last executing test programs: 1.741976703s ago: executing program 3 (id=4288): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000015c0)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc044}, 0x4008080) 1.664275381s ago: executing program 3 (id=4294): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "72ae58", 0x14, 0x6, 0x7e, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@loopback, @rand_addr, 0x0}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x510100}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=@ipv6_newaddrlabel={0x9c, 0x48, 0x10, 0x70bd2b, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, r2, 0xf94}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_ADDRESS={0x14, 0x1, @private2}, @IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20008891}, 0x80) 1.517005074s ago: executing program 3 (id=4296): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000013002f0a2bbd70000000004407006800", @ANYRES32=r1, @ANYBLOB="40090000000000a7b790fe2291ad79cd0024001a8009000100766c616e0000000014000480100004800c003a"], 0x44}}, 0x8004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000002c0)={0x5, 0x3ff}, 0x8) close(r4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x11, r5, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f000000ae80)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x8}, [@RTA_IP_PROTO={0x5, 0x1b, 0x11}]}, 0x24}}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x54, &(0x7f0000000080), 0x4) 1.311951483s ago: executing program 2 (id=4304): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1b4, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x180, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x164, 0x1, [@m_mirred={0x160, 0x11, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0xf1, 0xffffffffffffffff, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10001, 0x3, 0x1, 0xe, 0x4}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x5c, 0x7, 0xfff, 0x1}, 0x4}}]}, {0xd1, 0x6, "319bb848351b002738b6c4c50b9141bebb58a1fd9f04e35af9c32268b29dfa1c25c9502b51b55eff39526a56fd0f6d8f94d05679ea0836ee4adecfe3236d2d9a2d17310974eb3856d00a1028999d09c1f69183f20defc6d04e2c20de3729c15f156d19b570d01b6142387bd42a81ccacf99246c39d5c0d6e393d44dab6dd2521c8f0dd94491c7577458990a9641f0c88b8c57718b8f2c791c8d35eeee9461545ee2dd6d5371b63e2755d125610f6fb5c23db3466b1c9e7b9a79e2f269e7e897258f89199853270075498a6c432"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x1d8}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000000000000000c00018006000600894f"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0x4c011) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x2, 'veth0\x00', {0x1}, 0x5}) 1.199223575s ago: executing program 2 (id=4307): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r1, 0x0, 0xf}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1.156205217s ago: executing program 2 (id=4311): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1410, 0x200, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4049000}, 0x8041) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000100)={0xd7}, 0x1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x93, "bdd82f6fc8c85220b85cea672f6d581a1cd964fc7e757c703eaa718ebcd7f5de9fb5b5d4fc293c9860eff7459d098818fa920a43fa219427317aadd6a6e86927962e4fe4ff8ab9c8745b42b2b0a67ac53cf1f891bb4c17975cb256b2c62cce1ed4c3769b8ebc8244eba8d6b654019039bb638f2e90dcb8679827c43a782ff7546a97524f0e06318dbf08e51bc2029595f5dc7d"}, &(0x7f0000000200)=0x9b) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000240)={r3, 0x200}, &(0x7f0000000280)=0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x148, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8000}, {0x6, 0x16, 0x3}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000001) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000540)={r3, @in={{0x2, 0x4e22, @private=0xa010102}}, 0x6f8, 0x5, 0x3, 0x6, 0x0, 0xb, 0x8}, 0x9c) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000540)={r3, @in={{0x2, 0x4e22, @private=0xa010102}}, 0x6f8, 0x5, 0x3, 0x6, 0x0, 0xb, 0x8}, 0x9c) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r6, &(0x7f0000000600)={{0x3, @default}, [@remote, @default, @default, @default, @rose, @netrom, @default, @rose]}, &(0x7f0000000680)=0x48) (async) getsockname$netrom(r6, &(0x7f0000000600)={{0x3, @default}, [@remote, @default, @default, @default, @rose, @netrom, @default, @rose]}, &(0x7f0000000680)=0x48) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x40000, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x40000, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000700)={'lo\x00', @random="4d630897dff2"}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x18, 0x1411, 0x300, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r4) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'sit0\x00', 0x0, 0x7, 0x7800, 0x1, 0x8000, {{0x12, 0x4, 0x3, 0x21, 0x48, 0x66, 0x0, 0x6, 0x2f, 0x0, @multicast1, @broadcast, {[@noop, @timestamp={0x44, 0x24, 0x63, 0x0, 0x3, [0x7, 0x6, 0x8, 0xfff, 0xc971, 0x3, 0xacce, 0x0]}, @rr={0x7, 0xf, 0x8b, [@multicast2, @multicast1, @remote]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000009c0)={'geneve1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x78, r9, 0x1, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x8001) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x78, r9, 0x1, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x8001) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r12, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x280000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x38, r9, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r12, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x280000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x38, r9, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r8, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xbb}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7f}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x24}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40044c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r4) sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f0000000fc0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000d80)={0x1ec, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x24000004}, 0x4004006) sendto$inet(r4, &(0x7f0000001000)="25b9f06874ccbdcfed6b86bca67bd2c972224ec8a14a83482719b1e55160d8982828bd3bf99e4778caba6d1a782a96cd299f7518e1395983caaa232ef618e20eb6c2bcb3a6d7e929e13b9eef10954bfc8814f767621f122be9efb1676d20604d163e6638e75fd903caa187237165399326d17abffdd1f5ece6a54f8d9145162f27650f05775237490dd0fc84445e1df813a172f84ccb511f65b5301d00de57dafe", 0xa1, 0x81, &(0x7f00000010c0)={0x2, 0x4e20, @broadcast}, 0x10) (async) sendto$inet(r4, &(0x7f0000001000)="25b9f06874ccbdcfed6b86bca67bd2c972224ec8a14a83482719b1e55160d8982828bd3bf99e4778caba6d1a782a96cd299f7518e1395983caaa232ef618e20eb6c2bcb3a6d7e929e13b9eef10954bfc8814f767621f122be9efb1676d20604d163e6638e75fd903caa187237165399326d17abffdd1f5ece6a54f8d9145162f27650f05775237490dd0fc84445e1df813a172f84ccb511f65b5301d00de57dafe", 0xa1, 0x81, &(0x7f00000010c0)={0x2, 0x4e20, @broadcast}, 0x10) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r13, 0x84, 0x78, &(0x7f0000001180), 0x4) 1.048923723s ago: executing program 2 (id=4314): syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700102c00fe800000000000000800000000000000ff0200000000000000000000000000013c000000000000008100907800000000c7260246d6076694351f61f51b8edaf8ef9c69af76937eab196b1e081126dc9b124bb8821ab6c539380e05507ed9ba627aab757a7edcc9b6"], 0x0) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x40004) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000027bd7000ffdbdf25060000002800068008000700ebdbb9161eefe8ae78b61c9dde7b45cac68742e1704a349d87fdabff3f969626b95d5621a1113d239d078f7a2c13bd428ad9ecc9aa91ced4db2e375d62e5b62ee0f6f455ef659aa05ed1e76f4551be8416b79540090023de12b112835b67539faa3d0a6fc3e589493ec5fe513163d73d70da369d9fba5d37fc0356f9d9af40e30b860c0fc65fad6e1dd043f490d7d66542f90c9690ca0795bc9295f2764032190a5aedafdca35fa1c8cb786d48", @ANYRES32=r2, @ANYBLOB="080006000700000014000400fe8000000000000000000000000000aa05000500f900000008000200040000000800020005000000"], 0x54}, 0x1, 0x0, 0x0, 0x10040000}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002800048024000180090001006d65746100000000140002800800024000000032080001"], 0x7c}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="07000000ac1e00010049d5c113b1fffffff6008601000093620e9df6694f0d4b5081d95849e0d0ce769f6e4b01a559ebce77ce9de65029b963123afdeb5888f6f4cca5ac0e9b65ecfda0621addf4f341a45abbdc770ec80ad1c5ac6a8a84a62fdfec8693ad2a283ad239ff65f22197844b3d00240797e3f21a0dc5c53b6a668b499148da4a924d132fc9b75018167dc2cd53b6786f8e6740dddc976ac72d184776d9db9cbf4f01f4"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x24000050) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 955.358291ms ago: executing program 1 (id=4318): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000000080)=0x80) sendto$l2tp6(r0, &(0x7f00000000c0)="7b30cd7b3f930e3ea20d54111274b0cc8baaf7b4f60ce5dfa11396af5e93b9b8167114349cfe4363c68d5502d0bbff89541060c97c642566e1bb72655f42535da183505681eec3a46475afd07f509ccbb57091195f7ffee86cbcbf6835d9a6d4cccbb5c4ce9eb59219e078768a1e6696fd4cabaf421a842497c697f8b994f1f32055e7a3579df8dac692ade74022ee3c5e215e30af1199f67a6ef9932bb512cef5a754a43c1b88aeb722e194f5f3452a825b7e5b727c081f7aac23fbcf3cef9fd056824b90064003d2ed8de979f200eee734554c7208c081f505e3e9e9af8b9bbf5bba5a573950df99781afcd3696e44c626b6", 0xf3, 0xd040bf66a8fab863, &(0x7f00000001c0)={0xa, 0x0, 0x9, @remote, 0x86, 0x2}, 0x20) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000200)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000600)={r1, 0x3, 0x4}) sendto$l2tp6(r0, &(0x7f0000000a00)="8acf6f1f6a77e977d0bc296012576852376767dc6dde88", 0x17, 0x40000, &(0x7f0000000a40)={0xa, 0x0, 0x38d, @private0, 0x4, 0x1}, 0x20) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000a80)={0x16, 0x2, 0x0, 0x18798000, 0x8, 0x0, [{0x1, 0x7, 0x7fffffff, '\x00', 0x300}, {0x1, 0x8000000000000001, 0x1, '\x00', 0x82}, {0x0, 0x35, 0x80000001, '\x00', 0x2000}, {0x5, 0x2, 0x2, '\x00', 0x300}, {0xd, 0x8000000000000000, 0x0, '\x00', 0x2187}, {0x7, 0x0, 0xfff, '\x00', 0x5}, {0x8507, 0x80000000000000, 0x3, '\x00', 0x108}, {0x80000000, 0x9, 0x5393, '\x00', 0x1000}]}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000c80)={0xfff, 0x0, 0xa08, 0x6, 0x6}) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000dc0)={@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, {&(0x7f0000000cc0)=""/142, 0x8e}, &(0x7f0000000d80), 0x12}, 0xa0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000e80)={'dvmrp0\x00', 0xc}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000ec0)={'bridge0\x00', 0x8000}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000f00)=""/134, &(0x7f0000000fc0)=0x86) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000001000), &(0x7f0000001040)=0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001080), 0x2000, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000010c0)={0x0, 0x40, "c6801da14daaabc30030c1f804ff119810ee9ed2d107a12f82e73ffb2646f05d8ddd6ffcb2d782b271f422e6e7ead7745cd7ae826e3e6a07d9cd37bb29e94e00"}, &(0x7f0000001140)=0x48) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000001180)={r4, 0xdf, 0x401, 0xfffffffe}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x30, 0x2, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x805}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x41) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$unix(0x1, 0x2, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000013c0), 0x8) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r5, 0x8010661b, &(0x7f0000001400)) socket$rxrpc(0x21, 0x2, 0xa) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000014c0)={'syztnl2\x00', &(0x7f0000001440)={'gre0\x00', 0x0, 0x8, 0x20, 0x6, 0x6, {{0x17, 0x4, 0x2, 0x9, 0x5c, 0x64, 0x0, 0x7, 0x29, 0x0, @multicast2, @remote, {[@rr={0x7, 0x13, 0x2a, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @remote]}, @lsrr={0x83, 0x27, 0x64, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1a}, @broadcast, @multicast2, @rand_addr=0x64010101]}, @noop, @cipso={0x86, 0xc, 0x1, [{0x0, 0x6, "d94070ac"}]}]}}}}}) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000001500)={0xffffffffffffffff, 0x1, 0xd, r7, 0x7fffffff}, 0xc) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FIGETBSZ(r8, 0x2, &(0x7f0000001540)) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000015c0)=@security={'security\x00', 0xe, 0x4, 0x488, 0xffffffff, 0xb8, 0x0, 0x250, 0xffffffff, 0xffffffff, 0x3f0, 0x3f0, 0x3f0, 0xffffffff, 0x4, &(0x7f0000001580), {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={'\x00', '\xff\xff', @empty}, 'veth0_to_batadv\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x5, 'system_u:object_r:xen_device_t:s0\x00'}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xffffffff, 0x0, 'team0\x00', 'gretap0\x00', {0xff}, {0xff}, 0xc, 0x5da1463da2195f6, 0x4}, 0x0, 0x178, 0x1a0, 0x0, {}, [@common=@inet=@recent1={{0x108}, {0x4, 0x14c, 0x8, 0x0, 'syz1\x00', 0xfb, [0x0, 0xff, 0xffffffff, 0xffffff00]}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) ioctl$BTRFS_IOC_SNAP_CREATE(r5, 0x50009401, &(0x7f0000001ac0)={{r8}, "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"}) 896.66061ms ago: executing program 1 (id=4321): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x8, 0x10, 0xa, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, @mcast1, 0x20, 0xba08, 0xfffffc00, 0x1000}}) 844.927928ms ago: executing program 2 (id=4322): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000010000000000000000000000791200000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0x1, @private0, 0x7ff}}, 0xfffd}, 0x90) sendmmsg(r0, &(0x7f0000003ac0)=[{{&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @local, 0x8}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)='[', 0x1}], 0x1}}], 0x1, 0x4040090) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000180)={r3, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={r4, 0x2}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r4, 0x8001, 0x7d, 0x7, 0xffff, 0x5}, 0x14) 838.057506ms ago: executing program 1 (id=4323): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x2c}, 0x1, 0x0, 0x0, 0x869}, 0x500c1) 735.959185ms ago: executing program 1 (id=4326): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=@newtaction={0x74, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtclass={0x24, 0x28, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0xb}, {0x6, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xc1}, 0x4000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="6c662cbd7000fbdbdf2502000000040005803c0007800c00030004000000000000001900030001040000e8ffffff0c00030001000100000000000c000300ff07000000582ec3aca53cd94ee00770000008000200020000001c00098008000100ff3d184a080002007bd14e190800010072000000c1c9be382253050f6c3c6564417b41a9c068804e0ec263c0ab8fb663d64a796c2b2dac3e7776a8f908ad171bf99fc173f20cad7d02934c61bf4e98cabc0e00000000000000000000000036c5"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900820073797a310000800008000a40fffffffc140000001100010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x130, 0x24, 0x200, 0x70bd2a, 0x255fdafe, {0x0, 0x0, 0x0, 0x0, {0x10}, {0xffff, 0xc}, {0x5, 0xc}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x496}, @TCA_RATE={0x6, 0x5, {0x6, 0x81}}, @TCA_STAB={0x90, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0xfd, 0x112c, 0x7fffffff, 0x0, 0x1, 0x8, 0x7}}, {0x12, 0x2, [0x6, 0x400, 0x53, 0x9, 0xb, 0x3, 0xd0]}}, {{0x1c, 0x1, {0x7, 0xeb, 0x3, 0x2, 0x2, 0x8, 0xfffffff7, 0x6}}, {0x10, 0x2, [0x3, 0xeb18, 0x1, 0x5, 0x2, 0xc4]}}, {{0x1c, 0x1, {0xa, 0x8, 0x7d, 0x3ee, 0x2, 0x10, 0x5, 0x8}}, {0x14, 0x2, [0x7, 0x10, 0x10, 0x3, 0x7, 0x3, 0x800, 0xfffd]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xb}, @qdisc_kind_options=@q_tbf={{0x8}, {0x54, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x1, 0x9, 0x1, 0xa9b9, 0x1d4}, {0x8, 0x2, 0x6, 0x935, 0x7}, 0x2, 0x1, 0x6b3}}, @TCA_TBF_PARMS={0x28, 0x1, {{0xf9, 0x0, 0x7, 0x7, 0x6, 0xffffffff}, {0xcc, 0x2, 0x8, 0x9, 0x9, 0x4}, 0x80000001, 0x0, 0x79e}}]}}]}, 0x130}, 0x1, 0x0, 0x0, 0x4010}, 0x10040) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 631.195745ms ago: executing program 3 (id=4330): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r5, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x4c}, 0x2, 0x34005}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb0, r6, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x44}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400}, 0x8004) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="2f0080001933c64996f9f27afa95e820c6e6f5dbfbc62777266625712eadea21aa27ea31f52ebfd99573d6b52a4e4d83a8eeb405ff4fea8ce84a557bf934d82efa04473d72923eb0c0bfc8822a8ae70b0dbb7a18bca019967086e1358f1b679f26444b2bb12759685788f645603336034e78696f39006228d0", @ANYRES16=r3, @ANYBLOB="010004000000000000001000000018000180140002006e657464657673696d3000000000000005000b0001000000"], 0x34}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="7084c3d1b35891ae8b1ccb110ec1", 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20006a0000000a01020000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a300000000009000300737972320000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002200fc3f0007000000000000000000070062697477697365002400028008000340000000040800014000000014080002400000001204000580a1f804800900010073797a30a6c101f28cac5b"], 0x108}}, 0x200c8010) 630.376259ms ago: executing program 1 (id=4331): getsockopt$MRT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x13, &(0x7f0000000080)=@raw=[@alu={0x7, 0x1, 0xf, 0x7, 0x0, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfac}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f0000000140)='syzkaller\x00', 0xff, 0x94, &(0x7f0000000180)=""/148, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x1, 0xd, 0x5, 0x10}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x3, 0x3, 0x0, 0x2}, {0x1, 0x4, 0xe, 0xa}, {0x5, 0x4, 0x2, 0xb}, {0x0, 0x4, 0x10, 0x8}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000500)={r0, 0x0, 0x18, 0x0, &(0x7f00000003c0)="1b5c052719609000baaeb2a56f7ca292cc1a36f8cb95c27a", 0x0, 0x1, 0x0, 0xe1, 0x0, &(0x7f0000000400)="04fcfec03b6bd74afaff206dd2a64305d4e99daf18042bb9f842a07bfdf60ba9a4276045d0d053de09a8cbb6d4d861ccc05beadd8ae0bf51dd2ae19c25eaaa1a540a45bffd71cd887d383ecf433d5b7fc1213e1b0825701f0703b312828d908e7c62c50fcf56680035d111972e91c84c8572c4a2b9db8d10c8ae599f542b4c9ac6b13d3bfd450bcd0f0e341598a149596c24e1a88fdab0f31ea60136af51eb8a7e171021acdb8c5f7d72f44b804c78614a20d6b912ac6c2b6bda0d5b383e4a66d39cfed0f4abb7cd1b09ff53c227e6b80843e9ecc4b46f1f3f1dcb605af0b68f7f", 0x0, 0x2, 0x0, 0x3}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='freezer.self_freezing\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20001}, 0x2004c000) recvfrom$x25(r1, &(0x7f0000000740)=""/169, 0xa9, 0x40000022, &(0x7f0000000800)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x2, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x14) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48019}, 0x20000010) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000ac0)={&(0x7f0000000a80)=""/64, 0x40, 0xe, 0x2}) getsockname$inet6(r1, &(0x7f0000000b00)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000b40)=0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000b80)=0x4, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), r1) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0xe4, 0x9, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x68, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'caif0\x00'}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4}, @IPSET_ATTR_MARKMASK={0x8}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x6}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IFACE={0x14, 0x17, 'ipvlan0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}]}, 0xe4}}, 0x0) connect$pppl2tp(r0, &(0x7f0000000dc0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 0x3, 0x4, 0x0, 0x4}}, 0x26) openat$tun(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000001400)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000013c0)={&(0x7f0000000ec0)={0x498, r4, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4c, 0x78}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x86, 0x80, [@supported_rates={0x1, 0x6, [{0x24}, {0x18}, {0x60, 0x1}, {0x1b}, {0x6d}, {0xb, 0x1}]}, @mesh_chsw={0x76, 0x6, {0x22, 0x1, 0x1a, 0x4}}, @ibss={0x6, 0x2, 0xa}, @tim={0x5, 0x6c, {0x2, 0x20, 0xff, "890fd7e1d8db3d17af197be109c385bfafd961e53bd90906e125c046ca6565f6746e02eb3101fd516af159aab79334f90ce71f17d920e0e70ce152ea6073e3664285399d9e383995a361c5767062a86844f6e680fd891bf1e82a5ca1d2f798a4c233ff243b284496de"}}]}, @NL80211_ATTR_BEACON_TAIL={0xc4, 0xf, [@random_vendor={0xdd, 0xbe, "443ad4b08bc316e87d9c5e6424b6d03a0f91490a0ad654240862b2ffaae67947f9ccca91cdfd030e2ddf3e3086997d224a12b25f365a0cf7af96318db0a926e5f588e997a017c04664aa4c10c17d57f62832e721352db6e3c208540de02d223aa611886febc48a31f627c5d3f4694caa555b1c2d7f6fa2e9a516f5f1aef5f685b71fb966159a84edf36ab0889dad0e3ea3024b9567cae1733586248124b3207becdc36c92f13d0544fedac947d0a6bddc0a2026f0f53f684488416ac70d2"}]}, @NL80211_ATTR_BEACON_HEAD={0x206, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x2}, @device_a, @device_b, @random="adfe7578ba93", {0x8, 0x7}, @value=@ver_80211n={0x0, 0x8, 0x3, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, 0x2, @default, 0x2905, @void, @void, @val={0x3, 0x1, 0xb8}, @void, @val={0x6, 0x2, 0x7}, @void, @val={0x25, 0x3, {0x1, 0xb2, 0x5}}, @void, @val={0x3c, 0x4, {0x1, 0x3, 0xf9, 0x8}}, @val={0x2d, 0x1a, {0x2708, 0x3, 0x5, 0x0, {0xe933, 0xb, 0x0, 0x3f8, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x9, 