last executing test programs: 2.253496119s ago: executing program 4 (id=4296): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r5, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r6, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711214000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r7, 0x6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r8, 0x0, 0x0}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000040000000300000003000000002000000000001000004ffffffff000000000300000000000000000000000000000203000000000000000000000b02"], 0x0, 0x4a}, 0x28) r9 = socket(0x2, 0x80805, 0x0) sendmmsg(r9, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x188}}], 0x2, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r9, 0x10f, 0x82, &(0x7f0000000000)=0x10001, 0x4) 2.067414596s ago: executing program 4 (id=4297): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, 0x0, 0x0) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000001200000000060000e808000100000000000c000d"], 0x28}}, 0x0) 1.791829924s ago: executing program 0 (id=4307): syz_emit_ethernet(0x3b6, &(0x7f00000020c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6043009303803afffe800000000000000000000000000000ff02000000000000000000000000000186009078000000000000000000000000000aa78ce5400659808000ffffc0fe4023493b87aafaffffffffffffff2373247202fa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0502000100000000000000000800ee000018fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b396ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000000bd47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b108474349bdb1f57e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f0192107fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e4163ed09bdb581c9fe68a356f542b0430509da61bfb02b3235e1d16212fb00145e14f0e74d2d52cfb3f27fafb60845f90b6dfc87c6905bbc94d33e4575c853105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb1fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f0005d517fb2cf1a4ffdc1b7e018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"], 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x2b}, {0x0, 0x6faa, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3e0}, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4}}, 0xe8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r1], 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x8000) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 1.707156255s ago: executing program 0 (id=4309): syz_emit_ethernet(0x1d5, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$kcm(0x10, 0x7, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000002c00)={0x0, 0x6, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x38, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}]}, 0x38}}, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r5 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x20000000}) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe46a}, 0x94) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r6, @ANYRES16=r6, @ANYBLOB="b994903a26aabd48cc49f36e41f40f2ad0ce5383533a0465e8d33922b8db9d6bbfef538667f3db6aeb11b0225ed4a4cb26450c563c88dea57a2c59b365cc562b2afddeadc9fb260ce086b86ca259aec8d7be9cf3868a6e4d7be0baf9d36c661f6168035f68a7602793cf7897e107fe8dda4b2aa5134b5c012a90b761484b0367e0a88a6c25a2487bb4e0866ae23c71dc270d4b572cdb", @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}, 0x1, 0x0, 0x0, 0x4044000}, 0x4040080) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x9, 0x9, 0x1, @empty, @remote, 0x8000, 0x7800, 0x1, 0x7fffffff}}) connect$packet(r3, &(0x7f0000000640)={0x11, 0x3, r9, 0x1, 0x1, 0x6, @remote}, 0x14) socket$netlink(0x10, 0x3, 0xf) socket$nl_generic(0x10, 0x3, 0x10) 1.606690859s ago: executing program 3 (id=4311): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020f0000100000000000000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000000000000000000000000000000000000000000000000000000fc020000000000000000000000000000030006000000000002000000e0000001"], 0x80}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x3, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, r3}, 0x94) 1.59502672s ago: executing program 0 (id=4313): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r2) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x34, r3, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}, @L2TP_ATTR_IFNAME={0x14}]}, 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002802d00ff00080005"], 0x44}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x20, 0x1, 0x0, 0x0, {{0xfffa, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x8, 0x0, 0xe}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000300)={'wg2\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x3c}}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r14, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r15, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001000030425bd70000000000000000000", @ANYRES32=r15, @ANYBLOB="00050000000000000a00010099"], 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)={0x1c4, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x17}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x4}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x24}, 0x24000051) 1.518905174s ago: executing program 3 (id=4315): bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@cgroup, 0xffffffffffffffff, 0x37, 0xd416a90e1556646a}, 0x20) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@cgroup, 0xffffffffffffffff, 0x37, 0xd416a90e1556646a}, 0x20) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000210a011d29ca1e668192a400020000000c00034000000000000000000900020073797a3200000000090001"], 0x38}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 1.447966115s ago: executing program 3 (id=4317): socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x801, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x14, 0x38, 0x1, 0x70bd2c, 0x25dfdbff, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @timestamp, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @sack_perm, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x8) sendto$inet(r0, &(0x7f00000007c0)="25d7", 0x2, 0xe044, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000040)}, {&(0x7f0000000440)="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", 0x23c}], 0x2) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendto$inet(r0, &(0x7f0000000380)="78602d09ff79abcc8be5a44dd807b343435a90ad7f6a390053a0bee1c2307d383aba1837916f896883644d5bc21b1326dadab06b89b85d70f9c92d5a7770e2b5b6c0709d5c506a89cc81e7386a3f62c4b6c5c3b47fc934578cf4742ee1f0fa9c984339e8d368a9295895a570", 0x6c, 0x480c1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r5, 0x0, 0x300, 0x0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 1.428978836s ago: executing program 0 (id=4318): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1}, 0x94) 1.357922559s ago: executing program 0 (id=4320): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000140)={{0x11, @loopback, 0x4e20, 0x0, 'wrr\x00', 0x0, 0xed39, 0x30}, {@rand_addr=0x64010101, 0x4e22, 0x20000, 0x8, 0x0, 0x3}}, 0x44) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x1000, @loopback, 0xffdfffff}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000d80)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x4080) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000400)=ANY=[@ANYBLOB="bf2be3fb2fe500bb9bbfa8be8d70f161e3ad13d0fa796553dfa75d2533df6a2b3ba5b6297e597581c0a042d5f9fcc9dbb9f9122e3bc1f5b952e7151ba5cc6987"], 0x8) 1.284733377s ago: executing program 1 (id=4321): r0 = socket(0x10, 0x803, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001c0000000000000064000000640000000300000003"], 0x0, 0x7f, 0x0, 0x1, 0x2}, 0x20) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f00000000c0)={@mcast1, 0x0}, &(0x7f0000000180)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000600)={'gre0\x00', r9, 0x7, 0x0, 0x18000000, 0x94f, {{0x1c, 0x4, 0x1, 0x2a, 0x70, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast1, @broadcast, {[@end, @timestamp_addr={0x44, 0x44, 0x35, 0x1, 0x8, [{@broadcast, 0x3}, {@multicast1, 0x2}, {@rand_addr=0x64010101, 0x4}, {@multicast1, 0x6}, {@rand_addr=0x64010102, 0x7}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x4}, {@rand_addr=0x64010102, 0x4}, {@broadcast, 0x8}]}, @noop, @lsrr={0x83, 0x7, 0x8a, [@loopback]}, @cipso={0x86, 0xd, 0x1, [{0x2, 0x3, "cd"}, {0x2, 0x4, "122a"}]}]}}}}}) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, &(0x7f0000000000)={r11}, &(0x7f0000000080)=0x8) setsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f0000000400)={@private=0xa010101, @remote, @multicast1}, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4000}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfa, 0xf, 0x100, 0x3, 0x1, 0x3, 0x401}}, {0x4}}]}]}, 0x5c}}, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r11, 0x6d63, 0x8, 0x6, 0x634, 0x3}, 0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r7], 0x54}}, 0x0) r14 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x1f, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000004000000000000000000010018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185100000a000000000000000000000085100000fbffffff5226c6ffffffffffffa6fefe0300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000e08fd4f3c00c518dc6a56ef4ee74ae746cdefc08002009e249708ace4c6415b8e019268cc1af8600fb7228474a28a1ff8caae627b3702c2e7a4570117fdef9d636b87c8ddbc2c106cb020c608a79ca0694af0c6c7f8b3b4037081aa3efa3500a60116178213adb1e22778add03b5fc844c28ebe353f4651c652dd1e50a84b23250bb2e6e01c02e84e2c3574a9a8ce993d197064f6ace707b5ae4f9aa0eda795c9ee94fd5934cfe", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000008500000083000000186800000b00000000000000fcffffffbf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x61680, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) sendmsg$kcm(r14, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc601000000010000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xa) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r15], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.216260139s ago: executing program 4 (id=4322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x88}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x78}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r1) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002cbd7025010000000000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x2400cc84) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=@base={0xf, 0x2, 0x7, 0x3, 0x2400, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40, 0x80000}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000007000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000003c6500bf000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a56715a0a62a26a0f6a5480a55c22fe394ae0000000000000000000000000000437d57defb79ea000500000000000000000000f014a4a318ba48d35ae9f438000000000000db894b62a614cb1fdd46619c5d2200000000000700000000000000000000006dcd2f421400f69947e4f26e099c9e8369080663c909b7e7c87e3b5e8e5a6df77c8f7338cd5a85f211a41b5d529d4243e47d7ab0d5991756b59d363ba30b18fc2ff189a4e8db38ab97c6a125e2785619e84c6a2b50f0e3ff83ef5149aff43dc899fdebdc2c496e6bdd4dd4d21f06fe133f4444272c5f0839ad663100452a6c6b6421f7e89a33b339401eee2cd466ab2a93a1ee7fb8a9e455ba1c6e17b02a1cd7bf35d36cf5b2a0f063469ae0d0b9fc042b48e98626eb0f9754d8cbbefa3079fe63063047baff09e9aaf7600000fba9a88db9ebef86f7cb522a784bb6d37e5f802757a15c6735138b493db9df53440a63fc565a0b190a710ae1e6807cbeb415ac841e94b706974160a60a14e571274f333d23186143b95514c79b50994cb39cda343bda8f01cf8ec7cdfdace0289e83ce50a57d68bfecfaf69fe7ff5b0375a47d3eb57b41d8a0589b82a1cf1149ba3f21ea2b65433321eb1a6f04ecc713c2b26d27baa49e54c2babec86335b9f418b5a5eb997bc9dd65197124b9aa80fc4aa8defb986bf05c41b919886bb81ecd3d24cf9ecc7004000000000000002c70d32f5d55ef2a2cf7560cb2884f46a92b3c25550f73e407fc5d514b2b7a6b690e290e676266addb7d96e723dec9c418eec8c48dffb6f432b4d5fef16e4f0051ba7efc690022c3f62b37cb5682d8bfdfc637ad3bf089ef0117bcd395322fcfb8e8e0a6e2babceb5f289b1d991770681192bcd0b584c3497e455f30ab918a690514a87a7d8e1d5f169a4e680e9c390071d26f2e0e26fc062f2785f14c0404fe01fb4000000000000000577dcb1698a9021a36d73ed03651c1937b2c84046023a1a0a87b208e33ad2d7c2892b176877264e1d699b7401eb917b289f6f67060fda0fa44b54bd87517a2bf09dba7209e41db4288b61bda5960952c45e5c55f2cd68bf9c6ff33e46109584bf42e8696ef1876564fef6f24cbbed0db8ab7fda1ffcc8c9fd4ab2cbe8f8df8e5535b12a942a948eacdaf308d48932064cfc3329da74f6f3e4409d6764a29680e312bf1a0143180e6493c9201ea916e6c9b2566c558ad88d9f7c0aebf82f5807eecefa97ada9bbd9e478e5d7748ee188bc719ca7a73dce5b6758a767c4c6b7572ab25eb2d73986379d5685cb438fe7091d097cc8f33fc0f83dee76603d6580f1c8fc4c37efd305ccc5a25678180425718bb9344e60dda8dae2677bb602d29aa0810616a2fdbca7020d72291b592b84223e2522ee01f5bdaa0fc4eb8d71d948a2baccf3ea2aa79d4d9069d8c0000000000000000000000321cd67859b4567badee56f158406f08683bdc5ffe2dedc916000c71f922fa2dfead7535999436a4aeb908781893479319b8b55e00d90ae6f09f06be2a0fc0bc17bef53331208112a0132350c0c5dd4607547079acc9471300dea6ae01742dccdae69f932cef80bca1bfcb57b9c852cf8358a580044772a80f20de36f707385380155be8907029d039a1d1447fc06b7020221e0d439f3f47edcf12f913dc8b6389a540340ae37804728ea65352e630c2e90424d58d72fdc1b28403e1dc7aad238b81df3b2d4166d656c6a9c73554bdf4f7312a4c0271e0eb45b4a596b7fa928ac3683f09fdaca46226c1df2c6c866cb4412d17d3d52c38cf0f7bd3b0eea2d4e06d061bb1b7c8c52f37f4036932d00028abd4527ffd639d7b16860033754ab13419429e5e39f290751ab6bd9392aef5519cd8c16e1f1cb1f225cc84a1a62497c1e436142fe28048a2b4d133905814a1808bc5b3e45eaa9eaebd946bee806968aeeb5a9eed87eba3d25d0b412a1b4cf2d419a58b09fc275c4395a0bd332eb538321465043e5967dd22459d0f52190a37f93ab823431a81fa6f54de61637fd473e19a6f567fead100e7d8cac149b66ebe9973af846146c62065a64854ed21e8b6f6fbe78474b753915a42efcb7da8ad18bacff8d69e0af1ca1f8174530a21820738412b100b54ee9b4a0dc22d5fe1cadecaea73fbfad087b19ce53177488d230539c5174f572a539d9d7c42698aa82bccf030ad393f25c10baa17e919f647d0e31877b7a6c1d8d86583f884a0c1da07b9b6dced06cdeb0094aa635a82f233b5993926b8970a0840ba116a7d20a40efb3bd03c4bdf380a2510a0a1ea69811ded68943c71218b42783b38959753978f222e1396b9b36dee2ce205122a000577cab29f48bff4f88c417e6bf5fb430d925596f29aca8677ca5a113aeaa5e0252ca17244d6c76e78ff1bbd81a71c4dfc72431d7f1126f8bdbf4056ee0f58a1bf83d53b1de07489541182dc4ee0f573c25b6c15dad930bc7a770b5a4f407d7a879db7185f15f80100000000000000739cc97db66ec6b925955d9a591808947fdd8d484ad27353230a449fdf87fc46c73b852fec931cfb6718acf3315bf5e577d00beb77c5514bc05d576a81345a03ad7aae74c5d2b77d45718348aed4fcbcd1441ff31b8f038824a989a9446a4a69367b228b3d174230b7320fc4d3c03368db573816dd0c04e65d6f8ce48283e76abdddbb965e0b2568e93c9cc5494a55421793f562c50c53f876cbde93c5cc7a3099c99d9775af010ba093f8a13b771782a3cfb24fbde6ef763e20c613164ab014d1906c4e098f1431b6b2886a155c4bac2911d7ee6a646f5913205ebd175e68975b93c330e4f9131788026b3b7cd5b6452c9e17452ac70000000000000000000000c71185f72436640fd4294fc3da230f9065095be47d7a848df12316c3c8b184fe110b061987fd79cf7d83443e69d08e2e839ae4fbe26ef7764f4870ef3bd0ec12eb45f60ca10dbfe329271f0bc93b28798e982e0dd32fc14bd4313c63b2dbb568f33fb45acad2dc7f438ea162c0709c0bbe1ea13e1e47399286e8143f400d7adf5f891f547c7e69e455706626814ee49274667f47769293451fd49885a152b8d2cf18febc7993f4a93893c6c7b7e46a230359ef2443e6bb9f50bb0faa5eaafd3ed6d551600c46b58a29fd7ccbbb0616f0be27302b683eccd742791d97f4a1daa0447f004426fd09b67d926f51525da63987bc73af35b28277879089b89fff6edab2fa1caf660a46a1a9f09e2d255b1c4be95c7c33dc81857f580e36c0a78d94dd879ee18de4a6475858d2ded2e3427ae007cc6f8e5e99aa146667f71ad83f3ddcf5db2dc396d7da499b65cd98125f20c284fc84d6a70be1de44b49c82022225292199c75cc26beab98dce4c331ed722f01d0d6314a72416814a565f4d90a5f8a255810f23541082f4b06f451e4724cd882f4d589600000000005854ca490d7df9cc293547c9a51aecc7a92f417f6a4d327737f1b198252358832dbe43507844a0cc112af4ce457c173fa64174ffd5ab9501eeb85508ebb60e169c0736c5960f2fe0879c77fff7b241439686cb4db435d6a7aa7c1f4a6433e77d3e547bbe6cf5b5d93a491ab4bba1ea7a1e6f37618b1d74cff3630d85a210092211be1ec12a30891eef590b19cdde055d626818c64e1c56b8918f33441a64b54946571b7bc70fb065d3bb1647f6f989ab8159e6d1cfa6c0ec7329d7d2263ca22144bf17d8692f03b592bd0f610096094da096233984e95b9a8216a6e60a104ae0bb5f77ac70b4390ea2cb6f6c40c928fae489f447240a25fd0a5b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) r6 = socket$qrtr(0x2a, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = syz_open_procfs$namespace(0x0, 0x0) preadv(r7, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000600)=""/231, 0xe7}], 0x2, 0x10, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$qrtr(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r4, &(0x7f0000000100)="f5867b594d593b6b895039fa4973630c8d268fd23ebc8610e5f064c7", &(0x7f00000002c0)=""/218, 0x4}, 0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r9) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_BEARER_ENABLE(r8, 0x0, 0x4000081) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000400)="159f865967b6a60521a275536960d598e963c4b3f2c61dd4127989bf78bfce83", 0x20) r12 = accept$alg(r11, 0x0, 0x0) recvmmsg(r12, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/86, 0x56}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/195, 0xc3}], 0x1}, 0x31}], 0x2, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 1.160449772s ago: executing program 3 (id=4324): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_0\x00', 0x0}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xff, [{0x80000005, 0x4, 0x40}]}]}}, &(0x7f0000000340)=""/5, 0x32, 0x5, 0x1}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000010000110000100000475000000000000", @ANYRES32=r1, @ANYBLOB="ec"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r2, 0x20, &(0x7f0000000000)={&(0x7f0000000140)=""/96, 0x60, 0x0, &(0x7f00000003c0)=""/214, 0xd6}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="67727e10ea34", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x82, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x22a0b}}, 0x20}}, 0xc044) 1.160085227s ago: executing program 4 (id=4325): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) (async) writev(r1, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0x1}, {&(0x7f00000197c0)="1902e902d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5c2df6b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f91b82cbcca7aada48000000b3d2f04b69ad14c3273cc98f00048136bff5f7f150c499d7f027b0e4743fe9947ea796698723c694a61b5d7678c4eb", @ANYRES32=0x0, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001802c000c801400010008000000430100008000000088a800001400010012390000310f00007f00000081000000"], 0x68}}, 0x24040800) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0), 0xc) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 919.2773ms ago: executing program 3 (id=4326): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@get={0x128, 0x13, 0x400, 0x70bd26, 0x25dfdbfb, {{'morus640-sse2\x00'}, '\x00', '\x00', 0x2600, 0x400}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0xeffffffc}, {0x8, 0x1, 0xfffffbfa}, {0x8, 0x1, 0xf}, {0x8}, {0x8, 0x1, 0x8000}, {0x8}, {0x8, 0x1, 0x82a7}, {0x8, 0x1, 0x7}]}, 0x128}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7b}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) (async) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) (async) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x12, 0x12, r3, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x12, 0x12, r3, 0x0) accept4$unix(r1, 0x0, 0x0, 0x800) (async) r4 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r4, &(0x7f0000000140)=""/263, 0x107, 0x102, 0x0, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xbc}]}, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffcdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xbc}]}, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffcdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90) 698.358031ms ago: executing program 2 (id=4332): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000880)=@ipv6_delrule={0x1c, 0x1e, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) 595.341523ms ago: executing program 2 (id=4333): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r1, 0x100, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfffffffd}, @L2TP_ATTR_ENCAP_TYPE={0xfffffffffffffe95}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6}, @L2TP_ATTR_UDP_DPORT={0x6}, @L2TP_ATTR_ENCAP_TYPE]}, 0x44}}, 0x0) 594.882967ms ago: executing program 2 (id=4334): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000000000000a001b000c0002006e6c3830323131"], 0x20}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0x7300, @none, 0x6, 0x2}, 0xe) recvmmsg(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000002c0)=""/248, 0xf8}, {&(0x7f0000000140)=""/114, 0x72}, {&(0x7f0000001480)=""/217, 0xd9}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000001600)=""/103, 0x67}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x6}}], 0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0x47) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r2, 0x1}, 0x14) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r3, 0x104, 0x1, &(0x7f00000000c0)=0xb, 0x4) accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, &(0x7f0000000140)={0x2}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 588.365851ms ago: executing program 2 (id=4335): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x28}, 0x1, 0x0, 0x0, 0xc840}, 0x85) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @dev, @bcast, 0x0, [@null, @remote, @netrom, @netrom, @default, @default]}, &(0x7f00000000c0)=0x40, 