last executing test programs: 3m57.967591723s ago: executing program 4 (id=833): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x6, r2}, 0x38) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000001980)=@generic={0x3, 0x1, 0x7}) ioctl$FICLONE(r1, 0x40049409, r0) r3 = socket(0x28, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x20, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}}}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x6, r2}, 0x38) (async) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000001980)=@generic={0x3, 0x1, 0x7}) (async) ioctl$FICLONE(r1, 0x40049409, r0) (async) socket(0x28, 0x1, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x20, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}}}}) (async) 3m57.862190634s ago: executing program 4 (id=836): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xffffff33, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000002c0)='rxrpc_client\x00', r4}, 0x18) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='rxrpc_client\x00', r4, 0x0, 0x5}, 0x18) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="ba6afcb610ab89084307c1000004000000008000", @ANYRESHEX=r3, @ANYRES32=r6, @ANYRES8=r1], 0x50) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt(r7, 0xff, 0x4, &(0x7f0000000700)=""/197, &(0x7f0000000800)=0xc5) r8 = socket$kcm(0x21, 0x2, 0xa) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) r12 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r12, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r12, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}, 0xbac00000}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r12, 0x29, 0x5, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r12, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$nl_route(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r9, @ANYRES16=r5, @ANYRES32=r11], 0x24}}, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0xfc00) getsockopt(r8, 0x8000, 0x2, &(0x7f00000004c0)=""/213, &(0x7f0000000300)=0xd5) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000030000000000000000000000000000b50a90ee60784266a06f648ce5a046c7c6f893b3af185f75adc0c625d2c020201d17c1a8b99c98ab"], 0xfc}}, 0x0) r13 = socket$inet(0xa, 0x6, 0xf9c) connect$inet(r13, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r13, 0x5) r14 = accept4(r13, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r14, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xb, 0x8, 0xfff, 0xfffffffa, 0x6}, &(0x7f0000000080)=0x14) socket$nl_xfrm(0x10, 0x3, 0x6) 3m57.572944357s ago: executing program 4 (id=841): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001e000100fdffffff00000000020000000100000700000000080006000200000008000100"], 0x2c}, 0x1, 0x0, 0x0, 0x42816}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x52}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3m57.317079327s ago: executing program 4 (id=844): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@deltclass={0xe0, 0x29, 0x4, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffff, 0x706477bc8a453bc5}, {0xa570ca63477eeda6, 0x1}, {0xf, 0x9}}, [@tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x8, 0x3}}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x94, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0xc, 0x0, 0xd}}, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0xffff0000, 0x2}}, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x8, 0x4d4}}, @TCA_HFSC_USC={0x10, 0x3, {0xe, 0x8, 0x100}}, @TCA_HFSC_RSC={0x10, 0x1, {0x6, 0x45d, 0x3}}, @TCA_HFSC_FSC={0x10, 0x2, {0x5c, 0x42, 0xa}}, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x4, 0x7fffffff}}, @TCA_HFSC_RSC={0x10, 0x1, {0x5, 0x5, 0xfffff66c}}, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x4, 0x7}}]}}]}, 0xe0}}, 0x4008000) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m57.10605494s ago: executing program 4 (id=846): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000040)="d88fb769bff2e262fe836a6663d386bc", 0x20) getsockopt$inet_tcp_buf(r4, 0x6, 0x21, 0x0, &(0x7f00000006c0)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', r3, 0x29, 0xd, 0x7, 0xd72, 0x27, @private0, @loopback, 0x7, 0x700, 0x6858, 0x7f}}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)=@gettfilter={0x4c, 0x2e, 0x300, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x3d5dbae50b062a90, 0x7}, {0x10, 0x7}, {0xd, 0x3}}, [{0x8, 0xb, 0x44f1}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xc1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) 3m56.656516689s ago: executing program 4 (id=850): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@loopback, @mcast1, @empty, 0x7fff, 0x6, 0x8000, 0x400, 0x9, 0x200002}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x2, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0xe72}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r14, @ANYBLOB="250300000000000000000800"], 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close(0x3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r15, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r16, 0x1, 0x0, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x40000001}}, {0x8}, {0x6, 0x11, 0x4000}}]}, 0x4c}}, 0x0) 3m56.405297893s ago: executing program 32 (id=850): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@loopback, @mcast1, @empty, 0x7fff, 0x6, 0x8000, 0x400, 0x9, 0x200002}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x2, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0xe72}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r14, @ANYBLOB="250300000000000000000800"], 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close(0x3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r15, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r16, 0x1, 0x0, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x40000001}}, {0x8}, {0x6, 0x11, 0x4000}}]}, 0x4c}}, 0x0) 15.499880998s ago: executing program 2 (id=3292): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x1, 0x1, 0x2}}, 0x26) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x401, 0x1000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60b3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x4000000) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x40044) 15.305356143s ago: executing program 2 (id=3294): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0874f8f87000fcdbdf25060062000600000008000a01"], 0x24}}, 0x24044094) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='&\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3], 0x28}, 0x1, 0x6c00}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r5, r6, 0x4, r6}, 0x5f) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000009e00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x2c, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x50) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket(0x23, 0x80805, 0x0) listen(r9, 0x0) accept4$tipc(r9, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r8, 0xd0009412, &(0x7f0000001c00)={0x0, 0x7}) 15.14663007s ago: executing program 2 (id=3297): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0x1d, 0x0, 0x20) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x872208442884853f}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, ["", "", "", "", ""]}, 0xd}, 0x1, 0x0, 0x0, 0x4400c054}, 0x40) (async) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="24007f53efcb000000bd59738191040000001a0008fff100000000000000997380c53cb0f846bccf86e34c019d253753bda19cf66bfc54fd79887924613f536246f897eee1c4c2c9a9f2da56d74e5ccb4b673a82cc94985f7b7faab86362e4a6ccd2aa81ae7e11efb94f8da62a0df1fadf2711a28c1405c4c1c936ffbc5ce3dc2ade"], 0x24}}, 0x0) 14.943328265s ago: executing program 2 (id=3300): r0 = socket$inet6(0xa, 0x802, 0x0) socket$kcm(0x10, 0x0, 0x0) (async) r1 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800060000000401a800080008000a400400000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r0}) socket$inet6(0xa, 0x3, 0x3c) (async) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000085000000d000000095"], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000001580)="e0856497d56cf0f21a0000000010", 0x0, 0x20000700, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_NOOP(r6, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="1c012cbd7000fcdbdf250000000008001700", @ANYRES32=r7, @ANYBLOB="14001f0000000000000000000000ffffac1414bb"], 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x10008004) unshare(0x22020400) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r8, 0xad7f585b85390de9) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000f0605280000000000000000010000040511010005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x240408c0}, 0xc0) (async) sendmsg$IPSET_CMD_GET_BYINDEX(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000f0605280000000000000000010000040511010005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x240408c0}, 0xc0) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000080}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, 0x6, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x7) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4000, 0x10, @mcast1, 0x5}, 0x1c) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'bridge_slave_0\x00', 0x20}) ioctl$TUNSETLINK(r10, 0x400454cd, 0x308) (async) ioctl$TUNSETLINK(r10, 0x400454cd, 0x308) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xfdef}], 0x1) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f00000000c0)=@bpq0, 0x10) (async) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f00000000c0)=@bpq0, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000440)}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000440)}, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x884, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r11, 0x84, 0x15, &(0x7f00000001c0)={0x1}, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 14.576036477s ago: executing program 2 (id=3304): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061106c000000000063012c00000000b10095000000020000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xd, '\x00', 0x0, @sk_skb}, 0x48) 14.463035517s ago: executing program 2 (id=3306): unshare(0x24060400) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xa}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}]}}}]}, 0x50}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000080)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r1}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xb, &(0x7f0000000340)=""/233, 0x0, 0x11}, 0x80) 5.600423785s ago: executing program 1 (id=3395): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x1, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x15, 0x8000, 0x5}}]}]}]}, 0x4c}}, 0x24040800) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x400000000000003, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x60}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x6, 0x78, 0x6, 0x7, 0xa, @mcast2, @loopback, 0x20, 0x10, 0x7, 0x8}}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=@ipv4_newroute={0x794, 0x18, 0x400, 0x70bd29, 0x25dfdbff, {0x2, 0x10, 0x14, 0x6, 0xff, 0x1, 0x0, 0xa, 0x5800}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}, @RTA_OIF={0x8}, @RTA_TABLE={0x8, 0xf, 0x81}, @RTA_ENCAP={0x748, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x744, 0x1, {{0x2, {0x2b, 0x6, 0x4, 0x3, 0x9, 0x40, 0x400, [@local, @private2, @ipv4={'\x00', '\xff\xff', @local}]}}, [@ipv4={'\x00', '\xff\xff', @local}, @mcast2, @local, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, @empty, @mcast2, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x41}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private1, @loopback, @loopback, @private2, @mcast1, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0xa}, @empty, @local, @private0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @remote, @loopback, @loopback, @private1, @loopback, @mcast1, @remote, @local, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @dev={0xfe, 0x80, '\x00', 0x10}, @private1, @ipv4={'\x00', '\xff\xff', @remote}, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @ipv4={'\x00', '\xff\xff', @remote}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @empty}, @mcast1, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, @private2, @dev={0xfe, 0x80, '\x00', 0x25}, @empty, @mcast2, @empty, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @empty, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @remote, @mcast1, @remote, @dev={0xfe, 0x80, '\x00', 0x1b}, @dev={0xfe, 0x80, '\x00', 0xb}, @private1, @empty, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @ipv4={'\x00', '\xff\xff', @empty}, @remote, @dev={0xfe, 0x80, '\x00', 0x3d}, @empty, @dev={0xfe, 0x80, '\x00', 0x35}, @local, @rand_addr=' \x01\x00', @private1, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @loopback, @private2, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private2, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @loopback, @loopback, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x18}]}}}, @RTA_DST={0x8, 0x1, @remote}, @RTA_IIF={0x8, 0x3, r3}, @RTA_PREFSRC={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x794}}, 0x0) 5.400058575s ago: executing program 1 (id=3397): r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000100009050000000000000000b1ff2e5c5360538c5698b6b7f39c417223b4d07456d68ee6758887d396e5c839d5a9000080afc7872d3c4a648166b916526af53872845d1f1ac1df1d4db700301c32882813fb5aad2faf74aaeeb870af1ed5a0fd551829fcd1dcccc26cf6a064e1c271394e2ef9ba127e7a8091b7ae725cf193b9cf29aa4de9082491d489819b"], 0xe0}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000b030000000000000000000002"], 0x0, 0x3e}, 0x20) socket$kcm(0x29, 0x7, 0x0) ioctl$IMGETVERSION(r3, 0x80044942, &(0x7f00000000c0)) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x6}, {0xf}, {0xe, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x1) 5.231927787s ago: executing program 1 (id=3401): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, 0x0) 5.117377078s ago: executing program 1 (id=3403): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @private1, 0x400}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000180)={0x0, 0x1, [@empty]}) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="186000ad6b000001000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x90) 4.691915986s ago: executing program 3 (id=3407): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10002) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 4.436058804s ago: executing program 1 (id=3411): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000001800000000000000000200001902000006000006000000000000000000", @ANYRES32=r1, @ANYBLOB="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"/327, @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x20000840) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@private1, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x4e22, 0x7, 0x4e24, 0x8, 0x2, 0x80, 0xa0, 0x1d, 0x0, r3}, {0x3, 0xfffffffffffffffc, 0x32, 0x9, 0x4, 0x8, 0x800, 0x1}, {0x9, 0x6, 0x200, 0x4}, 0x3, 0x6e6bb0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0xff}, 0xa, @in=@private=0xa010102, 0x0, 0x1, 0x1, 0x6, 0x8, 0x0, 0xc}}, 0xe8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000003c0)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="b33f9ab468d9f9b102d3bb04c2e011944be960bbed0564c4a82d42f7037acd2a6ae1d5240e7d8498cd1aaeea262f8dbf773ced9a90edfd5d254d5d73719ab58625dabd90f33e0ba10b5d0875277b275822af169a40a938c0b9381bd3a418b4a3e1959d46eef5bacba515d5339e0219ca610cefc80d1c1c88e3767d41a5701b0da4ab6fb8cf1b8c9b4ab38d3e607c7591e3db80ae4fc17af5df60dee1cb321e81674b4e95950276a394e6aa59b4982778fb19bf057422a7130fa08993ffe15133b0b5f26ff9e7f937a6a922c5f43b6dddbbce743e9d"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}]}]}, 0x2c}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES16=r6, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call]}, &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r7, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32, @ANYBLOB="1400"], 0x48}}, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e24, 0x4f, @mcast2, 0x3}, 0x1c) r11 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000240), &(0x7f0000000380)=0x4) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="e85301002cbd701004000000050000000600010005000000000009000200000008000b000010000008000c00a80a0040050013000200"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 4.284129082s ago: executing program 1 (id=3413): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002240)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x236}, @TCA_POLICE_TBF={0x3c}], [@TCA_POLICE_PEAKRATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e22, @private=0xa010101}, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@bridge_dellink={0x20, 0x11, 0x4, 0x40000000, 0x0, {0x7, 0x0, 0x0, 0x0, 0x10}}, 0x20}}, 0x4000) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r4, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3c}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000010c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800007c6a8f085e5bafc905bf0d92a7630c187a5a4008", @ANYRES16=r6, @ANYBLOB="010029bd7000fedbdf251500000008000300", @ANYRES32=r7, @ANYBLOB="0c0006000000000000000000050029000000000008002c00ad050000"], 0x38}, 0x1, 0x0, 0x0, 0x4040001}, 0x854) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073016200000000009500000000000000a6692aae1a43fa0bf68bbf0c19b1e9020b3ed65b5d9fdfc2ca5fe8966d8b6e8212a5c72a2c32d3e821d446355e043be398137c9733d3925e4280e1224bd05ba6f04f93f5ac29bc54caed1fc7f417b74304197b062f10950ce043bf3bddf4d824304dbe407b281b030f592f85bc23d29dd493b9003386"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 3.700121434s ago: executing program 3 (id=3417): r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000080)=0x3, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000280)=0x1, 0x4) 2.166239741s ago: executing program 5 (id=3418): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002080)=ANY=[@ANYBLOB='B\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010d00000000000000000c00000004000580"], 0x18}}, 0x0) 2.114420596s ago: executing program 0 (id=3419): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x10c, 0x24, 0x20, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x5, 0xffe6}, {0x7, 0xfff3}, {0x1, 0x5}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x80}, @TCA_RATE={0x6, 0x5, {0x5, 0x7}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x7f, 0x8, 0x410, 0x1, 0x7fffffff, 0x5}}, {0x4}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xda}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x2, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x4}, @TCA_FQ_PIE_TARGET={0x8}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_RATE={0x6, 0x5, {0x3, 0xc0}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @qdisc_kind_options=@q_cbq={{0x8}, {0x64, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0xa, '\x00', 0x3, 0x9, 0x0, 0x9}}, @TCA_CBS_PARMS={0x18, 0x1, {0x39, '\x00', 0x1, 0x4, 0x8e8, 0x9a90}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x0, 0x7fffffff, 0x8, 0x2}}, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x5, 0x0, 0x3, 0xffffffbc}}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000480)={r3}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x1c, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0xa7ff1d5e2f32a483}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)={0x1c, r8, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x81) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r11, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r5) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r13 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_process_wait\x00', r12}, 0x18) r14 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r13}, 0x8) r15 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r15, 0x11, 0x0, 0x0, @void, @value=r14}, 0x20) r16 = socket$nl_route(0x10, 0x3, 0x0) r17 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r17, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@bridge_setlink={0x17, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_NUM_RX_QUEUES]}, 0x2c}}, 0x0) r18 = socket$nl_route(0x10, 0x3, 0x0) r19 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r19, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=r18], 