0x2}}, @void, @void, @val={0x76, 0x6, {0x1, 0x5, 0x3b, 0x6}}, [{0xdd, 0xf5, "fe2ac65b09b2c123bc8211cb8e0839fd7a43c7d67db87b5a3b57203a05588ff5e29c5b8a0224de586222d93b7d34474f9a9475711d9ea890a1f6ad7554b43e8d62c703647c782830a50de42160fbba3ad89001ae3a89be4d7ff541af52ceceb9c7ad0a6dfa5ba1f84edf7fcefa25742fac54cf2a9649a2b97a9788e6f70962c109c87c7be23fb6b3b5906adfc1d7be50b56d704647763ec6bbb2f772b0ecd4462b7acab3573da96a53cd7394b9a562eea2908a077d67f251f7ba751a7f51a828f152f0fe94f74535ef3c145c63ec8e2a949e7cae5582a1aeea031fdc2f3fa392d64318858257b9d1d5f51fc6dd44a904e5c4a5d37e"}, {0xdd, 0x5c, "6443ef69f9cfd226d4231db1de75b302cd9804abe4899004731fa6b337407cf0378dd661b83b9db607e520877980278aad32db68bf1b05ffc702d72f22e51323f3e77ac70f095abfec4279e651a32941da5acbdc73a224e044e6efdd"}, {0xdd, 0x4d, "fb28f5bbe397d8b54d284c287d508bbe3348f9b4d0d9e2baf6a64fc4fc4a556c5ae030b2fc8216c6fbbdfe5a93b247038b859c01dcb2a105e73e33a7566cd94f20361179f53753460a5b7c26fc"}]}}, @NL80211_ATTR_IE={0x11b, 0x2a, [@dsss={0x3, 0x1, 0x30}, @cf={0x4, 0x6, {0x2, 0x9, 0x3, 0xc}}, @mic={0x8c, 0x18, {0xc77, "1ba3a06a5da3", @long="817bc69c3a1b09ba8253e119295b4f40"}}, @perr={0x84, 0xb6, {0x8, 0xc, [{{}, @broadcast, 0x1, @void, 0x22}, {{}, @device_b, 0x0, @void, 0x2f}, {{0x0, 0x1}, @device_a, 0x1, @value=@broadcast, 0x22}, {{}, @device_b, 0x7, @void, 0x20}, {{0x0, 0x1}, @broadcast, 0x4, @value=@device_b, 0x13}, {{}, @device_a, 0x5, @void, 0x1b}, {{}, @device_a, 0x6, @void, 0x2f}, {{}, @device_b, 0xb, @void, 0x17}, {{0x0, 0x1}, @device_b, 0x4, @value, 0x41}, {{}, @broadcast, 0xfff, @void, 0x15}, {{0x0, 0x1}, @device_a, 0x158, @value=@device_b, 0x17}, {{}, @device_b, 0xdd, @void, 0xd}]}}, @ht={0x2d, 0x1a, {0x10, 0x2, 0x7, 0x0, {0x3, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x4}}, @cf={0x4, 0x6, {0x0, 0xff, 0xbe6, 0x8}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @mesh_id={0x72, 0x6}, @cf={0x4, 0x6, {0x8, 0x8, 0x426}}, @challenge={0x10, 0x1, 0x57}]}]}, 0x498}, 0x1, 0x0, 0x0, 0x20040040}, 0x1) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000001480), r1) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x28, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x4000890) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000015c0)=@req={0x28, &(0x7f0000001580)={'veth0_virt_wifi\x00', @ifru_hwaddr=@broadcast}}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200048c1}, 0x11) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000001700)={0x0}, &(0x7f0000001740)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000001780)={r7, 0x8}, &(0x7f00000017c0)=0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x1c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x1c}}, 0x80) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000001900), &(0x7f0000001940)=0x4) syz_emit_ethernet(0x22, &(0x7f0000001980)={@broadcast, @random="b734eced1aaf", @void, {@generic={0xf5, "7e934742a0eb0e3438c88f95b3da6a4921b34986"}}}, &(0x7f00000019c0)={0x1, 0x7, [0xfd9, 0x500, 0xb44, 0xfb4]}) 608.047346ms ago: executing program 4 (id=4332): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x4000}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000040)) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000002000010000000000000000000a000080ffffffffffff0000140011"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600fc"], 0x94}}, 0x0) 591.556349ms ago: executing program 3 (id=4333): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, 0x0) 503.946598ms ago: executing program 1 (id=4335): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0x80, 0x46, 0x898, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x7800, 0x9, 0x80}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0x80, 0x46, 0x898, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x7800, 0x9, 0x80}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000611210000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x60, 0x0, 0x1, 0x0, 0x0, {0x39}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x60}}, 0x0) (async) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x60, 0x0, 0x1, 0x0, 0x0, {0x39}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x60}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900"], 0x48}}, 0x0) listen(r4, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x1}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01eafefffffffedbdf250f00000008000300", @ANYRES32=r8, @ANYBLOB="0500330002000000"], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01eafefffffffedbdf250f00000008000300", @ANYRES32=r8, @ANYBLOB="0500330002000000"], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r10, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r3], 0x38}}, 0x10) (async) sendmsg$nl_route(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r10, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r3], 0x38}}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r2) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r2) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) recvmmsg(r2, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000000840)=""/4097, 0x1001}, {&(0x7f0000000540)=""/202, 0xca}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000001880)=""/238, 0xee}, {&(0x7f0000000040)=""/48, 0x30}, {&(0x7f00000000c0)=""/60, 0x3c}, {&(0x7f0000001c00)=""/4103, 0x1007}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000006c0)=""/227, 0xe3}], 0x7}, 0x7ffffffe}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x40000000, 0x0) r11 = accept4$x25(0xffffffffffffffff, &(0x7f0000000140)={0x9, @remote}, &(0x7f00000001c0)=0x12, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x10, r11, 0x147a8000) 503.613016ms ago: executing program 4 (id=4336): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x7, @none, 0x73, 0x1}, 0xe) (async) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2d8e261000000000140012800b0001006970766c616e00000c00028008000500", @ANYRES32, @ANYBLOB="080004"], 0x44}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003a40)=@newtaction={0x48, 0x1e, 0x109, 0x0, 0x4000, {}, [{0x34, 0x1, [@m_simple={0x30, 0x19, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x48}}, 0x0) 503.27607ms ago: executing program 3 (id=4337): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010101, @in=@multicast2, 0x0, 0x966, 0x0, 0xfffc, 0xa}, {0x1, 0x4, 0x0, 0x80000000, 0x6, 0x9, 0x0, 0x40000000000000}, {0x0, 0x9, 0x53e5, 0x23}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x2, @in=@multicast1, 0x1502, 0x4, 0x0, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004000080080009"], 0x1c}], 0x1}, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004000080080009"], 0x1c}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) (async) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) 425.000779ms ago: executing program 4 (id=4338): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000062010b0000000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8, 0x7f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 403.282002ms ago: executing program 4 (id=4340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, [{0x19, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x22, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x3, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f6164000000020000000000000000000000ffff008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, r2, 0x4, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x41}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf250400000004000d"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 373.900143ms ago: executing program 0 (id=4341): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000700000032490000ff"], 0x50) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getrule={0x1c, 0x22, 0x201}, 0x1c}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010001280090001006c61737400000000080003400000011014"], 0xb4}}, 0x20050800) (async) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@cgroup, 0xffffffffffffffff, 0x2b}, 0x20) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r3, 0x7c14c19dbe0d7d6f, 0x80000000, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) (async) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x16, 0x5e, 0x7, 0x22, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x3, 0x2, 0x0, 0x6e6bb9, 0xa, {0x6, 0x2b, 0x3, 0x20, 0x0, 0x10001, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote}}, @sadb_ident={0x2, 0x0, 0x101, 0x0, 0xac}, @sadb_ident={0x2, 0xa, 0x2, 0x0, 0x101}, @sadb_lifetime={0x4, 0x4, 0x1, 0x5, 0x3ff, 0xb14}, @sadb_x_sec_ctx={0x6, 0x18, 0x5, 0x0, 0x21, "119fcdb1c172bb03e16c04519d9563622b44cd28d85e697c55d9ffe20d0bdb8718"}, @sadb_lifetime={0x4, 0x2, 0x2, 0x10001, 0x6, 0x4}, @sadb_ident={0x2, 0x0, 0x9, 0x0, 0x8}, @sadb_lifetime={0x4, 0x4, 0x5, 0x4, 0x9a1c, 0xe}]}, 0x110}}, 0x4000000) 220.863882ms ago: executing program 4 (id=4342): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d08023f000000040000a118000200ff020000091d00000000000000000001a80016ea1f00084003eb4bd04554bf2a31cf1f2e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb090000001fb791643a5e885913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b34113", 0xd9}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000000000000000c000180060006008848"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$inet(r1, &(0x7f00000006c0)={&(0x7f0000000300)={0x2, 0x6, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000440)="194e37c5a95cf228121b04ea1e99bf46baae24345a75e8f7ee986fb69933b5c4b8a46efb6a9a80fb4133804797948519452cece508e08d09fa82edd80399", 0x3e}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f0000000480)="7921a3e65c71b5b8f29f1c0467b4f84df07b4f0614ee3cc90a2b274262c59d4dfb3a52e991efaccc4c77699df140109548c88795e769082d5763f13d3c3e78b55ac28d78c60b8bd897e04471cddcfd5bccba543ec3b468f1293ddf6627dbe115c4830be9735666c7f55a2544ed44b0a09238b407b581c787a086eabba6b0667d75e3e072c0bced027e511d9a97454c1c979d3b5bd36bfaa06d6c6665ebc996051b4a591da3c612465a240d079f31c9b1b58e9f897625bb15db9be6e5cb2305c8c4b47ce5f6c39b7d381f8e9ed41890079c162b62", 0xd4}, {&(0x7f00000025c0)="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", 0x1000}, {&(0x7f0000000580)="d2587fd1d38205d6eae5b30e0fa7e85ebaf35a8b7693e626edb49c667b73b58381d7bb64deeb0939ec121076287e8f84a10ec065b9779efb3a237ae398d4a7", 0x3f}], 0x5, &(0x7f0000000640)=[@ip_retopts={{0x28, 0x0, 0x7, {[@generic={0x44, 0x6, "edf9f160"}, @rr={0x7, 0xf, 0xd0, [@multicast2, @multicast1, @multicast1]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff6}}], 0x58}, 0x4000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0x10, &(0x7f0000000140)={&(0x7f0000000340)={0xf0, r4, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x21}, @void, @val={0xc, 0x99, {0x0, 0x10}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "414c41a6ece06ff653de167d0c621167a496871095e5309a"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "40b9e931550ef7c0e45684c975849eacb9d78b5b907d4d7d"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c51a5f2762b3346de9eded38c1b9f77adf67bb0b6f8d5a2e"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f1e2d810ecf959d56177b76e23053ba354573ae7c4b518f7"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2279ac462b16b2ae9ec9794102e87db9c769e83ee9ef9e02"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xf0}}, 0x8000) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r3, 0x0, 0xf}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000100)=ANY=[@ANYRES64=r2, @ANYRES16=r5], 0x14}], 0x1, 0x0, 0x0, 0x60004880}, 0x0) 218.059809ms ago: executing program 0 (id=4343): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0], &(0x7f00000000c0)='GPL\x00'}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="8f", 0x1) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=ANY=[@ANYBLOB="04a8e9316c1380f2db77bd4f8e91327ee4ca473ac40ed0394e547899d3a741c428164460c0e4128c505bccce3a1c94dd22e76e058ffc0cbc28bc18a886ca8449b8c6c7539311cb6e6d3ece30196f74044b89074ca13219665cc05aa25d717801112c199f8f3e99f2a6968570656133a32d9ea70c2e5f0000000000000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000400000008000700ac1414aa08000800e000000106000b000a0000000800020005000000"], 0x34}}, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) 178.449272ms ago: executing program 0 (id=4344): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000080)={0x7ff, 0x48, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000100)=0x1, 0x4) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=0x1000) r2 = openat$cgroup(r1, &(0x7f00000011c0)='syz0\x00', 0x200002, 0x0) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001200)={r1, 0x0, 0x25, 0x0, @void}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001180)={@cgroup=r2, r1, 0x1, 0x2010, 0x0, @value=r3}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001240)={0x1, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001280)=r4, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000013c0)={@ifindex=0x0, 0x26, 0x0, 0x7, &(0x7f00000012c0)=[0x0], 0x1, 0x0, &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001340)=[0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001440)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x6, '\x00', 0x0, r1, 0x5, 0x2, 0x4}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001400)={@map=r7, r0, 0x2d, 0x1a, r1, @void, @value=r1, @void, @void, r6}, 0x20) sendmsg$can_raw(r1, &(0x7f00000015c0)={&(0x7f00000014c0)={0x1d, r5}, 0x10, &(0x7f0000001580)={&(0x7f0000001500)=@canfd={{0x1, 0x0, 0x1}, 0x26, 0x2, 0x0, 0x0, "9b55a634a05ed6d77ba78c75859a36c4cc3e4feb8f83a9797f87ac891ae0a0ea027fffcecad19cda207aadc28d4f947bf9704e2875c8cfc4eab1fa6172819d1a"}, 0x48}, 0x1, 0x0, 0x0, 0x400c040}, 0x20008801) ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, &(0x7f0000001600)={{0x7, 0x1}, 0x100, './file0\x00'}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000001740)={0x1}, 0x8) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001780)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001800)={r8, r1, 0x0, 0x5, &(0x7f00000017c0)='syz0\x00'}, 0x30) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000001840)={0x0, @adiantum, 0x0, @desc1}) r9 = accept$ax25(r1, &(0x7f0000001880)={{0x3, @bcast}, [@rose, @rose, @null, @null, @netrom, @default, @default]}, &(0x7f0000001900)=0x48) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000001940)) r10 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r10, 0x80044942, &(0x7f0000001980)) r11 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001ac0)={@fallback=r11, 0x5, 0x1, 0x8, &(0x7f00000019c0), 0x0, 0x0, &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a40)=[0x0, 0x0, 0x0], &(0x7f0000001a80)=[0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001b00)={r1, r1, 0x13, 0x0, @void}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000001b40)={0x0, 0xe7}, 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept$netrom(r1, &(0x7f0000001b80)={{0x3, @bcast}, [@remote, @netrom, @rose, @default, @bcast, @rose, @null, @default]}, &(0x7f0000001c00)=0x48) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000001c40)={{r0}, "56c05edacc97af1da97aca5e35f8a113cbee99b97fe205079d4cc58a92347241bb84abcebf9e5c58896db71a54d51b7a22b24d54b8a79cef78d25fda9780acd3bc2452a622af0a8bef37e7c9aef4c45284e136fc150594295d14a790a054cc2161d02b0cfdd32afa11896c3110e3c704c6c5dc8340bc4aa91bca9e34a0479d8c1844f00bf56fb0bddbd1ba4d3f0fa814de0bbbee629fec2e75ceebb9b72f7416ba1428ad6b14ae73c9622d9c3d6e59bc18dc9bfc49d5741f5c58a5efc2327a30cef960ca55066373c56edf66b243e86ce3b966895344188c667d4f049402a92e2dd6e130ab512ae0260d8d60c2bae6d88320e47853885cfbd5be1c55244b2c60228307e3c28c270f054e762d1da454f3c6b832df78e6d49df4cf1f143cbdbb40153b48dcbb997c1c9e06f0b619a51ebb68d8be06305ec2afa4243bc70aca3e7202af4fa874c0ba7419d1663738bf31a0ff557d723eeba97ac2c2cd27cf1986280b35cc70c36cd11182c2b5e6761abfdff562cd7c346e8a00ecfff060d3694e17a74657203983eb25724d54cb71a0cd700be1f31e4f2c790ef0dd7b62f639cdee1c357b267622b3ffb8cd7547c44686ae69bd284b73c2dc37f7092f9f59fa835ef2bdf549441254d954f12d5a9370357ae97ab55b086fbd0a607e3c27594df765614f8f99e73169a7fdf9890ee5c8c3d9fb2a4430ab2fbcb230ba74c8d04293ca17ba7dd3f789f1ca07593417023a4334fa0b232c94ac8d077ae8a1cb18af5e97f8acd2b95dafa61e4c9a8c4a42c35f1c9cabb1d63a5d6f9f197b1f311d6b7cb485008b5b5fac34b30028ababd3f03fffec97dd60d51378e0757e1f46a27a8b88605e2f490aed0852f48c200320712d5216a5ef4b52c9746e5e484c481ae95c7a63a1308c1a90c7136ea31a4436eee370c9f49a10c8d57263f7d228eb4b1d748a955d8816ce59b86945d8a72a57bb8b51d05332902c0b4b11135f5d159c9067e77e94c9251e9ebdeec0633a408221ff4923ce4036068fbc70a4f326cea131fd4dbed985aacbb82d98dc1bcc7b360262d6701d3df238d360df76e9b2403e5adf7eee23d7b04459a286145e57b1372afeaba6b2b6c6a96ba94e22ad49f64a7c6a112d5bd67832f71f52765a4e540f001b42515f3626fe753b0c9c9c9f204decf18df27ddb5d27653d95aca6dce1eb0343ffd46a78dee4bca709721d7dcff600516283f37b9fedfc237d2febab3debf76e5241923ea830de8afc2113a05dc1dcb1428d5f82abe4cfe512744efe65ed38a4c55321a761ebdd3f6c37aa6b240e7561e61f199c0ed1824a8c355e0960ab7dbe73df12d0c60177d37a2b13007743dee397879cc4f6fcfd1cced3c845d4305b705d4a4c11fe94a99ea9edb0c40da9d039a68f7bee7ab9f1b52fbef8be986e6ea1082fb2f8d4d745c61e76587dc3b503f07e0bec43b315ecd318aceb307686c408493b166f4b7221919a8f44fdb1abba88f1699cfcfbd8fe45fe404f07dc677ff7548ce3b7dee8ef0180d1b382a8a106657d91e1f81d57671d390525ab85e911c5edb737ad878ce4176d50216fad247ece5bba513e6f68d686af63a63580093a344b6ea6200f4c7a049d66d0b7c3ec498f66fe134c9b57d6fdd797ad5ee32020f84ded3f36bd08546eff8d947f1bd069ed2ac5df7d070d1f914094e3553e154e754e7dfd7971214962bf0a54a5acdb37051ed10f5cdab409cac8064c1621e87130fa3c76e817bf706b7a171f105fbe8dd6d4fe7bd82b8e5cbd0d4d08f5fbfb8c41029a298bb74f2c55ad01e6e309b6e3f93666b7c9c62e8fae0cf61d83d47e4055c0d23e7c6fbe61fde6780a01cc07edac87dd043c8ee9300f51feca8480d2ab03acbfa9d2038b956ee9f1661da90d64cdb52e128e82971688de9b9d2fb8aa04dcd69aced431f1b8469322b865e9dfc88fb3108ee7f1e02f6b2ccba8d2a6d7232a750e7117e7db1124a85cac9d7ffd744c62a7441f53076bcd7bf8b525c6c4088be1c5353a4a1093e3997337ceabcf12adebcac89c5d2245ea1ba66a766b1f1469c2953dbd62c3b529035e12b34c3f67b0f842f89c676e45c791abb69190a3498947b10fb78cb93e06ebdba7a9d7fd9ab3be5abe21cde6a583e0c91684fe9862522af6a6dcc409cec8f4b7b82c03705d72611b36385c3999b98a0c0b468e877456d849367ecb3e010ad920f795c7b262d8dd5d9634796cdb2fd1afbdde3128784af6d3ee03d13788dafd02c2d82d510b519327ae248cf540c42ce1afff8c18af6dfd6826e665c75e34fe361860e4bc9b82e8c2de82e91ec4d1f37e522eebade712caca80d95a1271c9fb70c9597e60601493120a6df0e6210f64f8638804fff4c8d8455e23084308eb9e2f7a5dc7cd2a861cc2be5391b22ecce8be1ebcb7bc95ff6423785028423ab33b3c15179aeaed6f2313d3ad263949648daa9392bc8773b31e9f6208e9e273e32d6262797eda33b0875bfdaa0f63b6159e99398acaf8f6e7a0fd907c2a2255a4117449315568868d170974aee9e49a0f5dd80df74251e6abf05e95a85aa69c59c3dfb1b722c58c9228e8a51132d508c9102637187d38e25c145446adf4ead85647f0c01d9cbfff4c4971ac1a912df4952705f7bed4b9930eebbcb36573b94aeec512c5b9b56f11e6d3b431ed15f5766b2b1cb9edde25125c55273f4e414a1cab49fd801f36d95a6eefcf060fc38b22c3c7c5f54a2c29640cd43de40df885540a01cb160d9569ccaaf6ead3e1bb1ecbe7873b5e3308cbaa0120eb96f0444af8c1eea023089b804b4810f30b6a3057ad677fe30ebcefbe14637d952bbb88375df2c03947129031d3d65a63beb60f54afefdbe387293e87651476bd9548bba2474f89d567e559dda5e1b26999ee9e6f0c714a7bebb4516ad1482254c7d6719e0e9e6d6f8b5a36a902deede8fbfd179f6d2e057971425b6b4fd443379f32ca70dcf4a5b7d00f1517eba0b7d3761494996db8205d75beb6ff112943f04e702360f5e94ce032fb2f312cf42a22f5109f0d72d5fad059544029c6e92f0a33fd2c16ff508b22b180a040fdefb9ec5cb8bb1c7aed5a07dcb248af235041ded2d7464b6520c68a9d229b387af73482617102394a80ecb0caa22545d6c9131dd139a91952ca1ea09c42efa34e93c4ff6e800e091beb4040cf0fb58292161391cd657da221a8d8493c8d1d4fd2a87588021ca1aa47c2ea24c24c1284f9ac1bb987c6f918404d1e55404ff7680d82d7351027fae96e300ea8921fa2eedd0a052bb9c230d92347ad6093859f3fd9f55cf601ed10bb029b48010248e1aa5c207d50f1e4df8a829b9068f3ef1c8e1cd72f41e2af9681867a8edf429a070bff8c9e474fa036e93e7e2d698fca273d8d2833b79e3754be7052c25ad8754c15dc1c53c0ca4fb63c6736b5ac887b1acdbceed1d41c65d234e00f76c33a2fb9839d1244009950a29373c1dd1b24797147fb6dc2eef964053be18d25be4871dc2f4666b4e7e8d52b4d271092b26a8012362baa7e440ae62e1f857de7d88d7a6801ffa3ba034dafca2bb464e9c06006e810f181e61aa091f19f66e86ecd9368b6815ba7e65a95faa1f5b4488e003158b5de2eef97ef9a42e4c5ffc7887d88481aa16a2e6d6e255471f2aa5cd032b02d9fee37eefe1095ea19dd41a22abc1c8243b4a2578a88b18a256daec3d590149279b580b7843c0600398e7a5d7f1891317782a39294c4899d51ddd01050f5c59c78adedb2f53735ee10425a89fa181ee034f885af7dfa8e10d6625cddc24db40f1f4ef3ca054fbde2ee246a6caf26eee3e769a1ff267107e6d5ae2986c746d24f47a42454e6ba142eea0f4c931f52d9db7882713e5d105e1dc5fa252e6e58b977a308237188a9f788e39d2321e0eb06aaa9d9205ab5b14237fd2d6f119f99582ebb65f1b98f16bb08cc45180f6bc572a8b50c613360b9f2e7dd56bf2c730cf02fa131798f2948cc9834ec75a1f959a3579d8ba8410c6828435c37901e6724c078ec68342e2ddcee345e8cdeeb9da04166b031044b7fcc76128c3b851aec674939d1165c18df8da452346c3099e798dc261773619c700b03001979dc99b3bf67899a84047ac8a4eb8386c00ddfb8e314678b55b7f3ddaff965c8338a08ea8d9ebd200eeee2a57fe79ecbd9fea5dfc59695b97b6f711af6339d6c70c0fbd4a2160b720340d14008209d675c29b7650ae1da5b4630c29c365a4a18298e79fcae1d001806aba5f6fb48b2db354de78846cd068c7f24773153f8aec54ad3d8cd6967207865c7f22fd116146cde3de5d4d9c812b1597735ba29675e9c4007f62a903ee4f0b1792321591ef722bee3e5ebbb7ecc5ee7972d77121df7e65cfc085363d9b68dc8362686174f5662e1b478f6f59f287aec0cef317b8bb95f12f0c8acfda72976a2b3eb65205d67b1f323f4e77fd000bb2cbd437375884648e9b4bf9919f091044563f88b0b4ee8c6194165163c08822a04b272e9edf95d76311cde116810b455c243b603729913430ad6b5c5060fe271c366796a570a0c0c7a9cd335f357104a3932f4ae21f76d2be7cd3f1466d48d8d1696d495caa5727a386c79ad2aa6598749f826f9d1256a8d73b288921b8f52f99eb6289f840c1f15381310353c55ec55804929c6ef35e6d230b683ffbc4d4e891a65ed6336b7ecc29564052ca7290fb6d6ae5eefce57526ee8d32649046cb76662f0d7347f77e3f248ec513ea43321d4825920d76e9b0094097eddf4590e838fae23ebd8c84f4c84d2f254114f245b8d6ca69c06ed8458fe78225c8d1ea65d36d7d513a457073abd71209600d7ae713134bce78b3f0ebc32be8aae183d708e1dad876f61b34eaa205737a989d6b4f5ea5f33df4ed72257e9551cba7f53cec1e5590dc3827a84264ec824c21c0f40e0f8cedb45060fa93e793d13846b12196e83acd5a3ffb22110e7088081ff7cef6f1192915e79814d2c328717255cc29131af3f3cd5d5f337ed9d177b9c1530d8af61e8805ba88723d8f913def2d5cbd10e68c4f2641ffa8ca257922c8a2616c8c052caeba6f684d31f49eb4cca0f0d818556e7984a944918707bfc62d0d5670584bd1107e6d37d325319402f75970babbfa0f8f98a74cf1c604b68e24b465b7a86e857a052bdeeddbb2ac1b7c62ed961d6b405a160c56e4c2098056e4cedcb02970eaffbf76dc24e2af8a1570b527ea40d59c96234faa936f4182ec6de11f1f4fe5753d30e87b00ab18bd5cf2d9f29fe2fe1f74e655ada91816ada1dc8b8267c4563984573e3e0e1361972bd0c42ec0ffc0db6124ebb8f55f1282efcad9e5ca41eb4e6a561ae4e9be829286d96bd07ff1974c4047a4c72dec45d4f65298d6d76e7f4f2f540486f077af774cc41a325134a73c761ebb3b2942f5296e614e62ddb1c489bb9a1851767b78a25d240f1faa355d6e89f80709bf74d57b565f9f4b56708ce4f0d921cb9b4a6e32e85f5eb64b9ff23733aa76bdf9d478b2d5064b1edf80040ea22c079a9b6ef9101ebe10893aa04a04d44048874db9f508fc7e46d57e917ac6263912e1dc0ba096c2cb851598269f9ff873077e5a64072e5f295b0859f788fb2e93aa395aacbfe960cbb371f7483ad7a3facd7d6fd8e837e29e07cc3858c9b87935553de3290fa8d37aae75f83b31c39ace9caea1a9fa83909bde4f15e4130ca9d9d8dc94b88afb3dc14ea0febc1cb3c560615fdf8bb3f61d1f66c72fdea79a7a452526ecac719790ae47c5c2e5b4102b678bacc9555431c37e850"}) 