last executing test programs: 6.198589929s ago: executing program 2 (id=3753): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x400}, [@call={0x85, 0x0, 0x0, 0x36}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000007000000324900007f00000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x50) r2 = epoll_create1(0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r2, 0x1d0}, {r4, 0x80}, {r3}], 0x3, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) 6.084358131s ago: executing program 3 (id=3756): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x28, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x66aa}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000000000000000}]}}]}, 0x58}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r5, 0x5431000) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x17, 0xc, &(0x7f0000000640)=ANY=[@ANYRESDEC=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="c40a000000010000611148000000000006000000feffffff9500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000240)={0x2, 0x8001, 0x56a7, 0x1, 0x3}, 0x14) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000500)='signal_deliver\x00', r7, 0x0, 0xf0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b40800000000000071110800000000008510000002000000b7000000000000009500c2000000000095008735ac4e4c2c2403cc100012000000005c397d1657625862512fa2b207"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r9 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xd, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRESDEC=r2, @ANYBLOB="00000000cdb80c0ac46af1f3452f5a00000000b7080000000000007b8af8ff00000000bfa200000000060007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r10, 0x0, 0x80000000000}, 0x18) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000003c0)={'pim6reg0\x00', 0x2000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123c00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r8, 0x0, 0xfffffffffffffffe}, 0x18) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(streebog512-generic)\x00'}, 0x58) 5.811111635s ago: executing program 3 (id=3759): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64) r2 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) (async) write$tun(r1, &(0x7f0000000040)={@val, @void, @eth={@multicast, @multicast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x1, 0x5, 0x3c, 0x66, 0x0, 0xff, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @dev={0xac, 0x14, 0x14, 0x43}}, @payload_named={{{{{0x28, 0x0, 0x0, 0x1, 0x0, 0xa, 0x2, 0x2, 0x1c30, 0x0, 0x3, 0x0, 0x3, 0x2, 0x3, 0x1, 0x1, 0x4e24, 0x4e23}, 0x1, 0x3}, 0x4}}}}}}}}, 0x4e) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x18) (async, rerun: 32) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8f5, 0x100000000000000) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x12, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000000}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x40000000}}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xadb9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x94) 5.609112107s ago: executing program 3 (id=3760): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x4}, @in6=@private1, 0x0, 0x0, 0x4, 0x0, 0xc}, {0x0, 0x4, 0x913d, 0x0, 0x0, 0xf42, 0x8}, {0x0, 0x0, 0xfffffffffffffffc, 0xfffefffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x4}, {{@in6=@private2, 0x0, 0x2b}, 0x0, @in=@multicast1, 0x403502, 0x3, 0x2, 0x4, 0x5, 0x0, 0x1}}, 0xe8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) writev(r6, &(0x7f0000000800)=[{&(0x7f00000003c0)="2e9ec961735304d14b3b5c17fde59728d9295903ffc3dd5325b8cf6900f9193f242bf611f969c2916c0af22ef512f372331229f7d0b1cad41bc0c110b88618e2a1f7d1bc59caf6579bf4c2367c7b88c5dc3001e487fb9bad3a982500eac4030e38797fe875fade14a69de89b2ffc6aadbb22", 0x72}, {&(0x7f0000000440)="4fb6f5", 0x3}, {&(0x7f0000000480)="51a1ef4b130d08b8da469814a05a7bb12cb91e1af4f20d61e3cf975fa8e25e3bd285db59615bd76c5f20a35ce33278d008dd563d5e876bf7e415d4043599c1393fbc5cb7f21e49eb501ba74dcd5e58dfdf5f5442ea4cfea61f93689453e295eb2117c6380981327a96cb795f88b487b4299915fd2c04da368be43cebd7493c35a67925fc79d45a07cba82f126c15abfa1610541fe5c4c509e0a98350cb211b3190eda38be7841ae95e09f1a7f79c7b5be3bfddcc692cb4e4b745d73f1cbea435bafd4e3f5286b48da50db0ee1e1f063aba54d95738c301101eea8510e078", 0xde}, {&(0x7f0000000580)="079456a227", 0x5}, {&(0x7f0000001740)="6112c054203666c23d17285725274d37234bf7b6079013acdea91959e90eb63b0f2f6c268a3871cd1bfd52b488d2b5ffd8f5204da5565f88ab65fb1fd77023385e4da2e1f7dbe4537e0ef5489e4596543dd2e6868614f7f6a3d8f3e9c1b850e6c0ea612455ad74efbd932ae6fb0ca09de40d3a7b702b68bc707680affc02b85d82e37c182550a71476722f7e8cf018730dd95d4db588b7c5cc10eca230e130d4b27ba2ec5db288aa879f0ae5d0d8c7e059385548e7bf94df6fa2ddfd9d671105614d052973bdfd3ad675d0ab339b954a927480447b7596192490daa6f4e087d8f4aa5c563ed5b1260973fab2216000eaa1bc24023c67a331711d4b85d68d638472ee565c1cd4d574ea9ebd2fcc81007d5f3e65e60cf0a066bc56574d821b3846a0e5dc63c1f9bf09bed11b4d6c120687edda0487e64c48295434dff3ac5a8e0fcace4cbb42678cdb04342ad84fd955aa33fafbdc7a1cdcce18811c2dc11d2d0b4f1ce68c236eaf26f30d85af0c532a533576df17cd33ff16de08a637eeb4e6e635f9ad94f7215721da8b6a73bd5ee687f4e28b5e7760232df0d0d48a56f94f381769bd90c58590951c0a6f740e28c646a9b7b03cae97f245073f92292fbc29e388a706b3a0c69ff334b28c2afb4486a46df5a0e8be5fde14010e7f51dead3261c4f2fd34cc309f2f2f22bdde802b6b6c15df81a692737b2b4b06edcf0d282ba91ab3283aad367db4859102104be06d0c08c3ba77774d64c3177686414ab6df0a6f0736026167d35f4389c0830166d27e1de0019b08f7b4bc57fe24a201fab71337dbf8238d20069d02ac6ca2f5bd787894dbafc47ab96c93705ad652d5cc76b6bdf44e1b12e0df19e540d841550e54505646d3ee1d371a8ed00d676ebec38e3a82a19c6a4f3e011a1430bd2f09a4b4bfdc564653ea57aa0386d6aa41e3e09644d597c382395bb4a13be51872d0ec4e8d0afdf043a4bd7c346d0ff3312d5e0f87310adb05e92386afd831258e36cf590ef0c22376df09820f69b562892cb3a10987ea0ec63966745587308d0b42f6203f3b223fb3bd83f56c401cc4eec0b1001ee7b7ccdf591b1e03cb56ecbea8d50985e26ffc0ffa4116ed56638ea0775ce5ce590ded2d3575883b39e721b9dcdf01717ef04cb278f781f7ef1e2fb564893fc7287a363f70ba1ebe3052b0450202e459cf5cdd348a315178bb4e3143305841eb67eb37cb99502d57312d8aa3d3d64ad5f423da5a0bb2469b703c8d5b5d8e55f53533aa94e8dd40d860ec5ad381c44a7b14862883b79868564ef4246a8998b37e8e291189bb7733ae37b1aef91a388bc93ed0743d9f162acc235813da8ffdf79da9f18a13b254e47041f2bf008458b244fe1122a939e93a64b77f6914431db68f079e561a98372a5d9ad4281fe7133b96eb134886275c9464255bbbe305922f38a9f8b305384d181176af91d31687f7aad697f47b764b6026435e801b7ad1b8912ce8239cd699354a9fe38d89e5fe0053c4f9f6ac8c148a8949b83800670e41c6637c2518e21727b119acfdb0e0d0f554a6aa20c9b3ece669c51d22be6e2eacfe0cf8968b6b07e6d709be5e7c239d6449ae2163af19fd1345cdb86fd45ab2e0b9dd2b253cc2de128a2530c08fc22f0c73d537ceb38c9d9998d6848e5cce38d881570caab6a3bd356a02bb9719270110485a3dee8b42270aa3090d0484c691ef48bd8deb871d7e2f100dfc9a68e9e44d4de47cdfa84bcce3b47da8617dc3139235e69b7c71e83b044e9575ae73b8f7dc93e54ef24172423ab13445150c007e57112eaf9682e1dbfed0493ecd8bcf531f3a35993c57c2b58185216ae1be32260e29b4b29dde9efcfa395869ecb6ebd4dfa9544f5f03a559a99fff026dba3d8707883ed3bf2f13006911bad7c47bf6884e7ce8a32fe29cd88467cdde9abe61e0efdd0c738979e4d2f0b2c0b1dbca9477b48e6e080790cd81f53d3a975ed5d8096bbd579b4f9824a1384c2cef714cb45b245faa2add9e3343d601a854e5241901f635ed0c763f6eaa5bcaea87ca915fb292a8de354034e8f536f1b934ffc77269ed7834910987dc707f3cd193b1d75a1066e46c97e7f63a64199f4c9b57f7f63ed983808f11c8858ba543a0d87ce2420d8fa6bb0f1e330950915342b9df370b6c766abcf7d7adb8a5f17163e33e30458b4796e1a2ed35980ba821285c185d89c6f1c92bc0adeeaca725c378e16a6516e46a0c3ad75bd6c7d861b2b8c17d2fd3a263e748ab6af83ad0b74473282255cd781ef39c8659e78ca7658f6d75bac90d26c0f7759ba86830b4eafb175eb2b145598ac57400ee00c544f9331041cd569b4c09e17691a5de2a02cc9521c72143d4d95d30b74d48dbacae2b820465f0d95bf52187dbcf42bfb65bf5f0aea605c6f50e559ddf0ed52a2b541420e70c4639c00bb19ea074c0ac3ccecc3faf18b02364d6b39b9997402384efb54df440680b8a3aca440f91d4a9d54cee3ed00d2a1a2703b1afba4f439d651f247cc82f354a1b1a8fe6b365c6c1f13fbb940ed9d307391bb5d0a8aa831ad5c249fa7f676704c134d40423cd290bb3c71cb51ec3c50141d614d5460b68f8bb8f5ba36cd95e2d78a81951a7b6484412cb27f62767343627b03548353aecdc3a7582eb89883522d3258a4ca332083ac28a77aece3b018a1d2c60f690b1f36b1eb13a0b65f91de4d753823f7711de8dfdbf7e519cfcf7b92a7bf55e31d6954b38d4a1cc978e825fcbdc629b03777c5bdc16c0e559c9e0e761a9720a2b0ab1df973ac3c2cf496466a6e4ec61116988b9fd1b06d5d2c3d7dab1749a1fa7a7058d2d310b07d70ded892dd0940a37e82f65c5bd3be23d668d1d67af9a756fec3007edab4d9793b631441b1e389fbc318eb148c1e90e0493c194fdadc36e1bf49aaeb7273174c80ea145702693e962b2315f8a54ff1a8e313fc1152818409c0bc4636fcd67685175babb401b5a956557d3ed8461d2fc7ce9bca13b084fd561c6ea5294a31e69b0079e3fa29d1bf23f0de7a5822ce7e5cec8b97aae1bbc6bee9067a0466baca00be6988a500ef68bb63ea0a0124474b3edd05e33c94260bc16d3e8a5665f7236121a2ccb5c8d623d099bced01cef1814f4b9e44fd8e9cffe215c5e080341a62d5a1493ee0d21a0e7a6d473e1938135db2181faaac031a96061006a4dfef64f17169f197226bb5511b14d86308ff9c62ccff951c2638a004c587fc4dc13f04040482d3fe81388367544b1ace663e39cfc3d987c275371bc17ae915bba065ce1d11b4acc81a0ae4c63e2dba0d67d8467e08c7932051c24c22d80a3d6b64e40a2f35bf73dc9fce06d28d270b599af5d0c38767c90e2bff1cb14e4a8f5380ca9dd9b2bb133d7bccbee023b2787db9250382d43840ed85b586ec49cc227bc67cb26664d36cd7baf8220e039189b1b686321ca63d1e8da6065e43c971e375c2f6ee7e18c4bfed7dce29408735f17fa718d56999d4650537c91d69778f67809459edaa19d2adbb875623572312a9721937bf074685b9eb01b6d173199993f9193ce8d9bd43e66d2fe42712172408d670d7c47ec140e5844ee1c1986e74699be0431c55ebb51581c9ec62604c3d5dba0f2d3d59a0a2914a09185926280f691432026a56b45a2ff230b3fd3cd81374b58d60d31b394f2257df63acef30be869cd08888b3fee7a035fd6b02ff915af089b748a22df59e814a4789655dc140278a345fdf49feea8c0ac00f7918745735a3ef9f6b7e22eec4531847f390af6d5d63f02c3c5003ce5ca7fffef41d177ce21b21167e5b5988cf7e2a3c8c3bcebfd7b0be8d0cb72401e8d28f5bafa4a946a0cbcbd026a64ca48ed39df2cb8f5ce5db2ac9e90f706a13c86f3f1978415a55f9bfa352c84a96a57a58ad331cd240398cbde8c401bfc5a01e5efbf11f9ce70393952d508817a6b32722f155fff88f45be5f3c67fb3590640d9b4d1505a2222b516b5ad1c46ba189fa130066ec5486122dedee2980130ae9d1721c2326d3936f3d824c55601c7ec404cbf55b59f34cdeb854a4e25244853ae654c384b4b7f419119f9c7cfb45a38403d67ead7fc8779da8c1c8cb4cb6b0c99d0272caf0c9a8ec0e8dc86e1f932386bcf131dbc0f3f19a02e609adbc7d32cfa6ee6dfd1e21ce596ac53c36aa4527a6eeae6a4c11cc1744d8570f3b35a41acd556f4c311f0952da1962b68f40841eed1004c1ac0cfdff38aa319659b9d9615fe20a905ce2ef31c563844fcd6bd3b8bb015e14b605b21d8cc1b03c55c93d1df37d2540cf311063c9eb33341ad0b7fcd43db4654a44e90eca79569c0bde90ec6690a4f12a96772e70c5657811c1951a057945546a7e8d2199abe5c5388bee4e5f45816933be1f672f9437159d20c698c4d4e328fda6306d275846cf352f2d50652134b01c6d712745b5392c796123856acf2536952d233c6da501d2a8d2e70ac915ddb2d10dbc05c557a7eef624ed594203a62adbf128c911f0409022c4c3fd4378eda52f08a907665f9046dcc8f5cc652786420aec4ed054f64b5db4ea992cd7dcdc197d3bb32717ce9f9fa1692b429c079cf8b19ed0598a644dc285d94f6e9ae7d0043ab4814534dc89d0f1d7dcb835b2fa5293ed825c9f3953b08c2d7fa20553014d18d31d3effa7f2c6aab122b5dd71a761ccfb0fd04b7a99c030d1f4c9d5a6bd1014feee2fbf863536b2b21b457b3a3ea7bca9e36d099b8f4e77823bb8e274a86edcbbd8d32b495f488d832283b8a7e2b48605fe48f3dd8d0b275ce676b723c0d4388a8d3400cc85a7474cd5d08798228aa014fcb6d5a4f19127af018793061c4a4c374f5e9dc8ffe3a714846104ec26349f3583de23a335c17f192fc72ab42fc941af8487f6a44c96004f3398021f6e390f225587cfcaf482a9215e30a2b9eb0b06c2d067f1e482c8490a9e1d30ae5b798935b350cfd9875adc5819e4dfae8a67f98b47cc68082cabd228fcc62b9c29abd52eb61b581ae6379d6f0aac6f1410f760c5bbebc754659a5ac1452680b3bd4d5ed4fa520746a72e0c4ecbe00b3ccdd870d65de9e9be312900c4f0e1d9da68592d12fe16d9f12c9ee08c136b2775da8b8aabdbb8c09deb5cba5b4ae6ba30996e649ec965a4eb75a511ca911600ede8a1f5a679b834371197dbdf49caa47b891b19219957bd67689175e8393c713c894d1117437d8c4b1d0362ccc916f0d86a86c8c968e90a838e386f9552d3a6865559e2aeacb3626ac8d2f245b1f49c0ddd1d7f820cbbe04d6371c52dafa8c936cf8aa67049ab3cf8e77de3cca6b8ffd7f070383a0f3e0cf3c73b9b200567330e513c87354b78a877c88d7fb9a15bf885c95669124459bca8a85f70a626303f093148b47e362c6af851c300932b6fc3e5662bd3bf9600d202a21a84e3fe1d036ccd3a79020c0220a6e64897279157f7a8358f77512fd85e3770b6f240339bc9a9eea31dae5822f353c21e66bd44592e11c87e790cf86ae2244e677a39fd4049bb7da24181cdc90da7b2105634706e97a84fb5acf576c532ddf75279d0991f61618bae1a074148edf29e1b43813da476afd445e704844d190b999495ae75ab8ba937373291ac842259cc1bbb82291b7b894adb6fe0e79090ef65f02fe8bc69186ce215980cc61d8865e4bace9b0e2730ebb17f9fa3272f403e9a1f2cf55439bf0c123cb777889d06fcd77e401f811a435942f0621b036f2bde4947a6af80dc10184f1af5fd9a4b0df93ea89ea43e285fad42306b09f5f5e76f7b0ae45ec3de29aef07cfeb4179", 0x1000}, {&(0x7f0000000600)="afb2513012ebb5ed646703c52dbebb801b2a0a11c710672002f0acf1d87e08ae352efef065f27e345c3d1c3b9b03dd99b6f8d7159a37d4f19293434e8bfcf47be9938bf507df40708cc873be", 0x4c}, {&(0x7f0000000900)="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", 0xfa}], 0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r6, 0x0, 0xe, 0x0, &(0x7f00000006c0)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0xffffffffffffffbc, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x24, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r8}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}]}, 0x24}], 0x1}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@rand_addr=0x64010102, @in=@multicast1, 0x4e23, 0x6, 0x4e24, 0xfff7, 0xa, 0x20, 0x20, 0x32, r5, r8}, {0x6, 0x8, 0xa6, 0xf500, 0xfffffffffffffffb, 0x7, 0x8, 0x9}, {0x3, 0x7ff, 0x9, 0xffffffffffffffff}, 0x9, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x33}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x34ff, 0x1, 0x2, 0x0, 0xe, 0x6059, 0x3}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) accept4$netrom(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @bcast}, [@bcast, @null, @remote, @bcast, @netrom, @netrom]}, &(0x7f0000000000)=0x48, 0x0) 5.475932161s ago: executing program 3 (id=3762): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) shutdown(r0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'geneve1\x00', &(0x7f0000000300)=@ethtool_coalesce={0xf, 0x7, 0x2, 0x5, 0x0, 0xbf3c, 0x4, 0xe, 0xffff, 0x4, 0x1, 0x2, 0x0, 0x3, 0x9, 0x80000001, 0xffffffff, 0x6deef028, 0xc, 0xb, 0x1, 0x8, 0x7}}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x28d}], 0x1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000d00)=r6, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 5.259003278s ago: executing program 2 (id=3765): bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x1, @empty, 0x65}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1\x00'}) unshare(0x2a020400) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats}) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001500000125bd7000dbdf250900000000"], 0x14}, 0x1, 0x0, 0x0, 0x24040804}, 0x20008800) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$sock(r5, &(0x7f0000003640), 0x0, 0x20040059) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="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", @ANYRES16=r7], 0x21c}}, 0x0) socket(0x1d, 0x2, 0x6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000040)={'sit0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='fsi_master_gpio_break\x00'}, 0x18) 4.465093778s ago: executing program 1 (id=3772): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001880)={'wlan0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b40), r0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000000040)={0x20, r1, 0x1, 0x870bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffeff, 0x5}}}}}, 0x20}}, 0x40000) 4.28119543s ago: executing program 1 (id=3773): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x48, &(0x7f0000000380)={0x4}, 0x8) (async, rerun: 32) write$tun(r2, &(0x7f00000004c0)={@val={0xa, 0x6}, @void, @eth={@multicast, @random="48cb8ccf4b24", @void, {@can={0xc, {{0x1, 0x1, 0x1}, 0x0, 0x2, 0x0, 0x0, "1c4479a1e4cbb48f"}}}}}, 0x22) (async, rerun: 32) pipe(&(0x7f0000000040)={0xffffffffffffffff}) (async) r6 = socket(0x15, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x118, 0x2d, 0xb, 0x1070bd2d, 0x0, {0x8}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x10004}, @typed={0xfa, 0x40, 0x0, 0x0, @binary="85d4d68745e56cef17a30c5161cbdade7d12757ac5c27478b83e2a083d2b9175c2b87610386f2cf09332fe40a8cf34cad92000ad9be7adc8aa825da1a3aed318aff68d8d43cc21ce3175bbfb1430a2d6abcd4b2f8a22d8df5e87059a4aacd8787e8626cbfe34f2b608228fd7a1a5364127f1ba493cb557a44f1e46ef89cba0a7da2e73115746e744f7db06c0cc4b9d9c413cf52030775c09136de45db897091ec4c3dfdd23a7b378678d7ecd2176a6cfbd50169e486e91fd1d3b6919464fc2a846f5864bdebfcfbd622b6ee58a81e63056e84e1b89e4aee6c0ddfc3da01418e5d6816c3bf18d376e1ad80908a38ff2662ffe661e7375"}]}, 0x118}}, 0x24048000) (async) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) getsockopt(r6, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) (async) getsockopt$TIPC_NODE_RECVQ_DEPTH(r5, 0x10f, 0x83, &(0x7f0000000240), &(0x7f0000000280)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x2c, 0x10, 0x1, 0x2, 0x4, {}, [@IFLA_MASTER={0x8, 0xa, r9}, @IFLA_PORT_SELF={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x28000000}, 0x40880d5) (async, rerun: 32) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (rerun: 32) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a10000edffffff0001584803", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0xea, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa08000600feffff7f"], 0x30}}, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r12, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) (async, rerun: 32) socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) 4.252186117s ago: executing program 3 (id=3774): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x19, 0x4, 0x1, 0x1, 0x64, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @ssrr={0x89, 0x13, 0x3e, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x42}, @loopback]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000180)=0x5, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="3cb39e2018f33b14c1261bb3d566b696c8419ba5d147abb1d4d08356b1041daa347acde826ce172ffc3952899bc890a0debb8f72afb838", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25010000000500300000000000050030000000000008003400543f0000080034000200000008003100d8000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) 4.08307893s ago: executing program 4 (id=3775): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) poll(&(0x7f0000000000)=[{r0, 0xa0}, {r1, 0x400}], 0x2, 0x6) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={@local, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1={0xff, 0x5}, 0x200003, 0x5, 0x0, 0x100, 0xfc8, 0x20c200a3, r2}) 4.006158561s ago: executing program 1 (id=3776): ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000040)=r0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x1c) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000100)={r2, 0x80000000, 0xa5ff, 0x3, 0x3, 0x8001, 0x432, 0x1, {0x0, @in6={{0xa, 0x4e20, 0x9546, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}}, 0x8, 0x6, 0x400, 0x2, 0x10001}}, &(0x7f00000001c0)=0xb0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4004000) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) write$tun(r3, &(0x7f0000000340)={@void, @val={0x2, 0x3, 0x2, 0xb, 0x40, 0x1}, @mpls={[{0xd}], @ipv4=@icmp={{0x28, 0x4, 0x3, 0x1, 0xe5, 0x68, 0x0, 0x1, 0x1, 0x0, @multicast1, @local, {[@timestamp={0x44, 0x8, 0x20, 0x0, 0x0, [0x100]}, @timestamp_addr={0x44, 0x54, 0xb3, 0x1, 0x2, [{@multicast1, 0x5}, {@empty, 0x54}, {@rand_addr=0x64010100, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast2, 0x6}, {@multicast1, 0x564c91d8}, {@multicast2, 0x80000000}, {@loopback, 0x29f}, {@loopback, 0x1}, {@loopback, 0xfffffb17}]}, @ssrr={0x89, 0x2b, 0xb8, [@local, @dev={0xac, 0x14, 0x14, 0x2c}, @private=0xa010100, @rand_addr=0x64010100, @rand_addr=0x64010100, @loopback, @private=0xa010102, @local, @dev={0xac, 0x14, 0x14, 0x44}, @empty]}, @ra={0x94, 0x4, 0x1}]}}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x8c, 0x0, {0xe, 0x4, 0x1, 0x4, 0x1, 0x66, 0x0, 0x7, 0x8, 0x2894, @broadcast, @multicast1, {[@generic={0x94, 0xc, "c6fdabf8608674cb2cd1"}, @timestamp_addr={0x44, 0xc, 0x82, 0x1, 0xa, [{@empty, 0x4}]}, @rr={0x7, 0xb, 0x7a, [@remote, @multicast2]}]}}, "8f8c039780"}}}}, 0xf3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r4, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xed}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80001) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f00000005c0)) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r4, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0xd, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb138374d, 0x0, 0x0, 0x0, 0x3}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}, @map_fd={0x18, 0x3, 0x1, 0x0, r3}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x5}]}, &(0x7f0000000780)='syzkaller\x00', 0x800, 0xb3, &(0x7f00000007c0)=""/179, 0x41100, 0x51, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000880)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)=[{0x4, 0x5, 0x8}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ac0)={@map=r3, 0xb, 0x0, 0x2, &(0x7f00000009c0)=[0x0], 0x1, 0x0, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b80)={0x0, r3, 0x0, 0x4, &(0x7f0000000b40)='!!