0x90}}, 0x0) 1.924083794s ago: executing program 5 (id=3420): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3d}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000040)=@framed={{0x3d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x11}, [@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x30}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) 1.905522419s ago: executing program 3 (id=3421): socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x13) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0xc5, 0x114}, 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x80c4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1.758230563s ago: executing program 5 (id=3422): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x6, 0xb1aa}, &(0x7f0000000040)=0x18) (async) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x402) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) accept(r1, 0x0, 0x0) 1.540012719s ago: executing program 0 (id=3423): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="840000001500000129bd7000fbdbdf250a1004fe", @ANYRES32=0x0, @ANYBLOB="080009000500000014000604060000000300000005000000e7000000140006000100000005000000020000000000000014000600010000000600000009000000ea0a0000140006000400000000040000000000000500000014000100200100"/108], 0x84}}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x20}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0xf, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000faa6a2312ca895e2fea8bda02adccfd73fbdddcd38ebff795130a30600000000658db56c9d7cfe32f49f0e0f81"], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x26be2, r5, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="170000001500010029bd7000fedbdf252d"], 0x18}}, 0x20000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000840)={r6}) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x90}}, 0x4001) (async, rerun: 64) setsockopt(r6, 0x84, 0x11, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) (rerun: 64) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = accept$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @dev}, &(0x7f0000000780)=0x10) ioctl$sock_inet_SIOCADDRT(r11, 0x890b, &(0x7f00000007c0)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @loopback}, 0x9, 0x0, 0x0, 0x0, 0xb, 0x0, 0x2, 0x6, 0x1ff}) (async) sendmsg$NLBL_MGMT_C_ADD(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r9, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x80) (async) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, r12, 0x8, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xfffffffa}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4884}, 0x8050) (async, rerun: 32) r13 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) (async, rerun: 64) r15 = socket(0x29, 0x800, 0x0) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000180)={'syztnl2\x00', r14, 0x7800, 0x10, 0x4, 0xe1, {{0x13, 0x4, 0x0, 0x4, 0x4c, 0x68, 0x0, 0x2, 0x4, 0x0, @remote, @rand_addr=0x64010101, {[@lsrr={0x83, 0x2b, 0xd0, [@loopback, @rand_addr=0x64010102, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @remote, @remote, @dev={0xac, 0x14, 0x14, 0xd}, @broadcast, @rand_addr=0x1]}, @generic={0x7, 0x3, "81"}, @rr={0x7, 0x7, 0x83, [@rand_addr=0x64010101]}]}}}}}) bind$xdp(r15, &(0x7f0000000300)={0x2c, 0x0, r16, 0x6}, 0x10) (async, rerun: 64) sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) (rerun: 64) sendmsg$NL80211_CMD_SET_NOACK_MAP(r15, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)={0x40, 0x0, 0x10, 0x70bd23, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0xb}}}}, [@NL80211_ATTR_NOACK_MAP={0xffffffffffffff09, 0x95, 0xc}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x81}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x20}, 0x0) 1.53823606s ago: executing program 5 (id=3424): syz_emit_ethernet(0x28e, &(0x7f00000000c0)=ANY=[@ANYBLOB="e727dc07001f00000000000086dd609907a602582c03cb697a653e336f000000500000000000ff0200000000000000000000000000010102002e000000000000"], 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbff, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xf}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"], 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) 1.371909219s ago: executing program 3 (id=3425): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000380)=ANY=[@ANYBLOB="60b80000", @ANYRES8=r0, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES64=r0, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$sock_timeval(r0, 0x1, 0xad14fb6fe06ff515, &(0x7f00000001c0), &(0x7f0000000400)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) close(r5) close(r2) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.27226218s ago: executing program 5 (id=3426): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4a301, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) write$tun(r2, &(0x7f0000000240)={@val={0x0, 0x1c}, @void, @mpls}, 0x4) close(r1) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r10, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x100, 0x6, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_CORR={0x10, 0x1, {0x9f, 0x0, 0x9}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000180)) (async) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.112249558s ago: executing program 0 (id=3427): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000cc0)=@l2tp6={0xa, 0x0, 0x1000, @mcast1, 0x7, 0x83}, 0x80, &(0x7f0000001600)=[{&(0x7f00000001c0)="f4000900062b3325fe80000000000000dc8b850f23848f7e5cc0a57f32cd8caf80ff007a2f3ce32a", 0x28}], 0x1}, 0x800) r1 = socket(0x1a, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_SHAPER={0x6}]}}}]}, 0x90}}, 0x20000000) 967.026518ms ago: executing program 0 (id=3428): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0xc8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_RULE_USERDATA={0x64, 0x7, 0x1, 0x0, "7156853f0c2b11a5388e850859e9e8aecadc4c40e332079d06685db9ed3aa64ae8f9a42b7ec54949b1dcf7a193d5d62534b3ccff0dc081e6fbd5a3ff17007d9aee5f391d28967c4dcbe7eda7567a26e93fc314b8c554f8ec7d8303f522e52e65"}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88b5}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xc6efb16da5a96679}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8808}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x13c}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0xfffffffe, 0x4) 850.404283ms ago: executing program 0 (id=3429): syz_emit_ethernet(0x126, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0xf0, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '\t\x00', 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0x0, 0x15, '\x00', [@generic={0xf}, @generic, @ra, @generic={0x0, 0x85, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f"}, @generic={0x0, 0xe, "8b168e4b48529453d91cea424030"}, @calipso={0x7, 0x8}]}]}}}}}}}, 0x0) unshare(0x2000400) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r0, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={r2}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r3, 0x0, 0x9}, 0x18) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='mctp_key_release\x00', r3, 0x0, 0x5}, 0x18) close(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e3, &(0x7f0000000180)={r2, r6}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0xfffffffb}, 0x10}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r7}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff}) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@multicast, @random="07a24f79ee3f", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, ' \x00', 0x30, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {0x0, 0x883e, 0x30, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "aaf43bbacf0d7d4dd62d252269d4c77febb30ee631ad1be1a15e592d3678edb6aaec874e"}}}}}}}, 0x0) 792.072952ms ago: executing program 3 (id=3430): r0 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000340)="7155b506edb24822da43f6c2a0b5ce2b40b0ec718aca10ae53cc28d1450e844eb4ec512f6968cb25f7c89e54f319df5a500000a467048e926b327c99c786d163734c9ded0be5ea02e4fcc7bb7b6bd0fd2fca27a4e17c3ac1a71c19bfd6770cedd6df3172c534213f8afd48cf028b9188dcc2fb1d9abadccdd4e6b964e249507921d2236e34735722ea7130954ee997f67950c1d7477fee42cb0fdb885c8b18258ba79d179eba5279ce1fd01e325e2516af7096b27ed72b6706d973a76622ee87229dee597ca72a5375427806ab1e487a72461a29b59ee5a37dab21e4ba03a7c7e94500"/241, 0x155) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}}, 0x0) 513.971082ms ago: executing program 3 (id=3431): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="09000000020000006d0500000100000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x50) r1 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000060a090400000000000000000200000618000480140001800a000100696e6e657200000004000280090001"], 0x6c}, 0x1, 0x0, 0x0, 0x40000880}, 0x0) recvmmsg(r2, &(0x7f0000001a80)=[{{&(0x7f0000000200)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000300)=""/244, 0xf4}], 0x1, &(0x7f0000000440)=""/3, 0x3}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)=""/144, 0x90}, {&(0x7f0000000540)=""/240, 0xf0}, {&(0x7f0000000640)=""/23, 0x17}], 0x3, &(0x7f0000000700)=""/235, 0xeb}, 0x8b6}, {{&(0x7f0000000940)=@nfc_llcp, 0x80, &(0x7f0000000900)=[{&(0x7f0000000800)=""/11, 0xb}], 0x1, &(0x7f0000001040)=""/135, 0x87}, 0x4}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000a00)=""/138, 0x8a}], 0x1}, 0x9}, {{&(0x7f0000000b00)=@l2tp, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000b80)=""/224, 0xe0}, {&(0x7f0000000c80)=""/190, 0xbe}, {&(0x7f0000001c80)=""/203, 0xcb}, {&(0x7f0000000e80)=""/182, 0xb6}], 0x4}, 0xfffffff2}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000f80)=""/138, 0x8a}, {&(0x7f0000000d80)=""/226, 0xe2}], 0x2, &(0x7f0000001180)}, 0xbf}, {{&(0x7f00000012c0)=@qipcrtr, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001340)=""/171, 0xab}, {&(0x7f0000001400)=""/164, 0xa4}], 0x2, &(0x7f0000001500)=""/218, 0xda}, 0x8}, {{&(0x7f0000001600)=@xdp, 0x80, &(0x7f0000001980)=[{&(0x7f0000001680)=""/205, 0xcd}, {&(0x7f0000001780)=""/14, 0xe}, {&(0x7f00000017c0)=""/145, 0x91}, {&(0x7f0000001880)=""/242, 0xf2}], 0x4, &(0x7f00000019c0)=""/185, 0xb9}, 0x6}], 0x8, 0x40000023, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r3, &(0x7f0000000880)=ANY=[], 0xffdd) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000001200)=ANY=[@ANYBLOB="02180000180000000000000000000000030005000000000002000000e000000200000000000000000800120000000000000000000000000010000000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aa030006000000000002004374ffffffff000000000000000008001900000000000a00000000000000ff020000000000000000000000000001000000000a"], 0xc0}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40ad01, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r7, 0x11, 0x65, 0x0, &(0x7f0000000100)) r8 = socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) connect$inet6(r1, &(0x7f0000000880)={0xa, 0x4e23, 0x9, @remote, 0x80000001}, 0x1c) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="3103000000000000000008000020"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x401c5820, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0xb) ioctl$TUNSETDEBUG(r6, 0x400454c9, &(0x7f00000000c0)=0x3) 348.916644ms ago: executing program 5 (id=3432): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x52, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000001a00)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003}, 0x6d) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r11, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) getsockname$packet(r10, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xa) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r12], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r13], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="3d9f26bd7000fcdbdf253200000008000300", @ANYRES32=r14], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000400) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000018c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001880)={&(0x7f0000000380)={0x1500, r2, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_IE={0xf8, 0x2a, [@mesh_id={0x72, 0x6}, @rann={0x7e, 0x15, {{0x0, 0x1}, 0x10, 0x6, @device_b, 0x3, 0xffffffff, 0x7}}, @mesh_chsw={0x76, 0x6, {0x0, 0x1, 0x2c, 0x922c}}, @tim={0x5, 0xcb, {0x7, 0x4d, 0x7, "b0eb1aee61d6a067b01232e0ed5a00a8dbf04c8539cf0524cd6714185dc363388ce7dfb155c3496a12d53e9101eb83d768efcb86c163ab669e968244cfd7a0944037ceaaf78fd771bed7d4d094f2628d7c3d737941b4a9c1f445a1c031ec9224c9e7bb79bac798d9c355c059eb21ffd3c98da80da64822ab122a7ad81d1d39704e5c87e93f1741890ac80f794875c00cc316277fc405ae126b14eb956d8c1507137fb366f5f4b4e9f872061cc55134bef9fcfbe00be6d873c5740643ea22fa91c15fc81a8d7595c2"}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x16, 0x80, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x6, 0xd, 0x5}}, @supported_rates={0x1, 0x4, [{0x24}, {0x36, 0x1}, {0x2}, {0x1}]}, @supported_rates={0x1, 0x4, [{0x6c}, {0x12, 0x1}, {0x12, 0x1}, {0x36, 0x1}]}]}, @NL80211_ATTR_IE={0x26, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @chsw_timing={0x68, 0x4, {0x40, 0x5}}, @peer_mgmt={0x75, 0x4, {0x1, 0xfc, @void, @void, @void}}, @channel_switch={0x25, 0x3, {0x0, 0xb6, 0xf}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3, 0x10}}]}, @NL80211_ATTR_PROBE_RESP={0x89, 0x91, "b0e8a8e8c37712b35d64b762cff72425b0e2dac0a945043399b4953e5d69acf7ae94ba1a35eb6eefc1c00286ec8d693e45998c10d79ddd753fcef5a764894a9deee7184e251373e6133bbc27f720f36b4e10dd641cca5941f8b4dfc54a3d67eebd7e9a9fb5a96d52c557a3fb333552f5f3dd8280ed864fa659fab1ab22286206598390a089"}, @NL80211_ATTR_IE={0x10, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0x5}}, @dsss={0x3, 0x1, 0xb5}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x19c, 0x80, [@mic={0x8c, 0x18, {0x42e, '%-I6Kg', @long="671ea530dc555070655b7bbef228333b"}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @rann={0x7e, 0x15, {{0x0, 0x3}, 0x0, 0x8, @device_b, 0x0, 0x1ff, 0x3}}, @preq={0x82, 0x2b, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0xc, 0x1, 0xe, @device_a, 0x80, @value, 0x6, 0x2, 0x1, [{{}, @broadcast}]}}, @preq={0x82, 0x78, {{0x0, 0x1, 0x0, 0x0, 0x1}, 0x1b, 0x6, 0x9, @broadcast, 0xb, @value, 0xb826, 0x1, 0x8, [{{0x1, 0x0, 0x1}, @device_a, 0x100}, {{0x0, 0x0, 0x1}, @device_a, 0x73ddf880}, {{0x0, 0x0, 0x1}, @device_a, 0x8}, {}, {{}, @device_a, 0x4}, {{0x1, 0x0, 0x1}, @device_a, 0x12}, {{}, @device_b, 0xfffffffb}, {{0x0, 0x0, 0x1}, @broadcast}]}}, @challenge={0x10, 0x1, 0x64}, @chsw_timing={0x68, 0x4, {0x7}}, @cf={0x4, 0x6, {0x3, 0x1c, 0x1, 0xfffc}}, @random_vendor={0xdd, 0x9f, "178e2b51da973eb587b1a6bc5df5e9a14c66c0129959bf7c15918ba0273a8b9388d2df8d9defaacaad4817b2e12ce72de8dd57a7f9f931a30bd10a06891e6d77037dfd5718024fe548ce073a464738f025d18a289ccd3f43c7ba4232229697fca7532494b57133c33d4749d575a55bc6164a327f42dd55b73bbacd1935b60f2d72cd3cdf373c09a75dbd95f40c2102e48b815815de4009796f9e17fa59f345"}, @chsw_timing={0x68, 0x4, {0x2459, 0xb96}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x1089, 0x7f, [@ssid={0x0, 0xf, @random="7a1d26a175a2f9b784a4c512145f1f"}, @chsw_timing={0x68, 0x4, {0x1000, 0x1ff}}, @ibss={0x6, 0x2}, @measure_req={0x26, 0x1003, {0x4, 0x7, 0x3, "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"}}, @measure_req={0x26, 0x63, {0x8, 0x3, 0x7, "73cd0f7caa40925b2f92358092f5f2ecc006cb317be53cc15bfa2fd43eb5b91df96f17d48d8a19ce214b0c7bf3af16e4a13ce5fe4e2ff214a2159cb3d4788e30f6c9408a1199c08c444f35017e78a529e147d728c6dec0289bb27d64819bce4b"}}]}, @NL80211_ATTR_BEACON_TAIL={0xe8, 0xf, [@mesh_chsw={0x76, 0x6, {0xe, 0x2, 0x14, 0x1a}}, @channel_switch={0x25, 0x3, {0x0, 0x3, 0x5a}}, @measure_req={0x26, 0xd5, {0x1, 0x0, 0xea, "45242bc2ad28457822dc57d2a839ff82f92a6852985a4a579c259318a3541b8a979fe6e24cf8d8d0b1f8793c18e315ef18d25dc915e5ecee6e446272d13fc43d37f7f722a3a555aa4af6c9c2b8e273382c0b998e85a14259454fbe8fa55ee2ef2f98501f69e2e521a1e62bf57e3c17735ed7f9f89abe50b496a85ca768f19442e548c96a5fbbf7a8327b33b795e7540019252d1b2332bf352d698f71ae26aa0f207f29b43783bc3f3d624dfdf3a31aa881758e3acb71637e9104ed3dd2a460448c9c304eb0513af53a7051afa8b1ddb6acc6"}}]}]}, 0x1500}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000001900)=""/185, &(0x7f00000019c0)=0xb9) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x3e, 0x10b, 0xfffffffc, 0x25dfdbfd, {0x4, 0x7c}, [@nested={0x8, 0x136, 0x0, 0x1, [@typed={0x4, 0x2, 0x0, 0x0, @binary}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r15 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x138, r15, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x138}, 0x1, 0x0, 0x0, 0x40875}, 0x40) 0s ago: executing program 0 (id=3433): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipmr_getroute={0x1c, 0x1a, 0x300, 0x70bd29, 0x25dfdbfb, {0x80, 0x0, 0x14, 0xa, 0xff, 0x0, 0xfd, 0xa, 0x600}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000100)={0x3, 'ipvlan1\x00', {0x9}, 0x200}) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x80, 0x1, 0x8001, 0x5, {{0x3c, 0x4, 0x0, 0x1, 0xf0, 0x64, 0x0, 0x4, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x2b, 0x66, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x35}, @dev={0xac, 0x14, 0x14, 0x13}, @multicast1, @local, @broadcast, @private=0xa010101, @local, @loopback, @empty]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xc7, 0x3, 0xf, [{@private=0xa010102, 0x25c9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@local, 0x7}]}, @lsrr={0x83, 0x27, 0xb4, [@rand_addr=0x64010101, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty, @remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x94, 0x10, "1234f447ad2513a8da8c233edfc4"}, @ssrr={0x89, 0x7, 0xd, [@local]}, @timestamp_prespec={0x44, 0x14, 0xc4, 0x3, 0x8, [{@rand_addr=0x64010100, 0x200}, {@private=0xa010101, 0x3}]}, @cipso={0x86, 0x3b, 0x3, [{0x0, 0x6, "883e70ee"}, {0x7, 0x10, "617016186bd9afccc8a62f33c1ae"}, {0x6, 0xe, "22531763d1c50cdff5cd6465"}, {0x7, 0xc, "b18fd624ac33c73c8094"}, {0x0, 0x5, "339d2d"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) r3 = socket$inet_sctp(0x2, 0xa7269c0cbdc5f8ce, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={r4}, &(0x7f00000003c0)=0x8) vmsplice(r0, &(0x7f0000000780)=[{&(0x7f0000000400)="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", 0xfb}, {&(0x7f0000000500)="a33546d37862a08d6f34d0fc3d46e28c6f872fb1f7dd97af17807e2648fc194e7eaf1860de8fcebe801034fd084bdccbc569d42b20601916d270c8e604be0dbeae1bfe8ecb752aa32c923299b9047f10710cc67ad44b185c78f0d285c870a6750ebe493a46ec01f41997b2a7942bd282832659383ad485aeced6e3893ef5f7c4847a80ddaff7da01b83cd9798caf028507a3a317f125eac1223f08f3fa500b5d69107f0a54cf131b49804c432c1c6e13b9312163a5fdae272963a73b3139961dcba1ce68e817d7ef2828cda4dd8dc91ed039", 0xd2}, {&(0x7f0000000600)="ef84dc60dad4cbae682d6c041b9480e686563ab9c08fa7465b29ca011511dc2e4c2249e8309c6c9ea814b9c83cf7d7947e8fdf4cca63c5eada4a116792d2eaa5afdf39c00d62ea483b484563db198e7f385806df135fbd798404bb0c3a74250e2d6fe7d44a494ec733ce4a390a737c539440ee28b0033b3d301f4202e9471ccffff2aa8dfcdccd14834aea0c4e3629ce2e0ed21b105d9c75c53a501dcf7fb2a28cf785a4b59288c466e74450311ba464aeb187f166f73fda4e70a3a93459c2423668777d9322afb14390897cd69d68af4ca5de8f607d01f94ae910468747219c242d54e614f56e989059a4b601950d5a0c304a", 0xf3}, {&(0x7f0000000700)="996553eb314506869033cae79bb66dc034fa3d80c4e75b07e858ef9c5076f77ccb924c6bde05b8e0b74c1ae91d6a843c01b64ffc9470d0b4f5d8b22e950cec24096ca9470cbdc90a8a4ef0c51382950acefa1e65007ad7", 0x57}], 0x4, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r6, 0x800, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000840) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000900)={'virt_wifi0\x00'}) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(essiv-cbc-aes-sha256-neon,sha3-224)\x00'}, 0x58) r8 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f00000009c0)={@local, 0x42, r2}) bind$inet(r3, &(0x7f0000000a00)={0x2, 0x4e23, @remote}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000a80)={r4, 0x1c, &(0x7f0000000a40)=[@in6={0xa, 0x4e22, 0xfffffff8, @private1, 0x9}]}, &(0x7f0000000ac0)=0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r5) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r9, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x40, r10, 0x222, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x20004011) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000c40)={0x2b, 