161.562875ms ago: executing program 4 (id=4345): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000000)=0x2, 0x4) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) 95.340518ms ago: executing program 0 (id=4346): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x1820, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@ipv6_delroute={0x24, 0x19, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000}, [@RTA_PRIORITY={0x8, 0x6, 0x3aa}]}, 0x24}}, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000010c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x8, 0xfffffffb, 0x7}}}}]}, 0x48}}, 0xc0) socket$inet6_sctp(0xa, 0x801, 0x84) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x1820, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@ipv6_delroute={0x24, 0x19, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000}, [@RTA_PRIORITY={0x8, 0x6, 0x3aa}]}, 0x24}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_team\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000010c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x8, 0xfffffffb, 0x7}}}}]}, 0x48}}, 0xc0) (async) 94.310622ms ago: executing program 0 (id=4347): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x20005000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x34, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b0}]}]}]}, 0x34}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000780)={0x298, r3, 0x9c120c92e1f06296, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x74}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x44}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xef0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd6b}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe}]}, @TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8c61}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffff80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2aa92fd1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x847b}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdc0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7d}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x401, @private2, 0x56ad46be}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xf1800000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x554}}}}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x4010}, 0xc7262c82109ac729) 11.970409ms ago: executing program 0 (id=4348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r1 = epoll_create1(0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$inet(r3, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)={0x20, 0x1e, 0xa01, 0x0, 0x0, {0x7}, [@typed={0x8, 0x26, 0x0, 0x0, @u32}, @nested={0x4, 0x44}]}, 0x20}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c000280080003400000001608000140000000000800014000000000080002"], 0x110}}, 0x40040) syz_init_net_socket$ax25(0x3, 0x5, 0xca) 0s ago: executing program 2 (id=4349): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x7, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0xc, &(0x7f0000000440)={&(0x7f00000009c0)={0x18, 0x2d, 0x9, 0x70bd26, 0x0, {0x4}, [@nested={0x4, 0x19}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) kernel console output (not intermixed with test programs): syz_tun: tun_net_xmit 42 [ 196.264943][T14958] syz_tun: tun_net_xmit 42 [ 196.270908][T14958] syz_tun: tun_net_xmit 42 [ 196.275936][T14958] syz_tun: tun_net_xmit 42 [ 196.281964][T14958] syz_tun: tun_net_xmit 42 [ 196.287524][T14958] syz_tun: tun_net_xmit 42 [ 196.288304][T15353] netlink: 'syz.3.2650': attribute type 29 has an invalid length. [ 196.292819][T14958] syz_tun: tun_net_xmit 42 [ 196.305688][T14958] syz_tun: tun_net_xmit 42 [ 196.310909][T14958] syz_tun: tun_net_xmit 42 [ 196.315562][T14958] syz_tun: tun_net_xmit 42 [ 196.321705][T14958] syz_tun: tun_net_xmit 42 [ 196.326385][T14958] syz_tun: tun_net_xmit 42 [ 196.332006][T14958] syz_tun: tun_net_xmit 42 [ 196.336669][T14958] syz_tun: tun_net_xmit 42 [ 196.342782][T14958] syz_tun: tun_net_xmit 42 [ 196.347664][T14958] syz_tun: tun_net_xmit 42 [ 196.354206][T14958] syz_tun: tun_net_xmit 42 [ 196.359479][T14958] syz_tun: tun_net_xmit 42 [ 196.365395][T14958] syz_tun: tun_net_xmit 42 [ 196.371407][T14958] syz_tun: tun_net_xmit 42 [ 196.376187][T14958] syz_tun: tun_net_xmit 42 [ 196.381466][T14958] syz_tun: tun_net_xmit 42 [ 196.386356][T14958] syz_tun: tun_net_xmit 42 [ 196.406618][T14958] syz_tun: tun_net_xmit 42 [ 196.414892][T15357] bond6 (unregistering): Released all slaves [ 196.423642][T14958] syz_tun: tun_net_xmit 42 [ 196.428363][T14958] syz_tun: tun_net_xmit 42 [ 196.433769][T14958] syz_tun: tun_net_xmit 42 [ 196.438526][T14958] syz_tun: tun_net_xmit 42 [ 196.444014][T14958] syz_tun: tun_net_xmit 42 [ 196.449685][T14958] syz_tun: tun_net_xmit 42 [ 196.455217][T14958] syz_tun: tun_net_xmit 42 [ 196.460621][T14958] syz_tun: tun_net_xmit 42 [ 196.466302][T14958] syz_tun: tun_net_xmit 42 [ 196.473093][T14958] syz_tun: tun_net_xmit 42 [ 196.478123][T14958] syz_tun: tun_net_xmit 42 [ 196.483558][T14958] syz_tun: tun_net_xmit 42 [ 196.488271][T14958] syz_tun: tun_net_xmit 42 [ 196.493800][T14958] syz_tun: tun_net_xmit 42 [ 196.499819][T14958] syz_tun: tun_net_xmit 42 [ 196.505063][T14958] syz_tun: tun_net_xmit 42 [ 196.510704][T14958] syz_tun: tun_net_xmit 42 [ 196.515423][T14958] syz_tun: tun_net_xmit 42 [ 196.521534][T14958] syz_tun: tun_net_xmit 42 [ 196.539999][T14958] syz_tun: tun_net_xmit 42 [ 196.550805][T14958] syz_tun: tun_net_xmit 42 [ 196.556011][T14958] syz_tun: tun_net_xmit 42 [ 196.561371][T14958] syz_tun: tun_net_xmit 42 [ 196.566054][T14958] syz_tun: tun_net_xmit 42 [ 196.572241][T14958] syz_tun: tun_net_xmit 42 [ 196.576927][T14958] syz_tun: tun_net_xmit 42 [ 196.583768][T14958] syz_tun: tun_net_xmit 42 [ 196.593936][T14958] syz_tun: tun_net_xmit 42 [ 196.604737][T15370] netlink: 'syz.4.2657': attribute type 4 has an invalid length. [ 196.605178][T14958] syz_tun: tun_net_xmit 42 [ 196.618037][T14958] syz_tun: tun_net_xmit 42 [ 196.623638][T14958] syz_tun: tun_net_xmit 42 [ 196.628396][T14958] syz_tun: tun_net_xmit 42 [ 196.635226][T14958] syz_tun: tun_net_xmit 42 [ 196.641698][T14958] syz_tun: tun_net_xmit 42 [ 196.648502][T14958] syz_tun: tun_net_xmit 42 [ 196.655039][T14958] syz_tun: tun_net_xmit 42 [ 196.662259][T14958] syz_tun: tun_net_xmit 42 [ 196.670689][T14958] syz_tun: tun_net_xmit 42 [ 196.676160][T14958] syz_tun: tun_net_xmit 42 [ 196.679141][T15374] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 196.681915][T14958] syz_tun: tun_net_xmit 42 [ 196.696998][T14958] syz_tun: tun_net_xmit 42 [ 196.703081][T14958] syz_tun: tun_net_xmit 42 [ 196.707537][T15370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 196.707920][T14958] syz_tun: tun_net_xmit 42 [ 196.729631][T14958] syz_tun: tun_net_xmit 42 [ 196.734357][T14958] syz_tun: tun_net_xmit 42 [ 196.740107][T14958] syz_tun: tun_net_xmit 42 [ 196.745271][T14958] syz_tun: tun_net_xmit 42 [ 196.750439][T14958] syz_tun: tun_net_xmit 42 [ 196.765392][T14958] syz_tun: tun_net_xmit 42 [ 196.771370][T14958] syz_tun: tun_net_xmit 42 [ 196.776468][T14958] syz_tun: tun_net_xmit 42 [ 196.782945][T14958] syz_tun: tun_net_xmit 42 [ 196.787624][T14958] syz_tun: tun_net_xmit 42 [ 196.795579][T14958] syz_tun: tun_net_xmit 42 [ 196.802089][T14958] syz_tun: tun_net_xmit 42 [ 196.807304][T14958] syz_tun: tun_net_xmit 42 [ 196.812934][T14958] syz_tun: tun_net_xmit 42 [ 196.817621][T14958] syz_tun: tun_net_xmit 42 [ 196.822319][T14958] syz_tun: tun_net_xmit 42 [ 196.826964][T14958] syz_tun: tun_net_xmit 42 [ 196.831865][T14958] syz_tun: tun_net_xmit 42 [ 196.836537][T14958] syz_tun: tun_net_xmit 42 [ 196.841620][T14958] syz_tun: tun_net_xmit 42 [ 196.846293][T14958] syz_tun: tun_net_xmit 42 [ 196.851500][T14958] syz_tun: tun_net_xmit 42 [ 196.856161][T14958] syz_tun: tun_net_xmit 42 [ 196.860861][T14958] syz_tun: tun_net_xmit 42 [ 196.865696][T14958] syz_tun: tun_net_xmit 42 [ 196.871809][T14958] syz_tun: tun_net_xmit 42 [ 196.876544][T14958] syz_tun: tun_net_xmit 42 [ 196.881429][T14958] syz_tun: tun_net_xmit 42 [ 196.886146][T14958] syz_tun: tun_net_xmit 42 [ 196.891116][T14958] syz_tun: tun_net_xmit 42 [ 196.896101][T14958] syz_tun: tun_net_xmit 42 [ 196.900993][T14958] syz_tun: tun_net_xmit 42 [ 196.905716][T14958] syz_tun: tun_net_xmit 42 [ 196.911172][T14958] syz_tun: tun_net_xmit 42 [ 196.916352][T14958] syz_tun: tun_net_xmit 42 [ 196.923662][T14958] syz_tun: tun_net_xmit 42 [ 196.928596][T14958] syz_tun: tun_net_xmit 42 [ 196.935227][T14958] syz_tun: tun_net_xmit 42 [ 196.948258][T15384] tipc: Enabled bearer , priority 0 [ 196.950329][T14958] syz_tun: tun_net_xmit 42 [ 196.967297][T14958] syz_tun: tun_net_xmit 42 [ 196.982289][T15384] syzkaller0: entered promiscuous mode [ 196.987798][T15384] syzkaller0: entered allmulticast mode [ 196.989492][T14958] syz_tun: tun_net_xmit 42 [ 197.007607][T14958] syz_tun: tun_net_xmit 42 [ 197.014055][T14958] syz_tun: tun_net_xmit 42 [ 197.020548][T14958] syz_tun: tun_net_xmit 42 [ 197.033669][T14958] syz_tun: tun_net_xmit 42 [ 197.038482][T14958] syz_tun: tun_net_xmit 42 [ 197.043891][T14958] syz_tun: tun_net_xmit 42 [ 197.044654][T15384] tipc: Resetting bearer [ 197.049315][T14958] syz_tun: tun_net_xmit 42 [ 197.059794][T14958] syz_tun: tun_net_xmit 42 [ 197.064769][T14958] syz_tun: tun_net_xmit 42 [ 197.070216][T14958] syz_tun: tun_net_xmit 42 [ 197.075139][T14958] syz_tun: tun_net_xmit 42 [ 197.085367][T14958] syz_tun: tun_net_xmit 42 [ 197.090622][T14958] syz_tun: tun_net_xmit 42 [ 197.095702][T14958] syz_tun: tun_net_xmit 42 [ 197.101057][T14958] syz_tun: tun_net_xmit 42 [ 197.105812][T14958] syz_tun: tun_net_xmit 42 [ 197.111144][T14958] syz_tun: tun_net_xmit 42 [ 197.115886][T14958] syz_tun: tun_net_xmit 42 [ 197.121501][T14958] syz_tun: tun_net_xmit 42 [ 197.139521][T14958] syz_tun: tun_net_xmit 42 [ 197.139547][T15382] tipc: Resetting bearer [ 197.144201][T14958] syz_tun: tun_net_xmit 42 [ 197.157734][T14958] syz_tun: tun_net_xmit 42 [ 197.163236][T14958] syz_tun: tun_net_xmit 42 [ 197.168002][T14958] syz_tun: tun_net_xmit 42 [ 197.174553][T14958] syz_tun: tun_net_xmit 42 [ 197.179930][T14958] syz_tun: tun_net_xmit 42 [ 197.184662][T14958] syz_tun: tun_net_xmit 42 [ 197.190315][T14958] syz_tun: tun_net_xmit 42 [ 197.190582][T15382] tipc: Disabling bearer [ 197.194928][T14958] syz_tun: tun_net_xmit 42 [ 197.205908][T14958] syz_tun: tun_net_xmit 42 [ 197.213425][T14958] syz_tun: tun_net_xmit 42 [ 197.218161][T14958] syz_tun: tun_net_xmit 42 [ 197.223753][T14958] syz_tun: tun_net_xmit 42 [ 197.228454][T14958] syz_tun: tun_net_xmit 42 [ 197.233839][T14958] syz_tun: tun_net_xmit 42 [ 197.238608][T14958] syz_tun: tun_net_xmit 42 [ 197.243609][T14958] syz_tun: tun_net_xmit 42 [ 197.248262][T14958] syz_tun: tun_net_xmit 42 [ 197.253662][T14958] syz_tun: tun_net_xmit 42 [ 197.258798][T14958] syz_tun: tun_net_xmit 42 [ 197.266414][T14958] syz_tun: tun_net_xmit 42 [ 197.272118][T14958] syz_tun: tun_net_xmit 42 [ 197.276865][T14958] syz_tun: tun_net_xmit 42 [ 197.297646][T15401] netlink: 'syz.2.2667': attribute type 1 has an invalid length. [ 197.307296][T14958] syz_tun: tun_net_xmit 42 [ 197.313575][T14958] syz_tun: tun_net_xmit 42 [ 197.318677][T14958] syz_tun: tun_net_xmit 42 [ 197.327499][T14958] syz_tun: tun_net_xmit 42 [ 197.333564][T14958] syz_tun: tun_net_xmit 42 [ 197.338599][T14958] syz_tun: tun_net_xmit 42 [ 197.351398][T14958] syz_tun: tun_net_xmit 42 [ 197.356207][T14958] syz_tun: tun_net_xmit 42 [ 197.361801][T14958] syz_tun: tun_net_xmit 42 [ 197.366163][T15401] netlink: 'syz.2.2667': attribute type 1 has an invalid length. [ 197.366539][T14958] syz_tun: tun_net_xmit 42 [ 197.379659][T14958] syz_tun: tun_net_xmit 42 [ 197.385794][T14958] syz_tun: tun_net_xmit 42 [ 197.391239][T14958] syz_tun: tun_net_xmit 42 [ 197.395974][T14958] syz_tun: tun_net_xmit 42 [ 197.423754][T14958] syz_tun: tun_net_xmit 42 [ 197.432257][T14958] syz_tun: tun_net_xmit 42 [ 197.436971][T14958] syz_tun: tun_net_xmit 42 [ 197.470007][T14958] syz_tun: tun_net_xmit 42 [ 197.475057][T14958] syz_tun: tun_net_xmit 42 [ 197.480938][T14958] syz_tun: tun_net_xmit 42 [ 197.485639][T14958] syz_tun: tun_net_xmit 42 [ 197.491080][T14958] syz_tun: tun_net_xmit 42 [ 197.495795][T14958] syz_tun: tun_net_xmit 42 [ 197.512739][T14958] syz_tun: tun_net_xmit 42 [ 197.521100][T14958] syz_tun: tun_net_xmit 42 [ 197.550391][T14958] syz_tun: tun_net_xmit 42 [ 197.562829][T14958] syz_tun: tun_net_xmit 42 [ 197.570762][T14958] syz_tun: tun_net_xmit 42 [ 197.575498][T14958] syz_tun: tun_net_xmit 42 [ 197.583169][T14958] syz_tun: tun_net_xmit 42 [ 197.587917][T14958] syz_tun: tun_net_xmit 42 [ 197.595593][T14958] syz_tun: tun_net_xmit 42 [ 197.600673][T14958] syz_tun: tun_net_xmit 42 [ 197.605311][T14958] syz_tun: tun_net_xmit 42 [ 197.611178][T14958] syz_tun: tun_net_xmit 42 [ 197.615835][T14958] syz_tun: tun_net_xmit 42 [ 197.621081][T14958] syz_tun: tun_net_xmit 42 [ 197.628463][T14958] syz_tun: tun_net_xmit 42 [ 197.634811][T14958] syz_tun: tun_net_xmit 42 [ 197.639794][T14958] syz_tun: tun_net_xmit 42 [ 197.652766][T14958] syz_tun: tun_net_xmit 42 [ 197.661909][T14958] syz_tun: tun_net_xmit 42 [ 197.671901][T14958] syz_tun: tun_net_xmit 42 [ 197.680068][T14958] syz_tun: tun_net_xmit 42 [ 197.684758][T14958] syz_tun: tun_net_xmit 42 [ 197.691719][T14958] syz_tun: tun_net_xmit 42 [ 197.696374][T14958] syz_tun: tun_net_xmit 42 [ 197.701081][T14958] syz_tun: tun_net_xmit 42 [ 197.705741][T14958] syz_tun: tun_net_xmit 42 [ 197.710721][T14958] syz_tun: tun_net_xmit 42 [ 197.715370][T14958] syz_tun: tun_net_xmit 42 [ 197.720553][T14958] syz_tun: tun_net_xmit 42 [ 197.725233][T14958] syz_tun: tun_net_xmit 42 [ 197.731467][T14958] syz_tun: tun_net_xmit 42 [ 197.736334][T14958] syz_tun: tun_net_xmit 42 [ 197.741083][T14958] syz_tun: tun_net_xmit 42 [ 197.745746][T14958] syz_tun: tun_net_xmit 42 [ 197.759224][T14958] syz_tun: tun_net_xmit 42 [ 197.764017][T14958] syz_tun: tun_net_xmit 42 [ 197.770365][T14958] syz_tun: tun_net_xmit 42 [ 197.775447][T14958] syz_tun: tun_net_xmit 42 [ 197.791498][T14958] syz_tun: tun_net_xmit 42 [ 197.796497][T14958] syz_tun: tun_net_xmit 42 [ 197.803329][T14958] syz_tun: tun_net_xmit 42 [ 197.832726][T14958] syz_tun: tun_net_xmit 42 [ 197.843274][T14958] syz_tun: tun_net_xmit 42 [ 197.853794][T14958] syz_tun: tun_net_xmit 42 [ 197.880405][T14958] syz_tun: tun_net_xmit 42 [ 197.885113][T14958] syz_tun: tun_net_xmit 42 [ 197.909539][T14958] syz_tun: tun_net_xmit 42 [ 197.914596][T14958] syz_tun: tun_net_xmit 42 [ 197.922504][T14958] syz_tun: tun_net_xmit 42 [ 197.931548][T14958] syz_tun: tun_net_xmit 42 [ 197.939827][T14958] syz_tun: tun_net_xmit 42 [ 197.944485][T14958] syz_tun: tun_net_xmit 42 [ 197.958210][T14958] syz_tun: tun_net_xmit 42 [ 197.969902][T14958] syz_tun: tun_net_xmit 42 [ 197.975024][T14958] syz_tun: tun_net_xmit 42 [ 197.995447][T14958] syz_tun: tun_net_xmit 42 [ 198.008272][T14958] syz_tun: tun_net_xmit 42 [ 198.013817][T14958] syz_tun: tun_net_xmit 42 [ 198.018461][T14958] syz_tun: tun_net_xmit 42 [ 198.024811][T14958] syz_tun: tun_net_xmit 42 [ 198.032071][T14958] syz_tun: tun_net_xmit 42 [ 198.036889][T14958] syz_tun: tun_net_xmit 42 [ 198.043512][T14958] syz_tun: tun_net_xmit 42 [ 198.048308][T14958] syz_tun: tun_net_xmit 42 [ 198.053245][T14958] syz_tun: tun_net_xmit 42 [ 198.057990][T14958] syz_tun: tun_net_xmit 42 [ 198.064116][T14958] syz_tun: tun_net_xmit 42 [ 198.069584][T14958] syz_tun: tun_net_xmit 42 [ 198.074388][T14958] syz_tun: tun_net_xmit 42 [ 198.083197][T14958] syz_tun: tun_net_xmit 42 [ 198.087984][T14958] syz_tun: tun_net_xmit 42 [ 198.093233][T14958] syz_tun: tun_net_xmit 42 [ 198.098063][T14958] syz_tun: tun_net_xmit 42 [ 198.104099][T14958] syz_tun: tun_net_xmit 42 [ 198.136708][T14958] syz_tun: tun_net_xmit 42 [ 198.141949][T14958] syz_tun: tun_net_xmit 42 [ 198.155796][T14958] syz_tun: tun_net_xmit 42 [ 198.175351][T15463] netlink: 'syz.3.2684': attribute type 12 has an invalid length. [ 198.179696][T14958] syz_tun: tun_net_xmit 42 [ 198.190047][T14958] syz_tun: tun_net_xmit 42 [ 198.194861][T14958] syz_tun: tun_net_xmit 42 [ 198.202207][T15463] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 198.213466][T14958] syz_tun: tun_net_xmit 42 [ 198.238113][T14958] syz_tun: tun_net_xmit 42 [ 198.248474][T14958] syz_tun: tun_net_xmit 42 [ 198.259595][T14958] syz_tun: tun_net_xmit 42 [ 198.271180][T14958] syz_tun: tun_net_xmit 42 [ 198.281234][T14958] syz_tun: tun_net_xmit 42 [ 198.294337][T14958] syz_tun: tun_net_xmit 42 [ 198.305227][T14958] syz_tun: tun_net_xmit 42 [ 198.317113][T14958] syz_tun: tun_net_xmit 42 [ 198.333544][T14958] syz_tun: tun_net_xmit 42 [ 198.343903][T14958] syz_tun: tun_net_xmit 42 [ 198.354144][T14958] syz_tun: tun_net_xmit 42 [ 198.377316][T14958] syz_tun: tun_net_xmit 42 [ 198.387041][T14958] syz_tun: tun_net_xmit 42 [ 198.400261][T15483] __nla_validate_parse: 76 callbacks suppressed [ 198.400279][T15483] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2689'. [ 198.405626][T14958] syz_tun: tun_net_xmit 42 [ 198.421598][T15484] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2689'. [ 198.422131][T14958] syz_tun: tun_net_xmit 42 [ 198.436340][T14958] syz_tun: tun_net_xmit 42 [ 198.441124][T14958] syz_tun: tun_net_xmit 42 [ 198.447711][T15486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.458287][T14958] syz_tun: tun_net_xmit 42 [ 198.463260][T14958] syz_tun: tun_net_xmit 42 [ 198.472138][T14958] syz_tun: tun_net_xmit 42 [ 198.493649][T14958] syz_tun: tun_net_xmit 42 [ 198.498486][T14958] syz_tun: tun_net_xmit 42 [ 198.504037][T14958] syz_tun: tun_net_xmit 42 [ 198.510425][T14958] syz_tun: tun_net_xmit 42 [ 198.515123][T14958] syz_tun: tun_net_xmit 42 [ 198.525339][T14958] syz_tun: tun_net_xmit 42 [ 198.540089][T14958] syz_tun: tun_net_xmit 42 [ 198.542720][T15495] kthread_run failed with err -4 [ 198.549529][T14958] syz_tun: tun_net_xmit 42 [ 198.549754][T14958] syz_tun: tun_net_xmit 42 [ 198.554427][T15495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2692'. [ 198.567930][T14958] syz_tun: tun_net_xmit 42 [ 198.583430][T14958] syz_tun: tun_net_xmit 42 [ 198.593518][T14958] syz_tun: tun_net_xmit 42 [ 198.598237][T14958] syz_tun: tun_net_xmit 42 [ 198.607444][T14958] syz_tun: tun_net_xmit 42 [ 198.619442][T15500] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2694'. [ 198.649478][T14958] syz_tun: tun_net_xmit 42 [ 198.663180][T14958] syz_tun: tun_net_xmit 42 [ 198.679820][T14958] syz_tun: tun_net_xmit 42 [ 198.684611][T14958] syz_tun: tun_net_xmit 42 [ 198.694836][T14958] syz_tun: tun_net_xmit 42 [ 198.702376][T14958] syz_tun: tun_net_xmit 42 [ 198.707211][T14958] syz_tun: tun_net_xmit 42 [ 198.712660][T14958] syz_tun: tun_net_xmit 42 [ 198.717545][T14958] syz_tun: tun_net_xmit 42 [ 198.722652][T14958] syz_tun: tun_net_xmit 42 [ 198.727335][T14958] syz_tun: tun_net_xmit 42 [ 198.735090][T14958] syz_tun: tun_net_xmit 42 [ 198.755711][T14958] syz_tun: tun_net_xmit 42 [ 198.764007][T14958] syz_tun: tun_net_xmit 42 [ 198.774113][T14958] syz_tun: tun_net_xmit 42 [ 198.789610][T14958] syz_tun: tun_net_xmit 42 [ 198.801949][T14958] syz_tun: tun_net_xmit 42 [ 198.815258][T14958] syz_tun: tun_net_xmit 42 [ 198.825157][T14958] syz_tun: tun_net_xmit 42 [ 198.834234][T14958] syz_tun: tun_net_xmit 42 [ 198.851393][T14958] syz_tun: tun_net_xmit 42 [ 198.863925][T14958] syz_tun: tun_net_xmit 42 [ 198.876380][T14958] syz_tun: tun_net_xmit 42 [ 198.895313][T14958] syz_tun: tun_net_xmit 42 [ 198.905187][T14958] syz_tun: tun_net_xmit 42 [ 198.924579][T14958] syz_tun: tun_net_xmit 42 [ 198.938590][T14958] syz_tun: tun_net_xmit 42 [ 198.946305][T14958] syz_tun: tun_net_xmit 42 [ 198.952036][T14958] syz_tun: tun_net_xmit 42 [ 198.961082][T15542] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 198.963408][T14958] syz_tun: tun_net_xmit 42 [ 198.999558][T14958] syz_tun: tun_net_xmit 42 [ 199.004589][T14958] syz_tun: tun_net_xmit 42 [ 199.009481][T14958] syz_tun: tun_net_xmit 42 [ 199.014240][T14958] syz_tun: tun_net_xmit 42 [ 199.019665][T14958] syz_tun: tun_net_xmit 42 [ 199.024583][T14958] syz_tun: tun_net_xmit 42 [ 199.030157][T14958] syz_tun: tun_net_xmit 42 [ 199.040461][T15542] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 199.043996][T14958] syz_tun: tun_net_xmit 42 [ 199.054495][T14958] syz_tun: tun_net_xmit 42 [ 199.060806][T14958] syz_tun: tun_net_xmit 42 [ 199.065619][T14958] syz_tun: tun_net_xmit 42 [ 199.071248][T14958] syz_tun: tun_net_xmit 42 [ 199.074558][T15542] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 199.086418][T15542] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 