last executing test programs: 5.193283994s ago: executing program 2 (id=2575): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x4) (async) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) tee(r1, r3, 0x100000af5, 0x0) (async) close(r3) (async) close(r2) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000380)="00214717a70700000000030600710a5eeb9d0471200000000500000000000000ffff0342844d50e77d0dc450de49c204a803166580ac899c081cb49f1930e7d07fbdf3d8134e72158357ee37fdae", 0x4e}], 0x1, 0xed, 0x1) 3.715532068s ago: executing program 1 (id=2578): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x4e21, @empty=0xe0000000}}, {{0x2, 0x4e25, @private=0xa010101}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)={0x20, 0x3, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}]}, 0x20}}, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000007f0000010000000001000036d2266701"], 0x14) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000080), 0x4) 3.675593484s ago: executing program 2 (id=2579): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x6a, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000280), &(0x7f0000000300), 0x8, 0x35, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@bridge_setlink={0x78, 0x13, 0xd04, 0x70bd28, 0x25dfdbfb, {0x7, 0x0, 0x0, r1, 0x29000, 0x8004}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa, 0x1, @random="76afb8b35fc2"}, @IFLA_PHYS_SWITCH_ID={0x1d, 0x24, "91f3094ada98a2aa98cd708d585a5e9be7abba43a2631444f5"}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_to_batadv\x00'}]}, @IFLA_PHYS_PORT_ID={0xc, 0x22, "74e013d8cd622ed2"}]}, 0x78}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 3.524056398s ago: executing program 2 (id=2582): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0xd, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000001000000000000000000000085100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff3702000008000000b703000000000028850000003900000095"], &(0x7f0000000740)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f0000000000)=@raw=[@ldst={0x6, 0x2, 0x6, 0x7, 0x6, 0x18}, @jmp={0x5, 0x1, 0x1, 0x4, 0x7, 0x100, 0xfffffffffffffff0}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xb8}], &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000780)=""/4096, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0xb, 0x7, 0x40}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000001c0)=[{0x0, 0x2, 0x7}, {0x3, 0x3, 0x8, 0x2}, {0x0, 0x3, 0x2, 0x4}, {0x4, 0x4, 0xc, 0xb}], 0x10, 0x8}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0xc, 0x0, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001780)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) (rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$netlink(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4008050) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000240)="354da925f340a56cd9bd738d6055", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async, rerun: 32) r5 = socket$kcm(0x10, 0x400000002, 0x0) (rerun: 32) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x786, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x404f444) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r8, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, 0x0, 0xf}, 0x94) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r8}, &(0x7f00000002c0), &(0x7f0000000300)=r7}, 0x20) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) (async, rerun: 32) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000f, 0x31, 0xffffffffffffffff, 0x0) (rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) 3.359143657s ago: executing program 0 (id=2585): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x800) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x9, @any, 0x0, 0x1}, 0xe) socket$kcm(0x29, 0x7, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x4, 0xed, 0x1, 0x4, 0x0, @private2, @empty, 0x20, 0x700, 0xee, 0x8}}) sendmsg$can_bcm(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x1d, r2}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x21, 0x10, {}, {0x77359400}, {0x3, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x0, 0x0, 0x1}, 0x19, 0x1, 0x0, 0x0, "1323cac1bee234a67ec2dfa8f23f63ef5bb2dfe96d37cbc8aad8b6b22aefd7cc50c29f032e38ae8a9e0df05a4e92bbd30177b50177d0d7a2e9ae711b6826eb75"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) r3 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x800) ioctl$SIOCRSGCAUSE(r3, 0x89e0, &(0x7f0000000300)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f00000003c0)=0x101, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r7, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048010}, 0x20004) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000540)=0x40, 0x4) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r8, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x888) ioctl$FITRIM(r6, 0xc0185879, &(0x7f00000006c0)={0x7, 0x10001}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000700)={0x0, @in={{0x2, 0x4e20, @private=0xa010100}}, [0x9, 0xf428000000000000, 0x8, 0x7, 0x400, 0x8, 0x5, 0x7fff, 0x8, 0x0, 0x0, 0x26, 0x6, 0x3, 0xfffffffffffff0f1]}, &(0x7f0000000800)=0x100) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000840)={r9, 0xffffff1d}, 0x8) sendmsg$sock(r0, &(0x7f0000000e00)={&(0x7f0000000880)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-pclmul\x00'}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000900)="9b63b1f65d9044d35b5a2c6b0978cca3da505aa9b2540de81e649e29691092ef7a13638398ddc7b2a0f9656164286fc39a6943ace6d9daa1175a4e7e95cc5677599d5ae3dcc1651374a7ba2ace7c8ab9e7c7b19bd43ccb3e6662e23d83d44b5333bd348af94ac9b23856051a88dccc822649dbd8be812a84f7ea31e9c6d50fea20577099e79d30243bcb44c25e0dca184b8ce94cced2e7467cfd3cf1033c47e1b3068c00a615bce1e3ad440d18efab", 0xaf}, {&(0x7f00000009c0)="0f73f5e0fd8a7f56e66bdaaa94f5d20974309a47091c17c9f168a920026f9056734c8b61859072079f3527efc58cff78ef7e7ed70522e719c06a603cc2fc359c0901ade2a23bbdbec6a8ab04e1f1fba5dba14ac2461e4fb322710e164e3cdaed9d440508585183255fd516e2e2514bb6899576262db9070afca2148d3596c7636fe6608e693a681b754824a24a298f78ac87c758911b72643cccadeb77074aa670b6fc5c2bd0c7ed5017053e9efc016daf44eadb25895eceec4add32ec705a037528e3741ffa6dc1037b5e5c9f69750f90b18426eafa34698fa4f0ab73d8438c7e3088293a35f6b728a5e5f1091b8b83a11565", 0xf3}, {&(0x7f0000000ac0)="753913aa7462f2b13854612040b58c056ad425ce2f582e65190ecaebd274af2ab7be886a8e0af5545cfc6ba4975f9c565a36ab038b04afbdddf4fe6a7328e384fd91b1b21368f1025d2adc026391aa2f3d8473ad10d51bace78088fd2ba00f12e5659fddcbe8d9ec13d3b857d9146958360dbbdef9babff0e28bc0f3ab8acdc656e6c08e8c166234da06dfc82599b8fd35bce9435a14468823d8034fed7c1d6fa9f66591562825b75502f7e9ceec23357df333fdd2a59b", 0xb7}, {&(0x7f0000000b80)="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", 0xfc}, {&(0x7f0000000c80)="30a342ac140b73e8a064411320e175000840a2d59f91b3ac89c96f3d72242e2fd6f18d89c6b1cb4eea9f0ce48f06e9caf3a4e79c6fe58fda691c470aeef7afb17e4083cf1c7b3a6692509511e84e6c73e6546cb71dbd049c2dc8e836c0", 0x5d}, {&(0x7f0000000d00)="9381095178bad34206a154c96b301029e394c2ce8a04d6865fec4e0a4a6551643fa66bae58f72e10a48d98fab37738a329fe1e7b7cfd7a8f4a45defb1b71a87febdda6034a12e49996e4f617e10b82f9690b6b38a325de630250c2e5cb21", 0x5e}], 0x6}, 0x8801) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000ec0)=0xffffffffffffffff, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000f00)=@o_path={&(0x7f0000000e40)='./file0\x00', r10, 0x4000, r11}, 0x18) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000f40), &(0x7f0000000f80)=0x4) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000fc0)={0x0, 0x48ea}, 0x8) r12 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r12, &(0x7f0000001000)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000001040)=0x1) 3.252595571s ago: executing program 2 (id=2587): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000380)=@framed, &(0x7f0000000440)='GPL\x00', 0x4, 0x54, &(0x7f0000000480)=""/84, 0x0, 0x1c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @remote}}, 0x6, 0x1, 0x4, 0x7, 0x20, 0x10001, 0x5e}, &(0x7f00000000c0)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r1, 0x6}, 0x8) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @random="1553ff41cf11", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dda00", 0x1c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@generic={0x22, 0x2}, @generic={0x4, 0x3, "a8"}]}}}}}}}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES32=r4], 0x1000f) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r5, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0x34, r6, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x40010) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) connect$phonet_pipe(r5, &(0x7f0000000280)={0x23, 0x8, 0x3, 0x6}, 0x10) bind$llc(r5, &(0x7f0000000240)={0x1a, 0x102, 0x3, 0x4, 0x6, 0x67, @random="7617498f1f2a"}, 0x10) 3.17666677s ago: executing program 0 (id=2589): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x45057bf4ccb05c67, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc9b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000000c0)={0x8, &(0x7f0000000340)=[{@none}, {}, {@none}, {@fixed}, {@none}, {}, {@none}, {@none}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x45057bf4ccb05c67, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc9b}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000000c0)={0x8, &(0x7f0000000340)=[{@none}, {}, {@none}, {@fixed}, {@none}, {}, {@none}, {@none}]}) (async) 3.05649329s ago: executing program 0 (id=2591): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f00000004c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000500)={&(0x7f00000000c0)=@can={{}, 0x0, 0x0, 0x4, 0x0, '\b-\x00'}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004080) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000000001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="802100000000000014000300776c616e300000000000000000000000080004000e0400000800168004000180"], 0x44}}, 0x0) 2.63481327s ago: executing program 1 (id=2594): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a", 0x1) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='fsi_master_aspeed_opb_read\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000bc0)={0x141, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4, "4278b9409c1be4"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001bc0)={{0x0, 0xfffffffffffffffe, 0x1f3, 0x3, 0x5, 0x7ff, 0x3ff, 0xa46, 0x6, 0x1ff, 0xfffffff9, 0xa, 0x5, 0x8a8, 0x5}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000002bc0)={r2, r3, "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", "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"}) (async) sendto$inet6(r0, &(0x7f0000000500), 0x0, 0x2000c851, 0x0, 0x0) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x8000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) (async) r4 = epoll_create1(0x0) socket$kcm(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x18, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4, 0x200}]}, 0x18}}, 0x0) (async) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x0, 0xf0, 0xf0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f0000000300), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2b}, @multicast1, 0x1ff000100, 0xffffffff, 'virt_wifi0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x73, 0x1, 0x1}, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xff, 0xffffffff, 0xff, 0xffffffff], 0x4e21, 0x4e22, 0x4e24, 0x4e24, 0x9, 0xd, 0x81, 0xd6d, 0x1}}}, {{@ip={@local, @local, 0xffffff00, 0x0, 'pimreg0\x00', 'wg1\x00', {}, {}, 0x73, 0x0, 0x14}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@addrtype={{0x30}, {0xa40, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ip={@empty, @multicast1, 0xffffff00, 0xff, 'dvmrp0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2e, 0x1, 0x4}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x9, 0xed, {0xa5db}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) (async) socket(0x2, 0x6, 0x0) (async) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r8, &(0x7f0000000080)={0xa002a008}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) close(0x4) 2.609222175s ago: executing program 0 (id=2595): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002e40)={@map, 0xffffffffffffffff, 0x20}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x38}}, 0x0) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, r8, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x10) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r13 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$sock(r13, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000005) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00120000009404006c0012800b00010062726964676500005c0002800c001e00000000000000000005002a00ff0000000500260001000000050019000000000008001a00d80300000c001f0000000000000000000500240000000000050024000100000008001a0007000000050007000700000008000a00", @ANYRES32=r12], 0x9c}}, 0x40) 2.448529395s ago: executing program 3 (id=2598): r0 = socket$xdp(0x2c, 0x3, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120002000200000000080000000010003200ffff0000000000000000000010002b00000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa000000000000000003000600000000000200"], 0x80}}, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, &(0x7f00000000c0)) 2.320658256s ago: executing program 2 (id=2599): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@local, 0x0}, &(0x7f0000000040)=0x14) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000c00)={'syztnl2\x00', &(0x7f0000001080)={'gretap0\x00', 0x0, 0x8, 0x7, 0x4, 0xb, {{0x1b, 0x4, 0x0, 0x8, 0x6c, 0x67, 0x0, 0x8, 0x29, 0x0, @private=0xa010100, @private=0xa010102, {[@timestamp={0x44, 0xc, 0xb6, 0x0, 0x4, [0xfffffff2, 0x2]}, @lsrr={0x83, 0x23, 0x5e, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast2, @multicast2, @loopback, @multicast2, @remote]}, @generic={0x88, 0x9, "f7fa716cec634e"}, @generic={0x83, 0x9, "295983c9a86ceb"}, @rr={0x7, 0xf, 0xd2, [@rand_addr=0x64010102, @rand_addr=0x64010100, @multicast2]}, @rr={0x7, 0x7, 0xa6, [@dev={0xac, 0x14, 0x14, 0x14}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000dc0)={'erspan0\x00', &(0x7f0000000d00)={'gretap0\x00', 0x0, 0x8000, 0x8, 0x9, 0x9, {{0x5, 0x4, 0x1, 0x0, 0x14, 0x66, 0x0, 0x5, 0x29, 0x0, @empty, @multicast2}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x24}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.197250509s ago: executing program 3 (id=2600): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func={0x1, 0x0, 0x0, 0x12, 0x2}, @fwd={0xd}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x46}, 0x28) 2.165331431s ago: executing program 0 (id=2601): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3", 0x1f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xe}, {&(0x7f0000000500)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000300)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x6e}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3c00000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r4, 0x6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r3, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) shutdown(r8, 0x1) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x28, r10, 0x1, 0x170bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r12) sendmsg$TIPC_CMD_ENABLE_BEARER(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x24004000) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 2.093942535s ago: executing program 2 (id=2602): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @local}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000500)={0x1, [0x0]}, &(0x7f00000005c0)=0x8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000000000000000000d0a0000000000000002000002040000000500000004000000080000000500000000000e305f2e000000000007739b05703ab8d7afb43db201a596afacfa3f88cf00da4ec98c1a6477d468c0cacc277e3d421e33cae8632f1851daa0f82f8da155d101cda1aedd48435d73dd7bb2f5cbdea7098ab012209eb2979cce000000"], &(0x7f0000000f40)=""/4089, 0x47, 0xff9, 0x1}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x58, &(0x7f0000000540)}, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f9ffffffffffffff01bd7000fcdbdf250211000000000100", @ANYRES32=r2, @ANYBLOB], 0x1e}}, 0x800) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={r1, 0x100}, &(0x7f00000001c0)=0x8) r4 = socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a0c5163a8288917b2582a8ba21bc4949ea20c5f4ecce3d46a866d4fe8b4e16b6f82f6b3d0a7aff0cd7644a92e1f941d13d4c4d2034a3719bb3c684865524263e1812f54386ebca41ff8"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x4) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4098, 0xe5c}, {&(0x7f0000003700)=""/4073, 0xfe9}], 0x2}, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) unshare(0x66000080) 2.020539355s ago: executing program 3 (id=2603): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0xa48d, 0x3a, 0x7fff, 0x3a, 0xf, 0x5, 0xfff}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f}, 0x94) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r5, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000040)={r9, 0x48d4}, &(0x7f0000000080)=0x8) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) write$tun(r3, &(0x7f0000000e00)=ANY=[@ANYBLOB="000088f80180c2000001aaaaaaaaaaaa88a8"], 0x72) 1.722296988s ago: executing program 1 (id=2604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket(0x2, 0x80805, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00'}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x8, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000000)={'syztnl0\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x1, 0x6, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r10, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) socket(0x15, 0x5, 0x0) nanosleep(0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000100)={r4}, &(0x7f0000000240)=0x8) socket(0x2b, 0xa, 0x8c0d) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000a54c010026bd7000ffdbdf25040000000c000c0001000000050000002139e687a437470bc0c313f22a7f5bc9dd50db6bd17e075b20f395eb69ffcb624222a4f4d2262c938aa87550ccaa9af9c6f0846c7b04e18a38e938daa3936cb98697b50eb13540f0a8ba8ad72da76ed9f74f1e996b639c07f04e4d5593f62ea929970cda53cfd406dafe4131cf73f2f127f5d12b0e34632e12844652a42a3c7f4553b66b61d7f419d46a8dafe7234a13116f9567315c19c2eb09baa179ca93fcff25"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000804) 1.70044518s ago: executing program 3 (id=2605): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0x6da443c8}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0}, 0x20) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000600001e95"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x26020480) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x1, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000cc0)="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", 0x14a}, {&(0x7f0000000800)="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", 0x187}, {&(0x7f0000000b80)="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", 0x123}, {&(0x7f00000009c0)="be7c1cae9fefed7e59316bed37f6eb36ec4ae1d442c67a5ebe9c15b771b531c47f64cab99da329281995ab70d9050519f74cd1e2452bb8cd6db0f53fd7704760879975a8bd737f94242292127be5fe50b61bfa175613e5ddf7e0591978478c7c6fa4657c18e7881159ee6f5707094c9c6deb12b31a2c7282ab105fcdb4c9b99ed9ed061fb4e29befe46a0ae9592863281e3ed4185d4eda3dcf06c92755b659704fc52bdf", 0xa4}], 0x4}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r9, 0x84, 0x9, &(0x7f0000000380), 0x98) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4c, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0x2, 0x8}}) 1.508517328s ago: executing program 4 (id=2606): r0 = socket(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000069000010000000004000050018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b703000064000000850000001000000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xfcc, &(0x7f0000001e00)=""/4044, 0x100, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbd}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r3, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x84, 0x3}], 0x10}}], 0x2, 0xc88c4) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1}, 0x6e) connect$unix(r5, &(0x7f0000000640)=@file={0x1}, 0x6e) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x7c, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x7, 0xf3, 0x3, 0x1, 0x2, 0xfffffff7, 0xffffffffffffff45}}, {0xc, 0x2, [0xdc02, 0xc, 0x6, 