#\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b00)={@fallback=r3, r6, 0x4, 0x24, 0x0, @void, @void, @void, @value=r9, r8}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7f}, [@call={0x85, 0x0, 0x0, 0xa9}, @call={0x85, 0x0, 0x0, 0x7e}, @alu={0x4, 0x0, 0xd, 0x2, 0x0, 0x8, 0xfffffffffffffffc}, @ldst={0x0, 0x3, 0x1, 0x6, 0x0, 0x8, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000c40)='GPL\x00', 0xf, 0x8b, &(0x7f0000000c80)=""/139, 0x41100, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d40)={0x2, 0xe, 0x800, 0x1ff}, 0x10, 0x2676e, r3, 0x1, 0x0, &(0x7f0000000d80)=[{0x2, 0x2, 0x1, 0x5}], 0x10, 0x7f}, 0x94) ioctl$SIOCAX25OPTRT(r3, 0x89e7, &(0x7f0000000e80)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, 0x2, 0x44}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000ec0)={0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000f00), &(0x7f0000000f40)=0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f0000002840)={0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000000f80)=""/244, 0xf4}, {&(0x7f0000001080)=""/208, 0xd0}, {&(0x7f0000001180)=""/203, 0xcb}, {&(0x7f0000001280)=""/132, 0x84}, {&(0x7f0000001340)=""/170, 0xaa}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x7, &(0x7f00000026c0)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x7}, @zcopy_cookie={0x18, 0x114, 0xc, 0x10000}, @mask_cswp={0x58, 0x114, 0x9, {{0x6, 0x7}, &(0x7f0000002540)=0x6, &(0x7f0000002580), 0xfff, 0x5, 0x9, 0x6e8ac0f3, 0x0, 0x3}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xa9}, @zcopy_cookie={0x18, 0x114, 0xc, 0xfffffff7}, @mask_fadd={0x58, 0x114, 0x8, {{0x3, 0x5}, &(0x7f00000025c0), &(0x7f0000002600)=0x7, 0x0, 0x401, 0x5, 0x7, 0x62, 0x80}}, @fadd={0x58, 0x114, 0x6, {{0xffffffc0, 0x7}, &(0x7f0000002640)=0x8, &(0x7f0000002680)=0x3a, 0x4, 0x9, 0x1e2d, 0x0, 0x0, 0x6}}], 0x168, 0x24008800}, 0x20000080) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) recvmmsg(r10, &(0x7f0000002ac0)=[{{&(0x7f0000002880)=@can, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002900)=""/219, 0xdb}], 0x1, &(0x7f0000002a40)=""/72, 0x48}, 0x80}], 0x1, 0x20, &(0x7f0000002b00)={0x77359400}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000002b40), 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r7, 0x80811501, &(0x7f0000002b80)={0x80}) close(r3) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000002c40)={0x8}, 0x8) connect$inet6(r1, &(0x7f0000002c80)={0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c) ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f0000002cc0)=0x7ff) 3.978503306s ago: executing program 4 (id=3777): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002b000b0000000000000000000800001008000300040001000c0001800600000088480000"], 0x28}}, 0x8000) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) (async) r3 = socket(0x10, 0x803, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) (async, rerun: 64) r5 = accept4(r4, 0x0, 0x0, 0x0) (rerun: 64) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) (async) getsockopt$sock_buf(r5, 0x1, 0x1a, 0x0, &(0x7f0000000340)) (async) recvmmsg$unix(r5, &(0x7f0000012b80)=[{{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000640)=""/20, 0x14}, {&(0x7f000000d280)=""/4096, 0x1000}, {&(0x7f000000e280)=""/4096, 0x1000}, {&(0x7f0000000680)=""/141, 0x8d}], 0x4, &(0x7f0000000780)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000800), 0x6e, &(0x7f000000f480)=[{&(0x7f000000f280)=""/178, 0xb2}, {&(0x7f000000f340)=""/162, 0xa2}, {&(0x7f000000f400)=""/72, 0x48}], 0x3, &(0x7f000000f4c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f000000f540), 0x6e, &(0x7f0000012a00)=[{&(0x7f000000f5c0)=""/186, 0xba}, {&(0x7f000000f680)=""/238, 0xee}, {&(0x7f000000f780)=""/4096, 0x1000}, {&(0x7f0000010780)=""/121, 0x79}, {&(0x7f0000010800)}, {&(0x7f0000010840)=""/4096, 0x1000}, {&(0x7f0000011840)=""/194, 0xc2}, {&(0x7f0000011940)=""/4096, 0x1000}, {&(0x7f0000012940)=""/176, 0xb0}], 0x9, &(0x7f0000012ac0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}], 0x3, 0x60, &(0x7f0000012c40)={0x0, 0x989680}) (async) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r12 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r12, 0x8004f50c, &(0x7f0000000240)) r13 = socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_netrom_SIOCDELRT(r6, 0x890c, &(0x7f00000003c0)={0x0, @default, @rose={'rose', 0x0}, 0x9, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xd2, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r14, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 3.635332143s ago: executing program 4 (id=3780): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d000c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r4, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r10, 0xc020f509, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r14, @ANYBLOB="08000afffadce787ef00f01a4a53a4291d00", @ANYRES32=r12, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 3.151783859s ago: executing program 1 (id=3783): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) shutdown(r2, 0x1) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r3, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/18, 0x12}, 0x3}], 0x1, 0x2300, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) unshare(0x22020600) r4 = socket$inet(0x2, 0x80002, 0x1) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@map_idx={0x18, 0xa}]}, &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.151162819s ago: executing program 1 (id=3784): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_int(r1, 0x1, 0xc, 0x0, &(0x7f0000000000)=0x26) listen(r0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x66, 0x0, 0x4, 0xd, 0x8001, 0x81}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2, 0x7}]}, &(0x7f0000000180)=0x10) shutdown(r4, 0x1) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r5, 0x11, 0x65, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r6, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) r7 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @bcast}, [@default, @remote, @remote, @bcast, @netrom, @netrom, @bcast, @default]}, &(0x7f0000000100)=0x48, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r8, @ANYBLOB="080006"], 0x24}}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdf2}, 0x48) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYRESOCT=r9, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="7f000001000000000000000000000000000000006c000000e000000200000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000000000000a0000004200000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004"], 0x164}}, 0x0) 3.029921565s ago: executing program 1 (id=3788): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, 0x0) write(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x78, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000db001001000001000000dc00000073c7002c7d5b5b1a78f906175d1ad942d4c4a3873a47dd814852"], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0xfce) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xffffd000) r4 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x100}, &(0x7f0000000200)=0x8) connect$pppoe(r4, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) shutdown(r5, 0x1) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000100)) write(r3, &(0x7f0000000240)="59a11b29f88832564088748533f2408e81072e53513056002d150aa6c98144effc52d6ee91b27e21ac3279c02da8d0edcb608d533d823664801945f9d030f6bd10bedbf876c86584f05aed5e0fee740c7d7c02654e7db434734c418f12b985339537d107d2d6bcb4533954860a4249bcc4c4f739ea", 0x75) socket$alg(0x26, 0x5, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, 0x0, 0x20000000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 1.987913035s ago: executing program 4 (id=3790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007cc0)=ANY=[], 0x65d4}}, 0x0) 1.905903192s ago: executing program 4 (id=3791): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/8, 0x8}, {0x0}], 0x2}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) setsockopt$inet_tcp_int(r2, 0x6, 0x18, 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf) epoll_create1(0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1.85262988s ago: executing program 2 (id=3792): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x58}}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000680)=0xb8, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000500)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r4, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x48, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e20, 0x0, @loopback, 0x3}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r5, 0x8, 0x9, 0xd5}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x2}]}, 0x30}}, 0x0) 1.762495474s ago: executing program 2 (id=3794): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf25410000000e0001006e1d368fc50525181f0000000f0002006e657464657673696d3000001200870001000000726f7073000000005ebe74a1cc97275bafc96d0a0740f31312c58eea824c7142f0e3ec7ccaaa74fef8ae1f02000000000000005a0cf2aa913e2f07cb11"], 0x44}, 0x1, 0x0, 0x0, 0xc800}, 0x40) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/81, 0x51}, {0x0}, {0x0}], 0x4}, 0x6}], 0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x5}, 0x1c) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) mmap(&(0x7f0000747000/0x1000)=nil, 0x1000, 0x2, 0x10010, r3, 0xc4d19000) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x5c}}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) r7 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xe, 0xb}}}, 0x24}}, 0x800) 1.605544404s ago: executing program 4 (id=3796): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) unshare(0x68040200) (async) r1 = socket(0x2a, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0xc, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="bf1ea0e3c19ed614ebadd2db8662", 0x0, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) (async, rerun: 64) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv4_newroute={0x2c, 0x18, 0xaba64f4add525e83, 0x1, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xfe, 0x3}, [@RTA_OIF={0x8, 0x4, r6}, @RTA_PREFSRC={0x8, 0x7, @broadcast}]}, 0x2c}, 0x1, 0xffffff7f}, 0x84) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @multicast2}, @in6={0xa, 0x0, 0xd7d9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @in={0x2, 0x4e20, @dev}], 0x4c) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000074000000060a010400000000e5000000010000004c000480240001800b00010072656a6563740000140002800800"], 0xfc}}, 0x0) (async, rerun: 32) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff3}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x14) socket$netlink(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f7}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) (async) bind$bt_hci(r10, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r10, &(0x7f0000000140)="24000000010006", 0x7) 1.580412879s ago: executing program 0 (id=3797): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0xfffffffd) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0x5e, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x40, 0x10, 0x1, 0x3, {{0x11, 0x4, 0x3, 0x3b, 0x44, 0x68, 0x0, 0x6, 0x4, 0x0, @remote, @loopback, {[@cipso={0x86, 0x21, 0x0, [{0x7, 0x2}, {0x7, 0x2}, {0x1, 0xb, "0a1034f726509794aa"}, {0x7, 0xc, "37157e177a4a374f064a"}]}, @lsrr={0x83, 0xf, 0xc1, [@empty, @broadcast, @remote]}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @private, @broadcast}, &(0x7f0000000340)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg2\x00', 0x0}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x0, 0x5, 0x2, 0xe, 0xc, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8007, 0x10, 0x9, 0x1}}) (async) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r8, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r9, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c001780040005000400040014000400766c616e30000000000000000000000005005300000000000a00180003030303030300000a00e80008021100000000001c00178004000100040003"], 0x138}}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x54}]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x2}, 0x94) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x0, 0x25dfdbff, {0x2, 0x8, 0x0, 0xcb, r12}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010101}, @IFA_RT_PRIORITY={0x8, 0x9, 0x1bf}, @IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_RT_PRIORITY={0x8, 0x9, 0x31}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}}, 0x20040080) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) (async) r13 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r13, 0x11, 0x1, &(0x7f0000000440)=0x1000, 0x4) (async) sendmsg$inet(r13, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="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", 0x155}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @private=0xa010101}}}], 0x20}, 0x0) (async) sendmmsg$inet6(r13, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="81c8", 0x2}], 0x1, &(0x7f00000009c0)=ANY=[], 0xe0}}], 0x1, 0x80) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="000027bd7000fcdbdf253e000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x24000804) (async) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=0x0, @ANYBLOB="00032abd7000fcdbdf25060000003400018008000100", @ANYRES32=r1, @ANYBLOB="1400020064766d72703100000000000000000000140002006261746164765f736c6176655f30000044000180080001007b18347b36423815a119c26a56bb2dca2c3448f40fe04b1086d423c28a807b48341f0f5b3fa1cd340e7104609e2d59d0a96d0f84fde1803c67ab54b8192cf69ac1953c05a0781ab5398c059c1473be47e71bff9fa79d87a74d6486c1ae06d03d23bded5cbcd5b5c01e979c99967ba84b273843a7c53319a4c8895f2b079b82156fc78c1b7db1ae92e26c375ebe1658784f8224b5f71161bc61d2862f", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="140002006261746164765f736c6176655f3100001400020064756d6d7930000000000000000000001400018008000300010000000800030001000000"], 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x20040804) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000600)=@generic={&(0x7f00000005c0)='./file0\x00', 0x0, 0x8}, 0x18) 1.417394681s ago: executing program 0 (id=3798): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x1, @local, 'bridge0\x00'}}, 0x1e) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e) close(r2) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r6, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000005000000300000000000000030000000000000008400000001000000b9000180010000000500000003000000080000004800000004000000", @ANYRES32=0x0, @ANYBLOB="2000000000000000840000000200000007000b00feffffffff00000013bc4cd0c174d29d7b4d171cddc657c9707c422a1aee5364149d9df7a183381752e2e6eceecfd93a2f0fe211064322b8bdf13286b4fdf719e8e325a1f288ac1ee20af1f7dcd7e47c851037c13f340fd974be60e1c9a5f52f27aba6681c20fd864fffd4b8cdad8208a7758ee67da42d6c7023b41edca596f0e3528ee8ab6d81dc0939c6434d9914fa25cbf497750b04966732e1417e974be606c54ceff1a1fda3427de2eb1fbe0515bc1e1142eb824642f0", @ANYRES32=0x0], 0x68, 0x4054}, 0x4040041) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) close(0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) (async) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x1, @local, 'bridge0\x00'}}, 0x1e) (async) socket$pppoe(0x18, 0x1, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) (async) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) (async) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e) (async) close(r2) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) sendmsg$inet_sctp(r6, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000005000000300000000000000030000000000000008400000001000000b9000180010000000500000003000000080000004800000004000000", @ANYRES32=0x0, @ANYBLOB="2000000000000000840000000200000007000b00feffffffff00000013bc4cd0c174d29d7b4d171cddc657c9707c422a1aee5364149d9df7a183381752e2e6eceecfd93a2f0fe211064322b8bdf13286b4fdf719e8e325a1f288ac1ee20af1f7dcd7e47c851037c13f340fd974be60e1c9a5f52f27aba6681c20fd864fffd4b8cdad8208a7758ee67da42d6c7023b41edca596f0e3528ee8ab6d81dc0939c6434d9914fa25cbf497750b04966732e1417e974be606c54ceff1a1fda3427de2eb1fbe0515bc1e1142eb824642f0", @ANYRES32=0x0], 0x68, 0x4054}, 0x4040041) (async) 1.184454958s ago: executing program 0 (id=3799): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) sendmmsg(r0, &(0x7f0000005300)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="ccd2d8bc", 0x4}], 0x1}}], 0x1, 0x20000040) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000c40)={r0}) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000c80)={0x6c, 0x14, 0x1, 0x4, 0x0, [@remote, @private1, @empty, @private1, @private0, @mcast1, @private1, @loopback, @dev={0xfe, 0x80, '\x00', 0x28}, @mcast2]}, 0xa8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r4, &(0x7f0000000940)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000040)=""/56, 0x38}, {&(0x7f00000000c0)=""/39, 0x27}, {&(0x7f0000000340)=""/239, 0xef}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000000280)=""/33, 0x21}, {&(0x7f0000000440)}, {&(0x7f0000000540)=""/244, 0xf4}, {&(0x7f0000000480)=""/32, 0x20}, {&(0x7f0000000640)=""/207, 0xcf}, {&(0x7f00000004c0)=""/44, 0x2c}], 0xa, &(0x7f0000000d40)=[@cswp={0x58, 0x114, 0x7, {{0x8, 0x3}, &(0x7f0000000800)=0x2, &(0x7f0000000840)=0x9, 0x7, 0x6, 0x1, 0x1, 0x20, 0x8000}}, @rdma_dest={0x18, 0x114, 0x2, {0x6, 0x3546}}], 0x70, 0xc800}, 0x20000050) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a800000000000071700010014000100fe881000000000000000000000000101080018004e214e221400010020010000000000000000000000000001af1eb4f2d64577a15d38dec900cd9424eb9583"], 0x4c}}, 0x40000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r8 = socket$can_bcm(0x1d, 0x2, 0x2) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x400000000000235, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000ac0)={0x0, @in6={{0xa, 0x4e22, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}, [0x2, 0x7c, 0x6, 0x10, 0xb3ab, 0x4, 0x1ff, 0xfffffffffffffff6, 0x776, 0x5456, 0x7ff, 0xff, 0xfff, 0x4, 0x1]}, &(0x7f0000000440)=0x100) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r9, 0x84, 0x77, &(0x7f0000000980)=ANY=[@ANYRES32=r10, @ANYBLOB="0d1aec02040000000100"], 0xe) connect$can_bcm(r8, &(0x7f00000005c0), 0x10) recvmmsg(r8, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000180)=""/98, 0x62}], 0x2}, 0x7f}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES16], 0x48}, 0x1, 0x0, 0x0, 0x8000010}, 0x2001c009) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f0000000e40)=ANY=[@ANYRESHEX=r7, @ANYRESOCT=r3], &(0x7f00000000c0)=""/209, 0x3c, 0xd1, 0x1}, 0x28) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x23, &(0x7f0000000580)=0xd, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000e80)='erofs_fill_inode\x00', r9, 0x0, 0x1}, 0x18) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r11) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000880)=ANY=[@ANYBLOB='3\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002dbd7000fedbdf251c0000000ea1070000657464657673696d0000000f0002006e65746465c9767394e1618296269530fd24a03b02e78631696d30000008000b0000010000"], 0x3c}, 0x1, 0x0, 0x0, 0x20}, 0x8080) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000a00)=ANY=[@ANYBLOB="0e808128ffffffffffffaaaaaaaaaaaa08004500001c000000000004907800000000000000070000000000089078fb2d2c1f8d8fa1a706fa4e767b707acf2e6cc4ff9d76a44d7581a267f5a6bfd6edadc85c8bed9508624504046712da34ad4c6e0c854e045e42185def544872a23f10740dfa7698523b166ee212868c70ca501b"], 0x2e) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000010003904ddffff3f00ffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"/68], 0x5c}}, 0x0) 898.130935ms ago: executing program 0 (id=3800): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000040000e41300050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x20008084}, 0x4040000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf8200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_FIB_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x4048010) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) sendto$inet6(r5, &(0x7f00000000c0)='K', 0x1, 0x44008011, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x30, 0x3, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900, 0x4064}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x30}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 707.547754ms ago: executing program 0 (id=3801): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x4, 0xc92, 0x4, 0x7, 0x4}, 0x14) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 440.19211ms ago: executing program 0 (id=3802): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getuid() setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000580)=0x3, 0x4) sendmsg$nl_generic(r2, 0x0, 0x801) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="2300000001", 0x5) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000040000000009410c3f81f000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='percpu_alloc_percpu\x00', r6, 0x0, 0x7}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet6(0xa, 0x3, 0xfa) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r8, @ANYBLOB="06001500070000000c00168008000100", @ANYRES32=r7], 0x38}}, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 276.781827ms ago: executing program 2 (id=3803): r0 = socket$inet6(0xa, 0x80003, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x0, 0xa78a}, 0xfff7fffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xffffffffffffff60) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x40}, 0x5}, 0xffffffffffffffe3) 108.195513ms ago: executing program 2 (id=3804): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x6c000000, 0x61, 0x10, 0x4b}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c00000002060101000000000000000000000001120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c00018008"], 0x6c}}, 0x20048084) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000ffdbdf25050000000c00018008000100", @ANYRES32=r4, @ANYBLOB="1800038014000300"], 0x38}, 0x1, 0x0, 0x0, 0x2400c054}, 0x4044014) r5 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x80047453, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x3, 0x0, 0x110}]}, &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0x0, 0x2}, @exp_fastopen={0xfe, 0x8, 0xf989, "f84b23a6"}]}}}}}}, 0x4e) 0s ago: executing program 3 (id=3805): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x804) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x600) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112df000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r4, 0xd35) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000380)={r4, r5}, 0xc) sendmmsg$inet(r2, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x999}], 0x1}}], 0x1, 0x40) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) kernel console output (not intermixed with test programs): us mode [ 268.079466][T14671] syzkaller0: left allmulticast mode [ 268.123931][T14678] tipc: Enabled bearer , priority 0 [ 268.131168][T14679] syzkaller0: entered promiscuous mode [ 268.168269][T14679] syzkaller0: entered allmulticast mode [ 268.247693][T14676] tipc: Resetting bearer [ 268.321102][T14676] tipc: Disabling bearer [ 268.383535][T14667] lo speed is unknown, defaulting to 1000 [ 268.612320][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 268.789344][T14724] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2387'. [ 268.801243][T14724] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2387'. [ 268.821236][T14727] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2388'. [ 268.853902][T14727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2388'. [ 268.878761][T14727] vlan0: entered promiscuous mode [ 268.905688][T14722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.916012][T14731] validate_nla: 1 callbacks suppressed [ 268.916027][T14731] netlink: 'syz.1.2389': attribute type 29 has an invalid length. [ 268.963054][T14734] netlink: 'syz.1.2389': attribute type 29 has an invalid length. [ 270.129738][T14752] lo speed is unknown, defaulting to 1000 [ 270.381837][T14752] lo speed is unknown, defaulting to 1000 [ 271.297915][T14791] tipc: Enabling of bearer rejected, already enabled [ 271.325942][T14793] tipc: Enabling of bearer rejected, failed to enable media [ 271.649877][T14815] vlan3: entered promiscuous mode [ 271.660294][T14809] netlink: 'syz.4.2412': attribute type 21 has an invalid length. [ 271.706811][T14809] ip_vti0: Master is either lo or non-ether device [ 271.977326][T14838] netlink: 'syz.4.2425': attribute type 11 has an invalid length. [ 271.987154][T14833] lo speed is unknown, defaulting to 1000 [ 272.102970][T14833] lo speed is unknown, defaulting to 1000 [ 272.221805][T14857] __nla_validate_parse: 20 callbacks suppressed [ 272.221823][T14857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2429'. [ 272.279246][T14861] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2431'. [ 272.294476][T14861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2431'. [ 272.309009][T14861] vlan0: entered promiscuous mode [ 272.357745][T14866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2431'. [ 272.369030][T14866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2431'. [ 272.489175][T14871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2435'. [ 272.559858][T14879] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2436'. [ 272.571954][T14879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2436'. [ 272.695134][T14888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2437'. [ 272.742660][T14889] tipc: Enabling of bearer rejected, already enabled [ 272.880048][T14899] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 272.913885][T14902] netlink: 'syz.2.2440': attribute type 13 has an invalid length. [ 272.925779][ T5855] Bluetooth: hci4: command 0x0405 tx timeout [ 272.932815][T14902] netlink: 'syz.2.2440': attribute type 17 has an invalid length. [ 272.972492][T14902] 0ªX¹¦À: left allmulticast mode [ 272.977756][T14902] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 273.057784][T14902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2440'. [ 273.139849][T14912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.183941][T14904] lo speed is unknown, defaulting to 1000 [ 273.211943][T14905] lo speed is unknown, defaulting to 1000 [ 273.551171][T14904] lo speed is unknown, defaulting to 1000 [ 273.731081][T14932] bridge0: port 1(batadv1) entered blocking state [ 273.773480][T14932] bridge0: port 1(batadv1) entered disabled state [ 273.797747][T14932] batadv1: entered allmulticast mode [ 273.804422][T14932] batadv1: entered promiscuous mode [ 273.810514][T14930] Â: renamed from pim6reg1 [ 273.817077][T14905] lo speed is unknown, defaulting to 1000 [ 274.233978][ T970] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 274.243266][ T970] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 274.415739][T14940] netlink: 'syz.4.2452': attribute type 4 has an invalid length. [ 274.431169][T14937] lo speed is unknown, defaulting to 1000 [ 274.654589][T14937] lo speed is unknown, defaulting to 1000 [ 274.833273][T14960] macsec1: entered promiscuous mode [ 275.123471][T14964] delete_channel: no stack [ 275.273102][ T55] lo speed is unknown, defaulting to 1000 [ 275.283538][T14972] netlink: 'syz.4.2463': attribute type 1 has an invalid length. [ 275.284824][T14973] vlan2: entered promiscuous mode [ 275.325032][T14972] 8021q: adding VLAN 0 to HW filter on device bond3 [ 275.458672][T14972] bond3: (slave veth7): Enslaving as an active interface with a down link [ 275.619830][T14990] FAULT_INJECTION: forcing a failure. [ 275.619830][T14990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.644919][T14990] CPU: 1 UID: 0 PID: 14990 Comm: syz.3.2467 Not tainted syzkaller #0 PREEMPT(full) [ 275.644944][T14990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 275.644962][T14990] Call Trace: [ 275.644969][T14990] [ 275.644976][T14990] dump_stack_lvl+0x189/0x250 [ 275.645001][T14990] ? __pfx____ratelimit+0x10/0x10 [ 275.645024][T14990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.645044][T14990] ? __pfx__printk+0x10/0x10 [ 275.645065][T14990] ? __might_fault+0xb0/0x130 [ 275.645088][T14990] ? end_current_label_crit_section+0x169/0x1c0 [ 275.645115][T14990] ? rcu_is_watching+0x15/0xb0 [ 275.645134][T14990] should_fail_ex+0x414/0x560 [ 275.645157][T14990] _copy_from_user+0x2d/0xb0 [ 275.645177][T14990] sk_setsockopt+0x27f/0x2dc0 [ 275.645193][T14990] ? rcu_is_watching+0x15/0xb0 [ 275.645209][T14990] ? lock_release+0x4b/0x3e0 [ 275.645232][T14990] ? __pfx_sk_setsockopt+0x10/0x10 [ 275.645248][T14990] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 275.645264][T14990] ? __pfx_vfs_write+0x10/0x10 [ 275.645288][T14990] ? rcu_is_watching+0x15/0xb0 [ 275.645306][T14990] ? rcu_is_watching+0x15/0xb0 [ 275.645320][T14990] ? lock_release+0x4b/0x3e0 [ 275.645341][T14990] ? aa_sock_opt_perm+0xd4/0x1b0 [ 275.645356][T14990] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 275.645378][T14990] do_sock_setsockopt+0x11b/0x1b0 [ 275.645397][T14990] __x64_sys_setsockopt+0x13f/0x1b0 [ 275.645416][T14990] do_syscall_64+0xfa/0x3b0 [ 275.645431][T14990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.645446][T14990] ? clear_bhb_loop+0x60/0xb0 [ 275.645464][T14990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.645477][T14990] RIP: 0033:0x7f9da778ebe9 [ 275.645492][T14990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.645506][T14990] RSP: 002b:00007f9da8674038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 275.645523][T14990] RAX: ffffffffffffffda RBX: 00007f9da79b5fa0 RCX: 00007f9da778ebe9 [ 275.645536][T14990] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 275.645546][T14990] RBP: 00007f9da8674090 R08: 0000000000000010 R09: 0000000000000000 [ 275.645557][T14990] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.645568][T14990] R13: 00007f9da79b6038 R14: 00007f9da79b5fa0 R15: 00007ffc924aa9a8 [ 275.645588][T14990] [ 275.989046][T14996] bridge18: entered promiscuous mode [ 276.093222][T15002] tipc: Enabling of bearer rejected, already enabled [ 276.113348][T15005] tipc: Enabling of bearer rejected, already enabled [ 276.203290][T15012] veth1_to_bond: entered allmulticast mode [ 276.296429][T15012] veth1_to_bond: left allmulticast mode [ 276.471968][T15028] sctp: [Deprecated]: syz.2.2480 (pid 15028) Use of int in max_burst socket option deprecated. [ 276.471968][T15028] Use struct sctp_assoc_value instead [ 276.718216][T15050] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 277.318107][T15073] dvmrp0: entered allmulticast mode [ 278.469695][T15105] tun0: tun_chr_ioctl cmd 1074025675 [ 278.481635][T15105] tun0: persist enabled [ 278.483823][T15107] __nla_validate_parse: 10 callbacks suppressed [ 278.483840][T15107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2500'. [ 278.536779][T15114] tun0: tun_chr_ioctl cmd 1074025675 [ 278.576647][T15114] tun0: persist enabled [ 278.675791][T15119] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2503'. [ 278.918365][T15127] netlink: 'syz.2.2505': attribute type 1 has an invalid length. [ 278.941687][T15133] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2507'. [ 278.990280][T15127] 8021q: adding VLAN 0 to HW filter on device bond4 [ 279.000754][T15139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2505'. [ 279.012115][T15133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2507'. [ 279.032430][T15139] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2505'. [ 279.058903][T15133] vlan0: entered promiscuous mode [ 279.105444][T15148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2507'. [ 279.117824][T15148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2507'. [ 279.134082][T15127] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2505'. [ 279.144598][T15148] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2507'. [ 279.285858][T15163] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 279.293217][T15163] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 279.402806][T15173] tipc: Enabled bearer , priority 0 [ 279.410269][T15173] syzkaller0: entered promiscuous mode [ 279.431018][T15173] syzkaller0: entered allmulticast mode [ 279.544869][T15172] tipc: Resetting bearer [ 279.567807][T15172] tipc: Disabling bearer [ 279.628851][T15206] vlan0: entered promiscuous mode [ 279.642002][T15203] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 279.709251][T15214] netlink: 'syz.4.2526': attribute type 2 has an invalid length. [ 279.729961][T15214] netlink: 'syz.4.2526': attribute type 1 has an invalid length. [ 279.800109][T15219] lo speed is unknown, defaulting to 1000 [ 279.918319][T15217] lo speed is unknown, defaulting to 1000 [ 280.056722][T15219] lo speed is unknown, defaulting to 1000 [ 280.964498][T15297] nbd0: detected capacity change from 0 to 127 [ 281.034036][T15217] lo speed is unknown, defaulting to 1000 [ 281.048817][T15306] IPv6: sit4: Disabled Multicast RS [ 281.065896][ T5870] block nbd0: Receive control failed (result -104) [ 281.188228][T15314] netlink: 'syz.3.2552': attribute type 18 has an invalid length. [ 281.265012][T15316] netlink: 'syz.4.2551': attribute type 1 has an invalid length. [ 281.593392][T15310] wg1: left promiscuous mode [ 281.598030][T15310] wg1: left allmulticast mode [ 281.826533][T15310] geneve2: left promiscuous mode [ 281.831594][T15310] geneve2: left allmulticast mode [ 281.846524][T15310] bond1: left promiscuous mode [ 281.851332][T15310] bond1: left allmulticast mode [ 281.861905][T15310] tipc: Resetting bearer [ 281.870915][T15310] syzkaller0: left promiscuous mode [ 281.876950][T15310] syzkaller0: left allmulticast mode [ 281.903126][T15310] team0: left allmulticast mode [ 281.908280][T15310] team0: left promiscuous mode [ 281.914439][T15310] macvtap1: left promiscuous mode [ 281.919633][T15310] macvtap1: left allmulticast mode [ 281.992070][ T6118] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.005444][ T6118] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.016203][ T6118] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.031719][ T6118] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.062715][ T6118] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.085691][ T6118] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.095947][ T6118] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.106471][ T6118] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.149392][T15334] lo speed is unknown, defaulting to 1000 [ 282.346713][T15334] lo speed is unknown, defaulting to 1000 [ 282.446301][T15350] netlink: 'syz.0.2560': attribute type 2 has an invalid length. [ 282.456208][T15350] netlink: 'syz.0.2560': attribute type 1 has an invalid length. [ 283.128684][T15391] ip6tnl1: entered promiscuous mode [ 283.139403][T15391] ip6tnl1: entered allmulticast mode [ 283.319490][T15405] lo speed is unknown, defaulting to 1000 [ 283.547885][T15419] __nla_validate_parse: 69 callbacks suppressed [ 283.547906][T15419] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2580'. [ 283.595076][T15405] lo speed is unknown, defaulting to 1000 [ 283.615079][T15424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2580'. [ 283.654508][T15424] vlan2: entered promiscuous mode [ 283.669494][T15426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2580'. [ 283.693958][T15426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2580'. [ 283.707858][T15426] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2580'. [ 283.740303][T12274] lo speed is unknown, defaulting to 1000 [ 283.922951][T15442] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2587'. [ 283.952761][T15440] tipc: Enabling of bearer rejected, already enabled [ 283.984216][T15447] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 283.988120][T15449] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2590'. [ 284.088616][T15462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2593'. [ 284.118381][T15462] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 284.134573][T15462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.168196][T15467] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2594'. [ 284.214534][T15470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2595'. [ 284.280193][ T7850] lo speed is unknown, defaulting to 1000 [ 284.328095][T15476] vlan2: entered promiscuous mode [ 284.417708][T15485] openvswitch: netlink: IP tunnel TTL not specified. [ 284.689874][T15499] lo speed is unknown, defaulting to 1000 [ 284.917425][T15507] netlink: 'syz.3.2607': attribute type 1 has an invalid length. [ 284.967964][T15499] lo speed is unknown, defaulting to 1000 [ 285.178794][T15518] netlink: 'syz.2.2610': attribute type 1 has an invalid length. [ 285.194474][T15515] netlink: 'syz.1.2609': attribute type 1 has an invalid length. [ 285.202664][T15515] netlink: 'syz.1.2609': attribute type 4 has an invalid length. [ 285.242448][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 285.253425][T15521] netlink: 'syz.2.2610': attribute type 13 has an invalid length. [ 285.261477][T15521] netlink: 'syz.2.2610': attribute type 17 has an invalid length. [ 285.364468][T15521] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.377287][T15521] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 285.396179][T15534] tipc: Enabling of bearer rejected, already enabled [ 285.418719][T15522] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 285.431642][T15522] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 285.622540][ T6139] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 285.684922][T15551] IPVS: length: 209 != 24 [ 285.804751][T15557] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 285.863763][T15563] tipc: Enabled bearer , priority 0 [ 285.880296][T15563] syzkaller0: entered promiscuous mode [ 285.886795][T15563] syzkaller0: entered allmulticast mode [ 285.909886][T15563] tipc: Resetting bearer [ 285.919464][T15562] tipc: Resetting bearer [ 285.928915][T15562] tipc: Disabling bearer [ 286.166534][T15579] rdma_rxe: rxe_newlink: failed to add lo [ 286.290614][T15592] vlan0: entered promiscuous mode [ 286.632724][T15620] tipc: Enabling of bearer rejected, already enabled [ 286.676288][T15623] bond5: left allmulticast mode [ 286.681381][T15623] bond5: left promiscuous mode [ 286.688570][T15623] bridge0: port 1(bond5) entered disabled state [ 286.744814][T15620] syzkaller0: entered promiscuous mode [ 286.750482][T15620] syzkaller0: entered allmulticast mode [ 286.919808][T15641] _ÐZ`Ô€@ÿÿ: entered promiscuous mode [ 286.981917][T15640] can: request_module (can-proto-0) failed. [ 287.077469][ T49] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.095004][ T49] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.117014][ T49] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.131130][ T49] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.361632][T15685] netlink: 'syz.0.2662': attribute type 10 has an invalid length. [ 287.376724][T15685] netlink: 'syz.0.2662': attribute type 10 has an invalid length. [ 287.461342][T15689] vlan3: entered promiscuous mode [ 287.467146][T15689] ip6gretap0: entered promiscuous mode [ 287.656133][T15699] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 288.025150][T15717] bond5: entered promiscuous mode [ 288.060085][T15717] bond5: entered allmulticast mode [ 288.090309][T15717] 8021q: adding VLAN 0 to HW filter on device bond5 [ 288.378026][T15744] netlink: 'syz.3.2680': attribute type 9 has an invalid length. [ 288.616977][T15763] pim6reg1: entered promiscuous mode [ 288.627348][T15763] pim6reg1: entered allmulticast mode [ 288.668867][T15766] veth11: entered promiscuous mode [ 288.700013][T15770] netlink: 'syz.4.2690': attribute type 1 has an invalid length. [ 288.734684][T15770] bond4: (slave ip6gretap3): Enslaving as a backup interface with an up link [ 288.746963][ T970] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 288.747756][T15770] 8021q: adding VLAN 0 to HW filter on device bond4 [ 288.785205][T15770] bond4 (unregistering): (slave ip6gretap3): Removing an active aggregator [ 288.794598][T15770] bond4 (unregistering): (slave ip6gretap3): Releasing backup interface [ 288.805872][T15770] bond4 (unregistering): Released all slaves [ 288.957651][T15782] __nla_validate_parse: 38 callbacks suppressed [ 288.957671][T15782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2694'. [ 289.102954][T15791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2696'. [ 289.223569][T15799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2699'. [ 289.247522][T15804] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 289.255365][T15804] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 289.274329][T15805] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 289.277508][T15807] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2701'. [ 289.292027][T15804] mac80211_hwsim hwsim9 ªªªªª;: renamed from wlan0 [ 289.301718][T15807] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2701'. [ 289.678207][T15837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2711'. [ 289.717799][T15842] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2712'. [ 289.758703][T15844] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2713'. [ 289.818194][T15847] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2714'. [ 289.829503][T15847] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2714'. [ 289.987171][T15858] pim6reg: entered allmulticast mode [ 290.042394][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 290.255598][T15875] lo speed is unknown, defaulting to 1000 [ 290.493451][T15875] lo speed is unknown, defaulting to 1000 [ 290.716794][T15912] tipc: Enabling of bearer rejected, already enabled [ 290.729730][T15912] batadv_slave_0: entered allmulticast mode [ 290.797764][T15914] batadv1: entered promiscuous mode [ 290.828461][T15914] batadv1: entered allmulticast mode [ 290.845273][T15913] batadv1: entered promiscuous mode [ 290.850975][T15913] batadv1: entered allmulticast mode [ 290.989405][T15926] validate_nla: 3 callbacks suppressed [ 290.989422][T15926] netlink: 'syz.4.2737': attribute type 12 has an invalid length. [ 291.148849][T15940] vlan0: entered promiscuous mode [ 291.230218][T15943] lo speed is unknown, defaulting to 1000 [ 291.791180][T15943] lo speed is unknown, defaulting to 1000 [ 292.112269][T15978] netlink: 'syz.3.2752': attribute type 3 has an invalid length. [ 292.275892][T15993] netlink: 'syz.0.2757': attribute type 8 has an invalid length. [ 