last executing test programs: 6.715448849s ago: executing program 4 (id=3757): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x2110, 0x4) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) (async) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r3, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) (async) sendmmsg$inet6(r3, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/72, 0x48}, 0xfffffff9}], 0x1, 0x12141, 0x0) (async) recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/72, 0x48}, 0xfffffff9}], 0x1, 0x12141, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="41c001", @ANYRES8], 0x4) 6.487849682s ago: executing program 4 (id=3759): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd00"}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000100000000000000000000008500000017000000850000005000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) r4 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) read(r0, &(0x7f0000000140)=""/243, 0xf3) accept4(r0, &(0x7f0000000480)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000500)=0x80, 0x80000) accept4$llc(r4, &(0x7f0000000000), &(0x7f00000000c0)=0x10, 0x80000) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmmsg(r5, &(0x7f0000008b40)=[{{&(0x7f00000004c0)=@nl=@kern={0x10, 0x0, 0x0, 0x800000}, 0x80, &(0x7f0000002900)=[{&(0x7f0000000540)='si', 0x2}], 0x1, &(0x7f0000002980)=[{0x10, 0x110, 0x81}], 0x10}}], 0x1, 0x4000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="04ac0f00"}, @typed={0x4, 0x47}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r3, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f00000003c0)={'sit0\x00', r8, 0x8, 0x8000, 0x0, 0x400, {{0x8, 0x4, 0x0, 0x38, 0x20, 0x66, 0x0, 0x5, 0x2f, 0x0, @local, @local, {[@end, @ssrr={0x89, 0xb, 0xe6, [@loopback, @remote]}]}}}}}) 6.183650912s ago: executing program 0 (id=3762): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {0x100000000000000}, [@common=@inet=@socket2={{0x28}, 0x2}, @common=@ttl={{0x28}, {0x2, 0x4}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e20], [0x4e23, 0x4e21], 0x5, 0x10, 0x1a7, 0x1}}, @common=@icmp={{0x28}, {0x0, "54e9", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x4, 0x6, 0x2, 0x4, 0x6], 0x6, 0x4}, {0x1, [0x1, 0x2, 0x1, 0x1, 0x2, 0x4], 0x3, 0x7}}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xff}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x8, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) r6 = accept4(r2, 0x0, 0x0, 0x800) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r7, 0x6, 0xd, &(0x7f0000000280)="f5", 0x1) listen(r7, 0xe) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) openat$cgroup_int(r1, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=@newtclass={0x60, 0x28, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {0x2, 0xffff}, {0x1, 0x6}}, [@tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0xd982d50d}}}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x0, 0x7}}, @TCA_RATE={0x6, 0x5, {0x7, 0xb0}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4000001) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) unshare(0x400) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) epoll_create1(0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x200, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 6.062835842s ago: executing program 1 (id=3763): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x6c}, {@private=0xa010102, 0x4e20, 0x3, 0xcd, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="94000000160020002bbd7000ffdbdf250a200203", @ANYRES32=r5, @ANYBLOB="14000100fe8800000000000000000000000000011400060009000000010100000180fbff0600000008000a000300000008000a00010000001400060009000000e408000003000000000100001400060002000000400000000300000004000000140006008d0000000100000000080000030000000800080044000000"], 0x94}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket(0x1e, 0x4, 0x0) r9 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r9, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r8, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 5.953698513s ago: executing program 0 (id=3765): ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000000)=0x5) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1e0000, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x7) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="298cb9995d8e9c5c7ecc739c42278bd98c141568246d5229788980c1ed639bf7964ab8041b94aed63b1f23927ee13ccf90034176c8c64596c6a99cec618c03b56fe639f7f530ce2817cd810d2beedc4351b3fbb2a62f8e8fa4d8eaca98b56650c452d73ded", 0x65) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x254, r3, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x4c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x47, 0x5, "64c65affba0c78051f283f5dce3ae6bb2dae2dc84c0c8de88a770d72c0a12bc3c4282c7425cf6387ec4350ce546d1c350924f9274b5bc185931c608f3fb962bd3b3fc2"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1b0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xda, 0x5, "be5ceb939708731690f7a454b6d96b551b1af0529fc716a103d509012eb59143bf0de03ad92db43a7bb87836094704798d50b717fdc3bb04a0b383ce5edca7a7187b689ce37584e89cce1899c65d0eaba54a79af0ca509e050c4cd685513f8051c4c0ff23d8de072a0ce267e6c12e19b0da6c384ec58b77f7aaa469d725096cda8bcc5d6d66ec7c26b03a5eb7b130a3de028e0e884dba8b466bb0afa0ba9f65b7a0584e092d755946f1b7b9277dbe9a2cba0bf6a7ddb1548b84f0a7ba9b74c8a362e51aaad45cd9cb6aed2fb9a42e919f4d42853462e"}, @ETHTOOL_A_BITSET_MASK={0xb7, 0x5, "291c33be5eaa6a105ee14e1830a843041f1e683f2d97b7737fed71b7fdcdd24629b2bf584a382830dd5ffb9bdb68d855be8c4eb944d6d74e5603116e6eb8be0be396b6d6abf7f449fb653c8ff56508728af6a3146d12886165c67a132ef1554cf67103eb7bdde17e1e70d8c2f25cb76b1a4707ffd6db3cc7bc41ffa637a6263cfff0eac74403d8160c8b727c7c92eb5841e1280e6e41b9611cb61660348d31c275025c9aa0283b715a2777da12f98b836c0354"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfff}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xc0d}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xadbb2de15eb52824}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000740)={&(0x7f00000004c0)="6c3fcc4e433926d2cd29b4b011ad0a1712e33983d97182de5e1df8f16ab97cdad50abf7aac1bd7736b106c70fc7d", &(0x7f0000000500)=""/167, &(0x7f00000005c0)="edfa", &(0x7f0000000600)="f93e0665d65da6ab0829c3f24f62304df0e4079b007bca28e0d2f6a5015bb1eb24f2e001194223b198507bf925d31a355d762b4dc7239f47f067e73c958c44fd4ba7f8ae800c27541a726615e88c6c1ec65bc16fd4d02f578f9ddcfadc166a4606e2355678dd222d765285941a0dd325e71c4f7b938fd0f09218acc43a0a7a7c", 0x7, r4}, 0x38) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000840)={'vcan0\x00', 0x0}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@float={0x7, 0x0, 0x0, 0x10, 0x2}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x61, 0x0, 0x0, 0x5f]}}, &(0x7f00000008c0)=""/4096, 0x36, 0x1000, 0x0, 0x4}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x5, &(0x7f0000000780)=@raw=[@alu={0x7, 0x1, 0x3, 0x2, 0x4, 0xffffffffffffffff, 0x8}, @jmp={0x5, 0x0, 0x6, 0xb, 0x0, 0x80, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}], &(0x7f00000007c0)='syzkaller\x00', 0x7da2, 0xc, &(0x7f0000000800)=""/12, 0x41000, 0x30, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000001900)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000001940)={0x4, 0x3, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r8 = syz_genetlink_get_family_id$team(&(0x7f0000001a80), r2) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000001ac0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001cc0)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001b00)={0x160, r8, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r9}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x794a3c07}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x4080}, 0x8010) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000001d40), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001d80)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000001e40)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x24, r10, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_LINK={0x8, 0x1, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x8804) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001f00)={{0x1, 0xffffffffffffffff}, &(0x7f0000001e80), &(0x7f0000001ec0)=r7}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001f40)=@bloom_filter={0x1e, 0x3, 0x5, 0xffffff95, 0x80, r12, 0x7, '\x00', r11, r6, 0x5, 0x1, 0x5}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000002000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000002400)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002040)={0x354, r8, 0x2, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x92f}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r13}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf5f}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r9}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}]}}]}, 0x354}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) r14 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r14, &(0x7f00000025c0)={&(0x7f0000002440)=@ieee802154={0x24, @none={0x0, 0x1}}, 0x80, &(0x7f0000002500)=[{&(0x7f00000024c0)="c54852aca2c520d4225dc8b26bc397e11c392ec84cdbb2e8006b98c3af97d416560da270bc61feffdc8c4b0cf2b9e3b463920c6c6ccdb674b485daf8c098c8", 0x3f}], 0x1, &(0x7f0000002540)=[{0x70, 0x104, 0x2, "78f4a9a3f5c849953249faf15cbd6d4e7f0289bccc0611b564b68c9c189f9e4bc958a16af90f0c2445fd40c66cff4e20e29e6e286aec4ffb8f2459260ffab65787afcdabec631ed3be8075a7801bd14dc036f6573486d35af15b68720f0041"}], 0x70}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000026c0)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x1c, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8001) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000002700)={'vxcan1\x00', 0x400}) accept4(0xffffffffffffffff, &(0x7f0000002740)=@nfc_llcp, &(0x7f00000027c0)=0x80, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000002900)={0x0, 0xa, 0x0, 0xd87, 0xfffffff8, 0x1}, &(0x7f0000002940)=0x14) 5.883858576s ago: executing program 4 (id=3766): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x2a020400) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) pread64(r1, &(0x7f0000002200)=""/89, 0x59, 0x10000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80"], 0x38}}, 0x0) 5.813950794s ago: executing program 0 (id=3767): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0xa93f, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x50, 0x0, 0x9, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7fff}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x48000) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 5.364565513s ago: executing program 3 (id=3770): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000080000000400000003"], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000080000000400000003"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000400)={r0, &(0x7f00000001c0), 0x20000000}, 0x20) socket$inet(0x2, 0x3, 0x5) (async) r5 = socket$inet(0x2, 0x3, 0x5) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0xe0, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@multicast2, @empty, 0x0, 0x0, 0x3, 0xe, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@remote}, 0x4, 0x5, 0xfff8, 0x91fe, 0x3, 0x0, 'bridge0\x00', 'veth1_to_bond\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0xff000000, 0xa, 0x2, {@mac=@random="0acc9bdf614c", {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x4, 0xfff7, 0x2, 0xf, 0xb, 0x0, 'veth0_to_bond\x00', 'pimreg1\x00', {}, {}, 0x0, 0x282}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0xfffa}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x100000, 0x1}]}]}}, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x10000, @value=r6}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x100000, 0x1}]}]}}, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x10000, @value=r6}, 0x28) 5.315508286s ago: executing program 4 (id=3771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) unshare(0x62040200) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r2, 0x5418, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in={0x2, 0x4e24, @rand_addr=0x64010102}], 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711238000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @local}, 0x2}}, 0x26) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x3c, r5, 0x1, 0x60bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x20}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}]}, 0x3c}}, 0x20) r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x200002, 0x0) 5.215937795s ago: executing program 3 (id=3772): socket(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x71bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="03", 0x5dc}], 0x1}, 0x4) 4.338859392s ago: executing program 1 (id=3773): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e7"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x8, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0xfb, 0x5, 0x3c7a, 0x11, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x700, 0x0, 0xba}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x80, r4, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4040890}, 0x4000800) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 3.155278181s ago: executing program 2 (id=3775): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x8040) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendto$inet(r3, &(0x7f0000000000)='\x00\x00', 0x2, 0x24008800, 0x0, 0x0) accept4$tipc(r3, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10100100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@deltclass={0x50, 0x29, 0x2, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff3}, {0xe, 0xfff3}, {0xd, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x6}}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @TCA_RATE={0x6, 0x5, {0x7, 0xb}}, @tclass_kind_options=@c_mqprio={0xb}]}, 0x50}, 0x1, 0x0, 0x0, 0x4044010}, 0x800) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r1, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='qrtr_ns_service_announce_new\x00', r0, 0x0, 0x2}, 0x18) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="8400000010000504000783007b00000000000000", @ANYRES32=0x0, @ANYBLOB="0200000000000200240012800b00010065727370616e000014000280050016000000000006000e0058"], 0x84}}, 0x20000010) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610420000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1.882942231s ago: executing program 3 (id=3776): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="34010000170001002bbd7000fbdbdf25e0000002000000000000000000000000000004d56c000000fc0200000000000000000000000000010a010102000000000000000000000000640101010000000000000000000000004e2400004e2154a70200008016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000038ffffffff0000000000000000000000004e2200074e2200050200200016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="050000000000000001000100000000000700000000000000000000000100000006000000000000007f000000000000000f000000000000000100000000000000ffffffff0000000000800000000000000400000000000000000000000000000003000000000020000000000300000000ec00000005000000010000002dbd70000c0008"], 0x134}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced\x00', 0x0, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) (async) r2 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000025c0)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0xf8, 0x0, 0x1c8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x3127, 0xd0, 0xf8, 0x1ba, {0x46010000}, [@common=@addrtype={{0x30}}, @common=@addrtype={{0x30}}]}, @REJECT={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x11}, @broadcast, 0xffffffff, 0xff000000, 'vlan1\x00', 'macvlan1\x00', {}, {0xff}, 0x16, 0x0, 0x8}, 0x287, 0x70, 0xd0, 0x0, {0x0, 0x4}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x1], 0x4, 0x1}, {0x0, [0x4, 0x11, 0x5, 0x1], 0x4, 0x3}}}}, {{@ip={@multicast1, @broadcast, 0x0, 0xffffff00, 'lo\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x5, 0x1, 0x1}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) (async) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@deltfilter={0x1b38, 0x2d, 0x400, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x4, 0x10}, {0xfff3, 0x4}, {0xb, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x107c, 0x2, [@TCA_U32_POLICE={0x408, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8000, 0xb, 0x8, 0x6, 0x5, 0x3, 0x8f9, 0x6b7, 0x7, 0x2, 0x0, 0x80000000, 0x446bf6a1, 0x3, 0x4, 0x702, 0xffffffff, 0x3, 0x2, 0x5, 0x1, 0x3, 0xffff2548, 0xc, 0x26, 0x6, 0x8, 0x7, 0x9, 0x9, 0x3, 0x6, 0x9, 0x66b6, 0x5, 0x1ff, 0x7, 0x2, 0x7cc, 0x1ff, 0x6, 0x6, 0x5, 0xff, 0x5, 0x8, 0x12bc, 0x5, 0x10001, 0x1, 0x6, 0x95, 0x3, 0x80000000, 0x5, 0x3, 0x5, 0x6, 0x9, 0x400, 0xfffffffa, 0x1, 0x2d6a, 0x3, 0x4, 0x6, 0x7fffffff, 0x400, 0x0, 0x8, 0x401, 0x9, 0x9, 0x7, 0x3, 0x5, 0x3, 0x69d, 0xd, 0x112, 0x4, 0x8, 0x9, 0x8, 0x100, 0x401, 0x8001, 0x2a, 0x3, 0x4, 0x3, 0xfffffffb, 0x1, 0x0, 0xfff, 0x4, 0xd6e2, 0x4, 0x3, 0xd808, 0x7fffffff, 0x6a, 0x8, 0x7fff, 0x10001, 0x8, 0x4, 0x7fff, 0x9, 0x9, 0x0, 0x10001, 0x2, 0x7, 0x1000, 0xec, 0x80000000, 0x7ff, 0x6, 0x8, 0x71, 0x6, 0xff, 0x6, 0x80000000, 0x0, 0x1, 0x7, 0x9, 0x5, 0x7, 0x0, 0xbe, 0x7, 0x7, 0x7f, 0x8, 0x3, 0x7ff, 0xd, 0x7, 0x4, 0x6, 0x55be, 0x2, 0x8, 0x24, 0x2, 0xe, 0x6, 0x2, 0xfff, 0xfffffffb, 0x101, 0x6, 0x18b, 0xf, 0x81, 0x3, 0xc6, 0x9, 0x5, 0x1000, 0x1, 0x7, 0xffff, 0x1, 0x938, 0x8001, 0x26, 0x35d8, 0xf3e, 0x81, 0x10000, 0x6, 0x7, 0x7ff, 0x559, 0x2, 0x9, 0x10000, 0xd1be, 0x4, 0x7, 0x9, 0x5, 0x6, 0x8, 0xa000000, 0x0, 0x1, 0x6, 0xf1a6, 0x8, 0x0, 0x2, 0x1, 0x101, 0x4, 0x2, 0xfffffeff, 0x7, 0x5, 0x2, 0x401, 0x9, 0x1, 0x1000, 0x4, 0x9, 0x9, 0x6, 0x800, 0x6, 0x2, 0x7, 0x200, 0x100, 0x88a49908, 0x1, 0x3f, 0x8, 0x3, 0x5, 0x1, 0x10, 0x2791, 0x9, 0x8, 0x491d85c7, 0x0, 0x5, 0x7, 0x5, 0x8, 0x2, 0x9, 0x1, 0xe7fc, 0x100, 0x101, 0x9, 0x6, 0x6, 0x2, 0x3, 0x4, 0x8, 0x9, 0x6, 0x0, 0x9, 0x40, 0x7, 0x0, 0x6]}]}, @TCA_U32_FLAGS={0x8, 0xb, 0x7}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_INDEV={0x14, 0x8, 'bond_slave_1\x00'}, @TCA_U32_MARK={0x10, 0xa, {0x3, 0x3ce}}, @TCA_U32_POLICE={0xc24, 0x6, [@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x19e, 0x7, 0x2, 0x0, 0x1, 0xff, 0x6, 0x3, 0x7fff, 0x2, 0x2, 0x1, 0x3, 0x27, 0x7, 0x3, 0xa5f, 0x2a1, 0xfef, 0x10000, 0x9, 0x8, 0x3, 0x1, 0x0, 0xffffffff, 0x9, 0x8000, 0x3, 0x1, 0x5, 0x0, 0x3f, 0x3, 0xd, 0xdd, 0x101, 0x57db, 0xfffffff9, 0xb6, 0xe514, 0x3, 0x7, 0x2, 0x418b, 0x4, 0x0, 0x5, 0x0, 0x4, 0x81, 0xd6bf, 0x0, 0x40, 0x7, 0x4, 0x6, 0x4, 0x3, 0x2, 0x6, 0x7, 0x7fff, 0xe, 0x4, 0x57043d05, 0xd9c, 0x2432e578, 0x8, 0x8, 0x6, 0x6da, 0x3ff, 0x10000000, 0x80000000, 0x9, 0x1, 0x6, 0x9, 0xffffffff, 0x4, 0x6, 0x0, 0x20000000, 0x6, 0x7, 0x3ff, 0x1, 0x2, 0x200, 0x5, 0x80, 0xd002, 0xc3, 0x0, 0x0, 0x40, 0x80000000, 0x6, 0x4, 0xb9ca, 0x68, 0x6, 0x4, 0x5, 0x10, 0xfffff783, 0x5d51, 0x6, 0x8ad, 0x1000, 0x72, 0xfffffffa, 0x2, 0x9, 0x6, 0xb38, 0x9, 0x3, 0x200, 0x1, 0x1, 0x4, 0x7fffffff, 0x1, 0x1000000, 0x3, 0x0, 0xe, 0x8001, 0x6, 0x0, 0x7ff, 0xb5, 0x5, 0x40ac, 0x9, 0x4, 0x3, 0x101, 0x247e, 0xfffffff6, 0x6, 0x8, 0x3, 0xa, 0x40, 0x9, 0x9, 0x7, 0x8, 0xa7b2, 0x40, 0x8, 0x101, 0xa, 0x7, 0x9, 0xffffffff, 0xffff, 0x0, 0x9, 0x0, 0x8000, 0x3, 0x400, 0x8, 0x1, 0xb, 0x400, 0xfffffffa, 0x7, 0x5, 0x2, 0x2, 0x6, 0x3ff, 0x3, 0x10001, 0x7, 0x1, 0x8f6d, 0x9, 0x800, 0x7, 0x2, 0x6, 0x1, 0xfffffffa, 0x81, 0x0, 0x7f, 0x6, 0x900, 0x3, 0x3, 0x3, 0x2, 0x6, 0x5, 0xb, 0x7, 0x7, 0xffff, 0x5, 0x8, 0x43a, 0x3ff, 0x8001, 0xff, 0x401, 0x1, 0xb66, 0xb72, 0x0, 0x4, 0x87f5, 0x0, 0x45b68a36, 0x2, 0x5, 0x10000, 0x3, 0x4, 0xffff, 0x4, 0xffffffff, 0x8, 0x80000000, 0x6, 0x3ff, 0x66, 0x5e, 0x3, 0x2, 0x8, 0x8, 0x8, 0xd71, 0x72481f9d, 0xdf6, 0x1ff, 0xffff8001, 0x2, 0x1, 0x7f, 0x3, 0xbe, 0x8000, 0x6, 0x7, 0x3, 0x400, 0x0, 0x400]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xe11a}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x9, 0x0, 0x417a, 0xa71, 0x9, 0xfffffffc, 0xfffffbb8, 0x8, 0x6, 0xffffa3b4, 0x0, 0xc, 0x0, 0x6266, 0x7, 0x6, 0x6, 0x4000, 0xfffff75f, 0xfffffc4f, 0x5, 0x8, 0x5ca, 0x19, 0xffff8001, 0x0, 0x8, 0x45c0, 0xa7, 0x7, 0xa2d, 0x0, 0x4, 0x2, 0x8001, 0x0, 0x8, 0xcf5, 0xe, 0x155d, 0x7fff, 0x0, 0x6, 0x400, 0x0, 0x6, 0x1, 0x3, 0x1, 0x3, 0x4, 0x5, 0x80, 0x3, 0x1, 0xfffffff9, 0x800, 0x3, 0xfffffff5, 0x835, 0x5, 0x1, 0xb, 0x9, 0x8, 0x6, 0x200, 0x4, 0x82c, 0x9, 0x100000, 0x0, 0x5, 0x9, 0x3e9, 0xef7d, 0x5c, 0x9, 0x8, 0x25, 0x8, 0x2, 0xa0, 0x8001, 0x8, 0x1, 0x0, 0x2, 0x7, 0x2, 0x4, 0x6, 0x1, 0x0, 0x116, 0x7, 0x4, 0x2, 0x101, 0xffffffff, 0x0, 0x5, 0x10001, 0x0, 0x1, 0x6, 0xff, 0x6, 0x9, 0x17c, 0x9, 0x3, 0x3, 0x9, 0x2, 0x80000000, 0x800, 0x10000, 0x1, 0x7, 0x8, 0x0, 0x8e49, 0x0, 0x9, 0x0, 0x8, 0x8, 0x8, 0x9000, 0x3, 0xcf1e, 0x7, 0x80000001, 0xfffffffe, 0x541, 0x1ff, 0x8, 0x8, 0x0, 0x5, 0x9, 0x5, 0x7, 0x4, 0xa, 0x8, 0x1, 0x4, 0x4, 0x2a6, 0x3, 0x0, 0x9, 0xfffffffc, 0xffffffff, 0x2, 0x8, 0x2, 0x6, 0x2, 0x12, 0x9, 0x10, 0xc, 0x7, 0x6, 0x0, 0x4000000, 0x4, 0x1, 0x1ff, 0xfff, 0xfffffffd, 0x8, 0x4, 0x200000, 0x8c6, 0x4, 0x0, 0x33, 0x4, 0xfffffffb, 0x7, 0x5, 0xfffffffd, 0xfffffff9, 0xe, 0x1ff, 0x4, 0x9, 0x40, 0x400, 0x2, 0x2f, 0xab, 0x2000000, 0x9, 0x2, 0xffffffff, 0x4, 0x6, 0x100, 0x9, 0xcf0, 0xc, 0x7, 0x6, 0x2, 0x4, 0x7, 0xd9, 0x8, 0x0, 0x1, 0x1, 0x10000, 0x2, 0x2, 0x400, 0x9, 0x7, 0x0, 0x6, 0x200, 0x4, 0x3ff, 0x4, 0x7, 