last executing test programs: 4.93254887s ago: executing program 1 (id=3428): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmmsg$alg(r0, &(0x7f0000004640)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="4a4e9ebec7e6c54608c823d4e2f7f1155d5e98d45e9afeebcaf5585c3a9c58351e8a6ef54944440d51d6dfc13b21b3daa3b140029f9e6487a31e6154b179f23adbc33ef01ce9bd3058e7e3ee5c82c393d053d037fceb84737f8a723344330c2b39a9b67fbe7332e7f0c0aaa99b4d18a0b73c72aefc4c6775f5c8642dfa3f06bee51c3faae3d18caf818ff76aa9a9857441a93eee0f74d687255dbf7cd1911e89d8a0a73e3f4862409e54cbd17f55452632c6fe1e259de1a9ace026fb1f27faf7e16233afaca1e470f5b2bc29be8550823914af614bc816524a09eb6b7ae3017b35c977dfe1cb44907e0c7093c3ba7709124d44602ec49639a3a5d1bb94b70c0e73358fc3c16a91e567f51edb7b8e63d3d6283fc14f4c449b4dc83de530051378d0e177810f3574d1cacdba1fae090ae579b6d0491d1881fbd55e8b66a664ad77db774b61eaa6a4034447a8052a18e17c715c38d07228bfb07a5adad51016a219c0033447cdd113432d7da2b7358cbc7e7e66868eaf9c5e1aeebfdf62a7f7b0e8f9a25d5d137c5de5b1176604536472115a1055d207d2dbd402c3a99418fafa7c1f591cb2a9e10af89bda509a031391dc8bd9b7525d156820ed5ecb9d1575c786dc9497a54bb2b561fb74baa5dea80d8c988e4e67d44cde5d427733ccfa549c9a53cc550c65e5c75fbf88bb2c1aa4eae699e73d6a751d112c97e28c7b4abded024fe19ecc589e253124cecb2587e686431c4dfaa2d18a0afecc5b950c36e864e1d60127a36164aa33f6521fc51c2e3e7d53792670833e57b86ec056bb1daca29fcb6851703f48224cf4359d1f4312b89065a13686d3711e193ee8113228203a2bcb0f1bffb7376ec7789e2ebdcc022bff7758d893e1ccbcde3885dadc548dc2db09ed5ccfd3f4aab0f0ce801b835ad2539a39a4fcfb78030003126c187d459e4dd5990071bbc40233bce5b20616db8ecbcfef91189e2d5489820d0d94cd0f3ecb85415975c690fc58e0970866ea2e167fc34e4293f1b328aa2a5fa1b4e4e567f3a9d739323960fb5fec3ae1dc757fc8de4492ba65813c6cedbd7e048dbd382dc38740257cb2d85db08063b40cd090e31fc84dffc4693947d1114bcaeb4c81dd68a54ffca644b5fa00b088845391876b9ef68663736c77b7f53de2be9aa81da97447ca58073cc7cfd6c5de54197695b6b4ed0fc97f35d681c5f1c5f032d650212cc5f565f7f06557850e5cc48cc08bf311540bd06a4cfcd3bc8fb6835fc2df7afce0efd9e7c9569d87abf3a589e65e733b91da3779e855ef800e7b35267f31d2adcae69a8fa3a07b4848ab1896305ec210aa0d69729a7b747c8e97bbc31db9f44ece04365eeab171820725c543218a8ebd320bd0091224aaeb17c0faaf5e9b160f2120ac56104f98dac29164f51956f7c203fea940041434fd2396cffad670fce738604564468b3407c80d1808a04f14b89d3e9382911bf84a0e4c01c9829717c0b35ff24b771e9b4246ccf0a9945a0e75f6f4b7d0f322123d77e3547fa72d22be6a4b92c95834d7767ef80ed83e9204435b8435ce254df467b951599ed6639705958cdb221d5a08a594bdea78185d933d7ac0973681fa6323e1a468fb75256dca137baf32cff62fca0faf7ba08d005dce7507605c26210e0b4802afc23588fe3fa4e24a76c10aa1e3b5ac9a793938c1384e016c6e01c1bab93159de40b66b8a8d1fc50d21aa0943ed1abc5487c549b86ca6a697182aa690aa08e20119d0e36597ab8edba3fdbcd49ab998db7d0a31efb048c51da8ce134f9bec2ea9e13bb8a4cc5b047065050648f0e3d59de6d5653bcbd6c979e3929b15b715d5a2e617df1b9af9f6b459128e73d8e216b2ebf79816da0ff6f3e4fe9fc9c6a2e881d48efc4db74c3026f031ef82ff7859bfcaff700b665025b01405c52195f58385cc116c568c838000e8a683fd74cb6d5e292fba825f539550445b642c19f05ea937faf6c5388c7767dcec7cfa13ac66f8fa82e1c3635077ee1baa86ec6daccd4924be3775a499ce0f9c24f5f7d3ea9c1b2558ec3dec4e6e627f4d42d092a8a6de71c95a65872db4f85cd35847c816f5e69fccaa7dde98f030591d7dc5d3a49e1b17674045995b7f8e616fc82d3b9dad6be878441ff671e208c3f8ec3ce316efbf5bafdcdeb996e355c048495c974705c4da40fdc84fdac5770ae17a83d6879f98bb9fcab30ad00d276495031d1ddcdb19c470a59d4da6c9ffc67ebd798b99dcc611860da738fabc4c033397798b5806dd9a2b86be50b6f6702a0465eca5964753963bfb5743c7958af79f3acde9a30e8b261c2524f3cb160391039ecd0cc0cc37e0c1467b36bf46e1c763f7a772e6e0083d91086cbc2c44485afffeb972f701e5a027a49f2eafe340464f82fd6a65bba688b6c37ad028ce9c34ea195db025433bf288eff2d3782a907fda55e86450931ef7ce5c97df47c5ea7a57377c286d7ff05cc43a7490594722ff4f4d48d482203fa917c40ebba0bcdcb4827dd4753d4d70a1707683c4d8bc58c9ce99d0f28fb168f89371152dbb0251568202028df125467a45ca8ae715e7e6221324689e92db265d0457365ab06726520a25ad25ffdef4e9a7d53c48db826dfd8352583323745ad14276bef0fe18641a17833366b901e71853cf521a55265c76314d56d07b342d28fb77c62e0c41791c92b5f2e3bf45f4a20537c01eea7f7015207677b02373b82e79d7208b2cb32be0672cbe495b67b59739dfc0b8ec5334794981fe31cbb7cce410330bf0545ff7460c7117f2edeb87b7f40c4ffe5028b642b7e88d281e836c6aac0b4f4569c96fece4076fd9c3f9cb18ed94942456aea1d7f7514b288f6579733d889ec4084763cd863bbaf4a2cc44fde08c69a789af5801a97a51be125972c88eae63d2323a3ca50c9e2c79986e223153f9f942e1b35f25aecacb1983d8c51324c2a823d84540039fd9f70d3daef38e9d4af092d93fc9951a38614ad36bc66c2ec7cbae2ae34566eac0366f22e2cf0aae213054d453d9ad64731b7a6c7edc28161b1e2ce0cc303df0b423de6f13efccf3af81963b34a50e1fafd3cebed8096447a28567e7ea46efd39902108cea853f3c21101b4779b65e77e0b816503802e01df83077af5d7d39df362794791e4d07df6776d285de569780d95aba007812a3dd19001b1553bab9e185f44ef455642db128410f8c4a90d3e38c7a55bacb375d215950c1689e09a0d6b0c4432a7406a118ddb74da7488eb24f83a620af4854fbc05a5d917626e4431a072b76014e4bfbb88081dbfcc2ba17fbf5027d0db665f18eead84107cc2eb65d2bf3399874348a4e9953016bfb459051e8ad792d7c570a53ac06914eb6f34b12eeae9f98430c37e3b18ba46a83ad1300bab3c5208bdb627bc34eeb5726aa5cb067010da0b2f921f2a1033314c6ee44625853b6ba9671f424290932fe6186b033ccd5d3adb2c2b13a84eb60e955e7ca422bcd2584e7bbc7b5fa110e33ab94cee2aa477218385155b07013859d0cd3ae863507a3c9a647497ea6958314fefae94c72bc1a00f41b17db9e37ea9b8569da30583618c2ac84dd05d1b36ec2b72af7ffa2d6d5bd6f63703ce2123d149d185221d4e28ffaf65816d423cd0bad9e8f9a236775930b370049081059adba2c689b2ba82f49fa6db9f80707c6eaa46cae9f1e6acec676d8cf5285230f2ff0a8a32508a953829f12e77212ec5d5b49cec8cbcc0bdc4f46727a3797bc548f40a7b79dc564acc1f80b0c9ae54684bedfa729bab12c344b3342bd2e5b7506309eb64c59267b8084e565c61de39ac4db7954ca8e1d59659064ad250f3f15bce371c8f6a1e99517a83e731ff078063215442ebbd18b789af00854f16ae9e54fe6620d58f841fe25b3f0f4606771ce9df352ce49c463aa1477b6b8723af8003dd1b8b90d19991f417af2095962ba60051fd5e2743c743269c20247ebc0fe15ecfae87816a1d8b8b8260ec04f80696c59c29a92d6f78949695bad47fe387d4bf652e904350f737e22760c1edbdd62082b6e0175e64a2120f7249f5f9b6a2149165235353f922b98bf8892ad35f0abd5e477cef94879d6ccec7ef6a5b3ff4fca3a05a3d781184e722b8c989b6e3b92f54ecab524ebd2a4f1dbae0f4406c41b6722808199be24afb4aa410298344b1934b60dfdcd6ca98419b519f81aef14b7369b2fd6bee41b76cbd3930dbbb878bb45a60b99641309909734afec4bab02a204aa9c99f242bb8c3e3ebb7be3b76d2d37d0a60c0c69085f430bc566e91552087402b1ba4113ac1cb761ce0e28ad966402323c323e6a40e66ef2ee2db5bb94e6a5c1ee74bcacb6684157eea9be0fa1bb102420a67c47f84c202bd15e6016fff07cf2f7ce6e415d2d90ec3202f5917ddf13ce0b51e4ee82823099226b2835b67b9af3c7f36a4f16a25739bad0233ca13bd4b7d809602d3f35016e7df7f51e71d2be12f915e64c6a4eb95be6744fbb87231cd5e8a43272a580c40637c398e4764beba208f71ec0167bd33ad51bc93d0ecbe252c7ec3039dc8e7e7b2019d1ebb96e2864a7b6a0f37552d79b542be08c02001491e5fe9f8ab027531b190687f350350fd4e7b35101d96d3c592dbbf8e5904926c38a43c2acf4e8c18a72fe391213e233686f5c58658f84e0c7f02b2c07f9eccd507c0584cf30058247c67c3337ecac21e5a30429e053d5fe1731624ca5349a18bb061d2f8e382f033260429b28f8860af6862dfe7588f671d41bc6bec787ce8d7044c61832a4074107a3eb742f8a7d1ce487c55efe87a2c3aa8b2cc48af01780b9c9a968a7c4480c1a3b02bce43bb728cfa051200206f7ee277c3d477688de2b80ad8bebded5b4b715092e738739d21a6fbfedda42e524a23a13559f76477f7759a37edd68e23772f7da34b7335f57e23488fc2cc364754e060dce4fc1978e53a032a1ff1ac9413e5591f9dee0dbcc3b1a35bc7fb8d92252e0b3b474c2864583d98a0c9e23a5ca48ea6972c1bc01f86ca7442301e65ca892028d0a32842b479941653cc902e9a93afac00a1b40be2f88fd273ae9a046fcd816548134acf231522c7f07183370eb0aae037c0d4f483845b554f85feb1b776dbead44fa08563056b103929707d5cc02373a05db11d0fcd13e2a85d9c44e5c681015cc980b948caf5917c62f9fe5f695b2d740e7597196d86f2d85561f1006a0fac4fa115da04bdb49751c98184e2622bf86dc53476605d0224e1bcc480b65a1ea17ffbff0674ca125c1a3db5dc415bdc4a53b8b55f1e1733f4d0ecdf30b3a702cc8fd71586f330fba3ee82a6bf866e3cbfe03edc19455a14cb519ed6a68829d25cae1b56603f8a223be682e24389e298aa44c99ea0e71e88cd0a9ccb59e79051e0632afd087e34b3394755cde75da24b31c5ff6ebf353ac41f7062f3e55c1448e25a0961d41d3c16dfbc7c599c79a17f21cdc7585e1010639dfd009f2a1ad443769fb629e986efbcff917a553d3dc01dfbde7560deb8999c60e5bf7278cb593f262670dd5fd9e4d4d44af550ac9d1a32e8d480385b7b572525e41a68275e30dc61423e61bf38a51df8c5d148e4e1338013d5f220ae3ab4261767491210fc0fa3e8544a4db16f47514e8664d71504d6d45d58c2f4a6e833128ea20a262ff88c048f16ac57c6d729a3ce8b6b5923c1754ac2e84e2ac0f9703af0c5eea3063e68e60084579759fbfd54fd8a0f7c31e2098a7533e68ee391d67611099aa1448dad83ce043c2e06a86cb8c0aae12afec1171df53be660e276a18d330", 0x1000}, {&(0x7f0000001180)="53c3e031816b218d7a47f4dfe2f720f9809416d688048072e97deef62a7b7f9ebc1a7acba7909efbca65db91457ef4afbce997aea92ab76396041540f3fbfe01fc66df8eeaef6c825584cbfe02d75ee1d0c7af53fd7da7cb05869b74882d4f9c06a2e7f8b0c2f5f6b60ae2f15a7674166e7f91104321722e54393fa6d7ec493005bbd2e6453767783b3a5c45f40e7c66ed12f73543615675d7e7339f9ac22b9ccdb95e82116e98c3d71ddd49ee19bf8758953a9889d8c3371246e2c8c23ed5c598", 0xc1}, {&(0x7f0000000040)="a640e282f8ebe178cba577395785a6143c5c8de07a70e2246a", 0x19}, {&(0x7f0000000080)="28c0", 0x2}], 0x4, &(0x7f0000004780)=[@iv={0xe8, 0x117, 0x2, 0xd0, "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"}, @assoc={0x18, 0x117, 0x4, 0x2}, @iv={0x50, 0x117, 0x2, 0x35, "6a665c4ebc70f4b7c164256e26d6cc24d9d1de4f78c94bc62d3a4d58ed5dc687f952c42b59e037a3d5ef84cb8bb81639509605df3b"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x100, 0x117, 0x2, 0xea, "4e90e93de806275d19adce506bde353e096cbec071266d45e531b5a58b8e17b5979724aee4cc75b76b6c4aef9380a814c40c1f202da4a1d2edb145096de89215218562da20e533383ffc5a4cc220a499a25c5d466822a95eb4686aee112d37bc529b660e6d55a6cae0a8ba252c9648b9ebdeda740684668dbd1e12bbec8332b1e83c947321123cd34e8940b61325005c616025c308560fb291fc34bb7d3c83ec96857e391e9ad7cdd30342ffcd05d0ccd501d7441c3cdaae9abda59e8cd297566a99adc00aaa5a5b3bcbb2ffac0ab4fb769f702e9e49f1010afc5a6f07d2e0abb72487e0428601897f41"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x2c8}, {0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001580)="164ed39934bb31b6f246082fa78b3182d869ad74fa4c0925", 0x18}, {&(0x7f00000015c0)="1603bb4757b0ada14269124ebeb1d62ddee214bdc9d3f3b28e5e3c58dcd61133f2bc40b3c36a204ef0697fe4fbf29d3c7898ee329499f1fb8ee3c3f851d9d5fc6aab7ee2d38020741cab58ceb570c3961f3964c69b870a93c44f713a73d9781caea8b3019aa21d45f87110073a1d77b2732969d7d0007c10218ec52f80899c734a3ce808fa41ba20034e37485c464d0d2f595d9de783665999f59b9d90d83658b36f1a26", 0xa4}, {&(0x7f0000001680)="722dbc03cd46d60b6db5c3f02d5a3fbff49702679e1dfd2f1a1570bd6cf582442f3a3b99fa3ac7799a8c14d97b3b85c0cc33455b02f4202d9c72e1359e4a2359c4036934c080dd0f5aabc356db99e32a4124127e2c6c4187e33e990de77f3e485e65365e71774bb2b9c8efd49a97d07af8676fa45fa6ac0e9db5d834d9e923b42b56634ec123678e276d42524593ff407deb44d682", 0x95}, {&(0x7f0000001740)="ec3270833dc37dd6da01b640dda61f2940da9fea884f9140929a8af13dff6b164e2536effc5ec035ee603907dca6bec90b9c56bd780ebac24ae99944feb98026e59b063f8a5d33da9df554c7042bdad65e94eed68a6457882242acadecb0c6355f3b6615b0384e92d3ae3fbf7c464bfd62effb2805057c3d9cf79449c1ec5991f7f0e775d869eeb2e106d4d6b6285db4434015cc1ecc1b464d86", 0x9a}, {&(0x7f0000001800)="f76f83f7d70f006f01b9bedf660b122e053620fba143ad0ba022677600dd18ce7d267b9b2d4219c07446", 0x2a}], 0x5, &(0x7f00000018c0)=[@iv={0xd0, 0x117, 0x2, 0xb9, "f71f4133eef3958387ef6de7a75638696ed2baba8ba89b8cbe1eb0bc7f68f923a00d15d3514fc8bbe177d20a3ae16cdde0b11de30c60f16a5ce1d3d9b2a7758c74584dc993bda106162d2b4bd44ebf65b992c4404496e74238fd3282fcadd9afeed699f4303af4b8cf5172c34d9c91e4b3b7f1bbc8dd0981e22e08b3b3687e3ff157bc9f7d8a39d3244f2e6980b84d18de01d7410a12d1a90a85cba5cd9a7b625c735c5498a02db03743e157231f7a3355be67ab0ba3fdc3a8"}, @assoc={0xfffffffffffffecc, 0x117, 0x4, 0x77b}, @assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18}, @iv={0xe0, 0x117, 0x2, 0xcc, "035640c4d0fe7f281ec760863b499bbe924a71457db25035ade8f3671357d401a8a3073c8fd46abc694fd43694953204ab5ea48893305e1d6f73ff333b3b38531d8ab7273957a3ac5f8b06cc1fa82241517330e76d47ce6524d6117febe301da6bee44cea988b487ee13df3b3bd5746fa2edbaef0cc8a6623b8a4e8623f7eb30d3e2cefc3c8b63a0a521455e8b908133bf37b16c4c8c2f19307e12b2f59af2a00c805bfd734ecd6513dedc847dc9279b5db54b42df5ffe1a239d8123acf4f789eb90838b43ee0f00c8fc51fa"}, @iv={0x38, 0x117, 0x2, 0x1f, "c196f4380842b2e0f49a213b4a18662fbed87bcd72c1818b879c8b716c3141"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x88, 0x117, 0x2, 0x6d, "aacf520656040549a80b61e51c78b383f42837d02f31172365ed56b2831fe9a97df648aa4211a6a4b81966e5e636863ac197947defef059f7fd092c26ecb12d28b2a7cc597b836808418d3f6d962b21542100e0a45e86c6a7a6d70ca2ba64d19a6f2116c49e2b4de4557cfd425"}, @assoc={0x18, 0x117, 0x4, 0xffffffff}], 0x300, 0x80c0}, {0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f0000002bc0)="ce036668c3b2d46978dda7bc466aaad8008e216d547c65ffe6c1d1e9bd0b1d3b803004289c87584fb552dbfb8ab4beff90c49ca77131c942046b0d9cdbec2f870ad34c1bcdc8e5cbee464e40fe2fcba113cd237c4c69b5e9691bf4f5f14d651f320dcea2c26ee3f8e720775db688d12f47e8920af9148ff7bcfb53176af990792244d792ceeae93a51bae47e6fada4cd7c47b19199217c6ab27fccfeefc874762fcd2b47671cea477680c7710cbe1bf53950963c58a204a98800e31496703754f4407c1634d851ab058e49e44bac8c6072189daa", 0xd4}], 0x2, &(0x7f0000002d00)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x8d6532909c2a54a}, @assoc={0x18}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x1090, 0x1}, {0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000003dc0)="b7672cc0a55f3828dd88ead4999fe79c874e49a6d7da8995f7dbb7e25799b001a555aefcff5a0b221bd25aa73cd0455fa90b1003280fc404ad3045b3d128d932ebd29cd7a4b4400580e4f5303035d54f068673f6ad2767e04ef4b8418a7b6ef6452c0332bddca1b918c08d26f13db1994411dfb821046041d5d40b489911779128175b726315fad1b36fba4b298f4d436bcb3749d5a7f6ed0edf1d8d9ddc60f2c42977b650d228a5632adca31e64aa8d1f", 0xb1}, {&(0x7f0000003e80)="d651dc507e35afee8aec32f116d518cdb6a88d4d7682fab27a68a10ec4aa739ebef68c5e9962d246be7be69b5343a388d6", 0x31}, {&(0x7f0000003ec0)="a8a5b93ea847b4be6b5b13954db76b960a90b318cf1b19dcc60119cb96933069c392fee5db384f1b62e22e2e7df0bbacaff05e75547689b8210fcf481db4f74e1ff73bdcbd7fc686b3f5bdb8a61f136ee9eccee9586ec31c9edc7ee19c3871048afa36b1bfa4a7f963b6aabfec24a8ec2bed308ac09d411a78783f675b4d737b7e", 0x81}, {&(0x7f0000003f80)="45c6558eeba41ff84a63ff89565d12fb26be9328f1b2f1a8522060573dc0cea267fc1b08e5cb403118a634873fba2adcd2a8cfa8109485ee9b33a3f2ead3a60223c0e2ab8f2a9c5896d6f384a33e3c4d77c3705457d1332b5db671a0a64b7759d24ad893d159d288784772cc5e5a2424d111a78c19e983c7375f80c8fddb0967d7812729b65ca9b6993feb08906de6057a1503b54abbfb3a7449d5e117d5c833bbf05697f855adf6d2e5e4333e6e9e92031a6bd092159404b3ef4eda87c6261c7da30a621d96dafebb233ee5e8cfc032fd40", 0xd2}, {&(0x7f0000004080)="b40fc0ac5ae344d942ea81fb1a570ff70cd22b7bc0611c13ef83ce5fdf555e609076501f244d867515c1c92aa739c969c21f1641e4e36a56363f1f6cf6c8fae499a11e5355851a5cb0054fcb6c1e3c3302b51ab817240d8782739fcb412e07da82a3e4e559acb46c35ea5a11a8f7d52e848a32150314f2e7a215317d92b627d7935c5a34388f0c4531652e8a285cb4653689552fbdf84674b293106b4adc01ab2ccc359d7219253c19a54eb41f5413575032596f2e4c8fa81b69", 0xba}, {&(0x7f0000004140)="74ec522d12fa89c1e44e336c10046a24a2237784ecd28c51995317c7c3521fede26c6d1022649e5f335bb6382018fba528307b06b352fa40", 0x38}, {&(0x7f0000004180)="5a0de497633f5da6c11eb06d57a5e68ba20d6879b1ffe8e1cd4a5c7818f0eed58d5bb99c14f61d1011d769beac2925af11d55e06affbb8418ebff340da", 0x3d}, {&(0x7f00000041c0)="d48a1640b4605bd8390a3dcb383303619212fd9f337d7befa252473e66c46f062a9a5ebd8e89bc18b2e35252291baf07be333344723a92bd85418f098d45d7a29cc0aaf853c3704e6debe580887f934faf755bf8d221a2ccf78ba7be34c1e56a582c8bec1e514e6757dfdb758f1535074355fb0c8752", 0x76}, {&(0x7f0000004240)="5de4dcd1fa59df66f677f683c765a7dd3ece8d122036624f1d8d6725e30316ef86a9d07c46888c6fba87c7da79faf4aaaf4a89fdf1409e8e21969df881b3c640989aab102c91b5db5df22aa2324119fecdeab17b084bc347c1e565bf8df5b95078b7f05960355471a7877d7d6749a4dc08bea54dfa08c39dc017aaf2acef72bd07aa4fa3df68934ea4d979717f8dcdd59372e38fb559c39cf107ba4b167ef1b337c661091d1cd222c5103d1cb83730fe62ffa222ab9eb1f0ab9578149d80c9ebdd5e13b3462e9f8a8c93139ad19a2334d560b45613bbed6466ea52321c2c326e842cca64f3d5c98fcfe151c0", 0xec}], 0x9, &(0x7f0000004400)=[@assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x20, 0x117, 0x2, 0xb, "5a85501d7197f39a9c9cb8"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x58, 0x117, 0x2, 0x43, "70d1423e8986668ec9c10720ee59f6ea311054d1a10507d977809b1f1e4dbb97734abbe160888cbaf19d45b0248fde317dffde08814466f2329e8ce07af92cdf927636"}], 0xc0}, {0x0, 0x0, &(0x7f0000004600)=[{&(0x7f00000044c0)="117fb68a924c583c18fe0ab1672dee051d", 0x11}, {&(0x7f0000004500)="23cc4a0179d5a793a2647611ac20a0dfcd91af95103fa011cf87f0df058d5e1a009521a60a82fe96a0b4679f7ea2a1fb9381278eb23177f2b3d081896bf9a9bd3f1064a51e06f0a9bee08b3fc13c0599057a5bda179210802c0daa48aa6f32ae91a0549c0a3dd8f53f74e992420e521329e228163a85538a90787aa69eb28df5663cab4f64fe675568dc8c6e15ce3bbca88eb55445c1b2554831cd658681c77237346fc3c00e49a45becae289376ce4cb185ffdad0846129024e74b95ae35ea763d51791dd503455b64fd3796d40c019b2221a08efa346f2e5e77d8a630272f6", 0xe0}], 0x2, 0x0, 0x0, 0x4008085}], 0x5, 0x40050) sendfile(r1, r0, 0x0, 0xfff) 4.368269673s ago: executing program 0 (id=3433): r0 = socket(0x28, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x2, 0x0, 0x48) 4.270185073s ago: executing program 0 (id=3435): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, 0x0, 0x8800) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x20, r1, 0x501, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x62}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x2002, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) ioctl$TUNSETOWNER(r8, 0x400454cc, r9) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x34, r6, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x3b}}}}, [@NL80211_ATTR_KEY_SEQ={0xb, 0xa, "95960a0fed310e"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) tee(r11, r12, 0x80000001, 0x0) close(r12) close(r10) r13 = socket$unix(0x1, 0x1, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r15, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x9}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.118951962s ago: executing program 2 (id=3436): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x84014}, 0x4c094) (async) r4 = socket(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/480], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0x17, 0x7f, 0x3, 0x0, 0x1000, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r5, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r6, 0x10c, 0x1, &(0x7f00000000c0)=0xffff6a4b, 0x4) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=r8, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e6400000024010380040001001c01038090000180840002000091507b350537973af1a09f6a0a22f8cf5cc62fede9e35a9c8b4b280b7cc021fe04a329c2b4e06a9e6a2907837e0e13aa46000000000000006ffa6ffe18e2bf1551e8572a854e8009d26e87f17c252e94ea5e5bf337ab9af020d39448051a0a38e93577073c7933707fe9bce142b8971a5f2be0a4b035a87c58f573ded724070800010002"], 0x150}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, r8, 0x4, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x80000001}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xfed}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0xf44d}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x3}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x2}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x7}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0xffffdec0}]}, 0x54}, 0x1, 0x0, 0x0, 0x8011}, 0x8084) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x215, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r11}, 0x18) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0x1}}}, 0x24}}, 0x10) 4.102867546s ago: executing program 1 (id=3437): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000022ba16489daab70c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYRES64=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r1 = socket$inet6(0x10, 0x80000, 0x2000) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x1c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xfff2, 0x5}, {0xd, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008844}, 0x404c090) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x4f) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000600)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb5058b292eac8ba88a36aa1d7ee244", 0x3c}, {&(0x7f0000000540)="75de11d3af1d111f71e2ae3749e1e2df9a0a76cce2a2fe6dca3b0c3cdc88442cabff802d846789b9f6ef026d7de1ee144cbf0daa0fc7271dd2d0700712cae2fa3eca8c2a971c1652cf19325d73f23d03c75a0ca09f7df94566bc267758c0f7aecfebe0b1", 0x64}], 0x3, 0x0, 0x0, 0x20000000}], 0x1, 0x4040800) recvmsg$qrtr(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000700)=""/195, 0xc3}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x10020) sendto$rose(r8, &(0x7f0000000180)="0b83f00f83fb7f6804b44d8e50399ea9fb57abfc4bc8aeff2eee3f2ecd50ae3635a2e2ec", 0x24, 