last executing test programs: 4.600824831s ago: executing program 3 (id=1044): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x28, 0x10, 0x809, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x40810, 0x1b86}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x51}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r0, &(0x7f0000001480)='4', 0x0}, 0x20) 4.56862118s ago: executing program 3 (id=1045): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd610000e500122f"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES8=r0, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x58, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bridge_slave_0\x00'}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 4.480498109s ago: executing program 4 (id=1047): getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=""/11, &(0x7f0000000040)=0xb) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f00000028c0), &(0x7f0000000380)=0x60) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPOIB_PKEY={0x6}, @IFLA_IPOIB_MODE={0x6}, @IFLA_IPOIB_UMCAST={0x6, 0x3, 0x1}]}}}]}, 0x4c}}, 0x0) 4.460753368s ago: executing program 4 (id=1048): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000880000030400000002b23daaaaaaaaaaaa810034000600"], 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r5, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0xffff, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="00c766", 0x3}, {&(0x7f0000000700)="bc9e00000048", 0x6}], 0x2}, 0x48805) setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000000)=0x3, 0x4) readv(r3, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/20, 0x14}], 0x1) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4.192435223s ago: executing program 3 (id=1051): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000840)=[{{0x0, 0xa6, &(0x7f0000000180)=[{&(0x7f0000000280)='_9', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000300)='6^p', 0x3}], 0x1, &(0x7f0000001c00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast2}}}], 0x20}}], 0x2, 0x4048840) 4.128037676s ago: executing program 3 (id=1053): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x33) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000000c0)='%ps \x00'}, 0x20) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0xfffffffffffffffc, 0x8000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r2}, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaabaaaffffffffffff86dd604dd31800140600fc000000000000000000000000000001fe80000000000000000048ef1257182033c340b9", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x20000000000000ba, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd71}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000008500000013000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x25, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000d5d5d09c0e2fb9f22f7b1f8c2e40edc28787cd82d7da0e75507e209922a5da60d1c318435733beb4e9e86526393e25f74646a1407c117fd9cb8b3fc00963b6b2fec231c3e0ac304935c1028f3fd699e2962ec692aa9e0f3cb2dd59358523d473b3e55ebc540d0125c4e2c13da6a41bcf3d5fb4dee2aba8d146d8d7f91fc82625f946028f6e979513482c938b0f86895d64d741a35c69cc93ef514edd42e40c5e96ec4af0dc70f5a20fe8d7aecc4a59b1894195fe9d7c674cd185f5ab73e2d0e848c08978364c6f424f0f", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000b7080000000000007b8af8ff00000000b7080000d80000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000a00)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f00000001c0)={r11, 0x6}, &(0x7f0000000200)=0x8) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r12, 0x890b, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast1}, 0x200001, 0x5, 0x0, 0x100, 0xfc8, 0x20c200a3, r13}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r14, 0x0, r15, 0x0, 0x1, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000600000000000000070000008500000084f70fa7deeff53912000000"], &(0x7f0000000340)='GPL\x00', 0x4, 0xe1, &(0x7f0000000b80)=""/225, 0x41100, 0x18, '\x00', r13, @fallback=0xf, r15, 0x8, &(0x7f0000000380)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, r16, r3}, 0x94) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="ed4d000000000000000031000000080001000700000008000300", @ANYRES32=r9, @ANYBLOB="0c009900910000003100000008000300", @ANYRES32=r9, @ANYBLOB="ff0fe8db00", @ANYRES32, @ANYBLOB], 0x40}}, 0x4000) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001"], 0x4c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r5}, 0x10) 3.484522145s ago: executing program 4 (id=1061): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r1, 0x0, 0x0, 0x0) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x23) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x23) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000440)={@in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x3e, 0x0, "b1c4bd3bea3d0bdf69340e29ecaa9103b197cf1f9d7ae842868d2c6b80920a27fe13cf0239d0a511bf93721992a2818993e7dc1fbc523ca53080462a6bc0dd9c5f56630f6f3169011d9e1c30b5d87d0e"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000440)={@in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x3e, 0x0, "b1c4bd3bea3d0bdf69340e29ecaa9103b197cf1f9d7ae842868d2c6b80920a27fe13cf0239d0a511bf93721992a2818993e7dc1fbc523ca53080462a6bc0dd9c5f56630f6f3169011d9e1c30b5d87d0e"}, 0xd8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x19ae}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xda, &(0x7f0000000140)=""/218, 0x0, 0xc}, 0x94) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x3, 0x0, @loopback, @mcast2, 0x700, 0x8000, 0x1, 0x1}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000e42c9af04e2d40a44a96dde6d13e3830064e313c6a36f514772127c849", @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000000000000000050006000900000005000200fc000000"], 0x3c}}, 0x0) accept4(r0, 0x0, 0x0, 0x0) (async) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000380), 0x0, 0x20000000}], 0x1, 0x14) (async) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000380), 0x0, 0x20000000}], 0x1, 0x14) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x23) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x23) 2.488077016s ago: executing program 4 (id=1074): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e000004000280080005003048"], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000005800018044000400200a00000400000000fec0ffffffffffff0000000000000001000000001ff802000a0000000000000000000000000000000000000000000000000000000d0001007564703a73797a3100000000"], 0x6c}}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x5, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r5, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r5, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close(r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095", @ANYRES64=r3], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000410400400000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="08910400000000002400128009000100766c616e0000000014000280040004800c0002001a0000001900000014000300766c616e3000"/64], 0x58}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0xa) sendmsg$netlink(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="280000002500010000000000000000000400000014000700000000000000000000000000000d0000e1bbb426acf2b11dcc9e6486a7d0bb1007ba1feab6f32749d14106edebb43c175e50b3610767f02e5ec3ca6f26b0046b7c9c842c2f3dc5cc4a2c9d8f554dee530f85a34c81ace896b2bbf80f07b23348785b8bcb8c26f81152855e1c69a209cb451bc10f17c164d812f740fd0899cda691d68f77cef1bf0eb77912bc14e21923aec08b0dd1c9ef3df4dfe6b9fa43aab9f5d2e82d9195d7718153627729d9f33a6ed038820ad2ad44b80363f8871299e71e23bac9095857db249ce53d"], 0x28}], 0x1}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2eb89e0a", @ANYRES16=r9, @ANYBLOB="01000300000000000000330000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0000000000"], 0x3c}}, 0x20000040) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) r14 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r14, @ANYRESDEC=r8], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) 2.383417389s ago: executing program 4 (id=1076): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0xb, 0x0, 0x25dfdbfe}, 0x14}}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x8100, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r13, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r12, 0x400454da, &(0x7f0000000700)=r14) sendmsg$nl_route_sched(r7, 0x0, 0x0) 2.120443538s ago: executing program 0 (id=1079): r0 = socket$key(0xf, 0x3, 0x2) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000791896000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) recvmmsg$unix(r7, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r4, 0x0) mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r0, 0x4000}], 0x1, &(0x7f0000000100)={r9, r10+60000000}, &(0x7f00000001c0)={[0x100000000]}, 0x8) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0xffff, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) ppoll(&(0x7f0000000200)=[{r8, 0x2024}, {r0, 0x6003}, {r3, 0x100}, {r3, 0x12}], 0x4, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={[0x70]}, 0x8) recvmmsg(r0, &(0x7f0000000440), 0x0, 0x2000000022, &(0x7f0000000480)={r1, r2+10000000}) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x4) 2.068524163s ago: executing program 4 (id=1080): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="c3aa00fe40008c0023000000000000000000000000005f859d212e69bfb6be6146bfd91e5ed44b89fff22c3f5a7634a9bd71fc24466354ccd075ad908e8e08c2d47f984fc6d4aa40bda418103da01689a2b8d01ffed6a8bda2ffc8483e48ca9cdb8ad248a4bd856ba9b39eb51bfef5033c81f1aa774d102b869ad6bd7faea0689d0f4acb37f8"], &(0x7f0000000480)='syzkaller\x00', 0x1}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x5452, &(0x7f0000000000)) recvfrom(r2, 0x0, 0x0, 0x2, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) unshare(0x62040200) socket$netlink(0x10, 0x3, 0xc) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000300)=0x1, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000300"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x17, 0x0, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x20000000, 0x0, 0x0, 0x1, 0x3}, {0xfffffffffffffffc, 0x0, 0x1000000}, 0xffffffff, 0x0, 0x1}, {{@in=@empty, 0x2, 0x33}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x0, 0x0) 1.892809086s ago: executing program 2 (id=1081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000f80)=ANY=[@ANYBLOB="c40100000301050000000000000000000000000a5800048054000180050001000800000005000200040000000500030009000000060005000105000005000300e8000000060004007fec00000500030013000000050002000800000005000100050000000500010090000000060012400001000014000d80080001000a01010208000100ac1414aa940002"], 0x1c4}, 0x1, 0x0, 0x0, 0x8825}, 0x40) 1.729199959s ago: executing program 2 (id=1082): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000001a0001caa9be26af8756ffbd12420000000000000000000200000000", @ANYRES32=0x0, @ANYBLOB="08001900", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x2e, 0x5f, 0x5f]}}, &(0x7f00000002c0)=""/20, 0x1d, 0x14, 0x0, 0xfffffff9, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$nl_crypto(0x10, 0x3, 0x15) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000400)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_route(0x10, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, 0x0, 0x0) 1.453667076s ago: executing program 2 (id=1083): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = accept(r2, &(0x7f0000000080), &(0x7f0000000000)=0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_int(r4, 0x6, 0x1b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r7, 0x8, 0x6}, 0xc) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x24000000) connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r8, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xa) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) sendmsg$tipc(r0, &(0x7f0000000740)={&(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x3, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x8000) 1.232300571s ago: executing program 1 (id=1084): openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)=@ethernet={0x6, @local}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000380)=[@txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffc}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}], 0x78}, 0x40001) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x6, 0x0, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x130, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x100, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0xe, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x80]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0xc, 0xc, 0x8, 0xa, 0x6, 0xd, 0x6, 0x10, 0xb, 0x9, 0x4, 0x0, 0x0, 0x1, 0x8, 0xf], 0x0, [0x8, 0x0, 0x4, 0x4000, 0x6, 0x8, 0x8, 0x9, 0xfff2, 0x0, 0xf001, 0x2, 0x4, 0x9, 0x5, 0x101], [0x1, 0x1, 0x7, 0x30, 0x6, 0x7, 0x4, 0xa579, 0x6, 0x10, 0xa7, 0x5, 0x7, 0x81, 0x3ff, 0x9]}}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x7fffffff}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x40}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xe}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x401}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x6}]}}]}, 0x130}}, 0x0) (async) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000001d00)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000d3bfa4ddc5edf211007f120116c61a0a730000000000000000000000000000b9a8f885f0638ad13f4f535e8e1372d8b27d546d5efa88992006c0153348b09969bd607bd40af2b45e694367b39ba8c7a0ed824dc3fdb9c62b401f5c98ec6eb3275f51a30519cb9567a1ed4b16acdfb05279a1fbfb8ee17708aedaad6005c1802dd1cb06c1c6e0"], 0x58) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) (async) bind$can_raw(r5, &(0x7f00000005c0), 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000840)=@abs, 0x6e, &(0x7f0000000a00)=[{&(0x7f00000008c0)=""/123, 0x7b}, {&(0x7f0000000940)=""/184, 0xb8}], 0x2}}], 0x1, 0x40002000, 0x0) read(r5, &(0x7f00000027c0)=""/4073, 0xfe9) (async) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000040)=0x2, 0x4) (async) sendmsg$can_raw(r5, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r6}, 0x10, &(0x7f00000003c0)={&(0x7f0000000500)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x3f57955e7be81d83, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x4000040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r8 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000700), &(0x7f0000000740)=0xe, 0x800) connect$bt_l2cap(r8, &(0x7f0000000800)={0x1f, 0x4, @none, 0xffff}, 0xe) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0xff}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, '\x00\x00\x00\x00@\x00', "c00800b29ca2b838d41ac21b7edf972d", "e7e81eae", "00000000000500"}, 0x28) (async) sendmsg$nl_netfilter(r4, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b00)={0x11fc, 0x8, 0x7, 0x101, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, 0x4}, [@generic="4f11454f59027ecbb4932ae4bb70778456b8288e7da266ca77b0163cc859d8f96c6b405c2662907bc36330c042dc27b509aef2f47c7ab553c7783b14ef42eb7cf624fa89ad115cba178494e8dac4261c5f2c34ba7370820ca09f2bb321c26c4cc69f48971b6e04309217721d81190993728cf55fa2d0db4374d4b206ce966785e75dc743f48d8f327eb2ca81e402b4283158f61017a13f03725ad836c6a23689a9", @nested={0xc, 0xd4, 0x0, 0x1, [@nested={0x4, 0x23}, @nested={0x4, 0x75}]}, @typed={0x14, 0x43, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x6b, 0x0, 0x0, @pid}, @typed={0x14, 0xc6, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0xc, 0xed, 0x0, 0x0, @u64=0x22d}, @typed={0x1004, 0x9d, 0x0, 0x0, @binary="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"}, @generic="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"]}, 0x11fc}, 0x1, 0x0, 0x0, 0x41abb24489acc6e4}, 0x804) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/172, 0xac}, {&(0x7f0000000100)=""/78, 0x4e}, {&(0x7f0000000280)=""/210, 0xd2}], 0x3}, 0xed88}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000540)) 1.196785975s ago: executing program 0 (id=1085): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="021800001b000000000000000000000005000600000000000a000000000000000000000020000000000000000000000000000000000000000800120000000000000000000000000030000000000000000000000000000000ac1e0001000000000000000000000000e000000200000000000000000000000005000500000000000a00000000000000fc0000000000000000000000000000000000000000000000070002"], 0xd8}}, 0x0) 1.115690761s ago: executing program 0 (id=1086): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 64) r3 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x8000050, &(0x7f0000000080)={0x11, 0x4305, r4, 0x1, 0xfb}, 