0x41, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x30, {0x2, 0xa, 0x8, 0x8f00, [0x2, 0x7, 0x3, 0xa9ba, 0x6]}}, @hao={0xc9, 0x10, @empty}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x81}, @generic={0x92, 0xb4, "1b46932560f977c91ab75b9e8f6623d05585504d8da92e350c18341c64bd8ac2955bfc843425db88249242647ee00fd4e69c7d7ac45e73f9c58b470e46e85f8a9688e7f32342573478d9deb1ad26e7e74b1a2f1d3b3a141e926998d2d6e5640ce233095f027157955b4252ce33f5b48583b3d4e0369524a8feec7e7ce171b149cf83e5b1ccee31b2f51a38e08b34cf8bcf82b6032494a6f33b1c19420a32227a9a2f9d123f592fe0a458c4c64302af8df6c58a00"}, @pad1, @generic={0x7, 0xfa, "74857fe8ed5d65d398eb2164ef13f7ab84d5677eb796ae1af521232e5d896c23b91c43176067b1139c7af01ebe686828c09346848efa61d6f2cae5751c82af78a7ebeed1f1a20554f28580fd7c801fc5b5fd72fba0b4021ebfcc0c559529f12b806f2122f1b43be6dbebc09de0d2fc6aa4738a2b9a25434a6830e864f0ae053b73c191ce656587f395620849e84a4f7c95a61e91284e50501148a60dfa090d39a534003fe0ff4285603f0126cc1e9a8b75fdc55248326df2bac6ae8dcfd7674341b765588632e5e7e75155f71054e64cf24e9db5f3c1f0d70c6cf639dcb1f0ac99dd72fd97e35147d03569478183a40ee20392c1782b37f004d3"}, @padn={0x1, 0x1, [0x0]}]}, 0x218) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_TIMEOUT(r11, 0x0, 0x48a, &(0x7f0000000e80)={0x8001, 0x3fd7ee39, 0x6}, 0xc) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000ec0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) getsockopt$inet6_tcp_int(r12, 0x6, 0x3, &(0x7f0000000f00), &(0x7f0000000f40)=0x4) getsockopt$netrom_NETROM_N2(r12, 0x103, 0x3, &(0x7f0000000f80)=0xd, &(0x7f0000000fc0)=0x4) socket$unix(0x1, 0x1, 0x0) kernel console output (not intermixed with test programs): ][T10815] netlink: 'syz.0.1415': attribute type 17 has an invalid length. [ 217.159463][T10815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1415'. [ 217.169756][T10815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1415'. [ 217.278848][T10817] veth0: entered promiscuous mode [ 217.378353][T10816] veth0: left promiscuous mode [ 217.492625][T10823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.500404][T10823] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 217.534849][T10823] bond0: (slave gre0): Error -95 calling set_mac_address [ 217.819804][T10842] netlink: 'syz.3.1423': attribute type 1 has an invalid length. [ 217.848171][T10842] netlink: 'syz.3.1423': attribute type 2 has an invalid length. [ 218.053514][T10851] netlink: 'syz.1.1425': attribute type 12 has an invalid length. [ 218.150454][ T9627] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.188801][ T9627] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.259993][ T9627] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.288689][ T9627] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.568503][T10868] netlink: 'syz.5.1430': attribute type 10 has an invalid length. [ 218.672837][ T5864] Bluetooth: hci2: command tx timeout [ 218.717831][T10872] __nla_validate_parse: 4 callbacks suppressed [ 218.717853][T10872] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1432'. [ 219.303465][T10898] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5 [ 219.337254][T10898] gretap5: default qdisc (pfifo_fast) fail, fallback to noqueue [ 219.347198][T10898] gretap5: entered promiscuous mode [ 219.371063][T10898] gretap5: entered allmulticast mode [ 219.597637][T10909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1440'. [ 219.650788][T10913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1440'. [ 219.896916][T10918] netlink: 'syz.3.1442': attribute type 4 has an invalid length. [ 220.496308][T10940] netlink: 'syz.2.1445': attribute type 3 has an invalid length. [ 220.712773][T10950] netlink: 'syz.2.1448': attribute type 1 has an invalid length. [ 220.739023][T10950] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1448'. [ 221.064801][T10963] netlink: 'syz.5.1452': attribute type 3 has an invalid length. [ 221.272349][T10977] netlink: 'syz.1.1457': attribute type 10 has an invalid length. [ 221.318226][T10977] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1457'. [ 221.396113][T10977] team0: Port device geneve0 added [ 221.737345][T11002] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1462'. [ 222.382845][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1474'. [ 222.525586][T11050] syzkaller0: entered promiscuous mode [ 222.531756][T11050] syzkaller0: entered allmulticast mode [ 223.209627][T11084] netlink: 'syz.0.1484': attribute type 10 has an invalid length. [ 223.673087][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1487'. [ 223.999493][T11106] geneve0: entered promiscuous mode [ 224.018141][T11106] macvtap1: entered promiscuous mode [ 224.067941][T11106] macvtap1: entered allmulticast mode [ 224.094777][T11106] geneve0: entered allmulticast mode [ 224.278568][T11114] tipc: Enabling of bearer rejected, media not registered [ 224.485328][T11117] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1493'. [ 224.658623][T11126] !€ÿ: renamed from bond_slave_0 (while UP) [ 224.723334][T11125] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1497'. [ 225.056132][T11152] syzkaller0: entered promiscuous mode [ 225.087552][T11152] syzkaller0: entered allmulticast mode [ 225.192411][T11157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1506'. [ 225.373914][T11164] netlink: 'syz.0.1507': attribute type 23 has an invalid length. [ 225.611474][T11175] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1512'. [ 225.647054][T11175] !: renamed from dummy0 (while UP) [ 225.667881][T11171] tipc: Enabled bearer , priority 0 [ 225.687225][T11171] syzkaller0: entered promiscuous mode [ 225.697847][T11171] syzkaller0: entered allmulticast mode [ 225.715135][T11171] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 225.770807][T11171] tipc: Resetting bearer [ 225.791289][T11182] netlink: 284 bytes leftover after parsing attributes in process `syz.5.1513'. [ 225.998200][T11192] netlink: 'syz.2.1517': attribute type 1 has an invalid length. [ 226.020981][T11192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1517'. [ 226.196143][T11199] tipc: Enabling of bearer rejected, failed to enable media [ 226.427942][T11170] tipc: Resetting bearer [ 226.498494][T11170] tipc: Disabling bearer [ 226.583527][T11223] netlink: 'syz.5.1525': attribute type 39 has an invalid length. [ 226.655119][T11225] netlink: 'syz.5.1525': attribute type 13 has an invalid length. [ 226.681016][T11225] netlink: 'syz.5.1525': attribute type 58 has an invalid length. [ 226.691466][T11225] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1525'. [ 227.196933][T11246] netlink: 'syz.2.1535': attribute type 13 has an invalid length. [ 227.206227][T11246] netlink: 'syz.2.1535': attribute type 58 has an invalid length. [ 227.214350][T11246] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1535'. [ 227.562758][T11257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1537'. [ 227.578835][T11257] netlink: 'syz.1.1537': attribute type 5 has an invalid length. [ 227.606529][T11257] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1537'. [ 227.639068][T11257] geneve2: entered promiscuous mode [ 227.644959][T11257] geneve2: entered allmulticast mode [ 227.666238][ T9629] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 227.685120][ T9629] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 227.709024][ T9629] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 227.748722][ T9629] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 228.109453][T11287] netlink: 'syz.2.1550': attribute type 1 has an invalid length. [ 228.220336][T11287] 8021q: adding VLAN 0 to HW filter on device bond3 [ 228.368769][T11288] bond3: (slave veth11): Enslaving as an active interface with a down link [ 230.022927][T11375] netlink: 'syz.5.1568': attribute type 1 has an invalid length. [ 230.194481][T11378] netlink: 'syz.5.1568': attribute type 4 has an invalid length. [ 230.257727][T11379] netlink: 'syz.5.1568': attribute type 4 has an invalid length. [ 231.358318][T11375] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 231.544364][T11388] __nla_validate_parse: 4 callbacks suppressed [ 231.544387][T11388] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1571'. [ 231.634530][T11388] geneve3: entered promiscuous mode [ 231.687909][T11391] tipc: Enabled bearer , priority 0 [ 231.729645][T11391] syzkaller0: entered promiscuous mode [ 231.755205][T11391] syzkaller0: entered allmulticast mode [ 231.842124][T11391] tipc: Resetting bearer [ 231.869730][T11403] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1577'. [ 231.883897][T11403] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.893591][T11403] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.976228][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1578'. [ 231.988370][T11391] hsr0 speed is unknown, defaulting to 1000 [ 232.003425][T11408] vlan0: entered allmulticast mode [ 232.008915][T11408] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 232.139794][T11416] netlink: 'syz.2.1580': attribute type 4 has an invalid length. [ 232.184949][T11419] netlink: 'syz.3.1581': attribute type 83 has an invalid length. [ 232.246388][T11419] tipc: Enabling of bearer rejected, failed to enable media [ 232.366549][T11428] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1584'. [ 232.428070][T11426] hsr0 speed is unknown, defaulting to 1000 [ 232.456148][T11422] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1582'. [ 232.491219][T11389] tipc: Resetting bearer [ 232.573461][T11389] tipc: Disabling bearer [ 232.930536][ T25] block nbd0: Possible stuck request ffff888025140000: control (read@0,1024B). Runtime 120 seconds [ 232.951391][ T25] block nbd0: Possible stuck request ffff8880251401c0: control (read@1024,1024B). Runtime 120 seconds [ 232.962800][ T25] block nbd0: Possible stuck request ffff888025140380: control (read@2048,1024B). Runtime 120 seconds [ 232.974839][ T25] block nbd0: Possible stuck request ffff888025140540: control (read@3072,1024B). Runtime 120 seconds [ 233.139181][T11455] netlink: 'syz.5.1591': attribute type 9 has an invalid length. [ 233.202712][T11456] netlink: 'syz.5.1591': attribute type 9 has an invalid length. [ 233.694275][T11478] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1596'. [ 233.882486][ T5853] IPVS: starting estimator thread 0... [ 234.001203][T11483] IPVS: using max 23 ests per chain, 55200 per kthread [ 234.036919][T11487] IPVS: length: 8 != 1152 [ 234.697444][T11517] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 234.760114][T11519] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1608'. [ 234.889727][T11524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1610'. [ 235.237802][T11535] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1613'. [ 235.467363][T11552] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1618'. [ 235.589946][T11554] sctp: [Deprecated]: syz.0.1619 (pid 11554) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.589946][T11554] Use struct sctp_sack_info instead [ 235.674131][T11560] netlink: 'syz.1.1621': attribute type 11 has an invalid length. [ 235.690509][T11561] netlink: 'syz.2.1622': attribute type 49 has an invalid length. [ 236.562289][T11614] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 236.583921][T11616] syzkaller0: create flow: hash 2308153036 index 1 [ 236.645953][T11622] __nla_validate_parse: 2 callbacks suppressed [ 236.645975][T11622] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1638'. [ 236.680804][T11619] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1637'. [ 236.695587][T11619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.814703][T11615] syzkaller0: delete flow: hash 2308153036 index 1 [ 237.049173][T11639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1644'. [ 237.058533][T11639] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1644'. [ 238.837611][T11636] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 238.860218][T11640] tipc: Enabled bearer , priority 0 [ 238.878269][T11639] geneve4: entered promiscuous mode [ 238.884843][T11639] geneve4: entered allmulticast mode [ 239.009760][T11656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1646'. [ 239.058815][T11656] netlink: 'syz.5.1646': attribute type 4 has an invalid length. [ 239.105890][T11642] tipc: Disabling bearer [ 239.433504][T11681] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1652'. [ 239.844386][T11702] bridge6: entered promiscuous mode [ 239.849740][T11702] bridge6: entered allmulticast mode [ 239.897452][T11703] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1656'. [ 240.047728][T11707] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1658'. [ 240.144113][T11711] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 240.599071][T11733] netlink: 'syz.2.1668': attribute type 1 has an invalid length. [ 240.618086][T11733] netlink: 'syz.2.1668': attribute type 3 has an invalid length. [ 240.665313][T11733] netlink: 'syz.2.1668': attribute type 235 has an invalid length. [ 240.901057][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1673'. [ 241.005826][T11755] veth1_vlan: entered allmulticast mode [ 241.300526][T11777] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1682'. [ 241.427112][T11785] netlink: 'syz.1.1685': attribute type 14 has an invalid length. [ 241.712778][T11799] __nla_validate_parse: 1 callbacks suppressed [ 241.712799][T11799] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1690'. [ 241.752203][T11802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1689'. [ 241.769879][T11802] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1689'. [ 241.921219][T11802] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 241.941649][ T5944] IPVS: starting estimator thread 0... [ 241.987427][T11812] team0: Device vti0 is of different type [ 242.035420][T11820] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1697'. [ 242.047561][T11814] IPVS: using max 26 ests per chain, 62400 per kthread [ 242.285028][T11828] netlink: 'syz.5.1700': attribute type 8 has an invalid length. [ 242.445751][T11840] syzkaller0: entered promiscuous mode [ 242.454783][T11840] syzkaller0: entered allmulticast mode [ 242.468685][T11840] tipc: Enabled bearer , priority 0 [ 242.478143][T11840] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 242.580422][T11847] openvswitch: netlink: Message has -1 unknown bytes. [ 242.589665][T11840] tipc: Resetting bearer [ 242.609154][T11849] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1707'. [ 242.630621][T11839] tipc: Resetting bearer [ 242.710792][T11839] tipc: Disabling bearer [ 242.951694][T11855] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1706'. [ 243.186292][T11876] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1714'. [ 243.202305][T11876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.236903][T11876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.287550][T11889] sctp: [Deprecated]: syz.3.1717 (pid 11889) Use of int in max_burst socket option deprecated. [ 243.287550][T11889] Use struct sctp_assoc_value instead [ 243.391366][T11892] netlink: 'syz.2.1719': attribute type 1 has an invalid length. [ 243.399774][T11892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1719'. [ 243.441919][T11892] netlink: 'syz.2.1719': attribute type 1 has an invalid length. [ 243.694077][T11906] netlink: 'syz.5.1722': attribute type 12 has an invalid length. [ 243.733286][T11906] netlink: 'syz.5.1722': attribute type 29 has an invalid length. [ 243.743684][T11908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1723'. [ 243.754230][T11906] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1722'. [ 243.843280][T11916] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 243.872502][T11916] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.880393][T11916] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.253596][T11931] sctp: [Deprecated]: syz.0.1730 (pid 11931) Use of int in maxseg socket option. [ 244.253596][T11931] Use struct sctp_assoc_value instead [ 244.814530][T11967] netlink: 'syz.3.1741': attribute type 21 has an invalid length. [ 245.042813][T11977] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 245.322405][T11988] tipc: Enabling of bearer rejected, failed to enable media [ 245.396567][T11988] bridge0: port 3(syz_tun) entered blocking state [ 245.426806][T11988] bridge0: port 3(syz_tun) entered disabled state [ 245.458155][T11991] tipc: Cannot configure node identity twice [ 245.481890][T11991] tipc: Cannot configure node identity twice [ 245.550734][T11997] erspan0: entered promiscuous mode [ 245.578908][T11991] tipc: Cannot configure node identity twice [ 245.617750][T11991] tipc: Cannot configure node identity twice [ 245.636430][T11991] tipc: Cannot configure node identity twice [ 245.654505][T11991] tipc: Cannot configure node identity twice [ 245.691470][T11991] tipc: Cannot configure node identity twice [ 245.698510][T12011] veth0: entered promiscuous mode [ 246.090417][T12010] veth0 (unregistering): left promiscuous mode [ 246.145797][T11991] tipc: Cannot configure node identity twice [ 246.238775][T12035] openvswitch: netlink: Actions may not be safe on all matching packets [ 246.924499][T12072] netlink: 'syz.3.1769': attribute type 11 has an invalid length. [ 246.951118][T12072] __nla_validate_parse: 10 callbacks suppressed [ 246.951144][T12072] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1769'. [ 247.015969][T12078] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1771'. [ 247.053862][T12080] netlink: 'syz.2.1772': attribute type 83 has an invalid length. [ 247.481346][T12109] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 248.037121][T12109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.062726][T12109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.158832][T12136] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1789'. [ 248.260417][T12138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1790'. [ 248.273960][T12138] netlink: 'syz.2.1790': attribute type 30 has an invalid length. [ 248.283050][T12138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1790'. [ 248.374232][ T9623] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.401066][ T9623] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.428852][ T9623] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 248.456240][ T9623] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.486700][ T9623] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.517151][ T9623] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 248.559890][ T9623] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.584896][ T9623] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.643873][ T9623] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 248.673339][ T9623] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.720958][ T9623] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.730011][ T9623] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 248.738750][T12157] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1794'. [ 249.290811][T12192] netlink: 'syz.5.1801': attribute type 64 has an invalid length. [ 249.331249][T12192] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1801'. [ 249.419770][T12191] netlink: 'syz.2.1804': attribute type 4 has an invalid length. [ 249.438428][T12191] netlink: 'syz.2.1804': attribute type 19 has an invalid length. [ 249.597000][T12209] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1810'. [ 249.603003][T12207] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1810'. [ 249.651803][T12206] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1810'. [ 249.946300][T12226] sch_tbf: burst 4398 is lower than device lo mtu (17233) ! [ 250.774540][T12222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.800584][T12222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.403454][T12247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.628560][ T9627] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.649475][T12245] hsr0 speed is unknown, defaulting to 1000 [ 251.683428][T12245] syz1: Port: 1 Link DOWN [ 251.690327][ T9627] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.718081][ T9627] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.737797][ T9627] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.413648][T12342] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 