last executing test programs: 3m14.830054078s ago: executing program 3 (id=173): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079109000000000007b0ae8ff0000000095000000feff0000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010067656e65766530"], 0x110}}, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) write$tun(r0, &(0x7f0000000600)={@val={0x0, 0xf8}, @void, @x25={0x1, 0x7d, 0x1f, "cac694e30cc5941ae3340ea0325a3cbe79ffa29b2dcdd9ddbdb257efa7d665b286e5002698964f42f5b13730312c51e9f9c7071020c097ca139143f9a088c35cc0a87a5f8440d16e6ffc1c6e7de6bef10803dde851cfbf3844d9da35a2ce69067199b7343b7bd5b20e279c528fc305af68654e98ea5ee34982d8e70c64dcecdc872503f465f7d220a0318e94056fa7aea3564e40bb33ede591d5a55abc052d1907182f82c84f2c575531708c95aad6c202cbf842604df5127e6cc963b5d343a5"}}, 0xc7) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x4c884) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) sendmsg$nfc_llcp(r3, &(0x7f00000002c0)={&(0x7f00000004c0)={0x27, r7, 0xffffffffffffffff, 0x5, 0x0, 0x1, "8a81a0225f0a64a311521b18bc24af9495c0ec9849171e4d4e18fb72ec870ccc48a8a0e3f5eb1e0133cac81e142c5d027f805e174a0cbb70c9c11638bd69c9", 0x2}, 0x60, &(0x7f0000000b40)=[{&(0x7f0000000700)="73b5f16f352e555b1d5f6230de7fd1d844c12843dcc57287cb85d9893e7445e6a698fffaf2e87ec6849296c63c6a1a1c57f02dfd7f5bd7ef33c1cfa374efc1c5d3b439ddf8db5dd9e27c163d3ab455e84cf910a00ae480d18e90916c170a574a67ea0d136a0e9589617c14ec0837d6d89b046ef77542ec49e31e5e010b3bbedaf62f608af5031a4563cc50187f0451b1fec7e0f948de4b9dab05d05d4b102f70f5c14929cc9d2b7705bed5fb7858c6d73fa0eaa3ed1ae012ed6242c08f4b3612190f1673fb1fbeb6cd15cd1b68defcc5e7683c097d91f727d6cb7e68add85e2a3870caff906766fa", 0xe8}, {&(0x7f0000000880)="5b892a65756eaa145df9825b16273a0fb6666d097475738e47488291047152c4de237c086b7c57c1b7045011896abd92bc6d9cf9d07adfeff61cb98324dfba2dafeef0fb2ae7cc30964a34dd2ffdb4c4c217", 0x52}, {&(0x7f0000000a40)="246811ee94496e69332d625866d1af6a3f33387aae664a5af550f9fcfc2cbc59c5354ae05f43285aabc4335fd61d7bf1019c2688e81c1dbd26b30bd7f2b79f3c2733efccdbbfc5c430f0823aede8c2e3deea95575d15a44bd4f8d1bfbf2da7a8ff3f8213e62d6f214205c2d58b651848a07789995624f35ce891537fd13a5a92d082013898ff994ddb5018160435d7d420c503e6fc34612432bd2f469fc48d8413df817b1692846158aa13320f2502dbbc9a5d01e54f29ce5876a76e253060b1712bb45d1b3d8d09519bd13079187ce0d283ae8255d2033226d15d288235ce2384", 0xe1}, {&(0x7f0000000980)="4b9911fd22b3d5b10abbb5f5436766fcc264622407d5a64bb021bbc449fbf88e98cab53b4647c07f33e0e67b1ae2d2daa26aa8944d78701e950bb9232030a36ea804c268b95881d87ccd04001bed7826a5d1cbf4df844e71d41b0421890196197066e3a24fbc7947420cd4f72d54316f", 0x70}, {&(0x7f0000000c00)="f9860093f72aafad969718c88e33baee86c8ea360b741516f4a110e08df767fffdb1d471d9dfe3af7f32ae8bf3a8ecad55d8fc7e5cb7a812f6973e79777a84487d6c3a512451c210cd04804ff8ea177ac5f082d6ae4af0768c4bf4d9c95962302f6728085f423f96f79c06c4299f10c72e8d2d721fc6eb079f525bcea278fc507a6b945b617bb02a96efe8f7aaa21489d147f3ecc5077efbb68bc143f80143c1e7c9a01c828968e6ed660e66f76328", 0xaf}, {&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000001cc0)="cbfa3f5579440124022adc0fea9c986ff715615184f1c81f666fb1db74f8cc640df3db8ca5d90b5af96e038dd12a23292a6034fcadbc570dbb520074cb7d73eda32bc6a7efc5f3b50a11f1f797fdd63a937657e0e73e1db12d71af09d99077fca7aa76512121c4a6faf097a018cf6a5f92f8d79585ca1e635ccbbbbb52385e325022a6865ebfdb38fabc9fc5228d1cfbf743905ad8267515640de77e9c44c1341a03f2c9807a18bcdeea0be8fa1fda471bbc6db9d87cd020b7c7afb77c05469e7e3d2f02c321d51fa446e36470c6756c9dac0149e84a509f2d8a276a29bf6c4eac7d22f9cdcd8d", 0xe7}], 0x7, &(0x7f0000001f40)=ANY=[@ANYBLOB="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"], 0xa8, 0x48810}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000001e80)={0x0, @in6={{0xa, 0x4e22, 0x6, @remote, 0x7fff}}}, 0x84) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000a00)) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0xffffffffffffffff, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="580100001000010000000000000000007f0000010000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f0000010000000000000000000000000000000033060000fc0100000000000000000000001a000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00040000000000007a58b3954c244c59e163921500"/284], 0x158}}, 0x0) 3m14.334372897s ago: executing program 3 (id=182): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c009900070000002a0000001400040070696d361c656730000000000000000008000500060000000800178004000100"], 0x4c}}, 0x0) 3m14.049434704s ago: executing program 3 (id=184): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c000280", @ANYRES32], 0x4c}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}}, 0x0) (async) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 3m13.767444783s ago: executing program 3 (id=188): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x12) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000040)="27031c00", 0x4}], 0x1}, 0x240008b0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x1, 0x2) clock_gettime(0xfffffffffffffffc, &(0x7f0000003a40)={0x0, 0x0}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r7, 0x28, 0x2, &(0x7f00000008c0), 0x8) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r8, &(0x7f0000004b40)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x10, @private2, 0x8}, 0x1c, &(0x7f00000001c0), 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9b5d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000001700)="92", 0xfffffffffffffd95}], 0x1}}], 0x2, 0x4000090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r9) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYRESHEX=r2, @ANYRESHEX=r6], 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) shutdown(r8, 0x1) 3m13.23719926s ago: executing program 3 (id=195): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) unshare(0x20000400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(r2, &(0x7f0000000980)='io.stat\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x2500, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdba, 0x0, 0xfffd, 0x1, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3a}}}}}) 3m12.479726983s ago: executing program 3 (id=203): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x2000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x6}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x6}]}}]}, 0x48}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000d3041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000080)=""/195, 0x0, 0xe4}, 0x94) 3m11.93675802s ago: executing program 32 (id=203): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x2000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x6}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x6}]}}]}, 0x48}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000d3041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000080)=""/195, 0x0, 0xe4}, 0x94) 3.458555868s ago: executing program 1 (id=2647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x8c}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x10, 0x10, 0x8000, 0x1, {{0xa, 0x4, 0x3, 0x2, 0x28, 0x66, 0x0, 0x0, 0x29, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x14, 0x2f, 0x1, 0x4, [{@rand_addr=0x64010101, 0x3}, {@loopback, 0x2}]}]}}}}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0x9, [@func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x10}, {0xa, 0x2}, {0xd, 0x4}, {0x2, 0x2}, {0x9, 0x3}, {0x10, 0x2}, {0xb, 0x1}, {0xa, 0x4}, {0x7, 0x2}]}, @fwd={0x8}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x1}, {0x10005, 0x4}]}, @const={0x10, 0x0, 0x0, 0xa, 0x3}, @float={0x4}, @typedef={0xf, 0x0, 0x0, 0x8, 0x2}, @enum={0x2, 0x4, 0x0, 0x6, 0x4, [{0x1, 0x7ff}, {0x0, 0x9}, {0x3, 0xb81}, {0x9, 0x8000}]}]}, {0x0, [0x5f, 0x5f, 0x30, 0x61, 0x61, 0x30, 0x80]}}, &(0x7f00000003c0)=""/161, 0xed, 0xa1, 0x1, 0x5}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x7f, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0xb, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3ff}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xfffffffb}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}], &(0x7f0000000140)='syzkaller\x00', 0xa1, 0xbd, &(0x7f0000000280)=""/189, 0x41000, 0x4, '\x00', r3, @fallback=0xd, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x0, 0x4, 0x3}, 0x10, r6, 0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000680)=[{0x3, 0x2, 0x7}, {0x3, 0x1, 0xa, 0x1}, {0x3, 0x3, 0x2}, {0x5, 0x1, 0xa, 0x2}, {0x5, 0x4, 0x9, 0x7}, {0x2, 0x2, 0x3, 0x6}, {0x5, 0x4, 0x5, 0x5}, {0x3, 0x4, 0x2, 0xb}, {0x5, 0x1, 0xe}], 0x10, 0x5}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'vlan0\x00'}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000b00)=0xa7b, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000ac0)={r5, 0x20, &(0x7f0000000a80)={&(0x7f0000000880)=""/250, 0xfa, 0x0, &(0x7f0000000980)=""/222, 0xde}}, 0x10) pipe(&(0x7f0000000b40)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000500"/28], 0x48) bind$bt_hci(r8, &(0x7f0000000b80)={0x1f, 0x3, 0x2}, 0x6) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14}}, 0xb8}}, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={r11, 0x5}, 0x8) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x43, 0x9, 0x0, 0x4, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x3}]}, 0x1c}}, 0x24000044) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x58}}, 0x0) 2.70679161s ago: executing program 4 (id=2657): r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0}, &(0x7f0000000080)=0x60, 0xc0000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"1948ca61ecd75e04f03a0eb79f0afcfb", 0x0, 0x0, {0xffffffffffffffff, 0xffff}, {0x8000, 0x3ff}, 0x0, [0xffff, 0x0, 0x1, 0xaa40, 0x6, 0x4, 0x9, 0xed, 0x8a, 0x2, 0x7, 0xb61d, 0x8, 0x4, 0x4, 0x5]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"2eb7b1ad45609397b4923c4d67396a85", 0x0, 0x0, {0x9, 0x7fff}, {0x8, 0x8f}, 0x0, [0xb, 0x3, 0xbd0, 0x40, 0x200, 0x1, 0x985, 0x9, 0x1, 0x100000000, 0xfffffffffffffffc, 0x0, 0x800, 0x5, 0x5, 0x100000001]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000002c0)={"4d145dc3294632ac4d778be9fe0668cf", r2, r3, {0x88d, 0x6}, {0xc, 0x7}, 0x7, [0x9, 0x101, 0x81, 0x1, 0x101, 0x0, 0x8aa, 0xfffffffffffffff8, 0x8, 0x10001, 0x8001, 0x0, 0x2, 0x1e5d, 0xfffffffffffffffc, 0x101]}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000003c0)={r0, 0xffffffffffffffff, 0x6, 0x3ff}) write$6lowpan_control(r4, &(0x7f0000000400)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f0000000480)=@deltclass={0x4c4, 0x29, 0x300, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x10, 0x8}, {0x1, 0x8}}, [@tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x81, 0xc}}, @tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0x9}}, @tclass_kind_options=@c_htb={{0x8}, {0x474, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0x1cbff643}, @TCA_HTB_RTAB={0x404, 0x4, [0x10, 0x80, 0x9, 0x0, 0x9, 0x81, 0x3ff, 0x2, 0x80000001, 0x4, 0x7, 0x2, 0x4, 0x3, 0x8, 0xff, 0x5af377d7, 0xfffffffa, 0x80, 0xfffffff7, 0x1, 0x7f, 0x6, 0x5f2151c6, 0x6, 0x7, 0x2, 0x2, 0x6, 0x5a9ebe40, 0xb, 0x9, 0x4, 0x1, 0x3f19, 0x0, 0x3000, 0x8, 0x200, 0x5, 0x7, 0x1, 0x1, 0x3, 0x8, 0x3, 0x9, 0x800, 0x4028, 0x0, 0x299c, 0x2, 0x0, 0x401, 0x800, 0x1, 0x10001, 0x10, 0x6, 0x7f, 0x1, 0x0, 0x4, 0x7, 0x1, 0x5, 0x6, 0x12000000, 0x0, 0x3, 0xa4, 0x3947f3cc, 0xcd, 0x7a, 0x7, 0x4, 0x1ff, 0x2, 0x8, 0x2, 0x9, 0x4, 0xc, 0x5, 0x5, 0x8000, 0x10001, 0x9, 0x2, 0x0, 0x1, 0xfffffff4, 0x3, 0x7, 0x9, 0x7, 0x5, 0x67, 0x3fb68000, 0x35, 0xd, 0x1ff, 0xfffff3d4, 0x5, 0x0, 0x6, 0x2, 0x9, 0x733b, 0x91, 0x9, 0x0, 0x97, 0xa00000, 0x4, 0x8, 0x200, 0x7fffffff, 0x7f, 0x0, 0x2a90d2e6, 0x256, 0x4, 0x0, 0x101, 0x4, 0xffffffc0, 0x3, 0xb, 0x7, 0x4, 0x2, 0x4, 0x92d9, 0xc7, 0x8001, 0x600, 0x5, 0x6000000, 0x4, 0x1000, 0x7fffffff, 0x5, 0x7, 0x7, 0x0, 0x9, 0x400, 0x3, 0x0, 0x9, 0x3ff, 0xa0000, 0xd4c5, 0x4, 0x800000, 0xc, 0x830, 0x1, 0x6327, 0x2, 0x101, 0x4, 0xe2, 0x5, 0x3, 0xfffffbff, 0x3, 0x5, 0x8, 0x800, 0x8, 0x7, 0x3, 0x0, 0x26, 0x1000, 0x4, 0x3, 0x1, 0x100, 0xbfbb, 0x5, 0x4, 0x7, 0x7d, 0x7, 0x8, 0x8, 0x8, 0x8, 0x40, 0xc33, 0x800, 0xa3c, 0x4, 0x3, 0x3, 0xa5d, 0x3, 0x9, 0x800, 0x3ff, 0x30ea, 0x1ff, 0x2, 0x800, 0x400, 0x200, 0x8000, 0x1000, 0x174, 0x5, 0x18, 0x9, 0x659, 0x81, 0x8, 0xfffffe01, 0x5, 0xf5d4, 0x1, 0x0, 0x9, 0x7, 0x0, 0x2, 0x3ff, 0x5, 0x7fff, 0xe, 0x7fffffff, 0xffff, 0x7, 0x6, 0x8, 0x43d8, 0x400, 0x10, 0xff, 0x6, 0x7bd6, 0x3, 0x6, 0x9, 0x8, 0x3ff, 0x7f, 0xea, 0x9, 0xdb45, 0x10000, 0x400, 0x8, 0xa2a, 0x31]}, @TCA_HTB_CEIL64={0xc, 0x7, 0x7}, @TCA_HTB_RATE64={0xc, 0x6, 0x6}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_PARMS={0x30, 0x1, {{0x3, 0x2, 0x0, 0x9, 0x200, 0xff}, {0x7, 0x1, 0x25, 0x9, 0x6, 0x6}, 0x200, 0x9, 0x8, 0xcc, 0x6}}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RATE64={0xc, 0x6, 0xe34b}]}}]}, 0x4c4}, 0x1, 0x0, 0x0, 0x841}, 0x4) sendmsg$nl_route(r4, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)=@ipv4_newrule={0x5c, 0x20, 0x10, 0x70bd2d, 0x25dfdbfc, {0x2, 0x20, 0x0, 0x2f, 0x9, 0x0, 0x0, 0x6, 0x10014}, [@FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x3ff}, @FRA_FLOW={0x8, 0xb, 0x510f4d8}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1c4}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x4}, @FRA_DST={0x8, 0x1, @multicast1}, @FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000bc0)={'ip6_vti0\x00', &(0x7f0000000b40)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x5, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x700, 0x6, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000c80)={'syztnl2\x00', &(0x7f0000000c00)={'syztnl0\x00', r5, 0x4, 0xfd, 0x3, 0xfb7, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x40, 0x80, 0x200, 0xc}}) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000cc0)=0x3, 0x4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000d40)={{r0}, 0x1, &(0x7f0000000d00)=[0xfffffffffffffffb], 0xffff, 0x1}) sendmsg$nl_route_sched(r4, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)=@newchain={0x2c, 0x64, 0x400, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xffff, 0xfff2}, {0xffff, 0xa}, {0x6, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc0) r7 = accept4$netrom(r4, &(0x7f0000000ec0)={{0x3, @default}, [@remote, @null, @netrom, @default, @remote, @remote, @bcast, @netrom]}, &(0x7f0000000f40)=0x48, 0x800) getpeername(r7, &(0x7f0000000f80)=@can={0x1d, 0x0}, &(0x7f0000001000)=0x80) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x4, 0x11, &(0x7f0000001040)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff9}, @map_val={0x18, 0x0, 0x2, 0x0, r4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], &(0x7f0000001100)='GPL\x00', 0x6, 0xe, &(0x7f0000001140)=""/14, 0x40f00, 0x8, '\x00', r6, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001180)={0x2, 0xf, 0x74d, 0x5}, 0x10, 0x0, r4, 0x1, &(0x7f00000011c0)=[r4, r4, r7, r4, r4], &(0x7f0000001200)=[{0x0, 0x4, 0x4, 0x4}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001580)={r9, 0x0, 0x2c, 0x1b, &(0x7f0000001300)="7166113cfee33f11de280609debdae0a01e6e05e25a4df879631d4442afc97b2678529fd6529f95dd39e1bc0", &(0x7f0000001340)=""/27, 0xf8, 0x0, 0xd1, 0xf3, &(0x7f0000001380)="440f0594755ae8deb40b856c5f809accbd1a8ba32068dafac59984047d5d01d3a45a872bb6c2556f64e60cf9b77e38309e72900238918b36812d8b29c1e37131251ec97d8ea4ff01793319801a14cddbd2562cc4e92ad518105caa2ec877c5a77ef1c227a27495a1fdf285f7034dbf915a72a1133767186a9d7e0d7d817e04d90fd339679e578eb0c4e59eea19d53db88ef2d16376a92f92d123824c32099c0845bee58594e2e6bbaed94cef7ba8679a51055560d31b079ece16de211ebb78d98b0843738c4b063e50318345c6be57aa98", &(0x7f0000001480)="31bffaa17fa203f17afb561c375c25489cbe3cdd612d41aabc99173bc78a6aa8622254a1b8cbbaff1a8608ca23aef691fa4421fb2531ae58e2a9745e5cf2d5a3d4ca8610c861a2f46a4972522985fbbff2d342c2e1625d9c6dcf76453c557db2395c3c3a819d6aaa034ea2619370a2ae4a95bdebd1a8eb12b2428f586f83d98edee6e74069503d4a74cac51ffcf02baa91797780168327271ee9f080ea866aacc10d4a42d00a5e4a4af34081b454be8511973991f46ab61c3551d0bfbc4fb0c36b8ff46c5356c90347847d5556fb9a963ec48e59f47d5bf190d16ee3e35507a133327e2650c21f9295b165201afb113ad83d4b", 0x0, 0x0, 0x6}, 0x50) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), r4) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x30, r10, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4b}, @val={0x8}, @val={0xc, 0x99, {0xfffffffe, 0x74}}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x1) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001780), r4) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f00000018c0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001880)={&(0x7f00000017c0)={0x94, r11, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x9}, @ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000001ac0)={0x0}, &(0x7f0000001b00)=0x8) sendmsg$inet_sctp(r4, &(0x7f0000001c40)={&(0x7f0000001900)=@in6={0xa, 0x4e24, 0x7, @private2, 0x7f}, 0x1c, &(0x7f0000001a80)=[{&(0x7f0000001940)="95f4a18bd4889f63aa9246ba8ffff378b714ac264fabf9beddb64baede345c40d82d51fd3895f322ddc5ca0d59d563733f523db6600ba387761f041620d6f714514021e0db839d53f36cbc93ca3f98", 0x4f}, {&(0x7f00000019c0)="ba677226f6171dd8f4970b933bf3968d07319cd21073f1a8db742a63aebcec86533e8909b5f86529896fe851763e7251dcd33a392063393b6e62418df20f4eb25d2fd381027af2", 0x47}, {&(0x7f0000001a40)="0791f398f0b6e8f5fc14", 0xa}], 0x3, &(0x7f0000001b40)=[@init={0x18, 0x84, 0x0, {0x2, 0xfff7, 0x0, 0x7}}, @dstaddrv6={0x20, 0x84, 0x8, @private0}, @authinfo={0x18, 0x84, 0x6, {0x1}}, @prinfo={0x18, 0x84, 0x5, {0x8, 0xd1}}, @init={0x18, 0x84, 0x0, {0x4, 0xfff, 0xffff, 0x7}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x2}}, @dstaddrv6={0x20, 0x84, 0x8, @local}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x8, 0x1, 0x9, r12}}], 0xd8}, 0x90) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000001c80)={r12, 0x6d73, 0x4, [0x0, 0x9, 0xe, 0x81]}, 0x10) pread64(r7, &(0x7f0000001cc0)=""/94, 0x5e, 0x1000000) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x50, 0x0, 0xb, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0x22, 0x1, 'disconnect aa:aa:aa:aa:aa:10 1'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x50}}, 0x200000c0) sendmsg$nl_generic(r4, &(0x7f0000002200)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x802180}, 0xc, &(0x7f00000021c0)={&(0x7f0000001ec0)={0x2d0, 0x3d, 0x1, 0x70bd2c, 0x25dfdbfe, {0xe}, [@generic="08f811dd6ca4325ac80791ef546bf2505e310dd32c464efaedaf2d25fc620b38d4327dd3fed0f19fa3183ab0cf3d529c18ec051887b0025e6674ea216b064f8b78a6764dfc28b48d97aab69e2ab5aabd36736e9cce51197769dda60f002ed7fab7bd188ea23ec8adf2af1d9d40222af22379678f613322669c959b21139153e12730a06f5e60f14fd28ac1e12fb8128d88b09fc3dde33d13194df9743a081e284c501a412be2899ec0645580fafdb54e4f82a363277780fd0cf8e08ee7415c026248db99c9a56e7fbe85ba1e228414aafa72f3c11e3a80ea71e6", @generic="20db6adb5cf364c5c036623f1f941b566e2c5a2bfa41c931d59ae183738974a24c99f602b3f080412dc4de76213ee1c24f2dd06007cace69bcb4dc402b6295fe354f58d0b31015df5198494dd7c3faf460ca73cada2ff0bfe9c7da1b1d9994f632ac376f3d2cc38afc609107e9bed6ec5ab724b1d866ca810b5c341823933ed92b7ee7297ecb2c4a6593365ed4490926c04af5cc646d3d8583042b9bf3a026949c62eaa63ec8839d9dbbd1", @nested={0x4, 0x22}, @nested={0x130, 0x60, 0x0, 0x1, [@typed={0xc, 0xb7, 0x0, 0x0, @u64=0xb71}, @typed={0x8e, 0x29, 0x0, 0x0, @binary="a1aead4705751a226cbdbae10e340c7c064f941d33d52012cfb630cc20ba729a746eea169ddece1a927583dea649c51e7828edb453ebe98df366b61301dd0ccdf8169926a415b9d76414379d740b7789185dc65b6f257e37856255370facacf0ec95e4d09ffcbc7c3f31dbe49a60dc3b29ff7b0dfc7e90f862f974aaccad328a6ff448fb9c3c3ad2aba7"}, @nested={0x4, 0x11c}, @typed={0x8, 0x77, 0x0, 0x0, @u32=0x2}, @nested={0x4, 0x18}, @generic="e68cfa466c31f91f274a376b0e7723a843d5a47064e6387ad6ab564f349ffb214571d212d35eb5424d900bc8e536f11a27b8f9be553f94d3b949e072bf5879c38ba4a384168b2b0a529f022371dd6da90fe463da069aedad1a163ca9389880be0158dbf49f88eda436ef047b94c66fe4597812fbd9cdff22250eadf3811be233"]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000002280), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000022c0)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x48, r13, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_FIRMWARE_NAME={0xd, 0x14, 'ip6_vti0\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '\xc6('}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, 'prio\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004010}, 0x8004) 2.442115422s ago: executing program 1 (id=2661): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ppoll(&(0x7f0000000780)=[{0xffffffffffffffff, 0x10e0}], 0x1, &(0x7f0000000400)={0x0, 0x989680}, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001e00010000000000000000000200000001000007000000000800010000000000080005"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) getsockopt(r5, 0x1, 0x6, 0x0, &(0x7f00000008c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x8168}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x80000001, 0x7}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x48010) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010800040000fedbdf250b00000008000300", @ANYRES32=r10, @ANYBLOB="28005080010004002c0d205f578000000014574df400000005000200060000000800070002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x48854) 2.389086057s ago: executing program 4 (id=2664): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f04d0067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901", 0x3d}], 0x1}, 0x48002) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x5532, 0x2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000520099b100000040000000000a0000000c00"/32], 