last executing test programs: 3.195664475s ago: executing program 4 (id=3767): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x11e0, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "385e036eb1012cc287fb75c76c1a56a0557405af07e0e5cfa4"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "7057feb5ab746531047fcedd6e123e5b047930dcdff7"}}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffff8c2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x959}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}]}, @TIPC_NLA_NODE={0x10a8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x9f, 0x3, "349e4552cce65fdb88e662b047e9612d43d0f84904bc1c0322d339d577dd84271f494b77cff7f543e403dc172416e84e642ef0fa2e2fb2492583c931d6e834882a07a687f54c37b877c9cc7087f95008d19829c62c5d0e4ae935d59ecc33586fd1683ad4f1fa1290307589e8c06250c10b1c34bd41141ff32e97b2b77b3910c1ff7e7c97ce1ff223132f76475f6d905676520ab4788129b5d4f15a"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "d7ce1e811a1635a3ed244bfef0ea92b88f3a8c930216e22cbbd9e66eb395823192e49848a3c81b8e92d83d058cfc03ac7967ffc0269817ad5076c0a2f140e610d6e4a0bbe5c3d536e6fe6c4bf54af85f2e967930f5aabf3274cedf4d1afcd28f812bd6bf1c383892701972ed4146b66abe207e8efcd003a96974269467e4019262afc2d1a6ef0df5d6b9797d13a07b72050bc94a733e1d436b17d560803d854ec245fb258a686f9024102eb4c07b82ed2c7adea05bcdfad6c1c86d1b2ac01c7ce1229950b089114f0fb9c61bf8d7e5c6dbbb3a539f8cf96a9037a430b31aeb8a28175af82ac6cd58ee82669c726c2384192125ebae3f80d6d00baea662dc4258a31592b0ed4895cf2b92affab52b77d67ea77355377b76f04509232e43d618c07257abe392b8c15691edde653c91049470ede9117980a81376706c458f6141346e929d984757856418f77bfc022987fbb5265daca79ff4fca4e0ef7ed89ea918371269de1eeee372b00e53d339f65ebf0fbf2f0f942f9bd478df0731029cff73033db3338acff4575d7b1ce34364b962be2652cc01cfa91fc95669cf1051d32863a1da5e77c16bc819944b65c9151fb6b29441cb6c4dfa1b63497ba0665cb020327f47c4003655e0397210577c5804ec752a27566cb4ace488e430a49f20f72e12528a3248e371fc47a75bbb18027f197a23468aaa73ec512220584fd0fa972b2aa117722367b649a24193a7f66aaddb826a42efbe3731cba5c95fe35225fddf1052986d67c7acec7a2dc9867e05e134f42f99bf0385e7580948681776fd90821007bc08049d93d889bdcfdad6e6d7943f220b1ec2fc2b77be9ea8f86cf8c25fcad4a777c2dd43e220efdee0696b563953c3a66bf5011a9f4b967d0768bb28f0a3a808d2d8afbe2dacb6e4932e054978da02fddacba17d44cd1d1d0e242a758f475fe2378fd7068f1d36a25f1909b101bfddd2d00836f4df97f8e266629ba5a0e288535e03a4df6a35d537bce71dc66e41b00d439404e0bf555f06783b7eeb669c37fbcd467aa9829e016244441b92fd39db9dfe706627dc141c07dcf89e50425f7648d1f31903106150d419ca53e8c3a6084172401d3d7812105cbe6812e78ffe1cbaf279d08740846ce557bb38ebd89a4aa638f961323c241f5e7da16a8f0a4c4f28c386d0ded6da70e5da849a82aaa436f36b48847364e3376431b6193e7aa9d1d3f96757cc560a6d995e23e4ce41063d2adef339ce88eb441e22b7812bc890fea73824b657ab8c2afcba986c4f99de8db9825380c2349d19fb73f5703ab70b789b44315105963c491a2038ab252ab5a40b89d684d3aa700db57afdc321e91428bcf0beeca8a4eeeacb1c5cc05bb5601198e88d9e7958493c073959e690c9abf4e49713895b3d3a72434adcf4e0a98dee03fd9def9a73d908d172951744f69f143a14c0db2f40716081d0f2185403d6a042b41eed35675adcf13b757a731b42edcd42a995fe76ea2367d9166cff5cba257327a625b50f24b5108577b366fd2a257cee1b6b5d79e47fda767f20840a2e92dad336722100f733bfb6d51cc5ad4bbba916d2ffce16a677df5a9c64f5c1e4ebc09230982372206951ec8320c3df949eaa92a69f2649b6b5ca9d2798b620f82abeaabe0b0f61f4f54272b729ef60a19b96bd1fe7584cf26df3d25acc0479da16975d415dc8c335e5418718fa0aeffe5c1bce671a66f49a4eed1ee654fc75adba93b1f1d88bf43b6bf234d785b1ff5e68e470984ccc260e2ed0363fa25f6bcca8cfb03891ce295b58806774518327086f2593d4a37fb8aa7b68ea7c471803d471e5434ab4bac63854c6e46c97b8378c2afe4659fd586a3d9198d8583ce9b4cc4f316246895453d5f19ba25701d39c94b6f2b9a250a8541187f954a00ab0a0d9c724ed5542477295eb5cd314d062e3807763cded3a838251cb4d8a0abedf6cb68d2de9331077e0260335476d84f3f3de9fde3a62b8d8a7de06c00d246ff85e293ad6a4f3d8dc4a6814336b07b6a3037021ed447b9ce1ead2dacfc70c3ad393979406de42924b3c83579fa9eb9847ad4bad0ffeb50eb4d331cf43656be73b112c283b0e0735a25238b870a5a0111d8d7354f3b8684984181f37258aa0271e8f8c17ea37f15b816a3f0aa2c5a6795a6ae468ed01013e270a727579b813997c39cb14f9fc17a84eefc65ff565ae9d312c2b9062a42ff359a8b0047023a4c74d184824128ce4d355a2a745cbf2bee90694a9b0e744eba2c78fc5193b779638ab608a97b38fa93cc3815ce2fa8f6ce4014fb513dbe4c88483b9d217bc4eeb69d33983c22b82ba22a1dd5f4207c2057ed9225a83d0d77f318662038ddd4cb46de0ae1851c7855f17c7fd5cef8b38c08b6c2384a629f20f5051c0ca438ab28c8bc1d2954af424b69c9dd81e9191a5e3d2e71f4f40aad9de10a8f1b363b13c0ee05a2c990b3f4096d881d53c83bbc6862ec6cfb0d7bae1ae2e7e58070356983e573216b731ffb1c377ab790d61aaddb48f87bf2b22d50a1e49a774d733dcfc92aaf335817bc52f5eca025defb3fc91b21e897b96e7e260177e9ce83eb47edbb9aa12dee7bf42547dbbe89514a33848a855c6ab812c95abd8b1f964d0777b0a951e55d23d796020d5b9cb22e84680afc91a5fb4cfb02b883328f56dfcc4cd76d785e8d6c19a572699834abb0d98fb28e6a3a060638208857f128dde6ff71a60feee32a5728be61661d4855c549f2f344e870975650b0b69d5086bd98556442b43702c46eaa8937e3557c2e7ac26169f83ef6f4249f918e15e391fefa46b1c9c63c33e9dac7d2adeea56f1cff5e9ab1fc002d438cc7745a2f86f805fdbfd90e0357f8df00a877baeb98a79e66c3a6e5d4fe15aa337a4757a4ea4617d54dd28b61888231f533101179d6a862bcb76ddc795da583ee2917a7b3e139d342c33196779ee2fb6a4d1f5ea95b9d0d5a1af591eedd6378633da77aa9e01d307cd3a2dd870c6e553c36c6386065a1b396e733d2184ef89393b2b7a615efdc43d9861fe944945542bc8c8ac43308118bbcdf22a7b1408b21367233e861af22bfbbf7ebba0f033bce985760fed58d5b534233ae9d9490483dc5659d0d1b828644b768f16c66df9e8930d199bb4a69989c8bc7fe5b01045c0e15ac68c5c02b81095fe687501095728f305757bd204ff177e31ab2d211a3de598217d54a91071b8f45cd2355f8da1b0ec8994fda5b9c06ddd4f6635506ba2a2119733798aff0b4b432af7edfae910b4f0ee2cc82c17ec7c7f0fe6820c88ffa7725ffe0bdf28465c398e7db2eba8ef07f14a22d21154bfe8d9b7e8f99f963fbedf8d5fb3a4181312d8d8f747977520ecefb7328c3a21497be0687718e268f8851076997782cfadcef36d4a6fd0cc78250ab5005ad82c615bb4f194f3b1b2d3c1ea12aa28c4c1cc6a566f4bcee42627e699d3a977bb410288409ef8c763f5b7df3e151a22e89f523a86ac9f457ef89fd7c055b679a68a844b4c91f73fdfe1ccadb74438a1cedc9c07868c89f5bc35f81c817bb1ec26df4d731e2df9915ba5aab78c750efbfbe591de86764c0b2c0f4ce358240793b57e95ce0c938b0783e7961616f895fdd2ad2599f233939279c197e98dba2ab1aee2c2f2f76a409770e95852fde9060d276637db21ea2b82e6cfc79c54ef8addf535191551223a9c73ed7c28d46990c5ca81d41fc3d648c82f1e2430c866080d6c2f91fa7f1247559778d0c424932daddbdf83c7cfbe912d306a8b17d94277b114ec55d89a694a1205ab24b7079c307c99ebc99588e70afc6c9fe28965bc0894be7d91a20b05c86abcba5dad19744b5315bd150a557bccd1372adb0aa3ab79a02842ba8ba8f9eac0c96e81d812eccf18d8a44fc1e3ae908b892535f77580f17bd14ff457d578b70509c4e70c83a4ba3807190b49339de999818f62933c0384fb53d19bc601c160265531932939b1f4d84cdde2e0449caa52747ccf2a232f9349a46c37ed55711944a2bf827843534687b466f257f060df42a1c7124b587265d912267eb60ccd184d9c24b45fbed14334ed67ee0e7123579a2a149e69b26866367e8beeb16e2a0c9934d2c135c7fbe0930c787ad5247600413fa72cc0b2505c5ac5c75c02d7b6409db62f12fd77d84e57d95a488f67171c36baf5b216022a6e41d058d4a34c70e0aa92ac5ec116c46facadd1906a7b034d5fe0dda74d654c0186755f39f672cc94ae392fb0ec803c22fb70d511adf8f368ba8d42938c8e1347a84439ff03b378a2413d5ce6200920a8b53d9eba4bc720469b2b30ab81df2c1c767a09a14be72c644d8f396fa1a957256c9ba60b2172a106df1ef408537fef2b9a63d0292f723bdc8a33412a876e5cd161264074bd7adf67d57a9bdb04f4f5406d6601da1185eaf13ae74c7f9ec1666d61bea405042c59d8445de9070c83c565f8b28335fba2fd2adb81c02bb461476639e3a425e1e402bd865accbb4eeff2ac8f75ce6a723f640e702b97fa2aaab85e83c0fca37ded0238276c7dcc67ec01b5448df27099b2a1b49023371d878092f039c3a477987a943810c9b6dd26281fd1dcdc3fcc0f7cc259e4d8b0a1cce092f9dc65f82609b404fac419c546892ff8ed37e8c6aeab1743056d66b2f99b28bf8fe0940ece87eabe740fe11fe54cdc11b46632cf41c5508f8a035589ddc5f52b8031338f13f7c7b4fd9b776b44124d23f84dae5531b41a5d61d04e9fcd1b404f08043eb2920cde02c665b068399f075fd7a2b11b98493531e5709a61a75ea8ae2d4786714b0eae6e8473ca4ae0bca14562c132596a07c58d7f2e75f01241be789eb2d6956379984c4f9f5851eb4fe4f4910aa61b917b53fd466045dd44ffa1367961f668255bd21fa6b0383de3529d0f9170aa3eb2b04a0550d44b21dd8a382f35a2ab7c00e1bd093bdea4c2a0cfefe7c86fc4b156e5c3872e6de28aeca42109b2de545615f0867d03988c0570531c3dedbea4c2fbfdbff4a2b1f42bc2bd627d50c792305615c23479c06318c8fbc69600603869b21bf8cb6807bb3fe1fb104cbe6238c339bcc99eef6be0fdd64311f6b1f6906d8586c35b6337ca2758c54e6f1f6822c0032aa78318ef12e12b5c2f87f74d3d3eb64584804304c2968942c0af1515416b665f697ccc11a146e3878bc524a75028bd323b12bb14ad39eb8913c6b2fd673e7bdda8cc6c9d227e449231e9120182ffc5d6b474d782e082d85aabb556b74b1ad80c5abbd3c0fb21e139f4e1a4e063d179aa45c45a8efcb7dca4b80b705014af43df09234aadbd532e61509e28e825e077a2dee8e5bc9fd07702175520ac13ea933be7800d88399ed8dc97ce9828acbfc9555594ed2f30862f1a0c7ac1aebb473fe800f71c0e2ec192afbe17c2deb902ca08b676c49df7809f498eb6d0c304af012db031db31be98650a1be2289aa204d2b67e2282c71b81c9b7d60bd317eeb776398bbe207cfc11b187bd3ca7072fd16b1b6eadf17ea10c7d531bbf678c5c0cc6a004f88f2523a7e36554751648e48231b7eff47f229a7f0bd8b20cf65836641f84e738ad3380f14b38ad0b14615399f3953a0a9cba3cf09984e139ee51b4150ba3d87bda87eb1922dfba835808d3e3630d3d402c6e22a3808ae721282a51aedf2719ca3824d9dc737eea1bcca3aa7fb6096c8851bf9dd094ecd9ee50fe7d895a10ef2e873d0e8a1f5bf7a85fc7c7a565e7392ee053667e9d7913102f8e90d21a9b74fc44256d14d9cd2a9deb6bed6ef78aee50cc68300c4ccbdf"}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfd2}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x11e0}}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) socket$netlink(0x10, 0x3, 0x10) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) (async) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x11e0, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "385e036eb1012cc287fb75c76c1a56a0557405af07e0e5cfa4"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "7057feb5ab746531047fcedd6e123e5b047930dcdff7"}}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffff8c2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x959}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}]}, @TIPC_NLA_NODE={0x10a8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x9f, 0x3, "349e4552cce65fdb88e662b047e9612d43d0f84904bc1c0322d339d577dd84271f494b77cff7f543e403dc172416e84e642ef0fa2e2fb2492583c931d6e834882a07a687f54c37b877c9cc7087f95008d19829c62c5d0e4ae935d59ecc33586fd1683ad4f1fa1290307589e8c06250c10b1c34bd41141ff32e97b2b77b3910c1ff7e7c97ce1ff223132f76475f6d905676520ab4788129b5d4f15a"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "d7ce1e811a1635a3ed244bfef0ea92b88f3a8c930216e22cbbd9e66eb395823192e49848a3c81b8e92d83d058cfc03ac7967ffc0269817ad5076c0a2f140e610d6e4a0bbe5c3d536e6fe6c4bf54af85f2e967930f5aabf3274cedf4d1afcd28f812bd6bf1c383892701972ed4146b66abe207e8efcd003a96974269467e4019262afc2d1a6ef0df5d6b9797d13a07b72050bc94a733e1d436b17d560803d854ec245fb258a686f9024102eb4c07b82ed2c7adea05bcdfad6c1c86d1b2ac01c7ce1229950b089114f0fb9c61bf8d7e5c6dbbb3a539f8cf96a9037a430b31aeb8a28175af82ac6cd58ee82669c726c2384192125ebae3f80d6d00baea662dc4258a31592b0ed4895cf2b92affab52b77d67ea77355377b76f04509232e43d618c07257abe392b8c15691edde653c91049470ede9117980a81376706c458f6141346e929d984757856418f77bfc022987fbb5265daca79ff4fca4e0ef7ed89ea918371269de1eeee372b00e53d339f65ebf0fbf2f0f942f9bd478df0731029cff73033db3338acff4575d7b1ce34364b962be2652cc01cfa91fc95669cf1051d32863a1da5e77c16bc819944b65c9151fb6b29441cb6c4dfa1b63497ba0665cb020327f47c4003655e0397210577c5804ec752a27566cb4ace488e430a49f20f72e12528a3248e371fc47a75bbb18027f197a23468aaa73ec512220584fd0fa972b2aa117722367b649a24193a7f66aaddb826a42efbe3731cba5c95fe35225fddf1052986d67c7acec7a2dc9867e05e134f42f99bf0385e7580948681776fd90821007bc08049d93d889bdcfdad6e6d7943f220b1ec2fc2b77be9ea8f86cf8c25fcad4a777c2dd43e220efdee0696b563953c3a66bf5011a9f4b967d0768bb28f0a3a808d2d8afbe2dacb6e4932e054978da02fddacba17d44cd1d1d0e242a758f475fe2378fd7068f1d36a25f1909b101bfddd2d00836f4df97f8e266629ba5a0e288535e03a4df6a35d537bce71dc66e41b00d439404e0bf555f06783b7eeb669c37fbcd467aa9829e016244441b92fd39db9dfe706627dc141c07dcf89e50425f7648d1f31903106150d419ca53e8c3a6084172401d3d7812105cbe6812e78ffe1cbaf279d08740846ce557bb38ebd89a4aa638f961323c241f5e7da16a8f0a4c4f28c386d0ded6da70e5da849a82aaa436f36b48847364e3376431b6193e7aa9d1d3f96757cc560a6d995e23e4ce41063d2adef339ce88eb441e22b7812bc890fea73824b657ab8c2afcba986c4f99de8db9825380c2349d19fb73f5703ab70b789b44315105963c491a2038ab252ab5a40b89d684d3aa700db57afdc321e91428bcf0beeca8a4eeeacb1c5cc05bb5601198e88d9e7958493c073959e690c9abf4e49713895b3d3a72434adcf4e0a98dee03fd9def9a73d908d172951744f69f143a14c0db2f40716081d0f2185403d6a042b41eed35675adcf13b757a731b42edcd42a995fe76ea2367d9166cff5cba257327a625b50f24b5108577b366fd2a257cee1b6b5d79e47fda767f20840a2e92dad336722100f733bfb6d51cc5ad4bbba916d2ffce16a677df5a9c64f5c1e4ebc09230982372206951ec8320c3df949eaa92a69f2649b6b5ca9d2798b620f82abeaabe0b0f61f4f54272b729ef60a19b96bd1fe7584cf26df3d25acc0479da16975d415dc8c335e5418718fa0aeffe5c1bce671a66f49a4eed1ee654fc75adba93b1f1d88bf43b6bf234d785b1ff5e68e470984ccc260e2ed0363fa25f6bcca8cfb03891ce295b58806774518327086f2593d4a37fb8aa7b68ea7c471803d471e5434ab4bac63854c6e46c97b8378c2afe4659fd586a3d9198d8583ce9b4cc4f316246895453d5f19ba25701d39c94b6f2b9a250a8541187f954a00ab0a0d9c724ed5542477295eb5cd314d062e3807763cded3a838251cb4d8a0abedf6cb68d2de9331077e0260335476d84f3f3de9fde3a62b8d8a7de06c00d246ff85e293ad6a4f3d8dc4a6814336b07b6a3037021ed447b9ce1ead2dacfc70c3ad393979406de42924b3c83579fa9eb9847ad4bad0ffeb50eb4d331cf43656be73b112c283b0e0735a25238b870a5a0111d8d7354f3b8684984181f37258aa0271e8f8c17ea37f15b816a3f0aa2c5a6795a6ae468ed01013e270a727579b813997c39cb14f9fc17a84eefc65ff565ae9d312c2b9062a42ff359a8b0047023a4c74d184824128ce4d355a2a745cbf2bee90694a9b0e744eba2c78fc5193b779638ab608a97b38fa93cc3815ce2fa8f6ce4014fb513dbe4c88483b9d217bc4eeb69d33983c22b82ba22a1dd5f4207c2057ed9225a83d0d77f318662038ddd4cb46de0ae1851c7855f17c7fd5cef8b38c08b6c2384a629f20f5051c0ca438ab28c8bc1d2954af424b69c9dd81e9191a5e3d2e71f4f40aad9de10a8f1b363b13c0ee05a2c990b3f4096d881d53c83bbc6862ec6cfb0d7bae1ae2e7e58070356983e573216b731ffb1c377ab790d61aaddb48f87bf2b22d50a1e49a774d733dcfc92aaf335817bc52f5eca025defb3fc91b21e897b96e7e260177e9ce83eb47edbb9aa12dee7bf42547dbbe89514a33848a855c6ab812c95abd8b1f964d0777b0a951e55d23d796020d5b9cb22e84680afc91a5fb4cfb02b883328f56dfcc4cd76d785e8d6c19a572699834abb0d98fb28e6a3a060638208857f128dde6ff71a60feee32a5728be61661d4855c549f2f344e870975650b0b69d5086bd98556442b43702c46eaa8937e3557c2e7ac26169f83ef6f4249f918e15e391fefa46b1c9c63c33e9dac7d2adeea56f1cff5e9ab1fc002d438cc7745a2f86f805fdbfd90e0357f8df00a877baeb98a79e66c3a6e5d4fe15aa337a4757a4ea4617d54dd28b61888231f533101179d6a862bcb76ddc795da583ee2917a7b3e139d342c33196779ee2fb6a4d1f5ea95b9d0d5a1af591eedd6378633da77aa9e01d307cd3a2dd870c6e553c36c6386065a1b396e733d2184ef89393b2b7a615efdc43d9861fe944945542bc8c8ac43308118bbcdf22a7b1408b21367233e861af22bfbbf7ebba0f033bce985760fed58d5b534233ae9d9490483dc5659d0d1b828644b768f16c66df9e8930d199bb4a69989c8bc7fe5b01045c0e15ac68c5c02b81095fe687501095728f305757bd204ff177e31ab2d211a3de598217d54a91071b8f45cd2355f8da1b0ec8994fda5b9c06ddd4f6635506ba2a2119733798aff0b4b432af7edfae910b4f0ee2cc82c17ec7c7f0fe6820c88ffa7725ffe0bdf28465c398e7db2eba8ef07f14a22d21154bfe8d9b7e8f99f963fbedf8d5fb3a4181312d8d8f747977520ecefb7328c3a21497be0687718e268f8851076997782cfadcef36d4a6fd0cc78250ab5005ad82c615bb4f194f3b1b2d3c1ea12aa28c4c1cc6a566f4bcee42627e699d3a977bb410288409ef8c763f5b7df3e151a22e89f523a86ac9f457ef89fd7c055b679a68a844b4c91f73fdfe1ccadb74438a1cedc9c07868c89f5bc35f81c817bb1ec26df4d731e2df9915ba5aab78c750efbfbe591de86764c0b2c0f4ce358240793b57e95ce0c938b0783e7961616f895fdd2ad2599f233939279c197e98dba2ab1aee2c2f2f76a409770e95852fde9060d276637db21ea2b82e6cfc79c54ef8addf535191551223a9c73ed7c28d46990c5ca81d41fc3d648c82f1e2430c866080d6c2f91fa7f1247559778d0c424932daddbdf83c7cfbe912d306a8b17d94277b114ec55d89a694a1205ab24b7079c307c99ebc99588e70afc6c9fe28965bc0894be7d91a20b05c86abcba5dad19744b5315bd150a557bccd1372adb0aa3ab79a02842ba8ba8f9eac0c96e81d812eccf18d8a44fc1e3ae908b892535f77580f17bd14ff457d578b70509c4e70c83a4ba3807190b49339de999818f62933c0384fb53d19bc601c160265531932939b1f4d84cdde2e0449caa52747ccf2a232f9349a46c37ed55711944a2bf827843534687b466f257f060df42a1c7124b587265d912267eb60ccd184d9c24b45fbed14334ed67ee0e7123579a2a149e69b26866367e8beeb16e2a0c9934d2c135c7fbe0930c787ad5247600413fa72cc0b2505c5ac5c75c02d7b6409db62f12fd77d84e57d95a488f67171c36baf5b216022a6e41d058d4a34c70e0aa92ac5ec116c46facadd1906a7b034d5fe0dda74d654c0186755f39f672cc94ae392fb0ec803c22fb70d511adf8f368ba8d42938c8e1347a84439ff03b378a2413d5ce6200920a8b53d9eba4bc720469b2b30ab81df2c1c767a09a14be72c644d8f396fa1a957256c9ba60b2172a106df1ef408537fef2b9a63d0292f723bdc8a33412a876e5cd161264074bd7adf67d57a9bdb04f4f5406d6601da1185eaf13ae74c7f9ec1666d61bea405042c59d8445de9070c83c565f8b28335fba2fd2adb81c02bb461476639e3a425e1e402bd865accbb4eeff2ac8f75ce6a723f640e702b97fa2aaab85e83c0fca37ded0238276c7dcc67ec01b5448df27099b2a1b49023371d878092f039c3a477987a943810c9b6dd26281fd1dcdc3fcc0f7cc259e4d8b0a1cce092f9dc65f82609b404fac419c546892ff8ed37e8c6aeab1743056d66b2f99b28bf8fe0940ece87eabe740fe11fe54cdc11b46632cf41c5508f8a035589ddc5f52b8031338f13f7c7b4fd9b776b44124d23f84dae5531b41a5d61d04e9fcd1b404f08043eb2920cde02c665b068399f075fd7a2b11b98493531e5709a61a75ea8ae2d4786714b0eae6e8473ca4ae0bca14562c132596a07c58d7f2e75f01241be789eb2d6956379984c4f9f5851eb4fe4f4910aa61b917b53fd466045dd44ffa1367961f668255bd21fa6b0383de3529d0f9170aa3eb2b04a0550d44b21dd8a382f35a2ab7c00e1bd093bdea4c2a0cfefe7c86fc4b156e5c3872e6de28aeca42109b2de545615f0867d03988c0570531c3dedbea4c2fbfdbff4a2b1f42bc2bd627d50c792305615c23479c06318c8fbc69600603869b21bf8cb6807bb3fe1fb104cbe6238c339bcc99eef6be0fdd64311f6b1f6906d8586c35b6337ca2758c54e6f1f6822c0032aa78318ef12e12b5c2f87f74d3d3eb64584804304c2968942c0af1515416b665f697ccc11a146e3878bc524a75028bd323b12bb14ad39eb8913c6b2fd673e7bdda8cc6c9d227e449231e9120182ffc5d6b474d782e082d85aabb556b74b1ad80c5abbd3c0fb21e139f4e1a4e063d179aa45c45a8efcb7dca4b80b705014af43df09234aadbd532e61509e28e825e077a2dee8e5bc9fd07702175520ac13ea933be7800d88399ed8dc97ce9828acbfc9555594ed2f30862f1a0c7ac1aebb473fe800f71c0e2ec192afbe17c2deb902ca08b676c49df7809f498eb6d0c304af012db031db31be98650a1be2289aa204d2b67e2282c71b81c9b7d60bd317eeb776398bbe207cfc11b187bd3ca7072fd16b1b6eadf17ea10c7d531bbf678c5c0cc6a004f88f2523a7e36554751648e48231b7eff47f229a7f0bd8b20cf65836641f84e738ad3380f14b38ad0b14615399f3953a0a9cba3cf09984e139ee51b4150ba3d87bda87eb1922dfba835808d3e3630d3d402c6e22a3808ae721282a51aedf2719ca3824d9dc737eea1bcca3aa7fb6096c8851bf9dd094ecd9ee50fe7d895a10ef2e873d0e8a1f5bf7a85fc7c7a565e7392ee053667e9d7913102f8e90d21a9b74fc44256d14d9cd2a9deb6bed6ef78aee50cc68300c4ccbdf"}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfd2}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x11e0}}, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) (async) 2.984205103s ago: executing program 0 (id=3771): r0 = socket$inet6(0xa, 0x5, 0x0) (async) r1 = socket$inet(0x2, 0x800, 0x4b5d2fcd) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0x444, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x0, @broadcast}], 0x10) (async) r2 = socket(0x22, 0x2, 0x1) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000000)=0x800, 0x4) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) sendmsg$tipc(r2, &(0x7f0000000e80)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24040000}, 0x44000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000110001010000000000000000000000000228300e5b07c90d6c54ce3dc3936e484cf74864fbc806de4338381854f3658681b28eaa78252fb366ec5696f1b40e887d9a994c4f5a441c1a57feea5228e70628f7f1bdbdf07a6d96ce86fa7cae066ee56c01fdbc6ab2e6ca0e1c003a5a26a4f5bb82038d80bd0a036f620f9039ac3d3f501f31e62d38430672f476cc53aa6ab5232f54b9", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 2.68823286s ago: executing program 4 (id=3772): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e3000) (async) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000ab4800000000cd0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000240)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x3b, 0x2, 0x4a}, 0x2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xf0b, 0x13, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffffe, 0x6, 0xfffffff7, 0x4, 0x0, 0x7, 0x7f, 0x9, 0x22f}}}}]}, 0x58}}, 0x8000) (async, rerun: 32) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x6, 0x9}, {0xfff3, 0x5}, {0x1c, 0xffe0}}}, 0x24}}, 0x44804) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 2.609539502s ago: executing program 3 (id=3775): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000034"], 0x30}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001e80)=ANY=[@ANYBLOB="3c0000001000010010000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="09000000000000001c0012800b0001006d616373656300000c00028005000f0001000000"], 0x3c}}, 0x0) 2.524621153s ago: executing program 0 (id=3776): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00000000e5a32ddd95814be851000000000008003a76d38d978f6baaf2518b000000000000000000dee96a636d7038f8fe2e809b23bc828018bdfc98f7c31080721e5745f822039092b0978084046ea6fcb2f9b3dba906aeb759ab5fc8fc0b786be1b4ca93b61f1114f7cbfaa1fc6c7b48057ec453bd540548ed351d5349533f21dcfe90d2f3385e12", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) 2.429820168s ago: executing program 4 (id=3777): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000001fc0)=@canfd={{0x0, 0x1, 0x1, 0x1}, 0x3b, 0x1, 0x0, 0x0, "de7b188b84e33c7f136f845eb5a03b4ccd884a75e3868cc6f4408dcc9e89effe6b47ff16b9cf65df8f1a565c9416146938e090a21e9c36d9764ad403c5c58d06"}, 0x48}, 0x2, 0x0, 0x0, 0x80}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={r4}, 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000007000000040000003000615f6100"], 0x0, 0x2b, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth0_vlan\x00', 