252.424925][T12342] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 252.433695][T12342] gretap1: entered promiscuous mode [ 252.438952][T12342] gretap1: entered allmulticast mode [ 252.454074][T12342] __nla_validate_parse: 3 callbacks suppressed [ 252.454094][T12342] netlink: 340 bytes leftover after parsing attributes in process `syz.1.1839'. [ 252.629746][T12356] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1841'. [ 252.634288][T12355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1843'. [ 252.664628][T12358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1842'. [ 252.669792][T12355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1843'. [ 252.790075][T12362] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.838626][T12364] 8021q: VLANs not supported on ip6tnl0 [ 252.930757][T12370] netlink: 'syz.0.1847': attribute type 1 has an invalid length. [ 252.945884][T12370] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1847'. [ 252.956214][T12368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1846'. [ 252.973015][T12368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1846'. [ 252.977536][T12370] netlink: 'syz.0.1847': attribute type 1 has an invalid length. [ 252.989053][T12376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1849'. [ 252.999811][T12376] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 253.016209][T12376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.437578][T12399] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1855'. [ 253.482058][T12402] netlink: 'syz.2.1856': attribute type 10 has an invalid length. [ 253.519037][T12402] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 253.660163][T12404] hsr0 speed is unknown, defaulting to 1000 [ 253.920681][T12417] veth7: entered promiscuous mode [ 253.955227][T12420] gretap2: entered allmulticast mode [ 254.365000][T12427] netlink: 'syz.1.1861': attribute type 29 has an invalid length. [ 254.408255][T12430] netlink: 'syz.1.1861': attribute type 29 has an invalid length. [ 254.428407][T12427] netlink: 'syz.1.1861': attribute type 29 has an invalid length. [ 254.455886][T12437] netlink: 'syz.0.1862': attribute type 2 has an invalid length. [ 254.559881][T12437] netlink: 'syz.0.1862': attribute type 1 has an invalid length. [ 255.461399][T12477] netlink: 'syz.0.1876': attribute type 5 has an invalid length. [ 255.561406][T12484] gre3: entered promiscuous mode [ 255.566874][T12484] gre3: entered allmulticast mode [ 256.680623][T12544] sctp: [Deprecated]: syz.2.1894 (pid 12544) Use of int in max_burst socket option. [ 256.680623][T12544] Use struct sctp_assoc_value instead [ 256.946576][T12562] team0: Device gtp0 is of different type [ 256.974871][T12563] tipc: Enabled bearer , priority 0 [ 256.987670][T12560] tipc: Enabling of bearer rejected, already enabled [ 257.005026][T12569] tipc: Resetting bearer [ 257.048170][T12563] tipc: Disabling bearer [ 257.233540][ T5869] Bluetooth: hci2: command 0x0405 tx timeout [ 257.704443][T12592] hsr0 speed is unknown, defaulting to 1000 [ 257.933366][T12606] netlink: 'syz.5.1910': attribute type 1 has an invalid length. [ 258.219920][T12618] __nla_validate_parse: 11 callbacks suppressed [ 258.219942][T12618] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1908'. [ 259.410968][T12657] netlink: 'syz.5.1923': attribute type 1 has an invalid length. [ 259.418850][T12657] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1923'. [ 259.537470][T12663] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1925'. [ 259.575061][T12667] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1925'. [ 259.689635][T12672] netlink: 'syz.5.1927': attribute type 1 has an invalid length. [ 259.756800][T12674] netlink: 'syz.5.1927': attribute type 1 has an invalid length. [ 259.952598][T12681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1928'. [ 260.019214][T12685] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 260.042867][T12690] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:20001 [ 260.096433][T12685] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1929'. [ 260.596367][T12718] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 261.127109][T12748] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1948'. [ 261.229205][T12758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1951'. [ 261.629087][T12779] netlink: 'syz.0.1958': attribute type 6 has an invalid length. [ 261.737629][T12784] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 261.957777][T12796] netlink: 'syz.5.1961': attribute type 1 has an invalid length. [ 262.230472][T12813] xt_socket: unknown flags 0xe4 [ 262.445817][T12818] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 262.671543][ T5869] Bluetooth: hci0: command tx timeout [ 262.748847][T12831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1968'. [ 262.957671][T12844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1968'. [ 263.001318][ T25] block nbd0: Possible stuck request ffff888025140000: control (read@0,1024B). Runtime 150 seconds [ 263.013767][ T25] block nbd0: Possible stuck request ffff8880251401c0: control (read@1024,1024B). Runtime 150 seconds [ 263.025732][ T25] block nbd0: Possible stuck request ffff888025140380: control (read@2048,1024B). Runtime 150 seconds [ 263.038011][ T25] block nbd0: Possible stuck request ffff888025140540: control (read@3072,1024B). Runtime 150 seconds [ 263.316437][T12837] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.336712][T12846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.372486][T12857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1976'. [ 263.407830][T12858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1976'. [ 263.604340][T12872] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.1978'. [ 263.707383][T12879] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1981'. [ 263.886276][T12890] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1983'. [ 264.021720][T12900] netlink: 'syz.0.1987': attribute type 2 has an invalid length. [ 264.039957][T12899] tc_dump_action: action bad kind [ 264.047291][T12900] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1987'. [ 264.066238][T12900] nbd: must specify a device to reconfigure [ 264.116905][T12902] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1988'. [ 264.150731][T12908] IPVS: Error connecting to the multicast addr [ 264.156656][T12902] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1988'. [ 264.296843][T12916] netlink: 'syz.0.1992': attribute type 13 has an invalid length. [ 264.305125][T12916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1992'. [ 264.348422][ T78] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.348528][T12916] netlink: 'syz.0.1992': attribute type 13 has an invalid length. [ 264.376756][ T9623] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.385140][T12915] netlink: 'syz.5.1991': attribute type 11 has an invalid length. [ 264.390127][ T9623] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.401831][T12916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1992'. [ 264.411635][ T9623] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.528040][T12926] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 264.576648][T12922] syzkaller0: entered promiscuous mode [ 264.583187][T12922] syzkaller0: entered allmulticast mode [ 266.815252][T12949] syzkaller0: entered promiscuous mode [ 266.830338][T12949] syzkaller0: entered allmulticast mode [ 267.110007][T12971] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 267.618921][T12968] syz.5.2006 (12968) used greatest stack depth: 17864 bytes left [ 267.648279][T12997] netlink: 'syz.2.2014': attribute type 1 has an invalid length. [ 267.669542][T12996] netlink: 'syz.1.2015': attribute type 5 has an invalid length. [ 267.737424][T13003] block nbd1: not configured, cannot reconfigure [ 267.738157][T12997] 8021q: adding VLAN 0 to HW filter on device bond4 [ 267.795172][T12999] bond4: (slave veth15): Enslaving as an active interface with a down link [ 267.866328][T12997] vlan3: entered allmulticast mode [ 267.886580][T12997] bond4: (slave vlan3): Opening slave failed [ 268.386249][T13034] __nla_validate_parse: 7 callbacks suppressed [ 268.386271][T13034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2031'. [ 268.591839][T13043] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2029'. [ 268.618774][T13043] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2029'. [ 268.702565][T13049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2033'. [ 268.722602][T13048] netlink: 'syz.5.2034': attribute type 1 has an invalid length. [ 268.730613][T13048] netlink: 'syz.5.2034': attribute type 1 has an invalid length. [ 268.748142][T13043] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2029'. [ 268.796677][T13043] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2029'. [ 268.808053][T13043] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2029'. [ 268.818597][T13043] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2029'. [ 268.828660][T13043] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2029'. [ 268.841924][T13043] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2029'. [ 268.946091][T13031] batadv_slave_0: entered allmulticast mode [ 269.015759][T13040] hsr0 speed is unknown, defaulting to 1000 [ 269.047653][T13066] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 269.225097][T13030] batadv_slave_0: left allmulticast mode [ 269.916627][T13086] smc: net device bond0 applied user defined pnetid SYZ2 [ 269.956446][T13090] netlink: 'syz.5.2042': attribute type 1 has an invalid length. [ 270.013000][T13087] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 270.058671][T13094] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.066073][T13094] IPv6: NLM_F_CREATE should be set when creating new route [ 270.073388][T13094] IPv6: NLM_F_CREATE should be set when creating new route [ 270.080672][T13094] IPv6: NLM_F_CREATE should be set when creating new route [ 270.101203][T13094] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.108520][T13097] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.115910][T13094] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.123264][T13097] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.143293][T13097] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.159649][T13094] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.167208][T13097] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.318871][T13086] smc: removing net device bond0 with user defined pnetid SYZ2 [ 270.346108][T13086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.379464][T13086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.401067][T13086] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 270.420559][T13086] bond0 (unregistering): Released all slaves [ 271.080379][T13140] tipc: Enabled bearer , priority 0 [ 271.110438][T13140] syzkaller0: entered promiscuous mode [ 271.128092][T13140] syzkaller0: entered allmulticast mode [ 271.159165][T13140] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 271.223364][T13140] tipc: Resetting bearer [ 271.249586][T13138] tipc: Resetting bearer [ 271.311797][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 271.381790][T13153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.398905][T13138] tipc: Disabling bearer [ 271.521249][T13157] netlink: 'syz.1.2062': attribute type 29 has an invalid length. [ 271.829870][T13172] tipc: Enabling of bearer rejected, failed to enable media [ 272.491715][T13205] tipc: Enabled bearer , priority 0 [ 272.705202][T13205] syzkaller0: entered promiscuous mode [ 272.717443][T13205] syzkaller0: entered allmulticast mode [ 272.734154][T13209] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 272.770841][T13205] tipc: Resetting bearer [ 272.807625][T13203] tipc: Resetting bearer [ 272.840193][T13203] tipc: Disabling bearer [ 272.975635][T13222] netlink: 'syz.2.2082': attribute type 15 has an invalid length. [ 272.997138][T13222] netlink: 'syz.2.2082': attribute type 1 has an invalid length. [ 273.008685][T13223] syzkaller1: entered promiscuous mode [ 273.014908][T13223] syzkaller1: entered allmulticast mode [ 273.453964][T13255] __nla_validate_parse: 126 callbacks suppressed [ 273.453988][T13255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2091'. [ 273.619975][T13256] macvlan0: entered promiscuous mode [ 273.626342][T13256] macvlan0: entered allmulticast mode [ 273.633665][T13256] bond5: entered promiscuous mode [ 273.639906][T13256] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 273.664774][T13266] netlink: 'syz.3.2095': attribute type 10 has an invalid length. [ 273.679370][T13256] bond5: left promiscuous mode [ 273.839823][T13279] netlink: 'syz.3.2099': attribute type 16 has an invalid length. [ 273.848652][T13279] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2099'. [ 274.029120][T13290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2103'. [ 274.108538][T13305] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2103'. [ 274.993071][T13316] openvswitch: netlink: Actions may not be safe on all matching packets [ 275.125056][T13321] netlink: 'syz.3.2110': attribute type 10 has an invalid length. [ 275.203025][T13321] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 275.402629][T13336] veth17: entered promiscuous mode [ 275.412158][T13336] veth17: entered allmulticast mode [ 275.576994][T13343] netlink: 'syz.0.2117': attribute type 1 has an invalid length. [ 275.612609][T13349] netlink: 'syz.1.2120': attribute type 1 has an invalid length. [ 275.658834][T13346] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2118'. [ 275.731273][T13343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2117'. [ 275.744669][T13343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.173552][T13460] netlink: 'syz.0.2147': attribute type 4 has an invalid length. [ 279.323281][T13447] syzkaller0: entered promiscuous mode [ 279.339118][T13447] syzkaller0: entered allmulticast mode [ 279.377302][T13462] tipc: Enabling of bearer rejected, failed to enable media [ 279.462145][T13433] lec:lec_atm_close: lec0: Shut down! [ 281.397414][T13463] tipc: Enabling of bearer rejected, failed to enable media [ 281.406764][T13462] syzkaller0: entered promiscuous mode [ 281.418347][T13462] syzkaller0: entered allmulticast mode [ 281.776880][T13500] netlink: 'syz.3.2159': attribute type 1 has an invalid length. [ 281.804864][T13500] netlink: 'syz.3.2159': attribute type 1 has an invalid length. [ 281.852988][T13507] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2161'. [ 281.959569][T13512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2163'. [ 281.972872][T13513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2164'. [ 282.016555][T13512] netlink: 'syz.5.2163': attribute type 1 has an invalid length. [ 282.060934][T13512] netlink: 212 bytes leftover after parsing attributes in process `syz.5.2163'. [ 282.062433][T13521] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2163'. [ 282.095964][T13519] syzkaller0: entered promiscuous mode [ 282.116353][T13525] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2168'. [ 282.120918][T13512] netlink: 'syz.5.2163': attribute type 1 has an invalid length. [ 282.128400][T13519] syzkaller0: entered allmulticast mode [ 282.148789][T13529] openvswitch: netlink: IPv6 tunnel dst address is zero [ 282.187624][T13520] netlink: 'syz.1.2167': attribute type 4 has an invalid length. [ 282.229382][T13534] netlink: 'syz.0.2170': attribute type 29 has an invalid length. [ 282.398960][T13539] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2171'. [ 282.488496][T13555] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2175'. [ 282.716338][T13567] netlink: 'syz.2.2175': attribute type 4 has an invalid length. [ 282.787759][T13558] netlink: 'syz.2.2175': attribute type 4 has an invalid length. [ 282.976216][T13583] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2181'. [ 282.996051][T13583] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2181'. [ 283.295699][T13599] netlink: 'syz.3.2186': attribute type 8 has an invalid length. [ 283.919264][T13644] netlink: 'syz.1.2195': attribute type 1 has an invalid length. [ 284.102599][T13655] sctp: [Deprecated]: syz.5.2199 (pid 13655) Use of int in maxseg socket option. [ 284.102599][T13655] Use struct sctp_assoc_value instead [ 284.229989][T13663] IPVS: length: 4096 != 8 [ 285.468498][T13734] sctp: [Deprecated]: syz.1.2222 (pid 13734) Use of int in max_burst socket option. [ 285.468498][T13734] Use struct sctp_assoc_value instead [ 285.515523][T13732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.551180][T13732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.304950][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806c16dc00: rx timeout, send abort [ 286.455568][T13779] bridge_slave_1: entered allmulticast mode [ 286.805226][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806c16e000: rx timeout, send abort [ 286.813660][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806c16dc00: abort rx timeout. Force session deactivation [ 287.018050][T13816] sit0: left promiscuous mode [ 287.050002][T13816] bond0: (slave team0): Releasing backup interface [ 287.115545][T13816] bridge_slave_0: left allmulticast mode [ 287.146688][T13816] bridge_slave_0: left promiscuous mode [ 287.180349][T13816] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.223816][T13816] bridge_slave_1: left allmulticast mode [ 287.233077][T13816] bridge_slave_1: left promiscuous mode [ 287.245447][T13816] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.284426][T13816] bond0: (slave bond_slave_0): Releasing backup interface [ 287.313540][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806c16e000: abort rx timeout. Force session deactivation [ 287.314836][T13825] __nla_validate_parse: 14 callbacks suppressed [ 287.314854][T13825] netlink: 146780 bytes leftover after parsing attributes in process `syz.5.2246'. [ 287.374627][T13816] bond0: (slave bond_slave_1): Releasing backup interface [ 287.441179][T13816] team0: Port device team_slave_0 removed [ 287.469160][T13816] team0: Port device team_slave_1 removed [ 287.499422][T13816] bond0: (slave wlan1): Releasing backup interface [ 287.537774][T13816] gretap0: left promiscuous mode [ 287.544776][T13816] macvtap1: left promiscuous mode [ 287.554388][T13821] tipc: Enabling of bearer rejected, failed to enable media [ 287.599406][T13830] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 287.610606][T13832] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 287.854218][T13848] netlink: 'syz.0.2253': attribute type 5 has an invalid length. [ 287.873936][T13847] netlink: 'syz.0.2253': attribute type 5 has an invalid length. [ 287.874967][T13848] netlink: 'syz.0.2253': attribute type 2 has an invalid length. [ 287.892832][T13851] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2253'. [ 288.248182][T13870] netlink: 'syz.5.2262': attribute type 1 has an invalid length. [ 288.312238][T13877] netlink: 'syz.0.2264': attribute type 2 has an invalid length. [ 288.336778][T13870] 8021q: adding VLAN 0 to HW filter on device bond3 [ 288.344643][T13880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.364889][T13875] bond3: (slave gretap1): making interface the new active one [ 288.374115][T13875] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 288.526687][T13891] netlink: 'syz.0.2267': attribute type 30 has an invalid length. [ 288.577271][T13891] smc: adding net device bond0 with user defined pnetid SYZ2 [ 288.677618][T13902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2271'. [ 288.682278][T13901] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2270'. [ 288.890591][T13910] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2274'. [ 288.914528][T13910] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2274'. [ 289.227331][T13931] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2283'. [ 289.271313][T13931] unsupported nlmsg_type 40 [ 289.344163][T13947] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2287'. [ 289.366099][T13947] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2287'. [ 289.441372][ T49] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 289.475767][T13952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2289'. [ 