199.094406][T15542] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 199.095002][T14958] syz_tun: tun_net_xmit 42 [ 199.108560][T14958] syz_tun: tun_net_xmit 42 [ 199.114366][T14958] syz_tun: tun_net_xmit 42 [ 199.120051][T14958] syz_tun: tun_net_xmit 42 [ 199.124816][T14958] syz_tun: tun_net_xmit 42 [ 199.128687][T15542] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 199.131716][T14958] syz_tun: tun_net_xmit 42 [ 199.142600][T14958] syz_tun: tun_net_xmit 42 [ 199.147322][T14958] syz_tun: tun_net_xmit 42 [ 199.165013][T14958] syz_tun: tun_net_xmit 42 [ 199.175187][T14958] syz_tun: tun_net_xmit 42 [ 199.183279][T14958] syz_tun: tun_net_xmit 42 [ 199.193066][T14958] syz_tun: tun_net_xmit 42 [ 199.198391][T14958] syz_tun: tun_net_xmit 42 [ 199.203390][T14958] syz_tun: tun_net_xmit 42 [ 199.208107][T14958] syz_tun: tun_net_xmit 42 [ 199.213913][T14958] syz_tun: tun_net_xmit 42 [ 199.223037][T14958] syz_tun: tun_net_xmit 42 [ 199.234328][T14958] syz_tun: tun_net_xmit 42 [ 199.241041][T14958] syz_tun: tun_net_xmit 42 [ 199.246044][T14958] syz_tun: tun_net_xmit 42 [ 199.254393][T14958] syz_tun: tun_net_xmit 42 [ 199.269258][T14958] syz_tun: tun_net_xmit 42 [ 199.582305][T15596] netlink: 'syz.1.2724': attribute type 1 has an invalid length. [ 199.603503][T15595] macsec1: entered allmulticast mode [ 199.616025][T15598] netlink: 'syz.1.2724': attribute type 1 has an invalid length. [ 199.801363][T15618] netlink: 'syz.1.2732': attribute type 30 has an invalid length. [ 199.890510][T15627] sctp: [Deprecated]: syz.4.2736 (pid 15627) Use of struct sctp_assoc_value in delayed_ack socket option. [ 199.890510][T15627] Use struct sctp_sack_info instead [ 199.926254][T15631] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2737'. [ 200.014954][T15633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2738'. [ 200.029779][T15633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2738'. [ 200.045352][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.059023][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.090720][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.131697][T15640] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2742'. [ 200.258410][T15654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2744'. [ 200.298990][T15654] netlink: 50 bytes leftover after parsing attributes in process `syz.0.2744'. [ 200.336240][T15664] nbd: must specify at least one socket [ 200.394424][T15662] veth1_to_bond: entered allmulticast mode [ 200.404184][T15661] veth1_to_bond: left allmulticast mode [ 200.416598][T15669] netlink: 'syz.1.2749': attribute type 10 has an invalid length. [ 200.603020][T15695] xt_time: unknown flags 0xf4 [ 200.737702][T15710] netlink: 'syz.3.2760': attribute type 4 has an invalid length. [ 200.804498][T15718] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 201.082715][T15742] netlink: 'syz.1.2767': attribute type 11 has an invalid length. [ 201.200202][T15754] netlink: 'syz.1.2772': attribute type 3 has an invalid length. [ 201.209332][T15754] net_ratelimit: 59 callbacks suppressed [ 201.209348][T15754] veth0_vlan: mtu greater than device maximum [ 201.605806][T15792] bond4: entered promiscuous mode [ 201.622416][T15792] bond4: entered allmulticast mode [ 201.640724][T15792] 8021q: adding VLAN 0 to HW filter on device bond4 [ 201.736211][T15807] netlink: 'syz.1.2787': attribute type 1 has an invalid length. [ 201.748411][T15807] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.761554][T15807] 8021q: VLANs not supported on ip_vti0 [ 201.842247][T15817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.980823][T15830] netlink: 'syz.0.2796': attribute type 1 has an invalid length. [ 202.071868][T15837] veth17: entered promiscuous mode [ 202.360443][ T1152] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 202.368308][ T1152] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 202.390975][T10659] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 202.498890][T10659] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 202.637243][ T5855] syz_tun (unregistering): left allmulticast mode [ 202.644503][ T5855] syz_tun (unregistering): left promiscuous mode [ 202.651569][ T5855] bridge0: port 1(syz_tun) entered disabled state [ 202.658460][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 202.666935][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 202.677204][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 202.686232][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 202.694184][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 202.721879][T15891] vxcan1 speed is unknown, defaulting to 1000 [ 202.754582][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.785824][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.870942][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.883929][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.897064][T15903] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 202.965556][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.987339][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.068019][ T36] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.078996][T12245] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 203.087369][ T36] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.251929][T15891] chnl_net:caif_netlink_parms(): no params data found [ 203.287757][T15933] validate_nla: 2 callbacks suppressed [ 203.287776][T15933] netlink: 'syz.0.2827': attribute type 1 has an invalid length. [ 203.321875][ T36] vlan0: left promiscuous mode [ 203.328376][ T36] bridge0: left promiscuous mode [ 203.340956][ T36] bridge11: port 1(vlan0) entered disabled state [ 203.412776][ T36] tipc: Disabling bearer [ 204.097143][ T36] bond0 (unregistering): Released all slaves [ 204.107497][ T36] bond1 (unregistering): Released all slaves [ 204.118389][ T36] bond2 (unregistering): Released all slaves [ 204.129400][ T36] bond3 (unregistering): Released all slaves [ 204.142952][ T36] bond4 (unregistering): Released all slaves [ 204.155386][ T36] bond5 (unregistering): Released all slaves [ 204.166148][ T36] bond6 (unregistering): (slave veth13): Releasing active interface [ 204.175727][ T36] bond6 (unregistering): (slave veth15): Releasing active interface [ 204.190814][ T36] bond6 (unregistering): Released all slaves [ 204.200625][ T36] bond7 (unregistering): Released all slaves [ 204.216691][T15933] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 204.322236][ T36] : left promiscuous mode [ 204.377675][T15977] __nla_validate_parse: 32 callbacks suppressed [ 204.377693][T15977] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2838'. [ 204.453225][T15891] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.471689][T15891] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.484383][T15891] bridge_slave_0: entered allmulticast mode [ 204.517197][T15891] bridge_slave_0: entered promiscuous mode [ 204.535481][ T36] tipc: Disabling bearer [ 204.548991][ T36] tipc: Left network mode [ 204.556137][T15997] syz_tun: entered allmulticast mode [ 204.571275][T15891] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.582233][T15891] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.589673][T15891] bridge_slave_1: entered allmulticast mode [ 204.597040][T15891] bridge_slave_1: entered promiscuous mode [ 204.707692][T15891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.759471][ T5870] Bluetooth: hci0: command tx timeout [ 204.771415][T15891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.844141][T16008] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 204.945771][T16026] netlink: 'syz.1.2849': attribute type 29 has an invalid length. [ 204.989590][ T36] hsr_slave_0: left promiscuous mode [ 205.022775][T16035] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2849'. [ 205.109929][T16026] netlink: 'syz.1.2849': attribute type 29 has an invalid length. [ 205.122087][T15891] team0: Port device team_slave_0 added [ 205.158407][T15891] team0: Port device team_slave_1 added [ 205.210091][T15891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.217171][T15891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.243769][T15891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.270520][T15891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.279330][T15891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.310600][T15891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.400240][T16051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2855'. [ 205.441571][T15891] hsr_slave_0: entered promiscuous mode [ 205.457083][T15891] hsr_slave_1: entered promiscuous mode [ 205.486005][T15891] debugfs: 'hsr0' already exists in 'hsr' [ 205.495545][T15891] Cannot create hsr debugfs directory [ 205.542723][T16064] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2859'. [ 205.561714][T16064] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2859'. [ 205.637339][T16074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2861'. [ 205.655484][ T36] IPVS: stop unused estimator thread 0... [ 205.673670][T16076] netlink: 'syz.1.2860': attribute type 21 has an invalid length. [ 205.715689][T16076] netlink: 'syz.1.2860': attribute type 22 has an invalid length. [ 205.720103][T16080] netlink: 'syz.0.2862': attribute type 13 has an invalid length. [ 205.747218][T16080] netlink: 'syz.0.2862': attribute type 58 has an invalid length. [ 205.751001][T16076] netlink: 'syz.1.2860': attribute type 23 has an invalid length. [ 205.764580][T16080] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2862'. [ 205.784462][T16076] netlink: 'syz.1.2860': attribute type 25 has an invalid length. [ 205.810063][T16076] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2860'. [ 205.845178][T16084] veth0: entered promiscuous mode [ 206.024768][T16071] veth0: left promiscuous mode [ 206.098197][T16105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2868'. [ 206.120908][ T49] smc: removing ib device syz2 [ 206.276691][T16117] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2873'. [ 206.328628][T15891] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 206.356098][T15891] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 206.461076][T15891] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 206.500657][T15891] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 206.762965][T15891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.802479][T15891] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.833406][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.840599][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.850607][ T5870] Bluetooth: hci0: command tx timeout [ 206.868049][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.875299][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.120106][T16164] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 207.132969][T16164] netlink: 'syz.4.2882': attribute type 32 has an invalid length. [ 207.151717][T16164] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 207.453056][T15891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.510420][T15891] veth0_vlan: entered promiscuous mode [ 207.535430][T15891] veth1_vlan: entered promiscuous mode [ 207.611714][T15891] veth0_macvtap: entered promiscuous mode [ 207.657714][T15891] veth1_macvtap: entered promiscuous mode [ 207.688313][T15891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.709489][T15891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.745374][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.780052][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.841965][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.887984][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.027628][ T4603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.078580][ T4603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.126584][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.153306][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.282679][T16267] tipc: Started in network mode [ 208.288808][T16267] tipc: Node identity d2702d53cefa, cluster identity 4711 [ 208.296088][T16267] tipc: Enabled bearer , priority 0 [ 208.304772][T16267] syzkaller0: entered promiscuous mode [ 208.310496][T16267] syzkaller0: entered allmulticast mode [ 208.374892][T16267] tipc: Resetting bearer [ 208.398261][T16274] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 208.403952][T16280] Bluetooth: MGMT ver 1.23 [ 208.405796][T16274] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 208.422689][T16274] tipc: Enabling of bearer rejected, already enabled [ 208.551764][T16279] tipc: Resetting bearer [ 208.638070][T16279] tipc: Disabling bearer [ 208.845825][T16318] validate_nla: 2 callbacks suppressed [ 208.845844][T16318] netlink: 'syz.1.2920': attribute type 10 has an invalid length. [ 208.873462][T16310] tipc: Enabled bearer , priority 0 [ 208.883872][T16318] veth0_vlan: entered allmulticast mode [ 208.920431][ T5870] Bluetooth: hci0: command tx timeout [ 208.929340][T16318] veth0_vlan: left promiscuous mode [ 208.940021][T16318] veth0_vlan: entered promiscuous mode [ 208.958114][T16318] team0: Device veth0_vlan failed to register rx_handler [ 209.118376][ T5183] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.128207][ T5183] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.141295][ T5183] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.160765][ T5183] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.164574][T16310] tipc: Resetting bearer [ 209.174757][ T5183] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.223809][T16309] tipc: Disabling bearer [ 209.382392][T16350] netlink: 'syz.3.2927': attribute type 1 has an invalid length. [ 209.429592][T16350] __nla_validate_parse: 18 callbacks suppressed [ 209.429610][T16350] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2927'. [ 209.461094][T16360] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 209.497417][T16363] openvswitch: netlink: Missing valid actions attribute. [ 209.512495][T16364] netlink: 'syz.2.2932': attribute type 9 has an invalid length. [ 209.524843][T16363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.552920][T16368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2934'. [ 209.564238][T16368] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2934'. [ 209.593127][T16364] netlink: 'syz.2.2932': attribute type 9 has an invalid length. [ 209.681245][T16331] chnl_net:caif_netlink_parms(): no params data found [ 209.828463][T16389] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2940'. [ 209.894281][T16331] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.905696][T16331] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.913568][T16399] netlink: 'syz.2.2943': attribute type 1 has an invalid length. [ 209.913842][T16331] bridge_slave_0: entered allmulticast mode [ 209.929509][T16331] bridge_slave_0: entered promiscuous mode [ 209.936765][T16331] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.944656][T16331] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.952593][T16331] bridge_slave_1: entered allmulticast mode [ 209.961175][T16331] bridge_slave_1: entered promiscuous mode [ 210.005647][T16331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.035574][T16399] veth3: entered promiscuous mode [ 210.044022][T16331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.085064][T16331] team0: Port device team_slave_0 added [ 210.105352][T16407] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2945'. [ 210.111344][T16331] team0: Port device team_slave_1 added [ 210.202720][T16331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.212404][T16331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.240367][T16331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.291349][T16331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.311559][T16331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.344061][T16331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.444210][T16331] hsr_slave_0: entered promiscuous mode [ 210.453555][T16331] hsr_slave_1: entered promiscuous mode [ 210.460637][T16331] debugfs: 'hsr0' already exists in 'hsr' [ 210.466971][T16331] Cannot create hsr debugfs directory [ 210.497399][T16441] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2958'. [ 210.522357][ T124] block nbd4: Possible stuck request ffff8880255c0000: control (read@0,4096B). Runtime 30 seconds [ 210.525455][T16443] netlink: 'syz.1.2959': attribute type 1 has an invalid length. [ 210.619517][T16448] netlink: 'syz.3.2960': attribute type 1 has an invalid length. [ 210.696148][T16459] openvswitch: netlink: Message has -1 unknown bytes. [ 210.732192][T16463] netlink: 'syz.2.2963': attribute type 1 has an invalid length. [ 210.817298][T16331] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.829885][T16331] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 210.884330][T16331] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.903964][T16331] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 210.930580][T16469] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2967'. [ 210.973333][T16331] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.981767][T16486] netlink: 'syz.2.2970': attribute type 8 has an invalid length. [ 210.994479][T16331] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 211.016759][ T5183] Bluetooth: hci0: command tx timeout [ 211.034096][T16489] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 211.055075][T16489] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 211.087878][T16331] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.124339][T16331] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 211.242500][ T5183] Bluetooth: hci3: command tx timeout [ 211.260616][T16512] netlink: 'syz.3.2979': attribute type 21 has an invalid length. [ 211.272687][T16331] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 211.272726][T16512] IPv6: NLM_F_CREATE should be specified when creating new route [ 211.292538][T16511] tipc: Enabled bearer , priority 0 [ 211.296226][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2979'. [ 211.300359][T16331] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 211.312856][T16514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.332477][T16511] syzkaller0: entered promiscuous mode [ 211.338448][T16511] syzkaller0: entered allmulticast mode [ 211.350089][T16331] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 211.371082][T16511] tipc: Resetting bearer [ 211.383701][T16331] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 211.398856][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.411647][T16509] tipc: Resetting bearer [ 211.418572][T16509] tipc: Disabling bearer [ 211.531899][T16537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2983'. [ 211.554354][T16538] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.571448][T16541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2986'. [ 211.645553][T16331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.697863][T16331] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.796473][ T4603] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.803637][ T4603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.828381][ T4603] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.835536][ T4603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.895129][T16569] tipc: Enabling of bearer rejected, already enabled [ 211.960785][T16569] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 211.990411][T16569] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 212.025535][T16579] tipc: Resetting bearer [ 212.168074][T16331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.281087][T16598] openvswitch: netlink: Missing key (keys=40, expected=100) [ 212.358827][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.529859][T16331] veth0_vlan: entered promiscuous mode [ 212.540973][T16331] veth1_vlan: entered promiscuous mode [ 212.561874][T16331] veth0_macvtap: entered promiscuous mode [ 212.570602][T16331] veth1_macvtap: entered promiscuous mode [ 212.585729][T16331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.598556][T16331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.613316][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.622342][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.632242][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.641793][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.218410][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.252895][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.304647][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.315194][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.329443][ T5183] Bluetooth: hci3: command tx timeout [ 213.398839][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.495250][T16651] delete_channel: no stack [ 213.715930][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.725612][ T5870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.734475][ T5870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.742766][ T5870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.746782][T16674] pimreg: entered allmulticast mode [ 213.751450][ T5870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.815585][T16676] wg1: entered promiscuous mode [ 213.917910][T16671] chnl_net:caif_netlink_parms(): no params data found [ 213.992048][T16671] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.996807][T16693] Bluetooth: MGMT ver 1.23 [ 214.002171][T16671] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.011908][T16671] bridge_slave_0: entered allmulticast mode [ 214.019949][T16671] bridge_slave_0: entered promiscuous mode [ 214.027417][T16671] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.034951][T16671] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.044005][T16671] bridge_slave_1: entered allmulticast mode [ 214.051644][T16671] bridge_slave_1: entered promiscuous mode [ 214.102296][T16671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.122915][T16671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.171167][T16671] team0: Port device team_slave_0 added [ 214.186594][T16671] team0: Port device team_slave_1 added [ 214.246306][T16707] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 214.292188][T16671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.310977][T16671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.346868][T16671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.378536][T16671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.388469][T16671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.416285][T16671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.503842][T16730] __nla_validate_parse: 10 callbacks suppressed [ 214.503859][T16730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3037'. [ 214.523602][T16671] hsr_slave_0: entered promiscuous mode [ 214.533872][T16671] hsr_slave_1: entered promiscuous mode [ 214.549360][T16671] debugfs: 'hsr0' already exists in 'hsr' [ 214.555122][T16671] Cannot create hsr debugfs directory [ 214.606769][T16737] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3039'. [ 214.742261][T16752] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3041'. [ 214.771490][T16753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3041'. [ 214.809845][T16753] validate_nla: 4 callbacks suppressed [ 214.809863][T16753] netlink: 'syz.1.3041': attribute type 20 has an invalid length. [ 214.902628][T16760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3042'. [ 214.959847][T16753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3041'. [ 214.971207][T16753] netlink: 'syz.1.3041': attribute type 20 has an invalid length. [ 215.018029][T16765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3046'. [ 215.081935][T16772] tipc: Enabling of bearer rejected, failed to enable media [ 215.097705][T16773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3048'. [ 215.162589][T16779] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 215.198081][T16784] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3052'. [ 215.234687][T16791] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3053'. [ 215.372768][T16799] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.399002][ T5870] Bluetooth: hci3: command tx timeout [ 215.412809][T16671] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 215.440843][T16671] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 215.466594][T16799] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.513847][T16671] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 215.526970][T16671] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 215.569718][T16799] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.617274][T16799] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.728064][ T49] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.771741][ T4603] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.801228][ T5870] Bluetooth: hci1: command tx timeout [ 215.824106][ T4603] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.855605][ T1152] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.917285][T16671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.971633][T16671] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.003977][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.011171][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.035301][T16836] ieee802154 phy0 wpan0: encryption failed: -22 [ 216.045290][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.052421][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.062427][T16836] ieee802154 phy0 wpan0: encryption failed: -22 [ 216.131658][T16834] bond1 (unregistering): Released all slaves [ 216.574255][T16864] netlink: zone id is out of range [ 216.580234][T16864] netlink: zone id is out of range [ 216.585365][T16864] netlink: zone id is out of range [ 216.592792][T16864] netlink: zone id is out of range [ 216.597929][T16864] netlink: zone id is out of range [ 216.619712][T16864] netlink: zone id is out of range [ 216.629597][T16864] netlink: zone id is out of range [ 216.646839][T16876] netlink: 'syz.4.3073': attribute type 4 has an invalid length. [ 216.705835][T16671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.796770][T16671] veth0_vlan: entered promiscuous mode [ 216.825079][T16671] veth1_vlan: entered promiscuous mode [ 216.866346][T16886] syzkaller0: entered promiscuous mode [ 216.875542][T16886] syzkaller0: entered allmulticast mode [ 216.906557][T16671] veth0_macvtap: entered promiscuous mode [ 216.917822][T16671] veth1_macvtap: entered promiscuous mode [ 216.936449][T16671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.983290][T16671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.013402][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.035883][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.061235][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.071120][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.156193][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.181716][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.220536][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.231459][T16909] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 217.236363][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.404669][T16922] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1536) ! [ 217.479404][ T5870] Bluetooth: hci3: command tx timeout [ 217.683571][T10671] IPVS: starting estimator thread 0... [ 217.740414][T16952] sctp: [Deprecated]: syz.4.3089 (pid 16952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 217.740414][T16952] Use struct sctp_sack_info instead [ 217.798853][T16949] IPVS: using max 47 ests per chain, 112800 per kthread [ 217.833042][T16950] tipc: Resetting bearer [ 217.885438][ T5870] Bluetooth: hci1: command tx timeout [ 218.405919][T17022] netlink: 'syz.4.3108': attribute type 1 has an invalid length. [ 218.414642][T17022] netlink: 'syz.4.3108': attribute type 4 has an invalid length. [ 218.565824][T17036] netlink: 'syz.0.3113': attribute type 13 has an invalid length. [ 218.599430][T17036] netlink: 'syz.0.3113': attribute type 13 has an invalid length. [ 218.624684][T17043] dvmrp1: entered allmulticast mode [ 218.682860][T17044] tipc: Enabled bearer , priority 0 [ 218.693067][T17044] syzkaller0: entered promiscuous mode [ 218.710957][T17044] syzkaller0: entered allmulticast mode [ 218.763627][T17044] tipc: Resetting bearer [ 218.775985][T17041] tipc: Resetting bearer [ 218.802480][T17041] tipc: Disabling bearer [ 219.006962][T17075] sctp: [Deprecated]: syz.4.3119 (pid 17075) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.006962][T17075] Use struct sctp_sack_info instead [ 219.218705][T17085] net_ratelimit: 9 callbacks suppressed [ 219.218722][T17085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.263317][T17085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.478761][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.521675][T17101] __nla_validate_parse: 15 callbacks suppressed [ 219.521695][T17101] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3126'. [ 219.572614][T17101] netlink: 'syz.2.3126': attribute type 1 has an invalid length. [ 219.634402][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.648110][ T5183] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.656012][ T5183] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.663519][ T5183] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.674215][ T5183] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.682975][ T5183] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.704078][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.729131][T17111] : entered promiscuous mode [ 219.844628][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.877268][ T1154] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.920090][ T1154] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.950302][ T1154] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.959786][ T5870] Bluetooth: hci1: command tx timeout [ 219.978851][ T1154] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.087144][T17142] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3137'. [ 220.143301][T17144] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3137'. [ 220.438940][T17175] netlink: 'syz.3.3145': attribute type 1 has an invalid length. [ 220.548059][ T49] erspan0 (unregistering): left promiscuous mode [ 220.574205][ T49] gretap0 (unregistering): left promiscuous mode [ 220.622511][T17193] netlink: 'syz.4.3146': attribute type 1 has an invalid length. [ 220.804178][ T49] bond0 (unregistering): Released all slaves [ 220.815014][ T49] bond1 (unregistering): Released all slaves [ 220.824176][ T49] bond2 (unregistering): Released all slaves [ 220.834779][ T49] bond3 (unregistering): Released all slaves [ 220.844954][ T49] bond4 (unregistering): Released all slaves [ 220.856148][ T49] bond5 (unregistering): Released all slaves [ 220.866049][ T49] bond6 (unregistering): Released all slaves [ 220.877813][T17107] chnl_net:caif_netlink_parms(): no params data found [ 220.889569][T17168] netlink: 'syz.2.3143': attribute type 1 has an invalid length. [ 220.912063][T17180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3147'. [ 220.982584][T17193] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.034721][T17196] bond1: (slave geneve2): making interface the new active one [ 221.047866][T17196] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 221.086885][ T49] tipc: Disabling bearer [ 221.097499][ T49] tipc: Left network mode [ 221.113562][ T49] IPVS: stopping backup sync thread 8172 ... [ 221.238383][T17227] netlink: 'syz.4.3152': attribute type 27 has an invalid length. [ 221.306955][T17107] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.335616][T17107] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.369811][T17107] bridge_slave_0: entered allmulticast mode [ 221.377362][T17107] bridge_slave_0: entered promiscuous mode [ 221.444122][T17107] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.464728][T17107] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.485416][T17107] bridge_slave_1: entered allmulticast mode [ 221.499611][T17107] bridge_slave_1: entered promiscuous mode [ 221.535141][T17245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3156'. [ 221.557938][T17245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3156'. [ 221.625604][T17107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.653185][T17107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.718882][ T5870] Bluetooth: hci2: command tx timeout [ 221.753094][T17107] team0: Port device team_slave_0 added [ 221.761349][T17107] team0: Port device team_slave_1 added [ 221.795497][T17269] netlink: 'syz.4.3164': attribute type 4 has an invalid length. [ 221.816218][T17107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.833201][T17107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.859960][T17272] netlink: 'syz.4.3164': attribute type 4 has an invalid length. [ 221.890788][T17107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.967239][T17276] team0: Device wireguard0 is of different type [ 222.002141][T17107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.010936][T17107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.038019][T17107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.049514][ T5870] Bluetooth: hci1: command tx timeout [ 222.107593][T17282] caif0: entered allmulticast mode [ 222.137537][T17107] hsr_slave_0: entered promiscuous mode [ 222.153728][T17107] hsr_slave_1: entered promiscuous mode [ 222.161045][T17107] debugfs: 'hsr0' already exists in 'hsr' [ 222.166984][T17107] Cannot create hsr debugfs directory [ 222.177273][ T49] dummy0: left promiscuous mode [ 222.182911][ T49] batadv_slave_0: left promiscuous mode [ 222.190040][ T49] batadv_slave_1: left promiscuous mode [ 222.199281][ T49] hsr_slave_0: left promiscuous mode [ 222.347322][T17295] gretap1: entered promiscuous mode [ 222.533335][T17310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3174'. [ 222.544918][T17310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3174'. [ 222.585999][T17310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.732547][T17325] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 222.756870][T17329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3178'. [ 222.903401][T17339] netlink: 'syz.4.3181': attribute type 21 has an invalid length. [ 222.937419][T17339] IPv6: NLM_F_CREATE should be specified when creating new route [ 222.960354][T17339] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 222.967595][T17339] IPv6: NLM_F_CREATE should be set when creating new route [ 222.974881][T17339] IPv6: NLM_F_CREATE should be set when creating new route [ 222.982157][T17339] IPv6: NLM_F_CREATE should be set when creating new route [ 223.042230][T17107] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 223.087445][T17107] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 223.165981][T17362] netlink: 'syz.2.3188': attribute type 1 has an invalid length. [ 223.223591][T17362] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.234012][T17107] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 223.260269][T17107] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 223.502568][T17107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.526221][T17401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3194'. [ 223.567441][T17107] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.593004][T17409] netlink: 'syz.0.3197': attribute type 2 has an invalid length. [ 223.602005][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.609154][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.646240][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.653423][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.748419][T17421] netlink: 'syz.4.3199': attribute type 1 has an invalid length. [ 223.787955][T17107] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 223.802214][ T5870] Bluetooth: hci2: command tx timeout [ 223.833287][T17429] delete_channel: no stack [ 223.835037][T17107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.138331][T17457] team0: Device gtp1 is of different type [ 224.215380][T17107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.252494][T17464] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.301451][T17464] bridge_slave_1: left allmulticast mode [ 224.307143][T17464] bridge_slave_1: left promiscuous mode [ 224.336427][T17464] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.353538][T17464] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 224.494445][T17475] : entered promiscuous mode [ 224.521270][T17107] veth0_vlan: entered promiscuous mode [ 224.556822][T17107] veth1_vlan: entered promiscuous mode [ 224.631373][T17107] veth0_macvtap: entered promiscuous mode [ 224.655655][T17107] veth1_macvtap: entered promiscuous mode [ 224.722404][T17107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.780839][T17107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.804282][ T1152] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.817561][ T1152] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.847532][ T1152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.873321][ T1152] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.910032][T17507] __nla_validate_parse: 4 callbacks suppressed [ 224.910050][T17507] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3218'. [ 224.960237][T17507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3218'. [ 224.989031][T17511] netlink: 13 bytes leftover after parsing attributes in process `syz.2.3219'. [ 225.048784][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.056634][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.126084][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.153225][T17521] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3222'. [ 225.165478][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.203977][T17521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3222'. [ 225.229319][T17521] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3222'. [ 225.240610][ T56] block nbd2: Possible stuck request ffff8880254e0000: control (read@0,1024B). Runtime 60 seconds [ 225.251792][ T56] block nbd2: Possible stuck request ffff8880254e01c0: control (read@1024,1024B). Runtime 60 seconds [ 225.263352][ T56] block nbd2: Possible stuck request ffff8880254e0380: control (read@2048,1024B). Runtime 60 seconds [ 225.274415][ T56] block nbd2: Possible stuck request ffff8880254e0540: control (read@3072,1024B). Runtime 60 seconds [ 225.464018][T17553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3229'. [ 225.507196][T17553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3229'. [ 225.604368][T17560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3231'. [ 225.652946][T17566] netlink: zone id is out of range [ 225.751087][T17569] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3234'. [ 225.884331][ T5870] Bluetooth: hci2: command tx timeout [ 226.077020][T17611] wg1 speed is unknown, defaulting to 1000 [ 226.153288][T17611] wg1 speed is unknown, defaulting to 1000 [ 226.191287][T17611] wg1 speed is unknown, defaulting to 1000 [ 226.197293][ T5183] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 226.208388][ T5183] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 226.216025][ T5183] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 226.224042][ T5183] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 226.227046][T17621] validate_nla: 1 callbacks suppressed [ 226.227062][T17621] netlink: 'syz.2.3243': attribute type 1 has an invalid length. [ 226.248445][ T5183] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 226.288555][T17621] netlink: 'syz.2.3243': attribute type 3 has an invalid length. [ 226.333400][T17621] NCSI netlink: No device for ifindex 813332851 [ 226.391395][T17611] infiniband syz2: set active [ 226.396278][T17611] infiniband syz2: added wg1 [ 226.409922][T17626] netlink: 'syz.1.3245': attribute type 1 has an invalid length. [ 226.417746][T17626] netlink: 'syz.1.3245': attribute type 1 has an invalid length. [ 226.440800][T10659] wg1 speed is unknown, defaulting to 1000 [ 226.461560][T17611] RDS/IB: syz2: added [ 226.465710][T17611] smc: adding ib device syz2 with port count 1 [ 226.506723][T17611] smc: ib device syz2 port 1 has pnetid [ 226.515267][T10659] wg1 speed is unknown, defaulting to 1000 [ 226.551661][T17639] netlink: 'syz.1.3250': attribute type 1 has an invalid length. [ 226.581871][T17611] wg1 speed is unknown, defaulting to 1000 [ 226.660191][T17618] chnl_net:caif_netlink_parms(): no params data found [ 226.794584][T17662] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 226.844104][T17618] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.859190][T17618] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.869599][T17618] bridge_slave_0: entered allmulticast mode [ 226.878049][T17618] bridge_slave_0: entered promiscuous mode [ 226.885551][T17611] wg1 speed is unknown, defaulting to 1000 [ 226.894180][T17618] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.902245][T17618] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.913504][T17618] bridge_slave_1: entered allmulticast mode [ 226.923231][T17618] bridge_slave_1: entered promiscuous mode [ 226.942372][T17666] veth3: entered allmulticast mode [ 227.010727][T17618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.033511][T17618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.090785][T17611] wg1 speed is unknown, defaulting to 1000 [ 227.111891][T17618] team0: Port device team_slave_0 added [ 227.128270][T17618] team0: Port device team_slave_1 added [ 227.165427][T17618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.174539][T17618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.202155][T17618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.220763][T17618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.228167][T17618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.260404][T17618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.273476][T17611] wg1 speed is unknown, defaulting to 1000 [ 227.340131][T17618] hsr_slave_0: entered promiscuous mode [ 227.346586][T17618] hsr_slave_1: entered promiscuous mode [ 227.363013][T17618] debugfs: 'hsr0' already exists in 'hsr' [ 227.371175][T17618] Cannot create hsr debugfs directory [ 227.483441][T17611] wg1 speed is unknown, defaulting to 1000 [ 227.607034][T17699] 8021q: VLANs not supported on ipvlan0 [ 227.630784][T17618] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.659148][T17618] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 227.669496][T17618] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 227.684332][T17698] tipc: Started in network mode [ 227.689872][T17698] tipc: Node identity 4ea53243d73e, cluster identity 4711 [ 227.697233][T17698] tipc: Enabled bearer , priority 0 [ 227.707077][T17611] wg1 speed is unknown, defaulting to 1000 [ 227.713998][T17698] syzkaller0: entered promiscuous mode [ 227.721463][T17698] syzkaller0: entered allmulticast mode [ 227.740773][T17618] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.759838][T17618] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 227.773850][T17618] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 227.796852][T17703] tipc: Resetting bearer [ 227.805902][T17697] tipc: Resetting bearer [ 227.813225][T17697] tipc: Disabling bearer [ 227.832304][T17618] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.842388][T17618] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 227.852306][T17618] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 