0x3}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @mcast1, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r6}, 0x10) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='netfs_sreq_ref\x00', r7, 0x0, 0x2}, 0x18) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000002f3144e90000000003000600eb1f00000200403fe0000001000000f5000000000800120002000100000000000000000030006c100201009f6eae02000000adb20200000000152c000000ffffffff00010a0014bb7acde1b8e96408d700000000030005000020000002"], 0x80}}, 0x1) (async) socket$key(0xf, 0x3, 0x2) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d40)=@delchain={0xdc, 0x65, 0x8, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffe0, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0xba41}, @filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x401}, @filter_kind_options=@f_bpf={{0x8}, {0x94, 0x2, [@TCA_BPF_ACT={0x90, 0x1, [@m_connmark={0x8c, 0x15, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8001, 0x98, 0x7, 0x401, 0x10001}, 0x8}}]}, {0x3d, 0x6, "aa175362afb6597dda7c2e119d31fc7083635714502d7c4f7f71046ccd1b22118c8f4dd98a9028130276b04938182752606dadf203098e5661"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0xdc}}, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async) getsockopt$inet_mreqn(r8, 0x0, 0x24, &(0x7f0000000540)={@local, @loopback}, &(0x7f0000000740)=0xc) r10 = accept4$phonet_pipe(r8, &(0x7f0000000080), &(0x7f0000000200)=0x71, 0x80000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r10, {0x2, 0x4e21, @multicast2}, 0x0, 0x4, 0x4, 0x2}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)="d6c373307d861520983827ac121846ca98fe7771d3b8bbb1ef01258ba72842de0ae761bc4bb2b3257202b0f1cf631bdcef90a6ff4b295479c8ea71dce8eaeb792ff6656151fbfe9879c518b99f5baab6b61a39743a7e9a49285754cc40cc6fbb08af1d99f30e02d1a77e3f65c195d6431fd2dd24e0287bc9f9aa4c64e5b9e7d51b155d571a49a52a736d41a23db4f18a6b093e75c23dcba16c8045eeac4e70bc908f078784ac18093b71", 0xaa}, {&(0x7f0000000400)="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", 0x1000}], 0x2, &(0x7f0000001400)=ANY=[@ANYBLOB="1d000000000000b23c1078d1004982000074"], 0x18}, 0x0) 2.373604693s ago: executing program 3 (id=3779): socket$packet(0x11, 0x0, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=@allocspi={0x100, 0x16, 0x0, 0x0, 0x0, {{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}, {@in=@broadcast}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0xf3a7}, {0x0, 0x48a9, 0x0, 0x1}, {0xffffff81}}, 0x0, 0x800000}, [@XFRMA_IF_ID={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x9e800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000050000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002500)=[{{&(0x7f0000000280)={0xa, 0x4e24, 0x3, @remote, 0x4}, 0x1c, 0x0}}], 0x1, 0x4001c00) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb92f"], 0xfdef) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000000), 0x4) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)={0x74, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbda0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}]}, 0x74}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x54) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x30004844) shutdown(r5, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e40)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000080), &(0x7f0000000180)='%-010d \x00'}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000c80), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000c40), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x5, &(0x7f0000000200)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10, 0x10}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/194, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2c, 0x0, r7, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 2.373234292s ago: executing program 2 (id=3780): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0x2, 0x10000, 0x0, @remote, @loopback, 0x8, 0x700, 0x1ff, 0x4}}) r0 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000240)=""/1, &(0x7f0000002180)=0x1) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="611085000005000095000000000000005b17dd0efdc6c5801a2c503c4e84825579fcd43963c72bbc0cc0dbebf4321ddbc0792ff0d2b2652b6794e13aa2705aca15bd7d772606ee5044340f79b74ce70fab4bfd90aec9c3b6ab3c7b89cf572a41432f7924ad61d0f9d218ab6ac3fbbd3f88ff6ba05370b05f27204247e431cba6e4c67b8692c518bf21a6bb06036ca9ade38e073ffa2cbee7311387225ec33ddf9e1b747e78b0fc00"/179], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000140)=@phonet={0x23, 0x8, 0x9, 0x3}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)="402cc3cd4aec529ccc6d0557284302ea30637619371797f9ff0fe0c21c33c1aee860e927ef483ece6f932702ef5b239ef4f1ccf8d7a2414868ca872fa02b516458b287a1668e12d80f90fcc2d01602b2bd30c38c9acb2e3d9f79c7c1fddd3bd6ec8e2df922eaff", 0x67}, {&(0x7f0000000380)="72fc6c5b9b25ddd4d9900e14d5cfbce05575618c3b787c55bf31210f80fdbdb5d380b8d2f54361ba8540e244d542384d690f1e8bf1fa156aa98f951eff01158d1ce4c9fe0e1d4ac5f31a67c98021cd1b5b89ecacbc593b085b0a073f0236350ec6203c244fa97c8ac5d1b43768f316882af19fd3836ee2dfc4e71b806f0a3426f49f1276", 0x84}, {&(0x7f0000000000)="4f2bfb8bd158635c", 0x8}, {&(0x7f0000000080)="0997517e9120c7dd0cf926653106f7d6b05bd1c1f579d09f57a3276819e193735f494c", 0x23}, {&(0x7f0000000440)="4f69425bc4adbf962ebd897905775302ec4bf8a2224ada60ac2d2bae", 0x1c}], 0x5, &(0x7f0000000500)=[{0x68, 0x109, 0x8000, "f6b7b3fd02322e8d2e84ca2d2d54ebdc587865e0c613dec24ad76b0f96f8cd06f84171b211811c99b6f4fd8a707eb8cbd01a33e422d4906303a31c67f718194926af763e92d2023cf685c43b3569869e4627"}, {0xa8, 0x11, 0x4c1b, "9ed4e7ccf5af901a09bb2dc3f8e0e56cbed52d2e7408941095c5eb5deec68f7f9136a0a82ec289e93e42ee27e2678e81601b1c44421302a80288d51346cd85bcddab35a789975035b0e537b1f09119cff1b201d165b263cf1a816926cc8c5017df28becfb20481d9b5bf2457ba8454e0475527a05ab25c78468be730d975e9fa084426296929b3a06f8226f37099d41fe2a67a98ba1f"}, {0x10, 0xff, 0xfff}, {0xb0, 0x0, 0x9e1e, "de5ef7e0c0cf7c1bdfca503832857d2fde42a8c956df4af65944d67bef591501c8a629d19b387064d8846391b2726d14ef6e0f25b11aab32a54c0ce6ef26b9459a8a0829c63438914ece955537f7399da0f9e41e47f5ab4e991dec6537499d2dd274c076faefd17b1a182eb135f54d4107e4b302080517a8e66482ccb364281cba09b2f5685fe398693c00a3fb631f6077a37dd7c982f5477d"}], 0x1d0}, 0x8000) 2.365380317s ago: executing program 0 (id=3781): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x8}, {}, {0x5}}, [@filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r1}, @TCA_ROUTE4_TO={0x8, 0x2, 0xb9}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x200007f}]}}]}, 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000780)={0x28, r4, 0x483, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x6, 0x1, 0xb, 0xa, 0xa, 0xffffffffffffffff}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x4000, 0x69, 0x10, 0x22}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}]}, 0x1c}}, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x24060400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r8, &(0x7f0000000140)=@in6={0x21, 0x2, 0x2, 0x0, {0xa, 0x4e22, 0x206, @rand_addr=' \x01\x00', 0x3}}, 0x24) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)={0xac, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc}, {0x6, 0x16, 0x7f}, {0x5}, {0x6, 0x11, 0xd}, {0x8, 0xb, 0xe0aa}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x4}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0xaa4}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4008056}, 0x24028050) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@newchain={0x24, 0x64, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x10, 0x9}, {0x4, 0x4}, {0xfff4, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) socket(0x10, 0x3, 0x0) r9 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffa, 0x0, 0x4}, 0xfffffffffffffcaf) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 2.220887456s ago: executing program 4 (id=3782): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "12000700"}, 0x38) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0xfe, 0x2}, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1}, 0x41) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) (async) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) 2.171617046s ago: executing program 2 (id=3783): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000470000000000000000000000711217000000000095"], &(0x7f0000000f00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000700)={'sit0\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x40, 0x741, 0x4, 0xd, {{0x6, 0x4, 0x0, 0x4, 0x18, 0x64, 0x0, 0x8, 0x29, 0x0, @multicast1, @rand_addr=0x64010102, {[@end]}}}}}) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000680)=[{&(0x7f00000005c0)="e3b3f1e452edff5d69932d1edd2b24d60e1960432c9b6e536e36fe0c089111111b8286006b26eac96710a1f92738d4d1c597f7001100390f5f68bc0be2d6925cb1a82613e9cff2254f04297aef3b35ad2ac2471d9ba73181cb496e2065df7c9de8c6450821030d0eb228e3890e760d56e837022d4bb19892231aefbea9010a81aa4d71404bede8a1f11eafa0f0bab509c322f7b30f61090d0c091177f567f772a5dfe5b55105de8b739bba7c113bbbebc7827edf896c078aa4", 0xb9}], 0x1, &(0x7f0000000740)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xbe}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0xc8, 0x0, 0x7, {[@cipso={0x86, 0x49, 0x0, [{0x0, 0x11, "1d16c3038c036a14e7330459143508"}, {0x0, 0x8, "3c02a1c3121d"}, {0x0, 0x7, "1894d3933d"}, {0x1, 0x2}, {0x5, 0xf, "3f2508b5a3c954ac7b3b707099"}, {0x0, 0x12, "34b22f6d966b07d769c6cc381352c5be"}]}, @end, @generic={0x89, 0xb, "d92a22c64f0d623b6b"}, @timestamp_addr={0x44, 0x3c, 0xb3, 0x1, 0x3, [{@rand_addr=0x64010102, 0xcc}, {@loopback, 0xff}, {@broadcast, 0x7}, {@remote, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote, 0x6}, {@multicast2, 0x3}]}, @timestamp={0x44, 0x10, 0x77, 0x0, 0x0, [0x0, 0x1000, 0xc]}, @ssrr={0x89, 0x17, 0x22, [@private=0xa010102, @loopback, @multicast1, @broadcast, @remote]}]}}}], 0x118}}], 0x1, 0x410) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000140)=[@mss={0x2, 0x8}, @window={0x3, 0xffff, 0x9}, @window={0x3, 0x0, 0x3}, @window={0x3, 0x0, 0x3e9b}, @timestamp], 0x5) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5, r5}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r5, r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r6) pipe(&(0x7f00000008c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000900)={0x0, 0x6, 0x0, 0x3, 0x20}, &(0x7f0000000940)=0x18) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000000980)={r8, 0x7ff, 0x2}, 0x8) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000009"], 0x24d8}], 0x1, 0x0, 0x0, 0x1b9c412759e5f399}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x58) accept4(r9, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x17}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0x54}}, 0x0) 2.134931729s ago: executing program 3 (id=3785): pipe(&(0x7f0000000080)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') r0 = socket(0x10, 0x3, 0x0) unshare(0x20000400) write(r0, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r5, 0xf504, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r3, 0x11, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 1.964077113s ago: executing program 3 (id=3786): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x7, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000440)=r0, 0x4) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x3c, 0x10, 0x609, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60353}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x40050) 1.88799569s ago: executing program 1 (id=3788): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x1, &(0x7f0000001700)=0x2, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 1.872481455s ago: executing program 2 (id=3789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x9d, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x58, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 1.763882646s ago: executing program 3 (id=3790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x44, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5, 0x4, 0xff}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x400c000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @private=0x7fffffff}}, 0xffffffff, 0x401, 0x101, 0x5, 0x80, 0xfffffffa, 0x9}, 0x9c) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000009000100"], 0x34}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r6, 0x89a3, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000061175c0000000000a6070000430000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r9, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r10, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="20000000170a01030000000000000000020000000900"], 0x20}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=r11, @ANYBLOB="00000000000000003800128008000100677265002c00028008000700ac1e000106000f0020000000050008000000000008000100", @ANYRES32=0x0, @ANYBLOB="060010"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000480)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d4c466b340e28b05c93a072528230718"}]}}}}}}}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="0c0099005908000054000000"], 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x8004084) 1.695591423s ago: executing program 2 (id=3791): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="620ac4ff0000b3b50e68360000000000950000000000000001122e938b63cbd2493e7cab79d78e2043d223644ff6249dd79bb1a7fc8cceb2a2dd0e59a37823bd4e09a303d05939177687244f65944b3b68e4d36ec2cc479b1c19a9a52131e1be33bb05f1b738b30bb0f367f504a305353cbe15cd445b273c57bb5c0c52de"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="1400000036000107000000000000000010000000aba1e04136680daddef90022d9b9090ea5309ab784a508dbcb23bda4337247b8894a7483a513c15f41b3b7e9d37a5d275bfef6651aa44527b9eb07834ccd86010457e13a2c7828338097c8b21f83714c59ec81b84a7b8c0bccc3ed1259b7e7989053bfae12b9d96c25aac2c6f4700520b0d6779f4eb114d6becfb50c1cf8dbe15e1fafebd8d5ab994e76ed81d336b2fc32953fefac181322ecc01dd2951db39f58662b738f69d7e53b0d95b7a61f1c95b113cf8eb5223e8ae7bc52b1a9d2689ae34a416779351c29e4d8879955d4adb98956884a2b2172e43817e4c66f74"], 0x14}, 0x1, 0x0, 0x0, 0x20004881}, 0x10) (async, rerun: 64) r2 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x4004, 0x5, 0x50d, 0xd, 0x2000000000, 0x9], 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="3ec35446f25d2df23ef1b87fc4e4acdd531b3e67580fe38145f88f899724c5e5079404112234b836a70346680a3af6da6d96bed958bb7ef64b2e32dcc0b1699d6889b44f6a3d44158695d3bff04e5286c8bd0a294ce09a152d7d49f32be0ebebba7d365817d3f1ba3ec461fe6f75b47fee354b330713b5f4c366a895475ed8c2b50466c75a370a94b098a3e921a9c788", @ANYRES32=r2]}, 0x122) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) (rerun: 32) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) write$cgroup_devices(r7, 0x0, 0xffdd) (async, rerun: 32) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) (rerun: 32) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r9}, 0x8) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, 0x0) (async) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x71]}}, &(0x7f0000000c00)=""/122, 0x1b, 0x7a, 0x1, 0x0, 0x10000, @value}, 0x28) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000d40)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x4, 0x0, 0x0, &(0x7f0000000a80)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r11, r9, 0x3, &(0x7f0000000e40)=[r8], &(0x7f0000000900)=[{0x4, 0x3, 0x9, 0x3}, {0x0, 0x3, 0x0, 0x6}, {0x0, 0x2, 0x9, 0x8}], 0x10, 0x1, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x13, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4f}, [@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x7, 0x1, 0xd, 0x5, 0x5, 0x6, 0x3a477efed55b1718}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f00000004c0)='syzkaller\x00', 0x27, 0x0, 0x0, 0x80, 0x45, '\x00', r6, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, r11, r0, 0x3, 0x0, &(0x7f0000000580)=[{0x3, 0x3, 0x2, 0x5}, {0x5, 0x2, 0x4, 0xb}, {0x4, 0x4, 0x3, 0x2}], 0x10, 0x8, @void, @value}, 0x94) (async) r12 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) r15 = socket$nl_route(0x10, 0x3, 0x0) (async) r16 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=@newlink={0x2c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r17, 0x0, 0x11203}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r14, {}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x7d}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x24000005) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r3, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r14}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc4}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008091}, 0x4008804) 1.654245453s ago: executing program 1 (id=3792): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x20) writev(r0, &(0x7f00000000c0), 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd4}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r5, 0x1, 0x1f, &(0x7f0000000340)=""/61, &(0x7f00000003c0)=0x3d) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}}, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x891b, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB="44010000", @ANYRES16=r8, @ANYBLOB="010000000000000008000100000004000480080002000100000008000100000000000400088018010c8054000b800800090000000000080009000000000008000a000000000008000a0000000000080009000000000008000a000000000008000a000000000008000a000000000008000a000000000008000900000000000c000b8008000a000000000014000b8008000900c81e173808000a0083ec000004000b8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000a00000000000800090000000000080009000000000008000a000000000008000a00000000003c000b80080009000000000008000a000000000008000a000000000008000900000000000800090080000000080009000000000008000900000000000c000b800800090000000080"], 0x144}}, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) getsockname$netrom(r9, &(0x7f0000000640)={{0x3, @null}, [@netrom, @bcast, @default, @rose, @null, @netrom, @bcast, @null]}, &(0x7f0000000080)=0x48) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0xbc, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:adjtime_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x800) 1.395094994s ago: executing program 0 (id=3793): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8, 0x6, 0x80000000}, @RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x2c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x2d, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x96}, {}, {}, [@map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xaf}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x80, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x8, 0x6, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000005c0)=@generic={&(0x7f0000000000)='./file0\x00', r1}, 0x18) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.320137214s ago: executing program 2 (id=3794): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 1.243106212s ago: executing program 1 (id=3795): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x45, 0x0, 0x0, 0x6}}, 0x1c}}, 0x40000000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40404}, 0x100) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x45, 0x0, 0x0, 0x6}}, 0x1c}}, 0x40000000) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40404}, 0x100) (async) 1.241456024s ago: executing program 0 (id=3796): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x21}, {0x8, 0x18}]}}]}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@ipv4_newaddr={0x34, 0x14, 0x509, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x6, 0x5}}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x34}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a800000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup, 0x37, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000240)='batadv_slave_1\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@fallback=r1, r6, 0x0, 0x28, 0x0, @void, @void, @void, @value=r8, r7}, 0x20) 1.21023607s ago: executing program 4 (id=3797): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="a0ee6bd16b54", @local, @val={@void, {0x8100, 0x5, 0x0, 0x1}}, {@arp={0x806, @generic={0x324, 0x9200, 0x6, 0x4, 0x3, @random="fd9ef6b5d8e4", "e647f1d4", @multicast}}}}, &(0x7f0000000040)={0x1, 0x3, [0x677, 0xb2c, 0x862, 0xb1f]}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$alg(r0, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="cc421e21e79604b7e1844cbf1f80fca95b2ca71beb1311425449fb16e6e085364b4a8c98048b", 0x26}, {&(0x7f0000000100)="cf", 0x1}], 0x2, &(0x7f0000000180)=[@iv={0x88, 0x117, 0x2, 0x74, "8c208f8c021598c506cc2f88a320d869b7af83d5d61276a6b221491ec2453e9bda1fdad1a085ca5e93bc35a9618e636c80cc33affd610a98dc192f8ccc8d5bb78f738d24ada0e2c678194c16a65beab567754371d6e6abbfecc99750c48475b8a21d3ebffc70bd2ff0e24cf005dd188ecfb0f6f8"}], 0x88}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="d5c43ee31a199ab2cebf9dd70d478f1577fedcbe16e7c4337d4b9268f59f4f471c8e5170b2b683a5573f49bba3e2665f9d01c21006234e5b2ec7636a9b51948782ed258c", 0x44}, {&(0x7f00000002c0)="d01fee0ef04c1a4e956384962fa2e7cbbcbd687581c36c61783b9d2ce66fce36eb17a6230b8af083baaf225a6d6b77d9ff83e582c18732086a13c1e2ce9aa968a89f46de3a1f3ea598f4453ae356f84afe001889d776db", 0x57}], 0x2, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x40, 0x117, 0x2, 0x29, "a7fabaa27e2de8fa8506fc15a1d96fd20a7c126a4359574214156387dd80c8bcf02c96ac5359c6eb0a"}, @assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0xa}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18}, @iv={0x28, 0x117, 0x2, 0x12, "6c941685c026e352c04673e832f618d536a2"}, @iv={0x20, 0x117, 0x2, 0xa, "d45708b64c64ae8b7721"}, @op={0x18}], 