last executing test programs: 3.710277432s ago: executing program 3 (id=4349): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x403, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}]}}}]}, 0x38}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f02) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x8a, &(0x7f00000000c0), 0x4) socket$inet6(0x2d, 0x806, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010002ab787be80000", @ANYRES32=r5, @ANYBLOB="93000400000000001c0012800b0001006d616373656300000c00028005000f000d"], 0x3c}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000100000000000000000008510000006000000180000", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0xa, 0xe2, &(0x7f0000000180)=""/226, 0x0, 0x8}, 0x94) 3.708323106s ago: executing program 0 (id=4350): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000fa0000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006648000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000040)=0x10, 0x4) close(r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="01c0f42bde27d17b4b39757428000000000801010000000000000000060000000600a80538510000"], 0x28}, 0x1, 0x0, 0x0, 0xc010}, 0x840) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4804000010004b040000007c1a01000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000018100200140012800b00010067656e6576650000040002801400030067656e65766530000000000000000000"], 0x48}}, 0x80) r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r8, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) sendmsg$BATADV_CMD_GET_HARDIF(r9, 0x0, 0x8800) sendfile(r8, r9, 0x0, 0xffffffff000) listen(r8, 0x4) r10 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f00000001200039f2ca07881a629fdd4535721d9fce788994de5e59b79b3c53514db8453831488e6280df122343c93a77f4b7b2f4963c7fedefb1c30922f232978b151b4928afcb8f33f1a228903ca96"], 0xf0}, 0x1, 0x4100}, 0x20000080) socket$inet_tcp(0x2, 0x1, 0x0) 3.436686446s ago: executing program 4 (id=4354): unshare(0x6a040000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='rxrpc_conn\x00', r0, 0x0, 0x2}, 0x18) 2.831701863s ago: executing program 3 (id=4358): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x3}) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, 0x0, 0x0) (async) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000080)=0x7, 0x4) (async, rerun: 64) r3 = socket(0x15, 0x4, 0x4) (rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xd0, r5, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xfffffffe}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4bb}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x4}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4040044}, 0x200008c0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_emit_ethernet(0x6a, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) (rerun: 64) socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x2d, 0x9, 0x70bd27, 0x0, {0x5}, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@loopback={0x200000000000000}}]}, 0x28}}, 0x84) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0x32}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0xff24, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0xfa665a81a6d02b4d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) (async, rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) 2.734578598s ago: executing program 1 (id=4359): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24000800, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @local}, 0x14) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000d40)={0x10, 0x23, 0x100, 0x70bd26, 0x25dfdbfc}, 0x10}, {&(0x7f0000000f80)={0x10, 0x42, 0x800, 0x70bd2d, 0x25dfdbff}, 0x10}], 0x2, 0x0, 0x0, 0x10}, 0x40000090) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000300)={r1, 0x3, 0x80000000, 0xfffffffeffffffff}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r4, 0xf504, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x0) sendto$packet(r3, &(0x7f0000000580)="44c394f305916c4516999da20800", 0x36, 0x0, &(0x7f0000000440)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x5}]}}}]}, 0x3c}}, 0x80) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000bf03000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='percpu_free_percpu\x00', r8}, 0x10) 2.71750061s ago: executing program 4 (id=4360): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000400070001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) r3 = socket$netlink(0x10, 0x3, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_lsm={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="660a00fcba0080000000850053c600", @ANYRESHEX, @ANYRES64=r1], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x22}, 0x94) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=r7, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)=""/175, 0x35, 0xaf, 0x0, 0xffffffff, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x19, 0x9, 0x7ff, 0x10, 0x8, r1, 0x10001, '\x00', r7, r8, 0x2, 0x1, 0x1}, 0x50) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00003c00028006000f0000000000080003000100000108f60900ce2f00000800680b4c5ce6226f606b06008100000008000800da6b000006000e004e23000006000b000a00000008000400721a557e26a6cae6445508000000080006000600ef7d2d1adc12a519109c9095c2dd637e992ac68f95fe4c7b3c1bc805bf8e1eecf7096ede10fd67d055f1f9fb9b96df9461319fc01051cf5a50d50496"], 0x68}, 0x1, 0x0, 0x0, 0x621186fd2043ce8f}, 0x4000000) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1800000018000100000078e948ca6dc78000fb"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000020646d2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7036ad27b45e648872c000006110000ec2be51fa3d67511d7b536fd557b9172043721a64c38b564e972545216a7a356e40a539931cbef2a4b306dcd4be20231c5ad24930d9fdc8809633f11278dd985b15087c147b0eff31c1e1533778f42726573c3326638bc5bea43043764aff1813aac5acd95540bffaf5a58b84ac71f637c2dee6431e4675b2607133a6375ae01da1463fe00f886268fb812cf7f780923e869cfb9a116e3c484fcbee98acb2e42063981484d8b1822acfd62a3fd", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r10}, 0xc) 2.562619284s ago: executing program 1 (id=4362): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200000000000000002c000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x66, &(0x7f00000006c0)=""/102, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x2f, 0xf7, 0x9, 0xa, 0x2, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3a27, 0x20, 0x2, 0x3}}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1f, 0x600, 0x6, 0x1, 0x40, r0, 0x6, '\x00', r1, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='rxrpc_peer\x00', r2, 0x0, 0xfffffffffffffff9}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='rxrpc_peer\x00', r2}, 0x18) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 2.561611382s ago: executing program 2 (id=4363): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}, 0x18020000}], 0x1, 0x2000c000) 2.508905192s ago: executing program 1 (id=4364): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newsa={0x10c, 0x10, 0x713, 0x70bd2d, 0x0, {{@in=@broadcast, @in=@loopback, 0x0, 0x7, 0x0, 0x0, 0x2}, {@in=@local, 0x0, 0x3c}, @in6=@private1, {0x0, 0xfffffffffffffffe, 0x7, 0x100000}, {0x0, 0x0, 0xfffffffffffffff8}, {0x0, 0x0, 0x8}, 0x0, 0x0, 0xa}, [@encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e22, 0x4e20, @in6=@private2}}]}, 0x10c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40908, 0x8a0}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4084) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newsa={0x10c, 0x10, 0x713, 0x70bd2d, 0x0, {{@in=@broadcast, @in=@loopback, 0x0, 0x7, 0x0, 0x0, 0x2}, {@in=@local, 0x0, 0x3c}, @in6=@private1, {0x0, 0xfffffffffffffffe, 0x7, 0x100000}, {0x0, 0x0, 0xfffffffffffffff8}, {0x0, 0x0, 0x8}, 0x0, 0x0, 0xa}, [@encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e22, 0x4e20, @in6=@private2}}]}, 0x10c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40908, 0x8a0}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4084) (async) 2.43350354s ago: executing program 4 (id=4365): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x100000000) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0x3) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711208000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pwritev(r6, &(0x7f00000001c0)=[{&(0x7f00000003c0)="be", 0x1}, {0x0}], 0x13, 0xfffffffc, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f0000000240)={0x3fd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000070000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701000003ffffffb702000008000000b70300000e0000008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001010000850000002d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r7}, 0x10) socket$inet6(0xa, 0x3, 0x7) 2.338514005s ago: executing program 3 (id=4366): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket(0xa, 0x3, 0x3a) recvmmsg(r2, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f00000000c0)=0x5, 0x4) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a0000000000000000000000000000000700ff020000000000000000000000000001ea"], 0xfdef) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuset.memory_pressure\x00', 0x275a, 0x0) writev(r6, &(0x7f0000000380)=[{&(0x7f00000003c0)="ea", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x6ec}, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 2.337485497s ago: executing program 0 (id=4367): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=@setlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}, @IFLA_MASTER={0x8, 0x3a}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x1}]}, 0x40}}, 0x0) sendmsg$key(r2, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfd}]}, 0x50}, 0x1, 0x7}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="050000002404"], 0x48}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000ffffff7f000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002023207b1af8ff00000000bfa10000000000f8ffffffb702000008000000b70300000000000085000000760000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffcef, 0x0, 0x0, 0x0}, 0x94) 2.288143623s ago: executing program 1 (id=4368): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x403, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}]}}}]}, 0x38}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f02) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x8a, &(0x7f00000000c0), 0x4) socket$inet6(0x2d, 0x806, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010002ab787be80000", @ANYRES32=r5, @ANYBLOB="93000400000000001c0012800b0001006d616373656300000c00028005000f000d"], 0x3c}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000100000000000000000008510000006000000180000", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0xa, 0xe2, &(0x7f0000000180)=""/226, 0x0, 0x8}, 0x94) 2.146776835s ago: executing program 0 (id=4369): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bridge0\x00'}) unshare(0x22020400) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r1, 0x5760, 0x0) 2.051277582s ago: executing program 0 (id=4370): unshare(0x6a040000) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0xfc}]}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000240)=0x10001) write(r1, &(0x7f0000000280)="4591", 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000200)=@can={{}, 0x3, 0x0, 0x4, 0x0, "000000cef4a89800"}, 0x10}, 0x2, 0x0, 0x0, 0x40080}, 0x4000855) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYRES8=r4, @ANYRES16=r3, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES8=r0, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f400000005000200020000000800030005ac0f0005000900010000001c"], 0x58}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000002040)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000005e40)={'vcan0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x12, 0x7, 0x200}}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x4008, r9}, 0x18) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@RTM_GETMDB={0x18, 0x56, 0x1, 0x70bd25, 0x25dfdbfd}, 0x18}}, 0x24008040) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r11, 0x1, 0x70bd2c, 0xfffffffe, {{}, {@val, @val={0x0, 0x99, {0xb0f, 0x5e}}}}, [@NL80211_ATTR_MESH_ID, @NL80211_ATTR_IFTYPE={0x0, 0x5, 0x4}]}, 0x24}}, 0x4) 1.678650154s ago: executing program 2 (id=4371): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="48000000030101080000000000000000020000082c0002800c000280050001000000000006000340000000001400018008001d00ac1414aa040002"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000380)='GPL\x00'}, 0x94) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x2, [0x7, 0x9]}, 0x8) connect$unix(r0, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) connect$unix(r0, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 1.649673435s ago: executing program 2 (id=4372): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x90, 0x10, 0x503, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x28004}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @bond={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @private=0xa010101}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x5}, @IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}, @IFLA_BOND_ARP_IP_TARGET={0x1c, 0x8, 0x0, 0x1, [@local, @multicast1, @multicast2, @rand_addr=0x64010101, @rand_addr=0x64010102, @private=0xa010100]}, @IFLA_BOND_USE_CARRIER={0x5, 0x6, 0xfa}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0xc000}, @IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x10}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8], 0x3c}}, 0x0) 1.534270478s ago: executing program 4 (id=4373): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000680)="451a67771f25a3", 0x7}], 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@dev, 0x0}, &(0x7f0000000180)=0x14) sendmsg$xdp(r0, &(0x7f00000009c0)={&(0x7f0000000200)={0x2c, 0x0, r7, 0x31}, 0x10, &(0x7f0000000940)=[{&(0x7f00000004c0)="1fb1d8c3281ac1bdb3aa272d76fc4a146b4b179d7679b260c7dc3780843c4513b927c95966c1c37128afb6dbcd559852c39e6a0e29b18ff007aee50d95c5855cfd", 0x41}, {&(0x7f0000000540)="84d7f3c2d8c5b372ed02cb1a62cebc9b93652d002f08c47a36d4309b99235261ce727cb92bed14e937ba7afc567654a97b9691d4cb841c1bedc5794bec03a36382f6d08f473387f035451ab42834256dd115d14e534fc36c49c3221d889cf26925d7504607cb578d695ace5c38c1ba238df55b30f1b68b3ff7e2d769ef91886f0aa443489da387041b9fd2757821a10e3c09106cb2f4814a31f97ce60213b152cf5a11756f006c5de5008ecaf2", 0xad}, {&(0x7f0000000600)="881a15cdded920b9cc58ce3c9a2f10c4c4561c6cd1514348e81b16bc60423afedac45046c62ec181d3757730fbca9f1f43ad1e8fd98d70904011df5bc30315e7f30858fa7c2de591683d88b4d15d29aeadafadf3030967c21efb49f4599e05ce1cef916c3542311721218c825feb7b3820b45af6d052413a914ce1359d595db4272dfd7f4478dcfe0cb9223d2e1fd3726785d6be59e2af77343f13b0c6f5882e29185ba30dc99780c21c3337e613607d440bb51853228d3617b2c6bd4b61b9e036d62c65026670aa0ceb62aaee7a21dbd2b4d4f3866a5f514f", 0xd9}, {&(0x7f0000000780)="4c9fe7369de8a828521c99eb52e26c96e07c814addb38937285314311b98da7077329e833c0797afe8def39cbf9cdea3596fcf09054f36d19127d217416a065ef5785fa12879b65c7333e928416a3d60d8f0726969132e53f3610684a9b4c2faacfe1a34ce1019da183b373659f98be08462f1ae8f15b8d40bb6ed38fdf19395bb05b1b2fc8b41cd5c5254db5a4e3c69a632622ee8deac44175c6fa7146c35f7cd7788f2b2d31521d308d2c576d7609b5c66b3c476eb9e262efb54aa54a40be6dc982dfd24f775dd6c3f", 0xca}, {&(0x7f0000000240)="b99b10f2cca20c061ddb3368c03c85828d369506a2aff3e3720ce520189dc30a484d60e19dc28752b28f5852174fa76487e7b92043239c726488a077a2", 0x3d}, {&(0x7f0000000700)="c88cb9cdf002692d6e77ef5bda0cce306d9695cb05e9", 0x16}, {&(0x7f0000000880)="02dc87ecc05ef43eb5620c699bc35b8c4d9e7a3f6c5df68ef8176514935cfe607f27881d67cafa19d4f5ef7ee869456bc25400fb3804c713e0b6817afeae737980e04775ac387e259bc50d5d50e98ee08688da84981c36e8c37d596e3c79c9a4e397ae2b70b991cb2e2dc4cbc9760919f7131e9f9a3df7700b9dace0303cf339247373d8dd431d8c9d31c16d97cca0d063eeaf439812d75532239e724ea7cccee61b53148dbde7dd59dc430547db", 0xae}], 0x7, 0x0, 0x0, 0x14}, 0x20008000) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r6, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x3, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x42011}, 0x10) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="020000000400000004000000010400000004"], 0x48) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x0, 0x82011, r11, 0x0) tee(r9, r8, 0x80000001, 0x0) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000cc0)=0xffffffffffffffff, 0x4) r13 = openat$cgroup_ro(r10, &(0x7f0000000e40)='io.stat\x00', 0x0, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r13, 0x4018f514, &(0x7f0000000e80)={0xb, 0x5, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x22, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000882ad90b9de2f9164b4600000b703000000011d00850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018120000", @ANYRES32=r4, @ANYBLOB="000000000000000085100000fbffffff07627f000001000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000c80)='syzkaller\x00', 0x82, 0x0, 0x0, 0x40f00, 0x26, '\x00', r1, 0x0, r12, 0x8, &(0x7f0000000d00)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000d40)=[{0x4, 0x2, 0xd, 0x7}, {0x1, 0x5, 0x7, 0x2}, {0x5, 0x5, 0x5, 0x5}, {0x0, 0x3, 0x6, 0xc}], 0x10, 0xffff}, 0x94) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xd, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x28}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x4}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r14, 0x0, 0xe, 0x0, &(0x7f0000000100)='\x00'/14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}, 0x28) socket$inet(0x2, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_ID={0x8, 0x6, 0xee}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.339842638s ago: executing program 1 (id=4374): unshare(0x6a040000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7d, &(0x7f00000002c0)="aa8e0cf56164be5b", 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x20, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x20}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x11}, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f00000004c0)={{0xa, 0x4e20, 