0x80800) ioctl$sock_SIOCOUTQ(r6, 0x5411, &(0x7f0000000040)) 561.769814ms ago: executing program 2 (id=4336): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x40, r1, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x85}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c4}, 0x20000040) (async) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (async) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c000000030601040000fcffffff000007000008090002007379"], 0x4c}}, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) close(0x3) (rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, r5, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) (async, rerun: 32) r6 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000280)) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002dbd700001dcdf2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) (async, rerun: 32) r8 = socket(0x10, 0x3, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f0000000680)=0xc, 0x4) (async) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x0, 0x5f, 0x15, 0x8, 0x0, 0x0}}, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) (async) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r8) sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1212}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r12, @ANYBLOB="04002cbd7000fddbdf250b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0003000000080001007063690011000200303030303a30303a31302e300000000008000b00050000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00230a0000080001007063690011000200303030303a30303a31302e300000f90008000b00060000000e000f0002006e657464657673696d30000008000b0004000000080001007063690011000200303030303a30303a31302e300000000008000b000600"/242], 0xf8}, 0x1, 0x0, 0x0, 0x40810}, 0x20004084) 451.044065ms ago: executing program 0 (id=4337): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000000340)=@framed={{}, [@func={0x85, 0x2, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000a000000000008000b002417"], 0x44}, 0x1, 0x2000000000000000, 0x0, 0x4004800}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xd}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}]}}, 0x0, 0x4e}, 0x20) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="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", 0x18f}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e0325bc473c3aeaf6709e5227bca1f7ba283d381d4f64e34fa77c5cac5d0bcf72850aaa9ea7f9144a008ae41f51262011dd0a3eb6eaf00da010b18a79f6917d0c25efbf1c56feb59cbf4683c026aa7aa1d65bea9ba31000000", 0x91}, {&(0x7f0000000940)="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", 0x105}, {&(0x7f0000000500)="0f1d547dfd011eee5ee96e9f1947841b6080ffadffd0f2ba53588a463cb08890097ea28302b894feb895cebb0e72a94c681955c3a39a1e5ebde1638c8f408cbb197ede5a6779e4732b685db9abb1184d1e4bf53bb5eafcc7d265002aeead4852d157cfb83a10f4d80f000000000000a7f702c9424df1ffbd0387c5e7777aa1bf37cbffb95d0daf", 0x87}, {&(0x7f0000000d40)="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", 0x1d4}, {&(0x7f00000020c0)="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", 0x981}], 0x6}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb89080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd80003742f1a2222f19935e6996c7096fb7e40300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'gretap0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvfrom$inet6(r1, &(0x7f0000000100)=""/19, 0xff1, 0x40, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) 428.304759ms ago: executing program 2 (id=4338): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCNEWUNIT(r0, 0x4004743b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020400) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x1, 0x0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="ac0000001a000100000000000000000002000000000000000000000005001b0000000000850008"], 0xac}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000480)={0x0, 0x798}, &(0x7f0000000500)=0x8) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r5, &(0x7f00000000c0)="de", 0x1, 0x8000, &(0x7f0000000140)={0xa, 0xfffe, 0x0, @private1}, 0x1c) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xd, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}}, &(0x7f0000000380)=0xb0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000540)={r4, 0xa}, &(0x7f0000000580)=0x8) socketpair(0x21, 0x6, 0x9, &(0x7f0000000300)={0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), r6) r7 = socket(0x2a, 0x2, 0x0) r8 = socket(0x1d, 0x2, 0x6) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000240)) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, 0x0, 0x1, {0x0, 0xff, 0x1}, 0xfd}, 0x18) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffff}, @TCA_RATE={0x6, 0x5, {0x9, 0x4}}, @qdisc_kind_options=@q_hhf={{0x8}, {0x44, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x4}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x9}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x5}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x8}, @TCA_HHF_EVICT_TIMEOUT={0x8}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x4}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x8}]}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newtfilter={0x64, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x64}}, 0x20004084) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000380)=""/209, 0xd1}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000040)=""/52, 0x34}], 0x3) ioctl$SIOCAX25CTLCON(r7, 0x89e8, &(0x7f0000000180)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x2, 0x3, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 383.402319ms ago: executing program 1 (id=4339): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500001c0000000000019078ac1e00ef8eb13fff0800907800090009"], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000090000000000000000000083"], 0x0, 0x45, 0x0, 0x0, 0xa}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018009974c49900000c0000000c00000000000006040000000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000002c0), &(0x7f0000000340)=0x4) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r4, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x3c}}, 0xc0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000280)=0x60, 0x2) sendmsg$nl_route(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)=@setneightbl={0x1c, 0x43, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2}, [@NDTA_THRESH1={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20050}, 0x40080) 251.406874ms ago: executing program 4 (id=4340): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x9, 0x1, 0x80000001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x4}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x1, 0x70bd2d, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x14318}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x4000) 161.526367ms ago: executing program 1 (id=4341): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x14001}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x14001}, 0x94) (async) 123.350684ms ago: executing program 1 (id=4342): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x1a}, @void, @val={0xc, 0x99, {0x1, 0x5}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000800}, 0x8000811) (async) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000bc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000180)={0x9c8, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x158, 0x33, @mgmt_frame=@reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x1}, @device_a, @broadcast, @random="089ea9b212ac", {0xf, 0x1}, @value=@ver_80211n={0x0, 0x767, 0x2, 0x2, 0x0, 0x2}}, 0xd08, 0x0, @broadcast, {0x0, 0xc, @random="db0d198039bc3aeced315855"}, @val={0x1, 0x5, [{0x36}, {0x30, 0x1}, {0xcdd880d53f6275c1, 0x1}, {0x2}, {0x1}]}, @void, [{0xdd, 0xb4, "172e16ec00696f2b2ebb21f13796040ce72d8478405f03cf3c9f43f0a6ddb55daf4c7989d7fb1df0e385b02564848fdb309c55a86e71ded86f59b813fb483e3c7ac23b46bbafea3b3cd9546ce8be4873b73765eff9c1de7bedf237281908fcebcd01b27966e33385d11e9b0d59ddeecf808008a76fe43e9d24468089a33c194d9e9e173fa6d63b6bfac8c8e24c63c71693370ff22e270677f0accf680cb480d54386450cd3c8c55cd2d4674f56540c14ab4ca4d2"}, {0xdd, 0x61, "896852dee29ba731a5dc256b1afad31de52a3b939e28557bd2f3d148f6a88351ebe28e8ef064810c1dbcc696e49ed3acf252700a711d1ef7379df31f9081306de86e3567df342e93923b9798306b2d0e572c9231ec409824b8803f6d655f8e7b63"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x84f, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x2}, @broadcast, @device_b, @random="eff79062fef1", {0x8, 0x5}}, @random="029799dd5f4747c6c97b971683921cad94a37d246206ed0068c66d22beaa820fd1077db65227fae65c0990c3dba5d24b21f51749df5d227fc33f64864cc9f9d0490df2aff0e0fb32063504d88c53a386e7d9c6e392d40a88e6ecfd4cb1778dcb9784bbde212296689181efe2f65e6b6a62265430af9b233537c048301178a5650cfb03e9eb20e1c5cc0bf9bac4654096b17f30de9ed6ceaf66063b9336c93e184a48b98b4853d28a4779a4459ec7fa5ef331bdbc5c330cfa59195e74ba2b5a96b8e4b1c2cbefb316eb61b8993711bd23a226f342efba6b5917f2ff66cf614ce0a1ba7df3e58143c900ff3280809c9ac2d00a5b245ce7656c1b8f0726a74fff5b27b0ad32c67f852a36f771aa8c94d335d6d1d339214fee247c262ae3900c6918ca848602d4886b718f44f709786618f3eea976d66f65224325998453fe226081365c31f09e4b45e0c837f69cec3bc3baafc4fae4e719f9032ff202068a05ba86b96cabe57f9f2ee876b56c7d5459e6710935a8025fabc5d382df1f8df9350442a6ce211df892e887fc4d547f3f04a7cc6b83ecafb8532d9646a24e7fffd138085b0e520446ed2c23bc7bb1873808ee40cdd4b00b6a2bef7abcec55c9b0b8c1cd7cd85cf94ffa5c61752c0c2fbdb1d4dee7a4c64050bc543422081e7f301bb090d09479634d60d78a514f90f28560e37d4e8a28b35ac4b6715d923bca18b107c7d12736ed554828fe90d30f46930caf8ed68a7e182fa6359574607d0b262487a6639fd66dc076926eda43f90461741f4896e7632cf8294586133cbba301bbbff58f84667c0146afcf321d2ae652f0dae501ad02bf3e327e306a463e132ec20ec55149a25a2c2fdfc27ec6088698a7b24e2936910deb6da097afe4d82b27d768b87886ecfb29599222dc12a2fa32cc812537bd18007a1b11acc661d4a04939d5f1da5e33dc8fb48633cb4a7adbd3a2571fe122f2e5d95075130fb9c763ffc5d386c488b2d22e019381fbabce4b271c2223f4d1090c94732f9322bd5c1ea76216e0d9ea8db2613281203f1bc2e3e470b26210007217391c103e908de2c6bcc3782dc5071670062c4ffdeb01d8d9911210faf98ee4932162428117ee48ca71eea26772884d4a08e3bc21f72dfab51de34729cc56e2c6282bd0aa61d9a9c965ad55c00313da48ae3bf3468645bc3c3f9b7d8fffeaa8c36466b3ca5e3944d136514b0296aee0c83ec45cb427dcf1caa701f8e5972583c3a91b545ce9a8aa999302bf7dd2b039669657df2fdba6ee50923fca5662ef5d5c614c9cb8bc6065a11c934eb88268aeb64cc0fbdae3bdfdc1dc0cf385b6d4421af689b7b525ce5004e08d29108c8c0871850739ecc97c361cbce637ddbc6d8b127ef4d415601b38c8812c5ec8f216ee029e7cfa2ce0763c9b224f2e8263c69a46068ec8c7c38e9bc2b41c790e706205b805663fccb942151bcfaa0445017613819cf6a60be940cb889252e08dd35587338d7dc3b8ae231d057b45cd8a0b39c89d075c17df2915ac2ad0ce7417be46b92f27ffb621faf1cc2f29482ba34b2bc6350c64ad50d8c110d4ee47634eb736d8fe0b8c64439e6e80d8dde5df228d15c7106f745ad114a5e817ef2ea75b856e93433a3c892e9fe3ac0b0eb24a566436dd3190dbddf26b9649ef0b51345adbc86c5ea2101bcfd5e647b791f7794f658427ede8caf0662021d02b84ead245ce582f6f4ad64c357c2e55e8ac93db53471d9af4de259ee8d0a1a75ef3259eb064a868b46b1016b02803166b94035295860a16691db028c08db51786d4f84008e096a229fa8cc193113d696e650b3c5a316248de097a794e8681a614e0a331c8ceb44941822f77a2b6b88cf3a5b576d45edd611ca6bd10e5750a42c5679225a77599eb29cf887d56fbecf8909b82308418305df34c373e47aedcb888f3a175f1aa619ccd625c619952b19ba1e7fe415cdd9bc9f9604e0e7c31e639f1c67f4c52aada60d0f32c9551fe0f5a05fa365874b26734bb6f0ae6ea0849ad12b963734d693f7e8b6d8321633828d3898b89e03445848cd1c555da7a0919b77d09ddf90ffd454d66b1457e174311ec772d7cd0696b521cd98a9e3235de26c8e8ea6c10ae038184304bbd547a8ebef2399dbe7b00a0c104c90008c8d2118ea432fee2bbd4fe34c06229198a0b7e8a76f392c87df6dd23b199b3b242e76262424afc8e1cc9e739d4cde6436642cabd9e62fa1881ed3659c6c7355645d8bdef800e1f037d68eb4ddf0099a1e9f15cb2a664159614896d0fdff1b7985041e596aeadad1490a0e71de963598b04f889c4f78833f7e77767bee338c309674bda1e392df3c78b15b265cf56772406bca04febb437940a588b7277672d0a0bbf66ab392ad46e4e16bb6b975bbb252ce0dcd478d65ae406bf7930758bf01bd4fa2548fdc1d0efd8976a1d82975d2a9979e889f19462e9ff8625c556bcdb0c1693bd2b28dba6d5d855d7fe95561514cdd1198b32d69a35c275e4e1b2140c28b0c011d8aefe8ad21957c90d20a7d91cd79eb85846362a773121582621a92d197faa2d4eb5fade640e4c4f0c93fb6fffe7be15b74aeeddd7e164e6822db2f2852b37e4711b928798c9e5969f0e32d84c076ddcd35a14127299047201b6fcb0c26277a773387b5d569ef5201039da7e792c627e4e0514b9ea6fc2032ffcf3ddd3d98b792fd8d82b65c0b62cb1ff65683bab1e036711dee26a9ceaf21382761488097cc7e21553475d3b7ff1769c47f0aa6106ab5f3cd4ad04f36647185ee393f96cdbbd955d6b78d0d5b12015fdd7e752b427abc1e9e4bf124bb6333417e3e66ba6cb5f217ab814af3ba961859549e9705e15a217312312ff498abd0cb90461fbfed51ac69deb390e832bb5626d20982e8ce8e9e4613a876b075edb55dee6fdb496e0b870d64f1424872f67a68dd3efac31c2bb1ac6e377aece799e6ce6"}}]}, 0x9c8}, 0x1, 0x0, 0x0, 0x1}, 0x8080) (async) r2 = socket$nl_crypto(0x10, 0x3, 0x15) (async) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000d00)={&(0x7f0000000c00), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x4c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xa698}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000802}, 0x830) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x20, r1, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000080) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f00000012c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001280)={&(0x7f0000000fc0)={0x2b4, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0xc4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x6}, {0x0, 0x7}, {0x2, 0x3}, {0x3, 0x8}, {0x6, 0x6}, {0x7, 0x3}, {0x3, 0x2}, {0x1, 0x2}, {0x4, 0x9}, {0x1}, {0x5, 0xa}, {0x7, 0x6}, {0x5, 0x4}, {0x4, 0x9}, {0x7, 0x8}, {0x0, 0x2}, {0x1, 0x4}, {0x6, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x6, 0x3}, {0x0, 0x8}, {0x7, 0x3}, {0x6, 0x5}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x3, 0x3}, {0x1, 0x4}, {0x3, 0xa}, {0x5, 0xa}, {0x6, 0x4}, {0x0, 0x3}, {0x2, 0x5}, {0x5, 0x8}, {0x0, 0xa}, {0x4, 0x7}, {0x7}, {0x2, 0x2}, {0x1, 0x4}]}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{}, {0x7}, {0x7, 0x7}, {0x3, 0x9}, {0x1, 0x8}, {0x2, 0x6}, {0x3, 0x2}, {0x6, 0x9}, {0x6, 0x6}, {0x5, 0x3}, {0x5, 0x5}, {0x5, 0xa}, {0x6, 0x6}, {0x2, 0x8}, {0x2, 0xa}, {0x3, 0x8}, {0x5, 0x8}, {0x6, 0x5}, {0x4, 0x8}, {0x0, 0x6}, {0x3, 0x9}, {0x2}, {0x6, 0x6}, {0x3, 0x8}, {0x6, 0x5}, {0x5, 0x2}, {0x3, 0x7}, {0x0, 0x5}, {0x2, 0x2}, {0x6, 0x3}, {0x5, 0x1}, {0x0, 0x7}, {0x6, 0x5}, {0x6, 0x6}, {0x4, 0x7}, {0x6, 0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x6}, {0x2, 0xa}, {0x0, 0x6}, {0x5, 0x8}, {0x4, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4873, 0x200, 0x18, 0x1, 0x7, 0x7, 0xcb3a, 0x3]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x18, 0x6, 0x36, 0x16, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x30, 0x2, 0x12, 0xa9838e5335540d6d, 0x1, 0x6, 0xc, 0x2, 0x16, 0x16, 0x48, 0x9, 0x1b, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x4, 0xfffa, 0x7, 0x9, 0x7fff, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0x1dc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x28, 0x60, 0x1, 0xc, 0x30, 0x24, 0x18, 0xc, 0x60, 0x24, 0x50]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x6, 0x27, 0x6, 0x115, 0x4, 0x9, 0x800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x6, 0xfff7, 0x5, 0x1, 0xffff, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x40, 0x100, 0x15, 0x8, 0x7, 0x8, 0x9]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x0, 0x3}, {0x5, 0x3}, {0x7, 0x6}, {0x6, 0x6}, {0x2, 0x3}, {0x1, 0x2}, {0x7, 0x2}, {0x1}, {0x0, 0xa}, {0x1, 0x2}, {0x3}, {0x5, 0x7}, {0x2, 0x4}, {0x6, 0x6}, {0x5, 0x1}, {0x1, 0x7}, {0x4, 0x1}, {0x7, 0x2}, {0x1}, {0x4, 0x4}, {0x3, 0x9}, {0x6, 0x7}, {0x1, 0x7}, {0x7, 0xa}, {0x6, 0x1}, {0x5, 0xa}, {0x5, 0x9}, {0x1, 0x7}, {0x2, 0x8}, {0x3, 0x8}, {0x2, 0x2}, {0x7}, {0x7, 0x9}, {0x5, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x2, 0x5}, {0x3, 0x8}, {0x3}, {0x5, 0x5}, {0x3, 0x4}, {0x7, 0x9}, {0x3, 0x1}, {0x7, 0x6}, {0x6, 0x6}, {0x5, 0x5}, {0x3, 0x7}, {0x0, 0x7}, {0x7, 0xa}, {0x7, 0x4}, {0x2, 0x9}, {0x6, 0x2}, {0x1, 0x3}, {0x4, 0x2}, {0x5, 0x2}, {0x6, 0x2}, {0x0, 0x5}, {0x7, 0x6}, {0x6, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x5, 0x6, 0x9, 0x8, 0xfff9, 0x7, 0x438]}}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x2, 0x1000, 0x4, 0x7, 0x80, 0xb2, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3a1, 0x0, 0x2, 0x7ff, 0x5, 0x3, 0x6]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1b, 0x1b, 0x6c, 0x48, 0x0, 0x3, 0x60, 0xb, 0x6c, 0x6, 0x2, 0x2, 0x36, 0x1b, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x24, 0x28, 0x16, 0x5, 0x24, 0x12, 0x6, 0xb, 0x23]}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x3, 0x48, 0x12, 0x1, 0x2, 0x18, 0x6, 0xb, 0x1b, 0x1b, 0x16, 0x2, 0x12, 0x24, 0x24, 0x2, 0x30, 0x24, 0x0, 0x1, 0x36, 0x4, 0x48, 0x24, 0x24, 0x60, 0x16, 0x6c, 0x1b, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x1, 0x2}, {0x3, 0x2}, {0x5, 0x2}, {0x4, 0x1}, {0x0, 0xa}, {0x4}, {0x3, 0x4}, {0x6}, {0x0, 0x4}, {0x1, 0x2}, {0x2, 0xa}, {0x1, 0x4}, {0x5, 0x3}, {0x2, 0x4}, {0x7, 0x1}, {0x2, 0x2}, {0x1}, {0x6, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x6}, {0x4, 0x9}, {0x2, 0x6}, {0x1, 0x2}, {0x7, 0xa}, {0x7, 0x9}, {0x0, 0x4}, {0x0, 0x8}, {0x4, 0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x2}, {0x3, 0x1}, {0x3, 0x6}, {0x3, 0x6}, {0x0, 0x3}, {0x4, 0x1}, {0x4, 0x7}, {0x7}, {0x2, 0x1}, {0x3, 0x9}, {0x1, 0x3}, {0x6, 0x8}, {0x2, 0x7}, {0x6, 0x7}, {0x6, 0x7}, {0x0, 0x3}, {0x4, 0xa}, {0x4, 0x7}, {0x7, 0x3}, {0x1, 0x2}, {0x6, 0x3}, {0x0, 0x7}, {0x6, 0x7}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x6, 0x1}, {0x6, 0x3}, {0x7}, {0x2, 0x6}, {0x3, 0xa}, {0x5, 0x4}, {0x4, 0x2}, {0x1, 0x4}, {0x2, 0x7}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x1, 0x9}, {0x1, 0x4}, {0x2, 0x5}, {0x3, 0xa}, {0x2}, {0x1, 0x8}, {0x4, 0x8}, {0x2, 0x1}, {0x5, 0x9}, {0x3, 0x7}, {0x5, 0x2}, {0x1, 0x6}, {0x5, 0xa}, {0x0, 0x9}, {0x7, 0x7}, {0x5, 0x2}, {0x5, 0x8}, {0x5, 0x3}, {0x0, 0x8}, {0x6}, {0x0, 0x2}, {0x4, 0x6}, {0x7, 0x1}, {0x2}, {0x0, 0x3}, {0x5, 0x2}, {0x7, 0x8}, {0x5, 0x9}, {0x4}, {0x4, 0x7}, {0x0, 0xa}, {0x6, 0x1}, {0x6, 0x8}, {0x0, 0x9}, {0x3, 0x6}, {0x3}, {0x6, 0x1}]}]}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x94}, 0x10000080) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001340)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @loopback}}, 0x0, @in=@local}}, &(0x7f0000001440)=0xe8) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000001580)={0x0, 0x0}, &(0x7f00000015c0)=0xc) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001a40)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000001b40)=0xe8) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001b80)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f0000001c80)=0xe8) (async) r10 = getpid() r11 = getgid() r12 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002e80)={0xffffffffffffffff, 0xffffffffffffffff, 0x2f, 0x0, @void}, 0x10) sendmsg$netlink(r5, &(0x7f0000002f80)={&(0x7f0000001300)=@proc={0x10, 0x0, 0x25dfdbfb, 0x80000}, 0xc, &(0x7f0000002e00)=[{&(0x7f0000001480)={0xcc, 0x2f, 0xfb89fbdeb59966a8, 0x70bd25, 0x25dfdbfd, "", [@nested={0xb8, 0x44, 0x0, 0x1, [@typed={0x8, 0x1b, 0x0, 0x0, @uid=r6}, @generic="23b6a74b38a2d0142445893a051cc804ec80d6c57a20f90abb77a862ba0edddb0dba58f3c447872db9d132a718320626047c70eb616abb5aaaf49e81b8338751dedc2381f25e6bb9680f0f793399c6b27820326dd0ece8877317a95c3245694244bf9bcf8a63aa1884e283325d03a47949d6b159", @generic="b929e29aa935fbfe5c19ce95b5babdaad30c2e6c6dde685a8445660c", @nested={0x4, 0x3c}, @typed={0x14, 0x12f, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @nested={0x4, 0x50}]}, @typed={0x4, 0x48}]}, 0xcc}, {&(0x7f0000001600)={0xd4, 0x1c, 0x4, 0x70bd2a, 0x25dfdbff, "", [@nested={0xc2, 0x4a, 0x0, 0x1, [@typed={0x8, 0x7, 0x0, 0x0, @u32=0x10}, @typed={0x8, 0x127, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x38}}, @typed={0xc, 0x13e, 0x0, 0x0, @u64=0x5}, @typed={0x8, 0x1c, 0x0, 0x0, @uid=r7}, @generic="cdc7ddbd70ac2ab6e01a6abb6f96305aac9306c66c49541308319cd3e05e4db328869d9333879f053338f00599d1870c3a667298fcaa8f2119e73e726947d5b660598e1cc65c7a3c38475f81b45a2c7ca06c066cff4503915a8f7b4a4322f1f2310ffa4af82b11454eed9ad5c3e6af02446831515f48bf20ff32af6036bf2206bd8709d2c881ea19e2fea4bfe8b72b74f4f9", @typed={0x8, 0xb6, 0x0, 0x0, @binary="1ff5cb11"}]}]}, 0xd4}, {&(0x7f0000001700)={0x17c, 0x2b, 0x8, 0x70bd25, 0x25dfdbfd, "", [@typed={0x8, 0x64, 0x0, 0x0, @u32=0x6}, @generic="a45dc9a26b8a4dabe20976ffb29d363c953dfd9cf130444b423e34ca3b49f25eb42359deafadc1a5f3bad23ad6daffe3fab6d12249adec7c90632b04d11107a738016fd1d98f0071651d17f5b273985b7f46bde4fd45f6ee967ce140f348f85e180f39f338a53f15dc96481d63af5dcbb190110a4e2d9e7e8f028d16238203a7b89835097c16e533deca43d2b0aeb8130ed979a426a3a62b707b8792ac36a44d4a5a1bc94b", @generic="4b649a490960b9b1073fc0e669a37bfd7ce975fccc3a74a275d6470128de28c84d75108aaf1ef9d16aaa7a3015b40ba6a56fcec67d3f66cc1665cd0036dccd18c5f3337cddbe76710e570071f94f43b092f20c367e35a4e84c6aaaea1a03120de671994ff8c0a0b6bf30a6ceaaa136064807d4ef59682ad2136361c31bc9a864ebd2aea34e48c06c80915a53840e2d4981707d158b51c4305bf359b43ac0970dfc52dcd8d5551ad2803ad9bea91a6f96b719b6415a5ae964a2fd48a9"]}, 0x17c}, {&(0x7f0000001880)={0x1bc, 0x2c, 0x800, 0x70bd25, 