0x118, 0x20}], 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000580)={'geneve0\x00', &(0x7f0000000540)=@ethtool_rxfh={0x47, 0x57, 0x4bbe42d1, 0x8, 0x3, "4ae7c3", 0x5, [0x4, 0x0]}}) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0), 0x8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@ipv4_getroute={0x1c, 0x1a, 0x10, 0x70bd2d, 0x25dfdbff, {0x2, 0x10, 0x0, 0x8, 0xfc, 0x0, 0x0, 0x5, 0xa00}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x80) r4 = accept$inet(r0, &(0x7f0000000740)={0x2, 0x0, @private}, &(0x7f0000000780)=0x10) bind$inet(r4, &(0x7f00000007c0)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000800)) r5 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r6 = socket(0x0, 0x0, 0x7) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000880)=@o_path={&(0x7f0000000840)='./file0\x00', 0x0, 0x4010, r0}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000009c0)={@cgroup=r1, 0x22, 0x1, 0x55, &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000900)=[0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000a40)={0x87, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@fallback=r5, r7, 0x2b, 0x20, 0x0, @void, @void, @void, @value=r9, r8}, 0x20) setsockopt$sock_void(r5, 0x1, 0x24, 0x0, 0x0) r10 = accept4$unix(r1, &(0x7f0000000a80), &(0x7f0000000b00)=0x6e, 0x80000) getsockname$unix(r10, &(0x7f0000000b40)=@abs, &(0x7f0000000bc0)=0x6e) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000c00)=0x101, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x200001, 0x0) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r11, 0x11b, 0x3, &(0x7f0000000c80), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000cc0)) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000d00), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)=@newtfilter={0x2c, 0x2c, 0x300, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0xffff}, {0xe, 0x2}, {0x8, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0xbbc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000f00)={'tunl0\x00', &(0x7f0000000e80)={'erspan0\x00', 0x0, 0x80, 0x7, 0xffffffff, 0xa, {{0x9, 0x4, 0x0, 0x1e, 0x24, 0x66, 0x0, 0x1, 0x2f, 0x0, @broadcast, @local, {[@noop, @generic={0x7, 0xd, "899c70c2467ebba5035360"}, @noop]}}}}}) sendto$packet(r6, &(0x7f0000000e40)="7b2c8443557b5021753de83761229474a67a5d8e89c81f260d8f6d5d4076b2c1ef9bd4f20de7e61d985949294d762ac446f516ed4b0b0baba8", 0x39, 0x4000, &(0x7f0000000f40)={0x11, 0x8, r12, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x14) 1.155333629s ago: executing program 0 (id=3798): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x60) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)={0x24, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x24}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x62) listen(r6, 0x0) close(0x4) sendmsg$alg(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r5, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/4, 0x4}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000011400a77bab783efd919d0df2b4ef4eb40327bd586f4fcbbac55c6f01000100000008000100010000000800010000000000d70a083e0cbd6645563e73f1482b"], 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x2890) r7 = socket(0x2, 0x3, 0xff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8946, &(0x7f0000000900)={'geneve1\x00', @random='\x00\x00\x00 \x00'}) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000040)=0x9, 0x4) bind$l2tp(r7, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r7, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 1.15127575s ago: executing program 2 (id=3799): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0x3c}}, 0x0) 1.147238867s ago: executing program 3 (id=3800): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB="0000000000000000000200006d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='scsi_dispatch_cmd_start\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000300)={0x28, 0x0, 0x0, @host}, 0x27) listen(r2, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETDEBUG(r4, 0x400454c9, &(0x7f0000000380)=0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) write$cgroup_devices(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0308003c5ca601288763"], 0xffdd) (async) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) close(r3) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000000000000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000000019e66d0600", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000008000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1) (async) r8 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) (async) recvmsg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) (async) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0), 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000200)=r9, 0x4) 1.027783061s ago: executing program 1 (id=3801): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001ac0)={r1, 0xfffffffffffffff9, 0xc, 0x3}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="04000008000000000000000000000000000000008b34a87d2973ed87af91f6ebd8045d9e91934d9525169fc250f0f333076058ff3a44ec8953e4184c7d09a86f885bfbd7511cf5fd071c8bbca1cae3bd74f1ee4a67c3a58cb2f8006acdd0cfe8f9d65db11a47dd004c8651e5785b54abfe44fb881eb0f59ae8a5ec879f8411cd31276e9ce51d870e", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB='\x00'/28], 0x50) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4b) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49468ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", "685a228f", "be0ea450d5a5fd03"}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440100001000130700000000000000007f000001000000000000000000000000e000000100000000000000000000000000000000000000000000000032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c003a23430db37f"], 0x144}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x11, 0xf, &(0x7f0000001a40)=ANY=[@ANYBLOB="180004000200000000000000ffffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], 0x0, 0x7, 0x0, 0x0, 0x1f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x50cd5339, @void, @value}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/65}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f00000014c0)=""/105}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f0000001700)=""/94}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x4000000000001dc, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3000}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) recvmmsg(r8, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x80000001}], 0x2, 0x2000, 0x0) 993.307054ms ago: executing program 4 (id=3802): r0 = socket(0xa, 0x3, 0x3a) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x15, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x20040080) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x312a}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x69e1}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, 0x3}, 0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0xa00, 0x4000000}, 0x28) getsockopt$MRT6(r0, 0x29, 0xcf, 0x0, &(0x7f0000000040)) 130.176812ms ago: executing program 1 (id=3803): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x63, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x40086602, 0x20001400) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, "1118006a38caf32d", "e3341f2c755df074562f2be55e67eafb", "cc495549", "d8c1e0fabdb82a6c"}, 0x28) sendto$inet6(r1, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x8, @empty, 0x101}, 0x1c) r3 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, &(0x7f0000000000)=0x100) socket$unix(0x1, 0x1, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000080)) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)={0xe000000c}) 0s ago: executing program 1 (id=3804): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) listen(r0, 0x5) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x204}}], 0x30}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xb6, &(0x7f0000000000)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@generic={0x8884, "9a14bd1f184d5ec7aebcac5d1061dca397038cf9390da3d21a3f090803f2e1378d5409584635d31ddf8292ce0d47d559f720fd360e27f197fd289429041f5c1267b6bf7bff4cdad3cae5e5aa9f32747ca5f958c499df025eea50b50e821a957bb334f423eb5cff5ca0263248c88c904272bc9cd981d46a4eef75859d2526598c16684e1d198e4506dc9447891050f6a06e212d9d5b16c21a655c91fd923731cd349c3af6"}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'erspan0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x20, 0x80, 0xfffffeb1, 0x6, {{0x6, 0x4, 0x0, 0x8, 0x18, 0x65, 0x0, 0x43, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, @multicast2, {[@noop]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=@bridge_getneigh={0x13c, 0x1e, 0x1, 0x70bd26, 0x25dfdbff, {0x7, 0x0, 0x0, r2, 0x4051, 0x1060}, [@IFLA_VFINFO_LIST={0xd8, 0x16, 0x0, 0x1, [{0xd4, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x200}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3, 0x2}}, @IFLA_VF_RATE={0x10, 0x6, {0x8, 0x4, 0x80000000}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xb7, 0xf}}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7, 0x828, 0x9b4c, 0x88a8}}, {0x14, 0x1, {0x200, 0x3ee, 0x5, 0x88a8}}]}, @IFLA_VF_VLAN_LIST={0x68, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xa, 0xaec, 0x6, 0x88a8}}, {0x14, 0x1, {0xffff0001, 0xfe0, 0x2, 0x88a8}}, {0x14, 0x1, {0x400, 0x2da, 0x1, 0x88a8}}, {0x14, 0x1, {0x401, 0x5a4, 0xbf7, 0xc2734055ae9f7e5e}}, {0x14, 0x1, {0x7, 0x277, 0x0, 0x8100}}]}]}]}, @IFLA_PORT_SELF={0x1c, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5f}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x81}]}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}, @IFLA_PHYS_PORT_ID={0x1e, 0x22, "25b0b9eefba74d8b167e9d320f9e4d2beef0097ba617aed2786a"}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) kernel console output (not intermixed with test programs): pfx_bpf_prog_test_run_skb+0x10/0x10 [ 285.626300][T15205] ? fput+0x1a8/0x230 [ 285.630312][T15205] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 285.636116][T15205] bpf_prog_test_run+0x2e4/0x360 [ 285.641071][T15205] __sys_bpf+0x48d/0x810 [ 285.645319][T15205] ? __pfx___sys_bpf+0x10/0x10 [ 285.650092][T15205] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 285.656086][T15205] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 285.662411][T15205] ? do_syscall_64+0x100/0x230 [ 285.667178][T15205] __x64_sys_bpf+0x7c/0x90 [ 285.671589][T15205] do_syscall_64+0xf3/0x230 [ 285.676086][T15205] ? clear_bhb_loop+0x35/0x90 [ 285.680758][T15205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.686679][T15205] RIP: 0033:0x7f1153f7e719 [ 285.691194][T15205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.711086][T15205] RSP: 002b:00007f1154cad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 285.719519][T15205] RAX: ffffffffffffffda RBX: 00007f1154135f80 RCX: 00007f1153f7e719 [ 285.727491][T15205] RDX: 0000000000000050 RSI: 00000000200002c0 RDI: 000000000000000a [ 285.735517][T15205] RBP: 00007f1154cad090 R08: 0000000000000000 R09: 0000000000000000 [ 285.743495][T15205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 285.751489][T15205] R13: 0000000000000000 R14: 00007f1154135f80 R15: 00007ffc74f5d818 [ 285.759596][T15205] [ 285.798378][T15209] lo speed is unknown, defaulting to 1000 [ 285.842274][T15209] lo speed is unknown, defaulting to 1000 [ 285.853936][T15209] lo speed is unknown, defaulting to 1000 [ 285.878605][T15209] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 285.928613][T15218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2545'. [ 285.942125][T15209] lo speed is unknown, defaulting to 1000 [ 285.978492][T15209] lo speed is unknown, defaulting to 1000 [ 286.016306][T15209] lo speed is unknown, defaulting to 1000 [ 286.030483][T15209] lo speed is unknown, defaulting to 1000 [ 286.045761][T15209] lo speed is unknown, defaulting to 1000 [ 286.270696][T15243] vlan6: entered promiscuous mode [ 286.310070][T15246] vlan6: entered promiscuous mode [ 286.319582][T15246] vlan6: entered allmulticast mode [ 286.711383][T15281] bridge_slave_1: entered allmulticast mode [ 287.147547][ T5857] Bluetooth: hci4: command 0x0419 tx timeout [ 287.225165][ T5857] Bluetooth: hci0: command tx timeout [ 287.447120][T15340] netlink: 'syz.1.2576': attribute type 1 has an invalid length. [ 288.227835][T15403] Unknown options in mask 1f4 [ 288.908791][T15456] netlink: 'syz.4.2611': attribute type 10 has an invalid length. [ 288.950705][T15450] Cannot find del_set index 286 as target [ 288.989329][T15453] netlink: 'syz.3.2610': attribute type 21 has an invalid length. [ 289.606356][ T5158] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 289.618095][ T5158] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 289.625796][T15484] __nla_validate_parse: 82 callbacks suppressed [ 289.625812][T15484] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2620'. [ 289.643287][ T5158] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 289.670920][ T5158] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 289.680929][ T5158] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 289.692054][ T5158] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 289.789421][T15485] lo speed is unknown, defaulting to 1000 [ 290.154657][T15510] netlink: 'syz.4.2628': attribute type 2 has an invalid length. [ 290.219425][T15512] sit0: entered promiscuous mode [ 290.253645][T15512] netlink: 'syz.0.2629': attribute type 1 has an invalid length. [ 290.291127][T15512] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2629'. [ 290.398594][T15520] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2632'. [ 290.425223][T15485] lo speed is unknown, defaulting to 1000 [ 290.675743][T15535] FAULT_INJECTION: forcing a failure. [ 290.675743][T15535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.688878][T15535] CPU: 1 UID: 0 PID: 15535 Comm: syz.2.2637 Not tainted 6.12.0-rc7-syzkaller-01681-g38f83a57aa8e #0 [ 290.699685][T15535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 290.709778][T15535] Call Trace: [ 290.713085][T15535] [ 290.716043][T15535] dump_stack_lvl+0x241/0x360 [ 290.720754][T15535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.725989][T15535] ? __pfx__printk+0x10/0x10 [ 290.730607][T15535] ? bpf_test_run+0x370/0xa90 [ 290.735406][T15535] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 290.741170][T15535] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 290.747540][T15535] should_fail_ex+0x3b0/0x4e0 [ 290.752248][T15535] strncpy_from_user+0x36/0x260 [ 290.757128][T15535] strncpy_from_user_nofault+0x71/0x140 [ 290.762725][T15535] bpf_probe_read_user_str+0x2a/0x70 [ 290.768051][T15535] bpf_prog_a91b00db09d76834+0x46/0x48 [ 290.773625][T15535] bpf_test_run+0x4f0/0xa90 [ 290.778204][T15535] ? do_syscall_64+0xf3/0x230 [ 290.782913][T15535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.789470][T15535] ? bpf_test_run+0x370/0xa90 [ 290.794288][T15535] ? __pfx_bpf_test_run+0x10/0x10 [ 290.799377][T15535] ? __pfx_skb_checksum+0x10/0x10 [ 290.799873][T15541] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 290.804408][T15535] ? __pfx_csum_partial_ext+0x10/0x10 [ 290.804431][T15535] ? __pfx_csum_block_add_ext+0x10/0x10 [ 290.804452][T15535] ? convert___skb_to_skb+0x41/0x620 [ 290.804478][T15535] bpf_prog_test_run_skb+0xca2/0x1820 [ 290.804518][T15535] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 290.804544][T15535] ? fput+0x1a8/0x230 [ 290.804565][T15535] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 290.804590][T15535] bpf_prog_test_run+0x2e4/0x360 [ 290.804618][T15535] __sys_bpf+0x48d/0x810 [ 290.804647][T15535] ? __pfx___sys_bpf+0x10/0x10 [ 290.804681][T15535] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 290.804708][T15535] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 290.804733][T15535] ? do_syscall_64+0x100/0x230 [ 290.881947][T15535] __x64_sys_bpf+0x7c/0x90 [ 290.886403][T15535] do_syscall_64+0xf3/0x230 [ 290.890937][T15535] ? clear_bhb_loop+0x35/0x90 [ 290.895647][T15535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.901585][T15535] RIP: 0033:0x7f473777e719 [ 290.906032][T15535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.925763][T15535] RSP: 002b:00007f4738578038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 290.934269][T15535] RAX: ffffffffffffffda RBX: 00007f4737935f80 RCX: 00007f473777e719 [ 290.942278][T15535] RDX: 0000000000000050 RSI: 00000000200002c0 RDI: 000000000000000a [ 290.950283][T15535] RBP: 00007f4738578090 R08: 0000000000000000 R09: 0000000000000000 [ 290.958310][T15535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 290.966309][T15535] R13: 0000000000000000 R14: 00007f4737935f80 R15: 00007fff573011b8 [ 290.974328][T15535] [ 291.028898][T15485] chnl_net:caif_netlink_parms(): no params data found [ 291.229628][T15566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2645'. [ 291.369180][T15566] bond4: entered promiscuous mode [ 291.404049][T15485] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.415945][T15485] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.428035][T15485] bridge_slave_0: entered allmulticast mode [ 291.437125][T15586] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2651'. [ 291.441126][T15485] bridge_slave_0: entered promiscuous mode [ 291.473047][T15586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2651'. [ 291.506830][T15566] 8021q: adding VLAN 0 to HW filter on device bond5 [ 291.539281][T15566] bond5: entered promiscuous mode [ 291.545302][T15566] bond4: (slave bond5): Enslaving as an active interface with an up link [ 291.575539][T15571] bond4 (unregistering): (slave bond5): Releasing backup interface [ 291.584127][T15571] bond5: left promiscuous mode [ 291.600128][T15571] bond4 (unregistering): Released all slaves [ 291.656514][T15485] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.664490][T15485] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.671757][T15485] bridge_slave_1: entered allmulticast mode [ 291.713601][T15596] FAULT_INJECTION: forcing a failure. [ 291.713601][T15596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.726732][T15596] CPU: 1 UID: 0 PID: 15596 Comm: syz.2.2653 Not tainted 6.12.0-rc7-syzkaller-01681-g38f83a57aa8e #0 [ 291.737552][T15596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 291.747640][T15596] Call Trace: [ 291.750948][T15596] [ 291.753907][T15596] dump_stack_lvl+0x241/0x360 [ 291.758718][T15596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.763947][T15596] ? __pfx__printk+0x10/0x10 [ 291.768583][T15596] ? bpf_test_run+0x370/0xa90 [ 291.773307][T15596] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 291.779067][T15596] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 291.785443][T15596] should_fail_ex+0x3b0/0x4e0 [ 291.790254][T15596] strncpy_from_user+0x36/0x260 [ 291.795169][T15596] strncpy_from_user_nofault+0x71/0x140 [ 291.798232][T15485] bridge_slave_1: entered promiscuous mode [ 291.800734][T15596] bpf_probe_read_user_str+0x2a/0x70 [ 291.800770][T15596] bpf_prog_a91b00db09d76834+0x46/0x48 [ 291.800789][T15596] bpf_test_run+0x4f0/0xa90 [ 291.821835][T15596] ? do_syscall_64+0xf3/0x230 [ 291.826530][T15596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.832611][T15596] ? bpf_test_run+0x370/0xa90 [ 291.837317][T15596] ? __pfx_bpf_test_run+0x10/0x10 [ 291.842383][T15596] ? __pfx_skb_checksum+0x10/0x10 [ 291.847419][T15596] ? __pfx_csum_partial_ext+0x10/0x10 [ 291.852811][T15596] ? __pfx_csum_block_add_ext+0x10/0x10 [ 291.856294][T15603] netlink: 'syz.0.2654': attribute type 13 has an invalid length. [ 291.858350][T15596] ? convert___skb_to_skb+0x41/0x620 [ 291.858384][T15596] bpf_prog_test_run_skb+0xca2/0x1820 [ 291.858428][T15596] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 291.882681][T15596] ? fput+0x1a8/0x230 [ 291.886667][T15596] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 291.892573][T15596] bpf_prog_test_run+0x2e4/0x360 [ 291.897526][T15596] __sys_bpf+0x48d/0x810 [ 291.901808][T15596] ? __pfx___sys_bpf+0x10/0x10 [ 291.906601][T15596] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 291.912619][T15596] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 291.918955][T15596] ? do_syscall_64+0x100/0x230 [ 291.923739][T15596] __x64_sys_bpf+0x7c/0x90 [ 291.928186][T15596] do_syscall_64+0xf3/0x230 [ 291.932700][T15596] ? clear_bhb_loop+0x35/0x90 [ 291.937387][T15596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.943330][T15596] RIP: 0033:0x7f473777e719 [ 291.947777][T15596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.967568][T15596] RSP: 002b:00007f4738578038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 291.976162][T15596] RAX: ffffffffffffffda RBX: 00007f4737935f80 RCX: 00007f473777e719 [ 291.984239][T15596] RDX: 0000000000000050 RSI: 00000000200002c0 RDI: 000000000000000a [ 291.992231][T15596] RBP: 00007f4738578090 R08: 0000000000000000 R09: 0000000000000000 [ 292.000229][T15596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 292.008227][T15596] R13: 0000000000000000 R14: 00007f4737935f80 R15: 00007fff573011b8 [ 292.016374][T15596] [ 292.022153][ T5857] Bluetooth: hci0: command tx timeout [ 292.161421][T15603] gretap0: refused to change device tx_queue_len [ 292.172773][T15603] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 292.256149][T15485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.291013][T15613] IPVS: set_ctl: invalid protocol: 35 172.30.0.2:20001 [ 292.293372][T15485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.370130][T15617] netlink: 'syz.4.2659': attribute type 1 has an invalid length. [ 292.400207][T15485] team0: Port