last executing test programs: 3.875774151s ago: executing program 3 (id=1177): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000640)="00497ac3c19cd0467645752a368321d12b537786d5a5e99a59", 0x19}], 0x1}, 0x4000001) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a40)=""/188, 0xbc}], 0x1, &(0x7f0000000500)=""/87, 0x57}}], 0x1, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x94) 3.738607263s ago: executing program 3 (id=1180): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001ec0)='ns/time\x00') r1 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000b80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x7ffe, @mcast2, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401e45a6c29", 0xc}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="14ecffffff00000029000000080000000900000000000000180000000000000029000000040000001d33000000000000fc5e754569f915a7dcf4f7b56a7d85a2a715801960534c1c68dde9e831526e0769718af30aca8faadeb673f0e98524b28bfcfb8a3ec9ec8c8c"], 0x30}}], 0x1, 0x4000084) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffffe3, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, 0x123, 0x4, 0x70bd28, 0x25dfdbff, {0x16}, [@typed={0x8, 0x142}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x635280cf2ae0de09}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x1bc, r5, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xa0, 0x2a, [@mic={0x8c, 0x10, {0xd26, "9fd48d860598", @short="d1f91d9c9e73c7cd"}}, @mic={0x8c, 0x18, {0xa2c, "671fe153d027", @long="c9e75dfb04e5c050f56f2e77bce9021b"}}, @measure_req={0x26, 0x57, {0xd, 0x7, 0x7, "c87c818ef90f6b93e3d3c9ed3468e64bb68226f54a7a2e8a9d6262cf7d31535507c284f4babb1934c9db0d4ba3741ba0db5f552d1d4881f7b7c76970c5086865e5e1745c705f1f89258a6d5affd985854d7c0510"}}, @dsss={0x3, 0x1, 0xad}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xc4, 0xa9, 0x7}}, @mesh_chsw={0x76, 0x6, {0x4, 0x8, 0x1c}}, @chsw_timing={0x68, 0x4, {0xf, 0xc}}]}, @NL80211_ATTR_IE={0xc6, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @mesh_id={0x72, 0x6}, @channel_switch={0x25, 0x3, {0x1, 0xb0, 0x6}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0x9}}, @tim={0x5, 0xab, {0x7, 0xf1, 0x2, "e1c484ac42d4045ed9cb9b8529e477c54260c6cd9aa9edab7232c02a4dc4922016126ff5468660c50399bfaff745f27707f11f4863a868521409e8e003ea55d19a658044daa512fe5ca9b51639e1ef62958801db31cd608a2921d96d1b5bd82c6e8758319483b625785a630aa4338927a5e8bd935efec7931a92fb345d834a697ac618c9f851a6bef737f108c8c1e83e22244cd57cf9540c6e25eb7f5d0e1094ef5eabd775472dd3"}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000004) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r6, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) r8 = socket(0x2, 0x800, 0x6) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r9, 0x18000000000002a0, 0xeff, 0x7, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(r9, &(0x7f0000000400)='memory.events.local\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xfffffe6f, &(0x7f0000000300)={&(0x7f0000000140)={0x90, 0x2, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_LABELS_MASK={0x24, 0x17, [0x5ad, 0xbb, 0x2, 0x3, 0x5, 0xe07, 0x2, 0xca]}, @CTA_TUPLE_MASTER={0x4c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_LABELS_MASK={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x8844}, 0x240400c4) 3.289308122s ago: executing program 3 (id=1184): unshare(0x2040400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r3 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000180)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00', 0x7}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x36) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r9, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) connect$bt_sco(r9, &(0x7f0000000080)={0x1f, @fixed}, 0x8) r10 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r8, &(0x7f00000000c0)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700299e973642228ddf3928c9b42bfde67bee78895e16f3", 0x4c, 0x24000840, &(0x7f0000000080)={0x11, 0x3, r11, 0x1, 0xe2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x5, 0x8002, 0x2, 0xa, 0x0}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000300)={r12, @in={{0x2, 0x4e22, @empty}}, 0x7ff}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sys_exit\x00', r2, 0x0, 0x100000000}, 0x18) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e22, @multicast2}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x0, {0x2, 0x4e24, @multicast1}, 'vxcan1\x00'}) pread64(r1, 0x0, 0x0, 0x1) 3.100701727s ago: executing program 3 (id=1186): clock_gettime(0x8, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f00000000c0)=0x20000001, 0x4) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x30fea7, 0xa) r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x11, r3, 0x3cd30000) r4 = socket$pppoe(0x18, 0x1, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='ext4_es_find_extent_range_enter\x00', r5, 0x0, 0x380d}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x2c, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000008000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000186a00000f00000000000000ff0f000005214eff10000000183a00000300000000000000000000000011050001000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000da903000000000008510000007000000371a00001000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018330000030000000000000000000000bf91000000000000b702000002000000850000000a010000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x80}, 0x40800) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYRESOCT], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'veth1\x00'}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000380)='mm_page_alloc\x00', r11}, 0x18) 2.799145515s ago: executing program 0 (id=1187): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0xa, 0x16, 0x800, 0x7f}, 0x50) (async) unshare(0x24040400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000005001000050000000500000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000100), &(0x7f0000000180)=""/177}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_user\x00', 0x275a, 0x0) pwrite64(r1, 0x0, 0x0, 0x40008001) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000800)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x5}}}, 0x24}}, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100004000000deffffff00000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000090900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802000"], 0x118}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f00000001c0)={r6, 0x12, "4b3ccab09a7a6f5c528fcd1d4b86720d3647"}, &(0x7f0000000140)=0x1a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000540)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000006c0)=0x10) sendmsg$inet_sctp(r3, &(0x7f0000000680)={&(0x7f0000000040)=@in={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000140)="72a9208c1b1936c3c7ab14aff2c2a32de2e7fba088e3aa43c598b30c45ce84184c632139ed6541829e6ee053", 0x2c}, {&(0x7f0000000280)="f03455b2c4f712621fe5d438e4980331d4aa882caa10168db8d1efd172d43253163319f262c16561091d53afe42327622b20dbc981b410c0aa7685308c7c21916bd168f6cbb86dc63745e219edd3bd1647ebc4e6aae121c15b2b0f1a4e43bd466930cf2a37766a04a957c307a4d320119dcc7fa5bfc778f6d4b9678bf04ceec4fa99", 0x82}], 0x2, &(0x7f00000005c0)=[@sndinfo={0x20, 0x84, 0x2, {0x9, 0x200, 0x2, 0x4}}, @sndinfo={0x20, 0x84, 0x2, {0x955, 0x209, 0x8, 0x5961, r6}}, @sndinfo={0x20, 0x84, 0x2, {0x401, 0x1, 0x8, 0x800, r7}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0xa3a}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x8, 0x0, 0x800, 0x4, 0x6, 0x7, 0x9}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}], 0xc0, 0x10}, 0x48060) 2.676714624s ago: executing program 0 (id=1189): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000004280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000042c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x10, 0x9}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x1000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r6}, 0x10) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r8, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r0, 0x0, 0x0}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x14, 0x8, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4048800) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.674340967s ago: executing program 1 (id=1191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/15, 0xf}], 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea616f", 0x3}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) (async, rerun: 32) r4 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 32) bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) (async, rerun: 64) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x18c, r6, 0x400, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd127}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2aa}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa37e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff058a}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffff4af9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc00}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x15}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}]}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x140000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 2.530037116s ago: executing program 0 (id=1193): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a3100000000ceb4ca9673797a3000f9ffff0700054000000021600000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000003400038030000080080003400000000224000b80100001800c000100636f756e74657200100001800c000100636f756e74657200140000001000010000000000000000000084000afec01c8c41629a938eeae3ec059ed17590892cac3b324d0ecda2e0a097893b8423e8ca7e15ec0b3a40e787056f7a3ea1d075ad157cf2b2beb62d62cfea95f79689d23ee5743ca65ccdc27bb96d688bacd35ac13b81747d80a14723247aabf71e53169bbdc2bb4026612b482f6483caaff5b7500659b8b8c045f3f74d2b0b8c83167116b00fe7f50411e2dea10a470e292592ab46ce7f3c1b950a44c032971049215b011d77081fe1c33787f45106e069e8f28386292714b81087"], 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendto$inet6(r1, &(0x7f0000000040)='o', 0x1, 0x51, &(0x7f0000000000)={0xa, 0x3, 0x81, @dev={0xfe, 0x80, '\x00', 0x17}, 0x9}, 0x1c) 2.313171307s ago: executing program 4 (id=1194): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000001380)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x7, @empty, 0x4}}, 0x24) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x14, 0x2, 0x4) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, 0x0, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffda3}, 0x94) 2.089216816s ago: executing program 0 (id=1195): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x2d, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000180)=0x17, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) select(0x40, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000001000)={0x0, 0x0, 0x2}, &(0x7f0000001080)) r2 = socket(0x40000000015, 0x5, 0x0) connect$l2tp6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x0, 0x2}, 0x20) r3 = socket$inet_sctp(0x2, 0x5, 0x84) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000280)="05", 0x1}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r5}}], 0x20, 0x2400e044}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000000c0)={r5, 0x1}, 0x8) 1.900935951s ago: executing program 2 (id=1196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000042f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) poll(&(0x7f00000001c0)=[{r2, 0x200}, {r1, 0x200}, {r2, 0x104}, {r1, 0x9}], 0x4, 0x8) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 1.900232486s ago: executing program 1 (id=1197): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000080000000000000000000000850000002a000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r3, &(0x7f0000006900)=[{{&(0x7f0000000480)={0xa, 0x4e20, 0xe7a, @loopback, 0xf3}, 0x1c, 0x0}}, {{&(0x7f0000000740)={0xa, 0x4e20, 0x4, @private0, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000ac0)=[@tclass={{0x14, 0x29, 0x43, 0x7f}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x4, 0x0, 0x0, 0x80}}}], 0x30}}], 0x2, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) read(r2, &(0x7f0000000080)=""/186, 0xba) unshare(0x26020480) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000000d0a010800000000000000000a0000010979dd7c70e6abf200020073797a31000000000900010073797a3100000000100003800c00008008"], 0x3c}}, 0x8000) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet(0x2, 0x2, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000540), 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x2c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x14}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8010) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000000)=0x2, 0x4) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r4) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000940)={0xb8, r8, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x1a}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9e2c5998b011c34d64fb58a72748edf35cd530a47fbc277f"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2522933398286cd5ac51c8ae962919e7fd8b9947c1c43d2d"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x20008081) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newqdisc={0x148, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x5, 0x9, 0x48, 0x7, 0xc, 0x4, 0x4}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x41, '\x00', r9, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1}, 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000a00), 0x8) ioctl$TUNSETOFFLOAD(r10, 0x400454d0, 0x18) 1.854034154s ago: executing program 0 (id=1198): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000000)='sched_process_fork\x00', r0, 0x0, 0x400000000000}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001e0ffffff00000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f6164003400028008000440000000000800084000000000080002400000000008000540000000000800034000000000080006"], 0x9c}}, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000580), 0x8) 1.791936267s ago: executing program 2 (id=1199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40800000000000061106a00000000000600004e000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000081"], 0x78}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'veth0_to_bond\x00', {0x2}, 0xfffe}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) unshare(0x60480) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r5, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100009ff1f5a500aaaaaaaa88a8600081"], 0x3a) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r6, 0x4018f50b, &(0x7f00000001c0)={0x0, 0x4c}) sendmsg$AUDIT_TTY_GET(r7, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x3f8, 0x1, 0x70bd2d, 0x25dfdbff, "", ["", ""]}, 0x10}}, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x99f) 1.692827451s ago: executing program 1 (id=1200): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) unshare(0x400) sendto$inet6(r1, 0x0, 0x0, 0x400a048, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r0], 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000000)={0xa, 0x4e60, 0x4d7, @rand_addr=' \x01\x00', 0x6}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000000c0)="9bb2ec1451489397bf5f4e00", 0x1}, {&(0x7f0000000280)="c546fdab261a2d86b95d7e5587920b23b2cb08ca8194e589f6c7b0d283c8a4e3dfbae27f4e29a4d77c84246ea41584cbe8f2a0363f02f0f61794eac02392927d304e105ed142a38287301810eaccc337d6d0ecdc4e2d27792e18a3eb0a1786055342932003d4168c94518c368cdf5d082d13592e1511521a6a0eb8207b75a5020000000000005b7d731055c1ac291fc7c0836243588c79f518dcd1233c8056db9d58cf540683ab252c3480e0cbc28538fa802c841cab182857cba22affe09e635cff91febc24e3e2bf5c7d09387e50f020c5c7587a869f00"/225}], 0x1}}, {{0x0, 0x0, 0x0, 0xfe57}}, {{0x0, 0x0, 0x0}}], 0x3, 0x200480d0) 1.648547947s ago: executing program 0 (id=1201): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000500040002000000050002000a0000001400070000000000000000000000000000000001"], 