0x61d4, 0x9, 0xbb, 0x9, 0x9, 0x0, 0xd, 0x7ff, 0x5, 0x4, 0x2, 0x9, 0xfffffff7, 0x4, 0x2, 0x812d, 0x200, 0x5, 0x2, 0x4, 0x8, 0x0, 0xffffffff, 0x2e1, 0xffff8000, 0x80000001]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x0, 0x5, 0x2, 0xb9a, 0xdc0, 0x0, 0x0, 0x1, 0x5, 0x8, 0x536c, 0x4, 0x8, 0x1ff80, 0x5, 0x4, 0x67, 0x4, 0x3, 0x4, 0xffffffff, 0x2, 0x8, 0x97e, 0x8e83, 0x0, 0x8, 0x1, 0x1, 0xfffffff8, 0xfffffffd, 0x2, 0x5, 0x1, 0x4, 0x3, 0x6, 0x5, 0x1, 0x7, 0x18f5, 0x8, 0x1, 0xda2, 0xfff, 0x4, 0x4, 0x3, 0x400, 0x84000000, 0x1000, 0x1b, 0xf, 0xb3, 0x9, 0x90, 0xc, 0x101, 0x3, 0x80000000, 0x3, 0xa1, 0x20000000, 0x4, 0x0, 0x4a2, 0x0, 0x5000000, 0xfffffff9, 0x81, 0x3, 0x7, 0x1, 0x0, 0x573, 0x5, 0x3, 0x2, 0x8001, 0x6, 0x101, 0xc, 0x3321, 0x10001, 0x8, 0x3, 0x1, 0x2, 0x8, 0xc, 0x721, 0xffffffff, 0x80000000, 0xfffff0cb, 0x6, 0x1, 0x9, 0x9, 0x3, 0x99, 0x8, 0x9, 0x6, 0x1ff, 0x0, 0x5, 0x0, 0x2, 0x5, 0x317, 0x742171dc, 0x7, 0x5, 0x13caa2f0, 0x27ef, 0x0, 0x2, 0x4, 0x0, 0x1, 0x0, 0x3, 0x2, 0x5, 0x80000001, 0xe4, 0x422e, 0x1, 0x1000, 0xffffffcb, 0x6, 0x7fff, 0x7f, 0x2, 0xff, 0xaa, 0x200, 0x10, 0x8000, 0x2, 0x1, 0xfff, 0xd, 0x2, 0xfffffe92, 0x3, 0xa6d4, 0x5, 0x9, 0x2, 0x401, 0x101, 0x6, 0x952a, 0x9, 0x4, 0xf, 0x47d91491, 0x9, 0x1, 0x2, 0x5, 0xd, 0x4, 0x8, 0x9, 0x5, 0x8, 0x10000, 0x8, 0x10000, 0x1, 0x5, 0x0, 0x4e4, 0x1, 0x6, 0x5, 0x3e000000, 0x5, 0x8000, 0x5, 0x2, 0x7fffffff, 0x0, 0x0, 0x736a, 0xfffffffa, 0x9, 0x0, 0x3, 0x40, 0x4, 0x6, 0x3ff, 0x4, 0x5, 0xffffffff, 0x0, 0x6, 0x4, 0xe7a0, 0xe, 0x8, 0xe, 0x6, 0x9, 0x8591, 0x80, 0x8, 0x6, 0xffff, 0x7, 0x9, 0x1, 0x3, 0x7fff, 0x195, 0x3, 0x8, 0xfff, 0x0, 0x1, 0x5, 0x3, 0x7, 0xfffffffe, 0x10ac, 0xfffffbff, 0x4, 0xda, 0x4, 0x2, 0x4, 0x1, 0x10, 0x2d2, 0xfff, 0x680, 0x400, 0x0, 0x0, 0x1, 0x0, 0x1, 0x7, 0x8000, 0x1, 0x8, 0x1000, 0x7, 0x4, 0x76, 0x4, 0x8]}]}, @TCA_U32_MARK={0x10, 0xa, {0x9, 0x1}}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xa80, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_POLICE={0x58, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffff000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xb9}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x8, 0x6, 0x1, 0x5, {0x2, 0x1, 0x6, 0x2, 0xffff, 0x6f}, {0xc6, 0x0, 0x1, 0x8, 0x7, 0xfff}, 0x3, 0x7, 0x7fff}}]}, @TCA_BPF_ACT={0x398, 0x1, [@m_ife={0x194, 0xe, 0x0, 0x0, {{0x8}, {0x100, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x28, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x3}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x5}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x3}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_METALST={0x3c, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x70b}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xe}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x200}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x7}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0xd, 0x7, 0x7fff, 0x401}}}, @TCA_IFE_DMAC={0xa, 0x3, @random}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x7d000}, @IFE_META_PRIO={0x8, 0x3, @val=0x7}, @IFE_META_PRIO={0x8, 0x3, @val=0x68ef}]}, @TCA_IFE_DMAC={0xa, 0x3, @random="23ca62b1cb7e"}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xfff, 0xff, 0x20000006, 0x7, 0x1000}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x71}]}, {0x70, 0x6, "eb7c66d467c17d6048e36e243d8c3238e6ac7fafcb982dedb7a4a8fe3108e039fb995fab9f59483d3a01a2294ffc1e33dc1b2b2f43d8bc8d3b83ec4f10bfce2b3e1316b06f6dc69f07f88326f9de151f803545899195858f77b15a2136596f2c3e7dc3fd0df6fa2a85fed252"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0xd4, 0xd, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x9, 0x0, 0x0, 0xc00000}, 0x1}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}]}, {0x7a, 0x6, "1c7885400d4f91802e0c105a2e7cf4c79bb1f24847ca812157b6e857829eb03c9d66feef2e84f2916ab33f04cf4a328e319d6c0ae5a021f7dad503fe5062e4a69cd4fdf55c55c54d0db903e0370e621a9b81ad50f3e5b59e4bc1ea37ab9d63373b42d94aafd451d3e14044d2b354825b688ada948f6a"}, {0xc}, {0xc}}}, @m_ife={0x12c, 0x1a, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, @TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x6, 0x5, 0xfffffff7, 0xf}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x20000000, 0x800, 0x1}}}]}, {0xa7, 0x6, "1bc19ebd401125bd777cfba54e39ed0857463e81b201bb5b6f0d09994c0fad6244c13d87cf7c062487235cba442f8fdd57f8dbe112e047c180b7afa1e83dde8464edc29c0653042fa4bfddc400c6a55402601945652de8851e984ff42d1a286460e33acf3cf2c23c8dd096ca830fda8d4d9975d0147a52ec4178e53ce30161da195115644dc5912e6fc4fcade5b257ec44f4bc28e879b4516749d63d37e59abd56f295"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_ACT={0x204, 0x1, [@m_ct={0x13c, 0x2, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x81}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @loopback}, @TCA_CT_PARMS={0x18, 0x1, {0x60348145, 0x4, 0x6, 0x5, 0x8}}]}, {0xaf, 0x6, "df8331d26621952a912d1766abd1f997df91693b64cec543297d4000a99dc893c1100b630936108ed50e5d32aaf8e8b2bf00db1bd6191fa50340cc0abdcdf384b936beb59f1d14af6076b7bc0559dace3c1f3f36e738209fd768d862ce8b26d9d4289a079d550822dc6c87c3253530c9b60026db3c4d10eb28c96ab19e475dba032acd84388fdc3cfb10b9f1246acda19dde475b2e50da2037a53a65ebfc9581297abbc7a32e5c8df063fe"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0xc4, 0x13, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xf}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x6d, 0x6, "c72f1dd6a438c1fad3a4ba6a5ae06c0fa23e635fbef1e9abeab59e92fffdecaa1faa06fb0a49171859a54088668e699b56dac279d8162b44627bbcc8b00c06e08c107dfd36511fd00bd083c0555269873181e17cbdb6b527c35f8c351c12bbb6b62b2076e9af3550e4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BPF_FD={0x8, 0x6, r10}, @TCA_BPF_FD={0x8, 0x6, r1}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_POLICE={0x45c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x0, 0x7ff, 0x1, 0x2, {0x38, 0x2, 0x3, 0x7, 0x180c, 0xc}, {0x0, 0x1, 0xd5a, 0xd47e, 0x9570, 0x9}, 0x7fe, 0x6d2, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x5, 0x4, 0x5, 0x631e, 0x8001, 0x3, 0xde5, 0xe2, 0x4, 0x5, 0x7b58, 0x2, 0x8, 0x7, 0x5, 0x2, 0xd, 0x39, 0x6, 0xffffff61, 0x1, 0x6, 0x8d, 0x7fff, 0x1, 0xa56, 0x0, 0xc2, 0x1000, 0x0, 0x19, 0x9, 0x7, 0x10, 0x1, 0x81, 0x4, 0x4, 0x5, 0x1, 0xa, 0x6, 0x796a, 0x3, 0x4, 0x7f, 0x6, 0x12, 0x1, 0x80000000, 0x1, 0x7, 0x2000, 0x7f, 0x7, 0xb18, 0x3ff, 0xf3b, 0x1d, 0xf, 0x0, 0xa154, 0xc, 0x2, 0x40, 0x9, 0x0, 0xcdd, 0x827a, 0x3, 0x2, 0x5, 0x0, 0xffffffff, 0x3, 0x5, 0x3, 0xf, 0x2, 0x400, 0x4, 0x8, 0x3, 0xcc, 0x9, 0xfff, 0x8001, 0x5, 0x3b6, 0x6, 0x7fffffff, 0x8, 0x1, 0x3, 0x0, 0x7f, 0x10000, 0x7fffffff, 0x6, 0x81, 0xfffffffe, 0x84, 0x1000000, 0xfffffffb, 0x2000, 0x8, 0x5, 0x6, 0xfffffffa, 0x1, 0xe, 0x8, 0xfffffffb, 0xee, 0x1, 0x1, 0x9, 0x3, 0xb, 0x800, 0x1ff, 0xd70, 0x7, 0x9a3, 0x5, 0x1, 0x7, 0x141, 0x1, 0xfffffffe, 0xe2, 0x0, 0xa5a, 0xcb7, 0x4, 0x7, 0x1, 0x5, 0x3, 0xfa2, 0x7f, 0x7, 0x1000, 0xffffffff, 0x0, 0xfffffffa, 0xc, 0x3, 0x5, 0xbe75, 0x1, 0x800, 0x6, 0x10001, 0x10000, 0xa, 0xc6, 0x4, 0x3, 0x62d, 0x5, 0x5, 0x5, 0x40, 0xc, 0x8, 0x7c, 0x0, 0xffff, 0x8, 0x3, 0x3, 0x0, 0xe, 0x200, 0x1, 0x8, 0xb, 0x3, 0x8000, 0x0, 0x8, 0x100, 0x0, 0x1, 0x6, 0x1, 0x7, 0x8, 0xff, 0x1ff, 0xffffff81, 0x6, 0xb, 0x3, 0x6, 0x595d4b2c, 0xca76, 0xe, 0xa, 0x7, 0xa43, 0xee4, 0xb, 0x7fffffff, 0x9, 0x6, 0x80000000, 0x0, 0x3, 0xd1, 0x7, 0xc2, 0x8, 0x40, 0x1, 0x1, 0x0, 0xffff, 0x2, 0x8, 0x10000, 0x0, 0x3, 0x1, 0xf1, 0xa7f8, 0x5, 0x9, 0x0, 0x8, 0x3, 0x2, 0x0, 0x0, 0x0, 0x6, 0x7fff, 0x800, 0x85a, 0x7f, 0x1ff, 0x9, 0x6, 0x0, 0x2, 0x75d8, 0x5, 0xffffffff, 0x5a, 0x0, 0x5d, 0xe3, 0x4, 0xc]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}]}, @TCA_BPF_FD={0x8, 0x6, r1}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x1b38}}, 0x40001) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000080)) (async) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) (async, rerun: 32) r11 = socket$kcm(0x29, 0x0, 0x0) (rerun: 32) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, &(0x7f00000003c0)={r5}) (async, rerun: 64) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r6, 0x800448d3, &(0x7f00000001c0)={@none, 0xb8, 0xf, 0xacd, 0x8, 0x6, "8f14799bca78e344e5be5acb9917dacff75908a7798cbade2d2672a33fd114da62278df25880ee6e9bc71aa6f9c87cd9571146ab121e3dae350acb3b745361b6bd5a3859ef9e105a64059300b06bcd85361b3358d5d3a874984062cb9b8d715b996a814fde62dd958802b2c5978f795cc56e00793870c07e4f76d6ee9f1ae8eb"}) (rerun: 64) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000480)={'veth1_to_bridge\x00', 0x800}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x1, 0x2, 0x0, {0x60, 0x0, 0x0, r4, {0xc}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80080}, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) 1.765637804s ago: executing program 1 (id=3777): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="85000000ae00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x4007}, 0x4) setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f00000000c0)=0xbfe, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xffffffff00040000, 0x112) socket$vsock_stream(0x28, 0x1, 0x0) (async) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="85000000ae00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x4007}, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f00000000c0)=0xbfe, 0x4) (async) setsockopt$packet_fanout_data(r2, 0x107, 0x16, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r1}, 0x10) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xffffffff00040000, 0x112) (async) 1.709701642s ago: executing program 2 (id=3778): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001c00010028bd7000fcdbdf2507000000", @ANYRES32, @ANYBLOB="8f70120b0a000200aaaaaaaaaabb000004000f"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r0 = socket$inet6(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f00000006c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)}, 0x20000001) recvmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x2042) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="8d80e33cef49e11b064db0930ffa80364160a37e", @ANYRES16=r6, @ANYBLOB="01002cbd700000000000010000001c000180060001000200000008000300ac14141f0800060003000000"], 0x30}, 0x1, 0xff07}, 0x2000000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, 0x0, 0x0}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000019000100000000000000000002"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.698021388s ago: executing program 1 (id=3779): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4004001) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x33, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x100}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20}, 0x8080) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'hsr0\x00', 0x0}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x4c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xf482}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004052}, 0x4004001) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x28, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="ffc30000000000003c0012800c0001006d6163766c616e002c0002800a000900ffffbfffffff00000a000400aaaaaaaaaabb00000600020001000000440003000000000008000500", @ANYRES32=r3], 0x64}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.571388619s ago: executing program 0 (id=3780): socket$packet(0x11, 0x2, 0x300) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) ioctl$FS_IOC_GETFSSYSFSPATH(r3, 0x80811501, &(0x7f00000003c0)={0x80}) 1.561979581s ago: executing program 3 (id=3781): r0 = socket(0x10, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000", @ANYRES32, @ANYBLOB="14000200fe80"], 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000", @ANYRES32, @ANYBLOB="14000200fe80"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000047, 0x0) (async) sendmmsg(r0, &(0x7f0000000000), 0x400000000000047, 0x0) 1.358895795s ago: executing program 2 (id=3782): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x1}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c00018006000600894f"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.237290081s ago: executing program 1 (id=3783): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) socket$inet(0xa, 0x801, 0x84) (async) socket$inet6(0xa, 0x80003, 0xff) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'syztnl1\x00', 0x0}) (async) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000640)={0x18, r4, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008801}, 0xdf9ac13c26e141b3) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004821}, 0x0) (async) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40814) (async) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000a00)="f8b301b59fc16c83f71a96176c16d7adf9fb9d2cee5374c4d0fb4f1a22a6697129c619071c06f8708d49304587246df6d8a7d723d79548e1e9975af38dac177db78a", 0x42) connect$llc(r7, 0x0, 0x0) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_POWER(r8, 0x112, 0x9, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32=r6, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000050000000300"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000b0a500007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.151859891s ago: executing program 3 (id=3784): socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x11, 0xa, 0x300) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="99e0e127caae"}) r1 = socket$key(0xf, 0x3, 0x2) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) (async) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000004c00)=[{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000000)="a9861869a75f66ef7d128ae4230965648a021cdf93508c9706dc1e4d9e1d4c436faf1d2786", 0x25}, {&(0x7f0000000240)="eeb9ff4efd6ce05a6ccd7c", 0xb}], 0x2, &(0x7f0000001480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async) sendmmsg$alg(r3, &(0x7f0000004c00)=[{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000000)="a9861869a75f66ef7d128ae4230965648a021cdf93508c9706dc1e4d9e1d4c436faf1d2786", 0x25}, {&(0x7f0000000240)="eeb9ff4efd6ce05a6ccd7c", 0xb}], 0x2, &(0x7f0000001480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg$unix(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/90, 0x5a}], 0x1}}], 0x1, 0x120, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001380)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4010) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001380)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4010) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r4, 0x6, 0x21, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x3, [@restrict={0xc}, @enum64={0x7, 0x4, 0x0, 0x13, 0x1, 0x4, [{0xb, 0xc, 0x6}, {0x7, 0x6, 0x7}, {0xc, 0x468, 0xfffffff7}, {0x1, 0xfffffff7, 0x81}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xb, 0x4}, {0xd}]}]}, {0x0, [0x2e]}}, &(0x7f0000000440)=""/137, 0x7f, 0x89, 0x0, 0xfffffff9}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x3, [@restrict={0xc}, @enum64={0x7, 0x4, 0x0, 0x13, 0x1, 0x4, [{0xb, 0xc, 0x6}, {0x7, 0x6, 0x7}, {0xc, 0x468, 0xfffffff7}, {0x1, 0xfffffff7, 0x81}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xb, 0x4}, {0xd}]}]}, {0x0, [0x2e]}}, &(0x7f0000000440)=""/137, 0x7f, 0x89, 0x0, 0xfffffff9}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, r5, 0x1, 0x3, 0x5}, 0x50) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r6, 0x28, 0x1, &(0x7f0000001680)=""/54, &(0x7f0000000000)=0x36) accept(r1, &(0x7f0000000600)=@pptp, &(0x7f0000000180)=0x80) (async) accept(r1, &(0x7f0000000600)=@pptp, &(0x7f0000000180)=0x80) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0xf, &(0x7f0000000380)=0x1, 0x2a) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.112484967s ago: executing program 4 (id=3785): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.102032099s ago: executing program 2 (id=3786): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x70, r3, 0x421, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2d}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0xa, 0xfffe, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x3]}}]}}]}, 0x8c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f0000000100)=0x8, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10, 0x1000009}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x3c}, @jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r9) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r11, 0x48212b8952c3aff5, 0x70bd25, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r11, 0x1, 0x40000000, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x8010) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r12, 0x8982, &(0x7f0000001ac0)={0x0, 'batadv0\x00', {0x7}, 0x802}) 234.929239ms ago: executing program 1 (id=3787): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x1e, 0x0, @val=@netfilter={0x1, 0x0, 0xbd2}}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) r2 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x100000000000004, 0x1, 0x8, 0x7fc0000000000000, 0x1, 0xff, 0x100000001, 0x3}, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e23, 0x6, @private1, 0xd1}, 0x1c) sendto$inet6(r3, &(0x7f0000000340)="e9f3", 0x2, 0x4000000, &(0x7f00000000c0)={0xa, 0x4e24, 0x7fffffff, @private1, 0x7b7}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={r5, 0x4}, 0x8) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 233.211296ms ago: executing program 0 (id=3788): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc000000000000000000000000000000ffffffff00000000000000000000000000000004000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a00", @ANYRESOCT], 0xb8}}, 0x4000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000069114e0000000000850000001a0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000210400000000020000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010065727370616e0000040002800a0001000000000000000000"], 0x40}}, 0x840) getsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 181.087152ms ago: executing program 4 (id=3789): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x343b}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044890}, 0x4044) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x300, 0x70bd2a, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x848235a6f513d131) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, r3, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf15d}}]}, 0x88}}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 164.486835ms ago: executing program 3 (id=3790): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000005e40)={0x0, 0x0, 0x0}, 0x8004) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x800) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000080)={r9, 0x40, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={r9, 0x68, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x10, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x5}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e25, @rand_addr=0x64010100}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e24, 0x0, @mcast2, 0x4}]}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000280)=@assoc_id=r10, 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 113.935808ms ago: executing program 2 (id=3791): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000001100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000005c00)={0xa, 0x4e22, 0x9, @remote}, 0x1c, &(0x7f0000006d40)=[{&(0x7f0000005c40)="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", 0x591}], 0x1, &(0x7f0000000380)=[@dstopts={{0x20, 0x29, 0x37, {0x2f, 0x0, '\x00', [@generic={0xff}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @dstopts={{0x18, 0x29, 0x37, {0x4}}}], 0x50}}], 0x1, 0x24000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x133, 0x27, &(0x7f00000003c0)="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"/307, &(0x7f0000000000)=""/39, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 55.039652ms ago: executing program 0 (id=3792): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=@newqdisc={0x130, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x100, 0x2, {{0xfffffffe, 0x2, 0x40, 0x7, 0xe9, 0xcc36}, [@TCA_NETEM_LOSS={0xb4, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x74, 0x2, {0x1, 0xffff, 0x0, 0x6}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xfffffffa, 0xa, 0x4}}, @NETEM_LOSS_GE={0x11, 0x2, {0x1, 0x9, 0x1, 0x8}}, @NETEM_LOSS_GI={0x18, 0x1, {0xcfbb, 0x2, 0x10001, 0x8, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x5, 0x1003, 0xb}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x0, 0xfffff001, 0xf6, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x3, 0x5, 0x4, 0xea}}, @NETEM_LOSS_GI={0x18, 0x1, {0x6, 0x8, 0x10000, 0x2, 0x7fff}}]}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x8, 0x1000}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xbba5, 0x2}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xff}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x130}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000800cb80040008d4f16213d5957e9aaf100080100001800cf20f8004000f80040808800c0002000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f0000000380)=ANY=[@ANYRES32=r5]) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r8 = accept$alg(r7, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead34cd1eaf2108c04de96e99fa4435f9041368e8dfec6af2ae8080b56c53c12b8431d17955ae1ec78709eee9acf825fdb672651f7eafb44b576930aff4b6a86ced3e4392cfe57a2c11b97e93f38debd6dc69f3a50d5742daa7081df08bd8118dcd6d9d18830c7d79d8", 