0x14) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40004000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x30, r5, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4c}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40043) 1.02478457s ago: executing program 3 (id=1087): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c0001"], 0x44}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r3, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) 985.242389ms ago: executing program 1 (id=1088): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000008c0)={0x0, 0x8, 0x5, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000cc0)={r1, 0xc, 0x8}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001214010028bd7000fcdbdf2508002100"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x1ec, r3, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0xa8, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a81af2dff8cd7dc5ec157e87f3d42803983716bb2ed0460f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1ace}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="0fdba9f88f5ae975c02b815a8648cbbfcaeb28bf84f417fd"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="0b25c79fccd4d0a2da6485d2e3d84d74"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="9ee0064636e779839b379069e539b0a8a25bd3b54284a4eab6797a50906cbeae"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7ba3648aae3927ca13704b7264ccdedbcf2adc367ef2fbde"}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="3c9cd4eaafd5c3b5b50fa54b5c7e758f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="ffbef70ba6dca82441f06398aa225fba2d31baed63063b6051e595fc641f3c01"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "74acfb1774a67a7d"}]}, @NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="6fbcb1d28f278257c5012ac4f1a495e83b40d84bec1c65b4"}]}, @NL80211_ATTR_REKEY_DATA={0x98, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5c30dc16bbcf9dc8b1a45d8307bc86efa4341f0bcae1c7d024e7ec1e1ce9a0e6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3071d503ed607918"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "31ecefe56e98a5bc"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="ec985160f1322c77a512da05d67d2a2ed8aad6c4cb432fab"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4151}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "399c989cf50d2a33"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="ffa247f33796bbca745c15cd30720fbfe651d71dd0f12c25"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "efc18aab57ce420c"}]}, @NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5c5cc94553e8ce49e1da8fddbe84aadab14ee6658d072fd6"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "897be1d02937b33b"}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x1}, 0x8080) r4 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='vlan1\x00', 0x10) listen(r4, 0x1) sendmmsg$inet(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)='_9', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000300)='6^p', 0x3}], 0x1, &(0x7f0000001c00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast2}}}], 0x20}}], 0x2, 0x4048840) 729.585432ms ago: executing program 0 (id=1089): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0xec5}], 0x1, 0x18228, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000001440)="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", 0x575, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)="c0a1c491d934358eca38641195b290b435a240304c21a0db1f9dc9790d60d4b8dba01365b637c7cf139a403aa18d385bc1f8521313709c0c2ab87943127ce3b6964a2b566467d443363e2cf12646237377c49be7a8aadd49cb87b0697b6eb3bf41a1523161570557", 0x68}, {&(0x7f00000000c0)="a625060c50ff7d0802a0c093e921c6e0a0286ace0b77fda330579c0603d52c55097b396abfc9e3266d64c69e95e92d140f815b8fbc00bb13ed0805957168ae76f244e8d95997c68e8c0b2c34a84efc2dea790108f46d478c7e510fe1c7342e5bb047071eacdbab5ec65ddba84829133cf3445915c25c25d26c82962bb1c31817bb140eb2a69c89bea1b1e7d5ef76a2e0ab9542c6e4a07df5b741961b9842d6ef", 0xa0}, {&(0x7f00000001c0)="45ff4e61fdd959f900ffbbef764e051786de77f039d68a9292c151c2a3a0ec1b8cb2aac87857e47d6302884958ecb02274a1294a459723f040c956390d7200b19ed92db40e3e3770b7fb1a", 0x4b}], 0x3, &(0x7f00000002c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x44, 0x5a, 0x3, 0x5, [{@local, 0x6}, {@broadcast, 0x72a}, {@loopback, 0x7}, {@local, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x4}, {@broadcast}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0xc0}, 0x24040000) 668.632422ms ago: executing program 1 (id=1090): socket$xdp(0x2c, 0x3, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x6, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 640.882381ms ago: executing program 3 (id=1091): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x4}, 0x8) close(r3) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x200, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$rose(r0, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) connect$rose(r0, 0x0, 0x0) 572.94434ms ago: executing program 1 (id=1092): r0 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000300)=0x3ff, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x10200}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x10200}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="020300000e000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000400000020001000000000000000a18ff00000005000500000000000a"], 0x70}}, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) (async) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4800380}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r8, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x400, 0x4f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x851}, 0x0) (async) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4800380}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r8, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x400, 0x4f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x851}, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r10, &(0x7f0000000780)={0xa, 0x4e24, 0x3, @loopback={0xffffffffffff0000}, 0x7}, 0x1c) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x38, r7, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x38}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x38, r7, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x38}}, 0x0) 464.706281ms ago: executing program 0 (id=1093): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x14, 0x66, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0x6}, {0xfff1, 0xd}, {0xf, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x8021}, 0x24008084) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000000f7070006000000"], 0xca) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000811) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000340)="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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r3, &(0x7f0000000000)=ANY=[], 0xa) r4 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x74, 0x0, 0x0, 0xfffff01c}]}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5d9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r5, &(0x7f0000000240)="dba7838e3cd7fb9c2ece775ba8b372ac362812edc6305f9c2226e5054de1059542f085f7c2c5e0c942b155ac99ee1592f9b8bf46f3d075dd0e1f1f7d02", &(0x7f0000000280)=""/76}, 0x20) 452.690786ms ago: executing program 2 (id=1094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r4, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x0) splice(r1, 0x0, r3, 0x0, 0x10d00, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x2, 0x8, 0x201, 0x0, 0x0, {0xf304bb192a64e847, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x80040) 242.929517ms ago: executing program 1 (id=1095): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000100)=@raw=[@map_idx={0x18, 0x9, 0x5, 0x0, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb1eb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f0000000180)='syzkaller\x00', 0xa3, 0x92, &(0x7f0000000240)=""/146, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x7, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000380)=[{0x5, 0x4, 0xc, 0x9}, {0x5, 0x5, 0xc}, {0x1, 0x5, 0xa, 0x6}, {0x2, 0x3, 0xb, 0x7}, {0x3, 0x2, 0x4, 0xf}], 0x10, 0x83d6}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f0000000680)={&(0x7f00000004c0)=""/234, 0xea, 0x0, &(0x7f00000005c0)=""/187, 0xbb}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000800000000000000000000711027000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, r0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 152.507266ms ago: executing program 2 (id=1096): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="021800001b000000000000000000000005000600000000000a0000000000000000ffffff80000000000000000000000000000000000000000800120000000000000000000000000030000000000000000000000000000000ac1e0001000000000000000000000000e000000200000000000000000000000005000500000000000a00000000000000fc0000000000000000000000000000000000000000000000070002"], 0xd8}}, 0x0) 134.82584ms ago: executing program 1 (id=1097): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4020000) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4) sendmsg$kcm(r1, 0x0, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000006000000000000000d0000008520000005000000180100002020782500000000002020207b1af8ff00000000bfa100000007010000f8ffffffb702000008000000b70300000200000085000000060000001811000000000016c5b948b06140a058a22277521a26cefedf4f374b17a87c50d1a2f59ccb38e080e664385a1d1f65a4f6cd76db8ed2f0d25ebebb16f6504c0e44fd23fc5afdc9844f9500a9fa9d7c75d7192d6fec43f2ec7c165d8309e44ba331daef48a5a6aa0001dbe5be2e1b3c8ef9c7691bb2d87543cbb0d5b90262a7937e68b1b30ff0683c9cf7037155aba5ddcc000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000001800000003000000000000008e0100005daa1800000000007144f4fff0ffffff95000000000000"], 0x0, 0x7fff, 0x5a, &(0x7f00000002c0)=""/90, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0xd, 0xfffff469}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f00000005c0), 0x10, 0x3fd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000240)='bcache_invalidate\x00', r2, 0x0, 0x3}, 0x18) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(0xffffffffffffffff, 0xfffffffe) socket$can_bcm(0x1d, 0x2, 0x2) poll(&(0x7f0000000180)=[{r3, 0x224}], 0x1, 0x11ff) shutdown(r3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="7409f000", @ANYRES16, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088048010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a0000000000080009000000000008000a000000000008000a000000000008000a000000"], 0x174}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x12, r0, 0xbdd94000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000000)={'veth0_macvtap\x00', 0x6}) getsockopt$sock_buf(r5, 0x1, 0x1a, &(0x7f00000017c0)=""/4096, &(0x7f0000000100)=0x1000) r6 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, 0x0, &(0x7f0000000400)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x80, 0x5}, &(0x7f0000000140)=0x8) syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r7, &(0x7f0000000780), 0x12) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000700)={'bond0\x00'}) 100.003709ms ago: executing program 0 (id=1098): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01202cbd70100400000005000000080009000200000008000b00000000000800fde004ea0000"], 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0, 0x0, 0x9}, 0x18) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x9, 0x6, {{0x32, 0x4, 0x1, 0x35, 0xc8, 0x67, 0x0, 0x5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@lsrr={0x83, 0x1f, 0xfa, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x20}, @broadcast, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x1c, 0x50, 0x1, 0xb, [{@multicast1, 0x5}, {@empty, 0xf08}, {@loopback, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0xf, 0x3, 0x5, [{@multicast1, 0x8}, {@loopback, 0x8}]}, @timestamp={0x44, 0x10, 0x86, 0x0, 0x0, [0x3, 0x4, 0x0]}, @end, @timestamp_addr={0x44, 0x24, 0xc5, 0x1, 0x5, [{@broadcast, 0x8}, {@loopback, 0x131000}, {@multicast2, 0xc6}, {@empty, 0x3}]}, @rr={0x7, 0x13, 0x8a, [@local, @rand_addr=0x64010101, @local, @local]}, @timestamp_addr={0x44, 0x1c, 0x73, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x7, 0x0}, 0xdb99}, {@rand_addr=0x64010102, 0x93d7}, {@multicast1, 0x6}]}]}}}}}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000540)=ANY=[@ANYRESDEC, @ANYRES16=r6, @ANYRES16=r7, @ANYRES8=r5, @ANYRESOCT=r0, @ANYRES64=r7, @ANYRESHEX=r9], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000002c0)='task_rename\x00', r10}, 0x18) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r11}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) (async, rerun: 32) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008000000010000008000"], 0x17) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r12, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 0s ago: executing program 2 (id=1099): r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@remote, @netrom, @netrom, @remote, @default, @remote, @rose, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4008800) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "fff08d9f91939d73eeeabfdaf1601494"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "d7d2b390c11aaa2d02ab9b3c2a393150"}, @NL80211_ATTR_PMK={0x14, 0xfe, "d6def1c3447972cf48563545dd4f9523"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "6156ff15f6c9c9cc0fedffeb4ce1d6e2"}]}, 0x70}, 0x1, 0x0, 0x0, 0x48848}, 0x30) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x1a4, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SSID={0x9, 0x34, @random="6ef96737ef"}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88b5}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @beacon=[@NL80211_ATTR_IE={0x167, 0x2a, [@random={0x9, 0xcc, "86b10f9d4c1191459821c7ff7d039f852c48e29ca45dd062e315e99c20d0b96f46032bc1555dd68629b15b436ac27ef651961ae8b3f46511eb4aae496f69bcc7c2685e8f18f9ed2fa375e5e3083c5e851329edd3c4af4a439e2e8fcd82190d12aaf58c885cf528fd5c4342a9e473c2b0f84c5df931f70d8d433fcb49c86849f37e18fec9e648f1a806d4546aa391b2bae98b5cd9622b518ee0813f9b66e87c01d535c067ab35b50218caba031f70ce52976cf5c26a9fe4052f3fb7dea2155a403a54d42ca34a642d0da2ffb9"}, @sec_chan_ofs={0x3e, 0x1}, @challenge={0x10, 0x1, 0x41}, @perr={0x84, 0x6f, {0xec, 0x7, [{{0x0, 0x1}, @device_a, 0xb1f, @value=@broadcast, 0x2}, {{}, @broadcast, 0x5, @void, 0xa}, {{}, @device_b, 0x6, @void, 0x4}, {{0x0, 0x1}, @device_a, 0x10001, @value=@broadcast, 0x37}, {{}, @device_a, 0x2e, @void, 0x36}, {{}, @device_b, 0x9, @void, 0x30}, {{0x0, 0x1}, @device_a, 0x7fff, @value=@device_b, 0xa}]}}, @ssid={0x0, 0x1, @random="95"}, @chsw_timing={0x68, 0x4, {0x96, 0x7f}}, @supported_rates={0x1, 0x4, [{0x48}, {0x6}, {0x1, 0x1}, {0x4}]}, @ibss={0x6, 0x2, 0x1}, @mesh_chsw={0x76, 0x6, {0x5, 0x2f, 0x1e, 0x830d}}, @erp={0x2a, 0x1}]}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x1a4}}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'ip6tnl0\x00', r1, 0x29, 0x1, 0xc9, 0x5, 0x30, @private2, @remote, 0x8, 0x1, 0x4, 0x508c5e1f}}) sendmsg$nl_route(r5, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)=@ipmr_delroute={0x4c, 0x19, 0x8, 0x70bd2a, 0x25dfdbfc, {0x80, 0x80, 0x14, 0x2, 0xfd, 0x2, 0xfe, 0xa}, [@RTA_IIF={0x8, 0x3, r6}, @RTA_NH_ID={0x8, 0x1e, 0xa}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x9}}, @RTA_IIF={0x8}, @RTA_PREFSRC={0x8, 0x7, @multicast2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20044000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r2) sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x68, r8, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x17}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x168, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x80000000, 0x6a}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x9}, @NL80211_ATTR_IE={0x84, 0x2a, [@chsw_timing={0x68, 0x4, {0x1f0, 0x5}}, @mesh_chsw={0x76, 0x6, {0x5, 0xef, 0xd, 0xf49}}, @erp={0x2a, 0x1, {0x1}}, @tim={0x5, 0x6a, {0x0, 0xe4, 0x2, "8fe10608d811c48469f4a0416404c7c03e0ec8b93f404294ce061609b9b0c94aedb4e1c82df6610e045dd6f0d970198d059eb5b5a9b07cf867555c273918581c07c36d996cfe60b963d9e9ca00bfd29c06fd3d503c14d607efff75dea720092ce645de35c837c3"}}, @dsss={0x3, 0x1, 0x3b}]}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ap_ssid}, @NL80211_ATTR_KEYS={0xa8, 0x51, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "99d51ae461"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9313ccab46"}, @NL80211_KEY_SEQ={0x12, 0x4, "b8331c2ac66acdbb13f11a3fcb78"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "f3bf978a1e1e840d1d1b74de72"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "f005747aff9d495feaea385844"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4000010}, 