last executing test programs: 2m43.901421995s ago: executing program 0 (id=2842): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x1a, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_GSO_MAX_SIZE={0x8}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000400007910a800000000005d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 2m43.768349973s ago: executing program 0 (id=2844): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x30}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="ff000000", @ANYRES32=r1, @ANYRES8], 0x34}}, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r2, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xfffff800, @media='eth\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004080) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r6) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r7, 0x1, 0x70bd2b}, 0x14}}, 0x24004044) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x2c, r7, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x890}, 0x44) (async, rerun: 64) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x20, r9, 0xe6e964277ae08d57, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040000}, 0x90) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r9, 0x200, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x24}}, 0x40) 2m43.544406999s ago: executing program 0 (id=2848): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="140004006e736376663000000000000101000000080005"], 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f00000006c0)) listen(0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd4200000b00140605000000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002001190780003"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x200}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xcc}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff83}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48041}, 0x40840) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRESHEX, @ANYBLOB="0100000000000000000014000000240007800c00040000000000000000000c00"], 0x38}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r6, 0xffffffffffffffff, 0x500}, 0x57) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xe, &(0x7f0000000000)=ANY=[@ANYRESOCT=r6, @ANYRES8=0x0, @ANYRES16=0x0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls}, 0x94) getpeername(r2, &(0x7f0000000440)=@ax25={{0x3, @bcast}, [@default, @null, @remote, @netrom, @null, @rose, @remote, @netrom]}, &(0x7f00000004c0)=0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="06ff03076844268cb89e14f008004ee0ffff00febabec41177fb86dd1402e000030c62079f4b4d2f87e5feca6aab055013f2325f1a3901050b038da1880b25181aa59d943be30043d50ea5a6b868", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="140004006e736376663000000000000101000000080005"], 0x50}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f00000006c0)) (async) listen(0xffffffffffffffff, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd4200000b00140605000000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002001190780003"], 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x200}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xcc}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff83}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48041}, 0x40840) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRESHEX, @ANYBLOB="0100000000000000000014000000240007800c00040000000000000000000c00"], 0x38}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r6, 0xffffffffffffffff, 0x500}, 0x57) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xe, &(0x7f0000000000)=ANY=[@ANYRESOCT=r6, @ANYRES8=0x0, @ANYRES16=0x0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls}, 0x94) (async) getpeername(r2, &(0x7f0000000440)=@ax25={{0x3, @bcast}, [@default, @null, @remote, @netrom, @null, @rose, @remote, @netrom]}, &(0x7f00000004c0)=0x80) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="06ff03076844268cb89e14f008004ee0ffff00febabec41177fb86dd1402e000030c62079f4b4d2f87e5feca6aab055013f2325f1a3901050b038da1880b25181aa59d943be30043d50ea5a6b868", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) 2m43.300537589s ago: executing program 0 (id=2850): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=ANY=[@ANYBLOB="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"], 0x944}, 0x1, 0x0, 0x0, 0x50}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="1400000038000107000000000000000008"], 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, r3, 0x8003}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r3}]]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000881}, 0x4004044) 2m43.147613881s ago: executing program 0 (id=2853): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x20000004) (async) close(0x3) (async) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b00000000000100000000000000000000000800010000000000"], 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x47, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0xdf4}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1a0000d82330006e00"/23, @ANYRES32, @ANYRES8=r3, @ANYRES64=r3, @ANYRES32, @ANYBLOB="0000000000000000050000001500"/28], 0x48) (async, rerun: 32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000180)=0x3ff, 0xfffffffffffffd2c) (async, rerun: 32) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r4, @ANYRES8=r6, @ANYRESDEC=r2, @ANYRES16=r7], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async, rerun: 64) r8 = socket(0x2, 0x80805, 0x0) (rerun: 64) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, 0x0, &(0x7f0000000040)) (async, rerun: 32) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) (async, rerun: 32) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000080)="ad6152540b8607ffd7d6738685dbf9820fae9d6dcd3292ea5487beef915d564c90c200", 0x23) (rerun: 64) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmsg$RDMA_NLDEV_CMD_GET(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x20008044) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r11, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r11, 0x0, 0x2e, &(0x7f0000000480)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0xffff, @rand_addr=0x64010101}}}, 0x108) recvmsg(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/94, 0x5e}], 0x1}, 0x1000) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r10) 2m36.042005978s ago: executing program 0 (id=2859): socketpair(0x28, 0x2, 0x5bd, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000340), &(0x7f0000000400)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xe0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}, @TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044080) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000007000009000000eb5502064000e465257a9b857100009105000100070000000900020073064000"/55], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r10, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r10, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r11 = socket$inet_tcp(0x2, 0x1, 0x0) r12 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@bloom_filter={0x1e, 0x1, 0x0, 0x2f, 0x4077c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYRES32=r12, @ANYBLOB="00000000000000002408000000b000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) bind$inet(r11, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10) sendto$inet6(r4, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f88a806892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xa}, {0xfff1, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0xccea7a0d5ced4d05}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x1000000, {0x0, 0x0, 0x0, r13, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m35.377193711s ago: executing program 32 (id=2859): socketpair(0x28, 0x2, 0x5bd, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000340), &(0x7f0000000400)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xe0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}, @TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044080) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000007000009000000eb5502064000e465257a9b857100009105000100070000000900020073064000"/55], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r10, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r10, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r11 = socket$inet_tcp(0x2, 0x1, 0x0) r12 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@bloom_filter={0x1e, 0x1, 0x0, 0x2f, 0x4077c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYRES32=r12, @ANYBLOB="00000000000000002408000000b000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) bind$inet(r11, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10) sendto$inet6(r4, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xa}, {0xfff1, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0xccea7a0d5ced4d05}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x1000000, {0x0, 0x0, 0x0, r13, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6.948431717s ago: executing program 3 (id=3960): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd28, 0x40000, {0x2, 0x1f, 0xd, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_BROADCAST={0x8, 0x4, @remote}, @IFA_LOCAL={0x8, 0x2, @remote}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_RT_PRIORITY={0x8, 0x9, 0xc}]}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)={0x20, 0x3e, 0x107, 0xfffffffe, 0xfffffffc, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x4, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) r5 = socket(0x10, 0x80002, 0x0) r6 = socket$packet(0x11, 0xa, 0x300) recvmmsg(r6, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x53b, 0x70bd2d, 0x0, {0x9}, [{0x8c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}, @m_skbmod={0x30, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0xa0}}, 0x0) r7 = accept4$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000440)=0x1c, 0x80000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r9, 0x11, 0xa, &(0x7f0000000040)=0x4, 0x4) sendmsg(r9, &(0x7f0000002c40)={&(0x7f0000000140)=@in={0x2, 0x4e24, @empty}, 0x80, 0x0}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000340000000000009078ac1e00016401010001441c19017fe7000100000000ffffffff00000000ac1e000100"/66], 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x0) write$nci(r8, &(0x7f00000003c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @a_listen={0x28, 0x3, 0x5, 0x80, 0xf8, 0xd, 0x2, "", 0x1, 0x3, 0x3, 0x6, 0x69, "034ecb8d6a34320a89d59a9e91217396cc7885a4f721b1a926303219a0f0fe99ebdddf93764109cd035986108782ab1e2295efa742273eb6180ba6c827beed6df00d0735194f731906a7ca6137c74bf97edea45195464752aeb86804445a0d8420b062fa5e08cdf1a5"}}, 0x78) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000240)={'tunl0\x00', r2, 0x1, 0x7800, 0x2e82, 0x8, {{0x1f, 0x4, 0x2, 0x3, 0x7c, 0x68, 0x0, 0x80, 0x2f, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x44, 0x3, '\a'}, @timestamp_addr={0x44, 0x24, 0x27, 0x1, 0x3, [{@multicast1, 0x38fd}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback}, {@multicast2, 0x8}]}, @generic={0x86, 0x9, "d90d0c3a32bacc"}, @end, @generic={0x44, 0x11, "ef3d83766ec598ab0e60d42f914019"}, @end, @timestamp_prespec={0x44, 0x24, 0xd6, 0x3, 0x8, [{@local, 0x37}, {@broadcast, 0x401}, {@broadcast, 0x100}, {@private=0xa010101, 0x80}]}]}}}}}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) 6.621832869s ago: executing program 3 (id=3967): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x38}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0xff, 0xbaf, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x707, 0x48, 0x10000}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="b7", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x18, 0x1, 0x3ff, 0x2, 0x20022, 0xffffffffffffffff, 0x7, '\x00', r0, r1, 0x1, 0x5, 0x4}, 0x50) 6.532193815s ago: executing program 3 (id=3969): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000006180)='ns/pid_for_children\x00') r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f00000004c0)=@in6={0x21, 0x0, 0xa, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES8=r2, @ANYRES32=r0, @ANYRESDEC=r0, @ANYBLOB="6b1d55f468c1a13ca923388f2258b26fb7ec223ad59a0d1ac9486aeb6eb1ef4c96eacd02cc84c8978dfb17c981417a0bb38212f4722d21f02fca5dcb4585967a924137687f469b0f4a9a4ede6727850be571c2005321fd8588d1f34929ca37cc931b67e0544b75cc344bfa049c15222c2ee3a57f45b2b4b9a9f3a8ffe739e0a92291b252ad97bdbfa7485cd440", @ANYBLOB='\b!y\b\x00\x00\x00'], 0x4c}}, 0x10) 6.429211893s ago: executing program 2 (id=3971): r0 = socket$inet6(0xa, 0x80000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000001d40)={0xe0, 0x13, 0x1, 0x0, 0x0, "", [@nested={0xcd, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="3335daa3f516884808d1f74cc705506875c4e919132781cb91c73fbad59538fb3eae1f6fb0139940dad167122f28f87b6777351aae84905a919858312f1881ff5c5e814f3aa23445ca7b70d2969b9fa7be4186cfde9e64ec271460e0c1f31a5e35f499ec84eeff602de3e0bb0f65ff585346cb6981a06e6a59b6fcd88a5e662677aa1c930a0d0945390cf60f3a373b2d72e782c79733eeac20c0d1ea931940db18e8d4008e525ee3f2423c0e27a8124b700e766a668b007b085841bdf65c2f87f8"]}]}, 0xe0}], 0x1}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x14, r3, 0x1, 0x70bd2e}, 0x14}, 0x1, 0x0, 0x0, 0x513182fbcc44c02}, 0x20000000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xffffffff}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r5, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r5, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 6.37992342s ago: executing program 3 (id=3974): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffd, 0x6, 0x400}, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000380)={0x0, 0x9, [@random="30daadd40925", @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @remote, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}]}) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "e4177f", 0x28, 0x89, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], "bd4fb9e9cbae6d1c21edd9ff38ebd97386806c27d875482109e2185d6f15c9ee51b342066e552bce"}}}}}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'caif0\x00', {0x2, 0x4e20, @rand_addr=0x64010100}}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) poll(&(0x7f0000000040)=[{r3, 0x16842e9bd142d0d5}], 0x1, 0x94) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x160, 0x11, 0x2, 0x101, 0x70bd2b, 0x25dfdbfd, {0x5, 0x0, 0xa}, [@nested={0x10, 0x11c, 0x0, 0x1, [@nested={0x4, 0x5c}, @nested={0x4, 0x4e}, @nested={0x4, 0x104}]}, @typed={0x4, 0xa9}, @generic="d40bdfacb8a6", @nested={0xb7, 0x131, 0x0, 0x1, [@nested={0x4, 0x129}, @generic="fa5a5b966854f3fd97d9a3d2a57c4db8502954a47a95f4ede96bb6cc7c040221f2aff97fac8ea9b4a18a7cb2740204fa784ee6d7f24b23528b50f6fc499ac41ef2d3711edbbab7c6cf60af46f91d3c2edc2bc3fee938e28ce244dc554be88cc4f901e4b9558fa094641a3f6665cb57ba38dd38442634f4b56161f35e226c6496dde494e4aa0f0d2ebeb9a06f2304ffee3a2175028f14b040643c3dfd6adf9673c2d6d4771b280284d907c426851d55"]}, @nested={0x3c, 0xb, 0x0, 0x1, [@generic="53ec85d77d06ef829e2994a0d178a59901d702dcec25a5c0b9ab52e99ae511fdc1c15465d1e4324c9c6215f3b2c8e282fc83be47c8794b9c"]}, @typed={0x4, 0x8b}, @generic="0d972ebbef6f196489806ba626c443ac7b6c2521213de568ec1901ec9f7d1ed5435535223154c56a29ce6b78b93dc24a78", @typed={0x8, 0x10f, 0x0, 0x0, @pid=r1}]}, 0x160}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 6.134002112s ago: executing program 5 (id=3976): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) socket$kcm(0x29, 0x0, 0x0) write(r0, &(0x7f0000000200)="bc555b4c4900c8feff18b229bc5a3bd1d06e6b3cc254dafa956e220f755cad53ac6b1df379b16feb0ba0cbfb042733dbec3f00299f4399f1b8051c7daedfd940c2f331871a9499eae4cfc2cf3941e6", 0x4f) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_setlink={0x5c, 0x13, 0x220, 0x70bd29, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x10}, [@IFLA_AF_SPEC={0x3c, 0x1a, 0x0, 0x1, [@AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8, 0x14, 0x0, 0x0, 0xc4ba}, {0x8, 0xe, 0x0, 0x0, 0x9}, {0x8, 0xb, 0x0, 0x0, 0xf13d}, {0x8, 0xf, 0x0, 0x0, 0xd}, {0x8, 0x9, 0x0, 0x0, 0x7}]}}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004}, 0x20008000) r3 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x3}, 0x48) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x4a}}, &(0x7f0000000480)='GPL\x00'}, 0x90) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250701f2800c0002000aac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="200100001900010400000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000200102000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000001000000000009c58ebe000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00020000005400080050000800003f48000469279fdfb4d61f875a85a4281346abb932025eb6acbd59dedeaef97f5bc7dfc96de5315ade683ad0653ae56641ab2e4ef656cec35705181727e04a49ade0c320770e55f35f821b0c00150000000000ff"], 0x120}}, 0x0) listen(r5, 0x6d5) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) close(0x4) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000280)={0x59, "ce2eed3d14a72991916f541524831057eeae7e894674b72f5ccc39aa193b269fe67a11b84dbbb59ee99fa86d832d40e79df218a1fe06978d56b00649f031ac5c965b86c56285d51bf5c9769308b9131d882b1f7018782cce6fefd85da4f6954c14a67cd8ebbe68b7e9f015a86078aaa4ebc4ad4c3810d4a584ab9d76cfb45d41"}) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 5.997810274s ago: executing program 3 (id=3978): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001280)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) unshare(0x6a040000) listen(r1, 0x7) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r2, 0x100) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x1) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0xfffffff4, 0x8, 0xe6f, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="418001", @ANYRES64=r7], 0x4) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r11, 0x100) r12 = socket$inet(0xa, 0x801, 0x84) listen(r12, 0x8) r13 = socket$netlink(0x10, 0x3, 0x4) writev(r13, &(0x7f0000000200)=[{&(0x7f0000000440)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x9f}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r13) r14 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r14, &(0x7f00000007c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 5.968581662s ago: executing program 2 (id=3979): socket$packet(0x11, 0x2, 0x300) r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) (async) sendmmsg(r0, &(0x7f0000000240)=[{{&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x3, 0x3, 0x3, {0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00', 0x4}}}, 0x80, &(0x7f0000000200)=[{&(0x7f00000001c0)="aa9f64fc42c8d3", 0x7}], 0x1, &(0x7f0000000580)=[{0x30, 0x10e, 0xff, "6fbd54fc8d47757a27fed69645ca0bf36c47031a294c19ef644f5ff1ca2d477e"}, {0xb8, 0x1, 0x3, "2fbcbfa774b58191d9fdb592c85f7b7c7c8030c49a35d89cfde0bcb6aa8de6a1e30535c37e6c12e15dfaa8aa48f6a900b758e3df2a9866907750e22ba54f7d22af135e093caf291c45e58a179fdc1cb537166ff4531d4345426c8a672121bb04a9b34de05f6873d5ae0b75a907fb00c83ae3ed13b9e2a86787cc55b8ce80bc0d837b0fd4b971e2d2b5a9fff72fff4f12a47d5863302124dcac98748b9bf78abbeb972178b5"}, {0x80, 0x114, 0x7ffe, "ac8bda161ed39352d98ae64821f8d509b87f370d8ff971e85f0afd560530714320963abd9d0ef7f4c5c78fa850af0331f928b56726b766ff9a8ab0df8b77f8343f5f179318bb18a76d640154ecc971abba47a38d276975685ff2092fbbbae8cc15ebe4f697459c826576914c"}, {0xc0, 0x108, 0x6, "8ccbb0380cd71181689651a585ff53813773623f6213376d20e5d77ab06aa17bdce931a9a0cd16503f322792385a220a9aa70f53eec278145b97f209259d87fa3a1b1604252dda3e1b639500d3e9ac189a8656187031da4d0835167bcaecffae496f06f8250f45d0114a62be74e7a08c1feaa9a90214880498b9536660afa53ee20b13d1784a70205083a3da91c86588f23f69bcf3510d1c0b1d0c7ffe058d355658268df4dc45de2513ed8e"}, {0x70, 0x10a, 0x4, "eda8095eda6c3e456d71e2a0dcc9f6f0cf0a254cdb0e83af32a692eb30042f754b8d4e4a98e2b367f20148f9c2f0d387cb94648e3d9025b805cae890393a11f331c3658830122eaccaea75ff8965fd58282413ba2d084d4c5725018959f8"}, {0x1010, 0x116, 