0x6c}, {&(0x7f0000000240)="23ade41881a1e7ca07379924e2cb441681815fa433e953138ec1eb6c7f56119ff985", 0x22}, {&(0x7f0000000140)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a23", 0x34}, {&(0x7f0000000280)="1b1eb47967b88f89e960c59413baaf1384ad9c758abf845c5714a919ca02735c5514fa78f9f084d72227c1d3f6607ce5a2183a169535d0b2bb594ecb92b8df361bca805ac5595a389d39a58a35c0", 0x4e}], 0x4, 0x0, 0x0, 0x40880}], 0x1, 0x4814) recvmmsg(r8, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000080)}, 0xffffff0b}], 0x2, 0x2001, 0x0) pipe(&(0x7f0000000040)) r9 = socket$inet_sctp(0x2, 0x1, 0x84) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r10, 0x0, 0x40890) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) unshare(0x2c060000) unshare(0x2c020400) setsockopt$IP_VS_SO_SET_DELDEST(r9, 0x0, 0x488, &(0x7f0000000280)={{0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x2000, 0xc24, 0x9, 0xfffffff9}}, 0x44) 0s ago: executing program 2 (id=3793): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r2, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) kernel console output (not intermixed with test programs): ength. [ 408.436082][T15542] netlink: 'syz.4.2415': attribute type 58 has an invalid length. [ 409.105619][T15553] batadv1: entered promiscuous mode [ 409.509187][T15567] __nla_validate_parse: 7 callbacks suppressed [ 409.509206][T15567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2424'. [ 409.545304][T15567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2424'. [ 409.601200][T15569] syzkaller0: entered promiscuous mode [ 409.606997][T15569] syzkaller0: entered allmulticast mode [ 409.674269][T15569] tipc: Enabled bearer , priority 0 [ 409.713013][T15568] tipc: Resetting bearer [ 409.762284][T15568] tipc: Disabling bearer [ 409.804789][T15571] lo speed is unknown, defaulting to 1000 [ 409.873788][T15587] netlink: 'syz.2.2428': attribute type 29 has an invalid length. [ 409.922736][T15587] netlink: 'syz.2.2428': attribute type 29 has an invalid length. [ 409.958947][T15587] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2428'. [ 410.040054][T15594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2430'. [ 410.833815][T15606] erspan0: left promiscuous mode [ 410.839605][T15606] syz_tun: left promiscuous mode [ 410.891345][T15626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2436'. [ 411.022231][T15606] veth1_macvtap: left allmulticast mode [ 411.062000][T15606] gretap1: left allmulticast mode [ 411.076507][T15606] bond8: left promiscuous mode [ 411.084888][T15606] bond8: left allmulticast mode [ 411.097998][T15606] veth1_to_hsr: left allmulticast mode [ 411.105151][T15606] veth1_to_hsr: left promiscuous mode [ 411.112264][T15606] macvtap1: left promiscuous mode [ 411.117429][T15606] macvtap1: left allmulticast mode [ 411.142047][T15606] syzkaller0: left promiscuous mode [ 411.147283][T15606] syzkaller0: left allmulticast mode [ 411.161612][T15606] gretap3: left promiscuous mode [ 411.168845][ T6043] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.208428][ T6043] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.228663][ T6043] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.258395][ T6043] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.680323][T15653] lo speed is unknown, defaulting to 1000 [ 412.023934][T15675] pim6reg1: entered promiscuous mode [ 412.029559][T15675] pim6reg1: entered allmulticast mode [ 412.289403][T15695] netlink: 'syz.1.2452': attribute type 1 has an invalid length. [ 412.335692][T15699] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2452'. [ 412.539603][T15707] netlink: 'syz.4.2455': attribute type 61 has an invalid length. [ 412.562352][T15707] netlink: 'syz.4.2455': attribute type 62 has an invalid length. [ 412.897268][T15724] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2463'. [ 412.923821][T15726] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2462'. [ 413.106988][T15743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2469'. [ 413.475500][T15759] netlink: 'syz.1.2474': attribute type 2 has an invalid length. [ 413.486618][T15759] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2474'. [ 413.651442][T15764] lo speed is unknown, defaulting to 1000 [ 413.846225][T15776] netlink: 'syz.3.2477': attribute type 58 has an invalid length. [ 413.915727][T15774] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 414.072209][T15784] netlink: 'syz.0.2479': attribute type 1 has an invalid length. [ 414.208898][T15787] veth12: entered allmulticast mode [ 414.333543][T15790] bond12 (unregistering): Released all slaves [ 414.442475][T15797] xt_l2tp: v2 doesn't support IP mode [ 414.831801][T15818] x_tables: duplicate underflow at hook 2 [ 415.113124][T15827] __nla_validate_parse: 3 callbacks suppressed [ 415.113146][T15827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2490'. [ 415.370940][T15839] gretap0: left promiscuous mode [ 415.420606][T15839] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.443272][T15839] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 415.868030][T15858] lo speed is unknown, defaulting to 1000 [ 416.125602][T15863] block nbd5: Unsupported socket: should be TCP or UNIX. [ 416.200590][T15867] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2499'. [ 416.211800][T15867] openvswitch: netlink: Flow key attr not present in new flow. [ 416.310034][T15861] lo speed is unknown, defaulting to 1000 [ 416.494893][T15885] sctp: [Deprecated]: syz.3.2502 (pid 15885) Use of struct sctp_assoc_value in delayed_ack socket option. [ 416.494893][T15885] Use struct sctp_sack_info instead [ 416.554071][T15883] syzkaller0: left promiscuous mode [ 416.559345][T15883] syzkaller0: left allmulticast mode [ 416.646533][T15883] netlink: 'syz.1.2503': attribute type 12 has an invalid length. [ 416.655107][T15883] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2503'. [ 416.675428][T15894] netlink: 292 bytes leftover after parsing attributes in process `syz.0.2505'. [ 416.706117][T15894] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2505'. [ 416.721064][T15894] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2505'. [ 416.736631][T15894] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2505'. [ 417.768464][T15928] lo speed is unknown, defaulting to 1000 [ 417.849049][T15940] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2516'. [ 417.880154][T15940] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2516'. [ 417.900944][T15940] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2516'. [ 417.918621][T15942] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 417.957926][T15945] syzkaller1: entered promiscuous mode [ 417.963962][T15945] syzkaller1: entered allmulticast mode [ 418.062384][T15947] lo speed is unknown, defaulting to 1000 [ 418.237521][T15954] netlink: 'syz.4.2520': attribute type 7 has an invalid length. [ 418.246407][T15954] netlink: 'syz.4.2520': attribute type 8 has an invalid length. [ 418.788628][T15970] pim6reg: entered allmulticast mode [ 418.808220][T15975] pim6reg: left allmulticast mode [ 419.084849][T15995] lo speed is unknown, defaulting to 1000 [ 419.442656][T16011] netlink: 'syz.2.2535': attribute type 3 has an invalid length. [ 419.502452][T16011] netlink: 'syz.2.2535': attribute type 1 has an invalid length. [ 419.731026][T16012] lo speed is unknown, defaulting to 1000 [ 419.843439][T16023] netlink: 'syz.0.2539': attribute type 1 has an invalid length. [ 419.853264][T16023] netlink: 'syz.0.2539': attribute type 2 has an invalid length. [ 419.894926][T16027] netlink: 'syz.0.2539': attribute type 1 has an invalid length. [ 419.945045][T16027] netlink: 'syz.0.2539': attribute type 2 has an invalid length. [ 419.983101][T16024] lo speed is unknown, defaulting to 1000 [ 420.208176][T16035] tipc: Enabling of bearer rejected, media not registered [ 420.260423][T16035] netlink: 'syz.0.2541': attribute type 13 has an invalid length. [ 420.540247][T16035] gretap0: refused to change device tx_queue_len [ 420.546662][T16035] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 420.752860][T16044] lo speed is unknown, defaulting to 1000 [ 420.781180][T16055] __nla_validate_parse: 13 callbacks suppressed [ 420.781201][T16055] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2547'. [ 420.820819][T16055] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2547'. [ 421.203158][T16069] lo speed is unknown, defaulting to 1000 [ 421.445392][T16078] sctp: [Deprecated]: syz.4.2552 (pid 16078) Use of struct sctp_assoc_value in delayed_ack socket option. [ 421.445392][T16078] Use struct sctp_sack_info instead [ 421.918040][T16104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2558'. [ 422.139153][T16112] lo speed is unknown, defaulting to 1000 [ 422.241069][T16123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2565'. [ 422.271276][T16123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2565'. [ 422.287531][T16123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2565'. [ 422.333935][T16123] IPVS: set_ctl: invalid protocol: 33 0.0.15.32:20004 [ 422.788567][T16147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2570'. [ 423.003877][T16152] delete_channel: no stack [ 423.297338][T16157] lo speed is unknown, defaulting to 1000 [ 424.024359][T16180] openvswitch: netlink: Multiple metadata blocks provided [ 424.591193][T16193] veth0_to_bridge: entered promiscuous mode [ 424.809086][T16188] veth0_to_bridge: left promiscuous mode [ 424.998575][T16219] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2593'. [ 425.094628][T16219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2593'. [ 425.804494][T16273] : renamed from bond_slave_0 [ 426.308792][T16277] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2603'. [ 426.985843][T16302] tipc: Enabled bearer , priority 0 [ 426.995550][T16302] syzkaller0: entered promiscuous mode [ 427.002510][T16302] syzkaller0: entered allmulticast mode [ 427.075796][T16302] tipc: Resetting bearer [ 427.297832][T16308] lo speed is unknown, defaulting to 1000 [ 427.454555][T16316] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2612'. [ 427.468009][T16319] netlink: 'syz.0.2613': attribute type 1 has an invalid length. [ 427.596082][T16325] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 427.723852][T16298] tipc: Resetting bearer [ 427.752595][T16298] tipc: Disabling bearer [ 427.867036][T16341] syzkaller0: entered promiscuous mode [ 427.874429][T16341] syzkaller0: entered allmulticast mode [ 427.915259][T16341] netlink: 'syz.4.2621': attribute type 9 has an invalid length. [ 428.035308][T16342] can: request_module (can-proto-3) failed. [ 428.091642][T16337] block nbd5: shutting down sockets [ 428.259556][T16361] netlink: 'syz.2.2626': attribute type 15 has an invalid length. [ 428.286778][T16361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2626'. [ 428.303882][T16347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2622'. [ 428.368538][T16361] netlink: 'syz.2.2626': attribute type 15 has an invalid length. [ 428.377791][ T1132] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 428.386782][T16361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2626'. [ 428.423245][ T1132] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 428.471510][ T1132] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 428.501581][ T1132] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 428.829006][T16382] lo speed is unknown, defaulting to 1000 [ 429.157248][T16390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.229882][T16390] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 429.358070][T16407] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2637'. [ 429.480655][T16405] lo speed is unknown, defaulting to 1000 [ 430.127801][T16434] lo speed is unknown, defaulting to 1000 [ 430.241063][T16440] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2646'. [ 430.296679][T16442] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2646'. [ 430.715828][T16450] netlink: 'syz.2.2649': attribute type 1 has an invalid length. [ 430.716934][T16455] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2650'. [ 430.735258][T16457] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2650'. [ 430.756272][T16450] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 430.812404][T16448] syzkaller1: entered promiscuous mode [ 430.891302][T16448] syzkaller1: entered allmulticast mode [ 430.899165][T16466] netlink: 'syz.4.2648': attribute type 4 has an invalid length. [ 431.372164][T16486] lo speed is unknown, defaulting to 1000 [ 431.385490][T16487] lo speed is unknown, defaulting to 1000 [ 431.478661][T16499] __nla_validate_parse: 2 callbacks suppressed [ 431.478681][T16499] netlink: 516 bytes leftover after parsing attributes in process `syz.0.2661'. [ 431.838826][T16518] netlink: 'syz.4.2666': attribute type 1 has an invalid length. [ 431.943131][T16519] bond0: (slave rose0): Error: Device can not be enslaved while up [ 432.036099][T16518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.084162][T16518] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2666'. [ 432.188418][T16527] batadv0: mtu less than device minimum [ 432.307548][T16532] syzkaller1: entered promiscuous mode [ 432.330694][T16532] syzkaller1: entered allmulticast mode [ 432.370142][T16531] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2668'. [ 432.401454][T16532] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2668'. [ 432.629290][T16509] mpoa:mpoad_close: () going down [ 432.923731][T16543] lo speed is unknown, defaulting to 1000 [ 433.067154][T16554] netlink: 'syz.3.2673': attribute type 4 has an invalid length. [ 433.239104][T16539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 433.302740][T16564] syzkaller0: entered promiscuous mode [ 433.308286][T16564] syzkaller0: entered allmulticast mode [ 433.318451][T16564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2677'. [ 433.373875][T16570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2677'. [ 433.613626][T16580] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2679'. [ 433.714755][T16582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2681'. [ 433.838493][T16584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2682'. [ 434.282131][T16606] netlink: 'syz.1.2689': attribute type 1 has an invalid length. [ 434.300904][T16606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.335029][T16607] netlink: 'syz.1.2689': attribute type 4 has an invalid length. [ 434.346305][T16610] netlink: 'syz.0.2688': attribute type 8 has an invalid length. [ 434.360594][T16607] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2689'. [ 434.431648][T16617] syzkaller0: entered promiscuous mode [ 434.437322][T16617] syzkaller0: entered allmulticast mode [ 434.763470][T16641] .70: renamed from hsr0 [ 434.773267][T16643] sctp: [Deprecated]: syz.2.2699 (pid 16643) Use of int in max_burst socket option. [ 434.773267][T16643] Use struct sctp_assoc_value instead [ 434.803280][T16641] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 434.847631][T16641] .70: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 434.878174][T16641] .70: entered allmulticast mode [ 434.891671][T16641] hsr_slave_0: entered allmulticast mode [ 434.897507][T16641] hsr_slave_1: entered allmulticast mode [ 434.906344][T16641] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check. [ 435.014314][T16654] netlink: 'syz.2.2701': attribute type 39 has an invalid length. [ 435.608724][ T6043] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 8472 - 0 [ 435.619955][ T6043] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 8472 - 0 [ 435.749553][ T6043] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 8472 - 0 [ 435.800990][ T6043] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 8472 - 0 [ 436.003074][T16700] rdma_op ffff88807fbb19f0 conn xmit_rdma 0000000000000000 [ 436.214107][T16711] team0: Port device bond0 removed [ 436.242286][T16711] bond0: (slave dummy0): Releasing backup interface [ 436.270578][T16711] bridge0: port 3(batadv0) entered disabled state [ 436.287516][T16722] netlink: 'syz.1.2716': attribute type 1 has an invalid length. [ 436.319115][T16711] bridge_slave_0: left allmulticast mode [ 436.339728][T16711] bridge_slave_0: left promiscuous mode [ 436.345598][T16711] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.377144][T16711] bridge_slave_1: left allmulticast mode [ 436.394620][T16711] bridge_slave_1: left promiscuous mode [ 436.404127][T16711] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.442705][T16711] bond0: (slave bond_slave_0): Releasing backup interface [ 436.467039][T16711] bond0: (slave bond_slave_1): Releasing backup interface [ 436.479163][T16711] team0: Port device team_slave_0 removed [ 436.487463][T16711] team0: Port device team_slave_1 removed [ 436.493784][T16711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.502340][T16711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.510615][T16711] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 436.545440][T16729] sit3: entered promiscuous mode [ 436.582204][T16723] lo speed is unknown, defaulting to 1000 [ 437.462236][T16769] __nla_validate_parse: 4 callbacks suppressed [ 437.462255][T16769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2731'. [ 437.554763][T16771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2732'. [ 437.675964][ T5834] block nbd5: Receive control failed (result -107) [ 437.808865][T16786] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2736'. [ 437.889931][T16786] bridge6: entered allmulticast mode [ 438.141539][T16803] netlink: 'syz.3.2742': attribute type 1 has an invalid length. [ 438.315219][T16817] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.2747'. [ 438.362052][T16818] bridge0: port 1(erspan0) entered blocking state [ 438.389568][T16818] bridge0: port 1(erspan0) entered disabled state [ 438.410104][T16818] erspan0: entered allmulticast mode [ 438.429855][T16818] erspan0: left allmulticast mode [ 438.468005][T16822] syzkaller0: tun_chr_ioctl cmd 21731 [ 438.485867][T16822] syzkaller0: tun_chr_ioctl cmd 1074025688 [ 438.512953][ T30] audit: type=1107 audit(1768826000.141:8): pid=16824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='~ TH>?hTM*UVW쐑hJ~1̉ـyu' [ 438.611055][T16831] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 438.641889][T16831] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2749'. [ 438.680995][T16831] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2749'. [ 438.695529][T16831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2749'. [ 438.992578][T16848] xt_TCPMSS: Only works on TCP SYN packets [ 439.189287][T16854] SET target dimension over the limit! [ 439.419062][T16858] syzkaller0: entered promiscuous mode [ 439.483086][T16862] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2760'. [ 439.550992][T16858] syzkaller0: entered allmulticast mode [ 439.615511][T16860] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2760'. [ 439.910843][T16873] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2764'. [ 439.986437][T16873] syzkaller0: entered promiscuous mode [ 440.009775][T16873] syzkaller0: entered allmulticast mode [ 440.023125][T16881] wg1 speed is unknown, defaulting to 1000 [ 440.063819][T16881] wg1 speed is unknown, defaulting to 1000 [ 440.172065][T16881] wg1 speed is unknown, defaulting to 1000 [ 440.328037][T16881] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 440.414556][T16881] wg1 speed is unknown, defaulting to 1000 [ 440.472427][T16881] wg1 speed is unknown, defaulting to 1000 [ 440.503925][T16881] wg1 speed is unknown, defaulting to 1000 [ 440.549089][T16881] wg1 speed is unknown, defaulting to 1000 [ 440.565150][ T6648] udevd[6648]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 440.600918][T16881] wg1 speed is unknown, defaulting to 1000 [ 440.613951][ T6648] udevd[6648]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 440.878978][T16917] netlink: 'syz.2.2773': attribute type 8 has an invalid length. [ 440.898695][T16917] geneve3: entered promiscuous mode [ 440.941120][T16917] geneve3: entered allmulticast mode [ 440.972168][ T44] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.987670][ T44] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.036183][ T44] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.075515][ T44] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.407127][T16942] syzkaller0: entered promiscuous mode [ 441.447808][T16942] syzkaller0: entered allmulticast mode [ 441.541576][T16944] bond0: (slave rose0): Error: Device can not be enslaved while up [ 441.564572][T16945] bond0: (slave rose0): Error: Device can not be enslaved while up [ 442.226658][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 442.257930][T16981] netlink: 'syz.3.2785': attribute type 8 has an invalid length. [ 442.505874][T16998] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 442.585777][T17003] __nla_validate_parse: 7 callbacks suppressed [ 442.585798][T17003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2789'. [ 442.675337][T17010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2789'. [ 442.704940][T17010] 8021q: VLANs not supported on ip6tnl0 [ 442.816321][T17016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2789'. [ 