last executing test programs: 4.391121123s ago: executing program 0 (id=3913): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) socket$inet(0xa, 0x801, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x4, 0x0}}]}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000100)={r8, 0x4, 0x0, 0x80000001}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) 3.348912819s ago: executing program 0 (id=3920): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, 0x0, 0x0) write(r1, &(0x7f00000000c0)="4b0003000000", 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x2}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x2e}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x78}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) sendto$inet(r0, &(0x7f0000000580)='W', 0xfffffffffffffd3d, 0x10008095, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000000c0)) r10 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r10, &(0x7f0000001ec0)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)="739f5513d257a3b51d70b10d7f1be9e6507b55223d102382dbd5", 0x1a}, {&(0x7f0000000100)="1902a4bfb057c2b60283cda11281b0ce32df8b5a8bf341a9ac7fad79373711de043bc87b3bc84656211719ae28758b0d421551153044220575fe6c692075b9d564561f49c7bd058f56debd9e97dfd2b447e2318ad3d2511b5d09b76b95c6a140647a83c3d0a3912449e677350f9d9bee017cce134de7426e0a5816c4f7aadb200d4eabe477f7c058ceeb651cb53c5989098f5fe702f33398459cb5d4394d40024850aebfebda64f1325f3921ed03512c26fa5ad3bcd6f4b5a9d7255fddf03037fc96999ef48b0d55a770e6d9311e60254f43090717abd2644755c47ab6f9", 0xde}, {&(0x7f0000000380)="32955e4c7fcfb99805f14b88c1588bcc0d3216810885e8f263cbd602f92ce71ad55e3300a7156a1aa7a0224fe5a221e0e3fa09c9777f4e0cc0d6ffb97003d7d9263be4cdca42ba3e58a876ce7b0f61c7b12ebf0eedc4f4d17c487c2e5b2091bce88550ed8e4ab514910de6c1fa2f6355a0affa5da450830722ae9369fe9d4650a0968b7d2dbd67c9baab938971f503565a9715fa10588e6d78690247cb7d6081e5e1a1919fc3aca8a097286d09a252a68f396ee4d7a751bf32f90dc28f70b5c290e23fa798a8690a45d32e2bc55eff59a2b8b64ded56fbe02deffd879deeddba96249d73457e1b3ea9a0ae76f41294", 0xef}, {&(0x7f0000000240)="caaec4ca1c5277a628cc541068aa53f16c33ae2327d4b6e61517d5a619cc493ba8eb9814a92083376d14a3", 0x2b}], 0x4, &(0x7f0000000480)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x369}}, @authinfo={0x18, 0x84, 0x6, {0x10}}], 0x48, 0xc0}, {&(0x7f0000000500)=@in6={0xa, 0x4e24, 0xe, @remote, 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000005c0)="9d90f884e02506721d470755bf43ac36c1010a8ac6ecfab4d58a4be34b171a782b12a53f513c62ef1ae6f563db4b2f271923f2b2e987e528fc8f5becf703f4b8d4f9ecbc5ee0878d9e0b145803c49a91ad69274fabeab588a4537cb735bcb587ca9e50913cd03dc306fb8b821751ee58b7b5c47a84444e7da25786d6777c731eeb3306a9e9ad2677e9e47e", 0x8b}, {&(0x7f0000000680)="f8c199908ad9474b6bdef82fd9d8ab0d8db189fa5080711eaba34d71d8cc780f5e1780552655b389739dddcd036f553daacaea2c45892638c2a3559680dcb9ba116a2150fb8bcaa29781f26151441aee7ec283e94c92beb86e671be6f28919d155a450dc68638e39b9d85e36e6eaf59fc9eb90f82ab5645f0611c2e3c2f248d39510", 0x82}, {&(0x7f0000000740)="798d650df9d5e91d0a4eeb2ac70b20350a32db57155b76ac9bc8ee38fa5b251c6eb6d08a6faff0e6aed3de23094e5507bf7d2b412481a5062a670664bc6a02b8faa923d55909e68742b32455577933ba15ddf69fca19b2393db2641f0a277999ae368d5345e6b48ff481b5973ff84d4142a841ac17384eeb0f476c7fc978824901ba413c94ef53e6c6e8a1e27aa77b321c790af8147f8f5747e14e603341c269355819706ad547", 0xa7}, {0x0}], 0x4, 0x0, 0x0, 0x8000}, {&(0x7f0000000880)=@in={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000001dc0)=[{&(0x7f00000008c0)="989367041f8f8c8eb6c76105fcf5e8ee52500b3102d629bbfbf1ebfd1f951847d03c86d6b73a970bf5e7339aea2c8133ab91014c6287981fb095f3a0113b4686605a175983be8002d8ab755565958555cddd4a1dccb8eaea987c6e2bdc176a40b1ddb162ea002ac98d6aa8a7933be2133c2554c2643ea8e141cfda9f03abea8a823290e3cfcbde062f929c67fb478d0396d52ad29253a50596dd766661c996ec4a407bd56ddc19123cda95d5698773aaa7d22837724dcc409df31e874f61b889736a305c8b1f36ba3c28b605046bbbd4c6de0ce856302519032b2231b88e86ce3c41ba551e98fb24854e3e5b91b3a13b6a66a4", 0xf3}, {&(0x7f00000009c0)="c74f0f1c5dbd14d50a91a7e7ecc6ec03230347354e084afdebcb715a175150b14e44fc1de247f8860eb943f7a0e79965656275d34f21e40a8bb711bccd7e016c9ff71106aa165cdd7455c8bb2ad1f3db15fd2caa6b", 0x55}, {&(0x7f0000000a40)="8a32b02766378e8ef05c59ed07eb01005e738ec73970393a6ebb74", 0x1b}, {&(0x7f0000000a80)}, {&(0x7f0000000b00)="4a5a6ced11ac8fa89841b250a7465d4c4d0934fa20cf", 0x16}, {&(0x7f0000000b40)="3e896e0169b053ea6f935ce91ceaec8658170331f057c0e855786ed247a50dcc4383b2eea2511c50b22872e831b55bd46dc11d60e1181235184e5e61c7054a09d619bdfda556b76438f342efe32f357716c30362946ce1ca2770a8f1991f17b918ff389ba3673373f1203eaba22a558cca58d3a423ad9b0e22c6182b85c71b1ca723bbf304e1eaeeb1", 0x89}, {&(0x7f0000000c00)="3b4762f66aac60054bf529d2bc85e990e34201b5733d3d4cd67a2ff14e7a7945f2de137e9961aa3ceafd6dccc069f73330811de781811b4e12e4268ec7d06dbec85b552b22afc8069f425f96fc2935ed24c9417813c567fba61fa38c0b057f34b0e9295649dd57d0e61d57a1cc8dfcd0e1776daec7d44fb7a28eeb50e4df5eccb322f6921f1bffd46333473f35af0e3256f903ffc332add99a78cb6b9028a0a54594714d6936a1393e040aa6c31c59ce7450ec1511957723654dd4e6fcf75b46b8f72a630c023beeb533dd86a079ad980e7b2b5afd64025ff3", 0xd9}, {&(0x7f0000000d00)="7f7ddd697b37155f19c50502ec8af0a331a8648092a1acc56c3efc82e95580e1e4785368924fe1f8c77ae754a9b3ee85ba09a44a39cef411ab44cd87fa05879f7de7cf2fc2be7279406f88075012439a1c8f09def803ca11a02bda27182a2ea8f9b654", 0x63}, {&(0x7f0000000d80)="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", 0x1000}, {&(0x7f0000001d80)="d628", 0x2}], 0xa, &(0x7f0000001e80)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast1}], 0x18, 0x8000}], 0x3, 0x40) 3.346356355s ago: executing program 3 (id=3921): socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet(0x2b, 0x801, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x10}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x94) sendmmsg$sock(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}, {{&(0x7f0000000700)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0}}], 0x400000000000297, 0x48094) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) socket(0x10, 0x803, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r5) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000200)={'virt_wifi0\x00', @multicast}) 3.313033344s ago: executing program 4 (id=3922): socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000006911da000000000007cd8bf4000000009500000c00000000bcf4e4a30e96c21600f4afb6d0954c68c0dec1952d9a030799aef4b1eafe1013bc52ccd2f43ec4e670e61e78bc8db65c0dc1492bcb"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x19) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r2, 0x11, 0x66, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=@ipmr_newroute={0x34, 0x18, 0x100, 0x70bd2c, 0x25dfdbfc, {0x80, 0x20, 0x14, 0x40, 0xfd, 0x4, 0xfe, 0x1, 0x800}, [@RTA_SPORT={0x6, 0x1c, 0x4e21}, @RTA_GATEWAY={0x8, 0x5, @multicast2}, @RTA_FLOW={0x8, 0xb, 0x31}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x20040040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) unshare(0x22020600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r4 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='mm_lru_insertion\x00', r5}, 0x10) r6 = epoll_create1(0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) epoll_wait(r6, &(0x7f000000affb)=[{}], 0x1, 0x7fff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x40010) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) 2.99120893s ago: executing program 4 (id=3923): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100", 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x4, 0x0}}]}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000100)={r6, 0x4, 0x0, 0x80000001}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001"], 0x98}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 2.619981067s ago: executing program 2 (id=3925): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0, 0x0, 0x8}, 0x18) unshare(0x62040200) socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x19}}, &(0x7f0000000480)='GPL\x00'}, 0x80) write$tun(0xffffffffffffffff, 0x0, 0x3e) socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r5, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, r6, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close(r3) close(r2) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="1c0100002b00010000000000fcdbdf250a01f2800c00090008ac0f0000000000140001"], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001114000100000000000000000800030002000000080001000000000006004f000100"], 0x28}, 0x1, 0x0, 0x0, 0x4851}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9) 2.450682678s ago: executing program 0 (id=3927): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x1, 0x8004) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002a00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b00)=ANY=[], 0x1f0, 0x80}], 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x30, 0x4040001}], 0x1, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) unshare(0x62040200) write$tun(0xffffffffffffffff, 0x0, 0x3e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.34176443s ago: executing program 3 (id=3928): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) unshare(0x6a040000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020600000000000000000000000500000000000000001b7f5b920d6a47d20c0000000900020200000000000000001100030068f733e31f58cbb8d061726b0000001000000000009c71bc311c55db5f8acdfedecfc288afdfa91d947df74d903dae6220d1c488b71d7e998e1d46a1f72eb7157126495e9dce8940e2ef7f7bceb6e93ebcc742c10971228d6d"], 0x58}}, 0x0) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000400"/28], 0x50) unshare(0x600) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000600), 0x4, r4, 0x4}, 0x38) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00800000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x401, @empty}], 0x1c) sendto$inet6(r5, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtclass={0xc4, 0x28, 0x100, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xe}, {0x6, 0x13}, {0x5, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x18, 0x3}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x74, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x5, 0xde60, 0x80000001}}, @TCA_HFSC_FSC={0x10, 0x2, {0x2, 0x3, 0x8}}, @TCA_HFSC_RSC={0x10, 0x1, {0xe322, 0x30e, 0x100}}, @TCA_HFSC_USC={0x10, 0x3, {0xc, 0x6, 0x200}}, @TCA_HFSC_FSC={0x10, 0x2, {0xe7a4, 0xc219, 0xbdc}}, @TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x1, 0x80000001}}, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0xffff, 0xa}}]}}, @TCA_RATE={0x6, 0x5, {0xe, 0x2}}]}, 0xc4}}, 0x0) unshare(0x20000400) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, 0x0, 0x0) recvmmsg(r6, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)=""/217, 0xd9}, {&(0x7f0000000280)=""/201, 0xc9}, {&(0x7f0000000380)=""/151, 0x97}, {&(0x7f0000000440)=""/145, 0x91}, {0xffffffffffffffff}, {&(0x7f0000000640)=""/235, 0xeb}], 0x6, &(0x7f00000007c0)=""/214, 0xd6}, 0x7}, {{&(0x7f00000008c0)=@hci, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f0000000100)=""/47, 0x2f}, {0x0}], 0x3, &(0x7f0000001b40)=""/73, 0x49}, 0x4ccc0fb}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/4, 0x4}], 0x2}, 0xffffff58}], 0x3, 0x0, &(0x7f0000002e80)) 2.07052477s ago: executing program 4 (id=3929): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x99, 0x99, 0xa, [@var={0x10, 0x0, 0x0, 0xe, 0x4, 0x1}, @const={0x2, 0x0, 0x0, 0xa, 0x2}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x4, 0x7}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x4, 0xffffffffffffffff}, @func={0xd, 0x0, 0x0, 0xc, 0x2}, @datasec={0x6, 0x2, 0x0, 0xf, 0x1, [{0x4, 0x9, 0xfb5}, {0x3, 0x1, 0xfffffffc}], '&'}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x39}, @fwd={0xa}, @var={0xf, 0x0, 0x0, 0xe, 0x4, 0x1}]}, {0x0, [0x6f, 0x30, 0x2e, 0x2e, 0x5f, 0x30, 0x5f, 0x30]}}, &(0x7f00000004c0)=""/167, 0xbe, 0xa7, 0x1, 0x4}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, r0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='rpc_call_rpcerror\x00', r1, 0x0, 0x2}, 0xffffffffffffff05) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'macsec0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r4, &(0x7f00000002c0)=ANY=[@ANYRES8=r2], 0x33) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendfile(r4, r3, 0x0, 0x10000) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r6) r7 = socket(0x2, 0x80805, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r9 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r9, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r10 = socket$kcm(0x29, 0x2, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r12 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r12, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000040)={r12, r11}) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000040)={r9, r8}) r13 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r13, 0x29, 0x2c, 0x0, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000200001000000000000fdffff80000000000000000000000008000d"], 0x38}}, 0x0) close(r10) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r15, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[{0x10, 0x84, 0x2}], 0x10}}], 0x1, 0x40001) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000580)=0x2, 0x4) 1.845369868s ago: executing program 2 (id=3931): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@dev={0xac, 0x14, 0x14, 0x1a}, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390004001300034700bb5be1c3e4feff060000000000190004000400ad0002000000000000060488627df400f93132", 0x2f}], 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0xc0}}, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @empty, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) r5 = socket$netlink(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x18) bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004000000040000000000010000000000", @ANYRES32=r7, @ANYBLOB="00000000000000ff0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x48) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1e, 0x2, 0x6, &(0x7f0000000480)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r8, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1.595980641s ago: executing program 3 (id=3932): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x3, 0x7, 0x40000000000009}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x2f}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008040) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x24, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8800) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl(r4, 0x1, &(0x7f00000001c0)="0feb79dba4d547dbfc1dd208eaa30956048fec8af59ac89db5fa9990264676e2986faafd3ea5dae7bc92a1bc24e351e85f1d5bd5ddeaca8f55b490bd77a9bdc487a1216409507ef4a44e") socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x80000001, 0x7ff, 0x24e, 0x80000000, 0x5}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x9, @random="b33ccef3b175"}}]}]}]}, 0x6c}}, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={&(0x7f0000000680)="91575735f89f8a8a56acebdbdb1dc5bfc949d314c5761e311d7aed98e588112b7d444b3e711b3fc9da7a5705a74ee1ddf81f32ddbdc439c20d2378daf09979410e64d95e21d0eb619407272b4ffd25e13605d066bbb2b9c43122824093dbcb05f84b293d6f74e8f7d6626e9cbbc7bb0cea56b184c6d17803814132c0f48987371a4fbfadff4ed61262e77d5501b6ea14b05a152ee4c83fe47d14d2bbc530cfde24c0ec96500ee6b92820386c1af5f4a1852215910be45c48d54d4f08394c704053f5", &(0x7f0000000340)=""/176, &(0x7f0000000900)="a5713388350afb0d0177fb9a7ea20ecee9d786c80fac0a13635dc8d39f9a44d1643f642e275ea6d505e9047e6a0acc75755eeba21a5f26f660bdb9b8ebf04053d8ed5452ca60caf83e8ec6a2bb3c89cfec2cb250e467773c37485891dd6e072ce4b8f17f1e409c42f0ffe59a5b19c278a6bd76aa7ed1bed1ac", &(0x7f0000000980)="14b9ad004f7edf33fe41951c5413163ff73e5ed525a7882dd9648346bc7b0ebecf00dd2ab19cbfebc9829c8c661b765b0bda3952138d47af0ee94a61be8259ddfd2aba3de50d2ce591ae791b627e7ed8e36f58cc33696863533e2893873582234ecf783d990ffc9ec90f323ef51e6f8d28187fb773f816d28580a07dd3c3cf57c318f163ad20ff89fcab5c54080eabf9658a680797ae394274797c6c3cfe8a4ebb81aad00ca63550be6f0a2cedbb362fc7f40cffade01d3eafd0235f48b14d4384aed584", 0xfffffff7, 0xffffffffffffffff, 0x4}, 0x38) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f00000000c0)=0xff, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r7, &(0x7f0000000a80)={@val={0x0, 0x800}, @val={0x1, 0x5, 0x6, 0x3, 0x80, 0x5}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @remote, @remote, @local, @rand_addr=0x64010100}}, 0x2a) unshare(0x74030500) socket(0xa, 0x3, 0x87) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000100000000000000440025"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1.583156788s ago: executing program 1 (id=3933): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@dev={0xac, 0x14, 0x14, 0x1a}, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390004001300034700bb5be1c3e4feff060000000000190004000400ad0002000000000000060488627df400f93132", 0x2f}], 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0xc0}}, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @empty, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) r5 = socket$netlink(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x18) bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004000000040000000000010000000000", @ANYRES32=r7, @ANYBLOB="00000000000000ff0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x48) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1e, 0x2, 0x6, &(0x7f0000000480)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r8, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1.435954584s ago: executing program 2 (id=3934): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) socket$inet(0xa, 0x801, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x4, 0x0}}]}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000100)={r8, 0x4, 0x0, 0x80000001}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) 1.368674378s ago: executing program 1 (id=3935): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c00"], 0x124}}, 0x0) unshare(0x22020400) mmap(&(0x7f0000ff0000/0x3000)=nil, 0x3000, 0xb635773f04ebbeea, 0x30, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0c00000001200ad82f03b3a14ae6e3d46beea53a42d09d41b7361f04bab874c5eb3fb1c8fa071fdc3e04144bf8aa59e6cbdd3a5b2cf3a84b818c8b4e252bfd01b192facc9c95de345ff539bd78c110bfb0eb65f10a168374504ae4080df5bdf23a298874dd6686667d141f202b9df2854bed448998b7e7d71f0b7f461873bc18dc4c355f9b79fcaa7af735377d4751", @ANYRES16=r3, @ANYBLOB="010025bd7000fedbdf2524000000"], 0x14}, 0x1, 0x0, 0x0, 0x8814}, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x54c, 0x4, 0x3, 0x3, 0xc, 0x6, 0x7}, 0x1c) recvfrom(r4, &(0x7f0000000040)=""/18, 0x12, 0x6667b9fa4a4fda0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e20, 0x4, 0xfffe, 0x200, 0x2}, {0x10010, 0x65ad, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x8000000000000000, 0xfffffffffffffff7}, {0x2, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@empty, 0x2, 0x6c}, 0xa, @in=@loopback, 0x40000, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4891a, 0xa}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x10}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x6000000) 1.360830344s ago: executing program 0 (id=3936): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r1, 0x2, 0x6, @local}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) 1.176980275s ago: executing program 1 (id=3937): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, 0x0, 0x0) write(r1, &(0x7f00000000c0)="4b0003000000", 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x2}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x2e}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x78}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) sendto$inet(r0, &(0x7f0000000580)='W', 0xfffffffffffffd3d, 0x10008095, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000000c0)) r10 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r10, &(0x7f0000001ec0)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)="739f5513d257a3b51d70b10d7f1be9e6507b55223d102382dbd5", 0x1a}, {&(0x7f0000000100)="1902a4bfb057c2b60283cda11281b0ce32df8b5a8bf341a9ac7fad79373711de043bc87b3bc84656211719ae28758b0d421551153044220575fe6c692075b9d564561f49c7bd058f56debd9e97dfd2b447e2318ad3d2511b5d09b76b95c6a140647a83c3d0a3912449e677350f9d9bee017cce134de7426e0a5816c4f7aadb200d4eabe477f7c058ceeb651cb53c5989098f5fe702f33398459cb5d4394d40024850aebfebda64f1325f3921ed03512c26fa5ad3bcd6f4b5a9d7255fddf03037fc96999ef48b0d55a770e6d9311e60254f43090717abd2644755c47ab6f9", 0xde}, {&(0x7f0000000380)="32955e4c7fcfb99805f14b88c1588bcc0d3216810885e8f263cbd602f92ce71ad55e3300a7156a1aa7a0224fe5a221e0e3fa09c9777f4e0cc0d6ffb97003d7d9263be4cdca42ba3e58a876ce7b0f61c7b12ebf0eedc4f4d17c487c2e5b2091bce88550ed8e4ab514910de6c1fa2f6355a0affa5da450830722ae9369fe9d4650a0968b7d2dbd67c9baab938971f503565a9715fa10588e6d78690247cb7d6081e5e1a1919fc3aca8a097286d09a252a68f396ee4d7a751bf32f90dc28f70b5c290e23fa798a8690a45d32e2bc55eff59a2b8b64ded56fbe02deffd879deeddba96249d73457e1b3ea9a0ae76f41294", 