0x25dfdbff, "", [@generic="d9c935701cf8d293183302652b3bcfe85f3a46e7fbe0a6900d05c7375f1738592b4530a3b4779846072b5a84c18d61485f13de654bd9bb73a88e6867994f032ffff53ab530d57e8194a11e16434e6d27232c59a7058cd4f340ebc49cb9747a0de01decf35c699b402616cf5bceff5196248d39c526e2dc147d9978ccde0a43c1d02ec974f1b1f566edd05d41631ca604e82d992bbaab5318b56bc85076b8b828eee26947c74a3522101189954508f0d7df0ac8661b9c1d38e0862d766191f2", @generic="8eff70a3d32a1a227ca4b778753f9aae293e80d005d4fabf304add45", @generic="52a02e1968df90977fa2a0993ada779fa234ed34e8fd0af2f0eeb942504e3a5a41f1e34673ab48fc99d830a1a19bb53b6a2d6075ed09da3b5134713604cbcf5ac5575edcad533fec8c4c851b5d5c2f48c1c212e4a7c090a5203b9378fa32a15d3ca92782ae88193e5a1f7972e77ca2ad8ff7c7cb545881284c3a541fc065535a02f79d7ab53a8c074fc53d41e01821385198738609a03f8e7071ea2519b4d55270f1d40e304396c685d838b248adbfbf4c173f71beeb6a0862a6a5438cfacfcc35a3a9b66a", @typed={0xc, 0x135, 0x0, 0x0, @u64=0x6}]}, 0x1bc}, {&(0x7f0000001cc0)={0x1138, 0x24, 0x300, 0x70bd26, 0x25dfdbff, "", [@nested={0x10b0, 0xd4, 0x0, 0x1, [@generic="811fc28e7890a58bbaefd61888e780fc0e5a751d72d10963abe30363b40382dc8b75e2908231be777282480cc75e7b84dbb16ef8d1c57078588d31e4dc6132c238bc09394a4323acbc8c0e30", @nested={0x4, 0xcb}, @nested={0x4, 0x13a}, @nested={0x4, 0x106}, @typed={0x3f, 0x128, 0x0, 0x0, @binary="9dd877673aa7566be30014c09ee871b42ab2658feea8c58da1e9f27d20464792ce8625547a39436769f54deb1e50a86be8f53277876114e931d53c"}, @typed={0x8, 0xe2, 0x0, 0x0, @uid=r8}, @typed={0x8, 0x103, 0x0, 0x0, @ipv4=@multicast1}, @generic="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", @nested={0x4, 0xa5}]}, @typed={0x8, 0xa5, 0x0, 0x0, @uid=r9}, @generic="f735bc2d6a16fe2cdaaced32988da988fb37a415291f8e5ed0607893b084d336c6f3d37233d69f3e9ec040cebc5dc5ea48703fa8ff4544e5507f92f812a3ea3b2158be80cad6792d11672e18d69b26cea0b185f79388c5839fde3e3d549ba149dc185376", @typed={0x4, 0xf}, @typed={0x8, 0xeb, 0x0, 0x0, @uid=0xee01}]}, 0x1138}], 0x5, &(0x7f0000002ec0)=[@cred={{0x1c, 0x1, 0x2, {r10, 0xee00, r11}}}, @rights={{0x28, 0x1, 0x1, [r0, r3, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x30, 0x1, 0x1, [r2, r5, r0, r3, r2, r12, r5, r3]}}], 0x90, 0x2004022}, 0x4048000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r12, 0xc020f509, &(0x7f0000002fc0)={r0, 0x0, 0x2feb, 0x8}) sendmsg$NL80211_CMD_JOIN_IBSS(r13, &(0x7f00000030c0)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003080)={&(0x7f0000003040)={0x24, r1, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x6, 0x24, [{0x5, 0x1}, {0x60, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004940}, 0x400c004) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000031c0)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003180)={&(0x7f0000003140)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4890}, 0x40108c0) (async) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000003240)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r14, &(0x7f0000003300)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003280)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x4002880) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x30, r3, 0x9a8e3000) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000003380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r13, &(0x7f0000003440)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003400)={&(0x7f00000033c0)={0x28, r1, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r16}, @val={0xc, 0x99, {0x7, 0x12}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 51.250152ms ago: executing program 4 (id=4343): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x54d003, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000000680)="2a637c1b8b3894ec89aaef510a473f", 0xf}], 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r6 = socket$inet(0x2, 0x80001, 0x84) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r7, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r8, 0x9}, 0x8) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {0xe, 0x0, 0x4}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4001) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {0xfff1}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) 50.915831ms ago: executing program 3 (id=4344): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000100001000100"/20, @ANYRES32=0x0, @ANYBLOB="04e9ff0d0000000008001b"], 0x28}}, 0x0) 43.323017ms ago: executing program 1 (id=4345): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r0, @ANYBLOB="8000b2000a000200"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40800) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x10, 0x0, &(0x7f0000000080)) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0xfffc}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xe}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) 0s ago: executing program 1 (id=4346): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x1, 0x60, 0x0) r4 = socket(0x1e, 0x5, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100013070000040000000000ac1414bb000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0100000000000000000000000000010000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffff12ff000100e2ffffffffffffff0000000000000000000a00020b0000000000000000480002006563622d73657270656e742d61767800"/240], 0x138}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000050000000400000000000001000000004e006f01005f013000"], 0x0, 0x2d, 0x0, 0x3}, 0x28) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000600), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000004c0)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000340)='wg2\x00', 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r6, 0x5421, &(0x7f0000000740)=0x1) setsockopt$inet6_tcp_int(r6, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd9", 0xbb}, {&(0x7f0000000300)="5a7a0b0d7e133f617ce8b2ed", 0xc}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000e80)="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"/328, 0x148}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000200)="e4f0", 0x2}, {&(0x7f0000000380)="819a8730055c284f965783c5e3a0e8e1b5c808e29514eb082e4ebea4fcc47959d7185f62525652d2709dd4c8bbe0460f69a83f8fec2a5a44af262fcbfb39ffc4cc00fbf523e7c6604f96adf48d7fe4c272dee27bf665d0277eeebb56bbedd340d74e8f453379a43e9697acabc90075a4bfed1969d67703db65b98535e4428e6c04365f159597a3a103739b50a175e40d0305a4dcd1d4ab00c9a12ed3fad705092207e7354b61fb6347", 0xa9}, {&(0x7f0000000940)="e026d14c94c93c25594ba5f6075fbd", 0xf}, {0x0}, {0x0}], 0x5, &(0x7f0000001240)=[@ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xe}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x731}}], 0x60}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000980)="17acc4b8ac7f70411129245e46e7675625e04a25a6c223b958ca3a43ff6056309882e1aef55397c51be2ef92a7488aa2f3a5e9f3cea55bba6cd091b935c72533fa1a52a9ddd29aa20d7481998cc7a8faf7dc955425edf61079ad19db77a104304ec60552717879196551ed0bde8f8c89caaf09ea2a93cf66d82ffa09c06ef4f1817a4cc2e14919141c81fa", 0x8b}, {&(0x7f0000000a40)="a32a5f80e614cbf698669e72e702b562653f82f92125d518a342f689292ca593e1c1f38cab2932a084adc56166767e12fac113c72200362b3009dc4b13ef2f3a1f770b51c97b27ce0a9bd6c7797a67ed51689092ae76c8ccfcae9e1b5f9cc0ff188c909e9c42eb1364454748d11fb5ea512646680252f491b4fe7777cef2abd70c1207ccc8ee448cfdf43bf883598baabd8f8d60db01955fb9e3942839741ee4b9c4eea9c8ce41beba800be171644caaccd5daabfdc416d261d5674137791015975cbdea9a0dc3eb9dc5", 0xca}, {&(0x7f0000000440)="61dcc422b0d69d4121d699a0da61617ed674c57622a6efb3ab916d5983b2121e5bfc75f5c1de0bc1830198d805d48eb18f2092a80fff197dcdd09b0a12ce02401ec4a4852e2cb118a140fe8075a3ef", 0x4f}], 0x3}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000b80)="73ca13264b9e3ec494d58becc50ff081f88b3bae90f0141d814efbbe763819538df3a017a352c78f4949a4d520cc8eb8a6327766143935d7537d6a398936950035c4402a4d3809c9ffadf80809b068c5060fe888d06302a8917153759c1d9a598a1fee2483035e018250f0a61ce9496437189d7b97891dfced7128c3d3214614fc0895ff43a3b172f7baebb804ad78d7acd38795e9dd3c63355aab022d9d003053e71791f66454", 0xa7}, {&(0x7f0000000780)="57a1af0981a2478d332dafef0c819549441b489021c3e8e3f952f8a49ba47e37cbf60ea5879d", 0x26}, {&(0x7f0000000c40)="e65746c6a32951c35ba06a3e17864f9ccde56c9f7d0ac2053d8f370ff922bcca7ea244201bc7ae", 0x27}], 0x3}}], 0x5, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): 61] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.641955][T15961] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.673912][T15961] bridge_slave_0: entered allmulticast mode [ 221.697904][T15961] bridge_slave_0: entered promiscuous mode [ 221.758735][T15961] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.765870][T15961] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.781204][T15961] bridge_slave_1: entered allmulticast mode [ 221.800573][T15961] bridge_slave_1: entered promiscuous mode [ 221.822601][T16095] sit0: mtu less than device minimum [ 221.982283][T15961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.016098][T15961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.035451][T16112] tipc: Enabled bearer , priority 0 [ 222.042966][T16112] syzkaller0: entered promiscuous mode [ 222.053945][T16112] syzkaller0: entered allmulticast mode [ 222.081850][T16112] tipc: Resetting bearer [ 222.110916][T15961] team0: Port device team_slave_0 added [ 222.119973][T16111] tipc: Resetting bearer [ 222.129915][T16111] tipc: Disabling bearer [ 222.148870][T16121] syzkaller1: entered promiscuous mode [ 222.154723][T16121] syzkaller1: entered allmulticast mode [ 222.164559][T15961] team0: Port device team_slave_1 added [ 222.242721][T15961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.254028][T15961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.281124][T15961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.334365][T15961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.349744][T15961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.377145][T15961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.464075][ T6468] batadv_slave_1: left promiscuous mode [ 222.474058][ T6468] batadv_slave_0: left promiscuous mode [ 222.482919][ T6468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.490739][ T6468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.499201][ T6468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.506790][ T6468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.514508][ T6468] batman_adv: batadv0: Removing interface: team0 [ 222.523653][ T6468] veth0_macvtap: left promiscuous mode [ 222.612105][ T6468] team0 (unregistering): Port device team_slave_1 removed [ 222.632421][ T6468] team0 (unregistering): Port device team_slave_0 removed [ 222.672678][T16139] tipc: Enabling of bearer rejected, media not registered [ 222.709354][T16145] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 222.740011][ T5925] lo speed is unknown, defaulting to 1000 [ 222.759925][ T5925] infiniband syz2: ib_query_port failed (-19) [ 222.762228][T15961] hsr_slave_0: entered promiscuous mode [ 222.774263][T15961] hsr_slave_1: entered promiscuous mode [ 222.782154][T15961] debugfs: 'hsr0' already exists in 'hsr' [ 222.800945][T15961] Cannot create hsr debugfs directory [ 222.877374][T16158] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2890'. [ 222.892313][T16162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2891'. [ 222.901238][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 222.901266][ C1] lec:lec_tx_timeout: lec0 [ 222.910145][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 223.135451][ T6470] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 223.135538][T16188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2894'. [ 223.304844][T16202] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2899'. [ 223.636217][ T5885] Bluetooth: hci3: command tx timeout [ 223.866619][T15961] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 223.928570][T15961] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 223.995774][T15961] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 224.054718][T15961] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 224.106840][T16263] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2905'. [ 224.138658][T16263] 8021q: VLANs not supported on dvmrp1 [ 224.173716][T16269] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2907'. [ 224.187687][T16269] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2907'. [ 224.197289][T16269] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2907'. [ 224.379730][T15961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.430067][T16298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.441737][T15961] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.465168][ T6464] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.472374][ T6464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.528434][ T3487] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.535564][ T3487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.583540][T15961] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 224.608442][T15961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.638806][T16316] vlan0: entered promiscuous mode [ 224.648447][T16316] erspan0: entered promiscuous mode [ 224.704372][T16310] netlink: 'syz.0.2916': attribute type 1 has an invalid length. [ 224.753570][T16310] bond0: entered promiscuous mode [ 224.759042][T16310] bond_slave_0: entered promiscuous mode [ 224.764890][T16310] bond_slave_1: entered promiscuous mode [ 224.771362][T16310] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 224.779400][T16310] bond0: left promiscuous mode [ 224.784188][T16310] bond_slave_0: left promiscuous mode [ 224.791331][T16310] bond_slave_1: left promiscuous mode [ 224.797659][T16310] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 224.908722][T15961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.968934][T15961] veth0_vlan: entered promiscuous mode [ 224.980091][T15961] veth1_vlan: entered promiscuous mode [ 225.007050][T16345] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 225.016272][T16345] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 225.040452][T15961] veth0_macvtap: entered promiscuous mode [ 225.050180][T15961] veth1_macvtap: entered promiscuous mode [ 225.069063][T15961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.089544][T15961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.102432][ T3175] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.113433][ T3175] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.123360][T16347] netlink: 'syz.3.2925': attribute type 1 has an invalid length. [ 225.132995][ T3175] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.142191][ T3175] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.292449][ T6464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.320501][ T6464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.424968][ T6466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.449839][ T6466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.503852][T16377] netlink: 'syz.4.2933': attribute type 8 has an invalid length. [ 225.641885][T16389] netlink: 'syz.3.2935': attribute type 2 has an invalid length. [ 225.667002][T16384] veth1_to_bond: entered allmulticast mode [ 225.689846][T16393] bond0: (slave bond_slave_1): Releasing backup interface [ 225.707233][ T5885] Bluetooth: hci3: command tx timeout [ 225.729385][T16398] netlink: 'syz.3.2936': attribute type 10 has an invalid length. [ 225.741764][T16393] veth1_to_bond (unregistering): left allmulticast mode [ 225.793422][T16401] 8021q: adding VLAN 0 to HW filter on device ipvlan5 [ 225.819198][T16398] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 225.886766][T16398] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 225.903351][T16401] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 226.254087][ T6470] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.305771][ T5188] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 226.328279][ T5188] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 226.341288][ T5188] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 226.354380][ T5188] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 226.375165][ T5188] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 226.398799][ T6470] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.430626][T16432] hsr0 speed is unknown, defaulting to 1000 [ 226.473684][ T6470] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.557619][ T6470] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.685701][T16432] chnl_net:caif_netlink_parms(): no params data found [ 226.795582][ T6470] geneve2: left allmulticast mode [ 226.804481][ T6470] geneve2: left promiscuous mode [ 226.811352][ T6470] bridge1: port 1(geneve2) entered disabled state [ 226.852107][ T6470] bond2 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 226.865325][ T6470] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 226.875763][ T6470] bond2 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 66:bb:a6:c0:8d:d0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 226.976840][ T6470] dvmrp1 (unregistering): left allmulticast mode [ 227.215473][ T6470] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 227.224967][ T6470] bond1 (unregistering): Released all slaves [ 227.248798][ T6470] bond2 (unregistering): (slave veth5): Releasing backup interface [ 227.264532][ T6470] bond2 (unregistering): Released all slaves [ 227.321859][ T6470] bond3 (unregistering): (slave veth7): Releasing active interface [ 227.365865][ T6470] bond3 (unregistering): Released all slaves [ 227.383288][ T6470] bond4 (unregistering): Released all slaves [ 227.394402][ T6470] bond5 (unregistering): Released all slaves [ 227.404772][T16515] __nla_validate_parse: 13 callbacks suppressed [ 227.404787][T16515] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2957'. [ 227.425247][ T6470] bond6 (unregistering): Released all slaves [ 227.452684][ T6470] bond7 (unregistering): Released all slaves [ 227.501166][ T6470] bond8 (unregistering): (slave veth9): Releasing active interface [ 227.522101][ T6470] bond8 (unregistering): Released all slaves [ 227.547734][ T6470] bond9 (unregistering): Released all slaves [ 227.570192][ T6470] smc: removing net device bond0 with user defined pnetid SYZ2 [ 227.578226][ T6470] bond0 (unregistering): Released all slaves [ 227.613466][T16486] ipvlan6: entered promiscuous mode [ 227.627391][T16527] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2959'. [ 227.786304][ T5885] Bluetooth: hci3: command tx timeout [ 227.874521][ T6470] tipc: Disabling bearer [ 227.900046][ T6470] tipc: Disabling bearer [ 227.905524][ T6470] tipc: Left network mode [ 227.916855][T16432] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.926082][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 227.934117][ C1] lec:lec_tx_timeout: lec0 [ 227.936059][T16432] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.939221][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 227.954793][T16432] bridge_slave_0: entered allmulticast mode [ 227.974841][T16432] bridge_slave_0: entered promiscuous mode [ 228.025115][T16554] team0 (unregistering): Port device team_slave_0 removed [ 228.058135][T16554] team0 (unregistering): Port device team_slave_1 removed [ 228.069579][T16567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2965'. [ 228.106803][T16432] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.121411][T16432] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.136337][T16432] bridge_slave_1: entered allmulticast mode [ 228.149102][T16432] bridge_slave_1: entered promiscuous mode [ 228.192109][T16570] tipc: Cannot configure node identity twice [ 228.199201][T16570] tipc: Cannot configure node identity twice [ 228.224220][T16432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.243785][ T6470] batadv_slave_0: left promiscuous mode [ 228.255015][ T6470] hsr_slave_0: left promiscuous mode [ 228.274815][ T6470] hsr_slave_1: left promiscuous mode [ 228.355466][ T6470] pimreg (unregistering): left allmulticast mode [ 228.426214][ T5885] Bluetooth: hci2: command tx timeout [ 228.454679][ T6470] team0 (unregistering): Port device team_slave_1 removed [ 228.465366][ T6470] team0 (unregistering): Port device team_slave_0 removed [ 228.501764][T16591] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2972'. [ 228.524424][T16432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.551321][T16583] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2972'. [ 228.566992][T16591] gretap0: entered promiscuous mode [ 228.577378][T16583] 0ªî{X¹¦: renamed from gretap0 [ 228.603454][T16583] 0ªî{X¹¦: left promiscuous mode [ 228.612215][T16583] 0ªî{X¹¦: entered allmulticast mode [ 228.624223][T16583] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 228.669630][T16432] team0: Port device team_slave_0 added [ 228.691980][T16432] team0: Port device team_slave_1 added [ 228.751288][T16601] netlink: 'syz.1.2975': attribute type 1 has an invalid length. [ 228.759662][T16601] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2975'. [ 228.764733][T16608] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2979'. [ 228.786622][T16607] delete_channel: no stack [ 228.892102][T16432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.905730][T16432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.943548][T16622] IPVS: ip_vs_edit_dest(): server weight less than zero [ 228.977558][T16432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.989951][T16618] netlink: 'syz.3.2982': attribute type 13 has an invalid length. [ 