last executing test programs: 2.887139244s ago: executing program 2 (id=1327): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000004680)=[{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000600)="00128f6787bbda3e1597c5f656fa1f40", 0x10}], 0x1, 0x0, 0x0, 0x4002}], 0x1, 0x4044800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x8c0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) 2.809995907s ago: executing program 2 (id=1329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8}]}, 0x6c}}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) r2 = syz_open_procfs$namespace(r1, &(0x7f0000000140)='ns/pid\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x2000003, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x4002, 0x4000}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}]}, 0x40}, 0x1, 0xd, 0x0, 0x4008845}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r5 = accept(r3, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000100)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x66, 0xa, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @remote, {[@noop, @timestamp_prespec={0x44, 0x3c, 0xf4, 0x3, 0x7, [{@multicast2, 0xb61d}, {@local, 0x400}, {@multicast1, 0x6}, {@remote, 0x7}, {@broadcast, 0xfffffc01}, {@multicast1}, {@empty, 0x8001}]}]}}}}}}}, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0xfffffffffffffffb) sendmmsg$alg(r5, &(0x7f0000001a80)=[{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000004c0)="af1b3f1b205dad4ab38248541eb62165129e1210209045aa4f78bc81276c50a6d016c28087f3157d2364", 0x2a}, {&(0x7f0000000500)="6d87202237a75ac67aa150a62f55271985359ecfe8113ed49f37a4ef95d6d9667a10758b0f992025ec0b7f33da70f54f603199d85a2c709ce5bad007385804", 0x3f}, {&(0x7f0000000600)="fd3c34f687297c63c2ed81541b2fd0069ede3384d1510b", 0x17}], 0x3, 0x0, 0x0, 0x4048848}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000009940)=[{{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f0000005900)=""/135, 0x87}], 0x1}, 0x7}], 0x1, 0x100, 0x0) 2.710226821s ago: executing program 4 (id=1331): r0 = socket(0x28, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c2572301c17f1be560ac4286de40ae966724509b22540cb1f23c87fe73e472f5e9138ecd68d0b01f3545a9b2cb6673548422207e3a713cb5afb72503857252bbd4d46205ffe78de0ccadba808746400fe2d675b9cf087e2958e393d515b5e2288370afbc618ad143d8a2d75854c268edccf99b98e44b57091ed87957823ccc5e17b9b78daf5042925035debae665e0c98b73f4ea68a7741f5cfc9b5ced555d95920ad720f35e0909c", @ANYRES64=r4], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffb, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xfffffffffffffff8}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r17, {0xffff}, {0xffff, 0xffff}, {0x2, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9c, 0xa, 0x4, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) sendmsg$nl_route_sched(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@getchain={0x24, 0x66, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0) 2.519542432s ago: executing program 4 (id=1338): r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/142, 0x8e}], 0x1, &(0x7f0000000180)=""/164, 0xa4}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x0, 0x0) mkdirat$cgroup(r3, &(0x7f0000000300)='syz1\x00', 0x1ff) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r3) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r4, 0x900, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xdd4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc004}, 0x40080) r5 = openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000004c0)=0x0) write$cgroup_pid(r5, &(0x7f0000000500)=r6, 0x12) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000540)={r0}) socket$alg(0x26, 0x5, 0x0) r8 = openat$cgroup_ro(r3, &(0x7f0000000580)='cpuacct.stat\x00', 0x0, 0x0) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r9, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x3fa, 0x400, 0x70bd2c, 0x25dfdbfb, {0x1, 0x1, 0x1, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4060051}, 0x20000000) close(r8) openat$cgroup_int(r3, &(0x7f00000006c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000700), 0x4) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), r8) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x90, r10, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x228}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff91a}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x54c}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x4008000) ioctl$sock_inet_SIOCGIFBRDADDR(r7, 0x8919, &(0x7f0000000900)={'\x00', {0x2, 0x0, @multicast1}}) select(0x40, &(0x7f0000000940)={0x100, 0x800, 0xffffffffffffffff, 0x1, 0x8, 0xfffffffffffffffd, 0xbaf, 0xffff}, &(0x7f0000000980)={0x0, 0x6, 0x48, 0x40, 0x3, 0x4, 0x10, 0x2}, &(0x7f00000009c0)={0x800, 0xff4, 0xa, 0x7, 0x2, 0x7fffffffffffffff, 0x5, 0x3}, &(0x7f0000000a00)={0x0, 0x2710}) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r11, &(0x7f0000001940)=[{{&(0x7f0000000a40)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000a80)="a66d194ed8b90a6975925a0ddbe146fbe099b4b24e7d6b68a1f01b87f459a50de4e25bf402b8fad9de1bf35d7b3ae5409af0c4259a11407226f93dc3e3085ed18a65335e43aa3fee96e4b99a35a20f05771d6d70f15cb1646650664e09dd7badb30a81e27d22c736b98e4f330bdf576a421e4a7b438907c5ddc54bdd2521a1737d2e7e3accbc26b454e1c7bb65f00a1cbba017dfbba9697aca7faa317f311d76acb64847961f61af78516b4e60ef5fedd6be8919ee9a5dac83318fbd89e06e554d55438601d25ff908a1b1f586d42e672f4e6f73448fc9705ed011a7049e6bef53e2ac", 0xe3}], 0x1, &(0x7f0000000bc0)=[@hoplimit={{0x14, 0x29, 0x34, 0x2}}, @tclass={{0x14, 0x29, 0x43, 0xfffffff8}}, @rthdr={{0x28, 0x29, 0x39, {0x6, 0x2, 0x0, 0x7d, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x23}, r1}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @hoplimit={{0x14, 0x29, 0x34, 0xf2}}], 0xc8}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000cc0)}, {&(0x7f0000000d00)="22982db1f138ff9be9c2559a097c7e4caa296366", 0x14}, {&(0x7f0000000d40)="b99592fb742b1c21bd887ef1ca478c77a5e5d2fde25500b307966227f6ed917ebfe728e88ec5b8546d59fdef24ddbbac71d2d8ce49c04f0ac697c6ca0b0d", 0x3e}, {&(0x7f0000000d80)}, {&(0x7f0000000dc0)="c8ddbb7596bf5e929f19888f1d1794c0a227b1b3ce34a3da98", 0x19}, {&(0x7f0000000e00)="bd1105dde30e8e6d3feb69be085f19f84a796cdb0405da57c078947bd2e17138b78e896f5abd1d6a8526c57372e67b49c9f6fb1a91378e316ddf18195c9fd70cdcdcd5ce64f3c615d8b703f78a35b2cf3a1f4f652e12bba0476f7831737087d90c27d95225e01c54d992976f0cf1c8aef6b05cdbc7f690d9ee22ea769c0d1d8662be0d076f0cb06173b27497694d1051c81781d6bbb9ec39a6c4ada7fe5def7a90a5da2d1f33af6024b9c4773b1f8620b44cef9fd656", 0xb6}, {&(0x7f0000000ec0)='V<', 0x2}], 0x7, &(0x7f0000000f80)=[@hopopts={{0x28, 0x29, 0x36, {0x84, 0x1, '\x00', [@ra={0x5, 0x2, 0x7}, @pad1, @enc_lim={0x4, 0x1, 0x4}]}}}, @tclass={{0x14, 0x29, 0x43, 0x2}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}, @rthdr={{0xa8, 0x29, 0x39, {0x3b, 0x12, 0x2, 0x4, 0x0, [@mcast1, @dev={0xfe, 0x80, '\x00', 0x22}, @dev={0xfe, 0x80, '\x00', 0x14}, @ipv4={'\x00', '\xff\xff', @local}, @dev={0xfe, 0x80, '\x00', 0x32}, @dev={0xfe, 0x80, '\x00', 0xb}, @loopback, @mcast2, @private1]}}}], 0x100}}, {{&(0x7f0000001080)={0xa, 0x4e21, 0x10000, @remote, 0xdb3b}, 0x1c, &(0x7f0000001480)=[{&(0x7f00000010c0)="1c50f51349a12d99c35404de232860b07c0086842e48232f5353b3ec97411de524925f526cae0cef0f8011ed9cb3ff", 0x2f}, {&(0x7f0000001100)="80e2add8ced9fa0f838427020ab49bba380cc6c204e066627f2cd0ce5fdb2e767b245806dd513058e96866051ec1a94aa861b4e60c8cd2128ed36960b38c5a52ee290fced903d18e3018792b9cec1607ce41328cd9f340b387ecf512916b12dd383fce482e2313cdda1e7ae2a0faed75faea059ae135e7b5bf1c888bce14c135b91796c0aba52ed06bcbbd9032a1c4f5069ec62808216b8cab496ba4f716117370d2c86b6038cb34a9f5caffac73e83904379834effea117d351ad4d5ac3bd3fd8b1afde0e0a50306ee59bb902db62", 0xcf}, {&(0x7f0000001200)="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", 0xff}, {&(0x7f0000001300)="90602871c49bb1c0c7b8286c607e93dd02880f51ad1127513cd989a4a1da8a8bd3c5f6aadefbee07557c2318a209f9c3f4ee97b571f0d63b57dde3ddf4ed9c0948d8b9183b30814f5f14e8", 0x4b}, {&(0x7f0000001380)="64b0f37e543289bae8eecb914124f8ced0357b17907475f388a59aa7ff38bf82a1", 0x21}, {&(0x7f00000013c0)="24cb31c9e28843b5e7d3cbf276bd0a259e595ff6b14ccd1af395160cefd13ceec9a3aa8fc5b99ed348edd1c441a2eeba32034672783647dd1505bc99fd2a27e793bddda792b2d3f539b39ff2f8776827adb0f4c5e57cbde47ff265d62dccc7b06c85a76f502b22e259f627dcde67593e111b7084141707f71c02465b4e0046706a0ef84675871b16d1553d9c79f454806e69b68fbc3ee697c69b03a9036cf0bf31933c822be3618bad2e0b26a69bff6e15ba9b18b61f684d4cf9766945eb", 0xbe}], 0x6, &(0x7f0000001500)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x17, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x1}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x6c, 0x1, '\x00', [@ra={0x5, 0x2, 0x40}, @ra={0x5, 0x2, 0x3}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r1}}}, @dstopts_2292={{0x1a0, 0x29, 0x4, {0x3b, 0x30, '\x00', [@enc_lim={0x4, 0x1, 0xf}, @pad1, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x18, {0x3, 0x4, 0xd, 0x2, [0x3, 0x3]}}, @hao={0xc9, 0x10, @local}, @generic={0xf2, 0x53, "5e4ef32b3aaacdb8cc1ddaa595dd5e5102638b5ca335f918695db6c068fb3f2cc55e48052306476dbe7b500d0e95b19907af4160b9a0d118de0968392287e7d6d449565888b9d7a75675c5eb3237dd58b3c547"}, @generic={0x3, 0xf9, "9231063b1ae5ab9b8b58c17526540f67a878cf8f76a1caed80bf466aead38cfaf66de34b454e27b8cbb8f735897157819a8ca5f992f1a4bc21b59b5e3254d800498ca388f878c53388ca24f6d6914d076258d7a26b300c9c76f114c1e0002fff50ee5b0b3c09cdc2af97b13c542ea1b85cd0d60be2d5edc4545eaf9f3527de89bc2cabda81716eae9cff47c5a67c7cc7ca0d82bce6c9f1a741c3760ae820c7b14894820089ecc81065306c4a153aa39c09321da1b266dc1937e1f6ccebf2b19bed1021ad6ed2c7f5ec31f64b3432d8ebffd317271f0b5e8e41d149d8ed1b39b1f10d1733330bf9fd608d2dd493662eebf83a7510518b80640e"}]}}}], 0x208}}, {{&(0x7f0000001740)={0xa, 0x4e24, 0xffffff64, @mcast1, 0x80000001}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000001780)="532e3d2bb6aedaf4016020e1f63d279690d2fc7c2beadd386228c23493b7caf59608f7dbd98e7f98346002e5e40bae6229d138bc927a349a344f4ad214f306700ba80fe63ac82ccfe98157ad5810d4e79c58b4d7ab877c04d803bddf1b3dcf4650ee92f93dea8239c75ff8d044209d70057a73c7fdeb2f9d48cfa7f04ad4211217a9377a867bceccb606b2cf18c251d111e572c28b26a4af6b7df3a81b09b1ea9ffbe95c2e8b4f0496708b04a0e06592e98cfd8d78099a245273029ae83d217fbfe7", 0xc2}, {&(0x7f0000001880)="25f2032379cc222ba7d676e6ad6fd68cacb2c7c4eb1addebbf14efda0b97ba9e6c0e0ab0151b98a963afd9738f49bbc414cee253c14d45383e6c452a82e1b331b935f303b65fb8991a94360b59514473236d56440e6eb5929044", 0x5a}], 0x2}}], 0x4, 0x40052) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000002c00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000001a80)={0x113c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x1f}, @void, @val={0xc, 0x99, {0x54, 0x3d}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_DATA={0xdd, 0xc5, "ffe425d6739937ac25b05c2c0861674696e776cd2ae7483b9cc3a0e723e07e1fdd1b5aabcf1cbf2ffb5bd6a1bacd31fc8809f4987eb7a92379bfac73630f586d1b66d78724540b77e2d0d910ab13e333bd4b0f40c910548515a6b7c56acf64e2fbb40a0662315b782ce8639221f3d6cd86d7a4782278dca22a328e5c1e485125a1e99d894236661e6030b472b4dfdb115b9aa6eaef225de6edb277fa00adc5f97fa4a3dbe4b1285235bbe36fce25eabf4254c4bcf2d03a8f1f34e784d8f4984347234a906c9564d8ca0a9eb7769fbd7b79c0ef5ffa9109e3bf"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}]}, 0x113c}, 0x1, 0x0, 0x0, 0x8044}, 0x20004021) ioctl$SIOCPNDELRESOURCE(r7, 0x89ef, &(0x7f0000002c40)=0x7) socket$kcm(0x29, 