0x84) r10 = accept4(r0, 0x0, &(0x7f0000000c40), 0x81800) getsockname$packet(0xffffffffffffffff, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000cc0)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000d80)={'sit0\x00', &(0x7f0000000d00)={'sit0\x00', r11, 0x80, 0x10, 0x8, 0x1d, {{0x18, 0x4, 0x3, 0x6, 0x60, 0x68, 0x0, 0xf7, 0x2f, 0x0, @local, @local, {[@timestamp_addr={0x44, 0x4c, 0x5c, 0x1, 0xf, [{@private=0xa010100, 0x6}, {@loopback, 0x1}, {@rand_addr=0x64010100, 0x3}, {@rand_addr=0x64010100, 0x5}, {@broadcast, 0xfffffff1}, {@multicast1, 0x4}, {@remote, 0x1f67}, {@empty, 0x7ff}, {@multicast2, 0x78}]}]}}}}}) getsockopt$inet_sctp_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000dc0)={0x0, 0x3}, &(0x7f0000000e00)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000e40)={r12, 0x8, 0x6}, 0x8) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000f00)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000f40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r13, &(0x7f0000001040)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x6c, r14, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xc}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xc}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xbe}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r17 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000010c0), r13) sendmsg$IEEE802154_START_REQ(r13, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10100400}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x44, r17, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xb}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044046}, 0x200440c1) bind$alg(r10, &(0x7f0000001200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac-aes-ce\x00'}, 0x58) sendmsg$AUDIT_USER_TTY(r10, &(0x7f0000001440)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001400)={&(0x7f00000012c0)={0x108, 0x464, 0x300, 0x70bd2a, 0x25dfdbfc, "1b32e2b43b3c41aaad422fd859e25e58d39370e0fe3fc53cb50b863f7a2d80b0a4b59a64dff5c19ce955bf6c46fee47af40af1b4263d19fd26faf95e128b6e113314b0bcd2cb4989635c01b6662e24dc5801912ec609e8c122897cd7d68d8728ce86183fc7202e531d2ff33ad6545a4d7cc466177131d11a1eb2fea7807188f18e7b1599e29e0f65d22b21b7beb8d2b95d79a84e21d1bef90607aa1d49570798e9bca56a0df2ddf38ef15fc1d864b0b6782b1eae2ea8dbac4b67574fafc7eab3eff934d12ed3f7e6bffba8165726e53bd0a2169f2ba411c56ed006c0d17ed92829be6825e34c70becac8a09597aefcf84dfd8fe8aa3bedfd", ["", "", "", "", "", "", "", "", "", ""]}, 0x108}, 0x1, 0x0, 0x0, 0x44040}, 0x24000800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.158' (ED25519) to the list of known hosts. [ 89.465557][ T5851] cgroup: Unknown subsys name 'net' [ 89.601261][ T5851] cgroup: Unknown subsys name 'cpuset' [ 89.611549][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.297839][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.942650][ T5869] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.951299][ T5869] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.959936][ T5869] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.968927][ T5869] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.975677][ T5878] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.977637][ T5869] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.986271][ T5878] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.998521][ T5869] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.999454][ T5878] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.006882][ T5869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.015102][ T5878] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.027898][ T5878] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.037251][ T5869] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.056634][ T5878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.057247][ T5869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.065290][ T5878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.078898][ T5878] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.087787][ T5869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.089408][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.104887][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.112271][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.120393][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.128913][ T5881] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.137361][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.145496][ T5881] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.774840][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 94.834991][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 95.035935][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 95.102943][ T5875] chnl_net:caif_netlink_parms(): no params data found [ 95.174302][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.182492][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.190575][ T5865] bridge_slave_0: entered allmulticast mode [ 95.201468][ T5865] bridge_slave_0: entered promiscuous mode [ 95.250587][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.257968][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.265195][ T5865] bridge_slave_1: entered allmulticast mode [ 95.272897][ T5865] bridge_slave_1: entered promiscuous mode [ 95.305339][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 95.347592][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.354763][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.362780][ T5863] bridge_slave_0: entered allmulticast mode [ 95.370249][ T5863] bridge_slave_0: entered promiscuous mode [ 95.424498][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.432281][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.439755][ T5863] bridge_slave_1: entered allmulticast mode [ 95.447875][ T5863] bridge_slave_1: entered promiscuous mode [ 95.488007][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.557871][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.598919][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.606126][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.613679][ T5862] bridge_slave_0: entered allmulticast mode [ 95.621055][ T5862] bridge_slave_0: entered promiscuous mode [ 95.642167][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.652140][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.659475][ T5875] bridge_slave_0: entered allmulticast mode [ 95.667073][ T5875] bridge_slave_0: entered promiscuous mode [ 95.677644][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.701373][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.708747][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.715949][ T5862] bridge_slave_1: entered allmulticast mode [ 95.723565][ T5862] bridge_slave_1: entered promiscuous mode [ 95.744565][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.751991][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.759318][ T5875] bridge_slave_1: entered allmulticast mode [ 95.766888][ T5875] bridge_slave_1: entered promiscuous mode [ 95.776272][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.840140][ T5865] team0: Port device team_slave_0 added [ 95.875927][ T5863] team0: Port device team_slave_0 added [ 95.897398][ T5865] team0: Port device team_slave_1 added [ 95.903628][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.911660][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.919230][ T5870] bridge_slave_0: entered allmulticast mode [ 95.927415][ T5870] bridge_slave_0: entered promiscuous mode [ 95.939072][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.962111][ T5863] team0: Port device team_slave_1 added [ 95.992628][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.000462][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.007755][ T5870] bridge_slave_1: entered allmulticast mode [ 96.015100][ T5870] bridge_slave_1: entered promiscuous mode [ 96.038579][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.050650][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.073112][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.080504][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.102155][ T5867] Bluetooth: hci3: command tx timeout [ 96.107607][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.155267][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.177000][ T5183] Bluetooth: hci4: command tx timeout [ 96.177166][ T51] Bluetooth: hci0: command tx timeout [ 96.182922][ T5867] Bluetooth: hci1: command tx timeout [ 96.208782][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.215889][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.242809][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.256841][ T5867] Bluetooth: hci2: command tx timeout [ 96.270946][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.309679][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.317005][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.343776][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.359974][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.383658][ T5862] team0: Port device team_slave_0 added [ 96.392619][ T5875] team0: Port device team_slave_0 added [ 96.399537][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.407557][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.434335][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.469848][ T5862] team0: Port device team_slave_1 added [ 96.478410][ T5870] team0: Port device team_slave_0 added [ 96.486158][ T5875] team0: Port device team_slave_1 added [ 96.547250][ T5870] team0: Port device team_slave_1 added [ 96.598522][ T5865] hsr_slave_0: entered promiscuous mode [ 96.606345][ T5865] hsr_slave_1: entered promiscuous mode [ 96.646470][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.653638][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.680360][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.693135][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.700764][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.728057][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.772982][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.780294][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.807213][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.819300][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.826428][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.852464][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.868921][ T5863] hsr_slave_0: entered promiscuous mode [ 96.875522][ T5863] hsr_slave_1: entered promiscuous mode [ 96.882018][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 96.887936][ T5863] Cannot create hsr debugfs directory [ 96.906852][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.914002][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.940410][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.997617][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.004618][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.030668][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.142236][ T5862] hsr_slave_0: entered promiscuous mode [ 97.149515][ T5862] hsr_slave_1: entered promiscuous mode [ 97.155759][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 97.161578][ T5862] Cannot create hsr debugfs directory [ 97.219056][ T978] cfg80211: failed to load regulatory.db [ 97.246903][ T5875] hsr_slave_0: entered promiscuous mode [ 97.253330][ T5875] hsr_slave_1: entered promiscuous mode [ 97.260132][ T5875] debugfs: 'hsr0' already exists in 'hsr' [ 97.265887][ T5875] Cannot create hsr debugfs directory [ 97.333103][ T5870] hsr_slave_0: entered promiscuous mode [ 97.340314][ T5870] hsr_slave_1: entered promiscuous mode [ 97.346603][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 97.352384][ T5870] Cannot create hsr debugfs directory [ 97.752614][ T5865] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.768612][ T5865] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.803070][ T5865] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.842658][ T5865] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.899949][ T5863] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.912229][ T5863] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.923388][ T5863] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.939101][ T5863] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.028082][ T5862] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.042315][ T5862] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.052749][ T5862] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.063959][ T5862] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.170158][ T5875] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.178116][ T5867] Bluetooth: hci3: command tx timeout [ 98.191403][ T5875] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.202065][ T5875] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.213102][ T5875] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.257035][ T5867] Bluetooth: hci1: command tx timeout [ 98.257079][ T51] Bluetooth: hci0: command tx timeout [ 98.262933][ T5183] Bluetooth: hci4: command tx timeout [ 98.337196][ T5867] Bluetooth: hci2: command tx timeout [ 98.364468][ T5870] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.375659][ T5870] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.396946][ T5870] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 98.410147][ T5870] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.427769][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.528994][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.554619][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.570541][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.612080][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.619560][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.630136][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.637608][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.682273][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.695068][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.739725][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.747422][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.778098][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.785343][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.795456][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.802786][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.832617][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.839932][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.880917][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.920873][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.012050][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.055185][ T5863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.087679][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.113964][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.121285][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.164189][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.171729][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.234728][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.242240][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.254347][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.261609][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.450312][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.682449][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.836724][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.915379][ T5863] veth0_vlan: entered promiscuous mode [ 99.971749][ T5863] veth1_vlan: entered promiscuous mode [ 100.085175][ T5862] veth0_vlan: entered promiscuous mode [ 100.101390][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.124088][ T5863] veth0_macvtap: entered promiscuous mode [ 100.135950][ T5862] veth1_vlan: entered promiscuous mode [ 100.158028][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.187561][ T5863] veth1_macvtap: entered promiscuous mode [ 100.230162][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.253698][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.259960][ T5867] Bluetooth: hci3: command tx timeout [ 100.288272][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.297925][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.318018][ T5865] veth0_vlan: entered promiscuous mode [ 100.332498][ T5870] veth0_vlan: entered promiscuous mode [ 100.338563][ T5183] Bluetooth: hci4: command tx timeout [ 100.342837][ T5862] veth0_macvtap: entered promiscuous mode [ 100.344184][ T5867] Bluetooth: hci1: command tx timeout [ 100.355444][ T5867] Bluetooth: hci0: command tx timeout [ 100.363191][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.374782][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.397922][ T5865] veth1_vlan: entered promiscuous mode [ 100.414156][ T5862] veth1_macvtap: entered promiscuous mode [ 100.417934][ T5867] Bluetooth: hci2: command tx timeout [ 100.435525][ T5870] veth1_vlan: entered promiscuous mode [ 100.470828][ T5875] veth0_vlan: entered promiscuous mode [ 100.516422][ T5875] veth1_vlan: entered promiscuous mode [ 100.539677][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.595728][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.608353][ T5865] veth0_macvtap: entered promiscuous mode [ 100.629016][ T1161] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.638907][ T1161] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.650257][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.664474][ T5865] veth1_macvtap: entered promiscuous mode [ 100.670458][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.683118][ T1161] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.692505][ T1161] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.741362][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.749055][ T5870] veth0_macvtap: entered promiscuous mode [ 100.756723][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.763833][ T5875] veth0_macvtap: entered promiscuous mode [ 100.785938][ T5875] veth1_macvtap: entered promiscuous mode [ 100.800394][ T5870] veth1_macvtap: entered promiscuous mode [ 100.832088][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.855226][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.881126][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.881226][ T5863] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.902073][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.921374][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.955520][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.999464][ T1161] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.009177][ T1161] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.037912][ T1161] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.067353][ T1161] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.091137][ T1161] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.100862][ T1161] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.162151][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.170709][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.244248][ T5987] ieee802154 phy0 wpan0: encryption failed: -22 [ 101.262287][ T5984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.275307][ T5984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.403022][ T1161] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.413675][ T1161] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.444170][ T1161] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.453922][ T1161] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.463909][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.467706][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.486302][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.509473][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.518504][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.529633][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.588057][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.599072][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.642019][ T5989] Zero length message leads to an empty skb [ 101.644887][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.660441][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.685022][ T3526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.702990][ T3526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.798853][ T3526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.834144][ T3526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.925543][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.944111][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.004165][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.012927][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.041096][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.052129][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.162978][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.190787][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.337536][ T5867] Bluetooth: hci3: command tx timeout [ 102.393648][ T978] IPVS: starting estimator thread 0... [ 102.417204][ T5867] Bluetooth: hci0: command tx timeout [ 102.417240][ T5183] Bluetooth: hci1: command tx timeout [ 102.423231][ T5867] Bluetooth: hci4: command tx timeout [ 102.446193][ T6003] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 102.504978][ T5867] Bluetooth: hci2: command tx timeout [ 102.511244][ T6003] bridge0: port 3(netdevsim2) entered blocking state [ 102.518707][ T6004] IPVS: using max 29 ests per chain, 69600 per kthread [ 102.533571][ T6003] bridge0: port 3(netdevsim2) entered disabled state [ 102.552277][ T6003] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 102.589299][ T6003] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 102.637664][ T6003] bridge0: port 3(netdevsim2) entered blocking state [ 102.644583][ T6003] bridge0: port 3(netdevsim2) entered forwarding state [ 102.840823][ T6013] netlink: 88 bytes leftover after parsing attributes in process `syz.3.9'. [ 102.851152][ T6013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9'. [ 102.996266][ T6023] !: renamed from dummy0 (while UP) [ 103.104286][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11'. [ 103.128775][ T6024] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.191620][ T6024] syz.0.10 uses obsolete (PF_INET,SOCK_PACKET) [ 103.322873][ T6036] netlink: 76 bytes leftover after parsing attributes in process `syz.3.12'. [ 103.442226][ T6036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12'. [ 104.046184][ T6073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 104.217575][ T6076] netlink: 'syz.2.14': attribute type 12 has an invalid length. [ 104.433199][ T6081] netlink: 'syz.1.16': attribute type 39 has an invalid length. [ 104.583487][ T6079] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15'. [ 104.831985][ T6096] tipc: Started in network mode [ 104.856836][ T6096] tipc: Node identity 4, cluster identity 4711 [ 104.877578][ T6096] tipc: Node number set to 4 [ 104.924655][ T6098] netlink: 'syz.0.19': attribute type 1 has an invalid length. [ 104.940108][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.949994][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.984646][ T6093] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 105.169291][ T6098] veth3: entered promiscuous mode [ 105.258592][ T6113] netlink: 'syz.2.22': attribute type 28 has an invalid length. [ 105.287814][ T6116] netlink: 'syz.2.22': attribute type 28 has an invalid length. [ 105.350953][ T6115] netlink: 20 bytes leftover after parsing attributes in process `syz.1.23'. [ 106.139840][ T5871] udevd[5871]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 106.192204][ T5883] udevd[5883]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 106.982962][ T6165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.30'. [ 107.914833][ T6194] delete_channel: no stack [ 108.734889][ T6214] netlink: 'syz.2.41': attribute type 4 has an invalid length. [ 108.793766][ T6228] netlink: 'syz.2.41': attribute type 4 has an invalid length. [ 109.063221][ T6235] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 109.327671][ T6245] netlink: 224 bytes leftover after parsing attributes in process `syz.1.47'. [ 109.464139][ T6250] Bluetooth: MGMT ver 1.23 [ 109.551655][ T6254] netlink: 88 bytes leftover after parsing attributes in process `syz.3.49'. [ 109.584602][ T6254] netlink: 16 bytes leftover after parsing attributes in process `syz.3.49'. [ 109.972614][ T6270] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.337184][ T6274] netlink: 'syz.1.56': attribute type 1 has an invalid length. [ 110.909023][ T6290] netlink: 'syz.1.60': attribute type 10 has an invalid length. [ 110.960562][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.60'. [ 110.974320][ T6290] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.982384][ T6290] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.021637][ T6290] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.029618][ T6290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.037448][ T6290] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.044849][ T6290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.067831][ T6290] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 111.110985][ T6296] bridge_slave_1: left allmulticast mode [ 111.196760][ T6296] bridge_slave_1: left promiscuous mode [ 111.209640][ T6296] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.230034][ T6296] bridge_slave_0: left allmulticast mode [ 111.235847][ T6296] bridge_slave_0: left promiscuous mode [ 111.304522][ T6296] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.368978][ T6305] netlink: 88 bytes leftover after parsing attributes in process `syz.3.63'. [ 111.415754][ T6296] bond0: (slave bridge0): Releasing backup interface [ 111.534388][ T6309] netlink: 'syz.3.65': attribute type 1 has an invalid length. [ 111.657857][ T6310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.65'. [ 111.714729][ T6310] warning: `syz.3.65' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 111.977359][ T6322] netlink: 'syz.1.67': attribute type 13 has an invalid length. [ 112.010742][ T6322] netlink: 'syz.1.67': attribute type 17 has an invalid length. [ 112.218837][ T6322] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 112.493002][ T6335] tipc: Enabled bearer , priority 0 [ 112.809704][ T6346] netlink: 88 bytes leftover after parsing attributes in process `syz.1.75'. [ 112.820056][ T6346] netlink: 16 bytes leftover after parsing attributes in process `syz.1.75'. [ 114.351384][ T6336] tipc: Resetting bearer [ 114.365317][ T6352] netlink: 'syz.0.74': attribute type 12 has an invalid length. [ 114.398495][ T6362] syzkaller0: entered promiscuous mode [ 114.404327][ T6362] syzkaller0: entered allmulticast mode [ 114.598406][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.78'. [ 114.802476][ T6373] netlink: 'syz.3.77': attribute type 4 has an invalid length. [ 114.855319][ T6387] netlink: 'syz.0.81': attribute type 1 has an invalid length. [ 114.884679][ T6376] netlink: 'syz.3.77': attribute type 4 has an invalid length. [ 114.913128][ T6387] netlink: 'syz.0.81': attribute type 1 has an invalid length. [ 115.203002][ T6400] netlink: 88 bytes leftover after parsing attributes in process `syz.0.86'. [ 115.214400][ T6400] netlink: 16 bytes leftover after parsing attributes in process `syz.0.86'. [ 115.445895][ T6355] tipc: Disabling bearer [ 115.772204][ T6426] netlink: 24 bytes leftover after parsing attributes in process `syz.0.95'. [ 115.975658][ T6426] netlink: 'syz.0.95': attribute type 10 has an invalid length. [ 116.027481][ T6426] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 116.319105][ T6444] netlink: 88 bytes leftover after parsing attributes in process `syz.2.100'. [ 116.345849][ T6444] netlink: 16 bytes leftover after parsing attributes in process `syz.2.100'. [ 116.460850][ T6448] netlink: 'syz.2.102': attribute type 3 has an invalid length. [ 116.591481][ T6451] bond0: option mode: unable to set because the bond device has slaves [ 116.698734][ T6454] netlink: 20 bytes leftover after parsing attributes in process `syz.2.104'. [ 116.729509][ T6454] netlink: 20 bytes leftover after parsing attributes in process `syz.2.104'. [ 116.751856][ T6459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.106'. [ 116.866695][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.104'. [ 116.879198][ T6459] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.544174][ T6490] netlink: 'syz.1.117': attribute type 1 has an invalid length. [ 117.576803][ T6490] netlink: 'syz.1.117': attribute type 4 has an invalid length. [ 117.716109][ T6496] netlink: 'syz.2.119': attribute type 1 has an invalid length. [ 117.780435][ T6500] netlink: 'syz.1.120': attribute type 25 has an invalid length. [ 117.804455][ T6496] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.852078][ T6501] vlan2: entered promiscuous mode [ 117.862588][ T6501] bond1: entered promiscuous mode [ 117.869559][ T6501] vlan2: entered allmulticast mode [ 117.875341][ T6501] bond1: entered allmulticast mode [ 117.917625][ T6496] bond1: (slave gretap1): making interface the new active one [ 117.927703][ T6496] gretap1: entered promiscuous mode [ 117.933607][ T6496] gretap1: entered allmulticast mode [ 117.950087][ T6496] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 118.220141][ T6522] ieee802154 phy0 wpan0: encryption failed: -22 [ 119.875834][ T6580] __nla_validate_parse: 14 callbacks suppressed [ 119.875855][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 120.897866][ T6603] batadv_slave_1: entered promiscuous mode [ 120.908524][ T6603] batadv_slave_1: left promiscuous mode [ 121.830221][ T6624] netlink: 'syz.1.147': attribute type 23 has an invalid length. [ 121.978625][ T6625] syz.1.147: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 122.004563][ T6625] CPU: 1 UID: 0 PID: 6625 Comm: syz.1.147 Not tainted syzkaller #0 PREEMPT(full) [ 122.004591][ T6625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 122.004608][ T6625] Call Trace: [ 122.004621][ T6625] [ 122.004630][ T6625] dump_stack_lvl+0x189/0x250 [ 122.004665][ T6625] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 122.004697][ T6625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.004720][ T6625] ? __pfx__printk+0x10/0x10 [ 122.004748][ T6625] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 122.004772][ T6625] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 122.004804][ T6625] warn_alloc+0x214/0x310 [ 122.004841][ T6625] ? __pfx_warn_alloc+0x10/0x10 [ 122.004882][ T6625] ? __get_vm_area_node+0x28f/0x300 [ 122.004910][ T6625] ? xskq_create+0xbf/0x170 [ 122.004955][ T6625] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 122.005018][ T6625] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 122.005055][ T6625] ? __kasan_kmalloc+0x93/0xb0 [ 122.005085][ T6625] vmalloc_user_noprof+0xad/0xf0 [ 122.005114][ T6625] ? xskq_create+0xbf/0x170 [ 122.005145][ T6625] xskq_create+0xbf/0x170 [ 122.005180][ T6625] xsk_init_queue+0xb0/0x110 [ 122.005212][ T6625] xsk_setsockopt+0x57b/0x8d0 [ 122.005245][ T6625] ? __pfx_xsk_setsockopt+0x10/0x10 [ 122.005274][ T6625] ? __pfx_aa_sk_perm+0x10/0x10 [ 122.005307][ T6625] ? __fget_files+0x2a/0x420 [ 122.005334][ T6625] ? aa_sock_opt_perm+0xff/0x1b0 [ 122.005356][ T6625] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 122.005376][ T6625] ? __pfx_xsk_setsockopt+0x10/0x10 [ 122.005404][ T6625] do_sock_setsockopt+0x179/0x1b0 [ 122.005434][ T6625] __x64_sys_setsockopt+0x13f/0x1b0 [ 122.005464][ T6625] do_syscall_64+0xfa/0x3b0 [ 122.005482][ T6625] ? lockdep_hardirqs_on+0x9c/0x150 [ 122.005514][ T6625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.005535][ T6625] ? clear_bhb_loop+0x60/0xb0 [ 122.005560][ T6625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.005580][ T6625] RIP: 0033:0x7f4b48f8eec9 [ 122.005608][ T6625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.005624][ T6625] RSP: 002b:00007f4b45d89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 122.005645][ T6625] RAX: ffffffffffffffda RBX: 00007f4b491e6630 RCX: 00007f4b48f8eec9 [ 122.005660][ T6625] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000008 [ 122.005672][ T6625] RBP: 00007f4b49011f91 R08: 0000000000000004 R09: 0000000000000000 [ 122.005685][ T6625] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 122.005697][ T6625] R13: 00007f4b491e66c8 R14: 00007f4b491e6630 R15: 00007ffc0ae650a8 [ 122.005730][ T6625] [ 122.005744][ T6625] Mem-Info: [ 122.292138][ T6625] active_anon:8940 inactive_anon:0 isolated_anon:0 [ 122.292138][ T6625] active_file:3020 inactive_file:39883 isolated_file:0 [ 122.292138][ T6625] unevictable:768 dirty:290 writeback:0 [ 122.292138][ T6625] slab_reclaimable:10684 slab_unreclaimable:110843 [ 122.292138][ T6625] mapped:37324 shmem:4227 pagetables:1227 [ 122.292138][ T6625] sec_pagetables:0 bounce:0 [ 122.292138][ T6625] kernel_misc_reclaimable:0 [ 122.292138][ T6625] free:1312581 free_pcp:15048 free_cma:0 [ 122.350565][ T6625] Node 0 active_anon:35760kB inactive_anon:0kB active_file:12080kB inactive_file:159332kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:149296kB