last executing test programs: 10.812937863s ago: executing program 0 (id=3542): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000140)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) (fail_nth: 2) 10.178300925s ago: executing program 0 (id=3545): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='R\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002bbd7000fddbdf253500000008000300", @ANYRES32=r3, @ANYBLOB="0400340014005500"], 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @empty}, 0x3ff, 0x0, 0x2}}, 0x2e) syz_emit_ethernet(0x6a, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaa"], 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000305000000000000000000006dc4", @ANYRES32=0x0, @ANYBLOB="8b18010000000000240012800b0001006d61637365630000140002800500080000000000050007000000000008000500", @ANYRES32=r9], 0x4c}}, 0x0) r10 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000014c0)={r10}, 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r10, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) pwritev(r11, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x300, 0x0, 0x0) 9.857759986s ago: executing program 0 (id=3549): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000002d00)={0x2, 0x4e21, @loopback}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7fc, @empty, 0x7}, 0xfffffffffffffd0e) (async) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000)=0x400, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='bbr\x00', 0x4) (async) getsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080), &(0x7f0000000100)=0x4) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@mcast1, 0x81, 0x0, 0xff, 0x1, 0x6, 0xffff}, &(0x7f0000000240)=0x20) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$packet(0x11, 0xa, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @private=0xa010100, {[@rr={0x7, 0x3, 0x6a}]}}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x0, @loopback, @multicast1}}}}}}, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x3a) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)) (async) r5 = accept$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000140)=0x1c) syz_emit_ethernet(0x46, &(0x7f0000000400)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x89, 0x0, @loopback, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0) bind$inet6(r5, &(0x7f0000000180)={0xa, 0xfffe, 0xffffbffc, @remote, 0xa}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003bc0)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001e40)="26c19899ea38a52cc76ff1648ea13c1507601e4e70329c0c4523c0123a334bd517dc52", 0x23}], 0x1}}, {{0x0, 0x0, &(0x7f0000003700)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000003b40), 0x0, &(0x7f00000004c0)=ANY=[], 0x18}}], 0x3, 0x48800) 9.145996078s ago: executing program 0 (id=3552): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) (async, rerun: 32) close(0x4) (async, rerun: 32) unshare(0x24020400) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xb, 0x3, 0x1, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x8, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x81, 0x7, 0x8, 0x100000, 0x762, 0x3, 0x429f, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x8, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x102, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0xd6f, 0x4007, 0x8c, 0x5, 0x2af, 0xf7, 0x5, 0x1, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x800000, 0x204, 0x1, 0x8, 0x8000, 0x0, 0x3, 0x0, 0x10001, 0x4e7b3717, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x5b, 0x81, 0x33b, 0x8, 0x20006, 0x5, 0x2, 0x6, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0xfffffffe, 0xc5c, 0xffffffff]}}) (rerun: 32) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmmsg(r0, &(0x7f00000093c0)=[{{&(0x7f0000002380)=@nl=@unspec, 0x80, 0x0}}], 0x1, 0x850) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x1000, 0xffffffff, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x3c}}, 0x0) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmsg$unix(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000100)=""/145, 0x91}], 0x2}, 0x2101) (async, rerun: 64) r6 = socket(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x70bd24, 0xffffffff, {0x0, 0x0, 0x1f, 0x0, {}, {0xfff1, 0x2}, {0x6, 0xe}}}, 0x24}}, 0x0) 8.940960815s ago: executing program 0 (id=3554): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$tipc(0x1e, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005900000000000000000000000000000000000000000000000000000000000000000000000200"/134], 0x210) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) readv(r4, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000016a06277400000000000100000a200000f7000a01040000000000f815f43e0000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100000008000b400000000028000480240001800c000100626974776973650014000280080003400000000208000140000000140900010073797a3000000000140000001100010000000000000000000700000a"], 0xc4}}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) connect$tipc(r0, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) 6.696924681s ago: executing program 0 (id=3559): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198914"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb0, r3, 0x2, 0x70bd2c, 0xfffffffa, {}, [@TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0}) 2.443017479s ago: executing program 3 (id=3577): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000410000009"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000840), &(0x7f0000000340)=r1}, 0x20) close(r1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000900)}, 0x20) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="50b115289c3b0999b3f8c3f16e6d7c9bc96939f2263351b8386209ad9849c383dc21e101718ef8210634c40eb40cbd4d113dc074201933ca1504c923d69d9cd768e8a1398cc4ca05f86795ca20cfc0f725cc414e6647cc7175", 0x59}], 0x1}, 0x48400) 2.145591681s ago: executing program 3 (id=3581): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123f51c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e3962dcddef6af1a11972a6b4975022278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd0971d379380bf63432872cfed453870000b219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d3f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d3112874ec51d6fe048ba6866adebab53168770a71ad901ace383e7927de217d6bf74daf41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafce5c1b3f97a297c9e490f241999085afabdd529f62ca0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637f99f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec737555392a0b06491cba71f897144910fe050038ec9e475e89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb6179d257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0117c9b737b9b59418006c1bc1aafa2768e82597251e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b101000f49e298727340e87cdefb40e56e9cfad973347d0de7ba4754ff231a1b933d8f931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf444b032dad13007b82e6044f643fc8cd07a97e2bbe636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935f602325984386b21b96492ae662082b56cf666e63a757c0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e71338a40c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2603bfab96831957a08e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d01af43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627ebe92d48aa5fc0a7bf1b5108b34d22ad004de8274c22c8ba823d964969c9f02bb78c598fa8701b000884de710b54e5ab2e8ff0c7ae23e0b601ac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105b65007c8ff1f00a8ce7e31f7c9c3e3fa61aab967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa1904122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700ba363ca3182105960bef3378a980000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450cfe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c32e4f1f22af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b404797056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa58291c4eb9d4e08ad7a9c5f04be1ab59719a8200007bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b7f76c78ba0b44ec0bdfa0d32d7030000003a073b12eb579032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e02b7cd25385f3b9628471b4364987b0b2c82a8b0f976387ebb62ead0e1b761e6ec9b824fe006ea52c0c469e3bd8fed05a486bd5511144ebb63d56d61da5fcb58e196a8923edaf228b0cb96b856b15c90b154494fb0cff768b3417fcc89acb9b9b4f8581c82ff3121b5920f4e71508eea4341ec618f4d9110928ea8dd17e36f3beb0c07d911c00eb4054ad48cab563c5ad97d732c3653635df7600091973d44ff94ac6d670ecc085501bd91b586adf858b41d918fd58f8577adb541857dbbf33be97c4809c6595ebfff19b34cec7fd877e8f2aad6a1a6a4ec6dbb3de42bb2e75b4768d139d7b7ff5d51e6863b6704901b59fd92495608395fce98c267a3846b67e7a5b57d995e07dca8db555aea5a0f6f1cd85d791f22d06ff37fcbb22b2d9296b36faee22e513b276fc8494ce31699343278aa8f531ee549d2ba495059c80d5748d8a0cb19df27338aaafbf0849c31572d17a786383b3f619212651a076e5148fa6421f5405e65ee31e6fbd510d92c17fe12a7f203066848e2a9adef66ad7ae8edea20fb8c7233de3736949e15b88699c2f8576060cf95d2593828abde6e2eed2a717655782ae9e589f5de9792c810ec07a842bca96e594f13211eae7ee1919b7af1e33ff726792cbb1366fb8a3684370e35122b0ad40f55846ca7d39cf6f9a1cfa5460f537e89e1c5f3cd10a3d8ae3ecec0c7e4114aec30742d88f313d74447723808da0889e34b31c13a79b8bb105cdcb234d56246bbf003c0ad03ff20f573df9604720d652b0a0cc5d90a284b5c7824bfdc4e3f18eaf9820ffbd8c4f32c8de631c181ab76505dac753fec759b0414cb3c5dfa02b6a3b93ff79bcf8c613b4a9124923e7e6ce74266fd78564000000000ce0d3ac2350502cf4a410152ee893d57622bee2b52df83cd30b4ae17d507fba05e7055db7e6d4cfc085773b900ca50bee4d49529f24bab389fb87fbb481340e8ce1810727212dc5e96d99de07611cb588a5d8b5c510c1f5b3fb568971646821b50dc2542003eb60a4ee9398ae4b6681c29cd921fb35b12ca111f12c59ac39dde4bf4f7524362304610979f5199ef9d271af60a421e29c6483423157ed4c2721123ddf33313a97ec1a55115b6df23157ad17b5e544db26c46d31b2e7375c37ace025955c9482e1ef841554c202c356842233c57c258f8f2043b4b6de433e8a2fb9365b65496c5777c1a1a223763d51190a24fb4047ad7ff6258f1b000000000000000000000000e0ef07726228fb150d09f697ee3db6cc096676225780d422fe917a5c57bedabb42399727b386e979dde3b7243dad1f78e8592937866cfc017f3a8ad31c53115fb7f3452bd3318c4a17cc80bcab32d9ed35273c3c930719ddb5b757f9d85cc86ddd"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000008c0)=@newtaction={0x12c, 0x30, 0xb, 0x70bd25, 0x0, {}, [{0x118, 0x1, [@m_skbmod={0x114, 0xa, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x8, 0x0, 0x47310, 0x80}, 0xc}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x9f, 0x6, "c7fe53954f5c801fe73dc2b73964e7036d441ce4a83debcbe7bf122d05409b26f37d0b68a914e9c554581d1bab9ed1e3996d89836325873144e9151a32a98e3b43b41f32728d64689a5025282bd523fe8126d938bf06f2622a6ee72ef5967b00f775e4534abf7e1b6c5d5a98640906f87899c2b9a0ddf23f035597d9feaed9f91b491b03c35fd7723bc61bc7048863d404a4026593c7ff218645bf"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$inet(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000880)="8e4d", 0x2}], 0x1}, 0x4040) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f00000004c0)={0x2, 'ip6_vti0\x00', {0x7}, 0x2}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x10, r7}, 0x10) sendmsg$TIPC_NL_NET_SET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4008040}, 0x2000c050) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000100)={r3}) socket(0xb, 0x6, 0x3) unshare(0x22020400) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16], 0x108}, 0x1, 0x0, 0x0, 0x8895}, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000001c0)) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYRES64=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x7, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.854073195s ago: executing program 3 (id=3584): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f00000002c0)={0x5, 0x0, 0xf51, 0x8b, 0x1, 0xe, 0x7, "3ac069e922b295026cdd7bfc75a3aabc1b5bcbc9", "fcd54902106c93bb93cc28d779f5a47196a13199"}) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000000)='\a', 0x1, 0x40008d0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x3b}}, 0x1c) 1.775478072s ago: executing program 1 (id=3587): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x10c00001, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ffc094010ebc000000000000008000f0fffeff0300000000fff5dd00000010000100090810000c00000000040000", 0x58}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000100), &(0x7f0000000180)=r0}, 0x20) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x80000003, 0x5) write$tun(r7, &(0x7f0000000bc0)={@val={0x0, 0x9}, @val={0x1, 0x4, 0xfff, 0x1, 0x8000, 0x6}, @mpls={[], @ipv6=@tipc_packet={0x5, 0x6, "bb935d", 0x20, 0x6, 0xff, @local, @local, {[], @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x1bb, 0x0, 0x2, 0x4, 0x3, 0x3, 0x6, 0x0, 0x0, 0x4e22, 0x4e23}, 0x2, 0x2}}}}}}}, 0x56) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}], 0x10) 1.684045947s ago: executing program 3 (id=3588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0xf, 0x8}}]}}]}, 0x3c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000540000005400000002000000000000000100000d000000000000000004000000000000000200000d0000"], 0x0, 0x6e, 0x0, 0x1}, 0x28) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001300010000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000010000c800c0022"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240)="29b0", 0x2000cc0, r9}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r9}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r9, &(0x7f00000001c0)="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", &(0x7f0000000040)=""/30}, 0x20) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x10, r6, 0x35908000) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r8) sendmsg$NLBL_CALIPSO_C_ADD(r8, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, r10, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, r13, 0x0, 0x41400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r13, 0x0, 0x343}}}}}}]}, 0x48}}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r10, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.60887463s ago: executing program 4 (id=3590): r0 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040)) connect$netrom(r0, &(0x7f0000000080)={{0x3, @default, 0x2}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast]}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe0000000000000008", 0x1d) 1.531565091s ago: executing program 2 (id=3591): syz_emit_ethernet(0xfffffffffffffd0c, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0xff, 0x0, @private1, @mcast1, [@hopopts={0x3a, 0x1}]}}}}}}}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x23, &(0x7f0000000000)=""/34, &(0x7f0000000080)=0x22) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r0, &(0x7f0000000740), 0x0, 0x0) 1.521088119s ago: executing program 1 (id=3592): r0 = socket$nl_rdma(0x10, 0x3, 0x14) accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) (async) r1 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000080)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000181401"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.393887756s ago: executing program 2 (id=3593): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="78000000030801020000000000000000000000020600024000000000540004800800014046aea47d08000b2704d60c0608000740000000000800094000000000080008400000a9c80800044000000008080005400000000808000840fffffe01080001400000000c080002400000000305000300ff"], 0x78}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01070000000000100000670000000800c30000"], 0x2c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f61640034000280080004400000000008000840d60000010800024000000002080005400000000008000340"], 0x9c}}, 0x4000020) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r6, 0x400442c9, 0x0) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000060000b000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r11, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r7, &(0x7f0000000400)) (async) epoll_ctl$EPOLL_CTL_MOD(r12, 0x3, r7, &(0x7f0000000fc0)) (async) sendto$inet6(r1, &(0x7f00000005c0)="04", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffff9, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 1.390661189s ago: executing program 4 (id=3594): mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x9}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) 1.384655332s ago: executing program 1 (id=3595): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000d7900000000500000014000387027571c366148004000400080002000900000004000100180001801400020073797a5574756e000000000000000000b29e530403f7278eb09669b8473304eb2e4e"], 0x40}}, 0x0) getsockname(r0, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x80) 1.277213238s ago: executing program 2 (id=3596): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000300)=@int=0x615a, 0x4) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) close(r5) socket$unix(0x1, 0x1, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) accept4(r6, 0x0, 0x0, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-twofish-3way\x00'}, 0x58) socketpair$unix(0x1, 0x5, 0x0, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) socket$kcm(0x10, 0x2, 0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r10, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}}, 0x0) write$nci(r7, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x60000121) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, 0x0, 0x200408c0) 1.232427816s ago: executing program 1 (id=3597): syz_emit_ethernet(0x2e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x4e22, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x840}, 0x20000000) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c0400001000010400000000000000f700004800", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c000700"], 0x40c}}, 0x0) 1.208204739s ago: executing program 4 (id=3598): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x50}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x4, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000280)=r0}, 0x20) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0xd812, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)=r0}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'ip6gre0\x00', 0x0, 0x29, 0xa, 0x3, 0x7, 0x23, @remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, 0x7800, 0x1, 0x2, 0x2}}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x91, 0x91, 0x4, [@datasec={0x3, 0x7, 0x0, 0xf, 0x1, [{0x1, 0x8, 0xffff}, {0x2, 0x400, 0x80000000}, {0x3, 0xc00000, 0xe}, {0x4, 0x81, 0x7}, {0x4, 0x7, 0x3ff}, {0x4, 0x6, 0x4}, {0x1, 0x60, 0x9}], "15"}, @typedef={0xa, 0x0, 0x0, 0x8, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x2}}, @ptr={0x2, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x30, 0x30]}}, &(0x7f00000008c0)=""/68, 0xb0, 0x44, 0x0, 0x5}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x27, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, [@map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}, @call={0x85, 0x0, 0x0, 0xb}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_val={0x18, 0x6, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000700)='GPL\x00', 0x80000001, 0x0, 0x0, 0x40f00, 0x0, '\x00', r7, 0x25, r8, 0x8, &(0x7f0000000980)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000009c0)={0x2, 0xb, 0x2, 