device team_slave_0 added [ 292.409738][T15620] netlink: 'syz.0.2660': attribute type 10 has an invalid length. [ 292.419154][T15617] netlink: 'syz.4.2659': attribute type 10 has an invalid length. [ 292.442321][T15485] team0: Port device team_slave_1 added [ 292.503328][T15623] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2662'. [ 292.535971][T15623] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2662'. [ 292.566025][T15485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.573037][T15485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.630987][T15627] FAULT_INJECTION: forcing a failure. [ 292.630987][T15627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.644139][T15627] CPU: 1 UID: 0 PID: 15627 Comm: syz.1.2664 Not tainted 6.12.0-rc7-syzkaller-01681-g38f83a57aa8e #0 [ 292.654935][T15627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 292.665025][T15627] Call Trace: [ 292.668311][T15627] [ 292.671326][T15627] dump_stack_lvl+0x241/0x360 [ 292.676022][T15627] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.681295][T15627] ? __pfx__printk+0x10/0x10 [ 292.685916][T15627] ? bpf_test_run+0x370/0xa90 [ 292.690626][T15627] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 292.696373][T15627] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 292.702737][T15627] should_fail_ex+0x3b0/0x4e0 [ 292.707422][T15627] strncpy_from_user+0x36/0x260 [ 292.712287][T15627] strncpy_from_user_nofault+0x71/0x140 [ 292.717858][T15627] bpf_probe_read_user_str+0x2a/0x70 [ 292.723172][T15627] bpf_prog_a91b00db09d76834+0x46/0x48 [ 292.728635][T15627] bpf_test_run+0x4f0/0xa90 [ 292.733186][T15627] ? do_syscall_64+0xf3/0x230 [ 292.737868][T15627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.743951][T15627] ? bpf_test_run+0x370/0xa90 [ 292.748660][T15627] ? __pfx_bpf_test_run+0x10/0x10 [ 292.753701][T15627] ? __pfx_skb_checksum+0x10/0x10 [ 292.758730][T15627] ? __pfx_csum_partial_ext+0x10/0x10 [ 292.764130][T15627] ? __pfx_csum_block_add_ext+0x10/0x10 [ 292.769676][T15627] ? convert___skb_to_skb+0x41/0x620 [ 292.775078][T15627] bpf_prog_test_run_skb+0xca2/0x1820 [ 292.780484][T15627] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 292.786407][T15627] ? fput+0x1a8/0x230 [ 292.790451][T15627] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 292.796268][T15627] bpf_prog_test_run+0x2e4/0x360 [ 292.801217][T15627] __sys_bpf+0x48d/0x810 [ 292.805548][T15627] ? __pfx___sys_bpf+0x10/0x10 [ 292.810318][T15627] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 292.816310][T15627] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 292.822653][T15627] ? do_syscall_64+0x100/0x230 [ 292.827418][T15627] __x64_sys_bpf+0x7c/0x90 [ 292.831835][T15627] do_syscall_64+0xf3/0x230 [ 292.836336][T15627] ? clear_bhb_loop+0x35/0x90 [ 292.841043][T15627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.846952][T15627] RIP: 0033:0x7f1153f7e719 [ 292.851385][T15627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.871170][T15627] RSP: 002b:00007f1154cad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 292.879611][T15627] RAX: ffffffffffffffda RBX: 00007f1154135f80 RCX: 00007f1153f7e719 [ 292.887679][T15627] RDX: 0000000000000050 RSI: 00000000200002c0 RDI: 000000000000000a [ 292.895661][T15627] RBP: 00007f1154cad090 R08: 0000000000000000 R09: 0000000000000000 [ 292.903663][T15627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 292.911637][T15627] R13: 0000000000000000 R14: 00007f1154135f80 R15: 00007ffc74f5d818 [ 292.919633][T15627] [ 292.924277][T15485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.955046][T15485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.970384][T15485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.005337][T15485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.046303][T15485] hsr_slave_0: entered promiscuous mode [ 293.053292][T15485] hsr_slave_1: entered promiscuous mode [ 293.060094][T15485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.068234][T15485] Cannot create hsr debugfs directory [ 293.149483][T15485] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 293.159997][T15485] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 293.225458][T15485] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 293.236861][T15485] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 293.290096][T15485] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 293.300244][T15485] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 293.347987][T15485] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 293.358266][T15485] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 293.447133][T15485] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 293.457080][T15485] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 293.477525][T15485] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 293.488658][T15485] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 293.552029][T15485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.572750][T15485] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.589559][T10095] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.596803][T10095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.614706][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.621805][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.761190][T15485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.800179][T15485] veth0_vlan: entered promiscuous mode [ 293.811097][T15485] veth1_vlan: entered promiscuous mode [ 293.837219][T15485] veth0_macvtap: entered promiscuous mode [ 293.848114][T15485] veth1_macvtap: entered promiscuous mode [ 293.863076][T15485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.881815][T15485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.892951][T15485] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.902256][T15485] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.915978][T15485] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.925076][T15485] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.981113][ T3494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.990664][ T3494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.018298][ T3494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.036456][ T3494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.105241][ T5857] Bluetooth: hci0: command tx timeout [ 294.112995][T15639] netlink: 'syz.3.2615': attribute type 11 has an invalid length. [ 294.121073][T15639] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2615'. [ 294.210039][T15639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2615'. [ 296.184865][ T5857] Bluetooth: hci0: command tx timeout [ 298.266692][ T5857] Bluetooth: hci0: command tx timeout [ 307.377454][T15646] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2669'. [ 307.534486][T15660] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2673'. [ 307.588410][T15660] netlink: 'syz.4.2673': attribute type 1 has an invalid length. [ 307.629189][T15670] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 307.670758][T15675] FAULT_INJECTION: forcing a failure. [ 307.670758][T15675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.683915][T15675] CPU: 0 UID: 0 PID: 15675 Comm: syz.1.2676 Not tainted 6.12.0-rc7-syzkaller-01681-g38f83a57aa8e #0 [ 307.684817][T15660] 8021q: adding VLAN 0 to HW filter on device bond4 [ 307.694690][T15675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 307.694713][T15675] Call Trace: [ 307.694722][T15675] [ 307.694731][T15675] dump_stack_lvl+0x241/0x360 [ 307.694763][T15675] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.694785][T15675] ? __pfx__printk+0x10/0x10 [ 307.694807][T15675] ? bpf_test_run+0x370/0xa90 [ 307.694829][T15675] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 307.694853][T15675] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 307.694878][T15675] should_fail_ex+0x3b0/0x4e0 [ 307.694911][T15675] strncpy_from_user+0x36/0x260 [ 307.694934][T15675] strncpy_from_user_nofault+0x71/0x140 [ 307.694958][T15675] bpf_probe_read_user_str+0x2a/0x70 [ 307.694985][T15675] bpf_prog_a91b00db09d76834+0x46/0x48 [ 307.695004][T15675] bpf_test_run+0x4f0/0xa90 [ 307.695024][T15675] ? do_syscall_64+0xf3/0x230 [ 307.751547][T15672] bond4: (slave bridge7): making interface the new active one [ 307.754455][T15675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.754493][T15675] ? bpf_test_run+0x370/0xa90 [ 307.754527][T15675] ? __pfx_bpf_test_run+0x10/0x10 [ 307.754569][T15675] ? __pfx_skb_checksum+0x10/0x10 [ 307.754588][T15675] ? __pfx_csum_partial_ext+0x10/0x10 [ 307.754606][T15675] ? __pfx_csum_block_add_ext+0x10/0x10 [ 307.754627][T15675] ? convert___skb_to_skb+0x41/0x620 [ 307.754653][T15675] bpf_prog_test_run_skb+0xca2/0x1820 [ 307.754698][T15675] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 307.754725][T15675] ? fput+0x1a8/0x230 [ 307.754746][T15675] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 307.754771][T15675] bpf_prog_test_run+0x2e4/0x360 [ 307.754797][T15675] __sys_bpf+0x48d/0x810 [ 307.859704][T15675] ? __pfx___sys_bpf+0x10/0x10 [ 307.864626][T15675] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 307.870644][T15675] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 307.877083][T15675] ? do_syscall_64+0x100/0x230 [ 307.881858][T15675] __x64_sys_bpf+0x7c/0x90 [ 307.886278][T15675] do_syscall_64+0xf3/0x230 [ 307.891073][T15675] ? clear_bhb_loop+0x35/0x90 [ 307.895756][T15675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.901686][T15675] RIP: 0033:0x7f1153f7e719 [ 307.906128][T15675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.925754][T15675] RSP: 002b:00007f1154cad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 307.934173][T15675] RAX: ffffffffffffffda RBX: 00007f1154135f80 RCX: 00007f1153f7e719 [ 307.942152][T15675] RDX: 0000000000000050 RSI: 00000000200002c0 RDI: 000000000000000a [ 307.950224][T15675] RBP: 00007f1154cad090 R08: 0000000000000000 R09: 0000000000000000 [ 307.958214][T15675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 307.966186][T15675] R13: 0000000000000000 R14: 00007f1154135f80 R15: 00007ffc74f5d818 [ 307.974172][T15675] [ 308.024995][T15672] bond4: (slave bridge7): Enslaving as an active interface with an up link [ 308.114966][T15680] sctp: [Deprecated]: syz.2.2678 (pid 15680) Use of int in maxseg socket option. [ 308.114966][T15680] Use struct sctp_assoc_value instead [ 308.196992][T15684] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2680'. [ 308.205614][T15686] netlink: 'syz.3.2681': attribute type 4 has an invalid length. [ 308.271700][T15688] netlink: 'syz.1.2679': attribute type 4 has an invalid length. [ 308.286915][T15695] netlink: 'syz.3.2681': attribute type 4 has an invalid length. [ 308.344631][T15694] vlan4: entered allmulticast mode [ 308.350035][T15694] erspan0: entered allmulticast mode [ 308.369196][T15694] erspan0: left allmulticast mode [ 308.403664][T15702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2680'. [ 308.459352][T15698] veth0_vlan: left promiscuous mode [ 308.622044][T15708] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2684'. [ 308.687435][T15715] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2684'. [ 308.707850][T15714] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2686'. [ 308.742217][T15714] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2686'. [ 308.842619][T15718] netlink: 'syz.3.2688': attribute type 5 has an invalid length. [ 309.087577][T15738] IPv6: Can't replace route, no match found [ 309.121562][T15742] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2696'. [ 309.190686][T15749] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 309.291369][T15749] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 309.369028][T15749] gretap1: entered promiscuous mode [ 309.374519][T15749] gretap1: entered allmulticast mode [ 309.388577][T15759] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000 [ 309.646940][T15780] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2708'. [ 309.942666][T15801] lo: entered promiscuous mode [ 309.981491][T15800] lo: left promiscuous mode [ 310.385378][T15828] netlink: 'syz.2.2721': attribute type 10 has an invalid length. [ 311.490463][T15841] : renamed from bond0 (while UP) [ 311.600104][T15854] FAULT_INJECTION: forcing a failure. [ 311.600104][T15854] name failslab, interval 1, probability 0, space 0, times 0 [ 311.661770][T15854] CPU: 1 UID: 0 PID: 15854 Comm: syz.2.2727 Not tainted 6.12.0-rc7-syzkaller-01681-g38f83a57aa8e #0 [ 311.672596][T15854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 311.682687][T15854] Call Trace: [ 311.685994][T15854] [ 311.689386][T15854] dump_stack_lvl+0x241/0x360 [ 311.694099][T15854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.699345][T15854] ? __pfx__printk+0x10/0x10 [ 311.704049][T15854] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 311.710062][T15854] ? __pfx___might_resched+0x10/0x10 [ 311.715395][T15854] should_fail_ex+0x3b0/0x4e0 [ 311.720185][T15854] should_failslab+0xac/0x100 [ 311.724908][T15854] ? __alloc_skb+0x1c3/0x440 [ 311.729531][T15854] kmem_cache_alloc_node_noprof+0x71/0x320 [ 311.735377][T15854] __alloc_skb+0x1c3/0x440 [ 311.739829][T15854] ? __pfx___alloc_skb+0x10/0x10 [ 311.745229][T15854] ? netlink_autobind+0xd6/0x2f0 [ 311.750199][T15854] ? netlink_autobind+0x2b0/0x2f0 [ 311.755273][T15854] netlink_sendmsg+0x638/0xcb0 [ 311.760080][T15854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.765402][T15854] ? aa_sock_msg_perm+0x91/0x160 [ 311.770361][T15854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.775648][T15854] __sock_sendmsg+0x221/0x270 [ 311.780344][T15854] ____sys_sendmsg+0x52a/0x7e0 [ 311.785127][T15854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.790510][T15854] __sys_sendmmsg+0x3ab/0x730 [ 311.795197][T15854] ? __pfx___sys_sendmmsg+0x10/0x10 [ 311.800413][T15854] ? __pfx_lock_release+0x10/0x10 [ 311.805439][T15854] ? kstrtouint_from_user+0x128/0x190 [ 311.810855][T15854] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 311.816760][T15854] ? ksys_write+0x229/0x2b0 [ 311.821352][T15854] ? __pfx_lock_release+0x10/0x10 [ 311.826382][T15854] ? vfs_write+0x730/0xd30 [ 311.830803][T15854] ? __mutex_unlock_slowpath+0x21d/0x750 [ 311.836876][T15854] ? __fget_files+0x3f3/0x470 [ 311.841558][T15854] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 311.847540][T15854] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 311.853881][T15854] ? do_syscall_64+0x100/0x230 [ 311.858646][T15854] __x64_sys_sendmmsg+0xa0/0xb0 [ 311.863495][T15854] do_syscall_64+0xf3/0x230 [ 311.868007][T15854] ? clear_bhb_loop+0x35/0x90 [ 311.872686][T15854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.878575][T15854] RIP: 0033:0x7f473777e719 [ 311.882987][T15854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.902584][T15854] RSP: 002b:00007f4738578038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 311.910995][T15854] RAX: ffffffffffffffda RBX: 00007f4737935f80 RCX: 00007f473777e719 [ 311.918974][T15854] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000006 [ 311.926953][T15854] RBP: 00007f4738578090 R08: 0000000000000000 R09: 0000000000000000 [ 311.934931][T15854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.943069][T15854] R13: 0000000000000000 R14: 00007f4737935f80 R15: 00007fff573011b8 [ 311.951056][T15854] [ 312.189600][T15874] delete_channel: no stack [ 312.258219][T15878] netlink: 'syz.2.2733': attribute type 1 has an invalid length. [ 312.342311][T15878] 8021q: adding VLAN 0 to HW filter on device bond5 [ 312.522021][T15878] bond5: (slave bridge3): making interface the new active one [ 312.548040][T15878] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 312.649334][T15899] bond5: (slave bridge4): Enslaving as an active interface with a down link [ 312.650243][T15907] netlink: 'syz.3.2739': attribute type 2 has an invalid length. [ 312.689408][T15907] __nla_validate_parse: 4 callbacks suppressed [ 312.689428][T15907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2739'. [ 312.983185][T15919] bond4: (slave bridge7): Releasing active interface [ 313.014897][T15925] netlink: 'syz.4.2745': attribute type 10 has an invalid length. [ 313.028881][T15925] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2745'. [ 313.077643][T15927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2747'. [ 313.096490][T15921] lo speed is unknown, defaulting to 1000 [ 313.282111][T15941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2748'. [ 313.335779][T15945] x_tables: duplicate entry at hook 1 [ 313.336236][T15941] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2748'. [ 313.418568][T15944] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2751'. [ 313.517722][T15955] netlink: 'syz.0.2752': attribute type 1 has an invalid length. [ 313.577725][T15955] bond7: (slave vcan1): The slave device specified does not support setting the MAC address [ 313.588258][T15955] bond7: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 313.600326][T15955] bond7: (slave vcan1): making interface the new active one [ 313.609195][T15955] bond7: (slave vcan1): Enslaving as an active interface with an up link [ 313.949905][T15974] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2758'. [ 313.992506][T15974] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2758'. [ 314.075471][T15921] lo speed is unknown, defaulting to 1000 [ 314.110687][T15982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2758'. [ 314.117879][T15978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2758'. [ 314.518009][T15990] lo speed is unknown, defaulting to 1000 [ 314.855586][T16012] ip6gretap1: entered allmulticast mode [ 315.020203][T16021] FAULT_INJECTION: forcing a failure. [ 315.020203][T16021] name failslab, interval 1, probability 0, space 0, times 0 [ 315.033172][T16021] CPU: 1 UID: 0 PID: 16021 Comm: syz.3.2770 Not tainted 6.12.0-rc7-syzkaller-01681-g38f83a57aa8e #0 [ 315.044143][T16021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 315.054242][T16021] Call Trace: [ 315.057650][T16021] [ 315.060656][T16021] dump_stack_lvl+0x241/0x360 [ 315.065550][T16021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.070790][T16021] ? __pfx__printk+0x10/0x10 [ 315.075436][T16021] ? ref_tracker_alloc+0x332/0x490 [ 315.080591][T16021] should_fail_ex+0x3b0/0x4e0 [ 315.085311][T16021] ? skb_clone+0x20c/0x390 [ 315.089755][T16021] should_failslab+0xac/0x100 [ 315.094496][T16021] ? skb_clone+0x20c/0x390 [ 315.098936][T16021] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 315.104586][T16021] skb_clone+0x20c/0x390 [ 315.108832][T16021] __netlink_deliver_tap+0x3cc/0x7f0 [ 315.114133][T16021] ? netlink_deliver_tap+0x2e/0x1b0 [ 315.119425][T16021] netlink_deliver_tap+0x19d/0x1b0 [ 315.124651][T16021] netlink_unicast+0x7c4/0x990 [ 315.129418][T16021] ? __pfx_netlink_unicast+0x10/0x10 [ 315.134702][T16021] ? __virt_addr_valid+0x183/0x530 [ 315.139854][T16021] ? __check_object_size+0x48e/0x900 [ 315.145178][T16021] netlink_sendmsg+0x8e4/0xcb0 [ 315.149956][T16021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.155248][T16021] ? aa_sock_msg_perm+0x91/0x160 [ 315.160189][T16021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.165473][T16021] __sock_sendmsg+0x221/0x270 [ 315.170147][T16021] ____sys_sendmsg+0x52a/0x7e0 [ 315.174919][T16021] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.180390][T16021] __sys_sendmmsg+0x3ab/0x730 [ 315.185143][T16021] ? __pfx___sys_sendmmsg+0x10/0x10 [ 315.190382][T16021] ? __pfx_lock_release+0x10/0x10 [ 315.195756][T16021] ? kstrtouint_from_user+0x128/0x190 [ 315.201261][T16021] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 315.207188][T16021] ? ksys_write+0x229/0x2b0 [ 315.211732][T16021] ? __pfx_lock_release+0x10/0x10 [ 315.216772][T16021] ? vfs_write+0x730/0xd30 [ 315.221193][T16021] ? __mutex_unlock_slowpath+0x21d/0x750 [ 315.227037][T16021] ? __fget_files+0x3f3/0x470 [ 315.231915][T16021] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 315.237931][T16021] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 315.244360][T16021] ? do_syscall_64+0x100/0x230 [ 315.249146][T16021] __x64_sys_sendmmsg+0xa0/0xb0 [ 315.254037][T16021] do_syscall_64+0xf3/0x230 [ 315.258571][T16021] ? clear_bhb_loop+0x35/0x90 [ 315.263281][T16021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.269183][T16021] RIP: 0033:0x7f19add7e719 [ 315.273600][T16021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.293216][T16021] RSP: 002b:00007f19ac1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 315.301641][T16021] RAX: ffffffffffffffda RBX: 00007f19adf35f80 RCX: 00007f19add7e719 [ 315.309610][T16021] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000006 [ 315.317589][T16021] RBP: 00007f19ac1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 315.325555][T16021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.333525][T16021] R13: 0000000000000000 R14: 00007f19adf35f80 R15: 00007ffe9faa8c58 [ 315.341681][T16021] [ 315.760055][T15990] lo speed is unknown, defaulting to 1000 [ 315.964135][T16042] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20000 [ 316.004734][T16048] netlink: 'syz.2.2779': attribute type 8 has an invalid length. [ 316.323502][T16062] FAULT_INJECTION: forcing a failure. [ 316.323502][T16062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.339883][T16062] CPU: 1 UID: 0 PID: 16062 Comm: syz.3.2784 Not tainted 6.12.0-rc7-syzkaller-01681-g38f83a57aa8e #0 [ 316.350884][T16062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 316.360976][T16062] Call Trace: [ 316.364361][T16062] [ 316.367395][T16062] dump_stack_lvl+0x241/0x360 [ 