0x20}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r1, &(0x7f0000000040)={0x10, 0x6}, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000000010104000000000000000002000005240001801400018008000100e000000108000200000000000c0002800500010000000000240002801400018008000100e000000108000200ac1e00010c00028005000100000000000800074000000000100016"], 0x74}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) accept4$nfc_llcp(r0, 0x0, &(0x7f0000000140), 0x80000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) accept4$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10, 0x0) unshare(0x22020400) r4 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000640)}}], 0x2, 0x0) close(r4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc81100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f04d0067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901", 0x3d}], 0x1}, 0x48002) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x5532, 0x2}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000520099b100000040000000000a0000000c00"/32], 0x20}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$packet(r1, &(0x7f0000000040)={0x10, 0x6}, 0x14) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000000010104000000000000000002000005240001801400018008000100e000000108000200000000000c0002800500010000000000240002801400018008000100e000000108000200ac1e00010c00028005000100000000000800074000000000100016"], 0x74}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) (async) accept4$nfc_llcp(r0, 0x0, &(0x7f0000000140), 0x80000) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) accept4$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10, 0x0) (async) unshare(0x22020400) (async) socket$kcm(0x29, 0x2, 0x0) (async) sendmmsg$inet(r4, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000640)}}], 0x2, 0x0) (async) close(r4) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc81100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) (async) 1.998393065s ago: executing program 5 (id=2667): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2c060000) unshare(0x24020400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x843, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 1.9598814s ago: executing program 4 (id=2669): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x68, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_CIDR={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}, 0x1, 0x0, 0x0, 0x40811}, 0x0) (async, rerun: 64) syz_emit_ethernet(0x46, &(0x7f0000001640)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000100000fe8000000000000000000000000000aafe8000000000000000000000000000bb00010000000000000700000000010007e405090000000000000006000000000000000010ad00000000000102015a0000"], 0x0) (rerun: 64) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="100000000004f01699070e70f881f72aa28bb7b72d2eee98b0bd329c9fb6fb836ec4437c507fd4cdee4448972260bb23f3bff41dfde7740c9151fdda8b2f7aafc3dded0f240c8e00"/97], 0x10}, 0x1, 0x0, 0x0, 0x240048d4}, 0x200400c9) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x401, 0x4, 0x1, 0xe, 0x7}, &(0x7f0000000080)=0x14) 1.826126388s ago: executing program 2 (id=2670): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000200)="05178100", 0x4, 0x4, &(0x7f0000000080)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup, 0x16, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x30, r5, 0xfd, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="6d512f38d861"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x80) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xafab}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[], 0xfdef}}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)) (async) sendto$packet(r2, &(0x7f0000000200)="05178100", 0x4, 0x4, &(0x7f0000000080)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @remote}, 0x14) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup, 0x16, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x30, r5, 0xfd, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="6d512f38d861"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xafab}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) (async) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[], 0xfdef}}, 0x4000000) (async) 1.803296465s ago: executing program 5 (id=2671): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xafda, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 1.685205148s ago: executing program 1 (id=2672): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r5, @ANYBLOB="05005b"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x44b, 0x70bd28, 0x0, {0x7a, 0x0, 0x0, r14, 0x0, 0x12}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x1b}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x30008095}, 0x0) (async) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r16 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r11]}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r16, r15}, 0xc) 1.622347836s ago: executing program 4 (id=2673): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x3, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x40000000, 0x400}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r1, &(0x7f0000000d40), 0x0}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000090a010400000000000000000000000008000a4000000000090002009b95aeedebf5e3f10900010073797a3000000000080005400000000c080003400000000808000740000000000800064000000000140000001000010000000000000000000084000a"], 0x7c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 1.621941017s ago: executing program 2 (id=2674): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x1, 0x0, 0x0, 0xf, 0x1, [], "f8"}]}}, &(0x7f0000000300)=""/2, 0x2a, 0x2, 0x1}, 0x20) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x1fffffffffffff3b, &(0x7f0000000000)=@framed, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000080)=""/172, 0xac}, {&(0x7f0000000180)=""/82, 0x52}, {&(0x7f0000000200)=""/97, 0x61}, {&(0x7f0000000380)=""/229, 0xe5}, {&(0x7f0000000280)=""/30, 0x1e}], 0x5, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}, 0x10100) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000780)={r3, 0x80000001, 0x3, 0x3}) connect$pppl2tp(r5, &(0x7f00000007c0)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @broadcast}, 0x1, 0x4}}, 0x2e) 1.589766688s ago: executing program 5 (id=2675): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x20) close(0x3) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r7) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r8, 0x1, 0x0, 0x0, {0x22}}, 0x14}}, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r9, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r9, 0x80) (async) listen(r9, 0x80) accept$netrom(r9, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r10, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r10, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) (async) ioctl$FS_IOC_RESVSP(r10, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) recvmmsg(r5, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x32000, 0x0) close(0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'nr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d0400"/20, @ANYRES32=r11, @ANYBLOB="00000000f29f7b7e240012801100010062fd696467655f736c617665000000000c00058008002200", @ANYRES32=r11, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 1.480430016s ago: executing program 1 (id=2676): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd, 0x0, 0x0, 0xfc}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000540)={r1, @in={{0x2, 0x4e20, @multicast1}}, [0x3, 0x0, 0x7, 0x0, 0x3, 0x8, 0x8, 0x5, 0x1, 0x7, 0x0, 0x8, 0xffffffff, 0x2, 0x8]}, &(0x7f0000000280)=0x100) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.41346432s ago: executing program 2 (id=2678): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000300)=0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0xf1}, &(0x7f0000000380)=0x8) r2 = socket(0x8, 0x4, 0x10000004) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000480)={0x7fff, 0xa, 0x6, 0x4e3, r1}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000003c0)={r1, @in={{0x2, 0x4e23, @local}}, 0xf, 0x5}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) close(r5) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x6) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0c00fbff03000000040000000920000000000000bf2f4b176838b2f451090a7aec4588edb32380cc5b68bc36f4c55013b674be278b0503dadd095181c6bd1e35b3ff156460e5b46f37561dbe810da9cbf27d36", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_opts(r9, 0x0, 0x4, 0x0, &(0x7f0000000040)) bind$alg(r8, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r8, 0x117, 0x5, 0x0, 0xe) sendmsg$nl_route(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES8=r3, @ANYRES64=r6], 0x44}}, 0x0) getsockopt$packet_int(r7, 0x107, 0x13, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 1.413147232s ago: executing program 4 (id=2679): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117500000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = epoll_create(0x7) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) close(r2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000b00)=""/55, 0x37}, {0x0, 0x38}], 0x2}}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}, 0x1, 0x0, 0x0, 0x4048040}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0xc0189436, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x28, 0x42, 0xb, 0x70bd23, 0x25dfdbfb, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}, @nested={0xa, 0x1, 0x0, 0x1, [@generic="78a449a0dd64"]}]}, 0x28}}, 0x24040084) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0300001a"], 0x34c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 1.297726373s ago: executing program 1 (id=2680): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 1.260964801s ago: executing program 5 (id=2681): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044080) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000100), &(0x7f00000001c0)=0x4) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r3, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffffffd}]}}]}, 0x38}}, 0x0) 1.202329s ago: executing program 0 (id=2682): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f00000000c0)=""/81, 0x1214000, 0x800}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) setsockopt$packet_int(r4, 0x107, 0xb, &(0x7f0000000280)=0x200, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1.201043042s ago: executing program 2 (id=2683): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)={0x44, r1, 0x100, 0x400, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "0400"}, @NL80211_KEY_IDX={0x5, 0x2, 0x6}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 1.118900547s ago: executing program 5 (id=2684): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x28, 0x42, 0xb, 0x70bd23, 0x25dfdbfb, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}, @nested={0xa, 0x1, 0x0, 0x1, [@generic="78a449a0dd64"]}]}, 0x28}}, 0x24040084) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000240)={0x1f, @none}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000006908be0f6e3d2cf620a2596c48b2a31ff56d88600000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 1.100192514s ago: executing program 1 (id=2685): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)={0x2c, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) (async) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (async) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa032}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20009010}, 0x0) (rerun: 64) 985.787386ms ago: executing program 2 (id=2686): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f0000000000), 0x4) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000080)=0x28) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r1, &(0x7f0000000100)={0x1a, 0x8, 0x9, 0x5, 0xc, 0x1, @remote}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, 0x1403, 0x10, 0x70bd27, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000040) accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0}, &(0x7f0000000300)=0x14, 0x800) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000340)={0x3, 'veth1_to_bridge\x00', {0xe90}, 0x7}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r5, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x15}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x80000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x20000000) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r4) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r6, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x559}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x40045) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r7, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4008862) r8 = socket$netlink(0x10, 0x3, 0xe) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x1, 0x4, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xff}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xb14}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000854}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000840)={0x7, 'ip6tnl0\x00', {}, 0x2}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r9, 0x84, 0x7, &(0x7f0000000880), &(0x7f00000008c0)=0x4) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000940), r4) sendmsg$L2TP_CMD_TUNNEL_DELETE(r8, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, r10, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x800}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000000) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x118, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}]}}, {{0x8, 0x1, r3}, {0x80, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8f60}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x118}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r11 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, r10, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xc5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r11}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40811}, 0x4000040) accept4$llc(r1, &(0x7f0000000d80)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000dc0)=0x10, 0x0) r12 = socket(0x21, 0x4, 0x0) sendmsg$OSF_MSG_REMOVE(r12, &(0x7f0000001100)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000e40)={0x268, 0x1, 0x5, 0x3, 0x0, 0x0, {0x7}, [{{0x254, 0x1, {{0x2, 0x6af}, 0xfc, 0x2, 0x140e, 0x8df, 0x1e, 'syz0\x00', "b8e69401c881b230d84cbe0fda31848fa003c522d71c85626dbda5d92e5841b9", "7230734710b354ef72580bcc4d8ce2000b51a9dff43d7b394d5287c0d3a280de", [{0x1, 0x200, {0x2, 0x1000}}, {0x4, 0x7, {0x3, 0x8}}, {0x3, 0xfffd, {0x0, 0x4}}, {0x10, 0x22, {0x2, 0xf53}}, {0x683, 0x4, {0x2, 0xffffffff}}, {0x4f9, 0xff, {0x2, 0xf3}}, {0x8, 0x5, {0x2, 0xffff}}, {0x7, 0x6, {0x0, 0x1000}}, {0x2, 0x3, {0x3, 0x2}}, {0x2, 0x50, {0x3, 0x3}}, {0xb1ea, 0xfffd, {0x2, 0x15e}}, {0x5, 0x3, {0x2, 0x8}}, {0x0, 0x401, {0x3, 0x8}}, {0x8, 0x7, {0x2, 0x40000000}}, {0x101, 0x0, {0x0, 0x3ff}}, {0x17a, 0x6, {0x0, 0xffffffff}}, {0x8, 0x6, {0x0, 0xe}}, {0x8, 0x7, {0x1, 0x4}}, {0x9, 0xfffd, {0x2, 0xfffffff9}}, {0x67b2, 0x101, {0x3, 0x10}}, {0x7f, 0xe00, {0x0, 0x5}}, {0x0, 0x1, {0x0, 0x10001}}, {0x3, 0x8, {0x0, 0x1}}, {0x0, 0x4, {0x3, 0x9}}, {0x5, 0x3400, {0x1, 0x7}}, {0x4, 0x0, {0x1, 0x8}}, {0x7, 0x0, {0x0, 0x3}}, {0x5, 0x6, {0x1, 0x2}}, {0x6, 0x9, {0x3, 0x4}}, {0x1, 0x6, {0x3, 0x4}}, {0x8, 0x0, {0x1, 0x4}}, {0x5, 0xf178, {0x2, 0x3f9}}, {0xff, 0x7, {0x0, 0x8}}, {0x1, 0x2, {0x2, 0x7fffffff}}, {0x5e, 0x3, {0x1, 0x9}}, {0xfff, 0x2, {0x0, 0xfffffffc}}, {0x3, 0xfffd, {0x2, 0xffffff3e}}, {0x22a0, 0x1ff, {0x1, 0x5f}}, {0x10, 0x3ff, {0x0, 0x1}}, {0x0, 0x7, {0x3, 0x9}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40001}, 0x1) 922.231898ms ago: executing program 5 (id=2687): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\t\x00\x00'], 0x50) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x600}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000200000001000000090000007c00038008000100020000000800040002000000060007004e200000080003000100000014000600fe8800000000000000000000000000011400027b480000000000006f5f62726964676500140002"], 0x90}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="405279007182010b50b9e00231e2bf59aec2169974b5250c37ba7d58a27b56a6af9da90b39e1f773453a30dc61df2e2dbcaba3400463e8dfe29d0e0fa6706514702da94758abe54c9dbed2374b68c4c6b0940fe1e5e5c2a143efb0b50c49430f6f22cbeaf880054389b207c1fa53cfa0768d7e5728ae02bf58fe8ad64ba8db9f6b3e950c9f61b6985736a135f7511febbb955e7cfb526e1cbd879981d9aa8706636ee31e26bace5a2dbd6764000000", @ANYRES16=r1, @ANYBLOB="10002abd7000fddbdf250e00000008000500ff010000080004000900000008000500e30b0000640003800800010001000000080003000000000014000600000000000000000000000000000000000800030004000000060004000d00000014000600fc010000000000000000000000000001080001000100000008000500ac1414aa08000500ac14141924000280080007000700000005000d000100000006000e004e200000080009000300000008000500ff000000280003800800030000000000140002006e6574706369300000000000000000000800010002000000"], 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x58) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r5, 0x0, 0x21, &(0x7f0000d10ffc), 0x3) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x9a, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008848}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 818.388951ms ago: executing program 0 (id=2688): syz_emit_ethernet(0x5e, &(0x7f0000000040)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x28, 0x2c, 0x1, @remote, @local, {[@routing={0x2c, 0x4, 0x0, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3d}, @dev={0xfe, 0x80, '\x00', 0x23}]}]}}}}}, 0x0) 758.692906ms ago: executing program 0 (id=2689): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)=@caif=@dbg, 0x80, &(0x7f0000000000)=[{&(0x7f0000000200)=""/241, 0xf1}, {&(0x7f0000000300)=""/234, 0xea}], 0x2, &(0x7f0000000400)=""/125, 0x7d}, 0x12001) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fedbdf25090000000e0001006e65000f0002006e657464657673696d30000008000300030000000800090002400000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) 638.274097ms ago: executing program 0 (id=2690): r0 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r0, 0x2) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x1}, 0x10) close(r2) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/25, 0x19}], 0x1}, 0x4003) shutdown(r0, 0x2) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x804}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x9c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x6}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x90}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newtaction={0x88, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x74, 0x1, [@m_mirred={0x70, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x4, 0x401}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x10000004, 0x8, 0x1, 0x1}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x88}, 0x1, 0x2b1e}, 0x0) 622.748619ms ago: executing program 0 (id=2691): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0xfffffffc, 0x0, 0x28000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x200}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200005245855db7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000d10ffc), 0x4) 548.86271ms ago: executing program 0 (id=2692): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f00000003c0)=[{0x4, 0x5, 0xb, 0xb}, {0x2, 0x4, 0x7, 0x4}, {0x2, 0x1, 0x8, 0x3}, {0x1, 0x4, 0x4, 0xc}, {0x5, 0x5, 0xa, 0x7}, {0x5, 0x4, 0x0, 0x3}, {0x5, 0x2, 0x5, 0xa}, {0x4, 0x1, 0xe, 0x1}], 0x10, 0x9}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa8, &(0x7f0000000100)=[{}, {}], 0x10, 0x10, &(0x7f0000000140), &(0x7f00000001c0), 0x8, 0x8d, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c00018006000600800a00000800028004007280080007"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r4 = socket(0x27, 0x1, 0x7) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f00000007c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)={0x230, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x80}, {0x6, 0x11, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xcd}, {0x6, 0x11, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xcf4a}, {0x6, 0x11, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x83a}, {0x6, 0x11, 0x4}}]}, 0x230}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 441.357981ms ago: executing program 4 (id=2693): r0 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000080025bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000082040400240012800b0001006272696467650000140002800800020001000000080003"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x3, &(0x7f0000000140)=@framed, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="450400000000000000000a00"], 0x20}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x8000, 0x80, 0xa, 0xfff, {{0x13, 0x4, 0x0, 0x4, 0x4c, 0x67, 0x0, 0x40, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0xc, 0xae, 0x1, 0x1, [{@rand_addr=0x64010100, 0xee}]}, @ssrr={0x89, 0x17, 0xae, [@empty, @broadcast, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @lsrr={0x83, 0x13, 0x2d, [@dev={0xac, 0x14, 0x14, 0xd}, @empty, @local, @rand_addr=0x64010102]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x5, 0xc3, 0x1c, @mcast1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x10, 0x8, 0x5, 0x2}}) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000003c0)={@rand_addr, @local, 0x0}, &(0x7f0000000400)=0xc) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast1, @rand_addr, 0x0}, &(0x7f0000000480)=0xc) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000b40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000780)={0x358, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @ETHTOOL_A_EEE_MODES_OURS={0x2fc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xabc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vlan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-^.