dirty:1156kB writeback:0kB shmem:15372kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12720kB pagetables:4752kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 122.389756][ T6625] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 122.428356][ T6625] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 122.461172][ T6625] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 122.468353][ T6625] Node 0 DMA32 free:1339128kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35712kB inactive_anon:0kB active_file:12080kB inactive_file:157512kB unevictable:1536kB writepending:1156kB present:3129332kB managed:2559912kB mlocked:0kB bounce:0kB free_pcp:43236kB local_pcp:22064kB free_cma:0kB [ 122.505562][ T6625] lowmem_reserve[]: 0 0 1 1 1 [ 122.511331][ T6625] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1820kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 122.543477][ T6625] lowmem_reserve[]: 0 0 0 0 0 [ 122.548378][ T6625] Node 1 Normal free:3895820kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18692kB local_pcp:9348kB free_cma:0kB [ 122.583352][ T6625] lowmem_reserve[]: 0 0 0 0 0 [ 122.588792][ T6625] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 122.605820][ T6625] Node 0 DMA32: 0*4kB 1*8kB (U) 95*16kB (UM) 21*32kB (UE) 5*64kB (UME) 33*128kB (UME) 22*256kB (M) 9*512kB (UM) 6*1024kB (UM) 7*2048kB (M) 318*4096kB (UM) = 1339992kB [ 122.631496][ T6625] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 122.644213][ T6625] Node 1 Normal: 185*4kB (UM) 47*8kB (UME) 45*16kB (UME) 57*32kB (UME) 23*64kB (UME) 10*128kB (UME) 3*256kB (UM) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3895820kB [ 122.663739][ T6625] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.673884][ T6625] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.686010][ T6625] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.703277][ T6625] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.719542][ T6625] 47126 total pagecache pages [ 122.728772][ T6625] 0 pages in swap cache [ 122.734642][ T6625] Free swap = 124996kB [ 122.740628][ T6625] Total swap = 124996kB [ 122.745431][ T6625] 2097051 pages RAM [ 122.750741][ T6625] 0 pages HighMem/MovableOnly [ 122.755747][ T6625] 424983 pages reserved [ 122.760284][ T6625] 0 pages cma reserved [ 123.495897][ T6618] syz_tun: entered allmulticast mode [ 123.616017][ T6627] netlink: 88 bytes leftover after parsing attributes in process `syz.4.148'. [ 123.631998][ T6627] netlink: 16 bytes leftover after parsing attributes in process `syz.4.148'. [ 123.821099][ T6635] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.184216][ T6647] netlink: 'syz.2.155': attribute type 1 has an invalid length. [ 124.199915][ T6647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.155'. [ 124.284733][ T6657] 8021q: VLANs not supported on lo [ 124.366849][ T6662] 8021q: VLANs not supported on lo [ 124.708824][ T6678] netlink: 88 bytes leftover after parsing attributes in process `syz.2.162'. [ 124.740087][ T6678] netlink: 16 bytes leftover after parsing attributes in process `syz.2.162'. [ 124.806451][ T6681] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 125.350088][ T6712] netlink: 'syz.0.170': attribute type 8 has an invalid length. [ 126.545802][ T6755] nbd: must specify an index to disconnect [ 126.601212][ T6762] netlink: 88 bytes leftover after parsing attributes in process `syz.4.185'. [ 126.656613][ T6762] netlink: 16 bytes leftover after parsing attributes in process `syz.4.185'. [ 126.987018][ T6787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.191'. [ 126.998254][ T6790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.187'. [ 127.212571][ T6799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.194'. [ 127.389423][ T6805] netlink: 68 bytes leftover after parsing attributes in process `syz.1.194'. [ 127.442189][ T6799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.194'. [ 127.787679][ T6821] netlink: 'syz.1.198': attribute type 4 has an invalid length. [ 128.096279][ T6831] netlink: 32 bytes leftover after parsing attributes in process `syz.1.199'. [ 129.252078][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.209'. [ 129.306994][ T6891] netlink: 28 bytes leftover after parsing attributes in process `syz.4.208'. [ 129.444078][ T6897] netlink: 'syz.2.210': attribute type 21 has an invalid length. [ 129.486823][ T6897] netlink: 'syz.2.210': attribute type 5 has an invalid length. [ 129.506629][ T6897] netlink: 'syz.2.210': attribute type 6 has an invalid length. [ 129.671395][ T6897] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.726450][ T6941] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.984743][ T6941] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.452974][ T6941] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.530106][ T6964] tipc: Started in network mode [ 131.535325][ T6964] tipc: Node identity , cluster identity 4711 [ 131.568570][ T6964] tipc: Failed to obtain node identity [ 131.585649][ T6964] tipc: Enabling of bearer rejected, failed to enable media [ 131.619944][ T6967] netlink: 'syz.3.232': attribute type 4 has an invalid length. [ 131.637759][ T6967] __nla_validate_parse: 5 callbacks suppressed [ 131.637781][ T6967] netlink: 244 bytes leftover after parsing attributes in process `syz.3.232'. [ 131.750454][ T6941] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.075837][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.094022][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.191153][ T6986] can: request_module (can-proto-0) failed. [ 132.232217][ T6058] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.272798][ T6054] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.515565][ T6983] syzkaller1: entered allmulticast mode [ 132.568151][ T7000] !: renamed from dummy0 [ 132.879483][ T7014] netlink: 'syz.4.241': attribute type 7 has an invalid length. [ 132.888228][ T7014] netlink: 'syz.4.241': attribute type 8 has an invalid length. [ 132.902741][ T7021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.244'. [ 132.946744][ T7021] netlink: 24 bytes leftover after parsing attributes in process `syz.0.244'. [ 132.970677][ T7024] netlink: 'syz.3.243': attribute type 1 has an invalid length. [ 133.156300][ T7031] netlink: 'syz.0.247': attribute type 1 has an invalid length. [ 133.186921][ T7033] netlink: 28 bytes leftover after parsing attributes in process `syz.0.247'. [ 133.308644][ T30] audit: type=1107 audit(1758693090.531:2): pid=7035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 133.524225][ T7048] netlink: 88 bytes leftover after parsing attributes in process `syz.3.249'. [ 133.558963][ T7048] netlink: 16 bytes leftover after parsing attributes in process `syz.3.249'. [ 133.984168][ T7066] netlink: 16 bytes leftover after parsing attributes in process `syz.1.256'. [ 134.331108][ T7064] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 134.822646][ T7105] netlink: 88 bytes leftover after parsing attributes in process `syz.4.265'. [ 134.832302][ T7105] netlink: 16 bytes leftover after parsing attributes in process `syz.4.265'. [ 135.059922][ T7120] netlink: 28 bytes leftover after parsing attributes in process `syz.3.270'. [ 135.418378][ T7128] (unnamed net_device) (uninitialized): option lacp_active: invalid value (7) [ 136.073553][ T7155] netlink: 'syz.1.280': attribute type 10 has an invalid length. [ 136.298875][ T7155] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 136.367408][ T7166] 8021q: VLANs not supported on ip6tnl0 [ 136.527933][ T7173] tipc: Started in network mode [ 136.538844][ T7173] tipc: Node identity c6a1338e0c17, cluster identity 4711 [ 136.558773][ T7173] tipc: Enabled bearer , priority 0 [ 136.582709][ T7173] syzkaller0: entered promiscuous mode [ 136.590912][ T7173] syzkaller0: entered allmulticast mode [ 136.723469][ T7173] tipc: Resetting bearer [ 136.797421][ T7172] tipc: Resetting bearer [ 136.869102][ T7172] tipc: Disabling bearer [ 137.067402][ T5883] udevd[5883]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 137.111671][ T7201] __nla_validate_parse: 10 callbacks suppressed [ 137.111692][ T7201] netlink: 88 bytes leftover after parsing attributes in process `syz.4.291'. [ 137.117988][ T5883] udevd[5883]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 137.167993][ T7201] netlink: 16 bytes leftover after parsing attributes in process `syz.4.291'. [ 137.277341][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.293'. [ 137.459991][ T7215] netlink: 132 bytes leftover after parsing attributes in process `syz.1.293'. [ 137.479250][ T7207] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.719979][ T7207] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.901842][ T7221] netlink: 48 bytes leftover after parsing attributes in process `syz.3.297'. [ 137.926398][ T7221] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 138.081384][ T7222] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 138.182235][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.189424][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.270118][ T7207] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.432359][ T7235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.299'. [ 138.461074][ T7207] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.929214][ T7248] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 138.970825][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.305'. [ 139.031832][ T7248] netlink: 'syz.0.304': attribute type 1 has an invalid length. [ 139.066821][ T7248] netlink: 'syz.0.304': attribute type 2 has an invalid length. [ 139.083142][ T7249] netlink: 'syz.0.304': attribute type 1 has an invalid length. [ 139.106744][ T7249] netlink: 'syz.0.304': attribute type 2 has an invalid length. [ 139.128384][ T7262] bond1: entered promiscuous mode [ 139.143746][ T7262] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.186304][ T7253] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.202799][ T7253] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 139.219607][ T7253] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 142.262746][ T7268] !: renamed from dummy0 (while UP) [ 142.314719][ T6064] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.371019][ T6064] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.382133][ T6064] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.432620][ T6064] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.527656][ T7292] netlink: 104 bytes leftover after parsing attributes in process `syz.0.309'. [ 142.960215][ T7320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.317'. [ 142.969346][ T7319] netlink: 36 bytes leftover after parsing attributes in process `syz.1.314'. [ 143.002386][ T7324] netlink: 20 bytes leftover after parsing attributes in process `syz.0.318'. [ 143.074515][ T7320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.317'. [ 143.105428][ T7320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.317'. [ 143.381623][ T7334] Bluetooth: MGMT ver 1.23 [ 143.403637][ T7334] geneve2: entered promiscuous mode [ 143.425081][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.321'. [ 143.545569][ T7338] netlink: 'syz.3.322': attribute type 30 has an invalid length. [ 143.576165][ T7339] netlink: 'syz.3.322': attribute type 30 has an invalid length. [ 143.578940][ T7338] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 143.599843][ T7338] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 143.666085][ T7338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.322'. [ 143.676080][ T7339] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 143.722227][ T7339] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 144.007797][ T7355] netlink: 88 bytes leftover after parsing attributes in process `syz.2.328'. [ 144.027165][ T7355] netlink: 16 bytes leftover after parsing attributes in process `syz.2.328'. [ 144.379504][ T7373] bond2: entered promiscuous mode [ 144.407868][ T7373] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.558593][ T7380] netlink: 'syz.3.335': attribute type 99 has an invalid length. [ 144.597345][ T7387] netlink: 'syz.0.336': attribute type 10 has an invalid length. [ 144.617266][ T7387] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 144.652612][ T7387] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 144.685667][ T7387] 8021q: VLANs not supported on ip6tnl0 [ 144.847105][ T7396] syz_tun: entered allmulticast mode [ 145.274412][ T7417] netlink: 'syz.0.344': attribute type 1 has an invalid length. [ 145.716785][ T7434] netlink: 'syz.2.349': attribute type 9 has an invalid length. [ 145.842358][ T7439] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.903442][ T7439] netlink: 'syz.4.350': attribute type 1 has an invalid length. [ 146.622350][ T7481] netlink: 'syz.0.361': attribute type 1 has an invalid length. [ 146.748501][ T7470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.769660][ T7470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.991819][ T1155] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.046796][ T1155] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.075695][ T1155] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.237106][ T7491] bond2: entered promiscuous mode [ 147.242419][ T7491] bond2: entered allmulticast mode [ 147.252913][ T7491] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.264466][ T1155] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.626167][ T7529] batadv1: entered promiscuous mode [ 147.631667][ T7529] batadv1: entered allmulticast mode [ 148.061374][ T7543] __nla_validate_parse: 4 callbacks suppressed [ 148.061397][ T7543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.375'. [ 148.237155][ T7550] netlink: 16 bytes leftover after parsing attributes in process `syz.0.377'. [ 148.455195][ T7556] IPVS: Error connecting to the multicast addr [ 148.590397][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.383'. [ 148.644574][ T7568] netlink: 24 bytes leftover after parsing attributes in process `syz.4.383'. [ 148.677247][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.383'. [ 148.716825][ T7568] netlink: 24 bytes leftover after parsing attributes in process `syz.4.383'. [ 148.898472][ T7575] netlink: 24 bytes leftover after parsing attributes in process `syz.2.386'. [ 149.019313][ T7579] batadv_slave_1: entered promiscuous mode [ 149.044563][ T7580] netlink: 'syz.4.387': attribute type 1 has an invalid length. [ 149.197178][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.392'. [ 149.267079][ T7596] netlink: 'syz.0.391': attribute type 10 has an invalid length. [ 149.348736][ T7600] netlink: 3 bytes leftover after parsing attributes in process `syz.2.392'. [ 149.520802][ T7605] netlink: 'syz.2.392': attribute type 1 has an invalid length. [ 149.753970][ T7596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.786233][ T7596] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 149.803942][ T7600] batadv1: entered promiscuous mode [ 149.810987][ T7600] batadv1: entered allmulticast mode [ 149.885113][ T7580] batadv_slave_1: left promiscuous mode [ 150.028494][ T7619] nbd: socks must be embedded in a SOCK_ITEM attr [ 150.111579][ T7593] bond3: (slave geneve3): making interface the new active one [ 150.126912][ T7622] netlink: 20 bytes leftover after parsing attributes in process `syz.4.396'. [ 150.140060][ T7593] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 150.347767][ T7628] netlink: 'syz.2.398': attribute type 11 has an invalid length. [ 150.355389][ T7599] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.439353][ T6058] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 150.460221][ T6058] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 150.547780][ T6058] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 150.656329][ T6058] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 150.765116][ T7599] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.852784][ T7599] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.912035][ T7645] pimreg: tun_chr_ioctl cmd 1074025677 [ 150.929148][ T7645] pimreg: linktype set to 780 [ 150.957903][ T7637] pimreg: tun_chr_ioctl cmd 35111 [ 151.110669][ T7599] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.172747][ T7643] pimreg: tun_chr_ioctl cmd 1074812118 [ 151.229710][ T7624] syz.4.396 (7624) used greatest stack depth: 17864 bytes left [ 151.337421][ T7660] netlink: 'syz.0.403': attribute type 13 has an invalid length. [ 151.351729][ T7660] netlink: 'syz.0.403': attribute type 17 has an invalid length. [ 151.362118][ T6064] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.500845][ T7660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.511583][ T7660] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.530879][ T7660] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.584291][ T6058] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.645116][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.765812][ T6064] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.018640][ T7722] netlink: 'syz.0.411': attribute type 27 has an invalid length. [ 153.027904][ T7722] netlink: 'syz.0.411': attribute type 4 has an invalid length. [ 153.104125][ T7722] __nla_validate_parse: 4 callbacks suppressed [ 153.104144][ T7722] netlink: 152 bytes leftover after parsing attributes in process `syz.0.411'. [ 154.053361][ T7754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.417'. [ 154.210500][ T7754] dummy0: entered promiscuous mode [ 154.273011][ T7754] dummy0: left promiscuous mode [ 154.451157][ T7761] netlink: 'syz.3.418': attribute type 4 has an invalid length. [ 154.776161][ T7773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.423'. [ 154.807873][ T7774] netlink: 48 bytes leftover after parsing attributes in process `syz.1.422'. [ 155.015771][ T7773] netlink: 'syz.4.423': attribute type 1 has an invalid length. [ 155.031561][ T7773] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.328542][ T7794] bridge_slave_1: left allmulticast mode [ 155.374099][ T7794] bridge_slave_1: left promiscuous mode [ 155.399244][ T7794] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.480647][ T7794] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 155.530866][ T7799] netlink: 20 bytes leftover after parsing attributes in process `syz.2.427'. [ 155.566939][ T7797] netlink: 'syz.3.425': attribute type 1 has an invalid length. [ 155.627128][ T7805] netlink: 24 bytes leftover after parsing attributes in process `syz.4.428'. [ 155.775109][ T7788] tipc: Enabled bearer , priority 0 [ 155.799531][ T7787] tipc: Disabling bearer [ 155.928285][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.431'. [ 156.887145][ T7875] netlink: 'syz.3.441': attribute type 3 has an invalid length. [ 156.970066][ T7875] syz_tun: entered allmulticast mode [ 157.008773][ T7885] netlink: 184 bytes leftover after parsing attributes in process `syz.0.444'. [ 157.101268][ T7888] netlink: 184 bytes leftover after parsing attributes in process `syz.0.444'. [ 157.143360][ T7881] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.155874][ T7875] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 157.246857][ T7881] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.303689][ T7875] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 157.324965][ T7904] netlink: 24 bytes leftover after parsing attributes in process `syz.2.445'. [ 157.761235][ T7872] syz_tun: left allmulticast mode [ 158.256908][ T7940] __nla_validate_parse: 1 callbacks suppressed [ 158.256929][ T7940] netlink: 104 bytes leftover after parsing attributes in process `syz.1.453'. [ 158.776009][ T7955] netlink: 'syz.1.457': attribute type 4 has an invalid length. [ 158.820706][ T7960] netlink: 14 bytes leftover after parsing attributes in process `syz.3.458'. [ 158.892199][ T7963] netlink: 14 bytes leftover after parsing attributes in process `syz.3.458'. [ 159.038037][ T7960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.058601][ T7960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.079946][ T7960] bond0 (unregistering): Released all slaves [ 159.103009][ T7956] tipc: Started in network mode [ 159.108431][ T7956] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 159.117071][ T7956] tipc: Enabled bearer , priority 0 [ 159.152313][ T7967] netlink: 23432 bytes leftover after parsing attributes in process `syz.1.460'. [ 159.585463][ T7982] netlink: 104 bytes leftover after parsing attributes in process `syz.3.467'. [ 159.660356][ T7984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.219701][ T8014] bond0: (slave wlan1): Releasing backup interface [ 160.237488][ T978] tipc: Node number set to 11578026 [ 160.333382][ T8026] netlink: 'syz.0.476': attribute type 4 has an invalid length. [ 160.360820][ T5233] udevd[5233]: worker [7363] terminated by signal 33 (Unknown signal 33) [ 160.392387][ T8018] netlink: 'syz.0.476': attribute type 4 has an invalid length. [ 160.392393][ T5233] udevd[5233]: worker [7363] failed while handling '/devices/virtual/block/loop3' [ 160.561684][ T8032] netlink: 104 bytes leftover after parsing attributes in process `syz.2.480'. [ 161.348859][ T8064] netlink: 20 bytes leftover after parsing attributes in process `syz.0.488'. [ 161.481103][ T8071] netlink: 'syz.1.490': attribute type 1 has an invalid length. [ 161.677057][ T8081] netlink: 28 bytes leftover after parsing attributes in process `syz.4.491'. [ 162.007983][ T8091] netlink: 104 bytes leftover after parsing attributes in process `syz.2.495'. [ 162.257906][ T8111] netlink: 76 bytes leftover after parsing attributes in process `syz.2.501'. [ 162.336709][ T8111] nbd: illegal input index 65508 [ 162.510051][ T8106] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 162.709783][ T8123] netlink: 'syz.2.503': attribute type 83 has an invalid length. [ 162.785890][ T6054] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.809752][ T6054] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.827959][ T6054] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.836972][ T6054] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.162484][ T30] audit: type=1800 audit(1758693120.391:3): pid=8139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.508" name="memory.events" dev="tmpfs" ino=563 res=0 errno=0 [ 163.534072][ T8150] __nla_validate_parse: 1 callbacks suppressed [ 163.534093][ T8150] netlink: 32 bytes leftover after parsing attributes in process `syz.2.511'. [ 163.739749][ T8159] syzkaller1: entered promiscuous mode [ 163.754799][ T8154] "syz.0.512" (8154) uses obsolete ecb(arc4) skcipher [ 163.774460][ T8159] syzkaller1: entered allmulticast mode [ 163.786848][ T8161] sctp: [Deprecated]: syz.3.514 (pid 8161) Use of int in max_burst socket option. [ 163.786848][ T8161] Use struct sctp_assoc_value instead [ 163.974998][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.518'. [ 164.067009][ T8183] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 164.083824][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.518'. [ 164.149981][ T8175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.518'. [ 164.287432][ T8196] netlink: 'syz.2.523': attribute type 8 has an invalid length. [ 164.314317][ T8190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.522'. [ 164.370651][ T8194] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.524'. [ 164.411312][ T8199] syzkaller1: entered promiscuous mode [ 164.431195][ T8199] syzkaller1: entered allmulticast mode [ 164.606316][ T8204] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 164.608334][ T8206] netlink: 52 bytes leftover after parsing attributes in process `syz.3.528'. [ 164.684876][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.528'. [ 164.921113][ T8213] netlink: 104 bytes leftover after parsing attributes in process `syz.1.529'. [ 165.145470][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.532'. [ 165.480150][ T8243] pimreg: entered allmulticast mode [ 165.671570][ T8250] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 165.681281][ T8250] bridge2: entered allmulticast mode [ 165.826309][ T8257] batadv1: entered promiscuous mode [ 165.866639][ T8257] batadv1: entered allmulticast mode [ 166.624525][ T8290] netlink: 'syz.4.550': attribute type 12 has an invalid length. [ 168.283068][ T8355] vlan0: entered allmulticast mode [ 168.765366][ T8373] __nla_validate_parse: 13 callbacks suppressed [ 168.765429][ T8373] netlink: 68 bytes leftover after parsing attributes in process `syz.4.575'. [ 168.843781][ T8377] netlink: 104 bytes leftover after parsing attributes in process `syz.3.577'. [ 168.875370][ T8371] 8021q: adding VLAN 0 to HW filter on device bond4 [ 168.914220][ T8378] macvlan2: entered promiscuous mode [ 168.922660][ T8378] macvlan2: entered allmulticast mode [ 168.933538][ T8378] bond4: entered promiscuous mode [ 168.941174][ T8378] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 168.953791][ T8378] bond4: left promiscuous mode [ 168.996431][ T8381] netlink: 88 bytes leftover after parsing attributes in process `syz.4.578'. [ 169.007477][ T8381] netlink: 32 bytes leftover after parsing attributes in process `syz.4.578'. [ 169.877536][ T8401] netlink: 'syz.0.584': attribute type 1 has an invalid length. [ 170.076823][ T8407] IPVS: Scheduler module ip_vs_sip not found [ 170.171100][ T8406] netlink: 36 bytes leftover after parsing attributes in process `syz.0.586'. [ 170.274030][ T8418] netlink: 88 bytes leftover after parsing attributes in process `syz.1.589'. [ 170.279504][ T8416] netlink: 128 bytes leftover after parsing attributes in process `syz.2.588'. [ 170.307067][ T8418] netlink: 16 bytes leftover after parsing attributes in process `syz.1.589'. [ 170.829543][ T8442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.594'. [ 170.913702][ T8442] ip6gretap1: entered allmulticast mode [ 171.357336][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.603'. [ 171.626993][ T8486] ieee802154 phy0 wpan0: encryption failed: -22 [ 171.646144][ T8486] netlink: 'syz.3.609': attribute type 1 has an invalid length. [ 172.262745][ T8490] bond0: (slave netdevsim0): Releasing backup interface [ 172.904786][ T8542] tipc: Cannot configure node identity twice [ 173.164386][ T8560] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 173.183095][ T8557] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 173.217274][ T8557] dvmrp1: linktype set to 773 [ 173.479970][ T8571] Bluetooth: MGMT ver 1.23 [ 173.637398][ T8537] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 173.648245][ T8583] netlink: 'syz.1.634': attribute type 13 has an invalid length. [ 173.656454][ T8582] netlink: 'syz.1.634': attribute type 13 has an invalid length. [ 173.665469][ T8582] netlink: 'syz.1.634': attribute type 17 has an invalid length. [ 173.674160][ T8583] netlink: 'syz.1.634': attribute type 17 has an invalid length. [ 173.833431][ T8582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.848494][ T8582] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.863664][ T8582] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 173.922065][ T8583] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.415084][ T8605] __nla_validate_parse: 5 callbacks suppressed [ 174.415106][ T8605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.640'. [ 174.559106][ T8605] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 174.676954][ T8616] sctp: [Deprecated]: syz.2.642 (pid 8616) Use of int in max_burst socket option deprecated. [ 174.676954][ T8616] Use struct sctp_assoc_value instead [ 174.742762][ T8623] netlink: 88 bytes leftover after parsing attributes in process `syz.3.644'. [ 174.759477][ T8619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.643'. [ 174.821815][ T5867] Bluetooth: hci0: command 0x080f tx timeout [ 174.832007][ T8619] netlink: 104 bytes leftover after parsing attributes in process `syz.4.643'. [ 174.939563][ T8626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.642'. [ 175.314680][ T8647] erspan0: entered promiscuous mode [ 175.344855][ T8647] vlan2: entered promiscuous mode [ 175.732942][ T8675] ieee802154 phy0 wpan0: encryption failed: -90 [ 175.832285][ T8677] netlink: 88 bytes leftover after parsing attributes in process `syz.0.655'. [ 175.969764][ T8679] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 176.380941][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'. [ 176.504596][ T8705] trusted_key: syz.2.666 sent an empty control message without MSG_MORE. [ 176.875431][ T8722] tipc: Resetting bearer [ 176.890107][ T8722] bond0: (slave batadv0): Releasing backup interface [ 176.934744][ T8722] bridge_slave_0: left allmulticast mode [ 176.942080][ T8722] bridge_slave_0: left promiscuous mode [ 176.949646][ T8722] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.973040][ T8722] bridge_slave_1: left allmulticast mode [ 176.979753][ T8722] bridge_slave_1: left promiscuous mode [ 176.987018][ T8722] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.009765][ T8722] bond0: (slave bond_slave_0): Releasing backup interface [ 177.031203][ T8722] bond0: (slave bond_slave_1): Releasing backup interface [ 177.065844][ T8722] team0: Failed to send options change via netlink (err -105) [ 177.076400][ T8722] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 177.087351][ T8722] team0: Port device team_slave_0 removed [ 177.088795][ T8731] netlink: 88 bytes leftover after parsing attributes in process `syz.4.670'. [ 177.104806][ T8731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.670'. [ 177.105214][ T8722] team0: Failed to send options change via netlink (err -105) [ 177.123242][ T8722] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 177.134486][ T8722] team0: Port device team_slave_1 removed [ 177.142027][ T8722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.155035][ T8722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.164911][ T8722] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 177.194139][ T8724] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 177.212408][ T8729] team0: Failed to send options change via netlink (err -105) [ 177.303738][ T8729] team0: Mode changed to "activebackup" [ 177.335327][ T8735] ieee802154 phy0 wpan0: encryption failed: -90 [ 177.401472][ T8744] "syz.3.672" (8744) uses obsolete ecb(arc4) skcipher [ 177.420632][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.672'. [ 177.645999][ T8753] netlink: 'syz.4.677': attribute type 5 has an invalid length. [ 177.931938][ T8766] vlan2: entered promiscuous mode [ 177.948865][ T8766] vlan2: entered allmulticast mode [ 177.954691][ T8766] hsr_slave_1: entered allmulticast mode [ 178.186888][ T8771] netlink: 'syz.0.682': attribute type 1 has an invalid length. [ 178.350099][ T8781] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 178.688592][ T8794] ip6gretap0: entered promiscuous mode [ 178.695208][ T8794] macvlan0: entered allmulticast mode [ 178.725538][ T8794] ip6gretap0: entered allmulticast mode [ 178.735498][ T8794] ip6gretap0: left allmulticast mode [ 178.742168][ T8794] ip6gretap0: left promiscuous mode [ 178.991955][ T8804] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 179.353635][ T8823] netlink: 'syz.4.693': attribute type 13 has an invalid length. [ 179.380514][ T8823] netlink: 'syz.4.693': attribute type 17 has an invalid length. [ 179.486652][ T8774] infiniband syz!: set down [ 179.498252][ T8774] infiniband syz!: added team_slave_0 [ 179.571706][ T8835] __nla_validate_parse: 7 callbacks suppressed [ 179.571725][ T8835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.693'. [ 179.588535][ T8823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.723998][ T8823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.763199][ T8774] RDS/IB: syz!: added [ 179.790109][ T8823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.874716][ T8823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.372685][ T8862] netlink: 48 bytes leftover after parsing attributes in process `syz.3.701'. [ 181.383381][ T8884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.706'. [ 182.617759][ T8911] netlink: 'syz.3.712': attribute type 4 has an invalid length. [ 182.626718][ T8911] netlink: 152 bytes leftover after parsing attributes in process `syz.3.712'. [ 182.793232][ T8915] batadv_slave_1: entered promiscuous mode [ 182.988542][ T8915] batadv_slave_1: left promiscuous mode [ 183.227501][ T8923] netlink: 'syz.3.715': attribute type 10 has an invalid length. [ 183.257726][ T8923] netlink: 'syz.3.715': attribute type 10 has an invalid length. [ 184.018515][ T8936] netlink: 88 bytes leftover after parsing attributes in process `syz.2.720'. [ 185.318788][ T8953] netlink: 16 bytes leftover after parsing attributes in process `syz.2.725'. [ 186.156082][ T8964] syzkaller1: entered promiscuous mode [ 186.278845][ T8964] syzkaller1: entered allmulticast mode [ 186.891730][ T8991] netlink: 20 bytes leftover after parsing attributes in process `syz.0.736'. [ 187.019239][ T8999] netlink: 104 bytes leftover after parsing attributes in process `syz.1.739'. [ 187.303878][ T9007] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.336322][ T9007] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 187.813438][ T9027] netlink: 'syz.0.745': attribute type 11 has an invalid length. [ 187.828393][ T9029] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma? [ 187.925219][ T9029] IPVS: length: 139 != 