0x1, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r9) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x4}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.022818519s ago: executing program 2 (id=3438): r0 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'syzkaller0\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRES16, @ANYRES32=r5, @ANYBLOB="75b84216028be954682e44fdc848ef2b72ce8d00d07033f3fb6c1bb8da6dab2c630bac10ea4046039cb973c47a7c8414cd5da01451178a869047ca22e0edff16afebb5be889ab93c372501e07d4bd3923d3e5d384f4bded70cbade5e9e44752c163d6d815c58bd6c45c6d2ae49afdfee48c258e51fa6eb06c88120cc81c49555c0", @ANYRESHEX=0x0], 0x20}}, 0x0) 3.849417163s ago: executing program 0 (id=3441): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xfff1, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000200)) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=@delchain={0x5c, 0x65, 0x400, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xa}, {0xfff2, 0xe}, {0xfffc, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0xfffbc51f}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x7}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) 3.760105371s ago: executing program 4 (id=3442): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7", @ANYRES8=0x0, @ANYRESOCT=r2, @ANYRES16=0x0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='xprtrdma_reply\x00', r4, 0x0, 0x7}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r8}, &(0x7f0000000700), &(0x7f0000000740)=r3}, 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0500a7aaca490000050007"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000180)={0x9, 0x0, 0xf, 0xc}, &(0x7f00000001c0)=0x10) close(r10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280050015000100000005000100040000000500160022"], 0x4c}}, 0x0) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r10, &(0x7f0000000600)={&(0x7f0000000280), 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12", 0x13}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, &(0x7f0000000180)={r1, r13}) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f00000007c0)={0x2e, @empty, 0x4e20, 0x2, 'wrr\x00', 0x1, 0x8, 0x32}, 0x2c) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r14, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) write$cgroup_subtree(r14, &(0x7f0000000000)={[{0x2b, 'io'}]}, 0x4) 3.701598879s ago: executing program 2 (id=3443): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000252d010034001280090001007866726d0000000024000280080001000000000008000200030000e408000100010000000800010001000000080003"], 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x1, 0x3, 0x2, 0x3c}, 0x20) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000500)) 3.22424785s ago: executing program 4 (id=3445): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_enqueue\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$kcm(0xa, 0x922000000003, 0x11) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a0000000000000000070200002004681efa361595f6937420563b4b2a881877da027f90f0c42a621756c5656408d9979a40b7230c1fc399cc8aef53e454b2a0334c41f13bfc57f543fcc539d3bd6f558515db"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b71d5decf66cc00"/40, 0x28}], 0x1}, 0x0) 2.045731293s ago: executing program 2 (id=3446): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x8, 0x2}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff7b) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x80, 0x5, 0x80, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x8, 0x40}}) socket(0x2, 0x80805, 0x0) 2.039064289s ago: executing program 4 (id=3447): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = gettid() r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001140)=ANY=[@ANYBLOB="50000000100003040e000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="149c01000750050008001300", @ANYRES32=r0, @ANYBLOB="140003007665fa0aa0ca55986e0246f92ff83c5a157468305f766972745f776966690008001f00ba0000000a000100ffffffffffff0000ce62da2ea05d626af5f9e8ab5f1b5a4ec9f54aea423ae35ffef5c5c8ae20"], 0x50}, 0x1, 0x0, 0x0, 0x400c0d6}, 0x0) socket(0x2, 0x5, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0x400, 0x70bdab, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf}, {0xf, 0xd}, {0x7, 0xfff3}}}, 0x24}}, 0x24040084) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@mcast2}, &(0x7f0000001080)=0x14) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r6, 0x0, 0x24, 0x0, &(0x7f0000000280)="61dfb0020866c667fc53b9265583e283d8ddef068c05608ffc450394321545000043aee3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@private2}, &(0x7f0000000200)=0x14) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f0000000540), &(0x7f0000000580)=0x4) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {}, {0x7}}, [@TCA_CHAIN={0x8, 0xb, 0xaf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)) r11 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f00000000c0)=0x4100, 0x4) sendmsg$can_raw(r11, &(0x7f0000000000)={&(0x7f0000000780), 0x10, &(0x7f0000000200)={&(0x7f0000001100)=@can={{0x0, 0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "09151995c95f32cc"}, 0x10}}, 0x44001) 1.88991757s ago: executing program 1 (id=3449): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc64}}) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r1, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) 1.812194281s ago: executing program 0 (id=3450): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8b0b, &(0x7f0000000200)={'wlan1\x00', @random="9ffff7070600"}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001040)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r9}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r11, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r10, 0x4010744d, &(0x7f0000000180)) sendmsg$nl_route(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r7, @ANYRES32=r7], 0x44}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x2, 0x0, 0x0, 0x4, 0xae, 0xe4}, 0x20) socket$kcm(0x10, 0x0, 0x10) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) 1.594467306s ago: executing program 4 (id=3452): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000400)={0x0, 0xef, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fccbdf250900000005000700020000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000040000e41300050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x20008084}, 0x4040000) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000011000000e93100b65ab3f7560875a5434e", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf8200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200e8c}, 0x94) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018008000100666962001c0002800800024000000002080001400000000808000340000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a013f3c6b820fd0a8fc53c8df50317230d93cbd"], 0x80}}, 0x4048010) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r8 = socket$inet_sctp(0x2, 0xb68b1742289b37e3, 0x84) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r7, &(0x7f00000000c0)='K', 0x1, 0x44008011, 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000440)={'wpan3\x00'}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x30, 0x3, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="46ecabb326a34941de11d1c53b66832ceaa6526f27137da966672bfebe5f0170d7f77c45776f0019bca1c8a53332bfff9dffe282ac9bae7f90505fb009fffdc0d6d2e3c9a46a214111c55a08195f7410ca643df0b190764d242529ce1a6347003166bc6b02b3f6c41d419cc79832da08286d9cf0eee374a165d102f4fc4468a22560f87d27a0312f378f20b1e65f2f95703053d9", @ANYRES8=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x28, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001080000000000000000000083ea", @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004000000"], 0x30}}, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) close(0x3) 1.521680261s ago: executing program 0 (id=3453): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100), 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @remote}], 0x10) (async) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000002c0)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1.279765805s ago: executing program 0 (id=3454): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x28, 0x0, 0x1, 0x8}, 0x28) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) unshare(0x2a020400) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14) r11 = socket(0x1d, 0x2, 0x6) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x68, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x68}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r11, 0x89f6, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={@empty, 0x0, 0x0, 0x50, 0x0, [{@broadcast}, {@multicast1}, {@initdev}, {@remote}, {@loopback}]}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r10, @in={{0x2, 0x4e22, @empty}}, 0x2, 0x2, 0x614, 0x1, 0x2d, 0x7, 0x4}, 0x9c) 1.27873168s ago: executing program 1 (id=3456): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x7, 0xa, &(0x7f0000000a80)=ANY=[@ANYBLOB="18080000000000000000000000800000001000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001380)}}, 0x10) 1.123682917s ago: executing program 1 (id=3457): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f00000002c0)={0x1a, 0x0, 0x42, 0x8, 0x7a, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, 0x0) recvfrom$llc(r0, &(0x7f0000000000)=""/248, 0xf8, 0x40010001, 0x0, 0x0) listen(r0, 0xd) 727.283693ms ago: executing program 3 (id=3458): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x34, r2, 0x431, 0x70bd28, 0xfffffffd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000019005fe90000000000000000021800000000fd010000000008000100ac1414000800000a0101020c00"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000028000701000000080000090005"], 0x20}}, 0x40080c0) 516.207081ms ago: executing program 3 (id=3459): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) getsockname$qrtr(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x3c00, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x4}}}}}}}, 0x0) 456.220603ms ago: executing program 3 (id=3460): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x20, {0x30, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10003300, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) (async) recvmsg$unix(r2, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xa000}], 0x3}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 328.525104ms ago: executing program 3 (id=3461): r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008"], 0x124}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r3, r3, 0x2e}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r6, r3, 0x4, r3}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0xf0, 0x10, 0x413, 0x0, 0x0, {{@in6=@private2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x2b, 0x0, 0xee00}, {@in=@loopback, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xf}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x9}, {0x0, 0x4, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}}, 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x5, 0x20, 0x9, 0x4}, &(0x7f0000000180)=0x18) syz_emit_ethernet(0x5a, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010102, {[@rr={0x7, 0x1f, 0x18, [@loopback, @local, @loopback, @multicast1, @rand_addr=0x64010100, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x3, 0x80}, @noop]}}, {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}}, @NFT_MSG_NEWFLOWTABLE={0x4c, 0x16, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x38, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_USERDATA={0x7d, 0xc, "e392268e42d30ec76ac4433431ae4dd8f3ee52646d67f0a123d7e653cbd3d25a7aaeab75a2a6e4755662fe2447cea5c2dce92a06a9a558396b77a3d3b621d7388b000f6c617b680d511bff61b476d7561f4ad65c1ea7d34c7ca8f285e3fe1c393557a2eae0fdec9d88c42c6ee5896e84ed63f5bb4ebd9ea0cb"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x16c}, 0x1, 0x0, 0x0, 0x48004}, 0x24041) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0xfffffffffffffd14, &(0x7f0000000040)={&(0x7f00000002c0)={0x34, 0xd, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f00000015c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd0, 0xd0, 0x7, [@const={0x10, 0x0, 0x0, 0xa, 0x1}, @enum={0x6, 0x8, 0x0, 0x6, 0x4, [{0xd, 0x5}, {0x2, 0x3}, {0xc, 0x7}, {0xe, 0x4}, {0x10, 0xc59f}, {0x7, 0x6}, {0xc, 0x6}, {0x10, 0x3e4}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0xfff}}, @enum64={0xd, 0x1, 0x0, 0x13, 0x0, 0x1, [{0x4, 0x5, 0x8000}]}, @typedef={0x7, 0x0, 0x0, 0x8, 0x4}, @enum64={0x1, 0x4, 0x0, 0x13, 0x0, 0x2, [{0x1, 0x2, 0x5}, {0xb, 0xfffffff3, 0x1}, {0x4, 0xffffffff, 0xfffffffc}, {0xf, 0x705d, 0x1c00000}]}]}, {0x0, [0x30, 0x5f, 0x61, 0x61, 0x30]}}, &(0x7f00000016c0)=""/178, 0xef, 0xb2, 0x0, 0x2}, 0x28) socket$netlink(0x10, 0x3, 0x0) 276.188876ms ago: executing program 2 (id=3462): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000002004000000070000000014000200fc030000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x19af90f06f4514f1}, 0x40) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 275.817756ms ago: executing program 4 (id=3463): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005880)={&(0x7f0000005780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x1, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x2e, 0x30, 0x634eefca6c36d413]}}, 0x0, 0x29, 0x0, 0x1, 0x4}, 0x28) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r3 = socket$inet(0x10, 0x80003, 0xfff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@deltaction={0xe0, 0x31, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1d5}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0xe0}}, 0x4800) 174.713998ms ago: executing program 2 (id=3464): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x30042, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000001c0)={'wg1\x00', 0x400}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0xd, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="350a0000009908a1cb117c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 172.394624ms ago: executing program 1 (id=3465): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000001a80), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0xc804}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000001a80), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0xc804}, 0x0) (async) 120.242269ms ago: executing program 3 (id=3466): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) (async) close(r0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x22020600) (async) unshare(0x22020600) getsockopt$WPAN_SECURITY(r2, 0x0, 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r1, 0x0) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r1, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000380)={r1, r1, 0xc5, 0x82, &(0x7f00000002c0)="4d976c8bfb78f8256203bd6f4d198602f0d4a6285b0f99070ddbbd78c0e8af74578125e57d621a1840b7a63ace4d2dc69d47b5d0887dd4df584af8773465d7302dcb318ad652ecb79d93792059ff70bd88f39d9195e85ffb51c45780d0e5bd5cc77b6d916f8c8b2d4b10ca12025ee0a47bd91ba4604c2f7e5f5e935305fd09843930", 0x5, 0x5, 0x2, 0x9, 0x0, 0x1, 0x0, 'syz0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 96.32748ms ago: executing program 4 (id=3467): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xc, @remote, 'ip6tnl0\x00'}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000900)=r4, 0x4) socket$kcm(0x10, 0x3, 0x10) (async) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@hci={0x1f, 0x8, 0xd}, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)="2704677f01f6ff7f231000008035", 0xe}], 0x1}, 0x54) (async) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@hci={0x1f, 0x8, 0xd}, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)="2704677f01f6ff7f231000008035", 0xe}], 0x1}, 0x54) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 0s ago: executing program 3 (id=3468): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) (async, rerun: 64) ioctl$PPPIOCSACTIVE(r0, 0x40107446, 0x0) (rerun: 64) write(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) (async) r1 = socket(0xf, 0x3, 0xfffffffd) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x7e, 0x6, 0x10, @mcast1, @loopback={0x0, 0xffff888101827518}, 0x40, 0x20, 0x5, 0x5}}) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r2], 0x28}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x27, 0x10, 0x0, &(0x7f00000002c0)="f8ad48cc02cb29dcc8007f5b08007125", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000ff7f00000000000006000000850000006100000085000000070000009500000000000000a9a3aeca5f2350295657e485be37b3f236d2a92463603d3e4a07a58b"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r5 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'virt_wifi0\x00'}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000fffe00080009000000000008000a000000000008000a00000000"], 0x184}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000200), 0x0) (async) r6 = socket$inet6(0xa, 0x3, 0x3c) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="5fa1cc6475604fc77e0ce3f7125b35d9060da80bbb8d5985dfa34fdba59faf7671723318fffc7bb6e42dcac65ab15bdd30a6c8461cc5dc69178e1697e18cd2c6a0bb", 0x42}], 0x1) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) writev(r6, 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) close(r8) (async, rerun: 64) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) kernel console output (not intermixed with test programs): vsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 316.463091][T14181] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 316.597535][T14181] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.623972][T14181] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 316.643042][T14181] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 316.774369][T14181] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.831541][T14181] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 316.884436][T14181] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 317.044229][T14181] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.120263][T14214] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2186'. [ 317.143028][T14181] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 317.169425][T14214] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2186'. [ 317.189027][T14181] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 317.323842][T14219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2186'. [ 317.516809][ T1154] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.528307][ T1154] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 317.543658][ T1154] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 317.611194][ T1154] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.630752][ T1154] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 317.643338][ T1154] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 317.670831][ T1154] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.683823][ T1154] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 317.692220][ T1154] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 317.736064][ T1154] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.772854][ T1154] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 317.801534][ T1154] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 318.293545][T14243] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2194'. [ 318.352258][T14238] IPVS: Error connecting to the multicast addr [ 319.000860][T14281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2208'. [ 319.024655][T14281] netlink: 'syz.1.2208': attribute type 4 has an invalid length. [ 319.053505][T14281] netlink: 'syz.1.2208': attribute type 4 has an invalid length. [ 319.493582][T14308] lo speed is unknown, defaulting to 1000 [ 319.519551][T14308] lo speed is unknown, defaulting to 1000 [ 319.631729][T14312] lo speed is unknown, defaulting to 1000 [ 319.731851][T14323] dvmrp1: entered allmulticast mode [ 319.868008][T14312] lo speed is unknown, defaulting to 1000 [ 320.116117][T14331] tipc: Enabling of bearer rejected, already enabled [ 320.192412][T14331] tipc: Resetting bearer [ 320.281137][T14343] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20001 [ 320.328867][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.618922][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.145172][T14375] __nla_validate_parse: 8 callbacks suppressed [ 321.145193][T14375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2233'. [ 321.190412][T14376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2233'. [ 321.229717][T14376] lo: entered allmulticast mode [ 321.272845][T14375] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 321.367846][T14374] lo: left allmulticast mode [ 321.469125][T14388] netem: incorrect ge model size [ 321.474499][T14388] netem: change failed [ 