0x3}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000a00)=[{0x4, 0x2, 0x5, 0xa}, {0x1, 0x4, 0x4, 0x5}, {0x1, 0x2, 0x0, 0xb}, {0x0, 0x5, 0xb, 0x5}, {0x4, 0x2, 0xb, 0x8}, {0x5, 0x1, 0x2, 0xc}, {0x2, 0x5, 0xa, 0x5}, {0x3, 0x3, 0x0, 0x7}, {0x5, 0x4, 0xd, 0x1}, {0x5, 0x1, 0x4}], 0x10, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000d1000000000000000000007301410100000000956f323f"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xcb, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.02385239s ago: executing program 4 (id=3599): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="09000000070000002a00000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000040)=0x9, 0x4) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x125740, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 932.53343ms ago: executing program 1 (id=3600): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x80ad}, 0x1c) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @empty, 0x80ad}, 0x1c) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x70fd3a, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}}, 0x24}}, 0x24000010) 927.069616ms ago: executing program 3 (id=3601): r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x28, r1, 0x7d243a6ea807936d, 0x12, 0x25dfdbf8, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x404c881}, 0x4000080) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000006c0)={'wpan1\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r11) sendmsg$IEEE802154_LLSEC_SETPARAMS(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x24, r12, 0x19, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x44004094) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x14}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r12, 0x200, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000895}, 0x48004) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)={0x24, r6, 0xf, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r13) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r13, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x30, r14, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x4}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000041}, 0x64048080) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r17, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r16, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x38, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r18}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x7}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r3, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r18}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r19}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4000) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x24040000, 0x0, 0x3d) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 232.683235ms ago: executing program 1 (id=3602): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x19, &(0x7f00000000c0)=""/25, 0x40f00, 0x0, '\x00', r1}, 0x94) socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800451000380080000000019078d8ac1e0001ac1414aa030190781206183f25000000006700000089f40000000001e000000200186371ae9b1c03"], 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="028b85780bdc5819d50000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0000004600a4985ce4f65b42051cf5eea9c67b0000000000000000000000000000000000528f148c47162b2100e9817c9830a93ced2dfc4d13c5612f5fa5aa9b366c0da2f4", @ANYRES32, @ANYRESDEC, @ANYBLOB="000000000000000000001000000000000000000000000000000058f001d18d03cf048c6031dfb0ad1dc98c66bbb0dd2a5a4be90971022d72589e41447d23ef408b352b92d1d4d20b550273f0aa5b7896a5786f8f66332f5ad28fb0d5e181f26ae70f16fed6ff864d1a99f597fc31678639306ec87b5ab4c6deb17021827a8f3bd6cae0cc5a9a4f9f4a5fa9", @ANYRES64, @ANYRES16], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xf, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRES64=r1, @ANYRES16=r0], 0x0, 0xf7ea, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r8, 0x0, 0x2, 0x0) splice(r7, 0x0, r6, 0x0, 0x41c, 0xe) socket$packet(0x11, 0x2, 0x300) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000000), 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x200}, 0x4) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000140)={0x8, 0x3}, 0x4) ioctl$sock_qrtr_TIOCINQ(r8, 0x541b, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r5, @ANYBLOB="480000001000390400000000fcd3df25000003e4", @ANYRES32=0x0, @ANYRESDEC=r2], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="00010000031401", @ANYRES64=r4, @ANYRES64=r9], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x409d1) r12 = socket$inet(0xa, 0x801, 0x84) connect$inet(r12, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendfile(r4, r5, &(0x7f0000000100), 0x8) socket$can_raw(0x1d, 0x3, 0x1) listen(r12, 0x8) r13 = accept4(r12, 0x0, 0x0, 0x0) sendto$inet(r13, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) 231.177755ms ago: executing program 2 (id=3603): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r0, 0x5) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="310428bd7000ffffffff1600000018000180140002006e657464657673696d300000000000000500040000000000"], 0x34}}, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @private=0xa010102}, 0x10) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) unshare(0x22020600) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r6}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) recvmsg(r2, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000003d80)=""/183, 0xb7}], 0x1}, 0x2) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) bind$802154_dgram(r7, &(0x7f0000000240)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmsg$alg(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000001701000002000000000000000000000018000000000000001401"], 0x30}, 0x0) sendmsg$key(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x7, 0xb7, 0x6, 0x1c, 0x0, 0x70bd27, 0x25dfdbfd, [@sadb_address={0x3, 0x5, 0x2b, 0x80, 0x0, @in={0x2, 0x4e20, @multicast1}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in=@broadcast, 0xb, 0x10, 0x14}, @sadb_lifetime={0x4, 0x3, 0x2, 0x100, 0xc000}, @sadb_x_nat_t_type={0x1}, @sadb_x_sec_ctx={0xb, 0x18, 0x3, 0x1, 0x49, "aa0a68b4f9aac72f84777fe5ccaff455778313838989d88800138691b1654d5f9ff1a886915d14f979e20f3e4d139e2b42f0ce8a013b30e2ab4734e1948fe8b819835c6602ddd83732"}, @sadb_sa={0x2, 0x1, 0x4d6, 0x1, 0x0, 0x8f, 0x2, 0xa0000001}]}, 0xe0}}, 0x0) 227.095977ms ago: executing program 4 (id=3604): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x120}}, 0x0) 168.502589ms ago: executing program 3 (id=3605): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYRES64=r0, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0xf7, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/65, 0x41}, 0x9}], 0x1, 0x10002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb3}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x80) r6 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=""/239, 0xef}], 0x1, &(0x7f0000000700)=""/78, 0x4e}, 0x9}], 0x1, 0x40002122, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100030a0000000600000000000000030006000000000002000000ff"], 0x50}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r8, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c000500040000020000020008000100030000000500020003000000050002"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) sendmsg$tipc(r6, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000500)="e8", 0x1}], 0x1}, 0x4800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', 0x0, 0x7, 0x8000, 0x7, 0x6ada, {{0x5b, 0x4, 0x0, 0x9, 0x16c, 0x65, 0x0, 0x6, 0x29, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x44, 0x7a, 0x1, 0x5, [{@loopback, 0x6897dadc}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x80000001}, {@broadcast, 0x6}, {@broadcast, 0x3ff}, {@remote, 0x5}, {@multicast1, 0x9}, {@multicast2, 0xdc}, {@broadcast, 0xfffffffe}]}, @ssrr={0x89, 0x1b, 0x35, [@loopback, @empty, @remote, @private=0xa010102, @broadcast, @multicast2]}, @noop, @timestamp_addr={0x44, 0xc, 0x17, 0x1, 0x2, [{@rand_addr=0x64010101, 0x730}]}, @cipso={0x86, 0x37, 0xffffffffffffffff, [{0x1, 0x4, "8bc5"}, {0x7, 0x6, "ba14f424"}, {0x7, 0x12, "17acdaaa8b06edc2630456a900c7aebb"}, {0x2, 0x7, "1fc3cc12b5"}, {0xd, 0xe, "286e963d86c72963fd0b0000"}]}, @ssrr={0x89, 0x27, 0x73, [@broadcast, @multicast1, @multicast1, @loopback, @broadcast, @remote, @broadcast, @multicast2, @empty]}, @timestamp={0x44, 0x18, 0x7c, 0x0, 0xf, [0x31, 0x4, 0x35c3, 0x8, 0x7f]}, @cipso={0x86, 0x45, 0x2, [{0x5, 0x6, "d254c26e"}, {0x2, 0xd, "de4373ea10c57082e36be7"}, {0x2, 0xd, "9767aa264743e9f79a41fa"}, {0x0, 0x5, "c36378"}, {0x6, 0x12, "441b02fd9ff37cd94e0d4d25ffec2808"}, {0x6, 0x8, "320c40aa8309"}]}, @cipso={0x86, 0x2d, 0x0, [{0x0, 0xb, "6f46becd7bb568c656"}, {0x7, 0xa, "37a14cc16b67f573"}, {0x2, 0xc, "2d780d6eb8684fb46e05"}, {0x1, 0x6, "25b0d915"}]}, @end]}}}}}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r6, 0x10f, 0x84, &(0x7f0000000340), &(0x7f00000003c0)=0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060102000000000000000001000001140007800800694f2315261f2b8e06400000000308000840000000300500010006000008050005000200000405000400000080000900020073797a310000000012000300686173683a6e6574"], 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000c00)={{{@in6=@remote, @in=@multicast2}}, {{@in6=@empty}, 0x0, @in=@loopback}}, 0x0) 35.745601ms ago: executing program 4 (id=3606): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee11, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3e}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf}]}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x48804}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @rand_addr=0x64010102}, 0xc) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xfffffffb}]}}, @TCA_RATE={0x6, 0x5, {0x61, 0xad}}]}, 0x40}}, 0x0) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x44) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x34, r10, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}]}, 0x34}}, 0x44040) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r7, 0x30, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 35.054397ms ago: executing program 2 (id=3607): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xa8}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x98, &(0x7f00000000c0)=""/152}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 0s ago: executing program 2 (id=3608): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000001d00)=""/10, 0xa}, {0x0}], 0x2}, 0xc}], 0x1, 0x10000, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) unshare(0x2c060000) unshare(0x24020400) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d440fe0000000000002900000003000000", 0xfe60) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b300", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000b8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r8}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x8, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) syz_emit_ethernet(0x11a, &(0x7f0000000780)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x1c, 0x4, 0x2, 0x6, 0x10c, 0x66, 0x0, 0x1, 0x11, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x9c, 0x3, 0xd, [{@private=0xa010102, 0x6}, {@broadcast, 0x7de4}, {@private=0xa010102, 0x4}, {@multicast1, 0x4}]}, @ssrr={0x89, 0x1b, 0x53, [@empty, @empty, @remote, @loopback, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x28}]}, @end, @lsrr={0x83, 0x1b, 0x59, [@rand_addr=0x64010101, @loopback, @multicast2, @rand_addr=0x64010100, @local, @multicast2]}]}}, {0x4e22, 0x5e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7e4236bbcbfe3890a17a3fec479ff459a7fb2de618e4adf4b2f71af4363dddd8", "67c3360415c2bfaa22e46732f0e746302ed6cb5f42f78b28ce342e4fcee4c871ff2a94475c8acf3ab0025e18a0b8b211", "7c8e9b0841cf4869d9bcf5bf687bded45d362aa12e129f1cd99e849d", {"f586092ce1afbd8ad065eb738d5b8dec", "55d815078b5b64519153f69325bf6138"}}}}}}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x24}}, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @empty, @local, {[@routing={0x84}], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc392c91c1f824bc301b3069a02b9c86d2ffac3ed63ddee130cbc248d6a3345d3f9553db78077072d569a6633f8bdbdb1a209a8be9b6830225994f9021b57ddd6a44e8ea40b205c6cf437f45bffaef053a5916dcc6de62ee02bdb8ce3acec8ad97fc95dab1307d254790c71f32e4678957cf0121dccabe73a03c6cacbcbdaad8801b04d9836555a982c357a06e2db7e9bf62aed8cdebbb7a71a2410b929015b61f16e54bffd038996a717b9c7cc3696d8a1205e8266bf782c3a45b0e31461d6a3ed62396088833f69248b24fbf6f81dcc08b98826c3bd2325ade54f614f2d4a153e3e3527d93978483f2bfeada6b64bc43f2a725c30e843d13e6ab34cfc38d488b3ef50cd04318fac1f89905f017644cfa2de058ad399871d1316264813c2289d0b6cfeddfbca36ce93fd4a1bfc93bb74453cfbb9c6ca22320ffc9cb0a3fff046a5678c066e617cd3ac024dfead04b99877f448b78208938585c7563efe815ff0cc47da5fff521d9730ddc89f4aeceadd06f2ea6b9ae72c9407aa550a0155db3b4bc6aaa382a30552f699cb6a1af9972a8ccc483f98952dfbde3d712ea8673eacdbb77490d833fc90f0f02e7c073d2917db70831496a88defc10667dc4c1b7399191bdc7857eb090e79c332bf9f71bb5377178e6232800c93d22318dc5ab8d5dfa2f074a6c23acb61c89f2f078ec91e9817e11a4c8295c19634b5ca2df74"}}}}}, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x20, 0x0, 0x2a) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000838500000004000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x18) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="18000000560200"/24], 0x18}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1a, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="181000000000000000000000000000001800000001c6e842000000004e0e0000950000000000c574"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x27, 0xfffffffffffffffc, 0x0, 0x19, '\x00', 0x0, 0x38}, 0x94) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x7c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {{{}, {}, @broadcast}, 0x0, @random=0x5, 0x8801, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0xf7, 0x40, 0x3d, 0x4}}}}], @NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44}, 0x40) kernel console output (not intermixed with test programs): 6283] bond2: left allmulticast mode [ 424.153703][T16283] bond3: left allmulticast mode [ 424.161195][T16283] macvlan2: left allmulticast mode [ 424.166498][T16283] syztnl0: left allmulticast mode [ 424.173735][T16283] bridge2: left allmulticast mode [ 424.181685][T16283] macvlan3: left allmulticast mode [ 424.187757][T16283] bond4: left allmulticast mode [ 424.192785][T16283] bridge3: left allmulticast mode [ 424.198564][T16283] ip6tnl2: left allmulticast mode [ 424.203824][T16283] bond5: left allmulticast mode [ 424.209422][T16283] vxlan0: left allmulticast mode [ 424.214552][T16283] bond6: left allmulticast mode [ 424.220162][T16283] ip6gretap1: left allmulticast mode [ 424.225636][T16283] bridge0: left allmulticast mode [ 424.231338][T16283] vlan2: left allmulticast mode [ 424.236209][T16283] bond0: left allmulticast mode [ 424.241720][T16283] bridge4: left allmulticast mode [ 424.247521][T16283] veth2: left allmulticast mode [ 424.252539][T16283] veth3: left allmulticast mode [ 424.258311][T16283] vxlan1: left allmulticast mode [ 424.263509][T16283] bond7: left allmulticast mode [ 424.269134][T16283] bond8: left allmulticast mode [ 424.274216][T16283] veth4: left allmulticast mode [ 424.279850][T16283] veth5: left allmulticast mode [ 424.284973][T16283] bond9: left allmulticast mode [ 424.291433][T16283] bond10: left allmulticast mode [ 424.296502][T16283] geneve3: left allmulticast mode [ 424.303897][T16283] macvlan4: left allmulticast mode [ 424.309530][T16283] macvlan5: left allmulticast mode [ 424.314811][T16283] bond11: left allmulticast mode [ 424.321014][T16283] bridge5: left allmulticast mode [ 424.326217][T16283] ip6gre1: left allmulticast mode [ 424.331870][T16283] bond12: left allmulticast mode [ 424.337758][T16283] veth6: left allmulticast mode [ 424.342862][T16283] veth7: left allmulticast mode [ 424.348696][T16283] vxcan0: left allmulticast mode [ 424.353792][T16283] vxcan1: left allmulticast mode [ 424.364881][T16283] bridge6: left allmulticast mode [ 424.370561][T16283] bridge7: left allmulticast mode [ 424.375730][T16283] veth8: left allmulticast mode [ 424.381503][T16283] ip6gretap2: left allmulticast mode [ 424.387530][T16283] bridge8: left allmulticast mode [ 424.392775][T16283] ip6gre2: left allmulticast mode [ 424.399330][T16283] macsec1: left allmulticast mode [ 424.404571][T16283] veth10: left allmulticast mode [ 424.410584][T16283] veth11: left allmulticast mode [ 424.415855][T16283] veth12: left allmulticast mode [ 424.421660][T16283] veth13: left allmulticast mode [ 424.427467][T16283] gretap1: left allmulticast mode [ 424.432623][T16283] bridge9: left allmulticast mode [ 424.438640][T16283] bond13: left allmulticast mode [ 424.443711][T16283] syztnl1: left allmulticast mode [ 424.622296][T16295] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2720'. [ 424.916537][T16319] netlink: 'syz.4.2726': attribute type 4 has an invalid length. [ 424.934559][T16320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2727'. [ 424.969927][T16319] netlink: 'syz.4.2726': attribute type 4 has an invalid length. [ 424.996710][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 425.143501][T16332] netlink: 'syz.4.2726': attribute type 13 has an invalid length. [ 425.240865][T16328] lo speed is unknown, defaulting to 1000 [ 425.260515][T16332] netlink: 'syz.4.2726': attribute type 17 has an invalid length. [ 425.309494][T16339] : entered promiscuous mode [ 425.954926][T16332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.036180][T16332] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.043458][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 426.068150][T16332] tipc: Resetting bearer [ 426.101267][T16332] tipc: Resetting bearer [ 426.145010][T16332] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 426.177325][T16360] C: renamed from lo [ 426.184696][T16360] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 426.210832][T16328] wg1 speed is unknown, defaulting to 1000 [ 426.219492][T16328] lo speed is unknown, defaulting to 1000 [ 427.076827][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 427.307416][T16421] syzkaller1: entered promiscuous mode [ 427.313672][T16421] syzkaller1: entered allmulticast mode [ 427.468317][T16427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2755'. [ 427.532090][T16429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2756'. [ 428.002061][T16445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2759'. [ 428.116792][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 428.128676][T16447] netlink: 'syz.0.2760': attribute type 1 has an invalid length. [ 428.769350][T16472] netlink: 'syz.2.2770': attribute type 1 has an invalid length. [ 428.801195][T16469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2769'. [ 428.811120][T16469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2769'. [ 428.984520][T16470] syzkaller0: entered promiscuous mode [ 429.023073][T16470] syzkaller0: entered allmulticast mode [ 429.030803][T16481] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2772'. [ 429.156805][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 