&\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-[})\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1ff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x767}, @ETHTOOL_A_BITSET_MASK={0x6, 0x5, "80bd"}, @ETHTOOL_A_BITSET_VALUE={0xb7, 0x4, "bf48fe10641331afc4aee2234e205628902fff7cbe66475b0cd020f7486750836141c90b5249a363433e901bd3e1928131be6a19e6ab3da456054881bb744e89753cbc608e97874f4ae7fedce88472400b799b2772637e4fd6774c3aa7ed32ef0e348144f4d4476027e0f0e6e911106739d11509a955b73ce76a58560df6058b4cc5a6c6450b4495cfeba6db288b172b4fbfb25fe254e016169f6ceb6a7e161f2cef9dd6729893574097bb5d1b4179dc6e7be3"}, @ETHTOOL_A_BITSET_VALUE={0x70, 0x4, "14f8719138af70ee6fa08b37a274e547b94aa9c94c50a9301c5895d49005484f1708d4d0d9f55a07c9e6feb036f1ab9555ce46048c1ada43405c0547d22235b2ccdc6f14750fa7ef9298a8687e98edd849b47a04b40dcbe76b4f2ff776641670e96701669f7f61f31ad8183f"}, @ETHTOOL_A_BITSET_BITS={0xc0, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '{!!*#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ',]@%!.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ').\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip_vti0\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, ']\\/^[-&\xb4[:@$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x358}, 0x1, 0x0, 0x0, 0x200000d1}, 0x48010) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000600)={'gre0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000100)="33031600d1fd140000007ef52f555f2a3b9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042", 0x28, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r9, 0x1, 0x62}, 0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x110, r2, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x8085}, 0x4000848) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 0s ago: executing program 2 (id=2694): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xffffff, 0x0, 0x0, 0x4}, 0x10) write(r1, &(0x7f0000000000)="240000001a00590214f9f407000904101f00000000000000000200000800040001000000", 0x24) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x2, r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) socket$xdp(0x2c, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xffffff, 0x0, 0x0, 0x4}, 0x10) (async) write(r1, &(0x7f0000000000)="240000001a00590214f9f407000904101f00000000000000000200000800040001000000", 0x24) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) (async) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x2, r3}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) (async) kernel console output (not intermixed with test programs): to HW filter on device ` [ 127.422013][ T7190] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.623779][ T7209] netlink: 9 bytes leftover after parsing attributes in process `syz.1.320'. [ 127.752908][ T7209] gretap0: entered promiscuous mode [ 127.816237][ T7214] vcan0: entered allmulticast mode [ 128.011080][ T7231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.052557][ T7234] netlink: 20 bytes leftover after parsing attributes in process `syz.2.327'. [ 128.180640][ T7239] netlink: 244 bytes leftover after parsing attributes in process `syz.5.328'. [ 128.231297][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.329'. [ 128.248097][ T7242] netlink: 28 bytes leftover after parsing attributes in process `syz.0.329'. [ 128.264096][ T7237] can: request_module (can-proto-0) failed. [ 128.318608][ T7242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.329'. [ 128.386823][ T7251] openvswitch: netlink: IPv4 tun info is not correct [ 128.457575][ T7254] netlink: 20 bytes leftover after parsing attributes in process `syz.4.333'. [ 128.592306][ T7261] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 129.274086][ T7292] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 129.336607][ T7294] sock: sock_set_timeout: `syz.2.347' (pid 7294) tries to set negative timeout [ 129.383798][ T7297] macvlan0: entered promiscuous mode [ 129.429660][ T7297] batadv0: entered promiscuous mode [ 129.451784][ T7297] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 129.500273][ T7297] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 129.521579][ T7297] hsr1: entered allmulticast mode [ 129.528822][ T7297] macvlan0: entered allmulticast mode [ 129.534410][ T7297] batadv0: entered allmulticast mode [ 129.673988][ T7315] netlink: 'syz.2.353': attribute type 16 has an invalid length. [ 129.693657][ T7315] netlink: 'syz.2.353': attribute type 3 has an invalid length. [ 129.969600][ T7324] netlink: 'syz.4.355': attribute type 5 has an invalid length. [ 130.200662][ T7346] netlink: 'syz.4.361': attribute type 21 has an invalid length. [ 130.434420][ T7359] netlink: set zone limit has 8 unknown bytes [ 130.498675][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.528521][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.563593][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.646151][ T1162] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.708404][ T7375] netlink: 'syz.2.370': attribute type 1 has an invalid length. [ 130.896035][ T7375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.954958][ T7379] bond0: (slave geneve2): making interface the new active one [ 130.981562][ T7379] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 131.074760][ T7393] netlink: 'syz.4.376': attribute type 1 has an invalid length. [ 131.608306][ T7419] __nla_validate_parse: 15 callbacks suppressed [ 131.608326][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.383'. [ 131.684593][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.383'. [ 131.865998][ T7426] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.386'. [ 131.911006][ T7427] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.386'. [ 131.931410][ T7432] netlink: 'syz.5.387': attribute type 6 has an invalid length. [ 132.332212][ T7459] netlink: 20 bytes leftover after parsing attributes in process `syz.1.394'. [ 132.346873][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'. [ 132.396883][ T7445] macvlan0 (unregistering): left promiscuous mode [ 132.679007][ T7461] tap0: tun_chr_ioctl cmd 1074025677 [ 132.699077][ T7461] tap0: linktype set to 65534 [ 132.852251][ T7465] netem: change failed [ 133.068919][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.082402][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.137638][ T7479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.399'. [ 133.228851][ T7477] can: request_module (can-proto-0) failed. [ 133.401164][ T7491] netlink: 84 bytes leftover after parsing attributes in process `syz.1.402'. [ 133.459131][ T7494] netlink: 'syz.2.403': attribute type 2 has an invalid length. [ 133.501342][ T7494] netlink: 'syz.2.403': attribute type 8 has an invalid length. [ 133.511956][ T7494] netlink: 1148 bytes leftover after parsing attributes in process `syz.2.403'. [ 133.524220][ T7498] netlink: 28 bytes leftover after parsing attributes in process `syz.5.404'. [ 133.733651][ T7502] netlink: 'syz.0.406': attribute type 1 has an invalid length. [ 134.489192][ T7528] veth5: entered promiscuous mode [ 134.975544][ T7560] bridge_slave_1: left allmulticast mode [ 134.996696][ T7560] bridge_slave_1: left promiscuous mode [ 135.006368][ T7560] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.032642][ T7560] bridge_slave_0: left allmulticast mode [ 135.038819][ T7560] bridge_slave_0: left promiscuous mode [ 135.056893][ T7560] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.436128][ T7581] netlink: 'syz.0.426': attribute type 1 has an invalid length. [ 135.465241][ T7582] netlink: 'syz.0.426': attribute type 1 has an invalid length. [ 135.496819][ T7581] netlink: 'syz.0.426': attribute type 1 has an invalid length. [ 135.531300][ T7582] netlink: 'syz.0.426': attribute type 1 has an invalid length. [ 135.566239][ T7581] netlink: 'syz.0.426': attribute type 1 has an invalid length. [ 135.599057][ T7581] netlink: 'syz.0.426': attribute type 1 has an invalid length. [ 135.648675][ T7581] netlink: 'syz.0.426': attribute type 1 has an invalid length. [ 136.382540][ T7648] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 136.680987][ T7655] hsr_slave_0 (unregistering): left promiscuous mode [ 136.880025][ T7669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.064905][ T7676] tipc: Enabling of bearer rejected, failed to enable media [ 137.182011][ T7681] __nla_validate_parse: 16 callbacks suppressed [ 137.182030][ T7681] netlink: 24 bytes leftover after parsing attributes in process `syz.1.449'. [ 137.422413][ T7700] netlink: 16 bytes leftover after parsing attributes in process `syz.1.449'. [ 137.920172][ T7718] can: request_module (can-proto-0) failed. [ 137.931409][ T7729] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 137.967821][ T7729] netlink: 48 bytes leftover after parsing attributes in process `syz.2.456'. [ 138.632934][ T7759] IPVS: set_ctl: invalid protocol: 58 172.20.20.12:20002 [ 138.738460][ T7763] netlink: 20 bytes leftover after parsing attributes in process `syz.0.466'. [ 138.847476][ T7769] validate_nla: 7 callbacks suppressed [ 138.847496][ T7769] netlink: 'syz.4.469': attribute type 1 has an invalid length. [ 139.072286][ T7769] ip6erspan0: entered promiscuous mode [ 139.516135][ T7797] netlink: 4 bytes leftover after parsing attributes in process `syz.5.476'. [ 139.931576][ T7819] netlink: 24 bytes leftover after parsing attributes in process `syz.4.480'. [ 140.005487][ T30] audit: type=1804 audit(1758758531.330:2): pid=7825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.481" name="/newroot/108/cgroup.controllers" dev="tmpfs" ino=566 res=1 errno=0 [ 140.078644][ T30] audit: type=1800 audit(1758758531.360:3): pid=7825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.481" name="cgroup.controllers" dev="tmpfs" ino=566 res=0 errno=0 [ 140.135781][ T7828] netlink: 'syz.1.482': attribute type 1 has an invalid length. [ 140.263743][ T7835] netlink: 146780 bytes leftover after parsing attributes in process `syz.2.483'. [ 140.283220][ T7828] 8021q: adding VLAN 0 to HW filter on device bond3 [ 140.312651][ T7833] vlan2: entered allmulticast mode [ 140.317971][ T7833] bond3: entered allmulticast mode [ 140.552414][ T7846] netlink: 'syz.4.486': attribute type 4 has an invalid length. [ 140.602994][ T7846] netlink: 'syz.4.486': attribute type 2 has an invalid length. [ 140.637001][ T7846] netlink: 244 bytes leftover after parsing attributes in process `syz.4.486'. [ 141.093978][ T7880] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 141.189895][ T7890] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.495'. [ 141.254504][ T7890] netlink: 308 bytes leftover after parsing attributes in process `syz.2.495'. [ 141.933878][ T7901] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.941657][ T7901] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.380253][ T7932] __nla_validate_parse: 3 callbacks suppressed [ 142.380272][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'. [ 142.410507][ T7901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.425042][ T7901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.578467][ T49] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.618177][ T6699] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.648071][ T6699] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.801031][ T6699] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.963873][ T7941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.504'. [ 143.095394][ T7959] netlink: 112 bytes leftover after parsing attributes in process `syz.1.510'. [ 143.198978][ T7960] netlink: 'syz.4.509': attribute type 10 has an invalid length. [ 143.963945][ T7977] netlink: 20 bytes leftover after parsing attributes in process `syz.5.514'. [ 144.572421][ T7960] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 144.655279][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.5.514'. [ 144.756038][ T7982] netlink: 11 bytes leftover after parsing attributes in process `syz.4.516'. [ 144.827775][ T7986] netlink: 24 bytes leftover after parsing attributes in process `syz.5.518'. [ 144.925126][ T7993] netlink: 24 bytes leftover after parsing attributes in process `syz.0.520'. [ 145.039753][ T7995] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 145.046539][ T7995] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 145.086720][ T8005] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 145.093231][ T8005] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 145.643930][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.531'. [ 145.752323][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.532'. [ 145.924161][ T8040] tipc: Started in network mode [ 145.929444][ T8040] tipc: Node identity eab8518eeaab, cluster identity 4711 [ 145.940186][ T8040] tipc: Enabled bearer , priority 0 [ 145.952616][ T8040] syzkaller0: entered promiscuous mode [ 145.973642][ T8040] syzkaller0: entered allmulticast mode [ 146.100619][ T8043] syzkaller0: mtu less than device minimum [ 146.173833][ T8048] syzkaller1: entered promiscuous mode [ 146.179725][ T8048] syzkaller1: entered allmulticast mode [ 146.202841][ T8039] tipc: Resetting bearer [ 146.228824][ T8039] tipc: Disabling bearer [ 146.642643][ T8051] netlink: 'syz.4.537': attribute type 29 has an invalid length. [ 147.059371][ T8073] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 147.841463][ T8114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.894190][ T8114] tipc: Started in network mode [ 147.909550][ T8114] tipc: Node identity ac1414aa, cluster identity 4711 [ 147.967601][ T8114] tipc: Enabled bearer , priority 10 [ 148.585892][ T8155] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 149.089103][ T982] tipc: Node number set to 2886997162 [ 149.171568][ T8181] netlink: 'syz.1.572': attribute type 27 has an invalid length. [ 149.179586][ T8181] netlink: 'syz.1.572': attribute type 4 has an invalid length. [ 149.196574][ T8181] __nla_validate_parse: 3 callbacks suppressed [ 149.196593][ T8181] netlink: 144 bytes leftover after parsing attributes in process `syz.1.572'. [ 149.483604][ T8188] netlink: 32 bytes leftover after parsing attributes in process `syz.4.575'. [ 149.527883][ T8189] netlink: 32 bytes leftover after parsing attributes in process `syz.4.575'. [ 149.591132][ T8196] netlink: 224 bytes leftover after parsing attributes in process `syz.0.578'. [ 149.644999][ T8196] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 149.718075][ T8202] netlink: 'syz.1.579': attribute type 16 has an invalid length. [ 149.765489][ T8202] netlink: 'syz.1.579': attribute type 17 has an invalid length. [ 149.802648][ T8196] bond2: entered promiscuous mode [ 149.834357][ T8196] bond2: entered allmulticast mode [ 149.844123][ T8196] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.859728][ T8202] gretap0: left promiscuous mode [ 149.899687][ T8211] netlink: 96 bytes leftover after parsing attributes in process `syz.4.580'. [ 149.943169][ T8202] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 149.980808][ T8211] 8021q: VLANs not supported on sit0 [ 150.165068][ T8223] netlink: 16 bytes leftover after parsing attributes in process `syz.5.585'. [ 150.242304][ T8224] netlink: 'syz.0.586': attribute type 10 has an invalid length. [ 150.252726][ T8224] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.266062][ T8224] bond0: (slave team0): Enslaving as an active interface with an up link [ 150.513949][ T8239] bond0: entered allmulticast mode [ 150.530359][ T8238] netlink: 40 bytes leftover after parsing attributes in process `syz.0.590'. [ 150.538512][ T8239] bond_slave_0: entered allmulticast mode [ 150.594509][ T8239] bond_slave_1: entered allmulticast mode [ 150.657385][ T8238] netlink: 40 bytes leftover after parsing attributes in process `syz.0.590'. [ 150.678097][ T8237] syzkaller0: entered promiscuous mode [ 150.683633][ T8237] syzkaller0: entered allmulticast mode [ 151.062711][ T8270] TCP: TCP_TX_DELAY enabled [ 151.183009][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'. [ 151.258955][ T8281] chnl_net:caif_netlink_parms(): no params data found [ 151.333928][ T8242] tipc: Enabled bearer , priority 13 [ 151.611264][ T8300] netlink: 'syz.4.606': attribute type 1 has an invalid length. [ 151.650042][ T8300] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 151.844282][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.609'. [ 152.107070][ T8331] sctp: [Deprecated]: syz.5.614 (pid 8331) Use of int in max_burst socket option deprecated. [ 152.107070][ T8331] Use struct sctp_assoc_value instead [ 152.517288][ T8347] netlink: 'syz.1.623': attribute type 29 has an invalid length. [ 152.554470][ T8347] netlink: 'syz.1.623': attribute type 29 has an invalid length. [ 152.567093][ T8349] tipc: Enabled bearer , priority 0 [ 152.599531][ T8349] syzkaller0: entered promiscuous mode [ 152.605176][ T8349] syzkaller0: entered allmulticast mode [ 152.623320][ T8349] tipc: Resetting bearer [ 152.652060][ T8348] tipc: Resetting bearer [ 152.704705][ T8348] tipc: Disabling bearer [ 153.579779][ T982] IPVS: starting estimator thread 0... [ 153.708517][ T8405] IPVS: using max 31 ests per chain, 74400 per kthread [ 153.908053][ T8374] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 153.987192][ T8421] openvswitch: netlink: IPv4 tun info is not correct [ 154.257510][ T8431] __nla_validate_parse: 8 callbacks suppressed [ 154.257531][ T8431] netlink: 104 bytes leftover after parsing attributes in process `syz.4.642'. [ 154.275971][ T8439] netlink: 'syz.1.644': attribute type 1 has an invalid length. [ 154.317227][ T8439] netlink: 'syz.1.644': attribute type 3 has an invalid length. [ 154.324925][ T8439] netlink: 224 bytes leftover after parsing attributes in process `syz.1.644'. [ 154.374074][ T8443] netlink: 'syz.5.646': attribute type 11 has an invalid length. [ 154.401162][ T8443] netlink: 'syz.5.646': attribute type 11 has an invalid length. [ 154.426064][ T8443] netlink: 152 bytes leftover after parsing attributes in process `syz.5.646'. [ 154.564344][ T8443] netlink: 36 bytes leftover after parsing attributes in process `syz.5.646'. [ 154.579253][ T8450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.648'. [ 154.596752][ T8448] netlink: 36 bytes leftover after parsing attributes in process `syz.5.646'. [ 154.761895][ T8459] netlink: 'syz.0.650': attribute type 11 has an invalid length. [ 154.784247][ T8459] netlink: 224 bytes leftover after parsing attributes in process `syz.0.650'. [ 155.146753][ T5876] Bluetooth: hci0: command 0x0c20 tx timeout [ 155.375695][ T8482] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.654'. [ 155.404664][ T8484] unknown channel width for channel at 909000KHz? [ 155.458773][ T8486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.656'. [ 155.468141][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.656'. [ 155.804081][ T8506] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 155.953344][ T8511] netlink: zone id is out of range [ 155.984910][ T8516] netlink: 'syz.2.665': attribute type 1 has an invalid length. [ 156.001413][ T8511] netlink: get zone limit has 8 unknown bytes [ 156.015566][ T8513] syzkaller1: entered promiscuous mode [ 156.033982][ T8513] syzkaller1: entered allmulticast mode [ 156.061236][ T8513] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 156.103689][ T8513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.227069][ T8516] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.154198][ T8565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.165918][ T8565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.177064][ T8565] bond0 (unregistering): (slave team0): Releasing backup interface [ 157.188864][ T8565] bond0 (unregistering): Released all slaves [ 157.599040][ T8587] openvswitch: netlink: IP tunnel dst address not specified [ 157.730669][ T8594] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 158.021173][ T8608] netdevsim netdevsim5: Firmware load for './file0/../file0' refused, path contains '..' component [ 158.263418][ T8620] netlink: 'syz.4.692': attribute type 1 has an invalid length. [ 158.454702][ T8631] netlink: 'syz.0.696': attribute type 1 has an invalid length. [ 158.856458][ T8639] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.872203][ T8639] bond0: (slave bond3): making interface the new active one [ 158.881555][ T8639] bond0: (slave bond3): Enslaving as an active interface with an up link [ 158.924109][ T8660] tipc: Started in network mode [ 158.929174][ T8660] tipc: Node identity 2e301c1d08fa, cluster identity 4711 [ 158.938181][ T8660] tipc: Enabled bearer , priority 0 [ 158.969532][ T8643] syzkaller0: entered promiscuous mode [ 158.985003][ T8643] syzkaller0: entered allmulticast mode [ 159.018909][ T6699] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.090563][ T6699] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.127185][ T8643] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 159.191121][ T6699] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.219839][ T6699] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.256690][ T8654] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 159.280303][ T8652] netlink: 'syz.1.700': attribute type 10 has an invalid length. [ 159.334790][ T8643] tipc: Resetting bearer [ 159.401033][ T8652] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.430304][ T8652] bond0: (slave team0): Enslaving as an active interface with an up link [ 159.495822][ T8642] tipc: Resetting bearer [ 159.624064][ T8642] tipc: Disabling bearer [ 159.835521][ T8698] __nla_validate_parse: 15 callbacks suppressed [ 159.835540][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz.5.713'. [ 159.883168][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz.5.713'. [ 159.929159][ T8705] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ1 [ 160.130451][ T8717] gre0: entered promiscuous mode [ 160.803134][ T8746] netlink: 'syz.0.721': attribute type 1 has an invalid length. [ 160.829232][ T8750] netlink: 20 bytes leftover after parsing attributes in process `syz.5.724'. [ 161.142558][ T8763] dvmrp0: entered allmulticast mode [ 161.504891][ T8776] netlink: 56 bytes leftover after parsing attributes in process `syz.1.735'. [ 161.531152][ T8776] netlink: 56 bytes leftover after parsing attributes in process `syz.1.735'. [ 161.554884][ T8782] netlink: 'syz.0.738': attribute type 5 has an invalid length. [ 161.673532][ T8788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.739'. [ 161.693252][ T8788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.739'. [ 161.720066][ T8788] netlink: 'syz.4.739': attribute type 23 has an invalid length. [ 162.171208][ T8819] tipc: Enabled bearer , priority 0 [ 162.192555][ T8810] netlink: 'syz.5.744': attribute type 72 has an invalid length. [ 162.207057][ T8810] netlink: 52 bytes leftover after parsing attributes in process `syz.5.744'. [ 162.222657][ T8826] syzkaller0: entered promiscuous mode [ 162.237921][ T8826] syzkaller0: entered allmulticast mode [ 162.245288][ T8820] tipc: Enabling of bearer rejected, already enabled [ 162.314353][ T8819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.746'. [ 162.342319][ T8829] netlink: 28 bytes leftover after parsing attributes in process `syz.1.748'. [ 162.351553][ T8819] tipc: Resetting bearer [ 162.366928][ T8818] tipc: Resetting bearer [ 162.424019][ T8818] tipc: Disabling bearer [ 162.866025][ T8847] ip6gre1: entered allmulticast mode [ 163.755388][ T8886] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 163.757205][ T8888] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 163.775354][ T8888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.797116][ T8886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.215391][ T8910] netlink: 'syz.4.773': attribute type 11 has an invalid length. [ 164.572443][ T8927] tipc: Enabled bearer , priority 0 [ 164.637863][ T8927] syzkaller0: entered promiscuous mode [ 164.656910][ T8927] syzkaller0: entered allmulticast mode [ 164.739291][ T8927] tipc: Resetting bearer [ 164.759469][ T8927] 8021q: VLANs not supported on gre0 [ 164.801981][ T8926] tipc: Resetting bearer [ 164.850439][ T8926] tipc: Disabling bearer [ 165.002559][ T8955] tap0: tun_chr_ioctl cmd 1074025678 [ 165.012657][ T8955] tap0: group set to 0 [ 165.185107][ T8968] __nla_validate_parse: 11 callbacks suppressed [ 165.185127][ T8968] netlink: 11 bytes leftover after parsing attributes in process `syz.4.791'. [ 165.458348][ T8984] netlink: 252 bytes leftover after parsing attributes in process `syz.1.795'. [ 165.928848][ T9008] netlink: 16 bytes leftover after parsing attributes in process `syz.5.803'. [ 166.242277][ T9028] netlink: 10 bytes leftover after parsing attributes in process `syz.5.806'. [ 166.279885][ T9026] netlink: 10 bytes leftover after parsing attributes in process `syz.5.806'. [ 166.483466][ T5947] IPVS: starting estimator thread 0... [ 166.524189][ T9038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.809'. [ 166.586780][ T9044] IPVS: using max 24 ests per chain, 57600 per kthread [ 166.953444][ T9066] netlink: 24 bytes leftover after parsing attributes in process `syz.5.818'. [ 166.956143][ T9062] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.816'. [ 167.021615][ T9066] netlink: 64 bytes leftover after parsing attributes in process `syz.5.818'. [ 167.037001][ T9066] netlink: 64 bytes leftover after parsing attributes in process `syz.5.818'. [ 167.336033][ T9080] nbd: must specify an index to disconnect [ 167.799575][ T9116] netlink: 'syz.4.833': attribute type 1 has an invalid length. [ 167.872450][ T9117] IPVS: length: 157 != 24 [ 167.967833][ T9116] 8021q: adding VLAN 0 to HW filter on device bond2 [ 168.024431][ T9127] vlan2: entered promiscuous mode [ 168.061996][ T9127] bond2: entered promiscuous mode [ 168.094290][ T9127] vlan2: entered allmulticast mode [ 168.121309][ T9127] bond2: entered allmulticast mode [ 168.212984][ T9119] team0: Device ip6gre1 is of different type [ 168.367255][ T9116] bond2: (slave gretap1): making interface the new active one [ 168.386690][ T9116] gretap1: entered promiscuous mode [ 168.432282][ T9116] gretap1: entered allmulticast mode [ 168.464850][ T9116] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 169.175195][ T9182] syzkaller1: entered promiscuous mode [ 169.195365][ T9182] syzkaller1: entered allmulticast mode [ 169.552432][ T9202] netlink: 'syz.1.856': attribute type 1 has an invalid length. [ 169.809121][ T9211] syzkaller0: entered promiscuous mode [ 169.814650][ T9211] syzkaller0: entered allmulticast mode [ 170.192772][ T9235] netlink: 'syz.0.866': attribute type 11 has an invalid length. [ 170.203023][ T9235] __nla_validate_parse: 9 callbacks suppressed [ 170.203041][ T9235] netlink: 224 bytes leftover after parsing attributes in process `syz.0.866'. [ 170.234341][ T9237] netlink: 60 bytes leftover after parsing attributes in process `syz.2.865'. [ 170.246899][ T9237] netlink: 60 bytes leftover after parsing attributes in process `syz.2.865'. [ 171.822807][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.875'. [ 171.909494][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.875'. [ 172.003155][ T9273] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 172.273990][ T9288] netlink: 32 bytes leftover after parsing attributes in process `syz.1.881'. [ 173.051988][ T9331] netlink: 16 bytes leftover after parsing attributes in process `syz.2.888'. [ 173.214796][ T9339] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.891'. [ 173.259585][ T9339] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 173.455103][ T9353] netlink: 'syz.0.894': attribute type 1 has an invalid length. [ 173.662449][ T9362] netlink: 44 bytes leftover after parsing attributes in process `syz.5.896'. [ 173.989526][ T9372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.901'. [ 174.065418][ T9372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.111205][ T9372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.150849][ T9372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.169196][ T9372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.410102][ T9393] dvmrp0: entered allmulticast mode [ 174.649829][ T9399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.505597][ T9438] __nla_validate_parse: 3 callbacks suppressed [ 175.505628][ T9438] netlink: 24 bytes leftover after parsing attributes in process `syz.4.914'. [ 176.156845][ T9475] xt_l2tp: missing protocol rule (udp|l2tpip) [ 176.199622][ T9475] netlink: 9 bytes leftover after parsing attributes in process `syz.2.925'. [ 176.792676][ T9506] netlink: 36 bytes leftover after parsing attributes in process `syz.1.931'. [ 176.810540][ T9503] netlink: 36 bytes leftover after parsing attributes in process `syz.1.931'. [ 177.051824][ T9522] netlink: 'syz.2.935': attribute type 1 has an invalid length. [ 177.271608][ T9522] 8021q: adding VLAN 0 to HW filter on device bond2 [ 177.360406][ T9528] bond2: (slave gretap1): making interface the new active one [ 177.417016][ T9528] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 177.458135][ T9532] C: renamed from team_slave_0 (while UP) [ 177.508225][ T9532] netlink: 'syz.2.935': attribute type 1 has an invalid length. [ 177.544929][ T9532] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 178.348293][ T9597] tc_dump_action: action bad kind [ 178.789035][ T9619] netlink: 'syz.2.962': attribute type 1 has an invalid length. [ 178.924619][ T9627] bond3: (slave bridge2): making interface the new active one [ 178.954758][ T9628] sctp: [Deprecated]: syz.4.965 (pid 9628) Use of struct sctp_assoc_value in delayed_ack socket option. [ 178.954758][ T9628] Use struct sctp_sack_info instead [ 178.981094][ T9627] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 179.029529][ T9632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.966'. [ 179.064326][ T9632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.966'. [ 179.074759][ T9630] netlink: 28 bytes leftover after parsing attributes in process `syz.0.966'. [ 179.094346][ T9630] netlink: 28 bytes leftover after parsing attributes in process `syz.0.966'. [ 179.252084][ T9640] netlink: 'syz.4.970': attribute type 10 has an invalid length. [ 179.260674][ T9645] netlink: zone id is out of range [ 179.277233][ T9645] netlink: del zone limit has 4 unknown bytes [ 179.305785][ T9645] netlink: 'syz.2.969': attribute type 1 has an invalid length. [ 179.355988][ T9645] netlink: 244 bytes leftover after parsing attributes in process `syz.2.969'. [ 179.390842][ T9640] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 179.594302][ T9660] netlink: 20 bytes leftover after parsing attributes in process `syz.0.973'. [ 180.175783][ T9688] netlink: 'syz.1.979': attribute type 8 has an invalid length. [ 180.283307][ T9695] batadv0: entered promiscuous mode [ 180.310732][ T9695] bond0: entered promiscuous mode [ 180.326664][ T9695] bond_slave_0: entered promiscuous mode [ 180.337304][ T9695] bond_slave_1: entered promiscuous mode [ 180.358140][ T9695] debugfs: 'hsr1' already exists in 'hsr' [ 180.373398][ T9705] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 180.382173][ T9695] Cannot create hsr debugfs directory [ 180.397734][ T9695] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 180.417378][ T9695] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 180.432945][ T9695] hsr1: entered allmulticast mode [ 180.448592][ T9695] batadv0: entered allmulticast mode [ 180.455374][ T9695] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 180.625042][ T9713] __nla_validate_parse: 2 callbacks suppressed [ 180.625062][ T9713] netlink: 256 bytes leftover after parsing attributes in process `syz.4.986'. [ 180.720231][ T9724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.988'. [ 180.899358][ T9740] netlink: 28 bytes leftover after parsing attributes in process `syz.0.992'. [ 180.949016][ T9740] bridge_slave_0: left allmulticast mode [ 180.974785][ T9740] bridge_slave_0: left promiscuous mode [ 180.993599][ T9740] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.040517][ T9740] bridge_slave_1: left allmulticast mode [ 181.078249][ T9748] netlink: 76 bytes leftover after parsing attributes in process `syz.0.992'. [ 181.100793][ T9740] bridge_slave_1: left promiscuous mode [ 181.111329][ T9740] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.168862][ T9740] team0: Port device team_slave_0 removed [ 181.193713][ T9740] team0: Port device team_slave_1 removed [ 181.202950][ T9740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.217747][ T9740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.240698][ T9740] bond0: (slave bond3): Releasing backup interface [ 181.393915][ T9756] lo: entered promiscuous mode [ 181.415454][ T9756] gre0: entered promiscuous mode [ 181.480169][ T9756] gretap0: entered promiscuous mode [ 181.494440][ T9756] erspan0: entered promiscuous mode [ 181.520456][ T9756] ip_vti0: entered promiscuous mode [ 181.945434][ T9780] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1003'. [ 182.122808][ T9792] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1007'. [ 183.224973][ T9846] sctp: [Deprecated]: syz.2.1021 (pid 9846) Use of int in maxseg socket option. [ 183.224973][ T9846] Use struct sctp_assoc_value instead [ 183.533493][ T9865] IPv6: sit1: Disabled Multicast RS [ 183.554668][ T9865] sit1: entered allmulticast mode [ 183.754701][ T9876] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1028'. [ 183.804820][ T9876] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1028'. [ 183.993487][ T9884] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1032'. [ 184.005470][ T9886] nbd: socks must be embedded in a SOCK_ITEM attr [ 184.087301][ T9891] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1033'. [ 184.173475][ T9899] netlink: 'syz.2.1036': attribute type 2 has an invalid length. [ 184.234408][ T9900] netlink: 'syz.2.1036': attribute type 2 has an invalid length. [ 184.377794][ T9909] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 184.759779][ T9935] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 185.181622][ T9957] tap0: tun_chr_ioctl cmd 1074025672 [ 185.193561][ T9957] tap0: ignored: set checksum disabled [ 185.488125][ T9976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.589237][ T9976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.787084][ T9993] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 186.000132][T10003] veth0: entered promiscuous mode [ 186.023180][T10003] __nla_validate_parse: 6 callbacks suppressed [ 186.023200][T10003] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1066'. [ 186.055584][T10002] veth0: left promiscuous mode [ 186.241725][T10017] geneve3: entered promiscuous mode [ 186.287500][T10017] geneve3: entered allmulticast mode [ 186.309641][ T1162] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 186.429757][T10024] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.511237][ T1162] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 186.549768][T10031] tipc: Enabled bearer , priority 0 [ 186.567470][T10028] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1074'. [ 186.591831][ T1162] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 186.630868][T10027] tipc: Resetting bearer [ 186.680625][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1075'. [ 186.722951][T10037] syzkaller0: entered promiscuous mode [ 186.741218][T10037] syzkaller0: entered allmulticast mode [ 186.760976][T10048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1080'. [ 186.804394][T10025] tipc: Resetting bearer [ 186.842895][T10051] netlink: 'syz.4.1082': attribute type 11 has an invalid length. [ 186.853665][T10025] tipc: Disabling bearer [ 186.854120][T10051] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1082'. [ 187.109433][T10064] netlink: 'syz.5.1086': attribute type 1 has an invalid length. [ 187.246108][T10067] bond1: (slave gretap1): making interface the new active one [ 187.285726][T10067] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 187.645528][ T1162] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 188.035619][T10024] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.081123][T10024] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 188.104799][T10110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1097'. [ 188.107737][T10106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1096'. [ 188.129964][T10111] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1095'. [ 188.395395][T10024] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.411100][T10024] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 188.558282][T10024] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.574984][T10024] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 188.881130][T10130] netlink: 'syz.4.1101': attribute type 4 has an invalid length. [ 188.912134][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 188.921599][ T36] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 188.943249][ T64] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 188.967418][ T64] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 189.023638][T10144] netlink: 'syz.0.1106': attribute type 1 has an invalid length. [ 189.046163][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 189.073682][ T36] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 189.161534][ T64] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 189.189377][ T64] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 189.238392][T10152] netlink: 'syz.1.1107': attribute type 1 has an invalid length. [ 189.303165][T10152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1107'. [ 189.453824][T10170] netlink: 'syz.0.1112': attribute type 9 has an invalid length. [ 189.513744][T10170] netlink: 'syz.0.1112': attribute type 6 has an invalid length. [ 189.563500][T10170] netlink: 'syz.0.1112': attribute type 7 has an invalid length. [ 189.610304][T10164] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.631419][T10170] netlink: 'syz.0.1112': attribute type 8 has an invalid length. [ 189.673640][T10181] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1114'. [ 189.993002][T10198] ip6gre0: Master is either lo or non-ether device [ 190.217166][T10200] team1: entered promiscuous mode [ 190.223210][T10200] team1: entered allmulticast mode [ 190.301831][T10213] netlink: 'syz.5.1123': attribute type 29 has an invalid length. [ 191.086169][T10262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.164732][T10267] __nla_validate_parse: 3 callbacks suppressed [ 191.164751][T10267] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1138'. [ 191.354734][T10280] netlink: 'syz.1.1142': attribute type 1 has an invalid length. [ 191.371735][T10280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.394236][T10281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1141'. [ 191.422713][T10281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1141'. [ 191.541835][T10281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.606227][T10292] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1141'. [ 191.948813][T10308] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1147'. [ 192.314194][T10324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1153'. [ 192.344978][T10324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1153'. [ 192.373250][T10322] syz.5.1152: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 192.389130][T10324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1153'. [ 192.432530][T10322] CPU: 1 UID: 0 PID: 10322 Comm: syz.5.1152 Not tainted syzkaller #0 PREEMPT(full) [ 192.432558][T10322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 192.432578][T10322] Call Trace: [ 192.432586][T10322] [ 192.432596][T10322] dump_stack_lvl+0x189/0x250 [ 192.432637][T10322] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.432661][T10322] ? __pfx__printk+0x10/0x10 [ 192.432690][T10322] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 192.432714][T10322] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 192.432740][T10322] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 192.432767][T10322] warn_alloc+0x214/0x310 [ 192.432799][T10322] ? stack_depot_save_flags+0x40/0x860 [ 192.432834][T10322] ? __pfx_warn_alloc+0x10/0x10 [ 192.432867][T10322] ? kasan_save_track+0x4f/0x80 [ 192.432893][T10322] ? xskq_create+0x56/0x170 [ 192.432911][T10322] ? xsk_init_queue+0xb0/0x110 [ 192.432927][T10322] ? xsk_setsockopt+0x4dc/0x8d0 [ 192.432955][T10322] ? do_sock_setsockopt+0x179/0x1b0 [ 192.432977][T10322] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 192.432998][T10322] ? do_syscall_64+0xfa/0x3b0 [ 192.433018][T10322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.433045][T10322] __vmalloc_node_range_noprof+0x125/0x12f0 [ 192.433113][T10322] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 192.433150][T10322] ? __kasan_kmalloc+0x93/0xb0 [ 192.433180][T10322] vmalloc_user_noprof+0xad/0xf0 [ 192.433210][T10322] ? xskq_create+0xbf/0x170 [ 192.433231][T10322] xskq_create+0xbf/0x170 [ 192.433264][T10322] xsk_init_queue+0xb0/0x110 [ 192.433287][T10322] xsk_setsockopt+0x4dc/0x8d0 [ 192.433322][T10322] ? __pfx_xsk_setsockopt+0x10/0x10 [ 192.433351][T10322] ? __pfx_aa_sk_perm+0x10/0x10 [ 192.433386][T10322] ? aa_sock_opt_perm+0xff/0x1b0 [ 192.433410][T10322] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 192.433431][T10322] ? __pfx_xsk_setsockopt+0x10/0x10 [ 192.433463][T10322] do_sock_setsockopt+0x179/0x1b0 [ 192.433493][T10322] __x64_sys_setsockopt+0x13f/0x1b0 [ 192.433524][T10322] do_syscall_64+0xfa/0x3b0 [ 192.433546][T10322] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.433566][T10322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.433586][T10322] ? clear_bhb_loop+0x60/0xb0 [ 192.433611][T10322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.433631][T10322] RIP: 0033:0x7fa240b8eec9 [ 192.433660][T10322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.433676][T10322] RSP: 002b:00007fa24194d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 192.433697][T10322] RAX: ffffffffffffffda RBX: 00007fa240de6090 RCX: 00007fa240b8eec9 [ 192.433710][T10322] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 192.433722][T10322] RBP: 00007fa240c11f91 R08: 0000000000000004 R09: 0000000000000000 [ 