321.508256][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.555131][T14392] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612) [ 321.627787][T14392] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 321.631183][T14398] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2239'. [ 321.675120][T14399] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2240'. [ 321.743956][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.913939][T14418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2242'. [ 321.935484][T14418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2242'. [ 321.962123][T14423] sctp: [Deprecated]: syz.2.2244 (pid 14423) Use of int in maxseg socket option. [ 321.962123][T14423] Use struct sctp_assoc_value instead [ 321.986145][T14417] tipc: Enabled bearer , priority 0 [ 322.014178][T14417] syzkaller0: entered promiscuous mode [ 322.039471][T14417] syzkaller0: entered allmulticast mode [ 322.077224][T14417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2243'. [ 322.119050][T14436] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 322.167406][T14429] tipc: Resetting bearer [ 322.253874][T14429] tipc: Disabling bearer [ 322.364730][T14446] tipc: Enabled bearer , priority 0 [ 322.389783][T14448] syzkaller0: entered promiscuous mode [ 322.395304][T14448] syzkaller0: entered allmulticast mode [ 322.498721][T14454] sctp: [Deprecated]: syz.2.2252 (pid 14454) Use of int in max_burst socket option. [ 322.498721][T14454] Use struct sctp_assoc_value instead [ 322.557603][T14438] tipc: Resetting bearer [ 322.573245][T14458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2251'. [ 322.616146][T14458] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2251'. [ 322.625496][T14434] tipc: Resetting bearer [ 322.697224][T14434] tipc: Disabling bearer [ 322.751264][T14455] lo speed is unknown, defaulting to 1000 [ 322.790729][T14455] lo speed is unknown, defaulting to 1000 [ 322.951679][T14466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2255'. [ 322.953570][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.238235][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.306329][T14477] tipc: Enabling of bearer rejected, already enabled [ 323.709334][T14496] !: renamed from dummy0 (while UP) [ 323.804259][T14498] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 324.229593][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.670691][T14521] block nbd1: server does not support multiple connections per device. [ 324.708407][T14521] block nbd1: shutting down sockets [ 325.269563][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.421256][T14546] IPVS: set_ctl: invalid protocol: 22 255.255.255.255:20002 [ 325.437543][T14544] lo speed is unknown, defaulting to 1000 [ 325.474812][T14544] lo speed is unknown, defaulting to 1000 [ 325.566301][T14556] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 325.664728][T14557] erspan0: left promiscuous mode [ 325.679001][T14557] erspan0: left allmulticast mode [ 325.765927][T14557] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.793524][T14557] bridge0: port 1(0!) entered blocking state [ 325.800308][T14557] bridge0: port 1(0!) entered forwarding state [ 325.853875][T14557] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 326.168019][T14551] rdma_rxe: rxe_newlink: failed to add lo [ 326.241515][T14577] __nla_validate_parse: 8 callbacks suppressed [ 326.241534][T14577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2282'. [ 326.308958][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.686143][T14591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2287'. [ 326.792970][T14591] lo speed is unknown, defaulting to 1000 [ 326.814620][T14591] lo speed is unknown, defaulting to 1000 [ 326.855031][T14599] lo speed is unknown, defaulting to 1000 [ 327.102600][T14614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2291'. [ 327.350349][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.424604][T14599] lo speed is unknown, defaulting to 1000 [ 328.129522][T14628] lo speed is unknown, defaulting to 1000 [ 328.136987][T14634] syzkaller1: entered promiscuous mode [ 328.157036][T14634] syzkaller1: entered allmulticast mode [ 328.164835][T14628] lo speed is unknown, defaulting to 1000 [ 328.339971][T14636] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2298'. [ 328.517402][T14642] tipc: Enabled bearer , priority 0 [ 328.535763][T14642] syzkaller0: entered promiscuous mode [ 328.541536][T14642] syzkaller0: entered allmulticast mode [ 328.670042][T14642] tipc: Resetting bearer [ 328.719012][T14641] tipc: Resetting bearer [ 328.787918][T14641] tipc: Disabling bearer [ 329.299778][T14656] netlink: 'syz.0.2302': attribute type 1 has an invalid length. [ 329.318173][T14656] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2302'. [ 329.429063][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.675599][T14664] ip6tnl2: entered promiscuous mode [ 329.795135][T14676] gre3: entered promiscuous mode [ 329.963338][T14681] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2314'. [ 329.993061][T14681] netlink: 'syz.4.2314': attribute type 10 has an invalid length. [ 330.001172][T14681] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 330.047253][T14681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.067589][T14681] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 330.171857][T14688] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2316'. [ 330.199008][T14688] netlink: 'syz.2.2316': attribute type 1 has an invalid length. [ 330.327659][T14703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2319'. [ 330.422564][T14703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2319'. [ 330.433783][T14710] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2322'. [ 330.469209][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.473540][T14710] IPVS: length: 8 != 446622349272 [ 330.549152][ T5873] Bluetooth: hci4: command 0x0405 tx timeout [ 330.862850][T14705] netlink: 'syz.3.2321': attribute type 12 has an invalid length. [ 330.874095][T14712] lo speed is unknown, defaulting to 1000 [ 330.886453][T14712] lo speed is unknown, defaulting to 1000 [ 331.097342][T14730] syzkaller0: entered promiscuous mode [ 331.119985][T14730] syzkaller0: entered allmulticast mode [ 331.154349][T14729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.311792][T14725] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 331.412987][T14743] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 331.454053][T14749] netlink: 'syz.4.2333': attribute type 10 has an invalid length. [ 331.492158][T14749] team0: Port device 0! added [ 331.509161][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.222068][T14767] tipc: Resetting bearer [ 332.233625][T14767] bridge0: port 1(0!) entered disabled state [ 332.266077][T14767] veth0_to_bond: left allmulticast mode [ 332.277190][T14767] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 332.289719][T14767] geneve2: left promiscuous mode [ 332.294712][T14767] geneve2: left allmulticast mode [ 332.301442][T14767] veth5: left promiscuous mode [ 332.307207][T14767] xfrm1: left promiscuous mode [ 332.312389][T14767] xfrm1: left allmulticast mode [ 332.318205][T14767] netdevsim0: left allmulticast mode [ 332.338036][T14767] macsec2: left promiscuous mode [ 332.375576][T14767] macsec2: left allmulticast mode [ 332.413008][T14774] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 332.548882][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.634205][T14778] __nla_validate_parse: 3 callbacks suppressed [ 332.634224][T14778] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2340'. [ 332.704557][T14791] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2343'. [ 332.708033][T14786] lo speed is unknown, defaulting to 1000 [ 332.760610][T14786] lo speed is unknown, defaulting to 1000 [ 332.922225][T14799] netlink: 'syz.1.2340': attribute type 1 has an invalid length. [ 332.930075][T14799] netlink: 'syz.1.2340': attribute type 2 has an invalid length. [ 332.949626][T14799] netlink: 'syz.1.2340': attribute type 1 has an invalid length. [ 333.211732][T14810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2348'. [ 333.221630][T14811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2348'. [ 333.626322][T14827] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2353'. [ 334.055121][T14843] netlink: 'syz.3.2356': attribute type 1 has an invalid length. [ 334.063377][T14843] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2356'. [ 334.222518][T14832] veth1_to_team: left allmulticast mode [ 334.346787][T14832] tipc: Resetting bearer [ 334.353595][T14832] syzkaller0: left promiscuous mode [ 334.359101][T14832] syzkaller0: left allmulticast mode [ 334.365618][T14832] bond3: left promiscuous mode [ 334.370591][T14832] bond3: left allmulticast mode [ 334.375883][T14832] gretap2: left promiscuous mode [ 334.384630][T14832] bond6: left promiscuous mode [ 334.390830][T14832] bond6: left allmulticast mode [ 334.397930][T14832] gre3: left promiscuous mode [ 334.409325][ T5927] lo speed is unknown, defaulting to 1000 [ 334.417585][ T5927] sz1: Port: 1 Link DOWN [ 334.437972][T14853] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 334.453730][T14853] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 334.495529][T14858] netlink: 'syz.4.2358': attribute type 1 has an invalid length. [ 334.503530][T14858] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2358'. [ 334.523490][T14858] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2358'. [ 334.628978][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.651711][T14863] netlink: 'syz.3.2359': attribute type 4 has an invalid length. [ 334.738877][T14866] tipc: Enabling of bearer rejected, failed to enable media [ 334.781747][T14860] lo speed is unknown, defaulting to 1000 [ 334.833424][T14879] netlink: 'syz.4.2361': attribute type 1 has an invalid length. [ 334.856479][T14879] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2361'. [ 334.893399][T14860] lo speed is unknown, defaulting to 1000 [ 335.116849][T14892] netlink: 'syz.0.2366': attribute type 1 has an invalid length. [ 335.165039][T14891] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.2367'. [ 335.244399][T14893] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 335.258277][T14893] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 335.405650][T14909] netlink: 'syz.1.2370': attribute type 10 has an invalid length. [ 335.571856][T14905] syzkaller0: entered promiscuous mode [ 335.588255][T14905] syzkaller0: entered allmulticast mode [ 335.597749][ T7252] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 335.610509][T14924] netlink: 'syz.2.2371': attribute type 27 has an invalid length. [ 335.669022][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.741213][T14916] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 335.852610][T14926] tc_dump_action: action bad kind [ 336.709057][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.181712][T14969] netlink: 'syz.2.2384': attribute type 1 has an invalid length. [ 337.269893][T14971] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 337.513147][T14984] netlink: 'syz.1.2390': attribute type 13 has an invalid length. [ 337.532576][T14984] netlink: 'syz.1.2390': attribute type 17 has an invalid length. [ 337.615956][T14984] bridge0: port 1(0!) entered blocking state [ 337.622361][T14984] bridge0: port 1(0!) entered forwarding state [ 337.633177][T14984] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.644391][T14984] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 337.714558][T14998] netlink: 'syz.1.2394': attribute type 21 has an invalid length. [ 337.723176][T14998] __nla_validate_parse: 6 callbacks suppressed [ 337.723195][T14998] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2394'. [ 337.752520][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.898609][T14998] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2394'. [ 338.934852][T15005] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2394'. [ 339.223847][T15020] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2400'. [ 339.491804][T15043] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2404'. [ 339.540247][T15047] validate_nla: 2 callbacks suppressed [ 339.540267][T15047] netlink: 'syz.2.2405': attribute type 10 has an invalid length. [ 339.829215][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.076885][T15064] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2411'. [ 340.103731][T15064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.123643][T15064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.201823][T15077] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2412'. [ 340.571420][T15090] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2417'. [ 340.609251][T15092] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2417'. [ 340.673343][T15081] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2412'. [ 340.868886][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.366053][T15138] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 341.484085][T15143] netlink: 'syz.1.2430': attribute type 1 has an invalid length. [ 341.509863][T15143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.722194][T15154] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.734270][T15156] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 341.897347][T15163] netlink: 'syz.1.2436': attribute type 2 has an invalid length. [ 341.908909][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.940894][T15163] netlink: 'syz.1.2436': attribute type 1 has an invalid length. [ 342.589470][T15194] tipc: Enabling of bearer rejected, failed to enable media [ 342.796028][T15207] __nla_validate_parse: 5 callbacks suppressed [ 342.796049][T15207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2452'. [ 342.823063][T15207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2452'. [ 342.836021][T15207] netlink: 'syz.4.2452': attribute type 13 has an invalid length. [ 342.949336][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.085978][T15220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2455'. [ 343.094267][T15221] netlink: 844 bytes leftover after parsing attributes in process `syz.3.2456'. [ 343.515860][T15240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2463'. [ 343.544328][T15243] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 343.692077][T15255] xt_limit: Overflow, try lower: 271964/0 [ 343.715827][T15254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2468'. [ 343.718148][T15238] netlink: 'syz.2.2462': attribute type 1 has an invalid length. [ 343.733442][T15254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2468'. [ 343.765563][T15254] netlink: 'syz.0.2468': attribute type 1 has an invalid length. [ 343.785103][T15254] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2468'. [ 343.889642][T15263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2471'. [ 343.920740][T15263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2471'. [ 343.957118][T15265] netlink: 'syz.1.2472': attribute type 9 has an invalid length. [ 343.969174][T15263] bridge0: port 1(vlan2) entered blocking state [ 343.980217][T15263] bridge0: port 1(vlan2) entered disabled state [ 343.986720][T15263] vlan2: entered allmulticast mode [ 344.008816][T15263] bridge0: entered allmulticast mode [ 344.032103][T15263] vlan2: left allmulticast mode [ 344.037426][T15263] bridge0: left allmulticast mode [ 344.326710][T15295] openvswitch: netlink: Missing key (keys=44, expected=200000) [ 344.396235][T15294] tipc: Enabling of bearer rejected, already enabled [ 344.423555][T15294] syzkaller0: entered promiscuous mode [ 344.432607][T15294] syzkaller0: entered allmulticast mode [ 344.718226][T15312] lo speed is unknown, defaulting to 1000 [ 344.726291][T15312] lo speed is unknown, defaulting to 1000 [ 344.904779][T15319] netlink: 'syz.3.2486': attribute type 11 has an invalid length. [ 344.937796][T15320] bond0: option use_carrier: invalid value (6) [ 345.029266][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.167874][T15330] IPVS: length: 168 != 8 [ 345.175044][T15330] sctp: [Deprecated]: syz.2.2490 (pid 15330) Use of int in max_burst socket option. [ 345.175044][T15330] Use struct sctp_assoc_value instead [ 345.256830][T15331] tipc: Enabled bearer , priority 0 [ 345.262858][T15333] netlink: 'syz.4.2492': attribute type 1 has an invalid length. [ 345.273444][T15331] syzkaller0: entered promiscuous mode [ 345.279578][T15331] syzkaller0: entered allmulticast mode [ 345.375844][T15342] tipc: Resetting bearer [ 345.393758][T15329] tipc: Resetting bearer [ 345.431387][T15329] tipc: Disabling bearer [ 345.730656][T15348] lo speed is unknown, defaulting to 1000 [ 345.798109][T15357] syzkaller0: create flow: hash 2149468931 index 1 [ 345.824842][T15348] lo speed is unknown, defaulting to 1000 [ 345.966813][T15353] syzkaller0: delete flow: hash 2149468931 index 1 [ 346.071365][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.108956][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.806963][T15394] __nla_validate_parse: 14 callbacks suppressed [ 347.806986][T15394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2506'. [ 347.994176][T15369] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 348.019039][T15369] gretap1: left promiscuous mode [ 348.024284][T15369] gretap1: left allmulticast mode [ 348.040603][T15369] geneve2: left promiscuous mode [ 348.045659][T15369] geneve2: left allmulticast mode [ 348.082359][T15369] ip6tnl2: left promiscuous mode [ 348.148795][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.191225][ T3490] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.237116][ T3490] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 348.268702][ T3490] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 348.302763][ T3490] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.344267][ T3490] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 348.366182][ T3490] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 348.390982][T15400] tipc: Enabling of bearer rejected, failed to enable media [ 348.425134][ T3176] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.454418][ T3176] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 348.496263][ T3176] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 348.580764][ T3176] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.604601][ T3176] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 348.620396][ T3176] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 348.646243][T15411] lo speed is unknown, defaulting to 1000 [ 348.654923][T15411] lo speed is unknown, defaulting to 1000 [ 348.685590][T15417] lo speed is unknown, defaulting to 1000 [ 348.854678][T15429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2515'. [ 348.983518][T15417] lo speed is unknown, defaulting to 1000 [ 349.009661][T15433] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.2517'. [ 349.028225][T15433] sctp: [Deprecated]: syz.1.2517 (pid 15433) Use of int in max_burst socket option. [ 349.028225][T15433] Use struct sctp_assoc_value instead [ 349.076355][T15433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2517'. [ 349.183026][T11824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.196830][T11824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.945470][T15455] tipc: Enabling of bearer rejected, already enabled [ 350.229128][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.296115][T15469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2526'. [ 350.315327][T15471] netlink: 'syz.2.2525': attribute type 4 has an invalid length. [ 350.360751][T15471] netlink: 'syz.2.2525': attribute type 4 has an invalid length. [ 350.391622][T15473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2527'. [ 350.431402][T15478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.452014][T15478] netlink: 788 bytes leftover after parsing attributes in process `syz.4.2529'. [ 350.837183][T15498] netlink: 'syz.3.2534': attribute type 1 has an invalid length. [ 350.849895][T15500] netlink: 'syz.3.2534': attribute type 1 has an invalid length. [ 351.156444][T15514] netlink: 'syz.3.2537': attribute type 21 has an invalid length. [ 351.174989][T15514] netlink: 'syz.3.2537': attribute type 6 has an invalid length. [ 351.199758][T15514] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2537'. [ 351.237262][T15515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2537'. [ 351.240803][T15514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2537'. [ 351.268838][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.292904][T15513] lo speed is unknown, defaulting to 1000 [ 351.305709][T15513] lo speed is unknown, defaulting to 1000 [ 351.334056][T15521] tipc: Enabling of bearer rejected, already enabled [ 351.696599][T15534] netlink: 'syz.0.2544': attribute