229.009453][T16432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.018629][T16432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.045730][T16432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.060823][T16618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.070707][T16618] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.150984][T16432] hsr_slave_0: entered promiscuous mode [ 229.169986][T16432] hsr_slave_1: entered promiscuous mode [ 229.176834][T16432] debugfs: 'hsr0' already exists in 'hsr' [ 229.189152][T16432] Cannot create hsr debugfs directory [ 229.224623][ T6470] IPVS: stop unused estimator thread 0... [ 229.504188][T16667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2992'. [ 229.547770][T16667] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2992'. [ 229.570347][T16667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2992'. [ 229.778234][T16692] netlink: 'syz.1.3000': attribute type 15 has an invalid length. [ 229.939459][T16432] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 229.958128][T16432] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 230.002527][T16716] netlink: 'syz.1.3006': attribute type 1 has an invalid length. [ 230.018233][T16432] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 230.037881][T16717] netlink: 'syz.1.3006': attribute type 1 has an invalid length. [ 230.048603][T16432] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 230.261041][T16432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.279063][T16432] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.344940][ T3175] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.352101][ T3175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.453671][ T3175] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.460850][ T3175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.506658][ T5885] Bluetooth: hci2: command tx timeout [ 230.601082][T16778] tipc: Resetting bearer [ 230.822163][T16432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.886517][T16809] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.905281][T16432] veth0_vlan: entered promiscuous mode [ 230.919979][T16432] veth1_vlan: entered promiscuous mode [ 230.942992][T16432] veth0_macvtap: entered promiscuous mode [ 230.957256][T16432] veth1_macvtap: entered promiscuous mode [ 230.994385][T16432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.006825][T16432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.020679][ T6470] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.031546][ T6470] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.048006][ T3175] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.061104][ T3175] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.129425][ T3175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.145164][ T3175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.189603][ T6464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.200970][ T6464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.288734][T16843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.299892][T16843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.318750][T16843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.344891][T16843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.507686][T16850] netlink: 'syz.3.3038': attribute type 1 has an invalid length. [ 231.561490][T16850] bond11: (slave ipvlan7): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 231.578027][T16850] bond11: (slave ipvlan7): The slave device specified does not support setting the MAC address [ 231.589043][T16850] bond11: (slave ipvlan7): Setting fail_over_mac to active for active-backup mode [ 231.689654][ T5188] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 231.699901][ T5188] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 231.708848][ T6470] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.719792][ T5188] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 231.719828][ T6470] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.740469][ T5188] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 231.748279][ T5188] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 231.783615][T16859] hsr0 speed is unknown, defaulting to 1000 [ 231.800283][T16865] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 231.809846][ T6470] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.820154][ T6470] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.873216][ T6470] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.883522][ T6470] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.894417][T16868] IPv4: Oversized IP packet from 172.20.20.24 [ 231.901085][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 231.907424][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 231.959427][ T6470] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.970641][ T6470] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.988744][T16859] chnl_net:caif_netlink_parms(): no params data found [ 232.032107][T16859] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.039931][T16859] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.047254][T16859] bridge_slave_0: entered allmulticast mode [ 232.054160][T16859] bridge_slave_0: entered promiscuous mode [ 232.061723][T16859] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.070241][T16859] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.077888][T16859] bridge_slave_1: entered allmulticast mode [ 232.084625][T16859] bridge_slave_1: entered promiscuous mode [ 232.107739][T16859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.119194][T16859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.151399][T16859] team0: Port device team_slave_0 added [ 232.159328][T16859] team0: Port device team_slave_1 added [ 232.194541][T16859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.201935][T16859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.229323][T16859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.242194][T16859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.249278][T16859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.275687][T16859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.302600][ T6470] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.358993][ T6470] bond6 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 232.368332][ T6470] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface [ 232.376933][ T6470] bond6 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 4a:1e:2e:7d:37:10 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 232.436260][ T6470] bond4 (unregistering): (slave geneve3): Releasing active interface [ 232.586300][ T5188] Bluetooth: hci2: command tx timeout [ 232.768662][ T6470] bond5 (unregistering): (slave bridge6): Releasing active interface [ 232.813241][ T6470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.823113][ T6470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.835270][ T6470] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 232.844953][ T6470] bond0 (unregistering): Released all slaves [ 232.858392][ T6470] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 232.867011][ T6470] wireguard0: left promiscuous mode [ 232.873119][ T6470] bond1 (unregistering): Released all slaves [ 232.883076][ T6470] bond2 (unregistering): Released all slaves [ 232.894442][ T6470] team0: Port device bond3 removed [ 232.902083][ T6470] bond3 (unregistering): Released all slaves [ 232.912106][ T6470] bond4 (unregistering): Released all slaves [ 232.921271][ T6470] bond5 (unregistering): Released all slaves [ 232.934152][ T6470] bond6 (unregistering): (slave veth7): Releasing backup interface [ 232.943096][ T6470] bond6 (unregistering): Released all slaves [ 232.954605][ T6470] bond7 (unregistering): Released all slaves [ 232.960829][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 232.960858][ C1] lec:lec_tx_timeout: lec0 [ 232.969059][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 232.984867][ T6470] bond8 (unregistering): Released all slaves [ 232.995115][ T6470] bond9 (unregistering): Released all slaves [ 233.006713][ T6470] bond10 (unregistering): Released all slaves [ 233.015637][ T6470] bond11 (unregistering): Released all slaves [ 233.108731][ T6470] tipc: Left network mode [ 233.119952][T16859] hsr_slave_0: entered promiscuous mode [ 233.128454][T16859] hsr_slave_1: entered promiscuous mode [ 233.134740][T16859] debugfs: 'hsr0' already exists in 'hsr' [ 233.142202][T16859] Cannot create hsr debugfs directory [ 233.217659][T16909] netlink: 'syz.0.3053': attribute type 10 has an invalid length. [ 233.318576][T16921] openvswitch: netlink: Key type 134 is out of range max 32 [ 233.372226][T16928] __nla_validate_parse: 5 callbacks suppressed [ 233.372244][T16928] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3057'. [ 233.395687][T16932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3056'. [ 233.458756][T16921] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3056'. [ 233.476092][T16931] IPVS: Unknown mcast interface: vcan0 [ 233.582349][ T6470] hsr_slave_0: left promiscuous mode [ 233.610675][ T6470] hsr_slave_1: left promiscuous mode [ 233.622278][ T6470] veth1_macvtap: left promiscuous mode [ 233.629169][T16936] nbd0: detected capacity change from 0 to 127 [ 233.643134][ T5188] block nbd0: Receive control failed (result -104) [ 233.651025][ T5885] block nbd0: Receive control failed (result -32) [ 233.732181][ T6470] team0 (unregistering): Port device batadv0 removed [ 233.782751][ T6470] pim6reg (unregistering): left allmulticast mode [ 233.799252][ T5885] Bluetooth: hci4: command tx timeout [ 233.831862][ T6470] team0 (unregistering): Port device team_slave_1 removed [ 233.842184][ T6470] team0 (unregistering): Port device team_slave_0 removed [ 233.862964][T16960] netlink: 45 bytes leftover after parsing attributes in process `syz.2.3064'. [ 233.935527][T16944] bond0: left promiscuous mode [ 233.947748][T16944] bridge_slave_1: left promiscuous mode [ 233.953686][T16944] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 233.971232][T16944] ipvlan1: left promiscuous mode [ 233.986377][T16944] geneve3: left promiscuous mode [ 233.998000][T16944] gretap1: left promiscuous mode [ 234.020141][T16944] ipvlan6: left promiscuous mode [ 234.045534][ T6466] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.060806][ T6466] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 234.070098][ T6466] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 234.077812][ T6468] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 234.081407][ T6466] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.099498][ T6466] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 234.108898][ T6466] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 234.141559][T16974] openvswitch: netlink: IP tunnel dst address not specified [ 234.141572][T16973] netlink: 'syz.3.3068': attribute type 4 has an invalid length. [ 234.163075][ T6466] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.173686][ T6466] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 234.183359][ T6466] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 234.192956][ T6466] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.206884][T16979] netlink: 'syz.3.3068': attribute type 4 has an invalid length. [ 234.214683][ T6466] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 234.225320][ T6466] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 234.280285][T16978] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3069'. [ 234.301105][T16979] netlink: 1208 bytes leftover after parsing attributes in process `syz.3.3068'. [ 234.311524][T16979] netlink: 764 bytes leftover after parsing attributes in process `syz.3.3068'. [ 234.327065][T16979] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3068'. [ 234.394812][T16988] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 234.408369][ T6470] IPVS: stop unused estimator thread 0... [ 234.667166][ T5885] Bluetooth: hci2: command tx timeout [ 234.839145][T16859] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 234.959244][T16859] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 234.994617][T16859] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 235.049392][T16859] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 235.095805][T17011] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3074'. [ 235.135861][T17011] netlink: 'syz.1.3074': attribute type 1 has an invalid length. [ 235.264755][T17034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3074'. [ 235.301706][T16859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.410709][T16859] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.442289][ T3487] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.449462][ T3487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.474354][ T3487] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.481528][ T3487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.868570][ T5885] Bluetooth: hci4: command tx timeout [ 235.875042][T16859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.935713][T17096] can: request_module (can-proto-4) failed. [ 236.023044][T17111] delete_channel: no stack [ 236.051259][T17109] delete_channel: no stack [ 236.163254][T17130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.272417][T16859] veth0_vlan: entered promiscuous mode [ 236.312733][T16859] veth1_vlan: entered promiscuous mode [ 236.421365][T16859] veth0_macvtap: entered promiscuous mode [ 236.468611][T16859] veth1_macvtap: entered promiscuous mode [ 236.482317][T17148] tipc: Started in network mode [ 236.492361][T17152] netlink: zone id is out of range [ 236.502350][T17148] tipc: Node identity 22524007e15, cluster identity 4711 [ 236.508288][T17153] sctp: [Deprecated]: syz.3.3102 (pid 17153) Use of struct sctp_assoc_value in delayed_ack socket option. [ 236.508288][T17153] Use struct sctp_sack_info instead [ 236.532474][T17152] netlink: zone id is out of range [ 236.536710][T17148] tipc: Enabled bearer , priority 0 [ 236.537785][T17152] netlink: zone id is out of range [ 236.563615][T17152] netlink: zone id is out of range [ 236.563989][T17155] syzkaller0: entered promiscuous mode [ 236.586099][T17152] netlink: zone id is out of range [ 236.592633][T17152] netlink: zone id is out of range [ 236.594820][T17155] syzkaller0: entered allmulticast mode [ 236.616280][T17152] netlink: zone id is out of range [ 236.621425][T17152] netlink: zone id is out of range [ 236.642970][T16859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.713768][T17148] tipc: Resetting bearer [ 236.737710][T16859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.773055][ T3487] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.809772][ T3487] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.818912][T17168] netlink: 'syz.3.3104': attribute type 1 has an invalid length. [ 236.821546][ T3487] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.841512][ T3487] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.851136][T17168] nbd: error processing sock list [ 236.870825][T17168] block nbd1: shutting down sockets [ 236.976079][ T3487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.005472][ T3487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.070794][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.107357][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.365271][T17146] tipc: Resetting bearer [ 237.460804][T17146] tipc: Disabling bearer [ 237.731805][ T5188] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 237.739661][ T5188] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 237.747194][ T5188] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 237.754811][ T5188] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 237.762577][ T5188] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 237.840451][T17237] hsr0 speed is unknown, defaulting to 1000 [ 237.946327][ T5188] Bluetooth: hci4: command tx timeout [ 237.976021][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 237.984092][ C1] lec:lec_tx_timeout: lec0 [ 237.988753][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 238.160619][T17237] chnl_net:caif_netlink_parms(): no params data found [ 238.281735][T17277] dvmrp0: entered allmulticast mode [ 239.199777][T17237] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.213727][T17298] __nla_validate_parse: 14 callbacks suppressed [ 239.213746][T17298] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3136'. [ 239.220132][T17237] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.220310][T17237] bridge_slave_0: entered allmulticast mode [ 239.221221][T17237] bridge_slave_0: entered promiscuous mode [ 239.230137][T17298] netlink: 'syz.4.3136': attribute type 7 has an invalid length. [ 239.258421][T17298] netlink: 'syz.4.3136': attribute type 8 has an invalid length. [ 239.258631][T17293] tipc: Enabled bearer , priority 0 [ 239.266221][T17298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3136'. [ 239.287759][T17237] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.303896][T17237] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.312089][T17237] bridge_slave_1: entered allmulticast mode [ 239.321698][T17237] bridge_slave_1: entered promiscuous mode [ 239.345262][T17303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3137'. [ 239.392424][T17308] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3139'. [ 239.421987][T17237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.455830][T17237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.498086][T17313] tipc: Resetting bearer [ 239.524921][T17237] team0: Port device team_slave_0 added [ 239.542656][T17237] team0: Port device team_slave_1 added [ 239.555627][T17291] tipc: Disabling bearer [ 239.682725][T17237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.708888][T17237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.770414][T17237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.785787][T17336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3145'. [ 239.796323][ T5188] Bluetooth: hci5: command tx timeout [ 239.802796][T17237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.815985][T17237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.849059][T17237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.866563][T17333] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3143'. [ 239.869149][T17336] netlink: 'syz.2.3145': attribute type 10 has an invalid length. [ 239.939825][T17237] hsr_slave_0: entered promiscuous mode [ 239.940958][T17345] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3147'. [ 239.955549][T17237] hsr_slave_1: entered promiscuous mode [ 239.976153][T17237] debugfs: 'hsr0' already exists in 'hsr' [ 239.987925][T17237] Cannot create hsr debugfs directory [ 240.020670][T17336] team0: Port device netdevsim0 added [ 240.037349][ T5188] Bluetooth: hci4: command tx timeout [ 240.040290][T17356] Bluetooth: MGMT ver 1.23 [ 240.057993][T17345] hsr_slave_0: left promiscuous mode [ 240.079888][T17345] hsr_slave_1: left promiscuous mode [ 240.238079][T17368] netlink: 'syz.1.3151': attribute type 21 has an invalid length. [ 240.268361][T17368] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3151'. [ 240.293860][T17365] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3150'. [ 240.424657][T17372] syzkaller1: entered promiscuous mode [ 240.435169][T17372] syzkaller1: entered allmulticast mode [ 240.444326][T17381] C: renamed from team_slave_0 (while UP) [ 240.452386][T17381] netlink: 'syz.4.3154': attribute type 1 has an invalid length. [ 240.460994][T17381] net_ratelimit: 252 callbacks suppressed [ 240.461009][T17381] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 240.499405][T17237] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.514980][T17385] netlink: 'syz.2.3156': attribute type 1 has an invalid length. [ 240.523964][T17385] nbd: error processing sock list [ 240.544696][T17385] block nbd1: shutting down sockets [ 240.555673][T17237] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.576771][T17387] netlink: 'syz.2.3156': attribute type 1 has an invalid length. [ 240.586740][T17387] netlink: 'syz.2.3156': attribute type 3 has an invalid length. [ 240.616393][T17385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3156'. [ 240.625396][T17387] NCSI netlink: No device for ifindex 0 [ 240.632675][T17237] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.720158][T17237] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.847262][T17413] syzkaller0: create flow: hash 1024372708 index 1 [ 240.911654][T17422] netlink: 'syz.3.3165': attribute type 1 has an invalid length. [ 240.923183][ T3487] syzkaller0: tun_net_xmit 76 [ 240.939938][ T3487] syzkaller0: tun_net_xmit 48 [ 240.946130][ T9] syzkaller0: tun_net_xmit 76 [ 240.978613][T17401] syzkaller0: delete flow: hash 1024372708 index 1 [ 241.149240][T17237] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 241.205470][T17237] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 241.265583][T17237] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 241.342753][T17237] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 241.425274][T17461] openvswitch: netlink: Flow actions attr not present in new flow. [ 241.446770][T17465] netlink: 'syz.4.3174': attribute type 11 has an invalid length. [ 241.474262][T17463] netlink: 'syz.2.3175': attribute type 27 has an invalid length. [ 241.503460][T17476] netlink: 'syz.4.3174': attribute type 11 