429.239383][T16488] netlink: 'syz.4.2774': attribute type 13 has an invalid length. [ 429.283220][T16488] netlink: 'syz.4.2774': attribute type 17 has an invalid length. [ 429.315228][T16488] tipc: Resetting bearer [ 429.364822][T16488] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 429.673242][T16500] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2777'. [ 429.761059][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 429.773677][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 429.784901][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 429.795694][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 429.805812][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 429.816555][T16498] pim6reg1: entered promiscuous mode [ 429.849541][T16498] pim6reg1: entered allmulticast mode [ 429.988595][T16506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2778'. [ 429.999693][T16506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2778'. [ 430.014990][T16506] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2778'. [ 430.061720][T16503] C speed is unknown, defaulting to 1000 [ 430.184048][T10003] vlan3: left allmulticast mode [ 430.196812][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 430.218643][T10003] vlan3: left promiscuous mode [ 430.225908][T10003] veth1: left promiscuous mode [ 430.242722][T10003] bridge7: port 3(vlan3) entered disabled state [ 430.311636][T10003] veth0_to_bond: left allmulticast mode [ 430.327381][T10003] veth0_to_bond: left promiscuous mode [ 430.337963][T10003] bridge7: port 2(veth0_to_bond) entered disabled state [ 430.375112][T10003] veth9: left allmulticast mode [ 430.387378][T10003] veth9: left promiscuous mode [ 430.398180][T10003] bridge7: port 1(veth9) entered disabled state [ 430.453939][T16526] netlink: 'syz.4.2786': attribute type 9 has an invalid length. [ 430.692985][T10003] batman_adv: batadv0: Removing interface: ip6gretap2 [ 430.989582][T10003] bond10 (unregistering): (slave geneve3): Releasing active interface [ 431.237344][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 431.321600][T10003] bond11 (unregistering): (slave bridge5): Releasing backup interface [ 431.702927][T10003] bond3 (unregistering): (slave macvlan4): Releasing backup interface [ 431.727737][T10003] bond0 (unregistering): Released all slaves [ 431.751420][T10003] bond1 (unregistering): Released all slaves [ 431.884568][T10003] bond2 (unregistering): Released all slaves [ 431.887464][ T5846] Bluetooth: hci2: command tx timeout [ 432.015825][T10003] bond3 (unregistering): Released all slaves [ 432.031250][T10003] bond4 (unregistering): Released all slaves [ 432.171642][T10003] bond5 (unregistering): Released all slaves [ 432.188214][T10003] bond6 (unregistering): Released all slaves [ 432.280440][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 432.328049][T10003] bond7 (unregistering): Released all slaves [ 432.437320][T10020] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 432.469399][T10003] bond8 (unregistering): Released all slaves [ 432.484461][T10003] bond9 (unregistering): Released all slaves [ 432.609014][T10003] bond10 (unregistering): Released all slaves [ 432.623531][T10003] bond11 (unregistering): Released all slaves [ 432.756125][T10003] bond12 (unregistering): (slave veth7): Releasing active interface [ 432.765780][T10003] bond12 (unregistering): Released all slaves [ 432.781771][T10003] bond13 (unregistering): Released all slaves [ 432.816304][T16503] wg1 speed is unknown, defaulting to 1000 [ 433.030698][T16503] lo speed is unknown, defaulting to 1000 [ 433.030811][T10003] : left promiscuous mode [ 433.175969][T16547] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 433.186501][T16547] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 433.303095][T10003] tipc: Left network mode [ 433.326823][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 433.420685][T16561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.519765][T16557] IPVS: set_ctl: invalid protocol: 42 224.0.0.2:20001 [ 433.526718][T16564] C speed is unknown, defaulting to 1000 [ 433.973452][ T5846] Bluetooth: hci2: command tx timeout [ 434.209565][T16564] wg1 speed is unknown, defaulting to 1000 [ 434.271531][T16564] lo speed is unknown, defaulting to 1000 [ 434.278295][T16580] tipc: Enabling of bearer rejected, failed to enable media [ 434.355648][T16584] __nla_validate_parse: 4 callbacks suppressed [ 434.355672][T16584] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2803'. [ 434.361984][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 434.669455][T16590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2805'. [ 434.752986][T16599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2807'. [ 434.769306][T16599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2807'. [ 434.778944][T16599] netlink: 'syz.1.2807': attribute type 15 has an invalid length. [ 435.003352][T16603] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 435.092081][T16503] chnl_net:caif_netlink_parms(): no params data found [ 435.396695][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 435.475260][T16617] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2813'. [ 435.490118][T16618] netlink: 'syz.1.2812': attribute type 1 has an invalid length. [ 435.501481][T16618] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2812'. [ 435.543104][T16621] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2813'. [ 435.794921][T10003] hsr_slave_0: left promiscuous mode [ 435.858203][T10003] hsr_slave_1: left promiscuous mode [ 436.037325][ T5846] Bluetooth: hci2: command tx timeout [ 436.240697][T16648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.413862][T16654] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2820'. [ 436.436701][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 436.534763][T16656] netlink: 'syz.3.2819': attribute type 12 has an invalid length. [ 436.769590][T16664] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2822'. [ 437.138180][T10014] smc: removing ib device syz! [ 437.486683][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 437.554140][T16503] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.562176][T16503] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.570666][T16503] bridge_slave_0: entered allmulticast mode [ 437.579345][T16503] bridge_slave_0: entered promiscuous mode [ 437.612148][T16503] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.637419][T16503] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.644721][T16503] bridge_slave_1: entered allmulticast mode [ 437.704185][T16503] bridge_slave_1: entered promiscuous mode [ 437.763216][T16669] xt_TPROXY: Can be used only with -p tcp or -p udp [ 437.892144][T16671] netlink: 'syz.4.2825': attribute type 1 has an invalid length. [ 437.907481][T16671] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2825'. [ 437.944635][T16671] netlink: 'syz.4.2825': attribute type 1 has an invalid length. [ 438.116918][ T5846] Bluetooth: hci2: command tx timeout [ 438.222217][T16503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.420815][T16503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.525258][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 438.766162][T16503] team0: Port device team_slave_0 added [ 438.794328][T16690] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 438.944696][T16503] team0: Port device team_slave_1 added [ 439.227841][T16503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.234853][T16503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.399079][T16503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.440149][T16503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.463059][T16503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.542767][T16503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.557365][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 440.088225][T16503] hsr_slave_0: entered promiscuous mode [ 440.108302][T16503] hsr_slave_1: entered promiscuous mode [ 440.134945][T16503] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 440.157406][T16503] Cannot create hsr debugfs directory [ 440.415013][T10003] IPVS: stop unused estimator thread 0... [ 440.424892][T16742] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 440.432185][T16742] IPv6: NLM_F_CREATE should be set when creating new route [ 440.439495][T16742] IPv6: NLM_F_CREATE should be set when creating new route [ 440.498090][T16744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2842'. [ 440.596805][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 440.897703][T16763] xt_CT: No such helper "syz0" [ 441.029321][T16776] netlink: 'syz.2.2847': attribute type 27 has an invalid length. [ 441.323711][T16784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2853'. [ 441.369335][T16786] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2851'. [ 441.456239][T16785] C speed is unknown, defaulting to 1000 [ 441.492332][T16790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.543509][T16788] netlink: 'syz.3.2854': attribute type 10 has an invalid length. [ 441.561269][T16788] netlink: 'syz.3.2854': attribute type 49 has an invalid length. [ 441.608732][T16781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.623239][T16794] netlink: 'syz.4.2855': attribute type 29 has an invalid length. [ 441.647195][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 441.732357][T16781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.805034][T16799] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2856'. [ 442.043771][T16503] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 442.128827][T16503] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 442.176411][T16503] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 442.231422][T16503] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 442.259210][T16785] wg1 speed is unknown, defaulting to 1000 [ 442.259365][T16799] C speed is unknown, defaulting to 1000 [ 442.486123][T16822] bond0: option mode: unable to set because the bond device has slaves [ 442.676752][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 442.944656][T16827] netlink: 'syz.1.2862': attribute type 23 has an invalid length. [ 443.140741][T16503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.186360][T16503] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.225543][T10031] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.232884][T10031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.275598][T10031] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.282865][T10031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.716694][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 443.780736][T16839] C speed is unknown, defaulting to 1000 [ 443.795131][T16799] wg1 speed is unknown, defaulting to 1000 [ 444.032520][T16852] netlink: 'syz.4.2867': attribute type 10 has an invalid length. [ 444.083574][T16850] pim6reg1: entered promiscuous mode [ 444.092370][T16850] pim6reg1: entered allmulticast mode [ 444.310828][T16503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.443808][T16860] FAULT_INJECTION: forcing a failure. [ 444.443808][T16860] name failslab, interval 1, probability 0, space 0, times 0 [ 444.483800][T16503] veth0_vlan: entered promiscuous mode [ 444.496096][T16860] CPU: 0 UID: 0 PID: 16860 Comm: syz.2.2869 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 444.496128][T16860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 444.496145][T16860] Call Trace: [ 444.496154][T16860] [ 444.496163][T16860] dump_stack_lvl+0x189/0x250 [ 444.496195][T16860] ? __pfx____ratelimit+0x10/0x10 [ 444.496227][T16860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 444.496251][T16860] ? __pfx__printk+0x10/0x10 [ 444.496283][T16860] ? __pfx___might_resched+0x10/0x10 [ 444.496307][T16860] ? fs_reclaim_acquire+0x7d/0x100 [ 444.496340][T16860] should_fail_ex+0x414/0x560 [ 444.496367][T16860] should_failslab+0xa8/0x100 [ 444.496400][T16860] __kmalloc_cache_noprof+0x70/0x3d0 [ 444.496427][T16860] ? rtnl_newlink+0xed/0x1c70 [ 444.496452][T16860] rtnl_newlink+0xed/0x1c70 [ 444.496486][T16860] ? __pfx_rtnl_newlink+0x10/0x10 [ 444.496511][T16860] ? __lock_acquire+0xab9/0xd20 [ 444.496542][T16860] ? __lock_acquire+0xab9/0xd20 [ 444.496575][T16860] ? __lock_acquire+0xab9/0xd20 [ 444.496621][T16860] ? is_bpf_text_address+0x26/0x2b0 [ 444.496664][T16860] ? __lock_acquire+0xab9/0xd20 [ 444.496712][T16860] ? __pfx_rtnl_newlink+0x10/0x10 [ 444.496731][T16860] rtnetlink_rcv_msg+0x7cf/0xb70 [ 444.496748][T16860] ? __lock_acquire+0xab9/0xd20 [ 444.496771][T16860] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 444.496789][T16860] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 444.496827][T16860] netlink_rcv_skb+0x208/0x470 [ 444.496858][T16860] ? __lock_acquire+0xab9/0xd20 [ 444.496878][T16860] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 444.496899][T16860] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 444.496944][T16860] ? netlink_deliver_tap+0x2e/0x1b0 [ 444.496973][T16860] netlink_unicast+0x82c/0x9e0 [ 444.497013][T16860] ? __pfx_netlink_unicast+0x10/0x10 [ 444.497043][T16860] ? netlink_sendmsg+0x642/0xb30 [ 444.497061][T16860] ? skb_put+0x11b/0x210 [ 444.497087][T16860] netlink_sendmsg+0x805/0xb30 [ 444.497119][T16860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 444.497143][T16860] ? aa_sock_msg_perm+0x94/0x160 [ 444.497168][T16860] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 444.497189][T16860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 444.497209][T16860] __sock_sendmsg+0x219/0x270 [ 444.497242][T16860] ____sys_sendmsg+0x505/0x830 [ 444.497272][T16860] ? __pfx_____sys_sendmsg+0x10/0x10 [ 444.497307][T16860] ? import_iovec+0x74/0xa0 [ 444.497345][T16860] ___sys_sendmsg+0x21f/0x2a0 [ 444.497372][T16860] ? __pfx____sys_sendmsg+0x10/0x10 [ 444.497436][T16860] ? __fget_files+0x2a/0x420 [ 444.497453][T16860] ? __fget_files+0x3a0/0x420 [ 444.497483][T16860] __x64_sys_sendmsg+0x19b/0x260 [ 444.497509][T16860] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 444.497545][T16860] ? __pfx_ksys_write+0x10/0x10 [ 444.497569][T16860] ? rcu_is_watching+0x15/0xb0 [ 444.497598][T16860] ? do_syscall_64+0xbe/0x3b0 [ 444.497623][T16860] do_syscall_64+0xfa/0x3b0 [ 444.497642][T16860] ? lockdep_hardirqs_on+0x9c/0x150 [ 444.497672][T16860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.497691][T16860] ? clear_bhb_loop+0x60/0xb0 [ 444.497716][T16860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.497745][T16860] RIP: 0033:0x7f202c38e9a9 [ 444.497764][T16860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.497781][T16860] RSP: 002b:00007f202d140038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 444.497803][T16860] RAX: ffffffffffffffda RBX: 00007f202c5b5fa0 RCX: 00007f202c38e9a9 [ 444.497817][T16860] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 444.497830][T16860] RBP: 00007f202d140090 R08: 0000000000000000 R09: 0000000000000000 [ 444.497842][T16860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.497854][T16860] R13: 0000000000000000 R14: 00007f202c5b5fa0 R15: 00007fff133c4f48 [ 444.497887][T16860] [ 444.512911][T16503] veth1_vlan: entered promiscuous mode [ 444.881801][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 445.020987][T16875] netlink: del zone limit has 4 unknown bytes [ 445.081651][T16503] veth0_macvtap: entered promiscuous mode [ 445.099332][T16839] wg1 speed is unknown, defaulting to 1000 [ 445.101809][T16503] veth1_macvtap: entered promiscuous mode [ 445.305862][T16503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.346570][T16503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.381680][T10031] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.414660][T10031] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.582009][T10031] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.629397][T10031] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.679743][T16892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2879'. [ 445.712995][T16892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2879'. [ 445.831046][T16893] netlink: 'syz.4.2877': attribute type 1 has an invalid length. [ 445.843322][T16893] nbd: error processing sock list [ 445.850598][T16893] block nbd0: shutting down sockets [ 445.942062][T16896] syzkaller0: entered promiscuous mode [ 445.956854][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 445.964467][T16896] syzkaller0: entered allmulticast mode [ 446.059408][T10031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.080917][T10031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.228745][T10022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.258091][T10022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.465881][T16913] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2887'. [ 446.505426][T16913] vlan0: entered promiscuous mode [ 446.790038][T16923] syzkaller1: entered promiscuous mode [ 446.819497][T16923] syzkaller1: entered allmulticast mode [ 446.996876][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 447.020205][T16937] netlink: 'syz.1.2893': attribute type 1 has an invalid length. [ 447.437812][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 447.453237][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 447.465395][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 447.475795][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 447.485042][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 447.601039][T16949] C speed is unknown, defaulting to 1000 [ 447.962704][T16969] tipc: Enabled bearer , priority 0 [ 447.991438][T16969] tipc: Resetting bearer [ 448.025738][T16968] tipc: Disabling bearer [ 448.036995][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 448.058951][T16949] wg1 speed is unknown, defaulting to 1000 [ 448.059010][T16954] C speed is unknown, defaulting to 1000 [ 448.442537][T16954] wg1 speed is unknown, defaulting to 1000 [ 448.562711][T16985] sctp: [Deprecated]: syz.0.2909 (pid 16985) Use of int in max_burst socket option. [ 448.562711][T16985] Use struct sctp_assoc_value instead [ 448.741886][T16991] netlink: 'syz.0.2911': attribute type 13 has an invalid length. [ 448.751313][T16991] netlink: 'syz.0.2911': attribute type 17 has an invalid length. [ 449.023472][T16991] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 449.077374][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 449.092221][T16949] chnl_net:caif_netlink_parms(): no params data found [ 449.536093][T16990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.557019][ T5846] Bluetooth: hci1: command tx timeout [ 449.571922][T17005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2913'. [ 449.591291][T17005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2913'. [ 449.614675][T17005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2913'. [ 449.633542][T16993] C speed is unknown, defaulting to 1000 [ 449.712644][T17000] syzkaller1: entered allmulticast mode [ 450.058959][T16993] wg1 speed is unknown, defaulting to 1000 [ 450.101786][T16949] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.110232][T16949] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.117517][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 