0x7b2]}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="00030000", @ANYRES16=r6, @ANYBLOB="000327bd7000fbdbdf250e00000020000180140002007369743000000000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="10000280080002000500000004000100f400028055000500a68e63ce37d46644aaecc5785e5a6be1b86468d8a2639d2432bbac4c06a8dcdce3ac49b6dd462cdc26a690f5abec6b71535a36c51008fe40aefbdb9c10da1b1449c9da9d10e8104abe3392885236bbdbed0000008d0004002d5183f646bffa62d25cf168c99e7e7f57f64ba4bf3c4a951ac58e40a0a8d49ba7505755a40b3c40545902a68daecb696f1029f775565422b773b1a17eda3817c8ca8f84d610d073185678a0ab10805a113493302f5f2757fc3da481af521b4ac58f8938ca5c18d1d205d6948fd47604efe1bbc6286f336f6e8388a4b346b00cbb3609ec1f20458a7200000008000200df030000c801028008000200ff08000008000200000000000301040075ecf7ae66909f1432e5f95b0d032588db4c1304596df1d01fa03098b51eb2b0f656b2f3920c3817f4de2db15be084d87bcb0e6cfb376f94de84be05afc5a72dd38832d765c67e8a4173b785f1ad808d7d8482a456e600097a13a1995c5a4c186bbad6cdd3bcf852d0c0da9fbd5cae7688be7cccd29d2d91975645a5c1c8a377205b580a87a04dbc3bee7e37a963d692f0eccbed98ee2433f2e394f27537bc0561078cea9b7fbe3672d2dc8689952f81805b0ec37348eae0ddfad89f1448e953c404d4ba6b9d0d3d5a80679053c43ea8209b5d186f07a5e0c9b40d24e0b499d1001070a8661e8082ed704dd630db5faaa59bb22133e036ecc318496325d756009100050059b6bdbd98bd41ad896c64a39537d2cc8f9f488422a9e3d26988056118808cb7930ef82c46eec027a3ca869588a4d10e4356ad8d13c0836553977bf0e1e6cf8ee98ca2f53a278bd6df7ce9d98a42547bb66d0dee0fab8cec36586c53f6e3dc0f389e657153b50537818c07c5b7c17ea9afa0a59b869e21cc998354067d6a693744f087c75d664da301779f53bc0000001b00050096d8fe6647f4210a25793f02a973dcbb8ae151037ca28800"], 0x300}, 0x1, 0x0, 0x0, 0x4004010}, 0x20040086) 1.119495481s ago: executing program 4 (id=2607): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) (async) close(0x3) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x9, 0x1b, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000061d8d837000000002c2c00001811dbf3", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000023000000184900000400000000000000000000001800000007000000000000000200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000183400000100000000000000000000008520000004"], 0x0, 0x800, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2a, 0x2, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000005100000000000000000a200000000900010073797a300000000014000000100001"], 0x48}}, 0x20050800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c0002000000000000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="32000100", @ANYRES32=r6, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB='\b'], 0x90}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r7}, &(0x7f0000000800), &(0x7f0000000840)=r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r9}, 0x10) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 956.86015ms ago: executing program 3 (id=2608): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000240)={0x8, 'veth1_vlan\x00', {'bridge0\x00'}, 0xfffb}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)={0x128, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xe0, 0x3, 0x0, 0x1, [{0xa8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xa3, 0x2, "29a55bb58ad2b6b681874316451fcdd2abcc221f4e353ed418982500574fd268ec104f4a58f0e1ab320e1c2187fd9174a06b32eeb4cfcc3fa1d14adc3a41f707032ad793f7461f22c6fff6f5be37079b128cfdc090259af4c0e0f7efb91fd5a777241937a694532f27b363c36bed2036a6a8e1b6c3476558d72a7c4c8d8091dcac49b92032b35b02a9be0a8cf8ed7cc625a62734f8b4f33154c7dfc099add9"}}, {0x28, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x21, 0x2, "ee110c14d2f7a869af235e87dc3b2993dbeff3ed012d5378d66bb55d2a"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x10001}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xf1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7a}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}]}, 0x128}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x40000000) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x84, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e1f, @empty}}, 0xfffd}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 876.737729ms ago: executing program 4 (id=2609): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b543080afb161a8d714452"], 0x14}}, 0x0) 875.2639ms ago: executing program 0 (id=2610): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x38, 0x1, 0x20, 0x0, {0xa}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x40010) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x38, 0x1, 0x20, 0x0, {0xa}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x40010) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001300)="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", 0x1000) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120800", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120800", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) (async) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a09040000000000000000020000040900010073797a30000000000900020073797a320000000018000480140001800b0001006578746864720000044002800500074012000000140000001100010000000000000000000000000a"], 0x74}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRESOCT, @ANYBLOB='_'], 0x48) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x8, 0xfff3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x8, 0xfff3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000005e001b0a00de0000fedbdf25020004e03800000004000b000800010007000200"], 0x24}, 0x1, 0x0, 0x0, 0xd8}, 0x0) sendmsg$SMC_PNETID_ADD(r9, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000180)={0x60, 0x0, 0xc20, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}]}, 0x60}}, 0x20008041) socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r12) (async) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r12) sendmsg$DEVLINK_CMD_RATE_NEW(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r13, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r13, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 697.630996ms ago: executing program 1 (id=2611): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="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", 0xfd}, {&(0x7f0000000500)="d3270ac33afa436fbe547fbe7a18e8a7c96ab81048a62da5eca34dad9c0e1710ee725826c6c4991595a06f15c67f11aa5a2533f4f29fc5bb768a0f5381ccad517feba5f7f455f1be4925886cf4aaca0cf9ad471481bbe6dc48692b64fef3dab44eb050770d25909db9f5d5366d1402f91b14409535ce6bfd838882097017434d4238d6fb1d912b89094f4ece91a30d4c08b7345df651ba6ec21d47418088419355906c20ea0ec29ef603fffaf9967efec2a5c35ccf712021b4a188246de029de94964e815f4f6ea5748dc1a763ffb680ed9603927c3f11ea", 0xd8}, {&(0x7f0000000600)="74c6eb3c5c9eec82a29606ff386def5a88ee200c845719b56b6bec86ca4f62a44c1c19746b52715897078722795b66e8d6caed8176726a652188a8b7524fb911486bcd14d7e6e0a6456b23cb7cf97c4fe01722de757218d24f6a31c6c4503732bc2619c4ae2685d2b9d5e999717d2928ec1b2d8448e5c06592aebf66c4e6c66fb1066da812d603cba841bbf87200570fe639b8509dcb57ad04358258563f32767a7a3688336b4be598a8a95837504e38b84abdfc2a1eb32350ceecf563a9eee1eb6c9dbff680024362b93314a3c6127334cf57453d6bf45f60fb3f37", 0xdc}, {&(0x7f0000000700)="11d3fa5c6692dff4d8ac40049172b6a3c45475941146229e2a52c68243198a9a475c03078701fdf41387dd2401b3e73c91b8606421aa4914baa71f6af50052222dcb0ee1108d35f906306ed0248f12d6ec4ea005a876654ddc565ae87a514c4733de49a42a7eabf8afc5d53a0ac550544256e47a04ce615f6e8bf2c26a56db3539d0705044feb9ecb9d45c7d4158898bbd8d1afe389226a731d84d43112d755db8ba33ef055870ef849f8cf22e24186584e9caef15727c8f14134e6e61e4164e05acf4", 0xc3}, {&(0x7f00000002c0)="10247e74c8ce98eef7af473df98ce1e2599e40d7376d65cfc15fa1ba85f80f7c16c3aa18a5bfaa3e89325bd69636a9b9a4c816c41ea0105c0df1777127aa", 0x3e}], 0x5, 0x0, 0x0, 0x10}, 0x48044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0xc8, r8}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x208}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r9, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb0000080003"], 0x68}}, 0x0) r10 = socket(0x10, 0x3, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r12, @ANYBLOB="7240146c00000000340012800c0001006d6163766c616e0024"], 0x54}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="7c0000001000030500"/23, @ANYRES32=0x0, @ANYBLOB="15010000000000005c0012800e00010069703667726574617000000048000280060011004e23000014000700fe8000000000000000000000000000aa060018000200000006000e0000000000060010004e210000050017000000000006000f0000000000"], 0x7c}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x5, 0xee, &(0x7f00000001c0)="062b45006baf17299ef553425691af411dc910dc9f62dace9c44dbcee1e6f4c0c42147b347ecbfbb89d0966c049a03d48609db1eeee5ee6887620d2c00ddc4131af58c8a9e8580d214a7064cdd90b479d83e30b5488f94d269604103964b015f6402e587c86436ed1b4e4af125111b91f1888de76615a569a7d608b2a8806cb65679cd6fc6017a4a48d9ac55f51f237faa1be844cb0802e546bc25f80bd32413bae2f71dbc7c99409de336d5f505935486f351abc3805eedbc960943a5b099cf0b36df5d37e1dbdf703da6a04d6732f728082252e12664fb4c319f7c4b35f971f1cbea7ab73fd0de1196bd159333", 0x9, 0x4d, 0x8, 0x7fff, 0xfffc, 0x2, 0x1, 'syz0\x00'}) 515.356151ms ago: executing program 4 (id=2612): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r2, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003f40)=ANY=[@ANYBLOB="0a00000004000000dd0000000a0000000000000000a82bc23c3eaa685d7c782c1c7be0269619b0987ce267f777a89c98fb7ec55c19925c60da705333699d5a6f20a3ba74d88705e4334ee903f8b16977ff14bb840cf67a94f52167e66f0c24dd71d2ddc41afdafea4677b1af31f6135820ff5a29586db6b291ed37614cbf829036189eadeed4a626a92325a23b4c3d56292df9598a5c", @ANYRES32, @ANYBLOB="0000000000000000532a01d891c5965700000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYRES8=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003e40)=ANY=[@ANYBLOB="0b00000005000000050000000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000008759cd2ad3cfa40d9305baf338d5d35000000000000000000000012fa8dba7eefc67deb8f090e3acabbfeee99123b043ffc18aafcec412a15b32b866fd823884ce50ea2f59506b72e1f580bd25e6573d03bb54d0ce7b641d0f90774047c6f8e54f838c0b3827ef22159797ec3c164511dda250dcbc145e3d50de68a696abe49c14b0e2f88b7d8710d9015c4ddf93ac4ddc09c1cb85f00677cf5da97d2"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x33, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18}, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000003e00)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003d00)={0xffffffffffffffff, 0xe0, &(0x7f0000003c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000003a00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f0000003a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb8, &(0x7f0000003b00)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000003b40), &(0x7f0000003b80), 0x8, 0x40, 0x8, 0x8, &(0x7f0000003bc0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000003dc0)={'ip6gre0\x00', &(0x7f0000003d40)={'ip6_vti0\x00', r7, 0x2f, 0xfc, 0x1, 0x3, 0x15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, 0x8, 0x40, 0x8, 0x5}}) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000000)="0a000000010001", 0x7) ioctl$BTRFS_IOC_SPACE_INFO(r9, 0xc0109414, &(0x7f00000000c0)={0x22f, 0x5, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) writev(r9, &(0x7f0000003980)=[{&(0x7f0000003540)="d5c73439f26ce2fcb7a6b5c298f57a3f4f00777db780ae33bbda55e63ac4e07b019c569fb96e2366a076c2e065041901d6350937b81e76485db478499f825a487a52ccbc677fd1e17b5df73e4cdc8a176fa3f8adede7fb5910eb7abb3bbc808b73208c75d365a4f115dbd1b2", 0x6c}, {&(0x7f00000035c0)="b9c5bbd46371cf2730892846b22e78b84a66f415737788fc17718f39c3ed4ab43d5629742c7456bcbdca5c3c86cdc629bca4ca26c3ab0205e02a9a4c9c6f83f18e8e0f300420b940e0fde7beeb5ae4cda084a42deb95efb9a39831acf79a7635feb71ea0dad63c827a52cc513cc52ec7443c58f3c71180b67d37045af4c3c2513ef6306b7cd826b10c5b99a4f91e5edbcfd289753b73676d4960b5dc3ea631c3eb92607b8479fb2cefca3fed63a95a4de5dfdce3763a0c61679d40dd99cdafeddf7dd867a9068a74c510d91a6409e21a275989ca07dc9132ed86905b971e18d8fe7f756fbfd7f90dfddf514bb57b", 0xee}, {&(0x7f00000036c0)="02a2aaf7f4577340ec2a0ce7fb6a00b6414e083a542b7c603a260332c05e2737f66b5dd60853ddc9dfc0f7472a2dff3e749c4096be5e90a53aac46a60c82f5342a202ba7d416b147a3b4b62b691e0de30bb64e244fba25303237a4f08297b5e382b8e907691ec09735c6adaef58e8005a521240361c73e265d9a16c681ff0b192b51230763bcc4744f3345", 0x8b}, {&(0x7f0000003780)="895861c9f2e518c3ba7890ff94b5123ac1d9ea9d30bc8e19ca3d898a584b2b549ac1b32d5b68f01a4922b1cf0046c21899fb1ff2f3f2bc2576780f2beb6e101e1329460bec378ac56ad5b058438b741299f4f66766ce938f4d1e0895101609ad28d2c1c89df6abf548e511f2d6bc107385aec5b3ae622cb9f6c5a49414e3abf54d738b79206277a38b2f1a411047acdce5015398edc1a877", 0x98}, {&(0x7f0000003840)="fd066936d960fe6cffa215f57e9c3a7e580997c9857679914059a815903f0b0232ea9383979964d723ce188fd06fc1331e70f1e8e9a98103982b228af4ac3b0c04e9c3c871507a9f571c5ad6914f49bf7b79db27aed8e6f9ba959b8c5ddeb0b5975e0311353d6142a07e985d20798fd18bba121578542e23878c9de81ea4e413dc9c043804c950e91ba15176cefac7254876b330f9f51f65e118f157a9bde2545dc69abdf717511ac0ccca2f3f9fc9446068b09dd763508239d3fdb84143a2da0b4d074ec6508f2562e43ff5449ca9b7ac8e2f74e47d", 0xd6}, {&(0x7f0000003940)="03105d183fa99bee307dedd35f170e4138285e58a9c00492f8bd3ef8da2c4f6fef5a6ed80a296ff7dadef699bb62dabb41f34c1c3da2f5", 0x37}], 0x6) 332.473543ms ago: executing program 1 (id=2613): r0 = socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), 0xffffffffffffffff) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1d, 0x2, 0x6) (async) socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r4, &(0x7f0000002a00)=[{{0xfffffffffffffffe, 0x0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/143, 0x8f}, {&(0x7f0000001980)=""/234, 0xea}, {&(0x7f0000000280)=""/154, 0x9a}, {&(0x7f0000000340)=""/248, 0xffffff8e}, {&(0x7f0000000200)=""/44, 0x2c}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/189, 0xbd}, {&(0x7f0000001680)=""/155, 0x9b}], 0x8, &(0x7f0000001800)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x148}}], 0x1, 0x2022, &(0x7f0000002b80)={0x77359400}) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x8}, 0x10) (async) write(r4, &(0x7f0000000240)="1400000052004f7fb3e45f2024", 0xd) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lc\x00', 0x10, 0x8, 0xe}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) (async) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32, @ANYBLOB="0060f0000a0001aca1aaaaaaaaaa000008001000"], 0x30}, 0x1, 0x0, 0x0, 0x24024000}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @mcast1, @loopback={0x29}, 0x40, 0x7800, 0x5}}) r9 = socket(0x10, 0x80001, 0x20020) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x2) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x9) (async) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) close(r10) (async) sendmsg$xdp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="1d072039015b1538a880da07eaf15f1157fe64d322eacf67b1f88738fc7c7bab64d9644de6ba37cf29914c7c032bc63d90264349c7d69e5c98af83736b5002322ab4553b382abe8ff9eb1c30aed1b04e3ed8158da06d678abff974b05f66cceba173e48076cbd23bdbcaf60122305e82d69a2266c95913a58c2366e4418fd3a6d0c0df30efa2e222debe72c873bd23aa4123e6f0428b7d81806c7f3c7677b298e266b6bba67068a8ab80f17a5fc2e2f0b3191e7126882e224e94f00ca33ef1ef265ea750e2eb212fbf37c6f06d6dde8324ca", 0xd2}, {&(0x7f0000001c00)="2c68995143bb090b9570c5d77046b33a7ef8675ec6b9e1248318bbb10a6f0b32d441e9f47812ed6a5034fd2c0522351f8e0df77424282db583b93173ed45913542a599ee0a25eff7db03ed1c6a97996b9d734c2e522889fab64d54852ea110f22e63c1ed6920bed7a6fd3a079bb8beaecc59877f58d67c59264622dd8f3a2b4243b8761b8d45774f4b15150dc1e5e1a00ee0bf1cb3d90536c560f16d315b71d4c326b4c36ba0f86794ad707067b31f9738e0ca125b6eca4020c246a106f1ea56c8ef10c3623d3453a824fee41b6a20b1fa", 0xd1}], 0x3, 0x0, 0x0, 0x80}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001800ef0100000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000e3"], 0x3c}, 0x1, 0x11}, 0x0) 332.034896ms ago: executing program 4 (id=2614): ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@null, 0xc, 'veth0_to_bond\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000006b2b60400f1001bef860c3aa054a11e8592214679519714521f66aa450c9cf8838de2c41b6438c4dac5c3350363ec7fa9d0bd3b3de30fd6a120a70de697298be6b3040243eeed9bedb597320cbcec333b99891c588ee5c53dc22a2802463e0ebc76928d68ccc5fefbf06b795f900af2804e96d938c24f4ae44fa1e97735b622b713a7b9fbbcc1bebd991cbb7c214b661463564293e7", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fedbdf253b0000000c009900060000005f00000008005700ffffffff5100330020940200080211000000ffffffffffff08021100000009000c00cc401210070008021100000000060202020202020101122d1a0003000100010000000000030059001a000000080000080000030000000400870008005700e207000004008700"], 0x8c}, 0x1, 0x0, 0x0, 0x24011}, 0x404c000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000280)={0x4, [0x6, 0xf21c, 0x6, 0x9]}, &(0x7f00000002c0)=0xc) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080000040000000000000b0000000c009900040000000a00000004000b000a000600ffffffffffff0000"], 0x30}}, 0x0) syz_emit_ethernet(0x1aa, &(0x7f0000000cc0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa008100000086dd602e5cea01703c0020010000000000000000000000000002ff0200000000000000000000000000012b0a0101"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r3, 0x114, 0x5, &(0x7f0000000100), 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 257.403835ms ago: executing program 1 (id=2615): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r2, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0x3, @loopback, 0x8}, 0x1c) r3 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYBLOB="00000000000000001c00128009000100766c616e", @ANYRES32, @ANYBLOB='\b\x00?'], 0x4c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x20044890) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd8, 0xd8, 0x3, [@union={0xe, 0x5, 0x0, 0x5, 0x0, 0xf, [{0xc, 0x2, 0x3}, {0xa, 0x0, 0x4}, {0xf, 0x0, 0x1}, {0x7, 0x3, 0xd5}, {0xc, 0x5, 0x1}]}, @var={0xf, 0x0, 0x0, 0xe, 0x3, 0x2}, @var={0x1, 0x0, 0x0, 0xe, 0x3, 0x3}, @typedef={0xd, 0x0, 0x0, 0x8, 0x5}, @volatile={0xb, 0x0, 0x0, 0x9, 0x3}, @const={0x5}, @enum={0x9, 0x5, 0x0, 0x6, 0x4, [{0x3, 0x9}, {0xc}, {0x5, 0xfffffff9}, {0x8, 0x9}, {0xb, 0xfff}]}, @typedef={0xa, 0x0, 0x0, 0x8, 0x4}, @const={0x5, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x30]}}, &(0x7f0000000200)=""/35, 0xf3, 0x23, 0x1, 0x4, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000080000001800000005000000000000000500000077cb0400010000003c38100000000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000006d5050300b70500000800020000000000000000001801000020206925002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000095000000"], &(0x7f0000000180)='GPL\x00', 0x80000000, 0x87, &(0x7f00000003c0)=""/135, 0x40f00, 0x72, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000005c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0xc, 0x400, 0x4}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000640)=[{0x1, 0x4, 0xe, 0xc}], 0x10, 0x9}, 0x94) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f00000000c0)=@abs={0x1}, 0x6e) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r9, &(0x7f0000000340)=ANY=[@ANYBLOB="08000002"], 0xdc) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}, 0x1}}, 0x10, 0x0}, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000110f0000000000dcdf2500000000", @ANYRES32=0x0, @ANYBLOB="04010000000000002400128009000100766c616e000000001400028006000100000000000600050088a8000008000500", @ANYRES32=r12, @ANYBLOB="08001f00", @ANYRES32=r12], 0x54}}, 0x0) 203.719962ms ago: executing program 4 (id=2616): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x16, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0xf1, &(0x7f00000001c0)=""/241, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x6, 0x1d, 0x5}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000340)=[{0x5, 0x1, 0xc, 0xc}, {0x5, 0x4, 0x10, 0x7}, {0x1, 0x3, 0x8, 0x3}, {0x3, 0x5, 0x7}, {0x5, 0x0, 0x3, 0x7}, {0x1, 0x1, 0x10}, {0x3, 0x7, 0x5, 0x3}, {0x2, 0x2, 0xb, 0x6}, {0x4, 0x3, 0x7, 0x4}, {0x5, 0x2, 0x1, 0x6}]}, 0x94) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0x32}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x31, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0xfa665a81a6d02b4d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x0, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000500)=0x9, 0x4) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)={@cgroup=r6, r6, 0x2f, 0x20, 0x4}, 0x20) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 0s ago: executing program 3 (id=2617): r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10060, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010022"], 0x1c}}, 0x0) (async) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), r2) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 282.648725][ T8854] netlink: 'syz.3.766': attribute type 16 has an invalid length. [ 282.660771][ T8843] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 282.667230][ T8854] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.766'. [ 282.676910][ T8843] Node 0 DMA32 free:1051964kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17740kB inactive_anon:0kB active_file:6112kB inactive_file:157512kB unevictable:1572kB writepending:456kB present:3129332kB managed:2560292kB mlocked:36kB bounce:0kB free_pcp:42172kB local_pcp:21552kB free_cma:0kB [ 282.692095][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.765'. [ 282.720720][ T8855] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 282.731933][ T8855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.767634][ T8843] lowmem_reserve[]: 