has an invalid length. [ 241.524545][T17237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.621586][T17237] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.656512][ T3487] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.663649][ T3487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.740393][ T3487] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.747554][ T3487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.805548][T17491] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (65485) ! [ 241.820378][T17498] tipc: Invalid UDP bearer configuration [ 241.820413][T17498] tipc: Enabling of bearer rejected, failed to enable media [ 241.866773][ T5885] Bluetooth: hci5: command tx timeout [ 241.893720][T17500] netlink: 'syz.4.3183': attribute type 2 has an invalid length. [ 241.914285][T17237] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 241.938498][T17509] netlink: 'syz.1.3185': attribute type 1 has an invalid length. [ 242.020296][T17509] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 242.073775][T17509] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 242.208380][T17518] gretap1: entered promiscuous mode [ 242.270339][T17518] bond1: (slave gretap1): making interface the new active one [ 242.328409][T17518] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 242.419876][T17237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.551331][T17237] veth0_vlan: entered promiscuous mode [ 242.583664][T17569] netlink: 'syz.2.3195': attribute type 6 has an invalid length. [ 242.599580][T17237] veth1_vlan: entered promiscuous mode [ 242.661674][T17237] veth0_macvtap: entered promiscuous mode [ 242.680848][T17237] veth1_macvtap: entered promiscuous mode [ 242.772570][T17237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.800886][T17237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.824276][ T6464] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.837083][ T6464] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.866792][ T6464] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.875542][ T6464] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.977094][T17594] hsr0 speed is unknown, defaulting to 1000 [ 242.996050][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 243.004088][ C1] lec:lec_tx_timeout: lec0 [ 243.008992][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 243.133555][T17587] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 243.293837][ T3487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.302789][ T3487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.342133][ T3175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.354037][ T3175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.530479][T17631] tipc: Enabled bearer , priority 0 [ 243.644682][T17631] syzkaller0: entered promiscuous mode [ 243.662839][T17631] syzkaller0: entered allmulticast mode [ 243.676761][T17631] tipc: Resetting bearer [ 243.695111][T17650] tipc: Started in network mode [ 243.700617][T17650] tipc: Node identity 06d6f2896895, cluster identity 4711 [ 243.710849][T17650] tipc: Enabled bearer , priority 0 [ 243.728274][T17631] tipc: Resetting bearer [ 243.743099][T17652] nbd: must specify a device to reconfigure [ 243.791168][T17631] tipc: Disabling bearer [ 243.898523][T17635] tipc: Disabling bearer [ 243.947461][ T5885] Bluetooth: hci5: command 0x040f tx timeout [ 243.965090][T17679] ipvlan1: left allmulticast mode [ 243.973396][T17679] veth0_vlan: left allmulticast mode [ 244.004506][T17679] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 244.425565][T17715] sock: sock_timestamping_bind_phc: sock not bind to device [ 244.507791][T17719] tipc: Enabling of bearer rejected, failed to enable media [ 244.866982][T17743] __nla_validate_parse: 18 callbacks suppressed [ 244.867000][T17743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3239'. [ 244.882441][ T5885] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 244.891487][ T5885] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 244.900327][ T5885] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 244.916121][ T5885] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 244.924412][T17743] xfrm1: entered promiscuous mode [ 244.930653][ T5885] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 244.938938][T17743] xfrm1: entered allmulticast mode [ 245.009682][T17742] hsr0 speed is unknown, defaulting to 1000 [ 245.185825][T17763] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3245'. [ 245.199231][T17763] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3245'. [ 245.239751][T17742] chnl_net:caif_netlink_parms(): no params data found [ 245.269862][T17777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3247'. [ 245.305634][T17776] syz.0.3250 uses old SIOCAX25GETINFO [ 245.317750][T17777] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3247'. [ 245.386095][T17789] sctp: [Deprecated]: syz.0.3252 (pid 17789) Use of struct sctp_assoc_value in delayed_ack socket option. [ 245.386095][T17789] Use struct sctp_sack_info instead [ 245.474268][T17742] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.491360][T17742] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.501555][T17742] bridge_slave_0: entered allmulticast mode [ 245.508903][T17742] bridge_slave_0: entered promiscuous mode [ 245.535558][T17802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3255'. [ 245.536528][T17801] validate_nla: 6 callbacks suppressed [ 245.536542][T17801] netlink: 'syz.4.3253': attribute type 10 has an invalid length. [ 245.570958][T17802] hsr_slave_1 (unregistering): left promiscuous mode [ 245.585489][T17742] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.594913][T17742] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.614068][T17742] bridge_slave_1: entered allmulticast mode [ 245.622195][T17742] bridge_slave_1: entered promiscuous mode [ 245.638778][T17801] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.657082][T17801] bridge_slave_1: left allmulticast mode [ 245.667357][T17801] bridge_slave_1: left promiscuous mode [ 245.683307][T17801] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.708751][T17801] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 245.828452][T17742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.839973][T17742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.865435][T17828] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3261'. [ 245.875856][T17742] team0: Port device team_slave_0 added [ 245.882313][T17827] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3261'. [ 245.892709][T17742] team0: Port device team_slave_1 added [ 245.916672][T17742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.923628][T17742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.951200][T17742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.962981][T17742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.970433][T17742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.996542][T17742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.028735][ T5885] Bluetooth: hci5: command 0x040f tx timeout [ 246.054105][T17832] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 246.060065][T17837] Bluetooth: MGMT ver 1.23 [ 246.090913][T17742] hsr_slave_0: entered promiscuous mode [ 246.097740][T17742] hsr_slave_1: entered promiscuous mode [ 246.104411][T17742] debugfs: 'hsr0' already exists in 'hsr' [ 246.110923][T17742] Cannot create hsr debugfs directory [ 246.318763][T17850] bond1 (unregistering): Released all slaves [ 246.361751][T17857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3271'. [ 246.374202][T17857] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3271'. [ 246.479515][T17862] macvtap1: entered promiscuous mode [ 246.495609][T17862] vlan0: entered promiscuous mode [ 246.501658][T17862] macvtap1: entered allmulticast mode [ 246.507614][T17862] vlan0: entered allmulticast mode [ 246.513056][T17862] veth0_vlan: entered allmulticast mode [ 246.518125][T17871] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 246.845687][T17742] team0: Port device netdevsim0 removed [ 246.882080][T17897] netlink: 'syz.0.3282': attribute type 1 has an invalid length. [ 246.891934][T17897] netlink: 'syz.0.3282': attribute type 2 has an invalid length. [ 246.986646][ T5885] Bluetooth: hci0: command tx timeout [ 247.004689][T17903] veth0_macvtap: left promiscuous mode [ 247.048678][T17742] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 247.068688][T17742] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 247.079280][T17742] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 247.091229][T17911] netlink: 'syz.2.3287': attribute type 11 has an invalid length. [ 247.105199][T17742] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 247.119459][T17911] netlink: 'syz.2.3287': attribute type 11 has an invalid length. [ 247.131727][ T6466] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.141515][ T6466] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.160094][ T6466] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.202464][ T6466] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.269261][T17742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.291665][T17742] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.325842][ T6466] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.333009][ T6466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.347949][T17935] IPVS: set_ctl: invalid protocol: 58 172.20.20.60:20000 [ 247.370978][ T3175] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.378131][ T3175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.410502][T17933] veth1_macvtap: left promiscuous mode [ 247.699461][T17971] wg1: entered promiscuous mode [ 247.715321][T17971] wg1: entered allmulticast mode [ 247.811688][T17970] syzkaller0: entered promiscuous mode [ 247.817393][T17970] syzkaller0: entered allmulticast mode [ 247.848219][T17742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.015964][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 248.024009][ C1] lec:lec_tx_timeout: lec0 [ 248.029639][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 248.106843][ T5885] Bluetooth: hci5: command 0x040f tx timeout [ 248.212585][T17742] veth0_vlan: entered promiscuous mode [ 248.248685][T17742] veth1_vlan: entered promiscuous mode [ 248.270966][T18021] sctp: [Deprecated]: syz.0.3319 (pid 18021) Use of struct sctp_assoc_value in delayed_ack socket option. [ 248.270966][T18021] Use struct sctp_sack_info instead [ 248.280082][T17742] veth0_macvtap: entered promiscuous mode [ 248.313474][T17742] veth1_macvtap: entered promiscuous mode [ 248.324896][T18027] sctp: [Deprecated]: syz.0.3319 (pid 18027) Use of struct sctp_assoc_value in delayed_ack socket option. [ 248.324896][T18027] Use struct sctp_sack_info instead [ 248.350061][T18026] syzkaller1: entered promiscuous mode [ 248.362878][T18026] syzkaller1: entered allmulticast mode [ 248.386797][T17742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.403557][T17742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.432790][ T6468] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.441963][ T6473] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.466305][T18035] openvswitch: netlink: IP tunnel dst address not specified [ 248.470963][ T6473] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.488976][ T6473] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.645586][ T3487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.676062][ T3487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.720012][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.753459][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.070290][T18073] nbd1: detected capacity change from 0 to 127 [ 249.072980][ T5188] Bluetooth: hci0: command tx timeout [ 249.092711][ T5885] block nbd1: Receive control failed (result -32) [ 249.100682][T16008] block nbd1: Dead connection, failed to find a fallback [ 249.115813][T16008] block nbd1: shutting down sockets [ 249.128641][T16008] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 249.141409][T16008] Buffer I/O error on dev nbd1, logical block 0, async page read [ 249.151899][T16008] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 249.161042][T16008] Buffer I/O error on dev nbd1, logical block 1, async page read [ 249.169084][T16008] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 249.178307][T16008] Buffer I/O error on dev nbd1, logical block 2, async page read [ 249.186247][T16008] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 249.195421][T16008] Buffer I/O error on dev nbd1, logical block 3, async page read [ 249.215656][T16008] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 249.232347][T16008] Buffer I/O error on dev nbd1, logical block 0, async page read [ 249.266523][T16008] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 249.275596][T16008] Buffer I/O error on dev nbd1, logical block 1, async page read [ 249.304815][T18103] sctp: [Deprecated]: syz.2.3341 (pid 18103) Use of int in max_burst socket option. [ 249.304815][T18103] Use struct sctp_assoc_value instead [ 249.332130][T16008] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 249.368013][T16008] Buffer I/O error on dev nbd1, logical block 2, async page read [ 249.386232][T16008] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 249.406002][T16008] Buffer I/O error on dev nbd1, logical block 3, async page read [ 249.417069][T16008] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 249.453115][T18115] bond2: entered promiscuous mode [ 249.462195][T18115] bond2: entered allmulticast mode [ 249.476226][T16008] Buffer I/O error on dev nbd1, logical block 0, async page read [ 249.503781][T18115] 8021q: adding VLAN 0 to HW filter on device bond2 [ 249.510658][T16008] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 249.537379][T16008] Buffer I/O error on dev nbd1, logical block 1, async page read [ 249.578696][T16008] ldm_validate_partition_table(): Disk read failed. [ 249.593729][T16008] Dev nbd1: unable to read RDB block 0 [ 249.608023][T16008] nbd1: unable to read partition table [ 249.635359][T16008] ldm_validate_partition_table(): Disk read failed. [ 249.673202][T16008] Dev nbd1: unable to read RDB block 0 [ 249.695703][T16008] nbd1: unable to read partition table [ 249.749775][T18142] bond0: entered promiscuous mode [ 249.755212][T18142] bond_slave_0: entered promiscuous mode [ 249.764071][T18142] bond_slave_1: entered promiscuous mode [ 249.787972][T18143] tap0: tun_chr_ioctl cmd 1074025678 [ 249.797712][T18143] tap0: group set to 0 [ 250.007377][T18171] __nla_validate_parse: 42 callbacks suppressed [ 250.007395][T18171] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3361'. [ 250.331443][T18192] netlink: 'syz.4.3369': attribute type 10 has an invalid length. [ 250.331488][T18194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3370'. [ 250.373399][T18192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.383499][T18192] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 250.409258][T18194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3370'. [ 250.549305][T18215] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3376'. [ 250.561993][T18216] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3377'. [ 250.940768][T18254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3388'. [ 250.952743][T18252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3387'. [ 250.971267][T18252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3387'. [ 250.987738][T18254] netlink: 'syz.0.3388': attribute type 5 has an invalid length. [ 250.996200][T18254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3388'. [ 251.026472][T18254] geneve2: entered promiscuous mode [ 251.035728][T18254] geneve2: entered allmulticast mode [ 251.043083][ T6466] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 251.062210][ T6466] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 251.123490][ T6466] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 251.146637][ T5885] Bluetooth: hci0: command tx timeout [ 251.153840][T18263] hsr0 speed is unknown, defaulting to 1000 [ 251.160329][ T6466] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 251.254984][T18281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3396'. [ 251.455582][T18301] netlink: 'syz.0.3402': attribute type 29 has an invalid length. [ 251.473774][T18301] netlink: 'syz.0.3402': attribute type 29 has an invalid length. [ 251.486671][T18301] unsupported nla_type 58 [ 251.721308][T18304] tipc: Resetting bearer [ 252.151087][T18358] netlink: 'syz.3.3420': attribute type 29 has an invalid length. [ 252.232340][T18365] netlink: 'syz.3.3420': attribute type 29 has an invalid length. [ 252.315749][T18304] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 252.324731][T18304] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 252.509433][T18304] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 252.515860][T18304] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 252.591960][T18304] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 252.602313][T18304] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 252.686482][T18304] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 252.694855][T18304] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 252.761765][T18304] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 252.778596][T18304] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 252.912356][T18408] tipc: Enabling of bearer rejected, media not registered [ 253.035964][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 253.044034][ C1] lec:lec_tx_timeout: lec0 [ 253.048900][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 253.198255][T18430] hsr0 speed is unknown, defaulting to 1000 [ 253.350244][T18449] openvswitch: netlink: Actions may not be safe on all matching packets [ 253.542240][T18463] ipvlan0: entered allmulticast mode [ 253.566717][T18463] veth0_vlan: entered allmulticast mode [ 253.979509][T18499] netlink: 'syz.1.3448': attribute type 11 has an invalid length. [ 254.002095][T18499] netlink: 'syz.1.3448': attribute type 11 has an invalid length. [ 254.556463][T18548] netlink: 'syz.3.3466': attribute type 1 has an invalid length. [ 254.568788][T18548] netlink: 'syz.3.3466': attribute type 2 has an invalid length. [ 254.702282][ T24] IPVS: starting estimator thread 0... [ 254.806024][T18559] IPVS: using max 57 ests per chain, 136800 per kthread [ 255.018056][T18591] netlink: 'syz.3.3476': attribute type 29 has an invalid length. [ 255.033929][T18591] __nla_validate_parse: 16 callbacks suppressed [ 255.033969][T18591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3476'. [ 255.330432][T18610] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3482'. [ 255.391553][T18613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3483'. [ 255.426222][T18614] 8021q: adding VLAN 0 to HW filter on device bond1 [ 255.434325][T18614] team0: Failed to send port change of device bond1 via netlink (err -105) [ 255.445317][T18614] team0: Failed to send options change via netlink (err -105) [ 255.464178][T18614] team0: Port device bond1 added [ 255.549778][T18627] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3486'. [ 255.566961][T18627] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3486'. [ 255.658877][T18633] netlink: 'syz.2.3487': attribute type 17 has an invalid length. [ 255.668933][T18633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3487'. [ 255.689888][T18633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3487'. [ 256.566333][T18696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3500'. [ 256.778200][T18714] netlink: 'syz.0.3504': attribute type 1 has an invalid length. [ 256.816270][T18714] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3504'. [ 256.851959][T18714] netlink: 'syz.0.3504': attribute type 1 has an invalid length. [ 256.978250][T18734] netlink: 'syz.4.3509': attribute type 15 has an invalid length. [ 256.988084][T18735] netlink: 'syz.4.3509': attribute type 15 has an invalid length. [ 256.999737][T18735] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3509'. [ 257.264614][T18757] 8021q: adding VLAN 0 to HW filter on device bond1 [ 257.400250][T18769] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.418734][T18776] netlink: 'syz.2.3518': attribute type 1 has an invalid length. [ 257.474999][T18772] geneve2: entered promiscuous mode [ 257.488913][T18772] geneve2: entered allmulticast mode [ 257.509349][ T6464] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 257.533391][ T6464] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 257.588788][T18769] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.638507][ T6466] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 257.647847][ T6466] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 257.712935][T18769] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.854076][T18769] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.871567][T18812] FAULT_INJECTION: forcing a failure. [ 257.871567][T18812] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 257.896266][T18812] CPU: 0 UID: 0 PID: 18812 Comm: syz.4.3527 Not tainted syzkaller #0 PREEMPT(full) [ 257.896293][T18812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 257.896309][T18812] Call Trace: [ 257.896316][T18812] [ 257.896323][T18812] dump_stack_lvl+0x189/0x250 [ 257.896349][T18812] ? __pfx____ratelimit+0x10/0x10 [ 