316.372196][T16062] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.377430][T16062] ? __pfx__printk+0x10/0x10 [ 316.382056][T16062] ? __pfx_lock_release+0x10/0x10 [ 316.387381][T16062] should_fail_ex+0x3b0/0x4e0 [ 316.392092][T16062] _copy_from_user+0x2f/0xc0 [ 316.396725][T16062] copy_msghdr_from_user+0xae/0x680 [ 316.401957][T16062] ? __pfx___might_resched+0x10/0x10 [ 316.407375][T16062] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 316.413227][T16062] ? rcu_is_watching+0x15/0xb0 [ 316.418017][T16062] ? __might_fault+0xaa/0x120 [ 316.422798][T16062] __sys_sendmmsg+0x36d/0x730 [ 316.427552][T16062] ? __pfx___sys_sendmmsg+0x10/0x10 [ 316.432805][T16062] ? __pfx_lock_release+0x10/0x10 [ 316.437880][T16062] ? kstrtouint_from_user+0x128/0x190 [ 316.443310][T16062] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 316.449242][T16062] ? ksys_write+0x229/0x2b0 [ 316.453771][T16062] ? __pfx_lock_release+0x10/0x10 [ 316.458839][T16062] ? vfs_write+0x730/0xd30 [ 316.463291][T16062] ? __mutex_unlock_slowpath+0x21d/0x750 [ 316.468949][T16062] ? __fget_files+0x3f3/0x470 [ 316.473639][T16062] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 316.479720][T16062] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 316.486063][T16062] ? do_syscall_64+0x100/0x230 [ 316.490832][T16062] __x64_sys_sendmmsg+0xa0/0xb0 [ 316.495694][T16062] do_syscall_64+0xf3/0x230 [ 316.500209][T16062] ? clear_bhb_loop+0x35/0x90 [ 316.504886][T16062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.510780][T16062] RIP: 0033:0x7f19add7e719 [ 316.515190][T16062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.534792][T16062] RSP: 002b:00007f19ac1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 316.543234][T16062] RAX: ffffffffffffffda RBX: 00007f19adf35f80 RCX: 00007f19add7e719 [ 316.551203][T16062] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000006 [ 316.559170][T16062] RBP: 00007f19ac1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 316.567154][T16062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.575220][T16062] R13: 0000000000000000 R14: 00007f19adf35f80 R15: 00007ffe9faa8c58 [ 316.583217][T16062] [ 316.775034][T16076] netlink: 'syz.4.2788': attribute type 4 has an invalid length. [ 316.871824][T16080] netlink: 'syz.4.2789': attribute type 1 has an invalid length. [ 316.914665][T16080] netlink: 'syz.4.2789': attribute type 1 has an invalid length. [ 316.933203][T16080] netlink: 'syz.4.2789': attribute type 1 has an invalid length. [ 316.956349][T16080] netlink: 'syz.4.2789': attribute type 1 has an invalid length. [ 316.966155][T16080] netlink: 'syz.4.2789': attribute type 1 has an invalid length. [ 317.336897][T16100] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.345287][T16100] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.353477][T16100] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.362000][T16100] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.504692][T16110] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 317.560728][T16110] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (14) [ 317.775228][T16131] __nla_validate_parse: 77 callbacks suppressed [ 317.775249][T16131] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2803'. [ 317.925468][T16141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2808'. [ 317.942034][T16141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2808'. [ 317.951540][T16141] validate_nla: 63 callbacks suppressed [ 317.951557][T16141] netlink: 'syz.4.2808': attribute type 7 has an invalid length. [ 318.055980][T16148] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 318.067958][T16148] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 318.334532][T16161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2813'. [ 318.374832][T16167] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2816'. [ 318.402145][T16168] netlink: 'syz.4.2816': attribute type 18 has an invalid length. [ 318.466545][T16172] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 318.717830][T16190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2822'. [ 318.930496][T16195] vlan6: entered promiscuous mode [ 319.383954][T16216] lo speed is unknown, defaulting to 1000 [ 319.457478][T16223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2836'. [ 319.514228][T16224] netlink: 'syz.1.2837': attribute type 10 has an invalid length. [ 320.260609][T16239] lo speed is unknown, defaulting to 1000 [ 320.636887][T16256] dvmrp8: entered allmulticast mode [ 320.685690][T16256] dvmrp8: left allmulticast mode [ 320.809748][T16216] lo speed is unknown, defaulting to 1000 [ 321.133411][ T5158] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 321.143455][ T5158] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 321.160407][ T5158] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 321.169418][ T5158] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 321.179016][ T5158] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 321.186910][ T5158] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 321.451294][T16277] lo speed is unknown, defaulting to 1000 [ 321.468820][T16290] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2855'. [ 321.606880][T16292] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2856'. [ 321.634751][T16292] netlink: 'syz.1.2856': attribute type 23 has an invalid length. [ 321.666940][T16292] netlink: 'syz.1.2856': attribute type 11 has an invalid length. [ 321.683503][T16292] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2856'. [ 321.814232][T16239] lo speed is unknown, defaulting to 1000 [ 322.066060][T16277] lo speed is unknown, defaulting to 1000 [ 322.102435][T16298] siw: device registration error -23 [ 322.520765][T16277] chnl_net:caif_netlink_parms(): no params data found [ 322.864022][T16341] __nla_validate_parse: 2 callbacks suppressed [ 322.864036][T16341] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2868'. [ 323.037721][T16334] infiniband s: set active [ 323.052718][T16334] infiniband s: set active [ 323.076473][T16340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2866'. [ 323.197786][T16350] FAULT_INJECTION: forcing a failure. [ 323.197786][T16350] name failslab, interval 1, probability 0, space 0, times 0 [ 323.225160][ T5857] Bluetooth: hci4: command tx timeout [ 323.235005][T16350] CPU: 0 UID: 0 PID: 16350 Comm: syz.4.2870 Not tainted 6.12.0-rc7-syzkaller-01681-g38f83a57aa8e #0 [ 323.245837][T16350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 323.255920][T16350] Call Trace: [ 323.259208][T16350] [ 323.262135][T16350] dump_stack_lvl+0x241/0x360 [ 323.266825][T16350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.272114][T16350] ? __pfx__printk+0x10/0x10 [ 323.276705][T16350] ? ref_tracker_alloc+0x332/0x490 [ 323.281989][T16350] should_fail_ex+0x3b0/0x4e0 [ 323.286690][T16350] ? skb_clone+0x20c/0x390 [ 323.291112][T16350] should_failslab+0xac/0x100 [ 323.295796][T16350] ? skb_clone+0x20c/0x390 [ 323.300215][T16350] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 323.305593][T16350] skb_clone+0x20c/0x390 [ 323.309864][T16350] __netlink_deliver_tap+0x3cc/0x7f0 [ 323.315179][T16350] ? netlink_deliver_tap+0x2e/0x1b0 [ 323.320401][T16350] netlink_deliver_tap+0x19d/0x1b0 [ 323.325583][T16350] netlink_unicast+0x7c4/0x990 [ 323.330384][T16350] ? __pfx_netlink_unicast+0x10/0x10 [ 323.335758][T16350] ? __virt_addr_valid+0x183/0x530 [ 323.340880][T16350] ? __check_object_size+0x48e/0x900 [ 323.346435][T16350] netlink_sendmsg+0x8e4/0xcb0 [ 323.351212][T16350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.356624][T16350] ? aa_sock_msg_perm+0x91/0x160 [ 323.361669][T16350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.367010][T16350] __sock_sendmsg+0x221/0x270 [ 323.371727][T16350] ____sys_sendmsg+0x52a/0x7e0 [ 323.376534][T16350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 323.381834][T16350] ? rcu_is_watching+0x15/0xb0 [ 323.386609][T16350] ? __might_fault+0xaa/0x120 [ 323.391734][T16350] __sys_sendmmsg+0x3ab/0x730 [ 323.396686][T16350] ? __pfx___sys_sendmmsg+0x10/0x10 [ 323.401895][T16350] ? __pfx_lock_release+0x10/0x10 [ 323.406939][T16350] ? kstrtouint_from_user+0x128/0x190 [ 323.412329][T16350] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 323.418341][T16350] ? ksys_write+0x229/0x2b0 [ 323.422870][T16350] ? __pfx_lock_release+0x10/0x10 [ 323.428095][T16350] ? vfs_write+0x730/0xd30 [ 323.432547][T16350] ? __mutex_unlock_slowpath+0x21d/0x750 [ 323.438200][T16350] ? __fget_files+0x3f3/0x470 [ 323.442910][T16350] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 323.448906][T16350] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 323.455257][T16350] ? do_syscall_64+0x100/0x230 [ 323.460071][T16350] __x64_sys_sendmmsg+0xa0/0xb0 [ 323.465250][T16350] do_syscall_64+0xf3/0x230 [ 323.469905][T16350] ? clear_bhb_loop+0x35/0x90 [ 323.474604][T16350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.480546][T16350] RIP: 0033:0x7f0fd937e719 [ 323.484979][T16350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.504637][T16350] RSP: 002b:00007f0fda0bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 323.513130][T16350] RAX: ffffffffffffffda RBX: 00007f0fd9535f80 RCX: 00007f0fd937e719 [ 323.521116][T16350] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000006 [ 323.529110][T16350] RBP: 00007f0fda0bb090 R08: 0000000000000000 R09: 0000000000000000 [ 323.537201][T16350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 323.545284][T16350] R13: 0000000000000000 R14: 00007f0fd9535f80 R15: 00007ffebe65ecf8 [ 323.553280][T16350] [ 323.587873][ T46] lo speed is unknown, defaulting to 1000 [ 323.629097][T16340] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (11) [ 323.710489][ T25] lo speed is unknown, defaulting to 1000 [ 323.724193][T16277] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.732465][T16277] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.752818][T16277] bridge_slave_0: entered allmulticast mode [ 323.760670][T16277] bridge_slave_0: entered promiscuous mode [ 323.764233][T16357] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2872'. [ 323.771057][T16277] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.814601][T16277] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.827748][T16277] bridge_slave_1: entered allmulticast mode [ 323.839322][T16277] bridge_slave_1: entered promiscuous mode [ 323.916422][T16367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2873'. [ 323.930874][T16360] netlink: 'syz.2.2873': attribute type 2 has an invalid length. [ 323.939193][T16365] netlink: 'syz.4.2874': attribute type 10 has an invalid length. [ 323.944113][T16360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2873'. [ 323.964404][T16360] infiniband s: set active [ 323.969164][T16360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 323.998547][T16277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.021073][T16277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.057422][ T46] lo speed is unknown, defaulting to 1000 [ 324.097802][T16277] team0: Port device team_slave_0 added [ 324.145248][T16277] team0: Port device team_slave_1 added [ 324.206070][T16277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.213472][T16277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.271085][T16277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.310714][T16277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.333801][T16277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.404183][T16277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.499678][T16277] hsr_slave_0: entered promiscuous mode [ 324.534228][T16277] hsr_slave_1: entered promiscuous mode [ 324.545724][T16277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.563841][T16277] Cannot create hsr debugfs directory [ 324.576883][T16392] FAULT_INJECTION: forcing a failure. [ 324.576883][T16392] name failslab, interval 1, probability 0, space 0, times 0 [ 324.604157][T16392] CPU: 0 UID: 0 PID: 16392 Comm: syz.3.2880 Not tainted 6.12.0-rc7-syzkaller-01681-g38f83a57aa8e #0 [ 324.614990][T16392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 324.625071][T16392] Call Trace: [ 324.628350][T16392] [ 324.631288][T16392] dump_stack_lvl+0x241/0x360 [ 324.635979][T16392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.641279][T16392] ? __pfx__printk+0x10/0x10 [ 324.645968][T16392] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 324.651979][T16392] ? __pfx___might_resched+0x10/0x10 [ 324.657456][T16392] ? __local_bh_enable_ip+0x168/0x200 [ 324.662971][T16392] ? dev_hard_start_xmit+0x773/0x7e0 [ 324.668296][T16392] should_fail_ex+0x3b0/0x4e0 [ 324.673013][T16392] should_failslab+0xac/0x100 [ 324.677710][T16392] ? __alloc_skb+0x1c3/0x440 [ 324.682364][T16392] kmem_cache_alloc_node_noprof+0x71/0x320 [ 324.688187][T16392] __alloc_skb+0x1c3/0x440 [ 324.692618][T16392] ? __pfx___alloc_skb+0x10/0x10 [ 324.697564][T16392] ? netlink_ack_tlv_len+0x6e/0x200 [ 324.702802][T16392] netlink_ack+0x13f/0xa30 [ 324.707264][T16392] netlink_rcv_skb+0x262/0x430 [ 324.712041][T16392] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 324.717765][T16392] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 324.723084][T16392] ? netlink_deliver_tap+0x2e/0x1b0 [ 324.728296][T16392] netlink_unicast+0x7f6/0x990 [ 324.733185][T16392] ? __pfx_netlink_unicast+0x10/0x10 [ 324.738495][T16392] ? __virt_addr_valid+0x183/0x530 [ 324.743669][T16392] ? __check_object_size+0x48e/0x900 [ 324.748977][T16392] netlink_sendmsg+0x8e4/0xcb0 [ 324.753762][T16392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.759141][T16392] ? aa_sock_msg_perm+0x91/0x160 [ 324.764137][T16392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.769456][T16392] __sock_sendmsg+0x221/0x270 [ 324.774164][T16392] ____sys_sendmsg+0x52a/0x7e0 [ 324.778949][T16392] ? __pfx_____sys_sendmsg+0x10/0x10 [ 324.784248][T16392] ? rcu_is_watching+0x15/0xb0 [ 324.789229][T16392] ? __might_fault+0xaa/0x120 [ 324.793927][T16392] __sys_sendmmsg+0x3ab/0x730 [ 324.798659][T16392] ? __pfx___sys_sendmmsg+0x10/0x10 [ 324.803981][T16392] ? __pfx_lock_release+0x10/0x10 [ 324.809022][T16392] ? kstrtouint_from_user+0x128/0x190 [ 324.814422][T16392] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 324.820325][T16392] ? ksys_write+0x229/0x2b0 [ 324.824836][T16392] ? __pfx_lock_release+0x10/0x10 [ 324.829884][T16392] ? vfs_write+0x730/0xd30 [ 324.834347][T16392] ? __mutex_unlock_slowpath+0x21d/0x750 [ 324.840027][T16392] ? __fget_files+0x3f3/0x470 [ 324.844745][T16392] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 324.850970][T16392] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 324.857314][T16392] ? do_syscall_64+0x100/0x230 [ 324.862090][T16392] __x64_sys_sendmmsg+0xa0/0xb0 [ 324.867012][T16392] do_syscall_64+0xf3/0x230 [ 324.871522][T16392] ? clear_bhb_loop+0x35/0x90 [ 324.876208][T16392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.882104][T16392] RIP: 0033:0x7f19add7e719 [ 324.886529][T16392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.906160][T16392] RSP: 002b:00007f19ac1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 324.914693][T16392] RAX: ffffffffffffffda RBX: 00007f19adf35f80 RCX: 00007f19add7e719 [ 324.922677][T16392] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000006 [ 324.930683][T16392] RBP: 00007f19ac1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 324.938707][T16392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 324.946686][T16392] R13: 0000000000000000 R14: 00007f19adf35f80 R15: 00007ffe9faa8c58 [ 324.954697][T16392] [ 325.179115][T16409] netlink: 'syz.4.2881': attribute type 4 has an invalid length. [ 325.201075][T16409] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2881'. [ 325.252715][T16409] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 325.304750][ T5857] Bluetooth: hci4: command tx timeout [ 325.340162][T16277] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.351148][T16277] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.434248][T16277] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.451411][T16277] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.498611][T16424] No such timeout policy "syz0" [ 325.526306][T16277] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.536457][T16277] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.597522][T16277] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.607924][T16277] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.709427][T16434] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (5) [ 325.732012][T16434] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 325.743302][T16434] macvlan2: entered allmulticast mode [ 325.751739][T16434] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 325.764499][T16434] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 325.838000][T16277] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 325.860330][T16277] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 325.895636][T16277] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 325.919797][T16277] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 326.078559][T16442] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 326.098781][T16444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2895'. [ 326.114377][T16277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.152519][T16277] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.166762][T10088] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.173949][T10088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.221361][T10088] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.228803][T10088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.283864][T16277] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 326.295208][T16277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 326.472617][T16456] SET target dimension over the limit! [ 326.521647][T16456] nlmon0: entered promiscuous mode [ 326.545271][T16466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2901'. [ 326.564774][T16456] vlan0: entered promiscuous mode [ 326.577636][T16456] nlmon0: left promiscuous mode [ 326.595977][T16469] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2902'. [ 326.770613][T16277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.910920][T16277] veth0_vlan: entered promiscuous mode [ 326.946368][T16277] veth1_vlan: entered promiscuous mode [ 326.966921][T16492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2908'. [ 327.028989][T16277] veth0_macvtap: entered promiscuous mode [ 327.148978][T16277] veth1_macvtap: entered promiscuous mode [ 327.226724][T16277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.258486][T16277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.271209][T16277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.308758][T16277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.328108][T16507] netlink: 'syz.2.2913': attribute type 8 has an invalid length. [ 327.337204][T16277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.359472][T16277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.385228][ T5857] Bluetooth: hci4: command tx timeout [ 327.388535][T16277] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.429316][T16277] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.450854][T16519] netlink: 'syz.2.2915': attribute type 7 has an invalid length. [ 327.453478][T16277] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.459873][T16519] netlink: 'syz.2.2915': attribute type 8 has an invalid length. [ 327.483942][T16277] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.538147][T16519] gretap0: entered promiscuous mode [ 327.548722][T16519] batadv_slave_1: entered promiscuous mode [ 327.556408][T16519] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 327.564221][T16519] Cannot create hsr debugfs directory [ 327.570147][T16519] hsr1: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network [ 327.581030][T16519] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.711399][T10091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.720643][T10091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.774783][T16527] netlink: 'syz.2.2919': attribute type 10 has an invalid length. [ 327.793570][T10088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.816007][T10088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.820519][T16531] --map-set only usable from mangle table [ 327.853301][T16527] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 327.863522][T16527] team0: Failed to send options change via netlink (err -105) [ 327.872883][T16527] team0: Port device netdevsim0 added [ 327.948354][T16535] batadv0: entered promiscuous mode [ 327.986897][T16535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.019991][T16537] Bluetooth: MGMT ver 1.23 [ 328.187015][T16541] __nla_validate_parse: 7 callbacks suppressed [ 328.187035][T16541] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2845'. [ 328.211347][T16539] netlink: 'syz.1.2923': attribute type 10 has an invalid length. [ 328.242062][T16547] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 328.290255][T16553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2925'. [ 328.385467][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.418902][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.435067][T16553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2925'. [ 329.472699][ T5857] Bluetooth: hci4: command tx timeout [ 331.051372][T16567] netlink: 65536 bytes leftover after parsing attributes in process `syz.4.2930'. [ 331.351778][T16595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2938'. [ 331.362773][T16597] netlink: 'syz.1.2937': attribute type 21 