0x38}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000340), &(0x7f0000000380)=r6}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000340), &(0x7f0000000380)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r8 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000a00)={0x14c, 0x0, 0x108, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x976}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4fac3e52}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff7b6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x155c}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000001}, 0x22040800) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$kcm(0xa, 0x3, 0x87) (async) socket$kcm(0xa, 0x3, 0x87) syz_emit_ethernet(0x3e, &(0x7f0000000640)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000e86dd600000000008870003000000000000000000ffffac1414bbff0200000000000000000000000000010400020f00000000c7b941a4806451d39fc54d3960c7155273fdd15d8f434a4c3be6f5a35e10a6da21536cf1d81035c35398"], 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats}) (async) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats}) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$sock(r10, &(0x7f0000003640), 0x0, 0x20040059) (async) sendmmsg$sock(r10, &(0x7f0000003640), 0x0, 0x20040059) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14) socket(0x1d, 0x2, 0x6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000840)={r11, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000840)={r11, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) r12 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r12, 0x29, 0xcc, &(0x7f00000005c0)={{0xa, 0x4e21, 0x8, @mcast2, 0xa}, {0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0xc}, 0xcd9}, 0xffffffffffffffff, {[0x0, 0x3, 0x1, 0x7f, 0x6, 0xfffffffd, 0xfffffffc, 0x455a]}}, 0x5c) 1.596453649s ago: executing program 1 (id=1202): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a19eed87b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436e101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521bc9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d2502000000d9051f22614d1f62734d678039a97d2b74f9e8e97f4e8e7025123e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f23128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184f5de7bfb6aaa75f16996d8d60bd0111a8a237a1536256c02284cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798bbe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e2005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9cde5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde330289d6348d183ed9d3dae3cccf109f7c78e8479a345e805e47dfa82cafc6b64b1f4659834aecbeded44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1b7d5f80c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a06bc06e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4d57b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f709294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80014ff11d9dbceba41d8dfce410333a054e82b1d050331ce0aeacb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6bb956fac1ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a8263e9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dd18f6148354df7e60a489dc543ccdee1fff9d8f8d78844de27a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d64100cc000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2ceae70922989f66827fe9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168e32d7bd6800000000a21008b8d26dabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2935d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95badaf8ed85cd5b03a7352a0fb83398566d1bc133582ce2d9f601cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353c959fd965702f1cd5bcb3c16d4b8bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef07b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c3355fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538b011cb3928b430630b8ccc800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b314bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c921b090000000000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da22ee9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45b4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d5027e81ceec1a6d7441d0b538d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656d9a28f81f6a9465aec94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be184d4ebb942f99581a6fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bbb4ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855cb18b23517ca935a0fa1b630d70c4ca9acbaf0f08910f327fba506d834029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17ecd996d7dea947ee8ce55fa2dea5a000000000000000000000000006f0143d8d4038ef9f57d9e9336f3559558710d1febe7394cf8b02f59dab24d07db3d3c1ebff58f973ba3fc0c3e2fb2c2a674a188614520ecb1d22b49e3550263bf9d669fba198b65ee3512db0e710d2070b5847face7ada12c83f0aea3a8c9e84e6c7406732c952c5695d43bca33d481ef9d442697875e114f4c759af306b3fc8224fdec89bf199234bff488b81438cbe89e4cabdc007139352b5cb69d7987cdf37ab549b7639eeadafd5315d9c9f0e8c9223102e6deaca4ae9cb943a3ad188bcad95e8f97d7fee7c47ea50d222fe67085b4fb3fecfb67dec23b6ab5ee19a5ca5367bff058149acf90a6c4014dea2b763389f77301ea8574d112625300906f480c36f41f82f84991800c37863de349f7"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$inet(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x805) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r0, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x48) close(r0) 1.44065744s ago: executing program 4 (id=1203): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async, rerun: 32) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x2, 0x4, 0x7fffffff}, 0xc) (async, rerun: 32) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 64) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 64) sendmmsg$sock(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="895514147d96bdda42de", 0xa}], 0x1}}], 0x1, 0x4000000) (async, rerun: 32) close(r0) (async, rerun: 32) shutdown(r0, 0x1) (async, rerun: 64) r2 = socket(0x11, 0x3, 0x0) (async, rerun: 64) r3 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3a9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x44040) (async, rerun: 64) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @random="e38f6cc55385", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x8, 0x2}]}}}}}}}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@migrate={0xbc, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x1000, 0x0, 0x0, 0xa, 0xe0}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x6c010102, @in=@loopback, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e24, 0x4e20, @in=@multicast2}}]}, 0xbc}}, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000040)='veth1_to_batadv\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1.389340295s ago: executing program 2 (id=1204): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000a000000000200000700000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r1, &(0x7f0000000a40)='&', &(0x7f0000000040)=""/98}, 0x20) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x28, 0x140e, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_PDN={0xfffffffffffffccb, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/89}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 1.36502068s ago: executing program 4 (id=1205): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000400040000fddbdf258700000010000000", @ANYRES32=0x0, @ANYBLOB="0c00990002000000570000000a000600ffffffffffff0000060048003c000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) socket$kcm(0x1e, 0x2, 0x0) (async, rerun: 32) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) shutdown(r5, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async, rerun: 64) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r7 = openat$cgroup_pressure(r6, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) (async) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r11, 0xa}, 0x8) write$cgroup_pressure(r7, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) ppoll(&(0x7f0000000180)=[{r7}], 0x1, 0x0, 0x0, 0x0) (async) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000340)={'some', 0x20, 0x4, 0x20, 0xffffa}, 0x2f) (async) close(r7) (async) close(0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r12, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="3800000004060104000000000000000007000005050001000f000000050001000700000005000100070000000900020073797a3100000000"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) (async, rerun: 32) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="070000000000fddbdf250800000008000300", @ANYRES32=r4, @ANYBLOB="5c911743358da85b21255725d4b8f7827e3cd424e14628e14e5e25a46907273aa10f4446f7f265a6d92fbdd6ddf8bb325e74e57296d84138db899c25a0d62e881bdddc909c9482b9bd6d75e1909279afe73085e5e64867dcf975b9cd52ee30a9017e73fb7e7e3ce1b15da3e67965d8dec6d6b54bd7b411f8f010ebc976b313223054d1ff30f729dab5429e9f78bff162ab2fc2e6e85447b09f1255beb2403c300970572d1739001d94888871220ebdfcb135ded64440c57ad1a0f7f7a7"], 0x1c}}, 0x0) (rerun: 32) 1.190047681s ago: executing program 2 (id=1206): unshare(0x26020480) unshare(0x1000000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x3e, 0x107, 0x70bd2b, 0xfffffffd, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x13e}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xa}, 0x94) 1.188353157s ago: executing program 1 (id=1207): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) (async, rerun: 32) r2 = socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 32) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x4, 0x0, 0x0, {0xa, 0x4e21, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x800}}}, 0x32) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 64) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) (async, rerun: 64) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000240)={0x2, 0x4e26, @empty}, 0x10) (async) getsockopt(r6, 0x8000111, 0xa, 0x0, &(0x7f0000000080)) (async, rerun: 64) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000200)={r4, 0x1, 0x6, @multicast}, 0x10) (async, rerun: 64) shutdown(0xffffffffffffffff, 0x1) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f0000000100)) r11 = socket$caif_seqpacket(0x25, 0x5, 0x0) sendmmsg(r11, &(0x7f0000002080)=[{{&(0x7f0000000040)=@l2tp={0x2, 0x0, @empty}, 0x80, 0x0}}], 0x1, 0x48044) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xfff3, 0x5}}}, 0x24}}, 0x0) 1.12591602s ago: executing program 2 (id=1208): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x800) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x3c, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r3 = socket$inet6(0xa, 0x2, 0x4) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110b5000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000040)=[{{0x1, 0x1, 0x1}, {0x3, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x4, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}], 0x28) 1.075341419s ago: executing program 1 (id=1209): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x112, r0, 0x196d2000) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="e06900136545093b546f650613e90000000000800200c6f8ff9f9df33d1880d93904", @ANYRES16=0x0, @ANYBLOB="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"], 0x1e0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800090000080000000000001c140000fe00000100000000080013"], 0x24}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x305200, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) write$cgroup_devices(r8, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) write$cgroup_devices(r7, &(0x7f0000000840)=ANY=[], 0xffdd) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) 1.020615673s ago: executing program 4 (id=1210): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) (async) readv(r1, &(0x7f0000000500)=[{&(0x7f00000006c0)=""/245, 0xf5}], 0x1) pread64(r0, &(0x7f0000002840)=""/4112, 0x1010, 0x102) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c00000002060101000000000000000000000001120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c00018008"], 0x6c}}, 0x20048084) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(0xffffffffffffffff, &(0x7f00000007c0)={@val={0x0, 0x6000}, @val={0x1, 0x0, 0x27, 0x0, 0x27, 0x4}, @mpls={[], @generic="80a0f49759d0968fffe772e5975ff06073e8d70f1c5e0e620ef477d81bb46d7a12f732c473f487dff272171a978b37f82d33eb79222214497c03bda954b1a3d7308c4cd11c162acc65ef717a838265333091f4470498b7bece4e313e0a7592d3cb86cc757819a07c04003920300ec69b098b76f9db"}}, 0x83) setsockopt$inet6_int(r3, 0x29, 0x12, &(0x7f0000000180)=0x6, 0x4) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f00000000c0)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x1}, 0xe) recvfrom$netrom(0xffffffffffffffff, &(0x7f0000000300)=""/128, 0x80, 0x100, &(0x7f0000000540)={{0x3, @bcast, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @null, @null]}, 0x48) (async) r6 = socket(0x6, 0x800, 0x1) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r7 = socket(0x10, 0x803, 0xfffffff1) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) (async, rerun: 64) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 64) r9 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth1\x00'}) 898.607485ms ago: executing program 4 (id=1211): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20) r2 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x1, 0x0) pipe(&(0x7f00000001c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0xb5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1f00000002e03471c15b15f9645446b1c76003000000000000000500000022000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYRES32=r3, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r6}, 0x10) 774.956681ms ago: executing program 2 (id=1212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x149602, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'virt_wifi0\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000180)=0x2f9, 0x4) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x3}}}, 0x84) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a"], 0xfdef) 572.304597ms ago: executing program 4 (id=1213): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12) (async) write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0xa4, 0x1, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xe2}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x54, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x11}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7ea9}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4008801}, 0x8000) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) (async) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r10], 0x54}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r10], 0x54}}, 0x0) r11 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x20, 0xf8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x401, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) (async) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) (async) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001dc0)={0x40, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x24, 0x1, 0x0, 0x1, [@nested={0x20, 0x1e, 0x0, 0x1, [@nested={0x19, 0x3d, 0x0, 0x1, [@generic="f1df62fd16b937aa9eab523e2bb48affe1d2f1a507"]}]}]}]}, 0x40}}, 0x0) (async) sendmsg$nl_generic(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001dc0)={0x40, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x24, 0x1, 0x0, 0x1, [@nested={0x20, 0x1e, 0x0, 0x1, [@nested={0x19, 0x3d, 0x0, 0x1, [@generic="f1df62fd16b937aa9eab523e2bb48affe1d2f1a507"]}]}]}]}, 0x40}}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r14, @ANYBLOB="0174dfdb0ddad488bc"], 0x20}}, 0x0) r16 = socket(0x1, 0x803, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r17}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r17}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) 65.22182ms ago: executing program 3 (id=1214): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x22, &(0x7f0000000640)=@raw=[@jmp={0x5, 0x0, 0x9, 0x1, 0x0, 0x40, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10}, @alu={0x4, 0x1, 0x4, 0x5, 0x6, 0x50, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x1, 0xe, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, r0, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) 