442.925821][T17024] netlink: 'syz.0.2796': attribute type 62 has an invalid length. [ 442.997081][ T5834] block nbd6: Receive control failed (result -32) [ 443.111669][T17028] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2798'. [ 443.171211][T17030] lo speed is unknown, defaulting to 1000 [ 443.179289][T17030] wg1 speed is unknown, defaulting to 1000 [ 443.267262][T17033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2799'. [ 443.293362][T17033] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2799'. [ 443.329111][T17036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2799'. [ 443.368823][T17038] IPVS: set_ctl: invalid protocol: 50 172.30.0.3:20003 [ 443.919548][T17067] netlink: 'syz.0.2808': attribute type 1 has an invalid length. [ 443.951000][T17067] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2808'. [ 444.000684][T17067] netlink: 658 bytes leftover after parsing attributes in process `syz.0.2808'. [ 444.025576][T17067] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2808'. [ 444.075704][T17067] tipc: Started in network mode [ 444.081648][T17067] tipc: Node identity 2a615f92e657, cluster identity 4711 [ 444.089344][T17067] tipc: Enabled bearer , priority 0 [ 444.114632][T17067] syzkaller0: entered promiscuous mode [ 444.121339][T17067] syzkaller0: entered allmulticast mode [ 444.166065][T17067] tipc: Resetting bearer [ 444.194419][T17064] tipc: Resetting bearer [ 444.224719][T17064] tipc: Disabling bearer [ 444.240700][T17080] netlink: 'syz.3.2812': attribute type 29 has an invalid length. [ 444.264877][T17080] netlink: 'syz.3.2812': attribute type 29 has an invalid length. [ 444.406440][T17082] netlink: 'syz.0.2813': attribute type 1 has an invalid length. [ 444.458348][T17082] 8021q: adding VLAN 0 to HW filter on device bond12 [ 444.501774][T17084] bond12: (slave geneve4): making interface the new active one [ 444.537173][T17084] bond12: (slave geneve4): Enslaving as an active interface with an up link [ 444.568944][ T44] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.595943][ T44] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.631011][ T44] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.647279][ T44] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.046604][T17100] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 445.207376][T17106] lo speed is unknown, defaulting to 1000 [ 445.215570][T17109] netlink: 'syz.3.2822': attribute type 1 has an invalid length. [ 445.227141][T17106] wg1 speed is unknown, defaulting to 1000 [ 445.294950][T17109] bond8: entered promiscuous mode [ 445.300634][T17109] bond8: entered allmulticast mode [ 445.306493][T17109] 8021q: adding VLAN 0 to HW filter on device bond8 [ 445.397020][T17113] lo speed is unknown, defaulting to 1000 [ 445.417608][T17122] erspan1: entered allmulticast mode [ 445.431603][T17122] bond8: (slave erspan1): making interface the new active one [ 445.451485][T17122] erspan1: entered promiscuous mode [ 445.462059][T17122] bond8: (slave erspan1): Enslaving as an active interface with an up link [ 445.536527][T17113] wg1 speed is unknown, defaulting to 1000 [ 446.128166][T17144] syzkaller0: entered allmulticast mode [ 446.147482][T17144] syzkaller0: entered promiscuous mode [ 446.167324][T17144] syzkaller0 (unregistering): left promiscuous mode [ 446.184516][T17144] syzkaller0 (unregistering): left allmulticast mode [ 446.293776][T17159] netlink: 'syz.4.2829': attribute type 9 has an invalid length. [ 446.303239][T17159] netlink: 'syz.4.2829': attribute type 11 has an invalid length. [ 446.312653][T17159] netlink: 'syz.4.2829': attribute type 12 has an invalid length. [ 446.504685][T17166] tipc: Enabled bearer , priority 0 [ 446.723809][T17174] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 446.773560][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.781546][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.807149][T17177] tipc: Enabled bearer , priority 0 [ 446.820654][T17177] syzkaller0: entered promiscuous mode [ 446.839740][T17177] syzkaller0: entered allmulticast mode [ 446.954024][T17177] tunl0: mtu less than device minimum [ 446.966528][T17175] tipc: Resetting bearer [ 447.009489][T17183] sctp: [Deprecated]: syz.4.2838 (pid 17183) Use of struct sctp_assoc_value in delayed_ack socket option. [ 447.009489][T17183] Use struct sctp_sack_info instead [ 447.034590][T17175] tipc: Disabling bearer [ 447.418655][T17211] bridge6: port 1(veth7) entered blocking state [ 447.474712][T17211] bridge6: port 1(veth7) entered disabled state [ 447.513607][T17211] veth7: entered allmulticast mode [ 447.522528][T17211] veth7: entered promiscuous mode [ 447.542374][T17215] bridge6: port 2(veth0_to_bond) entered blocking state [ 447.549545][T17215] bridge6: port 2(veth0_to_bond) entered disabled state [ 447.601454][T17215] veth0_to_bond: entered allmulticast mode [ 447.616507][T17219] __nla_validate_parse: 8 callbacks suppressed [ 447.616526][T17219] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.2848'. [ 447.628588][T17215] veth0_to_bond: entered promiscuous mode [ 447.697577][T17216] bridge6: port 3(veth9) entered blocking state [ 447.705540][T17216] bridge6: port 3(veth9) entered disabled state [ 447.712936][T17216] veth9: entered allmulticast mode [ 447.721333][T17216] veth9: entered promiscuous mode [ 447.799239][ T5149] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 447.812527][ T5149] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 447.822406][ T5149] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 447.841321][ T5149] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 447.861719][ T5149] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 447.911209][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 447.918670][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 447.927397][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 447.944751][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 447.954600][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 448.013811][T17225] lo speed is unknown, defaulting to 1000 [ 448.022697][T17225] wg1 speed is unknown, defaulting to 1000 [ 448.691528][T17258] syzkaller0: entered promiscuous mode [ 448.697053][T17258] syzkaller0: entered allmulticast mode [ 449.276557][T17293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2865'. [ 450.051351][ T5149] Bluetooth: hci5: command tx timeout [ 450.789292][T17225] chnl_net:caif_netlink_parms(): no params data found [ 450.799109][T17299] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2866'. [ 450.849144][T17303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2868'. [ 450.861925][T17303] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2868'. [ 450.873716][T17303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2868'. [ 450.884192][T17303] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2868'. [ 450.894334][T17303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2868'. [ 450.942898][T17303] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2868'. [ 451.102528][T17311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2869'. [ 451.201414][T17311] netlink: 'syz.0.2869': attribute type 7 has an invalid length. [ 451.221883][T17225] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.231733][T17225] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.239076][T17225] bridge_slave_0: entered allmulticast mode [ 451.258458][T17225] bridge_slave_0: entered promiscuous mode [ 451.301738][T17225] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.319505][T17225] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.565264][T17225] bridge_slave_1: entered allmulticast mode [ 451.597476][T17225] bridge_slave_1: entered promiscuous mode [ 451.742380][T17225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.781113][T17225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.913684][T17225] team0: Port device team_slave_0 added [ 451.934401][T17225] team0: Port device team_slave_1 added [ 452.015842][T17225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.033734][T17225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.109969][T17225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.130113][ T5149] Bluetooth: hci5: command tx timeout [ 452.139583][T17225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.159949][T17225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.186705][T17225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.429247][T17225] hsr_slave_0: entered promiscuous mode [ 452.446794][T17225] hsr_slave_1: entered promiscuous mode [ 452.463905][T17225] debugfs: 'hsr0' already exists in 'hsr' [ 452.484122][T17225] Cannot create hsr debugfs directory [ 452.666673][T17338] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20001 [ 452.699408][T17336] lo speed is unknown, defaulting to 1000 [ 452.746692][T17336] wg1 speed is unknown, defaulting to 1000 [ 453.323241][T17348] netlink: 'syz.0.2880': attribute type 49 has an invalid length. [ 453.691553][T17225] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 453.749603][T17225] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 453.792284][T17225] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 453.828311][T17225] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 454.209873][ T5149] Bluetooth: hci5: command tx timeout [ 454.255443][T17225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.316331][T17225] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.332318][ T6041] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.339605][ T6041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.364864][ T6041] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.372214][ T6041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.929904][T17390] __nla_validate_parse: 1 callbacks suppressed [ 454.929933][T17390] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2886'. [ 454.969451][T17225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.982715][T17390] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2886'. [ 455.202978][T17394] tipc: Enabling of bearer rejected, already enabled [ 455.498420][T17407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2890'. [ 455.719094][T17412] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.2891'. [ 455.842892][T17418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2892'. [ 455.868347][T17418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2892'. [ 455.921705][T17225] veth0_vlan: entered promiscuous mode [ 455.979102][T17225] veth1_vlan: entered promiscuous mode [ 456.097449][T17225] veth0_macvtap: entered promiscuous mode [ 456.154856][T17225] veth1_macvtap: entered promiscuous mode [ 456.206231][T17225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.246235][T17225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.278453][ T1132] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.294869][ T5149] Bluetooth: hci5: command tx timeout [ 456.321067][ T1132] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.341898][ T1132] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.376668][ T1132] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.477868][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.497319][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.615728][ T4103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.641475][ T4103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.907555][T17441] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 457.468804][T17461] netlink: 'syz.0.2902': attribute type 30 has an invalid length. [ 457.498308][T17463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2901'. [ 457.611461][T17471] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2901'. [ 457.641198][T17472] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2904'. [ 457.713732][T17472] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2904'. [ 458.138479][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 458.156304][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 458.168180][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 458.177824][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 458.187159][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 458.265613][T17486] lo speed is unknown, defaulting to 1000 [ 458.277287][T17486] wg1 speed is unknown, defaulting to 1000 [ 458.354085][T17490] netlink: 'syz.0.2910': attribute type 1 has an invalid length. [ 458.506921][T17490] 8021q: adding VLAN 0 to HW filter on device bond14 [ 458.616094][T17501] vlan4: entered allmulticast mode [ 458.637201][T17501] bond14: entered allmulticast mode [ 458.696145][T17490] bond14: (slave gretap3): making interface the new active one [ 458.731950][T17490] gretap3: entered allmulticast mode [ 458.765667][T17490] bond14: (slave gretap3): Enslaving as an active interface with an up link [ 459.141089][T17486] chnl_net:caif_netlink_parms(): no params data found [ 459.621862][T17486] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.660407][T17486] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.683075][T17486] bridge_slave_0: entered allmulticast mode [ 459.721825][T17486] bridge_slave_0: entered promiscuous mode [ 459.762165][T17486] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.782610][T17486] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.801832][T17486] bridge_slave_1: entered allmulticast mode [ 459.824235][T17486] bridge_slave_1: entered promiscuous mode [ 459.932869][T17486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.965409][T17486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.039208][T17580] .`: left allmulticast mode [ 460.044737][T17580] : left allmulticast mode [ 460.049672][T17580] bridge0: port 3(.`) entered disabled state [ 460.074102][T17580] x9: left allmulticast mode [ 460.078948][T17580] x9: left promiscuous mode [ 460.083195][T17584] __nla_validate_parse: 5 callbacks suppressed [ 460.083264][T17584] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2935'. [ 460.111230][T17580] bridge0: port 1(1x9) entered disabled state [ 460.175167][T17580] .`: (slave 30): Releasing backup interface [ 460.236466][T17580] : left promiscuous mode [ 460.286605][T17580] team0: Port device team_slave_0 removed [ 460.292905][ T5149] Bluetooth: hci0: command tx timeout [ 460.321753][T17580] team0: Port device team_slave_1 removed [ 460.328869][T17580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.349610][T17580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.383935][T17580] bond2: (slave bridge3): Releasing active interface [ 460.442284][T17580] bond0: (slave bridge9): Removing an active aggregator [ 460.460941][T17580] bond0: (slave bridge9): Releasing backup interface [ 460.490383][T17580] bridge9: left promiscuous mode [ 460.495556][T17580] bridge9: left allmulticast mode [ 460.569887][T17486] team0: Port device team_slave_0 added [ 460.589880][T17486] team0: Port device team_slave_1 added [ 460.730572][T17486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.753331][T17486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.814521][T17486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.847095][T17486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.875380][T17486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.949711][T17486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.102390][T17612] netlink: 'syz.0.2941': attribute type 1 has an invalid length. [ 461.133890][T17486] hsr_slave_0: entered promiscuous mode [ 461.141774][T17486] hsr_slave_1: entered promiscuous mode [ 461.148613][T17486] debugfs: 'hsr0' already exists in 'hsr' [ 461.154559][T17486] Cannot create hsr debugfs directory [ 461.246360][T17612] 8021q: adding VLAN 0 to HW filter on device bond15 [ 461.372822][T17617] bridge13: entered promiscuous mode [ 461.400413][T17617] bridge13: entered allmulticast mode [ 461.427907][T17617] team0: Port device bridge13 added [ 461.516459][T17624] bridge0: port 1(team0) entered blocking state [ 461.541177][T17624] bridge0: port 1(team0) entered disabled state [ 461.547668][T17624] team0: entered allmulticast mode [ 461.595636][T17627] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2945'. [ 461.618921][T17624] team0: entered promiscuous mode [ 461.726048][T17638] netlink: 'syz.4.2948': attribute type 10 has an invalid length. [ 461.822958][T17642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2950'. [ 462.026518][T17642] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2950'. [ 462.216495][T17654] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2953'. [ 462.233298][T17654] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2953'. [ 462.369941][ T5149] Bluetooth: hci0: command tx timeout [ 462.485315][T17663] netlink: 'syz.4.2955': attribute type 1 has an invalid length. [ 462.662559][T17486] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 462.705488][T17486] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 462.743027][T17486] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 462.776007][T17674] netlink: 'syz.0.2957': attribute type 1 has an invalid length. [ 462.797304][T17486] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 462.802959][T17671] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2956'. [ 462.815492][T17672] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 462.827399][T17674] netlink: 'syz.0.2957': attribute type 1 has an invalid length. [ 462.876820][T17677] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2958'. [ 462.888423][T17674] netlink: 'syz.0.2957': attribute type 1 has an invalid length. [ 462.937500][T17674] netlink: 'syz.0.2957': attribute type 1 has an invalid length. [ 462.967506][T17674] netlink: 'syz.0.2957': attribute type 1 has an invalid length. [ 462.988708][T17674] netlink: 'syz.0.2957': attribute type 1 has an invalid length. [ 463.004993][T17674] netlink: 'syz.0.2957': attribute type 1 has an invalid length. [ 463.045467][T17674] netlink: 'syz.0.2957': attribute type 1 has an invalid length. [ 463.081044][T17674] netlink: 'syz.0.2957': attribute type 1 has an invalid length. [ 463.211250][T17693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2960'. [ 463.237452][T17693] block nbd7: Unsupported socket: should be TCP or UNIX. [ 463.336744][T17486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.352861][T17698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2961'. [ 463.378928][T17703] team0: left allmulticast mode [ 463.389799][T17703] team0: left promiscuous mode [ 463.420474][T17703] bridge0: port 1(team0) entered disabled state [ 463.485390][T17703] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.507697][T17703] team0: entered promiscuous mode [ 463.514706][T17703] .