227.863919][T17611] wg1 speed is unknown, defaulting to 1000 [ 227.922612][T17618] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.948879][T17618] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 227.965748][T17618] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 227.977120][ T5183] Bluetooth: hci2: command tx timeout [ 227.985396][T17611] wg1 speed is unknown, defaulting to 1000 [ 228.071576][T17618] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 228.084376][T17618] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 228.094269][T17618] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 228.103811][T17618] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 228.199665][T17618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.217811][T17618] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.230058][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.237199][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.252497][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.259716][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.274385][T17729] veth0: entered promiscuous mode [ 228.358832][ T5183] Bluetooth: hci4: command tx timeout [ 228.466223][T17618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.512994][T17618] veth0_vlan: entered promiscuous mode [ 228.526844][T17618] veth1_vlan: entered promiscuous mode [ 228.566403][T17618] veth0_macvtap: entered promiscuous mode [ 228.585124][T17618] veth1_macvtap: entered promiscuous mode [ 228.615390][T17618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.638333][T17618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.665166][ T1152] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.687080][ T1152] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.733105][ T1152] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.742876][ T1152] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.817907][ T4603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.836612][ T4603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.866702][T17768] "syz.3.3286" (17768) uses obsolete ecb(arc4) skcipher [ 228.881267][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.900055][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.991182][T17778] 8021q: VLANs not supported on wg1 [ 229.223697][T17809] netlink: 'syz.4.3300': attribute type 1 has an invalid length. [ 229.317584][T17821] block nbd1: Unsupported socket: shutdown callout must be supported. [ 229.672807][T17851] netlink: 'syz.1.3315': attribute type 2 has an invalid length. [ 229.754048][T17870] netlink: 'syz.4.3318': attribute type 1 has an invalid length. [ 229.807774][T17870] 8021q: adding VLAN 0 to HW filter on device bond3 [ 229.819104][T17870] bond2: (slave bond3): making interface the new active one [ 229.827049][T17870] bond2: (slave bond3): Enslaving as an active interface with an up link [ 229.831224][T17880] netlink: 'syz.1.3321': attribute type 1 has an invalid length. [ 229.850155][T17880] netlink: 'syz.1.3321': attribute type 2 has an invalid length. [ 229.943003][T17887] __nla_validate_parse: 24 callbacks suppressed [ 229.943023][T17887] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3322'. [ 229.997752][T17893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.013726][T17893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.025448][T17893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.131793][T17901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3329'. [ 230.287360][T17924] gre1: entered promiscuous mode [ 230.295542][T17924] gre1: entered allmulticast mode [ 230.371449][T17934] bond3: entered promiscuous mode [ 230.372114][T17938] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3340'. [ 230.377073][T17934] bond3: entered allmulticast mode [ 230.389961][T17940] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3340'. [ 230.393051][T17934] 8021q: adding VLAN 0 to HW filter on device bond3 [ 230.441040][ T5183] Bluetooth: hci4: command tx timeout [ 230.497907][T17949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3341'. [ 230.507162][T17949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3341'. [ 230.758846][T17963] syzkaller0: entered promiscuous mode [ 230.764583][T17963] syzkaller0: entered allmulticast mode [ 230.981655][T17906] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 231.173016][T17980] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3352'. [ 231.195974][T17980] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3352'. [ 231.208279][T17980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3352'. [ 231.233098][T17980] validate_nla: 3 callbacks suppressed [ 231.233116][T17980] netlink: 'syz.3.3352': attribute type 1 has an invalid length. [ 231.265676][T17989] netlink: 'syz.0.3355': attribute type 2 has an invalid length. [ 231.279028][T17980] netlink: 'syz.3.3352': attribute type 2 has an invalid length. [ 231.334288][T17995] gtp0: entered promiscuous mode [ 231.356329][T17995] gtp0: entered allmulticast mode [ 231.377167][T17997] netlink: 'syz.2.3358': attribute type 3 has an invalid length. [ 231.396324][T18001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3357'. [ 231.493810][T18009] netlink: zone id is out of range [ 231.505076][T18009] netlink: del zone limit has 4 unknown bytes [ 231.594575][T18024] siw: device registration error -23 [ 231.647407][T18029] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 231.782846][T18043] smc: net device bond0 applied user defined pnetid SYZ1 [ 231.812631][T18043] smc: removing net device bond0 with user defined pnetid SYZ1 [ 231.832498][T18043] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.840942][T18047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.861344][T18043] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.880323][T18043] bond0 (unregistering): Released all slaves [ 231.956354][T18055] C: renamed from lo (while UP) [ 231.972157][T18055] geneve2: entered promiscuous mode [ 232.276687][T18096] sctp: [Deprecated]: syz.1.3394 (pid 18096) Use of int in max_burst socket option. [ 232.276687][T18096] Use struct sctp_assoc_value instead [ 232.438298][T18117] netlink: 'syz.3.3401': attribute type 10 has an invalid length. [ 232.518966][ T5183] Bluetooth: hci4: command tx timeout [ 232.640598][T18153] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 232.694253][T18160] netlink: 'syz.3.3412': attribute type 30 has an invalid length. [ 233.036973][T18195] pim6reg: entered allmulticast mode [ 233.077602][T18201] syz.4.3427 uses old SIOCAX25GETINFO [ 233.277231][T18224] netlink: 'syz.1.3434': attribute type 15 has an invalid length. [ 233.504234][T18241] bridge: RTM_NEWNEIGH with invalid ether address [ 233.650136][T18254] tipc: Started in network mode [ 233.655179][T18254] tipc: Node identity , cluster identity 4711 [ 233.662618][T18254] tipc: Failed to set node id, please configure manually [ 233.671634][T18254] tipc: Enabling of bearer rejected, failed to enable media [ 233.908129][T18276] netlink: 'syz.3.3451': attribute type 33 has an invalid length. [ 234.112719][T18289] vlan0: entered promiscuous mode [ 234.117897][T18289] vlan0: entered allmulticast mode [ 234.124258][T18289] veth0_vlan: entered allmulticast mode [ 234.187447][T18293] tipc: Started in network mode [ 234.193181][T18293] tipc: Node identity , cluster identity 4711 [ 234.200916][T18293] tipc: Failed to set node id, please configure manually [ 234.208006][T18293] tipc: Enabling of bearer rejected, failed to enable media [ 234.599423][ T5183] Bluetooth: hci4: command tx timeout [ 234.654599][T18307] IPv6: NLM_F_CREATE should be specified when creating new route [ 234.675431][T18307] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 234.682741][T18307] IPv6: NLM_F_CREATE should be set when creating new route [ 234.839008][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.886885][T18326] wg1 speed is unknown, defaulting to 1000 [ 235.170889][T18355] __nla_validate_parse: 24 callbacks suppressed [ 235.170908][T18355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3475'. [ 235.211831][T18360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3477'. [ 235.234503][T18360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3477'. [ 235.235362][T18361] veth0: entered promiscuous mode [ 235.285581][T18367] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3479'. [ 235.295608][T18367] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 235.382530][T18362] veth0: left promiscuous mode [ 235.454464][T18375] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20003 [ 235.463102][T18375] syzkaller1: entered promiscuous mode [ 235.469728][T18375] syzkaller1: entered allmulticast mode [ 235.478111][T18377] netlink: zone id is out of range [ 235.656642][T18382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.701970][T18401] netlink: 'syz.0.3489': attribute type 21 has an invalid length. [ 235.713370][T18401] IPv6: NLM_F_CREATE should be specified when creating new route [ 235.731638][T18401] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 235.738916][T18401] IPv6: NLM_F_CREATE should be set when creating new route [ 235.746152][T18401] IPv6: NLM_F_CREATE should be set when creating new route [ 235.751083][T18405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3491'. [ 235.753382][T18401] IPv6: NLM_F_CREATE should be set when creating new route [ 236.068064][T18439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3499'. [ 236.078450][T18439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3499'. [ 236.094573][T18439] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 236.144719][T18444] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 236.191665][T18446] wg1 speed is unknown, defaulting to 1000 [ 236.272824][T18453] netlink: 'syz.1.3503': attribute type 2 has an invalid length. [ 236.310362][T18453] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3503'. [ 236.344907][T18456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3504'. [ 236.356355][T18461] nbd: nbd2 already in use [ 236.490493][T18468] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3509'. [ 236.513589][T18473] netlink: 'syz.0.3508': attribute type 5 has an invalid length. [ 236.664837][T18487] netlink: 'syz.1.3514': attribute type 10 has an invalid length. [ 236.828558][T18498] netlink: 'syz.2.3518': attribute type 1 has an invalid length. [ 236.848355][T18493] nbd: couldn't find device at index 3 [ 236.855232][T18493] dvmrp1: left allmulticast mode [ 236.892077][T18493] openvswitch: netlink: Message has 8 unknown bytes. [ 236.908531][T18498] 8021q: adding VLAN 0 to HW filter on device bond4 [ 236.958376][T18498] bond4: (slave gretap1): making interface the new active one [ 236.983392][T18498] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 237.134630][T18521] openvswitch: netlink: IP tunnel dst address not specified [ 237.285681][T18534] bridge_slave_0: left allmulticast mode [ 237.304354][T18534] bridge_slave_0: left promiscuous mode [ 237.326566][T18534] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.415233][T18534] bridge_slave_1: left allmulticast mode [ 237.443528][T18534] bridge_slave_1: left promiscuous mode [ 237.455106][T18534] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.474943][T18534] bond0: (slave bond_slave_0): Releasing backup interface [ 237.507689][T18534] bond0: (slave bond_slave_1): Releasing backup interface [ 237.542917][T18534] team0: Port device team_slave_0 removed [ 237.555660][T18534] team0: Port device team_slave_1 removed [ 237.563742][T18534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.572408][T18534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.581678][T18534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.589959][T18534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.606642][T18534] bond1: (slave geneve2): Releasing active interface [ 237.622799][T18534] bond2: (slave bond3): Releasing backup interface [ 237.639438][T10673] wg1 speed is unknown, defaulting to 1000 [ 237.720174][T18555] netlink: 'syz.2.3530': attribute type 10 has an invalid length. [ 237.752011][T18555] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.772982][T18555] bond0: (slave team0): Enslaving as an active interface with an up link [ 237.786048][T18559] ipvlan0: entered promiscuous mode [ 237.792518][T18559] ipvlan0: entered allmulticast mode [ 237.811522][T18555] netlink: 'syz.2.3530': attribute type 10 has an invalid length. [ 237.834852][T18555] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 237.911918][T18555] 8021q: adding VLAN 0 to HW filter on device bond5 [ 238.027049][T18584] netlink: 'syz.3.3538': attribute type 1 has an invalid length. [ 238.045106][T18584] netlink: 'syz.3.3538': attribute type 1 has an invalid length. [ 238.386797][T18624] ksmbd: Unknown IPC event: 3, ignore. [ 238.407083][T18624] ksmbd: Unknown IPC event: 3, ignore. [ 238.435995][T18624] ksmbd: Unknown IPC event: 3, ignore. [ 238.445404][T18629] veth5: entered promiscuous mode [ 238.474497][T18629] veth5: entered allmulticast mode [ 238.617129][T18647] bridge_slave_1: left allmulticast mode [ 238.637736][T18647] bridge_slave_1: left promiscuous mode [ 238.644459][T18647] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.658198][T18647] bridge_slave_0: left allmulticast mode [ 238.673967][T18647] bridge_slave_0: left promiscuous mode [ 238.687797][T18647] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.926259][T18673] netlink: 'syz.0.3570': attribute type 2 has an invalid length. [ 239.073039][T18690] gretap0: entered promiscuous mode [ 239.104936][T18690] 0ªî{X¹¦: renamed from gretap0 [ 239.140988][T18696] delete_channel: no stack [ 239.150918][T18690] 0ªî{X¹¦: left promiscuous mode [ 239.156055][T18690] 0ªî{X¹¦: entered allmulticast mode [ 239.185579][T18690] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 239.188885][T18704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.358204][T18719] sctp: [Deprecated]: syz.4.3587 (pid 18719) Use of int in maxseg socket option. [ 239.358204][T18719] Use struct sctp_assoc_value instead [ 239.383645][T18719] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001 [ 239.409787][T18719] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20001 [ 239.516608][T18721] 8021q: VLANs not supported on lo [ 239.552426][T18738] netlink: 'syz.4.3592': attribute type 11 has an invalid length. [ 239.934108][T18791] syz.3.3602: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 239.964692][T18791] CPU: 1 UID: 0 PID: 18791 Comm: syz.3.3602 Not tainted syzkaller #0 PREEMPT(full) [ 239.964724][T18791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 239.964747][T18791] Call Trace: [ 239.964754][T18791] [ 239.964762][T18791] dump_stack_lvl+0x189/0x250 [ 239.964788][T18791] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.964805][T18791] ? __pfx__printk+0x10/0x10 [ 239.964824][T18791] ? lock_release+0x4b/0x3e0 [ 239.964850][T18791] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 239.964869][T18791] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 239.964889][T18791] warn_alloc+0x214/0x310 [ 239.964912][T18791] ? stack_depot_save_flags+0x40/0x860 [ 239.964937][T18791] ? __pfx_warn_alloc+0x10/0x10 [ 239.964962][T18791] ? kasan_save_track+0x4f/0x80 [ 239.964984][T18791] ? xskq_create+0x56/0x170 [ 239.965006][T18791] ? xsk_init_queue+0xb0/0x110 [ 239.965027][T18791] ? xsk_setsockopt+0x4dc/0x8d0 [ 239.965045][T18791] ? do_sock_setsockopt+0x17c/0x1b0 [ 239.965062][T18791] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 239.965079][T18791] ? do_syscall_64+0xfa/0x3b0 [ 239.965103][T18791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.965124][T18791] __vmalloc_node_range_noprof+0x125/0x12f0 [ 239.965162][T18791] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 239.965187][T18791] ? xsk_setsockopt+0x462/0x8d0 [ 239.965210][T18791] ? __kasan_kmalloc+0x93/0xb0 [ 239.965233][T18791] vmalloc_user_noprof+0xad/0xf0 [ 239.965258][T18791] ? xskq_create+0xbf/0x170 [ 239.965280][T18791] xskq_create+0xbf/0x170 [ 239.965304][T18791] xsk_init_queue+0xb0/0x110 [ 239.965327][T18791] xsk_setsockopt+0x4dc/0x8d0 [ 239.965349][T18791] ? __pfx_xsk_setsockopt+0x10/0x10 [ 239.965370][T18791] ? __pfx_aa_sk_perm+0x10/0x10 [ 239.965393][T18791] ? lock_release+0x4b/0x3e0 [ 239.965417][T18791] ? aa_sock_opt_perm+0xff/0x1b0 [ 239.965435][T18791] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 239.965462][T18791] ? __pfx_xsk_setsockopt+0x10/0x10 [ 239.965484][T18791] do_sock_setsockopt+0x17c/0x1b0 [ 239.965504][T18791] __x64_sys_setsockopt+0x13f/0x1b0 [ 239.965524][T18791] do_syscall_64+0xfa/0x3b0 [ 239.965550][T18791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.965568][T18791] ? clear_bhb_loop+0x60/0xb0 [ 239.965588][T18791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.965606][T18791] RIP: 0033:0x7f68cc18ebe9 [ 239.965623][T18791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.965640][T18791] RSP: 002b:00007f68ca3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 239.965660][T18791] RAX: ffffffffffffffda RBX: 00007f68cc3b6090 RCX: 00007f68cc18ebe9 [ 239.965674][T18791] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b [ 239.965686][T18791] RBP: 00007f68cc211e19 R08: 0000000000000004 R09: 0000000000000000 [ 239.965698][T18791] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.965711][T18791] R13: 00007f68cc3b6128 R14: 00007f68cc3b6090 R15: 00007ffc06b2bce8 [ 239.965732][T18791] [ 239.965740][T18791] Mem-Info: [ 239.977247][T18785] 8021q: adding VLAN 0 to HW filter on device bond8 [ 240.034673][T18791] active_anon:7939 inactive_anon:0 isolated_anon:0 [ 240.034673][T18791] active_file:3268 inactive_file:39901 isolated_file:0 [ 240.034673][T18791] unevictable:768 dirty:133 writeback:0 [ 240.034673][T18791] slab_reclaimable:13156 slab_unreclaimable:121251 [ 240.034673][T18791] mapped:29109 shmem:1376 pagetables:1137 [ 240.034673][T18791] sec_pagetables:0 bounce:0 [ 240.034673][T18791] kernel_misc_reclaimable:0 [ 240.034673][T18791] free:1292531 free_pcp:14819 free_cma:0 [ 240.043858][T18785] bond7: (slave bond8): making interface the new active one [ 240.048685][T18791] Node 0 active_anon:31756kB inactive_anon:0kB active_file:13072kB inactive_file:159400kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116436kB dirty:532kB writeback:0kB shmem:3968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14616kB pagetables:4428kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 240.050176][T18785] bond7: (slave bond8): Enslaving as an active interface with an up link [ 240.054051][T18791] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 240.246161][T18808] __nla_validate_parse: 30 callbacks suppressed [ 240.246179][T18808] netlink: 209336 bytes leftover after parsing attributes in process `syz.0.3609'. [ 240.252492][T18791] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 240.252549][T18791] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 240.252589][T18791] Node 0 DMA32 free:1270664kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31664kB inactive_anon:0kB active_file:13072kB inactive_file:157832kB unevictable:1536kB writepending:532kB present:3129332kB managed:2557456kB mlocked:0kB bounce:0kB free_pcp:38188kB local_pcp:17980kB free_cma:0kB [ 240.252646][T18791] lowmem_reserve[]: 0 0 1 1 1 [ 240.252682][T18791] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 240.252736][T18791] lowmem_reserve[]: 0 0 0 0 0 [ 240.252774][T18791] Node 1 Normal free:3884088kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19936kB local_pcp:10368kB free_cma:0kB [ 240.252829][T18791] lowmem_reserve[]: 0 0 0 0 0 [ 240.252862][T18791] Node 0 DMA: [ 240.537778][T18797] 8021q: adding VLAN 0 to HW filter on device bond7 [ 240.543255][T18791] 0*4kB [ 240.609321][ T124] block nbd4: Possible stuck request ffff8880255c0000: control (read@0,4096B). Runtime 60 seconds [ 240.625672][T18791] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 240.636230][T18817] openvswitch: netlink: IPv4 tun info is not correct [ 240.638572][T18791] Node 0 DMA32: 1652*4kB (UM) 395*8kB (UM) 232*16kB (UME) 93*32kB (UM) 54*64kB (UME) 34*128kB (UME) 126*256kB (UME) 199*512kB (UM) 86*1024kB (UME) 2*2048kB (ME) 249*4096kB (UM) = 1270472kB [ 240.667071][T18791] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 240.680077][T18791] Node 1 Normal: 196*4kB (UME) 59*8kB (UME) 41*16kB (UME) 110*32kB (UME) 32*64kB (UME) 8*128kB (UME) 5*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (UE) 944*4096kB (M) = 3884088kB [ 240.703934][T18791] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 240.714383][T18791] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 240.724314][T18791] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 240.735079][T18791] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 240.766362][T18822] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3616'. [ 240.773154][T18791] 44542 total pagecache pages [ 240.781312][T18791] 0 pages in swap cache [ 240.785499][T18791] Free swap = 124996kB [ 240.790170][T18822] ip6gretap0: entered promiscuous mode [ 240.790362][T18822] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3616'. [ 240.822900][T18825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3617'. [ 240.856489][T18791] Total swap = 124996kB [ 240.863581][T18791] 2097051 pages RAM [ 240.867549][T18791] 0 pages HighMem/MovableOnly [ 240.873663][T18791] 425661 pages reserved [ 240.878202][T18791] 0 pages cma reserved [ 240.885419][T18825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3617'. [ 241.075426][T18853] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 241.331732][T18879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3635'. [ 241.464314][T18890] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3638'. [ 241.507163][T18890] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3638'. [ 