0s ago: executing program 3 (id=1215): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000009681e8592a167b2200bf09000000000000550901000000000095000000000000008500000011000000bf91000000000000b702000000000000850000000000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x2c, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0x2, @private1, 0x3}]}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000540)={r3, 0x8, 0x4, 0x8, 0x6, 0x8}, &(0x7f0000000580)=0x14) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.245' (ED25519) to the list of known hosts. [ 83.500168][ T5830] cgroup: Unknown subsys name 'net' [ 83.668116][ T5830] cgroup: Unknown subsys name 'cpuset' [ 83.677409][ T5830] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.321696][ T5830] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.804544][ T5161] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.812578][ T5161] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.820153][ T5161] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.829104][ T5161] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.847790][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.855944][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.864048][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.873465][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.895226][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.902965][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.049779][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.058421][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.067607][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.078975][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.087169][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.112895][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.120723][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.128775][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.136925][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.144972][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.168201][ T5161] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.179467][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.189086][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.197564][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.211481][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.455000][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 88.628191][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.635987][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.643928][ T5843] bridge_slave_0: entered allmulticast mode [ 88.651998][ T5843] bridge_slave_0: entered promiscuous mode [ 88.681682][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.689003][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.696373][ T5843] bridge_slave_1: entered allmulticast mode [ 88.703450][ T5843] bridge_slave_1: entered promiscuous mode [ 88.844044][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.878950][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.000565][ T5843] team0: Port device team_slave_0 added [ 89.009591][ T5843] team0: Port device team_slave_1 added [ 89.016174][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 89.108832][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 89.127212][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 89.139158][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.146449][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.172591][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.216495][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.223519][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.249528][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.300495][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 89.433622][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.441361][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.449161][ T5858] bridge_slave_0: entered allmulticast mode [ 89.456477][ T5858] bridge_slave_0: entered promiscuous mode [ 89.533298][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.541101][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.548622][ T5858] bridge_slave_1: entered allmulticast mode [ 89.556088][ T5858] bridge_slave_1: entered promiscuous mode [ 89.568558][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.575715][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.582842][ T5855] bridge_slave_0: entered allmulticast mode [ 89.594093][ T5855] bridge_slave_0: entered promiscuous mode [ 89.606087][ T5843] hsr_slave_0: entered promiscuous mode [ 89.612387][ T5843] hsr_slave_1: entered promiscuous mode [ 89.618987][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.626445][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.633590][ T5847] bridge_slave_0: entered allmulticast mode [ 89.641398][ T5847] bridge_slave_0: entered promiscuous mode [ 89.668101][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.675292][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.682395][ T5855] bridge_slave_1: entered allmulticast mode [ 89.689645][ T5855] bridge_slave_1: entered promiscuous mode [ 89.721635][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.729003][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.736492][ T5847] bridge_slave_1: entered allmulticast mode [ 89.743689][ T5847] bridge_slave_1: entered promiscuous mode [ 89.792847][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.817955][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.831079][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.852781][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.860071][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.867459][ T5857] bridge_slave_0: entered allmulticast mode [ 89.875421][ T5857] bridge_slave_0: entered promiscuous mode [ 89.885367][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.904677][ T5846] Bluetooth: hci0: command tx timeout [ 89.956798][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.963997][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.971749][ T5857] bridge_slave_1: entered allmulticast mode [ 89.979867][ T5857] bridge_slave_1: entered promiscuous mode [ 89.986484][ T5846] Bluetooth: hci1: command tx timeout [ 90.007262][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.020456][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.031144][ T5858] team0: Port device team_slave_0 added [ 90.079764][ T5855] team0: Port device team_slave_0 added [ 90.089268][ T5855] team0: Port device team_slave_1 added [ 90.111374][ T5858] team0: Port device team_slave_1 added [ 90.144963][ T5846] Bluetooth: hci2: command tx timeout [ 90.187526][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.212524][ T5847] team0: Port device team_slave_0 added [ 90.225375][ T5846] Bluetooth: hci3: command tx timeout [ 90.225556][ T5850] Bluetooth: hci4: command tx timeout [ 90.249420][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.272374][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.280208][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.306746][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.319972][ T5847] team0: Port device team_slave_1 added [ 90.326755][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.333733][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.360440][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.391387][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.398772][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.424934][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.449565][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.456695][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.482876][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.501938][ T5857] team0: Port device team_slave_0 added [ 90.545852][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.552829][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.578982][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.603934][ T5857] team0: Port device team_slave_1 added [ 90.629099][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.636368][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.662425][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.730890][ T5855] hsr_slave_0: entered promiscuous mode [ 90.737516][ T5855] hsr_slave_1: entered promiscuous mode [ 90.743573][ T5855] debugfs: 'hsr0' already exists in 'hsr' [ 90.750397][ T5855] Cannot create hsr debugfs directory [ 90.774049][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.781414][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.807643][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.820841][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.827850][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.854456][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.905117][ T5858] hsr_slave_0: entered promiscuous mode [ 90.911541][ T5858] hsr_slave_1: entered promiscuous mode [ 90.918055][ T5858] debugfs: 'hsr0' already exists in 'hsr' [ 90.923798][ T5858] Cannot create hsr debugfs directory [ 90.986317][ T5847] hsr_slave_0: entered promiscuous mode [ 90.992673][ T5847] hsr_slave_1: entered promiscuous mode [ 90.999333][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 91.005302][ T5847] Cannot create hsr debugfs directory [ 91.148200][ T5857] hsr_slave_0: entered promiscuous mode [ 91.154770][ T5857] hsr_slave_1: entered promiscuous mode [ 91.160926][ T5857] debugfs: 'hsr0' already exists in 'hsr' [ 91.167136][ T5857] Cannot create hsr debugfs directory [ 91.341609][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.395656][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.429850][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.442193][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.601110][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.626911][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.653987][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.682979][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.753897][ T9] cfg80211: failed to load regulatory.db [ 91.762993][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.775170][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.801287][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.831217][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.880861][ T5858] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.910228][ T5858] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.922828][ T5858] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.952780][ T5858] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.984620][ T5850] Bluetooth: hci0: command tx timeout [ 92.028759][ T5857] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.043431][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.055600][ T5857] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.064267][ T5850] Bluetooth: hci1: command tx timeout [ 92.080336][ T5857] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.091106][ T5857] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.165797][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.201121][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.208423][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.226663][ T5850] Bluetooth: hci2: command tx timeout [ 92.242938][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.285411][ T4888] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.292561][ T4888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.304453][ T5850] Bluetooth: hci4: command tx timeout [ 92.304585][ T5846] Bluetooth: hci3: command tx timeout [ 92.313965][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.332385][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.367975][ T4888] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.375234][ T4888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.422627][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.442012][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.449153][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.478584][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.485758][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.513681][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.520845][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.573998][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.697400][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.755125][ T5847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.770089][ T4896] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.777299][ T4896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.794061][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.841024][ T4888] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.848198][ T4888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.969170][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.012756][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.019960][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.056554][ T5857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.089927][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.097094][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.162928][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.277692][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.298573][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.433926][ T5843] veth0_vlan: entered promiscuous mode [ 93.493475][ T5843] veth1_vlan: entered promiscuous mode [ 93.507028][ T5855] veth0_vlan: entered promiscuous mode [ 93.559152][ T5855] veth1_vlan: entered promiscuous mode [ 93.653930][ T5843] veth0_macvtap: entered promiscuous mode [ 93.703485][ T5843] veth1_macvtap: entered promiscuous mode [ 93.731381][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.773448][ T5855] veth0_macvtap: entered promiscuous mode [ 93.793785][ T5855] veth1_macvtap: entered promiscuous mode [ 93.830832][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.885387][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.895128][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.909595][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.952206][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.961207][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.970602][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.991793][ T5857] veth0_vlan: entered promiscuous mode [ 94.012105][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.028020][ T5857] veth1_vlan: entered promiscuous mode [ 94.042356][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.051493][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.064639][ T5846] Bluetooth: hci0: command tx timeout [ 94.083200][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.092109][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.116278][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.138812][ T5847] veth0_vlan: entered promiscuous mode [ 94.145470][ T5846] Bluetooth: hci1: command tx timeout [ 94.208162][ T5847] veth1_vlan: entered promiscuous mode [ 94.244997][ T5857] veth0_macvtap: entered promiscuous mode [ 94.279703][ T4896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.279890][ T5857] veth1_macvtap: entered promiscuous mode [ 94.288369][ T4896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.314981][ T5846] Bluetooth: hci2: command tx timeout [ 94.351774][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.386742][ T5846] Bluetooth: hci4: command tx timeout [ 94.387883][ T5850] Bluetooth: hci3: command tx timeout [ 94.398701][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.409622][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.418329][ T4888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.426640][ T4888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.427032][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.436056][ T5858] veth0_vlan: entered promiscuous mode [ 94.457258][ T5847] veth0_macvtap: entered promiscuous mode [ 94.467144][ T5858] veth1_vlan: entered