`: (slave team0): Enslaving as an active interface with an up link [ 463.534130][T17486] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.582712][ T6041] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.589995][ T6041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.668403][T17709] lo speed is unknown, defaulting to 1000 [ 463.691813][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.699088][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.728146][T17709] wg1 speed is unknown, defaulting to 1000 [ 463.864562][T17721] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 464.441704][T17486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.450037][ T5149] Bluetooth: hci0: command tx timeout [ 464.525662][T17486] veth0_vlan: entered promiscuous mode [ 464.550965][T17486] veth1_vlan: entered promiscuous mode [ 464.712276][T17486] veth0_macvtap: entered promiscuous mode [ 464.745518][T17486] veth1_macvtap: entered promiscuous mode [ 464.830850][T17486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.873283][T17486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.905427][ T1313] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.933802][ T1313] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.952608][ T1313] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.970013][ T1313] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.278770][T17765] lo speed is unknown, defaulting to 1000 [ 465.305753][ T4103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.321062][T17765] wg1 speed is unknown, defaulting to 1000 [ 465.325697][ T4103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.352086][T17776] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 465.488569][T17778] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 465.505168][T17778] bond1 (unregistering): Released all slaves [ 465.559705][ T4103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.576918][ T4103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.689000][T17783] __nla_validate_parse: 5 callbacks suppressed [ 465.689016][T17783] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2981'. [ 465.795303][T11562] IPVS: starting estimator thread 0... [ 465.829414][T17791] x_tables: duplicate underflow at hook 2 [ 465.848069][T17788] bridge_slave_0: left allmulticast mode [ 465.890247][T17788] bridge_slave_0: left promiscuous mode [ 465.896144][T17788] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.940531][T17792] IPVS: using max 25 ests per chain, 60000 per kthread [ 465.951469][T17788] bridge_slave_1: left allmulticast mode [ 465.957179][T17788] bridge_slave_1: left promiscuous mode [ 465.963959][T17788] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.990474][T17788] bond0: (slave bond_slave_0): Releasing backup interface [ 466.018058][T17788] bond0: (slave bond_slave_1): Releasing backup interface [ 466.063948][T17788] team0: Port device team_slave_0 removed [ 466.110712][T17788] team0: Port device team_slave_1 removed [ 466.117656][T17788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.125946][T17788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.143679][T17788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.153484][T17788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.167832][T17788] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 466.194369][T17808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2987'. [ 466.427371][T17817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2988'. [ 466.539847][ T5149] Bluetooth: hci0: command tx timeout [ 467.179411][T17814] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2988'. [ 467.456711][T17831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2991'. [ 467.699070][T17851] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2993'. [ 467.741805][T17838] lo speed is unknown, defaulting to 1000 [ 467.760211][T17838] wg1 speed is unknown, defaulting to 1000 [ 467.803603][T17854] validate_nla: 58 callbacks suppressed [ 467.803622][T17854] netlink: 'syz.3.2994': attribute type 1 has an invalid length. [ 468.675837][T17878] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3000'. [ 468.706663][T17878] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3000'. [ 468.775351][T17878] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3000'. [ 468.803756][T17878] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3000'. [ 468.923241][T17897] syzkaller0: entered promiscuous mode [ 468.928784][T17897] syzkaller0: entered allmulticast mode [ 468.956502][T17896] syzkaller1: entered promiscuous mode [ 468.971717][T17896] syzkaller1: entered allmulticast mode [ 469.153314][T17909] netlink: 'syz.2.3006': attribute type 3 has an invalid length. [ 469.468307][T17921] tipc: Enabled bearer , priority 0 [ 469.479088][T17928] syzkaller0: entered promiscuous mode [ 469.497445][T17928] syzkaller0: entered allmulticast mode [ 469.588676][T17921] tipc: Resetting bearer [ 469.629795][T17920] tipc: Resetting bearer [ 469.697080][T17920] tipc: Disabling bearer [ 469.992514][T17949] syzkaller0: entered promiscuous mode [ 469.998216][T17949] syzkaller0: entered allmulticast mode [ 470.532165][T17963] sctp: [Deprecated]: syz.4.3021 (pid 17963) Use of struct sctp_assoc_value in delayed_ack socket option. [ 470.532165][T17963] Use struct sctp_sack_info instead [ 471.327628][T17978] batadv_slave_1: entered promiscuous mode [ 471.354735][T17977] batadv_slave_1: left promiscuous mode [ 471.422342][T17982] __nla_validate_parse: 149 callbacks suppressed [ 471.422363][T17982] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3029'. [ 471.676458][T17996] vxcan1: entered promiscuous mode [ 471.898609][T18001] lo speed is unknown, defaulting to 1000 [ 471.961704][T18013] lo speed is unknown, defaulting to 1000 [ 471.971073][T18001] wg1 speed is unknown, defaulting to 1000 [ 471.992324][T18013] wg1 speed is unknown, defaulting to 1000 [ 472.347733][T18023] syzkaller0: entered promiscuous mode [ 472.381102][T18023] syzkaller0: entered allmulticast mode [ 472.600268][T18038] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3039'. [ 473.028590][T18045] udevd[18045]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 473.056333][T18047] geneve2: entered promiscuous mode [ 473.093635][T18045] udevd[18045]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 473.122037][T18035] lo speed is unknown, defaulting to 1000 [ 473.143905][T18035] wg1 speed is unknown, defaulting to 1000 [ 473.201005][T18061] netlink: 'syz.2.3046': attribute type 2 has an invalid length. [ 473.214413][T18061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3046'. [ 473.257788][T18063] netlink: 'syz.2.3046': attribute type 2 has an invalid length. [ 473.282011][T18063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3046'. [ 473.423823][T18066] lo speed is unknown, defaulting to 1000 [ 473.438191][T18066] wg1 speed is unknown, defaulting to 1000 [ 473.471471][T18075] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3050'. [ 473.488874][T18075] netlink: 'syz.4.3050': attribute type 1 has an invalid length. [ 474.003606][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 474.015753][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 474.024684][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 474.042911][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 474.055140][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 474.106696][T18093] lo speed is unknown, defaulting to 1000 [ 474.115886][T18093] wg1 speed is unknown, defaulting to 1000 [ 474.330460][T18100] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3056'. [ 474.392795][T18100] netlink: 732 bytes leftover after parsing attributes in process `syz.1.3056'. [ 474.475448][T18093] chnl_net:caif_netlink_parms(): no params data found [ 474.716268][T18109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3058'. [ 474.925050][ T60] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 474.932386][T18116] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20001 [ 474.962051][ T60] netdevsim netdevsim2 eth3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 474.962112][ T60] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.037969][T18118] Cannot find add_set index 0 as target [ 475.051276][ T60] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 475.072184][ T60] netdevsim netdevsim2 eth2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 475.082355][ T60] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.194273][T18118] batadv1: entered promiscuous mode [ 475.319593][ T60] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 475.350342][ T60] netdevsim netdevsim2 eth1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 475.369599][ T60] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.403110][T18137] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3064'. [ 475.443911][T18093] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.455988][T18137] netlink: 'syz.3.3064': attribute type 1 has an invalid length. [ 475.463950][T18093] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.472649][T18093] bridge_slave_0: entered allmulticast mode [ 475.484607][T18140] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 475.484961][T18093] bridge_slave_0: entered promiscuous mode [ 475.517033][T18142] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3064'. [ 475.595089][T18093] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.604697][T18093] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.613614][T18093] bridge_slave_1: entered allmulticast mode [ 475.623241][T18093] bridge_slave_1: entered promiscuous mode [ 475.634432][T18142] 8021q: adding VLAN 0 to HW filter on device bond10 [ 475.662715][ T60] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 475.706627][ T60] netdevsim netdevsim2 eth0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 475.754676][ T60] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.931526][T18093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.982964][T18093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.131412][ T5149] Bluetooth: hci2: command tx timeout [ 476.231903][T18093] team0: Port device team_slave_0 added [ 476.316328][T18093] team0: Port device team_slave_1 added [ 476.436325][T18093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.450926][T18093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.478789][T18093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.501567][T18093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.510250][T18093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.550189][T18093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.595993][ T60] team0: Port device bridge13 removed [ 477.749181][ T60] .` (unregistering): (slave team0): Releasing backup interface [ 477.757702][ T60] team0: left promiscuous mode [ 477.765185][ T60] .` (unregistering): Released all slaves [ 477.782362][ T60] bond1 (unregistering): Released all slaves [ 477.797101][ T60] bond2 (unregistering): Released all slaves [ 477.811478][ T60] bond3 (unregistering): Released all slaves [ 477.937432][ T60] bond4 (unregistering): Released all slaves [ 478.049803][ T60] bond0 (unregistering): Released all slaves [ 478.097992][ T6033] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 478.107581][ T6033] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 478.121803][T11562] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 478.129490][T18205] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 478.212208][ T5149] Bluetooth: hci2: command tx timeout [ 478.352519][T18211] workqueue: name exceeds WQ_NAME_LEN. Truncating to: π,xb)% ]3DL̥ [ 478.474835][T18093] hsr_slave_0: entered promiscuous mode [ 478.504647][T18093] hsr_slave_1: entered promiscuous mode [ 478.515197][T18093] debugfs: 'hsr0' already exists in 'hsr' [ 478.522483][T18093] Cannot create hsr debugfs directory [ 478.564688][T18221] __nla_validate_parse: 6 callbacks suppressed [ 478.564708][T18221] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3084'. [ 478.711186][ T5930] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 478.851351][T11562] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 478.955798][T18239] Bluetooth: MGMT ver 1.23 [ 479.056634][T18241] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3089'. [ 479.536522][T18093] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 479.571197][T18093] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 479.606783][T18093] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 479.642633][T18261] lo speed is unknown, defaulting to 1000 [ 479.648723][T18093] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 479.678878][T18261] wg1 speed is unknown, defaulting to 1000 [ 479.798432][ T60] tipc: Disabling bearer [ 479.819613][ T60] tipc: Left network mode [ 480.003642][T18093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.041947][T18093] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.168316][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.175586][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.184643][T18291] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3101'. [ 480.280971][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.288230][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.292497][ T5149] Bluetooth: hci2: command tx timeout [ 480.442815][T18297] netlink: 'syz.3.3104': attribute type 15 has an invalid length. [ 480.458788][T18297] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3104'. [ 480.478580][T18298] nbd: nbd0 already in use [ 480.613001][T18093] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 480.718002][T18304] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3107'. [ 480.785049][T18309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3106'. [ 480.837413][T18312] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3106'. [ 481.104194][T18319] lo speed is unknown, defaulting to 1000 [ 481.204052][T18319] wg1 speed is unknown, defaulting to 1000 [ 481.308834][T18324] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 481.837219][T18093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.970268][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 482.026585][T18342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3112'. [ 482.336958][T18346] vxlan0: entered promiscuous mode [ 482.349493][T18346] vxlan0: entered allmulticast mode [ 482.372117][ T5149] Bluetooth: hci2: command tx timeout [ 482.469575][T18349] .70: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 482.523125][ T24] wg1 speed is unknown, defaulting to 1000 [ 482.533390][T18093] veth0_vlan: entered promiscuous mode [ 482.538998][T18348] lo speed is unknown, defaulting to 1000 [ 482.545691][T18351] syzkaller0: entered promiscuous mode [ 482.554156][T18351] syzkaller0: entered allmulticast mode [ 482.577465][T18348] wg1 speed is unknown, defaulting to 1000 [ 483.602876][T18093] veth1_vlan: entered promiscuous mode [ 483.728551][T18366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3118'. [ 483.879039][T18093] veth0_macvtap: entered promiscuous mode [ 483.923751][T18093] veth1_macvtap: entered promiscuous mode [ 483.964305][T18093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.979195][T18371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3120'. [ 484.042240][T18093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.096813][T11832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.128255][T11832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.147908][ T60] IPVS: stop unused estimator thread 0... [ 484.155497][T11832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.188528][T11832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.415441][ T9] IPVS: starting estimator thread 0... [ 484.521080][T18398] IPVS: using max 25 ests per chain, 60000 per kthread [ 484.562101][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.584568][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.689319][T18404] wg1 speed is unknown, defaulting to 1000 [ 484.723362][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.756215][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.006723][T18419] syzkaller0: entered promiscuous mode [ 485.025602][T18419] syzkaller0: entered allmulticast mode [ 485.216172][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 485.227183][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 485.238127][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 485.258427][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 485.267575][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 485.300809][T18423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3133'. [ 485.472866][T18437] syzkaller0: entered promiscuous mode [ 485.478572][T18437] syzkaller0: entered allmulticast mode [ 485.683107][T18425] wg1 speed is unknown, defaulting to 1000 [ 485.903278][T18444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3138'. [ 485.913832][T18443] syzkaller0: entered promiscuous mode [ 485.919346][T18443] syzkaller0: entered allmulticast mode [ 485.934054][T18444] bridge_slave_1: left allmulticast mode [ 485.940933][T18444] bridge_slave_1: left promiscuous mode [ 485.946819][T18444] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.969019][T18444] bridge_slave_0: left allmulticast mode [ 485.976731][T18444] bridge_slave_0: left promiscuous mode [ 485.983112][T18444] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.119793][T18448] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 486.136755][T18448] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 486.354137][T18425] chnl_net:caif_netlink_parms(): no params data found [ 486.594367][T18459] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3143'. [ 486.753788][T18425] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.780769][T18425] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.788152][T18425] bridge_slave_0: entered allmulticast mode [ 486.801583][T18425] bridge_slave_0: entered promiscuous mode [ 486.834816][T18472] syzkaller0: entered promiscuous mode [ 486.863832][T18472] syzkaller0: entered allmulticast mode [ 486.882635][T18425] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.951027][T18425] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.958992][T18425] bridge_slave_1: entered allmulticast mode [ 486.981823][T18425] bridge_slave_1: entered promiscuous mode [ 487.147022][T18425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.164641][T18478] netlink: 'syz.2.3147': attribute type 1 has an invalid length. [ 487.172778][T18479] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3147'. [ 487.231125][T18425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.341127][ T5149] Bluetooth: hci3: command tx timeout [ 487.376865][T18425] team0: Port device team_slave_0 added [ 487.421646][T18425] team0: Port device team_slave_1 added [ 487.455102][T18491] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3150'. [ 487.487116][T18491] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3150'. [ 487.526771][T18491] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3150'. [ 487.561083][T18425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.568099][T18425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.642213][T18425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.665032][T18425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.690312][T18425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.759401][T18425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.927847][T18425] hsr_slave_0: entered promiscuous mode [ 487.935989][T18425] hsr_slave_1: entered promiscuous mode [ 487.942737][T18425] debugfs: 'hsr0' already exists in 'hsr' [ 487.958705][T18425] Cannot create hsr debugfs directory [ 488.227646][T18503] wg1 speed is unknown, defaulting to 1000 [ 488.306417][T18509] wg1 speed is unknown, defaulting to 1000 [ 488.593823][T18517] syzkaller0: entered promiscuous mode [ 488.599370][T18517] syzkaller0: entered allmulticast mode [ 488.736483][T18527] tipc: MTU too low for tipc bearer [ 488.918484][T18425] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 489.136311][T18425] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 489.277289][T18425] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 489.398478][T18425] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 489.410505][ T5149] Bluetooth: hci3: command tx timeout [ 489.553051][T18560] bond1: option mode: invalid value (254) [ 489.564884][T18560] bond1 (unregistering): Released all slaves [ 489.615456][T18563] wg1 speed is unknown, defaulting to 1000 [ 489.867207][T18573] xt_TPROXY: Can be used only with -p tcp or -p udp [ 489.945072][T18581] netlink: 'syz.2.3174': attribute type 4 has an invalid length. [ 489.965728][T18581] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3174'. [ 490.058235][T18588] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3175'. [ 490.111030][T18588] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3175'. [ 490.138509][T18570] syzkaller0: entered promiscuous mode [ 490.144409][T18570] syzkaller0: entered allmulticast mode [ 490.157196][T18425] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 490.289858][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 491.495254][ T5149] Bluetooth: hci3: command tx timeout [ 491.993381][T18425] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 492.012706][T18425] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 492.062322][T18425] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 492.276725][T18612] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3180'. [ 492.298283][T18616] syz.1.3181 (18616) used obsolete PPPIOCDETACH ioctl [ 492.318034][T18615] netlink: 'syz.4.3180': attribute type 4 has an invalid length. [ 492.337810][T18425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.346290][T18614] netlink: 'syz.4.3180': attribute type 4 has an invalid length. [ 492.375467][T18425] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.528845][T11842] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.536208][T11842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.582766][T11842] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.590031][T11842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.021307][T18651] netlink: 'syz.1.3190': attribute type 10 has an invalid length. [ 493.050626][T18651] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3190'. [ 493.574786][ T5149] Bluetooth: hci3: command tx timeout [ 493.821815][T18644] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3188'. [ 493.871764][T18651] team0: Port device geneve0 added [ 493.950967][T18671] xt_TCPMSS: Only works on TCP SYN packets [ 494.090587][T18677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3195'. [ 494.108037][T18425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.118024][T18677] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3195'. [ 494.155797][T18677] vlan2: entered allmulticast mode [ 494.189968][T18677] bridge_slave_0: entered allmulticast mode [ 494.215431][T18686] netlink: 2112 bytes leftover after parsing attributes in process `syz.4.3194'. [ 494.225165][T18686] tc_dump_action: action bad kind [ 494.470344][T18425] veth0_vlan: entered promiscuous mode [ 494.521776][T18425] veth1_vlan: entered promiscuous mode [ 494.638022][T18425] veth0_macvtap: entered promiscuous mode [ 494.658981][T18699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3199'. [ 494.683302][T18701] pim6reg: entered allmulticast mode [ 494.698226][T18425] veth1_macvtap: entered promiscuous mode [ 494.707337][T18701] pim6reg: left allmulticast mode [ 494.818800][T18425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.864605][T18425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.907842][ T1115] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.928054][T18713] netlink: 'syz.2.3203': attribute type 1 has an invalid length. [ 494.943442][ T1115] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.955026][T18713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.978946][ T1115] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.002658][ T1115] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.053967][T18721] netlink: 'syz.0.3204': attribute type 12 has an invalid length. [ 495.134829][T18722] netlink: 'syz.0.3204': attribute type 4 has an invalid length. [ 495.639554][T18730] bond1: Removing last arp target with arp_interval on [ 495.671725][T18729] bond2: Removing last arp target with arp_interval on [ 495.680889][T18730] netlink: 'syz.1.3206': attribute type 10 has an invalid length. [ 495.691233][T18730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3206'. [ 495.771076][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.813145][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.948090][ T3459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.970928][ T3459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.087961][T18745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3208'. [ 496.404004][T18762] netlink: 'syz.2.3213': attribute type 4 has an invalid length. [ 496.457509][T18762] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.3213'. [ 496.502996][T18765] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20001 [ 496.733807][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 496.746742][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 496.755308][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 496.765214][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 496.781811][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 496.865599][T18782] wg1 speed is unknown, defaulting to 1000 [ 497.060921][T18778] wg1 speed is unknown, defaulting to 1000 [ 497.230754][T18791] x_tables: duplicate underflow at hook 1 [ 497.296381][T18801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3221'. [ 497.336505][T18801] dummy0: entered promiscuous mode [ 497.364216][T18801] dummy0: left promiscuous mode [ 497.432125][T18803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3223'. [ 497.432345][T18804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3223'. [ 497.639426][T18812] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3225'. [ 497.745768][T18784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3217'. [ 497.803760][T18816] syzkaller0: entered promiscuous mode [ 497.809458][T18816] syzkaller0: entered allmulticast mode [ 497.818318][T18816] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 497.985635][T18778] chnl_net:caif_netlink_parms(): no params data found [ 498.524184][T18778] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.535390][T18778] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.561073][T18778] bridge_slave_0: entered allmulticast mode [ 498.577316][T18778] bridge_slave_0: entered promiscuous mode [ 498.594705][T18778] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.621715][T18778] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.632343][T18778] bridge_slave_1: entered allmulticast mode [ 498.653552][T18778] bridge_slave_1: entered promiscuous mode [ 498.752256][T18838] wg1 speed is unknown, defaulting to 1000 [ 498.819203][T18778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.850885][ T5149] Bluetooth: hci4: command tx timeout [ 498.864410][T18778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.003772][T18778] team0: Port device team_slave_0 added [ 499.059063][T18778] team0: Port device team_slave_1 added [ 499.226169][T18778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.266726][T18778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.380998][T18778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.424121][T18778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.444240][T18778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.517914][T18778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.533623][T18861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3236'. [ 500.181649][T18778] hsr_slave_0: entered promiscuous mode [ 500.203787][T18778] hsr_slave_1: entered promiscuous mode [ 500.223306][T18778] debugfs: 'hsr0' already exists in 'hsr' [ 500.229099][T18778] Cannot create hsr debugfs directory [ 500.265455][T18877] Bluetooth: MGMT ver 1.23 [ 500.812057][T18885] wg1 speed is unknown, defaulting to 1000 [ 500.931414][ T5149] Bluetooth: hci4: command tx timeout [ 501.234943][T18778] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.344006][T18778] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.484776][T18778] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.510594][T18897] netlink: 'syz.1.3246': attribute type 10 has an invalid length. [ 501.569342][T18897] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3246'. [ 501.654724][T18778] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.722370][T18897] team0: entered promiscuous mode [ 501.769879][T18897] geneve0: entered promiscuous mode [ 501.780371][T18897] bridge0: port 1(team0) entered blocking state [ 501.800321][T18897] bridge0: port 1(team0) entered disabled state [ 501.820661][T18897] team0: entered allmulticast mode [ 501.826921][T18897] geneve0: entered allmulticast mode [ 501.873611][T18897] bridge0: port 1(team0) entered blocking state [ 501.880222][T18897] bridge0: port 1(team0) entered forwarding state [ 502.218822][T18778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 502.257828][T18778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 502.298663][T18778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 502.351785][T18778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 502.403566][T18908] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3247'. [ 502.571634][T18778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.633136][T18778] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.656677][T17844] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.664008][T17844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.748993][T17844] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.756259][T17844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.921308][T18926] team_slave_0: entered promiscuous mode [ 502.927357][T18926] team_slave_1: entered promiscuous mode [ 503.000034][T18926] macvtap1: entered promiscuous mode [ 503.012111][T18926] team0: entered promiscuous mode [ 503.013582][ T5149] Bluetooth: hci4: command tx timeout [ 503.033501][T18926] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 503.064066][T18926] team0: Device macvtap1 is already an upper device of the team interface [ 503.102465][T18926] team0: left promiscuous mode [ 503.118256][T18926] team_slave_0: left promiscuous mode [ 503.123802][T18926] team_slave_1: left promiscuous mode [ 503.216768][T18921] wg1 speed is unknown, defaulting to 1000 [ 503.345191][T18934] netlink: 280 bytes leftover after parsing attributes in process `syz.3.3254'. [ 503.529596][T18939] wg1 speed is unknown, defaulting to 1000 [ 503.551063][T18944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3255'. [ 503.583779][T18944] netlink: 'syz.3.3255': attribute type 39 has an invalid length. [ 503.944134][T18953] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3256'. [ 504.123551][T18778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.329134][T18778] veth0_vlan: entered promiscuous mode [ 504.387596][T18778] veth1_vlan: entered promiscuous mode [ 504.402871][T18962] netlink: 'syz.1.3259': attribute type 1 has an invalid length. [ 504.431884][T18962] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3259'. [ 504.472370][T18965] netlink: 'syz.3.3260': attribute type 2 has an invalid length. [ 504.506210][T18778] veth0_macvtap: entered promiscuous mode [ 504.530444][T18778] veth1_macvtap: entered promiscuous mode [ 504.602547][T18778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.623875][T18968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3261'. [ 504.638438][ T10] IPVS: starting estimator thread 0... [ 504.666661][T18778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.740523][T18970] IPVS: using max 25 ests per chain, 60000 per kthread [ 504.772472][ T6033] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.800659][ T6033] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.831017][ T6033] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.860814][ T6033] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.986619][T18971] wg1 speed is unknown, defaulting to 1000 [ 505.093733][ T5149] Bluetooth: hci4: command tx timeout [ 505.211330][ T6033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.245812][ T6033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.547119][ T6033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.571015][ T6033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.655708][T18991] vlan2: entered allmulticast mode [ 505.665758][T18991] dummy0: entered allmulticast mode [ 505.752901][T18995] netpci0: tun_chr_ioctl cmd 1074025677 [ 505.758827][T18995] netpci0: linktype set to 6 [ 505.869281][T19006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3268'. [ 505.878971][T19006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3268'. [ 506.080618][T19013] xt_bpf: check failed: parse error [ 506.290022][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 506.465372][T19033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3275'. [ 506.525413][T19031] wg1 speed is unknown, defaulting to 1000 [ 506.548415][T19035] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 506.711545][T19050] sctp: [Deprecated]: syz.4.3278 (pid 19050) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.711545][T19050] Use struct sctp_sack_info instead [ 507.012358][T19057] netlink: 'syz.4.3282': attribute type 39 has an invalid length. [ 507.198771][T19063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3284'. [ 507.214984][T19064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3284'. [ 507.251400][T19063] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3284'. [ 507.313939][T19062] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 507.621556][T19073] sctp: [Deprecated]: syz.0.3287 (pid 19073) Use of int in max_burst socket option. [ 507.621556][T19073] Use struct sctp_assoc_value instead [ 507.733821][T19073] netlink: 'syz.0.3287': attribute type 16 has an invalid length. [ 507.838011][T19084] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3290'. [ 508.113606][T19092] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.148536][T19105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3293'. [ 508.163657][T19090] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3292'. [ 508.214937][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 508.224584][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.385912][T19092] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.527621][T19092] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.659948][T19129] netlink: 'syz.1.3300': attribute type 1 has an invalid length. [ 508.668767][T19092] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.688564][T19129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.880677][T17844] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.892843][T19134] tipc: Started in network mode [ 508.897768][T19134] tipc: Node identity ae24c0a15c4a, cluster identity 4711 [ 508.929160][T19134] tipc: Enabled bearer , priority 0 [ 508.954485][T17844] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.975224][T19134] tipc: Resetting bearer [ 508.992139][T19144] nbd: nbd1 already in use [ 509.005984][T17844] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.071205][T11844] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.106815][T19147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3306'. [ 509.146739][T19133] tipc: Disabling bearer [ 509.360413][T19164] sctp: [Deprecated]: syz.2.3309 (pid 19164) Use of int in max_burst socket option deprecated. [ 509.360413][T19164] Use struct sctp_assoc_value instead [ 509.445823][T19164] sctp: [Deprecated]: syz.2.3309 (pid 19164) Use of int in max_burst socket option deprecated. [ 509.445823][T19164] Use struct sctp_assoc_value instead [ 509.578794][T19175] Can't find ip_set type hash [ 509.674468][T19184] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 509.817926][T19196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3317'. [ 509.961835][T19202] xt_CT: You must specify a L4 protocol and not use inversions on it [ 509.983198][T19203] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3319'. [ 509.994144][T19205] delete_channel: no stack [ 510.374036][T19223] wg1 speed is unknown, defaulting to 1000 [ 511.187450][T19244] openvswitch: netlink: EtherType 50a is less than min 600 [ 511.662078][T19264] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3333'. [ 511.907493][T19277] netlink: 'syz.0.3338': attribute type 6 has an invalid length. [ 512.682739][T19311] __nla_validate_parse: 5 callbacks suppressed [ 512.682761][T19311] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3347'. [ 512.771359][T19315] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3350'. [ 512.797541][T19317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3349'. [ 512.802845][T19316] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3349'. [ 538.930667][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 569.654564][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.662558][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 576.855226][ T5834] Bluetooth: hci5: command 0x0406 tx timeout [ 579.393496][T19321] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3351'. [ 579.405419][T19328] pim6reg: entered allmulticast mode [ 579.438077][T19323] sctp: [Deprecated]: syz.2.3353 (pid 19323) Use of int in max_burst socket option deprecated. [ 579.438077][T19323] Use struct sctp_assoc_value instead [ 579.462687][T19329] bridge0: entered promiscuous mode [ 579.572251][T19323] netlink: 'syz.2.3353': attribute type 10 has an invalid length. [ 579.636529][T19323] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 579.668984][T19332] wg1 speed is unknown, defaulting to 1000 [ 579.716543][T19328] wg1 speed is unknown, defaulting to 1000 [ 580.055727][T19348] pimreg3: entered allmulticast mode [ 580.102059][T19326] pim6reg: left allmulticast mode [ 580.186274][T19352] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3359'. [ 580.428562][T19357] netlink: 'syz.1.3361': attribute type 3 has an invalid length. [ 580.458071][T19357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3361'. [ 580.483812][T19359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3362'. [ 580.987049][T19357] wg1 speed is unknown, defaulting to 1000 [ 581.077194][T19372] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 581.241551][T19375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3365'. [ 581.611714][T19385] tap0: tun_chr_ioctl cmd 2148553947 [ 581.647741][T19385] tap0: tun_chr_ioctl cmd 2147767521 [ 581.665409][T19388] tipc: Started in network mode [ 581.677671][T19385] netlink: 'syz.4.3369': attribute type 1 has an invalid length. [ 581.729412][T19388] tipc: Node identity 46f0d6e58fd9, cluster identity 4711 [ 581.765966][T19388] tipc: Enabled bearer , priority 0 [ 581.773247][T19391] syzkaller0: entered promiscuous mode [ 581.780371][T19391] syzkaller0: entered allmulticast mode [ 581.808549][T19395] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3369'. [ 581.864911][T19390] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 581.874994][T19390] bond1: (slave batadv1): making interface the new active one [ 581.884965][T19390] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 581.937491][T19385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3369'. [ 581.969103][T19385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.978429][T19385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.006250][T19385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.033895][T19385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.201332][T19395] 8021q: adding VLAN 0 to HW filter on device bond1 [ 582.254573][T19391] tipc: Resetting bearer [ 582.368625][T19391] tipc: Disabling bearer [ 582.669371][T19399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3370'. [ 582.695649][T19399] veth0_to_team: invalid flags given to default FDB implementation [ 582.752251][T19399] tipc: Started in network mode [ 582.757194][T19399] tipc: Node identity 6a98de6871ef, cluster identity 4711 [ 582.770842][T19399] tipc: Enabled bearer , priority 0 [ 582.785321][T19399] syzkaller0: entered promiscuous mode [ 582.791014][T19399] syzkaller0: entered allmulticast mode [ 582.941459][T19404] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3372'. [ 582.967066][T19400] tipc: Resetting bearer [ 583.061916][T19398] tipc: Resetting bearer [ 583.171433][T19398] tipc: Disabling bearer [ 583.503119][T19427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3375'. [ 583.595075][T19430] netlink: 'syz.1.3377': attribute type 1 has an invalid length. [ 584.071232][T19439] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 584.122979][T19446] hsr0: entered promiscuous mode [ 584.141105][T19446] hsr_slave_0: left promiscuous mode [ 584.147610][T19446] hsr_slave_1: left promiscuous mode [ 584.184086][T19446] hsr0 (unregistering): left promiscuous mode [ 584.500874][T19462] netlink: 'syz.4.3385': attribute type 15 has an invalid length. [ 584.508948][T19462] __nla_validate_parse: 1 callbacks suppressed [ 584.508965][T19462] netlink: 538 bytes leftover after parsing attributes in process `syz.4.3385'. [ 584.672387][T19468] nbd7: detected capacity change from 0 to 127 [ 584.701394][T19471] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3388'. [ 584.767502][T19478] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3389'. [ 584.779543][T19468] netlink: 'syz.2.3388': attribute type 10 has an invalid length. [ 584.786871][T19471] block nbd0: reconnected socket [ 584.824526][T19471] nbd: socks must be embedded in a SOCK_ITEM attr [ 584.899125][ T5834] block nbd7: Receive control failed (result -104) [ 584.912528][ T5149] block nbd0: Receive control failed (result -32) [ 585.127950][T19489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3394'. [ 585.171766][T19489] vlan2: entered promiscuous mode [ 585.177019][T19489] bond0: entered promiscuous mode [ 585.188604][T19489] bond_slave_0: entered promiscuous mode [ 585.202006][T19489] bond_slave_1: entered promiscuous mode [ 585.220122][T19489] mac80211_hwsim hwsim39 wlan1: entered promiscuous mode [ 585.662045][T19515] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3400'. [ 585.754936][T19517] openvswitch: netlink: IPv6 tunnel dst address is zero [ 585.845326][T19520] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 585.856244][T19519] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3402'. [ 586.047183][T19540] netem: incorrect gi model size [ 586.061075][T19540] netem: change failed [ 586.284980][T19547] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3410'. [ 586.517188][T19556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3413'. [ 586.531958][T19555] netlink: 'syz.3.3414': attribute type 16 has an invalid length. [ 586.540012][T19555] netlink: 'syz.3.3414': attribute type 17 has an invalid length. [ 586.548343][T19555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3414'. [ 586.558276][T19555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3414'. [ 586.642815][T19559] tipc: Enabled bearer , priority 0 [ 586.651620][T19559] syzkaller0: entered promiscuous mode [ 586.657683][T19559] syzkaller0: entered allmulticast mode [ 586.679301][T19559] tipc: Resetting bearer [ 586.694714][T19558] tipc: Resetting bearer [ 586.728893][T19558] tipc: Disabling bearer [ 587.021629][T19570] netlink: 'syz.4.3418': attribute type 1 has an invalid length. [ 587.087928][T19570] bond2: entered promiscuous mode [ 587.095305][T19570] 8021q: adding VLAN 0 to HW filter on device bond2 [ 587.345761][T19588] wg1 speed is unknown, defaulting to 1000 [ 587.702653][T19595] delete_channel: no stack [ 587.818366][T19610] netlink: 'syz.3.3428': attribute type 13 has an invalid length. [ 588.067085][ T25] block nbd7: Connection timed out, retrying (0/1 alive) [ 588.075295][ T25] block nbd7: Connection timed out, retrying (0/1 alive) [ 588.083267][ T25] block nbd7: Connection timed out, retrying (0/1 alive) [ 588.090895][ T25] block nbd7: Connection timed out, retrying (0/1 alive) [ 588.098890][ T123] block nbd7: Dead connection, failed to find a fallback [ 588.109139][ T123] block nbd7: shutting down sockets [ 588.115910][ T123] blk_print_req_error: 138 callbacks suppressed [ 588.115931][ T123] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 588.133925][ T123] buffer_io_error: 138 callbacks suppressed [ 588.133945][ T123] Buffer I/O error on dev nbd7, logical block 2, async page read [ 588.152690][ T123] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 588.162303][ T123] Buffer I/O error on dev nbd7, logical block 1, async page read [ 588.170174][ T123] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 588.179905][ T123] Buffer I/O error on dev nbd7, logical block 0, async page read [ 588.187717][ T123] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 588.198250][ T123] Buffer I/O error on dev nbd7, logical block 3, async page read [ 588.207752][T19319] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 