0xef}, {&(0x7f0000000240)="caaec4ca1c5277a628cc541068aa53f16c33ae2327d4b6e61517d5a619cc493ba8eb9814a92083376d14a3", 0x2b}], 0x4, &(0x7f0000000480)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x369}}, @authinfo={0x18, 0x84, 0x6, {0x10}}], 0x48, 0xc0}, {&(0x7f0000000500)=@in6={0xa, 0x4e24, 0xe, @remote, 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000005c0)="9d90f884e02506721d470755bf43ac36c1010a8ac6ecfab4d58a4be34b171a782b12a53f513c62ef1ae6f563db4b2f271923f2b2e987e528fc8f5becf703f4b8d4f9ecbc5ee0878d9e0b145803c49a91ad69274fabeab588a4537cb735bcb587ca9e50913cd03dc306fb8b821751ee58b7b5c47a84444e7da25786d6777c731eeb3306a9e9ad2677e9e47e", 0x8b}, {&(0x7f0000000680)="f8c199908ad9474b6bdef82fd9d8ab0d8db189fa5080711eaba34d71d8cc780f5e1780552655b389739dddcd036f553daacaea2c45892638c2a3559680dcb9ba116a2150fb8bcaa29781f26151441aee7ec283e94c92beb86e671be6f28919d155a450dc68638e39b9d85e36e6eaf59fc9eb90f82ab5645f0611c2e3c2f248d39510", 0x82}, {&(0x7f0000000740)="798d650df9d5e91d0a4eeb2ac70b20350a32db57155b76ac9bc8ee38fa5b251c6eb6d08a6faff0e6aed3de23094e5507bf7d2b412481a5062a670664bc6a02b8faa923d55909e68742b32455577933ba15ddf69fca19b2393db2641f0a277999ae368d5345e6b48ff481b5973ff84d4142a841ac17384eeb0f476c7fc978824901ba413c94ef53e6c6e8a1e27aa77b321c790af8147f8f5747e14e603341c269355819706ad547", 0xa7}, {0x0}], 0x4, 0x0, 0x0, 0x8000}, {&(0x7f0000000880)=@in={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000001dc0)=[{&(0x7f00000008c0)="989367041f8f8c8eb6c76105fcf5e8ee52500b3102d629bbfbf1ebfd1f951847d03c86d6b73a970bf5e7339aea2c8133ab91014c6287981fb095f3a0113b4686605a175983be8002d8ab755565958555cddd4a1dccb8eaea987c6e2bdc176a40b1ddb162ea002ac98d6aa8a7933be2133c2554c2643ea8e141cfda9f03abea8a823290e3cfcbde062f929c67fb478d0396d52ad29253a50596dd766661c996ec4a407bd56ddc19123cda95d5698773aaa7d22837724dcc409df31e874f61b889736a305c8b1f36ba3c28b605046bbbd4c6de0ce856302519032b2231b88e86ce3c41ba551e98fb24854e3e5b91b3a13b6a66a4", 0xf3}, {&(0x7f00000009c0)="c74f0f1c5dbd14d50a91a7e7ecc6ec03230347354e084afdebcb715a175150b14e44fc1de247f8860eb943f7a0e79965656275d34f21e40a8bb711bccd7e016c9ff71106aa165cdd7455c8bb2ad1f3db15fd2caa6b", 0x55}, {&(0x7f0000000a40)="8a32b02766378e8ef05c59ed07eb01005e738ec73970393a6ebb74", 0x1b}, {&(0x7f0000000a80)}, {&(0x7f0000000b00)="4a5a6ced11ac8fa89841b250a7465d4c4d0934fa20cf", 0x16}, {&(0x7f0000000b40)="3e896e0169b053ea6f935ce91ceaec8658170331f057c0e855786ed247a50dcc4383b2eea2511c50b22872e831b55bd46dc11d60e1181235184e5e61c7054a09d619bdfda556b76438f342efe32f357716c30362946ce1ca2770a8f1991f17b918ff389ba3673373f1203eaba22a558cca58d3a423ad9b0e22c6182b85c71b1ca723bbf304e1eaeeb1", 0x89}, {&(0x7f0000000c00)="3b4762f66aac60054bf529d2bc85e990e34201b5733d3d4cd67a2ff14e7a7945f2de137e9961aa3ceafd6dccc069f73330811de781811b4e12e4268ec7d06dbec85b552b22afc8069f425f96fc2935ed24c9417813c567fba61fa38c0b057f34b0e9295649dd57d0e61d57a1cc8dfcd0e1776daec7d44fb7a28eeb50e4df5eccb322f6921f1bffd46333473f35af0e3256f903ffc332add99a78cb6b9028a0a54594714d6936a1393e040aa6c31c59ce7450ec1511957723654dd4e6fcf75b46b8f72a630c023beeb533dd86a079ad980e7b2b5afd64025ff3", 0xd9}, {&(0x7f0000000d00)="7f7ddd697b37155f19c50502ec8af0a331a8648092a1acc56c3efc82e95580e1e4785368924fe1f8c77ae754a9b3ee85ba09a44a39cef411ab44cd87fa05879f7de7cf2fc2be7279406f88075012439a1c8f09def803ca11a02bda27182a2ea8f9b654", 0x63}, {&(0x7f0000000d80)="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", 0x1000}, {&(0x7f0000001d80)="d628", 0x2}], 0xa, &(0x7f0000001e80)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast1}], 0x18, 0x8000}], 0x3, 0x40) 1.174750886s ago: executing program 3 (id=3938): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x3001}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="7000fbdbdf251800000000000000857798e34bfe1f42d95af4d6"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r1, @ANYBLOB="05042bbd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="8400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0xa0}, 0x1, 0x0, 0x0, 0x2000c451}, 0x44084) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd70000a00000029e8687294a0050000337d031e282c0c78527b0f62c6f43deece341fdcd8914ec3ba71521463b1f23e7dbd830c93890f1447360bcc7ec744ad81cd00299a73729f6f27e9d846cf20e51e1952338efcc8939def60b4373b31d1f1f300"/117, @ANYRES32=r5, @ANYBLOB="0c00238005001f0001000000"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x40810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000006c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="68f6ffe16a6d677f00", @ANYRES32=r6, @ANYBLOB="0c0099007200000054000000080057000900000008009f00010000000800a1001000000008009f00050000000800570023000000080057000f000000"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x11) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r10 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0xfffffffffffffd46) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62d57c08a90b189d190c341035de53a9a13608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be428ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600d8ded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bce38ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2d03aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c710bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c87acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b907d25379897e851e7106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10e53a9f792ecb28ec39cdafa3eff63de2a7f50d042667820f6f86f276afb2b8132301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979ce67c7a1f8924017e73bcf1ae3ed821a4b9839725000000000000000000000000000000f0ce2bf979256f99e89e05d466843d32b983d19cfa3c2a04e9f48311b786927c6c2d505637cad9ae8ae32fbee21a721e38edf6e80ff33a3a3cef251918374de4d4636348ef77a7bad1e8250117d604f59921f29bda75f135865bdc3e10906562e01af1fef96e49b969eaf4ec6b4c51fa2dcc7c1a117243fd64d641426e6a582fcda4be9f58724d4a66e46c032e6f6b3d46fb9616b4b6efc5d083e003fdcf3d78fea7ee48b2a5cc89"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000000414000227bd7000fcdbdf14000008000100003717f328c527e1cd9600000800010001000000"], 0x38}, 0x1, 0x0, 0x0, 0x4c8c0}, 0x40000) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r12, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) close(r12) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r9, @ANYBLOB="08001b0000000000fb1fc5e68d1d927e4ab0d63a71f191e5dc48d0860654bac9e25ed9770841ccdde41f724494e344f572c2a636e9547973f5abf2291a71c5609092b465aeab4c585e66dcd03ebb1c4ef545b67e2a01026e5033a0839920f0325acce8ecc665da5813d0f1d6e81cdf05a4ef4a12b61ae72676a7a4167a1e2b3115a81ec04689f7cdfcc763de19cd95f7095c7a1a144b5a38e1f4dcad7647801aa3774d8ea11b265200a8012528fc4faba0"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r13 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r13, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff}) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r14 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000240)={'gretap0\x00'}) setsockopt$packet_int(r14, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) 1.165966401s ago: executing program 4 (id=3939): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x40000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value=0x180}, 0x50) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000008, 0x10, r1, 0xf9f3c000) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x19e172f08959ac4a, 0x10001, 0x47}, 0x2c) 1.074850095s ago: executing program 4 (id=3940): r0 = epoll_create1(0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) getsockopt$inet_tcp_int(r1, 0x6, 0x14, 0x0, &(0x7f0000000300)=0xfd3d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffe75, 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000100)={0x20000014}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000240)=0xa3, 0x4) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r5, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0xfff, @loopback, 0x8}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={0x0}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000340)={r6, 0x1d, "0de0c5f8bfb3178c3dc98c35420b232ca3ce6acd39f0e8fe407270cb29"}, &(0x7f0000000380)=0x25) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000080)=0xfffffffe, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x200000c, 0x13, r7, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000007, 0x12, r7, 0x12574000) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000200)="a425ffbf", 0x4, 0x24000050, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r8, &(0x7f0000000000)={0xa0000001}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000280)={r5, 0x2, 0x39, 0x3}) setsockopt$MRT_DEL_MFC_PROXY(r9, 0x0, 0xd3, &(0x7f00000002c0)={@loopback, @loopback, 0xffffffffffffffff, "e3807ac02b9b5dc0bf298c842241e3c81c334178644407ec9890a1d01ec4af83", 0x7fff, 0xff, 0x7, 0x9}, 0x3c) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0) epoll_wait(r4, &(0x7f00000000c0)=[{}], 0x1, 0x1fffc002) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) 1.061688714s ago: executing program 1 (id=3941): socket(0x80000000000000a, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value=0x180}, 0x50) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$netlink(0x10, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x19e172f08959ac4a, 0x10001, 0x47}, 0x2c) 1.010837331s ago: executing program 0 (id=3942): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@dev={0xac, 0x14, 0x14, 0x1a}, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390004001300034700bb5be1c3e4feff060000000000190004000400ad0002000000000000060488627df400f93132", 0x2f}], 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r4, @ANYBLOB="010025bd7000fcdbdf25030000000c0006000200000000000000080001"], 0xc0}}, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @empty, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="070000000400000008020000210000"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r9}, 0x18) bind$netlink(r7, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004000000040000000000010000000000", @ANYRES32=r11, @ANYBLOB="00000000000000ff0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x48) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1e, 0x2, 0x6, &(0x7f0000000480)={0xffffffffffffffff}) getpeername$packet(r13, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800004d3ea61d6d28661e001000038670d0dfd7", @ANYRES32=0x0, @ANYBLOB="1111020031880000280012800b0001006d61637365630000180002800c0004000200000100c28000080005000300000008000500", @ANYRES32=r14, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 964.819958ms ago: executing program 1 (id=3943): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x80000) setsockopt(r7, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) recvmmsg(r7, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x16, 0x4, 0x1, 0x1, 0x58, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x1b, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0x7, 0x9, [@multicast1]}, @ssrr={0x89, 0x13, 0x3e, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x42}, @loopback]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000180)=0x5, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) 704.023901ms ago: executing program 0 (id=3944): r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0xb, 0x0, 0x1b}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) ioctl$F2FS_IOC_SET_PIN_FILE(r6, 0x4004f50d, &(0x7f0000000100)=0x1) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, 0x0, 0x0) splice(r1, 0x0, r5, 0x0, 0x80, 0x6) write(r3, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r8) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0)=0x20, 0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000940)={0x28, 0x0, 0x0, @local}, 0x10) listen(0xffffffffffffffff, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r10, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r10, 0x28, 0x0, 0xfffffffffffffffc, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="565d61e2ef0d20edbaa448d00c976007062bbd7000fedbdf25270000"], 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x24044884) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x1}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x492, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x4, 0x4a0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 577.6162ms ago: executing program 3 (id=3945): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@dev={0xac, 0x14, 0x14, 0x1a}, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390004001300034700bb5be1c3e4feff060000000000190004000400ad0002000000000000060488627df400f93132", 0x2f}], 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0xc0}}, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @empty, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) r5 = socket$netlink(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x18) bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004000000040000000000010000000000", @ANYRES32=r7, @ANYBLOB="00000000000000ff0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x48) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1e, 0x2, 0x6, &(0x7f0000000480)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r8, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 506.697191ms ago: executing program 2 (id=3946): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x54}, 0x2, 0x34005}, 0x0) 469.443863ms ago: executing program 2 (id=3947): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x1, 0x8004) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002a00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b00)=ANY=[], 0x1f0, 0x80}], 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x30, 0x4040001}], 0x1, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) unshare(0x62040200) write$tun(0xffffffffffffffff, 0x0, 0x3e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 330.763901ms ago: executing program 3 (id=3948): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="a2", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100), 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x48, r6, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}]]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000827bd700000dbdf251500000208200300", @ANYRES32=r7, @ANYBLOB="0a001a00ffffffffffff00000a00060008021100000100000a00060008021100000100000a001a0008021100000100000a001a0008021100000000000a000600ffffffffffff00000a000600ffffffffffff00000a0006000802110000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r10, &(0x7f0000000040), 0x0}, 0x20) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r9, @ANYBLOB="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"], 0x44}}, 0x0) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) 200.103113ms ago: executing program 2 (id=3949): syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) accept4$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x2711}, 0x10, 0x80000) shutdown(r1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x84500, 0x0) write$tun(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x100) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x7fefc, 0x8, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r5, 0x0, &(0x7f0000000200)=""/76}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) r6 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r6, 0x6180, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r6) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0xe0, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0xe0}}, 0x40000000) 13.846286ms ago: executing program 1 (id=3950): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf2504"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) recvfrom(r0, 0x0, 0x0, 0x40002000, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 0s ago: executing program 4 (id=3951): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x2, 0x6, 0x4000}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007"], 0x0, 0xc}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000080003000b000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {0xb, 0xf}, [@INET_DIAG_REQ_BYTECODE={0x69, 0x1, "ecc67075cf95c9489390680a92bd08aad8d4db3570ae7b6f28b76a3ae2bd127709a3120f789c977b5fdf6d845f664bdd88fb06d64fa8fef7bb2a09d593fd2fb9c56763981db8bd656d217005b39671c6c642b88bdf3286e274ceb51a2fae6979685284b1a3"}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00000064000100bdffffff0000000002000000010000070000000008000b0047000078dc000100ac1414aa"], 0x2c}, 0x1, 0x0, 0x0, 0x42812}, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 06245][T15231] netlink: 'syz.3.2838': attribute type 1 has an invalid length. [ 332.914551][T15231] netlink: 'syz.3.2838': attribute type 1 has an invalid length. [ 332.925368][T15231] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2838'. [ 332.997978][T15230] wg1 speed is unknown, defaulting to 1000 [ 333.016646][T15226] rdma_rxe: rxe_newlink: failed to add lo [ 333.038290][T15237] net_ratelimit: 15 callbacks suppressed [ 333.038302][T15237] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 333.407398][T15245] syzkaller0: create flow: hash 362896770 index 1 [ 333.500787][T15240] syzkaller0: delete flow: hash 362896770 index 1 [ 334.100126][T15261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2851'. [ 334.187716][T15270] tipc: Enabling of bearer rejected, failed to enable media [ 334.200706][T15268] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2854'. [ 334.234501][T15268] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2854'. [ 334.416159][T15290] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2860'. [ 334.479628][T15288] wg1 speed is unknown, defaulting to 1000 [ 334.640635][T15301] tipc: Enabling of bearer rejected, already enabled [ 334.711222][T15306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2866'. [ 334.733122][T15305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2865'. [ 334.919270][T15310] wg1 speed is unknown, defaulting to 1000 [ 334.950097][T15312] netlink: 'syz.0.2869': attribute type 1 has an invalid length. [ 334.987996][T15312] netlink: 'syz.0.2869': attribute type 1 has an invalid length. [ 335.187588][T15320] wg1 speed is unknown, defaulting to 1000 [ 335.303343][T15312] netlink: 'syz.0.2869': attribute type 1 has an invalid length. [ 335.351744][T15312] 8021q: adding VLAN 0 to HW filter on device bond8 [ 335.520721][T15330] netlink: 'syz.3.2873': attribute type 1 has an invalid length. [ 335.533760][T15314] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 335.542302][T15314] bond8: (slave wlan0): Opening slave failed [ 335.636576][T15330] 8021q: adding VLAN 0 to HW filter on device bond11 [ 335.689641][T15333] 8021q: adding VLAN 0 to HW filter on device bond11 [ 335.710867][T15333] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 335.769259][T15333] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 335.969980][T15338] tipc: Enabled bearer , priority 0 [ 336.185047][T15339] tipc: Resetting bearer [ 336.275008][T15336] tipc: Disabling bearer [ 336.320996][T15360] rdma_rxe: rxe_newlink: failed to add lo [ 336.344363][T15360] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 337.328767][T15384] syzkaller0: entered promiscuous mode [ 337.345144][T15384] syzkaller0: entered allmulticast mode [ 337.500092][T15393] wg1 speed is unknown, defaulting to 1000 [ 337.815128][T15406] syzkaller0: entered promiscuous mode [ 337.823174][T15406] syzkaller0: entered allmulticast mode [ 338.260761][T15413] __nla_validate_parse: 2 callbacks suppressed [ 338.260780][T15413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2893'. [ 338.512522][T15420] netlink: 'syz.3.2895': attribute type 3 has an invalid length. [ 339.514158][T15433] syzkaller0: entered promiscuous mode [ 339.519684][T15433] syzkaller0: entered allmulticast mode [ 339.591836][T15438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2900'. [ 340.091652][T15455] syzkaller0: entered promiscuous mode [ 340.099559][T15455] syzkaller0: entered allmulticast mode [ 340.152465][T15462] syzkaller0: create flow: hash 362896770 index 1 [ 340.168337][T15461] syzkaller0: delete flow: hash 362896770 index 1 [ 340.467227][T15474] netlink: 'syz.1.2910': attribute type 10 has an invalid length. [ 340.486918][T15474] team0: Device dummy0 failed to register rx_handler [ 340.501020][T15474] netlink: 'syz.1.2910': attribute type 10 has an invalid length. [ 340.881531][T15481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2912'. [ 340.908485][T15481] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1294) ! [ 341.412304][T15506] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2914'. [ 341.490486][T15511] tipc: Resetting bearer [ 341.784762][T15524] netlink: 'syz.1.2919': attribute type 3 has an invalid length. [ 341.798367][T15524] lo: entered allmulticast mode [ 341.805791][T15524] siw: device registration error -23 [ 341.844584][T15524] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.858393][T15524] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 