0x7, 0x0) recvfrom$phonet(r7, &(0x7f0000002c80)=""/39, 0x27, 0x100, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000002d00)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f00000030c0)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x802090}, 0xc, &(0x7f0000003080)={&(0x7f0000002e80)={0x1e4, r4, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 1.88452999s ago: executing program 2 (id=1355): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r2, 0x0, 0xeffd) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x41}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) write$tun(r5, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x10000}}}}}}}}, 0x52) 1.434714068s ago: executing program 4 (id=1357): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'ip6gre0\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89b0, &(0x7f0000000080)={'vlan0\x00', 0x2000}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r4, 0x107, 0xd, 0x0, &(0x7f00000002c0)) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001010010000ff000a140000000900000000000000000002000002140000001100010000000000000000000700000a0000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004"], 0x328}}, 0x84) 1.220381416s ago: executing program 1 (id=1363): r0 = socket(0x8, 0x6, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000100)={0x0, 0x0}) (async) socket$netlink(0x10, 0x3, 0x5) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="30000000100001000000700200000000000000002e4b6e3223758c809b1f0abb9a95148a90fe38344df398d1fc6e2462ad3b4ccea654d49937f92496d882e73799f0109eb736730389bae06711d15fe31fc9a84c95fef6b8d604fa76bc21afa3ef65227beb75cebb4f43609a4f748048d2d424e000"/132, @ANYRESOCT=0x0, @ANYRESDEC=r2, @ANYRES8=r3, @ANYRES32=r1], 0x30}}, 0x0) 1.116298525s ago: executing program 4 (id=1364): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="c000000000000000000000000000000069869f9b4a0074586c9f0c522844c65014127e4651d085a89043138706e79a415b0b0d126c51c1215cfe34997eddd2b4a8256b525b5c15b219daa9ce4cca864a73d9c49ae2771bb70203ebd653200a0d37a0c028cb33b28c7532f384febe039d54537e6952f92cc821c13f34a5426d1532ddd442827bd8dae047fac4b17d711520cd27e961b3719609ab712940ecf8144bddecefbabf2f18e909822089ac4fcedea2b8ec7e90d0456d07b3770b6700009000000000000000000000000000000072a9590a604c03a1efaa205b95ad3fe1e977c3d1d1408ae17ab1ff9118f13db566222a1e12c010521a70c445d97d0cba145ba79178a6d3bbaf70f226652e625fada31ca89eb8c925dd4508fcd45487d3c7adbd913b169777e4af51b9946246bba4c4738a0c7eddb08f69d74199764d908782652867dcd1da4aae000000000000e0000000000000000000000000000000187ab360a4694eb57bbe6342b5dda581327297f3380b94699ac0c4df81a9904c6b5b40886799172be834dbee1691a0b86881e701b7411036b9d70173dcfe9af0e46c8b97f7a94c1cb39e3ff9ffb5ead3394e9aa03d9a841b579823964df8643ed6ce4a33534bd8f71d23cf382643573c2b096540e8b3015e71ab7ab18d7b0365f8a57e46b31177feadae2f9ba08c35dc719f7dfe28f5aac4213806b82bfc2390dc42727cc56d3bbf03700c77441d5e788d6ef2656c82c6b151c4180dbf2b21d7e7f8e824eb8e2c6ab2000000400000001800000000000000100100000d0000004ecbeb07"], 0x248, 0xe000}, 0x5}], 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0x12) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000300)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1400000000000000010000000c"], 0x14}, 0x800) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000}) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x6, 0xd27}) (async) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delqdisc={0x24, 0x25, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x8}, {0x3, 0xd}, {0x8, 0x2}}}, 0x24}}, 0x40004) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) socket$qrtr(0x2a, 0x2, 0x0) (async) sendfile(r4, r3, 0x0, 0xfffbffff) 1.034385752s ago: executing program 1 (id=1367): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000080)=0x4, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r2, r1, 0x0, 0xe25) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x5e}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000cf3000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/21, 0x15, 0x1, &(0x7f0000000280)=""/146, 0x92}, &(0x7f0000000200)=0x40) sendmsg$inet(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="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", 0x18f}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e0325bc473c3aeaf6709e5227bca1f7ba283d381d4f64e34fa77c5cac5d0bcf72850aaa9ea7f9144a008ae41f51262011dd0a3eb6eaf00da010b18a79f6917d0c25efbf1c56feb59cbf4683c026aa7aa1d65bea9ba31000000", 0x91}, {&(0x7f0000000940)="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", 0x105}, {&(0x7f0000000500)="0f1d547dfd011eee5ee96e9f1947841b6080ffadffd0f2ba53588a463cb08890097ea28302b894feb895cebb0e72a94c681955c3a39a1e5ebde1638c8f408cbb197ede5a6779e4732b685db9abb1184d1e4bf53bb5eafcc7d265002aeead4852d157cfb83a10f4d80f000000000000a7f702c9424df1ffbd0387c5e7777aa1bf37cbffb95d0daf", 0x87}, {&(0x7f0000000d40)="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", 0x1d4}, {&(0x7f00000020c0)="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", 0x981}], 0x6}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.state\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvfrom$inet6(r3, &(0x7f0000000100)=""/19, 0xff1, 0x40, 0x0, 0x0) 900.379004ms ago: executing program 1 (id=1369): r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000100009050000000000000000b1ff2e5c5360538c5698b6b7f39c417223b4d07456d68ee6758887d396e5c839d5a9000080afc7872d3c4a648166b916526af53872845d1f1ac1df1d4db700301c32882813fb5aad2faf74aaeeb870af1ed5a0fd551829fcd1dcccc26cf6a064e1c271394e2ef9ba127e7a8091b7ae725cf193b9cf29aa4de9082491d489819b"], 0xe0}], 0x1}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, 0x0, &(0x7f00000000c0)) (async) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000100009050000000000000000b1ff2e5c5360538c5698b6b7f39c417223b4d07456d68ee6758887d396e5c839d5a9000080afc7872d3c4a648166b916526af53872845d1f1ac1df1d4db700301c32882813fb5aad2faf74aaeeb870af1ed5a0fd551829fcd1dcccc26cf6a064e1c271394e2ef9ba127e7a8091b7ae725cf193b9cf29aa4de9082491d489819b"], 0xe0}], 0x1}, 0x0) (async) 898.908523ms ago: executing program 4 (id=1370): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x1000, @loopback, 0x67d}, 0x1c) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc11000012000102000800000000000000000000000000000000009600"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000f504010007c01c0002"], 0x11fc}}, 0x0) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x80800) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x1000, @loopback, 0x67d}, 0x1c) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc11000012000102000800000000000000000000000000000000009600"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000f504010007c01c0002"], 0x11fc}}, 0x0) (async) listen(r0, 0x0) (async) accept4(r0, 0x0, 0x0, 0x80800) (async) shutdown(r0, 0x1) (async) 846.379589ms ago: executing program 2 (id=1371): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r1, &(0x7f0000000640)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0x400}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x1}], 0x1}}], 0x2, 0x4008040) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ac14140c000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa33000000eeff000002000a00"], 0xa0}}, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000040)={0x3c, 0x4, '\x00', [@hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @mcast2}]}, 0x30) 827.167885ms ago: executing program 1 (id=1372): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bf7b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 742.017161ms ago: executing program 2 (id=1374): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x1000000c}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000140)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x15, &(0x7f0000000040)=@raw=[@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], &(0x7f0000000100)='GPL\x00', 0x2, 0x56, &(0x7f00000002c0)=""/86, 0x41000, 0x4a, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x10, 0xd, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[r3, r0, r0, r0, r0], &(0x7f0000000400)=[{0x3, 0x4, 0x0, 0x7}, {0x4, 0x1, 0xf, 0xa}, {0x0, 0x3, 0xc, 0x5}, {0x3, 0x2, 0x10, 0x5}], 0x10, 0xffffffff}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x3, 0x0, 0x0, 0x3}}, &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x94) 738.995659ms ago: executing program 4 (id=1375): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) sendfile(r0, r0, 0x0, 0xa) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x8, 0x7, 0x4, 0x5, 0x1, 0xd, 0x5, 0x2, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r1, 0x5}, &(0x7f0000000100)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xe}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000340)=0x40) 710.852986ms ago: executing program 0 (id=1376): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, "08dbd603b0f9c586"}}, 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x2, 0x90, 0x80000, {0x77359400}, {}, {}, 0x1, @can={{}, 0x40, 0x5, 0x0, 0x0, "ce2a4fa7a0aa108b"}}, 0x48}}, 0x40884) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, @loopback}, @RTA_SRC={0x8, 0x2, @loopback}]}, 0x2c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xa, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xae}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x0, 0x4, 0xf4}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x40}}, 0x0) 671.821345ms ago: executing program 2 (id=1377): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0xf, 0x20003e90) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000200)=[{r1, 0x8640}], 0x1, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r5, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x4, 0xfffffffd, 0xf67f, 0x4}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20040884}, 0x1) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r9, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x26, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @multicast1, @empty}}}}) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)) sendmsg$nl_route_sched(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x2}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r11, {0x7, 0x9}, {}, {0xc, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x60006010}, 0x200008c2) r13 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r13, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}]}, 0x70}, 0x1, 0x7}, 0x44000) 600.163874ms ago: executing program 1 (id=1378): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000240)={0x0, 0x28, 0x20, 0x1, 0x401}, &(0x7f0000000280)=0x18) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={r3, 0x20, "d656c9a61490b7e8773ca55437fa234c0170c8cbe5ebdd2be9"}, &(0x7f0000000180)=0xfc86) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@map, r7, 0x36, 0x4, 0x0, @void, @value=r7}, 0x20) (async) socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xbb}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800900010068617368000000002400028008000440000080010800074000000001080002400000001208000640000000090900010073797a30000800000000000000797a00154f7c72f5fa21001100010000000000000000000000000a"], 0x8c}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [], {0x14}}, 0x28}}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r10 = socket(0x10, 0x3, 0x0) (async) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r11, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) (async) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000006c0)={r4, 