292.416409][T16001] macsec0: entered promiscuous mode [ 292.444800][T16001] macvlan1: entered promiscuous mode [ 292.459256][T16001] macvlan1: left promiscuous mode [ 292.595730][T16008] lo speed is unknown, defaulting to 1000 [ 292.784174][T16008] lo speed is unknown, defaulting to 1000 [ 292.920225][T16019] netlink: 'syz.4.2765': attribute type 10 has an invalid length. [ 292.938796][T16019] dummy0: entered promiscuous mode [ 292.946802][T16019] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 292.966280][ T6118] bond0: (slave dummy0): interface is now down [ 292.982336][ T6118] bond0: now running without any active interface! [ 293.759343][T16066] tipc: Enabled bearer , priority 0 [ 293.767579][T16066] syzkaller0: entered promiscuous mode [ 293.776420][T16066] syzkaller0: entered allmulticast mode [ 293.786529][T16066] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 293.803705][T16066] tipc: Resetting bearer [ 293.811898][T16068] tipc: Enabling of bearer rejected, already enabled [ 293.825015][T16068] syzkaller0: entered promiscuous mode [ 293.830610][T16068] syzkaller0: entered allmulticast mode [ 293.838982][T16068] tipc: Resetting bearer [ 293.856285][T16065] tipc: Resetting bearer [ 293.869910][T16065] tipc: Disabling bearer [ 294.067472][T16082] __nla_validate_parse: 25 callbacks suppressed [ 294.067490][T16082] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.2780'. [ 294.112273][T16082] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.2780'. [ 294.210490][T16095] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2785'. [ 294.276723][T16100] netlink: 'syz.0.2784': attribute type 5 has an invalid length. [ 294.303485][T16105] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2787'. [ 294.322764][T16097] netlink: 'syz.0.2784': attribute type 5 has an invalid length. [ 294.334055][T16097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2784'. [ 294.362667][T16100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2784'. [ 294.404633][T16110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2790'. [ 294.450793][T16116] netlink: 'syz.2.2789': attribute type 10 has an invalid length. [ 294.468970][T16116] team0: Port device dummy0 added [ 294.492006][T16116] netlink: 'syz.2.2789': attribute type 10 has an invalid length. [ 294.518594][T16111] lo speed is unknown, defaulting to 1000 [ 294.531970][T16116] team0: Port device dummy0 removed [ 294.579602][T16125] tipc: Enabled bearer , priority 5 [ 294.665242][T16132] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2795'. [ 294.698704][T16137] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2796'. [ 294.735846][T16111] lo speed is unknown, defaulting to 1000 [ 294.815603][T16140] Bluetooth: MGMT ver 1.23 [ 295.036513][T16152] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2799'. [ 295.348892][T16159] tipc: Enabling of bearer rejected, already enabled [ 295.367099][T16169] tipc: Enabling of bearer rejected, already enabled [ 295.399180][T16171] netlink: 'syz.3.2804': attribute type 1 has an invalid length. [ 295.408145][T16171] netlink: 'syz.3.2804': attribute type 3 has an invalid length. [ 295.477447][T16169] syzkaller0: Caught tx_queue_len zero misconfig [ 295.820289][T16197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.831951][T16197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.840272][T16197] bond2: (slave bridge1): Releasing active interface [ 295.849895][T16197] team0: Port device bond3 removed [ 295.857174][T16197] bond4: (slave geneve2): Releasing active interface [ 295.867664][T16197] bond0: (slave geneve3): Releasing active interface [ 295.876316][T16197] bond6: (slave ip6gretap1): Removing an active aggregator [ 295.884497][T16197] bond6: (slave ip6gretap1): Releasing backup interface [ 296.102720][T16219] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 296.206205][T16230] netlink: 'syz.0.2822': attribute type 5 has an invalid length. [ 296.226836][T16221] vlan0: entered allmulticast mode [ 296.236108][T16221] bridge_slave_0: entered allmulticast mode [ 296.273043][T16240] netlink: 'syz.0.2822': attribute type 1 has an invalid length. [ 296.285544][T16240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 296.382049][T16245] netlink: 'syz.2.2825': attribute type 27 has an invalid length. [ 296.396537][T16245] netlink: 'syz.2.2825': attribute type 27 has an invalid length. [ 296.689311][T16277] netlink: 'syz.1.2834': attribute type 13 has an invalid length. [ 296.706506][T16280] netlink: 'syz.0.2838': attribute type 27 has an invalid length. [ 296.720850][T16277] netlink: 'syz.1.2834': attribute type 17 has an invalid length. [ 296.729140][T16280] netlink: 'syz.0.2838': attribute type 27 has an invalid length. [ 296.767165][T16277] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 296.830697][T16288] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 296.849400][T16288] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 296.941307][T16283] lo speed is unknown, defaulting to 1000 [ 296.970240][T16277] lo speed is unknown, defaulting to 1000 [ 297.102443][T16277] lo speed is unknown, defaulting to 1000 [ 297.127060][T16301] IPVS: length: 237 != 24 [ 297.367597][T16311] syz_tun: entered allmulticast mode [ 297.387811][T16311] dvmrp8: entered allmulticast mode [ 297.408846][T16311] syz_tun: left allmulticast mode [ 297.418344][T16311] dvmrp8: left allmulticast mode [ 297.469523][T16317] tipc: New replicast peer: 255.255.255.255 [ 297.495323][T16317] tipc: Enabled bearer , priority 10 [ 297.502325][T16283] lo speed is unknown, defaulting to 1000 [ 297.981781][T16340] netlink: 'syz.3.2858': attribute type 32 has an invalid length. [ 297.999046][T16336] netlink: 'syz.0.2856': attribute type 29 has an invalid length. [ 298.012045][T16340] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 298.034887][T16343] lo speed is unknown, defaulting to 1000 [ 298.048210][T16343] lo speed is unknown, defaulting to 1000 [ 298.096949][T16343] lo speed is unknown, defaulting to 1000 [ 298.112979][T16343] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 298.138507][T16343] lo speed is unknown, defaulting to 1000 [ 298.156025][T16343] lo speed is unknown, defaulting to 1000 [ 298.196982][T16343] lo speed is unknown, defaulting to 1000 [ 298.237186][T16343] lo speed is unknown, defaulting to 1000 [ 298.266364][T16343] lo speed is unknown, defaulting to 1000 [ 298.396837][T16356] 8021q: adding VLAN 0 to HW filter on device bond8 [ 298.612760][ T7862] tipc: Node number set to 952886602 [ 298.740380][T16367] bond7: (slave bridge21): making interface the new active one [ 298.749542][T16367] bond7: (slave bridge21): Enslaving as an active interface with an up link [ 298.975610][ T5230] udevd[5230]: worker [11559] terminated by signal 33 (Unknown signal 33) [ 299.119868][T16392] syzkaller0: left promiscuous mode [ 299.150202][T16392] syzkaller0: left allmulticast mode [ 299.179777][T16383] lo speed is unknown, defaulting to 1000 [ 299.195870][T16402] lo speed is unknown, defaulting to 1000 [ 299.322286][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 299.523600][T16402] lo speed is unknown, defaulting to 1000 [ 299.708755][T16402] lo speed is unknown, defaulting to 1000 [ 299.708755][T16383] lo speed is unknown, defaulting to 1000 [ 299.874519][T16431] debugfs: 'hsr0' already exists in 'hsr' [ 299.880779][T16431] Cannot create hsr debugfs directory [ 299.891984][T16431] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 299.902820][T16431] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 299.914990][T16431] hsr0: entered allmulticast mode [ 299.920405][T16431] bond0: entered allmulticast mode [ 299.926707][T16431] dummy0: entered allmulticast mode [ 300.015745][T16383] lo speed is unknown, defaulting to 1000 [ 300.086205][T16438] __nla_validate_parse: 13 callbacks suppressed [ 300.086224][T16438] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2885'. [ 300.238757][T16458] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2890'. [ 300.443502][T16470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2892'. [ 300.876913][T16482] mac80211_hwsim hwsim37 wlan0: entered promiscuous mode [ 300.892298][T16482] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 300.937872][T16484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2897'. [ 301.183256][T16505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2903'. [ 301.273473][T16514] netlink: zone id is out of range [ 301.280075][T16514] netlink: zone id is out of range [ 301.287398][T16514] netlink: zone id is out of range [ 301.294466][T16514] netlink: zone id is out of range [ 301.305194][T16514] netlink: zone id is out of range [ 301.330370][T16514] netlink: zone id is out of range [ 301.462690][T16530] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 301.523126][T16514] netlink: set zone limit has 4 unknown bytes [ 301.600901][T16536] validate_nla: 5 callbacks suppressed [ 301.600920][T16536] netlink: 'syz.2.2914': attribute type 1 has an invalid length. [ 301.646932][T16536] 8021q: adding VLAN 0 to HW filter on device bond6 [ 301.746173][T16536] bond6: (slave ip6gretap1): making interface the new active one [ 301.770254][T16549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2918'. [ 301.793754][T16536] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 301.895010][T16547] veth11: entered promiscuous mode [ 301.919316][T16547] bond6: (slave veth11): Enslaving as an active interface with a down link [ 301.949722][T16536] erspan0: entered allmulticast mode [ 301.998870][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 302.009081][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 302.016631][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.029524][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 302.037930][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.068170][T16563] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.136254][T16562] lo speed is unknown, defaulting to 1000 [ 302.228350][T16583] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2925'. [ 302.269108][T16583] netlink: 'syz.0.2925': attribute type 1 has an invalid length. [ 302.436912][T16599] netlink: 'syz.3.2930': attribute type 3 has an invalid length. [ 302.617916][T16587] tipc: Resetting bearer [ 302.674681][T16562] lo speed is unknown, defaulting to 1000 [ 302.801823][T16562] lo speed is unknown, defaulting to 1000 [ 302.937749][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2931'. [ 303.030824][T16614] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2933'. [ 303.049146][T16562] chnl_net:caif_netlink_parms(): no params data found [ 303.075790][T16614] netlink: 'syz.3.2933': attribute type 3 has an invalid length. [ 303.165347][T16619] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004 [ 303.204688][T16562] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.212344][T16562] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.229295][T16562] bridge_slave_0: entered allmulticast mode [ 303.237201][T16562] bridge_slave_0: entered promiscuous mode [ 303.257183][T16562] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.264674][T16562] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.271979][T16562] bridge_slave_1: entered allmulticast mode [ 303.278911][T16562] bridge_slave_1: entered promiscuous mode [ 303.284469][T16619] nbd1: detected capacity change from 0 to 127 [ 303.298029][ T5870] block nbd1: Receive control failed (result -104) [ 303.336345][T16562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.348521][T16562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.391886][T16640] netlink: 'syz.4.2939': attribute type 10 has an invalid length. [ 303.411352][ T6104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.434352][ T6104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.543547][T16562] team0: Port device team_slave_0 added [ 303.564899][T16562] team0: Port device team_slave_1 added [ 303.663302][T16562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.670455][T16562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.699812][T16562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.714504][T16654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2944'. [ 303.755600][T16562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.773259][T16562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.828580][T16562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.927681][T16562] hsr_slave_0: entered promiscuous mode [ 303.934446][T16562] hsr_slave_1: entered promiscuous mode [ 303.940805][T16562] debugfs: 'hsr0' already exists in 'hsr' [ 303.949215][T16562] Cannot create hsr debugfs directory [ 304.122342][ T5870] Bluetooth: hci1: command tx timeout [ 304.209635][T16688] netlink: 'syz.3.2955': attribute type 1 has an invalid length. [ 304.246551][T16562] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.273764][T16562] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.331779][T16688] 8021q: adding VLAN 0 to HW filter on device bond9 [ 304.374716][T16562] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.386576][T16562] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.439468][T16562] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.467551][T16562] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.511067][T16562] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.530121][T16562] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.615664][T16562] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 304.626128][T16562] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 304.644831][T16562] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 304.655898][T16562] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 304.726840][T16562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.755996][T16562] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.768345][ T6128] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.775588][ T6128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.791080][ T6104] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.798260][ T6104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.911108][T16742] openvswitch: netlink: Flow actions attr not present in new flow. [ 305.099898][T16754] __nla_validate_parse: 10 callbacks suppressed [ 305.099917][T16754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2969'. [ 305.123100][T16754] team0: invalid flags given to default FDB implementation [ 305.189442][T16562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.236333][T16758] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2970'. [ 305.250397][T16562] veth0_vlan: entered promiscuous mode [ 305.273641][T16562] veth1_vlan: entered promiscuous mode [ 305.347771][T16562] veth0_macvtap: entered promiscuous mode [ 305.384513][T16562] veth1_macvtap: entered promiscuous mode [ 305.411945][T16562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.438874][T16562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.467175][ T970] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.487475][T16775] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2977'. [ 305.497867][ T970] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.518385][ T970] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.540833][ T970] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.658257][T16778] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.684742][T16791] netlink: 'syz.4.2981': attribute type 39 has an invalid length. [ 305.702979][T16790] netlink: 'syz.4.2981': attribute type 39 has an invalid length. [ 305.714180][ T6118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.726069][ T6118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.749438][T16778] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.773733][T16788] bond10: entered promiscuous mode [ 305.778955][T16788] bond10: entered allmulticast mode [ 305.784553][T16788] 8021q: adding VLAN 0 to HW filter on device bond10 [ 305.796474][T16785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2980'. [ 305.808206][T16778] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.828754][ T6139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.838291][ T6139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.890728][T16778] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.070193][ T6118] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.106998][ T6118] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.124980][ T6118] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.156275][ T970] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.183001][T16815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2986'. [ 306.205413][ T5870] Bluetooth: hci1: command tx timeout [ 306.366144][T16825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2989'. [ 306.379487][ T5855] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 306.388059][ T5855] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 306.396319][ T5855] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 306.404726][ T5855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 306.407124][T16830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2990'. [ 306.414234][ T5855] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 306.499346][T16839] netlink: 'syz.1.2992': attribute type 13 has an invalid length. [ 306.513687][T16835] Can't find ip_set type bitmap:ip,mac [ 306.545329][T16831] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2990'. [ 306.582831][T16839] gretap0: refused to change device tx_queue_len [ 306.601229][T16839] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 306.620329][T16826] lo speed is unknown, defaulting to 1000 [ 306.700371][T16853] netlink: 'syz.3.2995': attribute type 4 has an invalid length. [ 306.766561][T16853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2995'. [ 306.789373][T16853] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 306.800748][T16853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.842046][T16826] lo speed is unknown, defaulting to 1000 [ 306.890241][T16862] lo speed is unknown, defaulting to 1000 [ 306.959315][T16866] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 306.980813][T16866] tipc: Disabling bearer [ 307.038139][T16826] lo speed is unknown, defaulting to 1000 [ 307.127918][T16877] lo speed is unknown, defaulting to 1000 [ 307.230670][T16881] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3002'. [ 307.282700][T16862] lo speed is unknown, defaulting to 1000 [ 307.416552][T16826] chnl_net:caif_netlink_parms(): no params data found [ 307.495441][T16899] netlink: 'syz.2.3005': attribute type 4 has an invalid length. [ 307.546240][T16826] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.566475][T16826] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.585213][T16826] bridge_slave_0: entered allmulticast mode [ 307.604114][T16826] bridge_slave_0: entered promiscuous mode [ 307.618185][T16877] lo speed is unknown, defaulting to 1000 [ 307.618192][T16862] lo speed is unknown, defaulting to 1000 [ 307.644328][T16826] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.663371][T16826] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.691069][T16826] bridge_slave_1: entered allmulticast mode [ 307.710232][T16826] bridge_slave_1: entered promiscuous mode [ 307.745258][T16903] tipc: Enabled bearer , priority 0 [ 307.752912][T16906] syzkaller0: entered promiscuous mode [ 307.763131][T16906] syzkaller0: entered allmulticast mode [ 307.784374][T16826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.808886][T16877] lo speed is unknown, defaulting to 1000 [ 307.819457][T16826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.898096][T16903] tipc: Resetting bearer [ 307.939619][T16826] team0: Port device team_slave_0 added [ 307.958863][T16902] tipc: Resetting bearer [ 307.983073][T16902] tipc: Disabling bearer [ 307.997818][T16826] team0: Port device team_slave_1 added [ 308.097753][T16826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.107702][T16826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.135764][T16826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.148369][T16826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.156075][T16826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.183791][T16826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.198351][T16919] gretap1: entered promiscuous mode [ 308.203928][T16919] gretap1: entered allmulticast mode [ 308.284702][ T5855] Bluetooth: hci1: command tx timeout [ 308.385739][T16930] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 308.442433][ T5855] Bluetooth: hci5: command tx timeout [ 308.480728][T16826] hsr_slave_0: entered promiscuous mode [ 308.490208][T16826] hsr_slave_1: entered promiscuous mode [ 308.496525][T16826] debugfs: 'hsr0' already exists in 'hsr' [ 308.502539][T16826] Cannot create hsr debugfs directory [ 308.687317][T16826] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.768487][T16826] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.838023][T16826] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.969074][T16826] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.069214][T16826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 