341.910236][T15520] lo: left allmulticast mode [ 342.076876][T15535] wg1 speed is unknown, defaulting to 1000 [ 342.598677][T15548] erspan0: entered allmulticast mode [ 342.616591][T15548] dvmrp8: entered allmulticast mode [ 342.665578][T15548] wg1 speed is unknown, defaulting to 1000 [ 342.754528][T15547] erspan0: left allmulticast mode [ 342.760242][T15547] dvmrp8: left allmulticast mode [ 342.788909][T15559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2929'. [ 343.103474][T15579] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2937'. [ 343.111499][T15567] wg1 speed is unknown, defaulting to 1000 [ 343.138281][T15579] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2937'. [ 343.148779][ T5864] Bluetooth: hci4: command 0x0406 tx timeout [ 343.197448][T15580] wg1 speed is unknown, defaulting to 1000 [ 343.312244][T15589] lo: entered allmulticast mode [ 343.324664][T15589] dvmrp8: entered allmulticast mode [ 343.366406][T15589] wg1 speed is unknown, defaulting to 1000 [ 343.407401][T15591] netlink: 'syz.1.2940': attribute type 23 has an invalid length. [ 343.478213][T15588] lo: left allmulticast mode [ 343.483060][T15588] dvmrp8: left allmulticast mode [ 343.629963][T15597] syzkaller0: entered promiscuous mode [ 343.636432][T15597] syzkaller0: entered allmulticast mode [ 344.047836][T15610] lo: entered allmulticast mode [ 344.070707][T15610] dvmrp8: entered allmulticast mode [ 344.078991][T15609] lo: left allmulticast mode [ 344.086475][T15609] dvmrp8: left allmulticast mode [ 344.169905][T15614] netlink: 'syz.2.2945': attribute type 1 has an invalid length. [ 344.552473][T15624] netlink: 'syz.3.2947': attribute type 2 has an invalid length. [ 344.585075][T15613] bond15: entered promiscuous mode [ 344.590598][T15613] bond15: entered allmulticast mode [ 344.600403][T15613] 8021q: adding VLAN 0 to HW filter on device bond15 [ 344.827364][T15638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2949'. [ 345.047994][T15623] batman_adv: batadv0: Interface deactivated: dummy0 [ 345.070431][T15623] tipc: Resetting bearer [ 345.090352][T15625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 345.123987][T15638] geneve3: entered promiscuous mode [ 345.133723][T15638] geneve3: entered allmulticast mode [ 345.156006][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.190005][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.200873][T15643] syzkaller0: entered promiscuous mode [ 345.206810][T15643] syzkaller0: entered allmulticast mode [ 345.249598][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.259697][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.277194][T15649] syz_tun: entered allmulticast mode [ 345.290227][T15645] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2951'. [ 345.298246][T15649] dvmrp8: entered allmulticast mode [ 345.398208][T15649] wg1 speed is unknown, defaulting to 1000 [ 345.414647][T15651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2954'. [ 345.460930][T15647] 8021q: adding VLAN 0 to HW filter on device bond12 [ 345.582798][T15647] bond12 (unregistering): Released all slaves [ 345.632734][T15662] syzkaller0: entered promiscuous mode [ 345.644543][T15662] syzkaller0: entered allmulticast mode [ 345.768770][T15669] lo: entered allmulticast mode [ 345.775584][T15648] syz_tun: left allmulticast mode [ 345.781191][T15648] dvmrp8: left allmulticast mode [ 345.867344][T15669] wg1 speed is unknown, defaulting to 1000 [ 345.939767][T15667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2956'. [ 345.996428][T15668] lo: left allmulticast mode [ 346.383200][T15696] tipc: Resetting bearer [ 346.394862][T15701] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2963'. [ 346.496383][T15703] syz_tun: entered allmulticast mode [ 346.512636][T15703] dvmrp8: entered allmulticast mode [ 346.530883][T15705] tipc: Resetting bearer [ 346.550953][T15703] wg1 speed is unknown, defaulting to 1000 [ 346.643418][T15702] syz_tun: left allmulticast mode [ 346.650554][T15702] dvmrp8: left allmulticast mode [ 346.744120][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 347.101757][T15722] syzkaller0: entered promiscuous mode [ 347.108051][T15722] syzkaller0: entered allmulticast mode [ 347.249092][T15728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2972'. [ 347.399062][T15739] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.492379][T15739] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.549771][T15739] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.599938][T15745] wg1 speed is unknown, defaulting to 1000 [ 347.658120][T15739] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.783801][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 347.794918][T15750] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 347.841910][ T37] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.859972][T15754] syzkaller0: entered promiscuous mode [ 347.879198][T15754] syzkaller0: entered allmulticast mode [ 347.915774][ T3630] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.939781][ T3630] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.000790][ T3516] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.155807][T15761] tipc: Enabling of bearer rejected, already enabled [ 348.488875][T15773] syz_tun: entered allmulticast mode [ 348.533148][T15773] dvmrp8: entered allmulticast mode [ 348.582611][T15777] syzkaller0: entered promiscuous mode [ 348.600273][T15777] syzkaller0: entered allmulticast mode [ 348.695365][T15773] wg1 speed is unknown, defaulting to 1000 [ 348.743225][T15772] syz_tun: left allmulticast mode [ 348.748960][T15772] dvmrp8: left allmulticast mode [ 348.823877][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 349.041814][T15809] syzkaller0: entered promiscuous mode [ 349.048976][T15809] syzkaller0: entered allmulticast mode [ 349.166257][T15816] lo: entered allmulticast mode [ 349.177619][T15816] dvmrp8: entered allmulticast mode [ 349.203587][T15816] wg1 speed is unknown, defaulting to 1000 [ 349.211656][T15796] netlink: 'syz.4.2992': attribute type 13 has an invalid length. [ 349.295918][T15815] lo: left allmulticast mode [ 349.300650][T15815] dvmrp8: left allmulticast mode [ 349.462453][T15824] lo: entered allmulticast mode [ 349.510602][T15824] dvmrp8: entered allmulticast mode [ 349.589923][T15824] wg1 speed is unknown, defaulting to 1000 [ 349.622243][T15828] netlink: 'syz.0.3002': attribute type 2 has an invalid length. [ 349.659260][T15823] lo: left allmulticast mode [ 349.665254][T15823] dvmrp8: left allmulticast mode [ 349.702078][T15831] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 349.740623][T15831] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 349.863787][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 349.896709][T15837] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 349.913461][T15837] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 349.932442][T15840] syzkaller0: entered promiscuous mode [ 349.941804][T15840] syzkaller0: entered allmulticast mode [ 350.003322][T15846] geneve3: left promiscuous mode [ 350.009180][T15846] geneve3: left allmulticast mode [ 350.061959][ T37] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.077388][T15848] wg1 speed is unknown, defaulting to 1000 [ 350.103051][ T37] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.128450][ T37] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.150578][ T37] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.340037][T15861] wg1 speed is unknown, defaulting to 1000 [ 350.621984][T15870] syz_tun: entered allmulticast mode [ 350.636637][T15870] dvmrp8: entered allmulticast mode [ 350.686753][T15870] wg1 speed is unknown, defaulting to 1000 [ 350.823322][T15869] syz_tun: left allmulticast mode [ 350.835652][T15869] dvmrp8: left allmulticast mode [ 350.903881][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 351.022812][T15880] netlink: 'syz.4.3015': attribute type 4 has an invalid length. [ 351.044009][T15880] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3015'. [ 351.484231][T15890] syzkaller0: entered promiscuous mode [ 351.490013][T15890] syzkaller0: entered allmulticast mode [ 351.646857][T15896] netlink: zone id is out of range [ 351.655118][T15896] netlink: zone id is out of range [ 351.856354][T15897] netlink: del zone limit has 4 unknown bytes [ 351.892474][T15896] netlink: set zone limit has 4 unknown bytes [ 351.943847][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 352.037830][T15907] lo: entered allmulticast mode [ 352.061696][T15907] dvmrp8: entered allmulticast mode [ 352.100408][T15905] lo: left allmulticast mode [ 352.111371][T15905] dvmrp8: left allmulticast mode [ 352.484422][T15915] netlink: 'syz.0.3027': attribute type 3 has an invalid length. [ 352.507989][T15917] lo: entered allmulticast mode [ 352.530079][T15917] dvmrp8: entered allmulticast mode [ 352.544750][T15915] syz_tun: entered allmulticast mode [ 352.567705][T15915] siw: device registration error -23 [ 352.578865][T15917] wg1 speed is unknown, defaulting to 1000 [ 352.603410][T15903] netlink: 'syz.4.3024': attribute type 1 has an invalid length. [ 352.630078][T15903] netlink: 'syz.4.3024': attribute type 1 has an invalid length. [ 352.659569][T15915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.676583][T15903] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3024'. [ 352.719525][T15914] syz_tun: left allmulticast mode [ 352.728323][T15916] lo: left allmulticast mode [ 352.735247][T15916] dvmrp8: left allmulticast mode [ 352.983782][ C0] net_ratelimit: 1 callbacks suppressed [ 352.983800][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 353.191523][T15935] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3032'. [ 353.312531][T15934] tipc: Enabling of bearer rejected, already enabled [ 353.390957][T15937] wg1 speed is unknown, defaulting to 1000 [ 353.423986][T15949] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3036'. [ 353.433080][T15949] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3036'. [ 353.491313][T15935] wg1 speed is unknown, defaulting to 1000 [ 353.732392][T15959] syzkaller0: entered promiscuous mode [ 353.763759][T15959] syzkaller0: entered allmulticast mode [ 353.805218][T15963] tipc: Enabling of bearer rejected, failed to enable media [ 353.818677][T15967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3042'. [ 353.834801][T15965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.860263][T15963] syzkaller0: entered promiscuous mode [ 353.870140][T15963] syzkaller0: entered allmulticast mode [ 354.018227][ T59] syzkaller0: tun_net_xmit 76 [ 354.024201][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 354.034365][ T59] syzkaller0: tun_net_xmit 48 [ 354.054930][ T9725] syzkaller0: tun_net_xmit 76 [ 354.094229][ T9725] syzkaller0: tun_net_xmit 76 [ 354.339083][T15987] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 354.397117][T15987] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 354.457577][T15989] tipc: Enabling of bearer rejected, already enabled [ 354.589887][T15993] lo: entered allmulticast mode [ 354.653742][T15993] wg1 speed is unknown, defaulting to 1000 [ 354.672748][T15994] netlink: 'syz.4.3051': attribute type 23 has an invalid length. [ 354.897538][T15992] lo: left allmulticast mode [ 355.063874][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 355.091444][T16003] syzkaller0: entered promiscuous mode [ 355.184470][T16003] syzkaller0: entered allmulticast mode [ 355.280370][T16012] tipc: Enabling of bearer rejected, failed to enable media [ 355.302895][T16012] syzkaller0: entered promiscuous mode [ 355.336754][T16012] syzkaller0: entered allmulticast mode [ 355.532734][T16018] syzkaller0: entered promiscuous mode [ 355.562750][T16018] syzkaller0: entered allmulticast mode [ 355.643292][T16015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3058'. [ 355.665432][T16021] syzkaller0: entered promiscuous mode [ 355.672214][T16021] syzkaller0: entered allmulticast mode [ 355.805813][T16028] wg1 speed is unknown, defaulting to 1000 [ 355.893412][T16029] wg1 speed is unknown, defaulting to 1000 [ 355.957993][T16037] tipc: Enabling of bearer rejected, already enabled [ 356.062948][T16040] netlink: 596 bytes leftover after parsing attributes in process `syz.3.3064'. [ 356.103878][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 356.311309][T16028] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3062'. [ 356.343651][T16028] netlink: 'syz.2.3062': attribute type 13 has an invalid length. [ 356.361826][T16028] netlink: 'syz.2.3062': attribute type 17 has an invalid length. [ 356.398223][T16028] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 356.428121][ T5873] Bluetooth: hci0: command tx timeout [ 356.707865][T16056] openvswitch: netlink: Tunnel attr 227 out of range max 16 [ 356.731278][T16061] syz_tun: entered allmulticast mode [ 356.769332][T16061] dvmrp8: entered allmulticast mode [ 356.871497][T16061] wg1 speed is unknown, defaulting to 1000 [ 356.930504][T16070] syzkaller0: entered promiscuous mode [ 356.938870][T16070] syzkaller0: entered allmulticast mode [ 356.979661][T16057] syz_tun: left allmulticast mode [ 357.004980][T16057] dvmrp8: left allmulticast mode [ 357.034464][T16073] netlink: 'syz.1.3074': attribute type 10 has an invalid length. [ 357.108828][T16074] netlink: 'syz.1.3074': attribute type 10 has an invalid length. [ 357.121917][T16073] team0: Device dummy0 failed to register rx_handler [ 357.153866][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 357.223035][T16076] syzkaller0: entered promiscuous mode [ 357.255067][T16076] syzkaller0: entered allmulticast mode [ 357.263242][T16081] netlink: 'syz.2.3078': attribute type 1 has an invalid length. [ 357.278259][T16079] lo: entered allmulticast mode [ 357.279752][T16081] netlink: 'syz.2.3078': attribute type 1 has an invalid length. [ 357.287388][T16078] lo: left allmulticast mode [ 357.389648][T16083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.522446][T16086] netlink: 'syz.2.3078': attribute type 1 has an invalid length. [ 357.629065][ T30] audit: type=1800 audit(1756479946.585:8): pid=16091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3080" name="memory.events" dev="tmpfs" ino=3047 res=0 errno=0 [ 357.670711][T16086] 8021q: adding VLAN 0 to HW filter on device bond16 [ 357.741652][T16094] bond13: (slave wlan0): Releasing active interface [ 357.790902][T16094] bond16: (slave wlan0): Enslaving as an active interface with a down link [ 357.835608][T16088] wg1 speed is unknown, defaulting to 1000 [ 357.848015][T16081] vlan0: entered allmulticast mode [ 357.854490][T16081] bond16: (slave vlan0): Opening slave failed [ 358.183802][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 358.200467][T16111] tipc: Enabling of bearer rejected, failed to enable media [ 358.221249][T16111] syzkaller0: entered promiscuous mode [ 358.239474][T16111] syzkaller0: entered allmulticast mode [ 358.449284][T16113] syzkaller0: entered promiscuous mode [ 358.459057][T16113] syzkaller0: entered allmulticast mode [ 358.610210][T16117] syzkaller0: entered promiscuous mode [ 358.618549][T16117] syzkaller0: entered allmulticast mode [ 358.633377][T16120] netlink: 'syz.4.3090': attribute type 2 has an invalid length. [ 359.233744][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 359.571031][T16148] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 359.746284][T16154] batman_adv: batadv0: Removing interface: dummy0 [ 359.754848][T16154] bond16: (slave wlan0): Releasing active interface [ 359.773299][T16154] batman_adv: batadv0: Removing interface: ip6gretap4 [ 359.784160][ T5873] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 359.800613][T16154] rdma_op ffff88807ec501f0 conn xmit_rdma 0000000000000000 [ 359.813234][T16154] netlink: 'syz.2.3097': attribute type 10 has an invalid length. [ 359.949921][ T59] wlan0: Trigger new scan to find an IBSS to join [ 359.993560][T16160] syzkaller0: entered promiscuous mode [ 359.999392][T16160] syzkaller0: entered allmulticast mode [ 360.071082][T16163] syzkaller0: entered promiscuous mode [ 360.077405][T16163] syzkaller0: entered allmulticast mode [ 360.129055][ T59] syzkaller0: tun_net_xmit 76 [ 360.134560][ T59] syzkaller0: tun_net_xmit 48 [ 360.263752][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 360.644022][T16183] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3109'. [ 360.659688][T16183] syzkaller1: entered promiscuous mode [ 360.665811][T16183] syzkaller1: entered allmulticast mode [ 360.707116][T16184] wg1 speed is unknown, defaulting to 1000 [ 360.859835][T16195] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 360.867638][T16195] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 360.992077][T16200] veth0_to_team: left promiscuous mode [ 361.000144][T16200] veth0_to_team: left allmulticast mode [ 361.007017][T16200] batadv_slave_0: left promiscuous mode [ 361.028671][T16200] tipc: Resetting bearer [ 361.073587][T16200] macvtap2: left promiscuous mode [ 361.090247][T16200] macvtap2: left allmulticast mode [ 361.098229][T16200] veth7: left promiscuous mode [ 361.105667][T16200] bond15: left promiscuous mode [ 361.110722][T16200] bond15: left allmulticast mode [ 361.279589][T16203] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 361.303839][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 361.375316][T16211] tipc: Enabled bearer , priority 0 [ 361.386004][T16211] syzkaller0: entered promiscuous mode [ 361.391584][T16211] syzkaller0: entered allmulticast mode [ 361.410982][T16211] tipc: Resetting bearer [ 361.434942][T16210] tipc: Resetting bearer [ 361.442354][T16210] tipc: Disabling bearer [ 361.757029][T16226] syzkaller0: entered promiscuous mode [ 361.764866][T16226] syzkaller0: entered allmulticast mode [ 361.814753][T16222] 8021q: adding VLAN 0 to HW filter on device bond12 [ 361.842666][T16222] bond12 (unregistering): Released all slaves [ 362.022026][T16239] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3126'. [ 362.037435][T16239] batadv2: entered promiscuous mode [ 362.042772][T16239] batadv2: entered allmulticast mode [ 362.141193][T16234] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.3124'. [ 362.162631][T16239] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3126'. [ 362.186297][T16249] netlink: 'syz.3.3128': attribute type 1 has an invalid length. [ 362.209361][T16249] 8021q: adding VLAN 0 to HW filter on device bond12 [ 362.240100][T16249] bond12: (slave geneve4): making interface the new active one [ 362.249925][T16249] bond12: (slave geneve4): Enslaving as an active interface with an up link [ 362.265665][ T3020] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.275368][ T3020] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.283562][ T3020] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.293490][ T3020] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.311362][T16254] syz_tun: entered allmulticast mode [ 362.343873][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 362.368155][T16254] dvmrp8: entered allmulticast mode [ 362.442283][T16252] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3129'. [ 362.452694][T16254] wg1 speed is unknown, defaulting to 1000 [ 362.568818][T16268] syzkaller0: create flow: hash 362896770 index 1 [ 362.588288][T16267] lo: entered allmulticast mode [ 362.620019][T16262] syzkaller0: delete flow: hash 362896770 index 1 [ 362.779320][T16253] syz_tun: left allmulticast mode [ 362.784952][T16253] dvmrp8: left allmulticast mode [ 362.819224][T16269] wg1 speed is unknown, defaulting to 1000 [ 362.852876][T16271] wg1 speed is unknown, defaulting to 1000 [ 362.987651][ T59] wlan0: Trigger new scan to find an IBSS to join [ 363.014260][T16277] 8021q: adding VLAN 0 to HW filter on device bond17 [ 363.022835][T16277] bond0: (slave bond17): Enslaving as an active interface with a down link [ 363.047815][T16283] syzkaller0: entered promiscuous mode [ 363.053309][T16283] syzkaller0: entered allmulticast mode [ 363.073446][T16282] netlink: 'syz.3.3136': attribute type 12 has an invalid length. [ 363.102121][T16266] lo: left allmulticast mode [ 363.167477][T16288] syzkaller0: entered promiscuous mode [ 363.173093][T16288] syzkaller0: entered allmulticast mode [ 363.209445][T16291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3140'. [ 363.383816][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 363.422173][T16302] 8021q: adding VLAN 0 to HW filter on device bond18 [ 363.436791][T16302] bond0: (slave bond18): Enslaving as an active interface with a down link [ 363.579568][T16311] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3147'. [ 363.672961][T16311] nbd: socks must be embedded in a SOCK_ITEM attr [ 363.702085][T15447] block nbd64: NBD_DISCONNECT [ 363.790088][T16316] wg1 speed is unknown, defaulting to 1000 [ 364.038557][T16326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3149'. [ 364.048664][T16321] wg1 speed is unknown, defaulting to 