450.125476][T17006] C speed is unknown, defaulting to 1000 [ 450.137432][T16949] bridge_slave_0: entered allmulticast mode [ 450.149238][T16949] bridge_slave_0: entered promiscuous mode [ 450.171070][T16949] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.187892][T16949] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.197003][T16949] bridge_slave_1: entered allmulticast mode [ 450.215714][T17013] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2915'. [ 450.235984][T16949] bridge_slave_1: entered promiscuous mode [ 450.262540][T17012] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 450.455544][T16949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.484074][T16949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.627831][T16949] team0: Port device team_slave_0 added [ 450.637767][T16949] team0: Port device team_slave_1 added [ 450.755041][T16949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.771532][T16949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.815709][T16949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.871304][T16949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.882807][T16949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.959732][T16949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.007696][T17006] wg1 speed is unknown, defaulting to 1000 [ 451.166816][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 451.206374][T16949] hsr_slave_0: entered promiscuous mode [ 451.225910][T16949] hsr_slave_1: entered promiscuous mode [ 451.233145][T16949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 451.241752][T16949] Cannot create hsr debugfs directory [ 451.354151][T17030] x_tables: duplicate underflow at hook 2 [ 451.638820][ T5846] Bluetooth: hci1: command tx timeout [ 451.673432][T17042] netlink: 'syz.3.2924': attribute type 3 has an invalid length. [ 452.143046][T17055] xt_hashlimit: max too large, truncated to 1048576 [ 452.196870][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 452.203563][T16949] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.222970][T17055] Cannot find add_set index 3 as target [ 452.229377][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 452.383177][T17055] sctp: [Deprecated]: syz.1.2928 (pid 17055) Use of struct sctp_assoc_value in delayed_ack socket option. [ 452.383177][T17055] Use struct sctp_sack_info instead [ 452.409425][T17055] netlink: 'syz.1.2928': attribute type 12 has an invalid length. [ 452.422348][T17055] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2928'. [ 452.491597][T16949] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.580881][T16949] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.710821][T16949] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.105480][T16949] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 453.168755][T16949] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 453.190791][T16949] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 453.209562][T17066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2932'. [ 453.222286][T17066] netlink: 'syz.1.2932': attribute type 23 has an invalid length. [ 453.236802][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 453.249542][T16949] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 453.296046][T17068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2933'. [ 453.546366][T17079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2934'. [ 453.571802][T17081] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2935'. [ 453.590825][T16949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.601079][T17081] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2935'. [ 453.622882][T17079] C speed is unknown, defaulting to 1000 [ 453.649234][T17081] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2935'. [ 453.677754][T17081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2935'. [ 453.681640][T16949] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.718354][ T5846] Bluetooth: hci1: command tx timeout [ 453.734613][T10022] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.741989][T10022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.779262][T10031] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.786466][T10031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.195870][T17094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2938'. [ 454.276858][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 454.556448][T16949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.603781][T17100] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2939'. [ 455.021559][T17108] sock: sock_timestamping_bind_phc: sock not bind to device [ 455.297331][T17117] syzkaller0: entered promiscuous mode [ 455.302879][T17117] syzkaller0: entered allmulticast mode [ 455.316892][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 455.765757][T16949] veth0_vlan: entered promiscuous mode [ 455.796998][ T5846] Bluetooth: hci1: command tx timeout [ 455.828205][T16949] veth1_vlan: entered promiscuous mode [ 455.886464][T16949] veth0_macvtap: entered promiscuous mode [ 455.922686][T16949] veth1_macvtap: entered promiscuous mode [ 456.136107][T16949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.299961][T17143] gretap2: entered promiscuous mode [ 456.330164][T16949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.356781][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 456.400317][T10028] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.412110][T10028] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.434065][T10028] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.465084][T10028] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.606181][T10031] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.652675][T10031] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.684997][T10031] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.714120][T10031] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.749712][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.784555][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.809091][T17167] netlink: 'syz.2.2958': attribute type 29 has an invalid length. [ 456.851548][T17167] netlink: 'syz.2.2958': attribute type 29 has an invalid length. [ 456.872066][T10005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.886214][T10005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.966532][T17172] syz.1.2959: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 456.995754][T17172] CPU: 0 UID: 0 PID: 17172 Comm: syz.1.2959 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 456.995794][T17172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 456.995809][T17172] Call Trace: [ 456.995819][T17172] [ 456.995831][T17172] dump_stack_lvl+0x189/0x250 [ 456.995866][T17172] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 456.995904][T17172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.995932][T17172] ? __pfx__printk+0x10/0x10 [ 456.995964][T17172] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 456.995995][T17172] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 456.996035][T17172] warn_alloc+0x214/0x310 [ 456.996056][T17172] ? stack_depot_save_flags+0x40/0x900 [ 456.996086][T17172] ? __pfx_warn_alloc+0x10/0x10 [ 456.996109][T17172] ? kasan_save_track+0x4f/0x80 [ 456.996139][T17172] ? xskq_create+0x56/0x170 [ 456.996181][T17172] ? xsk_init_queue+0xb0/0x110 [ 456.996211][T17172] ? xsk_setsockopt+0x4dc/0x8d0 [ 456.996248][T17172] ? do_sock_setsockopt+0x179/0x1b0 [ 456.996272][T17172] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 456.996295][T17172] ? do_syscall_64+0xfa/0x3b0 [ 456.996316][T17172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.996357][T17172] __vmalloc_node_range_noprof+0x125/0x12f0 [ 456.996430][T17172] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 456.996466][T17172] ? xskq_create+0x56/0x170 [ 456.996502][T17172] ? __kasan_kmalloc+0x93/0xb0 [ 456.996555][T17172] vmalloc_user_noprof+0xad/0xf0 [ 456.996587][T17172] ? xskq_create+0xbf/0x170 [ 456.996623][T17172] xskq_create+0xbf/0x170 [ 456.996657][T17172] xsk_init_queue+0xb0/0x110 [ 456.996690][T17172] xsk_setsockopt+0x4dc/0x8d0 [ 456.996722][T17172] ? __pfx_xsk_setsockopt+0x10/0x10 [ 456.996751][T17172] ? __pfx_aa_sk_perm+0x10/0x10 [ 456.996790][T17172] ? aa_sock_opt_perm+0x74/0x110 [ 456.996814][T17172] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 456.996836][T17172] ? __pfx_xsk_setsockopt+0x10/0x10 [ 456.996869][T17172] do_sock_setsockopt+0x179/0x1b0 [ 456.996898][T17172] __x64_sys_setsockopt+0x13f/0x1b0 [ 456.996929][T17172] do_syscall_64+0xfa/0x3b0 [ 456.996949][T17172] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.996980][T17172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.997000][T17172] ? clear_bhb_loop+0x60/0xb0 [ 456.997025][T17172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.997045][T17172] RIP: 0033:0x7fe13c38e9a9 [ 456.997065][T17172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.997083][T17172] RSP: 002b:00007fe13d283038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 456.997105][T17172] RAX: ffffffffffffffda RBX: 00007fe13c5b5fa0 RCX: 00007fe13c38e9a9 [ 456.997121][T17172] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 456.997134][T17172] RBP: 00007fe13c410d69 R08: 0000000000000004 R09: 0000000000000000 [ 456.997147][T17172] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.997160][T17172] R13: 0000000000000000 R14: 00007fe13c5b5fa0 R15: 00007fff5cd29e28 [ 456.997193][T17172] [ 457.309015][T17172] Mem-Info: [ 457.312212][T17172] active_anon:3743 inactive_anon:0 isolated_anon:0 [ 457.312212][T17172] active_file:1673 inactive_file:39983 isolated_file:0 [ 457.312212][T17172] unevictable:768 dirty:117 writeback:0 [ 457.312212][T17172] slab_reclaimable:12607 slab_unreclaimable:183349 [ 457.312212][T17172] mapped:30166 shmem:1368 pagetables:1016 [ 457.312212][T17172] sec_pagetables:0 bounce:0 [ 457.312212][T17172] kernel_misc_reclaimable:0 [ 457.312212][T17172] free:1242662 free_pcp:15846 free_cma:0 [ 457.396972][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 457.464585][T17178] __nla_validate_parse: 9 callbacks suppressed [ 457.464607][T17178] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2888'. [ 457.473541][T17176] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2959'. [ 457.520998][T17172] Node 0 active_anon:15040kB inactive_anon:0kB active_file:6692kB inactive_file:159732kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120756kB dirty:376kB writeback:80kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14212kB pagetables:4108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 457.649901][T17184] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2960'. [ 457.660599][T17172] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 457.728884][T17172] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 457.764989][T17172] lowmem_reserve[]: 0 2498 2499 2499 2499 [ 457.775565][T17172] Node 0 DMA32 free:1047976kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14996kB inactive_anon:0kB active_file:6692kB inactive_file:158152kB unevictable:1536kB writepending:452kB present:3129332kB managed:2558344kB mlocked:0kB bounce:0kB free_pcp:45312kB local_pcp:19804kB free_cma:0kB [ 457.822090][T17172] lowmem_reserve[]: 0 0 1 1 1 [ 457.838841][T17172] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 457.849822][T17190] netlink: 'syz.2.2962': attribute type 12 has an invalid length. [ 457.873517][T17172] lowmem_reserve[]: 0 0 0 0 0 [ 457.887413][T17172] Node 1 Normal free:3907912kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:13184kB local_pcp:4032kB free_cma:0kB [ 457.924892][T17172] lowmem_reserve[]: 0 0 0 0 0 [ 457.930863][T17190] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.2962'. [ 457.933948][T17172] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 457.989055][T17172] Node 0 DMA32: 1312*4kB (UME) 661*8kB (UME) 270*16kB (UME) 227*32kB (UME) 472*64kB (UE) 210*128kB (UME) 129*256kB (UM) 14*512kB (UME) 14*1024kB (UM) 8*2048kB (UM) 219*4096kB (UM) = 1047144kB [ 458.029928][T17172] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 458.058888][T17172] Node 1 Normal: 202*4kB (UME) 56*8kB (UME) 36*16kB (UME) 173*32kB (UME) 68*64kB (UME) 13*128kB (UME) 5*256kB (UME) 4*512kB (ME) 2*1024kB (UM) 1*2048kB (E) 949*4096kB (M) = 3907912kB [ 458.093050][T17172] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 458.112355][T17172] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 458.123295][T17172] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 458.135224][T17172] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 458.149040][T17172] 43022 total pagecache pages [ 458.153791][T17172] 0 pages in swap cache [ 458.158755][T17172] Free swap = 124996kB [ 458.201493][T17198] netlink: 'syz.2.2966': attribute type 1 has an invalid length. [ 458.215048][T17196] netlink: 'syz.3.2964': attribute type 6 has an invalid length. [ 458.233797][T17196] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2964'. [ 458.328116][T17172] Total swap = 124996kB [ 458.332360][T17172] 2097051 pages RAM [ 458.337460][T17172] 0 pages HighMem/MovableOnly [ 458.352210][T17172] 425423 pages reserved [ 458.373982][T17172] 0 pages cma reserved [ 458.437887][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 458.690866][T17214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2967'. [ 459.150683][T17227] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2974'. [ 459.477276][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 459.641813][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 459.652886][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 459.663454][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 459.677293][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 459.685495][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 459.780218][T17243] C speed is unknown, defaulting to 1000 [ 460.004031][T17253] netlink: 'syz.4.2982': attribute type 12 has an invalid length. [ 460.013371][T17253] netlink: 'syz.4.2982': attribute type 29 has an invalid length. [ 460.057710][T17253] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2982'. [ 460.355039][T17258] can: request_module (can-proto-0) failed. [ 460.364671][T17264] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2985'. [ 460.486458][T10005] tipc: Resetting bearer [ 460.516754][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 460.704353][T17278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2987'. [ 461.567359][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 461.718356][ T5846] Bluetooth: hci3: command tx timeout [ 461.840987][T10005] tipc: Disabling bearer [ 462.145508][T10005] bond0 (unregistering): Released all slaves [ 462.163303][T10005] bond1 (unregistering): Released all slaves [ 462.294272][T10005] bond2 (unregistering): Released all slaves [ 462.319174][T10005] bond3 (unregistering): Released all slaves [ 462.447241][T10005] bond4 (unregistering): Released all slaves [ 462.463902][T10005] bond5 (unregistering): Released all slaves [ 462.597087][T10005] bond6 (unregistering): Released all slaves [ 462.606908][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 462.624635][T10005] bond7 (unregistering): Released all slaves [ 462.668315][T17243] wg1 speed is unknown, defaulting to 1000 [ 462.832577][T10005] tipc: Left network mode [ 462.941413][T17307] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2990'. [ 462.952330][T17307] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2990'. [ 463.003348][T17307] netlink: 'syz.2.2990': attribute type 66 has an invalid length. [ 463.019331][T17311] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2991'. [ 463.075084][T17311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2991'. [ 463.097753][T17311] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2991'. [ 463.107469][T17311] netlink: 'syz.0.2991': attribute type 3 has an invalid length. [ 463.115423][T17311] netlink: 'syz.0.2991': attribute type 2 has an invalid length. [ 463.123871][T17311] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2991'. [ 463.250226][T17316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.299552][T17319] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 463.405303][T17318] C speed is unknown, defaulting to 1000 [ 463.466919][T17324] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 463.488609][T17325] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 463.636826][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 463.798220][ T5846] Bluetooth: hci3: command tx timeout [ 464.115883][T17333] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2998'. [ 464.133267][T17243] chnl_net:caif_netlink_parms(): no params data found [ 464.158861][T17319] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2994'. [ 464.199049][T17319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.265446][T17319] Unsupported ieee802154 address type: 0 [ 464.342260][T17311] C speed is unknown, defaulting to 1000 [ 464.419309][T17243] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.427527][T17243] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.434801][T17243] bridge_slave_0: entered allmulticast mode [ 464.453315][T17243] bridge_slave_0: entered promiscuous mode [ 464.463264][T17243] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.470924][T17243] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.478336][T17243] bridge_slave_1: entered allmulticast mode [ 464.486214][T17243] bridge_slave_1: entered promiscuous mode [ 464.609313][T17243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.634868][T17243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.674788][T17353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3003'. [ 464.684052][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 464.709562][T17353] geneve2: entered promiscuous mode [ 464.715025][T17353] geneve2: entered allmulticast mode [ 464.771442][T17243] team0: Port device team_slave_0 added [ 464.798565][T17243] team0: Port device team_slave_1 added [ 464.922615][T17243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.933238][T17243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.960105][T17243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.983007][T17311] wg1 speed is unknown, defaulting to 1000 [ 465.005394][T17359] geneve3: entered allmulticast mode [ 465.042880][T17243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.087309][T17243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.186857][T17243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.224679][T17318] wg1 speed is unknown, defaulting to 1000 [ 465.401852][T17365] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3007'. [ 465.477612][T17371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.498253][T17371] Bluetooth: MGMT ver 1.23 [ 465.505128][T10005] hsr_slave_0: left promiscuous mode [ 465.532343][T10005] hsr_slave_1: left promiscuous mode [ 465.664403][T10005] pim6reg (unregistering): left allmulticast mode [ 465.717717][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 465.882112][ T5846] Bluetooth: hci3: command tx timeout [ 466.766720][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 467.117722][T17243] hsr_slave_0: entered promiscuous mode [ 467.125020][T17243] hsr_slave_1: entered promiscuous mode [ 467.153090][T17243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 467.162926][T17243] Cannot create hsr debugfs directory [ 467.557631][ T5855] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 467.565191][ T5855] Bluetooth: hci2: command 0x0401 tx timeout [ 467.796707][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 467.888864][T17403] C speed is unknown, defaulting to 1000 [ 467.957615][ T5855] Bluetooth: hci3: command tx timeout [ 467.997790][T10005] IPVS: stop unused estimator thread 0... [ 468.150627][T17413] __nla_validate_parse: 1 callbacks suppressed [ 468.150650][T17413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3018'. [ 468.343493][T17417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3020'. [ 468.422103][T17417] macvlan0: entered promiscuous mode [ 468.438580][T17417] bond0: entered promiscuous mode [ 468.533145][T17417] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 468.615914][T17426] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 468.659440][T17403] wg1 speed is unknown, defaulting to 1000 [ 468.837365][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 468.921091][T17432] netlink: 'syz.2.3022': attribute type 10 has an invalid length. [ 469.002620][T17243] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 469.030906][T17243] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 469.069954][T17243] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 469.098898][T17243] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 469.303078][T17443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3024'. [ 469.392517][T17243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.458361][T17243] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.494123][ T3522] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.501370][ T3522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.568190][T10005] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.575374][T10005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.876768][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 469.977621][T17463] pim6reg: entered allmulticast mode [ 469.987779][T17465] netlink: 'syz.1.3030': attribute type 9 has an invalid length. [ 470.003823][T17463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.031983][T17465] netlink: 'syz.1.3030': attribute type 6 has an invalid length. [ 470.163404][T17463] pim6reg: left allmulticast mode [ 470.372029][ T30] audit: type=1800 audit(1753199807.979:5): pid=17478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3032" name="memory.events" dev="tmpfs" ino=183 res=0 errno=0 [ 470.416102][T17452] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 470.450381][T17452] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 470.805562][T17481] netlink: 452 bytes leftover after parsing attributes in process `syz.0.3034'. [ 470.895960][T17243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.916752][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 471.065826][T17497] netlink: 284 bytes leftover after parsing attributes in process `syz.4.3037'. [ 471.144837][T17243] veth0_vlan: entered promiscuous mode [ 471.261776][T17243] veth1_vlan: entered promiscuous mode [ 471.364682][T17243] veth0_macvtap: entered promiscuous mode [ 471.405269][T17243] veth1_macvtap: entered promiscuous mode [ 471.495530][T17243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.545680][T17243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.574760][T10000] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.605714][T10000] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.632752][T10000] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.647305][T10000] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.764248][T17513] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3042'. [ 471.889486][T17520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3044'. [ 471.956743][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 471.998197][T10006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.006054][T10006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.107321][T17524] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3046'. [ 472.206209][T10005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.215472][T10005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.355898][T17533] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 472.840485][T17539] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3050'. [ 472.996731][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 473.315449][T17560] C speed is unknown, defaulting to 1000 [ 473.323646][T17563] netlink: 'syz.0.3055': attribute type 1 has an invalid length. [ 473.499409][T17565] netem: change failed [ 473.571490][T17565] netlink: 'syz.3.3056': attribute type 4 has an invalid length. [ 473.849290][T17571] tipc: Enabling of bearer rejected, failed to enable media [ 473.905620][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 473.920095][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 473.929037][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 473.938350][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 473.947462][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 474.038223][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 474.163335][T17581] netlink: 'syz.3.3060': attribute type 15 has an invalid length. [ 474.326559][T17576] C speed is unknown, defaulting to 1000 [ 474.336663][T17560] wg1 speed is unknown, defaulting to 1000 [ 474.599400][T17596] FAULT_INJECTION: forcing a failure. [ 474.599400][T17596] name failslab, interval 1, probability 0, space 0, times 0 [ 474.737320][T17596] CPU: 0 UID: 0 PID: 17596 Comm: syz.3.3064 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 474.737366][T17596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 474.737387][T17596] Call Trace: [ 474.737396][T17596] [ 474.737406][T17596] dump_stack_lvl+0x189/0x250 [ 474.737437][T17596] ? __pfx____ratelimit+0x10/0x10 [ 474.737471][T17596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.737495][T17596] ? __pfx__printk+0x10/0x10 [ 474.737530][T17596] ? __pfx___might_resched+0x10/0x10 [ 474.737553][T17596] ? fs_reclaim_acquire+0x7d/0x100 [ 474.737579][T17596] should_fail_ex+0x414/0x560 [ 474.737606][T17596] should_failslab+0xa8/0x100 [ 474.737638][T17596] __kmalloc_noprof+0xcb/0x4f0 [ 474.737664][T17596] ? kfree+0x4d/0x440 [ 474.737687][T17596] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 474.737717][T17596] tomoyo_realpath_from_path+0xe3/0x5d0 [ 474.737744][T17596] ? tomoyo_domain+0xd9/0x130 [ 474.737774][T17596] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 474.737807][T17596] tomoyo_path_number_perm+0x1e8/0x5a0 [ 474.737841][T17596] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 474.737893][T17596] ? __lock_acquire+0xab9/0xd20 [ 474.737936][T17596] ? __fget_files+0x2a/0x420 [ 474.737958][T17596] ? __fget_files+0x2a/0x420 [ 474.737974][T17596] ? __fget_files+0x3a0/0x420 [ 474.737990][T17596] ? __fget_files+0x2a/0x420 [ 474.738013][T17596] security_file_ioctl+0xcb/0x2d0 [ 474.738053][T17596] __se_sys_ioctl+0x47/0x170 [ 474.738082][T17596] do_syscall_64+0xfa/0x3b0 [ 474.738101][T17596] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.738132][T17596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.738152][T17596] ? clear_bhb_loop+0x60/0xb0 [ 474.738178][T17596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.738198][T17596] RIP: 0033:0x7f54f018e9a9 [ 474.738216][T17596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.738234][T17596] RSP: 002b:00007f54edff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 474.738256][T17596] RAX: ffffffffffffffda RBX: 00007f54f03b5fa0 RCX: 00007f54f018e9a9 [ 474.738271][T17596] RDX: 0000200000000000 RSI: 000000000000541b RDI: 0000000000000004 [ 474.738284][T17596] RBP: 00007f54edff6090 R08: 0000000000000000 R09: 0000000000000000 [ 474.738297][T17596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.738308][T17596] R13: 0000000000000000 R14: 00007f54f03b5fa0 R15: 00007ffddcc41978 [ 474.738342][T17596] [ 474.738350][T17596] ERROR: Out of memory at tomoyo_realpath_from_path. [ 475.076722][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 475.201252][T17612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3067'. [ 475.211948][T17612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3067'. [ 475.355681][T17576] wg1 speed is unknown, defaulting to 1000 [ 475.473786][T17620] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 475.506066][T17620] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 476.037273][ T5855] Bluetooth: hci4: command tx timeout [ 476.117748][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 476.265479][T17646] FAULT_INJECTION: forcing a failure. [ 476.265479][T17646] name failslab, interval 1, probability 0, space 0, times 0 [ 476.279132][T17646] CPU: 1 UID: 0 PID: 17646 Comm: syz.0.3078 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 476.279164][T17646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 476.279177][T17646] Call Trace: [ 476.279186][T17646] [ 476.279195][T17646] dump_stack_lvl+0x189/0x250 [ 476.279227][T17646] ? __pfx____ratelimit+0x10/0x10 [ 476.279260][T17646] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.279285][T17646] ? __pfx__printk+0x10/0x10 [ 476.279317][T17646] ? __pfx___might_resched+0x10/0x10 [ 476.279341][T17646] ? fs_reclaim_acquire+0x7d/0x100 [ 476.279367][T17646] should_fail_ex+0x414/0x560 [ 476.279394][T17646] should_failslab+0xa8/0x100 [ 476.279425][T17646] __kmalloc_noprof+0xcb/0x4f0 [ 476.279453][T17646] ? tomoyo_encode+0x28b/0x550 [ 476.279482][T17646] tomoyo_encode+0x28b/0x550 [ 476.279513][T17646] tomoyo_realpath_from_path+0x58d/0x5d0 [ 476.279549][T17646] ? tomoyo_domain+0xd9/0x130 [ 476.279581][T17646] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 476.279613][T17646] tomoyo_path_number_perm+0x1e8/0x5a0 [ 476.279649][T17646] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 476.279700][T17646] ? __lock_acquire+0xab9/0xd20 [ 476.279746][T17646] ? __fget_files+0x2a/0x420 [ 476.279768][T17646] ? __fget_files+0x2a/0x420 [ 476.279783][T17646] ? __fget_files+0x3a0/0x420 [ 476.279800][T17646] ? __fget_files+0x2a/0x420 [ 476.279823][T17646] security_file_ioctl+0xcb/0x2d0 [ 476.279857][T17646] __se_sys_ioctl+0x47/0x170 [ 476.279887][T17646] do_syscall_64+0xfa/0x3b0 [ 476.279906][T17646] ? lockdep_hardirqs_on+0x9c/0x150 [ 476.279937][T17646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.279957][T17646] ? clear_bhb_loop+0x60/0xb0 [ 476.279981][T17646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.280001][T17646] RIP: 0033:0x7f999c78e9a9 [ 476.280020][T17646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.280038][T17646] RSP: 002b:00007f999d6ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 476.280060][T17646] RAX: ffffffffffffffda RBX: 00007f999c9b5fa0 RCX: 00007f999c78e9a9 [ 476.280076][T17646] RDX: 0000200000000000 RSI: 000000000000541b RDI: 0000000000000004 [ 476.280089][T17646] RBP: 00007f999d6ce090 R08: 0000000000000000 R09: 0000000000000000 [ 476.280102][T17646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.280113][T17646] R13: 0000000000000000 R14: 00007f999c9b5fa0 R15: 00007ffff9cd7368 [ 476.280146][T17646] [ 476.280168][T17646] ERROR: Out of memory at tomoyo_realpath_from_path. [ 476.537636][T17642] Can't find ip_set type hash:ip,mavk [ 476.543533][T17652] tipc: Enabling of bearer rejected, failed to enable media [ 476.609445][T17652] syzkaller0: entered allmulticast mode [ 476.630024][T17576] chnl_net:caif_netlink_parms(): no params data found [ 476.810131][T17658] netlink: 'syz.1.3080': attribute type 1 has an invalid length. [ 476.954213][T17658] netlink: 'syz.1.3080': attribute type 1 has an invalid length. [ 476.973274][T17658] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3080'. [ 477.155000][T17576] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.162404][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 477.217348][T17576] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.234888][T17576] bridge_slave_0: entered allmulticast mode [ 477.250044][T17576] bridge_slave_0: entered promiscuous mode [ 477.288485][T17576] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.319784][T17576] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.335187][T17576] bridge_slave_1: entered allmulticast mode [ 477.351454][T17576] bridge_slave_1: entered promiscuous mode [ 477.472439][T17689] netlink: 'syz.3.3086': attribute type 16 has an invalid length. [ 477.491518][T17689] netlink: 'syz.3.3086': attribute type 17 has an invalid length. [ 477.752366][T17689] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.760277][T17689] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.914483][T17707] FAULT_INJECTION: forcing a failure. [ 477.914483][T17707] name failslab, interval 1, probability 0, space 0, times 0 [ 477.929910][T17707] CPU: 1 UID: 0 PID: 17707 Comm: syz.0.3090 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 477.929941][T17707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 477.929954][T17707] Call Trace: [ 477.929962][T17707] [ 477.929971][T17707] dump_stack_lvl+0x189/0x250 [ 477.930001][T17707] ? __pfx____ratelimit+0x10/0x10 [ 477.930033][T17707] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.930058][T17707] ? __pfx__printk+0x10/0x10 [ 477.930088][T17707] ? __pfx___might_resched+0x10/0x10 [ 477.930113][T17707] ? fs_reclaim_acquire+0x7d/0x100 [ 477.930138][T17707] should_fail_ex+0x414/0x560 [ 477.930165][T17707] should_failslab+0xa8/0x100 [ 477.930196][T17707] __kmalloc_noprof+0xcb/0x4f0 [ 477.930223][T17707] ? tomoyo_encode+0x28b/0x550 [ 477.930251][T17707] tomoyo_encode+0x28b/0x550 [ 477.930282][T17707] tomoyo_realpath_from_path+0x58d/0x5d0 [ 477.930308][T17707] ? tomoyo_domain+0xd9/0x130 [ 477.930339][T17707] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 477.930371][T17707] tomoyo_path_number_perm+0x1e8/0x5a0 [ 477.930424][T17707] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 477.930477][T17707] ? __lock_acquire+0xab9/0xd20 [ 477.930522][T17707] ? __fget_files+0x2a/0x420 [ 477.930544][T17707] ? __fget_files+0x2a/0x420 [ 477.930560][T17707] ? __fget_files+0x3a0/0x420 [ 477.930576][T17707] ? __fget_files+0x2a/0x420 [ 477.930599][T17707] security_file_ioctl+0xcb/0x2d0 [ 477.930631][T17707] __se_sys_ioctl+0x47/0x170 [ 477.930666][T17707] do_syscall_64+0xfa/0x3b0 [ 477.930685][T17707] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.930716][T17707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.930736][T17707] ? clear_bhb_loop+0x60/0xb0 [ 477.930761][T17707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.930780][T17707] RIP: 0033:0x7f999c78e9a9 [ 477.930798][T17707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.930815][T17707] RSP: 002b:00007f999d6ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 477.930837][T17707] RAX: ffffffffffffffda RBX: 00007f999c9b5fa0 RCX: 00007f999c78e9a9 [ 477.930852][T17707] RDX: 0000200000000000 RSI: 000000000000541b RDI: 0000000000000004 [ 477.930865][T17707] RBP: 00007f999d6ce090 R08: 0000000000000000 R09: 0000000000000000 [ 477.930877][T17707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.930889][T17707] R13: 0000000000000000 R14: 00007f999c9b5fa0 R15: 00007ffff9cd7368 [ 477.930922][T17707] [ 477.930943][T17707] ERROR: Out of memory at tomoyo_realpath_from_path. [ 477.961602][T17689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.127046][ T5855] Bluetooth: hci4: command tx timeout [ 478.190203][T17689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.206829][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 478.377288][T17688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3086'. [ 478.387777][T17690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3086'. [ 478.437289][T10005] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.458867][T10005] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.477295][T10005] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.486251][T10005] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.514344][T17714] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3092'. [ 478.527530][T17576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.555852][T17576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.689637][T17576] team0: Port device team_slave_0 added [ 478.703949][T17717] C speed is unknown, defaulting to 1000 [ 478.731017][T17576] team0: Port device team_slave_1 added [ 478.985994][T17732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3098'. [ 479.003667][T17732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3098'. [ 479.013826][T17732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3098'. [ 479.074914][T17725] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 479.083759][T17717] wg1 speed is unknown, defaulting to 1000 [ 479.097867][T17576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.115078][T17576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.184542][T17576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.226261][T17576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.236796][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 479.238868][T17576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.286544][T17576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.570019][T17576] hsr_slave_0: entered promiscuous mode [ 479.590538][T17576] hsr_slave_1: entered promiscuous mode [ 479.598422][T17751] netlink: 'syz.4.3105': attribute type 10 has an invalid length. [ 479.608908][T17576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 479.616523][T17576] Cannot create hsr debugfs directory [ 479.623188][T17751] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3105'. [ 479.731349][T17751] team0: Port device geneve0 added [ 479.749482][T17754] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 480.201058][ T5855] Bluetooth: hci4: command tx timeout [ 480.277220][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 480.431465][T17778] __nla_validate_parse: 3 callbacks suppressed [ 480.431484][T17778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3114'. [ 480.473023][T17778] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 480.641766][T17784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3116'. [ 480.718723][T17785] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 480.992500][T17798] netlink: 'syz.0.3120': attribute type 5 has an invalid length. [ 481.053245][T17576] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 481.097185][T17802] netlink: 'syz.3.3123': attribute type 11 has an invalid length. [ 481.117739][T17803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3123'. [ 481.184350][T17798] ip6erspan0: entered promiscuous mode [ 481.194229][T17576] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 481.280276][T17576] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 481.316897][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 481.331675][T17576] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 481.442575][ T30] audit: type=1107 audit(1753199819.049:6): pid=17826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ÐöGþB*jÓÊ^5~ñ0¸Æ?