promiscuous mode [ 94.496662][ T4896] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.506828][ T4896] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.558217][ T4896] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.567679][ T4896] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.581163][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.582321][ T5847] veth1_macvtap: entered promiscuous mode [ 94.610020][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.633392][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.647135][ T5858] veth0_macvtap: entered promiscuous mode [ 94.672620][ T5858] veth1_macvtap: entered promiscuous mode [ 94.748673][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.810823][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.821890][ T4896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.855061][ T4896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.946723][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.972624][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.983592][ T4896] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.997337][ T5960] openvswitch: netlink: Key type 16144 is out of range max 32 [ 95.016644][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.056499][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.079588][ T4896] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.090464][ T4896] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.120876][ T4896] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.178510][ T4896] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.259303][ T4896] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.289485][ T4896] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.336339][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.436959][ T5959] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'. [ 95.471108][ T4888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.486804][ T4888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.609436][ T4888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.617492][ T4888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.646330][ T5968] Zero length message leads to an empty skb [ 95.651549][ T59] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.661299][ T59] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.693890][ T59] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.709337][ T59] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.771770][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.783966][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.907960][ T4888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.932551][ T4888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.144476][ T5850] Bluetooth: hci0: command tx timeout [ 96.155169][ T5985] syz.1.11 uses obsolete (PF_INET,SOCK_PACKET) [ 96.224906][ T5850] Bluetooth: hci1: command tx timeout [ 96.397166][ T5850] Bluetooth: hci2: command tx timeout [ 96.465093][ T5850] Bluetooth: hci3: command tx timeout [ 96.474760][ T5850] Bluetooth: hci4: command tx timeout [ 96.675494][ T6004] IPv6: NLM_F_REPLACE set, but no existing node found! [ 96.678500][ T5994] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.866082][ T6012] netlink: 'syz.4.18': attribute type 2 has an invalid length. [ 96.956159][ T5994] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.971525][ T6017] netlink: 'syz.4.18': attribute type 23 has an invalid length. [ 97.090874][ T5994] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.159221][ T6021] syzkaller0: entered promiscuous mode [ 97.166654][ T6021] syzkaller0: entered allmulticast mode [ 97.188595][ T6024] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 97.196734][ T6025] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 97.213672][ T5994] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.249267][ T6021] netlink: 68 bytes leftover after parsing attributes in process `syz.0.20'. [ 97.480526][ T6034] netlink: 20 bytes leftover after parsing attributes in process `syz.4.24'. [ 97.728092][ T6039] netlink: 'syz.1.26': attribute type 3 has an invalid length. [ 97.745864][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26'. [ 97.800112][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'. [ 98.035487][ T59] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.101184][ T6041] syz.2.27 (6041) used greatest stack depth: 19816 bytes left [ 98.127018][ T4888] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.225323][ T59] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.324076][ T59] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.687019][ T6074] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 98.726402][ T6074] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.35'. [ 98.773514][ T6076] netlink: 'syz.1.36': attribute type 15 has an invalid length. [ 98.806936][ T6076] warning: `syz.1.36' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.978795][ T6082] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6) [ 99.812632][ T6117] netlink: 32 bytes leftover after parsing attributes in process `syz.2.48'. [ 99.902228][ T6117] hsr0: entered promiscuous mode [ 99.954947][ T6110] hsr0: left promiscuous mode [ 100.203979][ T6132] netlink: 248 bytes leftover after parsing attributes in process `syz.2.56'. [ 100.211945][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.52'. [ 100.240426][ T6135] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 100.272838][ T6136] netlink: 56 bytes leftover after parsing attributes in process `syz.1.55'. [ 100.461486][ T6145] ieee802154 phy0 wpan0: encryption failed: -22 [ 100.467066][ T6144] Driver unsupported XDP return value 0 on prog (id 21) dev N/A, expect packet loss! [ 100.624077][ T6156] netlink: 'syz.3.64': attribute type 1 has an invalid length. [ 100.676236][ T6159] __nla_validate_parse: 3 callbacks suppressed [ 100.676255][ T6159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.65'. [ 101.327738][ T6188] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.335813][ T6188] bridge0: port 3(bond1) entered blocking state [ 101.342313][ T6188] bridge0: port 3(bond1) entered disabled state [ 101.357880][ T6188] bond1: entered allmulticast mode [ 101.377892][ T6188] bond1: entered promiscuous mode [ 101.396325][ T6188] bridge0: port 3(bond1) entered blocking state [ 101.402877][ T6188] bridge0: port 3(bond1) entered forwarding state [ 101.417701][ T6192] tipc: Started in network mode [ 101.422873][ T6192] tipc: Node identity ac14140f, cluster identity 4711 [ 101.445631][ T6192] tipc: New replicast peer: 255.255.255.83 [ 101.457663][ T6192] tipc: Enabled bearer , priority 10 [ 101.482432][ T13] bridge0: port 3(bond1) entered disabled state [ 101.651430][ T6209] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.696566][ T6209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.80'. [ 101.733245][ T6212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.81'. [ 101.912000][ T6212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.81'. [ 101.962928][ T6212] hsr_slave_0 (unregistering): left promiscuous mode [ 102.361218][ T6242] Bluetooth: MGMT ver 1.23 [ 102.383529][ T6236] vxcan1: entered allmulticast mode [ 102.432990][ T6241] netlink: 'syz.4.90': attribute type 2 has an invalid length. [ 102.565598][ T9] tipc: Node number set to 2886997007 [ 102.919740][ T6261] netlink: 16 bytes leftover after parsing attributes in process `syz.3.95'. [ 102.951007][ T6261] openvswitch: netlink: Flow actions attr not present in new flow. [ 102.971778][ T6275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.100'. [ 102.993175][ T6275] netlink: 24 bytes leftover after parsing attributes in process `syz.2.100'. [ 103.149914][ T6287] ieee802154 phy0 wpan0: encryption failed: -22 [ 103.629681][ T6298] netlink: 24 bytes leftover after parsing attributes in process `syz.2.104'. [ 103.851284][ T6303] netlink: 20 bytes leftover after parsing attributes in process `syz.2.105'. [ 103.925363][ T6303] bond1: entered promiscuous mode [ 103.931498][ T6303] bond1: entered allmulticast mode [ 103.937383][ T6303] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.059366][ T6303] netlink: 'syz.2.105': attribute type 2 has an invalid length. [ 104.070468][ T6303] netlink: 'syz.2.105': attribute type 1 has an invalid length. [ 104.079246][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.105'. [ 104.469139][ T6333] netlink: 'syz.0.113': attribute type 32 has an invalid length. [ 105.127004][ T6374] netlink: 'syz.2.123': attribute type 11 has an invalid length. [ 105.138256][ T9] IPVS: starting estimator thread 0... [ 105.239372][ T6377] IPVS: using max 26 ests per chain, 62400 per kthread [ 105.329460][ T6371] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 105.733229][ T6403] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.768543][ T6406] netlink: 'syz.4.130': attribute type 1 has an invalid length. [ 105.932509][ T6406] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.937207][ T6416] netlink: 'syz.0.133': attribute type 7 has an invalid length. [ 105.951203][ T6416] netlink: 'syz.0.133': attribute type 3 has an invalid length. [ 105.970843][ T6416] __nla_validate_parse: 4 callbacks suppressed [ 105.970860][ T6416] netlink: 224 bytes leftover after parsing attributes in process `syz.0.133'. [ 106.139405][ T6424] xt_socket: unknown flags 0x50 [ 106.243126][ T6428] netlink: 'syz.1.137': attribute type 177 has an invalid length. [ 106.369235][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.140'. [ 106.397502][ T6434] netlink: 'syz.4.138': attribute type 9 has an invalid length. [ 106.602721][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.142'. [ 106.633150][ T6443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.678186][ T6443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.183760][ T6469] syzkaller1: entered promiscuous mode [ 107.189889][ T6469] syzkaller1: entered allmulticast mode [ 107.342022][ T6487] netlink: 19216 bytes leftover after parsing attributes in process `syz.0.153'. [ 107.731684][ T6511] netlink: 'syz.4.161': attribute type 1 has an invalid length. [ 107.937111][ T6511] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.042944][ T6514] bond2: (slave ip6erspan0): making interface the new active one [ 108.068995][ T6514] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 108.453772][ T6514] syz.4.161 (6514) used greatest stack depth: 18464 bytes left [ 108.623624][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.164'. [ 108.632942][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.164'. [ 108.747069][ T6531] netlink: 24 bytes leftover after parsing attributes in process `syz.3.163'. [ 108.759136][ T6531] netlink: 'syz.3.163': attribute type 9 has an invalid length. [ 108.767048][ T6531] netlink: 'syz.3.163': attribute type 7 has an invalid length. [ 108.775628][ T6531] netlink: 'syz.3.163': attribute type 8 has an invalid length. [ 108.784962][ T6531] netlink: 83 bytes leftover after parsing attributes in process `syz.3.163'. [ 108.839468][ T6536] netlink: 47 bytes leftover after parsing attributes in process `syz.1.166'. [ 109.007481][ T6548] TCP: TCP_TX_DELAY enabled [ 109.035572][ T6544] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 109.305536][ T6558] netlink: 'syz.3.174': attribute type 3 has an invalid length. [ 109.313733][ T6558] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.420892][ T980] IPVS: starting estimator thread 0... [ 109.427364][ T6566] netlink: 20 bytes leftover after parsing attributes in process `syz.0.175'. [ 109.534875][ T6568] IPVS: using max 27 ests per chain, 64800 per kthread [ 110.070087][ T6602] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 110.667359][ T6632] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.237787][ T6651] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.556330][ T6663] vti0: entered promiscuous mode [ 112.050783][ T6682] __nla_validate_parse: 4 callbacks suppressed [ 112.050800][ T6682] netlink: 36 bytes leftover after parsing attributes in process `syz.4.208'. [ 112.090731][ T6682] netlink: 'syz.4.208': attribute type 29 has an invalid length. [ 112.395293][ T6698] netlink: 'syz.3.212': attribute type 6 has an invalid length. [ 113.348817][ T6725] delete_channel: no stack [ 115.211851][ T6753] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.227'. [ 115.230249][ T6754] netlink: 'syz.1.225': attribute type 22 has an invalid length. [ 115.239257][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.225'. [ 115.290132][ T6754] netlink: 'syz.1.225': attribute type 22 has an invalid length. [ 115.318474][ T6762] netlink: 372 bytes leftover after parsing attributes in process `syz.3.229'. [ 115.331443][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.225'. [ 115.492939][ T6775] netlink: 224 bytes leftover after parsing attributes in process `syz.1.232'. [ 115.519972][ T6774] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 115.531832][ T6776] netlink: 'syz.1.232': attribute type 1 has an invalid length. [ 115.571455][ T6776] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 115.677736][ T6788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.236'. [ 115.699268][ T6789] veth0_to_bond: entered allmulticast mode [ 115.886085][ T6796] netlink: 'syz.1.237': attribute type 10 has an invalid length. [ 116.067685][ T6796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.107934][ T6796] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 116.189560][ T6807] netlink: 20 bytes leftover after parsing attributes in process `syz.0.239'. [ 116.383554][ T6811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.240'. [ 116.392833][ T6811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.240'. [ 116.921327][ T6834] netlink: 'syz.4.246': attribute type 10 has an invalid length. [ 116.944909][ T6839] netlink: 'syz.3.245': attribute type 2 has an invalid length. [ 117.219797][ T6834] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 117.264830][ T6842] bridge_slave_0: left allmulticast mode [ 117.270711][ T6842] bridge_slave_0: left promiscuous mode [ 117.277537][ T6842] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.292845][ T6842] bridge_slave_1: left allmulticast mode [ 117.299391][ T6842] bridge_slave_1: left promiscuous mode [ 117.305713][ T6842] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.319655][ T6842] bond0: (slave bond_slave_0): Releasing backup interface [ 117.342120][ T6842] bond0: (slave bond_slave_1): Releasing backup interface [ 117.365980][ T6842] team0: Port device team_slave_0 removed [ 117.384048][ T6842] team0: Port device team_slave_1 removed [ 117.391791][ T6842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.399561][ T6842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.408476][ T6842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.417762][ T6842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.431603][ T6842] bond0: (slave wlan1): Releasing backup interface [ 117.454695][ T6842] bond2: (slave ip6erspan0): Releasing active interface [ 117.650830][ T6859] __nla_validate_parse: 2 callbacks suppressed [ 117.650849][ T6859] netlink: 48 bytes leftover after parsing attributes in process `syz.4.252'. [ 117.685952][ T6856] syzkaller0: entered allmulticast mode [ 117.691647][ T6859] netlink: 24 bytes leftover after parsing attributes in process `syz.4.252'. [ 117.756300][ T6865] syz_tun: entered allmulticast mode [ 117.787560][ T6865] dvmrp1: entered allmulticast mode [ 117.819992][ T6863] syz_tun: left allmulticast mode [ 117.935962][ T6868] netlink: 516 bytes leftover after parsing attributes in process `syz.2.254'. [ 118.429088][ T6895] tipc: Enabling of bearer rejected, failed to enable media [ 118.504590][ T6900] netlink: 28 bytes leftover after parsing attributes in process `syz.3.263'. [ 118.532575][ T6900] netlink: 'syz.3.263': attribute type 7 has an invalid length. [ 118.557297][ T6900] netlink: 'syz.3.263': attribute type 8 has an invalid length. [ 118.585053][ T6900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 118.929582][ T6924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.267'. [ 119.068250][ T6929] tipc: Started in network mode [ 