0x9, @loopback, 0x10000}, {0xa, 0x4e24, 0xa4, @mcast2, 0x5}, 0x1, {[0x80000000, 0x8000, 0x0, 0x3, 0x1, 0x7, 0xfffffff9, 0x1]}}, 0x5c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000040), &(0x7f0000000280)=r4}, 0x20) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r7, &(0x7f0000000380)='tasks\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r10, @ANYBLOB="0800260094090000fe7a18d14894b76eb95c1067be2b690339f5a69fc7b83a071366ba6cb90694bb08c4638bae81654c54ae26709d8551a7eac6ff6fc69bda413e6c2bb289e89b72e57c177b0512ca990fc444d8f08c802f74686b21b43e696d7d6af2093a3dd3957793644c854d4f04d66d8972913dc38bb08c1ff202e7609f27048198dbe6ac650c3be7ed3573faee24a145bc1f"], 0x24}, 0x1, 0x0, 0x0, 0x4000043}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r11, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000"], 0x30}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 808.822877ms ago: executing program 2 (id=4375): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={r3, @in={{0x2, 0x4e24, @empty}}, 0x7fff, 0xbb5f}, &(0x7f0000000480)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000440)={r3, 0x9}, &(0x7f0000000480)=0x8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000540a0000000c0002006e6c3830323131000000000000000000"], 0x20}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@mcast2, @in=@initdev}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f00000005c0)=0xe8) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r9, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x18}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x400d1}, 0x20000000) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x118, 0x10, 0x10, 0x0, 0x25dfdbfc, {{@in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e20, 0x2, 0x2, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0xff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x0, 0x7cf}, 0x70bd2c, 0x3500, 0x2, 0x1, 0x0, 0x50}, [@offload={0xc, 0x1c, {0x0, 0x1}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in=@remote}}]}, 0x118}, 0x1, 0x0, 0x0, 0x4004cc0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "173e6335a79630de1125f32bfd49b77c2d01a8ac6334c2bd", "5c341f44cbb52d9d51c5ea017cd89c9cf84a0b6ec3606f3e97d850427a78e750"}}}}}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r7, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r9, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x8, 0x4f}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x200080d0}, 0x40) 805.89471ms ago: executing program 3 (id=4376): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@gettaction={0x30, 0x32, 0xe72c5f922f23cad9, 0x70bd27, 0x25dfdbf7, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffa8b4}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc844}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000004000000000000000200007912b00000000000950200000021000085bc43d13289da901fc6d95d92921093994d49bbf9e07716c9946b64bc19a84bd802b1d249ee1fc6cd4b21773ff3bad1be58d1a081739b4abb924cff66b900bde53edad33a404f4309afe74e29be3df6316f3d060faed5b91db0beb9fa8eb903a938a21c8ee3a8ad9d61656fa44d225b0eb74343bc48788652b1695d95c930ac9fd61fa315935cc22d688da6a043c762d53abd413fe731a7b980fe4a120d21868a97bc47fd"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0xa, 0x300) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYBLOB="01000000000000000000010100000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c64000980140000800600"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1b, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000400"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1e, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c40fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x4}, 0x94) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r8, 0x1, 0x34, &(0x7f00000000c0)=r7, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000000000020073797a5f74756e00000000000000000008000900011a000005000200fc0000000800050000000000"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="000086dd000411001400006000006eec00be00442f0100000000000000000000ffff7f000001ff020000000000000000000000000001042022eb"], 0x7a) r10 = socket(0x28, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x8, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0xe, 0x8}}]}, 0x2c}}, 0x4800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 742.499275ms ago: executing program 2 (id=4377): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES16, @ANYRES16=r1, @ANYBLOB="a60a6cc189c7d111c7032a42636bbca4f7786e29b52c8c9e5e3d57d65e7ba28bcba7efe0e458b7169bdba3d911486fa482fcdf193d36c22bfdd90ee5f1e4a714a446ae50afe575db67ed6c4c8e585bd3fe65bae14dbfdadddeb0b7607e6ceccb79ca11e07291b2362c11fbe68a1c1b0a9de80e88b8aa018ccd2f6f261b8861cc46be01700ea74f698c3621f59a742dcd8295fa788f4c7fd2259b5f2369a07a042cce8e35c5149687c94eb05c6b347318380ff93319e1f1f854c7d6a7dcc1e3"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="38260346", @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x404c050) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'vlan1\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) recvfrom$inet(r8, &(0x7f0000000880)=""/4096, 0x1000, 0x40000040, &(0x7f00000001c0)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) r9 = socket$unix(0x1, 0x5, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000000f14010028bd05000000df250800030046000000080001000000000009004500756d61"], 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20008000) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r12, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r14) sendmsg$IEEE802154_ADD_IFACE(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x48, r15, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0201}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 653.242951ms ago: executing program 4 (id=4378): ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000000140)={0x4, 0xfd}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030700006200190000000b0000000800030048"], 0x1c}}, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f0000000a00)=[{{&(0x7f00000004c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000f40)="a905000000007464000100000000000000e5c01104b61aa67bf2154694dfa033fe5312e4", 0x24}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_ttl={{0x14}}], 0x18}}], 0x2, 0xc044) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000000)={0xf, 0x2, 0x6, 0x7f}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x18, 0x3c, 0x107, 0x400, 0x0, {0x4, 0x7c}, [@nested={0x4, 0xfc}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008800}, 0xc000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) syz_init_net_socket$llc(0x1a, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r5, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept$alg(r6, 0x0, 0x0) recvmmsg(r7, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4081, 0xff1}], 0x1}, 0x10f}], 0x1, 0x2101, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000880)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa2e0800450000780000000000119078000000000059006490780200000003000000000000000002000075325b9b030405a024f0dd00009384bbeb3018ad591b661fe808b21b77694c875dfb1be5d2a0057a62022a1564a329d3a14a1d8c6900000000000000009cecc10dc99059635f0b488201043db12c8a918eb760ed2df9876b8a10e51bd617f1b168242a7ae858eea97f1746250896515330ca7ce3967fcc13d1fc4f89df4a00a6cfc711686ef6362a8ce2d9d087901813922394e2b20cdc5f2908b30b5524f7"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 622.59363ms ago: executing program 0 (id=4379): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x2, 0x8000, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000000)) 481.169352ms ago: executing program 0 (id=4380): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = epoll_create(0x3fb) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x20000000}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0) splice(r3, 0x0, r4, 0x0, 0x81, 0x6) r8 = socket$xdp(0x2c, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$cgroup_ro(r6, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f0000000000)={0x0, 0x3}) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r11, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_FLUSH(r11, 0x0, 0xd4, 0x0, 0x0) setsockopt$MRT_FLUSH(r11, 0x0, 0xd4, &(0x7f0000000080)=0x7, 0x4) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@link_local={0x5}, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x1000, 0x2]}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0xb2}}}}}}}}, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800080056000100000000f70000000107020000", @ANYRES32, @ANYRES16=r4], 0x38}}, 0x0) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x2d, 0x9, 0x70bd27, 0x0, {0x5}, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@loopback={0x200000000000000}}]}, 0x28}}, 0x84) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x9c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x88, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0xfa665a81a6d02b4d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x7, 0x20010, r8, 0x180000000) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) write(r3, &(0x7f0000003300)="cf", 0x1) 480.842015ms ago: executing program 2 (id=4381): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}, 0x41020000}], 0x1, 0x2000c000) 413.995866ms ago: executing program 3 (id=4382): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x84}}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x84}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0xfffffffffffffef8}}, 0x28}}, 0x4000040) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0xece15b25133b0c23, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x40000000000000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) ioctl(r0, 0x7, &(0x7f0000000080)="4382e509bc9c05f910a4fdae53ad4577ccb7ac1a71b2f756b4a25b49f04d3f12610727") (async) ioctl(r0, 0x7, &(0x7f0000000080)="4382e509bc9c05f910a4fdae53ad4577ccb7ac1a71b2f756b4a25b49f04d3f12610727") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x38, 0x9, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x24}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1ff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7f}, @IPSET_ATTR_ADT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 291.877591ms ago: executing program 4 (id=4383): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x100000000) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0x3) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711208000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pwritev(r6, &(0x7f00000001c0)=[{&(0x7f00000003c0)="be", 0x1}, {0x0}], 0x13, 0xfffffffc, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f0000000240)={0x3fd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000070000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701000003ffffffb702000008000000b70300000e0000008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001010000850000002d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r7}, 0x10) socket$inet6(0xa, 0x3, 0x7) 198.664589ms ago: executing program 3 (id=4384): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x403, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}]}}}]}, 0x38}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f02) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x8a, &(0x7f00000000c0), 0x4) socket$inet6(0x2d, 0x806, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010002ab787be80000", @ANYRES32=r5, @ANYBLOB="93000400000000001c0012800b0001006d616373656300000c00028005000f000d"], 0x3c}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000100000000000000000008510000006000000180000", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0xa, 0xe2, &(0x7f0000000180)=""/226, 0x0, 0x8}, 0x94) 0s ago: executing program 1 (id=4385): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="09000000000000002c0012800e000100697036677265746170000006"], 0x58}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(r1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r2}, 0x10) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) kernel console output (not intermixed with test programs): 302.852749][T16423] team0: Failed to send options change via netlink (err -105) [ 302.860557][T16423] team0: Port device batadv1 added [ 302.879466][T16420] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.893763][T16420] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.962277][T16420] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.973398][T16420] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.013245][T16420] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.023873][T16420] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.092998][ T49] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.101453][ T49] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.118957][ T49] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.127387][ T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.141162][ T49] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.149562][ T49] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.164814][ T49] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.173554][ T49] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.572344][T16434] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2931'. [ 303.599557][T16434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2931'. [ 303.616664][ T5873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 303.624245][ T5873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 303.638302][ T5873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.655192][ T5873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 303.663440][ T5873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 303.698492][T16436] lo speed is unknown, defaulting to 1000 [ 303.930163][T16446] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2935'. [ 304.033440][T16448] validate_nla: 1 callbacks suppressed [ 304.033461][T16448] netlink: 'syz.2.2934': attribute type 4 has an invalid length. [ 304.099866][T16448] netlink: 'syz.2.2934': attribute type 4 has an invalid length. [ 304.102430][T16436] chnl_net:caif_netlink_parms(): no params data found [ 304.272157][T16436] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.281746][T16436] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.289884][T16436] bridge_slave_0: entered allmulticast mode [ 304.299236][T16436] bridge_slave_0: entered promiscuous mode [ 304.310023][T16436] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.319989][T16436] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.328886][T16436] bridge_slave_1: entered allmulticast mode [ 304.336027][T16436] bridge_slave_1: entered promiscuous mode [ 304.399589][T16436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.422420][T16474] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2937'. [ 304.446265][T16436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.448890][T16474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2937'. [ 304.484759][T16477] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 304.524348][T16436] team0: Port device team_slave_0 added [ 304.534122][T16436] team0: Port device team_slave_1 added [ 304.604771][T16436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.616363][T16436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.642868][T16436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.655862][T16436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.663104][T16436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.689910][T16436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.733932][T16436] hsr_slave_0: entered promiscuous mode [ 304.741881][T16436] hsr_slave_1: entered promiscuous mode [ 304.942604][T16436] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 304.957064][T16436] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 305.012303][T16436] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 305.025912][T16436] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 305.046170][T16506] lo speed is unknown, defaulting to 1000 [ 305.082978][T16436] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 305.098641][T16436] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 305.161278][T16436] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 305.176484][T16436] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 305.261437][T16513] netlink: 'syz.2.2949': attribute type 1 has an invalid length. [ 305.276160][T16436] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 305.292157][T16436] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 305.303707][T16436] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 305.314396][T16436] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 305.441054][T16436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.478390][T16436] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.508570][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.515736][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.558786][ T3604] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.566060][ T3604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.696662][ T5872] Bluetooth: hci2: command tx timeout [ 306.014425][T16436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.152739][T16549] netlink: 'syz.1.2955': attribute type 1 has an invalid length. [ 306.154305][T16543] lo speed is unknown, defaulting to 1000 [ 306.233262][T16549] 8021q: adding VLAN 0 to HW filter on device bond2 [ 306.765423][T16580] dvmrp8: entered allmulticast mode [ 306.855064][T16436] veth0_vlan: entered promiscuous mode [ 306.915746][T16436] veth1_vlan: entered promiscuous mode [ 306.975658][T16588] netlink: 'syz.0.2967': attribute type 29 has an invalid length. [ 306.989092][T16583] lo speed is unknown, defaulting to 1000 [ 307.032935][T16580] lo speed is unknown, defaulting to 1000 [ 307.136916][T16594] __nla_validate_parse: 5 callbacks suppressed [ 307.136938][T16594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2967'. [ 307.173678][T16588] lo speed is unknown, defaulting to 