290.940457][T14013] netlink: 'syz.0.2306': attribute type 1 has an invalid length. [ 291.576433][T14053] 8021q: VLANs not supported on vxcan1 [ 292.265116][T14074] sctp: [Deprecated]: syz.3.2325 (pid 14074) Use of struct sctp_assoc_value in delayed_ack socket option. [ 292.265116][T14074] Use struct sctp_sack_info instead [ 292.316619][T14074] sctp: [Deprecated]: syz.3.2325 (pid 14074) Use of int in maxseg socket option. [ 292.316619][T14074] Use struct sctp_assoc_value instead [ 292.407061][T14086] __nla_validate_parse: 10 callbacks suppressed [ 292.407082][T14086] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2328'. [ 292.559578][T14086] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2328'. [ 292.648746][T14095] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2330'. [ 292.787221][T14103] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2333'. [ 292.871548][T14108] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2334'. [ 292.880757][T14108] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2334'. [ 293.022710][T14122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2338'. [ 293.073499][ T25] block nbd0: Possible stuck request ffff888025140000: control (read@0,1024B). Runtime 180 seconds [ 293.084908][ T25] block nbd0: Possible stuck request ffff8880251401c0: control (read@1024,1024B). Runtime 180 seconds [ 293.096153][ T25] block nbd0: Possible stuck request ffff888025140380: control (read@2048,1024B). Runtime 180 seconds [ 293.107377][ T25] block nbd0: Possible stuck request ffff888025140540: control (read@3072,1024B). Runtime 180 seconds [ 293.428079][T14134] veth7: entered allmulticast mode [ 293.433828][T14138] 8021q: VLANs not supported on ip6gre0 [ 293.467489][T14137] 8021q: VLANs not supported on ip6gre0 [ 293.750733][T14150] netlink: 'syz.5.2345': attribute type 10 has an invalid length. [ 293.800836][T14152] netlink: 'syz.5.2345': attribute type 10 has an invalid length. [ 293.842157][T14152] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.879240][T14152] bond0: (slave team0): Enslaving as an active interface with an up link [ 294.143625][T14169] team0: Device vti0 is of different type [ 294.212206][T14170] team0: Device vti0 is of different type [ 294.258782][T14176] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2351'. [ 294.407240][T14185] netlink: 'syz.5.2356': attribute type 1 has an invalid length. [ 294.974128][T14212] netlink: 212364 bytes leftover after parsing attributes in process `syz.5.2364'. [ 295.002152][T14212] openvswitch: netlink: Message has 5 unknown bytes. [ 295.009488][T14212] netlink: 212364 bytes leftover after parsing attributes in process `syz.5.2364'. [ 295.019264][T14212] openvswitch: netlink: Message has 5 unknown bytes. [ 295.027415][T14212] openvswitch: netlink: Message has 5 unknown bytes. [ 295.040071][T14212] openvswitch: netlink: Message has 5 unknown bytes. [ 295.048433][T14212] openvswitch: netlink: Message has 5 unknown bytes. [ 295.061625][T14212] openvswitch: netlink: Message has 5 unknown bytes. [ 295.069887][T14212] openvswitch: netlink: Message has 5 unknown bytes. [ 295.079696][T14212] openvswitch: netlink: Message has 5 unknown bytes. [ 295.087920][T14212] openvswitch: netlink: Message has 5 unknown bytes. [ 295.132171][T14212] openvswitch: netlink: Message has 5 unknown bytes. [ 295.195948][T14227] netlink: 'syz.1.2369': attribute type 11 has an invalid length. [ 295.226135][T14227] netlink: 'syz.1.2369': attribute type 11 has an invalid length. [ 295.345695][T14228] netlink: 'syz.1.2369': attribute type 1 has an invalid length. [ 295.525866][T14244] netlink: 'syz.2.2376': attribute type 12 has an invalid length. [ 295.708099][T14255] netlink: 'syz.3.2378': attribute type 1 has an invalid length. [ 295.720153][T14255] netlink: 'syz.3.2378': attribute type 3 has an invalid length. [ 295.728734][T14255] NCSI netlink: No device for ifindex 0 [ 295.779755][T14259] netlink: 'syz.5.2380': attribute type 6 has an invalid length. [ 295.801225][T14259] netlink: 'syz.5.2380': attribute type 5 has an invalid length. [ 295.993258][T14274] netlink: 'syz.3.2383': attribute type 4 has an invalid length. [ 297.154567][T14340] tipc: Enabled bearer , priority 0 [ 297.168464][T14340] syzkaller0: entered promiscuous mode [ 297.197469][T14340] syzkaller0: entered allmulticast mode [ 297.237660][T14347] veth0_to_bridge: entered promiscuous mode [ 297.265930][T14340] tipc: Resetting bearer [ 297.289114][T14347] veth0_to_bridge: left promiscuous mode [ 297.300606][T14351] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 297.313153][T14353] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 297.325447][T14339] tipc: Resetting bearer [ 297.357333][T14339] tipc: Disabling bearer [ 297.629614][T14371] nbd: must specify a device to reconfigure [ 297.747277][T14375] __nla_validate_parse: 49 callbacks suppressed [ 297.747299][T14375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2408'. [ 297.784132][T14376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2408'. [ 298.104082][T14400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2414'. [ 298.177986][T14405] syzkaller0: create flow: hash 2308153036 index 1 [ 298.226807][ T9629] syzkaller0: tun_net_xmit 76 [ 298.235980][ T9629] syzkaller0: tun_net_xmit 48 [ 298.241934][T12253] syzkaller0: tun_net_xmit 76 [ 298.321220][T14399] syzkaller0: delete flow: hash 2308153036 index 1 [ 298.634724][T14427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2420'. [ 299.316460][ T5869] Bluetooth: hci0: command tx timeout [ 300.218001][T14427] bridge_slave_1: left allmulticast mode [ 300.223793][T14427] bridge_slave_1: left promiscuous mode [ 300.229709][T14427] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.243996][T14427] bridge_slave_0: left allmulticast mode [ 300.249772][T14427] bridge_slave_0: left promiscuous mode [ 300.256484][T14427] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.378212][T14419] hsr0 speed is unknown, defaulting to 1000 [ 300.437447][T14433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2422'. [ 301.079380][T14464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2431'. [ 301.115328][T14464] validate_nla: 2 callbacks suppressed [ 301.115350][T14464] netlink: 'syz.2.2431': attribute type 21 has an invalid length. [ 301.154580][T14464] netlink: 'syz.2.2431': attribute type 6 has an invalid length. [ 301.191173][T14464] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2431'. [ 301.216523][T14467] IPVS: Error connecting to the multicast addr [ 301.435499][T14480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2436'. [ 301.485349][T14482] netlink: 'syz.2.2437': attribute type 1 has an invalid length. [ 301.641592][T14493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2438'. [ 301.720112][T14482] bond5: entered promiscuous mode [ 301.733445][T14482] 8021q: adding VLAN 0 to HW filter on device bond5 [ 301.799981][T14490] 8021q: adding VLAN 0 to HW filter on device bond6 [ 301.811894][T14490] bond5: (slave bond6): making interface the new active one [ 301.819429][T14490] bond6: entered promiscuous mode [ 301.825641][T14490] bond5: (slave bond6): Enslaving as an active interface with an up link [ 302.091773][T14516] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2442'. [ 302.203403][T14519] netlink: 'syz.0.2445': attribute type 1 has an invalid length. [ 302.779373][T14552] sctp: [Deprecated]: syz.0.2456 (pid 14552) Use of struct sctp_assoc_value in delayed_ack socket option. [ 302.779373][T14552] Use struct sctp_sack_info instead [ 302.823023][T14557] tipc: Enabling of bearer rejected, failed to enable media [ 302.846722][T14557] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 303.023643][T14567] __nla_validate_parse: 4 callbacks suppressed [ 303.023664][T14567] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2459'. [ 303.555054][T14594] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2466'. [ 303.593059][T14589] hsr0 speed is unknown, defaulting to 1000 [ 303.711860][T14597] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2468'. [ 303.761620][T14597] net_ratelimit: 26 callbacks suppressed [ 303.761643][T14597] openvswitch: netlink: Actions may not be safe on all matching packets [ 304.182800][T14618] netlink: 'syz.2.2473': attribute type 1 has an invalid length. [ 304.276204][T14623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2473'. [ 304.393297][T14634] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2476'. [ 304.395232][T14618] 8021q: adding VLAN 0 to HW filter on device bond7 [ 304.569703][T14636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2480'. [ 304.579733][T14640] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2479'. [ 304.596677][T14636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2480'. [ 304.616688][T14636] netlink: 58 bytes leftover after parsing attributes in process `syz.3.2480'. [ 304.851092][T14645] syzkaller0: entered promiscuous mode [ 304.856712][T14645] syzkaller0: entered allmulticast mode [ 307.321579][T14683] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2491'. [ 307.694146][T14694] bond6: entered promiscuous mode [ 307.699501][T14694] bond6: entered allmulticast mode [ 307.710368][T14694] 8021q: adding VLAN 0 to HW filter on device bond6 [ 307.749180][T14700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.759005][T14700] team0: Port device batadv0 added [ 307.905186][T14704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.555904][T14747] __nla_validate_parse: 1 callbacks suppressed [ 308.555925][T14747] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2509'. [ 308.739602][T14766] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2514'. [ 308.824348][T14766] 8021q: adding VLAN 0 to HW filter on device bond5 [ 308.839669][T14766] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2514'. [ 308.935356][T14766] hsr0 speed is unknown, defaulting to 1000 [ 309.128877][T14786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2521'. [ 309.426918][T14802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.734971][T14812] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 310.016354][T14820] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:20002 [ 310.231415][T14838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2531'. [ 310.404379][T14843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2534'. [ 310.628118][T14852] netlink: 'syz.1.2537': attribute type 21 has an invalid length. [ 310.660604][T14852] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 310.707523][T14852] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2537'. [ 310.912280][T14864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2542'. [ 310.931476][T14864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2542'. [ 311.004653][T14864] bridge0: port 1(vlan3) entered blocking state [ 311.011490][T14864] bridge0: port 1(vlan3) entered disabled state [ 311.018635][T14864] vlan3: entered allmulticast mode [ 311.040779][T14864] vlan3: left allmulticast mode [ 311.224638][T14877] netlink: 'syz.3.2547': attribute type 1 has an invalid length. [ 311.228259][T14879] netlink: 'syz.2.2546': attribute type 1 has an invalid length. [ 311.357970][T14883] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 311.426779][T14879] 8021q: adding VLAN 0 to HW filter on device bond9 [ 311.445388][T14879] bond8: (slave bond9): making interface the new active one [ 311.458076][T14879] bond8: (slave bond9): Enslaving as an active interface with an up link [ 311.479051][T14884] bond8: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 311.492076][T14884] bond8: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 311.735239][T14877] veth1: entered promiscuous mode [ 311.754533][T14877] bond5: (slave veth1): Enslaving as a backup interface with a down link [ 311.852544][T14894] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2550'. [ 315.205324][T15026] __nla_validate_parse: 4 callbacks suppressed [ 315.205345][T15026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2583'. [ 315.290468][T15031] netlink: 'syz.2.2585': attribute type 1 has an invalid length. [ 315.364335][T15031] 8021q: adding VLAN 0 to HW filter on device bond10 [ 315.415731][T15036] bond10: (slave geneve2): making interface the new active one [ 315.425814][T15036] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 315.583293][T15050] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2590'. [ 315.649694][T15054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2592'. [ 315.659399][T15054] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2592'. [ 315.668823][T15054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2592'. [ 315.672625][T15052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2591'. [ 315.915456][T15065] netlink: 'syz.0.2595': attribute type 1 has an invalid length. [ 315.972343][T15065] bond12: (slave geneve2): making interface the new active one [ 315.981155][T15065] bond12: (slave geneve2): Enslaving as an active interface with an up link [ 316.001866][ T78] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 316.028002][ T78] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 316.066158][ T78] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 316.095437][T15073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2598'. [ 316.097543][ T78] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 316.125508][T15075] syzkaller1: entered promiscuous mode [ 316.131457][T15075] syzkaller1: entered allmulticast mode [ 316.140639][T15075] IPVS: Error connecting to the multicast addr [ 316.150175][T15077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2598'. [ 316.284843][T15079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2600'. [ 316.557765][T15093] IPv6: NLM_F_CREATE should be specified when creating new route [ 316.680577][T15097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2608'. [ 316.701170][T15099] netlink: 'syz.3.2609': attribute type 10 has an invalid length. [ 316.843758][T15099] team0: Device geneve0 failed to register rx_handler [ 316.877892][T15099] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 317.705333][T15148] netlink: 'syz.5.2624': attribute type 1 has an invalid length. [ 317.806762][T15151] macsec2: entered promiscuous mode [ 317.830487][T15151] macsec2: entered allmulticast mode [ 317.876373][T15150] hsr0 speed is unknown, defaulting to 1000 [ 317.995869][T15159] netlink: 'syz.2.2627': attribute type 12 has an invalid length. [ 318.532378][T15190] bond0: Device is already in use. [ 318.743305][T15202] netlink: 'syz.5.2639': attribute type 1 has an invalid length. [ 318.826174][T15208] netlink: 'syz.0.2640': attribute type 1 has an invalid length. [ 318.842160][T15208] netlink: 'syz.0.2640': attribute type 1 has an invalid length. [ 319.095772][T15215] erspan0: entered allmulticast mode [ 319.583409][T15231] tipc: Enabled bearer , priority 0 [ 319.593483][T15231] syzkaller0: entered promiscuous mode [ 319.599011][T15231] syzkaller0: entered allmulticast mode [ 319.643309][T15231] tipc: Resetting bearer [ 319.668477][T15229] tipc: Resetting bearer [ 319.728337][T15229] tipc: Disabling bearer [ 319.795609][T15240] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 319.808688][T15240] veth5: left promiscuous mode [ 319.828231][T15240] geneve2: left promiscuous mode [ 319.838333][T15240] geneve3: left promiscuous mode [ 319.849921][T15240] geneve4: left promiscuous mode [ 319.870208][T15240] gretap1: left promiscuous mode [ 319.939919][T15240] bond6: left promiscuous mode [ 319.984109][T15249] erspan0: entered promiscuous mode [ 320.408375][T15275] netlink: 'syz.2.2659': attribute type 21 has an invalid length. [ 320.417340][T15275] __nla_validate_parse: 7 callbacks suppressed [ 320.417360][T15275] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2659'. [ 320.709078][T15291] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2664'. [ 320.925938][T15300] tipc: Enabled bearer , priority 0 [ 321.021215][T15289] tipc: Resetting bearer [ 321.149934][T15322] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2674'. [ 321.162627][T15322] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2674'. [ 322.822211][T15289] tipc: Disabling bearer [ 323.061069][ T9634] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 323.100083][ T9634] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 323.143546][T15331] bridge2: entered promiscuous mode [ 323.153935][T15331] bridge2: entered allmulticast mode [ 323.160458][ T25] block nbd0: Possible stuck request ffff888025140000: control (read@0,1024B). Runtime 210 seconds [ 323.171940][ T25] block nbd0: Possible stuck request ffff8880251401c0: control (read@1024,1024B). Runtime 210 seconds [ 323.183184][ T25] block nbd0: Possible stuck request ffff888025140380: control (read@2048,1024B). Runtime 210 seconds [ 323.192438][ T9634] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 323.194537][ T25] block nbd0: Possible stuck request ffff888025140540: control (read@3072,1024B). Runtime 210 seconds [ 323.218358][T15337] netlink: 'syz.1.2676': attribute type 1 has an invalid length. [ 323.266623][ T9634] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 323.277557][T15337] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2676'. [ 323.539626][T15358] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2684'. [ 323.822721][T15365] netlink: 392 bytes leftover after parsing attributes in process `syz.0.2687'. [ 323.885267][T15368] tipc: Enabled bearer , priority 0 [ 323.906015][T15368] syzkaller0: entered promiscuous mode [ 323.922961][T15368] syzkaller0: entered allmulticast mode [ 324.020437][T15368] tipc: Resetting bearer [ 324.038458][T15376] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2692'. [ 324.048161][T15366] tipc: Resetting bearer [ 324.121842][T15366] tipc: Disabling bearer [ 324.178686][T15375] hsr0 speed is unknown, defaulting to 1000 [ 324.214608][T15380] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 324.286762][T15380] can: request_module (can-proto-3) failed. [ 324.300991][T15381] can: request_module (can-proto-3) failed. [ 324.425157][T15387] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2694'. [ 324.474679][T15387] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 324.497417][T15387] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2694'. [ 324.601457][ T5869] Bluetooth: hci4: command 0x0406 tx timeout [ 324.965094][T15406] netlink: 'syz.3.2698': attribute type 4 has an invalid length. [ 325.439816][T15435] __nla_validate_parse: 5 callbacks suppressed [ 325.439836][T15435] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2705'. [ 325.479936][T15435] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2705'. [ 325.575687][T15437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2708'. [ 325.603701][T15427] hsr0 speed is unknown, defaulting to 1000 [ 325.736144][T15437] bond11: entered promiscuous mode [ 325.783977][T15443] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2710'. [ 325.801881][T15437] bond11: entered allmulticast mode [ 325.822163][T15437] 8021q: adding VLAN 0 to HW filter on device bond11 [ 326.253959][T15437] bond11 (unregistering): Released all slaves [ 326.271201][ T5864] Bluetooth: hci3: command tx timeout [ 326.813534][T15476] tipc: Enabling of bearer rejected, failed to enable media [ 327.140402][T15489] sch_tbf: burst 0 is lower than device lo mtu (24) ! [ 327.291844][T15489] netlink: 'syz.3.2723': attribute type 10 has an invalid length. [ 327.348717][T15489] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 327.388578][T15502] dvmrp1: entered allmulticast mode [ 327.652762][T15514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2729'. [ 327.695395][T15514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2729'. [ 327.738919][T15517] netlink: 'syz.2.2732': attribute type 21 has an invalid length. [ 327.768084][T15521] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2731'. [ 327.807320][T15522] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2730'. [ 328.005414][T15530] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2736'. [ 328.108081][T15539] netlink: 'syz.5.2735': attribute type 4 has an invalid length. [ 328.505491][T15566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2746'. [ 328.637104][T15573] tc_dump_action: action bad kind [ 328.649841][T15573] netlink: 