241.624412][T18910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3642'. [ 241.635638][T18910] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3642'. [ 241.666295][T18913] openvswitch: netlink: Message has 5 unknown bytes. [ 241.833286][T18932] validate_nla: 4 callbacks suppressed [ 241.833303][T18932] netlink: 'syz.1.3648': attribute type 6 has an invalid length. [ 241.921902][T18946] IPv6: sit1: Disabled Multicast RS [ 241.927981][T18946] sit1: entered allmulticast mode [ 241.953562][T18948] netlink: 'syz.0.3649': attribute type 10 has an invalid length. [ 241.967008][T18947] IPv6: sit1: Disabled Multicast RS [ 241.982027][T18947] sit1: entered allmulticast mode [ 242.014158][T18948] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.024758][T18948] bridge_slave_1: left allmulticast mode [ 242.031912][T18948] bridge_slave_1: left promiscuous mode [ 242.037829][T18948] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.054807][T18948] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 242.071740][T18936] wg1 speed is unknown, defaulting to 1000 [ 242.112177][T18956] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 242.569211][T18996] netlink: 'syz.1.3665': attribute type 4 has an invalid length. [ 242.606008][T18996] netlink: 'syz.1.3665': attribute type 4 has an invalid length. [ 242.632253][T18999] netlink: 'syz.1.3665': attribute type 4 has an invalid length. [ 242.729511][T19004] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 242.803567][T19013] netlink: 'syz.1.3672': attribute type 3 has an invalid length. [ 242.913708][T19025] pimreg: entered allmulticast mode [ 243.214131][T19063] netlink: 'syz.2.3687': attribute type 32 has an invalid length. [ 243.329303][ T5183] Bluetooth: hci4: command tx timeout [ 243.722533][T19093] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 243.735203][T19093] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 243.779250][T19092] 1ªî{X¹¦: entered promiscuous mode [ 243.800880][T19092] 1ªî{X¹¦: left allmulticast mode [ 243.906819][ T5967] IPVS: starting estimator thread 0... [ 243.913284][T19109] IPVS: set_ctl: invalid protocol: 60 172.30.0.2:19999 [ 243.943052][T19113] netlink: 'syz.4.3700': attribute type 1 has an invalid length. [ 244.001624][T19110] IPVS: using max 54 ests per chain, 129600 per kthread [ 244.204215][T19138] syzkaller0: entered promiscuous mode [ 244.211250][T19138] syzkaller0: entered allmulticast mode [ 244.229837][T19136] tipc: Enabled bearer , priority 0 [ 244.242302][T19142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.311906][T19136] tipc: Resetting bearer [ 244.343345][T19136] tipc: Disabling bearer [ 244.487679][T19164] ieee802154 phy0 wpan0: encryption failed: -22 [ 244.548095][T19163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.713162][T19199] netlink: 'syz.4.3723': attribute type 1 has an invalid length. [ 244.824574][T19208] veth1_macvtap: left promiscuous mode [ 244.847189][T19193] infiniband syz0: set down [ 244.864896][T19193] infiniband syz0: added ipvlan0 [ 244.917306][T19193] RDS/IB: syz0: added [ 244.927605][T19193] smc: adding ib device syz0 with port count 1 [ 244.944560][T19193] smc: ib device syz0 port 1 has pnetid [ 245.275166][T19238] __nla_validate_parse: 30 callbacks suppressed [ 245.275184][T19238] netlink: 356 bytes leftover after parsing attributes in process `syz.2.3738'. [ 245.336286][T19240] tipc: Started in network mode [ 245.367686][T19240] tipc: Node identity ce305c460866, cluster identity 4711 [ 245.393617][T19240] tipc: Enabled bearer , priority 0 [ 245.413299][T19245] syzkaller0: entered promiscuous mode [ 245.432094][T19247] netlink: 'syz.1.3739': attribute type 12 has an invalid length. [ 245.445602][T19245] syzkaller0: entered allmulticast mode [ 245.476269][T19240] tipc: Resetting bearer [ 245.523389][T19239] tipc: Resetting bearer [ 245.582955][T19239] tipc: Disabling bearer [ 245.893733][T19277] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3751'. [ 246.096260][T19287] pim6reg1: entered promiscuous mode [ 246.105754][T19287] pim6reg1: entered allmulticast mode [ 246.193586][T19295] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3757'. [ 246.222107][T19295] tipc: Enabling of bearer rejected, failed to enable media [ 246.236474][T19295] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3757'. [ 246.258265][T19299] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3759'. [ 246.353297][T19304] tipc: Started in network mode [ 246.369379][T19304] tipc: Node identity ac14140f, cluster identity 4711 [ 246.376342][T19304] tipc: New replicast peer: 255.255.255.255 [ 246.390305][T19304] tipc: Enabled bearer , priority 10 [ 246.478256][T19309] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3763'. [ 246.644989][T19318] veth0_to_bridge: entered promiscuous mode [ 246.660735][T19316] veth0_to_bridge: left promiscuous mode [ 246.723594][T19327] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3771'. [ 246.848333][T19338] validate_nla: 3 callbacks suppressed [ 246.848351][T19338] netlink: 'syz.4.3773': attribute type 3 has an invalid length. [ 246.947783][T19345] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3774'. [ 247.265352][T19374] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 247.291090][T19373] syzkaller1: entered promiscuous mode [ 247.297950][T19373] syzkaller1: entered allmulticast mode [ 247.384846][T19385] netlink: 'syz.0.3786': attribute type 1 has an invalid length. [ 247.396598][T19385] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3786'. [ 247.452337][T19387] erspan0: entered promiscuous mode [ 247.461886][T19387] erspan0: entered allmulticast mode [ 247.486355][T19391] netlink: 'syz.0.3788': attribute type 1 has an invalid length. [ 247.497655][T19391] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3788'. [ 247.509681][T12247] tipc: Node number set to 2886997007 [ 247.544917][T19398] netlink: 'syz.3.3791': attribute type 1 has an invalid length. [ 247.573589][T19400] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 247.894124][T19178] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.904888][T19178] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.915733][T19178] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.926382][T19178] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.951133][T19429] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.961275][T19429] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.013048][T19429] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.024421][T19429] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.059387][T19422] nbd1: detected capacity change from 0 to 127 [ 248.073778][T19429] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.085585][T19429] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.108121][T19432] netlink: 'syz.1.3804': attribute type 20 has an invalid length. [ 248.121595][T19432] netlink: 'syz.1.3804': attribute type 20 has an invalid length. [ 248.121899][T19179] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.140288][T19179] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.152972][T19429] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.163921][T19429] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.181556][T19179] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.193488][T19179] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.239865][T19179] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.248243][T19179] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.288213][ T5870] block nbd1: Receive control failed (result -32) [ 248.305489][ T5183] block nbd1: Receive control failed (result -32) [ 248.330377][T19179] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.367234][T19179] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.376265][T19179] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.387520][T19179] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.397664][T19179] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.407306][T19179] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.444431][T19447] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 34 [ 248.482459][T19456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.514865][T19461] netlink: 'syz.0.3815': attribute type 24 has an invalid length. [ 248.804185][T19492] netlink: 'syz.0.3822': attribute type 33 has an invalid length. [ 248.821802][T19494] netlink: 'syz.4.3823': attribute type 8 has an invalid length. [ 249.792543][T19540] netlink: 'syz.1.3839': attribute type 7 has an invalid length. [ 249.963150][T19551] netlink: 'syz.2.3843': attribute type 11 has an invalid length. [ 250.240287][T19574] 8021q: VLANs not supported on wg1 [ 250.295526][T19576] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 250.331328][T19578] : entered promiscuous mode [ 250.440930][T19593] tipc: Enabled bearer , priority 10 [ 250.450830][T19595] tipc: Enabling of bearer rejected, already enabled [ 250.464127][T19591] openvswitch: netlink: EtherType 0 is less than min 600 [ 250.556828][T19606] __nla_validate_parse: 16 callbacks suppressed [ 250.556847][T19606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3863'. [ 250.576685][T19606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3863'. [ 250.606736][T19610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3864'. [ 250.609637][T19607] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3862'. [ 250.636289][T19610] chnl_net:caif_netlink_parms(): no params data found [ 250.723776][T19618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3868'. [ 250.762284][T19177] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.773404][T19618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3868'. [ 250.805661][T19628] ip6gre1: entered allmulticast mode [ 250.823110][T19177] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.854256][T19625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3868'. [ 250.867396][T19177] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.895926][T19177] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.941951][T19643] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3870'. [ 251.015310][T19649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.026004][T19650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3876'. [ 251.059371][T19650] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3876'. [ 251.265480][T19664] nftables ruleset with unbound set [ 251.551306][ T30] audit: type=1800 audit(1756351691.743:4): pid=19695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3892" name="memory.events" dev="tmpfs" ino=900 res=0 errno=0 [ 251.568019][T19697] wg1: entered promiscuous mode [ 251.577812][T19697] wg1: entered allmulticast mode [ 251.585880][T10671] tipc: Node number set to 3327548486 [ 252.442566][T19723] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 252.455159][T19723] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 252.522153][T19721] block nbd6: server does not support multiple connections per device. [ 252.531626][T19721] block nbd6: shutting down sockets [ 252.535550][T19729] sctp: [Deprecated]: syz.4.3905 (pid 19729) Use of int in max_burst socket option. [ 252.535550][T19729] Use struct sctp_assoc_value instead [ 252.624973][T19736] validate_nla: 6 callbacks suppressed [ 252.624990][T19736] netlink: 'syz.1.3907': attribute type 7 has an invalid length. [ 252.709681][T19741] tipc: Resetting bearer [ 252.790364][T19753] netlink: 'syz.4.3913': attribute type 1 has an invalid length. [ 253.107328][T19780] tipc: Enabling of bearer rejected, failed to enable media [ 253.242834][T19793] erspan0: entered promiscuous mode [ 253.263491][T19793] gretap0: entered promiscuous mode [ 253.270427][T19797] ieee802154 phy0 wpan0: encryption failed: -90 [ 253.320807][T19804] IPVS: Error connecting to the multicast addr [ 253.502378][T19741] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 253.513450][T19741] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 253.538246][T19741] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 253.545200][T19741] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 253.572841][T19741] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 253.580010][T19741] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 253.607728][T19741] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 253.614084][T19741] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 253.637804][T19741] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 253.645083][T19741] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 253.804183][T19829] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 253.818543][T19829] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 253.976378][T19848] netlink: 'syz.4.3945': attribute type 1 has an invalid length. [ 254.398599][T19900] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 254.451358][T19900] sctp: [Deprecated]: syz.2.3959 (pid 19900) Use of int in maxseg socket option. [ 254.451358][T19900] Use struct sctp_assoc_value instead [ 254.586904][T19920] sctp: [Deprecated]: syz.2.3967 (pid 19920) Use of int in maxseg socket option. [ 254.586904][T19920] Use struct sctp_assoc_value instead [ 254.987539][T19178] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 255.002925][T19954] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 255.323091][ T56] block nbd2: Possible stuck request ffff8880254e0000: control (read@0,1024B). Runtime 90 seconds [ 255.335551][ T56] block nbd2: Possible stuck request ffff8880254e01c0: control (read@1024,1024B). Runtime 90 seconds [ 255.348582][ T56] block nbd2: Possible stuck request ffff8880254e0380: control (read@2048,1024B). Runtime 90 seconds [ 255.361270][ T56] block nbd2: Possible stuck request ffff8880254e0540: control (read@3072,1024B). Runtime 90 seconds [ 255.538257][T20002] netlink: 'syz.3.3988': attribute type 2 has an invalid length. [ 255.652824][T20017] ip6_vti0: entered promiscuous mode [ 255.684934][T20015] ip6_vti0: left promiscuous mode [ 255.816585][T20035] __nla_validate_parse: 37 callbacks suppressed [ 255.816604][T20035] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3998'. [ 255.837561][T20035] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 255.956347][T20049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.963203][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.023972][T20051] wg1 speed is unknown, defaulting to 1000 [ 256.288188][T20060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4007'. [ 256.386590][T20066] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 256.397485][T20066] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4009'. [ 256.498493][T20073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4012'. [ 256.510351][T20074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4012'. [ 256.586553][T20079] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4015'. [ 256.809969][T20100] wg1 speed is unknown, defaulting to 1000 [ 256.816230][T20105] netlink: 788 bytes leftover after parsing attributes in process `syz.1.4023'. [ 256.824251][T20107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4024'. [ 256.957410][T20107] xfrm1: entered promiscuous mode [ 256.967036][T20107] xfrm1: entered allmulticast mode [ 257.194559][T20126] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4031'. [ 257.386314][T20133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4034'. [ 257.435366][T20135] netem: change failed [ 258.015482][T12245] IPVS: starting estimator thread 0... [ 258.035858][T20182] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 258.109259][T20180] IPVS: using max 38 ests per chain, 91200 per kthread [ 258.615292][T20250] 1ªî{X¹¦: left promiscuous mode [ 258.721817][T20260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.872926][T20250] wg1: left promiscuous mode [ 258.878799][T20250] wg1: left allmulticast mode [ 259.013266][T20250] gtp0: left promiscuous mode [ 259.018099][T20250] gtp0: left allmulticast mode [ 259.053612][T10674] wg1 speed is unknown, defaulting to 1000 [ 259.053627][T19179] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.078800][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 259.102702][T10674] syz2: Port: 1 Link DOWN [ 259.129398][T19179] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.139534][T19179] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.148416][T19179] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.190037][T10674] wg1 speed is unknown, defaulting to 1000 [ 259.221662][T19179] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.232365][T19179] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.279175][T19179] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.301291][T19179] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.317706][T20268] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 259.324223][T20282] xfrm1: entered promiscuous mode [ 259.340917][T20282] xfrm1: entered allmulticast mode [ 259.497188][T20301] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 259.555837][T20311] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 [ 259.565630][T20311] netlink: 'syz.3.4090': attribute type 30 has an invalid length. [ 259.783198][T20336] netlink: 'syz.2.4099': attribute type 8 has an invalid length. [ 259.796552][T20336] netlink: 'syz.2.4099': attribute type 11 has an invalid length. [ 259.994279][T20370] tipc: Enabling not permitted [ 260.002621][T20370] tipc: Enabling of bearer rejected, failed to enable media [ 260.113886][T20381] netlink: 'syz.2.4109': attribute type 4 has an invalid length. [ 260.155283][T20381] `: renamed from bond0 (while UP) [ 260.265426][T20386] netlink: 'syz.1.4111': attribute type 1 has an invalid length. [ 260.446995][T20402] netlink: 'syz.3.4117': attribute type 11 has an invalid length. [ 260.565071][T20417] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 260.702445][T20437] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 260.927076][T20456] __nla_validate_parse: 26 callbacks suppressed [ 260.927097][T20456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4131'. [ 260.993344][T20462] netlink: 'syz.2.4133': attribute type 10 has an invalid length. [ 261.005177][T20467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4135'. [ 261.017387][T20467] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4135'. [ 261.045532][T20462] team0: Device hsr_slave_0 failed to register rx_handler [ 261.046897][T20467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4135'. [ 261.095896][T20467] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4135'. [ 261.120009][T20473] netlink: 'syz.4.4136': attribute type 9 has an invalid length. [ 261.279755][T20491] syzkaller1: entered promiscuous mode [ 261.290027][T20491] syzkaller1: entered allmulticast mode [ 261.353676][T20496] netlink: 'syz.4.4145': attribute type 10 has an invalid length. [ 261.380772][T20496] team0: Port device dummy0 added [ 261.397260][T20496] netlink: 'syz.4.4145': attribute type 10 has an invalid length. [ 261.438317][T20496] team0: Port device dummy0 removed [ 261.452106][T20496] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 261.454831][T20509] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4145'. [ 261.516225][T20508] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 261.554076][T20514] netlink: 'syz.4.4149': attribute type 33 has an invalid length. [ 261.612632][T20518] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4151'. [ 261.726781][T20526] netlink: 'syz.4.4153': attribute type 12 has an invalid length. [ 261.743707][T20526] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4153'. [ 261.825527][T20536] block nbd4: NBD_DISCONNECT [ 261.830830][T20536] block nbd4: Send disconnect failed -32 [ 261.837954][T20536] block nbd4: shutting down sockets [ 261.848295][ C0] blk_print_req_error: 24 callbacks suppressed [ 261.848312][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.850251][T20527] bond0 (unregistering): Released all slaves [ 261.854553][ C0] buffer_io_error: 23 callbacks suppressed [ 261.854567][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 261.883382][T13161] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.896586][T20535] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.910490][T13161] Buffer I/O error on dev nbd4, logical block 0, async page read [ 261.928075][T13161] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.937551][T13161] Buffer I/O error on dev nbd4, logical block 0, async page read [ 261.946176][T13161] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.955931][T13161] Buffer I/O error on dev nbd4, logical block 0, async page read [ 261.965358][T13161] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.975499][T13161] Buffer I/O error on dev nbd4, logical block 0, async page read [ 261.984125][T13161] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.994964][T13161] Buffer I/O error on dev nbd4, logical block 0, async page read [ 262.004098][T13161] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.016678][T13161] Buffer I/O error on dev nbd4, logical block 0, async page read [ 262.026358][T13161] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.043652][T13161] Buffer I/O error on dev nbd4, logical block 0, async page read [ 262.055018][T13161] ldm_validate_partition_table(): Disk read failed. [ 262.064731][T13161] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.074968][T13161] Buffer I/O error on dev nbd4, logical block 0, async page read [ 262.087937][T13161] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.110506][T13161] Buffer I/O error on dev nbd4, logical block 0, async page read [ 262.118530][T13161] Dev nbd4: unable to read RDB block 0 [ 262.157207][T20555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4159'. [ 262.177266][T13161] nbd4: unable to read partition table [ 262.203157][T13161] ldm_validate_partition_table(): Disk read failed. [ 