0x8, "58517787cc12af04c12e2fda0dd708bc581c5cbb7ffbf2cf07eedbb3e4975da11c4e3ef591dbc8b6a35a7624f71ad8cdaeb3137c212198597e3ffb8e76942e006166dbda056118f5a662528f269952329d748c687f25a86bfb2410bcd10574c048df303d3cae2848ba7ef3eb804e957af29a0674ca03d18439f93c3a37feb412c3ee51d556ef0a2038e0aef5bc22adde5c74995261a122c247af091235d6c7e7ebb5ad004c87b73e9c60694a1d7a146864ee7a8af5bd6e54c35be73d8519658eedaabd45f9fbd672f8d13a85532283a839f480a09d1d0d749eb4b176b2489b36911624a207861f6bcfcbbac2de3bc7180d4e072c550ce2e2707404be259b1309d839fef744975ef2afc9348442f2b69e02451be93387595392e998a4436dc911ec14d7458895e7d6c69f3378364a0eeeeef2b342332672f49f0c0702efa852e4a4c0347b1272c61d58d1c03301d8d4901499d3fcc0dcdbc96048dd2f785842f2ffb3c5cc9aa7b7e1c61d2fab64e0596383c1f38cd42eb74de641782e069652bba8cdd822d75f03a46de612d6c08e1724449e3c590a6d6bd40c378ef764c31bd2eda145aa9cc45f97a9e83b29fdde80c9fb73ba45b9a0ee17ed429e4c55314c8db2d40eca0e9898ff1d28e4da7deed559dffbc6c962067ad478860791de7ab077847fd3a6b38bab4b9cde34dd3da20451957fbf2e00e2f35eb03d3d9d62bb04bd08dd582d79311a6691a31b97a955a0437f23c74d41dc791159a1cb7d7d04e38a25cdda807770177f0b97b481357da8da051dd73dceb9a716839189a978bfaf0b461616c7fd602fc040f732088c49a1006ba3d08c7aee8e7796c46c45859e872de18c20a00e70e19df88f23eb0681149b0f5c6f45c78c76becfa2d01343c18275b2c2b684679de55ba85c666f48de63016ebb4afa4370b982e36975886bee8e788b1f7942ba236311365fc6b591b7f5b9477a09c5cf45305bbbbaa50d2f719fc8a92cb1f6f4e1e8a895e12d1f9aebac3e28b949d9cedf1dd1f859631cd93101994730d11cb86d26b2b5267bc4b48c580cec1ed13547d64df3fba6f169b4048af007437f0bb5b8208fbe1a875a18762368ab83684eebe786dec178e1a1b00fe38eed3c69c048184f72e393271ea001ac1c7fa56e789d85e5b533bc0d67cad0b339f129bfdec3ed2476e13d5368e53fd7bc5a4e436cd3e0429f3544b558a3a052793a699a1423d8e03d41cb49af373c3c8a73fd75532768c3738791346758cf9301afe6a2f7daaf633d5e031b065d51b070676604eaabda918467af5f56189bc308c1a2375d6d0a8e1253a49d7761407fa3115e1b391e96edc35a148e3f0dd4a9f56d0d47a46c8726f678eb6609ee88d4238a9db88625ac2fcfea0d1033b6eda6540c00db2139d2848ab80a3023aaf0564637838adb8a234233ea441ee087cf5f46ae32c86ef9a66ef7db37cfee4834ce8663c18838aba3cf0ed25d66dd8c6403d63dba4e76e783e6a306a6525e908568c389b405ccc7c3edc7f9ea2406995079319c534b220348d18194679a4b09cf2149b8b057c0c0b64bd5b31fdbb523e9fde09ab27cbc9eee46d34250db5ead43e3d19d01b6dcf09dea39df0c49c7b31ac762574d7dedc33fe7ce0a3b1269e400aa981e862370b182c5e6cee7ad93c50c5cf7877e2d024ada9ad17c9ab7eb9fb99c2eab912fb24bfb8225d6c0ea2215e86e602f32ff2aaa0033e5537d0095c0226fb852dd520f31e346f69949fea9cb71fe86e6412220230a07d72b507d59121aee141057fb1f92f25467f42d939c123969e165b1c544ffed357992b0f9af977d88a7c1b8f798b32a012ab18044ff5fe7fd78b214b87d1a944b65efff7c01c838a32b8f87931d560454dffd6ac22c90911eaff35ad1bd39ed76a2ee74afd892f15d664f6d8893f8503ccc2785d04e4f94bf288c37bc0d78e0460aef3b7af32c4752a863020167a424cd084c23f18b6d91d1d10d07c2fff43f10cdcd062beac860374607c6c61a73a8f51a8b17a2dd3997399bc2de65e75ed5f8a724214f92d39dc9b745caeb01e28d79cf1631f25b8bf133d79845a5538a2b39c3f1206f215f5273e15ea48526926d73ba7687e4596453241f9ff5d42dbe9521a4fab44f5cfa7be166edea2bcdfab48f6f878aa696f5d622afb747b468292004a80c91a4f5dd91dc7b4081ebe4dbedb18f8e21f007844172f6b4085d6420da217a15188a3387340b87156b9add2949633573003332ee6f8cb02c6ba8ccefda8f0cea2e8d6d1ce6d756337d365be17b2060e60d5537a8f2370c9818dc823a66481803f77418821e1a23ea147067b048ee1867561806582f1d9063b278e8ea8ac8d4ae9f828111d5545b8513d389c2e20709b8f20dc43b4191d49a53e8c963442a8a822662acac5be1f24c1a9f269ea9aaacc600d7727cd07e636ac28789f02860bc1ff28fa09e6fc3d1d84e2296f1756518cf3be7223c26b4cb2fdb9249667a3b7df589f1c8590eec42a6c36586af837bef8ba7481569577268e41aec75a894860b093e76464f9104ce41e7f90064ab46db69f6b4b9de4bf20bad3fab95e50ed2040c8eb6b02af4f9c5d307178e4866d0bac313c155a485bbf1c8388cbee831218e86f159454cdc839d07288a3abf444183397ecaa0a685c83d08f9c2364816f5b311e0bdecb43199f8c58fb190ac3c90fa9948f7d4008097cd37a2928bfcfcaede18e357e13efc5bad17f7cfceed3f6ac53e71cb1213308548b556d00d763984f67e67caa0b598a8e04223e7e01a9f1152105375b2406c846d2a08271807e4b49ae740f303bacf79e1666b292baebd30ade0117dfd317040d1d89a4e16d60142331ffa25b083746dbc91f5f505f25c95c79598662a6093aaae210baac45ba82aa011db3a1cb3330eb833d01bcf0322649c3dfc99013783689c14e73a842c9e6e38fcd818130c512c50b033663e0258c9498cf0e71b044e1398baa835d523690acb6f1370bbd086eba8dcf405867278a0a9192c874e1c6f8c3be5bc91b35bc4ed4e15de73a832820008bef3de9d23f9a583d401e8412d27274e0022f4d16acdb6a612237c7e080b07ad39d280bbd55f3122df4b164550cbac8818bfc4bfa97c4b54f3cbdee7f8eb86b8c6ecb1b18897996b03d39e7392eda540f91ea5214762b8144a846cf7d15b8f6e829a70d860f6fd1bf100464c33d75fdc94de5414b67691df4c62938fd386ccc5e4ab2411f8dd0bfa252cbe61f21449071079bf59491de617edf84413864186f6c8c032496e0654f1a0e84db6ec3196787aba5a0cf763de848ecd9c3870fb5441eb367d2bf991b63e73e3fb553ac01c5c2c427dcdb93ed6bfd27db9412af091b95b202ee4599f599672b829d91243efd0c3c96aad1bf984aae78f72d7e0203dcd22dfbcf55fa1a05644c99851f3258dae486a88c3acf5fdb1118bb2123527ecfa5518b13c373b887abad3782004c4fcd0e5c59069ecf7eeb81438916322d468b3b0a2fa8304eb0085d2be6c846dc1288fb18822fac87d4aab4bc0c053a42ce56ad0aaae525dd85c515d41586c786928c71114256cd40fd515ff48e285488e8476d463ad4153203bcf511774a6bf58ce821cb5b89a4a7dd48962f0cc74f99af58b2bf75ad9f95a70f66b62ab857f0aaeb0fef0d93a2e22a03c3194eb08856613fce3a4e508c92811bf950ccacda9b1cc2ddc3a4c542d3cc4d63899937ec9a87cad51214770294e056c5739a819d5d49fb2c506e4898d84406a71acd4dc0c20fb22a1de986dcf7f95c1a68191aa5b49bd51b55c63e893ced99c2f5cdda4a220763ee2afa98a1b753f89a2f9a6b76048c0a7a28aeed4a64206f78d2a8e49a7f06dd8c4ea4b03e28da008e59c86add2ae0f4e6f41565547f239156446669f076ecae782902646f36d011fad3402ee7acb7ae68cc47b1820137e6e74d9c061787f16619992cffbcb0631b461158e3251f4169d36982356be9f752f9b2fff6d914610946ecd674131e4e8d85c00635f619fdaeea9d018a23cb16fba7ad75a7ce00e79304a6ec839312b3d913d78e01edfe543a7db38b89c7e5b075d22289c9d537576b1d9004b45323836ea02f7fa859313b08d27107b918d0f66f3649c4c2e5b5bca6773f74f5290e275e053bf63c10ea39876ddfbeb90d1ae03248f43ba02a6af8aa98833885d7a4a0c4d7f2bb11764be7ca2805f7c62c9f23511075b3ad0a7f1011cc7d06f4774ffd978afb604a08d96c130a12e9867fc67388798577367ce107c312d2c37b5f7e8487ddffc975ac4951d12520a53d33cf11e12ab5f46371567c5d0fe3d00b354a88e3841edfac525754ffb262afcbcf2babe46ecf278b006baa8c73f301b2742be2548ee08b46d2fbad5c21d91c72fbf7c8f34981d53078b4609aa995823767b9802ccfcd344d2e608d58b4570db9d4906413cda1ffe29ad645c170b89790cbdba2a597596cf5bf522f89366929a96c206c298dacf6cf420889edb8482ea74ecfd05d1551021cc39090bc9584c327e74311ea7753ec7e92721a07c1bc204b4b8e26e9931591064b372dd66e3d587b69a3f2045e613aa7bc0e16ccec4c8cfa5b1ce5f8c4aaf7410a547a4c622ac5afccbb46a4a25849311c188b8620f3a9c68e79229de092902cfb08b61318e9115cb83d08478d9bca1397a3bd3ffc2fc956f497b7bc00b5116a780d50f685bec12a7f65aa01b63d037a1b5934e14e5722ede4a92c2a3e273a04a5f16081808968663197bd3898e55a7bbdbf9a1575244d8bb9cc09c3c689a0bced3052d956e15704389f90777a6bc34bc52fc6a6f1d156ca6a37bbba25269524f1dc40192af2ee037ab32e9c688750461a206b66660cdd4cc7aabde1f993d2ecd93fa7747ab9d2426265bb880a9b08d02dbb23a5638208663a9b1c35c1f565da7ce6ac97cb4d35f820fc03f90c2cdf764da2a24b6662f1ab9efd029233de0993d8e706e94de3f595db517c1c32897ddd06b70af18be72feeade4195bd098845a1b459ff955efaca6d17eab6b821c32ca97f3a34ea6517ee9015901d04a48ad406f8f7dd545e3e5f5e617e8c821b4622be9981f1d638ca3487a6cfd350d26770c43877c3f0437eda2a45821a5afb56da6e5bdb483545404b7d4b62f8b38626af6b51f80cf462a61714acbad3479cafd2203699d62cd36fc8c4ec17324965a0825a31a2f7919a1ad15e6062c1a895ca195909c68b41c3ca5622f6d17bd8ce3de2331b78c9d4f828fd934909e0773ced45ba149ca5109fce139fbf2928b453ed82730bb13e7fc713bdd06aebee9d7c1d7f0a0b2a81d4052ee01c3d3a19b5279129ed87d2bd8a4801c5ddc0b16904f2a9d5b9c62c4bf316c9b4455bbae917d44a6317d977390765f1f0721bfde80afcd1726cc355d61a5862af824f8584e8113228df1b5ca018bfeccd88d036d504174e0694e765c5a21c2ee4102dc00bd7319056c8063d48148393c7ff3c111af8d56679314df1d9d22adfe7c1bd6e602384fe258afabd0dd7c65a0bcf4ecfdbd16f27602aa724f8cef0f715618f287bdf98b35652f645013118e617bf1f8d3396199c4238ed80b6dd04c8f81bf02206a31c3615787012de94d7492e6f9dc95b0a2d75f8be2dbdd01c18d0e49954e546491247bc18bf4132132510129c99c7a0cf7188aad46f75205b9533ba614b268e4006cf6c9dce0dbd3102e6668c4f2700a22a2bf2ccf43d381e581cce3f899ed00341217668b43e74f6903aefdaa1133a92c7614c3eca14cd7228ec559a24de5a0760597840d78cd18b"}, {0x18, 0x111, 0x5, '\n?'}, {0x28, 0x116, 0x7, "e5b18c940456f9a4e2758c9928ef84346e0f"}], 0x12e8}}], 0x1, 0x0) (async) socket$packet(0x11, 0xa, 0x300) (async) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async, rerun: 32) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) (async, rerun: 32) sendmmsg$inet6(r1, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='+', 0x1}], 0x1}}], 0x1, 0x400c404) (async) sendmmsg$inet6(r1, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040005) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 5.770462368s ago: executing program 1 (id=3980): r0 = socket$kcm(0xa, 0x2, 0x88) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48041}, 0x40840) (async) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0xfffffffc}, 0x80, 0x0}, 0x640ce0c0) (async, rerun: 64) r4 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x20004080) (async, rerun: 64) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (rerun: 64) 5.641914788s ago: executing program 5 (id=3981): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x3, &(0x7f0000000140)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x65}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x6}, 0x94) 5.641084878s ago: executing program 2 (id=3982): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0xfffe, @local, 'batadv_slave_1\x00'}}, 0x1e) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4, 0x4}]}, 0x68}}, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r7, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x7e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c200000300000000000008004500007000000000fb019078ac1e0001ac1414aa0400907800000000453a0006006700020401000fac1e0101ffffffff442cdbf17f00000100008001ffffffff00000007ffffffff000000097f000001ffffffff7f00000100000041fc1f7a6dd619c950090094040100440cd183ffffffff000001000000001cda"], 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @random="e62f67b6fb3d", 'geneve0\x00'}}, 0x1e) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r10, &(0x7f00000000c0)="de", 0x1, 0x8000, &(0x7f0000000140)={0xa, 0xfffe, 0x0, @private1}, 0x1c) shutdown(r10, 0x1) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r10, 0x84, 0xd, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}}, &(0x7f0000000380)=0xb0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_newvlan={0x17, 0x70, 0x1, 0x0, 0x0, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8}}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5.471319713s ago: executing program 4 (id=3983): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x66, 0x8}, @initr0, @exit, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r2) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x48010) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ip_vti0\x00', {0x2, 0x4e24, @multicast1}}) 5.4708515s ago: executing program 5 (id=3984): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001800010000000000000000000200000000030009000000000600150004000000200016801c0001000000000000000000000010000000000000000f0000000000"], 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x44066fa5}]}]}], {0x14}}, 0x80}}, 0x800) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffc6, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 5.38560392s ago: executing program 1 (id=3985): r0 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x1, 0x60, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRESDEC=r10], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r13], 0x4) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r14, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x14}, {}, {}, {0x6}]}) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_coalesce={0xe, 0x0, 0x80000000, 0x5, 0x2, 0xabc, 0x3ff, 0x3, 0x1, 0x1, 0x1, 0x0, 0xfffffff9, 0x80000001, 0x8, 0x56, 0xa9, 0x6, 0x1, 0x3, 0x6, 0x5, 0x800}}) 5.225661956s ago: executing program 5 (id=3986): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$unix(0x1, 0x5, 0x0) sendmmsg$unix(r1, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000014) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x38, 0x8, 0x1b, 0x0, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x405}, 0x20048084) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$tipc(0x1e, 0x2, 0x0) accept4$tipc(r4, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0x80800) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x108, r5, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xbe5}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x3}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0xf5}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x2}, {0x5, 0x14, 0x1}}]}, 0x108}, 0x1, 0x0, 0x0, 0x1000c004}, 0x90) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000000eaaf528dca7dd742d2f16d6e7d195bc"], 0x28}}, 0x0) 5.133591987s ago: executing program 5 (id=3987): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000000000007b113400000000008510000002000000850000000000000095003300000000009500a5660e0000009f3be7f40752ed289350a3b5257dfc7e5429619ce459a63169ccb691d1a8f1ab83013d"], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x9) r2 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000380)={0x0, 0x1, 0x40000, 0x8000000009ffffc}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x40, 0x7800, 0x400, 0x3, {{0xa, 0x4, 0x0, 0x6, 0x28, 0x66, 0x0, 0xf9, 0x2f, 0x0, @remote, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x14, 0x75, 0x1, 0x4, [{@broadcast, 0xff}, {@local, 0xf}]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0xa0, r3, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xa0}}, 0x48c0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000000)=0x2) 1.565675893s ago: executing program 2 (id=3988): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0x1, 0x8}, {0xd, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x2c}}, 0x4) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="03000800010000008000140000004600003414000000000190780a010100ac1414aa940458220400907800100000450000000000000000118000640101007f000001"], 0x42) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r12, 0x0, 0xf}, 0x18) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1.457561636s ago: executing program 5 (id=3989): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x300, 0x5, 0x15, 0xfe, 0x4, @local}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4000) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000187a1c81a10000000000000002001000fe0400010000002008001e1b02000000"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000380)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000380)=""/171, 0xab}, {&(0x7f00000001c0)=""/173, 0xad}, {&(0x7f0000000300)=""/100, 0x64}, {&(0x7f00000004c0)=""/87, 0x57}, {&(0x7f0000000540)=""/129, 0x81}, {&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f0000000280)=""/60, 0x3c}], 0x7, &(0x7f00000053c0)=""/196, 0xc4}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000380)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000380)=""/171, 0xab}, {&(0x7f00000001c0)=""/173, 0xad}, {&(0x7f0000000300)=""/100, 0x64}, {&(0x7f00000004c0)=""/87, 0x57}, {&(0x7f0000000540)=""/129, 0x81}, {&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f0000000280)=""/60, 0x3c}], 0x7, &(0x7f00000053c0)=""/196, 0xc4}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000440)=[{0x5}, {0x10, 0x10, 0x1, 0x1}, {0xd9ce, 0x8, 0x6, 0x10000}]}) (async) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000440)=[{0x5}, {0x10, 0x10, 0x1, 0x1}, {0xd9ce, 0x8, 0x6, 0x10000}]}) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) (async) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) sendmmsg(r0, &(0x7f0000001380), 0x0, 0x40) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) 1.454596913s ago: executing program 4 (id=3990): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61154c00000000006113300000000000bfa00000000000001503000008004e002d35010000000000950000bc000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4501000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a81426104000000000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546ccd3f1d5ab2af27546e7c0700000000000000b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4d08000000ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43000000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000b712c1e47be511fe32fbc90e2364a55e9bb609c64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd4722a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c835d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff5af657a67463d7dbf85ae9321fad16ee751cd7dde94ec97549c2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf377b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059a6cffb92e2a0cfd81434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5c4d188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a5cbb8be3f7741b18007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873d0ecdf904c2bdbef81f246d26f4b40df949e12bdac18532f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566fffffffffc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054e5deb27f7922fe6c14eba96c9af409da03290e4009f872d5aaca63dbe239efb1e02dd4fc07f8c5b070e2ddeb4b5afa6df2e7e162962e334d8553cc56008ddc8277fa9e8f6684513bfa827686b6fb71259743f55f46fa7e6379312e93213faf275f0441d46bc5690181244c44bea45854ed4ccd99f3fd328110ae22ef1504ec0566652d742ed8a7e202539c6531824f7399b486fbb906a91b77f2a6ba27bf97ebc7482cea32278a7acd9f2210e6ed2defcbd112f29a92401c5a37c58835f870b056186ef3971d3d9effa5661cabc2a059689dcfb030dd4ac0fe54db67510d3e9a5d36b900000000000000000000000000000000c9e484cf5f8c0955c11b285de46871d62f9d986e73658d228225b21f694dd2dc80e96ce476496973ee14e3d4fd03507c6f7c0c8ae809ddc9a36b4f30d15d08cc8e72d750f5e529cf4cec823b923d382f3f2c42dcb4b316eba77e7f767ae17d4d3427c9379eadbd040fbbe0c6dd8100f1558354bdd35626052c2e66cc34f4e266cc04218764824533cac2736e236b50ae4d800565910200af9cb11002791a91d834ffcc65a6226ecafe0372e3ace29c2441eca24371857aa9eb9b3910a2eb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 1.366305364s ago: executing program 1 (id=3991): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2}, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r3, r4, 0x4, r0}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$TUNGETVNETBE(r5, 0x800454df, &(0x7f00000000c0)) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$SIOCGSKNS(r5, 0x894c, &(0x7f0000000000)={'gre0\x00', 0xa00}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000085c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {}, {0xc, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_EMATCHES={0x4}]}}]}, 0x38}}, 0x0) 1.331604942s ago: executing program 4 (id=3992): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071120a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x8, 0xffffffffffffff7e, 0x2ca}) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001600)={0xf9a}, 0x8) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001680)={@map=r8, r7, 0x26}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r10 = accept4$alg(r9, 0x0, 0x0, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f00000013c0)) (async) writev(r9, &(0x7f00000001c0)=[{&(0x7f0000000200)='F', 0x1}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0x1, 0xffffffffffffffff}, 0x4) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mkdirat$cgroup(r1, &(0x7f00000015c0)='syz1\x00', 0x1ff) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r12, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0], 0x0, 0x2c, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x96, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x14, 0x3e, &(0x7f0000000280)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xaf6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x1, 0x2, 0x0, r2}, @ldst={0x1, 0x2, 0x6, 0x9, 0x9, 0xffffffffffffffc0}, @btf_id={0x18, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ldst={0x1, 0x3, 0x4, 0x9, 0x8, 0xfffffffffffffff0, 0xffffffffffffffff}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x38f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @lirc_mode2=0x10, r12, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, r13, r0, 0x8, 0x0, &(0x7f0000000840)=[{0x1, 0x5, 0x2, 0x5}, {0x3, 0x1, 0x8, 0x5}, {0x4, 0x5, 0x2, 0x3}, {0x3, 0x1, 0x3, 0x1}, {0x5, 0x1, 0xd, 0x9}, {0x0, 0x4, 0x8, 0x8}, {0x0, 0x4, 0x8, 0xb}, {0x2, 0x1, 0x5, 0x4}], 0x10, 0xf1e}, 0x94) 1.117771567s ago: executing program 4 (id=3993): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)=',', 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000400)={0x4, {{0x2, 0x0, @broadcast}}, {{0x2, 0x0, @local}}}, 0x11d) r2 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendto$llc(r2, &(0x7f0000000000)="af8a2071f45ce1b3aeea512ded80e63e0d19925d36bbb4850c6991740f191c8d1fbcb578eb1bc0827afc8f4ac27c5e80412db203c0bee0654821c29e3a660effde0f4b8e1790f2ddeaedc53c34147197963f09303d0b7b49277b5c91e80d1ce6b5bc57d2383cbb98b594981381b4265d0c2c24c2fdfac1380e05392092de8c1210dfc3fb007c89a77518660e", 0x8c, 0x40002, 0x0, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x6) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x58}, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x80000) setsockopt(r5, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) r6 = socket$netlink(0x10, 0x3, 0x4) close(0x3) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 821.177351ms ago: executing program 4 (id=3994): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000340), &(0x7f00000003c0)=0x14) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmsg$can_raw(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000880)=""/234, 0xea}, {&(0x7f0000000a80)=""/133, 0x85}], 0x2}, 0x200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x2a, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @tail_call, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x7, 0xb9, &(0x7f00000004c0)=""/185, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xb, 0xfffff800, 0x1ff}, 0x10, 0xd633, 0xffffffffffffffff, 0x4, &(0x7f00000001c0)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000200)=[{0x5, 0x4, 0x1, 0x9}, {0x0, 0x2, 0xe, 0x6}, {0x2, 0x5, 0x2, 0x2}, {0x5, 0x1, 0x8, 0x7}], 0x10, 0xc}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000a40)) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001900)={@fallback=r6, r6, 0x2f}, 0x20) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x9, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x0, 0x2, 0x4, 0x0, 0x6, 0x8, 0x8}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x72f}, @ldst={0x1, 0x2, 0x4, 0x5, 0x9, 0x40, 0x4}, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}]}, &(0x7f0000000580)='syzkaller\x00', 0x9, 0x63, &(0x7f0000000700)=""/99, 0x41000, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000780)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f00000007c0)=[{0x4, 0x4, 0xd, 0xe}, {0x5, 0x3, 0xc, 0x1}], 0x10, 0x1}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_XDP={0x0, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x0, 0x8, r5}, @IFLA_XDP_EXPECTED_FD={0x0, 0x8, r6}, @IFLA_XDP_FD={0x0, 0x1, r7}, @IFLA_XDP_FD={0x0, 0x1, r5}]}]}, 0xfffffffffffffeea}}, 0x0) 668.496962ms ago: executing