ëø{p—8©¡ ¼€' [ 481.757672][T17821] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3128'. [ 481.833309][T17839] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3131'. [ 481.841387][T17840] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 482.116092][T17576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.161199][T17576] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.172543][T17847] mac80211_hwsim hwsim37 wlan0: entered promiscuous mode [ 482.182331][T17847] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 482.206923][T10000] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.214110][T10000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.264329][ T3522] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.271690][ T3522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.279475][ T5855] Bluetooth: hci4: command tx timeout [ 482.313226][T17849] openvswitch: netlink: Message has 113 unknown bytes. [ 482.323783][T17849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.357529][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 482.383744][T17849] sctp: [Deprecated]: syz.4.3135 (pid 17849) Use of struct sctp_assoc_value in delayed_ack socket option. [ 482.383744][T17849] Use struct sctp_sack_info instead [ 482.592861][T17858] C speed is unknown, defaulting to 1000 [ 483.152204][T17576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.282528][T17858] wg1 speed is unknown, defaulting to 1000 [ 483.396940][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 483.452863][T17576] veth0_vlan: entered promiscuous mode [ 483.554973][T17576] veth1_vlan: entered promiscuous mode [ 483.577604][T17893] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3146'. [ 483.675158][T17899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3147'. [ 483.708412][T17899] batadv_slave_1: entered promiscuous mode [ 483.714497][T17899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3147'. [ 483.821898][T17576] veth0_macvtap: entered promiscuous mode [ 483.874871][T17576] veth1_macvtap: entered promiscuous mode [ 483.945266][T17576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.989390][T17576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.061281][ T3522] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.114643][ T3522] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.181093][ T3522] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.241115][ T3522] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.312716][T17914] netlink: 'syz.3.3151': attribute type 13 has an invalid length. [ 484.351675][T17914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3151'. [ 484.446887][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 484.461346][ T3522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.488799][ T3522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.552137][T17914] C speed is unknown, defaulting to 1000 [ 484.589544][ T3522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.617543][ T3522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.630078][T17922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.649231][T17917] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3152'. [ 484.689518][T17919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.721236][T17917] netlink: 'syz.1.3152': attribute type 1 has an invalid length. [ 484.743923][T17917] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 485.205113][T17937] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 485.247836][T17937] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 485.379641][T17914] wg1 speed is unknown, defaulting to 1000 [ 485.459728][T17925] C speed is unknown, defaulting to 1000 [ 485.476787][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 485.893445][T17929] __nla_validate_parse: 6 callbacks suppressed [ 485.893467][T17929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3154'. [ 485.951371][T17929] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3154'. [ 486.107623][T17959] !: renamed from dummy0 (while UP) [ 486.387838][T17933] C speed is unknown, defaulting to 1000 [ 486.517522][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 487.135609][T17988] netlink: 'syz.4.3170': attribute type 1 has an invalid length. [ 487.189193][T17925] wg1 speed is unknown, defaulting to 1000 [ 487.274112][T17933] wg1 speed is unknown, defaulting to 1000 [ 487.556715][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 487.899439][T17999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3172'. [ 487.917626][T17999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3172'. [ 488.596678][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 488.719137][T18019] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 488.841727][T18022] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3178'. [ 489.407465][T18035] netlink: 'syz.0.3181': attribute type 25 has an invalid length. [ 489.584479][T18041] netlink: 'syz.2.3185': attribute type 1 has an invalid length. [ 489.604527][T18041] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3185'. [ 489.617760][T18041] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3185'. [ 489.636844][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 489.657696][T18041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3185'. [ 490.012600][T18048] macvlan2: entered allmulticast mode [ 490.018987][T18048] veth1_vlan: entered allmulticast mode [ 490.030486][T18048] veth1_vlan: left allmulticast mode [ 490.686805][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 490.803591][T18082] pim6reg0: tun_chr_ioctl cmd 2148553947 [ 491.025023][T18086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3199'. [ 491.160532][T18086] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.273773][T18091] netlink: 'syz.3.3200': attribute type 10 has an invalid length. [ 491.304793][ T30] audit: type=1800 audit(1753199828.909:7): pid=18073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3193" name="memory.events" dev="tmpfs" ino=391 res=0 errno=0 [ 491.328024][T18091] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3200'. [ 491.460295][T18086] bridge_slave_1 (unregistering): left allmulticast mode [ 491.487465][T18086] bridge_slave_1 (unregistering): left promiscuous mode [ 491.501324][T18086] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.513496][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 491.529687][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 491.543723][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 491.580245][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 491.591612][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 491.611763][T18091] dummy0: entered promiscuous mode [ 491.618121][T18091] dummy0: entered allmulticast mode [ 491.628193][T18091] bridge0: port 3(dummy0) entered blocking state [ 491.634996][T18091] bridge0: port 3(dummy0) entered disabled state [ 491.716905][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 491.795319][T18093] C speed is unknown, defaulting to 1000 [ 491.846399][T18101] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 492.261691][T18115] vlan2: entered promiscuous mode [ 492.279047][T18115] team0: entered promiscuous mode [ 492.284143][T18115] team_slave_0: entered promiscuous mode [ 492.306916][T18115] team_slave_1: entered promiscuous mode [ 492.433454][T18113] vlan2: entered promiscuous mode [ 492.513445][T18093] wg1 speed is unknown, defaulting to 1000 [ 492.554615][T18128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3209'. [ 492.673928][T18128] hsr_slave_1 (unregistering): left promiscuous mode [ 492.757596][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 493.027824][T18157] sctp: [Deprecated]: syz.2.3216 (pid 18157) Use of int in max_burst socket option deprecated. [ 493.027824][T18157] Use struct sctp_assoc_value instead [ 493.114959][T18154] C speed is unknown, defaulting to 1000 [ 493.385931][T18170] netlink: 'syz.3.3218': attribute type 13 has an invalid length. [ 493.387212][T18093] chnl_net:caif_netlink_parms(): no params data found [ 493.640780][ T5855] Bluetooth: hci0: command tx timeout [ 493.806812][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 493.845646][T18170] bridge0: port 3(dummy0) entered blocking state [ 493.852267][T18170] bridge0: port 3(dummy0) entered listening state [ 493.929965][T18170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.965458][T18170] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.992906][T18170] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 494.049084][T18154] wg1 speed is unknown, defaulting to 1000 [ 494.200766][T18173] C speed is unknown, defaulting to 1000 [ 494.274529][T18093] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.289987][T18093] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.298228][T18093] bridge_slave_0: entered allmulticast mode [ 494.330203][T18093] bridge_slave_0: entered promiscuous mode [ 494.332928][T18190] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3224'. [ 494.364667][T18093] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.394615][T18093] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.419305][T18093] bridge_slave_1: entered allmulticast mode [ 494.436187][T18093] bridge_slave_1: entered promiscuous mode [ 494.568519][T18093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.592168][T18093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.708814][T18093] team0: Port device team_slave_0 added [ 494.730600][T18093] team0: Port device team_slave_1 added [ 494.825490][T18093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.835991][T18093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.867458][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 494.878716][T18093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.891552][T18173] wg1 speed is unknown, defaulting to 1000 [ 494.899015][T18093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.917743][T18093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.950564][T18093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.989448][T18202] IPVS: set_ctl: invalid protocol: 41 100.1.1.2:20002 [ 495.325635][T18093] hsr_slave_0: entered promiscuous mode [ 495.333703][T18093] hsr_slave_1: entered promiscuous mode [ 495.345324][T18093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.353774][T18093] Cannot create hsr debugfs directory [ 495.364622][T18208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3231'. [ 495.477187][T18213] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3232'. [ 495.717560][ T5855] Bluetooth: hci0: command tx timeout [ 495.877342][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 496.274734][T18235] netlink: 'syz.0.3239': attribute type 64 has an invalid length. [ 496.280646][T18093] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 57651 - 0 [ 496.322842][T18093] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 58717 - 0 [ 496.341543][T18237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3239'. [ 496.921624][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 496.974906][T18093] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 57651 - 0 [ 497.011688][T18093] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 58717 - 0 [ 497.222166][T18093] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 57651 - 0 [ 497.315167][T18093] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 58717 - 0 [ 497.358191][T18251] C speed is unknown, defaulting to 1000 [ 497.437679][T18252] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 497.463758][T18252] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 497.605536][T18093] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 57651 - 0 [ 497.627573][T18093] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 58717 - 0 [ 497.797737][ T5855] Bluetooth: hci0: command tx timeout [ 497.956827][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 498.079883][T18093] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 498.191855][T18093] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 498.346316][T18093] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 498.628536][T18093] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 498.884329][T18251] wg1 speed is unknown, defaulting to 1000 [ 498.908074][T18267] C speed is unknown, defaulting to 1000 [ 498.996726][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 499.169193][T18093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.232983][T18093] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.272960][T10000] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.280363][T10000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.354995][T10000] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.362310][T10000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.893709][ T5855] Bluetooth: hci0: command tx timeout [ 499.939529][T18284] C speed is unknown, defaulting to 1000 [ 499.980715][T18267] wg1 speed is unknown, defaulting to 1000 [ 500.036709][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 500.693891][T18093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.894585][T18093] veth0_vlan: entered promiscuous mode [ 500.925498][T18093] veth1_vlan: entered promiscuous mode [ 501.020208][T18093] veth0_macvtap: entered promiscuous mode [ 501.039634][T18093] veth1_macvtap: entered promiscuous mode [ 501.086672][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 501.102769][T18284] wg1 speed is unknown, defaulting to 1000 [ 501.123868][T18093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.199361][T18093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.224014][T10006] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.325048][T10006] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.393704][T10006] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.482649][T10006] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.733648][T18299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3253'. [ 501.862442][T10000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.886802][T10000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.009259][T10000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.037540][T10000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.116753][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 502.915734][T18328] mac80211_hwsim hwsim41 wlan0: entered promiscuous mode [ 502.945085][T18328] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 503.130899][T18331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3264'. [ 503.141042][T18331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3264'. [ 503.156705][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 503.349928][T18335] sctp: [Deprecated]: syz.2.3266 (pid 18335) Use of struct sctp_assoc_value in delayed_ack socket option. [ 503.349928][T18335] Use struct sctp_sack_info instead [ 503.453872][T18340] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3267'. [ 503.681958][T18345] tipc: Started in network mode [ 503.707369][T18350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3271'. [ 503.711232][T18345] tipc: Node identity 8a60f328f843, cluster identity 4711 [ 503.757388][T18345] tipc: Enabled bearer , priority 0 [ 503.882630][T18355] syzkaller0: entered promiscuous mode [ 503.890036][T18355] syzkaller0: entered allmulticast mode [ 503.897109][T18355] tipc: Resetting bearer [ 503.919972][T18344] tipc: Resetting bearer [ 504.196748][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 504.378271][T18376] netlink: 165 bytes leftover after parsing attributes in process `syz.2.3276'. [ 504.385552][T18377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3275'. [ 504.430051][T18377] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 504.467232][T18377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.762086][T17156] tipc: Node number set to 1914958632 [ 505.102835][T18244] Set syz1 is full, maxelem 65536 reached [ 505.246718][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 505.451362][T18400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3281'. [ 506.286728][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 506.851136][T18344] tipc: Disabling bearer [ 506.864423][T18366] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 506.875231][T18366] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 506.886448][T18366] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 506.915586][T18396] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 507.061843][T18403] netlink: 'syz.3.3283': attribute type 1 has an invalid length. [ 507.199199][T18403] 8021q: adding VLAN 0 to HW filter on device bond2 [ 507.222265][T18413] mac80211_hwsim hwsim37 wlan0: left promiscuous mode [ 507.238889][T18417] netlink: 'syz.0.3287': attribute type 1 has an invalid length. [ 507.256409][T18413] bond2: (slave wlan0): Enslaving as an active interface with a down link [ 507.328166][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 507.427378][T18417] 8021q: adding VLAN 0 to HW filter on device bond1 [ 507.516400][T18428] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3290'. [ 507.534263][T18427] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3290'. [ 507.734100][T18438] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3291'. [ 507.752060][T18437] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3292'. [ 507.813869][T18443] bridge0: entered promiscuous mode [ 507.829999][T18442] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3294'. [ 507.850880][T18442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3294'. [ 507.871163][T18437] netlink: 'syz.4.3292': attribute type 1 has an invalid length. [ 508.177548][T18446] C speed is unknown, defaulting to 1000 [ 508.295323][ T5903] IPVS: starting estimator thread 0... [ 508.302925][T18458] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 508.366719][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 508.400265][T18460] IPVS: using max 24 ests per chain, 57600 per kthread [ 508.738023][T18476] tipc: Enabling of bearer <5dp:s> rejected, media not registered [ 508.784102][T18479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3304'. [ 508.868022][T18484] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3305'. [ 508.948067][T18479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3304'. [ 508.978631][T18446] wg1 speed is unknown, defaulting to 1000 [ 508.978724][T18480] C speed is unknown, defaulting to 1000 [ 509.106363][T18487] netlink: 'syz.4.3306': attribute type 3 has an invalid length. [ 509.352622][T18480] wg1 speed is unknown, defaulting to 1000 [ 509.381500][T18494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3308'. [ 509.396696][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 509.559325][T18498] dummy0: entered promiscuous mode [ 509.565130][T18498] macsec1: entered promiscuous mode [ 509.571638][T18498] macsec1: entered allmulticast mode [ 509.580741][T18498] dummy0: entered allmulticast mode [ 509.589747][T18498] dummy0: left allmulticast mode [ 509.595059][T18498] dummy0: left promiscuous mode [ 510.009113][T18512] netlink: 'syz.2.3313': attribute type 13 has an invalid length. [ 