1000 [ 307.234781][T16436] veth0_macvtap: entered promiscuous mode [ 307.294633][T16436] veth1_macvtap: entered promiscuous mode [ 307.385593][T16436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.403810][T16597] lo speed is unknown, defaulting to 1000 [ 307.423694][T16436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.428136][T16601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2970'. [ 307.481061][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.495660][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.539561][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.557450][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.589943][T16603] netlink: 'syz.0.2971': attribute type 2 has an invalid length. [ 307.638990][T16603] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2971'. [ 307.772911][T16617] sctp: [Deprecated]: syz.1.2975 (pid 16617) Use of struct sctp_assoc_value in delayed_ack socket option. [ 307.772911][T16617] Use struct sctp_sack_info instead [ 307.799433][ T5872] Bluetooth: hci2: command tx timeout [ 307.843347][T16618] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2974'. [ 307.909465][T16628] netlink: 'syz.0.2977': attribute type 7 has an invalid length. [ 307.919350][T16628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2977'. [ 307.921099][ T3174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.941799][ T3174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.002735][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.013758][T16634] netlink: 280 bytes leftover after parsing attributes in process `syz.3.2979'. [ 308.023871][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.070586][T16628] bridge19: port 1(bond8) entered blocking state [ 308.080346][T16628] bridge19: port 1(bond8) entered disabled state [ 308.091426][T16628] bond8: entered allmulticast mode [ 308.229350][T16643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2929'. [ 308.229671][T16647] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2981'. [ 308.244272][T16649] vlan0: entered promiscuous mode [ 308.301086][ T7619] IPVS: starting estimator thread 0... [ 308.427234][T16656] IPVS: using max 37 ests per chain, 88800 per kthread [ 308.590234][T16671] nbd: must specify at least one socket [ 308.732626][T16680] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 308.789313][T16680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2989'. [ 308.829360][T16680] ip6gretap0: entered promiscuous mode [ 308.846163][T16680] macvtap2: entered promiscuous mode [ 308.856656][T16677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2989'. [ 308.898263][T16680] macvtap2: entered allmulticast mode [ 308.903713][T16680] ip6gretap0: entered allmulticast mode [ 308.955276][T16684] lo speed is unknown, defaulting to 1000 [ 309.084373][ T5870] syz_tun (unregistering): left allmulticast mode [ 309.108724][ T5870] syz_tun (unregistering): left promiscuous mode [ 309.119237][ T5870] bridge0: port 1(syz_tun) entered disabled state [ 309.122570][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 309.133939][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 309.145819][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 309.154351][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 309.169139][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 309.214393][T16690] lo speed is unknown, defaulting to 1000 [ 309.275959][T16696] netlink: 'syz.4.2993': attribute type 1 has an invalid length. [ 309.291419][T16698] netlink: 'syz.1.2994': attribute type 1 has an invalid length. [ 309.293135][T16696] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 309.378819][T16701] bond3: (slave geneve3): making interface the new active one [ 309.382571][T16704] netlink: 'syz.0.2995': attribute type 4 has an invalid length. [ 309.387740][T16701] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 309.421762][ T1086] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 309.430651][ T1086] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 309.461633][ T1086] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 309.474396][ T1086] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 309.504790][T16706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.521427][T16706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.553122][T16706] bond0 (unregistering): Released all slaves [ 309.624648][T16701] 8021q: adding VLAN 0 to HW filter on device bond3 [ 309.856567][ T51] Bluetooth: hci2: command tx timeout [ 309.867137][T16690] chnl_net:caif_netlink_parms(): no params data found [ 309.934160][T16734] sit3: entered promiscuous mode [ 310.075592][T16746] bond0: entered promiscuous mode [ 310.091258][T16746] batadv0: entered promiscuous mode [ 310.101096][T16746] debugfs: 'hsr0' already exists in 'hsr' [ 310.107405][T16746] Cannot create hsr debugfs directory [ 310.113094][T16746] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 310.123084][T16746] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 310.138137][T16746] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 310.149342][T16690] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.169937][T16690] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.180774][T16690] bridge_slave_0: entered allmulticast mode [ 310.189949][T16690] bridge_slave_0: entered promiscuous mode [ 310.197952][T16690] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.205393][T16690] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.219891][T16690] bridge_slave_1: entered allmulticast mode [ 310.226927][T16690] bridge_slave_1: entered promiscuous mode [ 310.256772][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 310.307746][T16690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.340876][T16747] lo speed is unknown, defaulting to 1000 [ 310.365818][T16690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.449611][T16690] team0: Port device team_slave_0 added [ 310.468939][T16690] team0: Port device team_slave_1 added [ 310.530702][T16690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.539902][T16690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.568059][T16690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.583923][T16770] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 310.600060][T16690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.607478][T16690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.634145][T16690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.767706][T16690] hsr_slave_0: entered promiscuous mode [ 310.782859][T16690] hsr_slave_1: entered promiscuous mode [ 310.792066][T16690] debugfs: 'hsr0' already exists in 'hsr' [ 310.798401][T16690] Cannot create hsr debugfs directory [ 311.041395][T16795] pim6reg1: entered promiscuous mode [ 311.047266][T16795] pim6reg1: entered allmulticast mode [ 311.131625][T16803] tipc: Resetting bearer [ 311.144330][T16803] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 311.221686][ T51] Bluetooth: hci4: command tx timeout [ 311.235558][T16795] 8021q: adding VLAN 0 to HW filter on device bond9 [ 311.245005][T16795] team0: Port device bond9 added [ 311.254673][T16798] lo speed is unknown, defaulting to 1000 [ 311.265221][T16807] netlink: 'syz.4.3025': attribute type 3 has an invalid length. [ 311.384516][T16811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.531389][T16690] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 311.702103][T16829] sctp: [Deprecated]: syz.1.3032 (pid 16829) Use of int in max_burst socket option deprecated. [ 311.702103][T16829] Use struct sctp_assoc_value instead [ 311.703837][T16690] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 311.803064][T16690] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 311.845455][T16823] lo speed is unknown, defaulting to 1000 [ 311.846094][T16690] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 311.947396][ T51] Bluetooth: hci2: command 0x0419 tx timeout [ 311.952887][T16835] lo speed is unknown, defaulting to 1000 [ 312.119726][T16853] veth0_macvtap: left promiscuous mode [ 312.485387][T16690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.552140][T16690] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.588833][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.595997][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.633493][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.640838][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.154395][T16690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.272994][T16690] veth0_vlan: entered promiscuous mode [ 313.296768][ T5872] Bluetooth: hci4: command tx timeout [ 313.302633][T16690] veth1_vlan: entered promiscuous mode [ 313.323465][T16880] tap0: tun_chr_ioctl cmd 1074025677 [ 313.339369][T16880] tap0: linktype set to 805 [ 313.374964][T16887] netlink: 'syz.0.3044': attribute type 11 has an invalid length. [ 313.414662][T16690] veth0_macvtap: entered promiscuous mode [ 313.448441][T16690] veth1_macvtap: entered promiscuous mode [ 313.488500][T16690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.500209][T16690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.538719][T16896] netlink: 'syz.0.3048': attribute type 1 has an invalid length. [ 313.539894][ T73] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.567888][ T73] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.584435][T16896] __nla_validate_parse: 10 callbacks suppressed [ 313.584455][T16896] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3048'. [ 313.615578][ T73] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.642453][ T73] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.684021][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.712642][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.741633][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.750335][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.021894][ T5872] Bluetooth: hci2: command 0x0419 tx timeout [ 314.244726][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 314.252426][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 314.265073][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 314.274710][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 314.282981][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 314.309910][T16920] lo speed is unknown, defaulting to 1000 [ 314.452586][T16925] lo speed is unknown, defaulting to 1000 [ 314.494829][T16920] chnl_net:caif_netlink_parms(): no params data found [ 314.595422][T16920] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.602990][T16920] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.610991][T16920] bridge_slave_0: entered allmulticast mode [ 314.618367][T16920] bridge_slave_0: entered promiscuous mode [ 314.629040][T16920] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.636371][T16920] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.644753][T16920] bridge_slave_1: entered allmulticast mode [ 314.652837][T16920] bridge_slave_1: entered promiscuous mode [ 314.689869][T16920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.703370][T16920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.751968][T16920] team0: Port device team_slave_0 added [ 314.761848][T16920] team0: Port device team_slave_1 added [ 314.784257][T16936] netlink: 'syz.3.3054': attribute type 10 has an invalid length. [ 314.892220][T16927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3053'. [ 315.053579][T16936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.065692][T16936] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 315.137287][T16920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.156624][T16920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.201776][T16920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.225573][T16920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.233825][T16920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.235606][T16950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3060'. [ 315.266083][T16951] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3059'. [ 315.310991][T16920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.379415][ T51] Bluetooth: hci4: command tx timeout [ 315.476068][T16920] hsr_slave_0: entered promiscuous mode [ 315.490711][T16920] hsr_slave_1: entered promiscuous mode [ 315.501086][T16920] debugfs: 'hsr0' already exists in 'hsr' [ 315.510381][T16920] Cannot create hsr debugfs directory [ 315.708441][T16920] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.732343][T16963] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3064'. [ 315.761887][T16920] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.820686][T16920] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.892374][T16920] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.064396][T16920] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 316.075227][T16920] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 316.090713][T16920] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 316.105222][T16920] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 316.211553][T16920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.238097][T16920] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.286048][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.293279][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.331924][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.339167][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.347911][ T51] Bluetooth: hci3: command tx timeout [ 316.773650][T16920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.048657][T16920] veth0_vlan: entered promiscuous mode [ 317.113554][T16920] veth1_vlan: entered promiscuous mode [ 317.541502][ T51] Bluetooth: hci4: command tx timeout [ 317.671580][T16920] veth0_macvtap: entered promiscuous mode [ 317.718645][T16920] veth1_macvtap: entered promiscuous mode [ 317.806165][T16920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.868663][T16920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.924231][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.953682][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.022385][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.067063][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.294058][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.343308][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.417974][ T51] Bluetooth: hci3: command tx timeout [ 318.432968][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.440946][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.486255][T17040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3087'. [ 318.497498][T17040] netlink: 620 bytes leftover after parsing attributes in process `syz.2.3087'. [ 318.516580][T17040] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3087'. [ 318.586891][T17049] vlan1: entered promiscuous mode [ 318.592045][T17049] vlan1: entered allmulticast mode [ 318.597996][T17049] bond0: entered allmulticast mode [ 318.969067][T17059] tipc: Started in network mode [ 318.974053][T17059] tipc: Node identity b64ad1d99037, cluster identity 4711 [ 318.984048][T17059] tipc: Enabled bearer , priority 0 [ 318.992095][T17059] syzkaller0: entered promiscuous mode [ 318.998037][T17059] syzkaller0: entered allmulticast mode [ 319.010026][T17059] tipc: Resetting bearer [ 319.018925][T17058] tipc: Resetting bearer [ 319.025953][T17058] tipc: Disabling bearer [ 319.101237][T17061] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3092'. [ 319.149973][ C1] vcan0: j1939_tp_rxtimer: 0xffff888063fbf800: rx timeout, send abort [ 319.158315][ C1] vcan0: j1939_tp_rxtimer: 0xffff888063fbfc00: rx timeout, send abort [ 319.166927][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888063fbf800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 319.181315][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888063fbfc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 319.665654][T17088] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 319.694761][T17091] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3101'. [ 319.726206][T17091] netlink: 308 bytes leftover after parsing attributes in process `syz.1.3101'. [ 319.736002][T17091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3101'. [ 319.766198][T17091] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 319.867139][T17099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3104'. [ 319.886841][T17099] netlink: 'syz.4.3104': attribute type 2 has an invalid length. [ 319.903582][T17099] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.934366][T17099] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20001 [ 320.506016][ T51] Bluetooth: hci3: command tx timeout [ 320.666549][T17115] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3108'. [ 320.697696][T17115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3108'. [ 320.715644][T17115] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3108'. [ 320.901904][T17129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3113'. [ 320.909085][T17128] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3112'. [ 321.693185][T17180] netlink: 'syz.0.3128': attribute type 1 has an invalid length. [ 322.043740][T17203] netlink: 'syz.4.3131': attribute type 6 has an invalid length. [ 322.068284][T17203] netlink: 'syz.4.3131': attribute type 12 has an invalid length. [ 322.148450][T17205] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96 [ 322.548463][T17208] lo speed is unknown, defaulting to 1000 [ 322.578420][ T5872] Bluetooth: hci3: command tx timeout [ 322.927572][T17226] lo speed is unknown, defaulting to 1000 [ 323.608484][T17254] lo speed is unknown, defaulting to 1000 [ 324.114376][ T5945] IPVS: starting estimator thread 0... [ 324.114902][T17269] tipc: Enabled bearer , priority 0 [ 324.162976][T17269] syzkaller0: entered promiscuous mode [ 324.174706][T17269] syzkaller0: entered allmulticast mode [ 324.195774][T17269] tipc: Resetting bearer [ 324.206521][T17274] IPVS: using max 40 ests per chain, 96000 per kthread [ 324.208287][T17268] tipc: Resetting