0x65, "f186de27141df4ebee7c2983791c9cbbe319cd069da5f7caf3d8c7167202b65efdb536e0ffaa6a5542161ba7a95445f1194a118754be1b501c306a4eb2e8f03852cebfabe72253d3c904f4b90dabb5ef12434409d55c14d27d69d9573812a8ff79420bcbc4"}, &(0x7f00000001c0)=0x6d) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r12}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r12}, 0xfffffffffffffe53) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 553.195849ms ago: executing program 0 (id=1380): r0 = socket$nl_route(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x700) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000100000000000000000000000003", @ANYRES32=0x0, @ANYBLOB="5001000000018004000c80000400"/28], 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x3c, 0x33, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x20, 0x2, 0x0, 0x1, [@nested={0x1c, 0x17, 0x0, 0x1, [@typed={0x4, 0xad, 0x0, 0x0, @binary}, @typed={0x14, 0xfb, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}]}, 0x48}}, 0x0) 472.037381ms ago: executing program 1 (id=1381): socket$inet6(0xa, 0x3, 0x5) (async) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private1, @in=@multicast2, 0x0, 0x966, 0x0, 0xfffc, 0xa}, {0x1, 0x4, 0x0, 0x80000000, 0x6, 0x9, 0x0, 0x40000000000000}, {0x0, 0x9, 0x53e1, 0x23}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x2, @in=@multicast1, 0x1502, 0x4, 0x0, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x1b8, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xa5, 0xa9, @random="b51a816b5b7a72896788585160ef4cd3f41e7656215980f0797ed72060a937abaa179987a1380b571589ff04924a9f96e2e254a257970299f6f68d15ba5879740cf38fcae3d819b9e5a4453001c172eefe411dfeedc08fc22c94861ed55dafd6f767388d1c364bed70a47043a708264806825d0a6d09c9027f12d1b014181700ec11f0c013574d0cec268fe630893ea1ee5e9b35e9a3fb9b93d2fe44f198813240"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xaa, 0xa9, @random="001ce7cddd46695e8a7e634b138772d2e0a11a3cd201569d9e861af82a397da03ec3ba7cae9ce4ceb2e379646f2494263629d972a04693eaf935d2810fd868a1bd9c4c27378eb652d37b58326fab97121f69fa8dd6daae9d9cfe184d087566ba3744258207e3c7c192e64c57cd25f9e7a4a486d5552d5d5d14113e42919484dd793d954e053bc862b5bb0c14ac85cdba55e2419e350849b8f67a81aa7507fe084d6fda3bcfb4"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8c}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x5}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x5c}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x1}, 0x1) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') (async) r6 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) (async) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) 471.223144ms ago: executing program 0 (id=1382): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) accept$alg(r3, 0x0, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x50, r2, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xc69, 0x22}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x20040004) (async) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x50, r2, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xc69, 0x22}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x20040004) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x4, 0xa}]}]}]}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x4, 0xa}]}]}]}]}, 0x2c}}, 0x0) 419.807185ms ago: executing program 0 (id=1385): r0 = socket(0x2, 0x2, 0x0) getsockopt$nfc_llcp(r0, 0x88, 0x68, 0x0, 0x20000000) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004", @ANYRES8, @ANYRESDEC, @ANYBLOB="fde613e966de9f82f2b00d3b91e77dfd5f19e8b4ba6a1f8dd85517a586fa5d50ac29ff17f93c52bb34f7ed93b6f373ad5baae92f42de348436242c037dde840656122e8c272a2bef36e1a0d125ca946635e4569d3fa87dda554652ab", @ANYRESOCT=r0, @ANYRES32=r0], 0x0, 0x26}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xad, &(0x7f0000000540)=""/173, 0x0, 0x15, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtfilter={0x30, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in=@local}, {@in=@empty, 0x0, 0x33}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2, 0x5}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}]}, 0x13c}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) (async) r12 = socket(0x10, 0x803, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) setsockopt(r4, 0x3, 0x6, &(0x7f0000000440)="330ed20e57fe592bc6061f2bcd7212fee9ed32918e4908", 0x17) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r15, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r17 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r16}, 0x90) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c00000010000100"/20, @ANYRES32=r14, @ANYBLOB="00410000000000000c002b8008000100", @ANYRES32=r17], 0x2c}}, 0x0) r18 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002ff0100000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r11, r2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYRES8=r18, @ANYBLOB="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", @ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000b80), 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x3, 0x0, 0x2}, 0x10, r11}, 0x94) 288.637775ms ago: executing program 0 (id=1386): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xbc}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xbc}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getpeername(r1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000071103e00000000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94) 283.976836ms ago: executing program 3 (id=1387): r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r1, 0x0) write$cgroup_subtree(r1, 0x0, 0x4d) (async) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) (async) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 269.965669ms ago: executing program 0 (id=1388): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x4, 0x13, {0x0, "fea22255b36d2a6f2096c248b30c"}}]}, 0x30}}, 0x0) (async) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f0000000000)="15c834b031c309fd") (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xe25, '.\x00'}}) 242.944846ms ago: executing program 3 (id=1389): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x22, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xfe, [0x0, 0x0, 0x1, 0x7, 0x6, 0xfd, 0x0, 0xfe, 0x3, 0x10], 0xfe, [0x4, 0x2, 0xfffe, 0x4e3e, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffe]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 182.36032ms ago: executing program 3 (id=1390): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}]}, 0x48}, 0x1, 0x0, 0x0, 0x1008}, 0x40) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) accept$nfc_llcp(r1, &(0x7f0000000140), &(0x7f00000001c0)=0x60) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000200)=0x80000001, 0x4) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r3 = socket$isdn(0x22, 0x3, 0x22) ioctl$IMCLEAR_L2(r3, 0x80044946, &(0x7f0000000340)=0x4) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000380)=0x6, 0x4) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f00000003c0)={0x7}, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000400)=[@window={0x3, 0x3, 0xa31}, @sack_perm, @sack_perm, @mss={0x2, 0x800}, @sack_perm, @timestamp, @timestamp], 0x7) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000440)={0x0, 0xd3, 0x0, 0x8001, 0x12d80000000}, &(0x7f0000000480)=0x18) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f00000004c0)={0x0, 0x7fff, 0xe328ff1e, 0x37, 0xfffa, 0x81, 0xf, 0x6, {r6, @in={{0x2, 0x4e22, @remote}}, 0x89, 0x315, 0x101, 0xc6, 0x8}}, &(0x7f0000000580)=0xb0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, 0x7f0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x2}, 0xe) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000600)={r6, @in={{0x2, 0x4e22, @loopback}}, 0x1, 0x0, 0x1, 0xffffffff, 0x40, 0x6, 0x56}, &(0x7f00000006c0)=0x9c) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f0000000700)={0x9, 0x0, 0x3}) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_GET(r8, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, 0x1409, 0x2, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8641d1b0ed58989c}, 0x2000c000) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000880)={0x0, 0x400, 0xd, 0x2, 0x5, 0x7, 0x1ff, 0xffff5b7a, r7}, 0x20) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_RCVMTU(r9, 0x112, 0xd, &(0x7f00000008c0), &(0x7f0000000900)=0x2) r10 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000940)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000980)=0x1c, 0x800) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r10, 0x84, 0x15, &(0x7f00000009c0)={0x7}, 0x1) ioctl$sock_netdev_private(r10, 0x89f2, &(0x7f0000000a00)="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") sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x30, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1d}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 36.447891ms ago: executing program 3 (id=1391): unshare(0xc040480) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRESHEX], 0x2c}, 0x1, 0x0, 0x0, 0x200040c0}, 0x24000881) 34.469487ms ago: executing program 3 (id=1392): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'cpu'}]}, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc550181561139e82, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value=r1}, 0x94) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008800) listen(r2, 0x0) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) 0s ago: executing program 3 (id=1393): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newlink={0x34, 0x10, 0x50f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}}, 0x40048d0) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0x7fffdffff000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe18}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$rds(0x15, 0x5, 0x0) getsockopt(r3, 0x1, 0x45, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.185' (ED25519) to the list of known hosts. [ 70.378707][ T5847] cgroup: Unknown subsys name 'net' [ 70.544141][ T5847] cgroup: Unknown subsys name 'cpuset' [ 70.553212][ T5847] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.323317][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.330329][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.974579][ T5847] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.970318][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.977836][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.985496][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.004904][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.017434][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.092975][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.101846][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.121943][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.131594][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.140985][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.166477][ T5871] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.174655][ T5871] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.210923][ T5871] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.220917][ T5871] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.232366][ T5871] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.237655][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.247247][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.254927][ T5871] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.272574][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.280006][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.289049][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.296410][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.304760][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.313084][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.324348][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.473688][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 76.577919][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 76.643193][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.651788][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.660028][ T5868] bridge_slave_0: entered allmulticast mode [ 76.667589][ T5868] bridge_slave_0: entered promiscuous mode [ 76.676242][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.684812][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.692538][ T5868] bridge_slave_1: entered allmulticast mode [ 76.700205][ T5868] bridge_slave_1: entered promiscuous mode [ 76.799767][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.813079][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.823362][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.830553][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.838107][ T5860] bridge_slave_0: entered allmulticast mode [ 76.846248][ T5860] bridge_slave_0: entered promiscuous mode [ 76.855282][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.862943][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.870331][ T5860] bridge_slave_1: entered allmulticast mode [ 76.877898][ T5860] bridge_slave_1: entered promiscuous mode [ 76.925438][ T5868] team0: Port device team_slave_0 added [ 76.954187][ T5868] team0: Port device team_slave_1 added [ 76.963356][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.982158][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 77.006066][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.094999][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.102774][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.130546][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.143089][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.150616][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.177871][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.190889][ T5860] team0: Port device team_slave_0 added [ 77.228470][ T5860] team0: Port device team_slave_1 added [ 77.241376][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 77.336276][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.343912][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.352263][ T5870] bridge_slave_0: entered allmulticast mode [ 77.359669][ T5870] bridge_slave_0: entered promiscuous mode [ 77.370415][ T5868] hsr_slave_0: entered promiscuous mode [ 77.377571][ T5868] hsr_slave_1: entered promiscuous mode [ 77.385567][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 77.396507][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.405207][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.433764][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.464193][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.472683][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.481956][ T5870] bridge_slave_1: entered allmulticast mode [ 77.490000][ T5870] bridge_slave_1: entered promiscuous mode [ 77.509362][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.517483][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.544219][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.665544][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.687664][ T5860] hsr_slave_0: entered promiscuous mode [ 77.695173][ T5860] hsr_slave_1: entered promiscuous mode [ 77.702763][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 77.708582][ T5860] Cannot create hsr debugfs directory [ 77.715099][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.722886][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.730389][ T5873] bridge_slave_0: entered allmulticast mode [ 77.737783][ T5873] bridge_slave_0: entered promiscuous mode [ 77.746941][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.769990][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.777436][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.785103][ T5873] bridge_slave_1: entered allmulticast mode [ 77.792681][ T5873] bridge_slave_1: entered promiscuous mode [ 77.856658][ T5870] team0: Port device team_slave_0 added [ 77.863466][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.871284][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.878532][ T5874] bridge_slave_0: entered allmulticast mode [ 77.886467][ T5874] bridge_slave_0: entered promiscuous mode [ 77.910929][ T5870] team0: Port device team_slave_1 added [ 77.923914][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.931206][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.938724][ T5874] bridge_slave_1: entered allmulticast mode [ 77.945792][ T5874] bridge_slave_1: entered promiscuous mode [ 77.972617][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.984608][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.040966][ T51] Bluetooth: hci0: command tx timeout [ 78.043178][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.067633][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.076375][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.103016][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.120409][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.144488][ T5873] team0: Port device team_slave_0 added [ 78.154998][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.162284][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.188767][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.216684][ T5873] team0: Port device team_slave_1 added [ 78.243488][ T5874] team0: Port device team_slave_0 added [ 78.281172][ T5871] Bluetooth: hci1: command tx timeout [ 78.286846][ T51] Bluetooth: hci2: command tx timeout [ 78.295026][ T5874] team0: Port device team_slave_1 added [ 78.331683][ T5870] hsr_slave_0: entered promiscuous mode [ 78.338001][ T5870] hsr_slave_1: entered promiscuous mode [ 78.344533][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 78.350298][ T5870] Cannot create hsr debugfs directory [ 78.361141][ T5871] Bluetooth: hci4: command tx timeout [ 78.365781][ T51] Bluetooth: hci3: command tx timeout [ 78.373517][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.380507][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.406964][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.427670][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.435119][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.461836][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.473783][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.480778][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.507705][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.540677][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.549790][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.577804][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.603219][ T5868] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.637068][ T5868] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.673488][ T5868] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.697465][ T5873] hsr_slave_0: entered promiscuous mode [ 78.704806][ T5873] hsr_slave_1: entered promiscuous mode [ 78.711564][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 78.717852][ T5873] Cannot create hsr debugfs directory [ 78.733358][ T5868] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.746731][ T5874] hsr_slave_0: entered promiscuous mode [ 78.753471][ T5874] hsr_slave_1: entered promiscuous mode [ 78.760570][ T5874] debugfs: 'hsr0' already exists in 'hsr' [ 78.766858][ T5874] Cannot create hsr debugfs directory [ 78.863678][ T5860] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.892562][ T5860] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.918707][ T5860] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.946401][ T5860] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.097593][ T5870] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.110461][ T5870] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.123198][ T5870] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.149039][ T5870] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.220145][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.231912][ T5873] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.242977][ T5873] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.256865][ T5873] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.266561][ T5873] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.318412][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.359836][ T5874] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.373849][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.385040][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.399043][ T5874] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.412402][ T5874] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.430466][ T3541] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.437973][ T3541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.450443][ T3541] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.457861][ T3541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.476532][ T5874] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.492730][ T3541] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.500137][ T3541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.532095][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.539744][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.611529][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.637349][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.696707][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.714174][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.721707][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.746144][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.765869][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.773158][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.814762][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.821968][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.860012][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.867238][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.983535][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.019868][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.054169][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.061440][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.083313][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.090975][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.121262][ T51] Bluetooth: hci0: command tx timeout [ 80.153248][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.187915][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.359059][ T5868] veth0_vlan: entered promiscuous mode [ 80.365021][ T51] Bluetooth: hci2: command tx timeout [ 80.370578][ T51] Bluetooth: hci1: command tx timeout [ 