119.078800][ T6929] tipc: Node identity 6a474cda8deb, cluster identity 4711 [ 119.087680][ T6929] tipc: Enabled bearer , priority 10 [ 119.219974][ T6929] tipc: Resetting bearer [ 119.553815][ T6928] tipc: Resetting bearer [ 119.727742][ T6967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.280'. [ 120.115663][ T5901] tipc: Node number set to 3886828762 [ 120.852559][ T6928] tipc: Disabling bearer [ 120.954000][ T6984] netlink: 44 bytes leftover after parsing attributes in process `syz.2.282'. [ 121.171064][ T6986] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.322697][ T7000] netlink: 40 bytes leftover after parsing attributes in process `syz.0.287'. [ 121.428604][ T7006] netlink: 216 bytes leftover after parsing attributes in process `syz.2.286'. [ 121.540542][ T7018] pim6reg1: entered promiscuous mode [ 121.546966][ T7018] pim6reg1: entered allmulticast mode [ 122.221045][ T7037] _ÐZ`Ô€@: entered promiscuous mode [ 122.376093][ T7049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.514692][ T7051] tap0: tun_chr_ioctl cmd 1074812118 [ 122.722454][ T7065] __nla_validate_parse: 3 callbacks suppressed [ 122.722473][ T7065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.302'. [ 122.754985][ T7065] netlink: 'syz.1.302': attribute type 29 has an invalid length. [ 122.793551][ T7065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.302'. [ 122.815685][ T7068] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20000 [ 122.932551][ T7076] bridge_slave_0: left allmulticast mode [ 122.953476][ T7078] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002 [ 122.963325][ T7078] netlink: 'syz.4.307': attribute type 16 has an invalid length. [ 122.973466][ T7078] netlink: 'syz.4.307': attribute type 17 has an invalid length. [ 122.998736][ T7076] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.030531][ T7076] bridge_slave_1: left allmulticast mode [ 123.059340][ T7076] bridge_slave_1: left promiscuous mode [ 123.066255][ T7076] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.095545][ T7076] bond0: (slave bond_slave_0): Releasing backup interface [ 123.112572][ T7076] bond0: (slave bond_slave_1): Releasing backup interface [ 123.137006][ T7098] IPv6: NLM_F_REPLACE set, but no existing node found! [ 123.150013][ T7076] team0: Port device team_slave_0 removed [ 123.173342][ T7076] team0: Port device team_slave_1 removed [ 123.215216][ T7076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.273506][ T7076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.292714][ T7076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.302896][ T7076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.664147][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.307'. [ 123.711025][ T4888] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.760850][ T4888] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.802862][ T4888] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.832737][ T4888] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.878671][ T7126] netlink: 164 bytes leftover after parsing attributes in process `syz.0.317'. [ 123.914618][ T7126] netlink: 164 bytes leftover after parsing attributes in process `syz.0.317'. [ 123.931933][ T7126] netlink: 60 bytes leftover after parsing attributes in process `syz.0.317'. [ 124.073734][ T7141] netlink: 16 bytes leftover after parsing attributes in process `syz.4.320'. [ 124.102621][ T7141] netlink: 40 bytes leftover after parsing attributes in process `syz.4.320'. [ 124.117012][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.321'. [ 124.166479][ T7138] batadv1: entered promiscuous mode [ 124.616800][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.330'. [ 125.393083][ T7221] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 125.399877][ T7221] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 125.524691][ T7227] netlink: 'syz.4.341': attribute type 4 has an invalid length. [ 125.749214][ T7239] netlink: 'syz.4.346': attribute type 4 has an invalid length. [ 126.042371][ T7261] netlink: 'syz.4.350': attribute type 32 has an invalid length. [ 126.190153][ T7261] netlink: 'syz.4.350': attribute type 1 has an invalid length. [ 126.556802][ T7290] bond0: (slave gretap0): Opening slave failed [ 126.591451][ T7293] bond0: (slave gretap0): Opening slave failed [ 127.057888][ T7309] syzkaller0: entered promiscuous mode [ 127.063729][ T7309] syzkaller0: entered allmulticast mode [ 127.075537][ T7310] bpq0: entered promiscuous mode [ 127.080511][ T7310] bpq0: entered allmulticast mode [ 127.392913][ T7326] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 127.633281][ T30] audit: type=1800 audit(1754240430.834:2): pid=7349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.374" name="memory.events" dev="tmpfs" ino=402 res=0 errno=0 [ 127.763150][ T7357] __nla_validate_parse: 37 callbacks suppressed [ 127.763169][ T7357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.376'. [ 127.790703][ T7352] 8021q: VLANs not supported on nlmon0 [ 127.790758][ T7357] netlink: 332 bytes leftover after parsing attributes in process `syz.1.376'. [ 127.932215][ T7365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.380'. [ 127.995469][ T7370] netlink: 44 bytes leftover after parsing attributes in process `syz.4.383'. [ 127.997258][ T7371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 128.018290][ T7371] bridge_slave_1: left allmulticast mode [ 128.024073][ T7371] bridge_slave_1: left promiscuous mode [ 128.030961][ T7371] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.047078][ T7371] bridge_slave_0: left allmulticast mode [ 128.053851][ T7371] bridge_slave_0: left promiscuous mode [ 128.060322][ T7371] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.073566][ T7374] netlink: 44 bytes leftover after parsing attributes in process `syz.4.384'. [ 128.153196][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e733400: rx timeout, send abort [ 128.168957][ T7372] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 128.291082][ T7382] netlink: 16 bytes leftover after parsing attributes in process `syz.3.387'. [ 128.305788][ T7381] sctp: [Deprecated]: syz.4.386 (pid 7381) Use of int in maxseg socket option. [ 128.305788][ T7381] Use struct sctp_assoc_value instead [ 128.315710][ T7382] erspan1: entered promiscuous mode [ 128.324038][ T7385] netlink: zone id is out of range [ 128.328889][ T7382] tipc: Started in network mode [ 128.337131][ T7382] tipc: Node identity 96ddf660014, cluster identity 4711 [ 128.349783][ T7382] tipc: Enabled bearer , priority 0 [ 128.380226][ T7382] syzkaller0: entered promiscuous mode [ 128.386417][ T7382] syzkaller0: entered allmulticast mode [ 128.398391][ T7382] tipc: Resetting bearer [ 128.481246][ T7390] netlink: 'syz.4.391': attribute type 39 has an invalid length. [ 128.578877][ T7399] netlink: 'syz.2.392': attribute type 2 has an invalid length. [ 128.646160][ T7399] k›*·]‘: entered promiscuous mode [ 128.654040][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e732c00: rx timeout, send abort [ 128.662796][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e733400: abort rx timeout. Force session deactivation [ 128.809465][ T7408] netlink: 44 bytes leftover after parsing attributes in process `syz.0.395'. [ 128.833161][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.395'. [ 128.998963][ T7417] netlink: 44 bytes leftover after parsing attributes in process `syz.2.397'. [ 129.162352][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e732c00: abort rx timeout. Force session deactivation [ 129.394769][ T5961] tipc: Node number set to 2543711840 [ 129.446375][ T7427] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.633424][ T7427] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.657150][ T7441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.699463][ T7441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.745007][ T7449] IPv6: Can't replace route, no match found [ 129.817191][ T7427] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.997852][ T7427] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.107528][ T7465] openvswitch: netlink: Flow key attr not present in new flow. [ 130.115441][ T7464] openvswitch: netlink: Flow key attr not present in new flow. [ 130.403355][ T7480] bridge_slave_0: left allmulticast mode [ 130.444239][ T7480] bridge_slave_0: left promiscuous mode [ 130.450851][ T7480] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.480119][ T7480] bridge_slave_1: left allmulticast mode [ 130.486011][ T7480] bridge_slave_1: left promiscuous mode [ 130.491899][ T7480] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.519336][ T7480] bond0: (slave bond_slave_0): Releasing backup interface [ 130.531965][ T7480] bond0: (slave bond_slave_1): Releasing backup interface [ 130.553465][ T7480] team0: Port device team_slave_0 removed [ 130.565400][ T7480] team0: Port device team_slave_1 removed [ 130.572166][ T7480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.580581][ T7480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.591469][ T7480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.599486][ T7480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.617898][ T7480] bond1: left allmulticast mode [ 130.623302][ T7480] bond1: left promiscuous mode [ 130.628510][ T7480] bridge0: port 3(bond1) entered disabled state [ 130.656388][ T59] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.708393][ T7427] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.525445][ T7536] bond0: Unable to set down delay as MII monitoring is disabled [ 131.541211][ T7536] tipc: Started in network mode [ 131.546351][ T7536] tipc: Node identity 4aed003fbfd5, cluster identity 4711 [ 131.553776][ T7536] tipc: Enabled bearer , priority 0 [ 131.568361][ T7536] syzkaller0: entered promiscuous mode [ 131.574030][ T7536] syzkaller0: entered allmulticast mode [ 131.602285][ T7536] tipc: Resetting bearer [ 131.623690][ T7535] tipc: Resetting bearer [ 131.658326][ T7535] tipc: Disabling bearer [ 131.660049][ T7545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.065694][ T7556] veth1_to_batadv: entered promiscuous mode [ 132.319306][ T7566] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 132.411949][ T7571] syzkaller0: refused to change device tx_queue_len [ 132.477470][ T36] nci: nci_rsp_packet: unknown rsp opcode 0x73a [ 132.513874][ T7584] batadv_slave_1: entered promiscuous mode [ 132.708136][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.239000][ T7591] batadv_slave_1: entered promiscuous mode [ 133.277251][ T7590] batadv_slave_1: left promiscuous mode [ 133.314050][ T7583] batadv_slave_1: left promiscuous mode [ 133.361102][ T7595] __nla_validate_parse: 13 callbacks suppressed [ 133.361119][ T7595] netlink: 44 bytes leftover after parsing attributes in process `syz.4.456'. [ 133.415070][ T7597] tipc: Enabling of bearer rejected, failed to enable media [ 133.721731][ T7617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.461'. [ 134.037748][ T7608] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 134.054229][ T7608] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 134.358327][ T7617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.461'. [ 134.370494][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.463'. [ 134.380453][ T7617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.461'. [ 134.390756][ T7617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.461'. [ 134.414597][ T7617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.461'. [ 134.444830][ T7617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.461'. [ 134.467502][ T7617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.461'. [ 134.482470][ T7617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.461'. [ 135.229980][ T36] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.266864][ T36] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.374450][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.392616][ T4888] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.531730][ T7684] tipc: Enabled bearer , priority 0 [ 135.567464][ T7684] syzkaller0: entered promiscuous mode [ 135.594449][ T7684] syzkaller0: entered allmulticast mode [ 135.681590][ T7684] tipc: Resetting bearer [ 135.709188][ T7683] tipc: Resetting bearer [ 135.738122][ T7683] tipc: Disabling bearer [ 136.222004][ T7719] ieee802154 phy1 wpan1: encryption failed: -90 [ 136.712654][ T7751] netlink: 'syz.3.482': attribute type 10 has an invalid length. [ 136.750400][ T7751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.788946][ T7749] netlink: zone id is out of range [ 136.794720][ T7749] netlink: get zone limit has 8 unknown bytes [ 137.040831][ T7772] netlink: 'syz.4.490': attribute type 4 has an invalid length. [ 137.065102][ T7772] netlink: 'syz.4.490': attribute type 4 has an invalid length. [ 137.100762][ T7776] tipc: Started in network mode [ 137.114829][ T7776] tipc: Node identity be42894af728, cluster identity 4711 [ 137.127715][ T7776] tipc: Enabled bearer , priority 0 [ 137.183743][ T7783] syzkaller0: entered promiscuous mode [ 137.218482][ T7783] syzkaller0: entered allmulticast mode [ 137.242914][ T7774] tipc: Resetting bearer [ 137.289878][ T7774] tipc: Disabling bearer [ 137.314812][ T7785] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.084279][ T7829] tipc: Enabling of bearer rejected, already enabled [ 138.346962][ T7843] netlink: 'syz.3.509': attribute type 32 has an invalid length. [ 138.399392][ T7843] __nla_validate_parse: 33 callbacks suppressed [ 138.399413][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.509'. [ 138.438614][ T7843] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 138.468002][ T7846] netlink: 'syz.2.511': attribute type 13 has an invalid length. [ 138.758158][ T7855] tipc: Enabling of bearer rejected, already enabled [ 138.903030][ T7873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.520'. [ 138.980303][ T7878] netlink: 32 bytes leftover after parsing attributes in process `syz.0.520'. [ 139.072011][ T7881] netlink: 44 bytes leftover after parsing attributes in process `syz.1.521'. [ 139.321872][ T7896] netlink: 44 bytes leftover after parsing attributes in process `syz.4.526'. [ 139.343989][ T7896] netlink: 43 bytes leftover after parsing attributes in process `syz.4.526'. [ 139.371496][ T7896] netlink: 'syz.4.526': attribute type 5 has an invalid length. [ 139.391434][ T7902] !: renamed from dummy0 [ 139.403884][ T7896] netlink: 43 bytes leftover after parsing attributes in process `syz.4.526'. [ 139.648216][ T7937] netlink: 192 bytes leftover after parsing attributes in process `syz.4.526'. [ 140.318279][ T7962] ip6gretap1: entered promiscuous mode [ 140.436717][ T7965] netlink: 44 bytes leftover after parsing attributes in process `syz.0.533'. [ 140.524975][ T7970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.762972][ T7990] tipc: Enabled bearer , priority 0 [ 140.782385][ T7992] netlink: 'syz.3.541': attribute type 7 has an invalid length. [ 140.842859][ T7928] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.857081][ T5850] Bluetooth: hci3: link tx timeout [ 140.862563][ T5850] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.881004][ T5846] Bluetooth: hci3: link tx timeout [ 140.886719][ T5846] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.900929][ T5846] Bluetooth: hci3: link tx timeout [ 140.906333][ T5846] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.914028][ T5846] Bluetooth: hci3: link tx timeout [ 140.919666][ T5846] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.927685][ T5846] Bluetooth: hci3: link tx timeout [ 140.932897][ T5846] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.952212][ T7990] tipc: Disabling bearer [ 141.073743][ T8007] tipc: Enabling of bearer rejected, already enabled [ 141.233838][ T8016] netlink: 'syz.3.548': attribute type 58 has an invalid length. [ 141.264306][ T8018] netlink: 44 bytes leftover after parsing attributes in process `syz.2.549'. [ 142.200400][ T8023] netlink: 'syz.0.551': attribute type 13 has an invalid length. [ 142.237986][ T8023] netlink: 'syz.0.551': attribute type 17 has an invalid length. [ 142.592702][ T8096] netlink: 