192.433733][T10322] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.433745][T10322] R13: 00007fa240de6128 R14: 00007fa240de6090 R15: 00007ffcdaa227d8 [ 192.433778][T10322] [ 192.433820][T10322] Mem-Info: [ 192.551270][T10328] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1155'. [ 192.571555][T10322] active_anon:6323 inactive_anon:0 isolated_anon:0 [ 192.571555][T10322] active_file:2822 inactive_file:39917 isolated_file:0 [ 192.571555][T10322] unevictable:768 dirty:58 writeback:0 [ 192.571555][T10322] slab_reclaimable:11495 slab_unreclaimable:104860 [ 192.571555][T10322] mapped:29409 shmem:1374 pagetables:1383 [ 192.571555][T10322] sec_pagetables:0 bounce:0 [ 192.571555][T10322] kernel_misc_reclaimable:0 [ 192.571555][T10322] free:1318768 free_pcp:15856 free_cma:0 [ 192.638002][T10335] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 192.691377][T10322] Node 0 active_anon:25392kB inactive_anon:0kB active_file:11288kB inactive_file:159468kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117736kB dirty:232kB writeback:0kB shmem:3960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12908kB pagetables:5408kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 192.835993][T10322] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 192.895780][T10322] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 193.023243][T10322] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 193.041602][T10322] Node 0 DMA32 free:1373560kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25048kB inactive_anon:0kB active_file:11288kB inactive_file:157888kB unevictable:1536kB writepending:232kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:41868kB local_pcp:20900kB free_cma:0kB [ 193.096626][T10351] netlink: 'syz.4.1159': attribute type 1 has an invalid length. [ 193.124700][T10322] lowmem_reserve[]: 0 0 1 1 1 [ 193.130772][T10322] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 193.172504][T10322] lowmem_reserve[]: 0 0 0 0 0 [ 193.179963][T10322] Node 1 Normal free:3886140kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22264kB local_pcp:13208kB free_cma:0kB [ 193.228762][T10322] lowmem_reserve[]: 0 0 0 0 0 [ 193.233559][T10322] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 193.265447][T10359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1160'. [ 193.289902][T10322] Node 0 DMA32: 418*4kB (UM) 401*8kB (UME) 85*16kB (ME) 395*32kB (UM) 131*64kB (UM) 46*128kB (UME) 12*256kB (UE) 13*512kB (UME) 7*1024kB (UME) 2*2048kB (M) 322*4096kB (UM) = 1373056kB [ 193.301853][T10351] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.317660][T10322] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 193.337981][T10322] Node 1 Normal: 199*4kB (UE) 60*8kB (UME) 50*16kB (UME) 85*32kB (UME) 22*64kB (UME) 8*128kB (UME) 4*256kB (UM) 4*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 945*4096kB (M) = 3886140kB [ 193.356176][T10322] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 193.365983][T10322] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 193.375984][T10322] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 193.385902][T10322] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 193.395356][T10322] 44109 total pagecache pages [ 193.400275][T10322] 0 pages in swap cache [ 193.404612][T10322] Free swap = 124996kB [ 193.409310][T10322] Total swap = 124996kB [ 193.413564][T10322] 2097051 pages RAM [ 193.417859][T10322] 0 pages HighMem/MovableOnly [ 193.422623][T10322] 425672 pages reserved [ 193.427580][T10322] 0 pages cma reserved [ 193.514311][ C0] vcan0: j1939_tp_rxtimer: 0xffff888052920000: rx timeout, send abort [ 193.522348][T10365] netlink: 'syz.2.1163': attribute type 21 has an invalid length. [ 193.761297][T10381] openvswitch: netlink: nsh attribute has 65520 unknown bytes. [ 193.776279][T10381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.844830][T10353] bond3: (slave veth7): Enslaving as an active interface with a down link [ 194.083034][T10369] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 194.514350][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.521955][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.555996][T10469] macsec1: entered promiscuous mode [ 195.582314][T10469] macsec1: entered allmulticast mode [ 195.882257][T10490] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 195.894745][T10490] bond4: (slave vcan1): Error -95 calling set_mac_address [ 195.948372][T10495] tipc: Started in network mode [ 195.953857][T10495] tipc: Node identity aa2e67fadb56, cluster identity 4711 [ 195.988122][T10495] tipc: Enabled bearer , priority 0 [ 196.021275][T10494] tipc: Enabling of bearer rejected, already enabled [ 196.055269][T10500] syzkaller0: entered promiscuous mode [ 196.061856][T10500] syzkaller0: entered allmulticast mode [ 196.095520][T10503] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 196.151188][T10494] tipc: Resetting bearer [ 196.216802][T10494] tipc: Resetting bearer [ 196.267327][T10494] tipc: Disabling bearer [ 196.414786][T10516] __nla_validate_parse: 7 callbacks suppressed [ 196.414806][T10516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1203'. [ 196.446974][T10516] netlink: 'syz.2.1203': attribute type 5 has an invalid length. [ 196.469738][T10516] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1203'. [ 196.503553][T10521] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1206'. [ 196.509125][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1203'. [ 196.514525][T10521] netlink: 'syz.5.1206': attribute type 5 has an invalid length. [ 196.551979][T10521] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1206'. [ 196.572728][T10516] geneve4: entered promiscuous mode [ 196.580321][T10524] netlink: 'syz.2.1203': attribute type 5 has an invalid length. [ 196.592133][T10516] geneve4: entered allmulticast mode [ 196.599485][T10524] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1203'. [ 196.615153][ T6700] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 256 - 0 [ 196.623907][ T6700] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 256 - 0 [ 196.645936][T10521] geneve2: entered promiscuous mode [ 196.651409][T10521] geneve2: entered allmulticast mode [ 196.665435][ T6700] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 256 - 0 [ 196.719395][ T6700] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 256 - 0 [ 196.777981][ T6700] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 196.787006][ T5961] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 196.823259][ T5961] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 196.846279][ T5961] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 196.934098][T10548] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1210'. [ 197.308574][T10566] netlink: 'syz.2.1220': attribute type 10 has an invalid length. [ 197.352601][T10566] team0: Port device dummy0 added [ 197.369544][T10566] netlink: 'syz.2.1220': attribute type 10 has an invalid length. [ 197.406860][T10566] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 197.455586][T10566] team0: Failed to send options change via netlink (err -105) [ 197.463740][T10566] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 197.485114][T10566] team0: Port device dummy0 removed [ 197.497929][T10566] `: (slave dummy0): Enslaving as an active interface with an up link [ 197.506946][T10576] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1221'. [ 197.579825][T10580] netlink: 'syz.0.1221': attribute type 1 has an invalid length. [ 197.603958][T10581] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1220'. [ 197.610518][T10580] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1221'. [ 197.915346][T10588] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 198.091632][T10589] tipc: Enabled bearer , priority 0 [ 198.099003][T10584] syzkaller0: entered promiscuous mode [ 198.123491][T10584] syzkaller0: entered allmulticast mode [ 198.176154][T10599] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 198.247421][T10584] tipc: Resetting bearer [ 198.298020][T10602] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 198.300267][T10583] tipc: Resetting bearer [ 198.333538][T10611] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 198.488584][T10583] tipc: Disabling bearer [ 199.020374][T10650] netlink: 'syz.1.1243': attribute type 3 has an invalid length. [ 199.785456][T10696] netlink: 'syz.0.1256': attribute type 1 has an invalid length. [ 199.939896][T10700] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 200.002661][T10700] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 200.082775][T10704] vlan2: entered promiscuous mode [ 200.111480][T10704] gretap0: entered promiscuous mode [ 200.395365][T10725] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 200.414501][T10725] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 200.989395][T10760] netlink: 'syz.0.1276': attribute type 10 has an invalid length. [ 201.032391][T10760] veth9: entered promiscuous mode [ 201.037773][T10760] veth9: entered allmulticast mode [ 201.454716][T10780] __nla_validate_parse: 14 callbacks suppressed [ 201.454747][T10780] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1281'. [ 201.454802][T10781] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1281'. [ 201.539986][ T5876] Bluetooth: hci1: command tx timeout [ 201.722374][T10791] netlink: 'syz.2.1283': attribute type 1 has an invalid length. [ 202.010471][T10801] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1287'. [ 202.105919][T10806] netlink: 'syz.1.1289': attribute type 10 has an invalid length. [ 202.352492][T10820] netlink: 'syz.5.1294': attribute type 1 has an invalid length. [ 202.398817][T10815] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1291'. [ 202.426617][T10814] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1291'. [ 202.804898][T10842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1299'. [ 202.940853][T10845] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 203.250661][T10867] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 203.264174][T10842] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 203.283967][T10867] netlink: 'syz.0.1302': attribute type 83 has an invalid length. [ 203.523057][T10876] netlink: 'syz.1.1303': attribute type 3 has an invalid length. [ 203.556037][T10875] tipc: Enabled bearer , priority 0 [ 203.608337][T10881] syzkaller0: entered promiscuous mode [ 203.644488][T10881] syzkaller0: entered allmulticast mode [ 203.720932][T10875] tipc: Resetting bearer [ 203.788336][T10874] tipc: Resetting bearer [ 203.837773][T10874] tipc: Disabling bearer [ 203.908783][T10888] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 203.924016][T10888] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 203.978230][T10891] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1309'. [ 204.006336][T10891] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1309'. [ 204.143607][T10895] netlink: 'syz.1.1312': attribute type 1 has an invalid length. [ 204.153178][T10896] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1310'. [ 204.184203][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1308'. [ 204.368162][T10895] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 204.472877][T10895] veth5: entered promiscuous mode [ 204.503019][T10895] bond5: (slave veth5): Enslaving as a backup interface with a down link [ 204.571914][T10918] syz_tun: entered allmulticast mode [ 204.600142][T10917] syz_tun: left allmulticast mode [ 205.296636][ T5184] Bluetooth: hci0: command tx timeout [ 205.678544][T10978] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 205.874138][T10988] tc_dump_action: action bad kind [ 205.897295][T10991] netlink: 'syz.0.1339': attribute type 10 has an invalid length. [ 205.942985][T10993] sctp: [Deprecated]: syz.1.1340 (pid 10993) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.942985][T10993] Use struct sctp_sack_info instead [ 206.030820][T10993] sctp: [Deprecated]: syz.1.1340 (pid 10993) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.030820][T10993] Use struct sctp_sack_info instead [ 206.108726][T10993] IPv6: Can't replace route, no match found [ 206.485396][ T982] IPVS: starting estimator thread 0... [ 206.527826][T11026] netlink: 'syz.2.1348': attribute type 4 has an invalid length. [ 206.541684][T11026] __nla_validate_parse: 4 callbacks suppressed [ 206.541705][T11026] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1348'. [ 206.589203][T11028] netlink: 'syz.1.1349': attribute type 16 has an invalid length. [ 206.596732][T11023] IPVS: using max 26 ests per chain, 62400 per kthread [ 206.664068][T11028] netlink: 'syz.1.1349': attribute type 17 has an invalid length. [ 206.842179][T11039] netlink: 'syz.4.1350': attribute type 10 has an invalid length. [ 206.861032][T11039] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1350'. [ 206.909479][T11028] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 206.932918][T11031] tipc: Enabling of bearer rejected, failed to enable media [ 206.960566][T11037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1351'. [ 206.997730][T11039] dummy0: entered promiscuous mode [ 207.003795][T11039] bridge0: port 3(dummy0) entered blocking state [ 207.021445][T11039] bridge0: port 3(dummy0) entered disabled state [ 207.036886][T11039] dummy0: entered allmulticast mode [ 207.054199][T11039] bridge0: port 3(dummy0) entered blocking state [ 207.060809][T11039] bridge0: port 3(dummy0) entered forwarding state [ 207.090908][T11040] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1352'. [ 207.101047][T11051] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1353'. [ 207.324883][T11060] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1355'. [ 207.649377][T11070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1358'. [ 207.764099][T11086] netlink: 'syz.2.1362': attribute type 16 has an invalid length. [ 207.813085][T11086] netlink: 'syz.2.1362': attribute type 3 has an invalid length. [ 207.824105][T11086] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1362'. [ 208.035957][T11096] netlink: 'syz.0.1365': attribute type 2 has an invalid length. [ 208.133589][T11104] netlink: 'syz.4.1368': attribute type 11 has an invalid length. [ 208.151984][T11104] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1368'. [ 209.159892][T11148] netlink: 'syz.0.1380': attribute type 1 has an invalid length. [ 209.173461][T11148] netlink: 'syz.0.1380': attribute type 4 has an invalid length. [ 209.185924][T11148] netlink: 'syz.0.1380': attribute type 4 has an invalid length. [ 209.239502][T11151] tipc: Enabling of bearer rejected, failed to enable media [ 209.396211][T11162] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1385'. [ 209.473781][T11165] netlink: 'syz.1.1384': attribute type 1 has an invalid length. [ 209.825264][T11191] netlink: 'syz.5.1393': attribute type 7 has an invalid length. [ 209.845332][T11185] bond0: entered promiscuous mode [ 209.893095][T11185] bond0: left promiscuous mode [ 210.078973][T11191] : entered promiscuous mode [ 210.186133][T11204] ieee802154 phy0 wpan0: encryption failed: -22 [ 210.473305][T11222] netlink: 'syz.1.1400': attribute type 10 has an invalid length. [ 210.564532][T11221] 8021q: VLANs not supported on ip6_vti0 [ 210.901485][T11245] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 211.299192][ T6699] tipc: Subscription rejected, illegal request [ 212.096064][T11298] netlink: 'syz.1.1418': attribute type 1 has an invalid length. [ 212.185704][T11302] __nla_validate_parse: 4 callbacks suppressed [ 212.185726][T11302] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1418'. [ 212.213929][T11304] netlink: 360 bytes leftover after parsing attributes in process `syz.0.1420'. [ 212.244535][T11301] netlink: 'syz.2.1417': attribute type 1 has an invalid length. [ 212.292743][T11301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1417'. [ 212.304954][T11307] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1419'. [ 212.339680][T11301] pim6reg: entered allmulticast mode [ 212.532748][T11324] netlink: 'syz.5.1425': attribute type 1 has an invalid length. [ 212.615974][T11324] 8021q: adding VLAN 0 to HW filter on device bond2 [ 212.795506][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1428'. [ 212.812330][T11329] bond2: (slave veth3): Enslaving as an active interface with a down link [ 212.840145][T11324] veth5: entered promiscuous mode [ 212.852839][T11345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1428'. [ 212.866169][T11324] bond2: (slave veth5): Enslaving as an active interface with a down link [ 212.894599][T11335] vlan2: entered allmulticast mode [ 212.908446][T11335] bond2: entered allmulticast mode [ 212.916118][T11335] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 213.203529][ T24] syz0: Port: 1 Link ACTIVE [ 213.318121][T11375] netlink: ct family unspecified [ 213.323266][T11375] openvswitch: netlink: Actions may not be safe on all matching packets [ 213.372040][T11375] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1434'. [ 213.452007][T11375] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1434'. [ 213.498558][T11380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1435'. [ 213.590879][T11379] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 213.600036][T11396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.645054][T11387] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 213.868923][T11407] tipc: Enabled bearer , priority 0 [ 213.890733][T11407] syzkaller0: entered promiscuous mode [ 213.896268][T11407] syzkaller0: entered allmulticast mode [ 213.943521][T11407] tipc: Resetting bearer [ 213.961886][T11407] Bluetooth: MGMT ver 1.23 [ 213.973734][T11406] tipc: Resetting bearer [ 214.029374][T11406] tipc: Disabling bearer [ 214.138678][T11423] netlink: 'syz.4.1448': attribute type 10 has an invalid length. [ 214.191965][T11423] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 214.236221][T11430] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1446'. [ 215.143808][T11479] netlink: 'syz.5.1465': attribute type 1 has an invalid length. [ 215.223459][T11489] netlink: 'syz.2.1467': attribute type 16 has an invalid length. [ 215.234934][T11489] netlink: 'syz.2.1467': attribute type 17 has an invalid length. [ 215.269827][T11489] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.313856][T11479] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 215.336132][T11479] 8021q: adding VLAN 0 to HW filter on device bond3 [ 215.344848][ T1162] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 215.517140][ T6700] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 215.673007][T11505] sctp: [Deprecated]: syz.5.1472 (pid 11505) Use of int in maxseg socket option. [ 215.673007][T11505] Use struct sctp_assoc_value instead [ 215.818991][T11512] veth0: entered promiscuous mode [ 216.108348][T11518] veth0: left promiscuous mode [ 216.329411][T11539] netlink: 'syz.5.1482': attribute type 3 has an invalid length. [ 217.057821][ T5876] Bluetooth: hci2: command 0x0406 tx timeout [ 217.060425][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 217.415475][T11598] __nla_validate_parse: 6 callbacks suppressed [ 217.415493][T11598] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1499'. [ 217.473791][T11598] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1499'. [ 217.499279][T11598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1499'. [ 217.535773][T11604] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 218.180942][T11645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1508'. [ 218.513835][T11675] netlink: 192 bytes leftover after parsing attributes in process `syz.5.1512'. [ 218.658151][T11684] openvswitch: netlink: Flow actions attr not present in new flow. [ 218.955790][T11699] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1517'. [ 219.626140][T11713] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1520'. [ 219.732450][T11716] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1521'. [ 219.781891][T11716] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1521'. [ 219.803315][T11716] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1521'. [ 220.084726][T11728] can: request_module (can-proto-4) failed. [ 220.931321][T11769] netlink: 'syz.0.1536': attribute type 4 has an invalid length. [ 221.580404][T11801] netlink: 'syz.1.1546': attribute type 1 has an invalid length. [ 221.644366][T11801] netlink: 'syz.1.1546': attribute type 3 has an invalid length. [ 222.113106][T11824] hsr_slave_0 (unregistering): left promiscuous mode [ 222.684718][T11858] gtp0: entered promiscuous mode [ 222.700258][T11858] gtp0: entered allmulticast mode [ 222.718607][T11862] tipc: Enabled bearer , priority 0 [ 222.733445][T11862] syzkaller0: entered promiscuous mode [ 222.742373][T11862] syzkaller0: entered allmulticast mode [ 222.766865][T11861] tipc: Resetting bearer [ 222.914226][T11861] tipc: Disabling bearer [ 222.955377][T11872] __nla_validate_parse: 10 callbacks suppressed [ 222.955397][T11872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1567'. [ 222.982705][T11872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1567'. [ 222.995087][T11872] netlink: 'syz.2.1567': attribute type 6 has an invalid length. [ 223.024800][T11875] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1567'. [ 223.764870][T11908] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1575'. [ 224.165257][T11924] netlink: 'syz.4.1580': attribute type 1 has an invalid length. [ 224.187520][T11924] netlink: 