80.383380][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.395383][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.415836][ T5868] veth1_vlan: entered promiscuous mode [ 80.449817][ T51] Bluetooth: hci4: command tx timeout [ 80.449827][ T5871] Bluetooth: hci3: command tx timeout [ 80.517429][ T5868] veth0_macvtap: entered promiscuous mode [ 80.565718][ T5868] veth1_macvtap: entered promiscuous mode [ 80.595913][ T5870] veth0_vlan: entered promiscuous mode [ 80.630672][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.642638][ T5873] veth0_vlan: entered promiscuous mode [ 80.658111][ T5870] veth1_vlan: entered promiscuous mode [ 80.675266][ T5873] veth1_vlan: entered promiscuous mode [ 80.699701][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.723532][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.742173][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.753585][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.779106][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.797990][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.806997][ T5873] veth0_macvtap: entered promiscuous mode [ 80.818709][ T5873] veth1_macvtap: entered promiscuous mode [ 80.841887][ T5870] veth0_macvtap: entered promiscuous mode [ 80.863879][ T5860] veth0_vlan: entered promiscuous mode [ 80.895286][ T5870] veth1_macvtap: entered promiscuous mode [ 80.909632][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.946413][ T5860] veth1_vlan: entered promiscuous mode [ 80.957346][ T5874] veth0_vlan: entered promiscuous mode [ 80.966761][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.980767][ T1325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.995076][ T1325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.021082][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.034504][ T5860] veth0_macvtap: entered promiscuous mode [ 81.047900][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.057263][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.069569][ T5874] veth1_vlan: entered promiscuous mode [ 81.080682][ T5860] veth1_macvtap: entered promiscuous mode [ 81.090622][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.104929][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.117007][ T3541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.127250][ T3541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.139040][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.158822][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.168650][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.194354][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.203960][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.234103][ T5868] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.276372][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.338015][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.349183][ T5874] veth0_macvtap: entered promiscuous mode [ 81.374081][ T5973] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 81.406583][ T5973] Illegal XDP return value 4111381173 on prog (id 4) dev N/A, expect packet loss! [ 81.415254][ T5874] veth1_macvtap: entered promiscuous mode [ 81.434521][ T1325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.451630][ T1325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.464018][ T3484] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.477457][ T3484] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.516372][ T3484] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.532340][ T3484] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.551679][ T1325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.570598][ T1325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.597545][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.634168][ T3541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.648037][ T3541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.653465][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.700773][ T3541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.709465][ T3541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.711653][ T3484] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.749240][ T3484] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.793045][ T3484] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.808482][ T3484] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.916403][ T3484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.955055][ T3484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.017294][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.032479][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.108597][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.125408][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.198109][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.206554][ T51] Bluetooth: hci0: command tx timeout [ 82.238165][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.241939][ T5997] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 82.435765][ T6000] netlink: 'syz.4.5': attribute type 3 has an invalid length. [ 82.444482][ T51] Bluetooth: hci2: command tx timeout [ 82.444968][ T5871] Bluetooth: hci1: command tx timeout [ 82.511591][ T6000] netlink: 'syz.4.5': attribute type 3 has an invalid length. [ 82.521073][ T5871] Bluetooth: hci3: command tx timeout [ 82.521089][ T51] Bluetooth: hci4: command tx timeout [ 82.550615][ T6000] team0: No ports can be present during mode change [ 82.616568][ T6013] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.723014][ T6013] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20000 [ 82.806705][ T6022] netlink: 'syz.2.18': attribute type 1 has an invalid length. [ 82.839178][ T6022] netlink: 224 bytes leftover after parsing attributes in process `syz.2.18'. [ 82.860067][ T6028] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.874209][ T6028] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.916276][ T6027] netlink: 6040 bytes leftover after parsing attributes in process `syz.4.19'. [ 82.917964][ T6029] netlink: 'syz.3.20': attribute type 16 has an invalid length. [ 82.980691][ T6029] netlink: 'syz.3.20': attribute type 17 has an invalid length. [ 82.993574][ T6035] netlink: 'syz.2.22': attribute type 1 has an invalid length. [ 83.014410][ T6035] netlink: 140 bytes leftover after parsing attributes in process `syz.2.22'. [ 83.044769][ T6035] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.093729][ T6029] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 83.114500][ T6038] netlink: 40 bytes leftover after parsing attributes in process `syz.4.24'. [ 83.345409][ T6056] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.383982][ T6056] warning: `syz.4.29' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.590727][ T6069] netlink: 'syz.3.33': attribute type 9 has an invalid length. [ 83.809349][ T6085] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.816991][ T6085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.832718][ T6085] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 83.950750][ T6095] netlink: 24 bytes leftover after parsing attributes in process `syz.3.40'. [ 84.281505][ T5871] Bluetooth: hci0: command tx timeout [ 84.399103][ T6110] trusted_key: syz.2.45 sent an empty control message without MSG_MORE. [ 84.521013][ T5871] Bluetooth: hci1: command tx timeout [ 84.527337][ T5871] Bluetooth: hci2: command tx timeout [ 84.601263][ T5871] Bluetooth: hci3: command tx timeout [ 84.601270][ T51] Bluetooth: hci4: command tx timeout [ 84.726099][ T6133] Zero length message leads to an empty skb [ 84.816725][ T6143] sctp: [Deprecated]: syz.2.54 (pid 6143) Use of int in maxseg socket option. [ 84.816725][ T6143] Use struct sctp_assoc_value instead [ 84.843982][ T6145] sctp: [Deprecated]: syz.2.54 (pid 6145) Use of int in maxseg socket option. [ 84.843982][ T6145] Use struct sctp_assoc_value instead [ 84.863812][ T6140] bridge_slave_0: left allmulticast mode [ 84.869743][ T6140] bridge_slave_0: left promiscuous mode [ 84.876270][ T6140] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.888296][ T6140] bridge_slave_1: left allmulticast mode [ 84.894957][ T6140] bridge_slave_1: left promiscuous mode [ 84.904567][ T6140] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.933920][ T6140] bond0: (slave bond_slave_0): Releasing backup interface [ 84.944364][ T6140] bond0: (slave bond_slave_1): Releasing backup interface [ 84.959202][ T6140] team0: Port device team_slave_0 removed [ 84.968524][ T6140] team0: Port device team_slave_1 removed [ 84.975716][ T6140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.984538][ T6140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.994478][ T6140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.002435][ T6140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.174552][ T6159] Bluetooth: MGMT ver 1.23 [ 85.209732][ T6161] openvswitch: netlink: Multiple metadata blocks provided [ 85.911663][ T6192] netlink: 20 bytes leftover after parsing attributes in process `syz.4.72'. [ 86.172265][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.75'. [ 86.308022][ T6208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.439794][ T6212] netlink: 12 bytes leftover after parsing attributes in process `syz.4.79'. [ 86.469379][ T6217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.528670][ T6219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.573584][ T6219] netlink: 24 bytes leftover after parsing attributes in process `syz.3.81'. [ 86.659103][ T6229] netlink: 'syz.1.85': attribute type 1 has an invalid length. [ 86.689964][ T24] cfg80211: failed to load regulatory.db [ 86.806583][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.87'. [ 86.815851][ T6237] bond0: Device is already in use. [ 87.020066][ T6253] netlink: 'syz.1.90': attribute type 4 has an invalid length. [ 87.381225][ T6278] validate_nla: 2 callbacks suppressed [ 87.381245][ T6278] netlink: 'syz.2.97': attribute type 21 has an invalid length. [ 87.395033][ T6284] gretap0: entered promiscuous mode [ 87.493660][ T6289] openvswitch: netlink: EtherType 257 is less than min 600 [ 87.814023][ T6309] tunl0: entered promiscuous mode [ 87.836467][ T6309] netlink: 'syz.3.109': attribute type 3 has an invalid length. [ 87.863217][ T6309] __nla_validate_parse: 6 callbacks suppressed [ 87.863238][ T6309] netlink: 9 bytes leftover after parsing attributes in process `syz.3.109'. [ 87.888725][ T6311] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 87.895477][ T6311] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 87.921362][ T6315] netlink: 51 bytes leftover after parsing attributes in process `syz.4.112'. [ 88.064803][ T6324] pim6reg: entered allmulticast mode [ 88.086944][ T6321] tipc: Started in network mode [ 88.092164][ T6321] tipc: Node identity 0671881644bb, cluster identity 4711 [ 88.100365][ T6321] tipc: Enabled bearer , priority 0 [ 88.127164][ T6319] tipc: Disabling bearer [ 88.315267][ T6336] netlink: 176 bytes leftover after parsing attributes in process `syz.0.120'. [ 88.324833][ T6336] ip6gretap0: entered promiscuous mode [ 88.334169][ T6336] netlink: 176 bytes leftover after parsing attributes in process `syz.0.120'. [ 88.355126][ T6336] netlink: 176 bytes leftover after parsing attributes in process `syz.0.120'. [ 88.603093][ T6359] team_slave_0: mtu greater than device maximum [ 88.707379][ T6364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.749207][ T6372] tipc: Failed to remove unknown binding: 66,1,1/0:635457150/635457152 [ 88.763496][ T6372] tipc: Failed to remove unknown binding: 66,1,1/0:635457150/635457152 [ 89.062138][ T6389] netlink: 'syz.0.137': attribute type 10 has an invalid length. [ 89.078526][ T6389] team0: Device hsr_slave_0 failed to register rx_handler [ 89.089972][ T6396] netlink: 'syz.3.140': attribute type 1 has an invalid length. [ 89.128325][ T6400] netlink: 32 bytes leftover after parsing attributes in process `syz.2.139'. [ 89.173232][ T6402] netlink: 32 bytes leftover after parsing attributes in process `syz.2.139'. [ 89.196583][ T6396] bond1: (slave bridge1): making interface the new active one [ 89.207579][ T6396] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 89.215959][ T6407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.140'. [ 89.365521][ T6422] netlink: 256 bytes leftover after parsing attributes in process `syz.2.144'. [ 89.791888][ T6445] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 89.830175][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.156'. [ 89.866528][ T6446] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 90.079373][ T3484] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.109115][ T3484] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.147311][ T3484] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.164880][ T3484] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.220001][ T6479] netlink: 'syz.4.165': attribute type 9 has an invalid length. [ 90.265703][ T6479] tipc: Started in network mode [ 90.275524][ T6479] tipc: Node identity fa92900bf1e3, cluster identity 4711 [ 90.294443][ T6479] tipc: Enabled bearer , priority 0 [ 90.332933][ T6479] syzkaller0: entered promiscuous mode [ 90.359391][ T6479] syzkaller0: entered allmulticast mode [ 90.403823][ T6479] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 90.420496][ T6479] tipc: Resetting bearer [ 90.430253][ T6474] tipc: Resetting bearer [ 90.447880][ T6474] tipc: Disabling bearer [ 90.758588][ T6506] netlink: 'syz.0.169': attribute type 12 has an invalid length. [ 90.981935][ T6517] netlink: 'syz.1.177': attribute type 4 has an invalid length. [ 91.178010][ T6526] netlink: 'syz.1.180': attribute type 1 has an invalid length. [ 91.580767][ T6554] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 91.602152][ T6556] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 91.781113][ T6565] tc_dump_action: action bad kind [ 92.056569][ T6580] netlink: 'syz.3.197': attribute type 32 has an invalid length. [ 92.115310][ T6576] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 92.288392][ T6597] netlink: 'syz.4.201': attribute type 1 has an invalid length. [ 92.417123][ T6597] netlink: 'syz.4.201': attribute type 2 has an invalid length. [ 92.645454][ T6605] bond2: entered promiscuous mode [ 92.651187][ T6605] bond2: entered allmulticast mode [ 92.657057][ T6605] 8021q: adding VLAN 0 to HW filter on device bond2 [ 92.766707][ T6612] lo: entered promiscuous mode [ 92.793517][ T6612] tunl0: entered promiscuous mode [ 92.825766][ T6612] gre0: entered promiscuous mode [ 92.855265][ T6612] gretap0: entered promiscuous mode [ 92.879720][ T6612] erspan0: entered promiscuous mode [ 92.898433][ T6627] netlink: 'syz.0.210': attribute type 21 has an invalid length. [ 92.905975][ T6612] ip_vti0: entered promiscuous mode [ 92.908079][ T6627] IPv6: NLM_F_CREATE should be specified when creating new route [ 92.914847][ T6612] ip6_vti0: entered promiscuous mode [ 92.933754][ T6612] sit0: entered promiscuous mode [ 92.951024][ T6612] ip6tnl0: entered promiscuous mode [ 92.968504][ T6612] ip6gre0: entered promiscuous mode [ 92.979933][ T6612] syz_tun: entered promiscuous mode [ 92.996795][ T6612] ip6gretap0: entered promiscuous mode [ 93.006915][ T6612] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.015581][ T6612] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.024393][ T6612] bridge0: entered promiscuous mode [ 93.033932][ T6612] vcan0: entered promiscuous mode [ 93.040273][ T6612] bond0: entered promiscuous mode [ 93.054604][ T6612] bond_slave_0: entered promiscuous mode [ 93.063293][ T6612] bond_slave_1: entered promiscuous mode [ 93.072953][ T6612] team0: entered promiscuous mode [ 93.078585][ T6612] team_slave_0: entered promiscuous mode [ 93.089818][ T6612] team_slave_1: entered promiscuous mode [ 93.101005][ T6612] dummy0: entered promiscuous mode [ 93.111884][ T6612] nlmon0: entered promiscuous mode [ 93.119781][ T6612] caif0: entered promiscuous mode [ 93.126734][ T6612] batadv0: entered promiscuous mode [ 93.134786][ T6612] vxcan0: entered promiscuous mode [ 93.141978][ T6612] vxcan1: entered promiscuous mode [ 93.147963][ T6612] veth0: entered promiscuous mode [ 93.155880][ T6612] veth1: entered promiscuous mode [ 93.165033][ T6612] wg0: entered promiscuous mode [ 93.173240][ T6612] wg1: entered promiscuous mode [ 93.180288][ T6612] wg2: entered promiscuous mode [ 93.187480][ T6612] veth0_to_bridge: entered promiscuous mode [ 93.202625][ T6612] veth1_to_bridge: entered promiscuous mode [ 93.215391][ T6612] veth0_to_bond: entered promiscuous mode [ 93.224191][ T6612] veth1_to_bond: entered promiscuous mode [ 93.233869][ T6612] veth0_to_team: entered promiscuous mode [ 93.246713][ T6612] veth1_to_team: entered promiscuous mode [ 93.257389][ T6612] veth0_to_batadv: entered promiscuous mode [ 93.265916][ T6612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.274213][ T6612] batadv_slave_0: entered promiscuous mode [ 93.283562][ T6612] veth1_to_batadv: entered promiscuous mode [ 93.293426][ T6612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.303373][ T6612] batadv_slave_1: entered promiscuous mode [ 93.312801][ T6612] xfrm0: entered promiscuous mode [ 93.320025][ T6612] veth0_to_hsr: entered promiscuous mode [ 93.329077][ T6612] veth1_to_hsr: entered promiscuous mode [ 93.338932][ T6612] hsr0: entered promiscuous mode [ 93.347038][ T6612] veth1_virt_wifi: entered promiscuous mode [ 93.355735][ T6612] veth0_virt_wifi: entered promiscuous mode [ 93.364366][ T6612] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 93.380024][ T6612] vlan0: entered promiscuous mode [ 93.385511][ T6612] vlan1: entered promiscuous mode [ 93.391659][ T6612] macvlan0: entered promiscuous mode [ 93.397368][ T6612] macvlan1: entered promiscuous mode [ 93.406572][ T6612] ipvlan0: entered promiscuous mode [ 93.412086][ T6612] ipvlan1: entered promiscuous mode [ 93.423921][ T6612] macvtap0: entered promiscuous mode [ 93.431702][ T6612] macsec0: entered promiscuous mode [ 93.439363][ T6612] geneve0: entered promiscuous mode [ 93.448646][ T6612] geneve1: entered promiscuous mode [ 93.457306][ T6612] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 93.467383][ T6612] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 93.479195][ T6612] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 93.490737][ T6612] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 93.507114][ T6612] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 93.526872][ T6612] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 93.538207][ T6612] bond1: entered promiscuous mode [ 93.546183][ T6612] vxcan2: entered promiscuous mode [ 93.552576][ T6612] vxcan3: entered promiscuous mode [ 93.558573][ T6612] syztnl2: entered promiscuous mode [ 93.574509][ T6614] bridge_slave_0: left allmulticast mode [ 93.582916][ T6614] bridge_slave_0: left promiscuous mode [ 93.588850][ T6614] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.622345][ T6614] bridge_slave_1: left allmulticast mode [ 93.628425][ T6614] bridge_slave_1: left promiscuous mode [ 93.635744][ T6614] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.654926][ T6614] bond0: (slave bond_slave_0): Releasing backup interface [ 93.670022][ T6614] bond0: (slave bond_slave_1): Releasing backup interface [ 93.687194][ T6614] team0: Port device team_slave_0 removed [ 93.697796][ T6614] team0: Port device team_slave_1 removed [ 93.705840][ T6614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.715904][ T6614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.734487][ T6614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.743359][ T6614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.833423][ T1167] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.868121][ T6645] __nla_validate_parse: 11 callbacks suppressed [ 93.868143][ T6645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.213'. [ 93.884210][ T49] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.912882][ T49] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.987836][ T49] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.162861][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.219'. [ 94.174935][ T6666] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 94.198654][ T6666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.305495][ T6668] netlink: 'syz.4.220': attribute type 29 has an invalid length. [ 94.319932][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.220'. [ 94.337455][ T6670] bridge0: port 3(hsr0) entered blocking state [ 94.348515][ T6670] bridge0: port 3(hsr0) entered disabled state [ 94.360279][ T6670] hsr0: entered allmulticast mode [ 94.371197][ T6670] hsr_slave_0: entered allmulticast mode [ 94.380107][ T6670] hsr_slave_1: entered allmulticast mode [ 94.394692][ T6670] hsr0: entered promiscuous mode [ 94.563237][ T6685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.224'. [ 94.669066][ T6694] netlink: 16 bytes leftover after parsing attributes in process `syz.2.226'. [ 94.805668][ T6702] netlink: 9 bytes leftover after parsing attributes in process `syz.4.230'. [ 95.115268][ T6715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.232'. [ 95.130504][ T6713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.232'. [ 95.461060][ T6721] netlink: 'syz.0.233': attribute type 1 has an invalid length. [ 95.479414][ T6721] netlink: 228 bytes leftover after parsing attributes in process `syz.0.233'. [ 95.633101][ T6743] netlink: 20 bytes leftover after parsing attributes in process `syz.2.235'. [ 95.702462][ T6747] tipc: Enabling of bearer rejected, media not registered [ 95.923231][ T6767] sctp: [Deprecated]: syz.0.246 (pid 6767) Use of int in maxseg socket option. [ 95.923231][ T6767] Use struct sctp_assoc_value instead [ 96.020339][ T6770] batadv1: entered allmulticast mode [ 96.407739][ T6796] sctp: [Deprecated]: syz.2.255 (pid 6796) Use of struct sctp_assoc_value in delayed_ack socket option. [ 96.407739][ T6796] Use struct sctp_sack_info instead [ 96.548738][ T6803] pim6reg: entered allmulticast mode [ 96.623188][ T6803] pim6reg: left allmulticast mode [ 96.795052][ T6815] veth0_macvtap: left promiscuous mode [ 96.861551][ T6823] vlan2: entered promiscuous mode [ 96.871577][ T6823] vlan2: entered allmulticast mode [ 96.877764][ T6823] hsr_slave_1: entered allmulticast mode [ 96.981816][ T6830] sctp: [Deprecated]: syz.0.267 (pid 6830) Use of int in max_burst socket option deprecated. [ 96.981816][ T6830] Use struct sctp_assoc_value instead [ 97.720254][ T6856] netlink: 'syz.2.271': attribute type 11 has an invalid length. [ 97.900182][ T6873] netlink: 'syz.4.274': attribute type 1 has an invalid length. [ 97.974138][ T6872] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 97.987144][ T6872] bond2: (slave vxcan5): Error -95 calling set_mac_address [ 98.008825][ T6878] can: request_module (can-proto-0) failed. [ 