8 [ 188.116073][ T9038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.749'. [ 188.213725][ T9038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.749'. [ 188.308686][ T9038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.749'. [ 188.318191][ T9038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.749'. [ 188.326657][ T9043] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 188.390082][ T6054] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.466120][ T9049] netlink: 'syz.2.748': attribute type 10 has an invalid length. [ 188.510419][ T9050] bridge_slave_0: left allmulticast mode [ 188.530167][ T9050] bridge_slave_0: left promiscuous mode [ 188.553585][ T9050] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.592117][ T9050] bridge_slave_1: left allmulticast mode [ 188.616440][ T9050] bridge_slave_1: left promiscuous mode [ 188.637516][ T9050] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.658674][ T9064] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:20003 [ 188.699047][ T9050] bond0: (slave bond_slave_0): Releasing backup interface [ 188.719072][ T9050] bond0: (slave bond_slave_1): Releasing backup interface [ 188.745744][ T9050] team0: Port device team_slave_0 removed [ 188.769778][ T9050] team0: Port device team_slave_1 removed [ 188.783239][ T9050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.791503][ T9050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.801331][ T9050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.809415][ T9050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.819517][ T9050] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 188.856220][ T9049] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 188.895431][ T9049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.912305][ T9049] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 188.921671][ T6054] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.930257][ T6054] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.988544][ T6054] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.157356][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.755'. [ 189.174180][ T9072] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.204164][ T9075] netlink: 'syz.3.757': attribute type 1 has an invalid length. [ 189.225073][ T9077] netlink: 24 bytes leftover after parsing attributes in process `syz.2.756'. [ 189.236177][ T9075] netlink: 'syz.3.757': attribute type 1 has an invalid length. [ 189.248989][ T9072] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 189.357864][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.756'. [ 189.369449][ T9083] netlink: 'syz.4.758': attribute type 7 has an invalid length. [ 189.623622][ T9097] syz_tun: left allmulticast mode [ 189.868742][ T9117] netlink: 'syz.1.764': attribute type 1 has an invalid length. [ 190.011295][ T9113] bridge0: port 3(netdevsim2) entered disabled state [ 190.018738][ T9113] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.053918][ T9126] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 190.172747][ T9113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.190394][ T9113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.386050][ T9118] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 190.495882][ T9131] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 190.556777][ T1155] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.610965][ T1155] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.641939][ T1155] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.671893][ T1155] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.943938][ T9162] __nla_validate_parse: 5 callbacks suppressed [ 190.943960][ T9162] netlink: 24 bytes leftover after parsing attributes in process `syz.0.776'. [ 191.312751][ T9171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.776'. [ 191.370825][ T9171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.776'. [ 191.443095][ T9175] syzkaller1: entered promiscuous mode [ 191.453280][ T10] IPVS: starting estimator thread 0... [ 191.459728][ T9175] syzkaller1: entered allmulticast mode [ 191.461608][ T9182] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 191.556822][ T9185] IPVS: using max 24 ests per chain, 57600 per kthread [ 193.004377][ T9227] netlink: 40 bytes leftover after parsing attributes in process `syz.0.787'. [ 193.072006][ T9138] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 193.098499][ T9138] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 193.143990][ T9138] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 193.452365][ T9232] fido_id[9232]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 195.664553][ T9283] syz_tun: entered allmulticast mode [ 195.691568][ T9282] netlink: 'syz.4.797': attribute type 2 has an invalid length. [ 195.699918][ T9282] netlink: 132 bytes leftover after parsing attributes in process `syz.4.797'. [ 195.711276][ T9282] IPVS: length: 21 != 8 [ 195.753311][ T9283] dvmrp8: entered allmulticast mode [ 195.810362][ T9280] syz_tun: left allmulticast mode [ 195.815733][ T9280] dvmrp8: left allmulticast mode [ 196.162032][ T9278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.795'. [ 197.176658][ T9302] ieee802154 phy0 wpan0: encryption failed: -126 [ 197.257956][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.803'. [ 197.455683][ T9306] netlink: 44 bytes leftover after parsing attributes in process `syz.4.802'. [ 198.189528][ T9325] veth5: entered promiscuous mode [ 198.731868][ T9347] netlink: 'syz.2.809': attribute type 13 has an invalid length. [ 198.742050][ T9350] netlink: 'syz.2.809': attribute type 13 has an invalid length. [ 198.764117][ T9347] netlink: 'syz.2.809': attribute type 17 has an invalid length. [ 198.812965][ T9350] netlink: 'syz.2.809': attribute type 17 has an invalid length. [ 199.069729][ T9347] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.143333][ T9350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.168703][ T9356] tipc: Started in network mode [ 199.185354][ T9356] tipc: Node identity deed359734bf, cluster identity 4711 [ 199.193161][ T9356] tipc: Enabled bearer , priority 0 [ 199.201346][ T9359] syzkaller0: entered promiscuous mode [ 199.236789][ T9359] syzkaller0: entered allmulticast mode [ 199.320056][ T9359] tipc: Resetting bearer [ 199.358840][ T9351] tipc: Resetting bearer [ 199.401023][ T9351] tipc: Disabling bearer [ 199.506731][ T9373] netlink: 'syz.2.815': attribute type 1 has an invalid length. [ 199.604304][ T9373] 8021q: adding VLAN 0 to HW filter on device bond5 [ 199.624691][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.634316][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.663730][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.815'. [ 199.735065][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.815'. [ 199.761216][ T9377] vlan0: entered promiscuous mode [ 199.766623][ T9377] bond5: entered promiscuous mode [ 199.772184][ T9377] vlan0: entered allmulticast mode [ 199.778809][ T9377] bond5: entered allmulticast mode [ 199.812037][ T9377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.815'. [ 199.949667][ T9383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.164486][ T9377] bond5 (unregistering): Released all slaves [ 200.593347][ T9397] netlink: 'syz.1.821': attribute type 30 has an invalid length. [ 200.751015][ T9397] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 200.766785][ T9397] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 201.561768][ T9408] netlink: 'syz.0.823': attribute type 1 has an invalid length. [ 201.570241][ T9408] netlink: 224 bytes leftover after parsing attributes in process `syz.0.823'. [ 201.896646][ T9410] netlink: 16 bytes leftover after parsing attributes in process `syz.1.824'. [ 201.913760][ T9410] netlink: 224 bytes leftover after parsing attributes in process `syz.1.824'. [ 202.262561][ T9417] lo speed is unknown, defaulting to 1000 [ 202.284856][ T9419] netlink: 'syz.0.827': attribute type 1 has an invalid length. [ 202.300734][ T9419] netlink: 224 bytes leftover after parsing attributes in process `syz.0.827'. [ 202.375804][ T9422] netlink: 224 bytes leftover after parsing attributes in process `syz.0.827'. [ 202.400602][ T9417] lo speed is unknown, defaulting to 1000 [ 202.462853][ T9417] lo speed is unknown, defaulting to 1000 [ 202.502680][ T9417] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 202.566206][ T9417] lo speed is unknown, defaulting to 1000 [ 202.576004][ T9417] lo speed is unknown, defaulting to 1000 [ 202.597572][ T9417] lo speed is unknown, defaulting to 1000 [ 202.607841][ T9417] lo speed is unknown, defaulting to 1000 [ 202.616995][ T9417] lo speed is unknown, defaulting to 1000 [ 202.644320][ T9417] lo speed is unknown, defaulting to 1000 [ 202.866041][ T9425] netlink: 24 bytes leftover after parsing attributes in process `syz.4.828'. [ 203.260296][ T30] audit: type=1804 audit(1758693160.491:4): pid=9442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.832" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=759 res=1 errno=0 [ 203.295878][ T9440] block nbd0: server does not support multiple connections per device. [ 203.314717][ T30] audit: type=1800 audit(1758693160.491:5): pid=9442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.832" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=759 res=0 errno=0 [ 203.339275][ T9440] block nbd0: shutting down sockets [ 203.612239][ T9463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.857051][ T9482] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.846'. [ 203.888293][ T9485] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.934030][ T9485] netlink: 'syz.1.844': attribute type 8 has an invalid length. [ 204.010936][ T9481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.845'. [ 204.113309][ T9489] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 204.127120][ T12] bond0: (slave wlan1): interface is now down [ 204.152178][ T6056] bond0: (slave wlan1): interface is now down [ 204.163134][ T9493] tipc: Enabled bearer , priority 0 [ 204.177036][ T12] bond0: (slave wlan1): interface is now down [ 204.196756][ T12] bond0: (slave wlan1): interface is now down [ 204.209226][ T9497] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.359115][ T12] bond0: (slave wlan1): interface is now down [ 204.373525][ T9503] netlink: 28 bytes leftover after parsing attributes in process `syz.4.849'. [ 204.383238][ T12] bond0: (slave wlan1): interface is now down [ 204.422120][ T12] bond0: (slave wlan1): interface is now down [ 204.466585][ T6054] bond0: (slave wlan1): interface is now down [ 204.491903][ T6054] bond0: (slave wlan1): interface is now down [ 204.529404][ T6054] bond0: (slave wlan1): interface is now down [ 204.559141][ T9493] syzkaller0: entered promiscuous mode [ 204.567664][ T12] bond0: (slave wlan1): interface is now down [ 204.574714][ T9493] syzkaller0: entered allmulticast mode [ 204.591252][ T12] bond0: (slave wlan1): interface is now down [ 204.615181][ T9499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.849'. [ 204.624883][ T9502] tipc: Resetting bearer [ 204.656772][ T1155] bond0: (slave wlan1): interface is now down [ 204.665831][ T1155] bond0: now running without any active interface! [ 204.725282][ T9491] tipc: Resetting bearer [ 204.803968][ T9515] netlink: 'syz.0.850': attribute type 1 has an invalid length. [ 204.814313][ T9491] tipc: Disabling bearer [ 204.841290][ T9497] netlink: 'syz.1.848': attribute type 42 has an invalid length. [ 204.867914][ T9518] netlink: 'syz.2.852': attribute type 28 has an invalid length. [ 205.095311][ T9521] geneve4: entered promiscuous mode [ 205.110963][ T6056] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 20000 - 0 [ 205.119548][ T6056] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 20000 - 0 [ 205.141659][ T6056] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 205.162039][ T6056] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 205.228911][ T9529] syzkaller0: entered promiscuous mode [ 205.235040][ T9529] syzkaller0: entered allmulticast mode [ 205.258122][ T9529] netlink: 'syz.3.856': attribute type 13 has an invalid length. [ 205.266854][ T9529] netlink: 'syz.3.856': attribute type 27 has an invalid length. [ 205.681205][ T9542] netlink: 'syz.4.859': attribute type 4 has an invalid length. [ 205.889534][ T9550] netlink: 'syz.2.861': attribute type 2 has an invalid length. [ 206.362119][ T9581] ip6tnl0: Caught tx_queue_len zero misconfig [ 206.862227][ T9602] dvmrp1: entered allmulticast mode [ 206.896783][ T9602] dvmrp1: left allmulticast mode [ 207.105869][ T9609] __nla_validate_parse: 5 callbacks suppressed [ 207.105888][ T9609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.876'. [ 207.293767][ T9616] netlink: 88 bytes leftover after parsing attributes in process `syz.1.881'. [ 207.314014][ T9567] lo speed is unknown, defaulting to 1000 [ 207.327372][ T9616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.881'. [ 207.339688][ T9609] bridge_slave_0: left promiscuous mode [ 207.344540][ T9616] netlink: 16 bytes leftover after parsing attributes in process `syz.1.881'. [ 207.354638][ T9609] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.588580][ T9625] netlink: 24 bytes leftover after parsing attributes in process `syz.1.882'. [ 207.622436][ T9618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.879'. [ 207.669120][ T9618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.879'. [ 207.717672][ T9618] netlink: 'syz.2.879': attribute type 7 has an invalid length. [ 207.786782][ T9618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.879'. [ 207.795760][ T6054] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.804615][ T6054] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.830709][ T9618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.879'. [ 207.859406][ T9618] netlink: 'syz.2.879': attribute type 7 has an invalid length. [ 207.895745][ T6054] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.923882][ T6054] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.874983][ T9662] tunl0: Caught tx_queue_len zero misconfig [ 209.078272][ T9665] netlink: 96 bytes leftover after parsing attributes in process `syz.1.891'. [ 209.558015][ T9680] syzkaller0: entered promiscuous mode [ 209.582982][ T9680] syzkaller0: entered allmulticast mode [ 209.703324][ T9665] lo speed is unknown, defaulting to 1000 [ 210.932476][ T9672] lo speed is unknown, defaulting to 1000 [ 211.304017][ T9735] netlink: 'syz.0.909': attribute type 1 has an invalid length. [ 211.673074][ T5867] Bluetooth: hci4: link tx timeout [ 211.679481][ T5867] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.690470][ T5867] Bluetooth: hci4: link tx timeout [ 211.695762][ T5867] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 212.575325][ T9730] lo speed is unknown, defaulting to 1000 [ 213.191056][ T9777] __nla_validate_parse: 4 callbacks suppressed [ 213.191075][ T9777] netlink: 12 bytes leftover after parsing attributes in process `syz.4.922'. [ 213.242311][ T9777] netlink: 'syz.4.922': attribute type 58 has an invalid length. [ 213.250558][ T9777] netlink: 20 bytes leftover after parsing attributes in process `syz.4.922'. [ 213.319858][ T9781] netlink: 788 bytes leftover after parsing attributes in process `syz.3.924'. [ 213.440902][ T9759] lo speed is unknown, defaulting to 1000 [ 213.498353][ T9739] lo speed is unknown, defaulting to 1000 [ 213.777456][ T5183] Bluetooth: hci4: command 0x0406 tx timeout [ 214.875254][ T9812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.929'. [ 215.156672][ T9828] netlink: 248 bytes leftover after parsing attributes in process `syz.0.933'. [ 215.377469][ T9828] sctp: [Deprecated]: syz.0.933 (pid 9828) Use of struct sctp_assoc_value in delayed_ack socket option. [ 215.377469][ T9828] Use struct sctp_sack_info instead [ 215.877149][ T9855] tap0: tun_chr_ioctl cmd 35111 [ 215.902175][ T9855] tap0: tun_chr_ioctl cmd 1074025677 [ 215.927901][ T9855] tap0: linktype set to 776 [ 216.793866][ T9885] netlink: 88 bytes leftover after parsing attributes in process `syz.0.949'. [ 216.813770][ T9885] netlink: 16 bytes leftover after parsing attributes in process `syz.0.949'. [ 216.825296][ T9814] team0: Device gtp0 is of different type [ 216.927461][ T9888] netlink: 16 bytes leftover after parsing attributes in process `syz.2.950'. [ 216.946909][ T9888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.950'. [ 216.995421][ T9890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.950'. [ 217.057469][ T5881] Bluetooth: hci2: command 0x0406 tx timeout [ 217.061227][ T5874] Bluetooth: hci3: command 0x0406 tx timeout [ 217.063697][ T5881] Bluetooth: hci1: command 0x0406 tx timeout [ 217.177177][ T9894] wg1 speed is unknown, defaulting to 1000 [ 217.183253][ T9894] wg1 speed is unknown, defaulting to 1000 [ 217.239243][ T9894] wg1 speed is unknown, defaulting to 1000 [ 217.303938][ T9894] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 217.342325][ T9901] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 217.355272][ T9901] batman_adv: batadv0: Adding interface: gretap1 [ 217.362330][ T9901] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.393577][ T9902] netlink: 'syz.0.955': attribute type 64 has an invalid length. [ 217.416581][ T9901] batman_adv: batadv0: Interface activated: gretap1 [ 217.487437][ T9894] wg1 speed is unknown, defaulting to 1000 [ 217.499131][ T9894] wg1 speed is unknown, defaulting to 1000 [ 217.532247][ T9894] wg1 speed is unknown, defaulting to 1000 [ 217.558496][ T9894] wg1 speed is unknown, defaulting to 1000 [ 217.586827][ T9894] wg1 speed is unknown, defaulting to 1000 [ 217.653127][ T9894] wg1 speed is unknown, defaulting to 1000 [ 217.938446][ T9895] lo speed is unknown, defaulting to 1000 [ 218.041532][ T9924] netlink: 'syz.1.961': attribute type 13 has an invalid length. [ 218.049952][ T9924] netlink: 'syz.1.961': attribute type 17 has an invalid length. [ 218.095212][ T9924] gretap0: refused to change device tx_queue_len [ 218.126719][ T9924] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 218.214739][ T9138] lo speed is unknown, defaulting to 1000 [ 218.231491][ T9138] syz2: Port: 1 Link DOWN [ 218.423208][ T9935] vxcan1: entered allmulticast mode [ 218.732548][ T9945] __nla_validate_parse: 4 callbacks suppressed [ 218.732571][ T9945] netlink: 32 bytes leftover after parsing attributes in process `syz.3.968'. [ 218.766869][ T9943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.967'. [ 218.786211][ T9943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.967'. [ 218.795722][ T9946] netlink: 'syz.3.968': attribute type 10 has an invalid length. [ 218.801311][ T9943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.967'. [ 218.822347][ T9946] netlink: 'syz.3.968': attribute type 10 has an invalid length. [ 218.845943][ T9943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.967'. [ 218.861662][ T9945] netlink: 20 bytes leftover after parsing attributes in process `syz.3.968'. [ 219.120494][ T9963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.975'. [ 219.150983][ T9963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.975'. [ 219.215410][ T9970] netlink: 20 bytes leftover after parsing attributes in process `syz.1.977'. [ 219.430426][ T9975] netlink: 4928 bytes leftover after parsing attributes in process `syz.1.979'. [ 219.592889][ T9990] tipc: Enabled bearer , priority 0 [ 219.600557][ T9990] syzkaller0: entered promiscuous mode [ 219.606063][ T9990] syzkaller0: entered allmulticast mode [ 219.645836][ T9990] tipc: Resetting bearer [ 219.735219][ T9990] tipc: Resetting bearer [ 219.769953][ T9990] tipc: Disabling bearer [ 219.888576][T10006] team0: entered promiscuous mode [ 219.894313][T10006] team_slave_0: entered promiscuous mode [ 219.923638][T10006] team_slave_1: entered promiscuous mode [ 219.933754][T10006] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 219.957805][T10006] team0: left promiscuous mode [ 219.962734][T10006] team_slave_0: left promiscuous mode [ 219.979277][T10006] team_slave_1: left promiscuous mode [ 220.273950][T10025] netlink: 'syz.3.996': attribute type 10 has an invalid length. [ 220.458109][T10034] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 220.514324][T10039] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 221.273127][T10038] lo speed is unknown, defaulting to 1000 [ 221.283902][T10038] wg1 speed is unknown, defaulting to 1000 [ 221.838780][ T6056] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.856749][ T6056] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.865305][ T6056] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.900528][ T6056] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.976579][T10098] netlink: 'syz.3.1018': attribute type 10 has an invalid length. [ 222.198347][T10105] geneve2: entered promiscuous mode [ 222.216671][T10105] geneve2: entered allmulticast mode [ 222.240369][ T1155] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.263887][T10115] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 222.331343][ T1155] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.348015][ T1155] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.360005][ T1155] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.528319][T10129] macsec1: entered promiscuous mode [ 222.534293][T10129] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 222.545378][T10129] macsec1: entered allmulticast mode [ 222.551298][T10129] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 222.613713][T10134] erspan0: entered promiscuous mode [ 222.762240][T10142] netlink: 'syz.0.1032': attribute type 10 has an invalid length. [ 222.788816][T10142] team0: Port device 0! added [ 222.797541][T10142] netlink: 'syz.0.1032': attribute type 10 has an invalid length. [ 222.816782][T10142] team0: Port device 0! removed [ 222.828993][T10142] bond0: (slave 0!): Enslaving as an active interface with an up link [ 222.838552][ T6054] tipc: Resetting bearer [ 223.491113][T10176] netlink: 'syz.4.1039': attribute type 1 has an invalid length. [ 223.882722][ T1217] wg1 speed is unknown, defaulting to 1000 [ 224.110091][T10208] __nla_validate_parse: 19 callbacks suppressed [ 224.110114][T10208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1045'. [ 224.539940][T10228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1053'. [ 224.549184][T10229] tipc: Enabled bearer , priority 0 [ 224.557697][T10229] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 224.569742][T10229] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 225.022612][T10249] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1060'. [ 225.385311][T10266] netlink: 'syz.2.1066': attribute type 11 has an invalid length. [ 225.394025][T10266] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1066'. [ 225.429037][T10267] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1067'. [ 225.524874][ T30] audit: type=1804 audit(1758693182.751:6): pid=10271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1069" name="cgroup.controllers" dev="tmpfs" ino=1231 res=1 errno=0 [ 225.530660][T10273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1070'. [ 225.552660][T10271] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1069'. [ 225.566948][ T30] audit: type=1800 audit(1758693182.751:7): pid=10271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1069" name="cgroup.controllers" dev="tmpfs" ino=1231 res=0 errno=0 [ 225.572707][T10273] syzkaller1: entered promiscuous mode [ 225.595556][T10273] syzkaller1: entered allmulticast mode [ 225.746027][T10279] netlink: 'syz.1.1071': attribute type 1 has an invalid length. [ 225.798726][T10279] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 225.811622][T10279] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 225.845859][T10281] macvlan2: entered promiscuous mode [ 225.851627][T10281] macvlan2: entered allmulticast mode [ 226.033365][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1074'. [ 226.044737][T10287] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1074'. [ 226.061678][T10287] vlan0: entered promiscuous mode [ 226.174719][T10291] syzkaller0: entered promiscuous mode [ 226.186890][T10291] syzkaller0: entered allmulticast mode [ 226.359726][T10296] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1078'. [ 226.932322][T10298] lo speed is unknown, defaulting to 1000 [ 226.941850][T10298] wg1 speed is unknown, defaulting to 1000 [ 227.364675][T10300] lo speed is unknown, defaulting to 1000 [ 227.412890][T10300] wg1 speed is unknown, defaulting to 1000 [ 228.052753][T10349] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.097896][T10349] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.191766][T10349] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.209171][T10349] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.283101][T10349] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.308055][T10349] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.419554][T10349] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.430856][T10349] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.524488][T10369] [ 228.526924][T10369] ====================================================== [ 228.534181][T10369] WARNING: possible circular locking dependency detected [ 228.541680][T10369] syzkaller #0 Not tainted [ 228.546215][T10369] ------------------------------------------------------ [ 228.553340][T10369] syz.1.1097/10369 is trying to acquire lock: [ 228.559781][T10369] ffffffff8f68fab8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 228.569317][T10369] [ 228.569317][T10369] but task is already holding lock: [ 228.578768][T10369] ffffffff8f68fa58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 228.589177][T10369] [ 228.589177][T10369] which lock already depends on the new lock. [ 228.589177][T10369] [ 228.599686][T10369] [ 228.599686][T10369] the existing dependency chain (in reverse order) is: [ 228.608903][T10369] [ 228.608903][T10369] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 228.617071][T10369] lock_acquire+0x120/0x360 [ 228.622319][T10369] _raw_spin_lock_bh+0x36/0x50 [ 228.628095][T10369] nr_rt_ioctl+0x390/0xd50 [ 228.633446][T10369] sock_do_ioctl+0xdc/0x300 [ 228.638697][T10369] sock_ioctl+0x576/0x790 [ 228.643589][T10369] __se_sys_ioctl+0xf9/0x170 [ 228.648837][T10369] do_syscall_64+0xfa/0x3b0 [ 228.654093][T10369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.660547][T10369] [ 228.660547][T10369] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 228.669128][T10369] lock_acquire+0x120/0x360 [ 228.674200][T10369] _raw_spin_lock_bh+0x36/0x50 [ 228.680124][T10369] nr_rt_ioctl+0x193/0xd50 [ 228.685255][T10369] sock_do_ioctl+0xdc/0x300 [ 228.690498][T10369] sock_ioctl+0x576/0x790 [ 228.696354][T10369] __se_sys_ioctl+0xf9/0x170 [ 228.701525][T10369] do_syscall_64+0xfa/0x3b0 [ 228.706692][T10369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.713344][T10369] [ 228.713344][T10369] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 228.721300][T10369] validate_chain+0xb9b/0x2140 [ 228.726917][T10369] __lock_acquire+0xab9/0xd20 [ 228.732314][T10369] lock_acquire+0x120/0x360 [ 228.737662][T10369] _raw_spin_lock_bh+0x36/0x50 [ 228.743069][T10369] nr_rt_device_down+0xa9/0x720 [ 228.748543][T10369] nr_device_event+0x137/0x150 [ 228.753862][T10369] notifier_call_chain+0x1b3/0x3e0 [ 228.759628][T10369] netif_close_many+0x29c/0x410 [ 228.765016][T10369] netif_close+0x158/0x210 [ 228.769961][T10369] dev_close+0x10a/0x220 [ 228.774735][T10369] bpq_device_event+0x377/0x6a0 [ 228.780142][T10369] notifier_call_chain+0x1b3/0x3e0 [ 228.785815][T10369] __dev_notify_flags+0x18d/0x2e0 [ 228.791686][T10369] netif_change_flags+0xe8/0x1a0 [ 228.797189][T10369] dev_change_flags+0x130/0x260 [ 228.802646][T10369] dev_ioctl+0x7b4/0x1150 [ 228.807523][T10369] sock_do_ioctl+0x22c/0x300 [ 228.812673][T10369] sock_ioctl+0x576/0x790 [ 228.817721][T10369] __se_sys_ioctl+0xf9/0x170 [ 228.822883][T10369] do_syscall_64+0xfa/0x3b0 [ 228.827931][T10369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.834362][T10369] [ 228.834362][T10369] other info that might help us debug this: [ 228.834362][T10369] [ 228.844602][T10369] Chain exists of: [ 228.844602][T10369] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 228.844602][T10369] [ 228.858542][T10369] Possible unsafe locking scenario: [ 228.858542][T10369] [ 228.866008][T10369] CPU0 CPU1 [ 228.871469][T10369] ---- ---- [ 228.876851][T10369] lock(nr_neigh_list_lock); [ 228.881562][T10369] lock(&nr_node->node_lock); [ 228.888871][T10369] lock(nr_neigh_list_lock); [ 228.896103][T10369] lock(nr_node_list_lock); [ 228.900806][T10369] [ 228.900806][T10369] *** DEADLOCK *** [ 228.900806][T10369] [ 228.908996][T10369] 2 locks held by syz.1.1097/10369: [ 228.914205][T10369] #0: ffffffff8f53a248 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 228.923035][T10369] #1: ffffffff8f68fa58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 228.933103][T10369] [ 228.933103][T10369] stack backtrace: [ 228.939011][T10369] CPU: 0 UID: 0 PID: 10369 Comm: syz.1.1097 Not tainted syzkaller #0 PREEMPT(full) [ 228.939035][T10369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 228.939046][T10369] Call Trace: [ 228.939056][T10369] [ 228.939064][T10369] dump_stack_lvl+0x189/0x250 [ 228.939091][T10369] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.939110][T10369] ? __pfx__printk+0x10/0x10 [ 228.939132][T10369] ? print_lock_name+0xde/0x100 [ 228.939155][T10369] print_circular_bug+0x2ee/0x310 [ 228.939173][T10369] check_noncircular+0x134/0x160 [ 228.939192][T10369] validate_chain+0xb9b/0x2140 [ 228.939210][T10369] ? rt6_disable_ip+0x6b3/0x720 [ 228.939231][T10369] ? __lock_acquire+0xab9/0xd20 [ 228.939254][T10369] __lock_acquire+0xab9/0xd20 [ 228.939278][T10369] ? nr_rt_device_down+0xa9/0x720 [ 228.939294][T10369] lock_acquire+0x120/0x360 [ 228.939314][T10369] ? nr_rt_device_down+0xa9/0x720 [ 228.939334][T10369] ? nr_rt_device_down+0xa9/0x720 [ 228.939348][T10369] _raw_spin_lock_bh+0x36/0x50 [ 228.939371][T10369] ? nr_rt_device_down+0xa9/0x720 [ 228.939386][T10369] nr_rt_device_down+0xa9/0x720 [ 228.939401][T10369] ? do_raw_spin_unlock+0x122/0x240 [ 228.939421][T10369] nr_device_event+0x137/0x150 [ 228.939446][T10369] notifier_call_chain+0x1b3/0x3e0 [ 228.939465][T10369] netif_close_many+0x29c/0x410 [ 228.939484][T10369] ? __pfx_netif_close_many+0x10/0x10 [ 228.939501][T10369] ? bond_netdev_event+0x227/0xe80 [ 228.939523][T10369] netif_close+0x158/0x210 [ 228.939537][T10369] ? __pfx_netif_close+0x10/0x10 [ 228.939552][T10369] ? tun_device_event+0x77/0x1020 [ 228.939569][T10369] ? __pfx___neigh_ifdown+0x10/0x10 [ 228.939593][T10369] ? macsec_notify+0x104/0x660 [ 228.939615][T10369] dev_close+0x10a/0x220 [ 228.939635][T10369] bpq_device_event+0x377/0x6a0 [ 228.939661][T10369] notifier_call_chain+0x1b3/0x3e0 [ 228.939679][T10369] __dev_notify_flags+0x18d/0x2e0 [ 228.939699][T10369] ? __pfx___dev_notify_flags+0x10/0x10 [ 228.939717][T10369] ? __dev_change_flags+0x4cc/0x6d0 [ 228.939738][T10369] ? __pfx___dev_change_flags+0x10/0x10 [ 228.939762][T10369] ? full_name_hash+0x92/0xe0 [ 228.939781][T10369] netif_change_flags+0xe8/0x1a0 [ 228.939802][T10369] dev_change_flags+0x130/0x260 [ 228.939822][T10369] dev_ioctl+0x7b4/0x1150 [ 228.939840][T10369] sock_do_ioctl+0x22c/0x300 [ 228.939866][T10369] ? __pfx_sock_do_ioctl+0x10/0x10 [ 228.939889][T10369] ? __lock_acquire+0xab9/0xd20 [ 228.939916][T10369] sock_ioctl+0x576/0x790 [ 228.939941][T10369] ? __pfx_sock_ioctl+0x10/0x10 [ 228.939964][T10369] ? __fget_files+0x2a/0x420 [ 228.939986][T10369] ? __fget_files+0x3a0/0x420 [ 228.940008][T10369] ? __fget_files+0x2a/0x420 [ 228.940031][T10369] ? bpf_lsm_file_ioctl+0x9/0x20 [ 228.940050][T10369] ? __pfx_sock_ioctl+0x10/0x10 [ 228.940071][T10369] __se_sys_ioctl+0xf9/0x170 [ 228.940090][T10369] do_syscall_64+0xfa/0x3b0 [ 228.940105][T10369] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.940129][T10369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.940145][T10369] ? clear_bhb_loop+0x60/0xb0 [ 228.940163][T10369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.940179][T10369] RIP: 0033:0x7f4b48f8eec9 [ 228.940195][T10369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.940209][T10369] RSP: 002b:00007f4b49db6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.940228][T10369] RAX: ffffffffffffffda RBX: 00007f4b491e5fa0 RCX: 00007f4b48f8eec9 [ 228.940240][T10369] RDX: 0000200000000700 RSI: 0000000000008914 RDI: 000000000000000f [ 228.940251][T10369] RBP: 00007f4b49011f91 R08: 0000000000000000 R09: 0000000000000000 [ 228.940261][T10369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.940271][T10369] R13: 00007f4b491e6038 R14: 00007f4b491e5fa0 R15: 00007ffc0ae650a8 [ 228.940291][T10369] [ 229.351160][ T1161] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.370699][ T1161] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.402384][ T1161] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.412880][ T1161] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.421520][ T1161] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.430668][ T1161] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.439070][ T1161] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.447599][ T1161] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0