type 10 has an invalid length. [ 351.725444][T15534] team0: Port device 0! added [ 352.309078][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.348168][T15561] nbd: must specify at least one socket [ 352.430365][T15561] netlink: 'syz.2.2551': attribute type 4 has an invalid length. [ 352.454651][T15563] netlink: 'syz.2.2551': attribute type 4 has an invalid length. [ 352.485932][T15561] netlink: 'syz.2.2551': attribute type 4 has an invalid length. [ 352.863442][T15558] netlink: del zone limit has 4 unknown bytes [ 353.349460][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.548187][T15611] __nla_validate_parse: 6 callbacks suppressed [ 353.548207][T15611] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2561'. [ 353.783063][T15616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2562'. [ 353.887760][T15616] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2562'. [ 354.122019][T15636] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2565'. [ 354.241352][T15641] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2568'. [ 354.311533][T15644] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 354.347203][T15647] bridge3: entered promiscuous mode [ 354.354247][T15647] bridge3: entered allmulticast mode [ 354.600479][T15658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2572'. [ 354.648940][T15644] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 354.816415][T15662] tipc: Enabling of bearer rejected, already enabled [ 354.900530][T15668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2576'. [ 354.961291][T15671] 8021q: adding VLAN 0 to HW filter on device bond7 [ 354.971197][T15671] team0: Port device bond7 added [ 354.999201][T15644] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 355.018522][T15672] 8021q: adding VLAN 0 to HW filter on device bond8 [ 355.026830][T15672] team0: Port device bond8 added [ 355.045125][T15668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2576'. [ 355.082342][T15668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2576'. [ 355.091841][T15644] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 355.110740][T15668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2576'. [ 355.316199][T15692] siw: device registration error -23 [ 355.428979][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.453719][T15701] netlink: 'syz.1.2584': attribute type 11 has an invalid length. [ 355.743150][T15716] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 355.873803][T15722] team0: Port device 0! removed [ 355.889343][T15722] bond0: (slave wlan1): Releasing backup interface [ 355.992591][T15722] team0: Port device bond7 removed [ 356.072607][T15722] team0: Port device bond8 removed [ 356.332787][T15741] Bluetooth: MGMT ver 1.23 [ 356.468925][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.496430][T15746] batman_adv: batadv0: Removing interface: vlan2 [ 357.509147][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.811784][T15756] lo speed is unknown, defaulting to 1000 [ 357.819681][T15756] lo speed is unknown, defaulting to 1000 [ 357.830543][T15762] lo speed is unknown, defaulting to 1000 [ 358.549757][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.679977][T15762] lo speed is unknown, defaulting to 1000 [ 359.682627][T15805] validate_nla: 1 callbacks suppressed [ 359.682644][T15805] netlink: 'syz.1.2611': attribute type 1 has an invalid length. [ 359.736811][T15805] __nla_validate_parse: 40 callbacks suppressed [ 359.736832][T15805] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2611'. [ 359.967575][T15813] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2613'. [ 360.250653][T15817] netlink: 30 bytes leftover after parsing attributes in process `syz.1.2614'. [ 360.275657][T15817] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2614'. [ 360.512050][T15820] syzkaller0: entered promiscuous mode [ 360.517575][T15820] syzkaller0: entered allmulticast mode [ 360.556133][T15820] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 360.564414][T15820] syzkaller0: Linktype set failed because interface is up [ 360.629013][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.673616][T15825] lo speed is unknown, defaulting to 1000 [ 360.688546][T15825] lo speed is unknown, defaulting to 1000 [ 360.694788][T15834] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2619'. [ 360.760701][T15834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2619'. [ 360.873114][T15839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2620'. [ 360.945243][T15842] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 361.066825][T15846] tipc: Enabling of bearer rejected, already enabled [ 361.669159][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.007097][T15864] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2626'. [ 362.592127][T15879] 8021q: adding VLAN 0 to HW filter on device bond9 [ 362.641621][T15879] bond0: (slave bond9): Enslaving as an active interface with an up link [ 362.709052][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.204500][T15902] lo speed is unknown, defaulting to 1000 [ 363.227505][T15902] lo speed is unknown, defaulting to 1000 [ 363.607150][T15940] netlink: 9280 bytes leftover after parsing attributes in process `syz.3.2643'. [ 363.739676][T15940] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 363.755620][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.866125][T15944] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2644'. [ 364.317305][T15963] bond0: (slave dummy0): Releasing backup interface [ 364.489361][T15967] lo speed is unknown, defaulting to 1000 [ 364.497258][T15967] lo speed is unknown, defaulting to 1000 [ 364.604139][T15974] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 364.831948][T15981] __nla_validate_parse: 1 callbacks suppressed [ 364.831966][T15981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2658'. [ 364.881012][T15987] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2660'. [ 364.907864][T15984] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2658'. [ 365.032235][T15983] 8021q: adding VLAN 0 to HW filter on device bond11 [ 365.032672][T15994] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2661'. [ 365.046926][T15983] bond10: (slave bond11): Enslaving as an active interface with an up link [ 365.061134][T15984] 8021q: adding VLAN 0 to HW filter on device bond10 [ 365.219234][T16004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2660'. [ 365.321048][T16010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2663'. [ 365.829764][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.191681][T16052] netlink: 'syz.3.2677': attribute type 10 has an invalid length. [ 366.236240][T16052] batman_adv: batadv0: Removing interface: macsec1 [ 366.335356][T16058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2677'. [ 366.378131][T16058] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2677'. [ 366.391498][T16058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2677'. [ 366.403136][T16058] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2677'. [ 366.661613][T16076] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 366.671277][ T30] audit: type=1107 audit(1755208733.949:7): pid=16073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 366.695228][T16076] af_packet: tpacket_rcv: packet too big, clamped from 240 to 4294967272. macoff=96 [ 366.708726][ T5183] Bluetooth: hci2: command 0x0401 tx timeout [ 366.711097][ T5873] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 366.868950][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.891787][T16090] netlink: 'syz.0.2688': attribute type 13 has an invalid length. [ 367.491486][ T3176] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 367.517934][T16118] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 367.674857][T16128] tipc: New replicast peer: 255.255.255.255 [ 367.694534][T16128] tipc: Enabled bearer , priority 10 [ 367.705116][T16134] tipc: Disabling bearer [ 367.909237][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.054618][T16158] netlink: 'syz.2.2703': attribute type 4 has an invalid length. [ 368.108083][T16159] netlink: 'syz.2.2703': attribute type 4 has an invalid length. [ 368.951576][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.403500][T16176] tipc: Enabled bearer , priority 0 [ 369.413102][T16175] syzkaller0: entered promiscuous mode [ 369.435155][T16175] syzkaller0: entered allmulticast mode [ 369.491641][T16176] netlink: 'syz.1.2708': attribute type 1 has an invalid length. [ 369.583241][T16174] tipc: Resetting bearer [ 369.652389][T16174] tipc: Disabling bearer [ 369.901851][T16196] __nla_validate_parse: 7 callbacks suppressed [ 369.901872][T16196] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2713'. [ 369.948764][T16196] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2713'. [ 369.996891][T16201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2715'. [ 370.040026][T16190] lo speed is unknown, defaulting to 1000 [ 370.047956][T16190] lo speed is unknown, defaulting to 1000 [ 370.513710][T16216] lo speed is unknown, defaulting to 1000 [ 370.546147][T16216] lo speed is unknown, defaulting to 1000 [ 371.028760][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.267538][T16235] netlink: 'syz.1.2723': attribute type 3 has an invalid length. [ 371.292723][T16235] netlink: 'syz.1.2723': attribute type 1 has an invalid length. [ 371.316298][T16235] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2723'. [ 371.333859][T16237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2722'. [ 371.350934][T16235] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2723'. [ 372.068735][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.470576][T16288] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2734'. [ 372.529404][T16292] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2739'. [ 372.558219][T16292] geneve0: entered promiscuous mode [ 372.570276][T16292] geneve0: entered allmulticast mode [ 372.578474][ T7241] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 34715 - 0 [ 372.596618][ T7241] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 60591 - 0 [ 372.607833][ T7241] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 34715 - 0 [ 372.621129][ T7241] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 60591 - 0 [ 372.632280][ T7241] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 34715 - 0 [ 372.643427][ T7241] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 60591 - 0 [ 372.654528][ T7241] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 34715 - 0 [ 372.665447][ T7241] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 60591 - 0 [ 372.756479][T16303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2743'. [ 372.766510][T16303] openvswitch: netlink: Unknown nsh attribute 0 [ 372.775689][T16303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.796074][ T30] audit: type=1800 audit(1755208740.079:8): pid=16303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2743" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=2872 res=0 errno=0 [ 373.018022][T16324] FAULT_INJECTION: forcing a failure. [ 373.018022][T16324] name failslab, interval 1, probability 0, space 0, times 0 [ 373.036032][T16324] CPU: 0 UID: 0 PID: 16324 Comm: syz.3.2749 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 373.036080][T16324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 373.036110][T16324] Call Trace: [ 373.036118][T16324] [ 373.036128][T16324] dump_stack_lvl+0x189/0x250 [ 373.036161][T16324] ? __pfx____ratelimit+0x10/0x10 [ 373.036190][T16324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.036217][T16324] ? __pfx__printk+0x10/0x10 [ 373.036256][T16324] ? __pfx___might_resched+0x10/0x10 [ 373.036283][T16324] should_fail_ex+0x414/0x560 [ 373.036313][T16324] should_failslab+0xa8/0x100 [ 373.036345][T16324] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 373.036376][T16324] ? __alloc_skb+0x112/0x2d0 [ 373.036410][T16324] __alloc_skb+0x112/0x2d0 [ 373.036443][T16324] netlink_sendmsg+0x5c6/0xb30 [ 373.036483][T16324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.036520][T16324] ? aa_sock_msg_perm+0xf1/0x1d0 [ 373.036552][T16324] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 373.036575][T16324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.036605][T16324] __sock_sendmsg+0x219/0x270 [ 373.036633][T16324] ____sys_sendmsg+0x505/0x830 [ 373.036672][T16324] ? __pfx_____sys_sendmsg+0x10/0x10 [ 373.036715][T16324] ? import_iovec+0x74/0xa0 [ 373.036741][T16324] ___sys_sendmsg+0x21f/0x2a0 [ 373.036777][T16324] ? __pfx____sys_sendmsg+0x10/0x10 [ 373.036852][T16324] ? __fget_files+0x2a/0x420 [ 373.036884][T16324] ? __fget_files+0x3a0/0x420 [ 373.036929][T16324] __x64_sys_sendmsg+0x19b/0x260 [ 373.036966][T16324] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 373.037010][T16324] ? __pfx_ksys_write+0x10/0x10 [ 373.037037][T16324] ? rcu_is_watching+0x15/0xb0 [ 373.037066][T16324] ? do_syscall_64+0xbe/0x3b0 [ 373.037106][T16324] do_syscall_64+0xfa/0x3b0 [ 373.037132][T16324] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.037158][T16324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.037181][T16324] ? clear_bhb_loop+0x60/0xb0 [ 373.037208][T16324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.037236][T16324] RIP: 0033:0x7f92f478ebe9 [ 373.037256][T16324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.037276][T16324] RSP: 002b:00007f92f5643038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.037299][T16324] RAX: ffffffffffffffda RBX: 00007f92f49b5fa0 RCX: 00007f92f478ebe9 [ 373.037316][T16324] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 373.037330][T16324] RBP: 00007f92f5643090 R08: 0000000000000000 R09: 0000000000000000 [ 373.037343][T16324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.037355][T16324] R13: 00007f92f49b6038 R14: 00007f92f49b5fa0 R15: 00007ffea47a0228 [ 373.037391][T16324] [ 373.118723][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.327452][T16331] siw: device registration error -23 [ 373.369125][T16333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2751'. [ 373.496364][T16345] netlink: 'syz.3.2755': attribute type 13 has an invalid length. [ 373.504540][T16345] netlink: 'syz.3.2755': attribute type 17 has an invalid length. [ 373.638472][T16345] erspan0: left allmulticast mode [ 373.717065][T16345] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 373.745491][T16338] lo speed is unknown, defaulting to 1000 [ 373.774890][T16338] lo speed is unknown, defaulting to 1000 [ 373.823886][T16357] netlink: 'syz.1.2758': attribute type 11 has an invalid length. [ 374.005366][T16368] netlink: 'syz.2.2760': attribute type 1 has an invalid length. [ 374.149491][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.187649][T16378] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 374.200125][T16378] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 374.250687][T16368] gretap1: entered promiscuous mode [ 374.260145][T16368] bond6: (slave gretap1): making interface the new active one [ 374.269188][T16368] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 374.786061][T16410] netlink: 'syz.4.2772': attribute type 2 has an invalid length. [ 374.966751][T16420] __nla_validate_parse: 7 callbacks suppressed [ 374.966772][T16420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2774'. [ 375.029062][T16416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2774'. [ 375.386986][T16439] tipc: Enabled bearer , priority 0 [ 375.400393][T16443] netlink: 760 bytes leftover after parsing attributes in process `syz.4.2781'. [ 375.410884][T16443] openvswitch: netlink: Flow key attr not present in new flow. [ 375.414677][T16444] netlink: 760 bytes leftover after parsing attributes in process `syz.4.2781'. [ 375.430621][T16439] syzkaller0: entered promiscuous mode [ 375.436126][T16439] syzkaller0: entered allmulticast mode [ 375.459026][T16444] openvswitch: netlink: Flow key attr not present in new flow. [ 375.551079][T16439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2777'. [ 375.773158][T16453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2784'. [ 375.788989][T16454] tipc: Resetting bearer [ 375.804115][T16452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2784'. [ 375.814001][T16453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2784'. [ 375.840556][T16452] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2784'. [ 375.860278][T16453] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2784'. [ 375.964143][T16468] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 376.212414][T16436] tipc: Resetting bearer [ 376.228863][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.406630][T16436] tipc: Disabling bearer [ 376.545372][T16484] lo speed is unknown, defaulting to 1000 [ 376.579361][T16484] lo speed is unknown, defaulting to 1000 [ 376.926816][T16497] netlink: 'syz.1.2797': attribute type 10 has an invalid length. [ 377.227363][T16483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.268903][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.345139][T16508] lo speed is unknown, defaulting to 1000 [ 377.353442][T16508] lo speed is unknown, defaulting to 1000 [ 377.564202][T16495] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 378.012184][T16534] tipc: Enabled bearer , priority 0 [ 378.024954][T16534] syzkaller0: entered promiscuous mode [ 378.033765][T16534] syzkaller0: entered allmulticast mode [ 378.135450][T16544] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 378.309479][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.343005][T16548] tipc: Enabling of bearer rejected, already enabled [ 378.737163][T16533] tipc: Resetting bearer [ 378.801503][T16533] tipc: Disabling bearer [ 379.013454][T16575] siw: device registration error -23 [ 379.228214][T16580] lo speed is unknown, defaulting to 1000 [ 379.394060][T16580] lo speed is unknown, defaulting to 1000 [ 379.577544][T16610] tipc: Enabling of bearer rejected, already enabled [ 380.375441][T16639] tipc: Enabling of bearer rejected, failed to enable media [ 380.432677][T16642] netlink: 'syz.0.2835': attribute type 1 has an invalid length. [ 380.555835][T16649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.566084][T16649] netlink: 'syz.1.2836': attribute type 2 has an invalid length. [ 380.574052][T16649] __nla_validate_parse: 11 callbacks suppressed [ 380.574070][T16649] netlink: 119 bytes leftover after parsing attributes in process `syz.1.2836'. [ 380.782540][T16651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2837'. [ 380.880639][T16653] netlink: 'syz.2.2838': attribute type 41 has an invalid length. [ 380.944727][T16650] lo speed is unknown, defaulting to 1000 [ 381.010422][T16650] lo speed is unknown, defaulting to 1000 [ 381.066334][T16660] netlink: 'syz.2.2840': attribute type 1 has an invalid length. [ 381.096827][T16661] netlink: 'syz.2.2840': attribute type 1 has an invalid length. [ 381.359743][T16668] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2841'. [ 381.596619][T16673] bond6: (slave gretap1): Releasing active interface [ 381.667900][T16677] bpq0: entered promiscuous mode [ 381.726555][T16673] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 381.991231][T16690] netlink: 'syz.2.2848': attribute type 1 has an invalid length. [ 382.008703][T16690] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2848'. [ 382.037933][T16695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2849'. [ 382.891898][T16742] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 382.914791][T16746] netlink: 'syz.4.2867': attribute type 1 has an invalid length. [ 383.073739][T16751] bridge0: port 1(macsec0) entered blocking state [ 383.088800][T16751] bridge0: port 1(macsec0) entered disabled state [ 383.099178][T16751] macsec0: entered allmulticast mode [ 383.224225][T16757] netlink: 'syz.1.2870': attribute type 1 has an invalid length. [ 383.234818][T16742] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 383.249949][T16757] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.2870'. [ 383.265312][T16760] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2871'. [ 383.568985][T16742] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 383.734553][T16742] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 384.313487][T16775] lo speed is unknown, defaulting to 1000 [ 384.370371][T16775] lo speed is unknown, defaulting to 1000 [ 384.405582][T16781] tipc: Enabled bearer , priority 0 [ 384.429642][T16781] syzkaller0: entered promiscuous mode [ 384.448785][T16781] syzkaller0: entered allmulticast mode [ 384.471231][T16782] netlink: 'syz.0.2874': attribute type 1 has an invalid length. [ 384.488792][T16782] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.2874'. [ 384.513580][T16788] netlink: 'syz.3.2878': attribute type 