program 1 (id=3995): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f93da3c92b", 0x14}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000007c0)={0x0, 0xfffffffffffffe77, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}}, 0x2c}}, 0x0) 457.689998ms ago: executing program 4 (id=3996): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], &(0x7f0000000100)=""/141, 0x19, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x34, r4, 0x1, 0x0, 0x20002, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8}]}, 0x34}}, 0x4000) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) 409.841886ms ago: executing program 2 (id=3997): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x32, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x2, 'wrr\x00', 0x12, 0x7, 0x2e}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61153c00000000006113340000000000bfa000000000000007000000ee0016055e03010000000000250500000300000069164a0000000000bf07000000000000260507000fff0720670600003f000000140600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2474ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7166c23d28c0a7101b8b09736ecd34aa9dc1b498"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x500, 0xfffffffe, 0x20}, 0x48) syz_emit_ethernet(0x12, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="8ba98766577d", @void, {@llc={0x4, {@llc={0x42, 0x42, "bf", "80"}}}}}, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r2}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2f00020b, 0x809, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000000)={'sit0\x00', 0x0}) 346.177367ms ago: executing program 1 (id=3998): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x144, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x4, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x110, 0x2, [@TCA_BPF_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}]}, @TCA_BPF_ACT={0xfc, 0x1, [@m_bpf={0xf8, 0x7, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x7, 0x1, 0x6}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x2, 0x8, 0x50, 0xff}, {0x400, 0xa, 0x9}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x80, 0x4, 0xf4, 0x9b}}]}, {0x71, 0x6, "f3ef5037a6528e33d770d04ac21b212ade2038dcc7272de194ce01dc3a7d2d828f018c45a15167f02711ac66b0a2d10700000000000000e81a6f5c8318a249a88d8b7a626d4541a9311eb98e9a813da52a585e4ad6b2162804dc337b0f9488bc066e55b0e385dbd85d3737291f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x22bf533d53fd5981}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x1d8}]}, 0x144}, 0x1, 0x0, 0x0, 0x884}, 0x20000080) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200000000000800040005000000080001"], 0x7c}}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc090}, 0x4880) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) recvfrom$x25(r5, 0x0, 0x0, 0x40, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000300)={r3}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000804}, 0x8000) 25.490184ms ago: executing program 1 (id=3999): r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req={0xec9, 0x404, 0x0, 0x2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c00028006000100000000004c0003800c15010000000000010000000c00010065000000000000000c00010003000000000000000c00010005000000000000000c00010000000000000000000c000100000000000000000004000480080005"], 0x9c}, 0x1, 0xba01}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000004, 0x4010, r4, 0x12727000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1}, [@FRA_DST={0x8, 0x1, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) sendto$packet(r6, &(0x7f0000000080)="33031600d1fd140000007ef52f555f2a3b9fe67025c1d97bfbf719143baa4b1f0f858c6632f470", 0x27, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, 0x0, 0x1, 0x62}, 0x14) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020029bd7000020010000200000005003e004d3be3d9fe11370e00000005"], 0x24}, 0x1, 0x0, 0x0, 0x20085}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000003c0)={0x24, r7, 0x200, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}}, 0x24}, 0x1, 0x6c00}, 0x20048000) 1.046137ms ago: executing program 2 (id=4000): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) r1 = socket(0xa, 0x1, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000100)={'veth1_vlan\x00', 0xe0}) 0s ago: executing program 3 (id=4001): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x9, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000040)={r4, 0x0, 0x5, 0x5, 0x5}, 0x14) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060aa4caf042e938595bf2f60b040000000040000000020000004c000480240001800b000100736f636b657400001400026608000240000000030800014000000002240001800a0001007175657565000000140002800800044000000010060003400012000009000100737973797a320000000014000000110001000000"], 0xa0}}, 0x0) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x204, 0x2, {0x77359400}, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x2, 0x1, 0x0, 0x0, "6ac6acd41ff800"}}, 0xffffffca}, 0x1, 0x0, 0x0, 0x4800}, 0x20000440) sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1, 0x0, 0xfffffff8, {0x77359400}, {0x0, 0xea60}, {0x4, 0x1, 0x1}, 0x1, @can={{0x2, 0x1, 0x0, 0x1}, 0x5, 0x3, 0x0, 0x0, "e1d1f55a4351ea72"}}, 0x48}, 0x1, 0x0, 0x0, 0x20018840}, 0x0) (async) close(r1) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x2, 0x0, 0x3}}, 0x2e) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400000000000000000000000600001b003a000000000000000000000000000c1c0000003ce715617fb6a1244a5a0a5d9fb35b3aeb0ea383aaca5a4df9b66160b2347663db9d1ba69c2b7488500dfd263a7561be727dbdfe81947b70942007a4521318ac687150bcb557ed5cb199a26dfa42f47fea187b6530ede6d649fe1a3bcd69056e2ff8aca981c6e37a8677b876916d4ec26637ae0f23e8696b636fa32ecbf86b91105c9e4791dc9704cd948446aadb31e99a2e07c2"], 0x24}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r8) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r9, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x38}}, 0x0) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000000000000000000000130000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="000000000000000087080000010100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950010000000000070a3494d78aab0c900afade486f7fe2344fda5a9b7b631ed7cdf787112380c9149f563fbb2ff9469eaf4f20c3df68e2bbbe4cdbe7b45c2078d0debac22cfecc966da18f705dd4b68d3aba89c79f4c846466f978babb230000000b6a25c130edc63fe2c3a934447ec44800b1cee770cda63b20d7cac72bcb0d8da61411db3c81eea6c7240a6198fca671c770ccc85e2dfcf"], &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x90) (async) r12 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r14, {0x8, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x0) (async) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES8, @ANYRES16=r10, @ANYBLOB="01002cbd701004000000040000000800090002"], 0x34}}, 0x20000034) kernel console output (not intermixed with test programs): 264.563607][T13992] mac80211_hwsim hwsim7 ÿ: renamed from wlan1 (while UP) [ 264.814299][T14005] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 264.830513][T14005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2335'. [ 265.075651][T14012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2337'. [ 265.387142][T14020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2339'. [ 265.396518][T14020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2339'. [ 265.784941][T14030] bond0: entered allmulticast mode [ 265.794750][T14031] gre0: entered promiscuous mode [ 266.503692][T14063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2351'. [ 266.741420][T14072] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 266.806110][T14079] netlink: 'syz.0.2355': attribute type 16 has an invalid length. [ 266.838123][T14079] netlink: 'syz.0.2355': attribute type 17 has an invalid length. [ 266.894980][T14079] gre0: left promiscuous mode [ 266.996943][T14079] !: left promiscuous mode [ 267.006012][T14079] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.805517][T14128] Bluetooth: MGMT ver 1.23 [ 267.987475][T14137] erspan0: entered promiscuous mode [ 268.013263][T14137] erspan0: entered allmulticast mode [ 268.267803][T14152] bridge4: entered promiscuous mode [ 268.284399][T14152] bridge4: entered allmulticast mode [ 268.496273][T14169] __nla_validate_parse: 3 callbacks suppressed [ 268.496292][T14169] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2384'. [ 268.534528][T14122] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 268.668359][T14178] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2386'. [ 268.708607][T14180] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2387'. [ 268.768696][T14184] macvlan0: left promiscuous mode [ 268.774054][T14184] macvlan0: left allmulticast mode [ 268.781024][T14184] netlink: 'syz.2.2386': attribute type 2 has an invalid length. [ 268.795230][T14185] netlink: 'syz.0.2390': attribute type 1 has an invalid length. [ 268.896812][T14194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2390'. [ 268.965046][T14197] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2390'. [ 268.995616][T14185] veth5: entered promiscuous mode [ 269.387266][T14214] pim6reg1: entered promiscuous mode [ 269.392858][T14214] pim6reg1: entered allmulticast mode [ 269.738628][ T5877] Bluetooth: hci0: command 0x0406 tx timeout [ 269.743170][T14229] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2399'. [ 269.794722][T14233] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2401'. [ 269.972014][T14244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2404'. [ 270.113275][T14252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2407'. [ 270.161259][T14250] netlink: 'syz.4.2407': attribute type 21 has an invalid length. [ 270.205015][T14250] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2407'. [ 270.318770][T14262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.603649][T14277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.618958][T14277] batadv_slave_0: entered promiscuous mode [ 271.147593][T14292] netlink: 'syz.2.2419': attribute type 16 has an invalid length. [ 271.162739][T14292] netlink: 'syz.2.2419': attribute type 17 has an invalid length. [ 271.208308][T14292] 0ªî{X¹¦: left allmulticast mode [ 271.254211][T14292] sit0: left promiscuous mode [ 271.274179][T14292] sit0: left allmulticast mode [ 271.341259][T14292] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 271.353043][T14292] vlan2: left allmulticast mode [ 271.358391][T14292] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 271.367075][T14292] veth3: left promiscuous mode [ 271.389268][T14292] bridge1: left promiscuous mode [ 271.394292][T14292] bridge1: left allmulticast mode [ 271.407164][T14292] vlan3: left promiscuous mode [ 271.413650][T14292] bridge0: left promiscuous mode [ 271.422502][T14319] netlink: 'syz.0.2426': attribute type 1 has an invalid length. [ 271.435250][T14292] gretap1: left promiscuous mode [ 271.442636][T14292] gretap1: left allmulticast mode [ 271.453364][T14292] bond5: left promiscuous mode [ 271.458771][T14292] bond5: left allmulticast mode [ 271.467511][T14292] bond7: left promiscuous mode [ 271.472615][T14292] bond8: left promiscuous mode [ 271.510296][T14312] tipc: Enabling of bearer rejected, failed to enable media [ 271.531514][T14314] netlink: 'syz.1.2425': attribute type 23 has an invalid length. [ 271.937157][T14330] netlink: 'syz.2.2429': attribute type 5 has an invalid length. [ 272.069156][T14336] netlink: 'syz.0.2432': attribute type 1 has an invalid length. [ 273.514337][T14394] __nla_validate_parse: 14 callbacks suppressed [ 273.514357][T14394] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2444'. [ 273.791976][T14408] netlink: 'syz.0.2447': attribute type 21 has an invalid length. [ 273.827171][T14405] netlink: 'syz.0.2447': attribute type 21 has an invalid length. [ 273.863557][T14408] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2447'. [ 273.874570][T14408] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2447'. [ 273.895900][T14405] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2447'. [ 273.903590][T14410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2447'. [ 273.933415][T14405] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2447'. [ 274.007510][T14413] netlink: 284 bytes leftover after parsing attributes in process `syz.3.2449'. [ 274.045236][T14413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2449'. [ 274.081437][T14417] batadv0: entered allmulticast mode [ 274.087599][T14414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2449'. [ 274.295576][T14425] syzkaller0: entered promiscuous mode [ 274.322557][T14425] syzkaller0: entered allmulticast mode [ 274.332196][T14427] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2454'. [ 274.600028][T14439] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 274.640997][T14442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.466046][T14491] erspan0: entered promiscuous mode [ 275.474259][T14491] erspan0: entered allmulticast mode [ 276.010314][T14538] netlink: 'syz.4.2493': attribute type 1 has an invalid length. [ 276.152718][T14538] bond9: entered promiscuous mode [ 276.169265][T14538] 8021q: adding VLAN 0 to HW filter on device bond9 [ 276.190847][T14547] netlink: 'syz.1.2495': attribute type 39 has an invalid length. [ 276.233051][T14543] 8021q: adding VLAN 0 to HW filter on device bond10 [ 276.244384][T14543] bond9: (slave bond10): making interface the new active one [ 276.252307][T14543] bond10: entered promiscuous mode [ 276.258545][T14543] bond9: (slave bond10): Enslaving as an active interface with an up link [ 276.267887][T14541] smc: net device bond0 applied user defined pnetid SYZ2 [ 276.299334][T14559] batman_adv: batadv0: Adding interface: wlan1 [ 276.305558][T14559] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.346619][T14559] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 277.208167][T14606] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.230202][T14606] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.371656][T14619] netlink: 'syz.4.2512': attribute type 11 has an invalid length. [ 277.394871][T14606] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.433214][T14606] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.565671][T14606] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.590637][T14606] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.725761][T14606] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.759336][T14606] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.996418][ T3030] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.007619][ T3030] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.037624][ T3030] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.064393][ T3030] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.199187][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.214812][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.241417][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.258218][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.321517][T14654] netlink: 'syz.3.2523': attribute type 1 has an invalid length. [ 278.994834][T14682] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 02:04:00:bf:05:00 [ 279.057787][T14682] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 02:04:00:bf:05:00 [ 279.097125][T14683] __nla_validate_parse: 12 callbacks suppressed [ 279.097146][T14683] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2531'. [ 279.135111][T14683] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2531'. [ 279.167120][T14687] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2532'. [ 279.200309][T14687] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2532'. [ 279.235868][T14693] block nbd2: not configured, cannot reconfigure [ 280.558119][T14756] netlink: 'syz.2.2550': attribute type 5 has an invalid length. [ 280.626112][T14762] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2551'. [ 280.676135][T14762] netlink: 576 bytes leftover after parsing attributes in process `syz.1.2551'. [ 280.857559][T14769] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2555'. [ 280.898591][T14770] nft_compat: unsupported protocol 1 [ 281.437327][T14790] netlink: 'syz.4.2560': attribute type 11 has an invalid length. [ 281.473647][T14793] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2562'. [ 281.475323][T14790] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2560'. [ 281.671456][T14798] tipc: Enabled bearer , priority 0 [ 281.693390][T14798] tipc: Resetting bearer [ 281.787868][T14797] tipc: Disabling bearer [ 282.250329][T14824] ieee802154 phy0 wpan0: encryption failed: -90 [ 282.303115][T14824] veth7: entered allmulticast mode [ 282.486474][T14833] tipc: Enabled bearer , priority 0 [ 282.532048][T14833] syzkaller0: entered promiscuous mode [ 282.545951][T14833] syzkaller0: entered allmulticast mode [ 282.668042][T14847] tipc: Enabling of bearer rejected, failed to enable media [ 282.701934][T14833] tipc: Resetting bearer [ 282.748137][T14831] tipc: Resetting bearer [ 282.814542][T14831] tipc: Disabling bearer [ 282.996709][T14858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2580'. [ 283.160548][T14858] netlink: 'syz.0.2580': attribute type 11 has an invalid length. [ 283.363880][T14868] netlink: 'syz.2.2584': attribute type 15 has an invalid length. [ 283.581598][T14880] tipc: Enabling of bearer rejected, failed to enable media [ 284.995767][T14967] __nla_validate_parse: 5 callbacks suppressed [ 284.995788][T14967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2612'. [ 285.151482][T14973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2614'. [ 285.173494][T14979] block nbd3: not configured, cannot reconfigure [ 285.303341][T14983] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2619'. [ 285.823703][T15018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2627'. [ 285.838993][T15017] siw: device registration error -23 [ 285.859891][T15018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2627'. [ 285.862123][T15017] netlink: 'syz.2.2626': attribute type 2 has an invalid length. [ 285.875719][T15018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2627'. [ 285.969866][T15023] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20004 [ 286.725783][T15068] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2636'. [ 286.987062][T15082] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2641'. [ 287.413715][T15109] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2650'. [ 287.541323][T15114] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2652'. [ 288.137091][T15146] tipc: Enabled bearer , priority 0 [ 288.169094][T15146] syzkaller0: entered promiscuous mode [ 288.174631][T15146] syzkaller0: entered allmulticast mode [ 288.234113][T15146] tipc: Resetting bearer [ 288.256802][T15142] tipc: Resetting bearer [ 288.318933][T15142] tipc: Disabling bearer [ 288.341073][T15152] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 288.445252][T15150] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.484472][T15150] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.666594][T15150] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.688470][T15150] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.753695][T15138] netlink: 'syz.3.2659': attribute type 13 has an invalid length. [ 288.761889][T15138] netlink: 'syz.3.2659': attribute type 17 has an invalid length. [ 288.826676][T15150] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.846761][T15150] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.928444][T12679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.076556][T15138] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 289.111569][T15164] team0: Device vti0 is of different type [ 289.152231][T15150] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.162372][T15150] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.460610][T15183] netlink: 'syz.4.2673': attribute type 1 has an invalid length. [ 289.475745][T15185] netlink: 'syz.0.2675': attribute type 1 has an invalid length. [ 289.517102][ T49] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.526891][ T49] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.603447][ T36] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.623226][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.744105][ T1338] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.774874][ T1338] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.819120][ T1338] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.827626][ T1338] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.945443][T15190] openvswitch: netlink: Flow actions attr not present in new flow. [ 289.979093][T12679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.004825][T15191] __nla_validate_parse: 9 callbacks suppressed [ 290.004845][T15191] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2677'. [ 290.205029][T15197] pim6reg1: entered promiscuous mode [ 290.213091][T15197] pim6reg1: entered allmulticast mode [ 290.427688][T15206] xt_socket: unknown flags 0xe4 [ 290.436098][T15210] xt_socket: unknown flags 0xe4 [ 290.619807][T15212] team0: No ports can be present during mode change [ 290.660550][T15214] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 290.963131][T15231] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2691'. [ 291.023270][T15233] tipc: Enabled bearer , priority 0 [ 291.134752][T15233] syzkaller0: entered promiscuous mode [ 291.149760][T15233] syzkaller0: entered allmulticast mode [ 291.156209][T15233] tipc: Resetting bearer [ 291.176361][T15243] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2694'. [ 291.484177][T15233] tipc: Resetting bearer [ 291.997034][T15261] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2699'. [ 292.052464][T12681] tipc: Node number set to 1909999593 [ 293.404036][T15233] tipc: Disabling bearer [ 294.048668][T15300] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2712'. [ 294.065200][T15300] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2712'. [ 294.105281][ T49] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x7d [ 294.846045][T15300] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2712'. [ 295.717391][T15360] netlink: 'syz.0.2727': attribute type 21 has an invalid length. [ 295.737092][T15360] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2727'. [ 295.864888][T15366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2730'. [ 296.023080][T15371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2731'. [ 296.095700][T15377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2733'. [ 296.425444][T15395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2737'. [ 296.495552][T15398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2738'. [ 296.917171][T15424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2745'. [ 297.127162][T15439] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2750'. [ 297.253208][T15441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2752'. [ 297.303437][T15446] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2752'. [ 297.387386][T15455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.402111][T15455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.427719][T15455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.456850][T15455] batman_adv: batadv0: Removing interface: wlan1 [ 297.573794][T15464] tipc: Enabled bearer , priority 0 [ 297.595930][T15468] syzkaller0: entered promiscuous mode [ 297.602830][T15468] syzkaller0: entered allmulticast mode [ 297.626046][T15463] tipc: Resetting bearer [ 297.665213][T15463] tipc: Disabling bearer [ 297.865030][T15484] batadv_slave_0: entered promiscuous mode [ 297.920531][T15483] batadv_slave_0: left promiscuous mode [ 297.971028][T15490] tipc: Enabled bearer , priority 0 [ 297.990752][T15490] syzkaller0: entered promiscuous mode [ 297.996422][T15490] syzkaller0: entered allmulticast mode [ 298.028954][T15490] tipc: Resetting bearer [ 298.052822][T15489] tipc: Resetting bearer [ 298.100835][T15489] tipc: Disabling bearer [ 298.340461][T15514] syzkaller0: entered allmulticast mode [ 298.726260][T15533] tipc: Enabled bearer , priority 0 [ 298.765510][T15533] syzkaller0: entered promiscuous mode [ 298.771349][T15533] syzkaller0: entered allmulticast mode [ 298.821624][T15533] tipc: Resetting bearer [ 298.866603][T15532] tipc: Resetting bearer [ 298.925853][T15532] tipc: Disabling bearer [ 299.644121][T15585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.295750][T15606] team0: Cannot enslave team device to itself [ 300.331133][T15606] netlink: 'syz.1.2802': attribute type 1 has an invalid length. [ 300.365651][T15609] netlink: 'syz.0.2803': attribute type 2 has an invalid length. [ 300.399165][T15609] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 300.428105][T15609] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 300.745483][T15627] __nla_validate_parse: 13 callbacks suppressed [ 300.745504][T15627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2807'. [ 300.823407][T15627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2807'. [ 301.264105][T15649] netlink: 'syz.4.2816': attribute type 1 has an invalid length. [ 301.275960][T15649] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2816'. [ 301.711379][T15679] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2824'. [ 301.772754][T15679] tipc: Enabling of bearer rejected, failed to enable media [ 301.789362][T15681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2825'. [ 301.831621][T15685] netlink: 'syz.2.2827': attribute type 10 has an invalid length. [ 301.897264][T15681] tipc: Enabling of bearer rejected, failed to enable media [ 301.916595][T15681] syzkaller0: entered promiscuous mode [ 301.922587][T15681] syzkaller0: entered allmulticast mode [ 301.943935][T15691] netlink: 300 bytes leftover after parsing attributes in process `syz.3.2829'. [ 301.954376][T15699] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2830'. [ 302.010528][T15685] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 302.130955][T15704] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2832'. [ 302.192256][T15706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.225685][T15711] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 302.233002][T15711] IPv6: NLM_F_CREATE should be set when creating new route [ 302.270941][T15711] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20000 [ 302.355081][T15720] veth0: entered promiscuous mode [ 302.409259][T15718] veth0: left promiscuous mode [ 302.513549][T15722] netlink: 360 bytes leftover after parsing attributes in process `syz.1.2837'. [ 302.553024][T15729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2839'. [ 304.360174][T15806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.386199][T15806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.813882][T15820] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 304.898781][ T5883] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 304.916088][ T5883] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 304.933569][ T5883] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 304.959578][ T5883] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 304.969071][ T5883] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 305.132702][T15838] bridge_slave_0: invalid flags given to default FDB implementation [ 305.525064][T15865] ieee802154 phy0 wpan0: encryption failed: -22 [ 305.853077][T15878] __nla_validate_parse: 8 callbacks suppressed [ 305.853101][T15878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2882'. [ 306.265480][T15829] chnl_net:caif_netlink_parms(): no params data found [ 306.744527][T15829] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.758167][T15829] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.767147][T15829] bridge_slave_0: entered allmulticast mode [ 306.777306][T15829] bridge_slave_0: entered promiscuous mode [ 306.821285][T15829] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.838133][T15829] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.845752][T15829] bridge_slave_1: entered allmulticast mode [ 306.870331][T15829] bridge_slave_1: entered promiscuous mode [ 306.878891][T15924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 306.972224][T15829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.983416][T15930] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2893'. [ 307.003027][T15829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.022123][ T5883] Bluetooth: hci1: command tx timeout [ 307.126270][T15829] team0: Port device team_slave_0 added [ 307.137332][T15829] team0: Port device team_slave_1 added [ 307.216040][T15829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.223854][T15829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.250968][T15829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.275357][T15829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.286088][T15829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.319309][T15829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.336871][T15939] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2896'. [ 307.352454][T15939] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 307.383310][T15944] atomic_op ffff88805346e998 conn xmit_atomic 0000000000000000 [ 307.480910][T15829] hsr_slave_0: entered promiscuous mode [ 307.494001][T15829] hsr_slave_1: entered promiscuous mode [ 307.501985][T15829] debugfs: 'hsr0' already exists in 'hsr' [ 307.508667][T15829] Cannot create hsr debugfs directory [ 307.773317][T15959] netlink: 'syz.3.2903': attribute type 32 has an invalid length. [ 307.786960][T15959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2903'. [ 307.842377][T15964] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2903'. [ 307.852594][T15964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2903'. [ 307.883405][T15959] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 307.894732][T15964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2903'. [ 307.940034][T15829] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.951735][T15829] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.050606][T15829] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.063027][T15829] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.146156][T15829] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.173819][T15829] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.312671][T15829] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.363233][T15829] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.632343][T15989] netlink: 'syz.2.2908': attribute type 10 has an invalid length. [ 308.754551][T15989] team0: Device dummy0 failed to register rx_handler [ 308.844356][T15997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2909'. [ 308.984458][T15829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 309.030453][T15999] sctp: [Deprecated]: syz.3.2911 (pid 15999) Use of int in maxseg socket option. [ 309.030453][T15999] Use struct sctp_assoc_value instead [ 309.036594][T15829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 309.080038][T16005] netlink: 'syz.1.2912': attribute type 11 has an invalid length. [ 309.098279][ T5883] Bluetooth: hci1: command tx timeout [ 309.107694][T15829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 309.125954][T16005] mac80211_hwsim hwsim11 ÿ: renamed from wlan1 (while UP) [ 309.150339][T15829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 309.475808][T16037] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2919'. [ 309.487664][T16035] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2920'. [ 309.541284][T15829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.612517][T15829] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.647727][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.654976][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.735529][T16043] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 309.765013][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.773220][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.941589][T16057] netlink: 'syz.3.2929': attribute type 23 has an invalid length. [ 310.374943][T16078] tipc: Enabled bearer , priority 0 [ 310.390865][T16078] syzkaller0: entered promiscuous mode [ 310.396535][T16078] syzkaller0: entered allmulticast mode [ 310.595533][T16078] tipc: Resetting bearer [ 310.660671][T16077] tipc: Resetting bearer [ 310.749622][T16077] tipc: Disabling bearer [ 311.209336][T16094] __nla_validate_parse: 4 callbacks suppressed [ 311.209357][T16094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2942'. [ 311.292973][T16094] bridge0: port 4(batadv1) entered blocking state [ 311.305274][ T5877] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 311.308155][T16094] bridge0: port 4(batadv1) entered disabled state [ 311.321096][ T5877] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 311.337753][ T5877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 311.349337][T16094] batadv1: entered allmulticast mode [ 311.358122][T16094] batadv1: entered promiscuous mode [ 311.363463][ T5877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 311.373527][ T5877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 311.565257][T16107] xt_socket: unknown flags 0x50 [ 311.778140][ T49] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 311.787405][ T49] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 311.975745][ T5877] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 311.987596][ T5877] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 311.999438][ T5877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 312.008112][ T5877] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 312.025813][ T5877] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 312.073952][ T1338] bridge_slave_1: left allmulticast mode [ 312.108535][ T1338] bridge_slave_1: left promiscuous mode [ 312.115661][ T1338] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.216668][ T1338] bridge_slave_0: left allmulticast mode [ 312.246079][ T1338] bridge_slave_0: left promiscuous mode [ 312.275108][ T1338] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.423985][T16137] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2953'. [ 313.371335][ T1338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.388990][ T1338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.403194][ T1338] bond0 (unregistering): Released all slaves [ 313.419248][ T5883] Bluetooth: hci0: command tx timeout [ 313.749608][T16149] openvswitch: netlink: Key type 10512 is out of range max 32 [ 314.138816][ T5883] Bluetooth: hci1: command tx timeout [ 314.305672][T16164] macsec2: entered promiscuous mode [ 314.344158][T16164] macsec2: entered allmulticast mode [ 314.604393][ T1338] hsr_slave_0: left promiscuous mode [ 314.617148][ T1338] hsr_slave_1: left promiscuous mode [ 314.630722][ T1338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.653233][ T1338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.715268][T16185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.049650][ T1338] team0 (unregistering): Port device team_slave_1 removed [ 315.082050][ T1338] team0 (unregistering): Port device team_slave_0 removed [ 315.498241][ T5883] Bluetooth: hci0: command tx timeout [ 315.546815][T16188] team0: Device vti1 is up. Set it down before adding it as a team port [ 315.630944][T16193] netlink: 'syz.4.2968': attribute type 11 has an invalid length. [ 315.746611][T16097] chnl_net:caif_netlink_parms(): no params data found [ 316.078041][T16097] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.085536][T16097] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.094680][T16097] bridge_slave_0: entered allmulticast mode [ 316.109009][T16097] bridge_slave_0: entered promiscuous mode [ 316.120193][T16097] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.127563][T16097] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.136485][T16097] bridge_slave_1: entered allmulticast mode [ 316.160102][T16097] bridge_slave_1: entered promiscuous mode [ 316.218141][ T5883] Bluetooth: hci1: command tx timeout [ 316.286961][T16097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.330409][T16097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.477247][T16097] team0: Port device team_slave_0 added [ 316.501561][T16097] team0: Port device team_slave_1 added [ 316.688068][T16097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.695222][T16097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.759914][T16097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.830932][T16097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.846098][T16097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.881169][T16097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.075217][T16097] hsr_slave_0: entered promiscuous mode [ 317.083988][T16097] hsr_slave_1: entered promiscuous mode [ 317.095562][T16097] debugfs: 'hsr0' already exists in 'hsr' [ 317.106301][T16097] Cannot create hsr debugfs directory [ 317.349328][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.380050][T16260] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 317.400247][T16115] chnl_net:caif_netlink_parms(): no params data found [ 317.524429][T16263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2985'. [ 317.561310][T16263] bridge0: entered promiscuous mode [ 317.567219][T16263] macsec1: entered promiscuous mode [ 317.574252][T16263] macsec1: entered allmulticast mode [ 317.581342][T16263] bridge0: entered allmulticast mode [ 317.585053][ T5883] Bluetooth: hci0: command tx timeout [ 317.587349][T16263] bridge0: port 5(macsec1) entered blocking state [ 317.605489][T16263] bridge0: port 5(macsec1) entered disabled state [ 317.616025][T16263] bridge0: left allmulticast mode [ 317.623314][T16263] bridge0: left promiscuous mode [ 317.717532][T16271] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 317.870000][T16097] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.890120][T16097] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.950903][T16280] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2989'. [ 317.997301][T16097] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.011751][T16097] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.032017][T16115] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.039897][T16115] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.047219][T16115] bridge_slave_0: entered allmulticast mode [ 318.062572][T16115] bridge_slave_0: entered promiscuous mode [ 318.118761][T16097] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.125593][T16277] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2989'. [ 318.129430][T16097] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.158095][T16115] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.165529][T16115] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.174025][T16115] bridge_slave_1: entered allmulticast mode [ 318.182612][T16115] bridge_slave_1: entered promiscuous mode [ 318.245944][T16097] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.278400][T16097] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.314577][ T5883] Bluetooth: hci1: command tx timeout [ 318.439761][T16115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.486894][T16115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.661680][T16115] team0: Port device team_slave_0 added [ 318.741880][T16115] team0: Port device team_slave_1 added [ 318.965536][T16115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.973076][T16115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.000140][T16115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.065521][T16115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.082333][T16115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.134020][T16115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.376833][T16301] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2994'. [ 319.390117][T16097] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 319.410695][T16097] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 319.510423][T16097] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 319.529621][T16097] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 319.562247][T16115] hsr_slave_0: entered promiscuous mode [ 319.572305][T16115] hsr_slave_1: entered promiscuous mode [ 319.579049][T16115] debugfs: 'hsr0' already exists in 'hsr' [ 319.584941][T16115] Cannot create hsr debugfs directory [ 319.659369][ T5883] Bluetooth: hci0: command tx timeout [ 320.268892][T16323] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.378624][ T5883] Bluetooth: hci1: command tx timeout [ 320.904588][T16115] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 320.941983][T16115] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 320.964502][T16115] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 320.990856][T16097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.035583][T16097] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.063563][T16115] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 321.161912][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.169151][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.256526][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.263753][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.334514][T16336] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 321.408380][T16338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3000'. [ 321.652455][T16115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.656638][T16347] netlink: 'syz.4.3002': attribute type 33 has an invalid length. [ 321.727744][T16115] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.755558][ T3030] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.762819][ T3030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.834414][ T3030] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.841685][ T3030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.110908][T16362] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3005'. [ 322.147382][T16097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.315602][T16097] veth0_vlan: entered promiscuous mode [ 322.363207][T16097] veth1_vlan: entered promiscuous mode [ 322.385540][T16367] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3006'. [ 322.455159][T16115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.524535][T16097] veth0_macvtap: entered promiscuous mode [ 322.544121][T16097] veth1_macvtap: entered promiscuous mode [ 322.592634][T16097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.612349][T16377] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 322.631118][T16097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.687352][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.722414][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.745629][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.770682][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.933155][T16383] tipc: Enabled bearer , priority 0 [ 322.941569][T16383] syzkaller0: entered promiscuous mode [ 322.947135][T16383] syzkaller0: entered allmulticast mode [ 322.977360][T16383] tipc: Resetting bearer [ 322.996885][T16381] tipc: Resetting bearer [ 323.039527][T16381] tipc: Disabling bearer [ 323.065984][ T1338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.084252][ T1338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.220140][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.240647][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.321452][T16115] veth0_vlan: entered promiscuous mode [ 323.361441][T16115] veth1_vlan: entered promiscuous mode [ 323.465113][T16394] bond9: (slave bond10): Releasing backup interface [ 323.477707][T16394] bond10: left promiscuous mode [ 323.624220][T16411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3017'. [ 323.633570][T16115] veth0_macvtap: entered promiscuous mode [ 323.676966][T16411] bridge_slave_1: left allmulticast mode [ 323.694535][T16411] bridge_slave_1: left promiscuous mode [ 323.711159][T16411] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.732856][T16411] bridge_slave_0: left allmulticast mode [ 323.748178][T16411] bridge_slave_0: left promiscuous mode [ 323.758675][T16411] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.810372][T16420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3020'. [ 323.879881][T16416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3019'. [ 323.895771][T16115] veth1_macvtap: entered promiscuous mode [ 323.989770][T16115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.034908][T16115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.134594][ T3030] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.171616][ T3030] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.196398][ T3030] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.237561][ T3030] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.495898][T16450] netlink: 'syz.2.3027': attribute type 15 has an invalid length. [ 324.523716][T16450] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3027'. [ 324.825701][T16456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3028'. [ 324.934695][T16456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3028'. [ 324.962565][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.988574][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.236698][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.256255][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.540177][T16487] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2941'. [ 325.638775][T16494] netlink: 'syz.5.2941': attribute type 16 has an invalid length. [ 325.672367][T16492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3038'. [ 325.683790][T16487] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.716880][T16494] netlink: 'syz.5.2941': attribute type 17 has an invalid length. [ 325.752919][T16487] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.018576][T16494] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 326.090769][T16500] netlink: 'syz.4.3040': attribute type 1 has an invalid length. [ 326.378994][T16511] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3043'. [ 326.390451][T16500] 8021q: adding VLAN 0 to HW filter on device bond11 [ 326.398655][T16511] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3043'. [ 326.408818][T16511] netlink: 'syz.2.3043': attribute type 6 has an invalid length. [ 326.442547][T16511] netlink: 'syz.2.3043': attribute type 5 has an invalid length. [ 326.527610][ T1338] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.563967][ T1338] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 326.593991][ T1338] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 326.717677][ T1338] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.748092][ T1338] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 326.770815][ T1338] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 326.893354][ T1338] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.923090][ T5877] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 326.934312][ T5877] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 326.945170][ T5877] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 326.948512][T16529] syz.4.3049 uses old SIOCAX25GETINFO [ 326.960722][ T1338] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 326.977446][ T5877] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 326.995313][ T5877] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 327.008197][ T1338] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 327.048823][T16534] netlink: 'syz.1.3050': attribute type 1 has an invalid length. [ 327.397132][ T1338] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.415701][ T1338] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 327.432848][ T1338] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 327.694188][T16555] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.702577][T16555] Unsupported ieee802154 address type: 0 [ 327.999268][ T1338] batadv1: left allmulticast mode [ 328.004422][ T1338] batadv1: left promiscuous mode [ 328.028286][ T1338] bridge0: port 4(batadv1) entered disabled state [ 328.074703][ T1338] bond9: left promiscuous mode [ 328.100580][ T1338] bridge0: port 3(bond9) entered disabled state [ 328.107545][T16572] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 328.162351][ T1338] bridge_slave_1: left allmulticast mode [ 328.171572][ T1338] bridge_slave_1: left promiscuous mode [ 328.183555][ T1338] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.197535][ T1338] bridge_slave_0: left allmulticast mode [ 328.204263][ T1338] bridge_slave_0: left promiscuous mode [ 328.210372][ T1338] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.289216][T16583] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 328.290498][T16583] block (null): Could not allocate knbd recv work queue. [ 328.319751][T16583] nbd: failed to add new device [ 328.463713][T16592] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 328.827259][ T1338] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 328.855605][ T1338] bond11 (unregistering): (slave gretap3): Releasing active interface [ 329.098728][ T5877] Bluetooth: hci4: command tx timeout [ 329.304426][ T1338] smc: removing net device bond0 with user defined pnetid SYZ2 [ 329.314051][ T1338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.325351][ T1338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.336237][ T1338] bond0 (unregistering): (slave team0): Releasing backup interface [ 329.347417][ T1338] bond0 (unregistering): Released all slaves [ 329.465938][ T1338] bond1 (unregistering): (slave bond2): Releasing backup interface [ 329.475159][ T1338] bond1 (unregistering): Released all slaves [ 329.592762][ T1338] bond2 (unregistering): Released all slaves [ 329.714668][ T1338] bond3 (unregistering): Released all slaves [ 329.731168][ T1338] bond4 (unregistering): Released all slaves [ 329.746520][ T1338] bond5 (unregistering): Released all slaves [ 329.874702][ T1338] bond6 (unregistering): Released all slaves [ 329.893882][ T1338] bond7 (unregistering): Released all slaves [ 330.026530][ T1338] bond8 (unregistering): Released all slaves [ 330.155449][ T1338] bond9 (unregistering): Released all slaves [ 330.264574][ T1338] bond10 (unregistering): (slave veth5): Releasing active interface [ 330.274352][ T1338] bond10 (unregistering): Released all slaves [ 330.288046][ T1338] bond11 (unregistering): Released all slaves [ 330.399855][ T1338] bond12 (unregistering): Released all slaves [ 330.522258][ T1338] bond13 (unregistering): Released all slaves [ 330.635852][ T1338] bond14 (unregistering): Released all slaves [ 330.749910][ T1338] bond15 (unregistering): Released all slaves [ 330.871845][ T1338] bond16 (unregistering): Released all slaves [ 330.906088][T16573] geneve2: entered promiscuous mode [ 330.943440][T16590] __nla_validate_parse: 6 callbacks suppressed [ 330.943463][T16590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3064'. [ 330.994301][T16590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3064'. [ 331.021951][T16590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3064'. [ 331.186360][ T5877] Bluetooth: hci4: command tx timeout [ 331.272912][ T1338] tipc: Left network mode [ 331.582102][T16626] netlink: 'syz.5.3070': attribute type 1 has an invalid length. [ 331.617223][T16626] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3070'. [ 331.877763][T16638] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3076'. [ 331.968374][T16634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3075'. [ 331.992275][T16631] bridge_slave_0: entered promiscuous mode [ 332.635238][T16650] netlink: 'syz.5.3077': attribute type 1 has an invalid length. [ 332.785501][T16650] bond1 (unregistering): Released all slaves [ 333.038015][T16660] ip6tnl1: entered promiscuous mode [ 333.043290][T16660] ip6tnl1: entered allmulticast mode [ 333.224144][T16525] chnl_net:caif_netlink_parms(): no params data found [ 333.260013][ T5877] Bluetooth: hci4: command tx timeout [ 333.271579][T16669] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004 [ 333.938240][T16692] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3086'. [ 334.406739][ T1338] hsr_slave_0: left promiscuous mode [ 334.414145][ T1338] hsr_slave_1: left promiscuous mode [ 334.427106][ T1338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.435123][ T1338] batadv0: mtu less than device minimum [ 334.449897][ T1338] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 334.462520][ T1338] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 334.474831][ T1338] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 334.487120][ T1338] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 334.499459][ T1338] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 334.511343][ T1338] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 334.523057][ T1338] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 334.534465][ T1338] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 334.546106][ T1338] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 334.569537][ T1338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.583372][ T1338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.624179][ T1338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.635850][ T1338] batman_adv: batadv0: Interface deactivated: dummy0 [ 334.643253][ T1338] batman_adv: batadv0: Removing interface: dummy0 [ 334.674118][ T1338] veth1_macvtap: left promiscuous mode [ 334.684119][ T1338] veth0_macvtap: left promiscuous mode [ 334.694025][ T1338] veth1_vlan: left promiscuous mode [ 334.701305][ T1338] veth0_vlan: left promiscuous mode [ 335.338265][ T5877] Bluetooth: hci4: command tx timeout [ 335.360960][ T1338] team0 (unregistering): Port device team_slave_1 removed [ 335.412431][ T1338] team0 (unregistering): Port device team_slave_0 removed [ 335.421179][ T36] smc: removing ib device syz! [ 335.941231][T16525] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.952899][T16525] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.960625][T16525] bridge_slave_0: entered allmulticast mode [ 335.967821][T16525] bridge_slave_0: entered promiscuous mode [ 335.986220][T16525] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.993874][T16525] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.008241][T16525] bridge_slave_1: entered allmulticast mode [ 336.017288][T16525] bridge_slave_1: entered promiscuous mode [ 336.382397][T16716] syz_tun: entered allmulticast mode [ 336.412027][T16525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.446995][T16525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.567514][T16725] netlink: 'syz.2.3092': attribute type 11 has an invalid length. [ 337.136476][T16525] team0: Port device team_slave_0 added [ 337.236116][T16525] team0: Port device team_slave_1 added [ 337.416499][T16733] netlink: 'syz.2.3095': attribute type 1 has an invalid length. [ 337.451922][T16733] netlink: 'syz.2.3095': attribute type 3 has an invalid length. [ 337.490030][T16733] netlink: 135836 bytes leftover after parsing attributes in process `syz.2.3095'. [ 337.501522][T16735] netlink: 'syz.1.3096': attribute type 6 has an invalid length. [ 337.583507][T16740] netlink: 'syz.1.3096': attribute type 6 has an invalid length. [ 337.705816][T16525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.718500][T16525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.782031][T16525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.833940][T16743] tipc: Enabled bearer , priority 0 [ 337.842620][T16732] syzkaller0: entered promiscuous mode [ 337.856934][T16732] syzkaller0: entered allmulticast mode [ 337.877604][T16525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.915474][T16525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.943417][T16525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.034649][T16734] tipc: Resetting bearer [ 338.147612][T16731] tipc: Resetting bearer [ 338.166935][T16731] tipc: Disabling bearer [ 338.199313][T16752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3100'. [ 338.453607][T16525] hsr_slave_0: entered promiscuous mode [ 338.480497][T16525] hsr_slave_1: entered promiscuous mode [ 338.501185][T16525] debugfs: 'hsr0' already exists in 'hsr' [ 338.518839][T16525] Cannot create hsr debugfs directory [ 338.524578][T16757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3102'. [ 338.538426][T16759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3102'. [ 338.767506][T16759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3102'. [ 338.846912][T16766] IPVS: length: 207 != 24 [ 338.904176][T16768] sctp: [Deprecated]: syz.5.3105 (pid 16768) Use of struct sctp_assoc_value in delayed_ack socket option. [ 338.904176][T16768] Use struct sctp_sack_info instead [ 338.973368][T16770] netlink: 'syz.2.3106': attribute type 9 has an invalid length. [ 338.988068][T16770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3106'. [ 339.092391][ T1338] IPVS: stop unused estimator thread 0... [ 339.161619][T16770] netlink: 'syz.2.3106': attribute type 9 has an invalid length. [ 339.214881][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.217996][T16770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3106'. [ 339.271148][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.293762][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.408337][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.439973][T16783] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3109'. [ 339.451061][T16783] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3109'. [ 339.463675][T16786] smc: net device bond0 applied user defined pnetid SYZ2 [ 339.469525][T16783] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3109'. [ 339.745422][T16796] macvtap1: entered promiscuous mode [ 339.752165][T16796] vlan0: entered promiscuous mode [ 339.757852][T16796] macvtap1: entered allmulticast mode [ 339.763362][T16796] vlan0: entered allmulticast mode [ 339.768863][T16796] veth0_vlan: entered allmulticast mode [ 340.299225][T16825] IPVS: length: 4096 != 8 [ 340.388593][T16525] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 340.440870][T16525] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 340.478767][T16525] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 340.523318][T16525] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 340.576898][T16835] geneve2: entered promiscuous mode [ 340.583831][T16835] geneve2: entered allmulticast mode [ 340.598866][ T2986] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 340.623310][ T2986] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 340.639103][ T2986] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 340.682853][T16844] bond0: entered promiscuous mode [ 340.688135][T16844] bond_slave_0: entered promiscuous mode [ 340.694684][T16844] bond_slave_1: entered promiscuous mode [ 340.719090][ T2986] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 341.107255][T16525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.206893][T16525] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.278998][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.286202][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.316579][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.323797][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.597600][T16874] net_ratelimit: 30 callbacks suppressed [ 341.597623][T16874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.811506][T16885] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 341.865643][T16884] Bluetooth: MGMT ver 1.23 [ 341.943936][T16525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.042536][T16894] netlink: 'syz.2.3136': attribute type 11 has an invalid length. [ 342.061986][T16894] veth0: entered promiscuous mode [ 342.091164][T16525] veth0_vlan: entered promiscuous mode [ 342.432324][T16525] veth1_vlan: entered promiscuous mode [ 342.547471][T16525] veth0_macvtap: entered promiscuous mode [ 342.588954][T16525] veth1_macvtap: entered promiscuous mode [ 342.602084][T16926] netlink: 'syz.1.3143': attribute type 10 has an invalid length. [ 342.635735][T16525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.676464][T16525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.689868][T16930] __nla_validate_parse: 10 callbacks suppressed [ 342.689887][T16930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3144'. [ 342.708382][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.726740][T16930] xt_time: unknown flags 0xf4 [ 342.741775][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.777231][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.807795][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.911461][T16938] sctp: [Deprecated]: syz.2.3147 (pid 16938) Use of int in max_burst socket option deprecated. [ 342.911461][T16938] Use struct sctp_assoc_value instead [ 342.919228][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.946966][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.948887][T16941] netlink: 'syz.1.3148': attribute type 1 has an invalid length. [ 343.064403][ T2986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.073678][ T2986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.898678][ T5877] Bluetooth: hci0: command tx timeout [ 343.999516][T16969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3156'. [ 344.057405][ T5883] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 344.075154][ T5883] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 344.088980][ T5883] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 344.098679][ T5883] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 344.107672][ T5883] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 344.210719][T16979] netlink: 496 bytes leftover after parsing attributes in process `syz.4.3160'. [ 344.459093][T16991] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 344.507021][T16995] !: renamed from dummy0 (while UP) [ 344.543345][T16992] netlink: 'syz.5.3164': attribute type 1 has an invalid length. [ 344.562379][T16995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3165'. [ 344.611257][T16992] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3164'. [ 344.621552][T16995] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 344.649464][T16992] nbd: illegal input index 1048576 [ 344.792723][T17002] veth13: entered allmulticast mode [ 345.046880][T17023] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 345.114612][T17018] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.129015][T17023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3172'. [ 345.143949][T17018] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 345.395283][T17018] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.455496][T17034] netlink: 'syz.2.3173': attribute type 1 has an invalid length. [ 345.457932][T17018] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 345.472438][T17034] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3173'. [ 345.519291][T17034] netlink: 'syz.2.3173': attribute type 2 has an invalid length. [ 345.562316][T17034] netlink: 'syz.2.3173': attribute type 1 has an invalid length. [ 345.603337][T17037] digital: digital_start_poll: Unknown protocol [ 345.613822][T17018] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.625584][T17018] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 345.650041][T16971] chnl_net:caif_netlink_parms(): no params data found [ 345.800378][T17018] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.828046][T17018] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 346.055988][T17047] syzkaller1: entered promiscuous mode [ 346.079939][T17047] syzkaller1: entered allmulticast mode [ 346.140917][ T5877] Bluetooth: hci3: command tx timeout [ 346.192846][ T1338] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 346.202208][ T1338] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 346.212245][T16971] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.220438][T16971] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.228550][T16971] bridge_slave_0: entered allmulticast mode [ 346.237049][T16971] bridge_slave_0: entered promiscuous mode [ 346.247749][T16971] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.255600][T16971] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.263234][T16971] bridge_slave_1: entered allmulticast mode [ 346.272511][T16971] bridge_slave_1: entered promiscuous mode [ 346.316413][T17063] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3180'. [ 346.331006][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 346.339919][ T12] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 346.373567][T16971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.414826][T16971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.469056][ T1338] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 346.478904][ T1338] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 346.531231][T17065] netlink: 'syz.2.3181': attribute type 3 has an invalid length. [ 346.621031][T16971] team0: Port device team_slave_0 added [ 346.627050][ T49] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 346.663540][ T49] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 346.690003][T16971] team0: Port device team_slave_1 added [ 346.697574][T17072] openvswitch: netlink: IP tunnel dst address not specified [ 346.711024][T17069] can: request_module (can-proto-0) failed. [ 346.895048][T16971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.909023][T16971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.937963][T16971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.956840][T16971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.963089][T17089] netlink: 'syz.4.3188': attribute type 1 has an invalid length. [ 346.975022][T16971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.002825][T16971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.029351][T17089] netlink: 'syz.4.3188': attribute type 4 has an invalid length. [ 347.275742][T16971] hsr_slave_0: entered promiscuous mode [ 347.291718][T16971] hsr_slave_1: entered promiscuous mode [ 347.305246][T16971] debugfs: 'hsr0' already exists in 'hsr' [ 347.314089][T16971] Cannot create hsr debugfs directory [ 347.344512][T17111] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3194'. [ 347.540925][T17119] batadv0: entered allmulticast mode [ 347.935783][T17136] netlink: 'syz.5.3200': attribute type 1 has an invalid length. [ 348.032213][T17142] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3200'. [ 348.102426][T17137] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3201'. [ 348.112597][T17137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.201831][T17141] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 348.218931][ T5877] Bluetooth: hci3: command tx timeout [ 348.231544][T16971] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.256882][T17136] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 348.274843][T16971] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.338136][T12681] IPVS: starting estimator thread 0... [ 348.407579][T16971] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.427776][T16971] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.430857][T17157] IPVS: using max 27 ests per chain, 64800 per kthread [ 348.507804][T17158] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3205'. [ 348.533583][T17154] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3205'. [ 348.555309][T17168] netlink: 191164 bytes leftover after parsing attributes in process `syz.3.3208'. [ 348.612723][T16971] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.647992][T16971] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.721139][T17175] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3208'. [ 348.817098][T16971] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.865403][T16971] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.161814][T17196] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 349.315084][T17203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3216'. [ 349.370402][T17203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3216'. [ 349.384565][T16971] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 349.392079][T17206] netlink: 'syz.2.3218': attribute type 1 has an invalid length. [ 349.401458][T17206] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3218'. [ 349.415235][T16971] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 349.430863][T17206] nbd: couldn't find device at index 1048576 [ 349.443575][T17210] netlink: 'syz.2.3218': attribute type 1 has an invalid length. [ 349.471345][T17210] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3218'. [ 349.492513][T17210] nbd: couldn't find device at index 1048576 [ 349.517157][T16971] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 349.564109][T16971] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 349.685322][T17228] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 350.040198][T16971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.064562][T16971] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.103001][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.110267][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.141288][T17247] netlink: 'syz.4.3227': attribute type 10 has an invalid length. [ 350.177053][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.184294][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.298254][ T5877] Bluetooth: hci3: command tx timeout [ 350.826063][T17272] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 351.256411][T16971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.493547][T16971] veth0_vlan: entered promiscuous mode [ 351.529755][T16971] veth1_vlan: entered promiscuous mode [ 351.642691][T17309] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.646728][T16971] veth0_macvtap: entered promiscuous mode [ 351.711032][T16971] veth1_macvtap: entered promiscuous mode [ 351.774143][T16971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.793704][T16971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.874198][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.903331][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.952157][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.996891][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.298835][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.306720][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.388081][ T5877] Bluetooth: hci3: command tx timeout [ 352.465962][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.482370][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.448130][T17388] __nla_validate_parse: 76 callbacks suppressed [ 353.448153][T17388] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3270'. [ 353.515424][T17388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3270'. [ 354.089189][ T5883] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 354.099704][ T5883] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 354.115510][ T5883] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 354.124107][ T5883] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 354.133163][ T5883] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 354.156882][ T1338] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.176330][ T1338] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.284668][T17406] netlink: 'syz.1.3277': attribute type 4 has an invalid length. [ 354.301410][T17406] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3277'. [ 354.332603][ T1338] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.337613][T17411] netlink: 252 bytes leftover after parsing attributes in process `syz.1.3277'. [ 354.352880][ T1338] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.412325][T17406] `: renamed from bond0 (while UP) [ 354.569971][ T1338] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.592695][ T1338] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.613089][T17421] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3280'. [ 354.660598][T17418] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3279'. [ 354.804884][ T1338] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.830746][T17424] netlink: 146840 bytes leftover after parsing attributes in process `syz.5.3281'. [ 354.847322][ T1338] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.866129][T17426] netlink: 146840 bytes leftover after parsing attributes in process `syz.5.3281'. [ 355.700787][ T1338] tipc: Resetting bearer [ 355.881864][T17481] sctp: [Deprecated]: syz.5.3297 (pid 17481) Use of int in max_burst socket option deprecated. [ 355.881864][T17481] Use struct sctp_assoc_value instead [ 356.218063][ T5877] Bluetooth: hci2: command tx timeout [ 356.396177][ T1338] tipc: Disabling bearer [ 356.399915][T17498] netlink: 'syz.5.3302': attribute type 1 has an invalid length. [ 356.452612][T17499] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3302'. [ 356.505887][T17500] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3302'. [ 357.100526][ T1338] bond0 (unregistering): Released all slaves [ 357.114917][ T1338] bond1 (unregistering): Released all slaves [ 357.240184][ T1338] bond2 (unregistering): Released all slaves [ 357.254311][ T1338] bond3 (unregistering): Released all slaves [ 357.270057][ T1338] bond4 (unregistering): Released all slaves [ 357.287017][ T1338] bond5 (unregistering): Released all slaves [ 357.315007][ T1338] bond6 (unregistering): Released all slaves [ 357.331592][ T1338] bond7 (unregistering): Released all slaves [ 357.347646][ T1338] bond8 (unregistering): Released all slaves [ 357.465324][ T1338] bond9 (unregistering): Released all slaves [ 357.582439][ T1338] bond10 (unregistering): Released all slaves [ 357.707071][ T1338] bond11 (unregistering): Released all slaves [ 357.721452][ T1338] bond12 (unregistering): Released all slaves [ 357.836044][T17480] geneve2: entered promiscuous mode [ 357.857080][T17480] geneve2: entered allmulticast mode [ 358.013888][T17486] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.035850][T17486] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.119526][T17498] 8021q: adding VLAN 0 to HW filter on device bond2 [ 358.163113][T17505] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.197440][ T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 358.207415][ T3030] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 358.217049][ T1338] tipc: Left network mode [ 358.247335][ T3030] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 358.313769][T17407] chnl_net:caif_netlink_parms(): no params data found [ 358.319481][ T5877] Bluetooth: hci2: command tx timeout [ 358.327182][ T1338] IPVS: stopping master sync thread 9301 ... [ 358.465492][T17520] only policy match revision 0 supported [ 358.465517][T17520] unable to load match [ 358.480711][T17520] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3306'. [ 358.823961][T17407] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.844867][T17537] netlink: 'syz.3.3311': attribute type 1 has an invalid length. [ 358.848935][T17407] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.877811][T17407] bridge_slave_0: entered allmulticast mode [ 358.887477][T17538] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3310'. [ 358.902551][T17407] bridge_slave_0: entered promiscuous mode [ 359.092782][T17537] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3311'. [ 359.156504][T17407] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.175861][T17407] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.189585][T17407] bridge_slave_1: entered allmulticast mode [ 359.198761][T17407] bridge_slave_1: entered promiscuous mode [ 359.254435][T17543] veth3: entered promiscuous mode [ 359.276895][T17543] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 359.296508][ T1338] batadv_slave_0: left promiscuous mode [ 359.307985][ T1338] hsr_slave_0: left promiscuous mode [ 359.323319][ T1338] hsr_slave_1: left promiscuous mode [ 359.352382][ T1338] veth0_macvtap: left promiscuous mode [ 360.379844][ T5883] Bluetooth: hci2: command tx timeout [ 360.419071][T17407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.451232][T17407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.606646][T17407] team0: Port device team_slave_0 added [ 360.636036][T17407] team0: Port device team_slave_1 added [ 360.697686][T17580] netlink: 'syz.3.3319': attribute type 10 has an invalid length. [ 360.716973][T17580] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3319'. [ 360.786406][T17486] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.797761][T17486] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.810211][T17486] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 360.846474][T17580] team0: Port device geneve0 added [ 360.872391][T17407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.891963][T17407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.938364][T17407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.956982][T17407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.973682][T17407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.003517][T17407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.057621][T17486] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.069683][T17486] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.080489][T17486] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 361.176840][T17407] hsr_slave_0: entered promiscuous mode [ 361.191077][T17407] hsr_slave_1: entered promiscuous mode [ 361.224673][T17486] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.235547][T17486] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.246417][T17486] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 361.421263][T17600] bond3: entered allmulticast mode [ 361.429853][T17600] 8021q: adding VLAN 0 to HW filter on device bond3 [ 361.437567][T17600] bridge0: port 3(bond3) entered blocking state [ 361.447227][T17600] bridge0: port 3(bond3) entered disabled state [ 361.458830][T17600] bond3: entered promiscuous mode [ 361.465902][T17600] bridge0: port 3(bond3) entered blocking state [ 361.472384][T17600] bridge0: port 3(bond3) entered forwarding state [ 361.529179][ T3030] bridge0: port 3(bond3) entered disabled state [ 361.536623][T17603] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3325'. [ 361.670089][T17610] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3327'. [ 361.720832][ T3030] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.738714][ T3030] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 361.747555][ T3030] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 361.757365][ T3030] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.773051][ T3030] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 361.781829][ T3030] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 361.974830][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.997180][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 362.013022][T17625] netlink: 'syz.1.3330': attribute type 1 has an invalid length. [ 362.031557][ T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 362.047425][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.061981][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 362.086376][ T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 362.458666][ T5883] Bluetooth: hci2: command tx timeout [ 362.571957][T17407] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 362.597043][T17407] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 362.620853][T17407] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 362.657113][T17407] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 362.802018][T17666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3341'. [ 362.922659][T17407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.994383][T17407] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.026605][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.033939][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.089016][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.096257][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.447408][T17693] netlink: 'syz.5.3348': attribute type 2 has an invalid length. [ 363.460409][T17693] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3348'. [ 363.625195][T17696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3349'. [ 363.630198][T17407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.695078][T17699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3350'. [ 363.792058][T17702] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3351'. [ 364.105717][T17717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3356'. [ 364.294037][T17407] veth0_vlan: entered promiscuous mode [ 364.363910][T17407] veth1_vlan: entered promiscuous mode [ 364.444437][T17407] veth0_macvtap: entered promiscuous mode [ 364.484890][T17407] veth1_macvtap: entered promiscuous mode [ 364.624672][T17407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.782358][T17407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.866783][ T1338] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.902063][ T1338] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.934656][T17750] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3363'. [ 364.951368][ T1338] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.964682][ T1338] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.004751][T17750] tipc: Started in network mode [ 365.011799][T17750] tipc: Node identity 3a271c804b11, cluster identity 4711 [ 365.019927][T17750] tipc: Enabled bearer , priority 0 [ 365.054165][T17750] syzkaller0: entered promiscuous mode [ 365.078179][T17750] syzkaller0: entered allmulticast mode [ 365.146754][T17762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3367'. [ 365.175943][T17750] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 365.234984][T17762] hsr_slave_0 (unregistering): left promiscuous mode [ 365.278191][T17760] tipc: Resetting bearer [ 365.295380][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.304606][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.316221][T17771] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 365.363648][T17749] tipc: Resetting bearer [ 365.391479][T17749] tipc: Disabling bearer [ 365.434172][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.456689][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.504991][T17775] bridge_slave_0: left allmulticast mode [ 365.512678][T17775] bridge_slave_0: left promiscuous mode [ 365.525233][T17775] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.552189][T17775] bridge_slave_1: left allmulticast mode [ 365.558251][T17775] bridge_slave_1: left promiscuous mode [ 365.564198][T17775] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.583758][T12667] IPVS: starting estimator thread 0... [ 365.592041][T17775] `: (slave bond_slave_0): Releasing backup interface [ 365.604084][T17775] `: (slave bond_slave_1): Releasing backup interface [ 365.623858][T17775] team0: Port device team_slave_0 removed [ 365.634614][T17775] team0: Port device team_slave_1 removed [ 365.641603][T17775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.649414][T17775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.660519][T17775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.668274][T17775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.678726][T17782] IPVS: using max 23 ests per chain, 55200 per kthread [ 365.696387][T17777] lo: entered promiscuous mode [ 365.713613][T17777] tunl0: entered promiscuous mode [ 365.742954][T17777] gre0: entered promiscuous mode [ 365.773802][T17777] gretap0: entered promiscuous mode [ 365.803826][T17777] erspan0: entered promiscuous mode [ 365.820057][T17777] ip_vti0: entered promiscuous mode [ 365.821897][T17787] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3374'. [ 365.835766][T17787] openvswitch: netlink: Flow key attr not present in new flow. [ 366.033191][T17792] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3375'. [ 366.105693][T17793] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3375'. [ 366.134945][T17800] netlink: 'syz.3.3378': attribute type 6 has an invalid length. [ 366.378024][T17805] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 366.385294][T17805] IPv6: NLM_F_CREATE should be set when creating new route [ 366.451057][T17809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3383'. [ 366.653047][T17826] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 366.653310][T17827] tipc: Started in network mode [ 366.676131][T17827] tipc: Node identity ac1414aa, cluster identity 4711 [ 366.681894][T17823] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 366.719980][T17827] tipc: Enabled bearer , priority 10 [ 366.815866][T17835] netlink: 'syz.3.3389': attribute type 9 has an invalid length. [ 367.129218][T17852] netlink: 'syz.3.3393': attribute type 9 has an invalid length. [ 367.174927][T17856] netlink: 'syz.5.3394': attribute type 1 has an invalid length. [ 367.836678][T17887] bond0: (slave rose0): Error: Device can not be enslaved while up [ 367.844861][ T43] tipc: Node number set to 2886997162 [ 368.035360][T17897] netlink: 'syz.3.3407': attribute type 4 has an invalid length. [ 368.102399][T17901] netlink: 'syz.5.3409': attribute type 11 has an invalid length. [ 368.656845][T17926] __nla_validate_parse: 5 callbacks suppressed [ 368.656865][T17926] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3419'. [ 368.723517][T17933] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 369.365331][T17957] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3425'. [ 369.859938][T17982] xt_time: unknown flags 0xf4 [ 369.916496][T17993] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3437'. [ 369.937731][T17989] netlink: 'syz.2.3436': attribute type 1 has an invalid length. [ 370.024846][T17989] 8021q: adding VLAN 0 to HW filter on device bond1 [ 370.031953][T18000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3436'. [ 370.071328][T18000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3436'. [ 370.215146][T18000] veth1: entered promiscuous mode [ 370.402308][T18012] veth5: entered allmulticast mode [ 370.464460][T18024] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3446'. [ 370.547343][T18028] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3449'. [ 370.586677][T18030] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20004 [ 370.635384][T18032] netdevsim netdevsim1: Direct firmware load for /.