bearer [ 324.303575][T17268] tipc: Disabling bearer [ 324.475265][T17283] __nla_validate_parse: 5 callbacks suppressed [ 324.475288][T17283] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3154'. [ 325.197399][T17330] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20001 [ 325.363665][T17342] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3170'. [ 325.375517][T17342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3170'. [ 325.564512][T17338] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 325.842303][T17365] lo speed is unknown, defaulting to 1000 [ 325.890164][T17369] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3176'. [ 325.925113][T17370] geneve2: entered promiscuous mode [ 325.954447][T17370] geneve2: entered allmulticast mode [ 325.963572][T17369] nbd: socks must be embedded in a SOCK_ITEM attr [ 326.606260][T17391] tipc: Started in network mode [ 326.614153][T17391] tipc: Node identity 4ee2d8ee98cf, cluster identity 4711 [ 326.621892][T17391] tipc: Enabled bearer , priority 0 [ 326.683890][T17391] syzkaller0: entered promiscuous mode [ 326.692058][T17391] syzkaller0: entered allmulticast mode [ 326.714055][T17391] tipc: Resetting bearer [ 326.747929][T17394] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3180'. [ 326.758335][T17390] tipc: Resetting bearer [ 326.796665][T17390] tipc: Disabling bearer [ 326.840679][T17394] bond0: entered promiscuous mode [ 326.870656][T17394] bond_slave_0: entered promiscuous mode [ 326.881790][T17394] bond_slave_1: entered promiscuous mode [ 326.892454][T17394] batadv0: entered promiscuous mode [ 326.907858][T17394] bond0: left promiscuous mode [ 326.912868][T17394] bond_slave_0: left promiscuous mode [ 326.924541][T17394] bond_slave_1: left promiscuous mode [ 326.945573][T17394] batadv0: left promiscuous mode [ 326.968512][T17404] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3184'. [ 327.006770][T17402] gretap0: entered promiscuous mode [ 327.012334][T17402] macvtap1: entered allmulticast mode [ 327.031443][T17402] gretap0: entered allmulticast mode [ 327.331831][T17433] netlink: 'syz.1.3188': attribute type 1 has an invalid length. [ 327.340319][T17433] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3188'. [ 327.351325][T17433] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3188'. [ 327.418856][T17438] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3193'. [ 327.441378][T17439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3190'. [ 327.540318][T17443] tipc: Started in network mode [ 327.552818][T17443] tipc: Node identity 3eb84f0a56f9, cluster identity 4711 [ 327.561190][T17443] tipc: Enabled bearer , priority 0 [ 327.577960][T17443] syzkaller0: entered promiscuous mode [ 327.583601][T17443] syzkaller0: entered allmulticast mode [ 327.601136][T17443] tipc: Resetting bearer [ 327.613816][T17442] tipc: Resetting bearer [ 327.622015][T17442] tipc: Disabling bearer [ 327.993652][T17467] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 328.826319][T17500] lo speed is unknown, defaulting to 1000 [ 329.005452][T17509] lo speed is unknown, defaulting to 1000 [ 329.164234][T17515] tipc: Enabled bearer , priority 0 [ 329.175950][T17515] syzkaller0: entered promiscuous mode [ 329.182005][T17515] syzkaller0: entered allmulticast mode [ 329.200176][T17515] tipc: Resetting bearer [ 329.282170][T17514] tipc: Resetting bearer [ 329.315435][T17514] tipc: Disabling bearer [ 329.614714][T17535] lo speed is unknown, defaulting to 1000 [ 330.180667][T17562] tipc: Enabled bearer , priority 0 [ 330.189300][T17562] syzkaller0: entered promiscuous mode [ 330.194891][T17562] syzkaller0: entered allmulticast mode [ 330.205851][T17562] tipc: Resetting bearer [ 330.215403][T17561] tipc: Resetting bearer [ 330.223248][T17561] tipc: Disabling bearer [ 330.403600][T17564] tipc: Enabled bearer , priority 0 [ 330.445805][T17564] syzkaller0: entered promiscuous mode [ 330.466506][T17564] syzkaller0: entered allmulticast mode [ 330.498327][T17564] tipc: Resetting bearer [ 330.541026][T17566] tipc: Enabled bearer , priority 10 [ 330.566814][T17563] tipc: Resetting bearer [ 330.580371][T17563] tipc: Disabling bearer [ 330.605372][T17571] __nla_validate_parse: 6 callbacks suppressed [ 330.605394][T17571] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3233'. [ 330.658312][T17571] netlink: 'syz.3.3233': attribute type 10 has an invalid length. [ 330.679689][T17571] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 330.768217][T17584] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3240'. [ 330.894761][T17596] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3243'. [ 330.908871][T17600] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3241'. [ 330.923097][T17596] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3243'. [ 330.938967][T17584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3240'. [ 331.088891][T17609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3247'. [ 331.154117][T17609] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 331.415193][T17629] dvmrp8: entered allmulticast mode [ 331.450868][T17629] lo speed is unknown, defaulting to 1000 [ 331.513794][T17633] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3254'. [ 331.564666][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.573980][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.587299][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.589290][T17636] netlink: 'syz.0.3255': attribute type 12 has an invalid length. [ 331.596787][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.603762][T17636] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.3255'. [ 331.656517][ T5862] tipc: Node number set to 3593328878 [ 331.748659][T17640] macsec0: entered promiscuous mode [ 331.754082][T17640] bridge0: entered promiscuous mode [ 331.764144][T17640] bridge0: port 1(macsec0) entered blocking state [ 331.774482][T17640] bridge0: port 1(macsec0) entered disabled state [ 331.781933][T17640] macsec0: entered allmulticast mode [ 331.790034][T17640] bridge0: entered allmulticast mode [ 331.804846][T17640] macsec0: left allmulticast mode [ 331.812108][T17640] bridge0: left allmulticast mode [ 331.823252][T17640] bridge0: left promiscuous mode [ 331.974297][T17660] tipc: Enabled bearer , priority 0 [ 331.984643][T17660] syzkaller0: entered promiscuous mode [ 331.992060][T17660] syzkaller0: entered allmulticast mode [ 331.999539][T17662] tipc: Enabling of bearer rejected, failed to enable media [ 332.017557][T17660] tipc: Resetting bearer [ 332.036628][T17658] tipc: Resetting bearer [ 332.096255][T17658] tipc: Disabling bearer [ 332.330158][T17687] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3271'. [ 332.470539][T17694] netlink: 'syz.1.3273': attribute type 4 has an invalid length. [ 332.490800][T17694] bond0: entered promiscuous mode [ 332.497687][T17694] dummy0: entered promiscuous mode [ 332.503363][T17694] debugfs: 'hsr1' already exists in 'hsr' [ 332.509488][T17694] Cannot create hsr debugfs directory [ 332.515039][T17694] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 332.527984][T17694] hsr1: entered promiscuous mode [ 332.532980][T17694] hsr1: entered allmulticast mode [ 332.538101][T17694] bond0: entered allmulticast mode [ 332.543238][T17694] dummy0: entered allmulticast mode [ 332.656235][T17700] syzkaller0: entered promiscuous mode [ 332.662539][T17700] syzkaller0: entered allmulticast mode [ 332.683354][T17700] tipc: Enabled bearer , priority 0 [ 332.698826][T17700] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 332.713819][T17700] tipc: Resetting bearer [ 332.722963][T17699] tipc: Resetting bearer [ 332.735377][T17699] tipc: Disabling bearer [ 333.063880][T17715] lo speed is unknown, defaulting to 1000 [ 333.343768][T17728] tipc: Enabling of bearer rejected, failed to enable media [ 334.050423][T17744] syzkaller0: entered promiscuous mode [ 334.056293][T17744] syzkaller0: entered allmulticast mode [ 334.160729][T17763] IPv6: sit1: Disabled Multicast RS [ 334.166791][T17763] sit1: entered allmulticast mode [ 334.332133][T17766] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 334.341474][ T3174] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 334.443590][T17776] !: renamed from dummy0 (while UP) [ 334.533456][T17777] lo speed is unknown, defaulting to 1000 [ 334.753043][T17781] pim6reg1: entered promiscuous mode [ 334.758530][T17781] pim6reg1: entered allmulticast mode [ 335.077612][T17793] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.079013][T17796] netlink: 'syz.1.3302': attribute type 29 has an invalid length. [ 335.161510][T17793] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.245821][T17793] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.359756][T17793] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.445745][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.469716][ T6570] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.515569][ T6570] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.529655][ T6570] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.560763][T17816] lo speed is unknown, defaulting to 1000 [ 335.598444][T17821] netlink: 'syz.4.3310': attribute type 1 has an invalid length. [ 335.722713][T17825] bond0: (slave geneve2): making interface the new active one [ 335.731063][T17825] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 335.753632][ T6570] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 335.763138][ T6570] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 335.791396][ T6570] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 335.813224][T17835] __nla_validate_parse: 10 callbacks suppressed [ 335.813246][T17835] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3313'. [ 335.829094][T17835] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3313'. [ 335.839107][ T6570] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 335.892459][T17840] syzkaller1: entered promiscuous mode [ 335.898679][T17840] syzkaller1: entered allmulticast mode [ 335.974958][T17842] tipc: Enabled bearer , priority 0 [ 336.035479][T17842] syzkaller0: entered promiscuous mode [ 336.060202][T17842] syzkaller0: entered allmulticast mode [ 336.105644][T17841] tipc: Resetting bearer [ 336.120553][T17841] tipc: Disabling bearer [ 336.185651][T17845] lo speed is unknown, defaulting to 1000 [ 336.406003][T17867] sctp: [Deprecated]: syz.3.3322 (pid 17867) Use of int in maxseg socket option. [ 336.406003][T17867] Use struct sctp_assoc_value instead [ 336.424304][T17866] sctp: [Deprecated]: syz.3.3322 (pid 17866) Use of int in maxseg socket option. [ 336.424304][T17866] Use struct sctp_assoc_value instead [ 336.464273][T17870] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.488671][T17871] !: renamed from dummy0 (while UP) [ 336.510184][T17875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3324'. [ 336.525811][T17875] tipc: Enabled bearer , priority 0 [ 336.572641][T17870] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.654418][T17870] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.779944][T17881] lo speed is unknown, defaulting to 1000 [ 336.951454][T17870] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.193065][T17907] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3329'. [ 337.213736][T17907] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3329'. [ 337.355172][T17869] tipc: Disabling bearer [ 337.402943][ T3604] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.454479][ T3604] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.484707][ T3174] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.521017][ T3174] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.624951][T17925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3334'. [ 337.705713][T17928] lo speed is unknown, defaulting to 1000 [ 337.848335][T17939] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3338'. [ 337.884378][T17941] netlink: 'syz.0.3339': attribute type 13 has an invalid length. [ 337.893540][T17941] netlink: 'syz.0.3339': attribute type 17 has an invalid length. [ 337.931085][T17941] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 338.386140][T17969] netlink: 'syz.2.3346': attribute type 11 has an invalid length. [ 338.451558][T17973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3347'. [ 338.837412][T17997] lo speed is unknown, defaulting to 1000 [ 339.031968][T18012] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3353'. [ 339.042599][T18012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3353'. [ 339.052321][T18012] openvswitch: netlink: nsh attr 512 is out of range max 3 [ 339.060906][T18012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.092713][ T30] audit: type=1800 audit(1756353870.406:6): pid=18012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3353" name="memory.events" dev="tmpfs" ino=307 res=0 errno=0 [ 339.121952][ T30] audit: type=1804 audit(1756353870.436:7): pid=18012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3353" name="memory.events" dev="tmpfs" ino=307 res=1 errno=0 [ 339.189092][T18017] netlink: 'syz.3.3355': attribute type 3 has an invalid length. [ 339.692308][T18030] syzkaller0: entered promiscuous mode [ 339.701137][T18030] syzkaller0: entered allmulticast mode [ 339.963797][T18033] syzkaller0: entered promiscuous mode [ 339.969575][T18033] syzkaller0: entered allmulticast mode [ 340.032460][ T5872] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.041221][ T5872] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.050341][ T5872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.053476][T18040] netlink: 'syz.0.3362': attribute type 4 has an invalid length. [ 340.062838][ T5872] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.074893][ T5872] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.112440][T18041] netlink: 'syz.0.3362': attribute type 4 has an invalid length. [ 340.160293][T18037] lo speed is unknown, defaulting to 1000 [ 340.402140][T18037] chnl_net:caif_netlink_parms(): no params data found [ 340.535515][T18059] veth0: mtu less than device minimum [ 340.585799][T18066] netlink: 'syz.4.3367': attribute type 28 has an invalid length. [ 340.601273][T18068] Bluetooth: MGMT ver 1.23 [ 340.645582][T18037] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.657114][T18037] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.664760][T18037] bridge_slave_0: entered allmulticast mode [ 340.671955][T18037] bridge_slave_0: entered promiscuous mode [ 340.684925][T18037] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.692281][T18037] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.700158][T18037] bridge_slave_1: entered allmulticast mode [ 340.707651][T18037] bridge_slave_1: entered promiscuous mode [ 340.748991][T18037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.762357][T18037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.796041][T18037] team0: Port device team_slave_0 added [ 340.815628][T18037] team0: Port device team_slave_1 added [ 340.895781][T18037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.911980][T18037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.968802][T18037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.994443][T18037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.008181][T18037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.039554][T18037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.065113][T18089] bridge0: entered promiscuous mode [ 341.071380][T18089] macsec1: entered promiscuous mode [ 341.091876][T18089] bridge0: port 3(macsec1) entered blocking state [ 341.118682][T18089] bridge0: port 3(macsec1) entered disabled state [ 341.125389][T18089] macsec1: entered allmulticast mode [ 341.137381][T18089] bridge0: entered allmulticast mode [ 341.144247][T18089] macsec1: left allmulticast mode [ 341.158253][T18089] bridge0: left allmulticast mode [ 341.174610][T18089] bridge0: left promiscuous mode [ 341.238027][T18037] hsr_slave_0: entered promiscuous mode [ 341.244526][T18037] hsr_slave_1: entered promiscuous mode [ 341.251051][T18037] debugfs: 'hsr0' already exists in 'hsr' [ 341.257148][T18037] Cannot create hsr debugfs directory [ 341.363208][T18037] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.381774][T18102] lo speed is unknown, defaulting to 1000 [ 341.433896][T18037] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.490380][T18037] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.550233][T18037] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.681393][T18037] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 341.705393][T18037] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 341.727869][T18112] __nla_validate_parse: 1 callbacks suppressed [ 341.727890][T18112] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3380'. [ 341.749531][T18112] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3380'. [ 341.762288][T18037] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 341.770494][T18112] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3380'. [ 341.784092][T18037] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 342.045377][T18037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.101148][T18037] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.104310][ T5872] Bluetooth: hci1: command tx timeout [ 342.159962][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.167263][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.177772][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.184906][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.213218][T18128] bridge_slave_0: left allmulticast mode [ 342.221554][T18128] bridge_slave_0: left promiscuous mode [ 342.235847][T18128] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.253676][T18128] bridge_slave_1: left allmulticast mode [ 342.263635][T18128] bridge_slave_1: left promiscuous mode [ 342.285400][T18128] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.311492][T18128] team0: Port device team_slave_0 removed [ 342.328906][T18128] team0: Port device team_slave_1 removed [ 