309.080630][T16826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 309.102607][T16826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 309.120133][T16826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 309.221107][T16826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.249295][T16826] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.265633][ T6139] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.272836][ T6139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.287765][ T6128] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.295015][ T6128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.455398][T16996] vlan2: entered promiscuous mode [ 309.466507][T16996] ip6gretap0: entered promiscuous mode [ 309.572416][T16826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.602018][T17005] netlink: 'syz.2.3035': attribute type 1 has an invalid length. [ 309.875275][T16826] veth0_vlan: entered promiscuous mode [ 309.903707][T16826] veth1_vlan: entered promiscuous mode [ 309.934934][T16826] veth0_macvtap: entered promiscuous mode [ 309.948470][T16826] veth1_macvtap: entered promiscuous mode [ 309.960871][T17035] netlink: 'syz.0.3042': attribute type 13 has an invalid length. [ 309.986030][T17035] netlink: 'syz.0.3042': attribute type 17 has an invalid length. [ 309.989158][T16826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.009735][T16826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.046655][T17035] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.057006][T17035] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 310.085179][T17043] netlink: 'syz.3.3045': attribute type 7 has an invalid length. [ 310.124974][T17043] 8021q: adding VLAN 0 to HW filter on device bond11 [ 310.146309][T17043] bond11 (unregistering): Released all slaves [ 310.176874][T17052] __nla_validate_parse: 18 callbacks suppressed [ 310.176893][T17052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3047'. [ 310.218682][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.239933][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.249082][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.281358][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.307962][T17040] lo speed is unknown, defaulting to 1000 [ 310.363693][ T5855] Bluetooth: hci1: command tx timeout [ 310.470338][T17040] lo speed is unknown, defaulting to 1000 [ 310.471067][T17063] syzkaller1: entered promiscuous mode [ 310.485548][T17063] syzkaller1: entered allmulticast mode [ 310.523912][ T5855] Bluetooth: hci5: command tx timeout [ 310.550592][T17040] lo speed is unknown, defaulting to 1000 [ 310.941838][T17074] netlink: 'syz.3.3055': attribute type 4 has an invalid length. [ 310.966406][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.980093][T17075] netlink: 'syz.0.3056': attribute type 10 has an invalid length. [ 310.988276][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.992969][T17075] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3056'. [ 311.031730][T17078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3057'. [ 311.088791][T17075] team0: Port device geneve0 added [ 311.097892][T17083] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3059'. [ 311.110486][ T6104] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.122850][ T62] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.142704][ T970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.150497][T17084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3059'. [ 311.159979][ T970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.213910][ T62] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.222983][ T62] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.383295][T17098] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2985'. [ 311.413734][T17098] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2985'. [ 311.432543][T17098] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2985'. [ 311.456035][T17098] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2985'. [ 311.531138][T17113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3066'. [ 311.730997][ T5870] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 311.740893][ T5870] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 311.745791][T17125] veth1_macvtap: left promiscuous mode [ 311.754174][T17125] macsec0: entered promiscuous mode [ 311.760735][T17125] macsec0: entered allmulticast mode [ 311.762626][ T5870] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 311.774720][ T5870] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 311.775534][T17125] veth1_macvtap: entered promiscuous mode [ 311.782516][ T5870] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 311.790785][T17125] veth1_macvtap: entered allmulticast mode [ 311.814470][T17125] macsec0: left promiscuous mode [ 311.820244][T17125] macsec0: left allmulticast mode [ 311.826349][T17125] veth1_macvtap: left allmulticast mode [ 311.861219][T17122] lo speed is unknown, defaulting to 1000 [ 311.971420][T17122] lo speed is unknown, defaulting to 1000 [ 312.067766][T17122] lo speed is unknown, defaulting to 1000 [ 312.145795][T17122] chnl_net:caif_netlink_parms(): no params data found [ 312.190597][T17122] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.198625][T17122] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.207115][T17122] bridge_slave_0: entered allmulticast mode [ 312.215738][T17122] bridge_slave_0: entered promiscuous mode [ 312.224387][T17122] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.231710][T17122] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.239439][T17122] bridge_slave_1: entered allmulticast mode [ 312.246680][T17122] bridge_slave_1: entered promiscuous mode [ 312.285316][T17122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.307386][T17122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.380943][T17151] netlink: 'syz.4.3075': attribute type 27 has an invalid length. [ 312.421482][T17151] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 312.448387][T17153] ip6gretap0: entered promiscuous mode [ 312.456544][T17153] syz_tun: entered promiscuous mode [ 312.473409][T17153] debugfs: 'hsr1' already exists in 'hsr' [ 312.479186][T17153] Cannot create hsr debugfs directory [ 312.486369][T17153] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 312.498950][T17153] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 312.516850][T17122] team0: Port device team_slave_0 added [ 312.554564][T17122] team0: Port device team_slave_1 added [ 312.597754][T17122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.605124][ T5870] Bluetooth: hci5: command tx timeout [ 312.617441][T17122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.652736][T17122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.675363][T17122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.683551][T17122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.713557][T17122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.755183][T17122] hsr_slave_0: entered promiscuous mode [ 312.761643][T17122] hsr_slave_1: entered promiscuous mode [ 312.768835][T17122] debugfs: 'hsr0' already exists in 'hsr' [ 312.775771][T17122] Cannot create hsr debugfs directory [ 312.806213][T17179] lo speed is unknown, defaulting to 1000 [ 312.863218][T17122] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.873561][T17122] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.916690][T17179] lo speed is unknown, defaulting to 1000 [ 312.936346][T17122] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.949295][T17122] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.994489][T17179] lo speed is unknown, defaulting to 1000 [ 313.015768][T17122] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.025584][T17122] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.075603][T17122] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.085724][T17122] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.502802][T17122] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 313.569240][T17122] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 313.598878][T17122] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 313.624986][T17122] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 313.882277][ T5870] Bluetooth: hci4: command tx timeout [ 313.919072][T17122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.939518][T17122] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.964846][ T6104] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.971997][ T6104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.988192][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.995385][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.003929][T17239] openvswitch: netlink: Message has 16 unknown bytes. [ 314.130703][T17122] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 314.148302][T17243] ip6tnl3: entered promiscuous mode [ 314.450838][T17122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.510167][T17122] veth0_vlan: entered promiscuous mode [ 314.521021][T17122] veth1_vlan: entered promiscuous mode [ 314.581643][T17122] veth0_macvtap: entered promiscuous mode [ 314.626465][T17122] veth1_macvtap: entered promiscuous mode [ 314.646798][T17122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.660336][T17269] netlink: 'syz.4.3110': attribute type 27 has an invalid length. [ 314.669754][T17269] netlink: 'syz.4.3110': attribute type 27 has an invalid length. [ 314.681536][T17122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.689389][ T5870] Bluetooth: hci5: command tx timeout [ 314.711249][ T6104] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.741729][ T6104] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.758563][ T6104] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.778948][ T6104] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.875861][T17276] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 314.909721][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.945701][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.979658][T17277] lo speed is unknown, defaulting to 1000 [ 314.991796][ T6104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.015865][ T6104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.224588][T17277] lo speed is unknown, defaulting to 1000 [ 315.375255][T17277] lo speed is unknown, defaulting to 1000 [ 315.457157][T17304] __nla_validate_parse: 13 callbacks suppressed [ 315.457177][T17304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3120'. [ 315.743938][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 315.826220][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 315.867605][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 315.876055][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 315.885669][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 315.901745][T17311] vlan2: entered promiscuous mode [ 315.919459][T17311] bond0: entered promiscuous mode [ 315.942602][T17311] bond_slave_0: entered promiscuous mode [ 315.948435][T17311] bond_slave_1: entered promiscuous mode [ 315.956316][T17311] vlan2: entered allmulticast mode [ 315.961950][T17311] bond0: entered allmulticast mode [ 315.968912][T17311] bond_slave_0: entered allmulticast mode [ 315.975824][ T5855] Bluetooth: hci4: command tx timeout [ 315.981991][T17311] bond_slave_1: entered allmulticast mode [ 316.005090][T17320] netlink: 'syz.2.3124': attribute type 27 has an invalid length. [ 316.006455][T17316] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3121'. [ 316.013837][T17320] netlink: 'syz.2.3124': attribute type 27 has an invalid length. [ 316.031070][T17316] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3121'. [ 316.125683][T17316] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3121'. [ 316.139885][T17317] lo speed is unknown, defaulting to 1000 [ 316.196400][T17322] netlink: 51 bytes leftover after parsing attributes in process `syz.0.3126'. [ 316.255057][T17312] lo speed is unknown, defaulting to 1000 [ 316.276433][T17317] lo speed is unknown, defaulting to 1000 [ 316.412052][T17307] lo speed is unknown, defaulting to 1000 [ 316.417362][T17330] tipc: Enabling of bearer rejected, already enabled [ 316.465972][T17317] lo speed is unknown, defaulting to 1000 [ 316.656778][T17332] lo speed is unknown, defaulting to 1000 [ 316.704013][T17337] tipc: Resetting bearer [ 316.780780][T17342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3129'. [ 316.787294][T17312] lo speed is unknown, defaulting to 1000 [ 316.811737][T17343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3129'. [ 316.860920][ T959] IPVS: starting estimator thread 0... [ 316.929072][T17347] netlink: 'syz.1.3130': attribute type 1 has an invalid length. [ 316.962023][T17347] 8021q: adding VLAN 0 to HW filter on device bond1 [ 316.969209][T17344] IPVS: using max 38 ests per chain, 91200 per kthread [ 316.978454][T17347] netlink: 'syz.1.3130': attribute type 1 has an invalid length. [ 316.990344][T17346] veth3: entered promiscuous mode [ 316.998363][T17346] bond1: (slave veth3): Enslaving as an active interface with a down link [ 317.082512][T17332] lo speed is unknown, defaulting to 1000 [ 317.168228][T17307] lo speed is unknown, defaulting to 1000 [ 317.168661][T17332] lo speed is unknown, defaulting to 1000 [ 317.206945][T17312] lo speed is unknown, defaulting to 1000 [ 317.333315][T17354] veth5: entered promiscuous mode [ 317.353034][T17354] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3131'. [ 317.428774][T17307] lo speed is unknown, defaulting to 1000 [ 317.569623][T17365] netlink: 'syz.2.3134': attribute type 27 has an invalid length. [ 317.586244][T17365] netlink: 'syz.2.3134': attribute type 27 has an invalid length. [ 317.962529][ T5855] Bluetooth: hci0: command tx timeout [ 318.042728][ T5855] Bluetooth: hci4: command tx timeout [ 318.173374][T17307] chnl_net:caif_netlink_parms(): no params data found [ 318.243557][T17376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3137'. [ 318.261331][T17376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3137'. [ 318.401298][T17307] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.426146][T17307] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.455362][T17307] bridge_slave_0: entered allmulticast mode [ 318.464849][T17307] bridge_slave_0: entered promiscuous mode [ 318.506315][T17307] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.514605][T17307] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.522904][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 318.532012][T17307] bridge_slave_1: entered allmulticast mode [ 318.539938][T17307] bridge_slave_1: entered promiscuous mode [ 318.589897][T17388] team0: No ports can be present during mode change [ 318.672696][T17307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.673092][T17389] raw_sendmsg: syz.4.3139 forgot to set AF_INET. Fix it! [ 318.705173][T17307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.749250][T17386] lo speed is unknown, defaulting to 1000 [ 318.787615][T17307] team0: Port device team_slave_0 added [ 318.798355][T17307] team0: Port device team_slave_1 added [ 318.853247][T17307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.937377][T17307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.970888][T17307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.983663][T17386] lo speed is unknown, defaulting to 1000 [ 318.999957][T17412] pim6reg1: entered promiscuous mode [ 319.010665][T17412] pim6reg1: entered allmulticast mode [ 319.136445][T17307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.147264][T17307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.186448][T17307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.207603][T17386] lo speed is unknown, defaulting to 1000 [ 319.394811][T17307] hsr_slave_0: entered promiscuous mode [ 319.411264][T17307] hsr_slave_1: entered promiscuous mode [ 319.428079][T17307] debugfs: 'hsr0' already exists in 'hsr' [ 319.441194][T17307] Cannot create hsr debugfs directory [ 319.663993][T17307] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.751420][T17307] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.835061][T17307] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.943635][T17307] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.061257][ T5855] Bluetooth: hci0: command tx timeout [ 320.113788][T17307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 320.122897][ T5855] Bluetooth: hci4: command tx timeout [ 320.130841][T17307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 320.153609][T17307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 320.178147][T17457] netlink: 'syz.0.3162': attribute type 4 has an invalid length. [ 320.190339][T17307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 320.231285][T17458] netlink: 'syz.0.3162': attribute type 4 has an invalid length. [ 320.429939][T17488] netlink: 'syz.0.3170': attribute type 1 has an invalid length. [ 320.447034][T17481] syzkaller1: entered promiscuous mode [ 320.456034][T17481] syzkaller1: entered allmulticast mode [ 320.471545][T17307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.545510][T17307] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.558267][ T970] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.565448][ T970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.582029][ T970] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.589230][ T970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.680417][T17506] tipc: Enabling of bearer rejected, already enabled [ 320.707797][T17504] lo speed is unknown, defaulting to 1000 [ 320.720017][T17307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 320.957565][T17307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.030507][T17307] veth0_vlan: entered promiscuous mode [ 321.036884][T17504] lo speed is unknown, defaulting to 1000 [ 321.041886][T17307] veth1_vlan: entered promiscuous mode [ 321.081273][T17307] veth0_macvtap: entered promiscuous mode [ 321.113059][T17537] ±ÿ: renamed from batadv_slave_1 (while UP) [ 321.138372][T17504] lo speed is unknown, defaulting to 1000 [ 321.140649][T17307] veth1_macvtap: entered promiscuous mode [ 321.211878][T17307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.227006][T17307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.235721][T17543] netlink: 'syz.4.3184': attribute type 2 has an invalid length. [ 321.251034][T17545] __nla_validate_parse: 3 callbacks suppressed [ 321.251102][T17545] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3183'. [ 321.255270][ T970] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.304077][ T970] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.319137][ T970] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.331544][ T970] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.408709][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.429595][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.510674][ T6128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.529220][ T6128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.125120][ T5855] Bluetooth: hci0: command tx timeout [ 322.250334][T17591] lo speed is unknown, defaulting to 1000 [ 322.372578][T17598] netlink: 'syz.4.3201': attribute type 27 has an invalid length. [ 322.385383][ T5860] syz_tun (unregistering): left promiscuous mode [ 322.395964][ T5870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 322.405158][ T5870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 322.412973][ T5870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 322.423040][T17598] netlink: 'syz.4.3201': attribute type 27 has an invalid length. [ 322.423278][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 322.439415][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 322.568531][T17606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3203'. [ 322.577329][T17599] lo speed is unknown, defaulting to 1000 [ 322.641635][T17609] tipc: Started in network mode [ 322.648564][T17609] tipc: Node identity a6ddf5c8fcca, cluster identity 4711 [ 322.657692][T17609] tipc: Enabled bearer , priority 0 [ 322.666887][T17609] syzkaller0: entered promiscuous mode [ 322.670146][T17610] netlink: 'syz.4.3205': attribute type 23 has an invalid length. [ 322.673223][T17609] syzkaller0: entered allmulticast mode [ 322.707473][T17591] lo speed is unknown, defaulting to 1000 [ 322.765387][T17609] tipc: Resetting bearer [ 322.781779][T17607] tipc: Resetting bearer [ 322.801141][T17607] tipc: Disabling bearer [ 322.880815][T17618] lo speed is unknown, defaulting to 1000 [ 323.030019][T17635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3209'. [ 323.037818][T17599] lo speed is unknown, defaulting to 1000 [ 323.045574][T17591] lo speed is unknown, defaulting to 1000 [ 323.047880][T17635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3209'. [ 323.181629][T17638] netlink: 41 bytes leftover after parsing attributes in process `syz.0.3211'. [ 323.279671][T17643] netlink: 'syz.3.3212': attribute type 1 has an invalid length. [ 323.285357][T17618] lo speed is unknown, defaulting to 1000 [ 323.301184][T17599] lo speed is unknown, defaulting to 1000 [ 323.486519][T17618] lo speed is unknown, defaulting to 1000 [ 323.557828][T17652] netlink: 