98.024448][ T6873] gretap1: entered promiscuous mode [ 98.058067][ T6873] bond2: (slave gretap1): making interface the new active one [ 98.095334][ T6873] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 98.144155][ T6872] macvlan2: entered promiscuous mode [ 98.150478][ T6872] macvlan2: entered allmulticast mode [ 98.161860][ T6872] bond2: entered promiscuous mode [ 98.169321][ T6872] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 98.179739][ T6872] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 98.192815][ T6872] bond2: left promiscuous mode [ 98.368571][ T6899] C: renamed from team_slave_0 (while UP) [ 98.396479][ T6899] netlink: 'syz.3.282': attribute type 1 has an invalid length. [ 98.411357][ T6899] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 98.976424][ T6940] __nla_validate_parse: 12 callbacks suppressed [ 98.976447][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.297'. [ 99.056896][ T6945] netlink: 24 bytes leftover after parsing attributes in process `syz.2.300'. [ 99.088014][ T6950] netlink: 24 bytes leftover after parsing attributes in process `syz.2.300'. [ 99.102479][ T6948] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.124025][ T6940] team1: entered promiscuous mode [ 99.129308][ T6940] team1: entered allmulticast mode [ 99.139299][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.302'. [ 99.174630][ T6949] netlink: 16 bytes leftover after parsing attributes in process `syz.0.301'. [ 99.212612][ T6948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.237919][ T6948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.416747][ T6971] bridge0: port 1(batadv1) entered blocking state [ 99.435590][ T6971] bridge0: port 1(batadv1) entered disabled state [ 99.470380][ T6971] batadv1: entered allmulticast mode [ 99.501301][ T6971] batadv1: entered promiscuous mode [ 99.598052][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.307'. [ 99.729596][ T6991] pimreg: entered allmulticast mode [ 99.807875][ T6988] netlink: 76 bytes leftover after parsing attributes in process `syz.4.309'. [ 99.965266][ T7020] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 99.975776][ T7020] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 99.989960][ T7024] netlink: 'syz.4.309': attribute type 10 has an invalid length. [ 100.056908][ T7024] bridge_slave_1: left allmulticast mode [ 100.088914][ T7024] bridge_slave_1: left promiscuous mode [ 100.137443][ T7024] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.251858][ T7024] bridge_slave_1: entered promiscuous mode [ 100.261748][ T7032] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 100.277252][ T7024] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 100.377318][ T7042] raw_sendmsg: syz.2.318 forgot to set AF_INET. Fix it! [ 100.438327][ T7044] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.320'. [ 100.765152][ T7069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.329'. [ 100.913998][ T7079] 8021q: adding VLAN 0 to HW filter on device bond3 [ 100.996747][ T7085] 8021q: adding VLAN 0 to HW filter on device bond4 [ 101.007311][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.335'. [ 101.117708][ T7097] ip6erspan0: entered promiscuous mode [ 101.174315][ T7097] ip6erspan0: entered allmulticast mode [ 101.316362][ T7116] tipc: Cannot configure node identity twice [ 101.569814][ T7138] nbd: socks must be embedded in a SOCK_ITEM attr [ 101.767339][ T7149] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 102.504468][ T7202] netlink: 'syz.2.359': attribute type 21 has an invalid length. [ 102.531179][ T7202] IPv6: NLM_F_CREATE should be specified when creating new route [ 102.598761][ T7209] syzkaller1: entered promiscuous mode [ 102.650092][ T7209] syzkaller1: entered allmulticast mode [ 102.680379][ T7206] netlink: 'syz.3.360': attribute type 3 has an invalid length. [ 102.845101][ T7218] netlink: 'syz.1.362': attribute type 1 has an invalid length. [ 102.976418][ T7218] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.996788][ T7218] bond2: (slave veth0_to_bond): making interface the new active one [ 103.011371][ T7218] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 103.046638][ T7218] bond2: (slave veth3): Enslaving as an active interface with a down link [ 103.117722][ T7234] xt_socket: unknown flags 0xd0 [ 103.126729][ T7224] bond2: (slave veth5): Enslaving as an active interface with a down link [ 103.292792][ T7240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.342663][ T7245] netlink: 'syz.0.369': attribute type 2 has an invalid length. [ 103.738464][ T7273] bond0: option mode: unable to set because the bond device is up [ 104.041005][ T7291] __nla_validate_parse: 9 callbacks suppressed [ 104.041028][ T7291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.387'. [ 104.304616][ T7306] netlink: 128 bytes leftover after parsing attributes in process `syz.1.392'. [ 104.339198][ T7306] netlink: 20 bytes leftover after parsing attributes in process `syz.1.392'. [ 104.903910][ T7347] syz_tun: entered allmulticast mode [ 104.937598][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.948715][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.032822][ T7356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.406'. [ 105.056993][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.406'. [ 105.085107][ T7356] team_slave_0: entered promiscuous mode [ 105.091044][ T7356] team_slave_1: entered promiscuous mode [ 105.140114][ T7364] netlink: 'syz.4.409': attribute type 10 has an invalid length. [ 105.145828][ T7366] netlink: 96 bytes leftover after parsing attributes in process `syz.3.410'. [ 105.153738][ T7364] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 105.169801][ T7364] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 105.180728][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.410'. [ 105.193386][ T7366] netlink: 24 bytes leftover after parsing attributes in process `syz.3.410'. [ 105.207584][ T7364] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 105.259886][ T7364] netlink: 32 bytes leftover after parsing attributes in process `syz.4.409'. [ 105.275118][ T7369] netlink: 268 bytes leftover after parsing attributes in process `syz.1.411'. [ 105.344917][ T7376] netlink: 'syz.2.412': attribute type 10 has an invalid length. [ 105.373371][ T7376] team0: Device veth1_macvtap failed to register rx_handler [ 105.386444][ T7381] netlink: 'syz.4.415': attribute type 1 has an invalid length. [ 105.447779][ T7381] 8021q: adding VLAN 0 to HW filter on device bond5 [ 105.499032][ T7393] netlink: 'syz.3.416': attribute type 4 has an invalid length. [ 105.788762][ T7415] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 106.323971][ T7455] netlink: 'syz.2.437': attribute type 6 has an invalid length. [ 106.860665][ T7016] nci: nci_rsp_packet: unknown rsp opcode 0x221 [ 106.872844][ T7503] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 107.844772][ T7586] netlink: 'syz.1.474': attribute type 10 has an invalid length. [ 107.858017][ T7582] netlink: 'syz.3.473': attribute type 10 has an invalid length. [ 107.867783][ T7586] netlink: 'syz.1.474': attribute type 10 has an invalid length. [ 107.867965][ T7586] netlink: 'syz.1.474': attribute type 10 has an invalid length. [ 107.932025][ T7582] team0: Device hsr_slave_0 failed to register rx_handler [ 108.193232][ T7596] hsr_slave_0 (unregistering): left promiscuous mode [ 108.379733][ T7620] validate_nla: 62 callbacks suppressed [ 108.379755][ T7620] netlink: 'syz.3.486': attribute type 4 has an invalid length. [ 108.413317][ T7619] netlink: 'syz.3.486': attribute type 4 has an invalid length. [ 108.547726][ T7628] netlink: 'syz.4.489': attribute type 11 has an invalid length. [ 108.877280][ T7660] veth3: entered promiscuous mode [ 109.122121][ T7678] netlink: 'syz.0.504': attribute type 1 has an invalid length. [ 109.162853][ T7679] netlink: 'syz.2.505': attribute type 178 has an invalid length. [ 109.203238][ T7678] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.213721][ T7682] __nla_validate_parse: 29 callbacks suppressed [ 109.213742][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.506'. [ 109.239057][ T7688] netlink: 'syz.1.508': attribute type 11 has an invalid length. [ 109.297925][ T7696] netlink: 'syz.0.510': attribute type 1 has an invalid length. [ 109.386133][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.511'. [ 109.392164][ T7697] netlink: 'syz.0.510': attribute type 1 has an invalid length. [ 109.424353][ T7702] netlink: 'syz.1.511': attribute type 3 has an invalid length. [ 109.453968][ T7702] netlink: 'syz.1.511': attribute type 3 has an invalid length. [ 109.487168][ T7702] team0: No ports can be present during mode change [ 109.540261][ T7708] netlink: 20 bytes leftover after parsing attributes in process `syz.0.513'. [ 109.626166][ T7717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.514'. [ 109.646652][ T7717] netlink: 'syz.3.514': attribute type 1 has an invalid length. [ 109.736345][ T7729] netlink: 500 bytes leftover after parsing attributes in process `syz.1.519'. [ 109.736900][ T7727] netlink: 44 bytes leftover after parsing attributes in process `syz.3.514'. [ 109.746965][ T7729] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 109.949438][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.525'. [ 109.983251][ T7746] syzkaller1: entered promiscuous mode [ 109.992140][ T7746] syzkaller1: entered allmulticast mode [ 109.999879][ T7746] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 110.065339][ T7755] netlink: 'syz.0.528': attribute type 2 has an invalid length. [ 110.095476][ T7755] team0: Device wireguard0 is up. Set it down before adding it as a team port [ 110.246511][ T7771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.531'. [ 110.278030][ T5945] IPVS: starting estimator thread 0... [ 110.381998][ T7772] IPVS: using max 37 ests per chain, 88800 per kthread [ 110.396431][ T7780] lo: entered promiscuous mode [ 110.421552][ T7780] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.548288][ T7791] bond5: entered promiscuous mode [ 110.562207][ T7791] bond5: entered allmulticast mode [ 110.575359][ T7791] 8021q: adding VLAN 0 to HW filter on device bond5 [ 110.626092][ T7791] bond5 (unregistering): Released all slaves [ 110.690508][ T7808] tipc: Started in network mode [ 110.733373][ T7808] tipc: Node identity 42fcfe4e404a, cluster identity 4711 [ 110.745054][ T7808] tipc: Enabled bearer , priority 0 [ 110.752564][ T7809] syzkaller0: entered promiscuous mode [ 110.758832][ T7809] syzkaller0: entered allmulticast mode [ 110.779228][ T7808] tipc: Resetting bearer [ 110.838218][ T7807] tipc: Resetting bearer [ 110.858600][ T7807] tipc: Disabling bearer [ 110.875031][ T7817] veth0_to_hsr: entered promiscuous mode [ 110.883890][ T7817] veth0_to_hsr: entered allmulticast mode [ 111.156647][ T7845] netlink: 16 bytes leftover after parsing attributes in process `syz.3.554'. [ 111.196261][ T7849] netlink: 40 bytes leftover after parsing attributes in process `syz.4.556'. [ 111.347258][ T7864] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 111.961428][ T7911] nbd0: detected capacity change from 0 to 127 [ 112.036357][ T5871] block nbd0: Receive control failed (result -32) [ 112.047846][ T7925] x_tables: ip_tables: udp match: only valid for protocol 17 [ 112.288265][ T24] IPVS: starting estimator thread 0... [ 112.381015][ T7957] IPVS: using max 30 ests per chain, 72000 per