257.896372][T18812] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.896391][T18812] ? __pfx__printk+0x10/0x10 [ 257.896411][T18812] ? __might_fault+0xb0/0x130 [ 257.896437][T18812] ? rcu_is_watching+0x15/0xb0 [ 257.896454][T18812] should_fail_ex+0x414/0x560 [ 257.896478][T18812] _copy_from_iter+0x1db/0x16f0 [ 257.896495][T18812] ? rcu_is_watching+0x15/0xb0 [ 257.896512][T18812] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 257.896535][T18812] ? __pfx__copy_from_iter+0x10/0x10 [ 257.896551][T18812] ? __build_skb_around+0x257/0x3e0 [ 257.896577][T18812] ? netlink_sendmsg+0x642/0xb30 [ 257.896600][T18812] ? skb_put+0x11b/0x210 [ 257.896620][T18812] netlink_sendmsg+0x6b2/0xb30 [ 257.896646][T18812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.896670][T18812] ? aa_sock_msg_perm+0xf1/0x1d0 [ 257.896686][T18812] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 257.896705][T18812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.896728][T18812] __sock_sendmsg+0x21c/0x270 [ 257.896749][T18812] ____sys_sendmsg+0x505/0x830 [ 257.896768][T18812] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.896789][T18812] ? import_iovec+0x74/0xa0 [ 257.896808][T18812] ___sys_sendmsg+0x21f/0x2a0 [ 257.896826][T18812] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.896858][T18812] ? __fget_files+0x2a/0x420 [ 257.896880][T18812] ? __fget_files+0x3a0/0x420 [ 257.896907][T18812] __x64_sys_sendmsg+0x19b/0x260 [ 257.896925][T18812] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 257.896946][T18812] ? __pfx_ksys_write+0x10/0x10 [ 257.896966][T18812] ? rcu_is_watching+0x15/0xb0 [ 257.896984][T18812] ? rcu_is_watching+0x15/0xb0 [ 257.897001][T18812] do_syscall_64+0xfa/0x3b0 [ 257.897025][T18812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.897042][T18812] ? clear_bhb_loop+0x60/0xb0 [ 257.897060][T18812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.897076][T18812] RIP: 0033:0x7f24d4d8ebe9 [ 257.897096][T18812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.897112][T18812] RSP: 002b:00007f24d5b29038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.897135][T18812] RAX: ffffffffffffffda RBX: 00007f24d4fb5fa0 RCX: 00007f24d4d8ebe9 [ 257.897148][T18812] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 257.897160][T18812] RBP: 00007f24d5b29090 R08: 0000000000000000 R09: 0000000000000000 [ 257.897170][T18812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.897181][T18812] R13: 00007f24d4fb6038 R14: 00007f24d4fb5fa0 R15: 00007ffff9e7e348 [ 257.897202][T18812] [ 258.284416][ T6470] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.335165][ T6470] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.355896][ T6470] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.374689][ T6470] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.824803][T18875] netlink: 'syz.2.3543': attribute type 1 has an invalid length. [ 258.832602][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 258.832629][ C1] lec:lec_tx_timeout: lec0 [ 258.841250][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 259.059401][T18896] netlink: 'syz.1.3549': attribute type 2 has an invalid length. [ 259.111100][T18888] syzkaller0: entered promiscuous mode [ 259.119082][T18888] syzkaller0: entered allmulticast mode [ 259.137710][T18900] netlink: 'syz.4.3551': attribute type 1 has an invalid length. [ 259.353329][T18909] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 259.419193][T18909] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 259.436271][T18909] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 259.565912][T18939] FAULT_INJECTION: forcing a failure. [ 259.565912][T18939] name failslab, interval 1, probability 0, space 0, times 0 [ 259.598915][T18939] CPU: 0 UID: 0 PID: 18939 Comm: syz.2.3558 Not tainted syzkaller #0 PREEMPT(full) [ 259.598941][T18939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 259.598952][T18939] Call Trace: [ 259.598958][T18939] [ 259.598965][T18939] dump_stack_lvl+0x189/0x250 [ 259.598988][T18939] ? __pfx____ratelimit+0x10/0x10 [ 259.599009][T18939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.599026][T18939] ? __pfx__printk+0x10/0x10 [ 259.599045][T18939] ? rcu_is_watching+0x15/0xb0 [ 259.599063][T18939] ? __pfx___might_resched+0x10/0x10 [ 259.599078][T18939] ? lock_acquire+0x5f/0x360 [ 259.599100][T18939] should_fail_ex+0x414/0x560 [ 259.599122][T18939] should_failslab+0xa8/0x100 [ 259.599144][T18939] __kmalloc_noprof+0xcb/0x4f0 [ 259.599165][T18939] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 259.599187][T18939] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 259.599209][T18939] genl_family_rcv_msg_doit+0xb8/0x300 [ 259.599231][T18939] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 259.599253][T18939] ? apparmor_capable+0x137/0x1b0 [ 259.599273][T18939] ? bpf_lsm_capable+0x9/0x20 [ 259.599294][T18939] ? security_capable+0x7e/0x2e0 [ 259.599329][T18939] genl_rcv_msg+0x60e/0x790 [ 259.599350][T18939] ? __pfx_genl_rcv_msg+0x10/0x10 [ 259.599367][T18939] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 259.599384][T18939] ? __asan_memcpy+0x40/0x70 [ 259.599402][T18939] ? __pfx_ref_tracker_free+0x10/0x10 [ 259.599428][T18939] netlink_rcv_skb+0x208/0x470 [ 259.599450][T18939] ? __pfx_genl_rcv_msg+0x10/0x10 [ 259.599467][T18939] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 259.599488][T18939] ? lock_release+0x4b/0x3e0 [ 259.599507][T18939] ? down_read+0x1ad/0x2e0 [ 259.599522][T18939] genl_rcv+0x28/0x40 [ 259.599538][T18939] netlink_unicast+0x82c/0x9e0 [ 259.599561][T18939] ? __pfx_netlink_unicast+0x10/0x10 [ 259.599583][T18939] ? netlink_sendmsg+0x642/0xb30 [ 259.599604][T18939] ? skb_put+0x11b/0x210 [ 259.599618][T18939] netlink_sendmsg+0x805/0xb30 [ 259.599644][T18939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.599666][T18939] ? aa_sock_msg_perm+0xf1/0x1d0 [ 259.599682][T18939] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 259.599700][T18939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.599720][T18939] __sock_sendmsg+0x21c/0x270 [ 259.599741][T18939] ____sys_sendmsg+0x505/0x830 [ 259.599760][T18939] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.599781][T18939] ? import_iovec+0x74/0xa0 [ 259.599802][T18939] ___sys_sendmsg+0x21f/0x2a0 [ 259.599820][T18939] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.599853][T18939] ? __fget_files+0x2a/0x420 [ 259.599876][T18939] ? __fget_files+0x3a0/0x420 [ 259.599902][T18939] __x64_sys_sendmsg+0x19b/0x260 [ 259.599921][T18939] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 259.599943][T18939] ? __pfx_ksys_write+0x10/0x10 [ 259.599967][T18939] ? rcu_is_watching+0x15/0xb0 [ 259.599985][T18939] do_syscall_64+0xfa/0x3b0 [ 259.600008][T18939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.600025][T18939] ? clear_bhb_loop+0x60/0xb0 [ 259.600043][T18939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.600060][T18939] RIP: 0033:0x7fdd4bf8ebe9 [ 259.600074][T18939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.600089][T18939] RSP: 002b:00007fdd4ce51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.600108][T18939] RAX: ffffffffffffffda RBX: 00007fdd4c1b5fa0 RCX: 00007fdd4bf8ebe9 [ 259.600121][T18939] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 259.600133][T18939] RBP: 00007fdd4ce51090 R08: 0000000000000000 R09: 0000000000000000 [ 259.600144][T18939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.600154][T18939] R13: 00007fdd4c1b6038 R14: 00007fdd4c1b5fa0 R15: 00007fff0b5f2d08 [ 259.600175][T18939] [ 260.083088][T18946] __nla_validate_parse: 17 callbacks suppressed [ 260.083106][T18946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3561'. [ 260.239848][T18946] vlan2: entered allmulticast mode [ 260.253782][T18946] mac80211_hwsim hwsim30 wlan0: entered allmulticast mode [ 260.413848][T18977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3566'. [ 260.415732][T18983] veth1_macvtap: left promiscuous mode [ 260.446156][T18983] macsec0: entered promiscuous mode [ 260.453305][T18977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3566'. [ 260.465376][T18983] macsec0: entered allmulticast mode [ 260.500146][T18989] veth1_macvtap: entered promiscuous mode [ 260.525589][T18989] veth1_macvtap: entered allmulticast mode [ 260.533626][T18989] macsec0: left promiscuous mode [ 260.543917][T18989] macsec0: left allmulticast mode [ 260.552728][T18989] veth1_macvtap: left allmulticast mode [ 260.637283][T19000] FAULT_INJECTION: forcing a failure. [ 260.637283][T19000] name failslab, interval 1, probability 0, space 0, times 0 [ 260.685050][T19000] CPU: 1 UID: 0 PID: 19000 Comm: syz.4.3571 Not tainted syzkaller #0 PREEMPT(full) [ 260.685077][T19000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 260.685088][T19000] Call Trace: [ 260.685094][T19000] [ 260.685102][T19000] dump_stack_lvl+0x189/0x250 [ 260.685126][T19000] ? __pfx____ratelimit+0x10/0x10 [ 260.685150][T19000] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.685168][T19000] ? __pfx__printk+0x10/0x10 [ 260.685191][T19000] ? __pfx___might_resched+0x10/0x10 [ 260.685208][T19000] ? lock_acquire+0x5f/0x360 [ 260.685240][T19000] should_fail_ex+0x414/0x560 [ 260.685264][T19000] should_failslab+0xa8/0x100 [ 260.685289][T19000] __kmalloc_noprof+0xcb/0x4f0 [ 260.685309][T19000] ? ethnl_default_set_doit+0x168/0x890 [ 260.685330][T19000] ethnl_default_set_doit+0x168/0x890 [ 260.685346][T19000] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 260.685367][T19000] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 260.685390][T19000] genl_family_rcv_msg_doit+0x215/0x300 [ 260.685413][T19000] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 260.685438][T19000] ? bpf_lsm_capable+0x9/0x20 [ 260.685461][T19000] ? security_capable+0x7e/0x2e0 [ 260.685487][T19000] genl_rcv_msg+0x60e/0x790 [ 260.685507][T19000] ? __pfx_genl_rcv_msg+0x10/0x10 [ 260.685524][T19000] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 260.685540][T19000] ? __asan_memcpy+0x40/0x70 [ 260.685556][T19000] ? __pfx_ref_tracker_free+0x10/0x10 [ 260.685582][T19000] netlink_rcv_skb+0x208/0x470 [ 260.685605][T19000] ? __pfx_genl_rcv_msg+0x10/0x10 [ 260.685624][T19000] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 260.685652][T19000] ? lock_release+0x4b/0x3e0 [ 260.685676][T19000] ? down_read+0x1ad/0x2e0 [ 260.685693][T19000] genl_rcv+0x28/0x40 [ 260.685709][T19000] netlink_unicast+0x82c/0x9e0 [ 260.685734][T19000] ? __pfx_netlink_unicast+0x10/0x10 [ 260.685755][T19000] ? netlink_sendmsg+0x642/0xb30 [ 260.685777][T19000] ? skb_put+0x11b/0x210 [ 260.685795][T19000] netlink_sendmsg+0x805/0xb30 [ 260.685822][T19000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.685847][T19000] ? aa_sock_msg_perm+0xf1/0x1d0 [ 260.685863][T19000] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 260.685881][T19000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.685904][T19000] __sock_sendmsg+0x21c/0x270 [ 260.685928][T19000] ____sys_sendmsg+0x505/0x830 [ 260.685946][T19000] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.685964][T19000] ? import_iovec+0x74/0xa0 [ 260.685983][T19000] ___sys_sendmsg+0x21f/0x2a0 [ 260.685998][T19000] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.686029][T19000] ? __fget_files+0x2a/0x420 [ 260.686052][T19000] ? __fget_files+0x3a0/0x420 [ 260.686079][T19000] __x64_sys_sendmsg+0x19b/0x260 [ 260.686098][T19000] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 260.686120][T19000] ? __pfx_ksys_write+0x10/0x10 [ 260.686139][T19000] ? rcu_is_watching+0x15/0xb0 [ 260.686158][T19000] ? rcu_is_watching+0x15/0xb0 [ 260.686174][T19000] do_syscall_64+0xfa/0x3b0 [ 260.686197][T19000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.686220][T19000] ? clear_bhb_loop+0x60/0xb0 [ 260.686238][T19000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.686254][T19000] RIP: 0033:0x7f24d4d8ebe9 [ 260.686269][T19000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.686284][T19000] RSP: 002b:00007f24d5b29038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.686304][T19000] RAX: ffffffffffffffda RBX: 00007f24d4fb5fa0 RCX: 00007f24d4d8ebe9 [ 260.686317][T19000] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 260.686328][T19000] RBP: 00007f24d5b29090 R08: 0000000000000000 R09: 0000000000000000 [ 260.686340][T19000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.686350][T19000] R13: 00007f24d4fb6038 R14: 00007f24d4fb5fa0 R15: 00007ffff9e7e348 [ 260.686371][T19000] [ 261.352287][T19025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3576'. [ 261.365098][T19025] vlan2: entered allmulticast mode [ 261.370290][T19025] mac80211_hwsim hwsim33 wlan0: entered allmulticast mode [ 261.446502][T19029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3578'. [ 261.686928][T19040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3580'. [ 261.749538][T19040] vlan3: entered promiscuous mode [ 261.754607][T19040] gretap0: entered promiscuous mode [ 261.809028][T19075] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3588'. [ 261.960712][T19085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3590'. [ 261.976016][T19085] netlink: 'syz.0.3590': attribute type 30 has an invalid length. [ 261.984174][T19085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3590'. [ 262.054492][T19103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3596'. [ 262.169844][T19116] batadv_slave_1: entered promiscuous mode [ 262.179839][T19116] batadv_slave_0: entered promiscuous mode [ 262.211060][T19116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.229385][T19116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.240153][T19116] debugfs: 'hsr0' already exists in 'hsr' [ 262.250900][T19116] Cannot create hsr debugfs directory [ 262.260700][T19119] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 262.512059][T19135] netlink: 'syz.4.3603': attribute type 13 has an invalid length. [ 263.046732][T19202] bond0: vlans aren't supported yet for dev_uc|mc_add() [ 263.238028][T19212] bond0: (slave bridge_slave_1): Releasing backup interface [ 263.716018][T19242] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 263.763305][T19242] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 263.865958][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 263.874016][ C1] lec:lec_tx_timeout: lec0 [ 263.878581][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 263.991656][ T6464] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 264.016165][ T5925] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 264.023803][ T6464] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 264.027533][ T11] block nbd0: Connection timed out, retrying (0/2 alive) [ 264.043187][ T11] block nbd0: Connection timed out, retrying (0/2 alive) [ 264.050651][ T11] block nbd0: Connection timed out, retrying (0/2 alive) [ 264.057856][ T11] block nbd0: Connection timed out, retrying (0/2 alive) [ 264.064963][ T11] block nbd0: Dead connection, failed to find a fallback [ 264.072587][ T11] block nbd0: shutting down sockets [ 264.078072][ T11] blk_print_req_error: 138 callbacks suppressed [ 264.078087][ T11] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.093827][ T11] buffer_io_error: 138 callbacks suppressed [ 264.093841][ T11] Buffer I/O error on dev nbd0, logical block 3, async page read [ 264.108989][ T11] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.118195][ T11] Buffer I/O error on dev nbd0, logical block 2, async page read [ 264.126059][ T11] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.135094][ T11] Buffer I/O error on dev nbd0, logical block 1, async page read [ 264.142912][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.152021][ T11] Buffer I/O error on dev nbd0, logical block 0, async page read [ 264.159993][T15599] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.178915][T15599] Buffer I/O error on dev nbd0, logical block 0, async page read [ 264.189588][T15599] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.216462][T15599] Buffer I/O error on dev nbd0, logical block 1, async page read [ 264.233364][T15599] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.250043][T15599] Buffer I/O error on dev nbd0, logical block 2, async page read [ 264.258829][T15599] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.270527][T15599] Buffer I/O error on dev nbd0, logical block 3, async page read [ 264.278588][T15599] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.289976][T15599] Buffer I/O error on dev nbd0, logical block 0, async page read [ 264.298169][T15599] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.310127][T15599] Buffer I/O error on dev nbd0, logical block 1, async page read [ 264.320012][T15599] ldm_validate_partition_table(): Disk read failed. [ 264.328081][T15599] Dev nbd0: unable to read RDB block 0 [ 264.334880][T15599] nbd0: unable to read partition table [ 264.361236][T19281] delete_channel: no stack [ 264.362221][T15599] ldm_validate_partition_table(): Disk read failed. [ 264.389441][T15599] Dev nbd0: unable to read RDB block 0 [ 264.397885][T15599] nbd0: unable to read partition table [ 264.520139][T19294] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 264.667695][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 264.681361][T19318] gtp0: entered promiscuous mode [ 264.686519][T19318] gtp0: entered allmulticast mode [ 264.754487][T19327] netlink: 'syz.3.3652': attribute type 17 has an invalid length. [ 264.823948][T19333] netlink: 'syz.1.3653': attribute type 1 has an invalid length. [ 264.836639][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 264.856890][T19342] netlink: 'syz.3.3652': attribute type 17 has an invalid length. [ 264.964490][T19351] netlink: 'syz.1.3656': attribute type 10 has an invalid length. [ 264.993947][T19351] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 265.139361][T19371] netlink: 'syz.1.3662': attribute type 10 has an invalid length. [ 265.177715][T19371] netlink: 'syz.1.3662': attribute type 10 has an invalid length. [ 265.210915][T19379] 8021q: VLANs not supported on ip6tnl0 [ 265.605321][T19422] __nla_validate_parse: 24 callbacks suppressed [ 265.605340][T19422] netlink: 788 bytes leftover after parsing attributes in process `syz.4.3675'. [ 265.653478][T19422] netlink: 788 bytes leftover after parsing attributes in process `syz.4.3675'. [ 265.702039][T19422] netlink: 788 bytes leftover after parsing attributes in process `syz.4.3675'. [ 265.731702][T19420] netlink: 'syz.1.3673': attribute type 33 has an invalid length. [ 265.740096][T19420] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 265.771392][T19422] netlink: 788 bytes leftover after parsing attributes in process `syz.4.3675'. [ 265.861670][T19422] netlink: 788 bytes leftover after parsing attributes in process `syz.4.3675'. [ 265.931315][T19445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3679'. [ 265.941769][T19422] netlink: 788 bytes leftover after parsing attributes in process `syz.4.3675'. [ 266.003556][T19422] netlink: 788 bytes leftover after parsing attributes in process `syz.4.3675'. [ 266.015761][T19449] openvswitch: netlink: Key type 16144 is out of range max 32 [ 266.088871][T19422] netlink: 788 bytes leftover after parsing attributes in process `syz.4.3675'. [ 266.154141][T19422] netlink: 788 bytes leftover after parsing attributes in process `syz.4.3675'. [ 266.768074][T19510] batman_adv: batadv0: Adding interface: dummy0 [ 266.788997][T19510] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.822683][T19510] batman_adv: batadv0: Interface activated: dummy0 [ 266.844452][T19510] batadv0: mtu less than device minimum [ 266.856664][T19510] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.867797][T19510] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.878912][T19510] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.889993][T19510] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.901068][T19510] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.912154][T19510] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.923231][T19510] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.934304][T19510] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 267.060626][T19535] netlink: 'syz.3.3697': attribute type 6 has an invalid length. [ 267.098442][T19537] syzkaller1: entered promiscuous mode [ 267.103952][T19537] syzkaller1: entered allmulticast mode [ 267.673971][T19581] sctp: [Deprecated]: syz.1.3710 (pid 19581) Use of int in max_burst socket option. [ 267.673971][T19581] Use struct sctp_assoc_value instead [ 267.837124][T19593] netlink: 'syz.2.3713': attribute type 4 has an invalid length. [ 267.947695][T19607] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 267.960770][T19607] 0ªî{X¹¦: entered allmulticast mode [ 268.031832][T19618] netlink: 'syz.4.3718': attribute type 24 has an invalid length. [ 268.090568][ T3175] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 268.346233][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 268.501235][T19657] netlink: 'syz.1.3728': attribute type 1 has an invalid length. [ 268.544813][T19657] netlink: 'syz.1.3728': attribute type 2 has an invalid length. [ 268.886074][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 268.894129][ C1] lec:lec_tx_timeout: lec0 [ 268.898788][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 268.999231][T19708] netlink: 'syz.1.3738': attribute type 1 has an invalid length. [ 269.575359][T19752] netlink: 'syz.3.3747': attribute type 1 has an invalid length. [ 