1000 [ 364.114856][ T5864] Bluetooth: hci4: command 0x0406 tx timeout [ 364.289407][T15448] udevd[15448]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 364.347756][T16333] netlink: 'syz.4.3151': attribute type 1 has an invalid length. [ 364.355699][T16333] netlink: 208 bytes leftover after parsing attributes in process `syz.4.3151'. [ 364.423775][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 364.618248][T16338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3154'. [ 364.839954][T16345] tipc: Enabled bearer , priority 0 [ 364.858438][T16345] syzkaller0: entered promiscuous mode [ 364.870236][T16345] syzkaller0: entered allmulticast mode [ 364.881517][T16345] tipc: Resetting bearer [ 364.893398][T16343] tipc: Resetting bearer [ 364.912962][T16344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.929613][T16343] tipc: Disabling bearer [ 364.943282][T16344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3155'. [ 364.998541][T16344] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 365.078465][T16355] blkio.reset_stats is deprecated [ 365.152910][T16358] tipc: Enabled bearer , priority 0 [ 365.172787][T16358] syzkaller0: entered promiscuous mode [ 365.186803][T16358] syzkaller0: entered allmulticast mode [ 365.206550][T16357] tipc: Resetting bearer [ 365.220053][T16357] tipc: Disabling bearer [ 365.359607][T16362] syzkaller0: entered promiscuous mode [ 365.378308][T16362] syzkaller0: entered allmulticast mode [ 365.463795][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 365.729241][T16366] lo speed is unknown, defaulting to 1000 [ 365.750784][T16366] lo speed is unknown, defaulting to 1000 [ 365.778596][T16366] lo speed is unknown, defaulting to 1000 [ 365.784146][T16370] tipc: Enabled bearer , priority 0 [ 365.791905][T16370] syzkaller0: entered promiscuous mode [ 365.797940][T16370] syzkaller0: entered allmulticast mode [ 365.809748][T16370] tipc: Resetting bearer [ 365.858739][T16366] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 366.043357][T16366] lo speed is unknown, defaulting to 1000 [ 366.050207][T16366] lo speed is unknown, defaulting to 1000 [ 366.057077][T16366] lo speed is unknown, defaulting to 1000 [ 366.098585][T16366] lo speed is unknown, defaulting to 1000 [ 366.136825][T16366] lo speed is unknown, defaulting to 1000 [ 366.444276][T16365] tipc: Resetting bearer [ 366.474509][T16365] tipc: Disabling bearer [ 366.503825][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 366.557668][T16379] tipc: Bearer : already 2 bearers with priority 10 [ 366.566448][T16379] tipc: Bearer : trying with adjusted priority [ 366.573560][T16379] tipc: Enabling of bearer rejected, failed to enable media [ 366.707858][T16385] netlink: 'syz.3.3169': attribute type 29 has an invalid length. [ 366.904601][ T12] wlan0: Trigger new scan to find an IBSS to join [ 367.191539][T16403] 8021q: adding VLAN 0 to HW filter on device bond9 [ 367.200207][T16403] bond0: (slave bond9): making interface the new active one [ 367.208558][T16403] bond0: (slave bond9): Enslaving as an active interface with an up link [ 367.328844][T16407] 8021q: adding VLAN 0 to HW filter on device bond13 [ 367.356217][T16407] bond13 (unregistering): Released all slaves [ 367.446062][T16424] __nla_validate_parse: 2 callbacks suppressed [ 367.446082][T16424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3176'. [ 367.476714][T16404] wg1 speed is unknown, defaulting to 1000 [ 367.531298][T16404] lo speed is unknown, defaulting to 1000 [ 367.543765][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 367.550721][T16426] tipc: Enabling of bearer rejected, already enabled [ 367.551288][T16426] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 367.570874][T16426] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 367.714105][T16431] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 367.735450][ T24] lo speed is unknown, defaulting to 1000 [ 367.742273][T16433] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3180'. [ 367.860936][T16446] netlink: 'syz.2.3181': attribute type 10 has an invalid length. [ 367.966795][T16451] netlink: 'syz.2.3181': attribute type 10 has an invalid length. [ 368.029724][T16446] team0: Device dummy0 failed to register rx_handler [ 368.113860][T16455] syz_tun: entered allmulticast mode [ 368.139498][T16454] dvmrp8: entered allmulticast mode [ 368.178147][T16454] wg1 speed is unknown, defaulting to 1000 [ 368.189790][T16454] lo speed is unknown, defaulting to 1000 [ 368.190655][T16457] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3185'. [ 368.276055][T16452] syz_tun: left allmulticast mode [ 368.291658][T16452] dvmrp8: left allmulticast mode [ 368.412146][T16466] netlink: 'syz.1.3186': attribute type 1 has an invalid length. [ 368.522560][T16457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3185'. [ 368.583867][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 368.891515][T16484] tipc: Enabling of bearer rejected, already enabled [ 369.330601][T16505] syz_tun: entered allmulticast mode [ 369.396374][T16505] dvmrp8: entered allmulticast mode [ 369.518384][T16505] wg1 speed is unknown, defaulting to 1000 [ 369.623978][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 369.672551][T16505] lo speed is unknown, defaulting to 1000 [ 369.800752][T16503] syz_tun: left allmulticast mode [ 369.807011][T16503] dvmrp8: left allmulticast mode [ 369.860349][T16517] netlink: 'syz.4.3200': attribute type 303 has an invalid length. [ 369.873397][T16517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3200'. [ 370.298229][T16530] tipc: Enabled bearer , priority 0 [ 370.305570][T16530] syzkaller0: entered promiscuous mode [ 370.311057][T16530] syzkaller0: entered allmulticast mode [ 370.325999][T16530] tipc: Resetting bearer [ 370.358825][T16529] tipc: Resetting bearer [ 370.385558][T16529] tipc: Disabling bearer [ 370.512624][T16546] tipc: Enabled bearer , priority 0 [ 370.522428][T16546] syzkaller0: entered promiscuous mode [ 370.528349][T16546] syzkaller0: entered allmulticast mode [ 370.538884][T16546] tipc: Resetting bearer [ 370.572740][T16545] tipc: Resetting bearer [ 370.600542][T16545] tipc: Disabling bearer [ 370.634050][T16551] wg1 speed is unknown, defaulting to 1000 [ 370.641702][T16551] lo speed is unknown, defaulting to 1000 [ 370.663943][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 370.782949][T16559] netlink: 'syz.4.3214': attribute type 4 has an invalid length. [ 370.797468][T16559] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3214'. [ 370.985297][T16569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3217'. [ 370.996159][T16569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3217'. [ 371.032335][T16569] netlink: 'syz.2.3217': attribute type 1 has an invalid length. [ 371.150682][T16574] netlink: 'syz.4.3219': attribute type 1 has an invalid length. [ 371.187328][T16574] bond10: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 371.202867][ T3630] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 371.226244][T16574] 8021q: adding VLAN 0 to HW filter on device bond10 [ 371.248732][T16574] veth7: entered promiscuous mode [ 371.279213][T16574] bond10: (slave veth7): Enslaving as a backup interface with a down link [ 371.302878][T16574] bond0: (slave bond9): Releasing active interface [ 371.325499][T16574] bond10: (slave ip6gretap1): Removing an active aggregator [ 371.338413][T16574] bond10: (slave ip6gretap1): Releasing backup interface [ 371.349645][T16574] bond10: (slave ip6gretap1): the permanent HWaddr of slave - 6e:b3:63:2f:c1:17 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 371.377310][T16574] bond10: (slave veth7): Releasing backup interface [ 371.390216][T16582] lo: entered allmulticast mode [ 371.445358][T16580] dvmrp8: entered allmulticast mode [ 371.459991][T16579] lo: left allmulticast mode [ 371.465392][T16579] dvmrp8: left allmulticast mode [ 371.549891][T16584] wg1 speed is unknown, defaulting to 1000 [ 371.596684][T16584] lo speed is unknown, defaulting to 1000 [ 371.604259][T16589] wg1 speed is unknown, defaulting to 1000 [ 371.650494][T16589] lo speed is unknown, defaulting to 1000 [ 371.703831][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 371.938404][T16599] wg1 speed is unknown, defaulting to 1000 [ 371.955720][T16599] lo speed is unknown, defaulting to 1000 [ 372.119007][T16611] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3226'. [ 372.156069][T16617] syz_tun: entered allmulticast mode [ 372.168084][T16617] dvmrp8: entered allmulticast mode [ 372.336070][T16620] syzkaller0: create flow: hash 362896770 index 1 [ 372.482462][T16617] wg1 speed is unknown, defaulting to 1000 [ 372.504081][ T5864] Bluetooth: hci4: command 0x0406 tx timeout [ 372.681590][T16611] smc: net device bond0 applied user defined pnetid SYZ2 [ 372.696201][T16630] smc: net device bond0 erased user defined pnetid SYZ2 [ 372.705642][T16605] syzkaller0: delete flow: hash 362896770 index 1 [ 372.744084][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 372.869624][T16617] lo speed is unknown, defaulting to 1000 [ 372.923158][T16638] tipc: Enabling of bearer rejected, failed to enable media [ 372.938410][T16641] syzkaller0: entered promiscuous mode [ 372.951669][T16641] syzkaller0: entered allmulticast mode [ 372.969669][T16616] syz_tun: left allmulticast mode [ 372.978440][T16616] dvmrp8: left allmulticast mode [ 373.143909][T16647] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 373.207613][T16647] netlink: 'syz.0.3230': attribute type 4 has an invalid length. [ 373.303393][T16660] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3233'. [ 373.548980][T16647] tipc: Resetting bearer [ 373.642171][T16664] tipc: Enabled bearer , priority 0 [ 373.664924][ T9725] lo speed is unknown, defaulting to 1000 [ 373.670815][ T9725] syz2: Port: 1 Link DOWN [ 373.695672][T16672] tipc: Resetting bearer [ 373.723490][T16665] syzkaller0: entered promiscuous mode [ 373.747731][T16665] syzkaller0: entered allmulticast mode [ 373.765696][T16655] tipc: Resetting bearer [ 373.783791][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 373.797833][T16655] tipc: Disabling bearer [ 373.827111][T16677] syzkaller0: entered promiscuous mode [ 373.832709][T16677] syzkaller0: entered allmulticast mode [ 373.957308][T16679] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 374.169469][T16691] syzkaller0: create flow: hash 362896770 index 1 [ 374.272374][T16697] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 374.290065][T16697] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3244'. [ 374.301138][T16697] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3244'. [ 374.331854][T16683] syzkaller0: delete flow: hash 362896770 index 1 [ 374.637073][T16706] veth7: left promiscuous mode [ 374.723494][ T3516] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.756679][T16701] wg1 speed is unknown, defaulting to 1000 [ 374.762600][ T3516] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.823983][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 374.860273][ T3516] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.882469][ T3516] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.909902][T16701] lo speed is unknown, defaulting to 1000 [ 375.017418][T16681] netlink: 'syz.1.3239': attribute type 1 has an invalid length. [ 375.041816][T16681] netlink: 'syz.1.3239': attribute type 1 has an invalid length. [ 375.073034][T16681] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3239'. [ 375.863726][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 376.069464][T16718] 0·: left allmulticast mode [ 376.084673][T16718] hsr_slave_0: left allmulticast mode [ 376.101407][T16718] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 376.114624][T16718] veth3: left promiscuous mode [ 376.164670][T16718] ipvlan0: left allmulticast mode [ 376.169848][T16718] bond7: left allmulticast mode [ 376.226850][T16718] dummy0: left allmulticast mode [ 376.236510][T16718] macvtap1: left promiscuous mode [ 376.241572][T16718] macvtap1: left allmulticast mode [ 376.289914][T16718] macvtap2: left promiscuous mode [ 376.300928][T16718] macvtap2: left allmulticast mode [ 376.309684][T16718] macsec1: left promiscuous mode [ 376.317217][T16718] macsec1: left allmulticast mode [ 376.326677][T16718] geneve2: left promiscuous mode [ 376.338868][T16718] veth9: left promiscuous mode [ 376.347215][T16718] veth11: left promiscuous mode [ 376.377148][ T3516] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.437439][ T3516] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.450475][T16746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3252'. [ 376.471848][ T3516] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.528426][ T3516] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.614838][T16750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3253'. [ 376.677988][T16758] 8021q: adding VLAN 0 to HW filter on device bond12 [ 376.763100][T16758] bond0: (slave bond12): Enslaving as a backup interface with a down link [ 376.903848][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 376.966387][T16766] netlink: 'syz.3.3258': attribute type 13 has an invalid length. [ 376.975448][T16766] netlink: 'syz.3.3258': attribute type 17 has an invalid length. [ 377.022673][T16766] erspan0: left promiscuous mode [ 377.046960][T16766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.071749][T16766] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.091891][T16766] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 377.149550][T16770] syzkaller0: create flow: hash 362896770 index 1 [ 377.172701][T16769] syzkaller0: delete flow: hash 362896770 index 1 [ 377.190322][T16776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3259'. [ 377.500784][T16774] wg1 speed is unknown, defaulting to 1000 [ 377.519197][T16774] lo speed is unknown, defaulting to 1000 [ 377.775487][T16790] wg1 speed is unknown, defaulting to 1000 [ 377.798797][T16790] lo speed is unknown, defaulting to 1000 [ 377.850102][T16765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.943750][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 377.952666][T16797] syzkaller0: entered promiscuous mode [ 377.959046][T16797] syzkaller0: entered allmulticast mode [ 378.181453][T16801] team0: Unable to change to the same mode the team is in [ 378.204497][T16805] syz_tun: entered allmulticast mode [ 378.238334][T16805] dvmrp8: entered allmulticast mode [ 378.280263][T16805] wg1 speed is unknown, defaulting to 1000 [ 378.300392][T16805] lo speed is unknown, defaulting to 1000 [ 378.448021][T16803] syz_tun: left allmulticast mode [ 378.453217][T16803] dvmrp8: left allmulticast mode [ 378.626666][T16817] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig [ 378.668263][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 378.715254][T16826] syzkaller0: create flow: hash 362896770 index 1 [ 378.734797][T16827] netlink: 'syz.0.3274': attribute type 13 has an invalid length. [ 378.742647][T16827] netlink: 'syz.0.3274': attribute type 17 has an invalid length. [ 378.781378][T16828] tipc: Enabling of bearer rejected, already enabled [ 378.847021][T16827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.858643][T16827] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 378.877017][ T2978] syzkaller0: tun_net_xmit 76 [ 378.882658][ T2978] syzkaller0: tun_net_xmit 48 [ 378.893136][ T9720] lo speed is unknown, defaulting to 1000 [ 378.899211][ T9720] syz2: Port: 1 Link ACTIVE [ 378.912978][T16819] syzkaller0: delete flow: hash 362896770 index 1 [ 378.983797][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 379.017615][T16827] wg1 speed is unknown, defaulting to 1000 [ 379.026323][T16827] lo speed is unknown, defaulting to 1000 [ 379.072757][T16834] netlink: 'syz.4.3275': attribute type 10 has an invalid length. [ 379.090069][T16834] wlan1: mtu less than device minimum [ 379.097172][T16834] Ã: (slave wlan1): Error -22 calling dev_set_mtu [ 379.198646][T16839] wg1 speed is unknown, defaulting to 1000 [ 379.199731][T16844] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 379.214278][T16824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.225516][T16839] lo speed is unknown, defaulting to 1000 [ 379.319749][T16848] wg1 speed is unknown, defaulting to 1000 [ 379.343725][T16848] lo speed is unknown, defaulting to 1000 [ 379.516970][T16857] lo: entered allmulticast mode [ 379.528355][T16857] dvmrp8: entered allmulticast mode [ 379.558733][T16857] wg1 speed is unknown, defaulting to 1000 [ 379.571128][T16857] lo speed is unknown, defaulting to 1000 [ 379.663430][T16863] !: renamed from dummy0 (while UP) [ 379.692739][T16856] lo: left allmulticast mode [ 379.699168][T16856] dvmrp8: left allmulticast mode [ 379.723003][T16863] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 379.858103][T16865] 8021q: adding VLAN 0 to HW filter on device bond11 [ 379.869553][T16865] bond0: (slave bond11): making interface the new active one [ 379.882045][T16865] bond0: (slave bond11): Enslaving as an active interface with an up link [ 379.996556][T16863] wg1 speed is unknown, defaulting to 1000 [ 380.023811][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 380.051439][T16863] lo speed is unknown, defaulting to 1000 [ 380.059413][T16869] wg1 speed is unknown, defaulting to 1000 [ 380.061331][T16873] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3286'. [ 380.092373][T16873] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3286'. [ 380.102938][T16873] netlink: 'syz.0.3286': attribute type 4 has an invalid length. [ 380.115890][T16879] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3286'. [ 380.261097][T16869] lo speed is unknown, defaulting to 1000 [ 380.275501][T16886] syzkaller0: entered promiscuous mode [ 380.291952][T16886] syzkaller0: entered allmulticast mode [ 380.312753][T16884] tipc: Enabled bearer , priority 0 [ 380.388855][T16878] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 380.401743][T16878] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 380.425172][T16875] tipc: Resetting bearer [ 380.452828][T16874] tipc: Resetting bearer [ 380.470629][T16874] tipc: Disabling bearer [ 380.585372][T16893] tipc: Enabled bearer , priority 0 [ 380.597229][T16893] syzkaller0: entered promiscuous mode [ 380.603101][T16893] syzkaller0: entered allmulticast mode [ 380.618080][T16891] netlink: 452 bytes leftover after parsing attributes in process `syz.2.3290'. [ 380.645532][T16893] tipc: Resetting bearer [ 380.707181][T16892] tipc: Resetting bearer [ 380.731869][T16892] tipc: Disabling bearer [ 380.851492][T16901] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3292'. [ 381.063913][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 381.205725][ T30] audit: type=1800 audit(1756479970.165:9): pid=16904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3293" name="cgroup.controllers" dev="tmpfs" ino=3342 res=0 errno=0 [ 381.278987][T16914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3295'. [ 381.298251][T16914] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1294) ! [ 381.399080][T16919] ÿ: renamed from bond_slave_0 [ 382.103847][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 382.286436][T16952] tipc: Enabling of bearer rejected, already enabled [ 382.359182][T16959] syzkaller0: create flow: hash 362896770 index 1 [ 382.388936][T16962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3305'. [ 382.406642][T16952] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 382.414522][T16962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3305'. [ 382.423940][T16952] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 382.475393][ T59] syzkaller0: tun_net_xmit 76 [ 382.480233][ T59] syzkaller0: tun_net_xmit 48 [ 382.486571][T16946] syzkaller0: delete flow: hash 362896770 index 1 [ 382.572972][T16954] wg1 speed is unknown, defaulting to 1000 [ 382.596904][T16954] lo speed is unknown, defaulting to 1000 [ 382.731075][T16962] tipc: Resetting bearer [ 382.800325][T16977] netlink: 'syz.3.3307': attribute type 10 has an invalid length. [ 382.889209][T16977] team0: Port device 0! added [ 382.911194][T16977] netlink: 'syz.3.3307': attribute type 10 has an invalid length. [ 382.936343][T16981] netlink: 766 bytes leftover after parsing attributes in process `syz.0.3308'. [ 382.969206][T16981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3308'. [ 383.011001][T16977] team0: Port device 0! removed [ 383.143785][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 383.148256][T16985] netlink: 'syz.2.3310': attribute type 4 has an invalid length. [ 383.444309][T16992] syzkaller0: entered promiscuous mode [ 383.456498][T16992] syzkaller0: entered allmulticast mode [ 383.693214][T17003] tipc: Enabled bearer , priority 0 [ 383.711590][T17000] wg1 speed is unknown, defaulting to 1000 [ 383.721776][T17000] lo speed is unknown, defaulting to 1000 [ 383.750183][T17003] syzkaller0: entered promiscuous mode [ 383.756617][T17003] syzkaller0: entered allmulticast mode [ 383.796338][T17003] tipc: Resetting bearer [ 383.803451][T17002] tipc: Resetting bearer [ 383.826610][T17002] tipc: Disabling bearer [ 383.846532][T17005] raw_sendmsg: syz.3.3315 forgot to set AF_INET. Fix it! [ 384.040136][T17013] syzkaller0: create flow: hash 362896770 index 1 [ 384.053179][ T59] syzkaller0: tun_net_xmit 76 [ 384.082366][ T9725] syzkaller0: tun_net_xmit 76 [ 384.093132][ T59] syzkaller0: tun_net_xmit 48 [ 384.107515][T17009] syzkaller0: delete flow: hash 362896770 index 1 [ 384.183758][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 384.640778][T17033] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 384.648099][T17033] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 384.720296][T17038] 8021q: adding VLAN 0 to HW filter on device bond11 [ 384.733178][T17038] bond0: (slave bond11): Enslaving as an active interface with an up link [ 384.923554][T17049] ip6tnl4: entered promiscuous mode [ 384.941541][T17049] ip6tnl4: entered allmulticast mode [ 384.955349][T17049] team0: Device ip6tnl4 is up. Set it down before adding it as a team port [ 385.016291][T17056] wg1 speed is unknown, defaulting to 1000 [ 385.019540][T17058] syzkaller0: entered promiscuous mode [ 385.027758][T17058] syzkaller0: entered allmulticast mode [ 385.040556][T17046] tipc: Enabled bearer , priority 0 [ 385.052498][T17045] tipc: Resetting bearer [ 385.060794][T17045] tipc: Disabling bearer [ 385.117188][T17056] lo speed is unknown, defaulting to 1000 [ 385.223778][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 385.266178][T17065] vlan4: entered promiscuous mode [ 385.318564][T17069] __nla_validate_parse: 5 callbacks suppressed [ 385.318583][T17069] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3330'. [ 385.536518][T17080] syzkaller0: create flow: hash 2635194097 index 1 [ 385.620150][T17081] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3332'. [ 385.636041][T17081] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3332'. [ 385.639431][ T12] syzkaller0: tun_net_xmit 76 [ 385.655999][ T12] syzkaller0: tun_net_xmit 48 [ 385.664469][ T9720] syzkaller0: tun_net_xmit 76 [ 385.675187][T17084] syzkaller0: entered promiscuous mode [ 385.684541][T17084] syzkaller0: entered allmulticast mode [ 385.691807][T17072] syzkaller0: delete flow: hash 2635194097 index 1 [ 386.148295][T17108] syzkaller0: create flow: hash 362896770 index 1 [ 386.184163][ T3516] syzkaller0: tun_net_xmit 76 [ 386.189163][ T3516] syzkaller0: tun_net_xmit 48 [ 386.210246][T17094] syzkaller0: delete flow: hash 362896770 index 1 [ 386.263799][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 386.402763][T17114] erspan0: entered allmulticast mode [ 386.508759][T17114] dvmrp8: entered allmulticast mode [ 386.536827][T17114] wg1 speed is unknown, defaulting to 1000 [ 386.561150][T17114] lo speed is unknown, defaulting to 1000 [ 386.706157][T17120] tipc: Enabling of bearer rejected, already enabled [ 386.746599][T17120] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 386.772574][T17120] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 386.819149][T17113] erspan0: left allmulticast mode [ 386.827700][T17113] dvmrp8: left allmulticast mode [ 387.065646][T17136] netlink: 'syz.3.3343': attribute type 1 has an invalid length. [ 387.080038][T17127] 8021q: adding VLAN 0 to HW filter on device bond12 [ 387.139407][T17127] bond0: (slave bond12): Enslaving as an active interface with an up link [ 387.152771][T17142] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3343'. [ 387.172171][T17136] bond13: entered promiscuous mode [ 387.184050][T17136] 8021q: adding VLAN 0 to HW filter on device bond13 [ 387.290207][T17142] batadv1: entered promiscuous mode [ 387.303810][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 387.322810][T17142] batadv1: entered allmulticast mode [ 387.351027][T17142] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 387.381557][T17142] bond13: (slave batadv1): making interface the new active one [ 387.412926][T17142] bond13: (slave batadv1): Enslaving as an active interface with an up link [ 387.437391][T17148] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 387.450591][T17155] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3343'. [ 387.477555][T17140] geneve3: entered promiscuous mode [ 387.500787][T17140] geneve3: entered allmulticast mode [ 387.622262][T17154] tipc: Enabling of bearer rejected, failed to enable media [ 387.647268][T17156] syzkaller0: entered promiscuous mode [ 387.652783][T17156] syzkaller0: entered allmulticast mode [ 387.662817][ T75] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 59567 - 0 [ 387.676661][ T75] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 52871 - 0 [ 387.685422][ T75] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 59567 - 0 [ 387.697342][T17159] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3348'. [ 387.699974][ T75] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 52871 - 0 [ 387.758551][ T75] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 59567 - 0 [ 387.771516][ T75] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 52871 - 0 [ 387.814133][ T75] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 59567 - 0 [ 387.823206][T17168] netlink: 'syz.1.3351': attribute type 13 has an invalid length. [ 387.832461][T17168] netlink: 'syz.1.3351': attribute type 17 has an invalid length. [ 387.844544][ T75] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 52871 - 0 [ 387.920050][T17168] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.952238][T17168] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 388.052261][T17184] netlink: 'syz.0.3353': attribute type 1 has an invalid length. [ 388.115228][T17170] syzkaller0: create flow: hash 362896770 index 1 [ 388.138603][ T2978] syzkaller0: tun_net_xmit 76 [ 388.148906][ T2978] syzkaller0: tun_net_xmit 48 [ 388.161625][T17168] wg1 speed is unknown, defaulting to 1000 [ 388.168063][T12496] syzkaller0: tun_net_xmit 76 [ 388.185851][T17168] lo speed is unknown, defaulting to 1000 [ 388.221953][T17181] bond13: (slave vxcan1): The slave device specified does not support setting the MAC address [ 388.247198][T17181] bond13: (slave vxcan1): Error -95 calling set_mac_address [ 388.307897][T12496] syzkaller0: tun_net_xmit 76 [ 388.319418][T17169] syzkaller0: delete flow: hash 362896770 index 1 [ 388.343819][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 388.522530][T17190] tipc: Enabled bearer , priority 0 [ 388.545443][T17193] syzkaller0: entered promiscuous mode [ 388.557462][T17193] syzkaller0: entered allmulticast mode [ 388.600255][T17188] tipc: Resetting bearer [ 388.657444][T17187] tipc: Resetting bearer [ 388.697879][T17187] tipc: Disabling bearer [ 389.041341][T17201] 8021q: adding VLAN 0 to HW filter on device bond14 [ 389.086196][T17201] bond14 (unregistering): Released all slaves [ 389.110107][T17206] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 389.326095][T17222] netlink: 'syz.4.3360': attribute type 4 has an invalid length. [ 389.334158][T17222] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3360'. [ 389.348042][T17213] 8021q: adding VLAN 0 to HW filter on device bond13 [ 389.375432][T17213] bond0: (slave bond13): Enslaving as a backup interface with a down link [ 389.384200][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 389.425180][T17211] wg1 speed is unknown, defaulting to 1000 [ 389.432891][T17211] lo speed is unknown, defaulting to 1000 [ 389.576325][T17233] syzkaller0: entered promiscuous mode [ 389.586388][T17233] syzkaller0: entered allmulticast mode [ 389.657479][T17230] wg1 speed is unknown, defaulting to 1000 [ 389.667261][T17230] lo speed is unknown, defaulting to 1000 [ 389.732335][T17234] netlink: 'syz.3.3362': attribute type 3 has an invalid length. [ 389.846979][T17241] syzkaller0: create flow: hash 362896770 index 1 [ 389.936252][T17240] syzkaller0: delete flow: hash 362896770 index 1 [ 390.151985][T17256] syz_tun: entered allmulticast mode [ 390.165239][T17258] tipc: Enabled bearer , priority 0 [ 390.181892][T17254] dvmrp8: entered allmulticast mode [ 390.195600][T17258] syzkaller0: entered promiscuous mode [ 390.203015][T17258] syzkaller0: entered allmulticast mode [ 390.240524][T17258] tipc: Resetting bearer [ 390.252341][T17254] wg1 speed is unknown, defaulting to 1000 [ 390.272750][T17257] tipc: Resetting bearer [ 390.282617][T17257] tipc: Disabling bearer [ 390.300758][T17254] lo speed is unknown, defaulting to 1000 [ 390.423882][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 390.468546][T17262] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 390.493121][T17262] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 390.508802][T17262] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 390.620994][T17253] syz_tun: left allmulticast mode [ 390.652757][T17253] dvmrp8: left allmulticast mode [ 390.879720][T17280] tipc: Enabling of bearer rejected, already enabled [ 390.912006][T17280] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig [ 390.957498][T17280] tipc: Resetting bearer [ 391.160867][T17295] netlink: 'syz.2.3377': attribute type 4 has an invalid length. [ 391.332248][T17298] wg1 speed is unknown, defaulting to 1000 [ 391.432511][T17298] lo speed is unknown, defaulting to 1000 [ 391.463912][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 391.869723][T17312] tipc: Enabled bearer , priority 0 [ 391.958547][T17321] syzkaller0: entered promiscuous mode [ 391.968334][T17321] syzkaller0: entered allmulticast mode [ 391.981805][T17319] tipc: Enabled bearer , priority 0 [ 392.012966][T17312] tipc: Resetting bearer [ 392.093947][T17311] tipc: Resetting bearer [ 392.110308][T17324] netlink: 'syz.3.3380': attribute type 303 has an invalid length. [ 392.127417][T17311] tipc: Disabling bearer [ 392.140925][T17324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3380'. [ 392.502929][T17318] tipc: Disabling bearer [ 392.503806][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 392.640801][T17342] netlink: 'syz.2.3388': attribute type 4 has an invalid length. [ 392.787383][T17350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3390'. [ 392.931414][T17357] netlink: 844 bytes leftover after parsing attributes in process `syz.1.3391'. [ 393.066004][T17359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3393'. [ 393.118376][T17359] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3393'. [ 393.188049][T17357] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3391'. [ 393.220914][T17366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3396'. [ 393.335863][T17366] netlink: 'syz.4.3396': attribute type 10 has an invalid length. [ 393.367630][T17369] 8021q: adding VLAN 0 to HW filter on device bond20 [ 393.502033][T17369] bond0: (slave bond20): Enslaving as an active interface with a down link [ 393.514657][T17373] syzkaller0: entered allmulticast mode [ 393.543734][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 393.561781][T17368] syzkaller0 (unregistering): left allmulticast mode [ 393.809568][T17384] netlink: 'syz.4.3401': attribute type 4 has an invalid length. [ 393.907748][T17385] syzkaller0: entered promiscuous mode [ 393.917763][T17385] syzkaller0: entered allmulticast mode [ 394.157051][T17400] tipc: Resetting bearer [ 394.273183][ T9725] lo speed is unknown, defaulting to 1000 [ 394.279605][ T9725] syz2: Port: 1 Link DOWN [ 394.371398][T17410] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3419'. [ 394.476936][T17415] lo: entered allmulticast mode [ 394.482855][T17416] wg1 speed is unknown, defaulting to 1000 [ 394.509559][T17415] dvmrp8: entered allmulticast mode [ 394.539962][T17416] lo speed is unknown, defaulting to 1000 [ 394.583879][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 394.686950][T17415] wg1 speed is unknown, defaulting to 1000 [ 394.719778][T17415] lo speed is unknown, defaulting to 1000 [ 394.923375][T17426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3412'. [ 394.995584][T17426] netlink: 'syz.4.3412': attribute type 21 has an invalid length. [ 395.149502][T17435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3412'. [ 395.266923][T17414] lo: left allmulticast mode [ 395.287959][T17414] dvmrp8: left allmulticast mode [ 395.550864][T17440] wg1 speed is unknown, defaulting to 1000 [ 395.616254][T17440] lo speed is unknown, defaulting to 1000 [ 395.623888][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 396.056512][T17457] wg1 speed is unknown, defaulting to 1000 [ 396.071296][T17457] lo speed is unknown, defaulting to 1000 [ 396.095028][T17460] tipc: Enabled bearer , priority 0 [ 396.103341][T17460] syzkaller0: entered promiscuous mode [ 396.114665][T17460] syzkaller0: entered allmulticast mode [ 396.142297][T17460] tipc: Resetting bearer [ 396.153369][T17459] tipc: Resetting bearer [ 396.161931][T17459] tipc: Disabling bearer [ 396.450775][T17466] syz_tun: entered allmulticast mode [ 396.481639][T17466] dvmrp8: entered allmulticast mode [ 396.546050][T17466] wg1 speed is unknown, defaulting to 1000 [ 396.569437][T17472] netlink: 'syz.4.3424': attribute type 13 has an invalid length. [ 396.580942][T17466] lo speed is unknown, defaulting to 1000 [ 396.599400][T17472] netlink: 'syz.4.3424': attribute type 17 has an invalid length. [ 396.663896][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 396.753079][T17472] 8021q: adding VLAN 0 to HW filter on device à [ 396.790579][T17472] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.802882][T17472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 396.862418][T17477] tipc: Enabling of bearer rejected, failed to enable media [ 396.897857][T17477] syzkaller0: entered promiscuous mode [ 396.910856][T17477] syzkaller0: entered allmulticast mode [ 396.950978][T17482] lo: entered allmulticast mode [ 396.982217][T17482] dvmrp8: entered allmulticast mode [ 396.991759][T17465] syz_tun: left allmulticast mode [ 397.003203][T17465] dvmrp8: left allmulticast mode [ 397.049021][T17478] wg1 speed is unknown, defaulting to 1000 [ 397.130375][T17485] wg1 speed is unknown, defaulting to 1000 [ 397.141926][T17478] lo speed is unknown, defaulting to 1000 [ 397.201545][T17485] lo speed is unknown, defaulting to 1000 [ 397.463584][T17471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.538909][T17489] 8021q: adding VLAN 0 to HW filter on device bond14 [ 397.585952][T17489] bond14 (unregistering): Released all slaves [ 397.703758][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 397.821888][T17481] lo: left allmulticast mode [ 397.828372][T17481] dvmrp8: left allmulticast mode [ 398.203848][T17525] erspan0: entered allmulticast mode [ 398.247246][T17525] dvmrp8: entered allmulticast mode [ 398.301483][T17525] wg1 speed is unknown, defaulting to 1000 [ 398.319110][T17522] erspan0: entered promiscuous mode [ 398.342083][T17522] erspan0: left promiscuous mode [ 398.466661][T17525] lo speed is unknown, defaulting to 1000 [ 398.496658][T17530] tipc: Resetting bearer [ 398.539755][T17522] __nla_validate_parse: 3 callbacks suppressed [ 398.539775][T17522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3436'. [ 398.617187][T17524] erspan0: left allmulticast mode [ 398.664244][T17524] dvmrp8: left allmulticast mode [ 398.743749][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 398.783079][T17540] siw: device registration error -23 [ 398.837405][T17544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3441'. [ 398.851565][T17542] 8021q: adding VLAN 0 to HW filter on device bond21 [ 398.866564][T17542] bond0: (slave bond21): Enslaving as an active interface with a down link [ 399.010336][T17550] netlink: 'syz.0.3446': attribute type 13 has an invalid length. [ 399.020094][T17550] netlink: 'syz.0.3446': attribute type 17 has an invalid length. [ 399.054920][T17550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.094274][T17550] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 399.117542][ T44] lo speed is unknown, defaulting to 1000 [ 399.138021][ T44] syz2: Port: 1 Link ACTIVE [ 399.166325][T17552] wg1 speed is unknown, defaulting to 1000 [ 399.169040][T17558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3447'. [ 399.204857][T17552] lo speed is unknown, defaulting to 1000 [ 399.334614][T17550] wg1 speed is unknown, defaulting to 1000 [ 399.359010][T17550] lo speed is unknown, defaulting to 1000 [ 399.458103][T17549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.611367][T17575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3451'. [ 399.783819][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 399.961885][T17586] lo: entered allmulticast mode [ 399.981572][T17586] dvmrp8: entered allmulticast mode [ 400.126941][T17586] wg1 speed is unknown, defaulting to 1000 [ 400.141614][T17586] lo speed is unknown, defaulting to 1000 [ 400.303377][T17585] lo: left allmulticast mode [ 400.314453][T17585] dvmrp8: left allmulticast mode [ 400.762673][T17608] netlink: 'syz.1.3457': attribute type 303 has an invalid length. [ 400.823736][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 400.866546][T17605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3457'. [ 400.976065][T17616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3462'. [ 401.003688][T17616] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3462'. [ 401.012900][T17616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3462'. [ 401.023927][T17616] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3462'. [ 401.034683][T17616] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3462'. [ 401.060906][T17616] netlink: 'syz.2.3462': attribute type 16 has an invalid length. [ 401.072906][T17616] netlink: 'syz.2.3462': attribute type 17 has an invalid length. [ 401.131017][T17618] IPv6: NLM_F_REPLACE set, but no existing node found! [ 401.151530][T17616] tipc: Resetting bearer [ 401.222264][T17622] lo: entered allmulticast mode [ 401.237306][T17622] dvmrp8: entered allmulticast mode [ 401.279081][T17622] wg1 speed is unknown, defaulting to 1000 [ 401.288052][T17622] lo speed is unknown, defaulting to 1000 [ 401.421989][T17621] lo: left allmulticast mode [ 401.432178][T17621] dvmrp8: left allmulticast mode [ 401.552109][T17629] wg1 speed is unknown, defaulting to 1000 [ 401.562898][T17629] lo speed is unknown, defaulting to 1000 [ 401.863933][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 401.998619][ T30] audit: type=1800 audit(1756479990.955:10): pid=17634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3475" name="memory.events" dev="tmpfs" ino=3787 res=0 errno=0 [ 402.226291][T17650] syz_tun: entered allmulticast mode [ 402.322511][T17650] dvmrp8: entered allmulticast mode [ 402.445064][T17650] wg1 speed is unknown, defaulting to 1000 [ 402.478006][T17650] lo speed is unknown, defaulting to 1000 [ 402.717905][T17660] wg1 speed is unknown, defaulting to 1000 [ 402.732849][T17649] syz_tun: left allmulticast mode [ 402.744156][T17649] dvmrp8: left allmulticast mode [ 402.831373][T17660] lo speed is unknown, defaulting to 1000 [ 402.903830][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 403.301039][T17685] tipc: Enabled bearer , priority 0 [ 403.883224][T17680] syzkaller0: entered promiscuous mode [ 403.913846][T17680] syzkaller0: entered allmulticast mode [ 403.943847][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 404.019985][T17690] tipc: Resetting bearer [ 404.035489][ T3516] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 59567 - 0 [ 404.071029][ T3516] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 52871 - 0 [ 404.094790][T17679] tipc: Resetting bearer [ 404.209725][T17679] tipc: Disabling bearer [ 404.252131][ T3516] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 59567 - 0 [ 404.260715][ T3516] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 52871 - 0 [ 404.297812][ T3516] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 59567 - 0 [ 404.307644][ T3516] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 52871 - 0 [ 404.316802][ T3516] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 59567 - 0 [ 404.326574][ T3516] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 52871 - 0 [ 404.346117][T17706] tipc: Enabling of bearer rejected, failed to enable media [ 404.410995][T17712] syzkaller0: entered promiscuous mode [ 404.418089][T17712] syzkaller0: entered allmulticast mode [ 404.621843][T17715] erspan0: entered allmulticast mode [ 404.639574][T17715] dvmrp8: entered allmulticast mode [ 404.697033][T17715] wg1 speed is unknown, defaulting to 1000 [ 404.709274][T17715] lo speed is unknown, defaulting to 1000 [ 404.774135][T17722] syz_tun: entered allmulticast mode [ 404.823042][T17722] dvmrp8: entered allmulticast mode [ 404.862576][T17722] wg1 speed is unknown, defaulting to 1000 [ 404.868647][T17714] erspan0: left allmulticast mode [ 404.868721][T17714] dvmrp8: left allmulticast mode [ 404.930060][T17722] lo speed is unknown, defaulting to 1000 [ 404.983849][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 405.086791][T17721] syz_tun: left allmulticast mode [ 405.110501][T17721] dvmrp8: left allmulticast mode [ 405.126186][T17743] __nla_validate_parse: 4 callbacks suppressed [ 405.126201][T17743] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3489'. [ 405.146013][T17740] syzkaller0: entered promiscuous mode [ 405.166804][T17740] syzkaller0: entered allmulticast mode [ 405.201137][T17737] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3489'. [ 405.348003][T17753] syzkaller0: create flow: hash 362896770 index 1 [ 405.511651][T17760] netlink: 'syz.3.3492': attribute type 4 has an invalid length. [ 405.537760][T17748] syzkaller0: delete flow: hash 362896770 index 1 [ 405.655108][T17765] netlink: 'syz.1.3493': attribute type 13 has an invalid length. [ 405.664190][T17765] netlink: 'syz.1.3493': attribute type 17 has an invalid length. [ 405.859289][T17772] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3492'. [ 405.923273][T17765] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.941484][T17765] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 406.023850][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 406.037938][T17768] wg1 speed is unknown, defaulting to 1000 [ 406.079040][T17768] lo speed is unknown, defaulting to 1000 [ 406.182650][T17778] tipc: Enabled bearer , priority 0 [ 406.199468][T17782] netlink: 'syz.4.3497': attribute type 4 has an invalid length. [ 406.211015][T17778] syzkaller0: entered promiscuous mode [ 406.222092][T17778] syzkaller0: entered allmulticast mode [ 406.321092][T17778] tipc: Resetting bearer [ 406.365212][T17777] tipc: Resetting bearer [ 406.393818][T17762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.424330][T17785] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3497'. [ 406.552857][T17777] tipc: Disabling bearer [ 406.903024][T17797] tipc: Enabled bearer , priority 0 [ 406.916002][T17797] syzkaller0: entered promiscuous mode [ 406.921565][T17797] syzkaller0: entered allmulticast mode [ 406.935562][T17797] tipc: Resetting bearer [ 406.942679][T17796] tipc: Resetting bearer [ 406.952982][T17796] tipc: Disabling bearer [ 407.063780][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 407.146619][T17813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3504'. [ 407.919555][T17837] netlink: 844 bytes leftover after parsing attributes in process `syz.2.3508'. [ 407.973824][T17842] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3509'. [ 407.978323][T17840] wg1 speed is unknown, defaulting to 1000 [ 408.009439][T17837] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3508'. [ 408.021789][T17840] lo speed is unknown, defaulting to 1000 [ 408.103819][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 408.249037][T17842] nbd: socks must be embedded in a SOCK_ITEM attr [ 408.711483][T15448] udevd[15448]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 408.761515][T17863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3513'. [ 408.971569][T17875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3515'. [ 409.143723][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 409.288525][T17882] wg1 speed is unknown, defaulting to 1000 [ 409.327244][T17882] lo speed is unknown, defaulting to 1000 [ 409.698000][T17879] netlink: 'syz.3.3516': attribute type 12 has an invalid length. [ 410.058294][T17919] netlink: 'syz.1.3527': attribute type 13 has an invalid length. [ 410.066897][T17919] netlink: 'syz.1.3527': attribute type 17 has an invalid length. [ 410.113048][T17919] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 410.183843][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 410.196488][T17928] __nla_validate_parse: 1 callbacks suppressed [ 410.196507][T17928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3528'. [ 410.304270][T17929] wg1 speed is unknown, defaulting to 1000 [ 410.379909][T17931] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3529'. [ 410.404280][T17929] lo speed is unknown, defaulting to 1000 [ 410.575776][T17936] syz_tun: entered allmulticast mode [ 410.591226][T17936] dvmrp8: entered allmulticast mode [ 410.628652][T17938] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3531'. [ 410.667885][T17936] wg1 speed is unknown, defaulting to 1000 [ 410.701773][T17936] lo speed is unknown, defaulting to 1000 [ 410.892339][T17934] syz_tun: left allmulticast mode [ 410.902702][T17934] dvmrp8: left allmulticast mode [ 411.027969][T17953] netlink: 'syz.0.3532': attribute type 10 has an invalid length. [ 411.051470][T17955] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3535'. [ 411.194331][T17958] tipc: Enabling of bearer rejected, already enabled [ 411.223763][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 411.282261][T17962] tipc: Enabled bearer , priority 0 [ 411.290943][T17964] netlink: 'syz.1.3539': attribute type 4 has an invalid length. [ 411.292649][T17962] syzkaller0: entered promiscuous mode [ 411.305333][T17962] syzkaller0: entered allmulticast mode [ 411.321602][T17962] tipc: Resetting bearer [ 411.331482][T17959] tipc: Resetting bearer [ 411.367098][T17959] tipc: Disabling bearer [ 411.515687][T17966] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3539'. [ 411.588831][T17971] tipc: Enabled bearer , priority 0 [ 411.606897][T17969] netlink: 'syz.3.3540': attribute type 13 has an invalid length. [ 411.624567][T17971] syzkaller0: entered promiscuous mode [ 411.632465][T17969] netlink: 'syz.3.3540': attribute type 17 has an invalid length. [ 411.649959][T17971] syzkaller0: entered allmulticast mode [ 411.745707][T17969] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 411.777008][T17971] tipc: Resetting bearer [ 411.945478][T17981] wg1 speed is unknown, defaulting to 1000 [ 411.962199][T17981] lo speed is unknown, defaulting to 1000 [ 412.188458][T17989] netlink: 'syz.4.3545': attribute type 13 has an invalid length. [ 412.206689][T17989] netlink: 'syz.4.3545': attribute type 17 has an invalid length. [ 412.263811][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 412.274716][T17989] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 412.309074][T17992] dvmrp8: entered allmulticast mode [ 412.372579][T17989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.391030][T17991] dvmrp8: left allmulticast mode [ 412.420617][T17989] wg1 speed is unknown, defaulting to 1000 [ 412.453872][T17989] lo speed is unknown, defaulting to 1000 [ 412.560691][T17988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.566246][T17996] netlink: 'syz.0.3548': attribute type 4 has an invalid length. [ 412.596291][ T5908] lo speed is unknown, defaulting to 1000 [ 412.602082][ T5908] syz2: Port: 1 Link DOWN [ 412.662723][T17996] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3548'. [ 412.724157][T18004] netlink: 'syz.3.3549': attribute type 6 has an invalid length. [ 412.835529][T18007] 8021q: adding VLAN 0 to HW filter on device bond14 [ 412.846805][T18007] bond0: (slave bond14): Enslaving as a backup interface with a down link [ 412.856841][T18006] tipc: Enabled bearer , priority 0 [ 412.864168][T18010] syzkaller0: entered promiscuous mode [ 412.872558][T18010] syzkaller0: entered allmulticast mode [ 412.958733][T18005] tipc: Resetting bearer [ 412.967365][T18005] tipc: Disabling bearer [ 413.067039][T18012] erspan0: entered allmulticast mode [ 413.087468][T18012] dvmrp8: entered allmulticast mode [ 413.106844][T18016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3554'. [ 413.168766][T18012] wg1 speed is unknown, defaulting to 1000 [ 413.213976][T18012] lo speed is unknown, defaulting to 1000 [ 413.261608][T18020] tipc: Resetting bearer [ 413.363562][T18024] syz_tun: entered allmulticast mode [ 413.432379][T18024] dvmrp8: entered allmulticast mode [ 413.493403][T18011] erspan0: left allmulticast mode [ 413.505900][T18011] dvmrp8: left allmulticast mode [ 413.560897][T18028] wg1 speed is unknown, defaulting to 1000 [ 413.577533][T18028] lo speed is unknown, defaulting to 1000 [ 414.147482][T18023] syz_tun: left allmulticast mode [ 414.169904][T18023] dvmrp8: left allmulticast mode [ 414.297126][T18046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3559'. [ 414.530329][T18054] wg1 speed is unknown, defaulting to 1000 [ 414.542214][T18054] lo speed is unknown, defaulting to 1000 [ 414.591775][T18050] netlink: 'syz.0.3560': attribute type 1 has an invalid length. [ 414.619069][T18050] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3560'. [ 414.811352][T18068] 8021q: adding VLAN 0 to HW filter on device bond14 [ 414.840438][T18068] bond14 (unregistering): Released all slaves [ 414.858110][T18075] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3565'. [ 414.965245][T18072] 8021q: adding VLAN 0 to HW filter on device bond12 [ 414.978605][T18072] bond0: (slave bond12): Enslaving as an active interface with an up link [ 415.136000][T18074] wg1 speed is unknown, defaulting to 1000 [ 415.143394][T18074] lo speed is unknown, defaulting to 1000 [ 415.515112][T18093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3568'. [ 416.354070][T18104] syz_tun: entered allmulticast mode [ 416.400967][T18110] wg1 speed is unknown, defaulting to 1000 [ 416.416722][T18110] lo speed is unknown, defaulting to 1000 [ 416.519128][T18100] syz_tun: left allmulticast mode [ 416.550230][T18114] netlink: 'syz.4.3571': attribute type 13 has an invalid length. [ 416.781314][T18122] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 416.826953][T18121] vxcan0: entered promiscuous mode [ 416.861676][T18126] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3575'. [ 416.881489][T18126] tipc: Can't bind to reserved service type 2 [ 416.998016][T18130] netlink: 452 bytes leftover after parsing attributes in process `syz.3.3576'. [ 417.009061][T18132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3578'. [ 417.659338][T18140] tipc: Resetting bearer [ 417.867888][T18151] tipc: Enabling of bearer rejected, already enabled [ 418.034338][T18155] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3583'. [ 418.101592][T18164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3583'. [ 418.541148][T18180] wg1 speed is unknown, defaulting to 1000 [ 418.548914][T18180] lo speed is unknown, defaulting to 1000 [ 418.562870][T18181] wg1 speed is unknown, defaulting to 1000 [ 418.574999][T18181] lo speed is unknown, defaulting to 1000 [ 419.101712][T18194] tipc: Enabling of bearer rejected, already enabled [ 419.141857][T18195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3592'. [ 419.389685][T18204] erspan0: entered allmulticast mode [ 419.419036][T18204] dvmrp8: entered allmulticast mode [ 419.477161][T18208] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 419.582822][T18199] erspan0: left allmulticast mode [ 419.589369][T18199] dvmrp8: left allmulticast mode [ 419.618502][T18211] tipc: Enabled bearer , priority 0 [ 419.637084][T18211] syzkaller0: entered promiscuous mode [ 419.646889][T18211] syzkaller0: entered allmulticast mode [ 419.674715][T18210] tipc: Resetting bearer [ 419.710157][T18210] tipc: Disabling bearer [ 419.726380][T18213] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3599'. [ 419.890712][T18222] tipc: Enabling of bearer rejected, already enabled [ 420.034134][T18230] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 420.086426][T18230] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3604'. [ 420.132436][T18230] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3604'. [ 420.566643][T18243] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 420.836877][T18248] __nla_validate_parse: 1 callbacks suppressed [ 420.836897][T18248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3608'. [ 421.020744][T18253] netlink: 'syz.1.3610': attribute type 13 has an invalid length. [ 421.050534][T18253] netlink: 'syz.1.3610': attribute type 17 has an invalid length. [ 421.139822][T18261] netlink: 'syz.2.3612': attribute type 4 has an invalid length. [ 421.179422][T18253] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.200457][T18253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 421.230414][T18260] tipc: Enabled bearer , priority 0 [ 421.239718][T18260] syzkaller0: entered promiscuous mode [ 421.254275][T18260] syzkaller0: entered allmulticast mode [ 421.283336][T18264] wg1 speed is unknown, defaulting to 1000 [ 421.298716][T18258] tipc: Resetting bearer [ 421.317193][T18261] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3612'. [ 421.361778][T18258] tipc: Disabling bearer [ 421.389623][T18264] lo speed is unknown, defaulting to 1000 [ 421.500339][T18269] netlink: 'syz.0.3613': attribute type 7 has an invalid length. [ 421.581919][T18271] tipc: Enabling of bearer rejected, already enabled [ 421.631044][T18252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.662438][T18277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3616'. [ 421.778223][T18282] netlink: 'syz.2.3617': attribute type 13 has an invalid length. [ 421.786778][T18282] netlink: 'syz.2.3617': attribute type 17 has an invalid length. [ 421.891363][T18282] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.911128][T18282] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 421.976535][T18284] wg1 speed is unknown, defaulting to 1000 [ 421.991703][T18284] lo speed is unknown, defaulting to 1000 [ 422.115056][ T5864] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 422.145588][T18279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.183942][ T5864] Bluetooth: hci2: command 0x0401 tx timeout [ 422.219795][T18292] netlink: 'syz.1.3619': attribute type 4 has an invalid length. [ 422.281012][T18292] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3619'. [ 422.468869][T18300] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3622'. [ 422.572984][T18306] tipc: Enabled bearer , priority 0 [ 422.581105][T18306] syzkaller0: entered promiscuous mode [ 422.592712][T18306] syzkaller0: entered allmulticast mode [ 422.610910][T18305] tipc: Resetting bearer [ 422.632809][T18305] tipc: Disabling bearer [ 422.770576][T18309] netlink: 'syz.3.3624': attribute type 4 has an invalid length. [ 422.782871][T18311] tipc: Enabling of bearer rejected, already enabled [ 422.921199][T18320] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3624'. [ 422.988804][T18321] 8021q: adding VLAN 0 to HW filter on device bond14 [ 423.015189][T18321] bond0: (slave bond14): Enslaving as an active interface with an up link [ 423.185609][T18329] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3629'. [ 423.398232][T18339] tipc: Enabling of bearer rejected, already enabled [ 423.440671][T18340] 8021q: adding VLAN 0 to HW filter on device bond14 [ 423.479777][T18340] bond14 (unregistering): Released all slaves [ 423.491003][T18345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3632'. [ 423.644498][T18347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3633'. [ 423.674968][T18349] wg1 speed is unknown, defaulting to 1000 [ 423.690884][T18351] netlink: 788 bytes leftover after parsing attributes in process `syz.3.3635'. [ 423.702902][T18349] lo speed is unknown, defaulting to 1000 [ 424.122536][T18363] wg1 speed is unknown, defaulting to 1000 [ 424.150660][T18363] lo speed is unknown, defaulting to 1000 [ 424.786643][T18380] netlink: 'syz.3.3642': attribute type 1 has an invalid length. [ 424.996008][T18380] 8021q: adding VLAN 0 to HW filter on device bond14 [ 425.022750][T18390] tipc: Enabling of bearer rejected, failed to enable media [ 425.087191][T18383] 8021q: adding VLAN 0 to HW filter on device bond14 [ 425.258444][T18383] bond14: (slave vxcan1): The slave device specified does not support setting the MAC address [ 425.325714][T18383] bond14: (slave vxcan1): Error -95 calling set_mac_address [ 425.439424][T18384] wg1 speed is unknown, defaulting to 1000 [ 425.447425][T18384] lo speed is unknown, defaulting to 1000 [ 425.526788][T18386] veth9: entered promiscuous mode [ 425.569094][T18386] bond14: (slave veth9): Enslaving as an active interface with a down link [ 425.704830][ T5873] Bluetooth: hci4: command 0x0406 tx timeout [ 425.851862][T18403] wg1 speed is unknown, defaulting to 1000 [ 425.950357][T18412] 8021q: adding VLAN 0 to HW filter on device bond15 [ 425.967506][T18412] bond0: (slave bond15): Enslaving as an active interface with an up link [ 425.988517][T18419] __nla_validate_parse: 2 callbacks suppressed [ 425.988537][T18419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3646'. [ 426.014323][T18403] lo speed is unknown, defaulting to 1000 [ 426.267233][T18429] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 426.428085][T18442] netlink: 'syz.4.3652': attribute type 13 has an invalid length. [ 426.439387][T18439] wg1 speed is unknown, defaulting to 1000 [ 426.443088][T18442] netlink: 'syz.4.3652': attribute type 17 has an invalid length. [ 426.477039][T18442] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 426.522653][T18439] lo speed is unknown, defaulting to 1000 [ 426.610237][T18442] wg1 speed is unknown, defaulting to 1000 [ 426.651834][T18442] lo speed is unknown, defaulting to 1000 [ 426.734558][T18445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.938598][T18460] tipc: Enabling of bearer rejected, already enabled [ 428.090864][T18466] wg1 speed is unknown, defaulting to 1000 [ 428.110499][T18464] wg1 speed is unknown, defaulting to 1000 [ 428.111163][T18466] lo speed is unknown, defaulting to 1000 [ 428.161463][T18472] netlink: 'syz.2.3659': attribute type 13 has an invalid length. [ 428.170735][T18472] netlink: 'syz.2.3659': attribute type 17 has an invalid length. [ 428.264564][T18472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 428.365065][T18464] lo speed is unknown, defaulting to 1000 [ 428.476444][T18473] wg1 speed is unknown, defaulting to 1000 [ 428.514390][T18473] lo speed is unknown, defaulting to 1000 [ 428.569026][T18482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3660'. [ 428.810586][T18467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.875088][T18486] wg1 speed is unknown, defaulting to 1000 [ 428.916466][T18494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3663'. [ 428.937945][T18486] lo speed is unknown, defaulting to 1000 [ 429.108980][T18504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3666'. [ 429.212284][T18502] 8021q: adding VLAN 0 to HW filter on device bond16 [ 429.221423][T18502] bond0: (slave bond16): Enslaving as an active interface with an up link [ 429.681215][T18519] syzkaller0: entered promiscuous mode [ 429.690722][T18520] netlink: 'syz.2.3668': attribute type 6 has an invalid length. [ 429.698695][T18519] syzkaller0: entered allmulticast mode [ 429.876729][T18526] netlink: 'syz.3.3672': attribute type 4 has an invalid length. [ 429.903147][T18526] netlink: 'syz.3.3672': attribute type 4 has an invalid length. [ 429.908162][T18530] netlink: 'syz.0.3671': attribute type 11 has an invalid length. [ 429.942260][T18530] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3671'. [ 430.312561][T18540] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3675'. [ 430.592223][T18547] tipc: Enabling of bearer rejected, already enabled [ 430.617482][T18545] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 431.040686][T18560] wg1 speed is unknown, defaulting to 1000 [ 431.100006][T18563] syz_tun: entered allmulticast mode [ 431.138541][T18563] dvmrp8: entered allmulticast mode [ 431.151764][T18560] lo speed is unknown, defaulting to 1000 [ 431.216459][T18567] 8021q: adding VLAN 0 to HW filter on device bond22 [ 431.237951][T18574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3684'. [ 431.255246][T18567] bond0: (slave bond22): Enslaving as an active interface with a down link [ 431.418913][T18578] netlink: 'syz.0.3683': attribute type 23 has an invalid length. [ 431.604041][T18582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3686'. [ 431.607364][T18563] wg1 speed is unknown, defaulting to 1000 [ 431.643549][T18563] lo speed is unknown, defaulting to 1000 [ 431.682193][T18583] tipc: Enabling of bearer rejected, already enabled [ 432.012583][T18561] syz_tun: left allmulticast mode [ 432.031578][T18561] dvmrp8: left allmulticast mode [ 432.062448][T18595] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 432.078703][T18593] syzkaller0: entered allmulticast mode [ 432.177513][T18593] syzkaller0 (unregistering): left allmulticast mode [ 432.974069][T18617] netlink: 'syz.4.3693': attribute type 4 has an invalid length. [ 433.012258][T18617] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3693'. [ 433.316620][T18630] 8021q: adding VLAN 0 to HW filter on device bond13 [ 433.341828][T18630] bond0: (slave bond13): Enslaving as an active interface with an up link [ 433.366010][T18633] tipc: Enabled bearer , priority 0 [ 433.438204][T18633] syzkaller0: entered promiscuous mode [ 433.444929][T18633] syzkaller0: entered allmulticast mode [ 433.467074][T18633] tipc: Resetting bearer [ 433.480808][T18635] wg1 speed is unknown, defaulting to 1000 [ 433.486752][T18638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.500652][T18632] tipc: Resetting bearer [ 433.518394][T18632] tipc: Disabling bearer [ 