588.221002][T19319] Buffer I/O error on dev nbd7, logical block 0, async page read [ 588.228882][T19319] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 588.238463][T19319] Buffer I/O error on dev nbd7, logical block 1, async page read [ 588.246781][T19319] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 588.258346][T19319] Buffer I/O error on dev nbd7, logical block 2, async page read [ 588.266283][T19319] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 588.276252][T19319] Buffer I/O error on dev nbd7, logical block 3, async page read [ 588.285934][T19319] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 588.297294][T19319] Buffer I/O error on dev nbd7, logical block 0, async page read [ 588.305222][T19319] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 588.315162][T19319] Buffer I/O error on dev nbd7, logical block 1, async page read [ 588.323788][T19319] ldm_validate_partition_table(): Disk read failed. [ 588.331437][T19319] Dev nbd7: unable to read RDB block 0 [ 588.337618][T19319] nbd7: unable to read partition table [ 588.357552][T19319] ldm_validate_partition_table(): Disk read failed. [ 588.366707][T19319] Dev nbd7: unable to read RDB block 0 [ 588.403556][T19319] nbd7: unable to read partition table [ 588.477958][T19636] nbd: couldn't find device at index 4 [ 588.541458][T19619] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 588.553549][T19619] syzkaller0: entered promiscuous mode [ 588.561966][T19619] syzkaller0: entered allmulticast mode [ 588.712808][T19650] Bluetooth: MGMT ver 1.23 [ 588.749034][T19648] ip6gretap0: entered promiscuous mode [ 588.771700][T19648] macsec1: entered promiscuous mode [ 588.793054][T19648] ip6gretap0: left promiscuous mode [ 589.890650][T19701] netlink: 'syz.4.3447': attribute type 10 has an invalid length. [ 589.925113][T19701] team0: Device ipvlan1 failed to register rx_handler [ 590.060194][T11832] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 590.165494][T19723] netlink: 'syz.0.3450': attribute type 12 has an invalid length. [ 590.187051][T19724] __nla_validate_parse: 4 callbacks suppressed [ 590.187070][T19724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3452'. [ 590.249883][T19724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3452'. [ 590.405352][T19724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3452'. [ 590.594378][T19735] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3454'. [ 590.635979][T19735] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3454'. [ 591.063248][T19747] netlink: 'syz.3.3456': attribute type 1 has an invalid length. [ 591.113198][T19747] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3456'. [ 591.317638][T19765] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3464'. [ 591.341076][T19768] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3463'. [ 591.383817][T19768] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3463'. [ 591.413007][T19768] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3463'. [ 591.638960][T19778] batadv0: mtu less than device minimum [ 591.695598][T19777] wg1 speed is unknown, defaulting to 1000 [ 592.155438][T19778] bridge_slave_1: left allmulticast mode [ 592.161421][T19778] bridge_slave_1: left promiscuous mode [ 592.266206][T19778] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.377985][T19778] bridge_slave_0: left allmulticast mode [ 592.453038][T19778] bridge_slave_0: left promiscuous mode [ 592.458920][T19778] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.019126][T19838] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 594.219365][T19849] netdevsim netdevsim0: Direct firmware load for /. failed with error -2 [ 594.251416][T19850] netlink: 'syz.3.3482': attribute type 1 has an invalid length. [ 594.275888][T19849] netdevsim netdevsim0: Falling back to sysfs fallback for: /. [ 594.435784][T19854] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 594.480380][T19850] 8021q: adding VLAN 0 to HW filter on device bond1 [ 594.579480][T19853] bond1: (slave gretap1): making interface the new active one [ 594.593220][T19853] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 594.669454][T19858] wg1 speed is unknown, defaulting to 1000 [ 594.811236][T19862] veth0: entered promiscuous mode [ 594.872155][T19865] veth0: left promiscuous mode [ 595.104409][T19867] xfrm1: entered allmulticast mode [ 595.293893][T19872] IPv6: Can't replace route, no match found [ 595.371207][T19878] __nla_validate_parse: 10 callbacks suppressed [ 595.371230][T19878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3489'. [ 595.415449][T19878] block nbd8: Unsupported socket: should be TCP or UNIX. [ 595.651967][T19891] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3493'. [ 595.696406][T19891] team0: No ports can be present during mode change [ 595.733495][T19891] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3493'. [ 595.915787][T19896] wg1 speed is unknown, defaulting to 1000 [ 596.068779][T19902] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.077308][T19902] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.129089][T19902] bridge0: left promiscuous mode [ 596.608023][T19902] geneve2: left promiscuous mode [ 596.628957][T19919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3497'. [ 596.686333][T19902] bond2: left promiscuous mode [ 596.702324][T19895] wg1 speed is unknown, defaulting to 1000 [ 596.738767][T11832] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.784392][T11832] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.843257][T19912] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)% ]3DL̥!!b.>nS#^' [ 596.875114][T19912] CPU: 0 UID: 0 PID: 19912 Comm: syz.3.3494 Not tainted syzkaller #0 PREEMPT(full) [ 596.875164][T19912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 596.875197][T19912] Call Trace: [ 596.875207][T19912] [ 596.875218][T19912] dump_stack_lvl+0xe8/0x150 [ 596.875254][T19912] sysfs_warn_dup+0x8e/0xa0 [ 596.875279][T19912] sysfs_do_create_link_sd+0xc0/0x110 [ 596.875307][T19912] device_add_class_symlinks+0x1cf/0x240 [ 596.875336][T19912] device_add+0x475/0xb80 [ 596.875364][T19912] wiphy_register+0x1d2e/0x2d20 [ 596.875406][T19912] ? __pfx_wiphy_register+0x10/0x10 [ 596.875427][T19912] ? __pfx_netdev_run_todo+0x10/0x10 [ 596.875460][T19912] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 596.875498][T19912] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 596.875542][T19912] ieee80211_register_hw+0x34a7/0x4110 [ 596.875570][T19912] ? __lock_acquire+0x6b6/0x2cf0 [ 596.875608][T19912] ? ieee80211_register_hw+0x13e1/0x4110 [ 596.875650][T19912] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 596.875699][T19912] ? __hrtimer_setup+0x181/0x200 [ 596.875725][T19912] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 596.875755][T19912] mac80211_hwsim_new_radio+0x2f6d/0x52f0 [ 596.875813][T19912] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 596.875834][T19912] ? kstrndup+0xbf/0x160 [ 596.875868][T19912] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 596.875898][T19912] ? __pfx___nla_validate_parse+0x10/0x10 [ 596.875937][T19912] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 596.875968][T19912] ? rcu_is_watching+0x15/0xb0 [ 596.875998][T19912] ? __nla_parse+0x40/0x60 [ 596.876025][T19912] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 596.876058][T19912] genl_family_rcv_msg_doit+0x215/0x300 [ 596.876089][T19912] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 596.876127][T19912] ? bpf_lsm_capable+0x9/0x20 [ 596.876150][T19912] ? security_capable+0x7e/0x2e0 [ 596.876182][T19912] genl_rcv_msg+0x60e/0x790 [ 596.876213][T19912] ? __pfx_genl_rcv_msg+0x10/0x10 [ 596.876234][T19912] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 596.876277][T19912] netlink_rcv_skb+0x208/0x470 [ 596.876310][T19912] ? __pfx_genl_rcv_msg+0x10/0x10 [ 596.876335][T19912] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 596.876363][T19912] ? genl_rcv+0x19/0x40 [ 596.876406][T19912] ? down_read+0x274/0x2e0 [ 596.876432][T19912] ? genl_rcv+0xd/0x40 [ 596.876457][T19912] genl_rcv+0x28/0x40 [ 596.876477][T19912] netlink_unicast+0x82f/0x9e0 [ 596.876516][T19912] ? __pfx_netlink_unicast+0x10/0x10 [ 596.876557][T19912] ? netlink_sendmsg+0x642/0xb30 [ 596.876586][T19912] ? skb_put+0x11b/0x210 [ 596.876616][T19912] netlink_sendmsg+0x805/0xb30 [ 596.876660][T19912] ? __pfx_netlink_sendmsg+0x10/0x10 [ 596.876696][T19912] ? aa_sock_msg_perm+0xf1/0x1b0 [ 596.876728][T19912] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 596.876747][T19912] ? __pfx_netlink_sendmsg+0x10/0x10 [ 596.876780][T19912] __sock_sendmsg+0x21c/0x270 [ 596.876818][T19912] ____sys_sendmsg+0x505/0x820 [ 596.876853][T19912] ? __pfx_____sys_sendmsg+0x10/0x10 [ 596.876893][T19912] ? import_iovec+0x74/0xa0 [ 596.876925][T19912] ___sys_sendmsg+0x21f/0x2a0 [ 596.876956][T19912] ? __pfx____sys_sendmsg+0x10/0x10 [ 596.876990][T19912] ? count_memcg_event_mm+0x21/0x260 [ 596.877056][T19912] ? __fget_files+0x2a/0x420 [ 596.877082][T19912] ? __fget_files+0x3a0/0x420 [ 596.877123][T19912] __x64_sys_sendmsg+0x19b/0x260 [ 596.877154][T19912] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 596.877197][T19912] ? do_user_addr_fault+0xc85/0x1380 [ 596.877233][T19912] do_syscall_64+0xec/0xf80 [ 596.877259][T19912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.877280][T19912] ? trace_irq_disable+0x37/0x100 [ 596.877307][T19912] ? clear_bhb_loop+0x60/0xb0 [ 596.877334][T19912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.877362][T19912] RIP: 0033:0x7f622218f749 [ 596.877384][T19912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.877404][T19912] RSP: 002b:00007f6222f47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 596.877428][T19912] RAX: ffffffffffffffda RBX: 00007f62223e6360 RCX: 00007f622218f749 [ 596.877444][T19912] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000d [ 596.877459][T19912] RBP: 00007f6222213f91 R08: 0000000000000000 R09: 0000000000000000 [ 596.877473][T19912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.877486][T19912] R13: 00007f62223e63f8 R14: 00007f62223e6360 R15: 00007fff71ec3ff8 [ 596.877523][T19912] [ 597.325382][T11832] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.398941][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 597.476353][T11832] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.713520][T19930] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3501'. [ 597.815669][T19932] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3503'. [ 598.492548][T19949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3507'. [ 598.628355][T19950] syzkaller0: entered promiscuous mode [ 598.654331][T19950] syzkaller0: entered allmulticast mode [ 598.678531][T19953] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3509'. [ 598.835426][T19953] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.843244][T19953] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.985196][T19961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3511'. [ 599.251140][T19953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.314597][T19953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.041527][T19978] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3512'. [ 600.060965][T19978] netlink: 'syz.3.3512': attribute type 9 has an invalid length. [ 602.229053][ T6033] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.239205][ T6033] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.257690][T19977] macsec1: entered promiscuous mode [ 602.264912][T19977] macsec1: entered allmulticast mode [ 602.271660][T19977] veth1_macvtap: entered allmulticast mode [ 602.283500][T19977] veth1_macvtap: left allmulticast mode [ 602.350789][ T6033] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.389704][ T6033] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.433014][T19989] xt_bpf: check failed: parse error [ 602.484550][T19989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 602.575199][T20002] Cannot find del_set index 2 as target [ 602.627872][T19996] wg1 speed is unknown, defaulting to 1000 [ 602.958808][T20023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3523'. [ 602.971805][T20023] netlink: 'syz.3.3523': attribute type 10 has an invalid length. [ 602.991852][T20023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.018244][T20023] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 603.216731][T20028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3524'. [ 603.242841][T20028] vlan2: entered promiscuous mode [ 603.247990][T20028] bond0: entered promiscuous mode [ 603.255358][T20028] bond_slave_0: entered promiscuous mode [ 603.262669][T20028] bond_slave_1: entered promiscuous mode [ 603.278910][T20028] batadv0: entered promiscuous mode [ 603.287065][T20033] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.3524'. [ 603.332175][T20033] netlink: 'syz.3.3524': attribute type 10 has an invalid length. [ 603.472592][T20049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3528'. [ 603.501726][T20050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 603.537092][T20050] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.3530'. [ 603.813920][T20065] bond3: option all_slaves_active: invalid value (13) [ 603.826760][T20065] bond3 (unregistering): Released all slaves [ 604.334785][T20089] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.593694][T20089] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.816951][T20089] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.031101][T20089] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.268092][T20127] syzkaller0: entered promiscuous mode [ 605.315707][T20138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3548'. [ 605.331213][T20127] syzkaller0: entered allmulticast mode [ 605.431196][T20127] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3546'. [ 605.491162][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 605.518456][ T6033] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.518611][T20130] wg1 speed is unknown, defaulting to 1000 [ 605.589208][T17847] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.655223][T20143] syzkaller0: entered promiscuous mode [ 605.668868][T20143] syzkaller0: entered allmulticast mode [ 605.683314][ T60] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.777181][T17847] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.994927][T20164] ip6tnl0: Caught tx_queue_len zero misconfig [ 608.144152][T20167] netlink: 'syz.1.3555': attribute type 10 has an invalid length. [ 608.161484][T20167] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3555'. [ 608.331865][T20167] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 608.743887][T20193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3561'. [ 609.372416][T20202] delete_channel: no stack [ 609.424646][T20221] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3568'. [ 609.469471][T20225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3571'. [ 609.493937][T20224] syzkaller0: entered promiscuous mode [ 609.499472][T20224] syzkaller0: entered allmulticast mode [ 609.503654][T20225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3571'. [ 609.577905][ T3459] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.587469][ T3459] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.597637][T20225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3571'. [ 609.607574][T20225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3571'. [ 609.626452][T20231] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3574'. [ 609.645501][T20231] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3574'. [ 609.666801][ T3459] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.716387][T20231] erspan0: entered promiscuous mode [ 609.741523][T20231] gretap0: entered promiscuous mode [ 609.753283][ T3459] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 610.106594][T20256] lo: entered promiscuous mode [ 610.113231][T20256] tunl0: entered promiscuous mode [ 610.118569][T20256] gre0: entered promiscuous mode [ 610.127927][T20256] gretap0: entered promiscuous mode [ 610.138294][T20256] erspan0: entered promiscuous mode [ 610.147019][T20256] ip_vti0: entered promiscuous mode [ 610.153980][T20256] ip6_vti0: entered promiscuous mode [ 610.161660][T20256] sit0: entered promiscuous mode [ 610.168129][T20256] ip6tnl0: entered promiscuous mode [ 610.175191][T20256] ip6gre0: entered promiscuous mode [ 610.181970][T20256] syz_tun: entered promiscuous mode [ 610.187657][T20256] ip6gretap0: entered promiscuous mode [ 610.204950][T20256] bridge0: entered promiscuous mode [ 610.215223][T20256] vcan0: entered promiscuous mode [ 610.220838][T20256] bond0: entered promiscuous mode [ 610.226075][T20256] bond_slave_0: entered promiscuous mode [ 610.237698][T20256] bond_slave_1: entered promiscuous mode [ 610.243940][T20256] team0: entered promiscuous mode [ 610.249376][T20256] team_slave_0: entered promiscuous mode [ 610.255710][T20256] team_slave_1: entered promiscuous mode [ 610.262132][T20256] dummy0: entered promiscuous mode [ 610.268690][T20256] nlmon0: entered promiscuous mode [ 610.275447][T20256] caif0: entered promiscuous mode [ 610.281020][T20256] vxcan0: entered promiscuous mode [ 610.286520][T20256] vxcan1: entered promiscuous mode [ 610.308449][T20256] wg1: entered promiscuous mode [ 610.319409][T20256] wg2: entered promiscuous mode [ 610.332799][T20256] veth0_to_bridge: entered promiscuous mode [ 610.337239][T20263] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3588'. [ 610.349141][T20256] bridge_slave_0: left allmulticast mode [ 610.367836][T20256] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.394782][T20256] veth1_to_bridge: entered promiscuous mode [ 610.406869][T20256] bridge_slave_1: left allmulticast mode [ 610.419948][T20256] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.488199][T20256] veth0_to_bond: entered promiscuous mode [ 610.497114][T20256] bond0: (slave bond_slave_0): Releasing backup interface [ 610.515692][T20256] veth1_to_bond: entered promiscuous mode [ 610.526174][T20256] bond0: (slave bond_slave_1): Releasing backup interface [ 610.554600][T20256] veth0_to_team: entered promiscuous mode [ 610.568797][T20256] team0: Port device team_slave_0 removed [ 610.584843][T20256] veth1_to_team: entered promiscuous mode [ 610.599899][T20256] team0: Port device team_slave_1 removed [ 610.614680][T20256] veth0_to_batadv: entered promiscuous mode [ 610.623864][T20256] batadv_slave_0: entered promiscuous mode [ 610.635680][T20256] veth1_to_batadv: entered promiscuous mode [ 610.649042][T20256] batadv_slave_1: entered promiscuous mode [ 610.661980][T20256] xfrm0: entered promiscuous mode [ 610.672627][T20256] veth0_to_hsr: entered promiscuous mode [ 610.694874][T20256] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 610.726357][T20267] syz_tun: entered allmulticast mode [ 610.749543][T20259] syz_tun: left allmulticast mode [ 614.424436][T20323] __nla_validate_parse: 2 callbacks suppressed [ 614.424459][T20323] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3609'. [ 614.939116][T20376] xt_hashlimit: max too large, truncated to 1048576 [ 614.949552][T20376] xt_bpf: check failed: parse error [ 614.968099][T20376] netlink: 203340 bytes leftover after parsing attributes in process `syz.2.3632'. [ 615.185654][T20393] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3637'. [ 615.233897][T20399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3639'. [ 615.240329][T20393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3637'. [ 615.445315][T20393] netlink: 'syz.0.3637': attribute type 49 has an invalid length. [ 615.635069][T20426] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3644'. [ 615.784855][T20437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3647'. [ 615.816940][T20419] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 616.045297][T20444] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3650'. [ 616.056959][T20444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3650'. [ 616.501672][T20469] team0: Caught tx_queue_len zero misconfig [ 616.564347][T20472] wg1 speed is unknown, defaulting to 1000 [ 616.781733][T20484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.294542][T20503] syzkaller1: entered allmulticast mode [ 617.362160][T20507] netlink: 'syz.0.3669': attribute type 4 has an invalid length. [ 617.393287][T20507] netlink: 'syz.0.3669': attribute type 4 has an invalid length. [ 617.757514][T20507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.779867][T20507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.987626][T20510] 8021q: adding VLAN 0 to HW filter on device bond2 [ 618.009533][T20515] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 618.021246][T20515] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 618.042344][T20519] bond0: (slave batadv0): Releasing backup interface [ 618.051840][T20519] batadv0: left promiscuous mode [ 618.068412][T20519] bridge_slave_0: left allmulticast mode [ 618.075301][T20519] bridge_slave_0: left promiscuous mode [ 618.082668][T20519] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.094280][T20519] bridge_slave_1: left allmulticast mode [ 618.102584][ T6033] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 618.112802][T20519] bridge_slave_1: left promiscuous mode [ 