconf_ifdown+0x15d/0x1880 [ 620.166223][T20939] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 620.171887][T20939] ? tls_dev_event+0x717/0xec0 [ 620.176664][T20939] ? __pfx_addrconf_ifdown+0x10/0x10 [ 620.181967][T20939] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 620.187971][T20939] ? net_generic+0x1e/0x240 [ 620.192493][T20939] ? __pfx_tls_dev_event+0x10/0x10 [ 620.197712][T20939] addrconf_notify+0x1bc/0x1010 [ 620.202608][T20939] notifier_call_chain+0x1b3/0x3e0 [ 620.207733][T20939] __dev_notify_flags+0x18d/0x2e0 [ 620.212780][T20939] ? __pfx___dev_notify_flags+0x10/0x10 [ 620.218331][T20939] ? __dev_change_flags+0x4cc/0x6d0 [ 620.223548][T20939] ? __pfx___dev_change_flags+0x10/0x10 [ 620.229192][T20939] netif_change_flags+0xe8/0x1a0 [ 620.234227][T20939] do_setlink+0xc55/0x41c0 [ 620.238671][T20939] ? __kernel_text_address+0xd/0x40 [ 620.243901][T20939] ? arch_stack_walk+0xfc/0x150 [ 620.248817][T20939] ? __pfx_do_setlink+0x10/0x10 [ 620.253693][T20939] ? stack_trace_save+0x9c/0xe0 [ 620.258577][T20939] ? __mutex_trylock_common+0x153/0x260 [ 620.264149][T20939] ? __pfx___mutex_trylock_common+0x10/0x10 [ 620.270164][T20939] ? rcu_is_watching+0x15/0xb0 [ 620.274955][T20939] ? trace_contention_end+0x39/0x120 [ 620.280260][T20939] ? __mutex_lock+0x335/0x1350 [ 620.285180][T20939] ? rtnl_newlink+0x8db/0x1c70 [ 620.289974][T20939] ? __pfx___mutex_lock+0x10/0x10 [ 620.295023][T20939] ? full_name_hash+0x92/0xe0 [ 620.299726][T20939] ? netdev_name_node_lookup+0xdf/0x120 [ 620.305331][T20939] rtnl_newlink+0x160b/0x1c70 [ 620.310053][T20939] ? netlink_sendmsg+0x805/0xb30 [ 620.315007][T20939] ? __pfx_rtnl_newlink+0x10/0x10 [ 620.320073][T20939] ? rcu_is_watching+0x15/0xb0 [ 620.324854][T20939] ? nlmon_xmit+0xb0/0x100 [ 620.329283][T20939] ? kmem_cache_free+0x18f/0x400 [ 620.334246][T20939] ? rcu_is_watching+0x15/0xb0 [ 620.339023][T20939] ? __dev_queue_xmit+0x27b/0x3b50 [ 620.344146][T20939] ? __local_bh_enable_ip+0x12d/0x1c0 [ 620.349544][T20939] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 620.355315][T20939] ? __dev_queue_xmit+0x27b/0x3b50 [ 620.360534][T20939] ? lock_release+0x4b/0x3e0 [ 620.365248][T20939] ? __dev_queue_xmit+0x27b/0x3b50 [ 620.370397][T20939] ? __dev_queue_xmit+0x27b/0x3b50 [ 620.375532][T20939] ? __dev_queue_xmit+0x1d79/0x3b50 [ 620.380762][T20939] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 620.385911][T20939] ? rcu_is_watching+0x15/0xb0 [ 620.390711][T20939] ? lock_release+0x4b/0x3e0 [ 620.395425][T20939] ? bpf_lsm_capable+0x9/0x20 [ 620.400147][T20939] ? security_capable+0x7e/0x2e0 [ 620.405113][T20939] ? __pfx_rtnl_newlink+0x10/0x10 [ 620.410163][T20939] rtnetlink_rcv_msg+0x7cf/0xb70 [ 620.415127][T20939] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 620.420258][T20939] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 620.425772][T20939] ? ref_tracker_free+0x63a/0x7d0 [ 620.430812][T20939] ? __asan_memcpy+0x40/0x70 [ 620.435411][T20939] ? __pfx_ref_tracker_free+0x10/0x10 [ 620.440800][T20939] netlink_rcv_skb+0x205/0x470 [ 620.445595][T20939] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 620.451102][T20939] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 620.456423][T20939] netlink_unicast+0x82c/0x9e0 [ 620.461234][T20939] ? __pfx_netlink_unicast+0x10/0x10 [ 620.466564][T20939] ? netlink_sendmsg+0x642/0xb30 [ 620.471506][T20939] ? skb_put+0x11b/0x210 [ 620.475966][T20939] netlink_sendmsg+0x805/0xb30 [ 620.480785][T20939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 620.486171][T20939] ? futex_unqueue+0x22/0x240 [ 620.491054][T20939] ? aa_sock_msg_perm+0xf1/0x1d0 [ 620.496006][T20939] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 620.501340][T20939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 620.506633][T20939] __sock_sendmsg+0x21c/0x270 [ 620.511331][T20939] ____sys_sendmsg+0x505/0x830 [ 620.516556][T20939] ? __pfx_____sys_sendmsg+0x10/0x10 [ 620.521858][T20939] ? import_iovec+0x74/0xa0 [ 620.526388][T20939] ___sys_sendmsg+0x21f/0x2a0 [ 620.531074][T20939] ? __pfx____sys_sendmsg+0x10/0x10 [ 620.536294][T20939] ? futex_wait+0x285/0x360 [ 620.540827][T20939] ? __fget_files+0x2a/0x420 [ 620.545429][T20939] ? __fget_files+0x3a0/0x420 [ 620.550149][T20939] __x64_sys_sendmsg+0x19b/0x260 [ 620.555131][T20939] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 620.560699][T20939] ? rcu_is_watching+0x15/0xb0 [ 620.565475][T20939] ? rcu_is_watching+0x15/0xb0 [ 620.570289][T20939] do_syscall_64+0xfa/0x3b0 [ 620.574813][T20939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.580888][T20939] ? clear_bhb_loop+0x60/0xb0 [ 620.585579][T20939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.591489][T20939] RIP: 0033:0x7f401d38ebe9 [ 620.595919][T20939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.615553][T20939] RSP: 002b:00007f401e169038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 620.623981][T20939] RAX: ffffffffffffffda RBX: 00007f401d5b5fa0 RCX: 00007f401d38ebe9 [ 620.631965][T20939] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 0000000000000006 [ 620.640055][T20939] RBP: 00007f401d411e19 R08: 0000000000000000 R09: 0000000000000000 [ 620.648049][T20939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.656088][T20939] R13: 00007f401d5b6038 R14: 00007f401d5b5fa0 R15: 00007ffcb5bd3fa8 [ 620.664117][T20939] [ 620.667537][T20939] Kernel Offset: disabled [ 620.671874][T20939] Rebooting in 86400 seconds..