'syz.4.569': attribute type 41 has an invalid length. [ 142.929122][ T8106] dummy0: entered promiscuous mode [ 142.938657][ T8111] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 142.947768][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 142.955631][ T7114] IPVS: starting estimator thread 0... [ 142.962949][ T8106] macvtap1: entered promiscuous mode [ 142.972480][ T8106] macvtap1: entered allmulticast mode [ 142.978447][ T8106] dummy0: entered allmulticast mode [ 142.993489][ T8120] dummy0: left allmulticast mode [ 143.029166][ T8120] dummy0: left promiscuous mode [ 143.054221][ T8112] IPVS: using max 29 ests per chain, 69600 per kthread [ 143.414561][ T8144] netlink: 'syz.2.577': attribute type 5 has an invalid length. [ 143.422266][ T8144] netlink: 'syz.2.577': attribute type 5 has an invalid length. [ 143.612759][ T8151] __nla_validate_parse: 10 callbacks suppressed [ 143.612778][ T8151] netlink: 165 bytes leftover after parsing attributes in process `syz.2.580'. [ 143.681797][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.581'. [ 143.882277][ T8162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.584'. [ 144.331050][ T8174] atomic_op ffff888026e82198 conn xmit_atomic 0000000000000000 [ 144.397907][ T8185] tipc: Enabled bearer , priority 0 [ 144.419963][ T8185] syzkaller0: entered promiscuous mode [ 144.434517][ T8185] syzkaller0: entered allmulticast mode [ 144.634715][ T8185] tipc: Resetting bearer [ 144.674758][ T8182] tipc: Resetting bearer [ 144.848663][ T8182] tipc: Disabling bearer [ 145.042663][ T8223] tipc: Enabling of bearer rejected, failed to enable media [ 145.117159][ T8223] syzkaller1: entered promiscuous mode [ 145.146113][ T8223] syzkaller1: entered allmulticast mode [ 145.201394][ T8234] netlink: 2 bytes leftover after parsing attributes in process `syz.1.602'. [ 145.280703][ T8236] netlink: 'syz.0.605': attribute type 6 has an invalid length. [ 145.304564][ T8236] IPv6: NLM_F_CREATE should be specified when creating new route [ 145.426735][ T8244] ip6erspan0: entered promiscuous mode [ 145.746295][ T8262] netlink: 20 bytes leftover after parsing attributes in process `syz.3.613'. [ 146.082391][ T8272] netlink: 'syz.1.614': attribute type 10 has an invalid length. [ 146.096552][ T8272] netlink: 40 bytes leftover after parsing attributes in process `syz.1.614'. [ 146.112451][ T8273] Bluetooth: MGMT ver 1.23 [ 146.160240][ T8274] netlink: 16 bytes leftover after parsing attributes in process `syz.1.614'. [ 146.171195][ T8272] team0: Port device geneve0 added [ 146.178279][ T8274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.614'. [ 146.193636][ T8274] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 146.439359][ T8280] Unsupported ieee802154 address type: 0 [ 146.595781][ T8297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.622'. [ 146.620501][ T8295] tipc: Enabled bearer , priority 0 [ 146.643183][ T8295] tipc: Enabling of bearer rejected, already enabled [ 146.652458][ T8295] tipc: Enabling of bearer rejected, already enabled [ 146.661189][ T8297] syzkaller0: entered promiscuous mode [ 146.684610][ T8297] syzkaller0: entered allmulticast mode [ 146.786766][ T8294] tipc: Resetting bearer [ 146.835961][ T8294] tipc: Disabling bearer [ 146.873276][ T8269] delete_channel: no stack [ 146.958121][ T8317] netlink: 16 bytes leftover after parsing attributes in process `syz.4.628'. [ 147.231358][ T7936] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4 [ 147.642038][ T8370] openvswitch: netlink: IP tunnel dst address not specified [ 147.887376][ T8374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.729507][ T8413] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 148.791969][ T8415] __nla_validate_parse: 4 callbacks suppressed [ 148.791988][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 148.938872][ T8422] openvswitch: netlink: IPv6 tunnel dst address is zero [ 148.964724][ T8422] dvmrp1: left allmulticast mode [ 149.071240][ T8429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'. [ 149.156053][ T8429] ip_vti0: Master is either lo or non-ether device [ 149.247920][ T8431] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 149.452166][ T8437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.657'. [ 149.494763][ T8437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.657'. [ 149.519533][ T8437] netlink: 10 bytes leftover after parsing attributes in process `syz.3.657'. [ 149.533652][ T8437] nbd: socks must be embedded in a SOCK_ITEM attr [ 149.623928][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.662'. [ 149.891547][ T8467] netlink: 20 bytes leftover after parsing attributes in process `syz.2.665'. [ 150.000117][ T8470] bridge4: entered promiscuous mode [ 150.373299][ T8500] netlink: 20 bytes leftover after parsing attributes in process `syz.0.673'. [ 150.558919][ T8508] netlink: 28 bytes leftover after parsing attributes in process `syz.1.675'. [ 150.609227][ T8508] netlink: 28 bytes leftover after parsing attributes in process `syz.1.675'. [ 150.823902][ T8513] syzkaller0: tun_net_xmit 76 [ 150.830074][ T8513] tipc: Enabled bearer , priority 0 [ 150.846740][ T8513] tipc: Resetting bearer [ 150.853901][ T8513] syzkaller0: tun_net_xmit 76 [ 150.940518][ T8527] netlink: 'syz.1.680': attribute type 4 has an invalid length. [ 150.950448][ T8512] tipc: Resetting bearer [ 152.088679][ T8512] tipc: Disabling bearer [ 152.100028][ T8528] syzkaller0: entered promiscuous mode [ 152.106322][ T8528] syzkaller0: entered allmulticast mode [ 152.119540][ T8534] team0: No ports can be present during mode change [ 152.594533][ T8564] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20003 [ 153.087696][ T8608] netlink: 'syz.1.702': attribute type 26 has an invalid length. [ 153.380131][ T8624] syzkaller0: entered promiscuous mode [ 153.386041][ T8624] syzkaller0: entered allmulticast mode [ 153.477070][ T7116] hid-generic 0005:27C0:5505.0001: item fetching failed at offset 0/1 [ 153.488675][ T7116] hid-generic 0005:27C0:5505.0001: probe with driver hid-generic failed with error -22 [ 153.555406][ T8634] netlink: 'syz.1.710': attribute type 10 has an invalid length. [ 153.684045][ T8644] hsr0 speed is unknown, defaulting to 1000 [ 153.690727][ T8644] hsr0 speed is unknown, defaulting to 1000 [ 153.700610][ T8644] hsr0 speed is unknown, defaulting to 1000 [ 153.718091][ T8644] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 153.758469][ T8644] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 153.810569][ T8644] hsr0 speed is unknown, defaulting to 1000 [ 153.851360][ T8644] hsr0 speed is unknown, defaulting to 1000 [ 153.873031][ T8644] hsr0 speed is unknown, defaulting to 1000 [ 153.894342][ T8644] hsr0 speed is unknown, defaulting to 1000 [ 153.922812][ T8644] hsr0 speed is unknown, defaulting to 1000 [ 154.092987][ T8667] netlink: 'syz.3.720': attribute type 4 has an invalid length. [ 154.106436][ T8667] netlink: 'syz.3.720': attribute type 4 has an invalid length. [ 154.169431][ T8671] __nla_validate_parse: 5 callbacks suppressed [ 154.169451][ T8671] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.721'. [ 154.301395][ T8677] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 154.499983][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.725'. [ 154.509459][ T8687] netlink: 32 bytes leftover after parsing attributes in process `syz.1.725'. [ 154.688658][ T8695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.728'. [ 154.876206][ T8701] tipc: Enabling of bearer rejected, already enabled [ 154.938056][ T8712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.734'. [ 155.099367][ T8721] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 155.109028][ T8721] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 155.151804][ T8725] netlink: 68 bytes leftover after parsing attributes in process `syz.1.738'. [ 155.224805][ T8725] bond0: (slave batadv0): Releasing backup interface [ 155.242993][ T8725] bridge_slave_0: left allmulticast mode [ 155.266041][ T8725] bridge_slave_0: left promiscuous mode [ 155.281840][ T8729] netlink: 'syz.0.739': attribute type 1 has an invalid length. [ 155.291772][ T8725] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.310007][ T8725] bridge_slave_1: left allmulticast mode [ 155.326205][ T8725] bridge_slave_1: left promiscuous mode [ 155.335853][ T8725] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.349597][ T8725] bond0: (slave bond_slave_0): Releasing backup interface [ 155.361706][ T8725] bond0: (slave bond_slave_1): Releasing backup interface [ 155.382149][ T8725] team0: Port device team_slave_0 removed [ 155.395993][ T8725] team0: Port device team_slave_1 removed [ 155.405808][ T8725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.417251][ T8725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.451731][ T8725] team0: Port device geneve0 removed [ 155.489332][ T8729] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.543018][ T8732] bond2: (slave veth3): Enslaving as an active interface with a down link [ 155.562696][ T8733] gretap1: entered promiscuous mode [ 155.585137][ T8735] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 155.592232][ T8735] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 155.680924][ T7114] hsr0 speed is unknown, defaulting to 1000 [ 155.881447][ T8751] netlink: 24 bytes leftover after parsing attributes in process `syz.0.744'. [ 155.891050][ T8751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.962579][ T8752] netlink: 132 bytes leftover after parsing attributes in process `syz.3.745'. [ 156.201944][ T8776] netlink: 28 bytes leftover after parsing attributes in process `syz.0.753'. [ 156.400316][ T8783] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.417140][ T8783] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.430840][ T8787] netlink: 14 bytes leftover after parsing attributes in process `syz.2.754'. [ 156.641964][ T8787] bond0 (unregistering): Released all slaves [ 156.680626][ T8783] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.691578][ T8783] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.812019][ T8783] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.828294][ T8783] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.933604][ T8783] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.952023][ T8783] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.918721][ T8847] netlink: 'syz.0.774': attribute type 1 has an invalid length. [ 158.481554][ T8848] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 158.504530][ T7936] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 158.505590][ T8849] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.629312][ T8850] bond3 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 158.639910][ T8850] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 158.655955][ T8850] bond3 (unregistering): Released all slaves [ 158.769736][ T2939] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.790236][ T2939] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.849597][ T2939] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.876674][ T2939] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.932278][ T7928] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.947872][ T8877] siw: device registration error -23 [ 158.963778][ T7928] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.995069][ T2939] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.012745][ T2939] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.099567][ T8879] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 159.220089][ T8895] __nla_validate_parse: 4 callbacks suppressed [ 159.220125][ T8895] netlink: 404 bytes leftover after parsing attributes in process `syz.1.787'. [ 159.251460][ T8900] hsr0 speed is unknown, defaulting to 1000 [ 159.290801][ T8903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.788'. [ 159.339272][ T5850] block nbd0: Receive control failed (result -107) [ 159.388223][ T8903] nbd0: detected capacity change from 0 to 32 [ 159.433676][ T8909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.789'. [ 159.638744][ T8926] netlink: 40 bytes leftover after parsing attributes in process `syz.3.789'. [ 159.668253][ T8928] netlink: 'syz.0.793': attribute type 9 has an invalid length. [ 159.677179][ T8928] netlink: 184 bytes leftover after parsing attributes in process `syz.0.793'. [ 159.721437][ T8915] bond1: entered promiscuous mode [ 159.960550][ T8941] tipc: Enabling of bearer rejected, already enabled [ 160.074059][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.803'. [ 160.133690][ T8950] netlink: 'syz.2.801': attribute type 42 has an invalid length. [ 160.194254][ T8954] tipc: Enabling of bearer rejected, failed to enable media [ 160.208131][ T8954] bridge0: entered allmulticast mode [ 160.223074][ T8954] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 160.233692][ T8954] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 160.242803][ T8954] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 160.295215][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.806'. [ 160.308442][ T8961] netlink: 64 bytes leftover after parsing attributes in process `syz.2.806'. [ 160.751204][ T8984] netlink: 'syz.1.814': attribute type 12 has an invalid length. [ 160.802646][ T8989] netlink: 48 bytes leftover after parsing attributes in process `syz.4.815'. [ 160.812093][ T8989] netlink: 48 bytes leftover after parsing attributes in process `syz.4.815'. [ 160.923045][ T8994] openvswitch: netlink: Missing valid actions attribute. [ 160.933084][ T8995] openvswitch: netlink: Missing valid actions attribute. [ 160.936793][ T8996] tipc: Cannot configure node identity twice [ 160.940962][ T8995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.950543][ T8994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.125452][ T9005] netlink: 'syz.1.821': attribute type 5 has an invalid length. [ 161.463217][ T9027] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.594969][ T9027] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.718064][ T9027] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.757529][ T9049] 8021q: VLANs not supported on lo [ 162.021355][ T7941] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.050671][ T7941] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.091616][ T2939] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.139366][ T2939] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.250452][ T9075] ieee802154 phy1 wpan1: encryption failed: -22 [ 162.605394][ T9099] netlink: 'syz.1.852': attribute type 11 has an invalid length. [ 162.633260][ T9099] netlink: 'syz.1.852': attribute type 11 has an invalid length. [ 162.701433][ T9107] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 162.732400][ T9107] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 162.916604][ T9125] netlink: 'syz.1.857': attribute type 3 has an invalid length. [ 162.958811][ T9125] netlink: 'syz.1.857': attribute type 1 has an invalid length. [ 162.971240][ T9125] netlink: 'syz.1.857': attribute type 1 has an invalid length. [ 163.208378][ T9148] netlink: 'syz.4.864': attribute type 1 has an invalid length. [ 163.235559][ T9151] trusted_key: syz.2.867 sent an empty control message without MSG_MORE. [ 163.283965][ T9148] bond3: entered promiscuous mode [ 163.290308][ T9148] 8021q: adding VLAN 0 to HW filter on device bond3 [ 163.377553][ T9154] bond3: (slave bridge4): making interface the new active one [ 163.434909][ T9154] bridge4: entered promiscuous mode [ 163.449502][ T9154] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 163.780754][ T9186] netlink: zone id is out of range [ 163.793355][ T9186] netlink: zone id is out of range [ 163.813617][ T9186] netlink: zone id is out of range [ 163.820030][ T9186] netlink: zone id is out of range [ 163.828396][ T9186] netlink: zone id is out of range [ 163.838995][ T9186] netlink: zone id is out of range [ 163.880524][ T7114] IPVS: starting estimator thread 0... [ 163.994747][ T9195] IPVS: using max 29 ests per chain, 69600 per kthread [ 164.043348][ T9203] netlink: 'syz.2.882': attribute type 1 has an invalid length. [ 164.302521][ T9221] bond0: option use_carrier: invalid value (2) [ 164.403339][ T9226] __nla_validate_parse: 31 callbacks suppressed [ 164.403359][ T9226] netlink: 168 bytes leftover after parsing attributes in process `syz.4.890'. [ 164.404975][ T9224] tipc: Enabled bearer , priority 0 [ 164.436637][ T9227] netlink: 72 bytes leftover after parsing attributes in process `syz.3.891'. [ 164.455892][ T9224] syzkaller0: entered promiscuous mode [ 164.462210][ T9224] syzkaller0: entered allmulticast mode [ 164.543278][ T9224] tipc: Resetting bearer [ 165.318775][ T9222] tipc: Resetting bearer [ 165.378895][ T9222] tipc: Disabling bearer [ 165.390990][ T9251] netlink: 348 bytes leftover after parsing attributes in process `syz.0.899'. [ 165.426185][ T9253] syzkaller1: entered promiscuous mode [ 165.431704][ T9253] syzkaller1: entered allmulticast mode [ 165.466962][ T9258] netlink: 'syz.4.898': attribute type 10 has an invalid length. [ 165.485166][ T9253] netlink: 'syz.4.898': attribute type 10 has an invalid length. [ 165.508529][ T9249] netlink: 16 bytes leftover after parsing attributes in process `syz.3.897'. [ 165.541432][ T9257] can: request_module (can-proto-0) failed. [ 165.604657][ T9267] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 165.611949][ T9267] IPv6: NLM_F_CREATE should be set when creating new route [ 165.619249][ T9267] IPv6: NLM_F_CREATE should be set when creating new route [ 165.944393][ T9286] nbd: must specify at least one socket [ 166.089376][ T9282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.905'. [ 166.441849][ T9300] netlink: 'syz.4.911': attribute type 1 has an invalid length. [ 166.774563][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.914'. [ 166.794011][ T9311] netlink: 'syz.3.914': attribute type 21 has an invalid length. [ 166.837738][ T9313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.914'. [ 166.861653][ T9313] netlink: 'syz.3.914': attribute type 21 has an invalid length. [ 167.132893][ T9327] netlink: 184 bytes leftover after parsing attributes in process `syz.3.920'. [ 167.488291][ T9340] netlink: 20 bytes leftover after parsing attributes in process `syz.1.923'. [ 167.994561][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.926'. [ 168.078823][ T9352] ip6gre1: entered allmulticast mode [ 168.227556][ T9367] netlink: 'syz.3.930': attribute type 15 has an invalid length. [ 168.251716][ T9370] netlink: 'syz.3.930': attribute type 15 has an invalid length. [ 168.433957][ T9379] netlink: 'syz.3.934': attribute type 13 has an invalid length. [ 168.463019][ T9379] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 168.900631][ T9413] hsr0 speed is unknown, defaulting to 1000 [ 169.303742][ T9433] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 169.557002][ T9405] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 169.902386][ T9465] net_ratelimit: 35 callbacks suppressed [ 169.902406][ T9465] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535 [ 169.996328][ T9469] netlink: 'syz.1.961': attribute type 1 has an invalid length. [ 170.061727][ T9469] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 170.072925][ T9475] __nla_validate_parse: 5 callbacks suppressed [ 170.072940][ T9475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.962'. [ 170.503163][ T9496] openvswitch: netlink: Missing key (keys=40, expected=80) [ 170.609009][ T9501] netlink: 112 bytes leftover after parsing attributes in process `syz.0.969'. [ 170.619735][ T9501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.969'. [ 170.759521][ T9511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.770085][ T9511] netlink: 16 bytes leftover after parsing attributes in process `syz.2.971'. [ 170.784360][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 170.803408][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.970'. [ 170.956269][ T9517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.974'. [ 171.275094][ T9527] hsr0 speed is unknown, defaulting to 1000 [ 171.357202][ T5850] Bluetooth: hci0: command tx timeout [ 171.460016][ T9534] netlink: 'syz.1.980': attribute type 1 has an invalid length. [ 171.835783][ T9525] netlink: 24 bytes leftover after parsing attributes in process `syz.3.977'. [ 171.923369][ T9527] netlink: 'syz.0.978': attribute type 4 has an invalid length. [ 171.988486][ T9553] syzkaller0: entered promiscuous mode [ 171.994017][ T9553] syzkaller0: entered allmulticast mode [ 171.994705][ T9527] netlink: 17 bytes leftover after parsing attributes in process `syz.0.978'. [ 172.012643][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.985'. [ 172.025979][ T9525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.977'. [ 172.090742][ T9557] netlink: 'syz.2.986': attribute type 3 has an invalid length. [ 172.632650][ T9575] tipc: Enabled bearer , priority 0 [ 172.696938][ T9574] tipc: Disabling bearer [ 172.759390][ T9581] hsr0 speed is unknown, defaulting to 1000 [ 172.827549][ T9584] hsr0 speed is unknown, defaulting to 1000 [ 172.957850][ T9570] infiniband syz1: set down [ 172.964341][ T9570] infiniband syz1: added veth1_to_bond [ 173.031595][ T9570] RDS/IB: syz1: added [ 173.062669][ T9570] smc: adding ib device syz1 with port count 1 [ 173.072552][ T9570] smc: ib device syz1 port 1 has pnetid [ 173.197116][ T9601] cgroup: fork rejected by pids controller in /syz0 [ 173.251779][ T9663] Unsupported ieee802154 address type: 0 [ 173.490764][ T9716] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 174.220981][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 174.229654][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 174.237557][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 174.246058][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 174.254038][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.140330][ T9728] hsr0 speed is unknown, defaulting to 1000 [ 175.323281][ T9738] __nla_validate_parse: 4 callbacks suppressed [ 175.323301][ T9738] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1011'. [ 175.342157][ T9738] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1011'. [ 175.615389][ T9752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1014'. [ 175.682366][ T9750] hsr0 speed is unknown, defaulting to 1000 [ 175.910013][ T9761] netlink: 'syz.4.1016': attribute type 13 has an invalid length. [ 175.927740][ T9761] netlink: 'syz.4.1016': attribute type 17 has an invalid length. [ 176.022671][ T9761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.033763][ T9761] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 176.140452][ T9728] chnl_net:caif_netlink_parms(): no params data found [ 176.304769][ T5846] Bluetooth: hci0: command tx timeout [ 176.358403][ T9728] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.369669][ T9728] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.378541][ T9728] bridge_slave_0: entered allmulticast mode [ 176.387032][ T9728] bridge_slave_0: entered promiscuous mode [ 176.413199][ T9728] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.428278][ T9728] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.436172][ T9728] bridge_slave_1: entered allmulticast mode [ 176.444061][ T9728] bridge_slave_1: entered promiscuous mode [ 176.539620][ T9773] netlink: 7180 bytes leftover after parsing attributes in process `syz.3.1019'. [ 176.805906][ T9728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.877344][ T9728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.094050][ T9728] team0: Port device team_slave_0 added [ 178.116919][ T9728] team0: Port device team_slave_1 added [ 178.199153][ T9728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.213432][ T9728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.240160][ T9728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.266159][ T9728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.284809][ T9728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.379095][ T9728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.393248][ T5846] Bluetooth: hci0: command tx timeout [ 178.549733][ T9728] hsr_slave_0: entered promiscuous mode [ 178.567172][ T9728] hsr_slave_1: entered promiscuous mode [ 178.595130][ T9728] debugfs: 'hsr0' already exists in 'hsr' [ 178.600993][ T9728] Cannot create hsr debugfs directory [ 178.815667][ T9728] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.838456][ T9829] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1031'. [ 178.898713][ T9728] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.965418][ T9728] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.071339][ T9728] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.218796][ T9728] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 179.230204][ T9728] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 179.241786][ T9728] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 179.254458][ T9728] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 179.416488][ T9728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.450482][ T9849] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1036'. [ 179.461553][ T9728] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.510826][ T7934] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.518028][ T7934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.557440][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.564713][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.592860][ T9850] delete_channel: no stack [ 180.000718][ T9867] netlink: 'syz.3.1041': attribute type 1 has an invalid length. [ 180.315342][ T9879] bridge: RTM_NEWNEIGH with invalid ether address [ 180.332627][ T9878] bridge: RTM_NEWNEIGH with invalid ether address [ 180.394517][ T9728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.471088][ T5846] Bluetooth: hci0: command tx timeout [ 180.508969][ T9728] veth0_vlan: entered promiscuous mode [ 180.587901][ T9728] veth1_vlan: entered promiscuous mode [ 180.740321][ T9728] veth0_macvtap: entered promiscuous mode [ 180.806396][ T9728] veth1_macvtap: entered promiscuous mode [ 180.849359][ T9728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.884547][ T9728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.960281][ T3513] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.979837][ T3513] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.009486][ T3513] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.051344][ T3513] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.170567][ T9913] syzkaller1: entered promiscuous mode [ 181.180379][ T9913] syzkaller1: entered allmulticast mode [ 181.196568][ T2939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.215255][ T2939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.298631][ T7936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.323599][ T7936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.378765][ T9922] gtp0: entered promiscuous mode [ 181.383816][ T9922] gtp0: entered allmulticast mode [ 181.391817][ T9923] syz_tun: entered allmulticast mode [ 181.411346][ T9928] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 181.808668][ T9954] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1063'. [ 181.839960][ T9954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1063'. [ 182.224852][ T9967] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1068'. [ 182.545839][ T5850] Bluetooth: hci0: command tx timeout [ 182.556457][T10000] netlink: 'syz.1.1077': attribute type 1 has an invalid length. [ 182.652791][T10004] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1078'. [ 182.718050][T10010] netlink: 'syz.0.1079': attribute type 1 has an invalid length. [ 182.873358][T10021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1082'. [ 182.912701][T10025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.071260][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1084'. [ 183.088669][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1084'. [ 183.101275][T10036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1086'. [ 183.123893][T10031] syzkaller0: entered promiscuous mode [ 183.129767][T10031] syzkaller0: entered allmulticast mode [ 183.236477][T10042] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1089'. [ 183.248418][T10035] tap0: tun_chr_ioctl cmd 1074025677 [ 183.257123][T10035] tap0: linktype set to 769 [ 183.318403][T10043] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1087'. [ 184.463406][T10064] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 184.624815][ T5850] Bluetooth: hci0: command 0x0405 tx timeout [ 184.701616][T10088] netlink: 'syz.0.1101': attribute type 7 has an invalid length. [ 184.711068][T10088] netlink: 'syz.0.1101': attribute type 8 has an invalid length. [ 184.759238][T10090] veth1: mtu greater than device maximum [ 185.060861][T10108] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 185.133601][T10111] netlink: 'syz.2.1110': attribute type 12 has an invalid length. [ 185.358381][T10130] tipc: Enabled bearer , priority 0 [ 185.362298][T10127] netlink: 'syz.1.1115': attribute type 10 has an invalid length. [ 185.391716][T10127] team0: Device dummy0 failed to register rx_handler [ 185.423069][T10135] gretap0: entered promiscuous mode [ 185.431845][T10135] gretap0: left promiscuous mode [ 185.450132][T10137] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 185.462321][T10130] tipc: Resetting bearer [ 185.483491][T10141] netlink: 'syz.0.1119': attribute type 2 has an invalid length. [ 185.589181][T10146] tipc: Enabling of bearer rejected, already enabled [ 185.595074][T10148] netlink: ct family unspecified [ 185.617911][T10147] tipc: Started in network mode [ 185.622900][T10147] tipc: Node identity e2b03504b4ce, cluster identity 4711 [ 185.633552][T10148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.665693][T10147] tipc: Enabled bearer , priority 0 [ 185.680291][T10146] sch_fq: defrate 257 ignored. [ 185.793439][T10152] tipc: Resetting bearer [ 185.809910][T10140] tipc: Disabling bearer [ 185.904867][T10161] netlink: 'syz.3.1124': attribute type 46 has an invalid length. [ 185.998192][T10161] hsr0 speed is unknown, defaulting to 1000 [ 186.416038][T10182] syzkaller0: entered promiscuous mode [ 186.434165][T10182] syzkaller0: entered allmulticast mode [ 187.806320][T10211] netlink: 'syz.2.1140': attribute type 4 has an invalid length. [ 188.254403][T10212] hsr0 speed is unknown, defaulting to 1000 [ 188.305173][T10221] hsr0 speed is unknown, defaulting to 1000 [ 188.577354][ T7115] IPVS: starting estimator thread 0... [ 188.664851][T10248] IPVS: using max 27 ests per chain, 64800 per kthread [ 189.232518][T10283] __nla_validate_parse: 17 callbacks suppressed [ 189.232537][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1152'. [ 190.141031][T10327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1160'. [ 190.796391][T10358] tipc: Enabling of bearer rejected, failed to enable media [ 191.325994][T10376] hsr0 speed is unknown, defaulting to 1000 [ 191.405306][ T2939] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.446587][ T2939] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.532327][ T2939] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.619118][ T2939] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.766745][T10397] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.070917][T10414] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1180'. [ 192.235192][T10424] netlink: 'syz.1.1182': attribute type 5 has an invalid length. [ 192.705031][T10444] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1186'. [ 193.066081][T10453] netlink: 'syz.2.1188': attribute type 9 has an invalid length. [ 193.073865][T10453] netlink: 'syz.2.1188': attribute type 6 has an invalid length. [ 193.212099][T10464] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1193'. [ 193.853329][T10485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1197'. [ 193.883181][T10485] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1197'. [ 193.967579][T10489] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1199'. [ 194.003651][T10491] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1200'. [ 194.153386][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.156303][T10493] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.271411][T10493] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.331345][T10506] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1204'. [ 