€ failed with error -2 [ 370.646751][T18026] netlink: 'syz.3.3447': attribute type 3 has an invalid length. [ 370.667601][T18026] netlink: 'syz.3.3447': attribute type 3 has an invalid length. [ 370.686261][T18026] netlink: 'syz.3.3447': attribute type 3 has an invalid length. [ 370.697355][T18032] netdevsim netdevsim1: Falling back to sysfs fallback for: /.€ [ 370.716184][T18026] netlink: 'syz.3.3447': attribute type 3 has an invalid length. [ 370.763524][T18026] netlink: 'syz.3.3447': attribute type 3 has an invalid length. [ 370.802146][T18026] netlink: 'syz.3.3447': attribute type 3 has an invalid length. [ 370.928220][T18048] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3454'. [ 371.342121][T18066] veth1_vlan: entered allmulticast mode [ 371.430147][T18071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3460'. [ 371.593982][T18082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.797446][T18090] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 372.323777][T18117] tipc: New replicast peer: 0.0.0.0 [ 372.329933][T18117] tipc: Enabled bearer , priority 10 [ 372.336752][T18117] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 372.452778][T18121] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3475'. [ 373.527529][T18167] validate_nla: 47 callbacks suppressed [ 373.527550][T18167] netlink: 'syz.3.3490': attribute type 1 has an invalid length. [ 373.713682][T18172] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 373.784645][T18172] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 373.927224][T18167] gretap1: entered promiscuous mode [ 373.950711][T18167] bond4: (slave gretap1): making interface the new active one [ 373.951583][T18188] __nla_validate_parse: 3 callbacks suppressed [ 373.951598][T18188] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3495'. [ 373.959653][T18167] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 373.996337][T18179] macvlan3: entered promiscuous mode [ 374.001796][T18179] macvlan3: entered allmulticast mode [ 374.009491][T18179] bond4: entered promiscuous mode [ 374.015633][T18179] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 374.037588][T18179] bond4: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 374.070236][T18179] bond4: left promiscuous mode [ 374.134556][T18192] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 374.306721][T18204] netlink: 'syz.4.3499': attribute type 2 has an invalid length. [ 374.484075][T18213] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3504'. [ 374.538757][T18215] Bluetooth: MGMT ver 1.23 [ 374.555354][T18215] ip6_vti0: entered allmulticast mode [ 374.566341][T18214] ip6_vti0: left allmulticast mode [ 374.634113][T18221] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3507'. [ 374.680863][T18218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.874299][T18232] netlink: 'syz.4.3510': attribute type 1 has an invalid length. [ 374.907337][T18232] netlink: 'syz.4.3510': attribute type 2 has an invalid length. [ 374.943153][T18232] netlink: 'syz.4.3510': attribute type 1 has an invalid length. [ 374.968605][T18232] netlink: 'syz.4.3510': attribute type 2 has an invalid length. [ 375.235736][T18246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3515'. [ 375.260635][T18245] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 375.293881][T18251] netlink: 'syz.5.3516': attribute type 12 has an invalid length. [ 375.357351][T18246] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 375.408109][T18246] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 375.499350][T18264] netlink: 'syz.2.3519': attribute type 1 has an invalid length. [ 375.516886][T18264] netlink: 212 bytes leftover after parsing attributes in process `syz.2.3519'. [ 375.574071][T18272] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3522'. [ 375.597516][T18264] netlink: 'syz.2.3519': attribute type 1 has an invalid length. [ 375.636460][T18274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3519'. [ 375.723729][T18274] bridge0: port 1(batadv1) entered blocking state [ 375.745064][T18274] bridge0: port 1(batadv1) entered disabled state [ 375.766028][T18274] batadv1: entered allmulticast mode [ 375.785613][T18274] batadv1: entered promiscuous mode [ 375.940217][T18286] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3526'. [ 376.148728][T18296] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3528'. [ 376.231555][T15052] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 376.241342][T15052] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 376.247776][T18300] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3530'. [ 376.421922][T18307] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 376.558868][T18310] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 376.604250][T18309] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 376.739216][T18326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.993956][T18335] IPVS: persistence engine module ip_vs_pe_À not found [ 377.056840][T18339] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 377.111736][T18339] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€ [ 378.784980][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.056216][T18373] bond0: (slave rose0): Error: Device can not be enslaved while up [ 380.284862][T18391] __nla_validate_parse: 5 callbacks suppressed [ 380.284882][T18391] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3555'. [ 380.332819][T18387] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3555'. [ 380.345827][T18389] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 380.741383][T18391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.762588][T18391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.869490][T18428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3565'. [ 380.877696][T18391] vlan0: left allmulticast mode [ 380.879937][T18428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3565'. [ 380.886511][T18391] veth0_vlan: left allmulticast mode [ 380.899245][T18391] vlan0: left promiscuous mode [ 380.944878][ T59] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 380.959079][ T59] netdevsim netdevsim5 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 380.975434][ T59] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 380.985638][ T59] netdevsim netdevsim5 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 381.017387][ T59] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 381.038887][ T59] netdevsim netdevsim5 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 381.056193][ T59] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 381.065101][ T59] netdevsim netdevsim5 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 381.075949][T18430] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3566'. [ 381.086046][T18430] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 381.097245][T18430] netlink: 'syz.4.3566': attribute type 1 has an invalid length. [ 381.263496][T18438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3570'. [ 381.280754][T18438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3570'. [ 381.323590][T18440] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 381.495456][T18447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3571'. [ 383.764837][T18527] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 383.801137][T18527] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 383.983847][T18505] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 384.004270][T18505] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 384.033344][T18543] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3597'. [ 384.077208][T18505] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 384.105806][T18505] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 384.331106][T18505] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 384.340823][T18505] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 384.426438][T18566] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3600'. [ 384.459045][ T5877] Bluetooth: hci2: command 0x0405 tx timeout [ 384.605537][T18505] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 384.650578][T18505] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 384.683134][T18574] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 384.853252][T18505] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 384.860202][T18505] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 385.370257][T18598] netlink: 'syz.4.3609': attribute type 4 has an invalid length. [ 385.401011][ T13] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.442308][ T13] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.475518][ T13] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.511479][ T13] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.655027][T18612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3613'. [ 385.668109][T18612] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3613'. [ 385.689400][T18611] netlink: 'syz.1.3614': attribute type 1 has an invalid length. [ 385.697194][T18611] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3614'. [ 385.737584][T18612] netlink: 'syz.2.3613': attribute type 1 has an invalid length. [ 385.823942][T18612] gretap1: entered promiscuous mode [ 386.217402][T18638] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3621'. [ 386.576729][T18658] netlink: 'syz.2.3626': attribute type 16 has an invalid length. [ 386.604721][T18658] netlink: 'syz.2.3626': attribute type 17 has an invalid length. [ 386.666233][T18658] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 387.115330][T18686] netlink: 'syz.3.3635': attribute type 10 has an invalid length. [ 387.148417][T18686] netlink: 'syz.3.3635': attribute type 28 has an invalid length. [ 387.165711][T18686] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3635'. [ 387.181342][T18689] tipc: Bearer : already 2 bearers with priority 10 [ 387.191039][T18689] tipc: Bearer : trying with adjusted priority [ 387.202273][T18689] tipc: Enabling of bearer rejected, failed to enable media [ 387.223122][T18688] tipc: Bearer : already 2 bearers with priority 10 [ 387.237654][T18688] tipc: Bearer : trying with adjusted priority [ 387.253825][T18688] tipc: Enabling of bearer rejected, failed to enable media [ 387.413375][T18698] netlink: 'syz.4.3640': attribute type 1 has an invalid length. [ 387.449172][T18698] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3640'. [ 387.804178][T18692] tipc: Started in network mode [ 387.815006][T18692] tipc: Node identity d6efbf155a4c, cluster identity 4711 [ 387.823749][T18692] tipc: Enabled bearer , priority 0 [ 387.831514][T18692] team0: entered allmulticast mode [ 387.836653][T18692] team_slave_0: entered allmulticast mode [ 387.842592][T18692] team_slave_1: entered allmulticast mode [ 387.854527][T18691] tipc: Disabling bearer [ 391.119509][ T49] bond1 (unregistering): Released all slaves [ 391.248058][ T49] bond2 (unregistering): Released all slaves [ 391.378490][ T49] bond3 (unregistering): Released all slaves [ 391.393931][ T49] bond4 (unregistering): Released all slaves [ 391.529879][ T49] bond5 (unregistering): Released all slaves [ 391.653202][ T49] bond6 (unregistering): Released all slaves [ 391.779931][ T49] bond7 (unregistering): Released all slaves [ 391.901682][ T49] bond8 (unregistering): Released all slaves [ 392.029948][ T49] bond9 (unregistering): Released all slaves [ 392.045122][ T49] bond10 (unregistering): Released all slaves [ 392.075963][ T49] bond0 (unregistering): Released all slaves [ 392.092553][ T49] bond11 (unregistering): Released all slaves [ 392.276916][ T49] tipc: Left network mode [ 392.611351][ T49] hsr_slave_0: left promiscuous mode [ 392.617558][ T49] hsr_slave_1: left promiscuous mode [ 392.635612][ T49] veth0_macvtap: left allmulticast mode [ 392.641563][ T49] veth1_macvtap: left promiscuous mode [ 392.647133][ T49] veth0_macvtap: left promiscuous mode [ 393.653499][ T49] IPVS: stop unused estimator thread 0... [ 412.104532][T18716] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 412.107047][T18725] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3648'. [ 412.131209][T18721] bond0: (slave rose0): Error: Device can not be enslaved while up [ 412.576906][T18753] netlink: 'syz.5.3660': attribute type 17 has an invalid length. [ 412.988206][T18773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3666'. [ 413.112927][T18780] nft_compat: unsupported protocol 0 [ 413.162544][T18774] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 413.209219][ T1147] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 20000 - 0 [ 413.224327][ T1147] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 20000 - 0 [ 413.313276][ T1147] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 413.347336][ T1147] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 413.448856][T18787] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3669'. [ 413.485046][T18789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3670'. [ 413.674279][T18799] netlink: 'syz.3.3670': attribute type 16 has an invalid length. [ 413.676670][T18789] 8021q: adding VLAN 0 to HW filter on device bond5 [ 413.698726][T18799] netlink: 'syz.3.3670': attribute type 17 has an invalid length. [ 413.769211][T18799] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 413.848544][T18793] 8021q: adding VLAN 0 to HW filter on device bond5 [ 413.855882][T18793] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 413.872067][T18793] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 414.090610][T18797] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.105804][T18797] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.679997][T18819] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3677'. [ 416.267243][T18821] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3678'. [ 416.419572][T18826] netlink: 'syz.2.3681': attribute type 8 has an invalid length. [ 416.506180][T18830] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3682'. [ 416.750537][T18840] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20004 [ 417.629040][T18841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3683'. [ 417.676844][T18867] netlink: 'syz.3.3692': attribute type 10 has an invalid length. [ 417.684876][T18867] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3692'. [ 417.948867][T18873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3696'. [ 417.979233][T18873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3696'. [ 418.030701][T18876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3695'. [ 418.096996][T18876] gtp0: entered promiscuous mode [ 418.257035][T18887] netlink: 'syz.1.3700': attribute type 10 has an invalid length. [ 418.332094][T18888] tipc: Enabled bearer , priority 0 [ 418.344086][T18889] syzkaller0: entered promiscuous mode [ 418.361879][T18896] netlink: 'syz.4.3701': attribute type 4 has an invalid length. [ 418.378205][T18889] syzkaller0: entered allmulticast mode [ 418.417429][T18887] team0: Port device dummy0 added [ 418.434128][T18888] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 418.581416][T18889] tipc: Resetting bearer [ 418.586846][T18906] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3704'. [ 418.633802][T18879] tipc: Resetting bearer [ 418.735909][T18879] tipc: Disabling bearer [ 419.511057][T18943] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3715'. [ 419.550668][T18943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3715'. [ 419.694814][T18949] IPv6: sit1: Disabled Multicast RS [ 419.724247][T18949] sit1: entered allmulticast mode [ 420.099499][T18956] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 420.424722][T18966] IPVS: set_ctl: invalid protocol: 255 100.1.1.0:20002 [ 420.587075][T18989] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.607435][T18967] workqueue: Failed to create a rescuer kthread for wq "nfc7_nci_cmd_wq": -EINTR [ 420.714569][T18995] tipc: Enabled bearer , priority 0 [ 421.025130][T18995] syzkaller0: entered promiscuous mode [ 421.057277][T18995] syzkaller0: entered allmulticast mode [ 421.125330][T18995] tipc: Resetting bearer [ 421.236712][T19024] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3735'. [ 421.328815][T19027] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3736'. [ 421.569415][T19035] netlink: 'syz.3.3739': attribute type 1 has an invalid length. [ 421.705421][T18999] tipc: Resetting bearer [ 423.533649][T18999] tipc: Disabling bearer [ 423.544361][T19058] lo: left promiscuous mode [ 423.564695][T19055] dvmrp1: entered allmulticast mode [ 423.571854][T19059] tipc: Started in network mode [ 423.587126][T19059] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 423.600564][T19059] tipc: Enabled bearer , priority 10 [ 423.643469][T19062] bridge5: entered promiscuous mode [ 423.649563][T19062] bridge5: entered allmulticast mode [ 423.979926][T19084] openvswitch: netlink: IPv4 tunnel dst address is zero [ 424.025590][T19086] __nla_validate_parse: 4 callbacks suppressed [ 424.025614][T19086] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3753'. [ 424.280837][T19103] netlink: 'syz.4.3759': attribute type 10 has an invalid length. [ 424.289306][T19103] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 424.302891][T19103] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 424.718792][ T43] tipc: Node number set to 4269801492 [ 425.758640][T19192] tipc: Started in network mode [ 425.767974][T19192] tipc: Node identity a6fe4c1fd1b3, cluster identity 4711 [ 425.793431][T19192] tipc: Enabled bearer , priority 0 [ 425.848661][T19194] syzkaller0: entered promiscuous mode [ 425.854186][T19194] syzkaller0: entered allmulticast mode [ 425.879483][T19201] netlink: 'syz.1.3788': attribute type 1 has an invalid length. [ 425.887349][T19201] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3788'. [ 425.913077][T19197] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3787'. [ 425.927474][T19197] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3787'. [ 425.949881][T19197] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3787'. [ 425.990708][T19201] block nbd1: not configured, cannot reconfigure [ 426.035517][T19210] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3789'. [ 426.074527][T19194] tipc: Resetting bearer [ 426.134272][T19191] tipc: Resetting bearer [ 426.179323][T19213] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3790'. [ 426.190748][T19213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3790'. [ 426.256665][T19191] tipc: Disabling bearer [ 426.450853][T19228] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3794'. [ 426.739385][T19237] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 426.757943][T19237] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 426.768382][T19237] openvswitch: netlink: Duplicate or invalid key (type 0). [ 426.776825][T19237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.979606][T19260] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 426.997631][T19259] netlink: 'syz.4.3805': attribute type 2 has an invalid length. [ 427.013873][T19259] Bluetooth: MGMT ver 1.23 [ 427.064647][T19263] netlink: 'syz.1.3804': attribute type 9 has an invalid length. [ 427.904280][T19284] netlink: 'syz.1.3810': attribute type 3 has an invalid length. [ 427.912579][T19284] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3810'. [ 428.114950][T19292] netlink: 'syz.1.3814': attribute type 1 has an invalid length. [ 428.268356][T19303] bridge_slave_0: entered promiscuous mode [ 428.273298][T19305] netlink: 'syz.5.3816': attribute type 1 has an invalid length. [ 428.297734][T19305] netlink: 'syz.5.3816': attribute type 1 has an invalid length. [ 428.574462][T19326] netlink: 'syz.4.3823': attribute type 1 has an invalid length. [ 428.779370][T19336] netlink: 'syz.1.3825': attribute type 5 has an invalid length. [ 429.094034][T19356] __nla_validate_parse: 5 callbacks suppressed [ 429.094056][T19356] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3831'. [ 429.147457][T19359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3832'. [ 429.590654][T19383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3838'. [ 429.840058][T19389] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3841'. [ 429.871923][T19389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.109369][T19408] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3848'. [ 430.292863][T19413] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 430.354234][T19415] netlink: 'syz.2.3851': attribute type 17 has an invalid length. [ 430.382376][T19415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3851'. [ 430.440388][T19415] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3851'. [ 430.485775][T19419] bond2 (unregistering): Released all slaves [ 430.563899][T19427] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3854'. [ 430.714196][T19431] netlink: 'syz.4.3855': attribute type 10 has an invalid length. [ 430.789764][T19435] netlink: 'syz.4.3855': attribute type 10 has an invalid length. [ 430.808798][T19431] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.860614][T19431] bond0: (slave team0): Enslaving as an active interface with an up link [ 430.970652][T19435] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 431.227088][T19454] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3861'. [ 431.345824][T19465] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3863'. [ 432.925731][T19535] netlink: 'syz.5.3883': attribute type 2 has an invalid length. [ 