'syz.1.2747': attribute type 17 has an invalid length. [ 328.802411][T15581] bridge0: port 1(batadv0) entered blocking state [ 328.809298][T15581] bridge0: port 1(batadv0) entered disabled state [ 328.825533][T15581] batadv0: entered allmulticast mode [ 328.847609][T15581] batadv0: entered promiscuous mode [ 328.860035][T15583] tipc: Enabled bearer , priority 0 [ 328.889607][T15581] tipc: Resetting bearer [ 329.322191][ T9625] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 329.331739][ T9625] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 329.388305][T15610] syzkaller0: entered promiscuous mode [ 329.402174][T15610] syzkaller0: entered allmulticast mode [ 329.615622][ T9634] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 329.924352][ T5853] tipc: Node number set to 3858155059 [ 331.888742][T15669] __nla_validate_parse: 70 callbacks suppressed [ 331.888761][T15669] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2775'. [ 331.905994][T15669] netlink: 'syz.0.2775': attribute type 7 has an invalid length. [ 331.914260][T15669] netlink: 'syz.0.2775': attribute type 8 has an invalid length. [ 331.924216][T15669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2775'. [ 332.623353][T15686] netlink: 'syz.0.2779': attribute type 12 has an invalid length. [ 332.932455][T15705] delete_channel: no stack [ 333.129367][T15711] netlink: 'syz.1.2785': attribute type 58 has an invalid length. [ 333.157996][T15711] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2785'. [ 333.255334][T15722] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2790'. [ 333.283806][T15723] IPVS: Unknown mcast interface: vcan0 [ 333.295341][T15725] netlink: 'syz.3.2791': attribute type 83 has an invalid length. [ 333.315640][T15725] openvswitch: netlink: IP tunnel TTL not specified. [ 333.366479][T15725] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.645951][T15735] netlink: 'syz.1.2794': attribute type 5 has an invalid length. [ 334.177072][T15756] netlink: 'syz.1.2801': attribute type 11 has an invalid length. [ 334.281619][T15751] syzkaller1: entered promiscuous mode [ 334.289569][T15751] syzkaller1: entered allmulticast mode [ 334.389315][T15765] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2805'. [ 334.414628][T15763] netlink: 'syz.1.2804': attribute type 4 has an invalid length. [ 334.520027][T15769] hsr0 speed is unknown, defaulting to 1000 [ 334.584999][T15772] netlink: 'syz.3.2807': attribute type 4 has an invalid length. [ 334.720570][T15781] netlink: 'syz.3.2807': attribute type 4 has an invalid length. [ 335.009526][T15790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2813'. [ 335.079788][T15794] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2816'. [ 335.196572][T15796] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2815'. [ 335.203127][T15801] syzkaller1: entered promiscuous mode [ 335.228828][T15801] syzkaller1: entered allmulticast mode [ 335.416956][T15808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2818'. [ 335.712784][T15817] syzkaller0: entered promiscuous mode [ 335.718540][T15817] syzkaller0: entered allmulticast mode [ 335.726867][T15820] IPVS: Error connecting to the multicast addr [ 335.747555][T15817] IPVS: fo: FWM 3 0x00000003 - no destination available [ 335.758808][T15817] tipc: Enabled bearer , priority 0 [ 335.770463][T15817] tipc: Resetting bearer [ 335.780110][T15816] tipc: Resetting bearer [ 336.416304][T15834] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2824'. [ 336.462333][T15836] netlink: 'syz.3.2825': attribute type 6 has an invalid length. [ 337.768486][T15816] tipc: Disabling bearer [ 337.979313][T15848] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2828'. [ 338.013120][T15848] 8021q: VLANs not supported on gre0 [ 338.397291][T15871] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2837'. [ 338.863950][T15901] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2847'. [ 338.954660][T15906] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2848'. [ 338.976606][T15906] syzkaller1: entered promiscuous mode [ 338.982518][T15906] syzkaller1: entered allmulticast mode [ 339.092249][T15914] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2851'. [ 339.575191][T15939] netlink: 'syz.2.2858': attribute type 2 has an invalid length. [ 339.586130][T15939] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2858'. [ 339.618073][T15939] nbd: must specify a device to reconfigure [ 339.901530][T15952] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 339.915119][T15939] netlink: 'syz.2.2858': attribute type 2 has an invalid length. [ 339.934906][T15939] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2858'. [ 339.945918][T15939] nbd: must specify a device to reconfigure [ 340.258519][T15980] batadv1: entered allmulticast mode [ 340.528652][T15995] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2870'. [ 340.562739][T15997] netlink: 'syz.2.2871': attribute type 1 has an invalid length. [ 340.586280][T15997] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2871'. [ 341.072901][T16014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2875'. [ 341.426781][T16037] netlink: zone id is out of range [ 341.452743][T16037] netlink: zone id is out of range [ 341.457967][T16037] netlink: zone id is out of range [ 341.486727][T16037] netlink: del zone limit has 4 unknown bytes [ 341.815772][ T9634] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.900508][ T9634] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.929361][ T9634] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.957770][ T9634] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.252293][T16085] netlink: 'syz.2.2901': attribute type 16 has an invalid length. [ 342.275814][T16085] netlink: 'syz.2.2901': attribute type 17 has an invalid length. [ 342.434948][T16085] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 342.474737][T16097] IPVS: Error connecting to the multicast addr [ 343.035471][T16130] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 343.098862][T16130] bond0: (slave bond_slave_0): Releasing backup interface [ 343.107800][T16130] bond_slave_0: left allmulticast mode [ 343.135489][T16130] bond0: (slave bond_slave_1): Releasing backup interface [ 343.147941][T16130] bond_slave_1: left allmulticast mode [ 343.157221][T16130] team0: Port device team_slave_0 removed [ 343.166220][T16130] team0: Port device team_slave_1 removed [ 343.174351][T16130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.187263][T16130] team0: Port device geneve0 removed [ 343.358971][T16146] netlink: 'syz.2.2918': attribute type 1 has an invalid length. [ 343.406793][T16146] 8021q: adding VLAN 0 to HW filter on device bond12 [ 343.474090][T16150] bond12: (slave veth23): Enslaving as an active interface with a down link [ 343.535993][T16146] veth25: entered promiscuous mode [ 343.549526][T16146] bond12: (slave veth25): Enslaving as an active interface with a down link [ 343.555893][T16150] __nla_validate_parse: 7 callbacks suppressed [ 343.555913][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2918'. [ 343.950245][T16176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.212465][T16192] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 344.238080][T16185] dvmrp0: entered allmulticast mode [ 344.287420][T16193] dvmrp0: left allmulticast mode [ 344.370796][T16195] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20000 [ 344.401968][T16178] syzkaller1: entered promiscuous mode [ 344.413126][T16178] syzkaller1: entered allmulticast mode [ 344.615535][T16200] syzkaller0: entered promiscuous mode [ 344.632470][T16200] syzkaller0: entered allmulticast mode [ 344.641516][T16203] IPVS: fo: FWM 3 0x00000003 - no destination available [ 344.922883][T16217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2939'. [ 344.965385][T16219] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2938'. [ 346.766096][T16217] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 346.916698][T16233] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 346.953851][T16237] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2943'. [ 346.990157][T16237] netlink: 'syz.1.2943': attribute type 83 has an invalid length. [ 347.255417][T16250] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2948'. [ 347.354818][T16256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2950'. [ 347.850029][T16282] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2957'. [ 347.954047][T16289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2958'. [ 348.041865][T16289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2958'. [ 348.050799][T16289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2958'. [ 348.098380][ T5869] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 348.108641][ T5869] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 348.139480][ T5869] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 348.181168][ T5869] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 348.200299][ T5869] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 348.390370][T16293] hsr0 speed is unknown, defaulting to 1000 [ 348.664651][ T5873] syz_tun (unregistering): left promiscuous mode [ 348.836356][T16315] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2963'. [ 348.907722][ T9624] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.927316][ T9624] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.992645][T16325] netlink: 'syz.0.2965': attribute type 1 has an invalid length. [ 349.112929][ T9624] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.129696][T16328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2965'. [ 349.154902][ T9624] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.257402][T16325] 8021q: adding VLAN 0 to HW filter on device bond14 [ 349.404394][T16327] bond14: (slave gretap2): making interface the new active one [ 349.451705][T16327] bond14: (slave gretap2): Enslaving as an active interface with an up link [ 349.473359][T16348] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2968'. [ 349.566030][T16351] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 349.587021][T16348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2968'. [ 349.619240][ T9624] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.632601][ T9624] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.802018][ T9624] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.818753][ T9624] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.271989][ T5869] Bluetooth: hci5: command tx timeout [ 350.408212][T16293] chnl_net:caif_netlink_parms(): no params data found [ 350.511702][T16390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2981'. [ 350.649971][T16390] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20002 [ 350.699011][ T9624] batadv0: left allmulticast mode [ 350.716337][ T9624] batadv0: left promiscuous mode [ 350.762928][ T9624] bridge0: port 1(batadv0) entered disabled state [ 351.220669][ T9624] bond5 (unregistering): (slave ip6gretap1): Releasing backup interface [ 351.243865][ T9624] bond5 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - aa:e7:80:96:ce:2e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 351.264968][T16432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2993'. [ 351.409805][ T9624] 0ªî{X¹¦ (unregistering): left promiscuous mode [ 351.550043][ T9624] geneve0 (unregistering): left allmulticast mode [ 351.868991][ T9624] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 351.899786][ T9624] bond0 (unregistering): Released all slaves [ 351.918469][ T9624] bond1 (unregistering): Released all slaves [ 351.938561][ T9624] bond2 (unregistering): Released all slaves [ 351.953359][ T9624] bond3 (unregistering): Released all slaves [ 352.088496][ T9624] bond4 (unregistering): Released all slaves [ 352.109819][ T9624] bond5 (unregistering): (slave veth1): Releasing backup interface [ 352.123340][ T9624] bond5 (unregistering): Released all slaves [ 352.328428][T16293] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.352577][ T5869] Bluetooth: hci5: command tx timeout [ 352.361285][T16293] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.379068][T16293] bridge_slave_0: entered allmulticast mode [ 352.393319][T16293] bridge_slave_0: entered promiscuous mode [ 352.426114][T16443] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 352.452423][ T9624] tipc: Disabling bearer [ 352.491250][ T9624] tipc: Left network mode [ 352.532876][ T9624] IPVS: stopping backup sync thread 7537 ... [ 352.542360][T16293] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.557610][T16293] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.566343][T16293] bridge_slave_1: entered allmulticast mode [ 352.574910][T16293] bridge_slave_1: entered promiscuous mode [ 352.720575][T16458] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2999'. [ 352.755220][T16461] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 352.819780][T16293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.889828][T16293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.979588][T16471] syzkaller0: create flow: hash 2308153036 index 1 [ 353.004875][ T36] syzkaller0: tun_net_xmit 76 [ 353.016039][ T36] syzkaller0: tun_net_xmit 48 [ 353.033813][ T5853] syzkaller0: tun_net_xmit 76 [ 353.238973][ T25] block nbd0: Possible stuck request ffff888025140000: control (read@0,1024B). Runtime 240 seconds [ 353.250292][ T25] block nbd0: Possible stuck request ffff8880251401c0: control (read@1024,1024B). Runtime 240 seconds [ 353.257937][T16485] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3005'. [ 353.262354][ T25] block nbd0: Possible stuck request ffff888025140380: control (read@2048,1024B). Runtime 240 seconds [ 353.282679][ T25] block nbd0: Possible stuck request ffff888025140540: control (read@3072,1024B). Runtime 240 seconds [ 353.300338][T16293] team0: Port device team_slave_0 added [ 353.306971][ T5853] syzkaller0: tun_net_xmit 76 [ 353.310597][T16486] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3006'. [ 353.321480][T16471] syzkaller0: delete flow: hash 2308153036 index 1 [ 354.433649][ T5869] Bluetooth: hci5: command tx timeout [ 355.189405][T16293] team0: Port device team_slave_1 added [ 355.394462][T16293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.415885][T16293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.451034][T16293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.502850][T16504] netlink: 'syz.0.3013': attribute type 13 has an invalid length. [ 355.516540][T16293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.524119][T16293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.575964][T16505] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3010'. [ 355.622502][T16293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.644273][T16504] lo: entered promiscuous mode [ 355.649371][T16504] lo: entered allmulticast mode [ 355.675820][T16504] tunl0: entered promiscuous mode [ 355.709873][T16504] tunl0: entered allmulticast mode [ 355.744386][T16504] gre0: entered promiscuous mode [ 355.749413][T16504] gre0: entered allmulticast mode [ 355.750502][T16519] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3013'. [ 355.760718][T16504] gretap0: entered allmulticast mode [ 355.781794][T16504] erspan0: entered allmulticast mode [ 355.787561][T16504] erspan0: refused to change device tx_queue_len [ 355.804672][T16504] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 356.173992][T16293] hsr_slave_0: entered promiscuous mode [ 356.190259][T16293] hsr_slave_1: entered promiscuous mode [ 356.206969][T16293] debugfs: 'hsr0' already exists in 'hsr' [ 356.213224][T16293] Cannot create hsr debugfs directory [ 356.308216][T16534] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 356.350260][T16537] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 356.367808][T16538] tipc: Enabled bearer , priority 0 [ 356.386850][T16543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3024'. [ 356.397185][T16531] veth1_to_batadv: entered promiscuous mode [ 356.492677][T16536] C: renamed from lo (while UP) [ 356.512171][ T5869] Bluetooth: hci5: command tx timeout [ 356.557686][T16534] tipc: Disabling bearer [ 356.884364][ T9624] batadv_slave_0: left promiscuous mode [ 356.899410][ T9624] hsr_slave_1: left promiscuous mode [ 356.934948][ T9624] veth1_macvtap: left promiscuous mode [ 356.959979][ T9624] veth0_macvtap: left promiscuous mode [ 357.745676][T16584] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3033'. [ 358.087914][T16557] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 358.089200][T16570] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3029'. [ 358.316974][T16594] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3036'. [ 358.871836][ T9624] IPVS: stop unused estimator thread 0... [ 358.909102][T16616] macvtap1: entered allmulticast mode [ 358.923236][T16616] veth0_macvtap: entered allmulticast mode [ 359.113633][T16624] netlink: 'syz.0.3046': attribute type 10 has an invalid length. [ 359.159633][T16293] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 359.190047][T16293] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 359.228048][T16293] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 359.300919][T16293] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 359.363791][T16638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3049'. [ 359.682691][T16659] netlink: 'syz.0.3052': attribute type 1 has an invalid length. [ 359.798600][T16661] bond15: (slave bridge5): making interface the new active one [ 359.807922][T16661] bond15: (slave bridge5): Enslaving as an active interface with an up link [ 359.840031][T16667] netlink: 'syz.2.3053': attribute type 12 has an invalid length. [ 359.862190][T16667] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 359.916079][T16669] netlink: 'syz.0.3055': attribute type 2 has an invalid length. [ 359.947812][T16293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.016393][T16293] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.052439][ T9623] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.059653][ T9623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.110524][ T9625] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.117872][ T9625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.284563][T16685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3060'. [ 360.298131][T16685] erspan0: left allmulticast mode [ 360.379013][T16688] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 360.427326][T16688] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3059'. [ 360.448748][T16692] netlink: 'syz.1.3063': attribute type 16 has an invalid length. [ 360.455107][T16688] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3059'. [ 360.457971][T16693] netlink: 'syz.1.3063': attribute type 16 has an invalid length. [ 360.470093][T16692] IPv6: NLM_F_CREATE should be specified when creating new route [ 360.490428][T16691] tipc: Enabled bearer , priority 10 [ 360.491313][T16693] IPv6: NLM_F_CREATE should be specified when creating new route [ 360.654168][T16698] netlink: 'syz.0.3064': attribute type 21 has an invalid length. [ 360.669100][T16698] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3064'. [ 360.756455][T16701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3065'. [ 360.963444][T16708] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3067'. [ 360.992281][T16708] netlink: 50 bytes leftover after parsing attributes in process `syz.5.3067'. [ 361.009441][T16708] netlink: 50 bytes leftover after parsing attributes in process `syz.5.3067'. [ 361.050229][T16293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.216780][T16722] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3072'. [ 361.238211][T16722] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3072'. [ 361.271236][T16293] veth0_vlan: entered promiscuous mode [ 361.307290][T16293] veth1_vlan: entered promiscuous mode [ 361.454807][T16293] veth0_macvtap: entered promiscuous mode [ 361.476848][T16293] veth1_macvtap: entered promiscuous mode [ 361.520025][T16729] netlink: 'syz.0.3075': attribute type 5 has an invalid length. [ 361.544323][T16293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.598155][T16293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.602683][T12253] tipc: Node number set to 3863644496 [ 