618.113735][T20519] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.132190][T20519] bond0: (slave bond_slave_0): Releasing backup interface [ 618.143022][T20519] bond_slave_0: left promiscuous mode [ 618.152290][T20519] bond0: (slave bond_slave_1): Releasing backup interface [ 618.163234][T20519] bond_slave_1: left promiscuous mode [ 618.173037][T20519] team0: Port device team_slave_0 removed [ 618.181154][T20519] team0: Port device team_slave_1 removed [ 618.187348][T20519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.195771][T20519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.205311][T20519] bond1: (slave gretap1): Releasing active interface [ 618.216323][T20519] bond2: (slave macvlan2): Removing an active aggregator [ 618.224361][T20519] bond2: (slave macvlan2): Releasing backup interface [ 618.245290][T20521] vlan4: entered promiscuous mode [ 618.254681][T20521] ip6gretap0: entered promiscuous mode [ 618.261855][T20521] vlan4: entered allmulticast mode [ 618.267168][T20521] ip6gretap0: entered allmulticast mode [ 618.353645][ T75] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.378121][ T75] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.425405][ T75] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.437850][ T75] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.534504][ T75] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.569739][ T75] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.580314][ T75] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.613337][ T75] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.648965][T20541] bridge0: left promiscuous mode [ 618.656138][T20541] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 618.657315][T20540] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3677'. [ 619.358724][T20576] tipc: Cannot configure node identity twice [ 619.369327][T20576] tipc: Cannot configure node identity twice [ 619.605249][T20589] tipc: Enabling of bearer rejected, failed to enable media [ 619.728295][T20594] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3690'. [ 619.748502][T20594] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3690'. [ 619.876501][T20604] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3692'. [ 620.009215][T20613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3694'. [ 620.428302][T20635] netlink: 'syz.0.3702': attribute type 1 has an invalid length. [ 620.505664][T20639] netlink: 'syz.2.3703': attribute type 1 has an invalid length. [ 620.528178][T20632] syzkaller1: entered promiscuous mode [ 620.556789][T20632] syzkaller1: entered allmulticast mode [ 620.567317][T20642] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3703'. [ 620.582982][T20635] bond1: (slave gretap1): making interface the new active one [ 620.591289][T20635] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 620.602554][T20635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3702'. [ 620.656163][T20640] 8021q: adding VLAN 0 to HW filter on device bond2 [ 620.667279][T20640] bond1: (slave bond2): Enslaving as a backup interface with an up link [ 620.685344][T20635] 8021q: adding VLAN 0 to HW filter on device bond1 [ 620.692876][T20642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3703'. [ 620.707497][T20639] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3703'. [ 620.764685][T20635] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3702'. [ 620.812649][T20635] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3702'. [ 620.928324][ T130] IPVS: starting estimator thread 0... [ 621.022402][T20656] IPVS: using max 27 ests per chain, 64800 per kthread [ 621.173143][T20671] pim6reg: entered allmulticast mode [ 621.194302][T20673] pim6reg: left allmulticast mode [ 621.727886][T20693] wg1 speed is unknown, defaulting to 1000 [ 621.755802][T20692] wg1 speed is unknown, defaulting to 1000 [ 622.164079][T20708] netlink: 'syz.3.3719': attribute type 5 has an invalid length. [ 622.843123][T20742] syzkaller0: entered promiscuous mode [ 622.848675][T20742] syzkaller0: entered allmulticast mode [ 622.932729][ T5149] Bluetooth: hci3: command 0x0406 tx timeout [ 623.092804][T20743] netlink: 'syz.2.3727': attribute type 11 has an invalid length. [ 623.285306][T20759] netlink: 'syz.4.3732': attribute type 10 has an invalid length. [ 623.337132][T20759] mac80211_hwsim hwsim34 wlan1: entered promiscuous mode [ 623.371723][T20759] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 624.215182][T20806] wg1 speed is unknown, defaulting to 1000 [ 624.304826][T20811] netlink: 'syz.2.3745': attribute type 2 has an invalid length. [ 624.347043][T20817] veth1_to_bond: entered allmulticast mode [ 624.392989][T20817] veth1_to_bond: left allmulticast mode [ 624.419413][T20820] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 624.742748][T20829] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 624.885729][T20829] bond3 (unregistering): Released all slaves [ 625.257065][T20835] wg1 speed is unknown, defaulting to 1000 [ 625.636179][T20845] __nla_validate_parse: 8 callbacks suppressed [ 625.636201][T20845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3752'. [ 626.082174][T20850] netem: invalid attributes len -1 [ 626.090878][T20850] netem: change failed [ 626.164543][T20861] dvmrp1: entered allmulticast mode [ 626.207404][T20859] dvmrp1: left allmulticast mode [ 626.232271][T20856] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3756'. [ 626.837093][T20884] ipt_REJECT: TCP_RESET invalid for non-tcp [ 627.138781][T20890] wg1 speed is unknown, defaulting to 1000 [ 627.267156][T20906] netlink: 'syz.0.3767': attribute type 1 has an invalid length. [ 627.300040][T20906] netlink: 'syz.0.3767': attribute type 2 has an invalid length. [ 627.346185][T20905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3766'. [ 627.356468][T20905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 628.075760][T20922] syzkaller0: entered promiscuous mode [ 628.100177][T20922] syzkaller0: entered allmulticast mode [ 630.133743][T20941] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3775'. [ 630.972400][T20920] wg1 speed is unknown, defaulting to 1000 [ 631.094099][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 631.103539][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.193297][T20945] x_tables: ip_tables: osf match: only valid for protocol 6 [ 631.427566][T20955] netlink: 'syz.2.3778': attribute type 2 has an invalid length. [ 631.437780][T20955] netlink: 'syz.2.3778': attribute type 15 has an invalid length. [ 631.708184][T20965] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.3782'. [ 631.742873][T20965] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 631.955907][T20973] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 632.014365][T20979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3786'. [ 632.023591][T20979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3786'. [ 632.275566][T20973] bond3 (unregistering): Released all slaves [ 632.883391][T20990] tipc: Enabling of bearer rejected, failed to enable media [ 632.922029][T20990] netlink: zone id is out of range [ 632.927216][T20990] netlink: zone id is out of range [ 632.946528][T20990] netlink: zone id is out of range [ 632.980377][T20990] netlink: zone id is out of range [ 632.985627][T20990] netlink: zone id is out of range [ 632.991955][T20999] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3792'. [ 633.028137][T20999] openvswitch: netlink: Flow key attr not present in new flow. [ 633.039238][T20990] netlink: zone id is out of range [ 633.059195][T20990] netlink: zone id is out of range [ 633.067978][T20990] netlink: zone id is out of range [ 633.074955][T20990] netlink: zone id is out of range [ 633.174406][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 633.419408][T20997] ================================================================== [ 633.427547][T20997] BUG: KASAN: slab-use-after-free in cfusbl_device_notify+0x140/0x6b0 [ 633.435758][T20997] Read of size 8 at addr ffff8880a8c54d48 by task syz.0.3792/20997 [ 633.443696][T20997] [ 633.446058][T20997] CPU: 1 UID: 0 PID: 20997 Comm: syz.0.3792 Not tainted syzkaller #0 PREEMPT(full) [ 633.446087][T20997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 633.446102][T20997] Call Trace: [ 633.446113][T20997] [ 633.446123][T20997] dump_stack_lvl+0xe8/0x150 [ 633.446156][T20997] print_report+0xca/0x240 [ 633.446178][T20997] ? cfusbl_device_notify+0x140/0x6b0 [ 633.446207][T20997] kasan_report+0x118/0x150 [ 633.446230][T20997] ? net_generic+0x1e/0x240 [ 633.446257][T20997] ? cfusbl_device_notify+0x140/0x6b0 [ 633.446289][T20997] cfusbl_device_notify+0x140/0x6b0 [ 633.446318][T20997] ? net_generic+0x1e/0x240 [ 633.446348][T20997] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 633.446378][T20997] ? caif_device_notify+0x250/0xfc0 [ 633.446424][T20997] notifier_call_chain+0x19d/0x3a0 [ 633.446454][T20997] register_netdevice+0x11fc/0x1a70 [ 633.446484][T20997] ? __mutex_lock+0x5bb/0x1350 [ 633.446519][T20997] ? __pfx_register_netdevice+0x10/0x10 [ 633.446554][T20997] ? __asan_memset+0x22/0x50 [ 633.446586][T20997] ? dev_addr_mod+0x2ce/0x3d0 [ 633.446615][T20997] register_netdev+0x40/0x60 [ 633.446645][T20997] bnep_add_connection+0x6c6/0xc70 [ 633.446678][T20997] ? __pfx_bnep_add_connection+0x10/0x10 [ 633.446705][T20997] ? __fget_files+0x3a0/0x420 [ 633.446737][T20997] do_bnep_sock_ioctl+0x40e/0x670 [ 633.446766][T20997] ? kasan_quarantine_put+0xbb/0x1f0 [ 633.446787][T20997] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 633.446821][T20997] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 633.446856][T20997] sock_do_ioctl+0xdc/0x300 [ 633.446887][T20997] ? __pfx_sock_do_ioctl+0x10/0x10 [ 633.446915][T20997] ? do_futex+0x395/0x420 [ 633.446936][T20997] ? call_rcu+0x644/0x890 [ 633.446970][T20997] sock_ioctl+0x576/0x790 [ 633.447001][T20997] ? __pfx_sock_ioctl+0x10/0x10 [ 633.447033][T20997] ? __fget_files+0x2a/0x420 [ 633.447059][T20997] ? __fget_files+0x3a0/0x420 [ 633.447084][T20997] ? __fget_files+0x2a/0x420 [ 633.447112][T20997] ? bpf_lsm_file_ioctl+0x9/0x20 [ 633.447135][T20997] ? __pfx_sock_ioctl+0x10/0x10 [ 633.447165][T20997] __se_sys_ioctl+0xfc/0x170 [ 633.447201][T20997] do_syscall_64+0xec/0xf80 [ 633.447227][T20997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.447249][T20997] ? trace_irq_disable+0x37/0x100 [ 633.447277][T20997] ? clear_bhb_loop+0x60/0xb0 [ 633.447300][T20997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.447322][T20997] RIP: 0033:0x7fa95418f749 [ 633.447342][T20997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.447362][T20997] RSP: 002b:00007fa955060038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 633.447386][T20997] RAX: ffffffffffffffda RBX: 00007fa9543e5fa0 RCX: 00007fa95418f749 [ 633.447402][T20997] RDX: 0000200000000380 RSI: 00000000400442c8 RDI: 0000000000000009 [ 633.447426][T20997] RBP: 00007fa954213f91 R08: 0000000000000000 R09: 0000000000000000 [ 633.447440][T20997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.447453][T20997] R13: 00007fa9543e6038 R14: 00007fa9543e5fa0 R15: 00007ffd835739a8 [ 633.447480][T20997] [ 633.447488][T20997] [ 633.756197][T20997] Allocated by task 5149: [ 633.760639][T20997] kasan_save_track+0x3e/0x80 [ 633.765370][T20997] __kasan_kmalloc+0x93/0xb0 [ 633.770004][T20997] __kmalloc_cache_noprof+0x3e2/0x700 [ 633.775402][T20997] __hci_conn_add+0x3c5/0x1b30 [ 633.780212][T20997] hci_conn_request_evt+0x576/0xbe0 [ 633.785444][T20997] hci_event_packet+0x7e3/0x1260 [ 633.790415][T20997] hci_rx_work+0x3ee/0x1060 [ 633.794950][T20997] process_scheduled_works+0xad1/0x1770 [ 633.800516][T20997] worker_thread+0x8a0/0xda0 [ 633.805137][T20997] kthread+0x711/0x8a0 [ 633.809225][T20997] ret_from_fork+0x510/0xa50 [ 633.813830][T20997] ret_from_fork_asm+0x1a/0x30 [ 633.818625][T20997] [ 633.820969][T20997] Freed by task 5149: [ 633.824971][T20997] kasan_save_track+0x3e/0x80 [ 633.829818][T20997] kasan_save_free_info+0x46/0x50 [ 633.834908][T20997] __kasan_slab_free+0x5c/0x80 [ 633.839804][T20997] kfree+0x1c0/0x660 [ 633.843753][T20997] device_release+0x9e/0x1d0 [ 633.848379][T20997] kobject_put+0x228/0x570 [ 633.852825][T20997] hci_conn_del+0xc36/0x1240 [ 633.857468][T20997] hci_abort_conn_sync+0x658/0xe30 [ 633.862632][T20997] hci_cmd_sync_work+0x213/0x400 [ 633.867596][T20997] process_scheduled_works+0xad1/0x1770 [ 633.873167][T20997] worker_thread+0x8a0/0xda0 [ 633.877797][T20997] kthread+0x711/0x8a0 [ 633.881895][T20997] ret_from_fork+0x510/0xa50 [ 633.886514][T20997] ret_from_fork_asm+0x1a/0x30 [ 633.891310][T20997] [ 633.893667][T20997] Last potentially related work creation: [ 633.899420][T20997] kasan_save_stack+0x3e/0x60 [ 633.904124][T20997] kasan_record_aux_stack+0xbd/0xd0 [ 633.909358][T20997] insert_work+0x3d/0x330 [ 633.913722][T20997] __queue_work+0xbae/0xf90 [ 633.918289][T20997] queue_delayed_work_on+0x11a/0x1d0 [ 633.923785][T20997] l2cap_chan_del+0x285/0x620 [ 633.928931][T20997] l2cap_conn_del+0x326/0x5b0 [ 633.933716][T20997] l2cap_connect_cfm+0x122/0x10e0 [ 633.938764][T20997] hci_conn_failed+0x1ce/0x340 [ 633.943554][T20997] hci_abort_conn_sync+0x658/0xe30 [ 633.948703][T20997] hci_cmd_sync_work+0x213/0x400 [ 633.953669][T20997] process_scheduled_works+0xad1/0x1770 [ 633.959239][T20997] worker_thread+0x8a0/0xda0 [ 633.963859][T20997] kthread+0x711/0x8a0 [ 633.967975][T20997] ret_from_fork+0x510/0xa50 [ 633.972596][T20997] ret_from_fork_asm+0x1a/0x30 [ 633.977411][T20997] [ 633.979872][T20997] Second to last potentially related work creation: [ 633.986480][T20997] kasan_save_stack+0x3e/0x60 [ 633.991183][T20997] kasan_record_aux_stack+0xbd/0xd0 [ 633.996420][T20997] insert_work+0x3d/0x330 [ 634.000774][T20997] __queue_work+0xcd0/0xf90 [ 634.005303][T20997] call_timer_fn+0x16e/0x590 [ 634.009921][T20997] __run_timer_base+0x646/0x860 [ 634.014801][T20997] run_timer_softirq+0xb7/0x180 [ 634.019671][T20997] handle_softirqs+0x22b/0x7c0 [ 634.024461][T20997] __irq_exit_rcu+0x60/0x150 [ 634.029166][T20997] irq_exit_rcu+0x9/0x30 [ 634.033430][T20997] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 634.039087][T20997] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 634.045087][T20997] [ 634.047425][T20997] The buggy address belongs to the object at ffff8880a8c54000 [ 634.047425][T20997] which belongs to the cache kmalloc-8k of size 8192 [ 634.061528][T20997] The buggy address is located 3400 bytes inside of [ 634.061528][T20997] freed 8192-byte region [ffff8880a8c54000, ffff8880a8c56000) [ 634.075552][T20997] [ 634.077941][T20997] The buggy address belongs to the physical page: [ 634.084384][T20997] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xa8c50 [ 634.093163][T20997] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 634.101683][T20997] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 634.109770][T20997] page_type: f5(slab) [ 634.113778][T20997] raw: 00fff00000000040 ffff88813ffa7280 0000000000000000 0000000000000001 [ 634.122382][T20997] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 634.131186][T20997] head: 00fff00000000040 ffff88813ffa7280 0000000000000000 0000000000000001 [ 634.139904][T20997] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 634.148617][T20997] head: 00fff00000000003 ffffea0002a31401 00000000ffffffff 00000000ffffffff [ 634.157345][T20997] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 634.166041][T20997] page dumped because: kasan: bad access detected [ 634.172487][T20997] page_owner tracks the page as allocated [ 634.178227][T20997] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 18759, tgid 18758 (syz.1.3212), ts 496626742149, free_ts 496606211400 [ 634.199793][T20997] post_alloc_hook+0x234/0x290 [ 634.204614][T20997] get_page_from_freelist+0x24e0/0x2580 [ 634.210216][T20997] __alloc_frozen_pages_noprof+0x181/0x370 [ 634.216067][T20997] alloc_pages_mpol+0x232/0x4a0 [ 634.220959][T20997] allocate_slab+0x86/0x3b0 [ 634.225500][T20997] ___slab_alloc+0xe53/0x1820 [ 634.230212][T20997] __slab_alloc+0x65/0x100 [ 634.234661][T20997] __kmalloc_cache_noprof+0x41e/0x700 [ 634.240060][T20997] cryptomgr_notify+0x85/0x930 [ 634.244861][T20997] notifier_call_chain+0x19d/0x3a0 [ 634.249998][T20997] blocking_notifier_call_chain+0x6a/0x90 [ 634.255757][T20997] crypto_alg_mod_lookup+0x3b1/0x5f0 [ 634.261076][T20997] crypto_alloc_tfm_node+0x13e/0x3f0 [ 634.266407][T20997] alg_bind+0x2fa/0x570 [ 634.270591][T20997] __sys_bind+0x2c6/0x3e0 [ 634.274952][T20997] __x64_sys_bind+0x7a/0x90 [ 634.279486][T20997] page last free pid 18093 tgid 18093 stack trace: [ 634.286010][T20997] __free_frozen_pages+0xbc8/0xd30 [ 634.291153][T20997] __put_partials+0x146/0x170 [ 634.295862][T20997] __slab_free+0x294/0x320 [ 634.300303][T20997] qlist_free_all+0x97/0x100 [ 634.304931][T20997] kasan_quarantine_reduce+0x148/0x160 [ 634.310412][T20997] __kasan_slab_alloc+0x22/0x80 [ 634.315358][T20997] kmem_cache_alloc_lru_noprof+0x36c/0x6e0 [ 634.321195][T20997] sock_alloc_inode+0x28/0xc0 [ 634.325911][T20997] alloc_inode+0x6a/0x1b0 [ 634.330259][T20997] __sock_create+0x12d/0x9d0 [ 634.334871][T20997] __sys_socket+0xd7/0x1b0 [ 634.339305][T20997] __x64_sys_socket+0x7a/0x90 [ 634.344005][T20997] do_syscall_64+0xec/0xf80 [ 634.348549][T20997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.354481][T20997] [ 634.356833][T20997] Memory state around the buggy address: [ 634.362486][T20997] ffff8880a8c54c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 634.370573][T20997] ffff8880a8c54c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 634.378663][T20997] >ffff8880a8c54d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 634.386746][T20997] ^ [ 634.393182][T20997] ffff8880a8c54d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 634.401282][T20997] ffff8880a8c54e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 634.409374][T20997] ================================================================== [ 634.435685][T20997] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 634.442951][T20997] CPU: 0 UID: 0 PID: 20997 Comm: syz.0.3792 Not tainted syzkaller #0 PREEMPT(full) [ 634.452360][T20997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 634.462459][T20997] Call Trace: [ 634.465766][T20997] [ 634.468718][T20997] vpanic+0x1e0/0x670 [ 634.472741][T20997] panic+0xb9/0xc0 [ 634.476486][T20997] ? __pfx_panic+0x10/0x10 [ 634.480934][T20997] ? preempt_schedule_thunk+0x16/0x30 [ 634.486358][T20997] ? cfusbl_device_notify+0x140/0x6b0 [ 634.491809][T20997] check_panic_on_warn+0x89/0xb0 [ 634.497056][T20997] ? cfusbl_device_notify+0x140/0x6b0 [ 634.502487][T20997] end_report+0x6f/0x140 [ 634.506784][T20997] kasan_report+0x129/0x150 [ 634.511322][T20997] ? net_generic+0x1e/0x240 [ 634.515862][T20997] ? cfusbl_device_notify+0x140/0x6b0 [ 634.521277][T20997] cfusbl_device_notify+0x140/0x6b0 [ 634.526524][T20997] ? net_generic+0x1e/0x240 [ 634.531079][T20997] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 634.536838][T20997] ? caif_device_notify+0x250/0xfc0 [ 634.542078][T20997] notifier_call_chain+0x19d/0x3a0 [ 634.547247][T20997] register_netdevice+0x11fc/0x1a70 [ 634.552508][T20997] ? __mutex_lock+0x5bb/0x1350 [ 634.557322][T20997] ? __pfx_register_netdevice+0x10/0x10 [ 634.562914][T20997] ? __asan_memset+0x22/0x50 [ 634.567544][T20997] ? dev_addr_mod+0x2ce/0x3d0 [ 634.572253][T20997] register_netdev+0x40/0x60 [ 634.576966][T20997] bnep_add_connection+0x6c6/0xc70 [ 634.582103][T20997] ? __pfx_bnep_add_connection+0x10/0x10 [ 634.587756][T20997] ? __fget_files+0x3a0/0x420 [ 634.592467][T20997] do_bnep_sock_ioctl+0x40e/0x670 [ 634.597521][T20997] ? kasan_quarantine_put+0xbb/0x1f0 [ 634.602833][T20997] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 634.608409][T20997] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 634.614073][T20997] sock_do_ioctl+0xdc/0x300 [ 634.618613][T20997] ? __pfx_sock_do_ioctl+0x10/0x10 [ 634.624104][T20997] ? do_futex+0x395/0x420 [ 634.628566][T20997] ? call_rcu+0x644/0x890 [ 634.632946][T20997] sock_ioctl+0x576/0x790 [ 634.637334][T20997] ? __pfx_sock_ioctl+0x10/0x10 [ 634.642228][T20997] ? __fget_files+0x2a/0x420 [ 634.646880][T20997] ? __fget_files+0x3a0/0x420 [ 634.651604][T20997] ? __fget_files+0x2a/0x420 [ 634.656216][T20997] ? bpf_lsm_file_ioctl+0x9/0x20 [ 634.661182][T20997] ? __pfx_sock_ioctl+0x10/0x10 [ 634.666062][T20997] __se_sys_ioctl+0xfc/0x170 [ 634.670683][T20997] do_syscall_64+0xec/0xf80 [ 634.675215][T20997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.681297][T20997] ? trace_irq_disable+0x37/0x100 [ 634.686362][T20997] ? clear_bhb_loop+0x60/0xb0 [ 634.691060][T20997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.696974][T20997] RIP: 0033:0x7fa95418f749 [ 634.701410][T20997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.721039][T20997] RSP: 002b:00007fa955060038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 634.729489][T20997] RAX: ffffffffffffffda RBX: 00007fa9543e5fa0 RCX: 00007fa95418f749 [ 634.737551][T20997] RDX: 0000200000000380 RSI: 00000000400442c8 RDI: 0000000000000009 [ 634.745548][T20997] RBP: 00007fa954213f91 R08: 0000000000000000 R09: 0000000000000000 [ 634.753544][T20997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 634.761561][T20997] R13: 00007fa9543e6038 R14: 00007fa9543e5fa0 R15: 00007ffd835739a8 [ 634.769570][T20997] [ 634.773206][T20997] Kernel Offset: disabled [ 634.777534][T20997] Rebooting in 86400 seconds..