269.583492][T19752] netlink: 'syz.3.3747': attribute type 2 has an invalid length. [ 269.591545][T19752] netlink: 'syz.3.3747': attribute type 1 has an invalid length. [ 269.604534][T19752] netlink: 'syz.3.3747': attribute type 2 has an invalid length. [ 270.115581][T19783] 8021q: adding VLAN 0 to HW filter on device bond2 [ 270.171789][T19785] bond2: (slave gretap1): making interface the new active one [ 270.187640][T19785] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 270.901164][T19836] hsr0 speed is unknown, defaulting to 1000 [ 271.064690][T19849] veth0: entered promiscuous mode [ 271.154990][T19847] veth0: left promiscuous mode [ 271.300577][T19880] __nla_validate_parse: 20 callbacks suppressed [ 271.300597][T19880] netlink: 18 bytes leftover after parsing attributes in process `syz.1.3778'. [ 271.393985][T19880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3778'. [ 271.435735][T19888] syzkaller1: entered promiscuous mode [ 271.447854][T19888] syzkaller1: entered allmulticast mode [ 272.186137][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 273.906144][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 273.914166][ C1] lec:lec_tx_timeout: lec0 [ 273.918835][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 276.826067][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 278.926032][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 278.934051][ C1] lec:lec_tx_timeout: lec0 [ 278.938681][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 280.666128][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 283.946255][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 283.954301][ C1] lec:lec_tx_timeout: lec0 [ 283.958926][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 288.966016][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 288.974127][ C1] lec:lec_tx_timeout: lec0 [ 288.978666][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 290.052535][T19920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3783'. [ 290.073436][T19925] validate_nla: 2 callbacks suppressed [ 290.073455][T19925] netlink: 'syz.0.3782': attribute type 21 has an invalid length. [ 290.083716][T19924] netlink: 'syz.3.3785': attribute type 4 has an invalid length. [ 290.098776][T19925] netlink: 'syz.0.3782': attribute type 6 has an invalid length. [ 290.118984][T19925] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3782'. [ 290.139116][T19919] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3786'. [ 290.245640][T19939] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3791'. [ 290.268944][T19938] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3789'. [ 290.279030][T19937] tipc: Enabling of bearer rejected, failed to enable media [ 290.314450][T19939] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3791'. [ 290.457470][T19954] syzkaller0: entered promiscuous mode [ 290.463453][T19954] syzkaller0: entered allmulticast mode [ 290.553595][T19973] netlink: 'syz.2.3801': attribute type 9 has an invalid length. [ 290.624927][T19979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3800'. [ 290.642946][T19978] netlink: 'syz.0.3803': attribute type 10 has an invalid length. [ 290.687301][T19978] veth1_macvtap: left promiscuous mode [ 290.823542][T19994] net_ratelimit: 18 callbacks suppressed [ 290.823561][T19994] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 290.848792][T19995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3806'. [ 290.949355][T20003] netlink: 'syz.4.3810': attribute type 1 has an invalid length. [ 290.973423][T20003] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3810'. [ 291.158382][T20019] netlink: 'syz.1.3816': attribute type 12 has an invalid length. [ 291.174143][T20019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3816'. [ 291.204656][T20019] netlink: 'syz.1.3816': attribute type 12 has an invalid length. [ 291.212991][ T6470] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.234963][ T6470] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.267833][T20030] xfrm1: entered allmulticast mode [ 291.277508][ T6468] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.285720][ T6468] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.466171][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 293.986054][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 293.994104][ C1] lec:lec_tx_timeout: lec0 [ 293.998781][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 298.586119][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 299.006064][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 299.014087][ C1] lec:lec_tx_timeout: lec0 [ 299.018712][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 301.788389][ T6470] bridge_slave_1: left allmulticast mode [ 301.794036][ T6470] bridge_slave_1: left promiscuous mode [ 301.800860][ T6470] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.809437][ T6470] bridge_slave_0: left allmulticast mode [ 301.815076][ T6470] bridge_slave_0: left promiscuous mode [ 301.821089][ T6470] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.879940][ T6470] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 301.892812][ T6470] bond15 (unregistering): (slave gretap2): Releasing active interface [ 301.911178][ T6470] dvmrp1 (unregistering): left allmulticast mode [ 301.926729][ T6470] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 302.109009][ T6470] bond4 (unregistering): (slave bridge4): Releasing active interface [ 302.591832][ T6470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.601440][ T6470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.611835][ T6470] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 302.621017][ T6470] bond0 (unregistering): Released all slaves [ 302.630794][ T6470] bond1 (unregistering): Released all slaves [ 302.641334][ T6470] bond2 (unregistering): (slave bond3): Releasing backup interface [ 302.651232][ T6470] bond2 (unregistering): Released all slaves [ 302.661515][ T6470] bond3 (unregistering): Released all slaves [ 302.672465][ T6470] bond4 (unregistering): Released all slaves [ 302.681950][ T6470] bond5 (unregistering): Released all slaves [ 302.691986][ T6470] bond6 (unregistering): Released all slaves [ 302.701159][ T6470] bond7 (unregistering): (slave bond8): Releasing backup interface [ 302.709803][ T6470] bond7 (unregistering): Released all slaves [ 302.725273][ T6470] bond8 (unregistering): Released all slaves [ 302.734188][ T6470] bond9 (unregistering): Released all slaves [ 302.744971][ T6470] bond10 (unregistering): Released all slaves [ 302.754939][ T6470] bond11 (unregistering): Released all slaves [ 302.767622][ T6470] bond12 (unregistering): (slave bond13): Releasing backup interface [ 302.775685][ T6470] bond13 (unregistering): left promiscuous mode [ 302.782932][ T6470] bond12 (unregistering): Released all slaves [ 302.795520][ T6470] bond13 (unregistering): Released all slaves [ 302.806503][ T6470] bond14 (unregistering): Released all slaves [ 302.815067][ T6470] bond15 (unregistering): Released all slaves [ 302.826909][ T6470] bond16 (unregistering): Released all slaves [ 302.880927][ T6470] tipc: Disabling bearer [ 302.886606][ T6470] tipc: Disabling bearer [ 302.892464][ T6470] tipc: Disabling bearer [ 302.900907][ T6470] tipc: Left network mode [ 302.910807][ T6470] IPVS: stopping master sync thread 12718 ... [ 303.184258][ T6470] batadv_slave_0: left promiscuous mode [ 303.192040][ T6470] hsr_slave_0: left promiscuous mode [ 303.199132][ T6470] hsr_slave_1: left promiscuous mode [ 303.204676][ T6470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.212836][ T6470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.224651][ T6470] pim6reg (unregistering): left allmulticast mode [ 303.233226][ T6470] pimreg (unregistering): left allmulticast mode [ 303.712186][ T6470] IPVS: stop unused estimator thread 0... [ 304.026164][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 304.034179][ C1] lec:lec_tx_timeout: lec0 [ 304.038683][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 309.046044][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 309.054063][ C1] lec:lec_tx_timeout: lec0 [ 309.058586][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 309.344309][T20052] __nla_validate_parse: 2 callbacks suppressed [ 309.344328][T20052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3819'. [ 309.364661][T20052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3819'. [ 309.382406][T20052] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3819'. [ 309.392082][T20052] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3819'. [ 309.402949][T20052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3819'. [ 309.413326][T20052] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 309.422152][T20052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.520352][T20061] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 309.529967][T20060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.563041][T20060] tipc: Enabled bearer , priority 0 [ 309.605491][T20060] syzkaller0: entered promiscuous mode [ 309.611081][T20060] syzkaller0: entered allmulticast mode [ 309.617368][T20060] tipc: Resetting bearer [ 309.626731][T20065] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3825'. [ 309.655029][T20078] tipc: Started in network mode [ 309.660153][T20078] tipc: Node identity , cluster identity 4711 [ 309.667298][T20078] tipc: Failed to obtain node identity [ 309.677113][T20078] tipc: Enabling of bearer rejected, failed to enable media [ 309.746886][T20058] tipc: Resetting bearer [ 309.810506][T20058] tipc: Disabling bearer [ 309.831141][T20095] bridge_slave_0: left allmulticast mode [ 309.838215][T20095] bridge_slave_0: left promiscuous mode [ 309.843934][T20095] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.855556][T20095] bridge_slave_1: left allmulticast mode [ 309.877206][T20095] bridge_slave_1: left promiscuous mode [ 309.884251][T20095] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.897881][T20095] bond0: (slave bond_slave_0): Releasing backup interface [ 309.905633][T20095] bond_slave_0: left promiscuous mode [ 309.915486][T20095] bond0: (slave bond_slave_1): Releasing backup interface [ 309.924286][T20095] bond_slave_1: left promiscuous mode [ 309.933732][T20095] team0: Port device team_slave_0 removed [ 309.942085][T20095] team0: Port device team_slave_1 removed [ 309.951821][T20095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.959991][T20095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.971913][T20095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.982088][T20095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.008556][T20104] veth1_macvtap: left promiscuous mode [ 310.150549][T20119] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 310.158185][T20115] netlink: 'syz.2.3838': attribute type 1 has an invalid length. [ 310.158205][T20115] netlink: 'syz.2.3838': attribute type 2 has an invalid length. [ 310.177112][T20120] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 310.204681][T20118] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3839'. [ 310.253248][T20118] netlink: 'syz.3.3839': attribute type 1 has an invalid length. [ 310.284610][T20118] netlink: 'syz.3.3839': attribute type 2 has an invalid length. [ 310.314485][T20135] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3844'. [ 310.419508][T20143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3846'. [ 310.450416][T20150] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3848'. [ 310.538655][T20158] syzkaller1: entered promiscuous mode [ 310.552996][T20158] syzkaller1: entered allmulticast mode [ 310.610751][T20163] tipc: Started in network mode [ 310.615707][T20163] tipc: Node identity , cluster identity 4711 [ 310.630932][T20163] tipc: Failed to obtain node identity [ 310.637393][T20163] tipc: Enabling of bearer rejected, failed to enable media [ 310.712940][T20169] netlink: 'syz.2.3855': attribute type 1 has an invalid length. [ 310.775369][T20177] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 310.789128][T20177] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 310.847427][T20185] macsec2: entered promiscuous mode [ 310.862083][T20185] macsec2: entered allmulticast mode [ 311.015490][T20195] unknown channel width for channel at 909000KHz? [ 311.023924][T20195] unknown channel width for channel at 909000KHz? [ 311.040976][T20195] unknown channel width for channel at 909000KHz? [ 311.850328][T20253] netlink: 'syz.4.3882': attribute type 4 has an invalid length. [ 311.874336][T20254] netlink: 'syz.4.3882': attribute type 4 has an invalid length. [ 311.993409][T20261] netlink: 'syz.1.3886': attribute type 33 has an invalid length. [ 312.172868][T20283] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 312.267085][T20292] netlink: 'syz.4.3894': attribute type 1 has an invalid length. [ 312.275115][T20292] netlink: 'syz.4.3894': attribute type 1 has an invalid length. [ 312.420074][T20307] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 312.573198][T20317] 8021q: adding VLAN 0 to HW filter on device bond2 [ 312.592770][T20326] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.600191][T20326] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.643737][T20317] bond2: (slave geneve3): making interface the new active one [ 312.653173][T20317] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 312.665553][T20333] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 312.752384][T20343] lo: entered promiscuous mode [ 312.771341][T20343] tunl0: entered promiscuous mode [ 312.805375][T20343] gre0: entered promiscuous mode [ 312.875495][T20343] erspan0: entered promiscuous mode [ 312.889691][T20343] ip_vti0: entered promiscuous mode [ 313.053024][T20363] vxlan0: entered promiscuous mode [ 313.058920][T20363] vxlan0: entered allmulticast mode [ 313.078813][ T6468] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.122165][ T6468] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.156042][ T6468] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.164804][ T6468] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.265530][T20388] vlan2: entered allmulticast mode [ 313.272469][T20388] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode [ 313.493903][T20411] IPVS: set_ctl: invalid protocol: 58 172.30.0.3:20001 [ 313.513982][T20412] IPVS: set_ctl: invalid protocol: 58 172.30.0.3:20001 [ 313.619402][T20423] syz.3.3938: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 313.643899][T20423] CPU: 1 UID: 0 PID: 20423 Comm: syz.3.3938 Not tainted syzkaller #0 PREEMPT(full) [ 313.643924][T20423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 313.643937][T20423] Call Trace: [ 313.643944][T20423] [ 313.643952][T20423] dump_stack_lvl+0x189/0x250 [ 313.643981][T20423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.644002][T20423] ? __pfx__printk+0x10/0x10 [ 313.644022][T20423] ? lock_release+0x4b/0x3e0 [ 313.644062][T20423] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 313.644084][T20423] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 313.644106][T20423] warn_alloc+0x214/0x310 [ 313.644130][T20423] ? stack_depot_save_flags+0x40/0x860 [ 313.644152][T20423] ? __pfx_warn_alloc+0x10/0x10 [ 313.644176][T20423] ? kasan_save_track+0x4f/0x80 [ 313.644197][T20423] ? xskq_create+0x56/0x170 [ 313.644217][T20423] ? xsk_init_queue+0xb0/0x110 [ 313.644236][T20423] ? xsk_setsockopt+0x4dc/0x8d0 [ 313.644256][T20423] ? do_sock_setsockopt+0x17c/0x1b0 [ 313.644272][T20423] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 313.644287][T20423] ? do_syscall_64+0xfa/0x3b0 [ 313.644309][T20423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.644330][T20423] __vmalloc_node_range_noprof+0x125/0x12f0 [ 313.644367][T20423] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 313.644390][T20423] ? xsk_setsockopt+0x462/0x8d0 [ 313.644408][T20423] ? __kasan_kmalloc+0x93/0xb0 [ 313.644431][T20423] vmalloc_user_noprof+0xad/0xf0 [ 313.644455][T20423] ? xskq_create+0xbf/0x170 [ 313.644474][T20423] xskq_create+0xbf/0x170 [ 313.644497][T20423] xsk_init_queue+0xb0/0x110 [ 313.644518][T20423] xsk_setsockopt+0x4dc/0x8d0 [ 313.644537][T20423] ? __pfx_xsk_setsockopt+0x10/0x10 [ 313.644557][T20423] ? __pfx_aa_sk_perm+0x10/0x10 [ 313.644581][T20423] ? lock_release+0x4b/0x3e0 [ 313.644604][T20423] ? aa_sock_opt_perm+0xff/0x1b0 [ 313.644625][T20423] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 313.644644][T20423] ? __pfx_xsk_setsockopt+0x10/0x10 [ 313.644664][T20423] do_sock_setsockopt+0x17c/0x1b0 [ 313.644682][T20423] __x64_sys_setsockopt+0x13f/0x1b0 [ 313.644700][T20423] do_syscall_64+0xfa/0x3b0 [ 313.644723][T20423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.644741][T20423] ? clear_bhb_loop+0x60/0xb0 [ 313.644760][T20423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.644777][T20423] RIP: 0033:0x7fe85b78ebe9 [ 313.644793][T20423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.644811][T20423] RSP: 002b:00007fe85c583038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 313.644831][T20423] RAX: ffffffffffffffda RBX: 00007fe85b9b5fa0 RCX: 00007fe85b78ebe9 [ 313.644843][T20423] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 313.644854][T20423] RBP: 00007fe85b811e19 R08: 0000000000000004 R09: 0000000000000000 [ 313.644865][T20423] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.644877][T20423] R13: 00007fe85b9b6038 R14: 00007fe85b9b5fa0 R15: 00007ffd64818658 [ 313.644899][T20423] [ 313.645023][T20423] Mem-Info: [ 313.945090][T20423] active_anon:9745 inactive_anon:0 isolated_anon:0 [ 313.945090][T20423] active_file:2961 inactive_file:39916 isolated_file:0 [ 313.945090][T20423] unevictable:768 dirty:56 writeback:0 [ 313.945090][T20423] slab_reclaimable:12461 slab_unreclaimable:176911 [ 313.945090][T20423] mapped:29256 shmem:5445 pagetables:1386 [ 313.945090][T20423] sec_pagetables:0 bounce:0 [ 313.945090][T20423] kernel_misc_reclaimable:0 [ 313.945090][T20423] free:1225030 free_pcp:32204 free_cma:0 [ 314.034073][T20423] Node 0 active_anon:35480kB inactive_anon:0kB active_file:11844kB inactive_file:159468kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116824kB dirty:224kB writeback:0kB shmem:17044kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13884kB pagetables:4616kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 314.116962][T20423] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 314.168993][T20423] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 314.230456][T20423] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 314.249691][T20423] Node 0 DMA32 free:1001648kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22736kB inactive_anon:0kB active_file:11844kB inactive_file:157900kB unevictable:1536kB writepending:224kB present:3129332kB managed:2557460kB mlocked:0kB bounce:0kB free_pcp:119920kB local_pcp:72524kB free_cma:0kB [ 314.318980][T20423] lowmem_reserve[]: 0 0 1 1 1 [ 314.323876][T20423] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 314.373136][T20456] team0 (unregistering): Port device team_slave_0 removed [ 314.389644][T20456] team0 (unregistering): Port device team_slave_1 removed [ 314.405589][T20423] lowmem_reserve[]: 0 0 0 0 0 [ 314.412811][T20423] Node 1 Normal free:3890832kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19752kB local_pcp:10088kB free_cma:0kB [ 314.412966][T20456] team0 (unregistering): Port device netdevsim0 removed [ 314.461249][T20423] lowmem_reserve[]: 0 0 0 0 0 [ 314.466605][T20423] Node 0 [ 314.467903][T20456] team0 (unregistering): Port device bond1 removed [ 314.483656][T20423] DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 314.497168][T20423] Node 0 DMA32: 1870*4kB (UM) 141*8kB (UME) 35*16kB (UME) 170*32kB (UME) 38*64kB (UME) 24*128kB (UME) 21*256kB (UE) 36*512kB (UM) 34*1024kB (U) 3*2048kB (M) 224*4096kB (M) = 1002384kB [ 314.517539][T20423] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 314.530006][T20423] Node 1 Normal: 218*4kB (UE) 63*8kB (UME) 45*16kB (UME) 61*32kB (UME) 19*64kB (UME) 8*128kB (UME) 6*256kB (UME) 4*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3890832kB [ 314.548195][T20423] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 314.557982][T20423] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 314.598488][T20423] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 314.622537][T20423] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 314.641522][T20423] 44268 total pagecache pages [ 314.648751][T20423] 0 pages in swap cache [ 314.653200][T20423] Free swap = 124996kB [ 314.676076][T20423] Total swap = 124996kB [ 314.685974][T20423] 2097051 pages RAM [ 314.689809][T20423] 0 pages HighMem/MovableOnly [ 314.701566][T20423] 425660 pages reserved [ 314.717763][T20423] 0 pages cma reserved [ 314.761507][T20486] __nla_validate_parse: 30 callbacks suppressed [ 314.761526][T20486] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3958'. [ 314.833632][T20490] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3958'. [ 314.853263][T20488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3954'. [ 314.864503][T20488] tipc: Started in network mode [ 314.875192][T20488] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 314.892110][T20488] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 314.900955][T20488] tipc: Enabled bearer , priority 10 [ 314.980824][T20496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3961'. [ 315.159082][T20514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3968'. [ 