has an invalid length. [ 331.384483][T16595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2938'. [ 331.593055][T16611] xt_ipcomp: unknown flags 12 [ 331.969606][T16634] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 331.973404][T16631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2952'. [ 331.991759][T16635] tipc: Started in network mode [ 331.997604][T16635] tipc: Node identity e0000001, cluster identity 4711 [ 332.004588][T16635] tipc: Enabling of bearer rejected, failed to enable media [ 332.025984][T16635] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2951'. [ 332.086533][T16638] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2953'. [ 332.180987][T16641] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.209798][T16641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2955'. [ 332.229679][T16641] batadv1: entered promiscuous mode [ 333.451582][T16738] __nla_validate_parse: 2 callbacks suppressed [ 333.451601][T16738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2978'. [ 333.557113][T16740] netlink: 'syz.1.2979': attribute type 4 has an invalid length. [ 333.699127][T16750] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2982'. [ 333.916333][T16765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2982'. [ 334.151112][T16770] dccp_invalid_packet: P.Data Offset(4) too small [ 334.191993][T16770] dccp_invalid_packet: P.Data Offset(4) too small [ 334.217164][T16770] dccp_invalid_packet: P.Data Offset(4) too small [ 334.288772][T16774] ÛÌî]-Ñ_batadv: renamed from lo (while UP) [ 334.397560][T16780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2990'. [ 334.418358][T16781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2990'. [ 334.919525][T16780] team0 (unregistering): Port device team_slave_0 removed [ 334.934541][T16780] team0 (unregistering): Port device team_slave_1 removed [ 335.057663][T16783] delete_channel: no stack [ 335.234282][T16804] xt_TPROXY: Can be used only with -p tcp or -p udp [ 336.142013][T16837] xt_NFQUEUE: number of total queues is 0 [ 336.149918][T16838] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3011'. [ 336.150186][T16837] netlink: 'syz.4.3010': attribute type 30 has an invalid length. [ 336.192129][T16837] pim6reg: entered allmulticast mode [ 336.206052][T16837] pim6reg: left allmulticast mode [ 336.268430][T16841] xt_l2tp: v2 doesn't support IP mode [ 336.314497][T16843] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3013'. [ 336.316013][T16841] xt_limit: Overflow, try lower: 65536/2147483648 [ 336.334929][T16843] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3013'. [ 336.496643][T16843] ipvlan0: entered promiscuous mode [ 336.516166][T16842] ipvlan0: left promiscuous mode [ 336.901207][T16863] xt_TCPMSS: Only works on TCP SYN packets [ 337.518187][T16876] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3023'. [ 338.117380][T16892] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 338.206204][T16899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3031'. [ 338.417188][T16908] sctp: [Deprecated]: syz.4.3034 (pid 16908) Use of int in maxseg socket option. [ 338.417188][T16908] Use struct sctp_assoc_value instead [ 338.462490][T16909] sctp: [Deprecated]: syz.4.3034 (pid 16909) Use of int in maxseg socket option. [ 338.462490][T16909] Use struct sctp_assoc_value instead [ 338.565651][T16892] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 339.684514][T16940] xt_hashlimit: max too large, truncated to 1048576 [ 339.865633][T16940] xt_CT: You must specify a L4 protocol and not use inversions on it [ 340.255190][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 340.285069][T16960] __nla_validate_parse: 1 callbacks suppressed [ 340.285090][T16960] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3048'. [ 340.590369][T16975] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3051'. [ 340.632862][T16982] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3052'. [ 340.657788][T16975] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3051'. [ 340.675852][T16982] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3052'. [ 340.734158][T16982] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3052'. [ 340.777576][T16982] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3052'. [ 340.840111][T16984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3052'. [ 340.843648][T16990] netlink: 'syz.0.3055': attribute type 32 has an invalid length. [ 340.860535][T16984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3052'. [ 340.876984][T16985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3053'. [ 340.903084][T16988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.045936][T17009] bond0: left promiscuous mode [ 341.155612][T17014] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 341.769189][T17044] netlink: 'syz.1.3071': attribute type 29 has an invalid length. [ 341.908532][T17052] netdevsim netdevsim2 »»»»»»: renamed from netdevsim0 (while UP) [ 342.081756][T17061] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 342.943024][T17093] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 342.971857][T17061] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 343.053205][T17096] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 343.191210][T17100] netlink: 'syz.4.3089': attribute type 10 has an invalid length. [ 343.211513][T17100] bridge0: port 1(macvlan1) entered blocking state [ 343.222013][T17100] bridge0: port 1(macvlan1) entered disabled state [ 343.241531][T17100] macvlan1: entered allmulticast mode [ 343.251297][T17100] veth1_vlan: entered allmulticast mode [ 343.311195][ T6016] hid-generic 0005:0C45:1012.0003: item fetching failed at offset 0/1 [ 343.320696][ T6016] hid-generic 0005:0C45:1012.0003: probe with driver hid-generic failed with error -22 [ 343.336107][T17100] macvlan1: entered promiscuous mode [ 343.806609][T17126] dvmrp0: entered allmulticast mode [ 343.864054][ T5857] Bluetooth: hci4: command tx timeout [ 343.958974][T17137] xt_ecn: cannot match TCP bits for non-tcp packets [ 344.076803][T17141] netlink: 'syz.0.3102': attribute type 32 has an invalid length. [ 344.479309][T17146] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 344.630153][ T5158] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 344.642972][ T5158] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 344.655135][ T5158] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 344.683293][ T5158] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 344.692306][ T5158] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 344.703103][ T5158] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 345.044227][T17154] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 345.299157][T17167] __nla_validate_parse: 14 callbacks suppressed [ 345.299176][T17167] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3110'. [ 345.345444][T17167] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3110'. [ 345.378975][T17167] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3110'. [ 345.658827][T17175] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 345.686797][T17180] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 345.713501][T17181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3113'. [ 345.780353][T17146] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 346.071759][T17154] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 346.151584][T17177] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 346.466565][T17154] chnl_net:caif_netlink_parms(): no params data found [ 346.754860][T17205] bridge_slave_0: left allmulticast mode [ 346.765801][T17205] bridge_slave_0: left promiscuous mode [ 346.771873][T17205] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.808936][T17205] bridge_slave_1: left allmulticast mode [ 346.817230][T17205] bridge_slave_1: left promiscuous mode [ 346.822979][T17205] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.830536][ T5158] Bluetooth: hci3: command tx timeout [ 346.841575][T17205] bond0: (slave bond_slave_0): Releasing backup interface [ 346.854413][T17205] bond0: (slave bond_slave_1): Releasing backup interface [ 346.889154][T17205] team0: Port device team_slave_0 removed [ 346.902386][T17205] team0: Port device team_slave_1 removed [ 346.910566][T17205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.919458][T17205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.930267][T17205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.938315][T17205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.001206][T17210] team0: Mode changed to "loadbalance" [ 347.131946][T17154] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.164610][T17154] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.183973][T17154] bridge_slave_0: entered allmulticast mode [ 347.206211][T17154] bridge_slave_0: entered promiscuous mode [ 347.232538][T17154] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.246321][T17154] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.261468][T17154] bridge_slave_1: entered allmulticast mode [ 347.273118][T17154] bridge_slave_1: entered promiscuous mode [ 347.382111][T17154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.405770][T17221] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 347.418116][T17177] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 347.520896][T17154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.677669][T17154] team0: Port device team_slave_0 added [ 347.699554][T17154] team0: Port device team_slave_1 added [ 347.808035][T17233] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3128'. [ 347.836973][T17233] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3128'. [ 347.875138][T17233] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3128'. [ 347.925155][T17154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.935080][T17154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.965740][T17154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.978331][T17175] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 348.004273][T17233] vlan0: entered allmulticast mode [ 348.009458][T17233] veth0_vlan: entered allmulticast mode [ 348.070537][T17154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.085589][T17154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.112926][T17154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.313467][T17154] hsr_slave_0: entered promiscuous mode [ 348.322607][T17154] hsr_slave_1: entered promiscuous mode [ 348.329879][T17154] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.338118][T17154] Cannot create hsr debugfs directory [ 348.633984][T17221] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 348.719841][T17154] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.731577][T17154] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.774778][T17240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3130'. [ 348.830545][T17154] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.850459][T17154] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.904058][ T5158] Bluetooth: hci3: command tx timeout [ 349.081959][T17154] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.108965][T17154] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.207937][T17154] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.231275][T17154] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.356183][T17250] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 349.731388][T17253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3133'. [ 349.751695][T17253] netlink: 'syz.0.3133': attribute type 10 has an invalid length. [ 349.773997][T17253] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3133'. [ 349.816412][T17253] batman_adv: batadv0: Adding interface: vlan1 [ 349.822623][T17253] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.865739][T17253] batman_adv: batadv0: Interface activated: vlan1 [ 350.021487][T17257] batadv0: entered promiscuous mode [ 350.044316][T17154] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 350.054760][T17154] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 350.073540][T17154] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 350.095627][T17154] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 350.329503][T17154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.351233][T17154] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.369325][ T2933] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.376543][ T2933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.406868][ T2933] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.414159][ T2933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.521159][T17256] batadv0: left promiscuous mode [ 350.796420][T17267] pim6reg1: entered promiscuous mode [ 350.820495][T17267] pim6reg1: entered allmulticast mode [ 350.959907][T17269] syzkaller0: entered promiscuous mode [ 350.972621][T17269] syzkaller0: entered allmulticast mode [ 350.983951][ T5158] Bluetooth: hci3: command tx timeout [ 351.011573][T17250] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 351.025245][T17274] netlink: 'syz.1.3138': attribute type 10 has an invalid length. [ 351.218364][T17154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.325749][T17280] ip6gretap0: entered promiscuous mode [ 351.389153][T17280] batadv_slave_0: entered promiscuous mode [ 351.962662][T17154] veth0_vlan: entered promiscuous mode [ 351.990160][T17154] veth1_vlan: entered promiscuous mode [ 352.077820][T17154] veth0_macvtap: entered promiscuous mode [ 352.090907][T17154] veth1_macvtap: entered promiscuous mode [ 352.132738][T17154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.172835][T17154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.195214][T17154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.212960][T17308] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3148'. [ 352.235734][T17154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.259676][T17308] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3148'. [ 352.274310][T17154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.304986][T17154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.345848][T17154] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.369331][T17154] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.383845][T17154] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.392847][T17154] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.535448][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.543332][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.637982][ T2933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.667423][ T2933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.769712][T17329] sctp: [Deprecated]: syz.2.3155 (pid 17329) Use of struct sctp_assoc_value in delayed_ack socket option. [ 352.769712][T17329] Use struct sctp_sack_info instead [ 352.970888][T17345] netlink: 'syz.3.3157': attribute type 13 has an invalid length. [ 353.068970][ T5158] Bluetooth: hci3: command tx timeout [ 353.715673][T17376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3164'. [ 353.728061][T17376] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3164'. [ 353.728687][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 353.750583][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 353.771789][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 353.780596][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 353.795282][ T5857] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 353.813639][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 353.938426][T17375] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 354.551783][T17397] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3172'. [ 354.675081][T17399] tap0: tun_chr_ioctl cmd 21731 [ 354.794228][T17403] x_tables: duplicate underflow at hook 3 [ 354.887547][T17375] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 355.108980][T17414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3177'. [ 355.360947][T17375] chnl_net:caif_netlink_parms(): no params data found [ 355.551131][T17375] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.566208][T17375] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.584405][T17375] bridge_slave_0: entered allmulticast mode [ 355.608579][T17375] bridge_slave_0: entered promiscuous mode [ 355.629414][T17375] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.646229][T17375] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.661887][T17375] bridge_slave_1: entered allmulticast mode [ 355.687456][T17375] bridge_slave_1: entered promiscuous mode [ 355.770244][T17375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.816567][T17375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.867002][ T5158] Bluetooth: hci1: command tx timeout [ 355.964554][T17375] team0: Port device team_slave_0 added [ 355.983220][T17375] team0: Port device team_slave_1 added [ 356.039160][T17375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.048835][T17375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.075804][T17375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.112839][T17440] netlink: 'syz.3.3184': attribute type 11 has an invalid length. [ 356.124740][T17375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.131729][T17375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.133955][T17440] netlink: 'syz.3.3184': attribute type 11 has an invalid length. [ 356.179173][T17375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.203905][T17440] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3184'. [ 356.278536][T17449] netlink: 134712 bytes leftover after parsing attributes in process `syz.4.3188'. [ 356.318516][T17449] openvswitch: netlink: Message has 76 unknown bytes. [ 356.359109][T17456] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3187'. [ 356.370273][T17449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3188'. [ 356.447327][T17375] hsr_slave_0: entered promiscuous mode [ 356.473638][T17375] hsr_slave_1: entered promiscuous mode [ 356.485821][T17375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.493462][T17375] Cannot create hsr debugfs directory [ 356.655470][T17466] bond1: entered promiscuous mode [ 356.988833][T17375] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.010318][T17375] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.034052][T17375] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 53937 - 0 [ 357.040621][ T29] audit: type=1107 audit(1731846519.094:2): pid=17480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='3z“nE' [ 357.055041][T17375] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 57595 - 0 [ 357.079048][T17482] xt_CT: You must specify a L4 protocol and not use inversions on it [ 357.261239][T17375] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.287856][T17375] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.310810][T17375] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 53937 - 0 [ 357.336645][T17375] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 57595 - 0 [ 357.386421][T17484] __nla_validate_parse: 4 callbacks suppressed [ 357.386442][T17484] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3195'. [ 357.453380][T17499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3202'. [ 357.505864][T17499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3202'. [ 357.525957][T17499] netlink: 'syz.1.3202': attribute type 7 has an invalid length. [ 357.559601][T17375] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.593297][T17375] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.617914][T17375] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 53937 - 0 [ 357.629560][T17375] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 57595 - 0 [ 357.656701][T17507] nbd: illegal input index -1 [ 357.665125][T17507] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 357.699983][T17506] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3204'. [ 357.803212][T17375] team0: Port device »»»»»» removed [ 357.810925][T17375] netdevsim netdevsim2 »»»»»» (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.821310][T17375] netdevsim netdevsim2 »»»»»» (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.831853][T17375] netdevsim netdevsim2 »»»»»» (unregistering): unset [1, 1] type 2 family 0 port 53937 - 0 [ 357.844843][T17375] netdevsim netdevsim2 »»»»»» (unregistering): unset [1, 2] type 2 family 0 port 57595 - 0 [ 357.944035][ T5158] Bluetooth: hci1: command tx timeout [ 357.977697][T17521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3207'. [ 360.034191][ T5158] Bluetooth: hci1: command tx timeout [ 361.430564][T17375] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 361.457629][T17375] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 361.486600][T17375] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 361.516325][T17375] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 361.544008][T17537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3213'. [ 361.559908][T17538] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 361.611791][T17543] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3213'. [ 361.628890][T17535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3214'. [ 361.760061][T17548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3216'. [ 361.817317][T17375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.877434][T17375] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.916203][T17556] vlan2: entered promiscuous mode [ 361.933850][T17556] vlan2: entered allmulticast mode [ 361.956205][T17556] vlan0: entered promiscuous mode [ 361.999360][T17556] team0: Port device vlan2 added [ 362.038206][ T2933] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.045510][ T2933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.104489][ T5158] Bluetooth: hci1: command tx timeout [ 362.143296][T17560] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 362.176505][ T2933] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.183630][ T2933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.286409][T17570] netlink: 'syz.3.3221': attribute type 10 has an invalid length. [ 362.343518][T17570] team0: Port device netdevsim0 added [ 362.366918][T17571] netlink: 'syz.3.3221': attribute type 10 has an invalid length. [ 362.401258][T17571] team0: Port device netdevsim0 removed [ 362.445360][T17571] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 362.465800][T17573] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3222'. [ 362.604499][T17559] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 362.800943][T17375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.980534][T17375] veth0_vlan: entered promiscuous mode [ 363.011969][T17590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3226'. [ 363.027902][T17375] veth1_vlan: entered promiscuous mode [ 363.038148][T17590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3226'. [ 363.109887][T17375] veth0_macvtap: entered promiscuous mode [ 363.129752][T17591] netlink: 'syz.1.3226': attribute type 14 has an invalid length. [ 363.214830][T17375] veth1_macvtap: entered promiscuous mode [ 363.277147][T17375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.308347][T17375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.348997][T17375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.394051][T17375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.422112][T17375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.477046][T17580] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 363.509048][T17375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.548482][T17375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.574305][T17375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.592920][T17598] xt_l2tp: v2 doesn't support IP mode [ 363.599405][T17593] netlink: 'syz.3.3224': attribute type 9 has an invalid length. [ 363.607641][T17375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.619922][T17593] netlink: 'syz.3.3224': attribute type 7 has an invalid length. [ 363.630832][T17375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.641072][T17593] netlink: 'syz.3.3224': attribute type 8 has an invalid length. [ 363.690563][T17596] xt_limit: Overflow, try lower: 65536/2147483648 [ 363.699594][T17375] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.716391][T17375] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.725906][T17375] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.744118][T17375] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.924079][T17604] netlink: 'syz.1.3229': attribute type 4 has an invalid length. [ 363.955087][T17602] netlink: 'syz.1.3229': attribute type 4 has an invalid length. [ 364.046507][T17560] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 364.054692][T10087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.062642][T10087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.199965][T17612] xt_l2tp: v2 doesn't support IP mode [ 364.240744][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.257490][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.469373][T17622] veth0_to_bridge: invalid flags given to default FDB implementation [ 364.504337][T17559] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 364.518282][T17623] pimreg: entered allmulticast mode [ 364.578117][T17625] pimreg: left allmulticast mode [ 364.914109][T17580] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 365.245447][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 365.262835][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 365.285243][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 365.411242][T17642] netlink: 'syz.2.3241': attribute type 1 has an invalid length. [ 365.434201][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 365.486908][ T5853] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 365.494578][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 365.664157][T17634] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 366.614165][T17668] openvswitch: netlink: Message has 4 unknown bytes. [ 366.949953][T17634] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 367.358435][T17634] chnl_net:caif_netlink_parms(): no params data found [ 367.516389][T17714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3257'. [ 367.607632][T17717] netlink: 'syz.2.3256': attribute type 29 has an invalid length. [ 367.764494][T17634] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.771622][T17634] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.784078][ T5853] Bluetooth: hci2: command tx timeout [ 367.806616][T17634] bridge_slave_0: entered allmulticast mode [ 367.824374][T17634] bridge_slave_0: entered promiscuous mode [ 367.851632][T17634] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.874712][T17634] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.900998][T17634] bridge_slave_1: entered allmulticast mode [ 367.924061][T17634] bridge_slave_1: entered promiscuous mode [ 367.978523][T17738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3264'. [ 368.051671][T17738] bond1: entered promiscuous mode [ 368.064453][T17740] netlink: 'syz.4.3265': attribute type 3 has an invalid length. [ 368.106277][T17634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.141676][T17742] 8021q: adding VLAN 0 to HW filter on device bond2 [ 368.167668][T17742] bond2: entered promiscuous mode [ 368.195479][T17742] bond1: (slave bond2): Enslaving as an active interface with an up link [ 368.227956][T17634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.256084][T17748] netlink: 'syz.3.3267': attribute type 1 has an invalid length. [ 368.308552][T17748] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3267'. [ 368.386728][T17634] team0: Port device team_slave_0 added [ 368.407237][T17634] team0: Port device team_slave_1 added [ 368.525911][T17634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.547836][T17634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.592892][T17634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.655362][T17634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.662365][T17634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.728974][T17634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.760050][T17772] netlink: 'syz.3.3273': attribute type 1 has an invalid length. [ 368.817251][T17769] pimreg3: entered allmulticast mode [ 368.827720][T17634] hsr_slave_0: entered promiscuous mode [ 368.836179][T17634] hsr_slave_1: entered promiscuous mode [ 368.838029][T17769] netlink: 'syz.3.3273': attribute type 1 has an invalid length. [ 368.850109][T17634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.864395][T17634] Cannot create hsr debugfs directory [ 368.875626][T17769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3273'. [ 368.925040][T17769] pimreg3: left allmulticast mode [ 369.039741][T17634] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.053969][T17634] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.112720][T17634] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.122994][T17634] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.169476][T17634] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.191924][T17634] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.274563][T17634] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.296085][T17634] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.330265][T17782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3276'. [ 369.378966][T17782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3276'. [ 369.580102][T17634] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 369.625370][T17634] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 369.735693][T17634] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 369.763619][T17634] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 369.874322][ T5853] Bluetooth: hci2: command tx timeout [ 369.915438][T17804] syzkaller1: entered promiscuous mode [ 369.937431][T17804] syzkaller1: entered allmulticast mode [ 370.057665][T17818] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3287'. [ 370.154913][T17634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.195571][T17634] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.212657][T10088] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.219867][T10088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.264196][T10087] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.271477][T10087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.543205][T17844] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3293'. [ 370.560899][T17844] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3293'. [ 370.725883][T17858] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3298'. [ 370.786884][T17634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.907207][T17634] veth0_vlan: entered promiscuous mode [ 370.948288][T17634] veth1_vlan: entered promiscuous mode [ 371.008910][T17634] veth0_macvtap: entered promiscuous mode [ 371.047116][T17634] veth1_macvtap: entered promiscuous mode [ 371.143215][T17634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.184622][T17634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.205183][T17634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.263864][T17634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.289227][T17634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.320507][T17634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.342246][T17634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.375593][T17634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.453487][T17634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.477043][T17634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.504023][T17634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.533710][T17634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.553945][T17634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.574946][T17634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.634685][T17887] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 371.659774][T17634] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.669179][T17634] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.678424][T17634] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.687327][T17634] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.905057][T10087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.913109][T10087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.945224][ T5853] Bluetooth: hci2: command tx timeout [ 374.024153][ T5853] Bluetooth: hci2: command tx timeout [ 374.265847][T17904] netlink: 'syz.2.3309': attribute type 27 has an invalid length. [ 375.651045][T17879] __nla_validate_parse: 3 callbacks suppressed [ 375.651065][T17879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3304'. [ 375.683433][T17901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3304'. [ 375.744233][T17904] C: renamed from team_slave_0 (while UP) [ 375.791067][T10091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.843960][T10091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.907040][T17908] netlink: 'syz.3.3310': attribute type 6 has an invalid length. [ 375.937326][T17908] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3310'. [ 376.162898][T17887] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 376.766087][T17925] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3313'. [ 377.108353][T17945] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3319'. [ 377.125759][T17942] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3320'. [ 377.128092][T17945] 0·: renamed from hsr_slave_1 (while UP) [ 377.164892][T17945] 0·: entered allmulticast mode [ 377.177464][T17948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3320'. [ 377.177968][T17945] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 377.779779][T17966] netlink: 'syz.0.3324': attribute type 12 has an invalid length. [ 378.077199][T17972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.111563][T17972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.367171][T17980] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3329'. [ 378.376639][T17980] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3329'. [ 378.389984][T17981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3330'. [ 378.398517][T17984] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067969) [ 378.410455][T17984] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 378.421318][T17982] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067969) [ 378.434192][T17982] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 378.447899][T17982] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067969) [ 378.471081][T17982] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 379.428195][T18030] netlink: 'syz.3.3343': attribute type 10 has an invalid length. [ 379.492156][T18033] netlink: 'syz.3.3343': attribute type 10 has an invalid length. [ 379.503606][T18030] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.551084][T18030] bond0: (slave team0): Enslaving as an active interface with an up link [ 379.580635][T18033] bond0: (slave team0): Releasing backup interface [ 379.640174][T18033] bridge0: port 1(team0) entered blocking state [ 379.684245][T18033] bridge0: port 1(team0) entered disabled state [ 379.711604][T18033] team0: entered allmulticast mode [ 379.736289][T18033] team0: entered promiscuous mode [ 379.881687][T18045] netlink: 'syz.3.3348': attribute type 2 has an invalid length. [ 380.129261][T18054] netlink: 'syz.1.3351': attribute type 3 has an invalid length. [ 380.458469][T18079] ip6gre1: entered promiscuous mode [ 380.473381][T18079] ip6gre1: entered allmulticast mode [ 380.536010][T18078] ip6gre1: entered promiscuous mode [ 380.541488][T18078] ip6gre1: entered allmulticast mode [ 380.922310][T18091] SET target dimension over the limit! [ 380.942981][T18094] netlink: 'syz.2.3364': attribute type 39 has an invalid length. [ 381.030856][T18099] __nla_validate_parse: 5 callbacks suppressed [ 381.030875][T18099] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3364'. [ 381.160332][T18102] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 381.266803][T18111] bridge0: port 3(vlan2) entered blocking state [ 381.325592][T18111] bridge0: port 3(vlan2) entered disabled state [ 381.338695][T18111] vlan2: entered allmulticast mode [ 381.352236][T18111] vlan2: left allmulticast mode [ 381.387860][T18119] netlink: 'syz.3.3371': attribute type 30 has an invalid length. [ 381.544424][T18125] xt_HMARK: proto mask must be zero with L3 mode [ 381.599536][T18128] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 381.722823][ T5844] IPVS: starting estimator thread 0... [ 381.824076][T18135] IPVS: using max 20 ests per chain, 48000 per kthread [ 382.253008][T18153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3383'. [ 382.833237][T18182] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3390'. [ 382.864102][T18182] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3390'. [ 382.876521][T18128] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 382.964317][T18185] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 382.976143][T18185] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 382.991825][T18182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.076302][T18189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.146450][T18182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.513456][T18215] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 383.777524][T18225] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 383.789034][T18227] dvmrp0: left allmulticast mode [ 383.934655][T18231] netlink: 'syz.3.3405': attribute type 4 has an invalid length. [ 384.134166][T18234] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3406'. [ 384.233475][T18245] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 384.399112][T18251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3410'. [ 384.418611][T18251] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3410'. [ 384.460165][T18251] gtp0: entered promiscuous mode [ 384.498025][T18251] gtp0: entered allmulticast mode [ 384.546852][T18246] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 384.734289][T18266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3412'. [ 384.922668][T18273] netlink: 'syz.4.3414': attribute type 12 has an invalid length. [ 385.373308][T18288] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 385.669326][T18245] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 385.762800][T18225] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 385.780381][T18301] netlink: 21 bytes leftover after parsing attributes in process `syz.4.3422'. [ 385.890699][T18306] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3423'. [ 386.301928][T18318] netlink: 596 bytes leftover after parsing attributes in process `syz.1.3426'. [ 386.339267][T18321] netlink: 'syz.4.3427': attribute type 11 has an invalid length. [ 386.366694][T18246] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 387.747605][T10095] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.193678][T18368] veth1_macvtap: left promiscuous mode [ 388.205608][T18368] macsec0: entered promiscuous mode [ 388.295797][T18368] veth1_macvtap: entered promiscuous mode [ 388.304053][T18368] macsec0: left promiscuous mode [ 388.403582][T18385] syz_tun: entered allmulticast mode [ 388.525569][T18389] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3446'. [ 388.574904][T18391] netlink: 'syz.2.3445': attribute type 11 has an invalid length. [ 388.592333][T18391] netlink: 'syz.2.3445': attribute type 21 has an invalid length. [ 388.601770][T18391] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3445'. [ 388.659426][T18398] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 388.986161][T18407] delete_channel: no stack [ 389.251375][T18410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3453'. [ 389.533039][T18403] pim6reg1: entered allmulticast mode [ 389.766872][T18424] netlink: 'syz.4.3458': attribute type 10 has an invalid length. [ 389.777439][T18424] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3458'. [ 389.854404][T18424] bridge0: port 3(batadv0) entered blocking state [ 389.896107][T18424] bridge0: port 3(batadv0) entered disabled state [ 389.950802][T18424] batadv0: entered allmulticast mode [ 390.003059][T18424] batadv0: entered promiscuous mode [ 390.052084][T18424] bridge0: port 3(batadv0) entered blocking state [ 390.058701][T18424] bridge0: port 3(batadv0) entered forwarding state [ 390.105811][ T3494] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 390.115306][T18398] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 390.122962][ T3494] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 390.331546][T18451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3461'. [ 390.487661][T18457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3465'. [ 390.942501][T18476] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3471'. [ 391.605220][T18502] netlink: 4076 bytes leftover after parsing attributes in process `syz.2.3479'. [ 391.644730][T18501] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3479'. [ 391.680843][T18501] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3479'. [ 391.819534][ T2933] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.109277][T18532] netlink: 'syz.1.3486': attribute type 4 has an invalid length. [ 392.114148][T18530] netlink: 4468 bytes leftover after parsing attributes in process `syz.3.3488'. [ 392.136421][T18533] netlink: 'syz.1.3486': attribute type 4 has an invalid length. [ 392.200471][T18537] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 392.236393][T18535] netlink: 'syz.0.3489': attribute type 4 has an invalid length. [ 392.284298][T18535] netlink: 'syz.0.3489': attribute type 4 has an invalid length. [ 392.318444][T18535] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3489'. [ 392.518575][T18555] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 392.600348][T18563] Cannot find add_set index 0 as target [ 392.799852][T18568] xt_addrtype: ipv6 does not support BROADCAST matching [ 393.090980][T18588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3507'. [ 393.128110][T18588] netlink: zone id is out of range [ 393.150821][T18588] netlink: zone id is out of range [ 393.181723][T18593] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 393.322621][T18555] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 393.784780][T18619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3518'. [ 393.924717][T18633] netlink: 'syz.3.3520': attribute type 3 has an invalid length. [ 394.048717][T18633] vlan4: entered promiscuous mode [ 394.378132][T18648] netlink: 'syz.3.3524': attribute type 1 has an invalid length. [ 394.412792][T18648] netlink: 'syz.3.3524': attribute type 2 has an invalid length. [ 394.587589][T18659] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3527'. [ 394.601790][T18657] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 394.617067][T18659] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3527'. [ 394.677509][T18658] team_slave_0: entered promiscuous mode [ 394.683408][T18658] team_slave_1: entered promiscuous mode [ 394.689613][T18658] vlan2: entered promiscuous mode [ 394.695104][T18658] team0: entered promiscuous mode [ 394.703020][T18658] team0: Device vlan2 is already an upper device of the team interface [ 394.782541][T18658] team0: left promiscuous mode [ 394.788450][T18658] team_slave_0: left promiscuous mode [ 394.793965][T18658] team_slave_1: left promiscuous mode [ 395.428615][T18702] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3536'. [ 396.009748][T18657] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 396.782240][T18749] __nla_validate_parse: 1 callbacks suppressed [ 396.782260][T18749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3547'. [ 397.105078][T18759] (unnamed net_device) (uninitialized): (slave team0): Device is not bonding slave [ 397.124126][T18759] (unnamed net_device) (uninitialized): option active_slave: invalid value (team0) [ 397.319169][T18775] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3552'. [ 397.518001][T18780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3554'. [ 398.387540][T18811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3561'. [ 398.792631][T18821] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 398.816817][T18823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3564'. [ 399.176285][T18826] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 399.211461][T18835] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3568'. [ 399.327859][T18837] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3569'. [ 399.405628][T18838] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3569'. [ 399.490382][T18829] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 399.937189][T18843] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3571'. [ 399.990373][T18821] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 400.227706][T18846] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3572'. [ 400.437048][T18826] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 400.609478][T18852] SET target dimension over the limit! [ 401.012116][T18860] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 401.364711][T18829] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 401.775542][T18865] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 401.794375][T18867] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 402.035689][T18874] netlink: 'syz.2.3584': attribute type 1 has an invalid length. [ 402.077362][T18880] netlink: 'syz.2.3584': attribute type 1 has an invalid length. [ 402.187151][T18874] 8021q: adding VLAN 0 to HW filter on device bond1 [ 402.589169][T18860] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 402.687987][T18907] Cannot find set identified by id 0 to match [ 403.028567][T18907] pim6reg: entered allmulticast mode [ 403.035907][T18908] pim6reg: left allmulticast mode [ 403.142272][T18924] __nla_validate_parse: 2 callbacks suppressed [ 403.142291][T18924] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3592'. [ 403.241653][T18930] xfrm1: entered allmulticast mode [ 403.270629][T18922] netlink: 'syz.0.3591': attribute type 16 has an invalid length. [ 403.324293][T18922] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.3591'. [ 403.662918][T18949] IPVS: ovf: SCTP 172.20.20.170:0 - no destination available [ 403.845412][T18953] netlink: 'syz.2.3600': attribute type 12 has an invalid length. [ 403.865278][T18953] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3600'. [ 404.444288][T18964] netlink: 'syz.4.3603': attribute type 4 has an invalid length. [ 404.514528][T18967] netlink: 468 bytes leftover after parsing attributes in process `syz.2.3606'. [ 404.557755][T18967] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3606'. [ 404.695125][T18972] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3607'. [ 404.868292][T18976] batman_adv: batadv0: Interface deactivated: vlan1 [ 404.992502][T18986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3610'. [ 405.031507][T18981] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 405.142824][T18996] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3613'. [ 405.158363][T18997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3611'. [ 405.381043][T19013] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3619'. [ 406.750275][T19071] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 407.184724][T19090] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 408.264402][T19124] netlink: 'syz.4.3644': attribute type 2 has an invalid length. [ 408.272272][T19124] netlink: 'syz.4.3644': attribute type 1 has an invalid length. [ 408.300728][T19097] can: request_module (can-proto-0) failed. [ 408.938575][T19138] netlink: 'syz.3.3658': attribute type 29 has an invalid length. [ 408.949444][T19134] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 408.954727][T19138] netlink: 'syz.3.3658': attribute type 29 has an invalid length. [ 409.005908][T19138] __nla_validate_parse: 5 callbacks suppressed [ 409.005926][T19138] netlink: 524 bytes leftover after parsing attributes in process `syz.3.3658'. [ 409.065698][T19138] unsupported nla_type 40 [ 409.477646][T19157] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3663'. [ 409.488690][T19157] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3663'. [ 409.935326][T19172] vlan3: entered allmulticast mode [ 409.940501][T19172] hsr0: entered allmulticast mode [ 409.948075][T19172] hsr_slave_0: entered allmulticast mode [ 409.983900][T19172] hsr0: left allmulticast mode [ 409.989012][T19172] hsr_slave_0: left allmulticast mode [ 410.160557][T19190] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3675'. [ 410.420499][T19202] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3679'. [ 410.493406][T19207] netlink: 'syz.4.3680': attribute type 12 has an invalid length. [ 410.501606][T19207] netlink: 'syz.4.3680': attribute type 29 has an invalid length. [ 410.510262][T19207] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3680'. [ 410.677914][T19210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3681'. [ 410.693354][T19210] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3681'. [ 410.712444][T19212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3682'. [ 410.731080][T19212] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3682'. [ 410.880684][T19216] dvmrp5: entered allmulticast mode [ 410.926668][T19216] dvmrp5: left allmulticast mode [ 411.042610][T19228] netlink: 'syz.1.3687': attribute type 34 has an invalid length. [ 411.256947][T19238] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 411.348168][T19245] netlink: 'syz.0.3692': attribute type 2 has an invalid length. [ 411.640689][T19254] netlink: 'syz.3.3693': attribute type 1 has an invalid length. [ 411.916999][T19238] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 412.298183][T19265] veth0_vlan (unregistering): left allmulticast mode [ 412.313369][T19265] vlan0: left promiscuous mode [ 412.352234][T19265] team0: Port device vlan2 removed [ 412.775763][T19283] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 413.979274][T19283] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 414.063261][T19317] __nla_validate_parse: 4 callbacks suppressed [ 414.063281][T19317] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3708'. [ 414.082473][T19319] netlink: 21 bytes leftover after parsing attributes in process `syz.0.3710'. [ 414.152875][T19321] netlink: 'syz.0.3710': attribute type 4 has an invalid length. [ 414.872976][T19346] Cannot find add_set index 0 as target [ 414.894005][T19348] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3715'. [ 415.124727][T19358] No such timeout policy "syz0" [ 415.221736][ T5944] IPVS: starting estimator thread 0... [ 415.239926][T19368] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3727'. [ 415.258968][T19363] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 415.291964][T19375] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3727'. [ 415.344230][T19364] IPVS: using max 17 ests per chain, 40800 per kthread [ 415.449601][T19384] netlink: 'syz.3.3729': attribute type 33 has an invalid length. [ 415.484026][T19384] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3729'. [ 415.525140][T19390] netlink: 'syz.3.3729': attribute type 11 has an invalid length. [ 416.192398][T19417] netlink: 'syz.4.3739': attribute type 2 has an invalid length. [ 416.339498][T19426] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 416.443425][T19363] ÛÌî]-Ñ_batadv speed is unknown, defaulting to 1000 [ 416.456481][T19432] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3743'. [ 416.473961][T19399] rdma_rxe: rxe_newlink: failed to add lo [ 416.504073][T19432] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3743'. [ 416.527477][T19434] vlan3: entered promiscuous mode [ 416.557470][T19434] vlan3: entered allmulticast mode [ 416.638199][T19434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3744'. [ 416.711269][T19441] macsec1: entered promiscuous mode [ 416.783878][T19441] macvlan1: entered promiscuous mode [ 416.794084][T19445] dccp_invalid_packet: P.Data Offset(4) too small [ 416.804907][T19444] netlink: zone id is out of range [ 416.805579][T19441] macsec1: entered allmulticast mode [ 416.819290][T19444] netlink: set zone limit has 4 unknown bytes [ 416.855024][T19441] macvlan1: entered allmulticast mode [ 416.872996][T19441] veth1_vlan: entered allmulticast mode [ 416.904583][ T5853] Bluetooth: hci2: command tx timeout [ 416.940985][T19441] macvlan1: left allmulticast mode [ 416.953555][T19441] veth1_vlan: left allmulticast mode [ 416.970093][T19441] macvlan1: left promiscuous mode [ 417.202176][T19434] 0· (unregistering): left promiscuous mode [ 417.458752][T19461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3753'. [ 417.587883][ T5853] block nbd0: Receive control failed (result -107) [ 417.633981][T19461] nbd0: detected capacity change from 0 to 256 [ 417.717969][T19479] netlink: 'syz.0.3758': attribute type 19 has an invalid length. [ 417.957178][T19485] bridge0: port 3(gretap0) entered blocking state [ 417.971766][T19485] bridge0: port 3(gretap0) entered disabled state [ 417.982128][T19485] gretap0: entered allmulticast mode [ 417.995138][T19485] gretap0: entered promiscuous mode [ 418.021274][T19485] bridge0: entered promiscuous mode [ 418.029575][T19483] bridge0: left promiscuous mode [ 418.247360][T19497] netlink: 'syz.2.3765': attribute type 10 has an invalid length. [ 418.266863][T19495] vlan3: entered promiscuous mode [ 418.308711][T19497] bridge0: port 3(macvlan1) entered blocking state [ 418.325513][T19499] xt_ipcomp: unknown flags 12 [ 418.343085][T19497] bridge0: port 3(macvlan1) entered disabled state [ 418.401487][T19497] macvlan1: entered allmulticast mode [ 418.412434][T19497] veth1_vlan: entered allmulticast mode [ 418.415856][ T5944] hid-generic 0005:0C45:1012.0004: item fetching failed at offset 0/1 [ 418.437967][T19497] macvlan1: entered promiscuous mode [ 418.465342][T19497] bridge0: port 3(macvlan1) entered blocking state [ 418.471957][T19497] bridge0: port 3(macvlan1) entered forwarding state [ 418.484152][T19505] netlink: 'syz.1.3768': attribute type 33 has an invalid length. [ 418.492444][ T5944] hid-generic 0005:0C45:1012.0004: probe with driver hid-generic failed with error -22 [ 418.529016][T19501] batadv0: left allmulticast mode [ 418.536383][T19501] batadv0: left promiscuous mode [ 418.548635][T19501] bridge0: port 3(batadv0) entered disabled state [ 418.566127][T19501] bridge_slave_0: left allmulticast mode [ 418.572715][T19501] bridge_slave_0: left promiscuous mode [ 418.579305][T19501] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.593179][T19501] bridge_slave_1: left allmulticast mode [ 418.601688][T19501] bridge_slave_1: left promiscuous mode [ 418.608243][T19501] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.625670][T19501] bond0: (slave bond_slave_0): Releasing backup interface [ 418.646814][T19501] bond0: (slave bond_slave_1): Releasing backup interface [ 418.696217][T19501] team0: Port device team_slave_0 removed [ 418.720167][T19501] team0: Port device team_slave_1 removed [ 418.729906][T19501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.739902][T19501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.750124][T19501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.759021][T19501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.793133][T19503] team0: Mode changed to "loadbalance" [ 418.812975][T19517] IPv6: NLM_F_CREATE should be specified when creating new route [ 419.017245][T19536] nbd: couldn't find a device at index 1073741824 [ 419.069548][T19530] vcan0: entered promiscuous mode [ 419.077339][T19538] veth0_vlan: entered allmulticast mode [ 419.216752][T19544] __nla_validate_parse: 9 callbacks suppressed [ 419.216771][T19544] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3778'. [ 419.270186][T19544] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3778'. [ 419.670007][T19573] ip6gretap2: entered promiscuous mode [ 419.696644][T19573] ip6gretap2: entered allmulticast mode [ 419.712160][T19576] netlink: 'syz.1.3788': attribute type 10 has an invalid length. [ 419.744763][T19576] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.772745][T19576] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.780470][T19576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.842470][T19576] team0: Port device bridge0 added [ 419.877034][T19579] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3790'. [ 419.916332][T19579] bridge0: port 2(gretap0) entered blocking state [ 419.929251][T19579] bridge0: port 2(gretap0) entered disabled state [ 419.943601][T19587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3792'. [ 419.944275][T19579] gretap0: entered allmulticast mode [ 419.975842][T19579] gretap0: entered promiscuous mode [ 419.983442][T19579] bridge0: port 2(gretap0) entered blocking state [ 419.990097][T19579] bridge0: port 2(gretap0) entered forwarding state [ 420.019897][T19590] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3792'. [ 420.044540][T19591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3790'. [ 420.089860][T19588] gretap0: left allmulticast mode [ 420.165256][T19588] gretap0: left promiscuous mode [ 420.194109][T19588] bridge0: port 2(gretap0) entered disabled state [ 420.551104][T19616] xt_CT: You must specify a L4 protocol and not use inversions on it [ 420.646079][T19623] sctp: [Deprecated]: syz.0.3798 (pid 19623) Use of int in maxseg socket option. [ 420.646079][T19623] Use struct sctp_assoc_value instead [ 423.171852][T19616] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004b: 0000 [#1] PREEMPT SMP KASAN PTI [ 423.185002][T19616] KASAN: null-ptr-deref in range [0x0000000000000258-0x000000000000025f] [ 423.193519][T19616] CPU: 0 UID: 0 PID: 19616 Comm: syz.2.3799 Not tainted 6.12.0-rc7-syzkaller-01681-g38f83a57aa8e #0 [ 423.204897][T19616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 423.215050][T19616] RIP: 0010:dev_prep_valid_name+0x3e3/0xa40 [ 423.220961][T19616] Code: 20 08 00 00 e8 1e 27 27 fb 48 85 c0 0f 84 8f 04 00 00 48 89 44 24 38 48 8b 5c 24 30 48 81 c3 68 02 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 ae 6c 6b f8 48 8b 03 48 89 5c 24 [ 423.240571][T19616] RSP: 0018:ffffc9000c056980 EFLAGS: 00010207 [ 423.246638][T19616] RAX: 000000000000004b RBX: 000000000000025f RCX: 0000000000002000 [ 423.254706][T19616] RDX: 0000000000001000 RSI: ffffffff8c610dc0 RDI: ffffffff8c610d80 [ 423.262700][T19616] RBP: ffffc9000c056a90 R08: 0000000000000920 R09: 00000000ffffffff [ 423.270723][T19616] R10: dffffc0000000000 R11: fffffbfff203ae46 R12: dffffc0000000000 [ 423.278728][T19616] R13: 1ffff9200180ad40 R14: ffff888055238127 R15: 1ffff9200180ad3c [ 423.286716][T19616] FS: 00007f50f1f626c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 423.295902][T19616] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 423.302508][T19616] CR2: 000000110c340773 CR3: 000000003062e000 CR4: 00000000003526f0 [ 423.310483][T19616] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 423.318462][T19616] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 423.326549][T19616] Call Trace: [ 423.330037][T19616] [ 423.332982][T19616] ? __die_body+0x5f/0xb0 [ 423.337313][T19616] ? die_addr+0xb0/0xe0 [ 423.341485][T19616] ? exc_general_protection+0x3dd/0x5d0 [ 423.347045][T19616] ? asm_exc_general_protection+0x26/0x30 [ 423.352871][T19616] ? dev_prep_valid_name+0x3e3/0xa40 [ 423.358157][T19616] ? __pfx_dev_prep_valid_name+0x10/0x10 [ 423.363798][T19616] register_netdevice+0x542/0x1b00 [ 423.368947][T19616] ? rcu_is_watching+0x15/0xb0 [ 423.373717][T19616] ? trace_kmalloc+0x1f/0xd0 [ 423.378406][T19616] ? __kmalloc_node_noprof+0x247/0x440 [ 423.383876][T19616] ? validate_linkmsg+0x825/0xa30 [ 423.388946][T19616] ? sized_strscpy+0x8d/0x220 [ 423.393618][T19616] ? __pfx_validate_linkmsg+0x10/0x10 [ 423.399001][T19616] ? __pfx_register_netdevice+0x10/0x10 [ 423.404556][T19616] ? rtnl_create_link+0x91c/0xc20 [ 423.409606][T19616] vxcan_newlink+0x314/0x5c0 [ 423.414202][T19616] ? rtnl_newlink_create+0x210/0xa30 [ 423.421093][T19616] ? __pfx_vxcan_newlink+0x10/0x10 [ 423.426282][T19616] ? __pfx_validate_linkmsg+0x10/0x10 [ 423.431788][T19616] ? alloc_netdev_mqs+0xcd0/0x1080 [ 423.436991][T19616] ? rtnl_create_link+0x91c/0xc20 [ 423.442029][T19616] ? __pfx_vxcan_newlink+0x10/0x10 [ 423.447145][T19616] rtnl_newlink_create+0x2df/0xa30 [ 423.452291][T19616] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 423.457929][T19616] ? ns_capable+0x8a/0xf0 [ 423.462260][T19616] rtnl_newlink+0x17dd/0x24f0 [ 423.466940][T19616] ? __pfx_rtnl_newlink+0x10/0x10 [ 423.471976][T19616] ? netlink_unicast+0x7c4/0x990 [ 423.476910][T19616] ? __pfx_validate_chain+0x10/0x10 [ 423.482107][T19616] ? __sys_sendmsg+0x292/0x380 [ 423.486915][T19616] ? do_syscall_64+0xf3/0x230 [ 423.491598][T19616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.497679][T19616] ? __pfx_lock_release+0x10/0x10 [ 423.502846][T19616] ? __pfx_rtnl_newlink+0x10/0x10 [ 423.507890][T19616] rtnetlink_rcv_msg+0x791/0xcf0 [ 423.512926][T19616] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 423.518062][T19616] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 423.523525][T19616] ? ref_tracker_free+0x643/0x7e0 [ 423.528562][T19616] netlink_rcv_skb+0x1e3/0x430 [ 423.533438][T19616] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 423.538908][T19616] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 423.544211][T19616] ? netlink_deliver_tap+0x2e/0x1b0 [ 423.549455][T19616] netlink_unicast+0x7f6/0x990 [ 423.554514][T19616] ? __pfx_netlink_unicast+0x10/0x10 [ 423.559807][T19616] ? __virt_addr_valid+0x183/0x530 [ 423.564931][T19616] ? __check_object_size+0x48e/0x900 [ 423.570685][T19616] netlink_sendmsg+0x8e4/0xcb0 [ 423.575544][T19616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.580847][T19616] ? aa_sock_msg_perm+0x91/0x160 [ 423.585798][T19616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.591097][T19616] __sock_sendmsg+0x221/0x270 [ 423.595898][T19616] ____sys_sendmsg+0x52a/0x7e0 [ 423.601490][T19616] ? __pfx_____sys_sendmsg+0x10/0x10 [ 423.606789][T19616] __sys_sendmsg+0x292/0x380 [ 423.611407][T19616] ? __pfx___sys_sendmsg+0x10/0x10 [ 423.616800][T19616] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 423.623525][T19616] ? do_syscall_64+0x100/0x230 [ 423.628575][T19616] ? do_syscall_64+0xb6/0x230 [ 423.633447][T19616] do_syscall_64+0xf3/0x230 [ 423.638043][T19616] ? clear_bhb_loop+0x35/0x90 [ 423.642742][T19616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.648665][T19616] RIP: 0033:0x7f50f117e719 [ 423.653131][T19616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.672829][T19616] RSP: 002b:00007f50f1f62038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.681248][T19616] RAX: ffffffffffffffda RBX: 00007f50f1335f80 RCX: 00007f50f117e719 [ 423.689219][T19616] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 423.697199][T19616] RBP: 00007f50f11f175e R08: 0000000000000000 R09: 0000000000000000 [ 423.705184][T19616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.713178][T19616] R13: 0000000000000000 R14: 00007f50f1335f80 R15: 00007ffcf6f89ae8 [ 423.721246][T19616] [ 423.724264][T19616] Modules linked in: [ 423.730536][T19616] ---[ end trace 0000000000000000 ]--- [ 423.739706][T19616] RIP: 0010:dev_prep_valid_name+0x3e3/0xa40 [ 423.745775][T19616] Code: 20 08 00 00 e8 1e 27 27 fb 48 85 c0 0f 84 8f 04 00 00 48 89 44 24 38 48 8b 5c 24 30 48 81 c3 68 02 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 ae 6c 6b f8 48 8b 03 48 89 5c 24 [ 423.765480][T19616] RSP: 0018:ffffc9000c056980 EFLAGS: 00010207 [ 423.771652][T19616] RAX: 000000000000004b RBX: 000000000000025f RCX: 0000000000002000 [ 423.779810][T19616] RDX: 0000000000001000 RSI: ffffffff8c610dc0 RDI: ffffffff8c610d80 [ 423.788046][T19616] RBP: ffffc9000c056a90 R08: 0000000000000920 R09: 00000000ffffffff [ 423.796512][T19616] R10: dffffc0000000000 R11: fffffbfff203ae46 R12: dffffc0000000000 [ 423.804647][T19616] R13: 1ffff9200180ad40 R14: ffff888055238127 R15: 1ffff9200180ad3c [ 423.812634][T19616] FS: 00007f50f1f626c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 423.821627][T19616] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 423.828344][T19616] CR2: 000000110c340773 CR3: 000000003062e000 CR4: 00000000003526f0 [ 423.836490][T19616] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 423.845143][T19616] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 423.853147][T19616] Kernel panic - not syncing: Fatal exception [ 423.859354][T19616] Kernel Offset: disabled [ 423.863668][T19616] Rebooting in 86400 seconds..