0 0 1 1 1 [ 282.772429][ T8843] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 282.803029][ T8858] netlink: 24 bytes leftover after parsing attributes in process `syz.1.767'. [ 282.874858][ T8843] lowmem_reserve[]: 0 0 0 0 0 [ 282.879757][ T8843] Node 1 Normal free:3898752kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20448kB local_pcp:11552kB free_cma:0kB [ 282.947130][ T8843] lowmem_reserve[]: 0 0 0 0 0 [ 282.964022][ T8843] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 282.964381][ T8868] syzkaller1: entered promiscuous mode [ 282.977527][ T8843] Node 0 DMA32: 1767*4kB (UME) 461*8kB (UME) 288*16kB (UME) 1540*32kB (UM) 725*64kB (UM) 76*128kB (UME) 75*256kB (UME) 21*512kB (UM) 18*1024kB (UM) 13*2048kB (UM) 209*4096kB (M) = 1051844kB [ 283.007266][ T8868] syzkaller1: entered allmulticast mode [ 283.022054][ T8843] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 283.034293][ T8843] Node 1 Normal: 224*4kB (UME) 56*8kB (UME) 40*16kB (UME) 100*32kB (UME) 33*64kB (UME) 4*128kB (UME) 3*256kB (UM) 4*512kB (UME) 1*1024kB (M) 0*2048kB 949*4096kB (M) = 3898752kB [ 283.066891][ T8843] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.110631][ T8843] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 283.121631][ T8843] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.139142][ T8843] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 283.152174][ T8843] 42775 total pagecache pages [ 283.153186][ T8876] netlink: 'syz.2.773': attribute type 10 has an invalid length. [ 283.159455][ T8843] 0 pages in swap cache [ 283.173603][ T8843] Free swap = 124996kB [ 283.180907][ T8843] Total swap = 124996kB [ 283.190041][ T8843] 2097051 pages RAM [ 283.206233][ T8843] 0 pages HighMem/MovableOnly [ 283.211537][ T8843] 424872 pages reserved [ 283.216493][ T8843] 0 pages cma reserved [ 283.232760][ T8874] netlink: 108 bytes leftover after parsing attributes in process `syz.3.772'. [ 283.234033][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.772'. [ 283.258781][ T8873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.772'. [ 283.284134][ T8876] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 283.300726][ T8879] bond0: (slave bond_slave_0): Releasing backup interface [ 283.310705][ T8879] bond0: (slave bond_slave_1): Releasing backup interface [ 283.320657][ T8879] team_slave_0: left promiscuous mode [ 283.336820][ T8879] team0: Port device team_slave_0 removed [ 283.343483][ T8879] team_slave_1: left promiscuous mode [ 283.352274][ T8879] team0: Port device team_slave_1 removed [ 283.358702][ T8879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.368671][ T8879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.393098][ T8879] bond0: (slave wlan1): Releasing backup interface [ 283.423468][ T8879] bond2: (slave veth3): Releasing active interface [ 283.488185][ T8893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.777'. [ 283.512879][ T8893] netlink: 36 bytes leftover after parsing attributes in process `syz.1.777'. [ 283.965932][ T8920] netlink: 224 bytes leftover after parsing attributes in process `syz.0.787'. [ 284.154061][ T8927] sctp: [Deprecated]: syz.2.789 (pid 8927) Use of int in max_burst socket option. [ 284.154061][ T8927] Use struct sctp_assoc_value instead [ 284.203160][ T8929] netlink: 'syz.0.791': attribute type 4 has an invalid length. [ 284.208394][ T8927] dvmrp0: entered allmulticast mode [ 286.108318][ T8951] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.200180][ T8963] lo speed is unknown, defaulting to 1000 [ 286.303687][ T8985] __nla_validate_parse: 3 callbacks suppressed [ 286.303710][ T8985] netlink: 20 bytes leftover after parsing attributes in process `syz.2.806'. [ 286.340612][ T8951] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.578411][ T8951] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.716208][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.810'. [ 286.729965][ T8951] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.028347][ T7830] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.103749][ T7830] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.152733][ T9012] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 287.314967][ T7840] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.394612][ T1027] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.573390][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.817'. [ 287.624993][ T9029] netlink: 32 bytes leftover after parsing attributes in process `syz.2.817'. [ 287.886709][ T9041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.820'. [ 287.921209][ T9047] netlink: 16 bytes leftover after parsing attributes in process `syz.2.821'. [ 287.970217][ T9047] netlink: 108 bytes leftover after parsing attributes in process `syz.2.821'. [ 288.031334][ T9047] netlink: 16 bytes leftover after parsing attributes in process `syz.2.821'. [ 288.517058][ T9076] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 288.524534][ T9076] IPv6: NLM_F_CREATE should be set when creating new route [ 288.531962][ T9076] IPv6: NLM_F_CREATE should be set when creating new route [ 288.603682][ T9082] netlink: 56 bytes leftover after parsing attributes in process `syz.4.832'. [ 288.627379][ T9082] netlink: 24 bytes leftover after parsing attributes in process `syz.4.832'. [ 288.973487][ T9098] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 289.086449][ T9100] syzkaller1: entered allmulticast mode [ 289.265311][ T9111] netlink: zone id is out of range [ 289.282620][ T9111] netlink: zone id is out of range [ 289.309435][ T9111] netlink: zone id is out of range [ 289.328090][ T9111] netlink: zone id is out of range [ 289.348667][ T9111] netlink: zone id is out of range [ 289.367630][ T9111] netlink: zone id is out of range [ 289.404899][ T9111] netlink: get zone limit has 8 unknown bytes [ 290.524320][ T9173] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 290.556984][ T9173] syzkaller0: entered promiscuous mode [ 290.562512][ T9173] syzkaller0: entered allmulticast mode [ 290.598904][ T9172] netlink: 'syz.1.860': attribute type 1 has an invalid length. [ 291.196765][ T9189] netlink: 'syz.2.866': attribute type 4 has an invalid length. [ 291.521383][ T9208] __nla_validate_parse: 6 callbacks suppressed [ 291.521402][ T9208] netlink: 96 bytes leftover after parsing attributes in process `syz.2.871'. [ 291.575281][ T9217] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 291.956406][ T9230] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.031549][ T9230] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.165166][ T9246] netlink: 28 bytes leftover after parsing attributes in process `syz.2.881'. [ 292.196906][ T9246] netlink: 28 bytes leftover after parsing attributes in process `syz.2.881'. [ 292.220661][ T9230] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.238477][ T9230] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.254277][ T9249] netlink: 28 bytes leftover after parsing attributes in process `syz.2.881'. [ 292.264933][ T9249] netlink: 28 bytes leftover after parsing attributes in process `syz.2.881'. [ 292.446325][ T9230] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.498134][ T9230] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.677300][ T9230] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.711984][ T9230] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.809292][ T9244] sock: sock_timestamping_bind_phc: sock not bind to device [ 292.813604][ T9262] lo speed is unknown, defaulting to 1000 [ 293.092319][ T1027] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.121062][ T1027] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.177967][ T7830] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.199225][ T7830] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.307492][ T1027] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.347785][ T1027] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.402029][ T7830] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.435437][ T7830] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.557522][ T9283] syzkaller0: entered allmulticast mode [ 293.613329][ T9294] netlink: 132 bytes leftover after parsing attributes in process `syz.0.892'. [ 293.711018][ T9294] tipc: New replicast peer: 255.255.255.255 [ 293.718696][ T9294] tipc: Enabled bearer , priority 10 [ 294.239941][ T9313] tipc: Started in network mode [ 294.250016][ T9313] tipc: Node identity 32e592993cef, cluster identity 4711 [ 294.259097][ T9313] tipc: Enabled bearer , priority 0 [ 294.273851][ T9313] syzkaller0: entered promiscuous mode [ 294.283483][ T9313] syzkaller0: entered allmulticast mode [ 294.330985][ T9313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.900'. [ 294.440584][ T9316] netlink: 'syz.0.899': attribute type 1 has an invalid length. [ 294.476681][ T9316] netlink: 224 bytes leftover after parsing attributes in process `syz.0.899'. [ 294.641328][ T9325] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.899'. [ 294.710549][ T9326] netlink: 28 bytes leftover after parsing attributes in process `syz.2.902'. [ 295.040832][ T9312] tipc: Resetting bearer [ 295.070834][ T9312] tipc: Disabling bearer [ 296.440446][ T9378] netlink: 'syz.4.913': attribute type 13 has an invalid length. [ 296.461973][ T9378] netlink: 'syz.4.913': attribute type 17 has an invalid length. [ 296.520894][ T9378] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.561083][ T9378] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 296.937124][ T9391] __nla_validate_parse: 3 callbacks suppressed [ 296.937148][ T9391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.919'. [ 296.992918][ T9391] pim6reg: entered allmulticast mode [ 297.107983][ T9406] netlink: 32 bytes leftover after parsing attributes in process `syz.2.922'. [ 297.819878][ T9452] syzkaller0: entered promiscuous mode [ 297.825984][ T9452] syzkaller0: entered allmulticast mode [ 298.499995][ T9485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.941'. [ 298.993690][ T9513] bond0 (unregistering): Released all slaves [ 299.421003][ T9535] netlink: 201916 bytes leftover after parsing attributes in process `syz.4.954'. [ 299.441276][ T9539] netlink: 16 bytes leftover after parsing attributes in process `syz.2.953'. [ 299.638765][ T9548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.957'. [ 299.675614][ T9548] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.731138][ T9548] lo speed is unknown, defaulting to 1000 [ 299.756302][ T9548] lo speed is unknown, defaulting to 1000 [ 299.767612][ T9548] lo speed is unknown, defaulting to 1000 [ 299.783182][ T9548] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 299.870170][ T9548] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 299.897639][ T9561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.959'. [ 299.943466][ T9557] lo speed is unknown, defaulting to 1000 [ 300.060018][ T9548] lo speed is unknown, defaulting to 1000 [ 300.072306][ T9548] lo speed is unknown, defaulting to 1000 [ 300.097375][ T9548] lo speed is unknown, defaulting to 1000 [ 300.106691][ T9548] lo speed is unknown, defaulting to 1000 [ 300.124556][ T9548] lo speed is unknown, defaulting to 1000 [ 300.135684][ T9548] lo speed is unknown, defaulting to 1000 [ 300.151287][ T9548] lo speed is unknown, defaulting to 1000 [ 300.155304][ T9571] nbd: must specify a size in bytes for the device [ 300.492749][ T9583] veth1_to_team: entered allmulticast mode [ 300.508246][ T9583] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 300.879407][ T9554] lo speed is unknown, defaulting to 1000 [ 301.656267][ T9631] lo speed is unknown, defaulting to 1000 [ 301.975591][ T5850] Bluetooth: hci4: command 0x0405 tx timeout [ 301.983498][ T9586] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 302.370544][ T9631] lo speed is unknown, defaulting to 1000 [ 303.132604][ T9677] netlink: 132 bytes leftover after parsing attributes in process `syz.0.989'. [ 303.650201][ T9679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.688825][ T9684] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.992'. [ 303.738155][ T9684] netlink: 308 bytes leftover after parsing attributes in process `syz.4.992'. [ 303.815294][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.992'. [ 303.907926][ T9684] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 303.960769][ T9692] netlink: 'syz.3.991': attribute type 8 has an invalid length. [ 304.066762][ T5844] Bluetooth: hci4: command 0x0405 tx timeout [ 304.298160][ T9709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.997'. [ 304.300448][ T9704] lo speed is unknown, defaulting to 1000 [ 304.525510][ T9717] netlink: 'syz.1.1000': attribute type 10 has an invalid length. [ 304.553420][ T9717] team0: Port device dummy0 added [ 304.832068][ T9721] syzkaller1: entered promiscuous mode [ 304.854514][ T9721] syzkaller1: entered allmulticast mode [ 304.883680][ T9728] 8021q: VLANs not supported on ipvlan1 [ 305.052501][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1004'. [ 305.127206][ T9737] sctp: [Deprecated]: syz.4.1005 (pid 9737) Use of int in max_burst socket option. [ 305.127206][ T9737] Use struct sctp_assoc_value instead [ 305.154168][ T9723] lo speed is unknown, defaulting to 1000 [ 305.154228][ T9704] lo speed is unknown, defaulting to 1000 [ 305.324817][ T9736] veth1_macvtap: left promiscuous mode [ 305.330691][ T9736] macsec0: entered promiscuous mode [ 305.458914][ T9748] netlink: 'syz.1.1008': attribute type 10 has an invalid length. [ 305.493865][ T9749] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1008'. [ 305.548724][ T9751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.584218][ T9751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.596569][ T9747] netlink: 'syz.4.1007': attribute type 12 has an invalid length. [ 305.604427][ T9747] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1007'. [ 305.627237][ T9757] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1010'. [ 305.654651][ T9759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.741773][ T9723] lo speed is unknown, defaulting to 1000 [ 306.403582][ T9765] tipc: Enabled bearer , priority 0 [ 306.411717][ T9765] syzkaller0: entered promiscuous mode [ 306.419417][ T9765] syzkaller0: entered allmulticast mode [ 306.476024][ T9765] tipc: Resetting bearer [ 307.092008][ T9795] macvtap0: entered allmulticast mode [ 307.098184][ T9795] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 307.218954][ T9764] tipc: Resetting bearer [ 307.240415][ T9764] tipc: Disabling bearer [ 307.267255][ T9802] lo speed is unknown, defaulting to 1000 [ 307.297639][ T9803] veth1_to_bond: entered allmulticast mode [ 307.318252][ T9803] bond_slave_1: entered promiscuous mode [ 307.418230][ T9805] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1025'. [ 307.774562][ T9820] batadv_slave_0: entered promiscuous mode [ 307.817142][ T9820] batadv_slave_0: left promiscuous mode [ 308.004517][ T9824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.108928][ T9829] bridge_slave_0: default FDB implementation only supports local addresses [ 308.297248][ T9802] lo speed is unknown, defaulting to 1000 [ 308.317236][ T9837] syzkaller0: entered promiscuous mode [ 308.333379][ T9837] syzkaller0: entered allmulticast mode [ 308.496679][ T9848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.518282][ T9842] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 308.672560][ T9844] lo speed is unknown, defaulting to 1000 [ 309.223609][ T9844] lo speed is unknown, defaulting to 1000 [ 309.240769][ T9845] lo speed is unknown, defaulting to 1000 [ 309.338453][ T9867] __nla_validate_parse: 1 callbacks suppressed [ 309.338474][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1038'. [ 309.677375][ T9801] bond_slave_1: left promiscuous mode [ 309.693996][ T9801] veth1_to_bond: left allmulticast mode [ 310.071752][ T9854] lo speed is unknown, defaulting to 1000 [ 310.121406][ T9875] FAULT_INJECTION: forcing a failure. [ 310.121406][ T9875] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 310.135650][ T9875] CPU: 0 UID: 0 PID: 9875 Comm: syz.2.1040 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 310.135678][ T9875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 310.135689][ T9875] Call Trace: [ 310.135698][ T9875] [ 310.135706][ T9875] dump_stack_lvl+0x189/0x250 [ 310.135733][ T9875] ? __pfx____ratelimit+0x10/0x10 [ 310.135762][ T9875] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.135783][ T9875] ? __pfx__printk+0x10/0x10 [ 310.135823][ T9875] should_fail_ex+0x414/0x560 [ 310.135859][ T9875] _copy_to_user+0x31/0xb0 [ 310.135889][ T9875] simple_read_from_buffer+0xe1/0x170 [ 310.135925][ T9875] proc_fail_nth_read+0x1b3/0x220 [ 310.135952][ T9875] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 310.135979][ T9875] ? rw_verify_area+0x258/0x650 [ 310.136005][ T9875] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 310.136030][ T9875] vfs_read+0x1fd/0x980 [ 310.136056][ T9875] ? fdget_pos+0x247/0x320 [ 310.136081][ T9875] ? __pfx___mutex_lock+0x10/0x10 [ 310.136110][ T9875] ? __pfx_vfs_read+0x10/0x10 [ 310.136140][ T9875] ? __fget_files+0x2a/0x420 [ 310.136165][ T9875] ? __fget_files+0x3a0/0x420 [ 310.136182][ T9875] ? __fget_files+0x2a/0x420 [ 310.136213][ T9875] ksys_read+0x145/0x250 [ 310.136243][ T9875] ? __pfx_ksys_read+0x10/0x10 [ 310.136267][ T9875] ? rcu_is_watching+0x15/0xb0 [ 310.136303][ T9875] ? do_syscall_64+0xbe/0x3b0 [ 310.136336][ T9875] do_syscall_64+0xfa/0x3b0 [ 310.136361][ T9875] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.136387][ T9875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.136407][ T9875] ? clear_bhb_loop+0x60/0xb0 [ 310.136432][ T9875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.136450][ T9875] RIP: 0033:0x7f00c358d57c [ 310.136477][ T9875] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 310.136493][ T9875] RSP: 002b:00007f00c443d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 310.136515][ T9875] RAX: ffffffffffffffda RBX: 00007f00c37b5fa0 RCX: 00007f00c358d57c [ 310.136529][ T9875] RDX: 000000000000000f RSI: 00007f00c443d0a0 RDI: 0000000000000004 [ 310.136541][ T9875] RBP: 00007f00c443d090 R08: 0000000000000000 R09: 0000000000000000 [ 310.136552][ T9875] R10: 000000002604082c R11: 0000000000000246 R12: 0000000000000001 [ 310.136564][ T9875] R13: 0000000000000000 R14: 00007f00c37b5fa0 R15: 00007ffdad8df338 [ 310.136599][ T9875] [ 310.595382][ T9854] lo speed is unknown, defaulting to 1000 [ 310.729354][ T9845] lo speed is unknown, defaulting to 1000 [ 310.735641][ T9879] lo speed is unknown, defaulting to 1000 [ 311.462821][ T9879] lo speed is unknown, defaulting to 1000 [ 311.597856][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1043'. [ 311.621840][ T9889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1043'. [ 311.637086][ T9891] siw: device registration error -23 [ 311.778172][ T9894] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1046'. [ 311.838315][ T9895] netlink: 772 bytes leftover after parsing attributes in process `syz.4.1046'. [ 311.862177][ T9895] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1046'. [ 312.681350][ T9912] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1051'. [ 312.813558][ T9919] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1053'. [ 313.115578][ T9928] nbd3: detected capacity change from 0 to 63 [ 313.123482][ T9933] block nbd3: NBD_DISCONNECT [ 313.146438][ T9933] block nbd3: Disconnected due to user request. [ 313.164037][ T9933] block nbd3: shutting down sockets [ 313.433989][ T9947] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1061'. [ 313.826425][ T9956] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1064'. [ 313.846694][ T9949] netlink: 'syz.1.1062': attribute type 1 has an invalid length. [ 314.088087][ T9967] vlan3: entered promiscuous mode [ 314.093351][ T9967] team0: entered promiscuous mode [ 314.383942][ T9982] netlink: 'syz.0.1072': attribute type 4 has an invalid length. [ 314.401784][ T9984] netlink: 'syz.3.1073': attribute type 1 has an invalid length. [ 314.437842][ T9982] netlink: 'syz.0.1072': attribute type 4 has an invalid length. [ 314.477872][ T9984] 8021q: adding VLAN 0 to HW filter on device bond1 [ 314.491409][ T9989] netlink: 'syz.1.1074': attribute type 5 has an invalid length. [ 314.523680][ T9988] bond1: (slave geneve2): making interface the new active one [ 314.539509][ T9988] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 314.561391][ T7843] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.592893][ T7843] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.634680][ T9984] bond1: entered promiscuous mode [ 314.641772][ T9984] geneve2: entered promiscuous mode [ 314.652450][ T9995] __nla_validate_parse: 4 callbacks suppressed [ 314.652477][ T9995] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1076'. [ 314.684293][ T7843] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.733938][ T7843] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.947934][T10006] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1078'. [ 314.975868][T10006] netlink: 'syz.0.1078': attribute type 10 has an invalid length. [ 314.988170][T10010] netlink: 'syz.1.1079': attribute type 42 has an invalid length. [ 315.058586][T10006] dummy0: entered promiscuous mode [ 315.079147][T10006] dummy0: entered allmulticast mode [ 315.090280][T10006] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 315.240262][T10021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.557852][T10038] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1087'. [ 315.743893][T10038] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1087'. [ 315.845465][T10052] tipc: New replicast peer: 255.255.255.83 [ 315.852288][T10052] tipc: Enabled bearer , priority 10 [ 316.845897][ T1211] tipc: Node number set to 2400627583 [ 316.904709][T10085] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1099'. [ 316.961009][T10085] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1099'. [ 317.166777][T10093] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 317.250228][T10107] sctp: [Deprecated]: syz.4.1102 (pid 10107) Use of int in max_burst socket option. [ 317.250228][T10107] Use struct sctp_assoc_value instead [ 317.662966][T10117] veth5: entered allmulticast mode [ 317.745835][T10128] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1109'. [ 317.778143][T10134] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1110'. [ 317.831920][T10129] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 317.866302][T10134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1110'. [ 317.987535][T10143] netlink: 404 bytes leftover after parsing attributes in process `syz.4.1113'. [ 318.054379][T10142] lo speed is unknown, defaulting to 1000 [ 318.481185][T10142] lo speed is unknown, defaulting to 1000 [ 319.033824][T10182] netlink: 'syz.2.1124': attribute type 1 has an invalid length. [ 319.394569][T10190] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 319.447091][T10190] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 319.583463][T10198] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.681832][T10198] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.833241][T10198] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.924105][T10198] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.058406][T10217] __nla_validate_parse: 6 callbacks suppressed [ 320.058427][T10217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1135'. [ 320.077410][ T7819] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.127046][ T7830] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.187321][ T1027] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.227030][ T7819] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.353997][T10230] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1138'. [ 320.557841][T10252] pim6reg: entered allmulticast mode [ 320.566315][T10252] pim6reg: left allmulticast mode [ 321.560987][T10286] lo speed is unknown, defaulting to 1000 [ 321.818123][T10300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1156'. [ 321.849566][T10300] IPVS: Error joining to the multicast group [ 321.988519][T10307] netlink: 'syz.4.1160': attribute type 10 has an invalid length. [ 322.037088][T10305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.053766][T10311] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1162'. [ 322.183826][T10286] lo speed is unknown, defaulting to 1000 [ 322.345540][T10321] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1164'. [ 322.637236][T10327] tipc: Enabled bearer , priority 0 [ 322.759029][T10331] syzkaller0: entered promiscuous mode [ 322.804170][T10331] syzkaller0: entered allmulticast mode [ 322.850996][T10326] tipc: Resetting bearer [ 322.877708][T10333] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1167'. [ 322.915893][T10326] tipc: Disabling bearer [ 323.400224][T10349] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1171'. [ 323.438216][T10349] netlink: 'syz.2.1171': attribute type 7 has an invalid length. [ 323.466068][T10349] netlink: 'syz.2.1171': attribute type 8 has an invalid length. [ 323.495858][T10349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1171'. [ 323.553133][T10361] siw: device registration error -23 [ 323.607153][T10365] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1175'. [ 323.643111][T10366] netlink: 'syz.0.1173': attribute type 21 has an invalid length. [ 323.670518][T10360] lo speed is unknown, defaulting to 1000 [ 323.715842][T10366] netlink: 'syz.0.1173': attribute type 22 has an invalid length. [ 323.763826][T10366] netlink: 'syz.0.1173': attribute type 23 has an invalid length. [ 323.780360][T10366] netlink: 'syz.0.1173': attribute type 25 has an invalid length. [ 323.816430][T10366] netlink: 'syz.0.1173': attribute type 26 has an invalid length. [ 323.832546][T10366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1173'. [ 324.085851][T10376] batman_adv: batadv0: Adding interface: ip6gretap1 [ 324.284971][T10376] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.372148][T10376] batman_adv: batadv0: Interface activated: ip6gretap1 [ 324.452454][T10360] lo speed is unknown, defaulting to 1000 [ 325.353987][T10403] lo speed is unknown, defaulting to 1000 [ 325.561799][T10430] __nla_validate_parse: 1 callbacks suppressed [ 325.561821][T10430] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1188'. [ 326.149893][T10403] lo speed is unknown, defaulting to 1000 [ 326.232673][T10429] lo speed is unknown, defaulting to 1000 [ 326.313824][T10446] macsec1: entered promiscuous mode [ 326.343959][T10446] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 326.392211][T10446] macsec1: entered allmulticast mode [ 326.419059][T10446] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 326.777761][T10458] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 326.787006][T10458] bridge0: entered allmulticast mode [ 327.117294][T10476] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1200'. [ 327.118520][T10475] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1200'. [ 327.141120][T10476] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1200'. [ 327.228577][T10475] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1200'. [ 327.622476][T10429] lo speed is unknown, defaulting to 1000 [ 327.774476][T10487] netlink: 'syz.3.1202': attribute type 1 has an invalid length. [ 327.792177][T10487] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1202'. [ 327.803331][T10487] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1202'. [ 328.042923][T10497] netlink: 'syz.2.1203': attribute type 1 has an invalid length. [ 328.072098][T10496] IPVS: set_ctl: invalid protocol: 65465 104.4.38.140:39070 [ 328.420830][T10501] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 328.489551][T10497] 8021q: adding VLAN 0 to HW filter on device bond6 [ 328.516311][T10501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1205'. [ 328.623973][T10503] netlink: 'syz.4.1206': attribute type 5 has an invalid length. [ 328.632685][T10503] netlink: 'syz.4.1206': attribute type 7 has an invalid length. [ 328.687375][T10503] : entered promiscuous mode [ 328.736722][T10510] netlink: 'syz.3.1208': attribute type 1 has an invalid length. [ 328.932005][T10516] tipc: Enabled bearer , priority 14 [ 328.959458][T10516] netlink: 'syz.4.1209': attribute type 1 has an invalid length. [ 328.974870][T10516] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1209'. [ 329.119841][T10523] sctp: [Deprecated]: syz.3.1211 (pid 10523) Use of struct sctp_assoc_value in delayed_ack socket option. [ 329.119841][T10523] Use struct sctp_sack_info instead [ 329.148191][T10515] lo speed is unknown, defaulting to 1000 [ 330.045138][ T1211] tipc: Node number set to 235573913 [ 330.153825][T10515] lo speed is unknown, defaulting to 1000 [ 330.205897][T10532] lo speed is unknown, defaulting to 1000 [ 330.811268][T10578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1223'. [ 330.845557][T10584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1224'. [ 330.889327][T10578] vlan3: entered promiscuous mode [ 330.919501][T10578] team0: entered promiscuous mode [ 330.938947][T10578] team_slave_0: entered promiscuous mode [ 330.955329][T10578] team_slave_1: entered promiscuous mode [ 330.961689][T10578] v: entered promiscuous mode [ 331.134247][T10532] lo speed is unknown, defaulting to 1000 [ 331.276107][T10598] netlink: 'syz.1.1227': attribute type 13 has an invalid length. [ 331.297380][T10598] netlink: 'syz.1.1227': attribute type 17 has an invalid length. [ 331.311560][T10596] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1226'. [ 331.406623][T10601] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1226'. [ 331.422358][T10598] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 331.468134][ T1211] lo speed is unknown, defaulting to 1000 [ 331.469908][T10603] netlink: 'syz.4.1228': attribute type 6 has an invalid length. [ 331.478019][ T1211] syz2: Port: 1 Link ACTIVE [ 332.213348][T10621] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1233'. [ 332.253869][T10623] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1234'. [ 332.493920][T10623] 8021q: adding VLAN 0 to HW filter on device bond3 [ 332.511476][T10623] bond3: entered promiscuous mode [ 332.530713][T10628] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1235'. [ 332.531242][T10623] bond3: entered allmulticast mode [ 332.547125][T10623] bond0: (slave bond3): Enslaving as an active interface with an up link [ 332.883252][T10650] gtp0: entered promiscuous mode [ 333.067166][T10658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1243'. [ 333.084065][T10658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1243'. [ 333.125619][T10658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1243'. [ 333.741175][T10676] syzkaller0: entered promiscuous mode [ 333.767642][T10676] syzkaller0: entered allmulticast mode [ 333.927650][T10682] lo speed is unknown, defaulting to 1000 [ 334.573335][T10682] lo speed is unknown, defaulting to 1000 [ 335.874629][T10719] sctp: [Deprecated]: syz.2.1260 (pid 10719) Use of struct sctp_assoc_value in delayed_ack socket option. [ 335.874629][T10719] Use struct sctp_sack_info instead [ 335.964144][ T30] audit: type=1800 audit(1754199494.737:3): pid=10721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1261" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=1263 res=0 errno=0 [ 337.282349][T10709] veth1_to_team: mtu less than device minimum [ 337.299241][T10713] __nla_validate_parse: 2 callbacks suppressed [ 337.299262][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1258'. [ 337.322146][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1258'. [ 337.336057][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1258'. [ 337.365241][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1258'. [ 337.374372][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1258'. [ 337.394148][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1258'. [ 337.415526][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1258'. [ 337.433234][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1258'. [ 337.442913][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1258'. [ 337.452021][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1258'. [ 337.510450][T10721] pimreg: entered allmulticast mode [ 338.180281][T10737] netlink: 'syz.2.1268': attribute type 4 has an invalid length. [ 339.103152][T10778] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 339.116650][T10781] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.219991][T10781] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.325195][T10781] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.387354][T10781] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.496656][ T7831] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.578754][ T7815] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.592276][ T7815] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.601395][ T7815] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.741691][T10840] lo speed is unknown, defaulting to 1000 [ 341.608542][T10840] lo speed is unknown, defaulting to 1000 [ 341.705315][T10873] pimreg3: entered allmulticast mode [ 342.313573][T10896] __nla_validate_parse: 47 callbacks suppressed [ 342.313594][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1315'. [ 342.357697][T10898] netlink: 'syz.4.1316': attribute type 1 has an invalid length. [ 342.404201][T10899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1315'. [ 342.626564][T10898] bond5: entered promiscuous mode [ 342.632238][T10898] 8021q: adding VLAN 0 to HW filter on device bond5 [ 342.640779][T10884] lo speed is unknown, defaulting to 1000 [ 342.880853][T10903] bond4: entered promiscuous mode [ 342.953874][T10884] lo speed is unknown, defaulting to 1000 [ 343.271234][T10928] netlink: 'syz.2.1324': attribute type 1 has an invalid length. [ 343.330450][T10928] bond7: entered promiscuous mode [ 343.335674][T10928] bond7: entered allmulticast mode [ 343.341289][T10928] 8021q: adding VLAN 0 to HW filter on device bond7 [ 343.368688][T10928] ip6gretap3: entered promiscuous mode [ 343.388315][T10928] ip6gretap3: entered allmulticast mode [ 343.395246][T10928] bond7: (slave ip6gretap3): Enslaving as a backup interface with an up link [ 343.449863][ T7830] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 343.596007][ T7830] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 343.659650][T10940] netlink: 'syz.3.1326': attribute type 9 has an invalid length. [ 343.669421][T10942] dvmrp1: entered allmulticast mode [ 343.678200][T10940] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1326'. [ 343.862836][T10940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1326'. [ 344.017712][T10953] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1331'. [ 344.047703][T10953] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1331'. [ 344.066441][T10953] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1331'. [ 344.081242][T10953] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 344.123667][T10952] lo speed is unknown, defaulting to 1000 [ 344.163477][T10958] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1333'. [ 344.539033][T10980] v: left promiscuous mode [ 344.572807][T10980] team0: Port device v removed [ 344.598661][T10980] bridge_slave_0: left allmulticast mode [ 344.601240][T10966] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1334'. [ 344.604618][T10980] bridge_slave_0: left promiscuous mode [ 344.621595][T10980] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.639305][T10980] bridge_slave_1: left allmulticast mode [ 344.650253][T10986] netlink: 'syz.3.1339': attribute type 13 has an invalid length. [ 344.659009][T10986] netlink: 'syz.3.1339': attribute type 17 has an invalid length. [ 344.667550][T10980] bridge_slave_1: left promiscuous mode [ 344.673980][T10980] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.696002][T10987] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1340'. [ 344.703988][T10980] veth0_to_bond: left allmulticast mode [ 344.714614][T10980] veth0_to_bond: left promiscuous mode [ 344.728907][T10980] bridge4: port 2(veth0_to_bond) entered disabled state [ 344.747307][T10980] team_slave_0: left promiscuous mode [ 344.777449][T10980] team0: Port device team_slave_0 removed [ 344.798321][T10980] team_slave_1: left promiscuous mode [ 344.811143][T10980] team0: Port device team_slave_1 removed [ 344.827162][T10980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.843726][T10980] veth3: left allmulticast mode [ 344.850060][T10980] veth3: left promiscuous mode [ 344.856031][T10980] bridge4: port 1(veth3) entered disabled state [ 344.868612][T10980] vlan2: left promiscuous mode [ 344.873396][T10980] veth1: left promiscuous mode [ 344.879395][T10980] bridge4: port 3(vlan2) entered disabled state [ 344.939078][T10986] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.966136][T10986] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 345.010534][T10952] lo speed is unknown, defaulting to 1000 [ 345.106728][T10993] tipc: Enabling of bearer rejected, failed to enable media [ 345.785082][T11015] netlink: 'syz.2.1347': attribute type 1 has an invalid length. [ 345.883989][T11022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.987553][T11082] netlink: 'syz.2.1365': attribute type 1 has an invalid length. [ 347.396939][T11103] vlan2: entered promiscuous mode [ 347.408451][T11103] gretap0: entered promiscuous mode [ 347.551831][T11114] netlink: 'syz.2.1374': attribute type 3 has an invalid length. [ 347.577144][T11114] netlink: 'syz.2.1374': attribute type 3 has an invalid length. [ 347.602119][T11115] tipc: Enabled bearer , priority 0 [ 347.616189][T11115] syzkaller0: entered promiscuous mode [ 347.621698][T11115] syzkaller0: entered allmulticast mode [ 347.704229][T11119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.727791][T11121] tipc: Resetting bearer [ 347.807846][T11113] tipc: Resetting bearer [ 347.864615][T11113] tipc: Disabling bearer [ 348.068169][T11127] __nla_validate_parse: 6 callbacks suppressed [ 348.068193][T11127] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1380'. [ 348.187685][T11132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1378'. [ 348.412271][T11147] syzkaller0: entered promiscuous mode [ 348.429271][T11147] syzkaller0: entered allmulticast mode [ 348.440082][T11145] tipc: Enabled bearer , priority 0 [ 348.550643][T11145] tipc: Resetting bearer [ 348.587663][T11145] tipc: Disabling bearer [ 348.827395][T11160] netlink: 'syz.1.1387': attribute type 4 has an invalid length. [ 348.845748][T11160] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1387'. [ 349.853708][T11204] IPVS: Scheduler module ip_vs_sip not found [ 350.462679][T11216] lo speed is unknown, defaulting to 1000 [ 350.803427][T11216] lo speed is unknown, defaulting to 1000 [ 351.172665][T11229] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 351.450326][T11243] netlink: 'syz.2.1413': attribute type 4 has an invalid length. [ 351.652068][T11243] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1413'. [ 351.669112][T11243] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1413'. [ 351.751987][T11245] lo speed is unknown, defaulting to 1000 [ 352.013138][T11245] lo speed is unknown, defaulting to 1000 [ 352.298124][T11270] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1421'. [ 352.396385][T11274] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (7) [ 353.179653][ T5850] Bluetooth: hci0: command tx timeout [ 353.507430][T11334] netlink: zone id is out of range [ 353.509611][T11338] lo speed is unknown, defaulting to 1000 [ 353.512713][T11334] netlink: zone id is out of range [ 353.541968][T11334] netlink: zone id is out of range [ 353.605702][T11334] netlink: zone id is out of range [ 353.611028][T11334] netlink: zone id is out of range [ 353.616332][T11334] netlink: zone id is out of range [ 353.621528][T11334] netlink: zone id is out of range [ 353.629838][T11334] netlink: zone id is out of range [ 353.635125][T11334] netlink: zone id is out of range [ 353.640349][T11334] netlink: zone id is out of range [ 353.781404][T11350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1442'. [ 353.891282][T11350] batadv0: entered promiscuous mode [ 353.914082][T11350] hsr1: entered allmulticast mode [ 353.915994][T11355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1444'. [ 353.929195][T11350] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 353.965376][T11350] batadv0: left promiscuous mode [ 354.079622][T11338] lo speed is unknown, defaulting to 1000 [ 354.086232][T11361] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1445'. [ 354.106099][T11362] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1445'. [ 354.121404][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1444'. [ 354.131591][T11358] netlink: 15 bytes leftover after parsing attributes in process `syz.3.1444'. [ 354.392675][T11377] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 354.489301][T11377] netlink: 'syz.3.1448': attribute type 10 has an invalid length. [ 354.522793][T11379] bond1: (slave geneve2): Releasing active interface [ 354.535365][T11379] geneve2: left promiscuous mode [ 354.646157][T11377] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 354.671841][ T7826] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.732189][ T7826] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.814818][ T7826] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.840231][ T7826] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.880097][T11396] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 354.911952][T11382] lo speed is unknown, defaulting to 1000 [ 355.114976][T11404] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 355.583205][T11419] ip6gre1: entered allmulticast mode [ 355.820982][T11382] lo speed is unknown, defaulting to 1000 [ 356.361469][T11453] tipc: Enabled bearer , priority 0 [ 356.394423][T11453] syzkaller0: entered promiscuous mode [ 356.402119][T11453] syzkaller0: entered allmulticast mode [ 356.468640][T11453] tipc: Resetting bearer [ 356.500167][T11453] netlink: 'syz.1.1468': attribute type 4 has an invalid length. [ 356.539160][T11453] netlink: 'syz.1.1468': attribute type 4 has an invalid length. [ 356.559808][ T5911] lo speed is unknown, defaulting to 1000 [ 356.581773][ T5911] lo speed is unknown, defaulting to 1000 [ 356.595360][T11452] tipc: Resetting bearer [ 356.666033][T11452] tipc: Disabling bearer [ 356.842444][T11465] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1473'. [ 356.860272][T11465] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1473'. [ 356.972092][T11471] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1475'. [ 357.213931][T11478] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1478'. [ 358.055976][ T7818] wlan1: Trigger new scan to find an IBSS to join [ 358.156668][T11533] netlink: 'syz.3.1495': attribute type 1 has an invalid length. [ 358.242534][T11536] netlink: 'syz.3.1495': attribute type 1 has an invalid length. [ 358.563353][T11539] tipc: Disabling bearer [ 358.698715][T11539] veth1_vlan (unregistering): left allmulticast mode [ 358.746307][T11539] macvlan0 (unregistering): left promiscuous mode [ 358.762668][T11539] team0: Port device macvlan0 removed [ 358.793433][T11549] net_ratelimit: 98 callbacks suppressed [ 358.793455][T11549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.861956][T11531] delete_channel: no stack [ 358.887386][T11551] __nla_validate_parse: 30 callbacks suppressed [ 358.887406][T11551] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1498'. [ 359.013616][T11557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1500'. [ 359.039445][T11558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1500'. [ 359.081470][T11557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1500'. [ 359.176972][T11560] block nbd0: server does not support multiple connections per device. [ 359.193715][T11560] block nbd0: shutting down sockets [ 359.269818][T11566] macsec1: entered allmulticast mode [ 359.284657][T11566] ip6gretap0: entered allmulticast mode [ 359.321712][T11571] netlink: 'syz.0.1502': attribute type 7 has an invalid length. [ 359.325538][T11566] ip6gretap0: left allmulticast mode [ 359.727820][T11571] : entered promiscuous mode [ 359.735850][T11575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1506'. [ 359.757615][T11575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1506'. [ 359.957002][T11584] vxcan3: entered allmulticast mode [ 360.290074][T11604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.339741][T11606] batman_adv: batadv0: Adding interface: ip6gretap1 [ 360.346661][T11606] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.373063][T11606] batman_adv: batadv0: Interface activated: ip6gretap1 [ 360.461606][T11614] netlink: 'syz.1.1518': attribute type 9 has an invalid length. [ 360.470031][T11614] netlink: 'syz.1.1518': attribute type 6 has an invalid length. [ 360.709756][T11622] dvmrp0: left allmulticast mode [ 360.715444][T11622] dvmrp1: left allmulticast mode [ 360.720696][T11622] pimreg: left allmulticast mode [ 361.078225][T11637] tipc: Enabled bearer , priority 0 [ 361.096316][ T7834] wlan1: Trigger new scan to find an IBSS to join [ 361.109544][T11637] syzkaller0: entered promiscuous mode [ 361.126939][T11637] syzkaller0: entered allmulticast mode [ 361.167590][T11637] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1525'. [ 361.256839][T11644] netlink: 'syz.2.1528': attribute type 7 has an invalid length. [ 361.272266][T11637] tipc: Resetting bearer [ 361.328016][T11648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1529'. [ 361.357943][T11635] tipc: Resetting bearer [ 361.377246][T11651] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1530'. [ 361.536963][T11657] openvswitch: netlink: IP tunnel dst address not specified [ 361.549282][T11657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1532'. [ 361.566745][T11635] tipc: Disabling bearer [ 362.003995][T11679] netlink: 'syz.0.1537': attribute type 1 has an invalid length. [ 362.029479][T11682] netlink: 'syz.3.1538': attribute type 4 has an invalid length. [ 362.680055][T11696] veth1_virt_wifi: mtu less than device minimum [ 363.295912][T11740] IPv6: Can't replace route, no match found [ 363.426869][T11739] lo speed is unknown, defaulting to 1000 [ 363.436674][T11743] netlink: 'syz.4.1553': attribute type 8 has an invalid length. [ 363.444682][T11744] netlink: 'syz.4.1553': attribute type 8 has an invalid length. [ 363.924421][T11765] __nla_validate_parse: 10 callbacks suppressed [ 363.924445][T11765] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1557'. [ 364.011887][T11739] lo speed is unknown, defaulting to 1000 [ 364.022568][T11731] lo speed is unknown, defaulting to 1000 [ 364.056342][ T7818] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.637527][T11784] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1563'. [ 364.810413][T11789] netlink: 'syz.0.1565': attribute type 1 has an invalid length. [ 364.886301][T11791] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1564'. [ 364.908669][T11731] lo speed is unknown, defaulting to 1000 [ 364.940691][T11791] netlink: 'syz.3.1564': attribute type 7 has an invalid length. [ 364.991053][T11791] netlink: 'syz.3.1564': attribute type 8 has an invalid length. [ 365.009551][T11791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1564'. [ 365.531274][T11805] lo speed is unknown, defaulting to 1000 [ 366.063269][T11812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1571'. [ 366.440617][T11805] lo speed is unknown, defaulting to 1000 [ 366.832298][T11839] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1576'. [ 367.062103][T11847] netlink: 'syz.3.1578': attribute type 12 has an invalid length. [ 367.070057][T11847] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.1578'. [ 367.195017][T11837] lo speed is unknown, defaulting to 1000 [ 367.547475][T11860] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1582'. [ 368.092840][T11873] netlink: 'syz.4.1587': attribute type 11 has an invalid length. [ 368.106035][T11837] lo speed is unknown, defaulting to 1000 [ 368.112793][T11875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1586'. [ 368.125239][T11873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1587'. [ 368.656049][T11887] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 368.676745][T11892] macvlan4: entered promiscuous mode [ 368.682236][T11892] macvlan4: entered allmulticast mode [ 368.688753][T11892] bond8: entered promiscuous mode [ 368.704942][T11892] bridge4: entered promiscuous mode [ 368.726173][T11892] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 368.749574][T11892] bond8: left promiscuous mode [ 368.760171][T11892] bridge4: left promiscuous mode [ 369.210660][T11905] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 369.232829][T11905] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 369.413939][T11908] netlink: 'syz.1.1596': attribute type 1 has an invalid length. [ 369.971444][T11932] Unsupported ieee802154 address type: 0 [ 370.006473][T11934] __nla_validate_parse: 1 callbacks suppressed [ 370.006492][T11934] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1602'. [ 370.024565][T11935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1604'. [ 370.048975][T11932] lo speed is unknown, defaulting to 1000 [ 370.061717][T11940] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1605'. [ 370.079202][T11940] openvswitch: netlink: Flow key attr not present in new flow. [ 370.218556][T11945] tipc: MTU too low for tipc bearer [ 370.229835][T11945] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1606'. [ 370.254285][T11945] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1606'. [ 370.411263][T11945] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1606'. [ 370.469222][T11932] lo speed is unknown, defaulting to 1000 [ 370.546347][T11941] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1603'. [ 370.769673][T11953] Bluetooth: MGMT ver 1.23 [ 370.916442][T11950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1608'. [ 371.184919][T11964] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1611'. [ 371.240794][T11967] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1613'. [ 371.250859][T11964] netlink: 'syz.0.1611': attribute type 1 has an invalid length. [ 371.309694][T11964] netlink: 'syz.0.1611': attribute type 1 has an invalid length. [ 371.354139][T11965] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.439670][T11965] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.558330][T11965] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.578975][T11982] block nbd0: server does not support multiple connections per device. [ 371.594389][T11982] block nbd0: shutting down sockets [ 371.643011][T11965] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.680886][T11990] lo speed is unknown, defaulting to 1000 [ 372.221436][T12001] bond0 (unregistering): Released all slaves [ 372.394566][ T7826] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.404416][T11990] lo speed is unknown, defaulting to 1000 [ 372.427409][ T7826] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.436182][ T7826] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.498746][ T7834] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.835564][T12034] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 372.916042][T12036] netlink: 'syz.4.1627': attribute type 4 has an invalid length. [ 373.301061][T12048] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 373.587443][T12056] netlink: 'syz.2.1632': attribute type 7 has an invalid length. [ 373.595477][T12056] netlink: 'syz.2.1632': attribute type 8 has an invalid length. [ 374.448102][T12094] lo speed is unknown, defaulting to 1000 [ 374.649000][ T5844] Bluetooth: hci4: link tx timeout [ 374.659732][ T5844] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 374.751627][ T5850] Bluetooth: hci4: link tx timeout [ 374.761636][ T5850] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 374.770747][ T5850] Bluetooth: hci4: link tx timeout [ 374.776193][ T5850] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 374.784062][ T5850] Bluetooth: hci4: link tx timeout [ 374.789298][ T5850] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 374.797340][ T5850] Bluetooth: hci4: link tx timeout [ 374.802515][ T5850] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 374.813188][ T5850] Bluetooth: hci4: link tx timeout [ 374.818793][ T5850] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 374.826537][ T5850] Bluetooth: hci4: link tx timeout [ 374.831676][ T5850] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 374.997339][T12094] lo speed is unknown, defaulting to 1000 [ 375.405427][T12124] block nbd0: server does not support multiple connections per device. [ 375.433888][T12131] __nla_validate_parse: 15 callbacks suppressed [ 375.433909][T12131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1653'. [ 375.436912][T12129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1651'. [ 375.460849][T12124] block nbd0: shutting down sockets [ 375.635761][T12140] openvswitch: netlink: VXLAN extension 274 out of range max 1 [ 375.823389][T12144] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1656'. [ 375.824329][T12149] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1656'. [ 376.275535][T12169] netlink: 'syz.3.1662': attribute type 13 has an invalid length. [ 376.283408][T12169] netlink: 'syz.3.1662': attribute type 17 has an invalid length. [ 376.336313][T12166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1661'. [ 376.354287][T12169] gretap0: refused to change device tx_queue_len [ 376.384478][T12169] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 376.695251][ T5850] Bluetooth: hci4: command 0x0405 tx timeout [ 376.943521][T12183] @ÿ: renamed from bond_slave_0 [ 377.009369][T12189] lo speed is unknown, defaulting to 1000 [ 377.085981][T12209] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7) [ 377.475675][T12227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.490045][T12189] lo speed is unknown, defaulting to 1000 [ 377.838197][ T30] audit: type=1800 audit(1754199536.627:4): pid=12250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1679" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=1652 res=0 errno=0 [ 377.871458][ T30] audit: type=1804 audit(1754199536.657:5): pid=12250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1679" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=1652 res=1 errno=0 [ 378.064630][T12261] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1681'. [ 378.128638][T12262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1681'. [ 378.139355][T12261] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1681'. [ 378.415819][T12281] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1685'. [ 378.432802][T12281] tipc: Enabling of bearer rejected, failed to enable media [ 378.443039][T12276] lo speed is unknown, defaulting to 1000 [ 378.748378][T12291] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1688'. [ 379.117841][T12300] netlink: 'syz.3.1690': attribute type 13 has an invalid length. [ 379.469129][T12276] lo speed is unknown, defaulting to 1000 [ 379.469756][T12279] lo speed is unknown, defaulting to 1000 [ 379.843955][T12322] netlink: 'syz.4.1683': attribute type 13 has an invalid length. [ 379.862029][T12326] veth0_to_bridge: entered promiscuous mode [ 379.994675][T12322] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 380.291720][T12279] lo speed is unknown, defaulting to 1000 [ 380.468613][T12323] veth0_to_bridge: left promiscuous mode [ 380.661688][T12349] netlink: 'syz.3.1701': attribute type 21 has an invalid length. [ 381.773678][T12394] __nla_validate_parse: 5 callbacks suppressed [ 381.773699][T12394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1714'. [ 381.866215][T12401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1716'. [ 382.139863][T12414] lo speed is unknown, defaulting to 1000 [ 382.167060][T12419] netlink: zone id is out of range [ 382.172231][T12419] netlink: zone id is out of range [ 382.213197][T12419] netlink: set zone limit has 4 unknown bytes [ 382.422629][T12423] netlink: 'syz.2.1723': attribute type 21 has an invalid length. [ 382.440281][T12423] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1723'. [ 382.464322][T12423] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1723'. [ 382.828055][T12414] lo speed is unknown, defaulting to 1000 [ 383.194241][T12442] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1727'. [ 383.254060][T12445] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1728'. [ 383.527332][T12457] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1732'. [ 383.554390][T12457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1732'. [ 383.591967][T12457] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1732'. [ 383.609992][T12456] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1732'. [ 384.047613][T12476] netlink: 'syz.0.1736': attribute type 2 has an invalid length. [ 384.561255][T12500] sctp: [Deprecated]: syz.4.1745 (pid 12500) Use of struct sctp_assoc_value in delayed_ack socket option. [ 384.561255][T12500] Use struct sctp_sack_info instead [ 384.717601][T12510] tap0: tun_chr_ioctl cmd 1074025677 [ 384.725246][T12510] tap0: linktype set to 776 [ 384.764904][T12504] tipc: Enabling of bearer rejected, failed to enable media [ 384.873862][T12516] syzkaller1: entered promiscuous mode [ 384.882346][T12516] syzkaller1: entered allmulticast mode [ 384.926345][T12520] tipc: Enabled bearer , priority 0 [ 385.038189][T12520] tipc: Disabling bearer [ 385.537417][T12544] macsec1: entered promiscuous mode [ 385.800973][T12559] lo speed is unknown, defaulting to 1000 [ 386.092683][T12583] pimreg: entered allmulticast mode [ 386.370447][T12559] lo speed is unknown, defaulting to 1000 [ 386.649031][T12606] syzkaller1: entered promiscuous mode [ 386.654566][T12606] syzkaller1: entered allmulticast mode [ 386.687014][T12610] netlink: 'syz.1.1776': attribute type 1 has an invalid length. [ 386.703810][T12610] openvswitch: netlink: IP tunnel dst address not specified [ 386.979894][T12621] __nla_validate_parse: 17 callbacks suppressed [ 386.979917][T12621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1779'. [ 387.367434][T12642] netlink: 'syz.2.1785': attribute type 1 has an invalid length. [ 387.391410][T12642] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1785'. [ 387.411906][T12642] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1785'. [ 387.446053][T12644] netlink: 'syz.3.1786': attribute type 23 has an invalid length. [ 387.506217][T12650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1789'. [ 387.666379][T12651] block nbd0: server does not support multiple connections per device. [ 387.675941][T12651] block nbd0: shutting down sockets [ 388.009486][T12661] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1793'. [ 388.034031][T12661] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1793'. [ 388.563217][T12680] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1797'. [ 388.751052][T12693] netlink: 'syz.0.1802': attribute type 1 has an invalid length. [ 388.759450][T12693] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1802'. [ 388.840682][T12698] openvswitch: netlink: IP tunnel dst address not specified [ 388.977085][T12699] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1803'. [ 388.987677][T12699] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1803'. [ 389.501844][T12732] netlink: 'syz.2.1813': attribute type 11 has an invalid length. [ 389.530093][T12732] netlink: 'syz.2.1813': attribute type 4 has an invalid length. [ 390.134966][T12766] netlink: 'syz.0.1822': attribute type 7 has an invalid length. [ 390.282256][T12780] netlink: 'syz.2.1828': attribute type 4 has an invalid length. [ 390.299500][T12780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.321174][ T923] IPVS: starting estimator thread 0... [ 390.456380][T12784] IPVS: using max 25 ests per chain, 60000 per kthread [ 390.800529][T12809] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.845127][T12815] netlink: 'syz.3.1835': attribute type 10 has an invalid length. [ 390.877956][T12815] dummy0: entered promiscuous mode [ 390.891649][T12815] team0: Port device dummy0 added [ 391.129371][T12831] netlink: 'syz.0.1838': attribute type 1 has an invalid length. [ 391.241321][T12831] bond6: entered promiscuous mode [ 391.249804][T12831] 8021q: adding VLAN 0 to HW filter on device bond6 [ 391.330156][T12833] bond6: (slave bridge3): making interface the new active one [ 391.357857][T12833] bridge3: entered promiscuous mode [ 391.381734][T12833] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 391.579737][T12842] lo speed is unknown, defaulting to 1000 [ 391.783410][T12866] netlink: 'syz.0.1848': attribute type 10 has an invalid length. [ 391.809122][T12866] bond0: (slave dummy0): Releasing backup interface [ 391.816993][T12866] dummy0: left promiscuous mode [ 391.822174][T12866] dummy0: left allmulticast mode [ 391.835678][T12866] dummy0: entered promiscuous mode [ 391.841398][T12866] dummy0: entered allmulticast mode [ 391.848670][T12866] team0: Port device dummy0 added [ 391.889917][T12868] netlink: 'syz.0.1848': attribute type 10 has an invalid length. [ 391.904544][T12868] dummy0: left promiscuous mode [ 391.910311][T12868] dummy0: left allmulticast mode [ 391.937341][T12868] team0: Port device dummy0 removed [ 391.960918][T12868] dummy0: entered promiscuous mode [ 391.966548][T12868] dummy0: entered allmulticast mode [ 391.973138][T12868] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 391.991921][T12842] lo speed is unknown, defaulting to 1000 [ 392.606589][T12886] netlink: 'syz.4.1854': attribute type 1 has an invalid length. [ 392.614467][T12886] __nla_validate_parse: 17 callbacks suppressed [ 392.614485][T12886] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1854'. [ 392.665244][T12887] netlink: 'syz.4.1854': attribute type 1 has an invalid length. [ 392.673109][T12887] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1854'. [ 392.751261][T12883] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 392.813564][T12884] sctp: [Deprecated]: syz.1.1853 (pid 12884) Use of int in maxseg socket option. [ 392.813564][T12884] Use struct sctp_assoc_value instead [ 392.952976][T12902] lo speed is unknown, defaulting to 1000 [ 392.968427][T12911] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1859'. [ 393.006880][T12914] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1860'. [ 393.009640][T12911] pim6reg1: entered promiscuous mode [ 393.022810][T12911] pim6reg1: entered allmulticast mode [ 393.052475][T12914] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1860'. [ 393.073431][T12916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1861'. [ 