'syz.4.1580': attribute type 2 has an invalid length. [ 224.422307][T11938] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1585'. [ 224.475518][T11940] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1585'. [ 224.677352][T11946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1586'. [ 224.686682][T11946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1586'. [ 224.695683][T11946] netlink: 'syz.4.1586': attribute type 7 has an invalid length. [ 224.756973][T11952] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1584'. [ 224.771898][T11948] tipc: Enabled bearer , priority 0 [ 224.793135][T11952] openvswitch: netlink: Actions may not be safe on all matching packets [ 224.806224][T11948] syzkaller0: entered promiscuous mode [ 224.822243][T11948] syzkaller0: entered allmulticast mode [ 224.875292][T11953] 8021q: VLANs not supported on caif0 [ 224.881501][T11952] 8021q: VLANs not supported on caif0 [ 225.012496][T11948] tipc: Resetting bearer [ 225.024958][T11945] tipc: Resetting bearer [ 225.043024][T11945] tipc: Disabling bearer [ 225.061716][T11968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1593'. [ 225.074625][T11968] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 225.083100][T11968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.136310][T11971] veth0: entered promiscuous mode [ 225.164905][T11971] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 225.213451][T11970] veth0: left promiscuous mode [ 225.791584][T11999] veth0: entered promiscuous mode [ 225.892887][T12002] netlink: 'syz.1.1605': attribute type 1 has an invalid length. [ 226.038888][T12008] x_tables: ip6_tables: MASQUERADE target: only valid in nat table, not syz1 [ 226.053068][T12004] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 226.644686][T12041] netlink: 'syz.1.1618': attribute type 4 has an invalid length. [ 226.724482][T12041] `: renamed from bond0 (while UP) [ 226.945153][T12055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.270652][T12070] netlink: 'syz.1.1626': attribute type 6 has an invalid length. [ 227.302997][ T5184] Bluetooth: hci4: command 0x0406 tx timeout [ 227.303963][T12070] netlink: 'syz.1.1626': attribute type 6 has an invalid length. [ 227.448048][T12079] netlink: zone id is out of range [ 227.480433][T12079] netlink: zone id is out of range [ 227.519915][T12079] netlink: zone id is out of range [ 227.525106][T12079] netlink: zone id is out of range [ 227.564426][T12079] netlink: get zone limit has 8 unknown bytes [ 228.013202][T12104] netlink: 'syz.1.1634': attribute type 2 has an invalid length. [ 228.037734][T12104] __nla_validate_parse: 11 callbacks suppressed [ 228.037756][T12104] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1634'. [ 228.050137][T12101] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1636'. [ 228.065958][T12104] nbd: must specify a device to reconfigure [ 228.189304][T12104] tipc: Enabling of bearer rejected, failed to enable media [ 228.237295][T12102] netlink: 'syz.5.1636': attribute type 7 has an invalid length. [ 228.298436][T12113] macsec2: entered promiscuous mode [ 228.316749][T12113] macsec2: entered allmulticast mode [ 228.406185][T12118] IPVS: ip_vs_add_dest(): server weight less than zero [ 228.699233][T12132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1646'. [ 228.730333][T12129] team0: No ports can be present during mode change [ 228.758034][T12133] tipc: Resetting bearer [ 228.934139][T12141] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1648'. [ 228.945804][T12141] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1648'. [ 228.957023][T12141] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1648'. [ 228.966311][T12141] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1648'. [ 229.288691][T12152] netlink: 'syz.4.1652': attribute type 4 has an invalid length. [ 229.301808][T12152] netlink: 'syz.4.1652': attribute type 4 has an invalid length. [ 229.467845][T12160] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 229.591221][T12166] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1656'. [ 229.918029][T12182] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 229.952841][T12182] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1660'. [ 230.077062][T12182] netlink: 'syz.4.1660': attribute type 1 has an invalid length. [ 230.500029][T12208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1670'. [ 230.914702][T12232] netlink: 'syz.5.1679': attribute type 1 has an invalid length. [ 230.967665][T12231] hsr_slave_0: left promiscuous mode [ 230.978682][T12230] netlink: 'syz.4.1678': attribute type 2 has an invalid length. [ 231.012560][T12231] hsr_slave_1: left promiscuous mode [ 231.502546][T12259] dummy0: left allmulticast mode [ 231.508475][T12259] bridge0: port 3(dummy0) entered disabled state [ 231.534243][T12259] bridge_slave_1: left allmulticast mode [ 231.553746][T12259] bridge_slave_1: left promiscuous mode [ 231.562415][T12259] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.574663][T12259] bridge_slave_0: left allmulticast mode [ 231.588701][T12259] bridge_slave_0: left promiscuous mode [ 231.596302][T12259] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.630665][T12267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.708366][T12262] dvmrp0: entered allmulticast mode [ 231.716280][T12262] dvmrp0: left allmulticast mode [ 232.291614][T12297] can: request_module (can-proto-0) failed. [ 232.451396][T12311] netlink: 'syz.1.1705': attribute type 10 has an invalid length. [ 232.583945][T12319] netlink: 'syz.0.1709': attribute type 1 has an invalid length. [ 232.657515][T12319] 8021q: adding VLAN 0 to HW filter on device bond4 [ 233.908785][T12373] __nla_validate_parse: 8 callbacks suppressed [ 233.908809][T12373] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1723'. [ 234.026208][T12384] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1728'. [ 234.167010][T12389] netlink: 'syz.1.1727': attribute type 1 has an invalid length. [ 234.702257][T12408] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 234.712689][T12408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1734'. [ 234.920053][T12419] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.1736'. [ 234.981141][T12423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1738'. [ 235.002525][T12421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1737'. [ 235.042092][T12424] netlink: 'syz.0.1737': attribute type 1 has an invalid length. [ 235.066892][T12425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1738'. [ 235.093752][T12427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1737'. [ 235.127575][T12429] netlink: 'syz.1.1739': attribute type 21 has an invalid length. [ 235.170638][T12429] IPv6: NLM_F_CREATE should be specified when creating new route [ 235.180436][T12424] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 235.214440][T12429] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 235.230116][T12429] IPv6: NLM_F_CREATE should be set when creating new route [ 235.237448][T12429] IPv6: NLM_F_CREATE should be set when creating new route [ 235.244790][T12429] IPv6: NLM_F_CREATE should be set when creating new route [ 235.441223][T12453] xt_bpf: check failed: parse error [ 235.910866][T12479] netlink: 'syz.1.1754': attribute type 5 has an invalid length. [ 235.929438][T12479] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1754'. [ 236.144791][T12489] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 236.617343][T12502] netlink: 3968 bytes leftover after parsing attributes in process `syz.1.1759'. [ 236.829258][T12513] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 237.401562][T12545] IPv6: sit1: Disabled Multicast RS [ 237.424817][T12545] sit1: entered allmulticast mode [ 238.447941][T12591] pim6reg1: entered promiscuous mode [ 238.498290][T12591] pim6reg1: entered allmulticast mode [ 238.630852][T12596] syzkaller1: entered promiscuous mode [ 238.641882][T12596] syzkaller1: entered allmulticast mode [ 238.654009][T12602] netlink: 'syz.4.1788': attribute type 3 has an invalid length. [ 239.187109][T12632] sctp: [Deprecated]: syz.5.1795 (pid 12632) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.187109][T12632] Use struct sctp_sack_info instead [ 239.810981][T12662] xt_l2tp: missing protocol rule (udp|l2tpip) [ 241.845734][T12689] __nla_validate_parse: 7 callbacks suppressed [ 241.845754][T12689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1809'. [ 241.906004][T12689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1809'. [ 242.352862][T12723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1820'. [ 242.495270][T12729] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1821'. [ 242.535264][T12733] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1822'. [ 242.559837][T12731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1823'. [ 242.973430][T12758] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1829'. [ 243.027012][T12761] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1829'. [ 243.073225][T12764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.597710][T12802] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1841'. [ 243.823638][T12812] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1843'. [ 243.959911][T12818] tipc: Enabling of bearer rejected, failed to enable media [ 243.984719][T12821] syzkaller1: entered promiscuous mode [ 244.019829][T12821] syzkaller1: entered allmulticast mode [ 244.075581][T12828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.769211][T12868] tipc: Enabled bearer , priority 0 [ 245.041992][T12890] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 245.104974][T12885] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 245.508313][T12916] netlink: 'syz.0.1872': attribute type 1 has an invalid length. [ 245.767677][ T5855] tipc: Node number set to 1903716346 [ 245.854767][T12938] nftables ruleset with unbound set [ 245.883811][T12938] Bluetooth: MGMT ver 1.23 [ 245.909770][T12940] sit0: entered promiscuous mode [ 245.941405][T12940] netlink: 'syz.4.1880': attribute type 1 has an invalid length. [ 245.973548][T12940] netlink: 'syz.4.1880': attribute type 1 has an invalid length. [ 246.113681][T12948] veth1: entered promiscuous mode [ 247.121947][T13000] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 247.294247][T13006] __nla_validate_parse: 8 callbacks suppressed [ 247.294268][T13006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1898'. [ 247.402833][T13006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1898'. [ 247.418625][T13012] º: renamed from veth1_vlan [ 247.850953][T13028] netlink: 'syz.1.1903': attribute type 1 has an invalid length. [ 248.015043][T13028] veth7: entered promiscuous mode [ 248.065499][T13031] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 248.112146][T13037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.135807][T13044] sctp: [Deprecated]: syz.0.1908 (pid 13044) Use of struct sctp_assoc_value in delayed_ack socket option. [ 248.135807][T13044] Use struct sctp_sack_info instead [ 248.540404][T13069] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1916'. [ 248.920283][T13078] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1920'. [ 248.955751][T13078] bridge_slave_1: left allmulticast mode [ 248.962841][T13078] bridge_slave_1: left promiscuous mode [ 248.969003][T13078] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.988646][T13078] bridge_slave_0: left allmulticast mode [ 248.994489][T13078] bridge_slave_0: left promiscuous mode [ 249.001500][T13078] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.003729][T13076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1919'. [ 249.024064][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1921'. [ 249.095162][T13082] `: (slave dummy0): Releasing backup interface [ 249.280365][T13088] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1922'. [ 249.300766][T13090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1923'. [ 249.312328][T13090] netlink: 'syz.2.1923': attribute type 11 has an invalid length. [ 249.336180][T13090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1923'. [ 249.355583][T13090] netlink: 'syz.2.1923': attribute type 11 has an invalid length. [ 249.880029][T13111] delete_channel: no stack [ 249.953894][T13114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1932'. [ 250.317074][T13134] netlink: 'syz.4.1939': attribute type 6 has an invalid length. [ 250.334961][T13134] netlink: 'syz.4.1939': attribute type 6 has an invalid length. [ 250.804850][T13165] netlink: 'syz.0.1952': attribute type 12 has an invalid length. [ 250.877347][T13162] nbd1: detected capacity change from 0 to 127 [ 251.232852][ T5884] block nbd1: Receive control failed (result -104) [ 251.347081][T13183] netlink: 'syz.0.1955': attribute type 1 has an invalid length. [ 251.447793][T13163] openvswitch: netlink: Unknown key attributes 2 [ 251.781552][T13215] delete_channel: no stack [ 251.822772][T13215] netlink: 'syz.0.1962': attribute type 6 has an invalid length. [ 251.948620][T13219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.238734][T13237] netlink: 'syz.5.1968': attribute type 11 has an invalid length. [ 252.426211][T13243] __nla_validate_parse: 7 callbacks suppressed [ 252.426233][T13243] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1971'. [ 252.487563][T13245] xfrm1: entered allmulticast mode [ 253.112520][T13282] netlink: 'syz.5.1984': attribute type 10 has an invalid length. [ 253.121499][T13282] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1984'. [ 253.138083][T13282] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 253.145883][T13282] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 253.182742][T13282] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 253.273456][T13286] IPVS: Error connecting to the multicast addr [ 254.016070][T13324] netlink: 'syz.1.1998': attribute type 9 has an invalid length. [ 254.044799][T13324] netlink: 'syz.1.1998': attribute type 6 has an invalid length. [ 254.071940][T13324] netlink: 'syz.1.1998': attribute type 7 has an invalid length. [ 254.089809][T13324] netlink: 'syz.1.1998': attribute type 8 has an invalid length. [ 254.102610][T13326] netlink: 'syz.1.1998': attribute type 9 has an invalid length. [ 254.116045][T13326] netlink: 'syz.1.1998': attribute type 6 has an invalid length. [ 254.138786][T13332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2000'. [ 254.504828][T13348] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.035973][T13366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.945099][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.951658][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.453199][T13364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2006'. [ 256.520305][T13368] tipc: Enabling of bearer rejected, media not registered [ 256.621308][T13375] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 256.641111][T13376] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2010'. [ 256.658063][T13375] validate_nla: 3 callbacks suppressed [ 256.658081][T13375] netlink: 'syz.1.2009': attribute type 1 has an invalid length. [ 256.691185][T13375] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2009'. [ 256.701940][T13380] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2012'. [ 256.710719][T13376] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 256.735852][T13376] gretap1: entered promiscuous mode [ 256.749153][T13376] gretap1: entered allmulticast mode [ 256.905527][T13395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2016'. [ 256.932550][T13395] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2016'. [ 257.777549][T13446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.000719][T13452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2031'. [ 258.454918][T13483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.525008][T13493] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2045'. [ 258.756162][T13505] netlink: 'syz.0.2049': attribute type 22 has an invalid length. [ 258.803512][T13505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2049'. [ 258.875535][T13505] netlink: 'syz.0.2049': attribute type 22 has an invalid length. [ 258.909060][T13505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2049'. [ 258.924045][ T64] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.033305][ T64] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.063014][ T64] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.084895][T13513] tipc: Enabled bearer , priority 0 [ 259.092713][T13526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2055'. [ 259.105117][T13525] syzkaller0: entered promiscuous mode [ 259.118265][T13525] syzkaller0: entered allmulticast mode [ 259.140496][ T64] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.192936][T13513] tipc: Resetting bearer [ 259.220461][T13513] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2053'. [ 259.246929][T13528] netlink: 'syz.2.2056': attribute type 1 has an invalid length. [ 259.270757][T13512] tipc: Resetting bearer [ 259.305398][T13512] tipc: Disabling bearer [ 259.395915][T13529] macvlan2: entered promiscuous mode [ 259.440835][T13529] macvlan2: entered allmulticast mode [ 259.452760][T13529] bond4: entered promiscuous mode [ 259.480608][T13529] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 259.501749][T13529] bond4: left promiscuous mode [ 259.543060][T13543] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 260.052587][T13565] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2066'. [ 260.121995][T13563] netlink: 'syz.2.2066': attribute type 33 has an invalid length. [ 260.139092][T13563] netlink: 'syz.2.2066': attribute type 5 has an invalid length. [ 260.149263][T13570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2069'. [ 260.157364][T13563] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2066'. [ 260.246656][T13567] syzkaller0: entered promiscuous mode [ 260.252205][T13567] syzkaller0: entered allmulticast mode [ 260.387431][T13585] netlink: 2492 bytes leftover after parsing attributes in process `syz.5.2073'. [ 260.544409][T13589] netlink: 'syz.0.2074': attribute type 1 has an invalid length. [ 260.745884][T13601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.856737][T13609] netlink: 'syz.1.2081': attribute type 1 has an invalid length. [ 262.040753][T13679] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 262.251843][T13692] netlink: 'syz.4.2107': attribute type 23 has an invalid length. [ 262.640151][T13704] pim6reg: entered allmulticast mode [ 262.795462][T13712] netlink: 'syz.2.2112': attribute type 3 has an invalid length. [ 262.805673][T13713] netlink: zone id is out of range [ 262.824028][T13713] netlink: zone id is out of range [ 262.833395][T13713] netlink: zone id is out of range [ 262.842192][T13713] netlink: zone id is out of range [ 262.851563][T13713] netlink: zone id is out of range [ 262.857145][T13713] netlink: get zone limit has 8 unknown bytes [ 262.864705][T13713] netlink: 'syz.4.2113': attribute type 1 has an invalid length. [ 262.876233][T13713] netlink: 'syz.4.2113': attribute type 2 has an invalid length. [ 263.395392][T13745] __nla_validate_parse: 17 callbacks suppressed [ 263.395426][T13745] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2123'. [ 263.419749][T13749] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2125'. [ 263.784109][T13767] veth1: entered promiscuous mode [ 263.896839][T13764] netlink: 'syz.2.2129': attribute type 11 has an invalid length. [ 263.924201][T13773] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2130'. [ 264.188848][T13785] tipc: Resetting bearer [ 264.204941][T13785] tipc: Resetting bearer [ 264.235060][T13787] bridge0: port 3(ipvlan2) entered blocking state [ 264.281475][T13787] bridge0: port 3(ipvlan2) entered disabled state [ 264.291262][T13787] ipvlan2: entered allmulticast mode [ 264.297116][T13787] bridge0: entered allmulticast mode [ 264.309361][T13787] ipvlan2: left allmulticast mode [ 264.322108][T13787] bridge0: left allmulticast mode [ 264.335201][T13789] block nbd4: NBD_DISCONNECT [ 264.369253][T13785] tipc: Resetting bearer [ 264.537685][ T1148] tipc: Resetting bearer [ 264.545075][T13801] team_slave_0: entered allmulticast mode [ 264.702418][T13813] tipc: Enabled bearer , priority 0 [ 264.710306][T13813] syzkaller0: entered promiscuous mode [ 264.715946][T13813] syzkaller0: entered allmulticast mode [ 264.748414][T13813] tipc: Resetting bearer [ 264.779598][T13810] tipc: Resetting bearer [ 264.829885][T13810] tipc: Disabling bearer [ 264.850126][T13820] tipc: Enabled bearer , priority 0 [ 264.859981][T13820] syzkaller0: entered promiscuous mode [ 264.865509][T13820] syzkaller0: entered allmulticast mode [ 264.876065][T13820] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 264.914076][T13820] tipc: Resetting bearer [ 264.937719][T13827] netlink: 'syz.1.2146': attribute type 1 has an invalid length. [ 264.945912][T13819] tipc: Resetting bearer [ 264.979781][T13819] tipc: Disabling bearer [ 265.002157][T13829] netlink: 'syz.1.2146': attribute type 21 has an invalid length. [ 265.013592][T13827] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2146'. [ 265.023076][T13827] tipc: Invalid UDP bearer configuration [ 265.023132][T13827] tipc: Enabling of bearer rejected, failed to enable media [ 265.043890][T13829] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2146'. [ 265.058263][T13829] netlink: 