432.949696][T19535] netlink: 'syz.5.3883': attribute type 1 has an invalid length. [ 433.043850][T19547] netlink: 'syz.4.3886': attribute type 1 has an invalid length. [ 433.192263][T19554] netlink: 'syz.5.3887': attribute type 1 has an invalid length. [ 433.305651][T19554] 8021q: adding VLAN 0 to HW filter on device bond4 [ 433.359224][T19571] Dead loop on virtual device ip6_vti0, fix it urgently! [ 433.461854][T19563] bond4: (slave veth7): Enslaving as an active interface with a down link [ 433.484019][T19569] C: renamed from team_slave_0 [ 433.523835][T19569] netlink: 'syz.5.3887': attribute type 1 has an invalid length. [ 433.577377][T19569] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 433.614002][T19550] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 433.671590][T19554] bond4: (slave veth9): Enslaving as an active interface with a down link [ 433.815167][T19588] sctp: [Deprecated]: syz.1.3897 (pid 19588) Use of struct sctp_assoc_value in delayed_ack socket option. [ 433.815167][T19588] Use struct sctp_sack_info instead [ 434.236152][T15858] IPVS: starting estimator thread 0... [ 434.339606][T19612] IPVS: using max 24 ests per chain, 57600 per kthread [ 434.512589][T19629] __nla_validate_parse: 11 callbacks suppressed [ 434.512611][T19629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3911'. [ 434.691875][T19636] netlink: 'syz.5.3914': attribute type 39 has an invalid length. [ 434.753416][T19636] syz_tun (unregistering): left allmulticast mode [ 434.789651][T19639] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3916'. [ 434.813128][T19638] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3916'. [ 434.924366][T19643] netlink: 'syz.3.3917': attribute type 1 has an invalid length. [ 435.161519][T19657] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3922'. [ 435.467724][T19678] validate_nla: 1 callbacks suppressed [ 435.467747][T19678] netlink: 'syz.3.3927': attribute type 1 has an invalid length. [ 435.518296][T19678] netlink: 15 bytes leftover after parsing attributes in process `syz.3.3927'. [ 435.614051][T19686] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3932'. [ 435.646855][T19686] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3932'. [ 435.704865][T19689] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 435.742428][T19689] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3933'. [ 435.764334][T19689] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3933'. [ 435.787717][T19693] netlink: 'syz.3.3934': attribute type 1 has an invalid length. [ 435.815131][T19693] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3934'. [ 435.844008][ T30] audit: type=1800 audit(1757003989.881:5): pid=19693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3934" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC0430818 dev="tmpfs" ino=917 res=0 errno=0 [ 436.172448][T19704] netlink: 'syz.3.3939': attribute type 2 has an invalid length. [ 436.289165][T19711] ªªªªªª: renamed from vlan0 (while UP) [ 436.503249][T19721] batadv1: left allmulticast mode [ 436.508875][T19721] batadv1: left promiscuous mode [ 436.517578][T19721] bridge0: port 1(batadv1) entered disabled state [ 436.682191][T19739] netlink: 'syz.4.3950': attribute type 11 has an invalid length. [ 437.043258][T19739] pim6reg1: entered promiscuous mode [ 437.049041][T19739] pim6reg1: entered allmulticast mode [ 440.221224][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 459.564817][T19768] netlink: 'syz.1.3958': attribute type 10 has an invalid length. [ 459.823951][T19784] netlink: 'syz.1.3963': attribute type 17 has an invalid length. [ 459.832348][T19784] __nla_validate_parse: 7 callbacks suppressed [ 459.832367][T19784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3963'. [ 459.868359][T19784] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3963'. [ 460.187710][T19806] team0: Device vti0 is of different type [ 460.365336][T19818] team0: Port device dummy0 removed [ 460.560407][T19832] netlink: 'syz.2.3979': attribute type 6 has an invalid length. [ 461.039865][T19858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.363440][T19872] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3987'. [ 461.875062][ T12] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 461.883811][ T12] bond0 (unregistering): (slave geneve1): the permanent HWaddr of slave - aa:aa:aa:aa:aa:41 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 462.291065][ T12] bond10 (unregistering): (slave bridge6): Releasing active interface [ 463.865737][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 463.875588][ T12] bond0 (unregistering): Released all slaves [ 464.005047][ T12] bond1 (unregistering): Released all slaves [ 464.021163][ T12] bond2 (unregistering): Released all slaves [ 464.036930][ T12] bond3 (unregistering): Released all slaves [ 464.057661][ T12] bond4 (unregistering): Released all slaves [ 464.199106][ T12] bond5 (unregistering): Released all slaves [ 464.322652][ T12] bond6 (unregistering): Released all slaves [ 464.444010][ T12] bond7 (unregistering): (slave bond8): Releasing backup interface [ 464.453217][ T12] bond7 (unregistering): (slave bond9): Releasing backup interface [ 464.462970][ T12] bond7 (unregistering): Released all slaves [ 464.580332][ T12] bond8 (unregistering): Released all slaves [ 464.695231][ T12] bond9 (unregistering): Released all slaves [ 464.709955][ T12] bond10 (unregistering): Released all slaves [ 464.736304][T19848] team0: Device gtp1 is of different type [ 465.036221][T19881] lo speed is unknown, defaulting to 1000 [ 465.092774][ T12] tipc: Left network mode [ 465.093627][T19884] netlink: 'syz.2.3988': attribute type 13 has an invalid length. [ 465.109157][ T12] IPVS: stopping master sync thread 7098 ... [ 465.129379][T19881] lo speed is unknown, defaulting to 1000 [ 465.139269][T19879] tipc: Enabled bearer , priority 0 [ 465.159293][T19879] syzkaller0: entered promiscuous mode [ 465.164806][T19879] syzkaller0: entered allmulticast mode [ 465.222285][T19881] lo speed is unknown, defaulting to 1000 [ 465.375780][T19884] tipc: Resetting bearer [ 465.423930][T19887] syzkaller1: entered promiscuous mode [ 465.442798][T19887] syzkaller1: entered allmulticast mode [ 465.575878][T19899] "syz.4.3993" (19899) uses obsolete ecb(arc4) skcipher [ 465.693785][T19878] tipc: Resetting bearer [ 465.736470][T19878] tipc: Disabling bearer [ 466.126415][T19913] IPVS: set_ctl: invalid protocol: 50 172.30.0.3:20004 [ 466.238092][T19911] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3996'. [ 466.247778][T19911] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3996'. [ 466.268436][T19911] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3996'. [ 466.289766][T19918] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3998'. [ 466.445710][T19881] infiniband syz0: set down [ 466.476841][T19923] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4000'. [ 466.486419][T19881] infiniband syz0: added lo [ 466.495139][T19925] ================================================================== [ 466.501068][T19923] netlink: zone id is out of range [ 466.503243][T19925] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400 [ 466.510010][T19881] syz0: rxe_create_cq: returned err = -12 [ 466.516271][T19925] Read of size 1 at addr ffff88806e32e0f0 by task syz.1.3999/19925 [ 466.516291][T19925] [ 466.516302][T19925] CPU: 0 UID: 0 PID: 19925 Comm: syz.1.3999 Not tainted syzkaller #0 PREEMPT(full) [ 466.516324][T19925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 466.516336][T19925] Call Trace: [ 466.516344][T19925] [ 466.516352][T19925] dump_stack_lvl+0x189/0x250 [ 466.516376][T19925] ? __kasan_check_byte+0x12/0x40 [ 466.516402][T19925] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.516423][T19925] ? lock_release+0x4b/0x3e0 [ 466.516458][T19925] ? __virt_addr_valid+0x4a5/0x5c0 [ 466.516480][T19925] print_report+0xca/0x240 [ 466.516497][T19925] ? xfrm_state_find+0x2cf2/0x5400 [ 466.516514][T19925] kasan_report+0x118/0x150 [ 466.516538][T19925] ? xfrm_state_find+0x2cf2/0x5400 [ 466.516558][T19925] xfrm_state_find+0x2cf2/0x5400 [ 466.516575][T19925] ? __lock_acquire+0xab9/0xd20 [ 466.516606][T19925] ? xfrm_state_find+0x1da/0x5400 [ 466.516625][T19925] ? __pfx_xfrm_state_find+0x10/0x10 [ 466.516645][T19925] ? __lock_acquire+0xab9/0xd20 [ 466.516671][T19925] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 466.516702][T19925] ? stack_depot_save_flags+0x40/0x860 [ 466.516727][T19925] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 466.516748][T19925] ? __lock_acquire+0xab9/0xd20 [ 466.516780][T19925] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 466.516803][T19925] ? rt_set_nexthop+0x693/0xa80 [ 466.516827][T19925] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 466.516849][T19925] ? xfrm_expand_policies+0x41f/0x6a0 [ 466.516871][T19925] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 466.516895][T19925] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 466.516920][T19925] xfrm_lookup_route+0x3c/0x1c0 [ 466.516941][T19925] udp_sendmsg+0x142e/0x2170 [ 466.516968][T19925] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 466.516989][T19925] ? __pfx_udp_sendmsg+0x10/0x10 [ 466.517014][T19925] ? count_memcg_event_mm+0x21/0x260 [ 466.517039][T19925] ? count_memcg_event_mm+0x21/0x260 [ 466.517063][T19925] ? __pfx_aa_sk_perm+0x10/0x10 [ 466.517086][T19925] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 466.517106][T19925] ? sock_rps_record_flow+0x19/0x410 [ 466.517128][T19925] ? inet_sendmsg+0x29c/0x370 [ 466.517147][T19925] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 466.517167][T19925] __sock_sendmsg+0x19c/0x270 [ 466.517189][T19925] ____sys_sendmsg+0x52d/0x830 [ 466.517209][T19925] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.517231][T19925] ? import_iovec+0x74/0xa0 [ 466.517251][T19925] ___sys_sendmsg+0x21f/0x2a0 [ 466.517270][T19925] ? __pfx____sys_sendmsg+0x10/0x10 [ 466.517302][T19925] ? __fget_files+0x2a/0x420 [ 466.517325][T19925] ? __fget_files+0x3a0/0x420 [ 466.517352][T19925] __sys_sendmmsg+0x227/0x430 [ 466.517372][T19925] ? __pfx___sys_sendmmsg+0x10/0x10 [ 466.517388][T19925] ? do_futex+0x395/0x420 [ 466.517421][T19925] ? rcu_is_watching+0x15/0xb0 [ 466.517453][T19925] __x64_sys_sendmmsg+0xa0/0xc0 [ 466.517472][T19925] do_syscall_64+0xfa/0x3b0 [ 466.517488][T19925] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.517511][T19925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.517528][T19925] ? clear_bhb_loop+0x60/0xb0 [ 466.517546][T19925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.517562][T19925] RIP: 0033:0x7f7e3c58ebe9 [ 466.517578][T19925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.517594][T19925] RSP: 002b:00007f7e3d47d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 466.517613][T19925] RAX: ffffffffffffffda RBX: 00007f7e3c7c6090 RCX: 00007f7e3c58ebe9 [ 466.517627][T19925] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000005 [ 466.517638][T19925] RBP: 00007f7e3c611e19 R08: 0000000000000000 R09: 0000000000000000 [ 466.517649][T19925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.517659][T19925] R13: 00007f7e3c7c6128 R14: 00007f7e3c7c6090 R15: 00007ffe0a8345f8 [ 466.517679][T19925] [ 466.517685][T19925] [ 466.905023][T19925] Allocated by task 17811: [ 466.909443][T19925] kasan_save_track+0x3e/0x80 [ 466.914137][T19925] __kasan_slab_alloc+0x6c/0x80 [ 466.918992][T19925] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 466.924461][T19925] xfrm_state_alloc+0x24/0x2f0 [ 466.929232][T19925] __find_acq_core+0x8a7/0x1c00 [ 466.934078][T19925] xfrm_find_acq+0x78/0xa0 [ 466.938492][T19925] xfrm_alloc_userspi+0x6b3/0xc90 [ 466.943522][T19925] xfrm_user_rcv_msg+0x7a0/0xab0 [ 466.948465][T19925] netlink_rcv_skb+0x208/0x470 [ 466.953234][T19925] xfrm_netlink_rcv+0x79/0x90 [ 466.957932][T19925] netlink_unicast+0x82f/0x9e0 [ 466.962699][T19925] netlink_sendmsg+0x805/0xb30 [ 466.967463][T19925] __sock_sendmsg+0x219/0x270 [ 466.972139][T19925] ____sys_sendmsg+0x505/0x830 [ 466.976906][T19925] ___sys_sendmsg+0x21f/0x2a0 [ 466.981580][T19925] __x64_sys_sendmsg+0x19b/0x260 [ 466.986516][T19925] do_syscall_64+0xfa/0x3b0 [ 466.991014][T19925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.996904][T19925] [ 466.999223][T19925] Freed by task 12682: [ 467.003285][T19925] kasan_save_track+0x3e/0x80 [ 467.007962][T19925] kasan_save_free_info+0x46/0x50 [ 467.012989][T19925] __kasan_slab_free+0x5b/0x80 [ 467.017751][T19925] kmem_cache_free+0x18f/0x400 [ 467.022513][T19925] xfrm_state_gc_task+0x52d/0x6b0 [ 467.027543][T19925] process_scheduled_works+0xae1/0x17b0 [ 467.033088][T19925] worker_thread+0x8a0/0xda0 [ 467.037851][T19925] kthread+0x70e/0x8a0 [ 467.041921][T19925] ret_from_fork+0x3f9/0x770 [ 467.046506][T19925] ret_from_fork_asm+0x1a/0x30 [ 467.051271][T19925] [ 467.053589][T19925] The buggy address belongs to the object at ffff88806e32ddc0 [ 467.053589][T19925] which belongs to the cache xfrm_state of size 928 [ 467.067552][T19925] The buggy address is located 816 bytes inside of [ 467.067552][T19925] freed 928-byte region [ffff88806e32ddc0, ffff88806e32e160) [ 467.081461][T19925] [ 467.083783][T19925] The buggy address belongs to the physical page: [ 467.090374][T19925] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6e32c [ 467.099324][T19925] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 467.107835][T19925] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 467.115470][T19925] page_type: f5(slab) [ 467.119455][T19925] raw: 00fff00000000040 ffff888020acd640 dead000000000122 0000000000000000 [ 467.128048][T19925] raw: 0000000000000000 00000000800f000f 00000000f5000000 0000000000000000 [ 467.136631][T19925] head: 00fff00000000040 ffff888020acd640 dead000000000122 0000000000000000 [ 467.145378][T19925] head: 0000000000000000 00000000800f000f 00000000f5000000 0000000000000000 [ 467.154055][T19925] head: 00fff00000000002 ffffea0001b8cb01 00000000ffffffff 00000000ffffffff [ 467.163155][T19925] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 467.171819][T19925] page dumped because: kasan: bad access detected [ 467.178225][T19925] page_owner tracks the page as allocated [ 467.183932][T19925] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6220, tgid 6218 (syz.3.70), ts 103671930971, free_ts 103670714687 [ 467.203029][T19925] post_alloc_hook+0x240/0x2a0 [ 467.207805][T19925] get_page_from_freelist+0x21e4/0x22c0 [ 467.213353][T19925] __alloc_frozen_pages_noprof+0x181/0x370 [ 467.219153][T19925] alloc_pages_mpol+0x232/0x4a0 [ 467.224003][T19925] allocate_slab+0x8a/0x370 [ 467.228502][T19925] ___slab_alloc+0xbeb/0x1410 [ 467.233189][T19925] kmem_cache_alloc_noprof+0x283/0x3c0 [ 467.238735][T19925] xfrm_state_alloc+0x24/0x2f0 [ 467.243513][T19925] xfrm_state_find+0x37d4/0x5400 [ 467.248443][T19925] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 467.254596][T19925] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 467.260143][T19925] xfrm_lookup_route+0x3c/0x1c0 [ 467.265083][T19925] __ip4_datagram_connect+0x9a5/0x1270 [ 467.270539][T19925] __ip6_datagram_connect+0x9f0/0x1150 [ 467.276002][T19925] ip6_datagram_connect_v6_only+0x63/0xa0 [ 467.281719][T19925] __sys_connect+0x313/0x440 [ 467.286310][T19925] page last free pid 6215 tgid 6213 stack trace: [ 467.292639][T19925] __free_frozen_pages+0xbc4/0xd30 [ 467.297778][T19925] stack_depot_save_flags+0x436/0x860 [ 467.303170][T19925] kasan_save_track+0x4f/0x80 [ 467.307860][T19925] __kasan_kmalloc+0x93/0xb0 [ 467.312465][T19925] __kmalloc_cache_noprof+0x230/0x3d0 [ 467.317842][T19925] kset_create_and_add+0x5a/0x170 [ 467.322869][T19925] netdev_register_kobject+0x1a2/0x310 [ 467.328329][T19925] register_netdevice+0x126c/0x1ae0 [ 467.333524][T19925] macsec_newlink+0x6be/0x11b0 [ 467.338289][T19925] rtnl_newlink_create+0x310/0xb00 [ 467.343408][T19925] rtnl_newlink+0x16d6/0x1c70 [ 467.348097][T19925] rtnetlink_rcv_msg+0x7cf/0xb70 [ 467.353064][T19925] netlink_rcv_skb+0x208/0x470 [ 467.357839][T19925] netlink_unicast+0x82f/0x9e0 [ 467.362623][T19925] netlink_sendmsg+0x805/0xb30 [ 467.367409][T19925] __sock_sendmsg+0x219/0x270 [ 467.372094][T19925] [ 467.374416][T19925] Memory state around the buggy address: [ 467.380134][T19925] ffff88806e32df80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 467.388191][T19925] ffff88806e32e000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 467.396245][T19925] >ffff88806e32e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 467.404312][T19925] ^ [ 467.412038][T19925] ffff88806e32e100: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 467.420113][T19925] ffff88806e32e180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 467.428268][T19925] ================================================================== [ 467.437635][T19923] netlink: get zone limit has 8 unknown bytes [ 467.462148][T19929] netlink: 'syz.1.3999': attribute type 2 has an invalid length. [ 467.470311][T19881] infiniband syz0: Couldn't create ib_mad CQ [ 467.476576][T19881] infiniband syz0: Couldn't open port 1 [ 467.492121][T19929] netlink: 1184 bytes leftover after parsing attributes in process `syz.1.3999'. [ 467.509984][T19925] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 467.517233][T19925] CPU: 0 UID: 0 PID: 19925 Comm: syz.1.3999 Not tainted syzkaller #0 PREEMPT(full) [ 467.526634][T19925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 467.536721][T19925] Call Trace: [ 467.540030][T19925] [ 467.542988][T19925] dump_stack_lvl+0x99/0x250 [ 467.547619][T19925] ? __asan_memcpy+0x40/0x70 [ 467.552287][T19925] ? __pfx_dump_stack_lvl+0x10/0x10 [ 467.557519][T19925] ? __pfx__printk+0x10/0x10 [ 467.562153][T19925] vpanic+0x281/0x750 [ 467.566164][T19925] ? preempt_schedule+0xae/0xc0 [ 467.571053][T19925] ? __pfx_vpanic+0x10/0x10 [ 467.575581][T19925] ? preempt_schedule_common+0x83/0xd0 [ 467.581074][T19925] ? preempt_schedule+0xae/0xc0 [ 467.585976][T19925] ? __pfx_preempt_schedule+0x10/0x10 [ 467.591477][T19925] panic+0xb9/0xc0 [ 467.595233][T19925] ? __pfx_panic+0x10/0x10 [ 467.599693][T19925] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 467.605634][T19925] ? xfrm_state_find+0x2cf2/0x5400 [ 467.610772][T19925] check_panic_on_warn+0x89/0xb0 [ 467.615747][T19925] ? xfrm_state_find+0x2cf2/0x5400 [ 467.620889][T19925] end_report+0x78/0x160 [ 467.625175][T19925] kasan_report+0x129/0x150 [ 467.629721][T19925] ? xfrm_state_find+0x2cf2/0x5400 [ 467.634870][T19925] xfrm_state_find+0x2cf2/0x5400 [ 467.639846][T19925] ? __lock_acquire+0xab9/0xd20 [ 467.644745][T19925] ? xfrm_state_find+0x1da/0x5400 [ 467.649805][T19925] ? __pfx_xfrm_state_find+0x10/0x10 [ 467.655125][T19925] ? __lock_acquire+0xab9/0xd20 [ 467.660017][T19925] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 467.666220][T19925] ? stack_depot_save_flags+0x40/0x860 [ 467.671723][T19925] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 467.678347][T19925] ? __lock_acquire+0xab9/0xd20 [ 467.683253][T19925] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 467.688660][T19925] ? rt_set_nexthop+0x693/0xa80 [ 467.693555][T19925] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 467.698982][T19925] ? xfrm_expand_policies+0x41f/0x6a0 [ 467.704412][T19925] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 467.709919][T19925] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 467.715769][T19925] xfrm_lookup_route+0x3c/0x1c0 [ 467.720661][T19925] udp_sendmsg+0x142e/0x2170 [ 467.725302][T19925] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 467.730894][T19925] ? __pfx_udp_sendmsg+0x10/0x10 [ 467.735872][T19925] ? count_memcg_event_mm+0x21/0x260 [ 467.741194][T19925] ? count_memcg_event_mm+0x21/0x260 [ 467.746522][T19925] ? __pfx_aa_sk_perm+0x10/0x10 [ 467.751414][T19925] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 467.757950][T19925] ? sock_rps_record_flow+0x19/0x410 [ 467.763281][T19925] ? inet_sendmsg+0x29c/0x370 [ 467.768003][T19925] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 467.773323][T19925] __sock_sendmsg+0x19c/0x270 [ 467.778049][T19925] ____sys_sendmsg+0x52d/0x830 [ 467.782851][T19925] ? __pfx_____sys_sendmsg+0x10/0x10 [ 467.788173][T19925] ? import_iovec+0x74/0xa0 [ 467.792707][T19925] ___sys_sendmsg+0x21f/0x2a0 [ 467.797420][T19925] ? __pfx____sys_sendmsg+0x10/0x10 [ 467.802842][T19925] ? __fget_files+0x2a/0x420 [ 467.807479][T19925] ? __fget_files+0x3a0/0x420 [ 467.812286][T19925] __sys_sendmmsg+0x227/0x430 [ 467.816995][T19925] ? __pfx___sys_sendmmsg+0x10/0x10 [ 467.822217][T19925] ? do_futex+0x395/0x420 [ 467.826596][T19925] ? rcu_is_watching+0x15/0xb0 [ 467.831479][T19925] __x64_sys_sendmmsg+0xa0/0xc0 [ 467.836363][T19925] do_syscall_64+0xfa/0x3b0 [ 467.840901][T19925] ? lockdep_hardirqs_on+0x9c/0x150 [ 467.846139][T19925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.852239][T19925] ? clear_bhb_loop+0x60/0xb0 [ 467.856947][T19925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.863004][T19925] RIP: 0033:0x7f7e3c58ebe9 [ 467.867456][T19925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.887177][T19925] RSP: 002b:00007f7e3d47d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 467.895646][T19925] RAX: ffffffffffffffda RBX: 00007f7e3c7c6090 RCX: 00007f7e3c58ebe9 [ 467.903655][T19925] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000005 [ 467.911657][T19925] RBP: 00007f7e3c611e19 R08: 0000000000000000 R09: 0000000000000000 [ 467.919673][T19925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.928213][T19925] R13: 00007f7e3c7c6128 R14: 00007f7e3c7c6090 R15: 00007ffe0a8345f8 [ 467.936233][T19925] [ 467.939518][T19925] Kernel Offset: disabled [ 467.943843][T19925] Rebooting in 86400 seconds..