510.240640][T18512] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.248507][T18512] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.446687][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 510.484734][T18512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.505175][T18512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.587619][T18526] netlink: 'syz.0.3316': attribute type 4 has an invalid length. [ 510.639421][T18527] netlink: 'syz.0.3316': attribute type 4 has an invalid length. [ 510.713666][T18516] tipc: Enabling of bearer rejected, failed to enable media [ 510.805138][T10006] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.822958][T10006] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.858261][T10006] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.892562][T10006] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.212204][T18547] netlink: 'syz.3.3323': attribute type 3 has an invalid length. [ 511.272259][T18547] netlink: 'syz.3.3323': attribute type 3 has an invalid length. [ 511.377884][T18559] mac80211_hwsim hwsim31 wlan1: entered allmulticast mode [ 511.445502][T18562] bridge_slave_0: left allmulticast mode [ 511.471202][T18562] bridge_slave_0: left promiscuous mode [ 511.476979][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 511.484955][T18562] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.500168][T18562] bond0: (slave bond_slave_0): Releasing backup interface [ 511.519710][T18567] netlink: 'syz.0.3325': attribute type 10 has an invalid length. [ 511.530053][T18562] bond0: (slave bond_slave_1): Releasing backup interface [ 511.559988][T18562] team0: Port device team_slave_0 removed [ 511.639421][T18562] team0: Port device team_slave_1 removed [ 511.646033][T18562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.654622][T18562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.675450][T18562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.683725][T18562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.706130][T18557] C speed is unknown, defaulting to 1000 [ 511.785802][T18567] mac80211_hwsim hwsim31 wlan1: left allmulticast mode [ 511.803951][T18567] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 512.263506][T18594] xt_hashlimit: size too large, truncated to 1048576 [ 512.363125][T18598] netlink: 'syz.1.3336': attribute type 12 has an invalid length. [ 512.393529][T18598] netlink: 'syz.1.3336': attribute type 29 has an invalid length. [ 512.424720][T18598] netlink: 'syz.1.3336': attribute type 2 has an invalid length. [ 512.452291][T18592] C speed is unknown, defaulting to 1000 [ 512.481222][T18557] wg1 speed is unknown, defaulting to 1000 [ 512.526740][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 512.649966][T18602] netlink: 'syz.4.3337': attribute type 3 has an invalid length. [ 512.698317][T18602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.328214][T18592] wg1 speed is unknown, defaulting to 1000 [ 513.450853][T18626] siw: device registration error -23 [ 513.566722][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 513.676078][T18634] __nla_validate_parse: 8 callbacks suppressed [ 513.676100][T18634] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3347'. [ 513.865591][T18631] ipvlan2: entered promiscuous mode [ 514.263984][T18643] C speed is unknown, defaulting to 1000 [ 514.336438][T18646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3350'. [ 514.415121][T18646] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3350'. [ 514.466480][T18646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3350'. [ 514.596759][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 514.743311][T18656] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 514.750657][T18656] IPv6: NLM_F_CREATE should be set when creating new route [ 514.758039][T18656] IPv6: NLM_F_CREATE should be set when creating new route [ 515.472062][T18643] wg1 speed is unknown, defaulting to 1000 [ 515.478131][T18669] syzkaller0: entered promiscuous mode [ 515.478157][T18669] syzkaller0: entered allmulticast mode [ 515.603085][T18681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3360'. [ 515.637565][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 515.830615][T18688] C speed is unknown, defaulting to 1000 [ 515.876480][T18692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3362'. [ 516.135435][T18702] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3366'. [ 516.677308][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 516.891795][T18688] wg1 speed is unknown, defaulting to 1000 [ 517.009016][T18693] C speed is unknown, defaulting to 1000 [ 517.079829][T18721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3368'. [ 517.726704][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 517.915188][T18738] mac80211_hwsim hwsim37 wlan0: entered promiscuous mode [ 517.959084][T18738] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 518.662554][T18778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3379'. [ 518.664677][T18757] syzkaller0: entered promiscuous mode [ 518.687457][T18757] syzkaller0: entered allmulticast mode [ 518.756691][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 518.810723][T18693] wg1 speed is unknown, defaulting to 1000 [ 518.818369][T18777] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3379'. [ 519.654315][T18803] C speed is unknown, defaulting to 1000 [ 519.706925][T18805] tipc: Started in network mode [ 519.712821][T18805] tipc: Node identity 7634cbac55b5, cluster identity 4711 [ 519.732590][T18805] tipc: Enabled bearer , priority 0 [ 519.806745][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 519.948864][T18811] syzkaller0: entered promiscuous mode [ 519.977304][T18811] syzkaller0: entered allmulticast mode [ 520.059622][T18814] tipc: Resetting bearer [ 520.123175][T18804] tipc: Resetting bearer [ 520.163049][T18804] tipc: Disabling bearer [ 520.395867][T18828] sctp: [Deprecated]: syz.0.3393 (pid 18828) Use of int in maxseg socket option. [ 520.395867][T18828] Use struct sctp_assoc_value instead [ 520.409720][T18803] wg1 speed is unknown, defaulting to 1000 [ 520.509351][T18824] C speed is unknown, defaulting to 1000 [ 520.707796][T18837] netlink: 'syz.0.3395': attribute type 1 has an invalid length. [ 520.836699][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 520.957776][T18837] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 521.409742][T18850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3397'. [ 521.703116][T18855] Bluetooth: MGMT ver 1.23 [ 521.877287][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 521.969097][T18854] C speed is unknown, defaulting to 1000 [ 521.971904][T18824] wg1 speed is unknown, defaulting to 1000 [ 522.916788][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 522.963658][T18854] wg1 speed is unknown, defaulting to 1000 [ 523.130217][T18867] netlink: 'syz.0.3401': attribute type 21 has an invalid length. [ 523.933535][ T1141] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 523.946054][T18890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3406'. [ 523.963625][T18890] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3406'. [ 523.973720][ C1] bridge0: port 3(dummy0) entered learning state [ 523.974872][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 524.285286][T18898] x_tables: duplicate underflow at hook 3 [ 524.470380][T18906] C speed is unknown, defaulting to 1000 [ 524.504755][T18896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 524.996693][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 525.113227][T18906] wg1 speed is unknown, defaulting to 1000 [ 525.139343][T18922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3415'. [ 525.376456][T18925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3416'. [ 525.450701][T18925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3416'. [ 525.511408][T18925] netlink: 'syz.0.3416': attribute type 4 has an invalid length. [ 525.594252][T18928] netlink: 'syz.2.3417': attribute type 1 has an invalid length. [ 525.743779][T18928] 8021q: adding VLAN 0 to HW filter on device bond1 [ 526.046697][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 526.368713][T18942] netlink: 212172 bytes leftover after parsing attributes in process `syz.2.3421'. [ 526.378993][T18940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3420'. [ 526.622440][ T36] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 526.642810][T18947] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 526.672725][T18954] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3423'. [ 526.693659][T18954] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3423'. [ 526.734829][T18953] netlink: 'syz.2.3424': attribute type 4 has an invalid length. [ 526.862422][T18960] C speed is unknown, defaulting to 1000 [ 526.919346][T18963] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3426'. [ 526.950968][T18966] netlink: 'syz.0.3427': attribute type 39 has an invalid length. [ 527.076685][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 527.341531][T18960] wg1 speed is unknown, defaulting to 1000 [ 527.614330][T18990] netlink: 'syz.3.3432': attribute type 13 has an invalid length. [ 527.677325][T18990] netlink: 'syz.3.3432': attribute type 17 has an invalid length. [ 527.904312][T18990] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 528.047443][T18990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 528.126710][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 528.140807][T18990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 528.219798][T18991] C speed is unknown, defaulting to 1000 [ 528.645449][T19019] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 528.980527][T18991] wg1 speed is unknown, defaulting to 1000 [ 529.159002][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 529.212865][T19049] __nla_validate_parse: 3 callbacks suppressed [ 529.212887][T19049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3442'. [ 529.256277][T19044] wireguard0: entered promiscuous mode [ 529.277352][T19044] wireguard0: entered allmulticast mode [ 529.473467][T19050] netlink: 'syz.0.3442': attribute type 1 has an invalid length. [ 529.485109][T19050] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3442'. [ 529.610599][T19057] netlink: 'syz.1.3444': attribute type 1 has an invalid length. [ 529.621658][T19057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3444'. [ 529.741916][T19062] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.3445'. [ 529.777566][T19062] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.3445'. [ 529.872040][T19064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3446'. [ 530.206704][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 530.473433][T19080] C speed is unknown, defaulting to 1000 [ 530.539465][T19076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3449'. [ 530.641499][T19076] 8021q: adding VLAN 0 to HW filter on device bond1 [ 530.756986][T19086] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3451'. [ 530.826334][T19081] 8021q: adding VLAN 0 to HW filter on device bond1 [ 530.853400][T19081] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 530.883404][T19081] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 531.111869][T19080] wg1 speed is unknown, defaulting to 1000 [ 531.236691][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 531.308407][T19097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3452'. [ 531.512099][T19104] siw: device registration error -23 [ 531.824388][T19109] vxcan2: entered allmulticast mode [ 532.109448][T19120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3459'. [ 532.270415][T19123] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4. [ 532.294501][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 532.958721][T19115] C speed is unknown, defaulting to 1000 [ 533.316747][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 534.206831][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.366808][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 534.444808][ T36] bond1 (unregistering): Released all slaves [ 534.461855][ T36] bond0 (unregistering): left promiscuous mode [ 534.486699][ T36] bond0 (unregistering): Released all slaves [ 534.641836][ T36] bond2 (unregistering): Released all slaves [ 534.659202][ T36] bond3 (unregistering): Released all slaves [ 534.676095][ T36] bond4 (unregistering): Released all slaves [ 534.694701][ T36] bond5 (unregistering): Released all slaves [ 534.729382][T19153] dummy0: entered promiscuous mode [ 534.734615][T19153] vlan2: entered promiscuous mode [ 534.775258][T19115] wg1 speed is unknown, defaulting to 1000 [ 534.937902][ T36] tipc: Disabling bearer [ 534.963025][ T36] tipc: Left network mode [ 535.140677][T19181] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3473'. [ 535.406714][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 535.462390][T19188] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3478'. [ 535.504539][T19193] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.3479'. [ 535.531647][T19188] netem: unknown loss type 13 [ 535.548662][T19188] netem: change failed [ 535.849560][T19185] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 536.076089][T19193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3479'. [ 536.436721][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 536.504066][T19215] netlink: 'syz.4.3482': attribute type 1 has an invalid length. [ 536.793744][T19218] bond2: entered promiscuous mode [ 536.830026][T19218] bond2: entered allmulticast mode [ 536.845754][T19218] 8021q: adding VLAN 0 to HW filter on device bond2 [ 536.858545][T19215] netlink: 'syz.4.3482': attribute type 4 has an invalid length. [ 537.160640][T19235] netlink: 'syz.1.3486': attribute type 32 has an invalid length. [ 537.173093][T19235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3486'. [ 537.221724][ T36] batadv_slave_1: left promiscuous mode [ 537.244795][ T36] hsr_slave_0: left promiscuous mode [ 537.447710][ T36] pim6reg (unregistering): left allmulticast mode [ 537.477091][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 538.355102][T19235] (unnamed net_device) (uninitialized): option coupled_control: invalid value (36) [ 538.475999][T19246] vlan2: entered promiscuous mode [ 538.488026][T19246] batadv0: entered promiscuous mode [ 538.516749][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 538.564864][T19248] C speed is unknown, defaulting to 1000 [ 538.828714][T19264] ip6tnl1: entered promiscuous mode [ 538.848606][T19264] ip6tnl1: entered allmulticast mode [ 538.881335][T19264] team0: Device ip6tnl1 is of different type [ 539.019300][T19269] netlink: 'syz.1.3496': attribute type 21 has an invalid length. [ 539.038051][T19269] netlink: 'syz.1.3496': attribute type 6 has an invalid length. [ 539.038708][ T36] IPVS: stop unused estimator thread 0... [ 539.057653][T19269] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3496'. [ 539.402002][T19273] bond0: (slave wlan1): Releasing backup interface [ 539.505922][T19284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3501'. [ 539.557304][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 540.227610][T19300] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3506'. [ 540.274870][T19300] netlink: 'syz.0.3506': attribute type 1 has an invalid length. [ 540.315537][T19300] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3506'. [ 540.361841][T19309] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3508'. [ 540.498070][T19314] netlink: 'syz.4.3509': attribute type 1 has an invalid length. [ 540.564109][T19314] netlink: 'syz.4.3509': attribute type 1 has an invalid length. [ 540.572813][T19314] netlink: 'syz.4.3509': attribute type 1 has an invalid length. [ 540.597018][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 540.609803][T19314] netlink: 'syz.4.3509': attribute type 1 has an invalid length. [ 540.666033][T19322] C speed is unknown, defaulting to 1000 [ 540.696363][T19325] syzkaller0: entered promiscuous mode [ 540.722572][T19325] syzkaller0: entered allmulticast mode [ 540.801992][T19328] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3513'. [ 541.080616][ T6405] IPVS: starting estimator thread 0... [ 541.130405][T19336] bridge0: left promiscuous mode [ 541.177654][T19339] IPVS: using max 24 ests per chain, 57600 per kthread [ 541.263601][T19336] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 541.418028][T19333] C speed is unknown, defaulting to 1000 [ 541.636731][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 541.973982][T19356] validate_nla: 63 callbacks suppressed [ 541.974003][T19356] netlink: 'syz.1.3518': attribute type 1 has an invalid length. [ 542.111414][T19357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3518'. [ 542.124523][T19357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3518'. [ 542.460000][T19367] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 542.676738][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 542.787800][T10005] tipc: Disabling bearer [ 543.623193][T10005] bond0 (unregistering): Released all slaves [ 543.726834][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 543.774124][T10005] bond1 (unregistering): Released all slaves [ 543.792095][T10005] bond2 (unregistering): Released all slaves [ 543.964782][T10005] bond3 (unregistering): Released all slaves [ 544.110305][T10005] bond4 (unregistering): Released all slaves [ 544.126300][T10005] bond5 (unregistering): Released all slaves [ 544.144038][T10005] bond6 (unregistering): Released all slaves [ 544.414499][T10005] _ÐZ`Ô€@ÿÿ: left promiscuous mode [ 544.559754][T19404] FAULT_INJECTION: forcing a failure. [ 544.559754][T19404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 544.596074][T19404] CPU: 0 UID: 0 PID: 19404 Comm: syz.3.3529 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 544.596110][T19404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 544.596123][T19404] Call Trace: [ 544.596133][T19404] [ 544.596143][T19404] dump_stack_lvl+0x189/0x250 [ 544.596175][T19404] ? __pfx____ratelimit+0x10/0x10 [ 544.596208][T19404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 544.596233][T19404] ? __pfx__printk+0x10/0x10 [ 544.596261][T19404] ? __might_fault+0xb0/0x130 [ 544.596302][T19404] should_fail_ex+0x414/0x560 [ 544.596330][T19404] _copy_from_iter+0x1db/0x16f0 [ 544.596369][T19404] ? __pfx__copy_from_iter+0x10/0x10 [ 544.596402][T19404] ? aa_label_sk_perm+0x413/0x560 [ 544.596443][T19404] ping_common_sendmsg+0xb9/0x2c0 [ 544.596477][T19404] ping_v6_sendmsg+0x1cd/0x1210 [ 544.596510][T19404] ? __pfx_ping_v6_sendmsg+0x10/0x10 [ 544.596530][T19404] ? __pfx___might_resched+0x10/0x10 [ 544.596577][T19404] ? aa_sk_perm+0x81e/0x950 [ 544.596614][T19404] ? __pfx_aa_sk_perm+0x10/0x10 [ 544.596643][T19404] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 544.596679][T19404] ? __fget_files+0x2a/0x420 [ 544.596698][T19404] ? sock_rps_record_flow+0x19/0x410 [ 544.596728][T19404] ? inet_sendmsg+0x2f4/0x370 [ 544.596754][T19404] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 544.596781][T19404] __sock_sendmsg+0x19c/0x270 [ 544.596815][T19404] __sys_sendto+0x3bd/0x520 [ 544.596841][T19404] ? __pfx___sys_sendto+0x10/0x10 [ 544.596860][T19404] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 544.596896][T19404] ? __fget_files+0x3a0/0x420 [ 544.596927][T19404] ? ksys_write+0x22a/0x250 [ 544.596958][T19404] ? __pfx_ksys_write+0x10/0x10 [ 544.596983][T19404] ? rcu_is_watching+0x15/0xb0 [ 544.597014][T19404] __x64_sys_sendto+0xde/0x100 [ 544.597039][T19404] do_syscall_64+0xfa/0x3b0 [ 544.597059][T19404] ? lockdep_hardirqs_on+0x9c/0x150 [ 544.597091][T19404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.597112][T19404] ? clear_bhb_loop+0x60/0xb0 [ 544.597138][T19404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.597158][T19404] RIP: 0033:0x7f54f018e9a9 [ 544.597177][T19404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.597196][T19404] RSP: 002b:00007f54edff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 544.597218][T19404] RAX: ffffffffffffffda RBX: 00007f54f03b5fa0 RCX: 00007f54f018e9a9 [ 544.597235][T19404] RDX: 000000000000ffd8 RSI: 0000200000000080 RDI: 0000000000000003 [ 544.597248][T19404] RBP: 00007f54edff6090 R08: 0000000000000000 R09: 0000000000000000 [ 544.597262][T19404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.597274][T19404] R13: 0000000000000000 R14: 00007f54f03b5fa0 R15: 00007ffddcc41978 [ 544.597308][T19404] [ 544.757432][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 544.969162][T10005] tipc: Disabling bearer [ 545.016446][T10005] tipc: Left network mode [ 545.218523][T19423] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3535'. [ 545.261605][T19432] netlink: 324 bytes leftover after parsing attributes in process `syz.0.3538'. [ 545.318008][T19432] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3538'. [ 545.357616][T19432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3538'. [ 545.511636][T19450] FAULT_INJECTION: forcing a failure. [ 545.511636][T19450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.526131][T19450] CPU: 0 UID: 0 PID: 19450 Comm: syz.0.3542 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 545.526161][T19450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 545.526175][T19450] Call Trace: [ 545.526184][T19450] [ 545.526194][T19450] dump_stack_lvl+0x189/0x250 [ 545.526225][T19450] ? __pfx____ratelimit+0x10/0x10 [ 545.526257][T19450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 545.526283][T19450] ? __pfx__printk+0x10/0x10 [ 545.526317][T19450] ? ipv6_local_error+0x7a/0x710 [ 545.526349][T19450] should_fail_ex+0x414/0x560 [ 545.526376][T19450] strncpy_from_user+0x36/0x290 [ 545.526414][T19450] strncpy_from_user_nofault+0x72/0x150 [ 545.526443][T19450] bpf_bprintf_prepare+0xc59/0x1450 [ 545.526488][T19450] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 545.526521][T19450] ? __lock_acquire+0xab9/0xd20 [ 545.526543][T19450] ? bpf_trace_printk+0xc1/0x190 [ 545.526578][T19450] bpf_trace_printk+0xdb/0x190 [ 545.526599][T19450] ? __lock_acquire+0xab9/0xd20 [ 545.526621][T19450] ? __pfx_bpf_trace_printk+0x10/0x10 [ 545.526647][T19450] ? bpf_trace_run2+0x186/0x4b0 [ 545.526695][T19450] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 545.526716][T19450] bpf_trace_run2+0x281/0x4b0 [ 545.526745][T19450] ? bpf_trace_run2+0x186/0x4b0 [ 545.526777][T19450] ? __pfx_bpf_trace_run2+0x10/0x10 [ 545.526814][T19450] ? __bpf_trace_contention_begin+0xcd/0x130 [ 545.526846][T19450] __bpf_trace_contention_begin+0xdc/0x130 [ 545.526883][T19450] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 545.526911][T19450] ? fdget_pos+0x247/0x320 [ 545.526933][T19450] ? fdget_pos+0x247/0x320 [ 545.526965][T19450] trace_contention_begin+0xf4/0x120 [ 545.526994][T19450] __mutex_lock+0x193/0xe80 [ 545.527017][T19450] ? __lock_acquire+0xab9/0xd20 [ 545.527046][T19450] ? fdget_pos+0x247/0x320 [ 545.527067][T19450] ? __pfx___mutex_lock+0x10/0x10 [ 545.527092][T19450] ? __fget_files+0x2a/0x420 [ 545.527116][T19450] ? __fget_files+0x3a0/0x420 [ 545.527133][T19450] ? __fget_files+0x2a/0x420 [ 545.527157][T19450] fdget_pos+0x247/0x320 [ 545.527178][T19450] ksys_read+0x79/0x250 [ 545.527208][T19450] ? __pfx_ksys_read+0x10/0x10 [ 545.527232][T19450] ? rcu_is_watching+0x15/0xb0 [ 545.527263][T19450] ? do_syscall_64+0xbe/0x3b0 [ 545.527287][T19450] do_syscall_64+0xfa/0x3b0 [ 545.527306][T19450] ? lockdep_hardirqs_on+0x9c/0x150 [ 545.527336][T19450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.527357][T19450] ? clear_bhb_loop+0x60/0xb0 [ 545.527382][T19450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.527403][T19450] RIP: 0033:0x7f999c78d3bc [ 545.527423][T19450] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 545.527440][T19450] RSP: 002b:00007f999d6ce030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 545.527463][T19450] RAX: ffffffffffffffda RBX: 00007f999c9b5fa0 RCX: 00007f999c78d3bc [ 545.527478][T19450] RDX: 000000000000000f RSI: 00007f999d6ce0a0 RDI: 0000000000000004 [ 545.527491][T19450] RBP: 00007f999d6ce090 R08: 0000000000000000 R09: 0000000000000000 [ 545.527505][T19450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.527517][T19450] R13: 0000000000000000 R14: 00007f999c9b5fa0 R15: 00007ffff9cd7368 [ 545.527551][T19450] [ 546.133307][T19458] netlink: 30 bytes leftover after parsing attributes in process `syz.0.3545'. [ 546.224646][T19458] veth1_to_batadv: entered promiscuous mode [ 546.349659][T19471] netlink: 'syz.2.3546': attribute type 2 has an invalid length. [ 547.322213][T19491] FAULT_INJECTION: forcing a failure. [ 547.322213][T19491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.366791][T19491] CPU: 1 UID: 0 PID: 19491 Comm: syz.1.3553 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 547.366826][T19491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 547.366840][T19491] Call Trace: [ 547.366850][T19491] [ 547.366859][T19491] dump_stack_lvl+0x189/0x250 [ 547.366892][T19491] ? __pfx____ratelimit+0x10/0x10 [ 547.366925][T19491] ? __pfx_dump_stack_lvl+0x10/0x10 [ 547.366951][T19491] ? __pfx__printk+0x10/0x10 [ 547.366994][T19491] should_fail_ex+0x414/0x560 [ 547.367022][T19491] _copy_to_user+0x31/0xb0 [ 547.367055][T19491] simple_read_from_buffer+0xe1/0x170 [ 547.367091][T19491] proc_fail_nth_read+0x1df/0x250 [ 547.367115][T19491] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 547.367140][T19491] ? rw_verify_area+0x258/0x650 [ 547.367167][T19491] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 547.367189][T19491] vfs_read+0x200/0x980 [ 547.367222][T19491] ? __pfx___mutex_lock+0x10/0x10 [ 547.367243][T19491] ? __pfx_vfs_read+0x10/0x10 [ 547.367272][T19491] ? __fget_files+0x2a/0x420 [ 547.367295][T19491] ? __fget_files+0x3a0/0x420 [ 547.367311][T19491] ? __fget_files+0x2a/0x420 [ 547.367338][T19491] ksys_read+0x145/0x250 [ 547.367370][T19491] ? __pfx_ksys_read+0x10/0x10 [ 547.367393][T19491] ? rcu_is_watching+0x15/0xb0 [ 547.367424][T19491] ? do_syscall_64+0xbe/0x3b0 [ 547.367446][T19491] do_syscall_64+0xfa/0x3b0 [ 547.367462][T19491] ? lockdep_hardirqs_on+0x9c/0x150 [ 547.367490][T19491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.367510][T19491] ? clear_bhb_loop+0x60/0xb0 [ 547.367531][T19491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.367548][T19491] RIP: 0033:0x7f7ca7b8d3bc [ 547.367564][T19491] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 547.367580][T19491] RSP: 002b:00007f7ca8a2e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 547.367598][T19491] RAX: ffffffffffffffda RBX: 00007f7ca7db5fa0 RCX: 00007f7ca7b8d3bc [ 547.367611][T19491] RDX: 000000000000000f RSI: 00007f7ca8a2e0a0 RDI: 0000000000000004 [ 547.367622][T19491] RBP: 00007f7ca8a2e090 R08: 0000000000000000 R09: 0000000000000000 [ 547.367633][T19491] R10: 0000000040002122 R11: 0000000000000246 R12: 0000000000000001 [ 547.367643][T19491] R13: 0000000000000000 R14: 00007f7ca7db5fa0 R15: 00007ffd55076ac8 [ 547.367678][T19491] [ 547.808340][T10005] hsr_slave_0: left promiscuous mode [ 547.816326][T10005] hsr_slave_1: left promiscuous mode [ 547.916043][T19498] netlink: 'syz.3.3555': attribute type 1 has an invalid length. [ 548.027390][T19517] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3555'. [ 548.225762][T10005] pimreg3 (unregistering): left allmulticast mode [ 549.400166][T10028] smc: removing ib device syz1 [ 549.405837][T19501] tipc: Enabling of bearer rejected, failed to enable media [ 549.428822][T19498] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 549.814995][T19548] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3560'. [ 549.868760][T19548] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3560'. [ 549.880313][T19552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3563'. [ 550.235197][T19522] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 550.440905][T19544] syzkaller0: entered promiscuous mode [ 550.460256][T19544] syzkaller0: entered allmulticast mode [ 550.482856][T19535] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3559'. [ 550.767496][T10000] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 551.728831][T19584] netlink: 'syz.4.3569': attribute type 21 has an invalid length. [ 553.292810][T19584] netlink: 'syz.4.3569': attribute type 6 has an invalid length. [ 553.317950][T19584] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3569'. [ 553.491044][T19599] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3570'. [ 553.574767][T19604] vlan2: entered promiscuous mode [ 553.580213][T19604] vlan2: entered allmulticast mode [ 553.595877][T19604] hsr_slave_1: entered allmulticast mode [ 553.804841][T19615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3574'. [ 554.038664][ C1] bridge0: port 3(dummy0) entered forwarding state [ 554.045515][ C1] bridge0: topology change detected, propagating [ 554.595779][T19651] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3588'. [ 554.620885][T19651] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3588'. [ 554.630947][T19651] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3588'. [ 554.649262][T19592] Bluetooth: hci0: link tx timeout [ 554.655604][T19592] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 554.716512][T19651] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3588'. [ 554.743069][T19662] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3592'. [ 554.825457][T19666] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3593'. [ 554.849334][T19592] Bluetooth: hci2: command 0x0401 tx timeout [ 555.012795][T19677] sctp: [Deprecated]: syz.2.3596 (pid 19677) Use of int in max_burst socket option deprecated. [ 555.012795][T19677] Use struct sctp_assoc_value instead [ 555.033842][T19677] tipc: Enabling of bearer rejected, failed to enable media [ 555.102159][T19679] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 555.781875][T19707] netlink: 'syz.3.3601': attribute type 4 has an invalid length. [ 555.843201][T19692] __nla_validate_parse: 1 callbacks suppressed [ 555.843223][T19692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3599'. [ 556.090942][T19715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 661.206535][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 661.213552][ C0] rcu: 1-...!: (3 ticks this GP) idle=73d4/1/0x4000000000000000 softirq=125296/125296 fqs=0 [ 661.224852][ C0] rcu: (detected by 0, t=10502 jiffies, g=91905, q=205 ncpus=2) [ 661.232639][ C0] Sending NMI from CPU 0 to CPUs 1: [ 661.232685][ C1] NMI backtrace for cpu 1 [ 661.232704][ C1] CPU: 1 UID: 0 PID: 19723 Comm: syz.4.3606 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 661.232725][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 661.232737][ C1] RIP: 0010:rcu_is_watching+0x6/0xb0 [ 661.232765][ C1] Code: e8 4f ab 4e 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 <41> 56 53 65 ff 05 c0 73 f9 10 e8 7b a5 c8 09 89 c3 83 f8 08 73 65 [ 661.232780][ C1] RSP: 0018:ffffc90000a08cf8 EFLAGS: 00000002 [ 661.232797][ C1] RAX: ffffffff81aeaa93 RBX: ffff8880542f9340 RCX: 0000000000010000 [ 661.232810][ C1] RDX: ffff8880594c3c00 RSI: 0000000000000001 RDI: 0000000000000002 [ 661.232822][ C1] RBP: 0000000000000001 R08: ffffffff8fa22af7 R09: 1ffffffff1f4455e [ 661.232834][ C1] R10: dffffc0000000000 R11: fffffbfff1f4455f R12: dffffc0000000000 [ 661.232848][ C1] R13: 0000000000000001 R14: ffff8880b8727b40 R15: 0000000000000000 [ 661.232860][ C1] FS: 00007f6ed6bf66c0(0000) GS:ffff888125d16000(0000) knlGS:0000000000000000 [ 661.232876][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 661.232888][ C1] CR2: 0000001b2db1eff8 CR3: 000000002806c000 CR4: 00000000003526f0 [ 661.232905][ C1] Call Trace: [ 661.232914][ C1] [ 661.232924][ C1] enqueue_hrtimer+0x9d/0x3a0 [ 661.232949][ C1] __hrtimer_run_queues+0x656/0xc60 [ 661.232982][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 661.233001][ C1] ? read_tsc+0x9/0x20 [ 661.233022][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 661.233059][ C1] __sysvec_apic_timer_interrupt+0x108/0x410 [ 661.233082][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 661.233111][ C1] [ 661.233117][ C1] [ 661.233124][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 661.233144][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 661.233170][ C1] Code: 74 05 e8 2b 70 55 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 13 9d 1e f6 65 8b 05 bc 59 2e 07 85 c0 74 40 48 c7 04 24 0e 36 [ 661.233185][ C1] RSP: 0018:ffffc9000d7bee00 EFLAGS: 00000206 [ 661.233200][ C1] RAX: ead5a02cf63e7200 RBX: 0000000000000a06 RCX: ead5a02cf63e7200 [ 661.233213][ C1] RDX: 0000000000000002 RSI: ffffffff8d99ec8e RDI: 0000000000000001 [ 661.233225][ C1] RBP: ffffc9000d7bee90 R08: ffffffff8fa22af7 R09: 1ffffffff1f4455e [ 661.233239][ C1] R10: dffffc0000000000 R11: fffffbfff1f4455f R12: dffffc0000000000 [ 661.233253][ C1] R13: ffff8880542f90f0 R14: ffff8880542f92e8 R15: 1ffff92001af7dc0 [ 661.233278][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 661.233310][ C1] taprio_change+0x3119/0x3f60 [ 661.233339][ C1] ? __pfx_taprio_change+0x10/0x10 [ 661.233355][ C1] ? trace_contention_end+0x39/0x120 [ 661.233406][ C1] taprio_init+0x959/0xbd0 [ 661.233430][ C1] ? __pfx_taprio_init+0x10/0x10 [ 661.233447][ C1] ? lockdep_rtnl_is_held+0x26/0x40 [ 661.233468][ C1] ? qdisc_lookup+0x36d/0x6d0 [ 661.233489][ C1] ? __pfx_taprio_init+0x10/0x10 [ 661.233505][ C1] qdisc_create+0x7a9/0xea0 [ 661.233533][ C1] tc_modify_qdisc+0x1538/0x20e0 [ 661.233566][ C1] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 661.233606][ C1] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 661.233628][ C1] rtnetlink_rcv_msg+0x779/0xb70 [ 661.233647][ C1] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 661.233663][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 661.233684][ C1] ? ref_tracker_free+0x63a/0x7d0 [ 661.233704][ C1] ? __asan_memcpy+0x40/0x70 [ 661.233725][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 661.233750][ C1] netlink_rcv_skb+0x208/0x470 [ 661.233778][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 661.233795][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 661.233829][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 661.233850][ C1] netlink_unicast+0x82c/0x9e0 [ 661.233879][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 661.233906][ C1] ? netlink_sendmsg+0x642/0xb30 [ 661.233922][ C1] ? skb_put+0x11b/0x210 [ 661.233943][ C1] netlink_sendmsg+0x805/0xb30 [ 661.233965][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 661.233984][ C1] ? aa_sock_msg_perm+0x94/0x160 [ 661.234004][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 661.234022][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 661.234040][ C1] __sock_sendmsg+0x219/0x270 [ 661.234067][ C1] ____sys_sendmsg+0x505/0x830 [ 661.234090][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 661.234115][ C1] ? import_iovec+0x74/0xa0 [ 661.234141][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 661.234162][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 661.234203][ C1] ? __fget_files+0x2a/0x420 [ 661.234218][ C1] ? __fget_files+0x3a0/0x420 [ 661.234239][ C1] __x64_sys_sendmsg+0x19b/0x260 [ 661.234262][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 661.234288][ C1] ? rcu_is_watching+0x15/0xb0 [ 661.234311][ C1] ? do_syscall_64+0xbe/0x3b0 [ 661.234330][ C1] do_syscall_64+0xfa/0x3b0 [ 661.234346][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 661.234372][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.234390][ C1] ? clear_bhb_loop+0x60/0xb0 [ 661.234410][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.234427][ C1] RIP: 0033:0x7f6ed8d8e9a9 [ 661.234443][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.234459][ C1] RSP: 002b:00007f6ed6bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 661.234476][ C1] RAX: ffffffffffffffda RBX: 00007f6ed8fb5fa0 RCX: 00007f6ed8d8e9a9 [ 661.234489][ C1] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 661.234500][ C1] RBP: 00007f6ed8e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 661.234511][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.234522][ C1] R13: 0000000000000000 R14: 00007f6ed8fb5fa0 R15: 00007ffe34c68428 [ 661.234544][ C1] [ 661.234669][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g91905 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 661.821523][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=39081 [ 661.829436][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g91905 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 661.840908][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 661.850979][ C0] rcu: RCU grace-period kthread stack dump: [ 661.856877][ C0] task:rcu_preempt state:I stack:27128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 661.868889][ C0] Call Trace: [ 661.872206][ C0] [ 661.875178][ C0] __schedule+0x16f5/0x4d00 [ 661.879736][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 661.884982][ C0] ? schedule+0x165/0x360 [ 661.889346][ C0] ? __lock_acquire+0xab9/0xd20 [ 661.894220][ C0] ? __pfx___schedule+0x10/0x10 [ 661.899125][ C0] ? schedule+0x91/0x360 [ 661.903405][ C0] schedule+0x165/0x360 [ 661.907595][ C0] schedule_timeout+0x12b/0x270 [ 661.912565][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 661.917969][ C0] ? __pfx_process_timeout+0x10/0x10 [ 661.923294][ C0] ? prepare_to_swait_event+0x341/0x380 [ 661.928880][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 661.933767][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 661.938726][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 661.943957][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 661.949276][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 661.954515][ C0] ? finish_swait+0xcd/0x1f0 [ 661.959156][ C0] rcu_gp_kthread+0x99/0x390 [ 661.963778][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 661.969000][ C0] ? __kthread_parkme+0x7b/0x200 [ 661.973968][ C0] ? __kthread_parkme+0x1a1/0x200 [ 661.979027][ C0] kthread+0x70e/0x8a0 [ 661.983128][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 661.988345][ C0] ? __pfx_kthread+0x10/0x10 [ 661.992973][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 661.998206][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 662.003434][ C0] ? __pfx_kthread+0x10/0x10 [ 662.008056][ C0] ret_from_fork+0x3fc/0x770 [ 662.012674][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 662.017815][ C0] ? __switch_to_asm+0x39/0x70 [ 662.022610][ C0] ? __switch_to_asm+0x33/0x70 [ 662.027404][ C0] ? __pfx_kthread+0x10/0x10 [ 662.032026][ C0] ret_from_fork_asm+0x1a/0x30 [ 662.036837][ C0]