83 has an invalid length. [ 384.546861][T16781] tipc: Resetting bearer [ 384.559340][T16787] FAULT_INJECTION: forcing a failure. [ 384.559340][T16787] name failslab, interval 1, probability 0, space 0, times 0 [ 384.586251][T16787] CPU: 0 UID: 0 PID: 16787 Comm: syz.2.2879 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 384.586283][T16787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 384.586297][T16787] Call Trace: [ 384.586305][T16787] [ 384.586314][T16787] dump_stack_lvl+0x189/0x250 [ 384.586347][T16787] ? __pfx____ratelimit+0x10/0x10 [ 384.586374][T16787] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.586400][T16787] ? __pfx__printk+0x10/0x10 [ 384.586438][T16787] ? __pfx___might_resched+0x10/0x10 [ 384.586458][T16787] ? fs_reclaim_acquire+0x7d/0x100 [ 384.586497][T16787] should_fail_ex+0x414/0x560 [ 384.586527][T16787] should_failslab+0xa8/0x100 [ 384.586580][T16787] __kmalloc_cache_noprof+0x70/0x3d0 [ 384.586610][T16787] ? tcf_block_get_ext+0x68d/0x17d0 [ 384.586644][T16787] tcf_block_get_ext+0x68d/0x17d0 [ 384.586696][T16787] tcf_block_get+0x67/0xa0 [ 384.586722][T16787] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 384.586756][T16787] cake_init+0x1cb/0x830 [ 384.586788][T16787] ? qdisc_alloc+0x7a1/0xaa0 [ 384.586822][T16787] ? __pfx_cake_init+0x10/0x10 [ 384.586851][T16787] qdisc_create+0x7a9/0xea0 [ 384.586886][T16787] tc_modify_qdisc+0x1538/0x20e0 [ 384.586930][T16787] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 384.586991][T16787] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 384.587013][T16787] rtnetlink_rcv_msg+0x779/0xb70 [ 384.587048][T16787] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 384.587077][T16787] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 384.587103][T16787] ? ref_tracker_free+0x63a/0x7d0 [ 384.587131][T16787] ? __asan_memcpy+0x40/0x70 [ 384.587156][T16787] ? __pfx_ref_tracker_free+0x10/0x10 [ 384.587196][T16787] netlink_rcv_skb+0x208/0x470 [ 384.587226][T16787] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 384.587258][T16787] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 384.587300][T16787] ? netlink_deliver_tap+0x2e/0x1b0 [ 384.587339][T16787] netlink_unicast+0x82f/0x9e0 [ 384.587375][T16787] ? __pfx_netlink_unicast+0x10/0x10 [ 384.587403][T16787] ? netlink_sendmsg+0x642/0xb30 [ 384.587429][T16787] ? skb_put+0x11b/0x210 [ 384.587464][T16787] netlink_sendmsg+0x805/0xb30 [ 384.587506][T16787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.587540][T16787] ? aa_sock_msg_perm+0xf1/0x1d0 [ 384.587574][T16787] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 384.587598][T16787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.587628][T16787] __sock_sendmsg+0x219/0x270 [ 384.587657][T16787] ____sys_sendmsg+0x505/0x830 [ 384.587716][T16787] ? __pfx_____sys_sendmsg+0x10/0x10 [ 384.587759][T16787] ? import_iovec+0x74/0xa0 [ 384.587796][T16787] ___sys_sendmsg+0x21f/0x2a0 [ 384.587829][T16787] ? __pfx____sys_sendmsg+0x10/0x10 [ 384.587898][T16787] ? __fget_files+0x2a/0x420 [ 384.587927][T16787] ? __fget_files+0x3a0/0x420 [ 384.587969][T16787] __x64_sys_sendmsg+0x19b/0x260 [ 384.588003][T16787] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 384.588043][T16787] ? __pfx_ksys_write+0x10/0x10 [ 384.588067][T16787] ? rcu_is_watching+0x15/0xb0 [ 384.588093][T16787] ? do_syscall_64+0xbe/0x3b0 [ 384.588124][T16787] do_syscall_64+0xfa/0x3b0 [ 384.588149][T16787] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.588173][T16787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.588193][T16787] ? clear_bhb_loop+0x60/0xb0 [ 384.588218][T16787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.588238][T16787] RIP: 0033:0x7efec638ebe9 [ 384.588255][T16787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.588274][T16787] RSP: 002b:00007efec71d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.588294][T16787] RAX: ffffffffffffffda RBX: 00007efec65b5fa0 RCX: 00007efec638ebe9 [ 384.588309][T16787] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 384.588321][T16787] RBP: 00007efec71d9090 R08: 0000000000000000 R09: 0000000000000000 [ 384.588332][T16787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.588343][T16787] R13: 00007efec65b6038 R14: 00007efec65b5fa0 R15: 00007ffcf67b9418 [ 384.588376][T16787] [ 384.623750][T16788] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2878'. [ 385.001246][T16780] tipc: Resetting bearer [ 385.056649][T16780] tipc: Disabling bearer [ 385.565063][T16803] tipc: Enabled bearer , priority 0 [ 385.871235][T16820] FAULT_INJECTION: forcing a failure. [ 385.871235][T16820] name failslab, interval 1, probability 0, space 0, times 0 [ 385.890658][T16821] netlink: 'syz.3.2889': attribute type 13 has an invalid length. [ 385.911439][T16821] netlink: 'syz.3.2889': attribute type 17 has an invalid length. [ 385.920775][T16820] CPU: 0 UID: 0 PID: 16820 Comm: syz.2.2890 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 385.920802][T16820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 385.920813][T16820] Call Trace: [ 385.920821][T16820] [ 385.920829][T16820] dump_stack_lvl+0x189/0x250 [ 385.920867][T16820] ? __pfx____ratelimit+0x10/0x10 [ 385.920892][T16820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.920914][T16820] ? __pfx__printk+0x10/0x10 [ 385.920946][T16820] ? __pfx___might_resched+0x10/0x10 [ 385.920964][T16820] ? fs_reclaim_acquire+0x7d/0x100 [ 385.920998][T16820] should_fail_ex+0x414/0x560 [ 385.921024][T16820] should_failslab+0xa8/0x100 [ 385.921053][T16820] __kmalloc_cache_noprof+0x70/0x3d0 [ 385.921078][T16820] ? tcf_block_get_ext+0x8d4/0x17d0 [ 385.921106][T16820] tcf_block_get_ext+0x8d4/0x17d0 [ 385.921144][T16820] tcf_block_get+0x67/0xa0 [ 385.921165][T16820] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 385.921193][T16820] cake_init+0x1cb/0x830 [ 385.921219][T16820] ? qdisc_alloc+0x7a1/0xaa0 [ 385.921248][T16820] ? __pfx_cake_init+0x10/0x10 [ 385.921272][T16820] qdisc_create+0x7a9/0xea0 [ 385.921302][T16820] tc_modify_qdisc+0x1538/0x20e0 [ 385.921341][T16820] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 385.921400][T16820] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 385.921418][T16820] rtnetlink_rcv_msg+0x779/0xb70 [ 385.921446][T16820] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 385.921469][T16820] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 385.921490][T16820] ? ref_tracker_free+0x63a/0x7d0 [ 385.921513][T16820] ? __asan_memcpy+0x40/0x70 [ 385.921534][T16820] ? __pfx_ref_tracker_free+0x10/0x10 [ 385.921585][T16820] netlink_rcv_skb+0x208/0x470 [ 385.921613][T16820] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 385.921643][T16820] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 385.921681][T16820] ? netlink_deliver_tap+0x2e/0x1b0 [ 385.921716][T16820] netlink_unicast+0x82f/0x9e0 [ 385.921748][T16820] ? __pfx_netlink_unicast+0x10/0x10 [ 385.921773][T16820] ? netlink_sendmsg+0x642/0xb30 [ 385.921796][T16820] ? skb_put+0x11b/0x210 [ 385.921827][T16820] netlink_sendmsg+0x805/0xb30 [ 385.921863][T16820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.921893][T16820] ? aa_sock_msg_perm+0xf1/0x1d0 [ 385.921924][T16820] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 385.921945][T16820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.921972][T16820] __sock_sendmsg+0x219/0x270 [ 385.921998][T16820] ____sys_sendmsg+0x505/0x830 [ 385.922033][T16820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 385.922073][T16820] ? import_iovec+0x74/0xa0 [ 385.922096][T16820] ___sys_sendmsg+0x21f/0x2a0 [ 385.922128][T16820] ? __pfx____sys_sendmsg+0x10/0x10 [ 385.922198][T16820] ? __fget_files+0x2a/0x420 [ 385.922226][T16820] ? __fget_files+0x3a0/0x420 [ 385.922267][T16820] __x64_sys_sendmsg+0x19b/0x260 [ 385.922300][T16820] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 385.922340][T16820] ? __pfx_ksys_write+0x10/0x10 [ 385.922364][T16820] ? rcu_is_watching+0x15/0xb0 [ 385.922395][T16820] ? do_syscall_64+0xbe/0x3b0 [ 385.922425][T16820] do_syscall_64+0xfa/0x3b0 [ 385.922449][T16820] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.922472][T16820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.922491][T16820] ? clear_bhb_loop+0x60/0xb0 [ 385.922516][T16820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.922535][T16820] RIP: 0033:0x7efec638ebe9 [ 385.922553][T16820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.922570][T16820] RSP: 002b:00007efec71d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.922591][T16820] RAX: ffffffffffffffda RBX: 00007efec65b5fa0 RCX: 00007efec638ebe9 [ 385.922605][T16820] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 385.922617][T16820] RBP: 00007efec71d9090 R08: 0000000000000000 R09: 0000000000000000 [ 385.922629][T16820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 385.922641][T16820] R13: 00007efec65b6038 R14: 00007efec65b5fa0 R15: 00007ffcf67b9418 [ 385.922673][T16820] [ 386.385034][T16821] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 386.691271][T16831] netlink: 'syz.0.2893': attribute type 1 has an invalid length. [ 386.835100][T16838] bond6: (slave gretap2): making interface the new active one [ 386.843598][T16838] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 386.931649][T16831] vlan0: entered allmulticast mode [ 386.937362][T16831] bond6: entered allmulticast mode [ 386.950507][T16831] gretap2: entered allmulticast mode [ 386.969745][T16831] bond6: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 387.376815][T16860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2901'. [ 388.130226][T16876] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:4096 [ 388.607188][ T5183] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 388.622286][ T5183] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 388.631722][ T5183] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 388.659649][ T5183] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 388.668058][ T5183] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 388.825948][T16889] lo speed is unknown, defaulting to 1000 [ 388.839900][T16889] lo speed is unknown, defaulting to 1000 [ 388.964276][T16901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2913'. [ 389.071738][T16899] netlink: 'syz.3.2912': attribute type 10 has an invalid length. [ 389.241758][T16906] netlink: 'syz.3.2914': attribute type 2 has an invalid length. [ 389.307707][T16906] þ: entered promiscuous mode [ 389.851178][T16889] chnl_net:caif_netlink_parms(): no params data found [ 390.068583][T16919] gre0: entered allmulticast mode [ 390.193776][T16889] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.201572][T16889] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.209323][T16889] bridge_slave_0: entered allmulticast mode [ 390.217296][T16889] bridge_slave_0: entered promiscuous mode [ 390.256368][T16889] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.273528][T16889] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.294249][T16889] bridge_slave_1: entered allmulticast mode [ 390.306082][T16889] bridge_slave_1: entered promiscuous mode [ 390.421926][T16889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.457471][T16889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.561574][ T3490] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.652916][T16889] team0: Port device team_slave_0 added [ 390.707233][ T3490] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.717746][ T5183] Bluetooth: hci5: command tx timeout [ 390.771024][T16889] team0: Port device team_slave_1 added [ 390.892095][T16925] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 390.899486][T16925] IPv6: NLM_F_CREATE should be set when creating new route [ 390.906735][T16925] IPv6: NLM_F_CREATE should be set when creating new route [ 390.947285][ T3490] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.016508][T16889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.053402][T16889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.093548][T16889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.179247][ T3490] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.236956][T16889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.249443][T16889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.283707][T16889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.434008][T16889] hsr_slave_0: entered promiscuous mode [ 391.444319][T16889] hsr_slave_1: entered promiscuous mode [ 391.463412][T16889] debugfs: 'hsr0' already exists in 'hsr' [ 391.471445][T16889] Cannot create hsr debugfs directory [ 391.544563][T16752] Set syz1 is full, maxelem 65536 reached [ 391.721955][T16945] nftables ruleset with unbound chain [ 391.878349][T16947] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2923'. [ 391.913498][ T3490] tipc: Resetting bearer [ 392.326380][ T3490] tipc: Disabling bearer [ 392.789041][ T5183] Bluetooth: hci5: command tx timeout [ 392.895605][ T3490] bond0 (unregistering): Released all slaves [ 392.928041][ T3490] bond1 (unregistering): Released all slaves [ 393.032291][ T3490] bond2 (unregistering): Released all slaves [ 393.135776][ T3490] bond3 (unregistering): Released all slaves [ 393.154156][ T3490] bond4 (unregistering): Released all slaves [ 393.170046][ T3490] bond5 (unregistering): Released all slaves [ 393.185226][ T3490] bond6 (unregistering): Released all slaves [ 393.206405][ T3490] bond7 (unregistering): Released all slaves [ 393.245226][ T9] infiniband syz2: ib_query_port failed (-19) [ 393.390954][ T3490] : left promiscuous mode [ 393.473964][ T3490] k›*·]‘: left promiscuous mode [ 393.555289][ T3490] _ÐZ`Ô€@ÿÿ: left promiscuous mode [ 393.706458][ T3490] tipc: Left network mode [ 394.802093][T17037] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2944'. [ 394.839612][T17029] lo speed is unknown, defaulting to 1000 [ 394.869219][ T5183] Bluetooth: hci5: command tx timeout [ 394.882416][T17029] lo speed is unknown, defaulting to 1000 [ 394.961238][T17032] gre0: left allmulticast mode [ 395.106453][T17032] tipc: Resetting bearer [ 395.134623][T17045] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 395.151379][T17045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2947'. [ 395.162055][T17032] batman_adv: batadv0: Interface deactivated: macvlan2 [ 395.164299][T17045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2947'. [ 395.183693][T17045] netlink: 'syz.4.2947': attribute type 14 has an invalid length. [ 395.198352][T17032] bond4: left promiscuous mode [ 395.203355][T17032] ip6gretap1: left promiscuous mode [ 395.209327][T17032] bond4: left allmulticast mode [ 395.214216][T17032] ip6gretap1: left allmulticast mode [ 395.297635][ T9] lo speed is unknown, defaulting to 1000 [ 395.328001][ T9] syz0: Port: 1 Link DOWN [ 395.409487][ T980] lo speed is unknown, defaulting to 1000 [ 395.470095][T16889] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 395.535479][T16889] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 395.568060][T16889] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 395.646379][T16889] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 396.002869][ T3490] hsr_slave_0: left promiscuous mode [ 396.025781][ T3490] hsr_slave_1: left promiscuous mode [ 396.898189][T17082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2954'. [ 396.949571][ T5183] Bluetooth: hci5: command tx timeout [ 396.969744][T11824] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.992910][T11824] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.031965][T11824] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.047657][T11824] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.057971][T17078] lo speed is unknown, defaulting to 1000 [ 397.070548][T17078] lo speed is unknown, defaulting to 1000 [ 397.267853][T16889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.333110][T16889] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.361071][ T3490] IPVS: stop unused estimator thread 0... [ 397.382913][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.390144][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.445834][T17098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2959'. [ 397.476042][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.483423][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.947654][T17114] lo speed is unknown, defaulting to 1000 [ 397.967328][T17114] lo speed is unknown, defaulting to 1000 [ 398.289309][T17121] syzkaller1: entered promiscuous mode [ 398.305529][T17121] syzkaller1: entered allmulticast mode [ 398.587207][T16889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.733407][T16889] veth0_vlan: entered promiscuous mode [ 398.753368][T16889] veth1_vlan: entered promiscuous mode [ 398.849706][T17143] nbd: must specify a size in bytes for the device [ 399.584416][T16889] veth0_macvtap: entered promiscuous mode [ 399.611624][T16889] veth1_macvtap: entered promiscuous mode [ 399.746914][T16889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.799992][T16889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.853567][ T1154] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.876412][ T1154] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.904272][ T1154] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.919745][T17169] netlink: 'syz.1.2978': attribute type 13 has an invalid length. [ 399.940931][T17169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2978'. [ 399.986833][T17168] sch_tbf: burst 2 is lower than device lo mtu (1550) ! [ 400.007371][ T1154] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.039168][T17172] sch_tbf: burst 2 is lower than device lo mtu (1550) ! [ 400.072001][T17172] sch_tbf: burst 2 is lower than device lo mtu (1550) ! [ 400.300408][T17182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2982'. [ 400.377487][T11824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.414793][T11824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.486927][ T7255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.499584][ T7255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.584240][T17201] netlink: 'syz.1.2986': attribute type 10 has an invalid length. [ 400.628142][T17208] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2985'. [ 400.893672][T17222] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2989'. [ 401.292187][T17240] netlink: 'syz.3.2992': attribute type 1 has an invalid length. [ 401.308896][T17240] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2992'. [ 401.329208][T17240] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2992'. [ 401.365691][T17242] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2992'. [ 401.396065][T17234] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2992'. [ 401.686511][T17250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2995'. [ 401.855723][ T5873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 401.867010][ T5873] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 401.879451][ T5873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 401.905809][ T5873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 401.916748][ T5873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 402.170310][T17244] tipc: Resetting bearer [ 402.195083][T17244] bridge0: port 1(0!) entered disabled state [ 402.345841][T17244] geneve0: left promiscuous mode [ 402.351253][T17244] geneve0: left allmulticast mode [ 402.392332][T11824] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.426112][ T3490] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 34715 - 0 [ 402.435728][ T3490] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 60591 - 0 [ 402.449880][ T3490] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 34715 - 0 [ 402.458352][ T3490] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 60591 - 0 [ 402.487555][ T3490] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 34715 - 0 [ 402.497738][ T3490] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 60591 - 0 [ 402.510899][ T3490] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 34715 - 0 [ 402.522673][ T3490] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 60591 - 0 [ 402.541717][T11824] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.561651][T17249] lo speed is unknown, defaulting to 1000 [ 402.578330][T17249] lo speed is unknown, defaulting to 1000 [ 402.636733][T11824] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.696014][T17257] lo speed is unknown, defaulting to 1000 [ 402.735596][T11824] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.748354][T17273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3001'. [ 403.059275][T11824] tipc: Resetting bearer [ 403.603663][T11824] tipc: Disabling bearer [ 403.905388][T11824] bond0 (unregistering): (slave bond9): Releasing backup interface [ 403.914689][T11824] bond0 (unregistering): Released all slaves [ 403.991313][ T5183] Bluetooth: hci0: command tx timeout [ 404.012055][T11824] bond1 (unregistering): Released all slaves [ 404.027827][T11824] bond2 (unregistering): Released all slaves [ 404.123487][T11824] bond3 (unregistering): Released all slaves [ 404.212303][T11824] bond4 (unregistering): Released all slaves [ 404.228279][T11824] bond5 (unregistering): Released all slaves [ 404.325562][T11824] bond6 (unregistering): Released all slaves [ 404.413654][T11824] bond7 (unregistering): Released all slaves [ 404.505754][T11824] bond8 (unregistering): Released all slaves [ 404.593860][T11824] bond9 (unregistering): Released all slaves [ 404.683956][T11824] bond10 (unregistering): (slave bond11): Releasing backup interface [ 404.694478][T11824] bond10 (unregistering): Released all slaves [ 404.783896][T11824] bond11 (unregistering): Released all slaves [ 404.797767][T17257] lo speed is unknown, defaulting to 1000 [ 404.831859][T17298] macvlan5: entered promiscuous mode [ 404.846161][T17298] bond0: entered promiscuous mode [ 404.856952][T17298] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 405.058292][T11824] tipc: Left network mode [ 405.417742][T17330] __nla_validate_parse: 4 callbacks suppressed [ 405.417763][T17330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3014'. [ 405.488291][T17330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3014'. [ 405.696944][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.719930][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.742757][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.068915][ T5183] Bluetooth: hci0: command tx timeout [ 406.172124][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.287710][T17257] chnl_net:caif_netlink_parms(): no params data found [ 406.535149][T17375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3024'. [ 406.996831][T17389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3027'. [ 407.211604][T17257] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.228815][T17257] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.239951][T17257] bridge_slave_0: entered allmulticast mode [ 407.277872][T17257] bridge_slave_0: entered promiscuous mode [ 407.299186][T17257] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.313335][T17257] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.334392][T17257] bridge_slave_1: entered allmulticast mode [ 407.359120][T17257] bridge_slave_1: entered promiscuous mode [ 407.594174][T17405] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 407.712084][T17421] netlink: 'syz.0.3035': attribute type 1 has an invalid length. [ 407.743494][T17257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.844535][T11824] hsr_slave_0: left promiscuous mode [ 407.874856][T11824] hsr_slave_1: left promiscuous mode [ 408.149726][ T5183] Bluetooth: hci0: command tx timeout [ 408.696468][T17421] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 408.708049][T17257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.746135][T17435] bpq0: left promiscuous mode [ 408.882545][T17257] team0: Port device team_slave_0 added [ 408.906347][T17257] team0: Port device team_slave_1 added [ 409.023778][T17257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.035477][T17257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.062236][T17257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.085303][T17455] tipc: Enabled bearer , priority 0 [ 409.103447][T17257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.111750][T17257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.139418][T17257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.155085][T17448] syzkaller0: entered promiscuous mode [ 409.169219][T17448] syzkaller0: entered allmulticast mode [ 409.214381][T17447] tipc: Resetting bearer [ 409.268507][T17447] tipc: Disabling bearer [ 409.340189][T17463] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3044'. [ 409.350030][T11824] IPVS: stop unused estimator thread 0... [ 409.383808][T17257] hsr_slave_0: entered promiscuous mode [ 409.410507][T17257] hsr_slave_1: entered promiscuous mode [ 410.232883][ T5183] Bluetooth: hci0: command tx timeout [ 410.280287][T17509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3056'. [ 410.889821][T17257] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 410.935574][T17257] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 410.972170][T17257] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 411.010709][T17257] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 411.241118][T17542] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3064'. [ 411.332913][T17257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.376733][T17547] tipc: Enabling of bearer rejected, already enabled [ 411.397451][T17257] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.407717][T17547] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 411.428647][T17547] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 411.456505][ T7255] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.463754][ T7255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.490605][T17547] tipc: Resetting bearer [ 411.526212][ T7255] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.533454][ T7255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.660372][T17560] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3070'. [ 412.017223][T17581] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3077'. [ 412.038307][T17257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.231224][T17596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3080'. [ 412.406307][T17596] lo speed is unknown, defaulting to 1000 [ 412.421618][T17606] tipc: Enabling of bearer rejected, already enabled [ 412.596941][T17257] veth0_vlan: entered promiscuous mode [ 412.628307][T17257] veth1_vlan: entered promiscuous mode [ 412.721852][T17257] veth0_macvtap: entered promiscuous mode [ 412.738125][T17257] veth1_macvtap: entered promiscuous mode [ 412.786729][T17257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.821446][T17257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.869912][ T1154] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.886734][ T1154] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.954676][ T1154] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.986507][ T1154] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.100451][T17603] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3080'. [ 413.240029][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.254787][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.354408][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.367401][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.541070][T17638] syzkaller1: entered promiscuous mode [ 413.546806][T17638] syzkaller1: entered allmulticast mode [ 413.565277][T17640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2993'. [ 414.036746][T17650] lo speed is unknown, defaulting to 1000 [ 414.411859][ T5873] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 414.424021][ T5873] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 414.434882][ T5873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 414.447345][ T5873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 414.457383][ T5873] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 414.545420][T17670] netlink: 'syz.2.3099': attribute type 1 has an invalid length. [ 414.642725][T17665] lo speed is unknown, defaulting to 1000 [ 414.990328][ T1154] !: left allmulticast mode [ 414.995319][ T1154] !: left promiscuous mode [ 415.006271][T17680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3102'. [ 415.040607][ T1154] bridge0: port 1(0!) entered disabled state [ 415.157562][ T1154] tipc: Disabling bearer [ 416.361963][ T1154] bond1 (unregistering): Released all slaves [ 416.376892][ T1154] bond2 (unregistering): Released all slaves [ 416.393872][ T1154] bond0 (unregistering): left promiscuous mode [ 416.413629][ T1154] bond0 (unregistering): Released all slaves [ 416.453268][T17689] tipc: Enabled bearer , priority 0 [ 416.474554][T17696] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 416.548847][ T5183] Bluetooth: hci3: command tx timeout [ 416.592917][T17689] tipc: Disabling bearer [ 416.602661][ T1154] tipc: Disabling bearer [ 416.608926][ T1154] tipc: Disabling bearer [ 416.616829][ T1154] tipc: Left network mode [ 416.650448][T17706] dummy0: entered allmulticast mode [ 416.847406][T17705] dummy0: left allmulticast mode [ 417.206383][T17730] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3111'. [ 417.627993][T17749] netlink: 'syz.0.3118': attribute type 1 has an invalid length. [ 417.646452][T17748] netlink: 'syz.0.3118': attribute type 1 has an invalid length. [ 418.628791][ T5183] Bluetooth: hci3: command tx timeout [ 418.668413][T17754] vlan0: entered allmulticast mode [ 418.700864][T17754] bridge_slave_0: entered allmulticast mode [ 418.793671][T17759] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3120'. [ 418.855989][T17665] chnl_net:caif_netlink_parms(): no params data found [ 418.924918][T17759] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3120'. [ 419.134952][T17788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3124'. [ 419.232701][T17796] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 419.243536][T17796] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3127'. [ 419.294554][ T1154] IPVS: stop unused estimator thread 0... [ 419.358006][T17665] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.365299][T17799] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3128'. [ 419.375686][T17665] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.383307][T17665] bridge_slave_0: entered allmulticast mode [ 419.401243][T17665] bridge_slave_0: entered promiscuous mode [ 419.507319][T17805] lo speed is unknown, defaulting to 1000 [ 419.514452][T17665] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.548090][T17665] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.574547][T17665] bridge_slave_1: entered allmulticast mode [ 419.603187][T17665] bridge_slave_1: entered promiscuous mode [ 419.729585][T17665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.756824][T17665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.796010][T17814] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3132'. [ 419.862665][T17665] team0: Port device team_slave_0 added [ 419.875225][T17665] team0: Port device team_slave_1 added [ 419.971314][T17665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.978568][T17665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.009201][T17665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.033547][T17665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.040608][T17665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.096368][T17665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.220725][T17829] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3135'. [ 420.233014][T17829] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3135'. [ 420.296347][T17665] hsr_slave_0: entered promiscuous mode [ 420.304888][T17665] hsr_slave_1: entered promiscuous mode [ 420.315765][T17665] debugfs: 'hsr0' already exists in 'hsr' [ 420.321554][T17665] Cannot create hsr debugfs directory [ 420.395588][T17834] tipc: Enabling of bearer rejected, failed to enable media [ 420.718786][ T5183] Bluetooth: hci3: command tx timeout [ 420.906858][T17860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3145'. [ 421.104395][T17865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.211818][T17865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.694043][T17665] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 421.727380][T17665] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 421.761517][T17665] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 421.777058][T17902] netlink: 'syz.3.3161': attribute type 9 has an invalid length. [ 421.798247][T17665] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 421.841925][T17902] macvlan4: entered promiscuous mode [ 421.847366][T17902] hsr0: entered promiscuous mode [ 421.853634][T17902] macvlan4: entered allmulticast mode [ 421.859206][T17902] hsr0: entered allmulticast mode [ 421.864240][T17902] hsr_slave_0: entered allmulticast mode [ 421.871813][T17902] hsr_slave_1: entered allmulticast mode [ 421.881551][T17899] lo speed is unknown, defaulting to 1000 [ 422.076479][T17665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.166718][T17665] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.183561][ T3176] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.190764][ T3176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.252741][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.259954][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.271621][T17927] __nla_validate_parse: 3 callbacks suppressed [ 422.271637][T17927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3165'. [ 422.311178][T17927] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3165'. [ 422.775550][T17665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.792482][ T5183] Bluetooth: hci3: command tx timeout [ 423.076803][T17665] veth0_vlan: entered promiscuous mode [ 423.106498][T17665] veth1_vlan: entered promiscuous mode [ 423.174091][T17665] veth0_macvtap: entered promiscuous mode [ 423.207596][T17665] veth1_macvtap: entered promiscuous mode [ 423.283109][T17665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.312968][T17665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.402413][ T7252] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.434286][ T7252] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.465023][ T7252] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.507369][T17959] netlink: 'syz.2.3173': attribute type 2 has an invalid length. [ 423.515962][ T7252] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.728398][T17965] macsec0: entered promiscuous mode [ 423.740988][T17965] macsec0: entered allmulticast mode [ 423.765450][T17968] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3175'. [ 423.907838][ T7241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.936276][ T7241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.013401][T17971] tipc: Started in network mode [ 424.018414][T17971] tipc: Node identity c64ac33fd678, cluster identity 4711 [ 424.037435][T17971] tipc: Enabled bearer , priority 0 [ 424.047018][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.060186][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.070983][T17971] syzkaller0: entered allmulticast mode [ 424.096057][T17969] tipc: Disabling bearer [ 424.344092][T17987] bridge0: port 3(erspan0) entered blocking state [ 424.351259][T17987] bridge0: port 3(erspan0) entered disabled state [ 424.360820][T17987] erspan0: entered allmulticast mode [ 424.372472][T17987] erspan0: entered promiscuous mode [ 424.378650][T17987] bridge0: port 3(erspan0) entered blocking state [ 424.385401][T17987] bridge0: port 3(erspan0) entered forwarding state [ 424.423892][T17993] erspan0: left allmulticast mode [ 424.450485][T17993] erspan0: left promiscuous mode [ 424.455730][T17993] bridge0: port 3(erspan0) entered disabled state [ 424.674562][T17998] raw_sendmsg: syz.2.3185 forgot to set AF_INET. Fix it! [ 425.006699][T18009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3189'. [ 425.048232][T18009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3189'. [ 425.172231][T18018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3191'. [ 425.202348][T18018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3191'. [ 425.399972][ T5873] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 425.420565][ T5873] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 425.428830][T18020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3192'. [ 425.450353][ T5873] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 425.469378][ T5873] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 425.478064][ T5873] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 425.538357][T18028] nbd: socks must be embedded in a SOCK_ITEM attr [ 425.692881][T18036] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3197'. [ 425.708244][T18023] lo speed is unknown, defaulting to 1000 [ 426.145434][T18058] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3201'. [ 426.466802][T18077] netlink: 'syz.1.3207': attribute type 15 has an invalid length. [ 426.486560][T11824] bond4 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 426.497319][T11824] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 426.653206][T11824] batman_adv: batadv0: Removing interface: macvlan2 [ 426.664680][T18081] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 426.675208][T18086] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 426.844833][T11824] bond2 (unregistering): (slave geneve2): Releasing active interface [ 426.891666][T18098] netlink: 'syz.2.3208': attribute type 13 has an invalid length. [ 426.900065][T18098] netlink: 'syz.2.3208': attribute type 17 has an invalid length. [ 427.436685][T11824] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 427.446624][T11824] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 427.455951][T11824] bond0 (unregistering): Released all slaves [ 427.471888][T11824] bond1 (unregistering): Released all slaves [ 427.519930][ T5183] Bluetooth: hci1: command tx timeout [ 427.573265][T11824] bond2 (unregistering): Released all slaves [ 427.587414][T11824] bond3 (unregistering): Released all slaves [ 427.680645][T11824] bond4 (unregistering): Released all slaves [ 427.770617][T11824] bond5 (unregistering): left promiscuous mode [ 427.778155][T11824] team0: Port device bond5 removed [ 427.784719][T11824] bond5 (unregistering): Released all slaves [ 427.876643][T11824] bond6 (unregistering): Released all slaves [ 427.892233][T11824] bond7 (unregistering): Released all slaves [ 428.158503][T18098] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 428.522274][T18129] __nla_validate_parse: 4 callbacks suppressed [ 428.522295][T18129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3218'. [ 428.635411][T18134] bridge_slave_0: left allmulticast mode [ 428.663204][T18134] bridge_slave_0: left promiscuous mode [ 428.681273][T18139] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3219'. [ 428.709037][T18134] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.735356][T18134] bridge_slave_1: left allmulticast mode [ 428.753015][T18134] bridge_slave_1: left promiscuous mode [ 428.762066][T18134] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.775648][T18134] bond0: (slave bond_slave_0): Releasing backup interface [ 428.791439][T18134] bond0: (slave bond_slave_1): Releasing backup interface [ 428.810278][T18134] team0: Port device team_slave_0 removed [ 428.840476][T18134] team0: Port device team_slave_1 removed [ 428.847324][T18134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.862394][T18134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.875324][T18134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.885866][T18134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.963773][T18154] vxcan0: entered promiscuous mode [ 428.979533][T18023] chnl_net:caif_netlink_parms(): no params data found [ 429.091757][T18157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3224'. [ 429.120333][T18157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3224'. [ 429.201428][T18157] bridge0: port 3(vlan2) entered blocking state [ 429.226345][T18157] bridge0: port 3(vlan2) entered disabled state [ 429.236094][T18157] vlan2: entered allmulticast mode [ 429.241364][T18157] bridge0: entered allmulticast mode [ 429.253580][T18157] vlan2: left allmulticast mode [ 429.260366][T18157] bridge0: left allmulticast mode [ 429.286970][T18175] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3226'. [ 429.364859][T18179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3230'. [ 429.457632][T18023] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.465453][T18023] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.473932][T18023] bridge_slave_0: entered allmulticast mode [ 429.484424][T18023] bridge_slave_0: entered promiscuous mode [ 429.493104][T18023] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.500965][T18023] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.508429][T18023] bridge_slave_1: entered allmulticast mode [ 429.516979][T18023] bridge_slave_1: entered promiscuous mode [ 429.589027][ T5183] Bluetooth: hci1: command tx timeout [ 429.605570][T18023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.621224][T18023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.690674][T18023] team0: Port device team_slave_0 added [ 429.703097][T18189] netlink: 