'syz.0.3215': attribute type 1 has an invalid length. [ 323.723036][T17659] netlink: 'syz.0.3217': attribute type 10 has an invalid length. [ 323.775908][T17659] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.785834][T17659] bond0: (slave team0): Enslaving as an active interface with an up link [ 323.807873][T17599] chnl_net:caif_netlink_parms(): no params data found [ 323.968177][T17599] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.978604][T17599] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.988252][T17599] bridge_slave_0: entered allmulticast mode [ 323.997138][T17599] bridge_slave_0: entered promiscuous mode [ 324.006069][T17599] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.014768][T17599] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.025871][T17599] bridge_slave_1: entered allmulticast mode [ 324.034354][T17599] bridge_slave_1: entered promiscuous mode [ 324.135397][T17685] netlink: 'syz.0.3222': attribute type 1 has an invalid length. [ 324.147375][T17685] netlink: 'syz.0.3222': attribute type 2 has an invalid length. [ 324.194048][T17599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.203176][ T5870] Bluetooth: hci0: command tx timeout [ 324.250853][T17599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.308453][T17697] vlan3: entered promiscuous mode [ 324.314343][T17697] vlan3: entered allmulticast mode [ 324.321698][T17697] hsr_slave_1: entered allmulticast mode [ 324.357773][T17697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3225'. [ 324.392802][T17703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3225'. [ 324.429491][T17599] team0: Port device team_slave_0 added [ 324.437654][T17709] IPVS: fo: FWM 3 0x00000003 - no destination available [ 324.445737][ T7180] IPVS: starting estimator thread 0... [ 324.525784][ T5870] Bluetooth: hci2: command tx timeout [ 324.542198][T17712] IPVS: using max 39 ests per chain, 93600 per kthread [ 324.647898][T17720] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3230'. [ 324.737880][T17599] team0: Port device team_slave_1 added [ 324.827270][T17599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.837741][T17599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.870891][T17599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.884960][T17599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.893602][T17599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.930599][T17599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.044645][T17599] hsr_slave_0: entered promiscuous mode [ 325.051281][T17599] hsr_slave_1: entered promiscuous mode [ 325.065912][T17599] debugfs: 'hsr0' already exists in 'hsr' [ 325.071690][T17599] Cannot create hsr debugfs directory [ 325.215094][T17742] syzkaller0: entered promiscuous mode [ 325.220747][T17742] syzkaller0: entered allmulticast mode [ 325.314038][T17744] lo speed is unknown, defaulting to 1000 [ 325.356362][T17752] netlink: 'syz.1.3237': attribute type 6 has an invalid length. [ 325.451132][T17749] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 325.471858][T17747] lo speed is unknown, defaulting to 1000 [ 325.536436][T17764] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 325.582952][T17774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3244'. [ 325.616410][T17774] mac80211_hwsim hwsim55 wlan0: entered allmulticast mode [ 325.662944][T17744] lo speed is unknown, defaulting to 1000 [ 325.814052][T17747] lo speed is unknown, defaulting to 1000 [ 325.831174][T17744] lo speed is unknown, defaulting to 1000 [ 325.854906][T17782] netlink: 'syz.4.3246': attribute type 1 has an invalid length. [ 325.927919][T17782] 8021q: adding VLAN 0 to HW filter on device bond1 [ 325.985165][T17747] lo speed is unknown, defaulting to 1000 [ 326.471037][T17599] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 326.497622][T17599] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 326.554775][T17599] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 326.584131][T17810] netlink: 'syz.3.3253': attribute type 27 has an invalid length. [ 326.591793][T17599] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 326.598934][T17810] netlink: 'syz.3.3253': attribute type 27 has an invalid length. [ 326.608082][ T5870] Bluetooth: hci2: command tx timeout [ 326.747388][T17824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3255'. [ 326.765514][T17824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.848905][T17836] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3257'. [ 326.871370][T17836] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3257'. [ 326.884589][T17836] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3257'. [ 326.930149][T17599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.972824][T17838] bond0: (slave rose0): Error: Device can not be enslaved while up [ 327.028043][T17838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3259'. [ 327.050390][T17844] tipc: Enabling of bearer rejected, failed to enable media [ 327.077997][T17844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3262'. [ 327.078992][T17599] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.111844][ T6103] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.119025][ T6103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.133469][ T6103] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.140612][ T6103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.196886][T17599] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.418445][T17599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.437344][T17870] syzkaller1: entered promiscuous mode [ 327.443318][T17870] syzkaller1: entered allmulticast mode [ 327.473904][T17599] veth0_vlan: entered promiscuous mode [ 327.486949][T17599] veth1_vlan: entered promiscuous mode [ 327.509450][T17599] veth0_macvtap: entered promiscuous mode [ 327.519130][T17599] veth1_macvtap: entered promiscuous mode [ 327.533772][T17599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.546858][T17599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.562806][ T6103] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.583410][ T6103] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.593796][ T6103] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.603456][ T6103] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.194178][ T6107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.205968][ T6107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.267578][ T6141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.289608][ T6141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.304894][T17883] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3270'. [ 328.349828][T17883] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3270'. [ 328.357803][T17891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3273'. [ 328.390266][T17891] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 328.408569][T17893] team0: Port device vxlan0 added [ 328.433487][ T6107] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.459750][ T6107] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.525628][ T6107] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.547027][ T6107] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.568391][T17908] pim6reg: entered allmulticast mode [ 328.683069][ T5870] Bluetooth: hci2: command tx timeout [ 328.871576][T17937] lo speed is unknown, defaulting to 1000 [ 328.980304][T17937] lo speed is unknown, defaulting to 1000 [ 329.067173][T17937] lo speed is unknown, defaulting to 1000 [ 329.618391][T17955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3291'. [ 329.631897][T17955] veth0_macvtap: left promiscuous mode [ 329.687044][T17959] siw: device registration error -23 [ 329.842766][T17966] bond2: entered promiscuous mode [ 329.847924][T17966] bond2: entered allmulticast mode [ 329.853718][T17966] 8021q: adding VLAN 0 to HW filter on device bond2 [ 330.053572][T17966] lo speed is unknown, defaulting to 1000 [ 330.288836][T17966] lo speed is unknown, defaulting to 1000 [ 330.401117][T17966] lo speed is unknown, defaulting to 1000 [ 330.762634][ T5870] Bluetooth: hci2: command tx timeout [ 330.828122][T17995] Bluetooth: MGMT ver 1.23 [ 330.929601][T18010] validate_nla: 2 callbacks suppressed [ 330.929620][T18010] netlink: 'syz.0.3307': attribute type 1 has an invalid length. [ 330.993284][T18006] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.056362][T18012] tipc: Started in network mode [ 331.064361][T18012] tipc: Node identity ac14140f, cluster identity 4711 [ 331.071426][T18012] tipc: New replicast peer: 255.255.255.255 [ 331.103226][T18012] tipc: Enabled bearer , priority 10 [ 331.251434][T18010] 8021q: adding VLAN 0 to HW filter on device bond1 [ 331.289754][T18006] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.315231][T18023] erspan0: entered allmulticast mode [ 331.409723][T18006] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.479361][T18006] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.606469][ T6126] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.645355][ T6126] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.713283][ T6103] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.733992][T18051] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 331.746756][ T6103] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.767777][T18053] netlink: 'syz.1.3318': attribute type 7 has an invalid length. [ 331.938225][T18068] __nla_validate_parse: 5 callbacks suppressed [ 331.938243][T18068] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3322'. [ 331.967782][T18068] openvswitch: netlink: Flow key attr not present in new flow. [ 332.187682][T18099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3328'. [ 332.223359][ T7862] tipc: Node number set to 2886997007 [ 332.229689][T18097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3330'. [ 332.275509][T18109] netlink: 'syz.0.3328': attribute type 4 has an invalid length. [ 332.322954][T18111] macsec0: entered allmulticast mode [ 332.330349][T18111] veth1_macvtap: entered allmulticast mode [ 332.348844][T18091] netlink: 'syz.0.3328': attribute type 4 has an invalid length. [ 332.353713][T18111] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 332.432425][T18091] IPVS: length: 24 != 55320 [ 332.481824][T18123] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3336'. [ 332.528274][T18123] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3336'. [ 332.716019][T18149] sctp: [Deprecated]: syz.0.3344 (pid 18149) Use of int in max_burst socket option. [ 332.716019][T18149] Use struct sctp_assoc_value instead [ 332.812033][T18162] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3348'. [ 332.823114][T18162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3348'. [ 332.833306][T18162] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.840760][T18162] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.933220][T18173] syzkaller1: entered promiscuous mode [ 332.938730][T18173] syzkaller1: entered allmulticast mode [ 332.977776][T18173] bond0: (slave team0): Releasing backup interface [ 332.991339][T18173] bridge_slave_0: left allmulticast mode [ 333.000797][T18173] bridge_slave_0: left promiscuous mode [ 333.008896][T18173] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.012984][T18181] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3350'. [ 333.030155][T18173] bridge_slave_1: left allmulticast mode [ 333.036418][T18173] bridge_slave_1: left promiscuous mode [ 333.042248][T18173] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.051692][T18173] bond0: (slave bond_slave_0): Releasing backup interface [ 333.061754][T18173] bond0: (slave bond_slave_1): Releasing backup interface [ 333.076588][T18173] team0: Port device team_slave_0 removed [ 333.090176][T18173] team0: Port device team_slave_1 removed [ 333.096904][T18173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.105674][T18173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.114368][T18173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.123464][T18173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.221210][T18188] netlink: 'syz.2.3355': attribute type 2 has an invalid length. [ 333.237170][T18188] : entered promiscuous mode [ 333.324478][T18197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3359'. [ 333.497131][T18220] netlink: 'syz.1.3366': attribute type 2 has an invalid length. [ 333.525481][T18220] k›*·]‘: entered promiscuous mode [ 333.607619][T18224] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 333.661771][T18221] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.680532][T18239] netlink: 'syz.4.3367': attribute type 1 has an invalid length. [ 333.757865][T18239] 8021q: adding VLAN 0 to HW filter on device bond2 [ 333.808170][T18250] ip6gretap0: entered promiscuous mode [ 333.817480][T18250] macsec1: entered promiscuous mode [ 333.823301][T18250] macsec1: entered allmulticast mode [ 333.829151][T18250] ip6gretap0: entered allmulticast mode [ 333.856437][T18223] bond2: (slave veth5): Enslaving as an active interface with a down link [ 333.886513][ T95] block nbd1: Possible stuck request ffff8880250ee000: control (read@0,1024B). Runtime 30 seconds [ 333.889000][T18239] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 333.903721][ T95] block nbd1: Possible stuck request ffff8880250ee1c0: control (read@1024,1024B). Runtime 30 seconds [ 333.910968][T18239] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 333.916288][ T95] block nbd1: Possible stuck request ffff8880250ee380: control (read@2048,1024B). Runtime 30 seconds [ 333.947708][ T95] block nbd1: Possible stuck request ffff8880250ee540: control (read@3072,1024B). Runtime 30 seconds [ 334.109307][T18265] syzkaller0: entered promiscuous mode [ 334.115977][T18265] syzkaller0: entered allmulticast mode [ 334.128744][T18264] lo speed is unknown, defaulting to 1000 [ 334.276351][T18287] netlink: 'syz.1.3382': attribute type 10 has an invalid length. [ 334.286887][T18280] gretap1: entered promiscuous mode [ 334.354008][T18280] netlink: 'syz.2.3381': attribute type 7 has an invalid length. [ 334.407036][T18264] lo speed is unknown, defaulting to 1000 [ 334.506712][T18285] lo speed is unknown, defaulting to 1000 [ 334.552975][T18294] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode [ 334.571459][T18302] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3386'. [ 334.583606][T18294] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 334.612903][T18264] lo speed is unknown, defaulting to 1000 [ 334.642621][T18302] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 334.829065][T18285] lo speed is unknown, defaulting to 1000 [ 334.976662][T18285] lo speed is unknown, defaulting to 1000 [ 335.209931][T18329] bond0: entered promiscuous mode [ 335.215962][T18329] bond_slave_0: entered promiscuous mode [ 335.221838][T18329] bond_slave_1: entered promiscuous mode [ 335.232826][T18329] batadv0: entered promiscuous mode [ 335.248421][T18329] debugfs: 'hsr1' already exists in 'hsr' [ 335.255466][T18329] Cannot create hsr debugfs directory [ 335.261883][T18329] hsr1: entered allmulticast mode [ 335.268180][T18329] bond0: entered allmulticast mode [ 335.274175][T18329] bond_slave_0: entered allmulticast mode [ 335.280075][T18329] bond_slave_1: entered allmulticast mode [ 335.286752][T18329] batadv0: entered allmulticast mode [ 335.293278][T18329] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 335.300880][T18329] bond0: left promiscuous mode [ 335.306155][T18329] bond_slave_0: left promiscuous mode [ 335.311760][T18329] bond_slave_1: left promiscuous mode [ 335.317947][T18329] batadv0: left promiscuous mode [ 336.314211][T18369] 8021q: VLANs not supported on ipvlan1 [ 336.351415][T18369] macsec1: entered promiscuous mode [ 336.367451][T18369] macsec1: entered allmulticast mode [ 336.385166][T18374] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.693219][T18393] lo speed is unknown, defaulting to 1000 [ 336.714470][T18402] netlink: 'syz.2.3410': attribute type 3 has an invalid length. [ 336.742028][T18404] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 336.750985][T18402] netlink: 'syz.2.3410': attribute type 3 has an invalid length. [ 336.936376][T18417] lo speed is unknown, defaulting to 1000 [ 336.972839][T18428] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.010652][T18428] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.031157][T18393] lo speed is unknown, defaulting to 1000 [ 337.047106][T18431] netlink: 'syz.4.3418': attribute type 3 has an invalid length. [ 337.120208][T18428] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.145331][T18428] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.278730][T18428] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.289705][T18428] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.316152][T18393] lo speed is unknown, defaulting to 1000 [ 337.317688][T18417] lo speed is unknown, defaulting to 1000 [ 337.351957][T18428] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.377968][T18428] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.491490][ T6107] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.520124][ T6107] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.543180][T18453] __nla_validate_parse: 8 callbacks suppressed [ 337.543201][T18453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3423'. [ 337.564664][ T6107] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.579662][ T6107] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.635858][ T6107] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.646590][T18456] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3424'. [ 337.658175][ T6107] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.688814][T18417] lo speed is unknown, defaulting to 1000 [ 338.218677][T18473] lo speed is unknown, defaulting to 1000 [ 338.219529][T18475] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3430'. [ 338.458843][T18473] lo speed is unknown, defaulting to 1000 [ 338.618845][T18494] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3433'. [ 338.619682][T18493] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.650189][T18473] lo speed is unknown, defaulting to 1000 [ 338.708138][T18493] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.816992][T18493] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.926877][T18493] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.069679][ T6139] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.116494][ T6103] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.137085][ T6103] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.206437][ T6139] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.227014][T18430] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.252331][T18430] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.297261][T18430] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.307330][T18430] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.366247][T18430] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.378170][T18430] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.439330][T18520] syzkaller1: entered promiscuous mode [ 339.445507][T18520] syzkaller1: entered allmulticast mode [ 339.598887][T18527] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20003 [ 339.636199][T18529] netlink: 'syz.1.3444': attribute type 1 has an invalid length. [ 339.646236][T18529] netlink: 'syz.1.3444': attribute type 3 has an invalid length. [ 339.658157][T18529] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3444'. [ 339.785564][T18536] smc: net device bond0 applied user defined pnetid SYZ2 [ 339.793413][T18536] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3447'. [ 339.811012][T18536] smc: removing net device bond0 with user defined pnetid SYZ2 [ 339.819155][T18536] bond0 (unregistering): Released all slaves [ 339.893088][T18538] tipc: Enabled bearer , priority 0 [ 339.919031][T18538] syzkaller0: entered promiscuous mode [ 339.925106][T18538] syzkaller0: entered allmulticast mode [ 339.939246][T18538] tipc: Resetting bearer [ 339.985290][T18538] tipc: Disabling bearer [ 340.251010][T18555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3453'. [ 340.275397][T18555] geneve2: entered promiscuous mode [ 340.311211][T18557] lo speed is unknown, defaulting to 1000 [ 340.414720][T18564] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3456'. [ 340.479917][T18557] lo speed is unknown, defaulting to 1000 [ 340.508044][T18567] lo speed is unknown, defaulting to 1000 [ 340.520360][T18572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3458'. [ 340.608580][T18577] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3459'. [ 340.715164][T18567] lo speed is unknown, defaulting to 1000 [ 340.722817][T18557] lo speed is unknown, defaulting to 1000 [ 340.775178][T18586] syzkaller1: entered promiscuous mode [ 340.785602][T18586] syzkaller1: entered allmulticast mode [ 340.873586][T18567] lo speed is unknown, defaulting to 1000 [ 341.561004][ T6104] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.598178][ T6104] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.669308][ T6139] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.679051][ T6139] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.687773][ T6139] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.696800][ T6139] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.729775][ T6104] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.881832][ T6104] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.208033][T18661] netlink: 'syz.0.3480': attribute type 6 has an invalid length. [ 342.234921][T18665] netlink: 'syz.3.3481': attribute type 1 has an invalid length. [ 342.256295][T18666] mac80211_hwsim hwsim55 wlan0: left allmulticast mode [ 342.288072][T18672] geneve2: entered promiscuous mode [ 342.299637][T18672] geneve2: entered allmulticast mode [ 342.451685][T18685] batadv_slave_0: entered promiscuous mode [ 342.469038][T18685] batadv_slave_0: entered allmulticast mode [ 342.575367][T18702] __nla_validate_parse: 9 callbacks suppressed [ 342.575384][T18702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3492'. [ 342.614479][T18706] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3494'. [ 342.633209][T18704] tipc: Started in network mode [ 342.638359][T18704] tipc: Node identity f69511981f81, cluster identity 4711 [ 342.649359][T18704] tipc: Enabled bearer , priority 0 [ 342.667225][T18712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.670244][T18704] syzkaller0: entered promiscuous mode [ 342.681997][T18704] syzkaller0: entered allmulticast mode [ 342.717085][T18704] tipc: Resetting bearer [ 342.720467][T18715] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3496'. [ 342.733763][T18703] tipc: Resetting bearer [ 342.741048][T18703] tipc: Disabling bearer [ 342.769752][T18716] pimreg: entered allmulticast mode [ 342.831980][T18724] netlink: 'syz.1.3499': attribute type 2 has an invalid length. [ 342.850566][T18724] : entered promiscuous mode [ 343.058103][T18739] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3503'. [ 343.134105][T18743] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3504'. [ 343.151191][T18743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3504'. [ 343.235735][T18747] netlink: zone id is out of range [ 343.244473][T18747] netlink: zone id is out of range [ 343.249704][T18747] netlink: zone id is out of range [ 343.251137][T18749] smc: net device bond0 applied user defined pnetid SYZ2 [ 343.256964][T18747] netlink: zone id is out of range [ 343.267816][T18747] netlink: zone id is out of range [ 343.273322][T18749] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3507'. [ 343.273404][T18747] netlink: zone id is out of range [ 343.287844][T18747] netlink: zone id is out of range [ 343.293677][T18747] netlink: zone id is out of range [ 343.299366][T18747] netlink: del zone limit has 4 unknown bytes [ 343.307748][T18749] smc: removing net device bond0 with user defined pnetid SYZ2 [ 343.317374][T18749] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.328111][T18749] bond_slave_0: left allmulticast mode [ 343.336103][T18749] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.347873][T18749] bond_slave_1: left allmulticast mode [ 343.354737][T18749] bond0 (unregistering): Released all slaves [ 343.620635][T18766] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3513'. [ 343.650608][T18768] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3514'. [ 343.663205][T18763] syzkaller1: entered promiscuous mode [ 343.668696][T18763] syzkaller1: entered allmulticast mode [ 343.683995][T18765] netlink: 'syz.3.3513': attribute type 10 has an invalid length. [ 343.885263][T18786] batadv_slave_1: entered promiscuous mode [ 343.925807][T18785] batadv_slave_1: left promiscuous mode [ 343.973344][T18792] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3522'. [ 344.062579][T18800] netlink: 'syz.3.3526': attribute type 1 has an invalid length. [ 344.076213][T18800] netlink: 'syz.3.3526': attribute type 2 has an invalid length. [ 344.092412][T18800] netlink: 'syz.3.3526': attribute type 1 has an invalid length. [ 344.241272][T18802] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.248802][T18802] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.391023][T18802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.405869][T18802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.551517][ T6107] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.583475][ T6107] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.659282][ T6107] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.701533][ T6107] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.718343][T18828] netlink: 'syz.3.3530': attribute type 1 has an invalid length. [ 344.791744][T18825] bond3: entered promiscuous mode [ 344.801260][T18825] bond3: entered allmulticast mode [ 344.816940][T18830] netlink: 'syz.1.3532': attribute type 7 has an invalid length. [ 344.830198][T18825] 8021q: adding VLAN 0 to HW filter on device bond3 [ 344.908230][T18825] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.939339][T18840] netlink: 'syz.0.3535': attribute type 10 has an invalid length. [ 344.997163][T18825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.015948][T18825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.124044][ T6139] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.157642][ T6139] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.184871][ T6139] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.217782][ T6139] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.263834][T18860] pimreg: entered allmulticast mode [ 345.283750][T18860] pimreg: left allmulticast mode [ 345.312715][T18865] tipc: New replicast peer: 255.255.255.255 [ 345.319078][T18865] tipc: Enabled bearer , priority 10 [ 345.400617][T18871] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 345.411757][T18871] team0: Port device netdevsim0 added [ 345.466736][T18863] lo speed is unknown, defaulting to 1000 [ 345.511955][T18876] lo speed is unknown, defaulting to 1000 [ 345.562964][T18863] lo speed is unknown, defaulting to 1000 [ 345.702781][T18876] lo speed is unknown, defaulting to 1000 [ 345.713012][T18863] lo speed is unknown, defaulting to 1000 [ 345.869976][T18876] lo speed is unknown, defaulting to 1000 [ 346.108224][T18888] syzkaller0: entered promiscuous mode [ 346.118753][T18888] syzkaller0: entered allmulticast mode [ 346.438079][T18904] bridge: RTM_NEWNEIGH with invalid ether address [ 346.760685][T18920] tipc: Enabled bearer , priority 0 [ 346.775529][T18920] syzkaller0: entered promiscuous mode [ 346.781152][T18920] syzkaller0: entered allmulticast mode [ 346.794423][T18916] lo speed is unknown, defaulting to 1000 [ 346.859813][T18918] tipc: Resetting bearer [ 346.882697][T18918] tipc: Disabling bearer [ 346.910291][T18927] pimreg: entered allmulticast mode [ 347.008433][T18916] lo speed is unknown, defaulting to 1000 [ 347.091111][T18916] lo speed is unknown, defaulting to 1000 [ 350.376367][ T5230] udevd[5230]: worker [11553] /devices/virtual/block/nbd0 is taking a long time [ 363.964739][ T95] block nbd1: Possible stuck request ffff8880250ee000: control (read@0,1024B). Runtime 60 seconds [ 363.976007][ T95] block nbd1: Possible stuck request ffff8880250ee1c0: control (read@1024,1024B). Runtime 60 seconds [ 363.987648][ T95] block nbd1: Possible stuck request ffff8880250ee380: control (read@2048,1024B). Runtime 60 seconds [ 363.999200][ T95] block nbd1: Possible stuck request ffff8880250ee540: control (read@3072,1024B). Runtime 60 seconds [ 365.402466][ T5230] udevd[5230]: worker [13387] /devices/virtual/block/nbd1 is taking a long time [ 383.802462][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 394.045183][ T95] block nbd1: Possible stuck request ffff8880250ee000: control (read@0,1024B). Runtime 90 seconds [ 394.056461][ T95] block nbd1: Possible stuck request ffff8880250ee1c0: control (read@1024,1024B). Runtime 90 seconds [ 394.067963][ T95] block nbd1: Possible stuck request ffff8880250ee380: control (read@2048,1024B). Runtime 90 seconds [ 394.079553][ T95] block nbd1: Possible stuck request ffff8880250ee540: control (read@3072,1024B). Runtime 90 seconds [ 423.596189][T18935] __nla_validate_parse: 14 callbacks suppressed [ 423.596211][T18935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3564'. [ 423.626815][T18938] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3565'. [ 423.647876][T18938] IPv6: sit1: Disabled Multicast RS [ 423.696318][T18942] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 423.703589][T18942] IPv6: NLM_F_CREATE should be set when creating new route [ 423.732322][T18944] siw: device registration error -23 [ 423.739177][T18944] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3569'. [ 423.753284][T18944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3569'. [ 423.769540][T18944] tipc: Enabled bearer , priority 0 [ 423.771393][T18946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3570'. [ 423.791278][T18946] validate_nla: 12 callbacks suppressed [ 423.791295][T18946] netlink: 'syz.0.3570': attribute type 1 has an invalid length. [ 423.807361][T18944] veth0_to_bridge: entered promiscuous mode [ 423.807403][T18946] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3570'. [ 423.826136][T18946] netlink: 'syz.0.3570': attribute type 1 has an invalid length. [ 423.835201][T18944] veth0_to_bridge: entered allmulticast mode [ 423.865348][T18943] tipc: Disabling bearer [ 423.880614][T18938] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.888198][T18938] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.908748][T18949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3571'. [ 423.917442][T18953] lo speed is unknown, defaulting to 1000 [ 423.948328][T18949] macvtap0: entered promiscuous mode [ 423.994658][T18949] mac80211_hwsim hwsim48 wlan1: entered promiscuous mode [ 424.111062][T18953] lo speed is unknown, defaulting to 1000 [ 424.128452][ T95] block nbd1: Possible stuck request ffff8880250ee000: control (read@0,1024B). Runtime 120 seconds [ 424.140872][ T95] block nbd1: Possible stuck request ffff8880250ee1c0: control (read@1024,1024B). Runtime 120 seconds [ 424.156367][ T95] block nbd1: Possible stuck request ffff8880250ee380: control (read@2048,1024B). Runtime 120 seconds [ 424.168938][ T95] block nbd1: Possible stuck request ffff8880250ee540: control (read@3072,1024B). Runtime 120 seconds [ 424.277757][T18953] lo speed is unknown, defaulting to 1000 [ 424.556224][T18994] netlink: 14212 bytes leftover after parsing attributes in process `syz.1.3582'. [ 424.970118][T19006] netlink: 'syz.0.3586': attribute type 12 has an invalid length. [ 424.979187][T19006] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.3586'. [ 425.021932][T19026] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3591'. [ 425.147993][T19032] netlink: 'syz.2.3594': attribute type 11 has an invalid length. [ 425.446751][T19059] dummy0: entered promiscuous mode [ 425.475474][T19059] dummy0: left promiscuous mode [ 425.706257][T19083] netlink: 'syz.1.3612': attribute type 29 has an invalid length. [ 425.734534][T19083] netlink: 'syz.1.3612': attribute type 13 has an invalid length. [ 425.747125][T19083] netlink: 'syz.1.3612': attribute type 29 has an invalid length. [ 425.756308][T19083] netlink: 'syz.1.3612': attribute type 29 has an invalid length. [ 425.770361][T19083] netlink: 'syz.1.3612': attribute type 29 has an invalid length. [ 425.780529][T19083] netlink: 'syz.1.3612': attribute type 29 has an invalid length. [ 425.792000][T19083] netlink: 'syz.1.3612': attribute type 29 has an invalid length. [ 426.299845][T19106] veth7: entered promiscuous mode [ 426.567233][T19124] bond3: (slave geneve2): Opening slave failed [ 426.618387][T19126] dummy0: entered promiscuous mode [ 426.624589][T19126] macsec1: entered promiscuous mode [ 426.630026][T19126] macsec1: entered allmulticast mode [ 426.652095][T19126] dummy0: entered allmulticast mode [ 426.708427][T19126] dummy0: left allmulticast mode [ 426.721320][T19126] dummy0: left promiscuous mode [ 426.823708][T19134] tipc: Enabled bearer , priority 0 [ 426.845145][ T5855] Bluetooth: hci1: command 0x0406 tx timeout [ 426.868304][T19132] tipc: Resetting bearer [ 426.876461][T19131] tipc: Disabling bearer [ 427.018571][T19141] veth1_macvtap: left allmulticast mode [ 427.043300][T19141] veth1_macvtap: left promiscuous mode [ 427.144119][T19150] syzkaller1: entered promiscuous mode [ 427.161845][T19150] syzkaller1: entered allmulticast mode [ 428.306340][T19203] smc: adding net device bond0 with user defined pnetid SYZ2 [ 428.318124][T19203] bond0: entered promiscuous mode [ 428.324498][T19203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.339293][T19203] batadv1: entered promiscuous mode [ 428.345176][T19203] batadv1: entered allmulticast mode [ 428.351757][T19203] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 428.364257][T19203] bond0: (slave batadv1): making interface the new active one [ 428.382905][T19203] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 428.616348][T19203] __nla_validate_parse: 13 callbacks suppressed [ 428.616368][T19203] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3647'. [ 428.908467][T19242] tipc: Enabling of bearer rejected, already enabled [ 428.993751][T19249] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3659'. [ 429.205692][T19258] team_slave_1: entered allmulticast mode [ 429.215241][T19256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3661'. [ 429.240911][T19258] net_ratelimit: 2 callbacks suppressed [ 429.240930][T19258] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 429.307565][T19265] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3664'. [ 429.404377][T19275] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3667'. [ 429.460857][T19275] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3667'. [ 429.547860][T19287] validate_nla: 8 callbacks suppressed [ 429.547877][T19287] netlink: 'syz.2.3669': attribute type 4 has an invalid length. [ 429.572678][T19293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3670'. [ 429.575255][T19287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3669'. [ 429.650801][T19287] syzkaller1: entered promiscuous mode [ 429.672556][T19287] syzkaller1: entered allmulticast mode [ 429.693302][T19301] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3674'. [ 429.778433][T19308] netlink: 'syz.4.3677': attribute type 12 has an invalid length. [ 429.961382][T19328] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3680'. [ 430.057444][T19337] netlink: 'syz.3.3682': attribute type 1 has an invalid length. [ 430.157651][T19348] 8021q: adding VLAN 0 to HW filter on device bond4 [ 430.209556][T19348] veth3: entered promiscuous mode [ 430.224950][T19350] wireguard0: entered promiscuous mode [ 430.230609][T19350] wireguard0: entered allmulticast mode [ 430.269525][T19337] lo: entered promiscuous mode [ 430.276171][T19337] tunl0: entered promiscuous mode [ 430.281436][T19337] gre0: entered promiscuous mode [ 430.290518][T19337] gretap0: entered promiscuous mode [ 430.296544][T19337] erspan0: entered promiscuous mode [ 430.301884][T19337] ip_vti0: entered promiscuous mode [ 430.307444][T19337] ip6_vti0: entered promiscuous mode [ 430.314196][T19337] sit0: entered promiscuous mode [ 430.319353][T19337] ip6tnl0: entered promiscuous mode [ 430.324955][T19337] ip6gre0: entered promiscuous mode [ 430.330337][T19337] syz_tun: entered promiscuous mode [ 430.336305][T19337] ip6gretap0: entered promiscuous mode [ 430.342213][T19337] bridge0: entered promiscuous mode [ 430.347705][T19337] vcan0: entered promiscuous mode [ 430.353256][T19337] bond0: entered promiscuous mode [ 430.358321][T19337] bond_slave_0: entered promiscuous mode [ 430.364753][T19337] bond_slave_1: entered promiscuous mode [ 430.370683][T19337] team0: entered promiscuous mode [ 430.376053][T19337] team_slave_0: entered promiscuous mode [ 430.382241][T19337] team_slave_1: entered promiscuous mode [ 430.388496][T19337] dummy0: entered promiscuous mode [ 430.393915][T19337] nlmon0: entered promiscuous mode [ 430.399309][T19337] caif0: entered promiscuous mode [ 430.404633][T19337] batadv0: entered promiscuous mode [ 430.410113][T19337] vxcan0: entered promiscuous mode [ 430.415442][T19337] vxcan1: entered promiscuous mode [ 430.420808][T19337] veth0: entered promiscuous mode [ 430.426087][T19337] veth1: entered promiscuous mode [ 430.431642][T19337] wg0: entered promiscuous mode [ 430.437054][T19337] wg1: entered promiscuous mode [ 430.442442][T19337] wg2: entered promiscuous mode [ 430.452477][T19337] veth0_to_bridge: left allmulticast mode [ 430.465000][T19337] bridge_slave_0: left allmulticast mode [ 430.470953][T19337] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.484576][T19337] veth1_to_bridge: entered promiscuous mode [ 430.490753][T19337] bridge_slave_1: left allmulticast mode [ 430.497561][T19337] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.508217][T19337] veth0_to_bond: entered promiscuous mode [ 430.519844][T19337] bond0: (slave bond_slave_0): Releasing backup interface [ 430.529756][T19337] veth1_to_bond: entered promiscuous mode [ 430.540627][T19337] bond0: (slave bond_slave_1): Releasing backup interface [ 430.551336][T19337] veth0_to_team: entered promiscuous mode [ 430.559412][T19337] team0: Port device team_slave_0 removed [ 430.566670][T19337] veth1_to_team: entered promiscuous mode [ 430.573981][T19337] team0: Port device team_slave_1 removed [ 430.580008][T19337] veth0_to_batadv: entered promiscuous mode [ 430.586362][T19337] batadv_slave_0: entered promiscuous mode [ 430.592558][T19337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.600340][T19337] veth1_to_batadv: entered promiscuous mode [ 430.606705][T19337] batadv_slave_1: entered promiscuous mode [ 430.613157][T19337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.620962][T19337] xfrm0: entered promiscuous mode [ 430.626174][T19337] veth0_to_hsr: entered promiscuous mode [ 430.632007][T19337] veth1_to_hsr: entered promiscuous mode [ 430.638894][T19337] hsr0: entered promiscuous mode [ 430.644365][T19337] veth1_virt_wifi: entered promiscuous mode [ 430.650473][T19337] veth0_virt_wifi: entered promiscuous mode [ 430.657164][T19337] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 430.666579][T19337] vlan0: entered promiscuous mode [ 430.671784][T19337] vlan1: entered promiscuous mode [ 430.677528][T19337] macvlan0: entered promiscuous mode [ 430.685014][T19337] macvlan1: entered promiscuous mode [ 430.690412][T19337] ipvlan0: entered promiscuous mode [ 430.696838][T19337] ipvlan1: entered promiscuous mode [ 430.703184][T19337] macvtap0: entered promiscuous mode [ 430.708914][T19337] macsec0: entered promiscuous mode [ 430.714876][T19337] geneve0: entered promiscuous mode [ 430.720262][T19337] geneve1: entered promiscuous mode [ 430.726119][T19337] mac80211_hwsim hwsim55 wlan0: entered promiscuous mode [ 430.733898][T19337] mac80211_hwsim hwsim56 wlan1: entered promiscuous mode [ 430.741096][T19337] bond1: entered promiscuous mode [ 430.746631][T19337] vxlan0: entered promiscuous mode [ 430.751904][T19337] bond2: left allmulticast mode [ 430.757494][T19337] netdevsim netdevsim3 eth0: entered promiscuous mode [ 430.764937][T19337] netdevsim netdevsim3 eth1: entered promiscuous mode [ 430.771832][T19337] netdevsim netdevsim3 eth2: entered promiscuous mode [ 430.779452][T19337] netdevsim netdevsim3 eth3: entered promiscuous mode [ 430.787211][T19337] pimreg: entered promiscuous mode [ 430.793010][T19337] mac80211_hwsim hwsim62 wlan2: entered promiscuous mode [ 430.800166][T19337] bond3: left allmulticast mode [ 430.805796][T19337] gre1: entered promiscuous mode [ 430.813165][T19337] bond4: entered promiscuous mode [ 430.818889][T19337] veth2: entered promiscuous mode [ 430.857310][T19358] bridge_slave_1: left allmulticast mode [ 430.877344][T19358] bridge_slave_1: left promiscuous mode [ 430.884508][T19358] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.895689][T19358] bridge_slave_0: left allmulticast mode [ 430.901450][T19358] bridge_slave_0: left promiscuous mode [ 430.909255][T19358] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.122266][T19376] netlink: 'syz.0.3692': attribute type 6 has an invalid length. [ 431.138151][T19379] netlink: 'syz.0.3692': attribute type 6 has an invalid length. [ 431.298324][T19384] sctp: [Deprecated]: syz.2.3694 (pid 19384) Use of struct sctp_assoc_value in delayed_ack socket option. [ 431.298324][T19384] Use struct sctp_sack_info instead [ 431.963050][ T5855] Bluetooth: hci5: command 0x0406 tx timeout [ 432.055192][T19449] lo speed is unknown, defaulting to 1000 [ 432.401046][T19449] lo speed is unknown, defaulting to 1000 [ 432.664592][T19449] lo speed is unknown, defaulting to 1000 [ 432.871722][T19499] lo speed is unknown, defaulting to 1000 [ 432.987448][T19509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.040684][T19499] lo speed is unknown, defaulting to 1000 [ 433.110208][T19521] netlink: 'syz.3.3736': attribute type 12 has an invalid length. [ 433.135976][T19521] netlink: 'syz.3.3736': attribute type 12 has an invalid length. [ 433.145602][T19521] netlink: 'syz.3.3736': attribute type 12 has an invalid length. [ 433.168032][T19521] netlink: 'syz.3.3736': attribute type 12 has an invalid length. [ 433.208436][T19521] netlink: 