433.533997][T18635] lo speed is unknown, defaulting to 1000 [ 433.640576][T18641] wg1 speed is unknown, defaulting to 1000 [ 433.650023][T18641] lo speed is unknown, defaulting to 1000 [ 433.743981][T18635] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3698'. [ 434.020728][T18650] erspan0: entered allmulticast mode [ 434.066473][T18650] wg1 speed is unknown, defaulting to 1000 [ 434.148945][T18650] lo speed is unknown, defaulting to 1000 [ 434.298276][T18657] wg1 speed is unknown, defaulting to 1000 [ 434.435543][T18657] lo speed is unknown, defaulting to 1000 [ 434.450568][T18648] erspan0: left allmulticast mode [ 434.599875][T18670] wg1 speed is unknown, defaulting to 1000 [ 434.607839][T18670] lo speed is unknown, defaulting to 1000 [ 434.782840][T18680] netlink: 'syz.4.3707': attribute type 4 has an invalid length. [ 434.838456][T18679] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 434.975577][T18686] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3707'. [ 435.093919][T18666] tipc: Resetting bearer [ 435.297230][T18666] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 436.850037][T18716] erspan0: entered allmulticast mode [ 436.900478][T18716] wg1 speed is unknown, defaulting to 1000 [ 436.909613][T18716] lo speed is unknown, defaulting to 1000 [ 437.003028][T18724] netlink: 'syz.4.3716': attribute type 1 has an invalid length. [ 437.120655][T18724] 8021q: adding VLAN 0 to HW filter on device bond14 [ 437.193408][T18729] 8021q: adding VLAN 0 to HW filter on device bond14 [ 437.210605][T18729] bond14: (slave vxcan1): The slave device specified does not support setting the MAC address [ 437.232904][T18729] bond14: (slave vxcan1): Error -95 calling set_mac_address [ 437.301020][T18730] veth11: entered promiscuous mode [ 437.340407][T18732] 8021q: adding VLAN 0 to HW filter on device bond15 [ 437.349912][T18732] bond0: (slave bond15): Enslaving as a backup interface with a down link [ 437.446566][T18715] erspan0: left allmulticast mode [ 437.598187][T18741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3718'. [ 437.680202][T18737] wg1 speed is unknown, defaulting to 1000 [ 437.719353][T18737] lo speed is unknown, defaulting to 1000 [ 437.737854][T18745] netlink: 'syz.0.3720': attribute type 4 has an invalid length. [ 437.748314][T18745] netlink: 'syz.0.3720': attribute type 4 has an invalid length. [ 437.787454][T18747] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 437.799876][T18747] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 437.816810][ T44] lo speed is unknown, defaulting to 1000 [ 437.822760][ T44] syz2: Port: 1 Link ACTIVE [ 437.901802][T18750] netlink: 'syz.3.3722': attribute type 4 has an invalid length. [ 437.983061][T18750] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3722'. [ 438.062425][T18762] wg1 speed is unknown, defaulting to 1000 [ 438.086620][T18768] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 438.108331][T18762] lo speed is unknown, defaulting to 1000 [ 438.131526][T18770] geneve3: entered promiscuous mode [ 438.156704][T18770] geneve3: entered allmulticast mode [ 438.192973][T18773] erspan0: entered allmulticast mode [ 438.212818][T18769] dvmrp8: entered allmulticast mode [ 438.256561][T18769] wg1 speed is unknown, defaulting to 1000 [ 438.263784][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 438.296116][T18769] lo speed is unknown, defaulting to 1000 [ 438.540802][T18765] erspan0: left allmulticast mode [ 438.556139][T18765] dvmrp8: left allmulticast mode [ 439.091920][T18794] wg1 speed is unknown, defaulting to 1000 [ 439.121218][T18794] lo speed is unknown, defaulting to 1000 [ 439.303799][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 439.430817][T18798] tipc: Bearer : already 2 bearers with priority 10 [ 439.454436][T18798] tipc: Bearer : trying with adjusted priority [ 439.468630][T18798] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3735'. [ 439.491757][T18798] tipc: Invalid UDP bearer configuration [ 439.491802][T18798] tipc: Enabling of bearer rejected, failed to enable media [ 439.513458][T18803] syz_tun: entered allmulticast mode [ 439.543371][T18805] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3737'. [ 439.557551][T18805] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3737'. [ 439.578142][T18805] netlink: 'syz.4.3737': attribute type 5 has an invalid length. [ 439.586441][T18805] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3737'. [ 439.630498][T18803] wg1 speed is unknown, defaulting to 1000 [ 439.640410][T18803] lo speed is unknown, defaulting to 1000 [ 439.677823][T18809] netlink: 'syz.0.3738': attribute type 1 has an invalid length. [ 439.731160][T18814] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3737'. [ 439.782095][T18815] bond17 (unregistering): Released all slaves [ 439.794529][T18821] netlink: 'syz.1.3733': attribute type 4 has an invalid length. [ 439.809167][T18821] netlink: 'syz.1.3733': attribute type 4 has an invalid length. [ 439.841951][T18801] syz_tun: left allmulticast mode [ 439.874770][T18805] wg1 speed is unknown, defaulting to 1000 [ 439.951125][T18805] lo speed is unknown, defaulting to 1000 [ 440.024457][T18812] wg1 speed is unknown, defaulting to 1000 [ 440.034838][T18821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3733'. [ 440.061254][T18812] lo speed is unknown, defaulting to 1000 [ 440.221294][T18831] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3750'. [ 440.230684][T18831] openvswitch: netlink: Flow actions attr not present in new flow. [ 440.343788][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 440.433177][T18837] netlink: 'syz.4.3740': attribute type 6 has an invalid length. [ 440.576710][T18838] 8021q: adding VLAN 0 to HW filter on device bond23 [ 440.591066][T18838] bond0: (slave bond23): Enslaving as an active interface with a down link [ 440.657353][T18843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3744'. [ 440.888948][T18844] wg1 speed is unknown, defaulting to 1000 [ 440.903071][T18855] syz_tun: entered allmulticast mode [ 441.125339][T18844] lo speed is unknown, defaulting to 1000 [ 441.383822][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 441.412456][T18865] wg1 speed is unknown, defaulting to 1000 [ 441.455151][T18865] lo speed is unknown, defaulting to 1000 [ 441.742456][T18854] syz_tun: left allmulticast mode [ 441.988563][ T75] syzkaller0: tun_net_xmit 76 [ 442.016809][ T75] syzkaller0: tun_net_xmit 48 [ 442.021808][ T5928] syzkaller0: tun_net_xmit 76 [ 442.113873][ T9720] syzkaller0: tun_net_xmit 76 [ 442.261944][T18901] tipc: Enabling of bearer rejected, already enabled [ 442.302233][T18901] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 442.320941][T18901] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 442.423821][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 442.499264][T18905] 8021q: adding VLAN 0 to HW filter on device bond17 [ 442.549309][T18905] bond0: (slave bond17): Enslaving as an active interface with an up link [ 442.761226][T18921] rdma_rxe: rxe_newlink: failed to add veth1_to_hsr [ 442.905882][T18926] dvmrp8: entered allmulticast mode [ 442.976010][T18926] wg1 speed is unknown, defaulting to 1000 [ 442.999426][T18933] sctp: [Deprecated]: syz.3.3762 (pid 18933) Use of struct sctp_assoc_value in delayed_ack socket option. [ 442.999426][T18933] Use struct sctp_sack_info instead [ 443.019748][T18926] lo speed is unknown, defaulting to 1000 [ 443.114825][T18921] __nla_validate_parse: 5 callbacks suppressed [ 443.114845][T18921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3762'. [ 443.279073][T18944] macvlan2: entered allmulticast mode [ 443.288589][T18944] veth1_vlan: entered allmulticast mode [ 443.298593][T18944] veth1_vlan: left allmulticast mode [ 443.418300][T18940] netlink: 'syz.0.3766': attribute type 10 has an invalid length. [ 443.441028][T18951] netlink: 'syz.3.3768': attribute type 1 has an invalid length. [ 443.460997][T18951] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3768'. [ 443.463933][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 443.484448][T18924] dvmrp8: left allmulticast mode [ 443.559773][T18955] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 443.582695][T18955] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 443.597302][T18958] wg1 speed is unknown, defaulting to 1000 [ 443.690550][T18960] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 443.702367][T18958] lo speed is unknown, defaulting to 1000 [ 443.733062][T18962] dvmrp8: entered allmulticast mode [ 443.880938][T18962] wg1 speed is unknown, defaulting to 1000 [ 443.901929][T18962] lo speed is unknown, defaulting to 1000 [ 443.992599][T18966] 8021q: adding VLAN 0 to HW filter on device bond18 [ 444.076013][T18966] bond0: (slave bond18): Enslaving as an active interface with an up link [ 444.240101][T18961] dvmrp8: left allmulticast mode [ 444.503791][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 444.929238][T19005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3781'. [ 444.941530][T19000] 8021q: adding VLAN 0 to HW filter on device bond15 [ 444.953289][T19000] bond0: (slave bond15): Enslaving as an active interface with an up link [ 445.239678][T19010] tipc: Enabling of bearer rejected, already enabled [ 445.258094][T19018] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.3782'. [ 445.362387][T19027] wg1 speed is unknown, defaulting to 1000 [ 445.370651][T19027] lo speed is unknown, defaulting to 1000 [ 445.381865][T19031] wg1 speed is unknown, defaulting to 1000 [ 445.404249][T19031] lo speed is unknown, defaulting to 1000 [ 445.543766][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 445.758041][T19044] erspan0: entered allmulticast mode [ 445.788736][T19044] dvmrp8: entered allmulticast mode [ 445.839261][T19044] wg1 speed is unknown, defaulting to 1000 [ 445.848433][T19044] lo speed is unknown, defaulting to 1000 [ 446.021573][T19043] erspan0: left allmulticast mode [ 446.154045][T19043] dvmrp8: left allmulticast mode [ 446.245557][T19054] tipc: Enabled bearer , priority 0 [ 446.252959][T19055] syzkaller0: entered promiscuous mode [ 446.294181][T19055] syzkaller0: entered allmulticast mode [ 446.319870][T19050] tipc: Resetting bearer [ 446.359089][T19050] tipc: Disabling bearer [ 446.471709][T19064] veth1_to_bond: entered allmulticast mode [ 446.583715][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 446.605063][T19064] bond_slave_1: entered promiscuous mode [ 446.620164][T19064] bond_slave_1: left promiscuous mode [ 446.628459][T19069] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 446.634521][T19064] veth1_to_bond: left allmulticast mode [ 447.328063][T19094] tipc: Enabling of bearer rejected, already enabled [ 447.513397][T19098] netlink: 'syz.0.3801': attribute type 3 has an invalid length. [ 447.527325][T19098] syz_tun: entered allmulticast mode [ 447.589785][T19103] siw: device registration error -23 [ 447.623785][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 447.681622][ T5928] lo speed is unknown, defaulting to 1000 [ 447.687620][ T5928] syz2: Port: 1 Link DOWN [ 447.723926][T19104] 8021q: adding VLAN 0 to HW filter on device bond16 [ 447.734534][T19104] bond0: (slave bond16): Enslaving as a backup interface with a down link [ 447.743339][T19097] syz_tun: left allmulticast mode [ 447.791928][T19108] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 447.850795][T19110] tipc: Enabled bearer , priority 0 [ 447.883011][T19114] veth1_to_bond: entered allmulticast mode [ 447.891562][T19114] bond_slave_1: entered promiscuous mode [ 447.926974][T19110] syzkaller0: entered promiscuous mode [ 447.932622][T19110] syzkaller0: entered allmulticast mode [ 447.939831][T19114] bond_slave_1: left promiscuous mode [ 447.947654][T19114] veth1_to_bond: left allmulticast mode [ 447.957438][T19109] tipc: Resetting bearer [ 447.987836][T19109] tipc: Disabling bearer [ 448.052535][T19117] 8021q: adding VLAN 0 to HW filter on device bond24 [ 448.060901][T19117] bond0: (slave bond24): Enslaving as an active interface with a down link [ 448.377088][T19135] tipc: Enabling of bearer rejected, already enabled [ 448.642759][T19144] syz_tun: entered allmulticast mode [ 448.663963][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 448.701522][T19144] wg1 speed is unknown, defaulting to 1000 [ 448.709334][T19144] lo speed is unknown, defaulting to 1000 [ 448.715872][T19142] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3813'. [ 448.892822][T19148] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 448.909287][T19143] syz_tun: left allmulticast mode [ 449.064807][T19154] netlink: 'syz.1.3817': attribute type 4 has an invalid length. [ 449.066859][T19152] wg1 speed is unknown, defaulting to 1000 [ 449.087979][T19152] lo speed is unknown, defaulting to 1000 [ 449.219375][T19166] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3817'. [ 449.284043][T19170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3820'. [ 449.357998][T19171] 8021q: adding VLAN 0 to HW filter on device bond19 [ 449.367694][T19171] bond0: (slave bond19): Enslaving as an active interface with an up link [ 449.680463][T19186] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 449.704128][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 449.939743][T19193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3825'. [ 449.962682][T19193] netlink: 428 bytes leftover after parsing attributes in process `syz.0.3825'. [ 450.019332][T19195] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 450.231939][T19192] batadv_slave_0: entered promiscuous mode [ 450.241213][T19193] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3825'. [ 450.306364][T19201] tipc: Enabled bearer , priority 0 [ 450.313873][T19201] syzkaller0: entered promiscuous mode [ 450.319518][T19201] syzkaller0: entered allmulticast mode [ 450.333176][T19202] syz_tun: entered allmulticast mode [ 450.345348][T19201] tipc: Resetting bearer [ 450.357586][T19202] dvmrp8: entered allmulticast mode [ 450.393156][T19202] wg1 speed is unknown, defaulting to 1000 [ 450.402459][T19202] lo speed is unknown, defaulting to 1000 [ 450.512751][T19200] syz_tun: left allmulticast mode [ 450.518842][T19200] dvmrp8: left allmulticast mode [ 450.677316][T19221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3833'. [ 450.743782][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 450.747660][T19210] 8021q: adding VLAN 0 to HW filter on device bond15 [ 450.765643][T19210] bond0: (slave bond15): Enslaving as an active interface with an up link [ 450.952060][T19232] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3838'. [ 451.021851][T19236] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004 [ 451.154740][T19236] nbd2: detected capacity change from 0 to 127 [ 451.166733][ T5864] block nbd2: Receive control failed (result -32) [ 451.166950][T15448] block nbd2: Send control failed (result -32) [ 451.191933][T19239] dvmrp8: entered allmulticast mode [ 451.232355][T15448] block nbd2: Request send failed, requeueing [ 451.240122][ T55] block nbd2: Dead connection, failed to find a fallback [ 451.247664][ T55] block nbd2: shutting down sockets [ 451.253054][ T55] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 451.262673][ T55] Buffer I/O error on dev nbd2, logical block 0, async page read [ 451.271359][T15448] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 451.281356][T15448] Buffer I/O error on dev nbd2, logical block 1, async page read [ 451.290160][T15448] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 451.299832][T15448] Buffer I/O error on dev nbd2, logical block 2, async page read [ 451.309699][T15448] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 451.319442][T15448] Buffer I/O error on dev nbd2, logical block 3, async page read [ 451.328055][T15448] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 451.337635][T15448] Buffer I/O error on dev nbd2, logical block 0, async page read [ 451.346110][T15448] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 451.355508][T15448] Buffer I/O error on dev nbd2, logical block 1, async page read [ 451.364163][T15448] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 451.373499][T15448] Buffer I/O error on dev nbd2, logical block 2, async page read [ 451.382113][T15448] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 451.394800][T15448] Buffer I/O error on dev nbd2, logical block 3, async page read [ 451.404374][T15448] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 451.414381][T15448] Buffer I/O error on dev nbd2, logical block 0, async page read [ 451.422803][T15448] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 451.450963][T15448] Buffer I/O error on dev nbd2, logical block 1, async page read [ 451.462880][T15448] ldm_validate_partition_table(): Disk read failed. [ 451.485183][T19240] wg1 speed is unknown, defaulting to 1000 [ 451.500861][T19240] lo speed is unknown, defaulting to 1000 [ 451.518608][T15448] Dev nbd2: unable to read RDB block 0 [ 451.550462][T15448] nbd2: unable to read partition table [ 451.602062][T19238] dvmrp8: left allmulticast mode [ 451.646669][T15448] ldm_validate_partition_table(): Disk read failed. [ 451.652072][T19250] syz_tun: entered allmulticast mode [ 451.671177][T15448] Dev nbd2: unable to read RDB block 0 [ 451.692473][T15448] nbd2: unable to read partition table [ 451.712052][T19255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3844'. [ 451.726215][T19250] dvmrp8: entered allmulticast mode [ 451.732379][T19249] wg1 speed is unknown, defaulting to 1000 [ 451.771694][T19249] lo speed is unknown, defaulting to 1000 [ 451.776791][T19254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.786559][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 451.810499][T19254] tipc: Failed to remove unknown binding: 66,1,1/209088726:2081678432/2081678434 [ 451.829972][T19254] tipc: Failed to remove unknown binding: 66,1,1/209088726:2081678432/2081678434 [ 451.839548][T19254] tipc: Failed to remove unknown binding: 66,1,1/209088726:2081678432/2081678434 [ 451.856897][T19254] netlink: 788 bytes leftover after parsing attributes in process `syz.3.3846'. [ 451.906618][T19258] wg1 speed is unknown, defaulting to 1000 [ 451.936603][T19258] lo speed is unknown, defaulting to 1000 [ 452.160012][T19247] syz_tun: left allmulticast mode [ 452.181261][T19247] dvmrp8: left allmulticast mode [ 452.506624][T19270] syzkaller0: left promiscuous mode [ 452.513975][T19270] syzkaller0: left allmulticast mode [ 452.797618][T19290] vlan4: entered allmulticast mode [ 452.802926][T19290] bridge0: entered allmulticast mode [ 452.809191][T19290] bridge5: port 1(vlan4) entered blocking state [ 452.819583][T19290] bridge5: port 1(vlan4) entered disabled state [ 452.823829][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 452.828431][T19290] vlan4: entered promiscuous mode [ 452.841376][T19290] bridge0: entered promiscuous mode [ 452.853560][T19295] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 453.221384][T19307] netlink: 'syz.1.3856': attribute type 4 has an invalid length. [ 453.265504][T19309] sctp: [Deprecated]: syz.2.3857 (pid 19309) Use of int in max_burst socket option deprecated. [ 453.265504][T19309] Use struct sctp_assoc_value instead [ 453.424868][T19301] veth7: left promiscuous mode [ 453.431103][T19301] tipc: Resetting bearer [ 453.441516][T19301] syzkaller0: left promiscuous mode [ 453.447612][T19301] syzkaller0: left allmulticast mode [ 453.462379][T19301] veth11: left promiscuous mode [ 453.556934][T19320] vxcan1: entered allmulticast mode [ 453.583215][T19320] vxcan1: left allmulticast mode [ 453.863770][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 454.001721][T19345] wg1 speed is unknown, defaulting to 1000 [ 454.008568][T19338] netlink: 'syz.0.3861': attribute type 13 has an invalid length. [ 454.048366][T19345] lo speed is unknown, defaulting to 1000 [ 454.903742][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 454.983365][T19362] veth1_to_bond: entered allmulticast mode [ 454.994953][T19361] veth1_to_bond: left allmulticast mode [ 455.290327][T19374] 8021q: adding VLAN 0 to HW filter on device bond17 [ 455.307687][T19374] bond0: (slave bond17): Enslaving as a backup interface with a down link [ 455.326319][T19373] netlink: 'syz.4.3870': attribute type 1 has an invalid length. [ 455.342961][T19373] __nla_validate_parse: 4 callbacks suppressed [ 455.342977][T19373] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3870'. [ 455.359794][T19373] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3870'. [ 455.943692][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 456.119211][T19395] siw: device registration error -23 [ 456.145676][T19399] tipc: Enabling of bearer rejected, already enabled [ 456.158647][T19395] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3877'. [ 456.159498][T19399] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 456.174924][T19395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3877'. [ 