393.112978][T12916] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 393.132786][T12916] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1861'. [ 393.532607][T12927] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 393.578375][T12902] lo speed is unknown, defaulting to 1000 [ 393.579016][T12901] lo speed is unknown, defaulting to 1000 [ 393.819490][T12936] tipc: Enabled bearer , priority 0 [ 393.855124][T12939] syzkaller0: entered promiscuous mode [ 393.876939][T12939] syzkaller0: entered allmulticast mode [ 393.914084][T12936] tipc: Resetting bearer [ 393.918568][T12943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1869'. [ 394.010635][T12934] tipc: Resetting bearer [ 394.069331][T12934] tipc: Disabling bearer [ 394.219305][T12901] lo speed is unknown, defaulting to 1000 [ 394.936101][T12970] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1876'. [ 395.058500][T12956] lo speed is unknown, defaulting to 1000 [ 395.239541][T12981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1878'. [ 395.307067][ T7818] tipc: Subscription rejected, illegal request [ 395.331905][T12976] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 395.668474][T12990] tipc: Invalid UDP bearer configuration [ 395.668540][T12990] tipc: Enabling of bearer rejected, failed to enable media [ 395.903867][T12956] lo speed is unknown, defaulting to 1000 [ 396.056441][ T7830] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 397.245094][T13030] lo speed is unknown, defaulting to 1000 [ 397.805129][T13030] lo speed is unknown, defaulting to 1000 [ 397.845242][T13045] syzkaller0: entered promiscuous mode [ 397.850864][T13045] syzkaller0: entered allmulticast mode [ 397.910706][T13059] __nla_validate_parse: 6 callbacks suppressed [ 397.910729][T13059] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1897'. [ 397.931956][T13056] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1897'. [ 398.344030][T13071] netlink: 'syz.4.1901': attribute type 1 has an invalid length. [ 398.376568][T13072] netlink: 'syz.2.1902': attribute type 10 has an invalid length. [ 398.864903][T13082] lo speed is unknown, defaulting to 1000 [ 398.868787][T13090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1906'. [ 399.125413][T13088] tipc: Enabled bearer , priority 0 [ 399.170049][T13094] syzkaller0: entered promiscuous mode [ 399.181696][T13094] syzkaller0: entered allmulticast mode [ 399.322879][T13088] tipc: Resetting bearer [ 400.414605][T13109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1911'. [ 402.028912][T13082] lo speed is unknown, defaulting to 1000 [ 402.042400][T13118] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1913'. [ 402.072394][T13119] 8021q: VLANs not supported on ip6gre0 [ 402.088562][T13091] tipc: Resetting bearer [ 402.123838][T13091] tipc: Disabling bearer [ 402.440371][T13137] openvswitch: netlink: Flow key attribute not present in set flow. [ 402.470297][T13134] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1917'. [ 402.483770][T13134] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1917'. [ 402.542768][T13134] tipc: Enabled bearer , priority 0 [ 402.620224][T13134] syzkaller0: entered promiscuous mode [ 402.628275][T13134] syzkaller0: entered allmulticast mode [ 402.753972][T13133] tipc: Resetting bearer [ 402.821425][T13133] tipc: Disabling bearer [ 403.275641][T13166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1924'. [ 403.418967][T13170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1926'. [ 403.493397][T13170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1926'. [ 404.217761][T13195] sctp: [Deprecated]: syz.1.1933 (pid 13195) Use of int in max_burst socket option. [ 404.217761][T13195] Use struct sctp_assoc_value instead [ 404.270771][T13198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1934'. [ 405.969579][T13245] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.138717][T13245] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.177267][T13260] 8021q: VLANs not supported on ip6_vti0 [ 406.204255][T13245] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.253405][T13259] netlink: 57288 bytes leftover after parsing attributes in process `syz.2.1950'. [ 406.301116][T13245] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.650029][ T7831] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.714165][ T7831] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.779438][ T7831] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.803998][ T7831] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.105430][T13303] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1965'. [ 407.162743][T13306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1965'. [ 407.208315][T13306] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1965'. [ 407.303146][T13313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.917469][T13296] ip6gretap0: left allmulticast mode [ 407.997668][T13330] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 408.030386][ T5896] lo speed is unknown, defaulting to 1000 [ 408.031185][ T7818] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.056068][ T5896] syz2: Port: 1 Link DOWN [ 408.085930][ T7818] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.106650][ T7818] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.140729][ T7818] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.225167][T13339] netlink: 'syz.4.1976': attribute type 10 has an invalid length. [ 408.428359][T13350] lo speed is unknown, defaulting to 1000 [ 408.765693][T13350] lo speed is unknown, defaulting to 1000 [ 408.945112][T13381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1987'. [ 409.291488][T13397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1992'. [ 409.344294][T13397] netlink: 'syz.2.1992': attribute type 1 has an invalid length. [ 409.429923][T13403] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1992'. [ 409.470469][T13403] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 409.493686][T13402] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 409.943670][T13417] lo speed is unknown, defaulting to 1000 [ 410.070780][T13422] netlink: 'syz.0.2000': attribute type 3 has an invalid length. [ 410.096899][T13422] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2000'. [ 410.549497][ T7817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.575521][ T7817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.594394][T13447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2005'. [ 410.939614][T13461] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2010'. [ 411.157373][T13471] : entered promiscuous mode [ 411.260844][T13457] lo speed is unknown, defaulting to 1000 [ 411.316471][T13417] lo speed is unknown, defaulting to 1000 [ 411.581239][T13482] vlan2: entered promiscuous mode [ 411.602723][T13482] ip6gretap0: entered promiscuous mode [ 411.734623][T13483] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2015'. [ 412.073587][T13497] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2017'. [ 412.105029][T13497] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2017'. [ 412.137019][T13457] lo speed is unknown, defaulting to 1000 [ 412.290696][T13501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2019'. [ 412.487712][T13503] team_slave_0: entered promiscuous mode [ 412.495729][T13503] batadv0: entered promiscuous mode [ 412.502421][T13503] hsr1: Slave A (team_slave_0) is not up; please bring it up to get a fully working HSR network [ 412.513171][T13503] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 412.524525][T13503] hsr1: entered allmulticast mode [ 412.529775][T13503] team_slave_0: entered allmulticast mode [ 412.535902][T13503] batadv0: entered allmulticast mode [ 412.542855][T13503] team_slave_0: left promiscuous mode [ 412.550155][T13503] batadv0: left promiscuous mode [ 412.909939][T13510] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 413.456560][T13537] netlink: del zone limit has 4 unknown bytes [ 413.583199][T13543] tipc: Enabled bearer , priority 31 [ 413.787029][T13552] netlink: 'syz.0.2036': attribute type 3 has an invalid length. [ 414.323241][T13571] openvswitch: netlink: Missing key (keys=40, expected=80) [ 414.328554][T13573] __nla_validate_parse: 6 callbacks suppressed [ 414.328571][T13573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2042'. [ 414.340875][T13571] netlink: 'syz.1.2041': attribute type 10 has an invalid length. [ 414.350346][T13570] lo speed is unknown, defaulting to 1000 [ 414.360582][T13571] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2041'. [ 414.386323][T13571] dummy0: entered promiscuous mode [ 414.423321][T13571] team0: Port device dummy0 removed [ 414.442758][T13571] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 414.962708][T13567] lo speed is unknown, defaulting to 1000 [ 414.969328][T13570] lo speed is unknown, defaulting to 1000 [ 415.161928][T13606] netlink: 'syz.1.2050': attribute type 8 has an invalid length. [ 415.232701][T13606] bridge0: entered allmulticast mode [ 415.403392][ T7818] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.412946][ T7818] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.427700][ T7818] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.436366][ T7818] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.460295][T13617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2052'. [ 415.661834][T13567] lo speed is unknown, defaulting to 1000 [ 415.820000][T13627] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2056'. [ 415.838703][T13626] openvswitch: netlink: IP tunnel dst address not specified [ 415.847678][T13626] netlink: 'syz.3.2055': attribute type 39 has an invalid length. [ 416.426711][T13641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2060'. [ 416.661386][T13655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2063'. [ 416.681627][T13649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2062'. [ 416.693064][T13649] Couldn't find request waiting for DGID: 0000:0000:0000:0000:0000:0000:0000:0000 [ 416.763847][T13653] lo speed is unknown, defaulting to 1000 [ 416.868462][T13662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2064'. [ 417.039873][ T1211] lo speed is unknown, defaulting to 1000 [ 417.116852][T13671] tipc: Enabled bearer , priority 0 [ 417.125828][T13671] syzkaller0: entered promiscuous mode [ 417.131514][T13671] syzkaller0: entered allmulticast mode [ 417.143593][T13670] tipc: Resetting bearer [ 417.165094][T13674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2069'. [ 417.201573][T13670] tipc: Disabling bearer [ 417.366688][T13676] netlink: 'syz.1.2070': attribute type 4 has an invalid length. [ 417.379091][T13673] lo speed is unknown, defaulting to 1000 [ 417.379150][T13653] lo speed is unknown, defaulting to 1000 [ 417.418003][T13678] netlink: 'syz.1.2070': attribute type 4 has an invalid length. [ 417.452015][T13679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2071'. [ 417.561469][T13676] hsr_slave_1 (unregistering): left promiscuous mode [ 417.587817][ T1211] lo speed is unknown, defaulting to 1000 [ 417.595107][ T1211] syz2: Port: 1 Link ACTIVE [ 417.882694][T13673] lo speed is unknown, defaulting to 1000 [ 418.187949][T13695] team0: Device vlan1 is already an upper device of the team interface [ 418.690847][T13714] tipc: Enabled bearer , priority 0 [ 418.738317][T13714] syzkaller0: entered promiscuous mode [ 418.743834][T13714] syzkaller0: entered allmulticast mode [ 418.823648][T13714] tipc: Resetting bearer [ 418.871999][T13713] tipc: Resetting bearer [ 418.894227][T13713] tipc: Disabling bearer [ 419.055275][T13728] lo speed is unknown, defaulting to 1000 [ 419.275162][T13737] batadv1: entered promiscuous mode [ 419.296755][T13737] batadv1: entered allmulticast mode [ 419.339567][T13741] __nla_validate_parse: 6 callbacks suppressed [ 419.339587][T13741] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2089'. [ 419.538741][T13728] lo speed is unknown, defaulting to 1000 [ 419.552811][T13740] lo speed is unknown, defaulting to 1000 [ 419.967986][T13761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2094'. [ 420.132362][T13765] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2095'. [ 420.145639][T13757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2093'. [ 420.344316][T13740] lo speed is unknown, defaulting to 1000 [ 420.527392][T13779] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2099'. [ 420.547572][T13780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2100'. [ 420.744949][T13786] Set syz0 is full, maxelem 0 reached [ 421.777334][T13823] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2109'. [ 421.790457][T13823] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2109'. [ 421.834448][T13823] lo speed is unknown, defaulting to 1000 [ 422.057000][T13837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2114'. [ 422.424215][T13846] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2116'. [ 422.434634][T13823] lo speed is unknown, defaulting to 1000 [ 422.732866][T13852] lo speed is unknown, defaulting to 1000 [ 422.973348][T13874] netlink: 'syz.0.2124': attribute type 10 has an invalid length. [ 423.006195][T13874] batadv0: entered promiscuous mode [ 423.018884][T13874] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 423.480155][T13852] lo speed is unknown, defaulting to 1000 [ 423.771912][T13894] syzkaller1: entered promiscuous mode [ 423.788072][T13894] syzkaller1: entered allmulticast mode [ 424.667073][T13923] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 424.735273][T13926] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 424.765726][T13926] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 424.813910][T13933] __nla_validate_parse: 9 callbacks suppressed [ 424.813930][T13933] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2136'. [ 424.830636][T13933] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2136'. [ 424.842578][T13926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2136'. [ 424.856154][T13926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2136'. [ 424.883488][T13926] netlink: 'syz.0.2136': attribute type 19 has an invalid length. [ 424.890651][T13940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2139'. [ 424.984140][T13944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2140'. [ 425.025367][T13943] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2139'. [ 425.102330][T13943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2139'. [ 425.140880][T13954] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 425.194086][T13951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2142'. [ 425.232268][T13951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2142'. [ 425.427170][T13966] bridge7: entered allmulticast mode [ 425.462962][T13968] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 425.519570][T13969] bond0: (slave team0): Releasing backup interface [ 425.538234][T13969] team0: left promiscuous mode [ 425.548153][T13969] team_slave_0: left promiscuous mode [ 425.554051][T13969] team_slave_1: left promiscuous mode [ 425.562332][T13969] team0: left allmulticast mode [ 425.567934][T13969] team_slave_0: left allmulticast mode [ 425.573562][T13969] team_slave_1: left allmulticast mode [ 425.583532][T13969] bond0: (slave dummy0): Releasing backup interface [ 425.591081][T13969] dummy0: left promiscuous mode [ 425.596506][T13969] dummy0: left allmulticast mode [ 425.628400][T13982] netlink: 'syz.0.2149': attribute type 10 has an invalid length. [ 425.632199][T13969] bond0: (slave bond_slave_0): Releasing backup interface [ 425.669708][T13969] bond_slave_0: left promiscuous mode [ 425.675654][T13969] bond_slave_0: left allmulticast mode [ 425.700025][T13969] bond0: (slave bond_slave_1): Releasing backup interface [ 425.726030][T13969] bond_slave_1: left promiscuous mode [ 425.739338][T13969] bond_slave_1: left allmulticast mode [ 425.759833][T13969] team0: Port device team_slave_0 removed [ 425.797865][T13969] team0: Port device team_slave_1 removed [ 425.804537][T13969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.813063][T13969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.834198][T13969] bond0: (slave wlan1): Releasing backup interface [ 425.843779][T13969] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 425.853973][T13969] bond1: (slave bridge2): Releasing active interface [ 425.866984][T13969] bridge2: left promiscuous mode [ 425.872243][T13969] bridge2: left allmulticast mode [ 425.894382][T13969] bond0: (slave bond3): Releasing backup interface [ 425.904232][T13969] bond3: left promiscuous mode [ 425.909742][T13969] bond3: left allmulticast mode [ 425.928267][T13969] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 425.935971][T13969] batman_adv: batadv0: Removing interface: ip6gretap1 [ 425.947315][T13969] bond6: (slave bridge3): Releasing backup interface [ 425.954250][T13969] bridge3: left promiscuous mode [ 426.010782][T13982] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 426.025452][T13982] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 426.035560][T13982] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 426.058125][T13982] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 426.104334][T13980] lo speed is unknown, defaulting to 1000 [ 426.463857][T14005] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 426.484150][T14005] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 426.595994][ T5896] IPVS: starting estimator thread 0... [ 426.629749][T13994] lo speed is unknown, defaulting to 1000 [ 426.649669][T13980] lo speed is unknown, defaulting to 1000 [ 426.707424][T14006] IPVS: using max 25 ests per chain, 60000 per kthread [ 427.316551][T13978] lo speed is unknown, defaulting to 1000 [ 428.073881][T13996] lo speed is unknown, defaulting to 1000 [ 428.323690][T13996] lo speed is unknown, defaulting to 1000 [ 428.331486][T13978] lo speed is unknown, defaulting to 1000 [ 428.331486][T14028] lo speed is unknown, defaulting to 1000 [ 428.364825][T13994] lo speed is unknown, defaulting to 1000 [ 428.785475][T14021] lo speed is unknown, defaulting to 1000 [ 429.082355][T14049] tipc: Enabled bearer , priority 0 [ 429.090539][T14049] syzkaller0: entered promiscuous mode [ 429.096206][T14049] syzkaller0: entered allmulticast mode [ 429.128196][T14049] tipc: Resetting bearer [ 429.145588][T14048] tipc: Resetting bearer [ 429.168463][T14048] tipc: Disabling bearer [ 429.257316][T14028] lo speed is unknown, defaulting to 1000 [ 429.384172][T14021] lo speed is unknown, defaulting to 1000 [ 429.651730][T14054] netlink: 'syz.4.2171': attribute type 10 has an invalid length. [ 429.661208][T14056] netlink: 'syz.4.2171': attribute type 10 has an invalid length. [ 429.775974][T14054] bridge0: port 1(veth0_vlan) entered blocking state [ 429.783026][T14054] bridge0: port 1(veth0_vlan) entered disabled state [ 429.819171][T14054] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 429.862081][T14056] bridge0: port 1(veth0_vlan) entered blocking state [ 429.884369][T14056] bridge0: port 1(veth0_vlan) entered disabled state [ 429.904667][T14056] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 430.602891][T14063] netlink: 'syz.4.2174': attribute type 14 has an invalid length. [ 430.752569][T14067] tipc: Enabling of bearer rejected, failed to enable media [ 430.795326][T14068] tipc: Enabling of bearer rejected, failed to enable media [ 430.842639][T14070] __nla_validate_parse: 5 callbacks suppressed [ 430.842660][T14070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2176'. [ 431.187026][ T5844] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 431.261238][T14089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2181'. [ 431.288298][T14095] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2182'. [ 431.298379][T14095] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2182'. [ 431.307946][T14095] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2182'. [ 431.317357][T14095] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2182'. [ 431.327448][T14095] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2182'. [ 431.337674][T14095] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2182'. [ 431.347799][T14095] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2182'. [ 431.357254][T14095] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2182'. [ 431.686124][T14116] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 432.191021][T14131] lo speed is unknown, defaulting to 1000 [ 432.683378][T14150] netlink: 'syz.4.2193': attribute type 20 has an invalid length. [ 432.699056][T14150] netlink: 'syz.4.2193': attribute type 20 has an invalid length. [ 432.853121][T14156] bridge0: left allmulticast mode [ 432.954259][T14131] lo speed is unknown, defaulting to 1000 [ 433.080611][T14163] ip6tnl4: entered promiscuous mode [ 433.106300][T14163] ip6tnl4: entered allmulticast mode [ 433.573706][T14183] netlink: 'syz.3.2204': attribute type 11 has an invalid length. [ 433.975196][ T30] audit: type=1800 