'syz.3.3736': attribute type 12 has an invalid length. [ 433.226934][T19499] lo speed is unknown, defaulting to 1000 [ 433.746410][T19553] IPVS: set_ctl: invalid protocol: 94 172.20.20.34:20001 [ 433.773832][T19550] lo speed is unknown, defaulting to 1000 [ 433.799785][T19555] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.968868][T19562] tipc: Enabling of bearer rejected, failed to enable media [ 434.035465][T19568] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 434.045199][T19568] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 434.258269][T19550] lo speed is unknown, defaulting to 1000 [ 434.339523][T19592] __nla_validate_parse: 13 callbacks suppressed [ 434.339543][T19592] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3755'. [ 434.461657][T19600] lo speed is unknown, defaulting to 1000 [ 434.539763][T19550] lo speed is unknown, defaulting to 1000 [ 434.745220][T19600] lo speed is unknown, defaulting to 1000 [ 434.810026][T19612] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3760'. [ 435.071310][T19600] lo speed is unknown, defaulting to 1000 [ 435.107065][T19626] validate_nla: 63 callbacks suppressed [ 435.107084][T19626] netlink: 'syz.4.3764': attribute type 1 has an invalid length. [ 435.198057][T19629] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.221793][T19629] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.449376][T19638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3766'. [ 435.463973][T19626] smc: adding net device bond0 with user defined pnetid SYZ2 [ 435.498932][T19638] macvlan5: entered promiscuous mode [ 435.543386][T19638] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 435.584217][T19630] 8021q: adding VLAN 0 to HW filter on device bond4 [ 435.595629][T19630] bond0: (slave bond4): making interface the new active one [ 435.604143][T19630] bond0: (slave bond4): Enslaving as an active interface with an up link [ 435.614856][T19629] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.634934][T19629] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.646558][ T5862] Bluetooth: hci2: command 0x0405 tx timeout [ 435.677331][T19643] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20001 [ 435.799375][T19629] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.814065][T19629] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.055416][T19629] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.103795][T19662] netlink: 308 bytes leftover after parsing attributes in process `syz.4.3771'. [ 436.113739][T19629] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.124853][T19662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3771'. [ 436.144763][T19662] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 436.275375][ T62] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.288084][ T62] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.298262][ T62] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.310427][ T62] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.381219][ T6118] tipc: Resetting bearer [ 436.529540][T19684] netlink: 'syz.4.3777': attribute type 1 has an invalid length. [ 436.599844][T19684] netlink: 'syz.4.3777': attribute type 1 has an invalid length. [ 436.785585][ T6118] bond7 (unregistering): (slave gretap1): Releasing active interface [ 436.879206][T19703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3780'. [ 437.084152][ T5855] Bluetooth: hci4: command 0x0406 tx timeout [ 437.320197][T19728] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3787'. [ 437.333271][T19728] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3787'. [ 437.347902][T19728] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3787'. [ 437.358510][T19729] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3787'. [ 437.394203][ T6118] tipc: Disabling bearer [ 438.109814][ T6118] bond0 (unregistering): Released all slaves [ 438.118807][ T6118] bond1 (unregistering): Released all slaves [ 438.129989][ T6118] bond2 (unregistering): Released all slaves [ 438.139637][ T6118] bond3 (unregistering): Released all slaves [ 438.150120][ T6118] bond4 (unregistering): Released all slaves [ 438.166739][ T6118] bond5 (unregistering): (slave veth3): Releasing active interface [ 438.176004][ T6118] bond5 (unregistering): Released all slaves [ 438.190676][ T6118] bond6 (unregistering): Released all slaves [ 438.200113][ T6118] bond7 (unregistering): Released all slaves [ 438.213117][ T6118] bond8 (unregistering): Released all slaves [ 438.226493][ T6118] bond9 (unregistering): Released all slaves [ 438.239549][ T6118] bond10 (unregistering): Released all slaves [ 438.281351][T19707] bridge0: port 1(veth7) entered blocking state [ 438.288581][T19707] bridge0: port 1(veth7) entered disabled state [ 438.296630][T19707] veth7: entered allmulticast mode [ 438.304956][T19707] veth7: entered promiscuous mode [ 438.316410][T19708] bridge0: port 2(veth0_to_bond) entered blocking state [ 438.324382][T19708] bridge0: port 2(veth0_to_bond) entered disabled state [ 438.331566][T19708] veth0_to_bond: entered allmulticast mode [ 438.340440][T19708] veth0_to_bond: entered promiscuous mode [ 438.353056][T19709] vlan2: entered allmulticast mode [ 438.358253][T19709] veth1: entered allmulticast mode [ 438.427565][ T6139] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.438263][ T6139] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.451928][T19682] lo speed is unknown, defaulting to 1000 [ 438.462558][ T6139] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.470769][ T6139] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.493149][ T6118] : left promiscuous mode [ 438.528354][T19744] bond0: left promiscuous mode [ 438.538676][T19739] lo speed is unknown, defaulting to 1000 [ 438.549410][ T6118] tipc: Left network mode [ 438.573919][T19748] syzkaller0: entered promiscuous mode [ 438.589039][T19748] syzkaller0: entered allmulticast mode [ 438.608189][T19748] tipc: Started in network mode [ 438.621855][T19748] tipc: Node identity 66a6d2b14408, cluster identity 4711 [ 438.635443][T19748] tipc: Enabled bearer , priority 0 [ 438.669866][T19747] tipc: Resetting bearer [ 438.689003][T19747] tipc: Disabling bearer [ 438.714968][T19755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.734089][T19755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.769419][T19682] lo speed is unknown, defaulting to 1000 [ 438.883197][ T6118] mac80211_hwsim hwsim5 wlan1 (unregistering): left promiscuous mode [ 438.974632][T19763] lo speed is unknown, defaulting to 1000 [ 438.990140][T19682] lo speed is unknown, defaulting to 1000 [ 438.990140][T19739] lo speed is unknown, defaulting to 1000 [ 439.158903][T19739] lo speed is unknown, defaulting to 1000 [ 439.201981][T19763] lo speed is unknown, defaulting to 1000 [ 439.437348][T19763] lo speed is unknown, defaulting to 1000 [ 439.520086][T19780] __nla_validate_parse: 6 callbacks suppressed [ 439.520103][T19780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3800'. [ 439.657261][ T6118] hsr_slave_0: left promiscuous mode [ 439.685627][ T6118] hsr_slave_1: left promiscuous mode [ 439.983867][ T6118] team0 (unregistering): Port device 0! removed [ 440.050950][T19786] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.184524][T19786] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.327438][T19786] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.435287][T19786] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.534958][T19786] ------------[ cut here ]------------ [ 440.540597][T19786] WARNING: CPU: 1 PID: 19786 at mm/page_alloc.c:5124 __alloc_frozen_pages_noprof+0x2c8/0x370 [ 440.550842][T19786] Modules linked in: [ 440.554813][T19786] CPU: 1 UID: 0 PID: 19786 Comm: syz.0.3802 Not tainted syzkaller #0 PREEMPT(full) [ 440.564228][T19786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 440.574534][T19786] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 440.581147][T19786] Code: 74 10 4c 89 e7 89 54 24 0c e8 c4 1d 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 fa 73 77 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 440.600847][T19786] RSP: 0018:ffffc9000481e940 EFLAGS: 00010246 [ 440.606979][T19786] RAX: ffffc9000481e900 RBX: 0000000000000017 RCX: 0000000000000000 [ 440.615064][T19786] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000481e9a8 [ 440.623276][T19786] RBP: ffffc9000481ea28 R08: ffffc9000481e9a7 R09: 0000000000000000 [ 440.631450][T19786] R10: ffffc9000481e980 R11: fffff52000903d35 R12: 0000000000000000 [ 440.639840][T19786] R13: 1ffff92000903d2c R14: 0000000000040920 R15: dffffc0000000000 [ 440.647942][T19786] FS: 00007f3f707f66c0(0000) GS:ffff888125d1a000(0000) knlGS:0000000000000000 [ 440.656941][T19786] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 440.663573][T19786] CR2: 0000200000001e40 CR3: 000000006a6e4000 CR4: 00000000003526f0 [ 440.671563][T19786] Call Trace: [ 440.674899][T19786] [ 440.677838][T19786] ? __sock_sendmsg+0x21c/0x270 [ 440.682761][T19786] ? ___sys_sendmsg+0x21f/0x2a0 [ 440.687634][T19786] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 440.694088][T19786] ? policy_nodemask+0x28b/0x720 [ 440.699047][T19786] alloc_pages_mpol+0x232/0x4a0 [ 440.703972][T19786] ___kmalloc_large_node+0x5f/0x1b0 [ 440.709195][T19786] __kmalloc_large_node_noprof+0x18/0x90 [ 440.715003][T19786] __kmalloc_noprof+0x36f/0x4f0 [ 440.719316][T19795] lo speed is unknown, defaulting to 1000 [ 440.719878][T19786] ? nsim_fib_event_nb+0x295/0x1080 [ 440.719904][T19786] nsim_fib_event_nb+0x295/0x1080 [ 440.719924][T19786] ? netlink_rcv_skb+0x205/0x470 [ 440.719951][T19786] call_fib_notifier+0x42/0x80 [ 440.719970][T19786] fib6_node_dump+0x21d/0x2b0 [ 440.719993][T19786] ? __pfx_fib6_node_dump+0x10/0x10 [ 440.720022][T19786] ? rcu_is_watching+0x15/0xb0 [ 440.720044][T19786] fib6_walk_continue+0x678/0x910 [ 440.720075][T19786] fib6_walk+0x149/0x290 [ 440.720099][T19786] fib6_tables_dump+0x1c9/0x2b0 [ 440.720123][T19786] ? __pfx_fib6_tables_dump+0x10/0x10 [ 440.720148][T19786] ? net_generic+0x1e/0x240 [ 440.784790][T19786] register_fib_notifier+0x184/0x360 [ 440.790100][T19786] ? __pfx_nsim_fib_dump_inconsistent+0x10/0x10 [ 440.796419][T19786] ? register_fib_notifier+0x6a/0x360 [ 440.801811][T19786] nsim_fib_create+0x847/0x9d0 [ 440.806648][T19786] ? __pfx_nsim_fib_create+0x10/0x10 [ 440.811963][T19786] nsim_dev_reload_up+0x36b/0x780 [ 440.817072][T19786] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 440.822683][T19786] devlink_reload+0x4e9/0x8d0 [ 440.827648][T19786] ? rcu_is_watching+0x15/0xb0 [ 440.832469][T19786] ? __pfx_devlink_reload+0x10/0x10 [ 440.837691][T19786] ? devlink_resources_validate+0xa7/0xd0 [ 440.843489][T19786] ? devlink_resources_validate+0xa7/0xd0 [ 440.849227][T19786] devlink_nl_reload_doit+0xb35/0xd50 [ 440.854673][T19786] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 440.860584][T19786] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 440.866996][T19786] genl_family_rcv_msg_doit+0x212/0x300 [ 440.872598][T19786] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 440.878786][T19786] ? bpf_lsm_capable+0x9/0x20 [ 440.883523][T19786] ? security_capable+0x7e/0x2e0 [ 440.888483][T19786] genl_rcv_msg+0x60e/0x790 [ 440.893113][T19786] ? __pfx_genl_rcv_msg+0x10/0x10 [ 440.898154][T19786] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 440.904746][T19786] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 440.910655][T19786] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 440.917352][T19786] ? __asan_memcpy+0x40/0x70 [ 440.921955][T19786] ? __pfx_ref_tracker_free+0x10/0x10 [ 440.927403][T19786] netlink_rcv_skb+0x205/0x470 [ 440.932228][T19786] ? __pfx_genl_rcv_msg+0x10/0x10 [ 440.937273][T19786] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 440.942672][T19786] ? lock_release+0x4b/0x3e0 [ 440.947371][T19786] ? down_read+0x1ad/0x2e0 [ 440.951778][T19786] genl_rcv+0x28/0x40 [ 440.955984][T19786] netlink_unicast+0x82f/0x9e0 [ 440.960779][T19786] ? __pfx_netlink_unicast+0x10/0x10 [ 440.966130][T19786] ? netlink_sendmsg+0x642/0xb30 [ 440.971070][T19786] ? skb_put+0x11b/0x210 [ 440.975358][T19786] netlink_sendmsg+0x805/0xb30 [ 440.980212][T19786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.985537][T19786] ? futex_unqueue+0x22/0x240 [ 440.990238][T19786] ? aa_sock_msg_perm+0xf1/0x1d0 [ 440.995211][T19786] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 441.000515][T19786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.005846][T19786] __sock_sendmsg+0x21c/0x270 [ 441.010544][T19786] ____sys_sendmsg+0x505/0x830 [ 441.015349][T19786] ? __pfx_____sys_sendmsg+0x10/0x10 [ 441.020647][T19786] ? import_iovec+0x74/0xa0 [ 441.025192][T19786] ___sys_sendmsg+0x21f/0x2a0 [ 441.029879][T19786] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.035210][T19786] ? futex_wait+0x285/0x360 [ 441.039745][T19786] ? __fget_files+0x2a/0x420 [ 441.044486][T19786] ? __fget_files+0x3a0/0x420 [ 441.049191][T19786] __x64_sys_sendmsg+0x19b/0x260 [ 441.054215][T19786] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 441.059695][T19786] ? rcu_is_watching+0x15/0xb0 [ 441.064501][T19786] ? rcu_is_watching+0x15/0xb0 [ 441.069281][T19786] do_syscall_64+0xfa/0x3b0 [ 441.073818][T19786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.079890][T19786] ? clear_bhb_loop+0x60/0xb0 [ 441.084697][T19786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.090670][T19786] RIP: 0033:0x7f3f7258ebe9 [ 441.095155][T19786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.114882][T19786] RSP: 002b:00007f3f707f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.123403][T19786] RAX: ffffffffffffffda RBX: 00007f3f727b5fa0 RCX: 00007f3f7258ebe9 [ 441.131391][T19786] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 441.139487][T19786] RBP: 00007f3f72611e19 R08: 0000000000000000 R09: 0000000000000000 [ 441.147588][T19786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.155662][T19786] R13: 00007f3f727b6038 R14: 00007f3f727b5fa0 R15: 00007ffea1756758 [ 441.163677][T19786] [ 441.166721][T19786] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 441.174092][T19786] CPU: 1 UID: 0 PID: 19786 Comm: syz.0.3802 Not tainted syzkaller #0 PREEMPT(full) [ 441.183468][T19786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 441.193736][T19786] Call Trace: [ 441.197011][T19786] [ 441.199937][T19786] dump_stack_lvl+0x99/0x250 [ 441.204556][T19786] ? __asan_memcpy+0x40/0x70 [ 441.209236][T19786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.214446][T19786] ? __pfx__printk+0x10/0x10 [ 441.219034][T19786] vpanic+0x281/0x750 [ 441.223029][T19786] ? __pfx__printk+0x10/0x10 [ 441.227653][T19786] ? __pfx_vpanic+0x10/0x10 [ 441.232151][T19786] ? is_bpf_text_address+0x26/0x2b0 [ 441.237391][T19786] panic+0xb9/0xc0 [ 441.241200][T19786] ? __pfx_panic+0x10/0x10 [ 441.245732][T19786] __warn+0x31b/0x4b0 [ 441.249812][T19786] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 441.255896][T19786] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 441.261879][T19786] report_bug+0x2be/0x4f0 [ 441.266223][T19786] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 441.272209][T19786] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 441.278380][T19786] ? __alloc_frozen_pages_noprof+0x2ca/0x370 [ 441.284356][T19786] handle_bug+0x84/0x160 [ 441.288590][T19786] exc_invalid_op+0x1a/0x50 [ 441.293113][T19786] asm_exc_invalid_op+0x1a/0x20 [ 441.297955][T19786] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 441.306721][T19786] Code: 74 10 4c 89 e7 89 54 24 0c e8 c4 1d 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 fa 73 77 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 441.326411][T19786] RSP: 0018:ffffc9000481e940 EFLAGS: 00010246 [ 441.332493][T19786] RAX: ffffc9000481e900 RBX: 0000000000000017 RCX: 0000000000000000 [ 441.340462][T19786] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000481e9a8 [ 441.348425][T19786] RBP: ffffc9000481ea28 R08: ffffc9000481e9a7 R09: 0000000000000000 [ 441.356404][T19786] R10: ffffc9000481e980 R11: fffff52000903d35 R12: 0000000000000000 [ 441.364893][T19786] R13: 1ffff92000903d2c R14: 0000000000040920 R15: dffffc0000000000 [ 441.372879][T19786] ? __sock_sendmsg+0x21c/0x270 [ 441.377752][T19786] ? ___sys_sendmsg+0x21f/0x2a0 [ 441.382633][T19786] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 441.388958][T19786] ? policy_nodemask+0x28b/0x720 [ 441.393982][T19786] alloc_pages_mpol+0x232/0x4a0 [ 441.398879][T19786] ___kmalloc_large_node+0x5f/0x1b0 [ 441.404086][T19786] __kmalloc_large_node_noprof+0x18/0x90 [ 441.409726][T19786] __kmalloc_noprof+0x36f/0x4f0 [ 441.414639][T19786] ? nsim_fib_event_nb+0x295/0x1080 [ 441.419944][T19786] nsim_fib_event_nb+0x295/0x1080 [ 441.424973][T19786] ? netlink_rcv_skb+0x205/0x470 [ 441.430032][T19786] call_fib_notifier+0x42/0x80 [ 441.434788][T19786] fib6_node_dump+0x21d/0x2b0 [ 441.439462][T19786] ? __pfx_fib6_node_dump+0x10/0x10 [ 441.444660][T19786] ? rcu_is_watching+0x15/0xb0 [ 441.449423][T19786] fib6_walk_continue+0x678/0x910 [ 441.454505][T19786] fib6_walk+0x149/0x290 [ 441.458769][T19786] fib6_tables_dump+0x1c9/0x2b0 [ 441.463622][T19786] ? __pfx_fib6_tables_dump+0x10/0x10 [ 441.468992][T19786] ? net_generic+0x1e/0x240 [ 441.473493][T19786] register_fib_notifier+0x184/0x360 [ 441.478789][T19786] ? __pfx_nsim_fib_dump_inconsistent+0x10/0x10 [ 441.485124][T19786] ? register_fib_notifier+0x6a/0x360 [ 441.490489][T19786] nsim_fib_create+0x847/0x9d0 [ 441.495278][T19786] ? __pfx_nsim_fib_create+0x10/0x10 [ 441.500662][T19786] nsim_dev_reload_up+0x36b/0x780 [ 441.505773][T19786] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 441.511450][T19786] devlink_reload+0x4e9/0x8d0 [ 441.516122][T19786] ? rcu_is_watching+0x15/0xb0 [ 441.520878][T19786] ? __pfx_devlink_reload+0x10/0x10 [ 441.526157][T19786] ? devlink_resources_validate+0xa7/0xd0 [ 441.531873][T19786] ? devlink_resources_validate+0xa7/0xd0 [ 441.537673][T19786] devlink_nl_reload_doit+0xb35/0xd50 [ 441.543122][T19786] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 441.549018][T19786] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 441.555340][T19786] genl_family_rcv_msg_doit+0x212/0x300 [ 441.560886][T19786] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 441.566949][T19786] ? bpf_lsm_capable+0x9/0x20 [ 441.571626][T19786] ? security_capable+0x7e/0x2e0 [ 441.576763][T19786] genl_rcv_msg+0x60e/0x790 [ 441.581495][T19786] ? __pfx_genl_rcv_msg+0x10/0x10 [ 441.586817][T19786] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 441.593228][T19786] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 441.599239][T19786] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 441.605759][T19786] ? __asan_memcpy+0x40/0x70 [ 441.610463][T19786] ? __pfx_ref_tracker_free+0x10/0x10 [ 441.615829][T19786] netlink_rcv_skb+0x205/0x470 [ 441.620708][T19786] ? __pfx_genl_rcv_msg+0x10/0x10 [ 441.625734][T19786] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 441.631230][T19786] ? lock_release+0x4b/0x3e0 [ 441.635825][T19786] ? down_read+0x1ad/0x2e0 [ 441.640234][T19786] genl_rcv+0x28/0x40 [ 441.644230][T19786] netlink_unicast+0x82f/0x9e0 [ 441.649006][T19786] ? __pfx_netlink_unicast+0x10/0x10 [ 441.654577][T19786] ? netlink_sendmsg+0x642/0xb30 [ 441.659537][T19786] ? skb_put+0x11b/0x210 [ 441.663770][T19786] netlink_sendmsg+0x805/0xb30 [ 441.668648][T19786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.673932][T19786] ? futex_unqueue+0x22/0x240 [ 441.678662][T19786] ? aa_sock_msg_perm+0xf1/0x1d0 [ 441.683604][T19786] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 441.688908][T19786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.694199][T19786] __sock_sendmsg+0x21c/0x270 [ 441.698881][T19786] ____sys_sendmsg+0x505/0x830 [ 441.703641][T19786] ? __pfx_____sys_sendmsg+0x10/0x10 [ 441.708916][T19786] ? import_iovec+0x74/0xa0 [ 441.713407][T19786] ___sys_sendmsg+0x21f/0x2a0 [ 441.718072][T19786] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.723262][T19786] ? futex_wait+0x285/0x360 [ 441.727785][T19786] ? __fget_files+0x2a/0x420 [ 441.732363][T19786] ? __fget_files+0x3a0/0x420 [ 441.737024][T19786] __x64_sys_sendmsg+0x19b/0x260 [ 441.741980][T19786] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 441.747622][T19786] ? rcu_is_watching+0x15/0xb0 [ 441.752408][T19786] ? rcu_is_watching+0x15/0xb0 [ 441.757166][T19786] do_syscall_64+0xfa/0x3b0 [ 441.761664][T19786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.769470][T19786] ? clear_bhb_loop+0x60/0xb0 [ 441.774189][T19786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.780175][T19786] RIP: 0033:0x7f3f7258ebe9 [ 441.784631][T19786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.804406][T19786] RSP: 002b:00007f3f707f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.812837][T19786] RAX: ffffffffffffffda RBX: 00007f3f727b5fa0 RCX: 00007f3f7258ebe9 [ 441.820808][T19786] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 441.828794][T19786] RBP: 00007f3f72611e19 R08: 0000000000000000 R09: 0000000000000000 [ 441.836843][T19786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.844912][T19786] R13: 00007f3f727b6038 R14: 00007f3f727b5fa0 R15: 00007ffea1756758 [ 441.852881][T19786] [ 441.856167][T19786] Kernel Offset: disabled [ 441.860482][T19786] Rebooting in 86400 seconds..