456.178423][T19399] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 456.202245][T19395] tipc: Enabling of bearer rejected, already enabled [ 456.212937][T19395] veth0_to_bridge: entered promiscuous mode [ 456.219337][T19395] veth0_to_bridge: entered allmulticast mode [ 456.460711][T19413] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 456.471611][T19410] wg1 speed is unknown, defaulting to 1000 [ 456.487998][T19410] lo speed is unknown, defaulting to 1000 [ 456.983695][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 457.161109][T19436] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 457.202695][T19437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.023740][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 458.087892][T19471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3896'. [ 458.307054][T19472] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3895'. [ 458.489044][T19485] netlink: 'syz.2.3899': attribute type 4 has an invalid length. [ 458.559438][T19485] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3899'. [ 458.723653][T19494] 8021q: adding VLAN 0 to HW filter on device bond2 [ 458.765004][T19494] bond0: (slave bond17): Releasing active interface [ 458.781527][T19494] bond0: (slave bond17): the permanent HWaddr of slave - ba:59:79:00:d6:37 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 458.821261][T19494] bond0: (slave bond18): Releasing active interface [ 458.841799][T19494] bond0: (slave bond20): Releasing active interface [ 458.882863][T19494] bond0: (slave bond21): Releasing active interface [ 458.904334][T19494] bond0: (slave bond22): Releasing active interface [ 458.988193][T19494] bond0: (slave bond23): Releasing active interface [ 458.998906][T19494] bond0: (slave bond24): Releasing active interface [ 459.063744][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 459.087741][T19505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3904'. [ 459.111504][T19498] wg1 speed is unknown, defaulting to 1000 [ 459.149430][T19498] lo speed is unknown, defaulting to 1000 [ 459.278646][T19514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3906'. [ 459.827154][T19520] wg1 speed is unknown, defaulting to 1000 [ 459.885403][T19520] lo speed is unknown, defaulting to 1000 [ 460.103727][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 460.516448][T19546] wg1 speed is unknown, defaulting to 1000 [ 460.543055][T19546] lo speed is unknown, defaulting to 1000 [ 460.752405][T19548] wg1 speed is unknown, defaulting to 1000 [ 460.789469][T19548] lo speed is unknown, defaulting to 1000 [ 460.850424][T19556] netlink: 'syz.1.3911': attribute type 1 has an invalid length. [ 460.909458][T19556] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3911'. [ 460.988604][T19558] wg1 speed is unknown, defaulting to 1000 [ 461.016498][T19556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3911'. [ 461.110472][T19558] lo speed is unknown, defaulting to 1000 [ 461.140604][T19560] netlink: 'syz.4.3912': attribute type 23 has an invalid length. [ 461.143873][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 461.580671][T19571] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3914'. [ 461.624747][T19571] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3914'. [ 461.931057][T19584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3917'. [ 461.983899][T19588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 462.004060][T19588] tipc: Failed to remove unknown binding: 66,1,1/50540910:653687287/653687289 [ 462.037501][T19585] tipc: Failed to remove unknown binding: 66,1,1/50540910:653687287/653687289 [ 462.056467][T19585] tipc: Failed to remove unknown binding: 66,1,1/50540910:653687287/653687289 [ 462.089006][T19588] netlink: 788 bytes leftover after parsing attributes in process `syz.4.3918'. [ 462.183823][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 462.233757][T19590] wg1 speed is unknown, defaulting to 1000 [ 462.241457][T19590] lo speed is unknown, defaulting to 1000 [ 462.952452][T19613] veth1_to_bond: entered allmulticast mode [ 462.960466][T19613] bond_slave_1: entered promiscuous mode [ 462.968160][T19612] bond_slave_1: left promiscuous mode [ 462.978900][T19612] veth1_to_bond: left allmulticast mode [ 463.104841][T19617] tipc: Enabling of bearer rejected, already enabled [ 463.150297][T19615] wg1 speed is unknown, defaulting to 1000 [ 463.223803][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 463.260399][T19615] lo speed is unknown, defaulting to 1000 [ 463.391359][T19618] netlink: 'syz.2.3925': attribute type 1 has an invalid length. [ 463.434019][T19618] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3925'. [ 463.458669][T19618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3925'. [ 463.472090][T19624] wg1 speed is unknown, defaulting to 1000 [ 463.482717][T19628] dvmrp8: entered allmulticast mode [ 463.551264][T19624] lo speed is unknown, defaulting to 1000 [ 463.723005][T19625] wg1 speed is unknown, defaulting to 1000 [ 463.840020][T19625] lo speed is unknown, defaulting to 1000 [ 463.853285][T19640] netlink: 'syz.2.3931': attribute type 4 has an invalid length. [ 463.922120][T19638] 8021q: adding VLAN 0 to HW filter on device bond18 [ 463.957486][T19638] bond0: (slave bond18): Enslaving as a backup interface with a down link [ 464.059930][T19644] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3931'. [ 464.097480][T19635] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3929'. [ 464.130253][T19647] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 464.139309][T19647] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 464.159158][T19648] netlink: 'syz.1.3933': attribute type 4 has an invalid length. [ 464.180909][T19622] dvmrp8: left allmulticast mode [ 464.229971][T19647] netlink: 'syz.3.3932': attribute type 37 has an invalid length. [ 464.263775][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 464.401562][T19656] veth1_to_bond: entered allmulticast mode [ 464.413006][T19658] bond_slave_1: entered promiscuous mode [ 464.426781][T19655] bond_slave_1: left promiscuous mode [ 464.432534][T19655] veth1_to_bond: left allmulticast mode [ 464.611912][T19666] bond12: (slave geneve4): Releasing active interface [ 464.641107][T19666] bond13: (slave batadv1): Releasing active interface [ 464.680096][T19666] bond14: (slave veth9): Releasing active interface [ 464.720608][T19666] bond0: (slave bond15): Releasing backup interface [ 464.747215][T19672] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 464.774353][T19674] netlink: 'syz.0.3942': attribute type 4 has an invalid length. [ 464.811709][T19674] nbd: couldn't find a device at index 0 [ 464.921736][T19681] wg1 speed is unknown, defaulting to 1000 [ 464.932496][T19681] lo speed is unknown, defaulting to 1000 [ 465.097983][T19691] netlink: 'syz.3.3945': attribute type 4 has an invalid length. [ 465.203195][T19683] netlink: 'syz.0.3944': attribute type 13 has an invalid length. [ 465.249279][T19697] wg1 speed is unknown, defaulting to 1000 [ 465.265576][T19697] lo speed is unknown, defaulting to 1000 [ 465.418560][T19705] netlink: 'syz.3.3948': attribute type 13 has an invalid length. [ 465.431045][T19705] netlink: 'syz.3.3948': attribute type 17 has an invalid length. [ 465.539114][T19705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.558013][T19705] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.648950][T19705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 465.704840][ C1] ================================================================== [ 465.712982][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 465.720914][ C1] Read of size 2 at addr ffff888058143c2a by task syz.4.3951/19716 [ 465.728817][ C1] [ 465.731183][ C1] CPU: 1 UID: 0 PID: 19716 Comm: syz.4.3951 Not tainted syzkaller #0 PREEMPT(full) [ 465.731210][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 465.731232][ C1] Call Trace: [ 465.731241][ C1] [ 465.731251][ C1] dump_stack_lvl+0x189/0x250 [ 465.731282][ C1] ? rcu_is_watching+0x15/0xb0 [ 465.731305][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 465.731329][ C1] ? rcu_is_watching+0x15/0xb0 [ 465.731350][ C1] ? lock_release+0x4b/0x3e0 [ 465.731384][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 465.731411][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 465.731439][ C1] print_report+0xca/0x240 [ 465.731460][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 465.731489][ C1] kasan_report+0x118/0x150 [ 465.731522][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 465.731557][ C1] rose_timer_expiry+0x471/0x4b0 [ 465.731589][ C1] call_timer_fn+0x17e/0x5f0 [ 465.731621][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 465.731650][ C1] ? call_timer_fn+0xbe/0x5f0 [ 465.731681][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 465.731718][ C1] ? rcu_is_watching+0x15/0xb0 [ 465.731738][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 465.731770][ C1] __run_timer_base+0x61a/0x860 [ 465.731798][ C1] ? rcu_is_watching+0x15/0xb0 [ 465.731826][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 465.731882][ C1] run_timer_softirq+0xb7/0x180 [ 465.731909][ C1] handle_softirqs+0x283/0x870 [ 465.731929][ C1] ? irq_work_single+0x1ac/0x240 [ 465.731958][ C1] ? do_softirq+0xec/0x180 [ 465.731980][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 465.732002][ C1] ? rcu_is_watching+0x15/0xb0 [ 465.732020][ C1] ? bpf_test_run_xdp_live+0x38e/0x1b10 [ 465.732053][ C1] do_softirq+0xec/0x180 [ 465.732071][ C1] [ 465.732079][ C1] [ 465.732086][ C1] ? __pfx_do_softirq+0x10/0x10 [ 465.732105][ C1] ? netif_receive_skb_list_internal+0x4fd/0xcb0 [ 465.732135][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 465.732164][ C1] ? rcu_is_watching+0x15/0xb0 [ 465.732185][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 465.732204][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 465.732226][ C1] ? rcu_is_watching+0x15/0xb0 [ 465.732246][ C1] ? netif_receive_skb_list+0xc0/0x450 [ 465.732272][ C1] ? bpf_test_run_xdp_live+0x38e/0x1b10 [ 465.732304][ C1] bpf_test_run_xdp_live+0x1868/0x1b10 [ 465.732361][ C1] ? bpf_test_run_xdp_live+0x38e/0x1b10 [ 465.732402][ C1] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 465.732437][ C1] ? bpf_dispatcher_xdp+0x800/0x1000 [ 465.732464][ C1] ? bpf_dispatcher_xdp+0x800/0x1000 [ 465.732492][ C1] ? 0xffffffffa02017cc [ 465.732510][ C1] ? 0xffffffffa0201848 [ 465.732543][ C1] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 465.732569][ C1] ? _copy_from_user+0x94/0xb0 [ 465.732595][ C1] ? bpf_test_init+0x133/0x170 [ 465.732626][ C1] ? xdp_convert_md_to_buff+0x5b/0x330 [ 465.732663][ C1] bpf_prog_test_run_xdp+0x713/0x1000 [ 465.732703][ C1] ? rcu_is_watching+0x15/0xb0 [ 465.732727][ C1] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 465.732765][ C1] ? __fget_files+0x2a/0x420 [ 465.732787][ C1] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 465.732821][ C1] bpf_prog_test_run+0x2c7/0x340 [ 465.732861][ C1] __sys_bpf+0x581/0x870 [ 465.732891][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 465.732931][ C1] ? rcu_is_watching+0x15/0xb0 [ 465.732957][ C1] __x64_sys_bpf+0x7c/0x90 [ 465.732983][ C1] do_syscall_64+0xfa/0x3b0 [ 465.733006][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.733028][ C1] ? clear_bhb_loop+0x60/0xb0 [ 465.733054][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.733080][ C1] RIP: 0033:0x7fc03658ebe9 [ 465.733100][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.733120][ C1] RSP: 002b:00007fc0374e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 465.733147][ C1] RAX: ffffffffffffffda RBX: 00007fc0367b5fa0 RCX: 00007fc03658ebe9 [ 465.733165][ C1] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 465.733179][ C1] RBP: 00007fc036611e19 R08: 0000000000000000 R09: 0000000000000000 [ 465.733194][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.733208][ C1] R13: 00007fc0367b6038 R14: 00007fc0367b5fa0 R15: 00007fffcbf05e48 [ 465.733235][ C1] [ 465.733243][ C1] [ 466.160329][ C1] Allocated by task 19635: [ 466.164745][ C1] kasan_save_track+0x3e/0x80 [ 466.169434][ C1] __kasan_kmalloc+0x93/0xb0 [ 466.174031][ C1] __kmalloc_noprof+0x27a/0x4f0 [ 466.178890][ C1] copy_splice_read+0x143/0xa50 [ 466.183753][ C1] splice_direct_to_actor+0x4d0/0xcc0 [ 466.189138][ C1] do_splice_direct+0x181/0x270 [ 466.193997][ C1] do_sendfile+0x4da/0x7e0 [ 466.198428][ C1] __se_sys_sendfile64+0x13e/0x190 [ 466.203562][ C1] do_syscall_64+0xfa/0x3b0 [ 466.208083][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.213980][ C1] [ 466.216306][ C1] Freed by task 19635: [ 466.220377][ C1] kasan_save_track+0x3e/0x80 [ 466.225065][ C1] kasan_save_free_info+0x46/0x50 [ 466.230098][ C1] __kasan_slab_free+0x5b/0x80 [ 466.234870][ C1] kfree+0x18e/0x440 [ 466.238788][ C1] copy_splice_read+0x903/0xa50 [ 466.243746][ C1] splice_direct_to_actor+0x4d0/0xcc0 [ 466.249136][ C1] do_splice_direct+0x181/0x270 [ 466.253993][ C1] do_sendfile+0x4da/0x7e0 [ 466.258414][ C1] __se_sys_sendfile64+0x13e/0x190 [ 466.263534][ C1] do_syscall_64+0xfa/0x3b0 [ 466.268039][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.273938][ C1] [ 466.276263][ C1] The buggy address belongs to the object at ffff888058143c00 [ 466.276263][ C1] which belongs to the cache kmalloc-512 of size 512 [ 466.290318][ C1] The buggy address is located 42 bytes inside of [ 466.290318][ C1] freed 512-byte region [ffff888058143c00, ffff888058143e00) [ 466.304031][ C1] [ 466.306355][ C1] The buggy address belongs to the physical page: [ 466.313219][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58140 [ 466.322003][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 466.330510][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 466.338070][ C1] page_type: f5(slab) [ 466.342062][ C1] raw: 00fff00000000040 ffff88801a441c80 dead000000000100 dead000000000122 [ 466.350649][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 466.359239][ C1] head: 00fff00000000040 ffff88801a441c80 dead000000000100 dead000000000122 [ 466.367909][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 466.376577][ C1] head: 00fff00000000002 ffffea0001605001 00000000ffffffff 00000000ffffffff [ 466.385242][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 466.393910][ C1] page dumped because: kasan: bad access detected [ 466.400320][ C1] page_owner tracks the page as allocated [ 466.406027][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3630, tgid 3630 (kworker/u8:9), ts 70071759466, free_ts 25487595366 [ 466.427379][ C1] post_alloc_hook+0x240/0x2a0 [ 466.432175][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 466.437720][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 466.443525][ C1] alloc_pages_mpol+0x232/0x4a0 [ 466.448392][ C1] allocate_slab+0x8a/0x370 [ 466.452889][ C1] ___slab_alloc+0xbeb/0x1410 [ 466.457577][ C1] __kmalloc_cache_noprof+0x296/0x3d0 [ 466.462947][ C1] __ipv6_dev_mc_inc+0x44f/0xa50 [ 466.467907][ C1] addrconf_dad_work+0x3d0/0x14b0 [ 466.472936][ C1] process_scheduled_works+0xae1/0x17b0 [ 466.478484][ C1] worker_thread+0x8a0/0xda0 [ 466.483078][ C1] kthread+0x70e/0x8a0 [ 466.487151][ C1] ret_from_fork+0x3f9/0x770 [ 466.491744][ C1] ret_from_fork_asm+0x1a/0x30 [ 466.496516][ C1] page last free pid 1 tgid 1 stack trace: [ 466.502312][ C1] __free_frozen_pages+0xbc4/0xd30 [ 466.507450][ C1] free_contig_range+0x1bd/0x4a0 [ 466.512388][ C1] destroy_args+0x64/0x4a0 [ 466.516805][ C1] debug_vm_pgtable+0x39f/0x3b0 [ 466.521650][ C1] do_one_initcall+0x233/0x820 [ 466.526410][ C1] do_initcall_level+0x104/0x190 [ 466.531363][ C1] do_initcalls+0x59/0xa0 [ 466.535692][ C1] kernel_init_freeable+0x334/0x4b0 [ 466.540891][ C1] kernel_init+0x1d/0x1d0 [ 466.545216][ C1] ret_from_fork+0x3f9/0x770 [ 466.550099][ C1] ret_from_fork_asm+0x1a/0x30 [ 466.554888][ C1] [ 466.557220][ C1] Memory state around the buggy address: [ 466.562849][ C1] ffff888058143b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 466.570919][ C1] ffff888058143b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 466.579000][ C1] >ffff888058143c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 466.587530][ C1] ^ [ 466.593100][ C1] ffff888058143c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 466.601178][ C1] ffff888058143d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 466.609243][ C1] ================================================================== [ 466.617480][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 466.624712][ C1] CPU: 1 UID: 0 PID: 19716 Comm: syz.4.3951 Not tainted syzkaller #0 PREEMPT(full) [ 466.634117][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 466.644197][ C1] Call Trace: [ 466.647504][ C1] [ 466.650371][ C1] dump_stack_lvl+0x99/0x250 [ 466.655002][ C1] ? __asan_memcpy+0x40/0x70 [ 466.659652][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.664890][ C1] ? __pfx__printk+0x10/0x10 [ 466.669550][ C1] vpanic+0x281/0x750 [ 466.673597][ C1] ? __pfx_vpanic+0x10/0x10 [ 466.678135][ C1] ? rcu_is_watching+0x15/0xb0 [ 466.682942][ C1] panic+0xb9/0xc0 [ 466.686705][ C1] ? __pfx_panic+0x10/0x10 [ 466.691158][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 466.697085][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 466.702998][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 466.708127][ C1] check_panic_on_warn+0x89/0xb0 [ 466.713076][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 466.718209][ C1] end_report+0x78/0x160 [ 466.722464][ C1] kasan_report+0x129/0x150 [ 466.726984][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 466.732109][ C1] rose_timer_expiry+0x471/0x4b0 [ 466.737059][ C1] call_timer_fn+0x17e/0x5f0 [ 466.741662][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 466.747132][ C1] ? call_timer_fn+0xbe/0x5f0 [ 466.751816][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 466.756939][ C1] ? rcu_is_watching+0x15/0xb0 [ 466.761702][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 466.767182][ C1] __run_timer_base+0x61a/0x860 [ 466.772038][ C1] ? rcu_is_watching+0x15/0xb0 [ 466.776808][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 466.782194][ C1] run_timer_softirq+0xb7/0x180 [ 466.787045][ C1] handle_softirqs+0x283/0x870 [ 466.791810][ C1] ? irq_work_single+0x1ac/0x240 [ 466.796776][ C1] ? do_softirq+0xec/0x180 [ 466.801207][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 466.806492][ C1] ? rcu_is_watching+0x15/0xb0 [ 466.811256][ C1] ? bpf_test_run_xdp_live+0x38e/0x1b10 [ 466.816809][ C1] do_softirq+0xec/0x180 [ 466.821054][ C1] [ 466.823986][ C1] [ 466.826918][ C1] ? __pfx_do_softirq+0x10/0x10 [ 466.831766][ C1] ? netif_receive_skb_list_internal+0x4fd/0xcb0 [ 466.838101][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 466.844780][ C1] ? rcu_is_watching+0x15/0xb0 [ 466.849544][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 466.854763][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 466.860481][ C1] ? rcu_is_watching+0x15/0xb0 [ 466.865243][ C1] ? netif_receive_skb_list+0xc0/0x450 [ 466.870821][ C1] ? bpf_test_run_xdp_live+0x38e/0x1b10 [ 466.876405][ C1] bpf_test_run_xdp_live+0x1868/0x1b10 [ 466.881896][ C1] ? bpf_test_run_xdp_live+0x38e/0x1b10 [ 466.887484][ C1] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 466.893304][ C1] ? bpf_dispatcher_xdp+0x800/0x1000 [ 466.898597][ C1] ? bpf_dispatcher_xdp+0x800/0x1000 [ 466.903909][ C1] ? 0xffffffffa02017cc [ 466.908082][ C1] ? 0xffffffffa0201848 [ 466.912245][ C1] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 466.918147][ C1] ? _copy_from_user+0x94/0xb0 [ 466.922935][ C1] ? bpf_test_init+0x133/0x170 [ 466.927725][ C1] ? xdp_convert_md_to_buff+0x5b/0x330 [ 466.933202][ C1] bpf_prog_test_run_xdp+0x713/0x1000 [ 466.938599][ C1] ? rcu_is_watching+0x15/0xb0 [ 466.943365][ C1] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 466.949188][ C1] ? __fget_files+0x2a/0x420 [ 466.953783][ C1] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 466.959652][ C1] bpf_prog_test_run+0x2c7/0x340 [ 466.964605][ C1] __sys_bpf+0x581/0x870 [ 466.968853][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 466.973665][ C1] ? rcu_is_watching+0x15/0xb0 [ 466.978445][ C1] __x64_sys_bpf+0x7c/0x90 [ 466.982868][ C1] do_syscall_64+0xfa/0x3b0 [ 466.987377][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.993439][ C1] ? clear_bhb_loop+0x60/0xb0 [ 466.998144][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.004033][ C1] RIP: 0033:0x7fc03658ebe9 [ 467.008442][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.028045][ C1] RSP: 002b:00007fc0374e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 467.036468][ C1] RAX: ffffffffffffffda RBX: 00007fc0367b5fa0 RCX: 00007fc03658ebe9 [ 467.044449][ C1] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 467.052414][ C1] RBP: 00007fc036611e19 R08: 0000000000000000 R09: 0000000000000000 [ 467.060384][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.068350][ C1] R13: 00007fc0367b6038 R14: 00007fc0367b5fa0 R15: 00007fffcbf05e48 [ 467.076324][ C1] [ 467.079688][ C1] Kernel Offset: disabled [ 467.084008][ C1] Rebooting in 86400 seconds..