262.212469][T13161] Dev nbd4: unable to read RDB block 0 [ 262.218755][T13161] nbd4: unable to read partition table [ 262.230115][T20559] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4162'. [ 262.265927][T13161] udevd[13161]: failed to send result of seq 17092 to main daemon: Connection refused [ 262.805730][T20612] team0: Device vti0 is of different type [ 262.847422][T20616] bond0: (slave dummy0): Releasing backup interface [ 262.862041][T20616] batman_adv: batadv0: Adding interface: dummy0 [ 262.868385][T20616] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.896540][T20616] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 262.923291][T20616] veth1_to_bond: mtu less than device minimum [ 262.982933][T20624] : entered promiscuous mode [ 263.449201][T20663] pim6reg1: entered promiscuous mode [ 263.454540][T20663] pim6reg1: entered allmulticast mode [ 263.661932][T20684] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004 [ 263.867006][T20712] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 263.876837][T20712] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 264.012314][T20718] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.083192][T20718] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.124785][T20727] net veth1_virt_wifi .: renamed from virt_wifi0 [ 264.218173][T20736] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 264.227986][T20736] IPVS: rr: TCP [::]:0 - no destination available [ 264.592146][T20771] syzkaller0: entered promiscuous mode [ 264.597799][T20771] syzkaller0: entered allmulticast mode [ 264.936268][T20800] Bluetooth: MGMT ver 1.23 [ 265.142470][T20813] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 265.205123][T20813] gtp0: entered promiscuous mode [ 265.239899][T20813] gtp0: entered allmulticast mode [ 265.316759][T20824] tipc: Cannot configure node identity twice [ 265.558736][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.575961][T20841] validate_nla: 6 callbacks suppressed [ 265.575978][T20841] netlink: 'syz.0.4239': attribute type 8 has an invalid length. [ 265.760304][T20849] netlink: 'syz.3.4243': attribute type 1 has an invalid length. [ 265.788446][T20849] smc: adding net device bond0 with user defined pnetid SYZ1 [ 265.808195][T20849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.836216][T20855] bond0: (slave ip6gretap1): making interface the new active one [ 265.846347][T20855] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 266.028345][T20880] netlink: 'syz.4.4251': attribute type 2 has an invalid length. [ 266.047199][T20880] __nla_validate_parse: 21 callbacks suppressed [ 266.047216][T20880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4251'. [ 266.133189][T20887] netlink: 'syz.3.4254': attribute type 1 has an invalid length. [ 266.155662][T20889] bridge_slave_1: default FDB implementation only supports local addresses [ 266.188121][T20887] 8021q: adding VLAN 0 to HW filter on device bond1 [ 266.200222][T20887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4254'. [ 266.350511][T20907] netlink: 146780 bytes leftover after parsing attributes in process `syz.1.4261'. [ 266.434907][T20902] macvtap1: entered promiscuous mode [ 266.457622][T20902] vlan0: entered promiscuous mode [ 266.472227][T20902] macvtap1: entered allmulticast mode [ 266.496919][T20902] vlan0: entered allmulticast mode [ 266.515605][T20902] veth0_vlan: entered allmulticast mode [ 266.622188][T20948] netlink: 1036 bytes leftover after parsing attributes in process `syz.0.4270'. [ 266.632329][T20948] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 266.727902][T20958] netlink: 'syz.1.4273': attribute type 1 has an invalid length. [ 266.738044][T20958] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4273'. [ 266.794180][T20963] netlink: 'syz.0.4275': attribute type 1 has an invalid length. [ 266.846786][T20969] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4277'. [ 266.960721][T20975] pim6reg1: entered promiscuous mode [ 266.968265][T20975] pim6reg1: entered allmulticast mode [ 267.005155][T20979] bond2: entered promiscuous mode [ 267.007055][T20984] netlink: 'syz.1.4283': attribute type 1 has an invalid length. [ 267.013246][T20979] bond2: entered allmulticast mode [ 267.026101][T20979] 8021q: adding VLAN 0 to HW filter on device bond2 [ 267.077672][T20987] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 267.091276][T20987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4285'. [ 267.135629][T20994] netlink: 'syz.3.4288': attribute type 21 has an invalid length. [ 267.274337][T21008] netlink: 'syz.4.4293': attribute type 23 has an invalid length. [ 267.296139][T21011] ip6gre1: entered allmulticast mode [ 267.478769][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 267.542755][T21033] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4298'. [ 267.553150][T21039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4298'. [ 267.565347][T21033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4298'. [ 267.615330][T21044] pim6reg527: entered allmulticast mode [ 267.634483][T21046] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 268.053637][T21091] IPVS: length: 134 != 8 [ 268.237343][T21112] netlink: 'syz.1.4326': attribute type 30 has an invalid length. [ 268.526883][T21145] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.545792][T21145] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.566202][T17855] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 268.575637][T17855] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 268.589329][ T43] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 268.607114][T21145] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.628520][T21145] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.674645][T21145] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.698067][T21145] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.755332][T21163] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 268.779427][T21145] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.803701][T21145] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.877278][T19181] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.890353][T19181] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.913673][T19181] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.923268][T19181] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.931972][T19181] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.940982][T19181] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.957948][T19181] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.977408][T19181] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.991844][T21144] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.002682][T21144] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.018245][T19181] ================================================================== [ 269.026338][T19181] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350 [ 269.033880][T19181] Read of size 8 at addr ffff88803912d2b0 by task kworker/u8:30/19181 [ 269.042017][T19181] [ 269.044335][T19181] CPU: 0 UID: 0 PID: 19181 Comm: kworker/u8:30 Not tainted syzkaller #0 PREEMPT(full) [ 269.044352][T19181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 269.044363][T19181] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 269.044389][T19181] Call Trace: [ 269.044397][T19181] [ 269.044405][T19181] dump_stack_lvl+0x189/0x250 [ 269.044424][T19181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.044439][T19181] ? lock_release+0x4b/0x3e0 [ 269.044461][T19181] ? __virt_addr_valid+0x4a5/0x5c0 [ 269.044480][T19181] print_report+0xca/0x240 [ 269.044493][T19181] ? __mutex_lock+0x147/0x1350 [ 269.044511][T19181] kasan_report+0x118/0x150 [ 269.044529][T19181] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 269.044547][T19181] ? __mutex_lock+0x147/0x1350 [ 269.044568][T19181] __mutex_lock+0x147/0x1350 [ 269.044588][T19181] ? __mutex_lock+0x5bb/0x1350 [ 269.044608][T19181] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 269.044628][T19181] ? __pfx___mutex_lock+0x10/0x10 [ 269.044646][T19181] ? do_raw_spin_unlock+0x122/0x240 [ 269.044664][T19181] ? rcu_is_watching+0x15/0xb0 [ 269.044681][T19181] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 269.044702][T19181] ? process_scheduled_works+0x9ef/0x17b0 [ 269.044716][T19181] ? process_scheduled_works+0x9ef/0x17b0 [ 269.044729][T19181] process_scheduled_works+0xae1/0x17b0 [ 269.044751][T19181] ? __pfx_process_scheduled_works+0x10/0x10 [ 269.044769][T19181] worker_thread+0x8a0/0xda0 [ 269.044791][T19181] kthread+0x70e/0x8a0 [ 269.044808][T19181] ? __pfx_worker_thread+0x10/0x10 [ 269.044821][T19181] ? __pfx_kthread+0x10/0x10 [ 269.044837][T19181] ? rcu_is_watching+0x15/0xb0 [ 269.044854][T19181] ? __pfx_kthread+0x10/0x10 [ 269.044870][T19181] ret_from_fork+0x3f9/0x770 [ 269.044885][T19181] ? __pfx_ret_from_fork+0x10/0x10 [ 269.044900][T19181] ? __switch_to_asm+0x39/0x70 [ 269.044916][T19181] ? __switch_to_asm+0x33/0x70 [ 269.044932][T19181] ? __pfx_kthread+0x10/0x10 [ 269.044948][T19181] ret_from_fork_asm+0x1a/0x30 [ 269.044970][T19181] [ 269.044975][T19181] [ 269.242463][T19181] Allocated by task 21145: [ 269.246862][T19181] kasan_save_track+0x3e/0x80 [ 269.251559][T19181] __kasan_kmalloc+0x93/0xb0 [ 269.256136][T19181] __kmalloc_noprof+0x27a/0x4f0 [ 269.260972][T19181] udp_tunnel_nic_netdevice_event+0x854/0x19f0 [ 269.267113][T19181] notifier_call_chain+0x1b3/0x3e0 [ 269.272229][T19181] register_netdevice+0x1608/0x1ae0 [ 269.277428][T19181] nsim_create+0xae8/0xf10 [ 269.281829][T19181] __nsim_dev_port_add+0x6b6/0xb10 [ 269.286933][T19181] nsim_dev_port_add_all+0x37/0xf0 [ 269.292029][T19181] nsim_dev_reload_up+0x451/0x780 [ 269.297041][T19181] devlink_reload+0x4e9/0x8d0 [ 269.301704][T19181] devlink_nl_reload_doit+0x9c2/0xd50 [ 269.307065][T19181] genl_family_rcv_msg_doit+0x215/0x300 [ 269.312594][T19181] genl_rcv_msg+0x60e/0x790 [ 269.317079][T19181] netlink_rcv_skb+0x208/0x470 [ 269.321832][T19181] genl_rcv+0x28/0x40 [ 269.325804][T19181] netlink_unicast+0x82c/0x9e0 [ 269.330559][T19181] netlink_sendmsg+0x805/0xb30 [ 269.335312][T19181] __sock_sendmsg+0x21c/0x270 [ 269.339982][T19181] ____sys_sendmsg+0x505/0x830 [ 269.344741][T19181] ___sys_sendmsg+0x21f/0x2a0 [ 269.349444][T19181] __x64_sys_sendmsg+0x19b/0x260 [ 269.354372][T19181] do_syscall_64+0xfa/0x3b0 [ 269.358869][T19181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.364748][T19181] [ 269.367052][T19181] Freed by task 21144: [ 269.371099][T19181] kasan_save_track+0x3e/0x80 [ 269.375855][T19181] kasan_save_free_info+0x46/0x50 [ 269.380862][T19181] __kasan_slab_free+0x5b/0x80 [ 269.385611][T19181] kfree+0x18e/0x440 [ 269.389490][T19181] udp_tunnel_nic_netdevice_event+0x1332/0x19f0 [ 269.395718][T19181] notifier_call_chain+0x1b3/0x3e0 [ 269.400818][T19181] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 269.407229][T19181] unregister_netdevice_queue+0x33c/0x380 [ 269.412947][T19181] nsim_destroy+0x1dd/0x670 [ 269.417437][T19181] __nsim_dev_port_del+0x14d/0x1b0 [ 269.422544][T19181] nsim_dev_reload_destroy+0x288/0x490 [ 269.427999][T19181] nsim_dev_reload_down+0x8a/0xc0 [ 269.433010][T19181] devlink_reload+0x1b3/0x8d0 [ 269.437670][T19181] devlink_nl_reload_doit+0x9c2/0xd50 [ 269.443027][T19181] genl_family_rcv_msg_doit+0x215/0x300 [ 269.448644][T19181] genl_rcv_msg+0x60e/0x790 [ 269.453131][T19181] netlink_rcv_skb+0x208/0x470 [ 269.457881][T19181] genl_rcv+0x28/0x40 [ 269.461850][T19181] netlink_unicast+0x82c/0x9e0 [ 269.466611][T19181] netlink_sendmsg+0x805/0xb30 [ 269.471365][T19181] __sock_sendmsg+0x21c/0x270 [ 269.476027][T19181] ____sys_sendmsg+0x505/0x830 [ 269.480770][T19181] ___sys_sendmsg+0x21f/0x2a0 [ 269.485427][T19181] __x64_sys_sendmsg+0x19b/0x260 [ 269.490346][T19181] do_syscall_64+0xfa/0x3b0 [ 269.494835][T19181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.500712][T19181] [ 269.503022][T19181] Last potentially related work creation: [ 269.508717][T19181] kasan_save_stack+0x3e/0x60 [ 269.513378][T19181] kasan_record_aux_stack+0xbd/0xd0 [ 269.518585][T19181] insert_work+0x3d/0x330 [ 269.522906][T19181] __queue_work+0xbaf/0xfb0 [ 269.527397][T19181] queue_work_on+0x181/0x270 [ 269.531967][T19181] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 269.537585][T19181] udp_tunnel_push_rx_port+0x180/0x200 [ 269.543027][T19181] geneve_offload_rx_ports+0xd7/0x160 [ 269.548385][T19181] geneve_netdevice_event+0x6a/0x80 [ 269.553569][T19181] notifier_call_chain+0x1b3/0x3e0 [ 269.558664][T19181] call_netdevice_notifiers+0x88/0xc0 [ 269.564025][T19181] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 269.570270][T19181] notifier_call_chain+0x1b3/0x3e0 [ 269.575371][T19181] register_netdevice+0x1608/0x1ae0 [ 269.580554][T19181] nsim_create+0xae8/0xf10 [ 269.584960][T19181] __nsim_dev_port_add+0x6b6/0xb10 [ 269.590054][T19181] nsim_dev_port_add_all+0x37/0xf0 [ 269.595147][T19181] nsim_dev_reload_up+0x451/0x780 [ 269.600155][T19181] devlink_reload+0x4e9/0x8d0 [ 269.604817][T19181] devlink_nl_reload_doit+0x9c2/0xd50 [ 269.610172][T19181] genl_family_rcv_msg_doit+0x215/0x300 [ 269.615702][T19181] genl_rcv_msg+0x60e/0x790 [ 269.620192][T19181] netlink_rcv_skb+0x208/0x470 [ 269.624944][T19181] genl_rcv+0x28/0x40 [ 269.628909][T19181] netlink_unicast+0x82c/0x9e0 [ 269.633657][T19181] netlink_sendmsg+0x805/0xb30 [ 269.638409][T19181] __sock_sendmsg+0x21c/0x270 [ 269.643067][T19181] ____sys_sendmsg+0x505/0x830 [ 269.647812][T19181] ___sys_sendmsg+0x21f/0x2a0 [ 269.652469][T19181] __x64_sys_sendmsg+0x19b/0x260 [ 269.657392][T19181] do_syscall_64+0xfa/0x3b0 [ 269.661884][T19181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.667757][T19181] [ 269.670063][T19181] Second to last potentially related work creation: [ 269.676634][T19181] kasan_save_stack+0x3e/0x60 [ 269.681298][T19181] kasan_record_aux_stack+0xbd/0xd0 [ 269.686479][T19181] insert_work+0x3d/0x330 [ 269.690801][T19181] __queue_work+0xcd2/0xfb0 [ 269.695284][T19181] queue_work_on+0x181/0x270 [ 269.699852][T19181] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 269.705470][T19181] udp_tunnel_push_rx_port+0x180/0x200 [ 269.710919][T19181] vxlan_offload_rx_ports+0x139/0x200 [ 269.716281][T19181] vxlan_netdevice_event+0x111/0x470 [ 269.721552][T19181] notifier_call_chain+0x1b3/0x3e0 [ 269.726646][T19181] call_netdevice_notifiers+0x88/0xc0 [ 269.732002][T19181] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 269.738230][T19181] notifier_call_chain+0x1b3/0x3e0 [ 269.743323][T19181] register_netdevice+0x1608/0x1ae0 [ 269.748507][T19181] nsim_create+0xae8/0xf10 [ 269.752906][T19181] __nsim_dev_port_add+0x6b6/0xb10 [ 269.758003][T19181] nsim_dev_port_add_all+0x37/0xf0 [ 269.763100][T19181] nsim_dev_reload_up+0x451/0x780 [ 269.768111][T19181] devlink_reload+0x4e9/0x8d0 [ 269.772772][T19181] devlink_nl_reload_doit+0x9c2/0xd50 [ 269.778132][T19181] genl_family_rcv_msg_doit+0x215/0x300 [ 269.783663][T19181] genl_rcv_msg+0x60e/0x790 [ 269.788148][T19181] netlink_rcv_skb+0x208/0x470 [ 269.792898][T19181] genl_rcv+0x28/0x40 [ 269.796865][T19181] netlink_unicast+0x82c/0x9e0 [ 269.801619][T19181] netlink_sendmsg+0x805/0xb30 [ 269.806373][T19181] __sock_sendmsg+0x21c/0x270 [ 269.811038][T19181] ____sys_sendmsg+0x505/0x830 [ 269.815785][T19181] ___sys_sendmsg+0x21f/0x2a0 [ 269.820465][T19181] __x64_sys_sendmsg+0x19b/0x260 [ 269.825394][T19181] do_syscall_64+0xfa/0x3b0 [ 269.829891][T19181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.835766][T19181] [ 269.838071][T19181] The buggy address belongs to the object at ffff88803912d200 [ 269.838071][T19181] which belongs to the cache kmalloc-256 of size 256 [ 269.852106][T19181] The buggy address is located 176 bytes inside of [ 269.852106][T19181] freed 256-byte region [ffff88803912d200, ffff88803912d300) [ 269.865887][T19181] [ 269.868196][T19181] The buggy address belongs to the physical page: [ 269.874597][T19181] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3912c [ 269.883350][T19181] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 269.891830][T19181] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 269.899702][T19181] page_type: f5(slab) [ 269.903669][T19181] raw: 00fff00000000040 ffff88801a441b40 ffffea00019bdc00 dead000000000003 [ 269.912237][T19181] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 269.920813][T19181] head: 00fff00000000040 ffff88801a441b40 ffffea00019bdc00 dead000000000003 [ 269.929472][T19181] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 269.938129][T19181] head: 00fff00000000001 ffffea0000e44b01 00000000ffffffff 00000000ffffffff [ 269.946782][T19181] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 269.955434][T19181] page dumped because: kasan: bad access detected [ 269.961840][T19181] page_owner tracks the page as allocated [ 269.967534][T19181] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 17107, tgid 17107 (syz-executor), ts 224933589033, free_ts 224917339656 [ 269.989225][T19181] post_alloc_hook+0x240/0x2a0 [ 269.993984][T19181] get_page_from_freelist+0x21e4/0x22c0 [ 269.999521][T19181] __alloc_frozen_pages_noprof+0x181/0x370 [ 270.005310][T19181] alloc_pages_mpol+0x232/0x4a0 [ 270.010143][T19181] allocate_slab+0x8a/0x370 [ 270.014714][T19181] ___slab_alloc+0xbeb/0x1410 [ 270.019380][T19181] __kmalloc_noprof+0x305/0x4f0 [ 270.024224][T19181] fib_create_info+0x1728/0x3210 [ 270.029149][T19181] fib_table_insert+0xc6/0x1b50 [ 270.033985][T19181] fib_magic+0x2c4/0x390 [ 270.038211][T19181] fib_add_ifaddr+0x3fb/0x5f0 [ 270.042867][T19181] fib_netdev_event+0x382/0x490 [ 270.047702][T19181] notifier_call_chain+0x1b3/0x3e0 [ 270.052797][T19181] __dev_notify_flags+0x18d/0x2e0 [ 270.057804][T19181] netif_change_flags+0xe8/0x1a0 [ 270.062726][T19181] do_setlink+0xc55/0x41c0 [ 270.067122][T19181] page last free pid 17505 tgid 17505 stack trace: [ 270.073605][T19181] __free_frozen_pages+0xbc4/0xd30 [ 270.078727][T19181] pagetable_dtor_free+0x2d2/0x3b0 [ 270.083829][T19181] __mmdrop+0xb5/0x580 [ 270.087879][T19181] exec_mmap+0x6ac/0x7d0 [ 270.092106][T19181] begin_new_exec+0x129c/0x2120 [ 270.096940][T19181] load_elf_binary+0x998/0x2740 [ 270.101788][T19181] bprm_execve+0x999/0x1450 [ 270.106275][T19181] do_execveat_common+0x510/0x6a0 [ 270.111284][T19181] __x64_sys_execve+0x94/0xb0 [ 270.115946][T19181] do_syscall_64+0xfa/0x3b0 [ 270.120453][T19181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.126339][T19181] [ 270.128646][T19181] Memory state around the buggy address: [ 270.134257][T19181] ffff88803912d180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 270.142302][T19181] ffff88803912d200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 270.150352][T19181] >ffff88803912d280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 270.158403][T19181] ^ [ 270.164014][T19181] ffff88803912d300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 270.172059][T19181] ffff88803912d380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 270.180099][T19181] ================================================================== [ 270.189951][T10674] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 270.197646][ T5899] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 270.200596][T19181] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 270.200613][T19181] CPU: 1 UID: 0 PID: 19181 Comm: kworker/u8:30 Not tainted syzkaller #0 PREEMPT(full) [ 270.200635][T19181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 270.200647][T19181] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 270.200679][T19181] Call Trace: [ 270.200692][T19181] [ 270.200701][T19181] dump_stack_lvl+0x99/0x250 [ 270.200723][T19181] ? __asan_memcpy+0x40/0x70 [ 270.200743][T19181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.200763][T19181] ? __pfx__printk+0x10/0x10 [ 270.200791][T19181] vpanic+0x281/0x750 [ 270.200808][T19181] ? preempt_schedule+0xae/0xc0 [ 270.200840][T19181] ? __pfx_vpanic+0x10/0x10 [ 270.200858][T19181] ? preempt_schedule_common+0x83/0xd0 [ 270.200880][T19181] ? preempt_schedule+0xae/0xc0 [ 270.200900][T19181] ? __pfx_preempt_schedule+0x10/0x10 [ 270.200925][T19181] panic+0xb9/0xc0 [ 270.200942][T19181] ? __pfx_panic+0x10/0x10 [ 270.200962][T19181] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 270.200988][T19181] ? __mutex_lock+0x147/0x1350 [ 270.201010][T19181] check_panic_on_warn+0x89/0xb0 [ 270.201043][T19181] ? __mutex_lock+0x147/0x1350 [ 270.201065][T19181] end_report+0x78/0x160 [ 270.201088][T19181] kasan_report+0x129/0x150 [ 270.201108][T19181] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 270.201131][T19181] ? __mutex_lock+0x147/0x1350 [ 270.201158][T19181] __mutex_lock+0x147/0x1350 [ 270.201182][T19181] ? __mutex_lock+0x5bb/0x1350 [ 270.201206][T19181] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 270.201231][T19181] ? __pfx___mutex_lock+0x10/0x10 [ 270.201254][T19181] ? do_raw_spin_unlock+0x122/0x240 [ 270.201277][T19181] ? rcu_is_watching+0x15/0xb0 [ 270.201298][T19181] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 270.201325][T19181] ? process_scheduled_works+0x9ef/0x17b0 [ 270.201342][T19181] ? process_scheduled_works+0x9ef/0x17b0 [ 270.201359][T19181] process_scheduled_works+0xae1/0x17b0 [ 270.201388][T19181] ? __pfx_process_scheduled_works+0x10/0x10 [ 270.201412][T19181] worker_thread+0x8a0/0xda0 [ 270.201439][T19181] kthread+0x70e/0x8a0 [ 270.201460][T19181] ? __pfx_worker_thread+0x10/0x10 [ 270.201477][T19181] ? __pfx_kthread+0x10/0x10 [ 270.201497][T19181] ? rcu_is_watching+0x15/0xb0 [ 270.201513][T19181] ? __pfx_kthread+0x10/0x10 [ 270.201536][T19181] ret_from_fork+0x3f9/0x770 [ 270.201555][T19181] ? __pfx_ret_from_fork+0x10/0x10 [ 270.201575][T19181] ? __switch_to_asm+0x39/0x70 [ 270.201595][T19181] ? __switch_to_asm+0x33/0x70 [ 270.201616][T19181] ? __pfx_kthread+0x10/0x10 [ 270.201636][T19181] ret_from_fork_asm+0x1a/0x30 [ 270.201664][T19181] [ 270.205355][T19181] Kernel Offset: disabled