'syz.1.2146': attribute type 1 has an invalid length. [ 265.500345][T13849] nbd: must specify a size in bytes for the device [ 265.513361][T13858] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 265.550896][T13861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2157'. [ 265.580033][T13856] netlink: 'syz.4.2158': attribute type 1 has an invalid length. [ 265.602697][T13856] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2158'. [ 265.618922][T13856] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2158'. [ 265.851026][T13877] netlink: 'syz.4.2162': attribute type 1 has an invalid length. [ 265.929679][T13877] 8021q: adding VLAN 0 to HW filter on device bond5 [ 266.103500][T13891] veth1: entered promiscuous mode [ 266.132158][T13895] bond5: up delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 266.184409][T13895] bond5: entered allmulticast mode [ 267.060525][T13911] veth1_to_bond: entered allmulticast mode [ 267.084119][T13911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2170'. [ 267.212887][T13921] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2175'. [ 267.247051][T13911] bond0: (slave bond_slave_1): Releasing backup interface [ 267.302401][T13911] veth1_to_bond (unregistering): left allmulticast mode [ 267.359620][T13923] xfrm2: entered promiscuous mode [ 267.364726][T13923] xfrm2: entered allmulticast mode [ 267.839125][T13957] unsupported nla_type 52263 [ 268.032090][T13968] netlink: 'syz.2.2193': attribute type 2 has an invalid length. [ 268.200056][T13974] tipc: Enabling of bearer rejected, failed to enable media [ 268.220821][T13975] tipc: Enabling of bearer rejected, failed to enable media [ 268.957526][T14012] nbd: nbd1 already in use [ 268.998312][T14017] veth0_to_team: entered promiscuous mode [ 269.004920][T14017] veth0_to_team: entered allmulticast mode [ 269.039204][T14025] block nbd1: NBD_DISCONNECT [ 269.067542][T14025] block nbd1: Send disconnect failed -32 [ 269.073465][T14025] block nbd1: shutting down sockets [ 269.115408][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.124845][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 269.136583][ C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.145718][ C1] Buffer I/O error on dev nbd1, logical block 1, async page read [ 269.153607][ C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.162716][ C1] Buffer I/O error on dev nbd1, logical block 2, async page read [ 269.170601][ C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.179708][ C1] Buffer I/O error on dev nbd1, logical block 3, async page read [ 269.187626][ T5873] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.217286][ T5873] Buffer I/O error on dev nbd1, logical block 0, async page read [ 269.233804][ T5873] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.262095][ T5873] Buffer I/O error on dev nbd1, logical block 1, async page read [ 269.270646][ T5873] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.281565][ T5873] Buffer I/O error on dev nbd1, logical block 2, async page read [ 269.325951][ T5873] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.366100][ T5873] Buffer I/O error on dev nbd1, logical block 3, async page read [ 269.402161][ T5873] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.429422][ T5873] Buffer I/O error on dev nbd1, logical block 0, async page read [ 269.472591][ T5873] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.507559][ T5873] Buffer I/O error on dev nbd1, logical block 1, async page read [ 269.524208][T14041] netlink: 'syz.2.2214': attribute type 1 has an invalid length. [ 269.527996][T14043] netlink: 'syz.2.2214': attribute type 1 has an invalid length. [ 269.546021][ T5873] ldm_validate_partition_table(): Disk read failed. [ 269.583555][T14046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.604355][ T5873] Dev nbd1: unable to read RDB block 0 [ 269.623142][ T5873] nbd1: unable to read partition table [ 269.670596][ T5873] ldm_validate_partition_table(): Disk read failed. [ 269.695233][ T5873] Dev nbd1: unable to read RDB block 0 [ 269.718526][ T5873] nbd1: unable to read partition table [ 269.908835][T14060] netlink: 'syz.4.2219': attribute type 2 has an invalid length. [ 269.925851][T14060] __nla_validate_parse: 7 callbacks suppressed [ 269.925872][T14060] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2219'. [ 269.954865][T14062] netlink: 'syz.5.2220': attribute type 1 has an invalid length. [ 269.963530][T14062] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2220'. [ 270.390266][T14085] tipc: Enabled bearer , priority 0 [ 270.414295][T14090] tipc: Resetting bearer [ 270.456902][T14079] tipc: Disabling bearer [ 270.552469][T14100] tipc: Enabling of bearer rejected, failed to enable media [ 270.594546][T14100] netlink: 'syz.2.2230': attribute type 1 has an invalid length. [ 270.748808][T14113] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2234'. [ 270.762864][T14111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2233'. [ 270.772692][T14111] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2233'. [ 270.782129][T14111] netlink: 'syz.5.2233': attribute type 12 has an invalid length. [ 270.792138][T14111] netlink: 'syz.5.2233': attribute type 11 has an invalid length. [ 271.507482][T14148] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2243'. [ 271.546851][T14148] netlink: zone id is out of range [ 271.557155][T14148] netlink: get zone limit has 8 unknown bytes [ 271.688035][T14154] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2247'. [ 271.716778][T14154] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2247'. [ 272.245887][T14170] sctp: [Deprecated]: syz.1.2249 (pid 14170) Use of int in max_burst socket option. [ 272.245887][T14170] Use struct sctp_assoc_value instead [ 272.290532][T14174] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2251'. [ 272.358171][T14176] netlink: 'syz.5.2252': attribute type 15 has an invalid length. [ 272.467424][T14182] netlink: 'syz.0.2254': attribute type 75 has an invalid length. [ 272.829586][T14205] `: entered promiscuous mode [ 272.843059][T14205] bond_slave_0: entered promiscuous mode [ 272.863833][T14205] bond_slave_1: entered promiscuous mode [ 272.893315][T14207] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2262'. [ 273.083570][T14218] veth0: entered promiscuous mode [ 273.100718][T14218] veth0: left promiscuous mode [ 273.775632][T14258] validate_nla: 1 callbacks suppressed [ 273.775653][T14258] netlink: 'syz.1.2278': attribute type 24 has an invalid length. [ 273.778759][T14247] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 274.367074][T14294] netlink: 'syz.4.2288': attribute type 23 has an invalid length. [ 274.644526][T14309] netlink: 'syz.2.2293': attribute type 10 has an invalid length. [ 274.653081][T14309] bridge_slave_1: left allmulticast mode [ 274.670278][T14309] bridge_slave_1: left promiscuous mode [ 274.676260][T14309] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.697625][T14309] bridge_slave_1: entered promiscuous mode [ 274.712077][T14309] `: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 274.732500][T14314] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 274.889888][T14320] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 274.907946][T14320] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€ [ 275.233670][T14333] tipc: Enabling of bearer rejected, failed to enable media [ 275.269363][T14335] __nla_validate_parse: 13 callbacks suppressed [ 275.269383][T14335] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2301'. [ 275.324399][T14336] can: request_module (can-proto-4) failed. [ 275.375478][T14340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2304'. [ 275.398110][T14340] netlink: 'syz.1.2304': attribute type 1 has an invalid length. [ 275.482848][T14342] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2305'. [ 275.552791][T14348] syzkaller0: entered promiscuous mode [ 275.569361][T14348] syzkaller0: entered allmulticast mode [ 275.613349][T14352] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 275.846083][T14374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2310'. [ 275.870740][T14374] tc_dump_action: action bad kind [ 276.227140][T14401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2320'. [ 276.284063][T14401] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 276.290231][T14406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.294378][T14401] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 276.316954][T14401] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 276.392980][T14411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2322'. [ 276.402706][T14411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2322'. [ 276.514539][T14415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2324'. [ 276.537257][T14421] netlink: 'syz.0.2326': attribute type 11 has an invalid length. [ 276.562263][T14421] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2326'. [ 276.670723][T14428] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 276.741870][T14436] delete_channel: no stack [ 276.791997][T14437] tipc: Enabled bearer , priority 0 [ 276.864922][T14437] syzkaller0: entered promiscuous mode [ 276.897940][T14443] netlink: 'syz.1.2332': attribute type 2 has an invalid length. [ 276.916169][T14443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2332'. [ 276.919186][T14437] syzkaller0: entered allmulticast mode [ 276.997210][T14433] tipc: Resetting bearer [ 277.039562][T14453] openvswitch: netlink: IPv6 tunnel dst address is zero [ 277.089685][T14448] 8021q: adding VLAN 0 to HW filter on device bond6 [ 277.116982][T14447] tipc: Enabling of bearer rejected, failed to enable media [ 277.187326][T14456] tipc: Enabling of bearer rejected, failed to enable media [ 277.252376][T14432] tipc: Resetting bearer [ 277.320474][T14432] tipc: Disabling bearer [ 277.539363][T14478] netlink: 'syz.4.2342': attribute type 5 has an invalid length. [ 277.716054][T14500] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 277.762323][T14500] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 277.803288][T14500] tipc: Resetting bearer [ 277.944513][T14511] netlink: 'syz.4.2350': attribute type 1 has an invalid length. [ 277.987936][T14511] netlink: 'syz.4.2350': attribute type 3 has an invalid length. [ 278.005931][T14511] NCSI netlink: No device for ifindex 0 [ 278.918897][T14572] tipc: New replicast peer: 255.255.255.255 [ 278.926169][T14572] tipc: Enabled bearer , priority 10 [ 279.305265][T14595] netlink: 'syz.0.2371': attribute type 2 has an invalid length. [ 279.319246][T14595] netlink: 'syz.0.2371': attribute type 2 has an invalid length. [ 279.331438][T14595] netlink: 'syz.0.2371': attribute type 2 has an invalid length. [ 279.341061][T14595] netlink: 'syz.0.2371': attribute type 2 has an invalid length. [ 279.350204][T14595] netlink: 'syz.0.2371': attribute type 2 has an invalid length. [ 279.361701][T14595] netlink: 'syz.0.2371': attribute type 2 has an invalid length. [ 279.371082][T14595] netlink: 'syz.0.2371': attribute type 2 has an invalid length. [ 279.383528][T14595] netlink: 'syz.0.2371': attribute type 2 has an invalid length. [ 279.413724][T14595] netlink: 'syz.0.2371': attribute type 2 has an invalid length. [ 279.429199][T14595] netlink: 'syz.0.2371': attribute type 2 has an invalid length. [ 279.826253][T14614] openvswitch: netlink: Actions may not be safe on all matching packets [ 280.046963][ T5855] tipc: Node number set to 650779677 [ 280.137980][T14624] syzkaller1: entered promiscuous mode [ 280.153836][T14624] syzkaller1: entered allmulticast mode [ 280.678705][T14663] __nla_validate_parse: 12 callbacks suppressed [ 280.678727][T14663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2390'. [ 280.766772][T14665] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2391'. [ 280.822221][T14666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2390'. [ 280.897850][ T5184] Bluetooth: hci1: command 0x0405 tx timeout [ 280.967005][T14665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2391'. [ 281.072203][T14673] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2391'. [ 284.038506][T14698] bond0: (slave rose0): Error: Device can not be enslaved while up [ 284.121061][T14700] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2401'. [ 284.485427][T14723] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2409'. [ 284.529616][T14723] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2409'. [ 284.542424][T14729] nftables ruleset with unbound chain [ 284.548124][T14723] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2409'. [ 284.581793][T14731] veth1_macvtap: left promiscuous mode [ 284.710948][T14737] IPVS: set_ctl: invalid protocol: 47 100.1.1.0:20002 [ 284.723353][T14739] tipc: New replicast peer: 255.255.255.255 [ 284.731151][T14739] tipc: Enabled bearer , priority 10 [ 284.750712][T14741] IPVS: set_ctl: invalid protocol: 47 100.1.1.0:20002 [ 285.331640][T14780] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 285.387645][T14783] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2429'. [ 285.507321][T14788] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 285.524119][T14788] openvswitch: netlink: Message has 6332 unknown bytes. [ 285.829293][T14800] veth13: entered promiscuous mode [ 285.834484][T14800] veth13: entered allmulticast mode [ 285.866971][ T24] tipc: Node number set to 3758096386 [ 285.999261][T14808] __nla_validate_parse: 2 callbacks suppressed [ 285.999285][T14808] netlink: 332 bytes leftover after parsing attributes in process `syz.5.2437'. [ 286.141899][T14817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2440'. [ 286.803890][T14837] C: entered promiscuous mode [ 286.809037][T14837] team_slave_1: entered promiscuous mode [ 286.814796][T14837] geneve0: entered promiscuous mode [ 286.841992][T14837] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 286.867442][T14837] team0: Device macvtap1 is already an upper device of the team interface [ 286.900054][T14837] C: left promiscuous mode [ 286.905278][T14837] team_slave_1: left promiscuous mode [ 286.911020][T14837] geneve0: left promiscuous mode [ 287.335112][T14855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.391484][T14860] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2451'. [ 288.357833][T14918] validate_nla: 24 callbacks suppressed [ 288.357852][T14918] netlink: 'syz.1.2461': attribute type 3 has an invalid length. [ 288.422228][T14919] netlink: 'syz.1.2461': attribute type 1 has an invalid length. [ 288.497935][T14923] netlink: 'syz.2.2462': attribute type 7 has an invalid length. [ 288.543702][T14919] 8021q: adding VLAN 0 to HW filter on device bond7 [ 288.614613][T14918] bond7: (slave gretap1): making interface the new active one [ 288.628230][T14930] netlink: 'syz.4.2464': attribute type 1 has an invalid length. [ 288.648102][T14918] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 288.790028][T14937] bond6: (slave bridge12): making interface the new active one [ 288.811165][T14937] bond6: (slave bridge12): Enslaving as an active interface with an up link [ 288.986327][T14951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2470'. [ 289.295646][T14969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2475'. [ 289.325848][T14969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2475'. [ 290.390039][T14994] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2477'. [ 290.598802][T15000] netlink: 'syz.4.2481': attribute type 1 has an invalid length. [ 290.606846][T15000] netlink: 'syz.4.2481': attribute type 2 has an invalid length. [ 290.614615][T15000] netlink: 1172 bytes leftover after parsing attributes in process `syz.4.2481'. [ 290.703313][T15003] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 290.776316][T14987] team0 (unregistering): Port device C removed [ 290.799138][T14987] team0 (unregistering): Port device team_slave_1 removed [ 290.820563][T14987] team0 (unregistering): Port device geneve0 removed [ 290.845948][T14996] C: renamed from lo (while UP) [ 291.161763][T15015] syzkaller1: entered promiscuous mode [ 291.184658][T15015] syzkaller1: entered allmulticast mode [ 292.365268][T15069] netlink: 'syz.1.2498': attribute type 10 has an invalid length. [ 292.430555][T15069] `: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 292.667513][T15090] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2504'. [ 292.960651][T15090] gretap2: entered promiscuous mode [ 292.968035][T15090] gretap2: entered allmulticast mode [ 293.282712][T15122] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 293.333292][T15128] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2518'. [ 293.439383][T15130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2517'. [ 293.571433][T15135] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2520'. [ 293.611340][T15141] netlink: 592 bytes leftover after parsing attributes in process `syz.5.2522'. [ 293.996055][T15162] rdma_op ffff88814aad41f0 conn xmit_rdma 0000000000000000 [ 294.123859][T15172] batadv_slave_0: mtu less than device minimum [ 294.180313][T15176] netlink: 'syz.2.2533': attribute type 1 has an invalid length. [ 294.200525][T15181] netlink: 'syz.2.2533': attribute type 1 has an invalid length. [ 294.394944][T15189] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2534'. [ 294.401718][T15184] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 294.415370][T15176] 8021q: adding VLAN 0 to HW filter on device bond6 [ 294.418819][ T1162] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 294.548295][T15195] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2535'. [ 294.558672][ T12] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 294.835187][T15220] netlink: 'syz.0.2541': attribute type 1 has an invalid length. [ 294.847713][T15220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2541'. [ 294.870022][T15224] C: left promiscuous mode [ 294.884962][T15224] C: entered allmulticast mode [ 294.896740][T15224] tunl0: left promiscuous mode [ 294.912046][T15224] tunl0: entered allmulticast mode [ 294.938720][T15224] gre0: left promiscuous mode [ 294.946987][T15224] gre0: entered allmulticast mode [ 294.955037][T15233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2544'. [ 295.006574][T15224] gretap0: left promiscuous mode [ 295.011682][T15224] gretap0: entered allmulticast mode [ 295.076492][T15243] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2545'. [ 295.079209][T15224] erspan0: left promiscuous mode [ 295.132298][T15224] erspan0: entered allmulticast mode [ 295.160523][T15224] ip_vti0: left promiscuous mode [ 295.165745][T15224] ip_vti0: entered allmulticast mode [ 295.187588][T15224] ip6_vti0: entered allmulticast mode [ 295.207091][T15224] sit0: left promiscuous mode [ 295.211846][T15224] sit0: entered allmulticast mode [ 295.231170][T15224] ip6tnl0: entered allmulticast mode [ 295.243541][T15224] ip6gre0: entered allmulticast mode [ 295.257335][T15224] syz_tun: entered allmulticast mode [ 295.268961][T15224] ip6gretap0: entered allmulticast mode [ 295.282450][T15224] bond0: entered allmulticast mode [ 295.288341][T15224] bond_slave_0: entered allmulticast mode [ 295.307217][T15224] team0: entered allmulticast mode [ 295.312604][T15224] team_slave_0: entered allmulticast mode [ 295.319724][T15224] team_slave_1: entered allmulticast mode [ 295.329814][T15224] dummy0: left promiscuous mode [ 295.335355][T15224] dummy0: entered allmulticast mode [ 295.342049][T15224] nlmon0: entered allmulticast mode [ 295.351014][T15224] caif0: entered allmulticast mode [ 295.357621][T15224] batadv0: entered allmulticast mode [ 295.367275][T15224] vxcan0: entered allmulticast mode [ 295.374176][T15224] vxcan1: entered allmulticast mode [ 295.380842][T15224] wg0: entered allmulticast mode [ 295.388681][T15224] wg1: entered allmulticast mode [ 295.396734][T15224] wg2: entered allmulticast mode [ 295.404325][T15224] veth0_to_bridge: entered allmulticast mode [ 295.415046][T15224] bridge_slave_0: entered allmulticast mode [ 295.424252][T15224] veth1_to_bridge: entered allmulticast mode [ 295.434131][T15224] bridge_slave_1: entered allmulticast mode [ 295.441036][T15224] veth0_to_bond: entered allmulticast mode [ 295.448694][T15224] veth0_to_team: left promiscuous mode [ 295.458446][T15224] veth1_to_team: entered allmulticast mode [ 295.472762][T15224] veth0_to_batadv: entered allmulticast mode [ 295.483696][T15224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.494593][T15224] batadv_slave_0: entered allmulticast mode [ 295.504830][T15224] veth1_to_batadv: entered allmulticast mode [ 295.515270][T15224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.524040][T15224] batadv_slave_1: entered allmulticast mode [ 295.535151][T15224] xfrm0: entered allmulticast mode [ 295.545277][T15224] veth0_to_hsr: entered allmulticast mode [ 295.555247][T15224] hsr_slave_0: entered allmulticast mode [ 295.564166][T15224] veth1_to_hsr: entered allmulticast mode [ 295.572893][T15224] hsr_slave_1: entered allmulticast mode [ 295.580582][T15224] hsr0: entered allmulticast mode [ 295.587048][T15224] veth1_virt_wifi: entered allmulticast mode [ 295.596330][T15224] veth0_virt_wifi: entered allmulticast mode [ 295.610489][T15224] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 295.621228][T15224] veth1_vlan: entered allmulticast mode [ 295.632828][T15224] veth0_vlan: entered allmulticast mode [ 295.644967][T15224] vlan1: entered allmulticast mode [ 295.652043][T15224] macvlan0: entered allmulticast mode [ 295.662872][T15224] macvlan1: entered allmulticast mode [ 295.673293][T15224] ipvlan0: entered allmulticast mode [ 295.679263][T15224] ipvlan1: entered allmulticast mode [ 295.685671][T15224] veth1_macvtap: entered allmulticast mode [ 295.696139][T15224] veth0_macvtap: entered allmulticast mode [ 295.708259][T15224] macvtap0: entered allmulticast mode [ 295.718047][T15224] macsec0: entered allmulticast mode [ 295.728793][T15224] geneve0: entered allmulticast mode [ 295.740637][T15224] geneve1: entered allmulticast mode [ 295.750453][T15224] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 295.758027][T15224] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 295.766517][T15224] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 295.778729][T15224] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 295.790836][T15224] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 295.802929][T15224] ipip0: entered allmulticast mode [ 295.810840][T15224] xfrm1: entered allmulticast mode [ 295.816394][T15224] syztnl0: entered allmulticast mode [ 295.829798][T15224] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 295.839274][T15224] vti0: entered allmulticast mode [ 295.845446][T15224] ip6erspan0: left promiscuous mode [ 295.850833][T15224] ip6erspan0: entered allmulticast mode [ 295.859398][T15224] veth2: entered allmulticast mode [ 295.864767][T15224] veth3: entered allmulticast mode [ 295.871307][T15224] ipvlan2: entered allmulticast mode [ 295.879887][T15224] bridge1: entered allmulticast mode [ 295.885511][T15224] nicvf0: entered allmulticast mode [ 295.891686][T15224] bond1: entered allmulticast mode [ 295.899337][T15224] : entered allmulticast mode [ 295.908962][T15224] bridge2: entered allmulticast mode [ 295.923292][T15224] vlan2: left promiscuous mode [ 295.928237][T15224] bond2: left promiscuous mode [ 295.933178][T15224] gretap1: left promiscuous mode [ 295.941030][T15224] team1: left promiscuous mode [ 295.946100][T15224] veth4: entered allmulticast mode [ 295.951897][T15224] veth5: entered allmulticast mode [ 295.958791][T15224] bridge3: entered allmulticast mode [ 295.966737][T15224] bond3: entered allmulticast mode [ 295.972869][T15224] veth6: entered allmulticast mode [ 295.979194][T15224] veth7: entered allmulticast mode [ 295.985345][T15224] macsec1: left promiscuous mode [ 295.990582][T15224] bond4: entered allmulticast mode [ 295.996615][T15224] ipip1: entered allmulticast mode [ 296.003107][T15224] bridge4: entered allmulticast mode [ 296.008640][T15224] bridge5: entered allmulticast mode [ 296.014076][T15224] bridge6: entered allmulticast mode [ 296.020171][T15224] wireguard0: entered allmulticast mode [ 296.025884][T15224] vxlan0: entered allmulticast mode [ 296.031860][T15224] ip6tnl1: entered allmulticast mode [ 296.038230][T15224] bridge0: entered allmulticast mode [ 296.045468][T15224] ip6erspan1: entered allmulticast mode [ 296.052846][T15224] wireguard1: entered allmulticast mode [ 296.060932][T15224] mac80211_hwsim hwsim24 wlan2: entered allmulticast mode [ 296.068624][T15224] veth0: entered allmulticast mode [ 296.073964][T15224] veth1: left promiscuous mode [ 296.079423][T15224] veth1: entered allmulticast mode [ 296.084867][T15224] bridge7: entered allmulticast mode [ 296.090727][T15224] bridge8: entered allmulticast mode [ 296.096346][T15224] bridge9: entered allmulticast mode [ 296.102563][T15224] bridge10: entered allmulticast mode [ 296.109748][T15224] bridge11: entered allmulticast mode [ 296.119178][T15224] ip6gretap0.2: entered allmulticast mode [ 296.125066][T15224] bond6: entered allmulticast mode [ 296.130488][T15224] bridge12: entered allmulticast mode [ 296.195896][T15249] tipc: Enabling of bearer rejected, already enabled [ 296.220304][T15250] tipc: Resetting bearer [ 296.251362][ T1148] bond6: (slave ip6gretap1): link status up again after 0 ms [ 296.287004][T15221] bond6: (slave ip6gretap1): link status up again after 0 ms [ 296.336685][T15210] bond6: (slave ip6gretap1): link status up again after 0 ms [ 296.353043][T15254] tipc: Resetting bearer [ 296.370491][T15216] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.388383][T15221] bond6: (slave ip6gretap1): link status up again after 0 ms [ 296.401299][T15216] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.446583][T15221] bond6: (slave ip6gretap1): link status up again after 0 ms [ 296.487589][T15209] bond6: (slave ip6gretap1): link status up again after 0 ms [ 296.495310][T15216] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.514339][T15209] bond6: (slave ip6gretap1): link status up again after 0 ms [ 296.528105][T15216] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.541315][T15216] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.550647][T15216] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.599094][T15216] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.654836][T15216] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.694808][T15271] netlink: 'syz.5.2551': attribute type 1 has an invalid length. [ 297.005810][T15302] vlan3: entered promiscuous mode [ 297.125672][T15313] xt_time: unknown flags 0xf4 [ 297.323114][T15309] tipc: Enabled bearer , priority 0 [ 297.437354][T15309] tipc: Disabling bearer [ 297.672545][T15343] __nla_validate_parse: 3 callbacks suppressed [ 297.672567][T15343] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2572'. [ 297.676004][T15341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2575'. [ 297.881348][T15354] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2576'. [ 298.178847][T15367] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2581'. [ 298.516142][T15392] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2588'. [ 298.550775][T15394] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2589'. [ 298.574821][T15394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2589'. [ 298.599566][T15394] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2589'. [ 298.691954][T15399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2592'. [ 298.695504][T15400] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2591'. [ 299.122447][T15416] geneve2: entered allmulticast mode [ 299.136040][T15418] delete_channel: no stack [ 299.142202][T15416] team0: Port device geneve2 added [ 299.187020][T15221] net_ratelimit: 29 callbacks suppressed [ 299.187042][T15221] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 299.221073][ T1148] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 299.241777][ T1148] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 299.283614][ T1148] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 299.322513][ T1148] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 299.353051][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888033009000: rx timeout, send abort [ 299.362073][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888033009000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 299.387375][T15221] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 299.504259][T15216] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 299.642183][T15216] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 299.859530][ T49] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 299.998917][ T49] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 300.131793][ T49] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 300.266786][T15209] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 300.380700][ T49] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 300.517928][T15216] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 300.620957][T15502] netlink: 'syz.0.2618': attribute type 83 has an invalid length. [ 301.303121][T15524] netlink: 'syz.4.2628': attribute type 30 has an invalid length. [ 302.790654][T15606] netem: change failed [ 302.887400][T15608] __nla_validate_parse: 12 callbacks suppressed [ 302.887421][T15608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2653'. [ 303.383841][T15636] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2660'. [ 303.483367][T15643] netlink: 'syz.0.2663': attribute type 1 has an invalid length. [ 303.550326][T15644] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2663'. [ 303.612507][T15644] 8021q: adding VLAN 0 to HW filter on device bond7 [ 303.915229][T15676] netlink: 'syz.0.2668': attribute type 9 has an invalid length. [ 303.951627][T15676] netlink: 'syz.0.2668': attribute type 6 has an invalid length. [ 304.009793][T15676] netlink: 'syz.0.2668': attribute type 7 has an invalid length. [ 304.021627][T15685] netlink: 'syz.5.2671': attribute type 83 has an invalid length. [ 304.031466][T15686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2668'. [ 304.127219][T15676] netlink: 'syz.0.2668': attribute type 8 has an invalid length. [ 304.239830][ T1148] net_ratelimit: 26 callbacks suppressed [ 304.239855][ T1148] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 304.388071][ T49] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 304.417587][T15711] netlink: 'syz.4.2679': attribute type 29 has an invalid length. [ 304.434013][T15713] netlink: 'syz.2.2678': attribute type 11 has an invalid length. [ 304.445374][T15713] netlink: 'syz.2.2678': attribute type 11 has an invalid length. [ 304.448427][T15711] netlink: 'syz.4.2679': attribute type 29 has an invalid length. [ 304.456073][T15713] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2678'. [ 304.477751][T15713] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2678'. [ 304.496797][ T1148] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 304.594889][T15720] netlink: 484 bytes leftover after parsing attributes in process `syz.4.2679'. [ 304.608909][ T1148] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 304.748694][ T1148] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 305.042579][T15742] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2689'. [ 305.175801][T15748] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2687'. [ 305.312855][T15754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2693'. [ 305.358197][T15757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.373253][T15221] smc: removing ib device syz0 [ 305.786731][T15751] ipvlan0: entered promiscuous mode [ 305.795122][ T9765] ================================================================== [ 305.803258][ T9765] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190 [ 305.812047][ T9765] Read of size 8 at addr ffff8880587722e8 by task kworker/0:7/9765 [ 305.820110][ T9765] [ 305.822468][ T9765] CPU: 0 UID: 0 PID: 9765 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full) [ 305.822488][ T9765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 305.822499][ T9765] Workqueue: infiniband ib_cache_event_task [ 305.822529][ T9765] Call Trace: [ 305.822537][ T9765] [ 305.822545][ T9765] dump_stack_lvl+0x189/0x250 [ 305.822564][ T9765] ? rcu_is_watching+0x15/0xb0 [ 305.822577][ T9765] ? __kasan_check_byte+0x12/0x40 [ 305.822599][ T9765] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.822614][ T9765] ? rcu_is_watching+0x15/0xb0 [ 305.822628][ T9765] ? lock_release+0x4b/0x3e0 [ 305.822650][ T9765] ? __virt_addr_valid+0x1c8/0x5c0 [ 305.822669][ T9765] ? __virt_addr_valid+0x4a5/0x5c0 [ 305.822687][ T9765] print_report+0xca/0x240 [ 305.822701][ T9765] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 305.822719][ T9765] kasan_report+0x118/0x150 [ 305.822740][ T9765] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 305.822761][ T9765] __ethtool_get_link_ksettings+0x6e/0x190 [ 305.822780][ T9765] ib_get_eth_speed+0x15e/0x7b0 [ 305.822800][ T9765] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 305.822823][ T9765] ? do_raw_spin_unlock+0x122/0x240 [ 305.822841][ T9765] ? rxe_query_port+0x6b/0x3b0 [ 305.822857][ T9765] rxe_query_port+0x93/0x3b0 [ 305.822873][ T9765] ib_query_port+0x16d/0x830 [ 305.822894][ T9765] ib_cache_update+0x1a9/0xbf0 [ 305.822912][ T9765] ? register_lock_class+0x51/0x320 [ 305.822937][ T9765] ? __pfx_ib_cache_update+0x10/0x10 [ 305.822956][ T9765] ? process_scheduled_works+0x9ef/0x17b0 [ 305.822972][ T9765] ib_cache_event_task+0xd8/0x1c0 [ 305.822988][ T9765] ? process_scheduled_works+0x9ef/0x17b0 [ 305.823002][ T9765] process_scheduled_works+0xae1/0x17b0 [ 305.823028][ T9765] ? __pfx_process_scheduled_works+0x10/0x10 [ 305.823048][ T9765] worker_thread+0x8a0/0xda0 [ 305.823074][ T9765] kthread+0x70e/0x8a0 [ 305.823093][ T9765] ? __pfx_worker_thread+0x10/0x10 [ 305.823107][ T9765] ? __pfx_kthread+0x10/0x10 [ 305.823125][ T9765] ? _raw_spin_unlock_irq+0x23/0x50 [ 305.823139][ T9765] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.823153][ T9765] ? __pfx_kthread+0x10/0x10 [ 305.823171][ T9765] ret_from_fork+0x439/0x7d0 [ 305.823193][ T9765] ? __pfx_ret_from_fork+0x10/0x10 [ 305.823210][ T9765] ? __switch_to_asm+0x39/0x70 [ 305.823228][ T9765] ? __switch_to_asm+0x33/0x70 [ 305.823246][ T9765] ? __pfx_kthread+0x10/0x10 [ 305.823266][ T9765] ret_from_fork_asm+0x1a/0x30 [ 305.823291][ T9765] [ 305.823296][ T9765] [ 306.061633][ T9765] Allocated by task 5866: [ 306.065966][ T9765] kasan_save_track+0x3e/0x80 [ 306.070656][ T9765] __kasan_kmalloc+0x93/0xb0 [ 306.075254][ T9765] __kvmalloc_node_noprof+0x30d/0x5f0 [ 306.080641][ T9765] alloc_netdev_mqs+0xa3/0x11b0 [ 306.085531][ T9765] rtnl_create_link+0x31f/0xd10 [ 306.090405][ T9765] rtnl_newlink_create+0x25c/0xb00 [ 306.095539][ T9765] rtnl_newlink+0x16d6/0x1c70 [ 306.100227][ T9765] rtnetlink_rcv_msg+0x7cf/0xb70 [ 306.105178][ T9765] netlink_rcv_skb+0x208/0x470 [ 306.109959][ T9765] netlink_unicast+0x82f/0x9e0 [ 306.114759][ T9765] netlink_sendmsg+0x805/0xb30 [ 306.119525][ T9765] __sock_sendmsg+0x219/0x270 [ 306.124223][ T9765] __sys_sendto+0x3bd/0x520 [ 306.128741][ T9765] __x64_sys_sendto+0xde/0x100 [ 306.133522][ T9765] do_syscall_64+0xfa/0x3b0 [ 306.138032][ T9765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.143976][ T9765] [ 306.146312][ T9765] Freed by task 15731: [ 306.150397][ T9765] kasan_save_track+0x3e/0x80 [ 306.155104][ T9765] kasan_save_free_info+0x46/0x50 [ 306.160157][ T9765] __kasan_slab_free+0x5b/0x80 [ 306.164934][ T9765] kfree+0x18e/0x440 [ 306.168842][ T9765] device_release+0x9c/0x1c0 [ 306.173446][ T9765] kobject_put+0x22b/0x480 [ 306.177871][ T9765] netdev_run_todo+0xd2e/0xea0 [ 306.182649][ T9765] rtnl_dellink+0x537/0x710 [ 306.187168][ T9765] rtnetlink_rcv_msg+0x7cf/0xb70 [ 306.192123][ T9765] netlink_rcv_skb+0x208/0x470 [ 306.196930][ T9765] netlink_unicast+0x82f/0x9e0 [ 306.201726][ T9765] netlink_sendmsg+0x805/0xb30 [ 306.206496][ T9765] __sock_sendmsg+0x219/0x270 [ 306.211211][ T9765] ____sys_sendmsg+0x505/0x830 [ 306.216011][ T9765] ___sys_sendmsg+0x21f/0x2a0 [ 306.220719][ T9765] __x64_sys_sendmsg+0x19b/0x260 [ 306.225665][ T9765] do_syscall_64+0xfa/0x3b0 [ 306.230175][ T9765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.236096][ T9765] [ 306.238428][ T9765] The buggy address belongs to the object at ffff888058772000 [ 306.238428][ T9765] which belongs to the cache kmalloc-cg-4k of size 4096 [ 306.252745][ T9765] The buggy address is located 744 bytes inside of [ 306.252745][ T9765] freed 4096-byte region [ffff888058772000, ffff888058773000) [ 306.266749][ T9765] [ 306.269275][ T9765] The buggy address belongs to the physical page: [ 306.275693][ T9765] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58770 [ 306.284470][ T9765] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 306.292971][ T9765] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 306.300519][ T9765] page_type: f5(slab) [ 306.304516][ T9765] raw: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000 [ 306.313111][ T9765] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 306.321756][ T9765] head: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000 [ 306.330442][ T9765] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 306.339312][ T9765] head: 00fff00000000003 ffffea000161dc01 00000000ffffffff 00000000ffffffff [ 306.347992][ T9765] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 306.356661][ T9765] page dumped because: kasan: bad access detected [ 306.363086][ T9765] page_owner tracks the page as allocated [ 306.368900][ T9765] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5871, tgid 5871 (syz-executor), ts 93731193109, free_ts 29613560673 [ 306.390269][ T9765] post_alloc_hook+0x240/0x2a0 [ 306.395143][ T9765] get_page_from_freelist+0x21e4/0x22c0 [ 306.400701][ T9765] __alloc_frozen_pages_noprof+0x181/0x370 [ 306.406526][ T9765] alloc_pages_mpol+0x232/0x4a0 [ 306.411394][ T9765] allocate_slab+0x8a/0x370 [ 306.415910][ T9765] ___slab_alloc+0xbeb/0x1420 [ 306.420608][ T9765] __kmalloc_noprof+0x305/0x4f0 [ 306.425472][ T9765] __register_sysctl_table+0x72/0x1340 [ 306.430942][ T9765] __addrconf_sysctl_register+0x328/0x4c0 [ 306.436712][ T9765] addrconf_sysctl_register+0x168/0x1c0 [ 306.442288][ T9765] ipv6_add_dev+0xd46/0x1370 [ 306.446897][ T9765] addrconf_notify+0x794/0x1010 [ 306.451811][ T9765] notifier_call_chain+0x1b3/0x3e0 [ 306.456936][ T9765] register_netdevice+0x1608/0x1ae0 [ 306.462151][ T9765] geneve_configure+0x645/0xa80 [ 306.467014][ T9765] geneve_newlink+0x188/0x220 [ 306.471701][ T9765] page last free pid 1 tgid 1 stack trace: [ 306.477512][ T9765] __free_frozen_pages+0xbc4/0xd30 [ 306.482646][ T9765] free_contig_range+0x1bd/0x4a0 [ 306.487602][ T9765] destroy_args+0x69/0x660 [ 306.492044][ T9765] debug_vm_pgtable+0x39f/0x3b0 [ 306.496943][ T9765] do_one_initcall+0x233/0x820 [ 306.501780][ T9765] do_initcall_level+0x104/0x190 [ 306.506783][ T9765] do_initcalls+0x59/0xa0 [ 306.511124][ T9765] kernel_init_freeable+0x334/0x4b0 [ 306.516333][ T9765] kernel_init+0x1d/0x1d0 [ 306.520682][ T9765] ret_from_fork+0x439/0x7d0 [ 306.525278][ T9765] ret_from_fork_asm+0x1a/0x30 [ 306.530069][ T9765] [ 306.532399][ T9765] Memory state around the buggy address: [ 306.538077][ T9765] ffff888058772180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 306.546239][ T9765] ffff888058772200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 306.554306][ T9765] >ffff888058772280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 306.562365][ T9765] ^ [ 306.569857][ T9765] ffff888058772300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 306.577979][ T9765] ffff888058772380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 306.586053][ T9765] ================================================================== [ 306.597390][ T9765] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 306.604633][ T9765] CPU: 0 UID: 0 PID: 9765 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full) [ 306.614023][ T9765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 306.624106][ T9765] Workqueue: infiniband ib_cache_event_task [ 306.630034][ T9765] Call Trace: [ 306.633331][ T9765] [ 306.636271][ T9765] dump_stack_lvl+0x99/0x250 [ 306.640879][ T9765] ? __asan_memcpy+0x40/0x70 [ 306.645485][ T9765] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.650693][ T9765] ? __pfx__printk+0x10/0x10 [ 306.655303][ T9765] vpanic+0x281/0x750 [ 306.659297][ T9765] ? preempt_schedule+0xae/0xc0 [ 306.664183][ T9765] ? __pfx_vpanic+0x10/0x10 [ 306.668707][ T9765] ? preempt_schedule_common+0x83/0xd0 [ 306.674508][ T9765] ? preempt_schedule+0xae/0xc0 [ 306.679367][ T9765] ? __pfx_preempt_schedule+0x10/0x10 [ 306.684747][ T9765] panic+0xb9/0xc0 [ 306.688481][ T9765] ? __pfx_panic+0x10/0x10 [ 306.692909][ T9765] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 306.698831][ T9765] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 306.704839][ T9765] check_panic_on_warn+0x89/0xb0 [ 306.709824][ T9765] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 306.715841][ T9765] end_report+0x78/0x160 [ 306.720114][ T9765] kasan_report+0x129/0x150 [ 306.724649][ T9765] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 306.730661][ T9765] __ethtool_get_link_ksettings+0x6e/0x190 [ 306.736495][ T9765] ib_get_eth_speed+0x15e/0x7b0 [ 306.741403][ T9765] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 306.746809][ T9765] ? do_raw_spin_unlock+0x122/0x240 [ 306.752064][ T9765] ? rxe_query_port+0x6b/0x3b0 [ 306.756840][ T9765] rxe_query_port+0x93/0x3b0 [ 306.761622][ T9765] ib_query_port+0x16d/0x830 [ 306.766242][ T9765] ib_cache_update+0x1a9/0xbf0 [ 306.771016][ T9765] ? register_lock_class+0x51/0x320 [ 306.776238][ T9765] ? __pfx_ib_cache_update+0x10/0x10 [ 306.781568][ T9765] ? process_scheduled_works+0x9ef/0x17b0 [ 306.787317][ T9765] ib_cache_event_task+0xd8/0x1c0 [ 306.792390][ T9765] ? process_scheduled_works+0x9ef/0x17b0 [ 306.798215][ T9765] process_scheduled_works+0xae1/0x17b0 [ 306.803807][ T9765] ? __pfx_process_scheduled_works+0x10/0x10 [ 306.809807][ T9765] worker_thread+0x8a0/0xda0 [ 306.814422][ T9765] kthread+0x70e/0x8a0 [ 306.818502][ T9765] ? __pfx_worker_thread+0x10/0x10 [ 306.823621][ T9765] ? __pfx_kthread+0x10/0x10 [ 306.828224][ T9765] ? _raw_spin_unlock_irq+0x23/0x50 [ 306.833523][ T9765] ? lockdep_hardirqs_on+0x9c/0x150 [ 306.838752][ T9765] ? __pfx_kthread+0x10/0x10 [ 306.843358][ T9765] ret_from_fork+0x439/0x7d0 [ 306.847960][ T9765] ? __pfx_ret_from_fork+0x10/0x10 [ 306.853083][ T9765] ? __switch_to_asm+0x39/0x70 [ 306.857863][ T9765] ? __switch_to_asm+0x33/0x70 [ 306.862814][ T9765] ? __pfx_kthread+0x10/0x10 [ 306.867425][ T9765] ret_from_fork_asm+0x1a/0x30 [ 306.872212][ T9765] [ 306.875786][ T9765] Kernel Offset: disabled [ 306.880115][ T9765] Rebooting in 86400 seconds..