315.165672][T20517] openvswitch: netlink: EtherType 257 is less than min 600 [ 315.199976][T20522] validate_nla: 6 callbacks suppressed [ 315.199993][T20522] netlink: 'syz.1.3970': attribute type 32 has an invalid length. [ 315.225951][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6170 ms [ 315.233990][ C1] lec:lec_tx_timeout: lec0 [ 315.273805][T20527] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3972'. [ 315.312680][T20527] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 315.319965][T20527] IPv6: NLM_F_CREATE should be set when creating new route [ 315.327224][T20527] IPv6: NLM_F_CREATE should be set when creating new route [ 315.334443][T20527] IPv6: NLM_F_CREATE should be set when creating new route [ 315.337728][T20534] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3974'. [ 315.344907][T20527] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 315.682499][T20576] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3986'. [ 315.838385][T20587] netlink: 'syz.4.3989': attribute type 2 has an invalid length. [ 315.870672][T20587] pim6reg527: entered allmulticast mode [ 315.896233][ T5925] tipc: Node number set to 1 [ 316.038498][T20603] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3994'. [ 316.114117][T20612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3998'. [ 316.157743][T20622] netlink: 'syz.3.3999': attribute type 39 has an invalid length. [ 316.165841][T20616] netlink: 'syz.3.3999': attribute type 39 has an invalid length. [ 316.452275][T20648] netlink: 'syz.2.4010': attribute type 1 has an invalid length. [ 316.462391][T20648] netlink: 'syz.2.4010': attribute type 1 has an invalid length. [ 316.544640][T20653] tipc: Enabled bearer , priority 0 [ 316.554433][T20653] syzkaller0: entered promiscuous mode [ 316.562691][T20653] syzkaller0: entered allmulticast mode [ 316.580800][T20653] tipc: Resetting bearer [ 316.609553][T20660] dvmrp0: entered allmulticast mode [ 316.631768][T20652] tipc: Resetting bearer [ 316.653588][T20652] tipc: Disabling bearer [ 316.839500][T20680] tipc: Enabling of bearer rejected, failed to enable media [ 317.149464][ T1308] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 317.161221][ T1308] lec:lec_start_xmit: lec0:No lecd attached [ 317.190899][T20726] vlan4: entered promiscuous mode [ 317.197255][T20726] bridge0: entered promiscuous mode [ 317.550791][T20757] netlink: 'syz.3.4044': attribute type 11 has an invalid length. [ 317.848634][T20789] tipc: Enabled bearer , priority 0 [ 317.863438][T20789] syzkaller0: MTU too low for tipc bearer [ 317.870004][T20789] tipc: Disabling bearer [ 318.061830][T20805] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 318.129785][T20809] tipc: Enabling of bearer rejected, failed to enable media [ 318.284186][T20827] netlink: 'syz.0.4069': attribute type 1 has an invalid length. [ 318.309688][T20827] 8021q: adding VLAN 0 to HW filter on device bond1 [ 318.335377][T20827] bond1: (slave veth3): Enslaving as an active interface with a down link [ 318.371057][T20827] bond1: (slave veth5): Enslaving as an active interface with a down link [ 322.826039][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5660 ms [ 322.834062][ C1] lec:lec_tx_timeout: lec0 [ 326.746287][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 332.506179][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 339.582797][T20863] __nla_validate_parse: 7 callbacks suppressed [ 339.582814][T20863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4080'. [ 339.660845][T20871] IPVS: set_ctl: invalid protocol: 51 172.20.20.39:20003 [ 339.688831][T20871] IPVS: set_ctl: invalid protocol: 44 172.30.0.3:20002 [ 339.767747][T20878] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4085'. [ 339.796398][T20880] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4085'. [ 340.025046][T20907] veth1_to_bond: entered allmulticast mode [ 340.037887][T20907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4095'. [ 340.039982][T20897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4090'. [ 340.058291][T20907] veth1_to_bond (unregistering): left allmulticast mode [ 340.090990][T20907] bond0: (slave bond_slave_1): Releasing backup interface [ 340.120897][T20912] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 340.444634][T20938] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4105'. [ 340.464375][T20938] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4105'. [ 340.478734][T20929] kthread_run failed with err -4 [ 340.519246][T20938] batadv_slave_1: entered promiscuous mode [ 340.528052][T20938] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 340.698231][T20957] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4111'. [ 340.918357][T20979] netlink: 'syz.4.4118': attribute type 1 has an invalid length. [ 340.921458][T20982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4113'. [ 340.926565][T20979] netlink: 'syz.4.4118': attribute type 2 has an invalid length. [ 340.985647][T20981] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 341.053304][T20985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4119'. [ 341.065890][T20985] netlink: 'syz.4.4119': attribute type 10 has an invalid length. [ 341.114528][T20985] team0: Port device geneve0 added [ 341.320553][T21000] tipc: Enabling of bearer rejected, already enabled [ 341.475226][T21011] gretap0: entered promiscuous mode [ 341.481584][T21011] vlan3: entered promiscuous mode [ 341.551024][T21019] 8021q: adding VLAN 0 to HW filter on device bond2 [ 341.625266][T21019] 8021q: adding VLAN 0 to HW filter on device bond2 [ 341.687472][T21019] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 341.728225][T21019] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 341.948838][T21046] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 342.692995][T21099] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 342.716607][T21104] tc_dump_action: action bad kind [ 342.882256][T20881] Set syz1 is full, maxelem 65536 reached [ 343.090093][T21136] tipc: Started in network mode [ 343.095007][T21136] tipc: Node identity de01df958199, cluster identity 4711 [ 343.104822][T21136] tipc: Enabled bearer , priority 0 [ 343.113951][T21136] syzkaller0: entered promiscuous mode [ 343.119692][T21136] syzkaller0: entered allmulticast mode [ 343.133452][T21136] tipc: Resetting bearer [ 343.150503][T21134] tipc: Resetting bearer [ 343.162204][T21134] tipc: Disabling bearer [ 343.250175][T21146] netlink: 'syz.4.4176': attribute type 1 has an invalid length. [ 343.287778][T21145] netlink: 'syz.4.4176': attribute type 1 has an invalid length. [ 343.358349][T21145] bond3: (slave gretap1): making interface the new active one [ 343.368345][T21145] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 343.555130][T21169] netlink: 'syz.4.4181': attribute type 10 has an invalid length. [ 343.572594][T21169] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 343.964137][T21225] tipc: Started in network mode [ 343.969595][T21225] tipc: Node identity bae93507b53b, cluster identity 4711 [ 343.979036][T21225] tipc: Enabled bearer , priority 0 [ 344.065525][T21225] syzkaller0: entered promiscuous mode [ 344.106617][T21225] syzkaller0: entered allmulticast mode [ 344.112716][T21225] tipc: Resetting bearer [ 344.158460][T21224] tipc: Resetting bearer [ 344.233392][T21224] tipc: Disabling bearer [ 344.267502][T21251] netlink: 'syz.4.4206': attribute type 39 has an invalid length. [ 344.475896][T21256] bond3: entered promiscuous mode [ 344.487280][T21256] bond3: entered allmulticast mode [ 344.492779][T21256] 8021q: adding VLAN 0 to HW filter on device bond3 [ 344.511366][T21264] tipc: Enabling of bearer rejected, failed to enable media [ 344.518026][T21256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.642547][T21269] __nla_validate_parse: 20 callbacks suppressed [ 344.642564][T21269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4211'. [ 344.877678][T21292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4216'. [ 345.126337][T21313] netlink: 'syz.3.4222': attribute type 1 has an invalid length. [ 345.157220][T21313] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 345.169683][T21313] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 345.213677][T21318] gretap0: entered promiscuous mode [ 345.357191][T21341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4230'. [ 345.372611][T21346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4231'. [ 345.400173][T21341] openvswitch: netlink: Flow actions attr not present in new flow. [ 345.465234][T21356] netlink: 'syz.3.4234': attribute type 8 has an invalid length. [ 345.720912][T21388] smc: net device erspan0 applied user defined pnetid SYZ0 [ 345.804613][T21395] netlink: 'syz.3.4244': attribute type 10 has an invalid length. [ 345.825453][T21401] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4248'. [ 345.835224][T21395] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.842681][T21395] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.872277][T21395] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.879440][T21395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.886896][T21395] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.894069][T21395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.917889][T21395] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 346.010108][T21419] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 346.036861][T21424] pim6reg: entered allmulticast mode [ 346.073120][ T8248] lec:lec_start_xmit: lec0:No lecd attached [ 346.100869][T21432] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4257'. [ 346.212370][T21438] gtp0: entered promiscuous mode [ 346.217512][T21438] gtp0: entered allmulticast mode [ 346.280356][T21446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4262'. [ 346.290052][T21446] netlink: 'syz.3.4262': attribute type 1 has an invalid length. [ 346.298087][T21446] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4262'. [ 346.307753][T21446] netlink: 'syz.3.4262': attribute type 2 has an invalid length. [ 346.322725][T21446] netlink: 'syz.3.4262': attribute type 1 has an invalid length. [ 346.346952][T21450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4264'. [ 346.560252][T21468] bond4: entered promiscuous mode [ 346.565323][T21468] bond4: entered allmulticast mode [ 346.573129][T21468] 8021q: adding VLAN 0 to HW filter on device bond4 [ 346.600118][T21468] bond4 (unregistering): Released all slaves [ 346.747237][T21493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4274'. [ 346.902781][T21510] netlink: 'syz.0.4283': attribute type 1 has an invalid length. [ 346.914652][T21509] team0: Device vti0 is of different type [ 347.035803][T21519] bond0: entered allmulticast mode [ 347.044037][T21519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.123568][T21522] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 347.139977][T21522] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 347.156516][ T5925] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 347.295702][T21548] netlink: 'syz.4.4296': attribute type 10 has an invalid length. [ 347.311636][T21548] dummy0: entered promiscuous mode [ 347.319626][T21548] batman_adv: batadv0: Interface deactivated: dummy0 [ 347.330562][T21548] batman_adv: batadv0: Removing interface: dummy0 [ 347.344130][T21548] bridge0: port 2(dummy0) entered blocking state [ 347.355700][T21548] bridge0: port 2(dummy0) entered disabled state [ 347.362929][T21548] dummy0: entered allmulticast mode [ 347.369696][T21548] dummy0: left allmulticast mode [ 347.375328][T21548] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 347.520426][T21566] netlink: 'syz.4.4297': attribute type 13 has an invalid length. [ 347.611229][T21577] pim6reg1: entered promiscuous mode [ 347.616837][T21577] pim6reg1: entered allmulticast mode [ 347.644538][T21584] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 347.655656][T21583] IPVS: stopping backup sync thread 21584 ... [ 347.746645][ T5966] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 347.863876][T21605] tipc: Enabling of bearer rejected, failed to enable media [ 347.929482][T21609] netlink: 'syz.2.4312': attribute type 11 has an invalid length. [ 348.011971][T21619] netlink: 'syz.0.4313': attribute type 1 has an invalid length. [ 348.103853][T21626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.171130][T21633] netlink: 'syz.1.4319': attribute type 8 has an invalid length. [ 348.201225][T21628] syzkaller0: entered promiscuous mode [ 348.207483][T21628] syzkaller0: entered allmulticast mode [ 348.280225][T21643] netlink: 'syz.1.4321': attribute type 1 has an invalid length. [ 348.385055][T21651] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 348.420770][T21656] netlink: 'syz.4.4325': attribute type 10 has an invalid length. [ 348.511967][T21651] veth7: entered promiscuous mode [ 348.520582][T21651] bond4: (slave veth7): Enslaving as a backup interface with a down link [ 348.532378][T21658] team_slave_0: entered allmulticast mode [ 349.256903][T21716] erspan0: entered allmulticast mode [ 349.545018][ T6468] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.558157][T21736] lo: entered promiscuous mode [ 349.569527][T21736] tunl0: entered promiscuous mode [ 349.581969][T21736] gre0: entered promiscuous mode [ 349.590683][T21736] 0ªî{X¹¦: entered promiscuous mode [ 349.605995][T21736] 0ªî{X¹¦: left allmulticast mode [ 349.618736][T21736] erspan0: entered promiscuous mode [ 349.624367][T21736] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe1ac: 0000 [#1] SMP KASAN PTI [ 349.636271][T21736] KASAN: probably user-memory-access in range [0x00000000ffff0d60-0x00000000ffff0d67] [ 349.645832][T21736] CPU: 0 UID: 0 PID: 21736 Comm: syz.3.4344 Not tainted syzkaller #0 PREEMPT(full) [ 349.655276][T21736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 349.665323][T21736] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690 [ 349.671039][T21736] Code: c9 45 bb f7 c6 05 48 f8 88 05 01 48 c7 c7 00 a1 9e 8c be 97 05 00 00 48 c7 c2 80 a1 9e 8c e8 1a 20 99 f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 e4 ae 1e f8 4d 8b 2c 24 4d 39 f5 [ 349.690640][T21736] RSP: 0018:ffffc90004c368f8 EFLAGS: 00010206 [ 349.696700][T21736] RAX: ffffffff8a046535 RBX: 000000001fffe1ac RCX: 0000000000080000 [ 349.704652][T21736] RDX: ffffc90015227000 RSI: 000000000001d6dd RDI: 000000000001d6de [ 349.712618][T21736] RBP: ffff888079b37c20 R08: ffffffff8f5381a7 R09: 1ffffffff1ea7034 [ 349.720575][T21736] R10: dffffc0000000000 R11: fffffbfff1ea7035 R12: 00000000ffff0d60 [ 349.728532][T21736] R13: dffffc0000000000 R14: ffff888031d61e00 R15: 1ffff1100f366f84 [ 349.736494][T21736] FS: 00007fe85c5626c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 349.745407][T21736] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 349.751972][T21736] CR2: 000000110c3a5d68 CR3: 0000000025854000 CR4: 00000000003526f0 [ 349.759929][T21736] Call Trace: [ 349.763190][T21736] [ 349.766104][T21736] inetdev_event+0x2a7/0x15b0 [ 349.770769][T21736] ? __pfx_inetdev_event+0x10/0x10 [ 349.775866][T21736] notifier_call_chain+0x1b3/0x3e0 [ 349.780965][T21736] __dev_notify_flags+0x18d/0x2e0 [ 349.785977][T21736] ? __pfx___dev_notify_flags+0x10/0x10 [ 349.791522][T21736] ? __dev_change_flags+0x4cc/0x6d0 [ 349.796722][T21736] ? __pfx___dev_change_flags+0x10/0x10 [ 349.802258][T21736] ? netif_state_change+0x256/0x3a0 [ 349.807458][T21736] ? __pfx_netif_state_change+0x10/0x10 [ 349.812994][T21736] netif_change_flags+0xe8/0x1a0 [ 349.817918][T21736] do_setlink+0xc55/0x41c0 [ 349.822321][T21736] ? rcu_is_watching+0x15/0xb0 [ 349.827070][T21736] ? __schedule+0x17ae/0x4cc0 [ 349.831741][T21736] ? __pfx_do_setlink+0x10/0x10 [ 349.836577][T21736] ? do_raw_spin_lock+0x121/0x290 [ 349.841591][T21736] ? rcu_is_watching+0x15/0xb0 [ 349.846337][T21736] ? rcu_is_watching+0x15/0xb0 [ 349.851081][T21736] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 349.856960][T21736] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 349.863274][T21736] ? rcu_is_watching+0x15/0xb0 [ 349.868024][T21736] ? __mutex_lock+0xd3b/0x1350 [ 349.872777][T21736] ? __mutex_lock+0x5bb/0x1350 [ 349.877537][T21736] ? rtnl_newlink+0x8db/0x1c70 [ 349.882333][T21736] ? __pfx___mutex_lock+0x10/0x10 [ 349.887351][T21736] ? ns_capable+0x8a/0xf0 [ 349.891662][T21736] ? rtnl_link_get_net_capable+0x16a/0x350 [ 349.897452][T21736] rtnl_newlink+0x149f/0x1c70 [ 349.902119][T21736] ? netlink_sendmsg+0x805/0xb30 [ 349.907052][T21736] ? __pfx_rtnl_newlink+0x10/0x10 [ 349.912113][T21736] ? rcu_is_watching+0x15/0xb0 [ 349.916860][T21736] ? nlmon_xmit+0xb0/0x100 [ 349.921257][T21736] ? kmem_cache_free+0x18f/0x400 [ 349.926194][T21736] ? rcu_is_watching+0x15/0xb0 [ 349.930948][T21736] ? __dev_queue_xmit+0x27b/0x3b50 [ 349.936044][T21736] ? __local_bh_enable_ip+0x12d/0x1c0 [ 349.941397][T21736] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 349.947106][T21736] ? __dev_queue_xmit+0x27b/0x3b50 [ 349.952200][T21736] ? lock_release+0x4b/0x3e0 [ 349.956779][T21736] ? __dev_queue_xmit+0x27b/0x3b50 [ 349.961872][T21736] ? __dev_queue_xmit+0x27b/0x3b50 [ 349.966963][T21736] ? __dev_queue_xmit+0x1d79/0x3b50 [ 349.972147][T21736] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 349.977254][T21736] ? rcu_is_watching+0x15/0xb0 [ 349.982008][T21736] ? lock_release+0x4b/0x3e0 [ 349.986590][T21736] ? bpf_lsm_capable+0x9/0x20 [ 349.991253][T21736] ? security_capable+0x7e/0x2e0 [ 349.996181][T21736] ? __pfx_rtnl_newlink+0x10/0x10 [ 350.001193][T21736] rtnetlink_rcv_msg+0x7cc/0xb70 [ 350.006127][T21736] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 350.011222][T21736] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 350.016666][T21736] ? ref_tracker_free+0x63a/0x7d0 [ 350.021675][T21736] ? __asan_memcpy+0x40/0x70 [ 350.026255][T21736] ? __pfx_ref_tracker_free+0x10/0x10 [ 350.031634][T21736] netlink_rcv_skb+0x208/0x470 [ 350.036389][T21736] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 350.041837][T21736] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 350.047118][T21736] netlink_unicast+0x82c/0x9e0 [ 350.051872][T21736] ? __pfx_netlink_unicast+0x10/0x10 [ 350.057143][T21736] ? netlink_sendmsg+0x642/0xb30 [ 350.062065][T21736] ? skb_put+0x11b/0x210 [ 350.066318][T21736] netlink_sendmsg+0x805/0xb30 [ 350.071071][T21736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.076354][T21736] ? aa_sock_msg_perm+0xf1/0x1d0 [ 350.081290][T21736] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 350.086561][T21736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.091834][T21736] __sock_sendmsg+0x21c/0x270 [ 350.096505][T21736] ____sys_sendmsg+0x505/0x830 [ 350.101281][T21736] ? __pfx_____sys_sendmsg+0x10/0x10 [ 350.106576][T21736] ? import_iovec+0x74/0xa0 [ 350.111077][T21736] ___sys_sendmsg+0x21f/0x2a0 [ 350.115747][T21736] ? __pfx____sys_sendmsg+0x10/0x10 [ 350.120945][T21736] ? __fget_files+0x2a/0x420 [ 350.125530][T21736] ? __fget_files+0x3a0/0x420 [ 350.130207][T21736] __x64_sys_sendmsg+0x19b/0x260 [ 350.135140][T21736] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 350.140581][T21736] ? rcu_is_watching+0x15/0xb0 [ 350.145332][T21736] ? do_user_addr_fault+0xc8a/0x1390 [ 350.150609][T21736] ? rcu_is_watching+0x15/0xb0 [ 350.155358][T21736] do_syscall_64+0xfa/0x3b0 [ 350.159853][T21736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.165913][T21736] ? clear_bhb_loop+0x60/0xb0 [ 350.170597][T21736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.176491][T21736] RIP: 0033:0x7fe85b78ebe9 [ 350.180908][T21736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.200675][T21736] RSP: 002b:00007fe85c562038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.209079][T21736] RAX: ffffffffffffffda RBX: 00007fe85b9b6090 RCX: 00007fe85b78ebe9 [ 350.217034][T21736] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 350.224984][T21736] RBP: 00007fe85b811e19 R08: 0000000000000000 R09: 0000000000000000 [ 350.232940][T21736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.240897][T21736] R13: 00007fe85b9b6128 R14: 00007fe85b9b6090 R15: 00007ffd64818658 [ 350.248868][T21736] [ 350.251886][T21736] Modules linked in: [ 350.256999][T21736] ---[ end trace 0000000000000000 ]--- [ 350.286712][T21736] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690 [ 350.292622][T21736] Code: c9 45 bb f7 c6 05 48 f8 88 05 01 48 c7 c7 00 a1 9e 8c be 97 05 00 00 48 c7 c2 80 a1 9e 8c e8 1a 20 99 f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 e4 ae 1e f8 4d 8b 2c 24 4d 39 f5 [ 350.318514][T21736] RSP: 0018:ffffc90004c368f8 EFLAGS: 00010206 [ 350.324751][T21736] RAX: ffffffff8a046535 RBX: 000000001fffe1ac RCX: 0000000000080000 [ 350.332946][T21736] RDX: ffffc90015227000 RSI: 000000000001d6dd RDI: 000000000001d6de [ 350.345693][T21736] RBP: ffff888079b37c20 R08: ffffffff8f5381a7 R09: 1ffffffff1ea7034 [ 350.354747][T21736] R10: dffffc0000000000 R11: fffffbfff1ea7035 R12: 00000000ffff0d60 [ 350.363436][T21736] R13: dffffc0000000000 R14: ffff888031d61e00 R15: 1ffff1100f366f84 [ 350.372340][T21736] FS: 00007fe85c5626c0(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 350.384920][T21736] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 350.392452][T21736] CR2: 00007ffe5ab21210 CR3: 0000000025854000 CR4: 00000000003526f0 [ 350.400928][T21736] Kernel panic - not syncing: Fatal exception [ 350.407171][T21736] Kernel Offset: disabled [ 350.411481][T21736] Rebooting in 86400 seconds..