342.335800][T18128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.353493][T18128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.363386][T18128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.376187][T18128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.398874][T18128] bond0: (slave geneve2): Releasing active interface [ 342.430452][ T6570] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 342.459744][ T6570] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 342.494238][ T6570] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 342.515728][ T6570] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 342.569959][T18037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 342.944140][T18037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.110692][T18037] veth0_vlan: entered promiscuous mode [ 343.151318][T18037] veth1_vlan: entered promiscuous mode [ 343.210006][T18037] veth0_macvtap: entered promiscuous mode [ 343.238084][T18037] veth1_macvtap: entered promiscuous mode [ 343.265823][T18155] netlink: 'syz.4.3387': attribute type 10 has an invalid length. [ 343.291294][T18037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.312513][T18037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.329269][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.341760][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.352327][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.361519][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.371644][T18159] tipc: Enabled bearer , priority 0 [ 343.387832][T18159] tipc: Resetting bearer [ 343.398505][T18158] tipc: Disabling bearer [ 343.431871][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.441089][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.486037][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.494371][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.565143][T18164] macsec1: entered promiscuous mode [ 343.571359][T18164] macsec1: entered allmulticast mode [ 343.591297][T18166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3393'. [ 343.604719][T18167] netlink: 'syz.0.3393': attribute type 83 has an invalid length. [ 343.615337][T18166] netlink: 'syz.0.3393': attribute type 83 has an invalid length. [ 343.626683][T18167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3393'. [ 343.636693][T18166] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3393'. [ 343.821495][T18179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3397'. [ 343.832932][T18186] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3399'. [ 343.834433][T18179] bridge_slave_1: left allmulticast mode [ 343.852937][T18179] bridge_slave_1: left promiscuous mode [ 343.859476][T18179] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.859886][T18186] nbd: socks must be embedded in a SOCK_ITEM attr [ 343.874786][T18179] bridge_slave_0: left allmulticast mode [ 343.889383][T18179] bridge_slave_0: left promiscuous mode [ 343.898262][T18179] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.177858][ T5872] Bluetooth: hci1: command tx timeout [ 344.363784][T18204] netlink: 'syz.3.3404': attribute type 3 has an invalid length. [ 344.373335][T18204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3404'. [ 344.561404][T18206] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 344.568742][T18206] IPv6: NLM_F_CREATE should be set when creating new route [ 344.576000][T18206] IPv6: NLM_F_CREATE should be set when creating new route [ 344.958103][T18215] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3407'. [ 345.483931][T18227] netlink: 'syz.1.3412': attribute type 2 has an invalid length. [ 345.567461][T18227] netlink: 'syz.1.3412': attribute type 1 has an invalid length. [ 345.732674][T18232] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 346.008605][T18238] netlink: 'syz.1.3416': attribute type 10 has an invalid length. [ 346.048986][T18238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.088892][T18238] batadv0: entered promiscuous mode [ 346.094338][T18238] batadv0: entered allmulticast mode [ 346.211780][T18254] syzkaller0: entered promiscuous mode [ 346.227788][T18254] syzkaller0: entered allmulticast mode [ 346.256694][ T5872] Bluetooth: hci1: command tx timeout [ 346.395537][T18264] netlink: 'syz.2.3425': attribute type 1 has an invalid length. [ 346.879786][T18295] lo speed is unknown, defaulting to 1000 [ 346.889030][T18293] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 347.081292][T18295] netem: change failed [ 347.095425][T18295] __nla_validate_parse: 9 callbacks suppressed [ 347.095450][T18295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3434'. [ 347.113185][T18295] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3434'. [ 347.124630][T18295] netlink: 'syz.2.3434': attribute type 13 has an invalid length. [ 347.132758][T18295] netlink: 'syz.2.3434': attribute type 17 has an invalid length. [ 347.149538][T18295] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 347.274325][T18307] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 347.672012][T18323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3440'. [ 347.693733][T18323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3440'. [ 347.746143][T18327] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3440'. [ 347.761890][ T3604] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.773766][ T3604] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.801276][ T3604] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.806699][T18323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3440'. [ 347.810040][ T3604] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.830437][ T3604] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.843913][ T3604] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.856343][T18323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3440'. [ 347.898840][ T3604] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.909243][ T3604] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.954188][T18340] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.030668][T18340] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.064745][T18340] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.083933][T18344] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3447'. [ 348.144137][T18340] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.223988][ T73] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.245405][ T73] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.254118][ T73] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.271334][ T3604] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.336712][ T5869] Bluetooth: hci1: command tx timeout [ 348.425178][T18362] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3451'. [ 348.443165][T18364] validate_nla: 2 callbacks suppressed [ 348.443186][T18364] netlink: 'syz.2.3452': attribute type 1 has an invalid length. [ 348.474890][T18362] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3451'. [ 348.530354][T18366] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 348.933128][T18381] tipc: Enabled bearer , priority 0 [ 348.962990][T18381] syzkaller0: MTU too low for tipc bearer [ 348.974134][T18381] tipc: Disabling bearer [ 349.345515][T18390] _ÐZ`Ô€@S!: entered promiscuous mode [ 349.630558][T18409] lo speed is unknown, defaulting to 1000 [ 349.729277][T18416] syzkaller0: entered promiscuous mode [ 349.734911][T18416] syzkaller0: entered allmulticast mode [ 349.768181][T18409] netlink: 'syz.0.3465': attribute type 13 has an invalid length. [ 349.776205][T18409] netlink: 'syz.0.3465': attribute type 17 has an invalid length. [ 349.801977][T18409] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 350.311153][T18439] lo speed is unknown, defaulting to 1000 [ 350.432539][ T51] Bluetooth: hci1: command 0x0405 tx timeout [ 350.971747][T18470] syzkaller0: entered promiscuous mode [ 350.977575][T18470] syzkaller0: entered allmulticast mode [ 351.385137][T18499] netlink: 'syz.2.3491': attribute type 7 has an invalid length. [ 351.395634][T18500] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0 [ 351.465835][T18503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.480479][T18503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.491977][T18503] bond0 (unregistering): Released all slaves [ 351.900543][T18518] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 351.911318][T18518] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 351.963639][T18520] netlink: 'syz.0.3498': attribute type 1 has an invalid length. [ 352.095152][T18520] 8021q: adding VLAN 0 to HW filter on device bond2 [ 352.198242][T18522] bond2: (slave veth3): Enslaving as an active interface with a down link [ 352.253937][T18526] gretap1: entered promiscuous mode [ 352.263076][T18526] bond2: (slave gretap1): making interface the new active one [ 352.272757][T18526] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 352.306285][T18520] macvlan2: entered promiscuous mode [ 352.334365][T18520] macvlan2: entered allmulticast mode [ 352.344727][T18520] bond2: entered promiscuous mode [ 352.352518][T18520] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 352.360960][T18520] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 352.377998][T18520] bond2: left promiscuous mode [ 352.633386][T18569] __nla_validate_parse: 8 callbacks suppressed [ 352.633410][T18569] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3508'. [ 352.804812][T18572] tipc: Enabled bearer , priority 0 [ 352.856769][T18572] syzkaller0: entered promiscuous mode [ 352.863149][T18572] syzkaller0: entered allmulticast mode [ 352.874049][T18568] netlink: 'syz.4.3507': attribute type 10 has an invalid length. [ 352.961904][T18576] tipc: Resetting bearer [ 352.981314][T18571] tipc: Resetting bearer [ 352.992710][T18571] tipc: Disabling bearer [ 353.436235][T18600] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3518'. [ 353.622719][T18603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.641152][T18603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.891566][T18552] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.918970][T18552] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.951174][T18552] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.974862][T18552] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.984429][T18619] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3524'. [ 354.051755][T18617] lo speed is unknown, defaulting to 1000 [ 354.101762][T18626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3526'. [ 354.434065][T18617] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3523'. [ 354.478883][T18652] team0: Port device team_slave_0 removed [ 354.486319][T18652] team0: Port device team_slave_1 removed [ 354.492684][T18652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.501584][T18652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.587733][T18617] Bluetooth: MGMT ver 1.23 [ 355.091579][T18674] bridge_slave_0: left allmulticast mode [ 355.103208][T18674] bridge_slave_0: left promiscuous mode [ 355.109273][T18674] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.119199][T18674] bridge_slave_1: left allmulticast mode [ 355.124946][T18674] bridge_slave_1: left promiscuous mode [ 355.131389][T18674] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.142992][T18674] bond0: (slave bond_slave_0): Releasing backup interface [ 355.160733][T18674] bond0: (slave bond_slave_1): Releasing backup interface [ 355.186981][T18674] team0: Port device team_slave_0 removed [ 355.212157][T18674] team0: Port device team_slave_1 removed [ 355.221273][T18674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.229338][T18674] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.239124][T18674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.247188][T18674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.267777][T18681] netlink: 'syz.0.3537': attribute type 10 has an invalid length. [ 355.277547][T18674] bond2: (slave veth3): Releasing active interface [ 355.297125][T18674] bond2: (slave veth3): the permanent HWaddr of slave - 76:eb:35:14:1e:ba - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 355.357156][T18674] bond2: (slave gretap1): Releasing active interface [ 355.402297][T18681] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 355.858590][T18549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.881918][T18549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.980283][T18706] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3546'. [ 356.044919][T18709] netlink: 'syz.4.3546': attribute type 10 has an invalid length. [ 356.104083][T18712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3546'. [ 356.164833][T18702] gretap0: left allmulticast mode [ 356.191179][T18701] 8021q: adding VLAN 0 to HW filter on device bond1 [ 356.290431][T18553] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.301866][T18553] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.311395][T18553] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 356.320812][ T6570] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.361430][ T6570] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.398586][ T6570] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 356.414645][ T6570] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.439535][ T6570] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.458017][ T6570] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 356.469126][ T6570] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.478251][ T6570] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.487146][ T6570] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 356.504983][T18732] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3554'. [ 356.524476][T18728] openvswitch: netlink: Message has 4 unknown bytes. [ 356.603669][T18730] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3552'. [ 356.800640][T18751] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3560'. [ 356.811152][T18751] netlink: 'syz.4.3560': attribute type 21 has an invalid length. [ 356.820745][T18751] netlink: 'syz.4.3560': attribute type 1 has an invalid length. [ 357.142512][T18778] netlink: 'syz.0.3567': attribute type 16 has an invalid length. [ 357.155972][T18778] netlink: 'syz.0.3567': attribute type 17 has an invalid length. [ 358.989352][T18786] tipc: Enabling of bearer rejected, failed to enable media [ 359.034781][T18809] lo speed is unknown, defaulting to 1000 [ 359.047674][T18552] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.107083][T18552] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.197059][T18553] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.205636][T18553] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.305446][T18817] 8021q: VLANs not supported on lo [ 359.313665][T18817] tipc: Enabled bearer , priority 0 [ 359.321600][T18817] syzkaller0: entered promiscuous mode [ 359.327197][T18817] syzkaller0: entered allmulticast mode [ 359.340922][T18817] tipc: Resetting bearer [ 359.352096][T18815] tipc: Resetting bearer [ 359.356734][T18831] __nla_validate_parse: 5 callbacks suppressed [ 359.356754][T18831] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3579'. [ 359.375620][T18815] tipc: Disabling bearer [ 359.412868][T18831] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3579'. [ 359.522252][T18834] syzkaller1: entered promiscuous mode [ 359.528247][T18834] syzkaller1: entered allmulticast mode [ 359.679624][T18845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3583'. [ 360.042719][T18867] netlink: 'syz.3.3594': attribute type 3 has an invalid length. [ 360.143719][T18873] netlink: 'syz.3.3595': attribute type 1 has an invalid length. [ 360.269688][T18873] bond1: entered promiscuous mode [ 360.275187][T18873] 8021q: adding VLAN 0 to HW filter on device bond1 [ 360.310631][T18890] netlink: 'syz.0.3602': attribute type 1 has an invalid length. [ 360.381100][T18890] 8021q: adding VLAN 0 to HW filter on device bond3 [ 360.473794][T18895] bond3: (slave geneve2): making interface the new active one [ 360.482867][T18895] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 360.505413][T18552] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.520376][T18552] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.550184][T18552] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.562323][T18552] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.580817][T18898] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode [ 360.589934][T18898] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 360.628262][T18905] lo speed is unknown, defaulting to 1000 [ 361.113733][T18922] lo speed is unknown, defaulting to 1000 [ 361.133561][T18924] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 361.352092][T18932] lo speed is unknown, defaulting to 1000 [ 361.438805][T18938] netlink: 'syz.0.3615': attribute type 1 has an invalid length. [ 361.545207][T18922] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3608'. [ 361.673446][T18956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3620'. [ 361.684754][T18956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3620'. [ 361.765200][T18552] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.765301][T18956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3620'. [ 361.782730][T18956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3620'. [ 361.806335][T18552] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.820155][T18552] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.836171][T18552] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.855155][T18960] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3622'. [ 361.880053][T18960] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3622'. [ 362.124721][T18986] netlink: 'syz.0.3629': attribute type 2 has an invalid length. [ 362.137064][T18986] þ: entered promiscuous mode [ 362.147157][T18549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.163992][T18549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.312913][T18998] syzkaller0: entered promiscuous mode [ 362.338030][T18998] syzkaller0: entered allmulticast