audit(1754199592.757:6): pid=14175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2200" name="memory.events" dev="tmpfs" ino=2361 res=0 errno=0 [ 434.337833][T14201] macsec2: entered promiscuous mode [ 434.343707][T14201] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 434.356414][T14201] macsec2: entered allmulticast mode [ 434.379183][T14201] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 434.425724][T14206] bridge0: port 1(veth0_to_bridge) entered blocking state [ 434.441053][T14206] bridge0: port 1(veth0_to_bridge) entered disabled state [ 434.463990][T14206] veth0_to_bridge: entered allmulticast mode [ 434.504149][T14206] veth0_to_bridge: entered promiscuous mode [ 434.520546][T14206] bridge0: port 1(veth0_to_bridge) entered blocking state [ 434.527918][T14206] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 434.597751][ T30] audit: type=1800 audit(1754199593.387:7): pid=14212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2213" name=39FFFF dev="tmpfs" ino=2241 res=0 errno=0 [ 435.007949][T14238] mac80211_hwsim hwsim2 wlan0 (unregistering): left allmulticast mode [ 435.023910][T14238] mac80211_hwsim hwsim2 wlan0 (unregistering): left promiscuous mode [ 435.400201][T14246] lo speed is unknown, defaulting to 1000 [ 435.553592][T14260] netlink: 'syz.0.2224': attribute type 7 has an invalid length. [ 435.604565][T14260] netlink: 'syz.0.2224': attribute type 7 has an invalid length. [ 435.637725][T14260] netlink: 'syz.0.2224': attribute type 7 has an invalid length. [ 435.659338][T14260] netlink: 'syz.0.2224': attribute type 7 has an invalid length. [ 435.688475][T14260] netlink: 'syz.0.2224': attribute type 7 has an invalid length. [ 435.716127][T14260] netlink: 'syz.0.2224': attribute type 7 has an invalid length. [ 435.745802][T14260] netlink: 'syz.0.2224': attribute type 7 has an invalid length. [ 435.753761][T14260] netlink: 'syz.0.2224': attribute type 7 has an invalid length. [ 435.800814][T14260] netlink: 'syz.0.2224': attribute type 7 has an invalid length. [ 435.825399][T14260] netlink: 'syz.0.2224': attribute type 7 has an invalid length. [ 435.992853][ T7834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.015802][ T7834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.059959][T14272] __nla_validate_parse: 73 callbacks suppressed [ 436.059982][T14272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2227'. [ 436.101184][T14272] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2227'. [ 436.323091][T14242] lo speed is unknown, defaulting to 1000 [ 436.333409][T14246] lo speed is unknown, defaulting to 1000 [ 436.337439][T14282] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2230'. [ 436.432887][T14281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2231'. [ 436.539576][T14282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2230'. [ 437.263589][T14242] lo speed is unknown, defaulting to 1000 [ 437.974530][T14347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2243'. [ 438.434219][T14356] syzkaller0: refused to change device tx_queue_len [ 438.817731][T14369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2248'. [ 439.291952][T14372] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2250'. [ 439.304890][T14373] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2250'. [ 439.481059][T14376] syzkaller0: entered promiscuous mode [ 439.492932][T14376] syzkaller0: entered allmulticast mode [ 439.532710][T14390] hsr0: left allmulticast mode [ 439.543963][T14390] hsr_slave_0: left allmulticast mode [ 439.558282][T14390] hsr_slave_1: left allmulticast mode [ 439.734576][T14389] dvmrp8: entered allmulticast mode [ 442.041809][T14381] dvmrp8: left allmulticast mode [ 442.163487][T14407] tipc: Enabling of bearer rejected, failed to enable media [ 442.264828][ T5844] Bluetooth: hci4: link tx timeout [ 442.270274][ T5844] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 442.351732][ T5850] Bluetooth: hci4: link tx timeout [ 442.359731][ T5850] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 442.367830][ T5850] Bluetooth: hci4: link tx timeout [ 442.373092][ T5850] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 442.387013][ T5850] Bluetooth: hci4: link tx timeout [ 442.392181][ T5850] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 442.400070][ T5850] Bluetooth: hci4: link tx timeout [ 442.405438][ T5850] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 442.421300][ T5850] Bluetooth: hci4: link tx timeout [ 442.428200][ T5850] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 442.435945][ T5850] Bluetooth: hci4: link tx timeout [ 442.441177][ T5850] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 442.490364][T14427] lo speed is unknown, defaulting to 1000 [ 442.711044][T14457] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2267'. [ 442.719356][T14460] veth0_to_bond: entered allmulticast mode [ 442.755265][T14457] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2267'. [ 442.804976][T14457] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2267'. [ 443.102909][T14482] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2270'. [ 443.353586][T14427] lo speed is unknown, defaulting to 1000 [ 443.425715][T14486] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 443.618739][T14500] netlink: 18 bytes leftover after parsing attributes in process `syz.3.2273'. [ 444.295183][ T5850] Bluetooth: hci4: command 0x0405 tx timeout [ 444.553799][T14546] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 444.839601][T14561] validate_nla: 39 callbacks suppressed [ 444.839624][T14561] netlink: 'syz.4.2286': attribute type 13 has an invalid length. [ 444.853960][T14561] netlink: 'syz.4.2286': attribute type 17 has an invalid length. [ 444.901181][T14561] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 445.313448][T14569] lo speed is unknown, defaulting to 1000 [ 445.545854][T14585] netlink: 'syz.4.2291': attribute type 17 has an invalid length. [ 445.619807][T14583] ipvlan2: entered promiscuous mode [ 445.639436][T14583] bridge0: port 1(ipvlan2) entered blocking state [ 445.663433][T14583] bridge0: port 1(ipvlan2) entered disabled state [ 445.684059][T14583] ipvlan2: entered allmulticast mode [ 445.702100][T14583] bridge0: entered allmulticast mode [ 445.732392][T14583] ipvlan2: left allmulticast mode [ 445.733088][T14591] netlink: 'syz.2.2294': attribute type 10 has an invalid length. [ 445.753368][T14583] bridge0: left allmulticast mode [ 445.865082][T14585] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2291'. [ 445.895122][T14585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 446.187287][T14599] tun0: tun_chr_ioctl cmd 1074812117 [ 446.193585][T14601] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2297'. [ 446.234104][T14599] tun0: tun_chr_ioctl cmd 1074812117 [ 446.529423][T14610] tipc: Enabled bearer , priority 0 [ 446.649573][T14612] tipc: Disabling bearer [ 446.772466][T14621] syz.1.2301 uses old SIOCAX25GETINFO [ 446.853292][T14602] lo speed is unknown, defaulting to 1000 [ 446.902362][T14622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2301'. [ 446.905932][T14569] lo speed is unknown, defaulting to 1000 [ 446.935147][T14625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2303'. [ 447.142492][T14633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2305'. [ 447.213338][T14636] netlink: 'syz.4.2305': attribute type 1 has an invalid length. [ 447.668842][T14602] lo speed is unknown, defaulting to 1000 [ 449.122869][T14681] lo speed is unknown, defaulting to 1000 [ 449.696743][T14697] __nla_validate_parse: 4 callbacks suppressed [ 449.696764][T14697] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2321'. [ 450.535541][T14706] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2324'. [ 450.554999][T14706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2324'. [ 450.563989][T14706] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2324'. [ 450.656198][T14708] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2324'. [ 450.764850][T14708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2324'. [ 450.773941][T14708] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2324'. [ 451.054857][T14681] lo speed is unknown, defaulting to 1000 [ 451.106743][T14684] netlink: 'syz.2.2318': attribute type 1 has an invalid length. [ 451.135531][T14721] netlink: zone id is out of range [ 451.142948][T14684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2318'. [ 451.194533][T14715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2318'. [ 451.232414][T14704] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2323'. [ 451.921845][T14736] dummy0: left promiscuous mode [ 451.973240][T14736] team0: Port device dummy0 removed [ 453.008192][T14773] netlink: 'syz.3.2340': attribute type 10 has an invalid length. [ 453.396656][T14801] netlink: 'syz.2.2348': attribute type 7 has an invalid length. [ 453.492469][T14810] netlink: 'syz.2.2348': attribute type 4 has an invalid length. [ 453.542697][T14801] netlink: 'syz.2.2348': attribute type 4 has an invalid length. [ 453.713524][ T10] lo speed is unknown, defaulting to 1000 [ 453.720355][ T10] syz1: Port: 1 Link ACTIVE [ 453.726373][ T10] lo speed is unknown, defaulting to 1000 [ 453.748501][T14816] 8021q: VLANs not supported on nlmon0 [ 454.376247][T14837] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.408598][T14837] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.563394][T14837] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.594807][T14837] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.790297][T14837] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.844300][T14837] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.132218][T14874] __nla_validate_parse: 5 callbacks suppressed [ 455.132239][T14874] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2361'. [ 455.201787][T14837] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.229016][T14837] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.409392][T14884] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 455.444395][T14883] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 455.473932][ T7830] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.483767][ T7830] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.514266][ T7830] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.548240][ T7830] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.604042][T14892] netlink: 'syz.1.2365': attribute type 3 has an invalid length. [ 455.619420][T14891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2366'. [ 455.644357][ T7830] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.661800][ T7830] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.760918][ T7831] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.779610][ T7831] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.790665][T14900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2368'. [ 455.805187][T14891] syzkaller0: entered promiscuous mode [ 455.830770][T14891] syzkaller0: entered allmulticast mode [ 456.177565][T14908] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2373'. [ 456.309824][T14912] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2374'. [ 456.552365][T14939] openvswitch: netlink: Message has 4 unknown bytes. [ 456.733869][T14943] bridge_slave_0: default FDB implementation only supports local addresses [ 457.262003][T14968] netlink: 'syz.3.2387': attribute type 24 has an invalid length. [ 457.488757][T14980] erspan0: entered promiscuous mode [ 457.497341][T14980] batman_adv: batadv0: Adding interface: macvlan3 [ 457.503811][T14980] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.562207][T14980] batman_adv: batadv0: Interface activated: macvlan3 [ 457.694099][T14980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2390'. [ 457.747604][T14992] lo speed is unknown, defaulting to 1000 [ 457.756902][T14994] netlink: 'syz.1.2394': attribute type 13 has an invalid length. [ 457.861262][T14994] ip6gretap0: left promiscuous mode [ 457.891162][T14994] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.909074][T14994] tipc: Resetting bearer [ 457.948420][T14994] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 457.967741][T15000] netlink: 'syz.3.2396': attribute type 1 has an invalid length. [ 458.143145][T15009] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2398'. [ 458.258602][T14992] lo speed is unknown, defaulting to 1000 [ 458.281197][T14990] lo speed is unknown, defaulting to 1000 [ 458.405906][T15018] netem: incorrect ge model size [ 458.411260][T15018] netem: change failed [ 458.495245][T15024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2404'. [ 458.569309][T15029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2403'. [ 458.897427][T15032] bond0 (unregistering): Released all slaves [ 458.985007][T14990] lo speed is unknown, defaulting to 1000 [ 459.171362][T15048] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2408'. [ 459.270485][T15051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.594023][T15060] lo speed is unknown, defaulting to 1000 [ 459.672252][T15057] netlink: 'syz.1.2411': attribute type 7 has an invalid length. [ 459.686454][T15057] netlink: 'syz.1.2411': attribute type 8 has an invalid length. [ 460.592299][T15101] netlink: 'syz.1.2422': attribute type 13 has an invalid length. [ 460.628392][T15101] tipc: Resetting bearer [ 460.691100][T15101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 460.781297][T15060] lo speed is unknown, defaulting to 1000 [ 461.117279][T15114] tipc: Enabling of bearer rejected, failed to enable media [ 461.274235][T15123] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 461.684445][T15125] lo speed is unknown, defaulting to 1000 [ 461.690100][T15130] tipc: Resetting bearer [ 462.368354][T15125] lo speed is unknown, defaulting to 1000 [ 462.565404][T15144] __nla_validate_parse: 5 callbacks suppressed [ 462.565424][T15144] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2431'. [ 462.647559][T15147] lo speed is unknown, defaulting to 1000 [ 462.747306][T15154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2433'. [ 463.110118][T15159] tipc: Failed to remove unknown binding: 66,1,1/235573913:3337295321/3337295323 [ 463.283422][T15166] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2438'. [ 463.293510][T15146] lo speed is unknown, defaulting to 1000 [ 463.502800][T15173] netlink: 'syz.4.2439': attribute type 15 has an invalid length. [ 463.545318][T15173] netlink: 666 bytes leftover after parsing attributes in process `syz.4.2439'. [ 463.581863][T15176] netlink: 'syz.4.2439': attribute type 15 has an invalid length. [ 463.634882][T15176] netlink: 666 bytes leftover after parsing attributes in process `syz.4.2439'. [ 463.904456][T15146] lo speed is unknown, defaulting to 1000 [ 464.036474][T15147] lo speed is unknown, defaulting to 1000 [ 464.197980][T15196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2446'. [ 464.209460][T15198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2445'. [ 464.220264][T15199] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2445'. [ 464.234346][T15198] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2445'. [ 464.783323][T15219] netlink: 'syz.4.2450': attribute type 1 has an invalid length. [ 465.128040][T15219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.271967][T15220] bond8: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 465.323124][ T7818] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 465.328659][T15222] 8021q: adding VLAN 0 to HW filter on device bond8 [ 465.782954][T15223] bond8 (unregistering): (slave ip6gretap2): Removing an active aggregator [ 465.793611][T15223] bond8 (unregistering): (slave ip6gretap2): Releasing backup interface [ 465.805623][T15223] bond8 (unregistering): Released all slaves [ 465.830420][T15231] tipc: Enabling of bearer rejected, failed to enable media [ 465.872776][T15229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.908256][T15239] lo speed is unknown, defaulting to 1000 [ 465.946828][T15229] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2451'. [ 466.436559][T15262] pimreg: entered allmulticast mode [ 466.658266][T15266] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 466.673093][T15266] batman_adv: batadv0: Removing interface: ip6gretap1 [ 466.699702][T15266] bond7: (slave ip6gretap3): Removing an active aggregator [ 466.717489][T15266] bond7: (slave ip6gretap3): Releasing backup interface [ 466.735213][T15266] ip6gretap3: left promiscuous mode [ 466.740795][T15266] ip6gretap3: left allmulticast mode [ 466.749240][T15266] bond8: (slave bridge4): Releasing backup interface [ 466.763394][T15239] lo speed is unknown, defaulting to 1000 [ 467.137790][T15280] netlink: 'syz.2.2463': attribute type 12 has an invalid length. [ 467.658163][T15298] __nla_validate_parse: 3 callbacks suppressed [ 467.658196][T15298] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2466'. [ 467.916549][T15305] netlink: 752 bytes leftover after parsing attributes in process `syz.3.2470'. [ 468.010994][T15307] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 468.066645][T15309] netlink: 4208 bytes leftover after parsing attributes in process `syz.1.2471'. [ 468.168237][T15312] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2473'. [ 468.375578][T15328] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 468.434906][T15335] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 468.444405][T15328] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 468.501458][T15337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2480'. [ 468.537116][T15346] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2481'. [ 468.565883][T15337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2480'. [ 468.601584][T15348] netlink: 'syz.0.2482': attribute type 1 has an invalid length. [ 468.602547][T15337] netlink: 'syz.3.2480': attribute type 6 has an invalid length. [ 468.615467][T15346] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 468.680109][T15353] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2482'. [ 468.703066][T15348] 8021q: adding VLAN 0 to HW filter on device bond7 [ 468.804602][T15348] netlink: 'syz.0.2482': attribute type 1 has an invalid length. [ 468.849210][T15353] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2482'. [ 469.058263][T15377] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2490'. [ 469.289877][T15380] lo speed is unknown, defaulting to 1000 [ 469.564175][T15380] lo speed is unknown, defaulting to 1000 [ 469.703278][T15394] lo speed is unknown, defaulting to 1000 [ 470.237607][T15394] lo speed is unknown, defaulting to 1000 [ 471.918883][T15474] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 472.149025][T15486] netlink: 'syz.3.2519': attribute type 10 has an invalid length. [ 472.205048][T15487] netlink: 'syz.3.2519': attribute type 10 has an invalid length. [ 472.372974][T15491] netlink: 'syz.4.2521': attribute type 1 has an invalid length. [ 472.429449][T15484] lo speed is unknown, defaulting to 1000 [ 472.430847][T15492] vlan2: entered promiscuous mode [ 472.767884][T15504] __nla_validate_parse: 12 callbacks suppressed [ 472.767904][T15504] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2525'. [ 472.834621][T15504] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2525'. [ 472.876732][T15510] veth4: entered promiscuous mode [ 472.889476][T15515] netlink: 'syz.3.2527': attribute type 14 has an invalid length. [ 472.912913][T15510] veth4: entered allmulticast mode [ 472.944293][T15515] netlink: 'syz.3.2527': attribute type 14 has an invalid length. [ 473.153601][T15530] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2532'. [ 473.211748][T15532] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2533'. [ 473.239794][T15534] syz_tun: entered allmulticast mode [ 473.303124][T15534] dvmrp1: entered allmulticast mode [ 473.352018][T15537] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.368768][T15533] syz_tun: left allmulticast mode [ 473.501517][T15544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2536'. [ 473.512438][T15540] dvmrp1: left allmulticast mode [ 473.587482][T15545] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2537'. [ 473.614167][T15545] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2537'. [ 473.646994][T15548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2539'. [ 473.664516][T15548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2539'. [ 473.731279][T15484] lo speed is unknown, defaulting to 1000 [ 473.833949][T15556] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 474.581220][T15576] lo speed is unknown, defaulting to 1000 [ 474.747699][T15587] openvswitch: netlink: Message has 4 unknown bytes. [ 474.865495][T15592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2550'. [ 475.529264][T15576] lo speed is unknown, defaulting to 1000 [ 475.804348][T15613] netlink: 'syz.2.2554': attribute type 10 has an invalid length. [ 475.825960][T15613] dummy0: entered promiscuous mode [ 475.832490][T15613] team0: Port device dummy0 added [ 475.866595][T15614] netlink: 'syz.2.2554': attribute type 10 has an invalid length. [ 475.875786][T15614] dummy0: left promiscuous mode [ 475.905972][T15614] team0: Port device dummy0 removed [ 476.170643][T15617] lo speed is unknown, defaulting to 1000 [ 476.676521][T15617] lo speed is unknown, defaulting to 1000 [ 476.913655][T15639] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 477.494433][ T7846] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.531967][T15659] tipc: Enabling of bearer rejected, failed to enable media [ 477.545908][ T7846] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.561216][ T7846] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.574531][ T7846] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.872680][T15667] tipc: Enabled bearer , priority 10 [ 477.950853][T15676] __nla_validate_parse: 4 callbacks suppressed [ 477.950875][T15676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2571'. [ 477.956625][T15667] tipc: Resetting bearer [ 478.009121][T15667] tipc: Resetting bearer [ 478.344137][T15687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2574'. [ 479.780014][T15667] tipc: Disabling bearer [ 480.110152][T15709] netlink: 'syz.1.2578': attribute type 4 has an invalid length. [ 480.177608][T15716] netlink: 'syz.1.2578': attribute type 4 has an invalid length. [ 480.388612][T15323] lo speed is unknown, defaulting to 1000 [ 480.394505][T15322] lo speed is unknown, defaulting to 1000 [ 480.500869][T15733] batman_adv: batadv0: Interface deactivated: macvlan3 [ 480.510846][T15733] batman_adv: batadv0: Removing interface: macvlan3 [ 481.168620][T15766] lo speed is unknown, defaulting to 1000 [ 481.185755][T15763] netlink: 'syz.0.2595': attribute type 1 has an invalid length. [ 481.194264][T15763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2595'. [ 481.213891][T15763] bridge9: the hash_elasticity option has been deprecated and is always 16 [ 481.338293][T15775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2599'. [ 481.348024][T15775] netlink: 'syz.2.2599': attribute type 30 has an invalid length. [ 481.397319][T15775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2599'. [ 481.415057][ T7831] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.430016][T15775] netlink: 'syz.2.2599': attribute type 30 has an invalid length. [ 481.439228][ T7831] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.461727][ T7831] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.503347][ T7831] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.578647][T15779] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2601'. [ 481.701591][T15789] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2601'. [ 481.715388][T15789] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2601'. [ 481.724838][T15789] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2601'. [ 481.735317][T15789] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2601'. [ 481.744372][T15766] lo speed is unknown, defaulting to 1000 [ 481.753689][T15785] lo speed is unknown, defaulting to 1000 [ 481.851000][T15789] tipc: Enabled bearer , priority 0 [ 481.861115][T15789] syzkaller0: entered promiscuous mode [ 481.866964][T15789] syzkaller0: entered allmulticast mode [ 482.244326][T15794] netlink: 'syz.3.2605': attribute type 12 has an invalid length. [ 482.269471][T15785] lo speed is unknown, defaulting to 1000 [ 482.277662][T15799] netlink: 'syz.1.2604': attribute type 13 has an invalid length. [ 482.376674][T15799] netlink: 'syz.1.2604': attribute type 17 has an invalid length. [ 482.436858][T15778] tipc: Resetting bearer [ 482.519988][T15778] tipc: Disabling bearer [ 482.729613][T15799] tipc: Resetting bearer [ 482.763032][T15799] dummy0: left promiscuous mode [ 482.781117][T15799] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 483.021425][T15814] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.033488][T15814] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.075802][T15820] __nla_validate_parse: 4 callbacks suppressed [ 483.075822][T15820] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2611'. [ 483.143460][T15814] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.158128][T15814] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.325256][T15814] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.336494][T15814] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.451652][T15832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2616'. [ 483.468684][T15832] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2616'. [ 483.485078][T15832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2616'. [ 483.498288][T15832] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2616'. [ 483.519738][T15832] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2616'. [ 483.548132][T15814] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.560074][T15814] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.661653][T15836] syzkaller1: entered promiscuous mode [ 483.668253][T15836] syzkaller1: entered allmulticast mode [ 483.813844][T15841] tipc: Disabling bearer [ 483.863393][ T7834] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.872625][ T7834] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.963604][ T7818] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.976414][ T7818] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.060797][ T7831] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.078494][ T7831] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.151534][ T7818] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.170536][ T7818] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.193338][T15812] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.223925][T15812] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.274620][ T7818] ================================================================== [ 484.282837][ T7818] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1340 [ 484.290512][ T7818] Read of size 8 at addr ffff888041f82eb0 by task kworker/u8:14/7818 [ 484.298692][ T7818] [ 484.301050][ T7818] CPU: 1 UID: 0 PID: 7818 Comm: kworker/u8:14 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 484.301080][ T7818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 484.301093][ T7818] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 484.301130][ T7818] Call Trace: [ 484.301138][ T7818] [ 484.301147][ T7818] dump_stack_lvl+0x189/0x250 [ 484.301170][ T7818] ? __kasan_check_byte+0x12/0x40 [ 484.301200][ T7818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.301218][ T7818] ? lock_release+0x4b/0x3e0 [ 484.301245][ T7818] ? __virt_addr_valid+0x4a5/0x5c0 [ 484.301268][ T7818] print_report+0xca/0x240 [ 484.301294][ T7818] ? __mutex_lock+0x147/0x1340 [ 484.301319][ T7818] kasan_report+0x118/0x150 [ 484.301346][ T7818] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 484.301373][ T7818] ? __mutex_lock+0x147/0x1340 [ 484.301405][ T7818] __mutex_lock+0x147/0x1340 [ 484.301436][ T7818] ? __mutex_lock+0x5b6/0x1340 [ 484.301465][ T7818] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 484.301495][ T7818] ? __pfx___mutex_lock+0x10/0x10 [ 484.301525][ T7818] ? __lock_acquire+0xab9/0xd20 [ 484.301557][ T7818] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 484.301589][ T7818] ? process_scheduled_works+0x9ef/0x17b0 [ 484.301617][ T7818] ? process_scheduled_works+0x9ef/0x17b0 [ 484.301645][ T7818] process_scheduled_works+0xae1/0x17b0 [ 484.301689][ T7818] ? __pfx_process_scheduled_works+0x10/0x10 [ 484.301726][ T7818] worker_thread+0x8a0/0xda0 [ 484.301767][ T7818] kthread+0x70e/0x8a0 [ 484.301791][ T7818] ? __pfx_worker_thread+0x10/0x10 [ 484.301819][ T7818] ? __pfx_kthread+0x10/0x10 [ 484.301841][ T7818] ? _raw_spin_unlock_irq+0x23/0x50 [ 484.301866][ T7818] ? lockdep_hardirqs_on+0x9c/0x150 [ 484.301891][ T7818] ? __pfx_kthread+0x10/0x10 [ 484.301912][ T7818] ret_from_fork+0x3fc/0x770 [ 484.301944][ T7818] ? __pfx_ret_from_fork+0x10/0x10 [ 484.301975][ T7818] ? __switch_to_asm+0x39/0x70 [ 484.302007][ T7818] ? __switch_to_asm+0x33/0x70 [ 484.302028][ T7818] ? __pfx_kthread+0x10/0x10 [ 484.302049][ T7818] ret_from_fork_asm+0x1a/0x30 [ 484.302080][ T7818] [ 484.302087][ T7818] [ 484.509093][ T7818] Allocated by task 15814: [ 484.513595][ T7818] kasan_save_track+0x3e/0x80 [ 484.518279][ T7818] __kasan_kmalloc+0x93/0xb0 [ 484.522876][ T7818] __kmalloc_noprof+0x27a/0x4f0 [ 484.527731][ T7818] udp_tunnel_nic_netdevice_event+0x854/0x19f0 [ 484.533888][ T7818] notifier_call_chain+0x1b3/0x3e0 [ 484.539005][ T7818] register_netdevice+0x1608/0x1ae0 [ 484.544206][ T7818] nsim_create+0xae8/0xf10 [ 484.548627][ T7818] __nsim_dev_port_add+0x6b6/0xb10 [ 484.553744][ T7818] nsim_dev_port_add_all+0x37/0xf0 [ 484.558983][ T7818] nsim_dev_reload_up+0x451/0x780 [ 484.564013][ T7818] devlink_reload+0x4e9/0x8d0 [ 484.568694][ T7818] devlink_nl_reload_doit+0xb35/0xd50 [ 484.574064][ T7818] genl_family_rcv_msg_doit+0x215/0x300 [ 484.579615][ T7818] genl_rcv_msg+0x60e/0x790 [ 484.584140][ T7818] netlink_rcv_skb+0x205/0x470 [ 484.588907][ T7818] genl_rcv+0x28/0x40 [ 484.592888][ T7818] netlink_unicast+0x82c/0x9e0 [ 484.597685][ T7818] netlink_sendmsg+0x805/0xb30 [ 484.602726][ T7818] __sock_sendmsg+0x219/0x270 [ 484.607408][ T7818] ____sys_sendmsg+0x505/0x830 [ 484.612171][ T7818] ___sys_sendmsg+0x21f/0x2a0 [ 484.616846][ T7818] __x64_sys_sendmsg+0x19b/0x260 [ 484.621868][ T7818] do_syscall_64+0xfa/0x3b0 [ 484.626469][ T7818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.632365][ T7818] [ 484.634691][ T7818] Freed by task 15812: [ 484.638759][ T7818] kasan_save_track+0x3e/0x80 [ 484.643447][ T7818] kasan_save_free_info+0x46/0x50 [ 484.648474][ T7818] __kasan_slab_free+0x62/0x70 [ 484.653246][ T7818] kfree+0x18e/0x440 [ 484.657152][ T7818] udp_tunnel_nic_netdevice_event+0x1332/0x19f0 [ 484.663398][ T7818] notifier_call_chain+0x1b3/0x3e0 [ 484.668541][ T7818] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 484.674962][ T7818] unregister_netdevice_queue+0x33c/0x380 [ 484.680682][ T7818] nsim_destroy+0x1dd/0x670 [ 484.685188][ T7818] __nsim_dev_port_del+0x14d/0x1b0 [ 484.690302][ T7818] nsim_dev_reload_destroy+0x288/0x490 [ 484.695767][ T7818] nsim_dev_reload_down+0x8a/0xc0 [ 484.700815][ T7818] devlink_reload+0x1b6/0x8d0 [ 484.705582][ T7818] devlink_nl_reload_doit+0xb35/0xd50 [ 484.710958][ T7818] genl_family_rcv_msg_doit+0x215/0x300 [ 484.716507][ T7818] genl_rcv_msg+0x60e/0x790 [ 484.721012][ T7818] netlink_rcv_skb+0x205/0x470 [ 484.725779][ T7818] genl_rcv+0x28/0x40 [ 484.729776][ T7818] netlink_unicast+0x82c/0x9e0 [ 484.734577][ T7818] netlink_sendmsg+0x805/0xb30 [ 484.739353][ T7818] __sock_sendmsg+0x219/0x270 [ 484.744033][ T7818] ____sys_sendmsg+0x505/0x830 [ 484.748881][ T7818] ___sys_sendmsg+0x21f/0x2a0 [ 484.753563][ T7818] __x64_sys_sendmsg+0x19b/0x260 [ 484.758497][ T7818] do_syscall_64+0xfa/0x3b0 [ 484.763009][ T7818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.768901][ T7818] [ 484.771225][ T7818] Last potentially related work creation: [ 484.776933][ T7818] kasan_save_stack+0x3e/0x60 [ 484.781614][ T7818] kasan_record_aux_stack+0xbd/0xd0 [ 484.786816][ T7818] insert_work+0x3d/0x330 [ 484.791210][ T7818] __queue_work+0xbd9/0xfe0 [ 484.795717][ T7818] queue_work_on+0x181/0x270 [ 484.800300][ T7818] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 484.805933][ T7818] udp_tunnel_push_rx_port+0x180/0x200 [ 484.811651][ T7818] geneve_offload_rx_ports+0xd7/0x160 [ 484.817034][ T7818] geneve_netdevice_event+0x6a/0x80 [ 484.822242][ T7818] notifier_call_chain+0x1b3/0x3e0 [ 484.827357][ T7818] call_netdevice_notifiers+0x88/0xc0 [ 484.832768][ T7818] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 484.843121][ T7818] notifier_call_chain+0x1b3/0x3e0 [ 484.848255][ T7818] register_netdevice+0x1608/0x1ae0 [ 484.853540][ T7818] nsim_create+0xae8/0xf10 [ 484.857956][ T7818] __nsim_dev_port_add+0x6b6/0xb10 [ 484.863080][ T7818] nsim_dev_port_add_all+0x37/0xf0 [ 484.868200][ T7818] nsim_dev_reload_up+0x451/0x780 [ 484.873227][ T7818] devlink_reload+0x4e9/0x8d0 [ 484.877914][ T7818] devlink_nl_reload_doit+0xb35/0xd50 [ 484.883286][ T7818] genl_family_rcv_msg_doit+0x215/0x300 [ 484.888837][ T7818] genl_rcv_msg+0x60e/0x790 [ 484.893340][ T7818] netlink_rcv_skb+0x205/0x470 [ 484.898104][ T7818] genl_rcv+0x28/0x40 [ 484.902089][ T7818] netlink_unicast+0x82c/0x9e0 [ 484.906852][ T7818] netlink_sendmsg+0x805/0xb30 [ 484.911623][ T7818] __sock_sendmsg+0x219/0x270 [ 484.916300][ T7818] ____sys_sendmsg+0x505/0x830 [ 484.921062][ T7818] ___sys_sendmsg+0x21f/0x2a0 [ 484.925739][ T7818] __x64_sys_sendmsg+0x19b/0x260 [ 484.931031][ T7818] do_syscall_64+0xfa/0x3b0 [ 484.935539][ T7818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.941488][ T7818] [ 484.943815][ T7818] Second to last potentially related work creation: [ 484.950390][ T7818] kasan_save_stack+0x3e/0x60 [ 484.955073][ T7818] kasan_record_aux_stack+0xbd/0xd0 [ 484.960292][ T7818] insert_work+0x3d/0x330 [ 484.964623][ T7818] __queue_work+0xcfc/0xfe0 [ 484.969122][ T7818] queue_work_on+0x181/0x270 [ 484.973735][ T7818] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 484.979388][ T7818] udp_tunnel_push_rx_port+0x180/0x200 [ 484.984854][ T7818] vxlan_offload_rx_ports+0x139/0x200 [ 484.990493][ T7818] vxlan_netdevice_event+0x111/0x470 [ 484.995882][ T7818] notifier_call_chain+0x1b3/0x3e0 [ 485.000992][ T7818] call_netdevice_notifiers+0x88/0xc0 [ 485.006370][ T7818] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 485.012800][ T7818] notifier_call_chain+0x1b3/0x3e0 [ 485.017906][ T7818] register_netdevice+0x1608/0x1ae0 [ 485.023110][ T7818] nsim_create+0xae8/0xf10 [ 485.027529][ T7818] __nsim_dev_port_add+0x6b6/0xb10 [ 485.032644][ T7818] nsim_dev_port_add_all+0x37/0xf0 [ 485.037798][ T7818] nsim_dev_reload_up+0x451/0x780 [ 485.042828][ T7818] devlink_reload+0x4e9/0x8d0 [ 485.047501][ T7818] devlink_nl_reload_doit+0xb35/0xd50 [ 485.052871][ T7818] genl_family_rcv_msg_doit+0x215/0x300 [ 485.058414][ T7818] genl_rcv_msg+0x60e/0x790 [ 485.062928][ T7818] netlink_rcv_skb+0x205/0x470 [ 485.067698][ T7818] genl_rcv+0x28/0x40 [ 485.071679][ T7818] netlink_unicast+0x82c/0x9e0 [ 485.076443][ T7818] netlink_sendmsg+0x805/0xb30 [ 485.081211][ T7818] __sock_sendmsg+0x219/0x270 [ 485.085915][ T7818] ____sys_sendmsg+0x505/0x830 [ 485.090680][ T7818] ___sys_sendmsg+0x21f/0x2a0 [ 485.095399][ T7818] __x64_sys_sendmsg+0x19b/0x260 [ 485.100353][ T7818] do_syscall_64+0xfa/0x3b0 [ 485.104872][ T7818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.110772][ T7818] [ 485.113099][ T7818] The buggy address belongs to the object at ffff888041f82e00 [ 485.113099][ T7818] which belongs to the cache kmalloc-256 of size 256 [ 485.127166][ T7818] The buggy address is located 176 bytes inside of [ 485.127166][ T7818] freed 256-byte region [ffff888041f82e00, ffff888041f82f00) [ 485.140962][ T7818] [ 485.143285][ T7818] The buggy address belongs to the physical page: [ 485.149695][ T7818] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x41f82 [ 485.158455][ T7818] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 485.166950][ T7818] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 485.174490][ T7818] page_type: f5(slab) [ 485.178555][ T7818] raw: 00fff00000000040 ffff88801a441b40 dead000000000100 dead000000000122 [ 485.187136][ T7818] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 485.195727][ T7818] head: 00fff00000000040 ffff88801a441b40 dead000000000100 dead000000000122 [ 485.204480][ T7818] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 485.213146][ T7818] head: 00fff00000000001 ffffea000107e081 00000000ffffffff 00000000ffffffff [ 485.221819][ T7818] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 485.230481][ T7818] page dumped because: kasan: bad access detected [ 485.236890][ T7818] page_owner tracks the page as allocated [ 485.242594][ T7818] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7242, tgid 7241 (syz.2.334), ts 230541861752, free_ts 226634013815 [ 485.263863][ T7818] post_alloc_hook+0x240/0x2a0 [ 485.268637][ T7818] get_page_from_freelist+0x21e4/0x22c0 [ 485.274179][ T7818] __alloc_frozen_pages_noprof+0x181/0x370 [ 485.279987][ T7818] alloc_pages_mpol+0x232/0x4a0 [ 485.284850][ T7818] allocate_slab+0x8a/0x3b0 [ 485.289440][ T7818] ___slab_alloc+0xbfc/0x1480 [ 485.294138][ T7818] __kmalloc_noprof+0x305/0x4f0 [ 485.299022][ T7818] fib_create_info+0x1728/0x3210 [ 485.304051][ T7818] fib_table_insert+0xc6/0x1b50 [ 485.308907][ T7818] fib_magic+0x2c4/0x390 [ 485.313162][ T7818] fib_add_ifaddr+0x144/0x5f0 [ 485.317839][ T7818] fib_netdev_event+0x382/0x490 [ 485.322701][ T7818] notifier_call_chain+0x1b3/0x3e0 [ 485.328065][ T7818] __dev_notify_flags+0x18d/0x2e0 [ 485.333121][ T7818] netif_change_flags+0xe8/0x1a0 [ 485.338068][ T7818] do_setlink+0xc55/0x41c0 [ 485.342493][ T7818] page last free pid 7108 tgid 7107 stack trace: [ 485.348818][ T7818] __free_frozen_pages+0xc71/0xe70 [ 485.353939][ T7818] __slab_free+0x326/0x400 [ 485.358354][ T7818] qlist_free_all+0x97/0x140 [ 485.362955][ T7818] kasan_quarantine_reduce+0x148/0x160 [ 485.368417][ T7818] __kasan_slab_alloc+0x22/0x80 [ 485.373381][ T7818] __kmalloc_node_track_caller_noprof+0x216/0x4e0 [ 485.379889][ T7818] krealloc_noprof+0x124/0x340 [ 485.384660][ T7818] push_jmp_history+0x1cc/0x6f0 [ 485.389542][ T7818] do_check+0x52cb/0xe520 [ 485.393896][ T7818] do_check_common+0x1918/0x2470 [ 485.398963][ T7818] bpf_check+0x1746a/0x1d2d0 [ 485.403649][ T7818] bpf_prog_load+0x1318/0x1930 [ 485.408505][ T7818] __sys_bpf+0x528/0x870 [ 485.412772][ T7818] __x64_sys_bpf+0x7c/0x90 [ 485.417280][ T7818] do_syscall_64+0xfa/0x3b0 [ 485.421964][ T7818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.427855][ T7818] [ 485.430175][ T7818] Memory state around the buggy address: [ 485.435803][ T7818] ffff888041f82d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 485.443862][ T7818] ffff888041f82e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 485.451979][ T7818] >ffff888041f82e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 485.460060][ T7818] ^ [ 485.465704][ T7818] ffff888041f82f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 485.473769][ T7818] ffff888041f82f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 485.481827][ T7818] ================================================================== [ 485.502467][ T7818] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 485.509726][ T7818] CPU: 0 UID: 0 PID: 7818 Comm: kworker/u8:14 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 485.521655][ T7818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 485.531743][ T7818] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 485.539168][ T7818] Call Trace: [ 485.542508][ T7818] [ 485.545462][ T7818] dump_stack_lvl+0x99/0x250 [ 485.550170][ T7818] ? __asan_memcpy+0x40/0x70 [ 485.554871][ T7818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.560090][ T7818] ? __pfx__printk+0x10/0x10 [ 485.564796][ T7818] panic+0x2db/0x790 [ 485.568713][ T7818] ? __pfx_panic+0x10/0x10 [ 485.573149][ T7818] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 485.579082][ T7818] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 485.585446][ T7818] ? print_memory_metadata+0x314/0x400 [ 485.590944][ T7818] ? __mutex_lock+0x147/0x1340 [ 485.595912][ T7818] check_panic_on_warn+0x89/0xb0 [ 485.600879][ T7818] ? __mutex_lock+0x147/0x1340 [ 485.605676][ T7818] end_report+0x78/0x160 [ 485.609952][ T7818] kasan_report+0x129/0x150 [ 485.614572][ T7818] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 485.620581][ T7818] ? __mutex_lock+0x147/0x1340 [ 485.625387][ T7818] __mutex_lock+0x147/0x1340 [ 485.630009][ T7818] ? __mutex_lock+0x5b6/0x1340 [ 485.634901][ T7818] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 485.641174][ T7818] ? __pfx___mutex_lock+0x10/0x10 [ 485.646257][ T7818] ? __lock_acquire+0xab9/0xd20 [ 485.651125][ T7818] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 485.657209][ T7818] ? process_scheduled_works+0x9ef/0x17b0 [ 485.662951][ T7818] ? process_scheduled_works+0x9ef/0x17b0 [ 485.668679][ T7818] process_scheduled_works+0xae1/0x17b0 [ 485.674680][ T7818] ? __pfx_process_scheduled_works+0x10/0x10 [ 485.680678][ T7818] worker_thread+0x8a0/0xda0 [ 485.685287][ T7818] kthread+0x70e/0x8a0 [ 485.689362][ T7818] ? __pfx_worker_thread+0x10/0x10 [ 485.694479][ T7818] ? __pfx_kthread+0x10/0x10 [ 485.699167][ T7818] ? _raw_spin_unlock_irq+0x23/0x50 [ 485.704370][ T7818] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.709575][ T7818] ? __pfx_kthread+0x10/0x10 [ 485.714194][ T7818] ret_from_fork+0x3fc/0x770 [ 485.718796][ T7818] ? __pfx_ret_from_fork+0x10/0x10 [ 485.723926][ T7818] ? __switch_to_asm+0x39/0x70 [ 485.728692][ T7818] ? __switch_to_asm+0x33/0x70 [ 485.733465][ T7818] ? __pfx_kthread+0x10/0x10 [ 485.738078][ T7818] ret_from_fork_asm+0x1a/0x30 [ 485.742960][ T7818] [ 485.746277][ T7818] Kernel Offset: disabled [ 485.750598][ T7818] Rebooting in 86400 seconds..