194.407898][T10493] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.472496][T10513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.564749][T10493] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.802766][ T7936] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.931760][ T7931] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.990058][ T7939] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.070384][T10532] syzkaller0: entered promiscuous mode [ 195.079374][T10532] syzkaller0: entered allmulticast mode [ 195.080490][T10546] netlink: 'syz.4.1213': attribute type 1 has an invalid length. [ 195.159867][ T7941] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.172738][T10494] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.430951][T10549] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 196.440929][ T7941] ================================================================== [ 196.449015][ T7941] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1340 [ 196.456594][ T7941] Read of size 8 at addr ffff888077da2cb0 by task kworker/u8:20/7941 [ 196.464675][ T7941] [ 196.467028][ T7941] CPU: 0 UID: 0 PID: 7941 Comm: kworker/u8:20 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 196.467056][ T7941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 196.467069][ T7941] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 196.467107][ T7941] Call Trace: [ 196.467115][ T7941] [ 196.467126][ T7941] dump_stack_lvl+0x189/0x250 [ 196.467146][ T7941] ? __kasan_check_byte+0x12/0x40 [ 196.467175][ T7941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.467193][ T7941] ? lock_release+0x4b/0x3e0 [ 196.467222][ T7941] ? __virt_addr_valid+0x4a5/0x5c0 [ 196.467244][ T7941] print_report+0xca/0x240 [ 196.467270][ T7941] ? __mutex_lock+0x147/0x1340 [ 196.467295][ T7941] kasan_report+0x118/0x150 [ 196.467323][ T7941] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 196.467348][ T7941] ? __mutex_lock+0x147/0x1340 [ 196.467390][ T7941] __mutex_lock+0x147/0x1340 [ 196.467418][ T7941] ? __mutex_lock+0x5b6/0x1340 [ 196.467444][ T7941] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 196.467470][ T7941] ? __pfx___mutex_lock+0x10/0x10 [ 196.467498][ T7941] ? __lock_acquire+0xab9/0xd20 [ 196.467526][ T7941] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 196.467553][ T7941] ? process_scheduled_works+0x9ef/0x17b0 [ 196.467579][ T7941] ? process_scheduled_works+0x9ef/0x17b0 [ 196.467605][ T7941] process_scheduled_works+0xae1/0x17b0 [ 196.467642][ T7941] ? __pfx_process_scheduled_works+0x10/0x10 [ 196.467675][ T7941] worker_thread+0x8a0/0xda0 [ 196.467713][ T7941] kthread+0x70e/0x8a0 [ 196.467732][ T7941] ? __pfx_worker_thread+0x10/0x10 [ 196.467758][ T7941] ? __pfx_kthread+0x10/0x10 [ 196.467777][ T7941] ? _raw_spin_unlock_irq+0x23/0x50 [ 196.467798][ T7941] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.467820][ T7941] ? __pfx_kthread+0x10/0x10 [ 196.467839][ T7941] ret_from_fork+0x3fc/0x770 [ 196.467866][ T7941] ? __pfx_ret_from_fork+0x10/0x10 [ 196.467895][ T7941] ? __switch_to_asm+0x39/0x70 [ 196.467913][ T7941] ? __switch_to_asm+0x33/0x70 [ 196.467931][ T7941] ? __pfx_kthread+0x10/0x10 [ 196.467950][ T7941] ret_from_fork_asm+0x1a/0x30 [ 196.467977][ T7941] [ 196.467983][ T7941] [ 196.673843][ T7941] Allocated by task 10493: [ 196.678255][ T7941] kasan_save_track+0x3e/0x80 [ 196.682937][ T7941] __kasan_kmalloc+0x93/0xb0 [ 196.687545][ T7941] __kmalloc_noprof+0x27a/0x4f0 [ 196.692400][ T7941] udp_tunnel_nic_netdevice_event+0x854/0x19f0 [ 196.698565][ T7941] notifier_call_chain+0x1b3/0x3e0 [ 196.703688][ T7941] register_netdevice+0x1608/0x1ae0 [ 196.709008][ T7941] nsim_create+0xae8/0xf10 [ 196.713444][ T7941] __nsim_dev_port_add+0x6b6/0xb10 [ 196.718571][ T7941] nsim_dev_port_add_all+0x37/0xf0 [ 196.723706][ T7941] nsim_dev_reload_up+0x451/0x780 [ 196.728737][ T7941] devlink_reload+0x4e9/0x8d0 [ 196.733415][ T7941] devlink_nl_reload_doit+0xb35/0xd50 [ 196.738795][ T7941] genl_family_rcv_msg_doit+0x215/0x300 [ 196.744342][ T7941] genl_rcv_msg+0x60e/0x790 [ 196.748850][ T7941] netlink_rcv_skb+0x205/0x470 [ 196.753635][ T7941] genl_rcv+0x28/0x40 [ 196.757614][ T7941] netlink_unicast+0x82c/0x9e0 [ 196.762378][ T7941] netlink_sendmsg+0x805/0xb30 [ 196.767151][ T7941] __sock_sendmsg+0x219/0x270 [ 196.771918][ T7941] ____sys_sendmsg+0x505/0x830 [ 196.776676][ T7941] ___sys_sendmsg+0x21f/0x2a0 [ 196.781348][ T7941] __x64_sys_sendmsg+0x19b/0x260 [ 196.786287][ T7941] do_syscall_64+0xfa/0x3b0 [ 196.790801][ T7941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.796685][ T7941] [ 196.799001][ T7941] Freed by task 10494: [ 196.803061][ T7941] kasan_save_track+0x3e/0x80 [ 196.807743][ T7941] kasan_save_free_info+0x46/0x50 [ 196.812764][ T7941] __kasan_slab_free+0x62/0x70 [ 196.817538][ T7941] kfree+0x18e/0x440 [ 196.821441][ T7941] udp_tunnel_nic_netdevice_event+0x1332/0x19f0 [ 196.827683][ T7941] notifier_call_chain+0x1b3/0x3e0 [ 196.832808][ T7941] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 196.839232][ T7941] unregister_netdevice_queue+0x33c/0x380 [ 196.844951][ T7941] nsim_destroy+0x1dd/0x670 [ 196.849460][ T7941] __nsim_dev_port_del+0x14d/0x1b0 [ 196.854572][ T7941] nsim_dev_reload_destroy+0x288/0x490 [ 196.860123][ T7941] nsim_dev_reload_down+0x8a/0xc0 [ 196.865161][ T7941] devlink_reload+0x1b6/0x8d0 [ 196.869835][ T7941] devlink_nl_reload_doit+0xb35/0xd50 [ 196.875205][ T7941] genl_family_rcv_msg_doit+0x215/0x300 [ 196.880766][ T7941] genl_rcv_msg+0x60e/0x790 [ 196.885274][ T7941] netlink_rcv_skb+0x205/0x470 [ 196.890075][ T7941] genl_rcv+0x28/0x40 [ 196.894062][ T7941] netlink_unicast+0x82c/0x9e0 [ 196.898843][ T7941] netlink_sendmsg+0x805/0xb30 [ 196.903617][ T7941] __sock_sendmsg+0x219/0x270 [ 196.908296][ T7941] ____sys_sendmsg+0x505/0x830 [ 196.913083][ T7941] ___sys_sendmsg+0x21f/0x2a0 [ 196.917865][ T7941] __x64_sys_sendmsg+0x19b/0x260 [ 196.922805][ T7941] do_syscall_64+0xfa/0x3b0 [ 196.927321][ T7941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.933217][ T7941] [ 196.935539][ T7941] Last potentially related work creation: [ 196.941268][ T7941] kasan_save_stack+0x3e/0x60 [ 196.945976][ T7941] kasan_record_aux_stack+0xbd/0xd0 [ 196.951194][ T7941] insert_work+0x3d/0x330 [ 196.955529][ T7941] __queue_work+0xbd9/0xfe0 [ 196.960032][ T7941] queue_work_on+0x181/0x270 [ 196.964614][ T7941] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 196.970251][ T7941] udp_tunnel_push_rx_port+0x180/0x200 [ 196.975803][ T7941] geneve_offload_rx_ports+0xd7/0x160 [ 196.981195][ T7941] geneve_netdevice_event+0x6a/0x80 [ 196.986399][ T7941] notifier_call_chain+0x1b3/0x3e0 [ 196.991511][ T7941] call_netdevice_notifiers+0x88/0xc0 [ 196.996887][ T7941] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 197.003139][ T7941] notifier_call_chain+0x1b3/0x3e0 [ 197.008249][ T7941] register_netdevice+0x1608/0x1ae0 [ 197.013454][ T7941] nsim_create+0xae8/0xf10 [ 197.017877][ T7941] __nsim_dev_port_add+0x6b6/0xb10 [ 197.022999][ T7941] nsim_dev_port_add_all+0x37/0xf0 [ 197.028119][ T7941] nsim_dev_reload_up+0x451/0x780 [ 197.033152][ T7941] devlink_reload+0x4e9/0x8d0 [ 197.037833][ T7941] devlink_nl_reload_doit+0xb35/0xd50 [ 197.043225][ T7941] genl_family_rcv_msg_doit+0x215/0x300 [ 197.048771][ T7941] genl_rcv_msg+0x60e/0x790 [ 197.053274][ T7941] netlink_rcv_skb+0x205/0x470 [ 197.058052][ T7941] genl_rcv+0x28/0x40 [ 197.062034][ T7941] netlink_unicast+0x82c/0x9e0 [ 197.066803][ T7941] netlink_sendmsg+0x805/0xb30 [ 197.071567][ T7941] __sock_sendmsg+0x219/0x270 [ 197.076246][ T7941] ____sys_sendmsg+0x505/0x830 [ 197.081009][ T7941] ___sys_sendmsg+0x21f/0x2a0 [ 197.085682][ T7941] __x64_sys_sendmsg+0x19b/0x260 [ 197.090619][ T7941] do_syscall_64+0xfa/0x3b0 [ 197.095132][ T7941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.101021][ T7941] [ 197.103344][ T7941] Second to last potentially related work creation: [ 197.109919][ T7941] kasan_save_stack+0x3e/0x60 [ 197.114599][ T7941] kasan_record_aux_stack+0xbd/0xd0 [ 197.119801][ T7941] insert_work+0x3d/0x330 [ 197.124134][ T7941] __queue_work+0xcfc/0xfe0 [ 197.128628][ T7941] queue_work_on+0x181/0x270 [ 197.133207][ T7941] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 197.138842][ T7941] udp_tunnel_push_rx_port+0x180/0x200 [ 197.144305][ T7941] geneve_offload_rx_ports+0xd7/0x160 [ 197.149685][ T7941] geneve_netdevice_event+0x6a/0x80 [ 197.154883][ T7941] notifier_call_chain+0x1b3/0x3e0 [ 197.159985][ T7941] call_netdevice_notifiers+0x88/0xc0 [ 197.165380][ T7941] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 197.171632][ T7941] notifier_call_chain+0x1b3/0x3e0 [ 197.176746][ T7941] register_netdevice+0x1608/0x1ae0 [ 197.181960][ T7941] nsim_create+0xae8/0xf10 [ 197.186375][ T7941] __nsim_dev_port_add+0x6b6/0xb10 [ 197.191491][ T7941] nsim_dev_port_add_all+0x37/0xf0 [ 197.196608][ T7941] nsim_dev_reload_up+0x451/0x780 [ 197.201641][ T7941] devlink_reload+0x4e9/0x8d0 [ 197.206318][ T7941] devlink_nl_reload_doit+0xb35/0xd50 [ 197.211692][ T7941] genl_family_rcv_msg_doit+0x215/0x300 [ 197.217253][ T7941] genl_rcv_msg+0x60e/0x790 [ 197.221756][ T7941] netlink_rcv_skb+0x205/0x470 [ 197.226525][ T7941] genl_rcv+0x28/0x40 [ 197.230523][ T7941] netlink_unicast+0x82c/0x9e0 [ 197.235308][ T7941] netlink_sendmsg+0x805/0xb30 [ 197.240093][ T7941] __sock_sendmsg+0x219/0x270 [ 197.244782][ T7941] ____sys_sendmsg+0x505/0x830 [ 197.249546][ T7941] ___sys_sendmsg+0x21f/0x2a0 [ 197.254223][ T7941] __x64_sys_sendmsg+0x19b/0x260 [ 197.259173][ T7941] do_syscall_64+0xfa/0x3b0 [ 197.263690][ T7941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.269585][ T7941] [ 197.271916][ T7941] The buggy address belongs to the object at ffff888077da2c00 [ 197.271916][ T7941] which belongs to the cache kmalloc-256 of size 256 [ 197.285966][ T7941] The buggy address is located 176 bytes inside of [ 197.285966][ T7941] freed 256-byte region [ffff888077da2c00, ffff888077da2d00) [ 197.299781][ T7941] [ 197.302113][ T7941] The buggy address belongs to the physical page: [ 197.308519][ T7941] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77da2 [ 197.317282][ T7941] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 197.325789][ T7941] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 197.333353][ T7941] page_type: f5(slab) [ 197.337336][ T7941] raw: 00fff00000000040 ffff88801a441b40 dead000000000100 dead000000000122 [ 197.345921][ T7941] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 197.354508][ T7941] head: 00fff00000000040 ffff88801a441b40 dead000000000100 dead000000000122 [ 197.363182][ T7941] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 197.371851][ T7941] head: 00fff00000000001 ffffea0001df6881 00000000ffffffff 00000000ffffffff [ 197.380516][ T7941] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 197.389179][ T7941] page dumped because: kasan: bad access detected [ 197.395593][ T7941] page_owner tracks the page as allocated [ 197.401300][ T7941] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5847, tgid 5847 (syz-executor), ts 92146750603, free_ts 92103570551 [ 197.422659][ T7941] post_alloc_hook+0x240/0x2a0 [ 197.427439][ T7941] get_page_from_freelist+0x21e4/0x22c0 [ 197.433074][ T7941] __alloc_frozen_pages_noprof+0x181/0x370 [ 197.438890][ T7941] alloc_pages_mpol+0x232/0x4a0 [ 197.443752][ T7941] allocate_slab+0x8a/0x3b0 [ 197.448267][ T7941] ___slab_alloc+0xbfc/0x1480 [ 197.452960][ T7941] __kmalloc_noprof+0x305/0x4f0 [ 197.457819][ T7941] fib_create_info+0x1728/0x3210 [ 197.462765][ T7941] fib_table_insert+0xc6/0x1b50 [ 197.467622][ T7941] fib_magic+0x2c4/0x390 [ 197.471870][ T7941] fib_add_ifaddr+0x144/0x5f0 [ 197.476551][ T7941] fib_inetaddr_event+0x12e/0x190 [ 197.481583][ T7941] notifier_call_chain+0x1b3/0x3e0 [ 197.486698][ T7941] blocking_notifier_call_chain+0x6a/0x90 [ 197.492422][ T7941] __inet_insert_ifa+0xa13/0xbf0 [ 197.497365][ T7941] inet_rtm_newaddr+0xf3a/0x18b0 [ 197.502305][ T7941] page last free pid 5857 tgid 5857 stack trace: [ 197.508624][ T7941] __free_frozen_pages+0xc71/0xe70 [ 197.513748][ T7941] __slab_free+0x326/0x400 [ 197.518164][ T7941] qlist_free_all+0x97/0x140 [ 197.522771][ T7941] kasan_quarantine_reduce+0x148/0x160 [ 197.528239][ T7941] __kasan_slab_alloc+0x22/0x80 [ 197.533100][ T7941] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 197.539006][ T7941] __alloc_skb+0x112/0x2d0 [ 197.543435][ T7941] netlink_ack+0x146/0xa50 [ 197.547856][ T7941] netlink_rcv_skb+0x28c/0x470 [ 197.552646][ T7941] netlink_unicast+0x82c/0x9e0 [ 197.557466][ T7941] netlink_sendmsg+0x805/0xb30 [ 197.562243][ T7941] __sock_sendmsg+0x219/0x270 [ 197.566939][ T7941] __sys_sendto+0x3bd/0x520 [ 197.571482][ T7941] __x64_sys_sendto+0xde/0x100 [ 197.576265][ T7941] do_syscall_64+0xfa/0x3b0 [ 197.580776][ T7941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.586670][ T7941] [ 197.588991][ T7941] Memory state around the buggy address: [ 197.594614][ T7941] ffff888077da2b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 197.602668][ T7941] ffff888077da2c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 197.610730][ T7941] >ffff888077da2c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 197.618785][ T7941] ^ [ 197.624412][ T7941] ffff888077da2d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 197.632477][ T7941] ffff888077da2d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 197.640537][ T7941] ================================================================== [ 197.665713][ T7941] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 197.672954][ T7941] CPU: 0 UID: 0 PID: 7941 Comm: kworker/u8:20 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 197.684854][ T7941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 197.694945][ T7941] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 197.702259][ T7941] Call Trace: [ 197.705543][ T7941] [ 197.708476][ T7941] dump_stack_lvl+0x99/0x250 [ 197.713069][ T7941] ? __asan_memcpy+0x40/0x70 [ 197.717664][ T7941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.722868][ T7941] ? __pfx__printk+0x10/0x10 [ 197.727492][ T7941] panic+0x2db/0x790 [ 197.731396][ T7941] ? __pfx_panic+0x10/0x10 [ 197.735815][ T7941] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 197.741733][ T7941] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 197.748069][ T7941] ? print_memory_metadata+0x314/0x400 [ 197.753544][ T7941] ? __mutex_lock+0x147/0x1340 [ 197.758321][ T7941] check_panic_on_warn+0x89/0xb0 [ 197.763270][ T7941] ? __mutex_lock+0x147/0x1340 [ 197.768043][ T7941] end_report+0x78/0x160 [ 197.772302][ T7941] kasan_report+0x129/0x150 [ 197.776824][ T7941] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 197.782732][ T7941] ? __mutex_lock+0x147/0x1340 [ 197.787538][ T7941] __mutex_lock+0x147/0x1340 [ 197.792149][ T7941] ? __mutex_lock+0x5b6/0x1340 [ 197.796925][ T7941] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 197.803269][ T7941] ? __pfx___mutex_lock+0x10/0x10 [ 197.808306][ T7941] ? __lock_acquire+0xab9/0xd20 [ 197.813175][ T7941] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 197.819275][ T7941] ? process_scheduled_works+0x9ef/0x17b0 [ 197.825039][ T7941] ? process_scheduled_works+0x9ef/0x17b0 [ 197.830789][ T7941] process_scheduled_works+0xae1/0x17b0 [ 197.836389][ T7941] ? __pfx_process_scheduled_works+0x10/0x10 [ 197.842411][ T7941] worker_thread+0x8a0/0xda0 [ 197.847058][ T7941] kthread+0x70e/0x8a0 [ 197.851157][ T7941] ? __pfx_worker_thread+0x10/0x10 [ 197.856287][ T7941] ? __pfx_kthread+0x10/0x10 [ 197.860893][ T7941] ? _raw_spin_unlock_irq+0x23/0x50 [ 197.866117][ T7941] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.871335][ T7941] ? __pfx_kthread+0x10/0x10 [ 197.875947][ T7941] ret_from_fork+0x3fc/0x770 [ 197.880618][ T7941] ? __pfx_ret_from_fork+0x10/0x10 [ 197.885749][ T7941] ? __switch_to_asm+0x39/0x70 [ 197.890548][ T7941] ? __switch_to_asm+0x33/0x70 [ 197.895330][ T7941] ? __pfx_kthread+0x10/0x10 [ 197.899931][ T7941] ret_from_fork_asm+0x1a/0x30 [ 197.904730][ T7941] [ 197.907901][ T7941] Kernel Offset: disabled [ 197.912228][ T7941] Rebooting in 86400 seconds..