mode [ 362.441895][T19010] lo speed is unknown, defaulting to 1000 [ 362.576029][T19020] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 362.713180][T19030] xfrm1: entered promiscuous mode [ 362.718556][T19030] xfrm1: entered allmulticast mode [ 362.719712][T19032] openvswitch: netlink: IP tunnel dst address not specified [ 363.414198][T19098] tipc: Enabled bearer , priority 0 [ 363.424975][T19098] syzkaller0: entered promiscuous mode [ 363.431011][T19098] syzkaller0: entered allmulticast mode [ 363.446450][T19098] tipc: Resetting bearer [ 363.462322][T19097] tipc: Resetting bearer [ 363.479223][T19097] tipc: Disabling bearer [ 363.776170][T19116] nbd: must specify a size in bytes for the device [ 363.812679][T19116] netlink: 'syz.3.3668': attribute type 21 has an invalid length. [ 364.252385][T19149] syzkaller1: entered promiscuous mode [ 364.266972][T19149] syzkaller1: entered allmulticast mode [ 364.404922][T19166] tipc: Enabled bearer , priority 0 [ 364.429925][T19166] syzkaller0: entered promiscuous mode [ 364.435670][T19166] syzkaller0: entered allmulticast mode [ 364.457715][T19166] tipc: Resetting bearer [ 364.470216][T19165] tipc: Resetting bearer [ 364.484940][T19165] tipc: Disabling bearer [ 364.504842][T19178] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 364.511460][T19180] netlink: 'syz.2.3687': attribute type 1 has an invalid length. [ 364.600055][T19182] pim6reg1: entered promiscuous mode [ 364.605630][T19182] pim6reg1: entered allmulticast mode [ 364.814830][T19193] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.873094][T19193] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.942595][T19203] __nla_validate_parse: 9 callbacks suppressed [ 364.942618][T19203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3693'. [ 364.961076][T19193] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.979414][T19203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3693'. [ 364.989055][ T51] Bluetooth: hci1: command 0x0405 tx timeout [ 365.014661][T19193] bond0: (slave netdevsim0): Releasing backup interface [ 365.023913][T19193] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.114413][T18553] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.137600][T18547] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.152632][ T6570] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.164968][T18553] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.271972][T19217] syzkaller0: entered promiscuous mode [ 365.280543][T19217] syzkaller0: entered allmulticast mode [ 365.449003][T19223] netlink: 'syz.0.3701': attribute type 1 has an invalid length. [ 365.460203][T19223] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3701'. [ 365.469770][T19223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3701'. [ 365.523886][T19227] tipc: Enabled bearer , priority 0 [ 365.531521][T19227] syzkaller0: entered promiscuous mode [ 365.540235][T19227] syzkaller0: entered allmulticast mode [ 365.560802][T19227] tipc: Resetting bearer [ 365.571948][T19226] tipc: Resetting bearer [ 365.580798][T19226] tipc: Disabling bearer [ 365.868927][T19248] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3710'. [ 366.004659][T19259] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.081463][T19259] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.111561][T19268] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.165320][T19259] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.214160][T19268] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.260653][T19259] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.297914][T19268] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.308319][T19277] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3717'. [ 366.317673][T19277] openvswitch: netlink: Flow key attr not present in new flow. [ 366.357046][T19268] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.369653][T18547] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.381973][T18554] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.395655][T18547] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.412744][T18552] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.434696][T18547] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.453758][T18547] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.471857][T18553] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.489979][T18547] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.523776][T19284] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3718'. [ 366.533678][T19284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3718'. [ 366.576954][ T5872] Bluetooth: hci0: command tx timeout [ 366.724389][T19299] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.791299][T19299] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.840121][T19299] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.902322][T19299] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.049453][T19306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3724'. [ 367.060958][T19306] netlink: 'syz.1.3724': attribute type 1 has an invalid length. [ 367.093630][T19306] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3724'. [ 367.103284][T19306] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 367.305185][T19315] tipc: Enabled bearer , priority 0 [ 367.332037][T19315] syzkaller0: entered promiscuous mode [ 367.337694][T19315] syzkaller0: entered allmulticast mode [ 367.414855][T19318] tipc: Resetting bearer [ 367.426942][T19314] tipc: Resetting bearer [ 367.435470][T19314] tipc: Disabling bearer [ 367.789237][ T6570] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.814001][T18553] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.828853][T19341] netlink: 'syz.1.3734': attribute type 9 has an invalid length. [ 367.839524][T18553] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.852486][T19341] netlink: 'syz.1.3734': attribute type 11 has an invalid length. [ 367.852498][T18553] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.219037][T19350] netlink: 'syz.1.3738': attribute type 14 has an invalid length. [ 368.227247][T19350] netlink: 'syz.1.3738': attribute type 13 has an invalid length. [ 368.238668][T19350] netlink: 'syz.1.3738': attribute type 58 has an invalid length. [ 369.122921][T19382] netlink: 'syz.4.3747': attribute type 1 has an invalid length. [ 369.139360][T19382] netlink: 'syz.4.3747': attribute type 10 has an invalid length. [ 369.236008][T19388] netlink: 'syz.1.3750': attribute type 22 has an invalid length. [ 369.615274][T19418] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.627747][T19418] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 370.367292][T19451] lo speed is unknown, defaulting to 1000 [ 370.474998][T19458] validate_nla: 1 callbacks suppressed [ 370.475033][T19458] netlink: 'syz.2.3773': attribute type 3 has an invalid length. [ 370.475223][T19460] netlink: 'syz.4.3774': attribute type 1 has an invalid length. [ 370.480594][T19458] netlink: 'syz.2.3773': attribute type 1 has an invalid length. [ 370.524640][T19460] 8021q: adding VLAN 0 to HW filter on device bond2 [ 370.546124][T19460] 8021q: adding VLAN 0 to HW filter on device bond2 [ 370.553757][T19460] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 370.566025][T19460] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 370.596225][T18547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.606197][T18547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.860424][T19486] __nla_validate_parse: 8 callbacks suppressed [ 370.860445][T19486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3781'. [ 370.878914][T19486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3781'. [ 370.887873][T19486] netlink: 'syz.4.3781': attribute type 1 has an invalid length. [ 370.895776][T19486] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3781'. [ 371.003461][T19486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3781'. [ 371.023026][T19486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3781'. [ 371.054332][T19486] netlink: 'syz.4.3781': attribute type 12 has an invalid length. [ 371.088902][T19499] lo speed is unknown, defaulting to 1000 [ 371.148433][T19503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3782'. [ 371.278230][T19509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3786'. [ 371.313737][T19509] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.352920][T19509] bridge_slave_1 (unregistering): left allmulticast mode [ 371.376563][T19509] bridge_slave_1 (unregistering): left promiscuous mode [ 371.383809][T19509] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.544439][T19520] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3787'. [ 371.578624][T19520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.599074][T19520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.637202][T19520] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 371.694658][T19520] bond0 (unregistering): Released all slaves [ 371.923540][T19534] netlink: 'syz.3.3791': attribute type 1 has an invalid length. [ 371.950675][T19534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.968007][T19534] gretap1: entered promiscuous mode [ 371.977331][T19534] bond0: (slave gretap1): making interface the new active one [ 371.986319][T19534] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 372.003826][T19534] macvlan2: entered promiscuous mode [ 372.009825][T19534] macvlan2: entered allmulticast mode [ 372.016116][T19534] bond0: entered promiscuous mode [ 372.022223][T19534] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 372.030114][T19534] bond0: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 372.046781][T19534] bond0: left promiscuous mode [ 372.080910][T19543] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode [ 372.094571][T19543] bond0: (slave wlan1): Releasing backup interface [ 372.120275][T19543] bond3: (slave geneve2): Releasing active interface [ 372.148092][T18552] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.155305][T19546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3795'. [ 372.169468][T18552] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.183790][T18549] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.200334][T19548] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3796'. [ 372.212417][T18549] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.225231][T19543] netlink: 'syz.0.3794': attribute type 10 has an invalid length. [ 372.239389][T19543] mac80211_hwsim hwsim41 wlan1: left allmulticast mode [ 372.255453][T19543] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 372.475291][T19570] tipc: Enabled bearer , priority 0 [ 372.487480][T19570] tipc: Resetting bearer [ 372.495004][T19569] tipc: Disabling bearer [ 372.517050][ T6570] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.525735][ T6570] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.537005][ T6570] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.555683][ T6570] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.577031][T19571] hsr_slave_0: left promiscuous mode [ 372.592504][T19571] hsr_slave_1: left promiscuous mode [ 372.640145][T19576] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 372.741467][T19581] netlink: 'syz.2.3806': attribute type 4 has an invalid length. [ 372.759365][T19581] netlink: 'syz.2.3806': attribute type 4 has an invalid length. [ 372.765656][T19579] lo speed is unknown, defaulting to 1000 [ 373.100585][T19592] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 373.254635][T19601] tipc: Enabled bearer , priority 0 [ 373.262101][T19601] syzkaller0: entered promiscuous mode [ 373.268432][T19601] syzkaller0: entered allmulticast mode [ 373.292210][T19601] tipc: Resetting bearer [ 373.304838][T19600] tipc: Resetting bearer [ 373.315478][T19600] tipc: Disabling bearer [ 373.481651][T19607] syzkaller0: entered promiscuous mode [ 373.487257][T19607] syzkaller0: entered allmulticast mode [ 373.679636][T19616] ip6tnl1: entered promiscuous mode [ 373.684902][T19616] ip6tnl1: entered allmulticast mode [ 373.733038][T19622] IPVS: Unknown mcast interface: veth1_to_bridge [ 374.364593][T19645] netlink: 'syz.4.3829': attribute type 10 has an invalid length. [ 374.681830][T19653] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 374.753197][T19655] syzkaller0: entered promiscuous mode [ 374.759799][T19655] syzkaller0: entered allmulticast mode [ 375.010845][T19676] lo speed is unknown, defaulting to 1000 [ 375.507516][T19696] lo speed is unknown, defaulting to 1000 [ 375.759622][T19705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 375.792386][T19707] netlink: 'syz.2.3849': attribute type 2 has an invalid length. [ 376.212795][T19723] netlink: 'syz.3.3854': attribute type 4 has an invalid length. [ 376.242480][T19723] netlink: 'syz.3.3854': attribute type 4 has an invalid length. [ 376.287321][T19723] lo speed is unknown, defaulting to 1000 [ 376.377481][T19726] tipc: Enabling of bearer rejected, failed to enable media [ 376.476297][T19731] netlink: 'syz.3.3856': attribute type 7 has an invalid length. [ 376.484676][T19731] netlink: 'syz.3.3856': attribute type 8 has an invalid length. [ 376.496269][T19731] netlink: 'syz.3.3856': attribute type 15 has an invalid length. [ 376.600784][T19740] __nla_validate_parse: 9 callbacks suppressed [ 376.600806][T19740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3857'. [ 376.829178][T19752] lo speed is unknown, defaulting to 1000 [ 376.902407][T19746] geneve3: entered allmulticast mode [ 376.964659][T19761] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3861'. [ 376.986812][ T6570] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.995116][ T6570] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.049474][ T6570] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.129838][T19771] netlink: 'syz.0.3869': attribute type 1 has an invalid length. [ 377.139323][T19771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.164067][ T6570] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.181539][T19769] lo speed is unknown, defaulting to 1000 [ 377.233688][T19779] netlink: 'syz.4.3870': attribute type 3 has an invalid length. [ 377.242658][T19779] netlink: 'syz.4.3870': attribute type 3 has an invalid length. [ 377.245824][T19772] lo speed is unknown, defaulting to 1000 [ 377.256250][T19779] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3870'. [ 377.582337][T19803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3877'. [ 377.680689][T19810] netlink: 324 bytes leftover after parsing attributes in process `syz.1.3880'. [ 377.684458][T19813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3881'. [ 377.705066][T19814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3881'. [ 377.927154][T19829] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3887'. [ 377.940156][T19830] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 378.075511][T19833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3889'. [ 378.306876][T19847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3893'. [ 378.394421][T19851] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.471020][T19851] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.519396][T19851] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.579335][T19851] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.664926][T18555] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.682733][T18555] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.707315][T18555] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.718963][T18555] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.976038][T19879] macsec1: entered promiscuous mode [ 378.984505][T19879] mac80211_hwsim hwsim38 wlan1: entered promiscuous mode [ 378.995984][T19879] mac80211_hwsim hwsim38 wlan1: left promiscuous mode [ 379.043391][T19880] lo speed is unknown, defaulting to 1000 [ 379.164406][T19890] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 379.418900][T19903] ip6tnl1: left promiscuous mode [ 379.424101][T19903] ip6tnl1: left allmulticast mode [ 379.857171][T19920] netlink: 'syz.2.3918': attribute type 19 has an invalid length. [ 379.916948][T19923] lo speed is unknown, defaulting to 1000 [ 380.082327][T19929] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 380.096163][T19929] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 380.183115][T19930] lo speed is unknown, defaulting to 1000 [ 380.289215][T19938] tipc: Enabled bearer , priority 0 [ 380.311771][T19938] syzkaller0: entered promiscuous mode [ 380.323118][T19938] syzkaller0: entered allmulticast mode [ 380.371632][T19938] tipc: Resetting bearer [ 380.383790][T19936] tipc: Resetting bearer [ 380.399736][T19936] tipc: Disabling bearer [ 380.592424][T19953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.641962][T19953] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode [ 380.974439][T19972] tipc: Enabled bearer , priority 0 [ 380.985826][T19972] tipc: Resetting bearer [ 381.134484][T19969] tipc: Disabling bearer [ 381.743135][T20017] __nla_validate_parse: 16 callbacks suppressed [ 381.743160][T20017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3948'. [ 381.770436][T20012] IPVS: Scheduler module ip_vs_sip not found [ 381.815680][T20017] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.839263][T20020] netlink: 676 bytes leftover after parsing attributes in process `syz.3.3948'. [ 381.869254][T20020] netlink: 676 bytes leftover after parsing attributes in process `syz.3.3948'. [ 381.965748][T20027] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3937'. [ 381.988806][T20017] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.996927][T20030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3950'. [ 382.031610][T20030] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3950'. [ 382.058340][T20032] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3952'. [ 382.097059][T20017] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.171797][T20034] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3952'. [ 