'syz.4.3233': attribute type 13 has an invalid length. [ 429.714849][T18189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3233'. [ 429.721420][T18194] lo speed is unknown, defaulting to 1000 [ 429.727486][T18023] team0: Port device team_slave_1 added [ 429.736094][T18195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3234'. [ 429.783995][T18195] mac80211_hwsim hwsim45 wlan1: entered promiscuous mode [ 429.802318][T18023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.809808][T18023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.837184][T18023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.852719][T11824] k›*·]‘: left promiscuous mode [ 429.898948][T18023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.906032][T18023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.934760][T18023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.951501][T11824] þ: left promiscuous mode [ 430.050938][T11824] tipc: Disabling bearer [ 430.058065][T11824] tipc: Left network mode [ 430.066006][T18199] geneve2: entered promiscuous mode [ 430.117077][T18199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3235'. [ 430.165329][T18023] hsr_slave_0: entered promiscuous mode [ 430.173803][T18023] hsr_slave_1: entered promiscuous mode [ 430.180794][T18023] debugfs: 'hsr0' already exists in 'hsr' [ 430.186697][T18023] Cannot create hsr debugfs directory [ 430.200820][T18201] netlink: 'syz.2.3236': attribute type 13 has an invalid length. [ 430.209143][T18203] netlink: 'syz.2.3236': attribute type 13 has an invalid length. [ 430.888162][T18221] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3243'. [ 431.038184][T18225] macvtap0: refused to change device tx_queue_len [ 431.488114][T18238] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 431.607794][T11824] hsr_slave_0: left promiscuous mode [ 431.617380][T11824] hsr_slave_1: left promiscuous mode [ 431.634891][T11824] hsr0: left allmulticast mode [ 431.641994][T11824] hsr0: left promiscuous mode [ 431.670695][ T5183] Bluetooth: hci1: command tx timeout [ 432.371645][ T7254] smc: removing ib device syz0 [ 432.484430][T18252] bridge3: left promiscuous mode [ 432.502919][T18252] bridge3: left allmulticast mode [ 432.672660][T18258] !: renamed from dummy0 (while UP) [ 432.869462][T18261] tipc: Enabled bearer , priority 0 [ 432.910835][T18261] syzkaller0: entered promiscuous mode [ 432.919527][T18261] syzkaller0: entered allmulticast mode [ 432.956234][T18261] tipc: Resetting bearer [ 433.476144][T18260] tipc: Resetting bearer [ 433.549694][T18260] tipc: Disabling bearer [ 433.722245][T18266] lo speed is unknown, defaulting to 1000 [ 433.758904][ T5183] Bluetooth: hci1: command tx timeout [ 433.813157][T18266] lo speed is unknown, defaulting to 1000 [ 433.908953][T18266] lo speed is unknown, defaulting to 1000 [ 433.967459][T18266] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 434.149355][T18266] lo speed is unknown, defaulting to 1000 [ 434.258940][T18266] lo speed is unknown, defaulting to 1000 [ 434.298285][T18266] lo speed is unknown, defaulting to 1000 [ 434.325729][T18266] lo speed is unknown, defaulting to 1000 [ 434.329632][T18274] tipc: Enabled bearer , priority 0 [ 434.340150][T18274] syzkaller0: entered promiscuous mode [ 434.345653][T18274] syzkaller0: entered allmulticast mode [ 434.353791][T18266] lo speed is unknown, defaulting to 1000 [ 434.364419][T18023] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 434.384635][T18023] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 434.426408][T18274] tipc: Resetting bearer [ 434.451060][T18266] lo speed is unknown, defaulting to 1000 [ 434.463645][T18023] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 434.497810][T18274] __nla_validate_parse: 4 callbacks suppressed [ 434.497829][T18274] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3256'. [ 434.499547][T18023] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 434.694501][T18023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.747359][T18023] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.769619][T11824] IPVS: stop unused estimator thread 0... [ 434.785417][T11825] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.792689][T11825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.860576][ T7256] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.867802][ T7256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.109130][T18273] tipc: Resetting bearer [ 435.212837][T18273] tipc: Disabling bearer [ 435.412033][T18303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3262'. [ 435.502729][T18023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.643325][T18023] veth0_vlan: entered promiscuous mode [ 435.673672][T18023] veth1_vlan: entered promiscuous mode [ 435.766742][T18023] veth0_macvtap: entered promiscuous mode [ 435.784106][T18023] veth1_macvtap: entered promiscuous mode [ 435.842017][T18023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.881723][T18023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.910919][ T7256] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.926503][ T7256] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.964878][ T7256] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.983986][ T7256] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.240770][T18060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.272560][T18060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.377569][ T7252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.409677][ T7252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.573539][T18340] netlink: 'syz.1.3274': attribute type 1 has an invalid length. [ 436.661242][T18343] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 436.669365][T18343] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 436.676903][T18345] netlink: 'syz.4.3277': attribute type 1 has an invalid length. [ 437.140031][T18365] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3280'. [ 437.179665][T18367] netlink: 'syz.3.3281': attribute type 1 has an invalid length. [ 437.216133][T18367] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3281'. [ 437.249507][T18365] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 437.259430][T18365] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 437.318421][T18369] batadv1: entered promiscuous mode [ 437.670961][ T5873] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 437.680758][ T5873] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 437.689764][ T5873] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 437.699932][ T5873] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 437.722719][ T5873] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 437.831826][T18377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3284'. [ 437.854800][T18377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3284'. [ 437.884409][T18377] netlink: 'syz.1.3284': attribute type 4 has an invalid length. [ 438.044876][T18372] lo speed is unknown, defaulting to 1000 [ 438.612614][T18406] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3292'. [ 438.641525][T18407] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3293'. [ 438.678820][T18407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3293'. [ 438.732845][T18408] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3292'. [ 438.777274][T11825] macsec0: left allmulticast mode [ 438.798495][T11825] bridge0: port 1(macsec0) entered disabled state [ 439.478546][T11825] bond6 (unregistering): (slave gretap2): Releasing active interface [ 439.488085][T11825] gretap2 (unregistering): left allmulticast mode [ 439.608688][T11825] dvmrp1 (unregistering): left allmulticast mode [ 439.831656][ T5873] Bluetooth: hci4: command tx timeout [ 440.088402][T11825] bond1 (unregistering): Released all slaves [ 440.348502][T11825] bond2 (unregistering): Released all slaves [ 440.367706][T11825] bond3 (unregistering): Released all slaves [ 440.532012][T11825] bond4 (unregistering): Released all slaves [ 440.652227][T11825] bond0 (unregistering): Released all slaves [ 440.669860][T11825] bond5 (unregistering): Released all slaves [ 440.688527][T11825] bond6 (unregistering): Released all slaves [ 440.960222][T11825] tipc: Left network mode [ 441.076603][T18372] chnl_net:caif_netlink_parms(): no params data found [ 441.107317][T11825] IPVS: stopping master sync thread 14436 ... [ 441.138940][T18427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3296'. [ 441.179934][T18421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3297'. [ 441.358527][T18427] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.366314][T18427] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.563890][T18427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.589608][T18427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.641447][T18360] Set syz1 is full, maxelem 65536 reached [ 441.834232][ T7256] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.924605][ T5873] Bluetooth: hci4: command tx timeout [ 441.937442][ T7256] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.969584][ T7256] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.981989][T18445] netlink: 'syz.3.3300': attribute type 13 has an invalid length. [ 441.995396][T11824] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.182207][T18462] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3304'. [ 442.201944][T18462] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3304'. [ 442.215564][T18372] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.233586][T18372] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.259130][T18372] bridge_slave_0: entered allmulticast mode [ 442.279864][T18372] bridge_slave_0: entered promiscuous mode [ 442.303841][T18372] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.310241][T18473] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3306'. [ 442.326919][T18372] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.343770][T18372] bridge_slave_1: entered allmulticast mode [ 442.363693][T18372] bridge_slave_1: entered promiscuous mode [ 442.485204][T18467] lo speed is unknown, defaulting to 1000 [ 442.546469][T18372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.578221][T18372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.594163][T18466] lo speed is unknown, defaulting to 1000 [ 442.654348][T18483] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 442.662711][T18372] team0: Port device team_slave_0 added [ 442.671948][T18483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3309'. [ 442.678184][T18372] team0: Port device team_slave_1 added [ 442.828992][T18372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.836112][T18372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.863968][T18372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.884950][T18490] netlink: 'syz.2.3311': attribute type 1 has an invalid length. [ 442.893976][T18490] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3311'. [ 442.905360][T18490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3311'. [ 442.922358][T18372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.929715][T18372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.956015][T18372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.164278][T18372] hsr_slave_0: entered promiscuous mode [ 443.171098][T18372] hsr_slave_1: entered promiscuous mode [ 443.177428][T18372] debugfs: 'hsr0' already exists in 'hsr' [ 443.185169][T18372] Cannot create hsr debugfs directory [ 443.522281][T18492] netlink: 'syz.4.3312': attribute type 1 has an invalid length. [ 443.637992][T11825] team0 (unregistering): Port device 0! removed [ 443.784431][T18493] bond2: entered promiscuous mode [ 443.789854][T18493] bond2: entered allmulticast mode [ 443.795846][T18493] 8021q: adding VLAN 0 to HW filter on device bond2 [ 443.824757][T18494] ip6gretap1: entered promiscuous mode [ 443.832860][T18494] ip6gretap1: entered allmulticast mode [ 443.840063][T18494] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 443.890282][ T7256] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 443.990021][ T5873] Bluetooth: hci4: command tx timeout [ 444.009865][ T7252] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 444.060056][T18503] sctp: [Deprecated]: syz.4.3315 (pid 18503) Use of int in maxseg socket option. [ 444.060056][T18503] Use struct sctp_assoc_value instead [ 444.089974][T18503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3315'. [ 444.197007][T18506] tipc: Enabled bearer , priority 0 [ 444.222918][T18506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3316'. [ 444.296539][T18507] syzkaller0: entered promiscuous mode [ 444.305324][T18507] syzkaller0: entered allmulticast mode [ 444.312975][T18507] tipc: Resetting bearer [ 444.486751][T18506] tipc: Resetting bearer [ 445.189980][T10855] tipc: Node number set to 271762239 [ 445.861515][T18506] tipc: Disabling bearer [ 445.967801][T11825] IPVS: stop unused estimator thread 0... [ 445.985643][T18533] netlink: 'syz.2.3324': attribute type 25 has an invalid length. [ 446.015706][T18533] netlink: 'syz.2.3324': attribute type 1 has an invalid length. [ 446.038997][T18533] bridge0: port 1(bridge_slave_0) entered learning state [ 446.075262][ T5873] Bluetooth: hci4: command tx timeout [ 446.943647][T18570] tipc: Started in network mode [ 446.948853][T18570] tipc: Node identity ac14140f, cluster identity 4711 [ 446.955936][T18570] tipc: New replicast peer: 255.255.255.255 [ 446.974579][T18570] tipc: Enabled bearer , priority 10 [ 447.090447][T18579] __nla_validate_parse: 1 callbacks suppressed [ 447.090466][T18579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3333'. [ 447.142674][T18579] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3333'. [ 447.467706][T18583] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 447.969072][T10837] tipc: Node number set to 2886997007 [ 448.629748][T18579] gretap1: entered promiscuous mode [ 448.636637][T18582] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3334'. [ 448.669194][T18582] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3334'. [ 448.678206][T18582] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3334'. [ 448.835647][T18591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3335'. [ 449.043264][T18605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.104491][T18591] bridge_slave_1: left allmulticast mode [ 449.110955][T18591] bridge_slave_1: left promiscuous mode [ 449.116880][T18591] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.127206][T18591] bridge_slave_0: left allmulticast mode [ 449.136263][T18591] bridge_slave_0: left promiscuous mode [ 449.143268][T18591] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.210949][T18608] nbd: couldn't find device at index 536870912 [ 449.222205][T18608] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3341'. [ 449.390490][T18372] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 449.409385][T18372] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 449.442473][T18372] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 449.473651][T18372] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 449.666747][T18624] bridge_slave_0: default FDB implementation only supports local addresses [ 449.685470][T18624] gretap1: entered promiscuous mode [ 449.699256][T18624] gretap1: entered allmulticast mode [ 449.714635][T18372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.740588][T18626] veth1_to_bond: entered allmulticast mode [ 449.754441][T18372] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.763832][T18625] veth1_to_bond: left allmulticast mode [ 449.814887][ T7252] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.822165][ T7252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.855098][T18061] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.862404][T18061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.197070][T18634] syzkaller0: entered promiscuous mode [ 450.216958][T18634] syzkaller0: entered allmulticast mode [ 450.255736][T18637] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3349'. [ 450.266066][T18637] netlink: 'syz.3.3349': attribute type 13 has an invalid length. [ 450.487509][T18643] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 450.507103][T18372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.603010][T18653] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3355'. [ 450.628913][T18653] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3355'. [ 450.646813][T18372] veth0_vlan: entered promiscuous mode [ 450.682520][T18372] veth1_vlan: entered promiscuous mode [ 450.828908][T18372] veth0_macvtap: entered promiscuous mode [ 450.854284][T18372] veth1_macvtap: entered promiscuous mode [ 450.911088][T18667] bridge_slave_0: left allmulticast mode [ 450.917327][T18667] bridge_slave_0: left promiscuous mode [ 450.932905][T18667] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.974235][T18667] bridge_slave_1: left allmulticast mode [ 450.996479][T18667] bridge_slave_1: left promiscuous mode [ 451.009563][T18667] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.034241][T18667] bond0: (slave bond_slave_0): Releasing backup interface [ 451.048395][T18667] bond0: (slave bond_slave_1): Releasing backup interface [ 451.071910][T18667] team0: Port device team_slave_0 removed [ 451.085641][T18667] team0: Port device team_slave_1 removed [ 451.093311][T18667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.101609][T18667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.113508][T18672] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 451.121461][T18672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.133491][T18667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.141312][T18667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.215855][T18372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.234687][T18663] lo speed is unknown, defaulting to 1000 [ 451.317620][T18372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.385379][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.446890][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.594338][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.731628][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.874217][T18700] tipc: Started in network mode [ 451.882040][T18700] tipc: Node identity ac14140f, cluster identity 4711 [ 451.893802][T18700] tipc: New replicast peer: 255.255.255.255 [ 451.905084][T18700] tipc: Enabled bearer , priority 10 [ 451.917565][T18061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.941545][T18061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.048427][ T7252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.065779][ T7252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.139440][T18715] __nla_validate_parse: 5 callbacks suppressed [ 452.139462][T18715] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3369'. [ 452.346728][T18728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3372'. [ 452.365048][T18729] tipc: Enabled bearer , priority 0 [ 452.409539][T18729] syzkaller0: entered promiscuous mode [ 452.425590][T18729] syzkaller0: entered allmulticast mode [ 452.533273][T18729] tipc: Resetting bearer [ 452.633178][T18739] tipc: Resetting bearer [ 452.694223][T18739] tipc: Disabling bearer [ 452.714096][T18748] netlink: 'syz.2.3375': attribute type 23 has an invalid length. [ 452.782707][T18748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3375'. [ 452.805270][T18748] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0 [ 452.815873][T18751] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 452.823093][T18748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.022686][ T5949] tipc: Node number set to 2886997007 [ 453.165211][T18764] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3383'. [ 453.534436][T18782] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3388'. [ 453.577503][T18788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3386'. [ 453.614422][T18786] lo speed is unknown, defaulting to 1000 [ 453.634380][T18791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3387'. [ 453.668819][ T5183] Bluetooth: hci4: command 0x0405 tx timeout [ 453.745085][T18789] lo speed is unknown, defaulting to 1000 [ 454.244181][T18807] rdma_rxe: rxe_newlink: failed to add wg0 [ 454.366952][T18814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3393'. [ 454.421228][T18808] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3393'. [ 454.468235][T18809] team0: entered promiscuous mode [ 454.539235][T18821] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3397'. [ 454.755115][T18814] team0 (unregistering): left promiscuous mode [ 454.885610][T18832] lo speed is unknown, defaulting to 1000 [ 455.145983][T18851] lo speed is unknown, defaulting to 1000 [ 455.208541][T18853] bridge_slave_0: left allmulticast mode [ 455.217494][T18853] bridge_slave_0: left promiscuous mode [ 455.228956][T18853] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.242901][T18853] bridge_slave_1: left allmulticast mode [ 455.250617][T18853] bridge_slave_1: left promiscuous mode [ 455.256366][T18853] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.270631][T18853] bond0: (slave bond_slave_0): Releasing backup interface [ 455.282294][T18853] bond0: (slave bond_slave_1): Releasing backup interface [ 455.291860][T18853] team0: Port device team_slave_0 removed [ 455.300334][T18853] team0: Port device team_slave_1 removed [ 455.306525][T18853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.314528][T18853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.712292][T18856] lo speed is unknown, defaulting to 1000 [ 457.025025][T18921] lo speed is unknown, defaulting to 1000 [ 457.447584][T18946] __nla_validate_parse: 4 callbacks suppressed [ 457.447703][T18946] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3432'. [ 457.464561][T18944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3431'. [ 457.560740][T18944] vlan2: entered allmulticast mode [ 457.565907][T18944] bridge0: entered allmulticast mode [ 457.585236][T18944] bridge0: port 1(vlan2) entered blocking state [ 457.602687][T18944] bridge0: port 1(vlan2) entered disabled state [ 457.667540][T18920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.684874][T18952] vti0: entered promiscuous mode [ 457.693449][T18952] vti0: entered allmulticast mode [ 457.724564][T18957] tipc: Started in network mode [ 457.732855][T18957] tipc: Node identity 7ed7fa17a3ce, cluster identity 4711 [ 457.753918][T18957] tipc: Enabled bearer , priority 0 [ 457.767334][T18959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3436'. [ 457.786563][T18957] syzkaller0: entered promiscuous mode [ 457.792341][T18957] syzkaller0: entered allmulticast mode [ 457.846673][T18957] tipc: Resetting bearer [ 457.869545][T18956] tipc: Resetting bearer [ 457.944663][T18956] tipc: Disabling bearer [ 458.012469][T18968] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3440'. [ 458.099630][T18970] tipc: Enabled bearer , priority 0 [ 458.222212][T18970] syzkaller0: entered promiscuous mode [ 458.228401][T18970] syzkaller0: entered allmulticast mode [ 458.265225][T18975] bond0: entered promiscuous mode [ 458.288024][T18975] bond_slave_0: entered promiscuous mode [ 458.299443][T18975] bond_slave_1: entered promiscuous mode [ 458.308213][T18975] bond0: left promiscuous mode [ 458.326830][T18975] bond_slave_0: left promiscuous mode [ 458.338328][T18975] bond_slave_1: left promiscuous mode [ 458.442868][T18978] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 459.803938][T18970] tipc: Resetting bearer [ 459.843927][T18969] tipc: Resetting bearer [ 459.896302][T18969] tipc: Disabling bearer [ 459.931400][T19000] Set syz1 is full, maxelem 65536 reached [ 460.381285][T19019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3452'. [ 460.384744][T19015] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 460.689837][T19033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3455'. [ 460.755931][T10830] lo speed is unknown, defaulting to 1000 [ 460.819505][T18059] bond2: (slave ip6gretap1): link status up again after 0 ms [ 460.868775][T18061] bond2: (slave ip6gretap1): link status up again after 0 ms [ 460.894265][T18061] bond2: (slave ip6gretap1): link status up again after 0 ms [ 460.968699][T18061] bond2: (slave ip6gretap1): link status up again after 0 ms [ 461.018980][ T7252] bond2: (slave ip6gretap1): link status up again after 0 ms [ 461.068776][T18061] bond2: (slave ip6gretap1): link status up again after 0 ms [ 461.088850][T18059] bond2: (slave ip6gretap1): link status up again after 0 ms [ 461.121819][T18059] bond2: (slave ip6gretap1): link status up again after 0 ms [ 461.149055][T18059] bond2: (slave ip6gretap1): link status up again after 0 ms [ 461.172416][T19032] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.239102][T19049] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3458'. [ 461.248995][T19049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3458'. [ 461.311903][T19032] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.425966][T19032] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.632723][T19059] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3461'. [ 461.648478][T19032] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.833741][T19069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3465'. [ 461.887291][T11825] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.954705][T19071] ------------[ cut here ]------------ [ 461.960552][T19071] WARNING: CPU: 1 PID: 19071 at net/ipv6/route.c:4857 rt6_multipath_rebalance+0x455/0x8b0 [ 461.970548][T19071] Modules linked in: [ 461.974687][T19071] CPU: 1 UID: 0 PID: 19071 Comm: syz.4.3467 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 461.986462][T19071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 461.996576][T19071] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0 [ 462.002867][T19071] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 7d 30 f3 f7 e9 78 fe ff ff e8 63 c6 8f f7 eb 05 e8 5c c6 8f f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 462.022529][T19071] RSP: 0018:ffffc900030a63c0 EFLAGS: 00010293 [ 462.028677][T19071] RAX: ffffffff8a2fe54d RBX: ffff8880575e7400 RCX: ffff88802bbd1e00 [ 462.036687][T19071] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 462.044723][T19071] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 462.052749][T19071] R10: dffffc0000000000 R11: fffff52000614c70 R12: ffff8880575e74de [ 462.060767][T19071] R13: ffff8880575e7490 R14: 0000000000000000 R15: 1ffff1100aebce92 [ 462.068790][T19071] FS: 00007fe460a5a6c0(0000) GS:ffff888125d21000(0000) knlGS:0000000000000000 [ 462.077753][T19071] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 462.084390][T19071] CR2: 00007f257b4b2f98 CR3: 00000000295ec000 CR4: 00000000003526f0 [ 462.092388][T19071] Call Trace: [ 462.095674][T19071] [ 462.098666][T19071] fib6_ifdown+0x401/0x4c0 [ 462.103126][T19071] ? __pfx_fib6_ifdown+0x10/0x10 [ 462.108098][T19071] fib6_clean_node+0x24a/0x590 [ 462.112944][T19071] ? __pfx_fib6_clean_node+0x10/0x10 [ 462.118270][T19071] ? __lock_acquire+0xab9/0xd20 [ 462.123195][T19071] ? __local_bh_enable_ip+0x12d/0x1c0 [ 462.128629][T19071] fib6_walk_continue+0x678/0x910 [ 462.133689][T19071] fib6_walk+0x149/0x290 [ 462.137951][T19071] __fib6_clean_all+0x234/0x380 [ 462.142865][T19071] ? __fib6_clean_all+0x9b/0x380 [ 462.147841][T19071] ? __pfx_fib6_ifdown+0x10/0x10 [ 462.152814][T19071] ? __pfx___fib6_clean_all+0x10/0x10 [ 462.158221][T19071] ? __pfx_fib6_clean_node+0x10/0x10 [ 462.163550][T19071] ? __pfx_fib6_ifdown+0x10/0x10 [ 462.168523][T19071] ? __mutex_trylock_common+0x153/0x260 [ 462.174147][T19071] rt6_disable_ip+0x120/0x720 [ 462.178906][T19071] ? rcu_is_watching+0x15/0xb0 [ 462.183719][T19071] ? trace_contention_end+0x39/0x120 [ 462.189054][T19071] ? __pfx_rt6_disable_ip+0x10/0x10 [ 462.194290][T19071] addrconf_ifdown+0x15d/0x1880 [ 462.199201][T19071] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 462.204871][T19071] ? tls_dev_event+0x717/0xec0 [ 462.209675][T19071] ? __pfx_addrconf_ifdown+0x10/0x10 [ 462.214983][T19071] addrconf_notify+0x1bc/0x1010 [ 462.219901][T19071] notifier_call_chain+0x1b6/0x3e0 [ 462.225059][T19071] __dev_notify_flags+0x18d/0x2e0 [ 462.230150][T19071] ? __pfx___dev_notify_flags+0x10/0x10 [ 462.235746][T19071] ? __dev_change_flags+0x4cc/0x6d0 [ 462.241039][T19071] ? __pfx___dev_change_flags+0x10/0x10 [ 462.246620][T19071] ? netif_state_change+0x256/0x3a0 [ 462.251885][T19071] ? __pfx_netif_state_change+0x10/0x10 [ 462.257468][T19071] netif_change_flags+0xe8/0x1a0 [ 462.262454][T19071] do_setlink+0xc55/0x41c0 [ 462.266905][T19071] ? rcu_is_watching+0x15/0xb0 [ 462.271725][T19071] ? __schedule+0x17ae/0x4cc0 [ 462.276442][T19071] ? __lock_acquire+0xab9/0xd20 [ 462.281369][T19071] ? __pfx_do_setlink+0x10/0x10 [ 462.286276][T19071] ? __lock_acquire+0xab9/0xd20 [ 462.291192][T19071] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 462.297105][T19071] ? lockdep_hardirqs_on+0x9c/0x150 [ 462.302370][T19071] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 462.308290][T19071] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 462.314658][T19071] ? rcu_is_watching+0x15/0xb0 [ 462.319481][T19071] ? __mutex_lock+0xd36/0x1360 [ 462.324316][T19071] ? __mutex_lock+0x5b6/0x1360 [ 462.329170][T19071] ? rtnl_newlink+0x8db/0x1c70 [ 462.333968][T19071] ? __pfx___mutex_lock+0x10/0x10 [ 462.339074][T19071] ? ns_capable+0x8a/0xf0 [ 462.343467][T19071] ? rtnl_link_get_net_capable+0x16a/0x350 [ 462.349336][T19071] rtnl_newlink+0x149f/0x1c70 [ 462.354047][T19071] ? netlink_sendmsg+0x805/0xb30 [ 462.359060][T19071] ? __pfx_rtnl_newlink+0x10/0x10 [ 462.364140][T19071] ? kasan_quarantine_put+0xdd/0x220 [ 462.369487][T19071] ? lockdep_hardirqs_on+0x9c/0x150 [ 462.374748][T19071] ? nlmon_xmit+0xb0/0x100 [ 462.379211][T19071] ? kmem_cache_free+0x18f/0x400 [ 462.384207][T19071] ? __local_bh_enable_ip+0x12d/0x1c0 [ 462.389647][T19071] ? lockdep_hardirqs_on+0x9c/0x150 [ 462.394909][T19071] ? __local_bh_enable_ip+0x12d/0x1c0 [ 462.400324][T19071] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 462.406070][T19071] ? __dev_queue_xmit+0x27b/0x3b50 [ 462.411232][T19071] ? __dev_queue_xmit+0x27b/0x3b50 [ 462.416372][T19071] ? __dev_queue_xmit+0x27b/0x3b50 [ 462.421549][T19071] ? __dev_queue_xmit+0x1d79/0x3b50 [ 462.426783][T19071] ? __lock_acquire+0xab9/0xd20 [ 462.431708][T19071] ? __pfx_rtnl_newlink+0x10/0x10 [ 462.436744][T19071] rtnetlink_rcv_msg+0x7cf/0xb70 [ 462.441778][T19071] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 462.447019][T19071] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 462.452552][T19071] ? ref_tracker_free+0x63a/0x7d0 [ 462.457623][T19071] ? __asan_memcpy+0x40/0x70 [ 462.462278][T19071] ? __pfx_ref_tracker_free+0x10/0x10 [ 462.467675][T19071] netlink_rcv_skb+0x208/0x470 [ 462.472499][T19071] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 462.477977][T19071] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 462.483348][T19071] ? netlink_deliver_tap+0x2e/0x1b0 [ 462.488628][T19071] netlink_unicast+0x82f/0x9e0 [ 462.493468][T19071] ? __pfx_netlink_unicast+0x10/0x10 [ 462.498824][T19071] ? netlink_sendmsg+0x642/0xb30 [ 462.503794][T19071] ? skb_put+0x11b/0x210 [ 462.508053][T19071] netlink_sendmsg+0x805/0xb30 [ 462.512860][T19071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.518159][T19071] ? aa_sock_msg_perm+0xf1/0x1d0 [ 462.523131][T19071] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 462.528419][T19071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.533746][T19071] __sock_sendmsg+0x219/0x270 [ 462.538432][T19071] ____sys_sendmsg+0x505/0x830 [ 462.543264][T19071] ? __pfx_____sys_sendmsg+0x10/0x10 [ 462.548630][T19071] ? import_iovec+0x74/0xa0 [ 462.553174][T19071] ___sys_sendmsg+0x21f/0x2a0 [ 462.558005][T19071] ? __pfx____sys_sendmsg+0x10/0x10 [ 462.563297][T19071] ? __fget_files+0x2a/0x420 [ 462.567904][T19071] ? __fget_files+0x3a0/0x420 [ 462.572661][T19071] __x64_sys_sendmsg+0x19b/0x260 [ 462.577679][T19071] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 462.583205][T19071] ? rcu_is_watching+0x15/0xb0 [ 462.588001][T19071] ? do_syscall_64+0xbe/0x3b0 [ 462.592714][T19071] do_syscall_64+0xfa/0x3b0 [ 462.597226][T19071] ? lockdep_hardirqs_on+0x9c/0x150 [ 462.602471][T19071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.608658][T19071] ? clear_bhb_loop+0x60/0xb0 [ 462.613382][T19071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.619335][T19071] RIP: 0033:0x7fe45fb8ebe9 [ 462.623793][T19071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.643450][T19071] RSP: 002b:00007fe460a5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.651918][T19071] RAX: ffffffffffffffda RBX: 00007fe45fdb5fa0 RCX: 00007fe45fb8ebe9 [ 462.659970][T19071] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 462.667978][T19071] RBP: 00007fe45fc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 462.675999][T19071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.684000][T19071] R13: 00007fe45fdb6038 R14: 00007fe45fdb5fa0 R15: 00007ffe2217f398 [ 462.692018][T19071] [ 462.695044][T19071] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 462.702334][T19071] CPU: 1 UID: 0 PID: 19071 Comm: syz.4.3467 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 462.714069][T19071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 462.724127][T19071] Call Trace: [ 462.727414][T19071] [ 462.730346][T19071] dump_stack_lvl+0x99/0x250 [ 462.734947][T19071] ? __asan_memcpy+0x40/0x70 [ 462.739554][T19071] ? __pfx_dump_stack_lvl+0x10/0x10 [ 462.744789][T19071] ? __pfx__printk+0x10/0x10 [ 462.749499][T19071] vpanic+0x281/0x750 [ 462.753509][T19071] ? __pfx__printk+0x10/0x10 [ 462.758161][T19071] ? __pfx_vpanic+0x10/0x10 [ 462.762681][T19071] ? is_bpf_text_address+0x26/0x2b0 [ 462.767913][T19071] panic+0xb9/0xc0 [ 462.771662][T19071] ? __pfx_panic+0x10/0x10 [ 462.776114][T19071] __warn+0x31b/0x4b0 [ 462.780111][T19071] ? rt6_multipath_rebalance+0x455/0x8b0 [ 462.785773][T19071] ? rt6_multipath_rebalance+0x455/0x8b0 [ 462.791511][T19071] report_bug+0x2be/0x4f0 [ 462.795881][T19071] ? rt6_multipath_rebalance+0x455/0x8b0 [ 462.801545][T19071] ? rt6_multipath_rebalance+0x455/0x8b0 [ 462.807255][T19071] ? rt6_multipath_rebalance+0x457/0x8b0 [ 462.813049][T19071] handle_bug+0x84/0x160 [ 462.817309][T19071] exc_invalid_op+0x1a/0x50 [ 462.821846][T19071] asm_exc_invalid_op+0x1a/0x20 [ 462.826732][T19071] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0 [ 462.833005][T19071] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 7d 30 f3 f7 e9 78 fe ff ff e8 63 c6 8f f7 eb 05 e8 5c c6 8f f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 462.852639][T19071] RSP: 0018:ffffc900030a63c0 EFLAGS: 00010293 [ 462.858727][T19071] RAX: ffffffff8a2fe54d RBX: ffff8880575e7400 RCX: ffff88802bbd1e00 [ 462.866728][T19071] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 462.874702][T19071] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 462.882682][T19071] R10: dffffc0000000000 R11: fffff52000614c70 R12: ffff8880575e74de [ 462.890661][T19071] R13: ffff8880575e7490 R14: 0000000000000000 R15: 1ffff1100aebce92 [ 462.898659][T19071] ? rt6_multipath_rebalance+0x44d/0x8b0 [ 462.904413][T19071] fib6_ifdown+0x401/0x4c0 [ 462.908901][T19071] ? __pfx_fib6_ifdown+0x10/0x10 [ 462.913866][T19071] fib6_clean_node+0x24a/0x590 [ 462.918654][T19071] ? __pfx_fib6_clean_node+0x10/0x10 [ 462.923979][T19071] ? __lock_acquire+0xab9/0xd20 [ 462.928864][T19071] ? __local_bh_enable_ip+0x12d/0x1c0 [ 462.934264][T19071] fib6_walk_continue+0x678/0x910 [ 462.939327][T19071] fib6_walk+0x149/0x290 [ 462.943598][T19071] __fib6_clean_all+0x234/0x380 [ 462.948464][T19071] ? __fib6_clean_all+0x9b/0x380 [ 462.953435][T19071] ? __pfx_fib6_ifdown+0x10/0x10 [ 462.958403][T19071] ? __pfx___fib6_clean_all+0x10/0x10 [ 462.963809][T19071] ? __pfx_fib6_clean_node+0x10/0x10 [ 462.969124][T19071] ? __pfx_fib6_ifdown+0x10/0x10 [ 462.974092][T19071] ? __mutex_trylock_common+0x153/0x260 [ 462.979655][T19071] rt6_disable_ip+0x120/0x720 [ 462.984381][T19071] ? rcu_is_watching+0x15/0xb0 [ 462.989160][T19071] ? trace_contention_end+0x39/0x120 [ 462.994471][T19071] ? __pfx_rt6_disable_ip+0x10/0x10 [ 462.999701][T19071] addrconf_ifdown+0x15d/0x1880 [ 463.004590][T19071] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 463.010256][T19071] ? tls_dev_event+0x717/0xec0 [ 463.015033][T19071] ? __pfx_addrconf_ifdown+0x10/0x10 [ 463.020355][T19071] addrconf_notify+0x1bc/0x1010 [ 463.025234][T19071] notifier_call_chain+0x1b6/0x3e0 [ 463.030367][T19071] __dev_notify_flags+0x18d/0x2e0 [ 463.035465][T19071] ? __pfx___dev_notify_flags+0x10/0x10 [ 463.041032][T19071] ? __dev_change_flags+0x4cc/0x6d0 [ 463.046267][T19071] ? __pfx___dev_change_flags+0x10/0x10 [ 463.051824][T19071] ? netif_state_change+0x256/0x3a0 [ 463.057051][T19071] ? __pfx_netif_state_change+0x10/0x10 [ 463.062620][T19071] netif_change_flags+0xe8/0x1a0 [ 463.067594][T19071] do_setlink+0xc55/0x41c0 [ 463.072025][T19071] ? rcu_is_watching+0x15/0xb0 [ 463.076795][T19071] ? __schedule+0x17ae/0x4cc0 [ 463.081497][T19071] ? __lock_acquire+0xab9/0xd20 [ 463.086378][T19071] ? __pfx_do_setlink+0x10/0x10 [ 463.091241][T19071] ? __lock_acquire+0xab9/0xd20 [ 463.096118][T19071] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 463.102018][T19071] ? lockdep_hardirqs_on+0x9c/0x150 [ 463.107224][T19071] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 463.113128][T19071] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 463.119500][T19071] ? rcu_is_watching+0x15/0xb0 [ 463.124300][T19071] ? __mutex_lock+0xd36/0x1360 [ 463.129076][T19071] ? __mutex_lock+0x5b6/0x1360 [ 463.133870][T19071] ? rtnl_newlink+0x8db/0x1c70 [ 463.138662][T19071] ? __pfx___mutex_lock+0x10/0x10 [ 463.143721][T19071] ? ns_capable+0x8a/0xf0 [ 463.148060][T19071] ? rtnl_link_get_net_capable+0x16a/0x350 [ 463.153884][T19071] rtnl_newlink+0x149f/0x1c70 [ 463.158576][T19071] ? netlink_sendmsg+0x805/0xb30 [ 463.163610][T19071] ? __pfx_rtnl_newlink+0x10/0x10 [ 463.168695][T19071] ? kasan_quarantine_put+0xdd/0x220 [ 463.174015][T19071] ? lockdep_hardirqs_on+0x9c/0x150 [ 463.179251][T19071] ? nlmon_xmit+0xb0/0x100 [ 463.183697][T19071] ? kmem_cache_free+0x18f/0x400 [ 463.188659][T19071] ? __local_bh_enable_ip+0x12d/0x1c0 [ 463.194051][T19071] ? lockdep_hardirqs_on+0x9c/0x150 [ 463.199281][T19071] ? __local_bh_enable_ip+0x12d/0x1c0 [ 463.204673][T19071] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 463.210396][T19071] ? __dev_queue_xmit+0x27b/0x3b50 [ 463.215523][T19071] ? __dev_queue_xmit+0x27b/0x3b50 [ 463.220639][T19071] ? __dev_queue_xmit+0x27b/0x3b50 [ 463.225771][T19071] ? __dev_queue_xmit+0x1d79/0x3b50 [ 463.230976][T19071] ? __lock_acquire+0xab9/0xd20 [ 463.235874][T19071] ? __pfx_rtnl_newlink+0x10/0x10 [ 463.240912][T19071] rtnetlink_rcv_msg+0x7cf/0xb70 [ 463.245884][T19071] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 463.251027][T19071] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 463.256503][T19071] ? ref_tracker_free+0x63a/0x7d0 [ 463.261567][T19071] ? __asan_memcpy+0x40/0x70 [ 463.266194][T19071] ? __pfx_ref_tracker_free+0x10/0x10 [ 463.271685][T19071] netlink_rcv_skb+0x208/0x470 [ 463.276455][T19071] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 463.281928][T19071] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 463.287257][T19071] ? netlink_deliver_tap+0x2e/0x1b0 [ 463.292496][T19071] netlink_unicast+0x82f/0x9e0 [ 463.297276][T19071] ? __pfx_netlink_unicast+0x10/0x10 [ 463.302568][T19071] ? netlink_sendmsg+0x642/0xb30 [ 463.307527][T19071] ? skb_put+0x11b/0x210 [ 463.311817][T19071] netlink_sendmsg+0x805/0xb30 [ 463.316623][T19071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.321948][T19071] ? aa_sock_msg_perm+0xf1/0x1d0 [ 463.326902][T19071] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 463.332194][T19071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.337493][T19071] __sock_sendmsg+0x219/0x270 [ 463.342197][T19071] ____sys_sendmsg+0x505/0x830 [ 463.346998][T19071] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.352306][T19071] ? import_iovec+0x74/0xa0 [ 463.356816][T19071] ___sys_sendmsg+0x21f/0x2a0 [ 463.361519][T19071] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.366801][T19071] ? __fget_files+0x2a/0x420 [ 463.371425][T19071] ? __fget_files+0x3a0/0x420 [ 463.376125][T19071] __x64_sys_sendmsg+0x19b/0x260 [ 463.381091][T19071] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 463.386600][T19071] ? rcu_is_watching+0x15/0xb0 [ 463.391373][T19071] ? do_syscall_64+0xbe/0x3b0 [ 463.396058][T19071] do_syscall_64+0xfa/0x3b0 [ 463.400585][T19071] ? lockdep_hardirqs_on+0x9c/0x150 [ 463.405814][T19071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.411884][T19071] ? clear_bhb_loop+0x60/0xb0 [ 463.416673][T19071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.422586][T19071] RIP: 0033:0x7fe45fb8ebe9 [ 463.427038][T19071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.446675][T19071] RSP: 002b:00007fe460a5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.455098][T19071] RAX: ffffffffffffffda RBX: 00007fe45fdb5fa0 RCX: 00007fe45fb8ebe9 [ 463.463092][T19071] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 463.471071][T19071] RBP: 00007fe45fc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 463.479066][T19071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.487050][T19071] R13: 00007fe45fdb6038 R14: 00007fe45fdb5fa0 R15: 00007ffe2217f398 [ 463.495041][T19071] [ 463.498416][T19071] Kernel Offset: disabled [ 463.502746][T19071] Rebooting in 86400 seconds..