361.638790][ T9625] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.697188][ T9625] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.743002][ T9625] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.768536][ T9625] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.094903][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.125469][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.274103][ T9625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.278119][T16753] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3081'. [ 362.301361][ T9625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.334996][T16759] tipc: Enabled bearer , priority 0 [ 362.386486][T16759] syzkaller0: entered promiscuous mode [ 362.392840][T16759] syzkaller0: entered allmulticast mode [ 362.412310][T16763] netlink: 'syz.2.3085': attribute type 1 has an invalid length. [ 362.441735][T16763] netlink: 'syz.2.3085': attribute type 1 has an invalid length. [ 362.453123][T16759] tipc: Resetting bearer [ 362.507687][T16756] tipc: Resetting bearer [ 362.589871][T16771] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3087'. [ 362.607972][T16756] tipc: Disabling bearer [ 362.791359][T16775] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3089'. [ 363.121752][T16791] netlink: 'syz.3.3092': attribute type 23 has an invalid length. [ 363.485975][T16801] netlink: 'syz.3.3095': attribute type 1 has an invalid length. [ 363.759180][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 363.771874][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 363.781155][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 363.791894][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 363.809726][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 363.829238][T16816] Set syz1 is full, maxelem 1038 reached [ 363.868516][T16816] netlink: 'syz.1.3101': attribute type 16 has an invalid length. [ 363.879398][T16816] netlink: 'syz.1.3101': attribute type 17 has an invalid length. [ 363.887456][T16813] hsr0 speed is unknown, defaulting to 1000 [ 364.050402][T16816] bond0: left allmulticast mode [ 364.067922][T16816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.093344][T16816] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.121975][T16816] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 364.383905][T16826] tipc: Enabled bearer , priority 0 [ 364.392299][T16826] syzkaller0: entered promiscuous mode [ 364.397923][T16826] syzkaller0: entered allmulticast mode [ 364.465664][T16829] tipc: Enabled bearer , priority 0 [ 364.473812][T16827] tipc: Resetting bearer [ 364.514209][T16827] tipc: Disabling bearer [ 364.586057][T16833] syzkaller0: entered promiscuous mode [ 364.599007][T16833] syzkaller0: entered allmulticast mode [ 364.665673][T16833] tipc: Resetting bearer [ 364.691386][T16828] tipc: Resetting bearer [ 364.785170][T16828] tipc: Disabling bearer [ 364.830616][T16813] chnl_net:caif_netlink_parms(): no params data found [ 364.874833][T16851] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 364.887473][T16851] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 364.978756][T16849] tipc: Enabling of bearer rejected, failed to enable media [ 365.280333][T16813] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.295634][T16813] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.310758][T16813] bridge_slave_0: entered allmulticast mode [ 365.322454][T16813] bridge_slave_0: entered promiscuous mode [ 365.350284][T16813] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.368762][T16813] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.376773][T16813] bridge_slave_1: entered allmulticast mode [ 365.385411][T16813] bridge_slave_1: entered promiscuous mode [ 365.619732][T16813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.647218][T16813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.718675][T16813] team0: Port device team_slave_0 added [ 365.738818][T16813] team0: Port device team_slave_1 added [ 365.858053][T16813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.868758][T16813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.895679][ T5869] Bluetooth: hci0: command tx timeout [ 365.902490][T16813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.921274][ T9625] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.932863][T16813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.940207][T16813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.968874][T16813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.980903][ T9625] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.989225][ T9625] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.014457][T16896] netlink: 'syz.3.3123': attribute type 1 has an invalid length. [ 366.030894][T16896] __nla_validate_parse: 7 callbacks suppressed [ 366.030914][T16896] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3123'. [ 366.114968][ T9625] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.142923][T16813] hsr_slave_0: entered promiscuous mode [ 366.158106][T16813] hsr_slave_1: entered promiscuous mode [ 366.173842][T16813] debugfs: 'hsr0' already exists in 'hsr' [ 366.186352][T16813] Cannot create hsr debugfs directory [ 366.364619][T16910] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3126'. [ 366.375996][T16910] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3126'. [ 366.458606][T16908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3128'. [ 366.476174][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3130'. [ 366.488744][T16908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3128'. [ 366.498568][T16910] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3126'. [ 366.508035][T16910] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3126'. [ 366.571786][T16917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3130'. [ 366.615023][T16922] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3126'. [ 367.325994][T16813] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.348291][T16813] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 367.359778][T16813] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 367.524971][T16813] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.538916][T16813] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 367.556645][T16813] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 367.785891][T16813] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.821325][T16813] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 367.837737][T16813] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 367.954410][ T5869] Bluetooth: hci0: command tx timeout [ 367.978972][T16813] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.000152][T16813] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 368.047258][T16813] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 368.259538][T17008] netlink: 'syz.1.3152': attribute type 1 has an invalid length. [ 368.282798][T17008] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 368.661987][T16813] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 368.745959][ T9629] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.761540][T16813] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 368.783501][T17037] Bluetooth: MGMT ver 1.23 [ 368.784161][T16813] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 368.827950][ T9629] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.846156][ T9629] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.861523][ T9629] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.921139][T16813] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 369.277758][T17061] syz.3.3165 (17061) used obsolete PPPIOCDETACH ioctl [ 369.452747][T16813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.574949][T16813] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.626494][T17084] syzkaller1: entered promiscuous mode [ 369.635805][T17084] syzkaller1: entered allmulticast mode [ 369.724608][ T9623] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.731888][ T9623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.757033][ T9623] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.764508][ T9623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.788425][T17084] netlink: 'syz.3.3172': attribute type 12 has an invalid length. [ 369.935558][T17099] can: request_module (can-proto-5) failed. [ 370.023137][T17104] netlink: 'syz.5.3176': attribute type 11 has an invalid length. [ 370.031673][ T5869] Bluetooth: hci0: command tx timeout [ 370.183492][T17112] netlink: 'syz.2.3178': attribute type 178 has an invalid length. [ 370.407735][T12248] IPVS: starting estimator thread 0... [ 370.509585][T17124] syzkaller0: entered promiscuous mode [ 370.521164][T17120] IPVS: using max 26 ests per chain, 62400 per kthread [ 370.541043][T17124] syzkaller0: entered allmulticast mode [ 370.563804][T17124] tipc: Enabled bearer , priority 0 [ 370.585678][T17124] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 370.734072][T17124] tipc: Resetting bearer [ 370.771786][T17123] tipc: Resetting bearer [ 370.788133][T17135] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 370.804377][T17135] netlink: 'syz.3.3186': attribute type 1 has an invalid length. [ 370.813366][T17123] tipc: Disabling bearer [ 371.127288][T17138] gretap1: entered promiscuous mode [ 371.147317][T17138] bond1: (slave gretap1): making interface the new active one [ 371.172903][T17138] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 371.217636][T17141] macvlan3: entered promiscuous mode [ 371.233976][T17141] macvlan3: entered allmulticast mode [ 371.250374][T17141] bond1: entered promiscuous mode [ 371.260145][T17141] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 371.284997][T17141] bond1: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 371.329143][T17141] bond1: left promiscuous mode [ 371.493709][T17146] __nla_validate_parse: 20 callbacks suppressed [ 371.493734][T17146] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3188'. [ 371.713166][T16813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.918221][T16813] veth0_vlan: entered promiscuous mode [ 371.959683][T16813] veth1_vlan: entered promiscuous mode [ 372.077104][T16813] veth0_macvtap: entered promiscuous mode [ 372.106284][T16813] veth1_macvtap: entered promiscuous mode [ 372.113755][ T5869] Bluetooth: hci0: command tx timeout [ 372.159180][T16813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.189676][T17170] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3195'. [ 372.195780][T16813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.240438][T17171] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3196'. [ 372.257603][ T9625] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.293902][ T9625] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.320974][ T9625] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.346375][ T9625] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.407877][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.430521][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.481565][T17180] veth0: entered promiscuous mode [ 372.495616][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.504616][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.531023][T17179] veth0: left promiscuous mode [ 372.629001][T17184] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3200'. [ 372.646719][T17183] ip6gre2: entered allmulticast mode [ 372.771512][T17189] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3088'. [ 373.547464][T17214] vlan0: entered promiscuous mode [ 373.574781][T17214] vlan0: entered allmulticast mode [ 373.580046][T17214] veth0_vlan: entered allmulticast mode [ 373.645958][T17215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3207'. [ 373.850776][ T5864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 373.864210][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 373.873124][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 373.886841][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 373.891076][T17225] netlink: 'syz.2.3211': attribute type 10 has an invalid length. [ 373.903394][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 373.912868][T17225] bridge_slave_1: left allmulticast mode [ 374.062277][T17235] tipc: Started in network mode [ 374.067308][T17235] tipc: Node identity 8e5651fa8bfa, cluster identity 4711 [ 374.078312][T17235] tipc: Enabled bearer , priority 0 [ 374.092317][T17235] syzkaller0: entered promiscuous mode [ 374.108131][T17235] syzkaller0: entered allmulticast mode [ 374.117510][T17222] hsr0 speed is unknown, defaulting to 1000 [ 374.142595][T17235] tipc: Resetting bearer [ 374.163695][T17234] tipc: Resetting bearer [ 374.218759][T17234] tipc: Disabling bearer [ 374.857568][T17261] netlink: 'syz.2.3222': attribute type 1 has an invalid length. [ 374.886731][T17265] netlink: 'syz.5.3224': attribute type 1 has an invalid length. [ 374.891808][T17261] netlink: 'syz.2.3222': attribute type 3 has an invalid length. [ 374.916819][T17259] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3222'. [ 374.931547][T17261] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3222'. [ 375.129127][T17268] 8021q: adding VLAN 0 to HW filter on device bond7 [ 375.138417][T17268] bond6: (slave bond7): making interface the new active one [ 375.146749][T17268] bond6: (slave bond7): Enslaving as an active interface with an up link [ 375.185391][T17270] bond6: (slave gretap2): Enslaving as a backup interface with an up link [ 375.273729][T17273] syzkaller0: entered allmulticast mode [ 375.347333][T17273] tipc: Enabled bearer , priority 0 [ 375.466040][T17276] tipc: Resetting bearer [ 375.954138][ T5864] Bluetooth: hci3: command tx timeout [ 377.567465][T17276] tipc: Disabling bearer [ 377.656340][T17289] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 377.678289][T17295] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3232'. [ 377.801762][T17306] netlink: 'syz.0.3235': attribute type 10 has an invalid length. [ 377.825754][T17306] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 377.846738][T17306] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 377.915775][T17222] chnl_net:caif_netlink_parms(): no params data found [ 378.031557][ T5864] Bluetooth: hci3: command tx timeout [ 378.057820][T17321] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3237'. [ 378.113624][T17328] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3237'. [ 378.196539][T17324] netlink: 25 bytes leftover after parsing attributes in process `syz.0.3238'. [ 378.247062][T17331] netlink: 'syz.0.3238': attribute type 4 has an invalid length. [ 378.271260][T17222] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.278789][T17222] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.286676][T17222] bridge_slave_0: entered allmulticast mode [ 378.295256][T17222] bridge_slave_0: entered promiscuous mode [ 378.309595][T17222] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.322793][T17222] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.332556][T17222] bridge_slave_1: entered allmulticast mode [ 378.345968][T17222] bridge_slave_1: entered promiscuous mode [ 378.461803][T17341] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3243'. [ 378.489286][T17222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.517680][T17222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.586117][T17339] netlink: 'syz.5.3242': attribute type 1 has an invalid length. [ 378.670665][T17344] pim6reg1: entered promiscuous mode [ 378.691431][T17344] pim6reg1: entered allmulticast mode [ 378.706107][T17222] team0: Port device team_slave_0 added [ 378.719447][T17353] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3247'. [ 378.733545][T17222] team0: Port device team_slave_1 added [ 378.975322][T17364] netlink: 'syz.0.3251': attribute type 1 has an invalid length. [ 379.037576][T17222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.051658][T17222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.099552][T17222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.142428][T17222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.151450][T17222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.253208][T17222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.294820][T17379] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3255'. [ 379.503798][T17222] hsr_slave_0: entered promiscuous mode [ 379.514409][T17222] hsr_slave_1: entered promiscuous mode [ 379.537623][T17387] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3258'. [ 379.538287][T17222] debugfs: 'hsr0' already exists in 'hsr' [ 379.554227][T17222] Cannot create hsr debugfs directory [ 379.851987][T17398] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3262'. [ 379.883239][T17398] netlink: 'syz.3.3262': attribute type 4 has an invalid length. [ 379.920322][T17398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3262'. [ 380.111827][ T5864] Bluetooth: hci3: command tx timeout [ 380.146691][T17408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.158201][T17412] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 380.228795][T17222] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.271600][T17408] block nbd1: server does not support multiple connections per device. [ 380.294023][T17408] block nbd1: shutting down sockets [ 380.330211][T17222] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.520139][T17222] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.631861][T17421] : renamed from bridge_slave_0 (while UP) [ 380.735212][T17439] netlink: 'syz.2.3271': attribute type 13 has an invalid length. [ 380.771120][T17439] netlink: 'syz.2.3271': attribute type 58 has an invalid length. [ 380.853196][T17222] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.920773][T17447] netlink: 'syz.5.3275': attribute type 32 has an invalid length. [ 381.173706][T17457] netlink: 'syz.3.3277': attribute type 16 has an invalid length. [ 381.598970][T17222] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 381.644213][T17222] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 381.696629][T17222] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 381.733985][T17222] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 382.162646][T17222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.191976][ T5864] Bluetooth: hci3: command tx timeout [ 382.216381][T17222] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.273005][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.280582][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.393757][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.401160][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.835719][T17222] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 382.894912][T17527] bond0: (slave rose0): Enslaving as an active interface with an up link [ 382.917828][T17528] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 382.987439][T17531] __nla_validate_parse: 7 callbacks suppressed [ 382.987462][T17531] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3294'. [ 383.274181][T17543] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3298'. [ 383.327040][ T25] block nbd0: Possible stuck request ffff888025140000: control (read@0,1024B). Runtime 270 seconds [ 383.338212][ T25] block nbd0: Possible stuck request ffff8880251401c0: control (read@1024,1024B). Runtime 270 seconds [ 383.350774][ T25] block nbd0: Possible stuck request ffff888025140380: control (read@2048,1024B). Runtime 270 seconds [ 383.363889][ T25] block nbd0: Possible stuck request ffff888025140540: control (read@3072,1024B). Runtime 270 seconds [ 383.477969][T17551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3300'. [ 383.515082][T17222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.685865][T17222] veth0_vlan: entered promiscuous mode [ 383.716336][T17561] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3302'. [ 383.745948][T17222] veth1_vlan: entered promiscuous mode [ 383.860575][T17222] veth0_macvtap: entered promiscuous mode [ 383.948454][T17222] veth1_macvtap: entered promiscuous mode [ 384.080608][T17222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.164148][T17222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.239407][ T9623] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.312880][ T9625] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.394431][ T9625] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.423771][ T9625] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.455355][T17590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3311'. [ 384.504692][T17593] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3312'. [ 384.563634][T17593] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3312'. [ 384.735845][T17570] netlink: 'syz.2.3306': attribute type 8 has an invalid length. [ 384.819887][ T9629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.841283][T17603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.855464][ T9629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.997185][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.019010][T17609] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 385.031768][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.283080][T17620] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3202'. [ 385.293460][T17620] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 385.362161][T17625] netlink: 'syz.5.3319': attribute type 4 has an invalid length. [ 385.424703][T17615] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3317'. [ 385.743770][T17636] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3324'. [ 386.223503][T17650] netlink: 'syz.3.3330': attribute type 10 has an invalid length. [ 386.299082][T17650] team0: Port device dummy0 added [ 386.917682][ T5869] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 386.940734][ T5869] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 386.953053][ T5869] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 386.964177][ T5869] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 386.977108][ T5869] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 387.074454][T17670] hsr0 speed is unknown, defaulting to 1000 [ 387.829674][T17712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.145589][T17719] __nla_validate_parse: 8 callbacks suppressed [ 388.145612][T17719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3350'. [ 388.181217][T17719] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3350'. [ 388.255534][T17704] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.263326][T17704] bridge0: port 1() entered disabled state [ 388.551591][T17704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.607842][T17704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.966540][T17712] vlan2: entered allmulticast mode [ 388.974593][T17712] bond0: entered allmulticast mode [ 388.979979][T17712] bond_slave_0: entered allmulticast mode [ 388.986139][T17712] bond_slave_1: entered allmulticast mode [ 389.051614][ T9624] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.074187][ T5864] Bluetooth: hci1: command tx timeout [ 389.089342][ T9624] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.168469][ T9624] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.188880][ T9624] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.326090][T17738] IPVS: length: 157 != 24 [ 389.639925][T17750] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3360'. [ 389.806442][T17761] netlink: 'syz.5.3363': attribute type 10 has an invalid length. [ 389.850391][T17758] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 389.861571][T17759] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3363'. [ 389.879629][T17670] chnl_net:caif_netlink_parms(): no params data found [ 390.268660][T17781] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3367'. [ 390.311306][T17781] tipc: Invalid UDP bearer configuration [ 390.311383][T17781] tipc: Enabling of bearer rejected, failed to enable media [ 390.341618][T17670] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.351805][T17670] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.359190][T17670] bridge_slave_0: entered allmulticast mode [ 390.393542][T17670] bridge_slave_0: entered promiscuous mode [ 390.414131][T17670] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.444898][T17670] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.465251][T17670] bridge_slave_1: entered allmulticast mode [ 390.484843][T17670] bridge_slave_1: entered promiscuous mode [ 390.502084][T17789] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3373'. [ 390.544668][T17792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3372'. [ 390.570994][T17792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3372'. [ 390.637332][T17670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.668938][T17670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.848786][T17805] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3375'. [ 390.912238][T17802] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3374'. [ 390.947450][T17670] team0: Port device team_slave_0 added [ 390.998790][T17670] team0: Port device team_slave_1 added [ 391.152975][ T5864] Bluetooth: hci1: command tx timeout [ 391.214739][T17670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.233477][T17670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.341328][T17670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.391562][T17670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.415746][T17670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.481812][T17670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.504731][T17813] tipc: Enabled bearer , priority 0 [ 391.524945][T17827] syzkaller0: entered promiscuous mode [ 391.558441][T17827] syzkaller0: entered allmulticast mode [ 391.585616][T17814] tipc: Resetting bearer [ 391.839145][T17812] tipc: Resetting bearer [ 392.032476][T17812] tipc: Disabling bearer [ 392.079186][T17670] hsr_slave_0: entered promiscuous mode [ 392.092300][T17670] hsr_slave_1: entered promiscuous mode [ 392.098955][T17670] debugfs: 'hsr0' already exists in 'hsr' [ 392.116120][T17670] Cannot create hsr debugfs directory [ 392.318013][T17869] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 392.703536][T17884] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 392.812520][T17887] netlink: 'syz.3.3396': attribute type 10 has an invalid length. [ 392.917515][T17670] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.948091][T17670] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.040031][T17895] C: entered promiscuous mode [ 393.066404][T17895] netlink: 'syz.5.3399': attribute type 2 has an invalid length. [ 393.100988][T17895] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 393.204680][T17670] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.217756][T17670] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.231642][ T5864] Bluetooth: hci1: command tx timeout [ 393.327427][T17910] tipc: Started in network mode [ 393.335020][T17910] tipc: Node identity b2a85c348cfa, cluster identity 4711 [ 393.361798][T17910] tipc: Enabled bearer , priority 0 [ 393.387516][T17670] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.400383][T17670] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.435639][T17905] syzkaller0: entered promiscuous mode [ 393.443592][T17913] __nla_validate_parse: 36 callbacks suppressed [ 393.443634][T17913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3404'. [ 393.444001][T17905] syzkaller0: entered allmulticast mode [ 393.504375][T17670] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.515314][T17670] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.546614][T17905] tipc: Resetting bearer [ 393.572511][T17904] tipc: Resetting bearer [ 393.622085][T17904] tipc: Disabling bearer [ 393.678811][T17926] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3407'. [ 393.710424][T17926] xt_policy: neither incoming nor outgoing policy selected [ 393.994141][T17670] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 394.022697][T17670] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 394.052683][T17670] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 394.068417][T17941] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3412'. [ 394.103776][T17941] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3412'. [ 394.160956][T17670] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 394.578695][T17960] netlink: 'syz.3.3417': attribute type 2 has an invalid length. [ 394.599062][T17960] netlink: 'syz.3.3417': attribute type 8 has an invalid length. [ 394.616387][T17960] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3417'. [ 395.306750][ T9629] dvmrp1 (unregistering): left allmulticast mode [ 395.321147][ T5864] Bluetooth: hci1: command tx timeout [ 395.745294][ T9629] bond0 (unregistering): Released all slaves [ 395.760613][ T9629] bond1 (unregistering): Released all slaves [ 395.780230][ T9629] bond2 (unregistering): Released all slaves [ 395.805647][ T9629] bond3 (unregistering): Released all slaves [ 395.823330][ T9629] bond4 (unregistering): Released all slaves [ 395.844496][ T9629] bond5 (unregistering): Released all slaves [ 395.997219][ T9629] bond6 (unregistering): Released all slaves [ 396.192800][ T9629] : left promiscuous mode [ 396.342851][ T9629] tipc: Disabling bearer [ 396.359723][T17977] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3419'. [ 396.372074][ T9629] tipc: Left network mode [ 396.405925][T17977] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3419'. [ 397.005310][T17670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.125743][T18005] Dead loop on virtual device ip6_vti0, fix it urgently! [ 397.159923][T17996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3425'. [ 397.169569][T17996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3425'. [ 397.211528][T18002] tipc: Enabled bearer , priority 0 [ 397.254207][T17996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3425'. [ 397.288764][ T9624] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.307714][ T9624] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.487073][T17670] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.521090][ T9624] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.673275][T18012] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 397.734400][T18002] tipc: Disabling bearer [ 397.744944][T18012] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 397.831121][ T9624] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.857574][ T9624] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.864843][ T9624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.899137][T18015] bridge_slave_0: left allmulticast mode [ 397.919216][T18015] bridge_slave_0: left promiscuous mode [ 397.928418][T18015] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.951924][T18015] bridge_slave_1: left allmulticast mode [ 397.957719][T18015] bridge_slave_1: left promiscuous mode [ 397.957951][T18020] netlink: 'syz.5.3432': attribute type 1 has an invalid length. [ 397.971667][T18015] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.993069][T18015] bond0: (slave bond_slave_0): Releasing backup interface [ 398.019253][T18015] bond0: (slave bond_slave_1): Releasing backup interface [ 398.044719][T18015] team0: Port device team_slave_0 removed [ 398.059484][T18015] team0: Port device team_slave_1 removed [ 398.067550][T18015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.075303][T18015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.088937][T18015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.098378][T18015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.198873][T18029] IPVS: length: 185 != 24 [ 398.252308][ T9629] hsr_slave_0: left promiscuous mode [ 398.268175][ T9629] hsr_slave_1: left promiscuous mode [ 399.311204][ C1] ------------[ cut here ]------------ [ 399.324385][ C1] ODEBUG: free active (active state 0) object: ffff88805753d490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 399.337655][ C1] WARNING: CPU: 1 PID: 0 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0 [ 399.347626][ C1] Modules linked in: [ 399.352062][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 399.361076][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 399.371288][ C1] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 399.377101][ C1] Code: 4c 89 ff e8 07 d4 52 fd 4d 8b 0f 48 c7 c7 a0 41 e3 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 6a 04 b3 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 97 79 d3 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 399.396784][ C1] RSP: 0018:ffffc90000a08a10 EFLAGS: 00010292 [ 399.403180][ C1] RAX: 4e378f70d0bd6f00 RBX: dffffc0000000000 RCX: ffff88801ceb5a00 [ 399.411386][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 399.419466][ C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 399.427505][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffffffff8a6cae80 [ 399.435530][ C1] R13: ffffffff8be34320 R14: ffff88805753d490 R15: ffffffff8b8cdfa0 [ 399.443603][ C1] FS: 0000000000000000(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 399.452602][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 399.459212][ C1] CR2: 000000110c24f026 CR3: 0000000033070000 CR4: 00000000003526f0 [ 399.467389][ C1] Call Trace: [ 399.470682][ C1] [ 399.473569][ C1] debug_check_no_obj_freed+0x3a2/0x470 [ 399.479149][ C1] ? do_raw_spin_lock+0x121/0x290 [ 399.484236][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 399.489381][ C1] kfree+0x112/0x440 [ 399.493361][ C1] rose_timer_expiry+0x4cb/0x600 [ 399.498424][ C1] ? call_timer_fn+0x155/0x5f0 [ 399.503236][ C1] call_timer_fn+0x17e/0x5f0 [ 399.507858][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 399.513984][ C1] ? call_timer_fn+0xbe/0x5f0 [ 399.518676][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 399.523876][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 399.529369][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 399.534641][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 399.540157][ C1] __run_timer_base+0x61a/0x860 [ 399.545153][ C1] ? ktime_get+0x3e/0x1f0 [ 399.549582][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 399.555167][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 399.561495][ C1] run_timer_softirq+0xb7/0x180 [ 399.566639][ C1] handle_softirqs+0x283/0x870 [ 399.571459][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 399.576256][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 399.581625][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 399.586849][ C1] __irq_exit_rcu+0xca/0x1f0 [ 399.591488][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 399.596729][ C1] irq_exit_rcu+0x9/0x30 [ 399.601015][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 399.606679][ C1] [ 399.609651][ C1] [ 399.612659][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 399.618676][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 399.624590][ C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 66 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 399.644784][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 399.650904][ C1] RAX: 4e378f70d0bd6f00 RBX: ffffffff819683c8 RCX: 4e378f70d0bd6f00 [ 399.658989][ C1] RDX: 0000000000000001 RSI: ffffffff8d9b8019 RDI: ffffffff8be33800 [ 399.667121][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 399.675220][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa38e30 [ 399.683418][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d6b40 [ 399.691573][ C1] ? do_idle+0x1e8/0x510 [ 399.696122][ C1] default_idle+0x13/0x20 [ 399.700471][ C1] default_idle_call+0x74/0xb0 [ 399.705462][ C1] do_idle+0x1e8/0x510 [ 399.709675][ C1] ? __pfx_do_idle+0x10/0x10 [ 399.714459][ C1] cpu_startup_entry+0x44/0x60 [ 399.719350][ C1] start_secondary+0x101/0x110 [ 399.724198][ C1] common_startup_64+0x13e/0x147 [ 399.729269][ C1] [ 399.732359][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 399.739952][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 399.749336][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 399.759676][ C1] Call Trace: [ 399.762959][ C1] [ 399.765841][ C1] dump_stack_lvl+0x99/0x250 [ 399.770557][ C1] ? __asan_memcpy+0x40/0x70 [ 399.775165][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.780394][ C1] ? __pfx__printk+0x10/0x10 [ 399.785026][ C1] vpanic+0x281/0x750 [ 399.789025][ C1] ? __pfx__printk+0x10/0x10 [ 399.793820][ C1] ? __pfx_vpanic+0x10/0x10 [ 399.798383][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 399.803910][ C1] panic+0xb9/0xc0 [ 399.807731][ C1] ? __pfx_panic+0x10/0x10 [ 399.812356][ C1] __warn+0x31b/0x4b0 [ 399.816341][ C1] ? debug_print_object+0x16b/0x1e0 [ 399.821898][ C1] ? debug_print_object+0x16b/0x1e0 [ 399.827290][ C1] report_bug+0x2be/0x4f0 [ 399.831618][ C1] ? debug_print_object+0x16b/0x1e0 [ 399.836898][ C1] ? debug_print_object+0x16b/0x1e0 [ 399.842119][ C1] ? debug_print_object+0x16d/0x1e0 [ 399.847631][ C1] handle_bug+0x84/0x160 [ 399.851998][ C1] exc_invalid_op+0x1a/0x50 [ 399.856523][ C1] asm_exc_invalid_op+0x1a/0x20 [ 399.861473][ C1] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 399.867376][ C1] Code: 4c 89 ff e8 07 d4 52 fd 4d 8b 0f 48 c7 c7 a0 41 e3 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 6a 04 b3 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 97 79 d3 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 399.887403][ C1] RSP: 0018:ffffc90000a08a10 EFLAGS: 00010292 [ 399.893596][ C1] RAX: 4e378f70d0bd6f00 RBX: dffffc0000000000 RCX: ffff88801ceb5a00 [ 399.901618][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 399.909684][ C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 399.917786][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffffffff8a6cae80 [ 399.925784][ C1] R13: ffffffff8be34320 R14: ffff88805753d490 R15: ffffffff8b8cdfa0 [ 399.934051][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 399.939815][ C1] debug_check_no_obj_freed+0x3a2/0x470 [ 399.945486][ C1] ? do_raw_spin_lock+0x121/0x290 [ 399.950570][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 399.955812][ C1] kfree+0x112/0x440 [ 399.959728][ C1] rose_timer_expiry+0x4cb/0x600 [ 399.964670][ C1] ? call_timer_fn+0x155/0x5f0 [ 399.969441][ C1] call_timer_fn+0x17e/0x5f0 [ 399.974032][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 399.979601][ C1] ? call_timer_fn+0xbe/0x5f0 [ 399.984289][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 399.989426][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 399.994658][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 399.999998][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 400.005488][ C1] __run_timer_base+0x61a/0x860 [ 400.010340][ C1] ? ktime_get+0x3e/0x1f0 [ 400.014685][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 400.020071][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 400.026414][ C1] run_timer_softirq+0xb7/0x180 [ 400.031396][ C1] handle_softirqs+0x283/0x870 [ 400.036410][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 400.041292][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 400.046644][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 400.051979][ C1] __irq_exit_rcu+0xca/0x1f0 [ 400.056602][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 400.061816][ C1] irq_exit_rcu+0x9/0x30 [ 400.066466][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 400.072177][ C1] [ 400.075316][ C1] [ 400.078364][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 400.084386][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 400.090109][ C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 66 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 400.109984][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 400.116068][ C1] RAX: 4e378f70d0bd6f00 RBX: ffffffff819683c8 RCX: 4e378f70d0bd6f00 [ 400.124135][ C1] RDX: 0000000000000001 RSI: ffffffff8d9b8019 RDI: ffffffff8be33800 [ 400.132130][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 400.140283][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa38e30 [ 400.149073][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d6b40 [ 400.157255][ C1] ? do_idle+0x1e8/0x510 [ 400.161698][ C1] default_idle+0x13/0x20 [ 400.166210][ C1] default_idle_call+0x74/0xb0 [ 400.170973][ C1] do_idle+0x1e8/0x510 [ 400.175246][ C1] ? __pfx_do_idle+0x10/0x10 [ 400.179869][ C1] cpu_startup_entry+0x44/0x60 [ 400.184688][ C1] start_secondary+0x101/0x110 [ 400.189650][ C1] common_startup_64+0x13e/0x147 [ 400.194795][ C1] [ 400.198285][ C1] Kernel Offset: disabled [ 400.202701][ C1] Rebooting in 86400 seconds..