382.243409][T20017] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.366442][T18555] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.405038][T18555] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.428728][T18554] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.615919][T18554] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.789175][T20052] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3956'. [ 382.915480][T20061] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.974958][T20061] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.024495][T20070] batadv1: entered promiscuous mode [ 383.042439][T20061] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.064473][T20074] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3964'. [ 383.182372][T20061] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.509574][ T6570] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.568914][T18549] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.622316][T18549] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.710068][T18547] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.866808][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 384.264258][T20142] syzkaller0: entered promiscuous mode [ 384.275014][T20142] syzkaller0: entered allmulticast mode [ 384.295806][T20139] veth2: entered promiscuous mode [ 384.304357][T20139] veth2: entered allmulticast mode [ 384.440447][T20159] tipc: Enabled bearer , priority 0 [ 384.488462][T20160] tipc: Disabling bearer [ 384.574480][T20169] validate_nla: 1 callbacks suppressed [ 384.574505][T20169] netlink: 'syz.0.3992': attribute type 13 has an invalid length. [ 384.603728][T20169] netlink: 'syz.0.3992': attribute type 17 has an invalid length. [ 384.660244][T20169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.669372][T20169] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.678257][T18805] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 384.703310][T20169] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 384.781325][T18549] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 384.803402][T18549] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 384.845709][T20172] lo speed is unknown, defaulting to 1000 [ 384.887662][T18805] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 385.152794][T20201] netlink: 'syz.1.4003': attribute type 1 has an invalid length. [ 385.163629][T20201] netlink: 'syz.1.4003': attribute type 1 has an invalid length. [ 385.206316][T20205] hsr_slave_1 (unregistering): left promiscuous mode [ 385.267661][T20211] FAULT_INJECTION: forcing a failure. [ 385.267661][T20211] name failslab, interval 1, probability 0, space 0, times 0 [ 385.281195][T20211] CPU: 0 UID: 0 PID: 20211 Comm: syz.2.4002 Not tainted syzkaller #0 PREEMPT(full) [ 385.281224][T20211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 385.281236][T20211] Call Trace: [ 385.281244][T20211] [ 385.281253][T20211] dump_stack_lvl+0x189/0x250 [ 385.281283][T20211] ? __pfx____ratelimit+0x10/0x10 [ 385.281312][T20211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.281334][T20211] ? __pfx__printk+0x10/0x10 [ 385.281363][T20211] ? __pfx___might_resched+0x10/0x10 [ 385.281382][T20211] ? lock_acquire+0x5f/0x360 [ 385.281410][T20211] should_fail_ex+0x414/0x560 [ 385.281437][T20211] should_failslab+0xa8/0x100 [ 385.281466][T20211] __kmalloc_noprof+0xcb/0x4f0 [ 385.281490][T20211] ? kfree+0x4d/0x440 [ 385.281511][T20211] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 385.281534][T20211] tomoyo_realpath_from_path+0xe3/0x5d0 [ 385.281554][T20211] ? tomoyo_domain+0xd9/0x130 [ 385.281577][T20211] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 385.281603][T20211] tomoyo_path_number_perm+0x1e8/0x5a0 [ 385.281628][T20211] ? lock_release+0x4b/0x3e0 [ 385.281655][T20211] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 385.281683][T20211] ? rcu_is_watching+0x15/0xb0 [ 385.281702][T20211] ? lock_release+0x4b/0x3e0 [ 385.281727][T20211] ? vfs_write+0x956/0xb30 [ 385.281754][T20211] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 385.281793][T20211] ? lock_release+0x4b/0x3e0 [ 385.281822][T20211] ? __fget_files+0x2a/0x420 [ 385.281839][T20211] ? __fget_files+0x3a0/0x420 [ 385.281856][T20211] ? __fget_files+0x2a/0x420 [ 385.281874][T20211] security_file_ioctl+0xcb/0x2d0 [ 385.281900][T20211] __se_sys_ioctl+0x47/0x170 [ 385.281924][T20211] do_syscall_64+0xfa/0x3b0 [ 385.281942][T20211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.281962][T20211] ? clear_bhb_loop+0x60/0xb0 [ 385.281983][T20211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.282002][T20211] RIP: 0033:0x7f3a39f8ebe9 [ 385.282028][T20211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.282047][T20211] RSP: 002b:00007f3a3ade5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 385.282071][T20211] RAX: ffffffffffffffda RBX: 00007f3a3a1b6180 RCX: 00007f3a39f8ebe9 [ 385.282086][T20211] RDX: 0000200000000200 RSI: 000000008004745a RDI: 0000000000000006 [ 385.282101][T20211] RBP: 00007f3a3ade5090 R08: 0000000000000000 R09: 0000000000000000 [ 385.282114][T20211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.282127][T20211] R13: 00007f3a3a1b6218 R14: 00007f3a3a1b6180 R15: 00007fff6be45398 [ 385.282151][T20211] [ 385.282160][T20211] ERROR: Out of memory at tomoyo_realpath_from_path. [ 385.316575][ T7634] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 386.193227][T20231] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 386.206827][T20231] openvswitch: netlink: Message has 1 unknown bytes. [ 386.239892][T20231] netlink: 'syz.2.4013': attribute type 1 has an invalid length. [ 386.269160][T20227] lo speed is unknown, defaulting to 1000 [ 386.340931][T20240] netlink: 'syz.1.4012': attribute type 3 has an invalid length. [ 386.724182][T20248] netlink: 'syz.0.4016': attribute type 12 has an invalid length. [ 389.226510][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 389.426936][T20265] tipc: Started in network mode [ 389.431870][T20265] tipc: Node identity 2a3444a336c1, cluster identity 4711 [ 389.449037][T20265] tipc: Enabled bearer , priority 0 [ 389.457106][T20265] syzkaller0: entered promiscuous mode [ 389.462009][T20266] __nla_validate_parse: 17 callbacks suppressed [ 389.462029][T20266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4020'. [ 389.483181][T20265] syzkaller0: entered allmulticast mode [ 389.572292][T20265] tipc: Resetting bearer [ 389.608647][T20261] tipc: Resetting bearer [ 389.682790][T20280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4027'. [ 389.692870][T20261] tipc: Disabling bearer [ 389.744350][T20266] netlink: 'syz.0.4020': attribute type 4 has an invalid length. [ 389.795782][T20276] netlink: 'syz.0.4020': attribute type 4 has an invalid length. [ 389.896720][T20257] IPVS: length: 24 != 55320 [ 390.493822][T20299] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4030'. [ 390.572458][T20302] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4032'. [ 390.581611][T20302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4032'. [ 390.635162][T20304] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4033'. [ 390.645188][T20304] netlink: 'syz.3.4033': attribute type 1 has an invalid length. [ 391.139701][T20324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4039'. [ 391.148968][T20324] netlink: 'syz.0.4039': attribute type 5 has an invalid length. [ 391.161796][T20324] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4039'. [ 391.184644][T20326] netlink: 'syz.3.4040': attribute type 10 has an invalid length. [ 391.256816][T20324] geneve4: entered promiscuous mode [ 391.283528][T20331] netlink: 'syz.1.4041': attribute type 7 has an invalid length. [ 391.316630][T20324] geneve4: entered allmulticast mode [ 391.356717][ T6570] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 391.376055][ T6570] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 391.405929][ T6570] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 391.434461][T20321] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4038'. [ 391.448060][ T6570] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 391.464780][T20336] netlink: 'syz.3.4042': attribute type 1 has an invalid length. [ 391.513492][T20336] 8021q: adding VLAN 0 to HW filter on device bond3 [ 391.573968][T20336] 8021q: adding VLAN 0 to HW filter on device bond3 [ 391.582964][T20336] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 391.615210][T20336] bond3: (slave vcan1): Error -95 calling set_mac_address [ 391.694894][T20348] netlink: 'syz.3.4042': attribute type 1 has an invalid length. [ 391.703189][T20348] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4042'. [ 391.724377][T20350] netlink: 'syz.4.4045': attribute type 1 has an invalid length. [ 391.807290][T20350] nbd: socks must be embedded in a SOCK_ITEM attr [ 391.813904][T20350] block nbd2: shutting down sockets [ 391.962600][T20357] lo speed is unknown, defaulting to 1000 [ 392.738240][T20394] IPVS: Error joining to the multicast group [ 392.768359][T20394] netlink: 'syz.3.4059': attribute type 1 has an invalid length. [ 392.877799][T20394] 8021q: adding VLAN 0 to HW filter on device bond4 [ 393.306674][T20418] bpq0: entered promiscuous mode [ 393.852494][ T7634] IPVS: starting estimator thread 0... [ 393.947998][T20436] IPVS: using max 40 ests per chain, 96000 per kthread [ 394.039326][T20446] bridge11: entered promiscuous mode [ 394.059852][T20446] bridge11: entered allmulticast mode [ 394.084103][T20450] lo speed is unknown, defaulting to 1000 [ 394.094518][T20448] batadv1: entered promiscuous mode [ 394.106777][T20448] batadv1: entered allmulticast mode [ 394.762623][T20486] __nla_validate_parse: 22 callbacks suppressed [ 394.762648][T20486] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4086'. [ 394.785162][T18549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.858715][T18549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.949844][T20500] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4092'. [ 395.082829][T20495] lo speed is unknown, defaulting to 1000 [ 395.170776][T20488] lo speed is unknown, defaulting to 1000 [ 395.240519][T20520] validate_nla: 1 callbacks suppressed [ 395.240538][T20520] netlink: 'syz.2.4097': attribute type 4 has an invalid length. [ 395.428469][T20531] tipc: Enabled bearer , priority 0 [ 395.487780][T20495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4090'. [ 395.526918][T20495] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4090'. [ 395.551225][T20531] syzkaller0: entered promiscuous mode [ 395.577841][T20531] syzkaller0: entered allmulticast mode [ 395.589363][T20531] tipc: Resetting bearer [ 395.600035][T20501] netlink: 'syz.1.4090': attribute type 13 has an invalid length. [ 395.600868][T20538] netlink: 209592 bytes leftover after parsing attributes in process `syz.4.4101'. [ 395.645430][T18553] tipc: Resetting bearer [ 395.672077][T20501] netlink: 'syz.1.4090': attribute type 17 has an invalid length. [ 395.782321][T20541] batadv_slave_1: entered promiscuous mode [ 395.830561][T20501] gretap0: left promiscuous mode [ 395.889085][T20501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.900611][T20501] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.916681][T20501] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 395.946994][T20527] tipc: Resetting bearer [ 396.091568][T20527] tipc: Disabling bearer [ 396.126749][T20541] batadv_slave_1: left promiscuous mode [ 396.224665][T20572] netlink: 'syz.1.4111': attribute type 9 has an invalid length. [ 396.233469][T20572] netlink: 'syz.1.4111': attribute type 6 has an invalid length. [ 396.404152][T20587] lo speed is unknown, defaulting to 1000 [ 396.410949][T20587] lo speed is unknown, defaulting to 1000 [ 396.422871][T20587] lo speed is unknown, defaulting to 1000 [ 396.427742][T20588] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 396.450894][T20588] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4115'. [ 396.500657][T20590] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 396.733499][T20587] infiniband syz0: set active [ 396.739513][ T7637] lo speed is unknown, defaulting to 1000 [ 396.752758][ T7637] syz0: Port: 1 Link ACTIVE [ 396.762376][T20587] infiniband syz0: added lo [ 396.809778][T20587] RDS/IB: syz0: added [ 396.814038][T20587] smc: adding ib device syz0 with port count 1 [ 396.820822][T20587] smc: ib device syz0 port 1 has pnetid [ 396.827153][ T7637] lo speed is unknown, defaulting to 1000 [ 396.833609][T20587] lo speed is unknown, defaulting to 1000 [ 397.083990][T20587] lo speed is unknown, defaulting to 1000 [ 397.216899][ T51] Bluetooth: hci1: command 0x0405 tx timeout [ 397.265326][T20608] netlink: 'syz.1.4119': attribute type 10 has an invalid length. [ 397.284036][T20610] netlink: 'syz.2.4120': attribute type 21 has an invalid length. [ 397.294403][T20610] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4120'. [ 397.299886][T20587] lo speed is unknown, defaulting to 1000 [ 397.309332][T20608] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4119'. [ 397.321573][T20608] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 397.343017][T20610] netlink: 'syz.2.4120': attribute type 4 has an invalid length. [ 397.352187][T20610] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4120'. [ 397.406451][T20587] lo speed is unknown, defaulting to 1000 [ 397.424949][T20613] tipc: Enabled bearer , priority 0 [ 397.462612][T20614] syzkaller0: entered promiscuous mode [ 397.476706][T20614] syzkaller0: entered allmulticast mode [ 397.530610][T20620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4123'. [ 397.542959][T20587] lo speed is unknown, defaulting to 1000 [ 397.628809][T20626] bridge_slave_0: entered promiscuous mode [ 397.664040][T20587] lo speed is unknown, defaulting to 1000 [ 397.760215][T20587] lo speed is unknown, defaulting to 1000 [ 397.843274][T20587] lo speed is unknown, defaulting to 1000 [ 397.936505][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 397.974052][T20633] team0: entered promiscuous mode [ 397.993489][T20633] batadv1: entered promiscuous mode [ 398.001518][T20633] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 398.018211][T20587] lo speed is unknown, defaulting to 1000 [ 398.496318][T20662] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 398.516171][T20662] netlink: 'syz.0.4135': attribute type 16 has an invalid length. [ 398.524612][T20662] netlink: 'syz.0.4135': attribute type 17 has an invalid length. [ 398.536780][ T7637] tipc: Node number set to 1362773755 [ 398.830049][ T6570] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.840749][ T6570] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 398.989364][T20675] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.032978][T20675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.045628][T20675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.094369][T20675] bond1: left promiscuous mode [ 399.115579][T20675] xfrm1: left promiscuous mode [ 399.121194][T20675] xfrm1: left allmulticast mode [ 399.129160][T20675] gretap1: left promiscuous mode [ 399.138582][ T24] lo speed is unknown, defaulting to 1000 [ 399.138624][ T6570] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.144351][ T24] syz0: Port: 1 Link DOWN [ 399.162500][ T6570] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 399.171541][ T6570] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.185025][ T6570] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 399.193681][ T6570] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.202766][ T6570] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 399.219213][T20680] hsr_slave_0: left promiscuous mode [ 399.225267][T20680] hsr_slave_1: left promiscuous mode [ 399.233522][ T24] lo speed is unknown, defaulting to 1000 [ 399.243378][ T6570] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.268359][ T6570] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.282840][ T6570] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.291619][ T6570] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.365964][T20687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 399.460573][T20692] tipc: Enabling of bearer rejected, already enabled [ 399.501883][T20692] tipc: Resetting bearer [ 399.677071][T20705] lo speed is unknown, defaulting to 1000 [ 399.703561][T20705] lo speed is unknown, defaulting to 1000 [ 399.713719][T20714] geneve3: entered promiscuous mode [ 399.719555][T20714] geneve3: entered allmulticast mode [ 399.726290][T18555] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.734929][T18555] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.829247][T18555] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.850332][T18555] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.889531][T20701] infiniband syz!: set down [ 399.894192][T20701] infiniband syz!: added team_slave_0 [ 399.956186][T20701] RDS/IB: syz!: added [ 399.960553][T20701] smc: adding ib device syz! with port count 1 [ 399.967310][T20701] smc: ib device syz! port 1 has pnetid [ 400.191568][T20733] __nla_validate_parse: 14 callbacks suppressed [ 400.191593][T20733] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4156'. [ 401.091808][T20747] lo speed is unknown, defaulting to 1000 [ 401.133013][T20747] lo speed is unknown, defaulting to 1000 [ 401.360750][T20757] validate_nla: 1 callbacks suppressed [ 401.360772][T20757] netlink: 'syz.2.4165': attribute type 3 has an invalid length. [ 401.953699][T20752] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 402.340664][T20764] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4168'. [ 403.271850][T20821] xt_l2tp: unknown flags: 51 [ 403.505499][T20832] netlink: 'syz.4.4190': attribute type 9 has an invalid length. [ 403.547055][T20832] netlink: 'syz.4.4190': attribute type 7 has an invalid length. [ 403.585932][T20832] netlink: 'syz.4.4190': attribute type 8 has an invalid length. [ 403.930994][T20862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4200'. [ 403.939049][T20856] syzkaller0: entered promiscuous mode [ 403.945637][T20856] syzkaller0: entered allmulticast mode [ 404.223317][T20880] syz_tun: entered promiscuous mode [ 404.281593][T20884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4207'. [ 404.621513][T20903] tipc: Enabling of bearer rejected, already enabled [ 404.641155][T20903] tipc: Enabling of bearer rejected, failed to enable media [ 404.656675][T20905] batadv_slave_1: entered promiscuous mode [ 404.664633][T20904] batadv_slave_1: left promiscuous mode [ 404.883229][T20926] FAULT_INJECTION: forcing a failure. [ 404.883229][T20926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.902349][T20926] CPU: 1 UID: 0 PID: 20926 Comm: syz.4.4219 Not tainted syzkaller #0 PREEMPT(full) [ 404.902382][T20926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 404.902395][T20926] Call Trace: [ 404.902403][T20926] [ 404.902422][T20926] dump_stack_lvl+0x189/0x250 [ 404.902451][T20926] ? __pfx____ratelimit+0x10/0x10 [ 404.902479][T20926] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.902503][T20926] ? __pfx__printk+0x10/0x10 [ 404.902533][T20926] ? rcu_is_watching+0x15/0xb0 [ 404.902556][T20926] should_fail_ex+0x414/0x560 [ 404.902584][T20926] _copy_to_user+0x31/0xb0 [ 404.902608][T20926] simple_read_from_buffer+0xe1/0x170 [ 404.902639][T20926] proc_fail_nth_read+0x1b3/0x220 [ 404.902663][T20926] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 404.902686][T20926] ? rw_verify_area+0x2a6/0x4d0 [ 404.902711][T20926] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 404.902742][T20926] vfs_read+0x1fd/0xa30 [ 404.902766][T20926] ? fdget_pos+0x247/0x320 [ 404.902786][T20926] ? __pfx___mutex_lock+0x10/0x10 [ 404.902816][T20926] ? __pfx_vfs_read+0x10/0x10 [ 404.902845][T20926] ? __fget_files+0x3a0/0x420 [ 404.902861][T20926] ? __fget_files+0x2a/0x420 [ 404.902882][T20926] ksys_read+0x145/0x250 [ 404.902908][T20926] ? __pfx_ksys_read+0x10/0x10 [ 404.902930][T20926] ? rcu_is_watching+0x15/0xb0 [ 404.902958][T20926] ? rcu_is_watching+0x15/0xb0 [ 404.902979][T20926] do_syscall_64+0xfa/0x3b0 [ 404.902999][T20926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.903019][T20926] ? clear_bhb_loop+0x60/0xb0 [ 404.903041][T20926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.903060][T20926] RIP: 0033:0x7f028298d5fc [ 404.903079][T20926] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 404.903098][T20926] RSP: 002b:00007f028384a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 404.903122][T20926] RAX: ffffffffffffffda RBX: 00007f0282bb5fa0 RCX: 00007f028298d5fc [ 404.903138][T20926] RDX: 000000000000000f RSI: 00007f028384a0a0 RDI: 0000000000000004 [ 404.903152][T20926] RBP: 00007f028384a090 R08: 0000000000000000 R09: 0000000000000000 [ 404.903166][T20926] R10: 0000000000000122 R11: 0000000000000246 R12: 0000000000000002 [ 404.903180][T20926] R13: 00007f0282bb6038 R14: 00007f0282bb5fa0 R15: 00007ffc72264ee8 [ 404.903204][T20926] [ 405.143080][T20934] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4223'. [ 405.158905][T20935] bridge: RTM_NEWNEIGH with invalid ether address [ 405.179527][T20935] lo speed is unknown, defaulting to 1000 [ 405.186166][T20935] lo speed is unknown, defaulting to 1000 [ 405.453858][ T6570] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.462694][ T6570] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.496962][ T6570] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.529676][ T6570] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.554046][T20961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4229'. [ 405.576864][T20952] lo speed is unknown, defaulting to 1000 [ 405.585469][T20952] lo speed is unknown, defaulting to 1000 [ 405.614773][T20961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4229'. [ 405.688826][T20964] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4231'. [ 405.871864][T20979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4233'. [ 406.357956][T21006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4243'. [ 406.431324][T21006] macsec2: entered allmulticast mode [ 406.442761][T21006] macvlan1: entered allmulticast mode [ 406.562697][T21020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4250'. [ 406.588677][T21020] netlink: 'syz.4.4250': attribute type 10 has an invalid length. [ 406.608124][T21020] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4250'. [ 406.666886][T21029] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4250'. [ 406.717737][T21020] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 406.744212][T21022] lo speed is unknown, defaulting to 1000 [ 406.775638][T21022] lo speed is unknown, defaulting to 1000 [ 406.989957][T21042] netlink: 'syz.2.4257': attribute type 11 has an invalid length. [ 407.058541][T21043] netlink: 268 bytes leftover after parsing attributes in process `syz.4.4258'. [ 407.140714][T21048] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4260'. [ 407.153012][T21048] netlink: 'syz.0.4260': attribute type 3 has an invalid length. [ 407.794338][T21079] tipc: Enabled bearer , priority 0 [ 407.856259][T21079] syzkaller0: entered promiscuous mode [ 407.862030][T21079] syzkaller0: entered allmulticast mode [ 407.953121][T21079] tipc: Resetting bearer [ 408.185882][T21079] tipc: Disabling bearer [ 408.211416][T21084] team0: left promiscuous mode [ 408.216252][T21084] batadv1: left promiscuous mode [ 408.222188][T21084] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.231746][T21084] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 408.253227][T21089] bpq0: left promiscuous mode [ 408.489644][T21107] netlink: 'syz.3.4273': attribute type 6 has an invalid length. [ 408.579755][T21115] 8021q: adding VLAN 0 to HW filter on device bond4 [ 408.803030][T21140] nbd: must specify a size in bytes for the device [ 409.686729][T21179] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 409.703441][T21177] tipc: Enabling of bearer rejected, failed to enable media [ 409.719635][T21177] syzkaller0: entered promiscuous mode [ 409.725256][T21177] syzkaller0: entered allmulticast mode [ 409.744425][T21177] bridge_slave_0: entered promiscuous mode [ 409.751421][T21177] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 410.063586][T21196] lo speed is unknown, defaulting to 1000 [ 410.083459][T21196] lo speed is unknown, defaulting to 1000 [ 410.127008][T21203] syz_tun: entered allmulticast mode [ 410.361047][T21215] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 512, id = 0 [ 410.877149][T21192] syz_tun: left allmulticast mode [ 410.992205][T21242] __nla_validate_parse: 30 callbacks suppressed [ 410.992226][T21242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4316'. [ 411.013393][T21242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4316'. [ 411.022717][T21239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4316'. [ 411.040906][T21239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4316'. [ 411.055914][T21245] lo speed is unknown, defaulting to 1000 [ 411.080189][T21247] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4319'. [ 411.158983][T21245] lo speed is unknown, defaulting to 1000 [ 411.267001][T21259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4321'. [ 411.381999][T21262] FAULT_INJECTION: forcing a failure. [ 411.381999][T21262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.415515][T21262] CPU: 0 UID: 0 PID: 21262 Comm: syz.4.4322 Not tainted syzkaller #0 PREEMPT(full) [ 411.415548][T21262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 411.415561][T21262] Call Trace: [ 411.415569][T21262] [ 411.415578][T21262] dump_stack_lvl+0x189/0x250 [ 411.415617][T21262] ? __pfx____ratelimit+0x10/0x10 [ 411.415646][T21262] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.415669][T21262] ? __pfx__printk+0x10/0x10 [ 411.415695][T21262] ? rcu_is_watching+0x15/0xb0 [ 411.415716][T21262] ? lock_acquire+0x5f/0x360 [ 411.415747][T21262] ? rcu_is_watching+0x15/0xb0 [ 411.415768][T21262] should_fail_ex+0x414/0x560 [ 411.415797][T21262] _copy_from_user+0x2d/0xb0 [ 411.415822][T21262] bpf_test_init+0xf8/0x170 [ 411.415853][T21262] bpf_prog_test_run_xdp+0x37c/0x1000 [ 411.415887][T21262] ? rcu_is_watching+0x15/0xb0 [ 411.415910][T21262] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 411.415942][T21262] ? __fget_files+0x2a/0x420 [ 411.415973][T21262] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 411.416003][T21262] bpf_prog_test_run+0x2c7/0x340 [ 411.416034][T21262] __sys_bpf+0x581/0x870 [ 411.416061][T21262] ? __pfx___sys_bpf+0x10/0x10 [ 411.416094][T21262] ? ksys_write+0x22a/0x250 [ 411.416127][T21262] ? __pfx_ksys_write+0x10/0x10 [ 411.416151][T21262] ? rcu_is_watching+0x15/0xb0 [ 411.416175][T21262] __x64_sys_bpf+0x7c/0x90 [ 411.416199][T21262] do_syscall_64+0xfa/0x3b0 [ 411.416218][T21262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.416239][T21262] ? clear_bhb_loop+0x60/0xb0 [ 411.416262][T21262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.416281][T21262] RIP: 0033:0x7f028298ebe9 [ 411.416301][T21262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.416321][T21262] RSP: 002b:00007f028384a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 411.416345][T21262] RAX: ffffffffffffffda RBX: 00007f0282bb5fa0 RCX: 00007f028298ebe9 [ 411.416359][T21262] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 411.416372][T21262] RBP: 00007f028384a090 R08: 0000000000000000 R09: 0000000000000000 [ 411.416385][T21262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.416396][T21262] R13: 00007f0282bb6038 R14: 00007f0282bb5fa0 R15: 00007ffc72264ee8 [ 411.416419][T21262] [ 411.503182][T21249] syzkaller1: entered promiscuous mode [ 411.656018][T21249] syzkaller1: entered allmulticast mode [ 411.688099][T21271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4324'. [ 412.275856][T21301] lo speed is unknown, defaulting to 1000 [ 412.320695][T21301] lo speed is unknown, defaulting to 1000 [ 412.480137][T21308] netlink: 'syz.4.4332': attribute type 4 has an invalid length. [ 412.592821][T21318] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 412.717661][T21326] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4337'. [ 412.743222][T21324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4338'. [ 412.743910][T21326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4337'. [ 413.273539][T21350] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 413.719580][T21374] tipc: Enabled bearer , priority 0 [ 413.779754][T18553] tipc: Resetting bearer [ 413.975674][T21387] lo speed is unknown, defaulting to 1000 [ 413.983473][T21387] lo speed is unknown, defaulting to 1000 [ 414.575453][T21373] tipc: Resetting bearer [ 414.576725][T21401] netlink: 'syz.1.4359': attribute type 1 has an invalid length. [ 414.770441][T21373] tipc: Disabling bearer [ 415.289712][T18553] ip6gretap0 (unregistering): left allmulticast mode [ 415.361936][T18553] dvmrp0 (unregistering): left allmulticast mode [ 415.561743][T21452] netlink: 'syz.2.4371': attribute type 2 has an invalid length. [ 415.623766][T21457] netlink: 'syz.2.4372': attribute type 1 has an invalid length. [ 416.180845][T18553] bond0 (unregistering): Released all slaves [ 416.192424][T18553] bond1 (unregistering): Released all slaves [ 416.201432][T18553] bond2 (unregistering): Released all slaves [ 416.212264][T18553] bond3 (unregistering): Released all slaves [ 416.224956][T18553] bond4 (unregistering): Released all slaves [ 416.226269][T21470] __nla_validate_parse: 9 callbacks suppressed [ 416.226287][T21470] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4374'. [ 416.236202][T18553] bond5 (unregistering): Released all slaves [ 416.282050][T21472] netlink: 'syz.1.4374': attribute type 13 has an invalid length. [ 416.290261][T21472] netlink: 'syz.1.4374': attribute type 17 has an invalid length. [ 416.292358][T21459] (unnamed net_device) (uninitialized): option use_carrier: invalid value (250) [ 416.325732][T21462] bond2: (slave gretap1): making interface the new active one [ 416.334077][T21462] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 416.343057][T18553] tipc: Disabling bearer [ 416.348782][T18553] tipc: Left network mode [ 416.353347][T21468] netlink: 'syz.1.4374': attribute type 1 has an invalid length. [ 416.362128][T21468] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4374'. [ 416.379655][T21464] 8021q: adding VLAN 0 to HW filter on device bond2 [ 416.460711][T21472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 416.519071][T21467] lo speed is unknown, defaulting to 1000 [ 416.543565][T21467] lo speed is unknown, defaulting to 1000 [ 416.917603][T21491] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4382'. [ 416.947949][T21492] netlink: 'syz.0.4380': attribute type 10 has an invalid length. [ 417.176490][T21500] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4384'. [ 417.239402][T18553] batadv0: left promiscuous mode [ 417.283818][T21506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4385'. [ 417.293509][T21506] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4385'. [ 417.394137][T18553] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 417.406233][T18553] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 417.415788][T18553] CPU: 1 UID: 0 PID: 18553 Comm: kworker/u8:21 Not tainted syzkaller #0 PREEMPT(full) [ 417.425512][T18553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 417.435601][T18553] Workqueue: netns cleanup_net [ 417.440566][T18553] RIP: 0010:ip6_mc_clear_src+0x18f/0x580 [ 417.446226][T18553] Code: ff ff ff e8 c3 e2 41 01 89 c5 31 ff 89 c6 e8 38 b7 87 f7 85 ed 74 45 e8 ef b2 87 f7 eb 05 e8 e8 b2 87 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 a2 1e eb f7 49 8b 2c 24 49 8d 7c [ 417.465922][T18553] RSP: 0018:ffffc90004af7340 EFLAGS: 00010206 [ 417.472012][T18553] RAX: 000000001fffe000 RBX: 1ffff1100abac802 RCX: ffff8880318b8000 [ 417.479990][T18553] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 417.487963][T18553] RBP: 0000000000000000 R08: ffffffff8fa38437 R09: 1ffffffff1f47086 [ 417.495939][T18553] R10: dffffc0000000000 R11: fffffbfff1f47087 R12: 00000000ffff0000 [ 417.503910][T18553] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff888055d64010 [ 417.511884][T18553] FS: 0000000000000000(0000) GS:ffff888125d1a000(0000) knlGS:0000000000000000 [ 417.520906][T18553] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 417.527578][T18553] CR2: 000000110c2d1f30 CR3: 000000005bdc2000 CR4: 00000000003526f0 [ 417.535570][T18553] Call Trace: [ 417.538868][T18553] [ 417.541828][T18553] mld_clear_delrec+0x160/0x660 [ 417.546777][T18553] ipv6_mc_destroy_dev+0x45/0x5a0 [ 417.551821][T18553] addrconf_ifdown+0x139e/0x1880 [ 417.556767][T18553] ? tls_dev_event+0x717/0xec0 [ 417.561577][T18553] ? __pfx_addrconf_ifdown+0x10/0x10 [ 417.567150][T18553] ? lock_release+0x4b/0x3e0 [ 417.571776][T18553] ? net_generic+0x1e/0x240 [ 417.576308][T18553] ? __pfx_tls_dev_event+0x10/0x10 [ 417.581424][T18553] addrconf_notify+0x1bc/0x1010 [ 417.586311][T18553] notifier_call_chain+0x1b3/0x3e0 [ 417.591426][T18553] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 417.597941][T18553] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 417.604706][T18553] ? unregister_netdevice_queue+0x1b3/0x380 [ 417.610602][T18553] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 417.616856][T18553] ? batadv_meshif_destroy_netlink+0x1b0/0x250 [ 417.623211][T18553] default_device_exit_batch+0x819/0x890 [ 417.628963][T18553] ? __pfx___might_resched+0x10/0x10 [ 417.634269][T18553] ? __pfx_default_device_exit_batch+0x10/0x10 [ 417.640453][T18553] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 417.645922][T18553] ? net_generic+0x1e/0x240 [ 417.650444][T18553] ? __pfx_default_device_exit_batch+0x10/0x10 [ 417.656631][T18553] ops_undo_list+0x525/0x990 [ 417.661340][T18553] ? __pfx_ops_undo_list+0x10/0x10 [ 417.666467][T18553] ? do_raw_spin_unlock+0x122/0x240 [ 417.671768][T18553] cleanup_net+0x4c5/0x800 [ 417.676297][T18553] ? __pfx_cleanup_net+0x10/0x10 [ 417.681368][T18553] ? rcu_is_watching+0x15/0xb0 [ 417.686134][T18553] ? process_scheduled_works+0x9ef/0x17b0 [ 417.691858][T18553] ? process_scheduled_works+0x9ef/0x17b0 [ 417.697577][T18553] process_scheduled_works+0xae1/0x17b0 [ 417.703153][T18553] ? __pfx_process_scheduled_works+0x10/0x10 [ 417.709245][T18553] worker_thread+0x8a0/0xda0 [ 417.713906][T18553] ? __kthread_parkme+0x7b/0x200 [ 417.718875][T18553] kthread+0x70e/0x8a0 [ 417.723185][T18553] ? __pfx_worker_thread+0x10/0x10 [ 417.728432][T18553] ? __pfx_kthread+0x10/0x10 [ 417.733063][T18553] ? rcu_is_watching+0x15/0xb0 [ 417.737871][T18553] ? __pfx_kthread+0x10/0x10 [ 417.742468][T18553] ret_from_fork+0x3f9/0x770 [ 417.747065][T18553] ? __pfx_ret_from_fork+0x10/0x10 [ 417.752187][T18553] ? __switch_to_asm+0x39/0x70 [ 417.756965][T18553] ? __switch_to_asm+0x33/0x70 [ 417.761782][T18553] ? __pfx_kthread+0x10/0x10 [ 417.766400][T18553] ret_from_fork_asm+0x1a/0x30 [ 417.771366][T18553] [ 417.774392][T18553] Modules linked in: [ 417.779083][T18553] ---[ end trace 0000000000000000 ]--- [ 417.787176][T18553] RIP: 0010:ip6_mc_clear_src+0x18f/0x580 [ 417.792997][T18553] Code: ff ff ff e8 c3 e2 41 01 89 c5 31 ff 89 c6 e8 38 b7 87 f7 85 ed 74 45 e8 ef b2 87 f7 eb 05 e8 e8 b2 87 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 a2 1e eb f7 49 8b 2c 24 49 8d 7c [ 417.814545][T18553] RSP: 0018:ffffc90004af7340 EFLAGS: 00010206 [ 417.825971][T18553] RAX: 000000001fffe000 RBX: 1ffff1100abac802 RCX: ffff8880318b8000 [ 417.834557][T18553] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 417.842820][T18553] RBP: 0000000000000000 R08: ffffffff8fa38437 R09: 1ffffffff1f47086 [ 417.854608][T18553] R10: dffffc0000000000 R11: fffffbfff1f47087 R12: 00000000ffff0000 [ 417.863317][T18553] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff888055d64010 [ 417.881295][T18553] FS: 0000000000000000(0000) GS:ffff888125d1a000(0000) knlGS:0000000000000000 [ 417.892176][T18553] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 417.899078][T18553] CR2: 00007ffc72263fa8 CR3: 0000000028ec6000 CR4: 00000000003526f0 [ 417.911864][T18553] Kernel panic - not syncing: Fatal exception [ 417.918467][T18553] Kernel Offset: disabled [ 417.922914][T18553] Rebooting in 86400 seconds..