kthread [ 112.467679][ T7968] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 112.597517][ T7975] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.693708][ T7975] vlan2: entered promiscuous mode [ 112.708726][ T7975] bond2: entered promiscuous mode [ 112.729923][ T7975] vlan2: entered allmulticast mode [ 112.751706][ T7975] bond2: entered allmulticast mode [ 112.823649][ T7983] bond2: (slave gretap1): making interface the new active one [ 112.833474][ T7983] gretap1: entered promiscuous mode [ 112.839546][ T7983] gretap1: entered allmulticast mode [ 112.848765][ T7983] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 112.927914][ T7997] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 112.965464][ T7016] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 113.019732][ T7016] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 113.037853][ T7016] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 113.047183][ T7016] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 113.138142][ T8021] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 113.162631][ T8023] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 113.537275][ T8058] tipc: Enabled bearer , priority 10 [ 113.888178][ T8083] openvswitch: netlink: Message has 8 unknown bytes. [ 114.651014][ T5924] tipc: Node number set to 45547086 [ 114.829662][ T8122] validate_nla: 4 callbacks suppressed [ 114.829683][ T8122] netlink: 'syz.4.636': attribute type 1 has an invalid length. [ 114.863858][ T8122] 8021q: adding VLAN 0 to HW filter on device bond8 [ 114.874870][ T8125] __nla_validate_parse: 25 callbacks suppressed [ 114.874889][ T8125] netlink: 64 bytes leftover after parsing attributes in process `syz.2.637'. [ 114.883157][ T8122] bond8: (slave geneve3): making interface the new active one [ 114.901392][ T8122] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 114.912604][ T36] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 114.930403][ T36] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 114.946950][ T36] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 114.976541][ T36] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 115.085681][ T8134] tunl0: left promiscuous mode [ 115.096535][ T8134] gretap0: left promiscuous mode [ 115.155335][ T8140] Bluetooth: MGMT ver 1.23 [ 115.262596][ T8134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.276908][ T8134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.379162][ T8134] bond2: left promiscuous mode [ 115.394420][ T8135] dvmrp0: entered allmulticast mode [ 115.434136][ T8149] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 115.450922][ T77] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.472899][ T77] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.501873][ T77] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.545467][ T77] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.565431][ T8168] ipvlan1: left promiscuous mode [ 115.572961][ T8168] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 115.681952][ T8164] nbd1: detected capacity change from 0 to 127 [ 115.692956][ T51] block nbd1: Receive control failed (result -32) [ 115.698544][ T5871] block nbd1: Receive control failed (result -32) [ 115.809176][ T8185] netlink: 108 bytes leftover after parsing attributes in process `syz.3.654'. [ 115.832062][ T8185] netlink: 108 bytes leftover after parsing attributes in process `syz.3.654'. [ 115.847915][ T8185] netlink: 84 bytes leftover after parsing attributes in process `syz.3.654'. [ 115.848574][ T8188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.655'. [ 116.052796][ T8202] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 116.199673][ T8215] netlink: 268 bytes leftover after parsing attributes in process `syz.4.665'. [ 116.326510][ T8224] netlink: 11 bytes leftover after parsing attributes in process `syz.4.668'. [ 116.382895][ T8224] netlink: 14 bytes leftover after parsing attributes in process `syz.4.668'. [ 116.410009][ T8207] netlink: 'syz.1.661': attribute type 13 has an invalid length. [ 116.419036][ T8207] netlink: 'syz.1.661': attribute type 17 has an invalid length. [ 116.439329][ T8207] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 116.468921][ T8207] netlink: 64 bytes leftover after parsing attributes in process `syz.1.661'. [ 116.469397][ T8231] netlink: 'syz.2.669': attribute type 2 has an invalid length. [ 116.486686][ T8231] netlink: 'syz.2.669': attribute type 2 has an invalid length. [ 116.496530][ T8231] netlink: 'syz.2.669': attribute type 2 has an invalid length. [ 116.514145][ T8231] netlink: 'syz.2.669': attribute type 2 has an invalid length. [ 116.529071][ T8231] netlink: 'syz.2.669': attribute type 2 has an invalid length. [ 116.540081][ T3484] batman_adv: batadv1: IGMP Querier appeared [ 116.546799][ T3484] batman_adv: batadv1: MLD Querier appeared [ 116.564878][ T8231] netlink: 'syz.2.669': attribute type 2 has an invalid length. [ 116.583155][ T8231] netlink: 'syz.2.669': attribute type 2 has an invalid length. [ 116.595078][ T8235] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 116.787729][ T8246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.674'. [ 116.946780][ T8260] tipc: Started in network mode [ 116.975512][ T8260] tipc: Node identity 080211, cluster identity 4711 [ 116.985151][ T8260] tipc: Enabled bearer , priority 0 [ 117.108606][ T8274] macsec2: entered promiscuous mode [ 117.123544][ T8274] bridge0: entered promiscuous mode [ 117.165998][ T8274] bridge0: port 2(macsec2) entered blocking state [ 117.189515][ T8274] bridge0: port 2(macsec2) entered disabled state [ 117.200071][ T8274] macsec2: entered allmulticast mode [ 117.226805][ T8274] bridge0: entered allmulticast mode [ 117.237272][ T8274] macsec2: left allmulticast mode [ 117.259761][ T8274] bridge0: left allmulticast mode [ 117.272315][ T8274] bridge0: left promiscuous mode [ 117.818296][ T8318] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 118.043959][ T8347] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 118.110943][ T24] tipc: Node number set to 134353152 [ 118.229384][ T8364] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 118.291352][ T5924] IPVS: starting estimator thread 0... [ 118.297617][ T8364] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 118.420913][ T8365] IPVS: using max 37 ests per chain, 88800 per kthread [ 118.437167][ T8372] syzkaller1: entered promiscuous mode [ 118.454768][ T8372] syzkaller1: entered allmulticast mode [ 118.503866][ T8380] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.536925][ T8379] vlan2: entered promiscuous mode [ 118.544420][ T8379] bridge0: entered promiscuous mode [ 118.558771][ T8372] bridge_slave_0: left allmulticast mode [ 118.565405][ T8372] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.607429][ T8390] sctp: [Deprecated]: syz.2.720 (pid 8390) Use of int in maxseg socket option. [ 118.607429][ T8390] Use struct sctp_assoc_value instead [ 119.086642][ T8427] nbd: nbd1 already in use [ 119.108995][ T8427] nbd: nbd1 already in use [ 119.314119][ T8444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.326621][ T8444] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.359054][ T8448] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 119.369043][ T8444] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.316364][ T5923] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 120.325883][ T5923] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 120.408063][ T8527] __nla_validate_parse: 13 callbacks suppressed [ 120.408090][ T8527] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.762'. [ 120.557118][ T8538] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 120.882235][ T8555] validate_nla: 5 callbacks suppressed [ 120.882257][ T8555] netlink: 'syz.2.771': attribute type 1 has an invalid length. [ 120.898145][ T8555] netlink: 236 bytes leftover after parsing attributes in process `syz.2.771'. [ 121.055526][ T8574] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 121.285630][ T8591] IPVS: ip_vs_add_dest(): server weight less than zero [ 121.303235][ T8599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.779'. [ 121.346560][ T8599] netlink: 'syz.3.779': attribute type 11 has an invalid length. [ 121.356061][ T8599] netlink: 228 bytes leftover after parsing attributes in process `syz.3.779'. [ 121.649274][ T8633] openvswitch: netlink: Actions may not be safe on all matching packets [ 121.743267][ T8641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.149768][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.803'. [ 122.208717][ T8685] netlink: 'syz.4.803': attribute type 1 has an invalid length. [ 122.499432][ T8703] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.811'. [ 122.654227][ T8711] netlink: 'syz.3.815': attribute type 1 has an invalid length. [ 122.679795][ T8711] netlink: 'syz.3.815': attribute type 21 has an invalid length. [ 122.718325][ T8711] IPv6: NLM_F_CREATE should be specified when creating new route [ 122.799891][ T8727] netlink: 'syz.1.820': attribute type 1 has an invalid length. [ 122.824990][ T8727] netlink: 136 bytes leftover after parsing attributes in process `syz.1.820'. [ 122.835895][ T8727] netlink: 'syz.1.820': attribute type 2 has an invalid length. [ 122.868041][ T8727] netlink: 'syz.1.820': attribute type 1 has an invalid length. [ 122.877824][ T8737] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 122.881886][ T8739] team0: Device vti0 is of different type [ 122.905000][ T8737] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 122.935590][ T8741] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 123.007994][ T8743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.079976][ T8747] netlink: 27 bytes leftover after parsing attributes in process `syz.1.826'. [ 123.192973][ T8760] netlink: 16 bytes leftover after parsing attributes in process `syz.3.831'. [ 123.210545][ T8758] netlink: 36 bytes leftover after parsing attributes in process `syz.0.828'. [ 123.527052][ T8764] openvswitch: netlink: Missing key (keys=40, expected=80) [ 123.730721][ T8792] syz.2.840 (8792) used greatest stack depth: 17992 bytes left [ 123.816053][ T8809] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.881460][ T8809] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.072447][ T8834] netlink: 'syz.1.855': attribute type 1 has an invalid length. [ 124.209656][ T8844] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 124.319432][ T8850] macsec2: entered promiscuous mode [ 124.325878][ T8850] macsec2: entered allmulticast mode [ 124.367078][ T8849] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 124.674910][ T8872] netlink: 'syz.3.866': attribute type 2 has an invalid length. [ 124.700482][ T8871] syzkaller1: entered promiscuous mode [ 124.712896][ T8871] syzkaller1: entered allmulticast mode [ 124.763764][ T8884] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 124.820341][ T8887] bridge_slave_0: invalid flags given to default FDB implementation [ 124.894238][ T8890] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 124.930032][ T8890] netlink: 'syz.3.872': attribute type 3 has an invalid length. [ 125.369661][ T8921] gretap0: entered promiscuous mode [ 125.382922][ T8928] 0ªî{X¹¦: renamed from gretap0 [ 125.438991][ T8928] 0ªî{X¹¦: left promiscuous mode [ 125.444876][ T8928] 0ªî{X¹¦: entered allmulticast mode [ 125.466282][ T8928] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 125.629880][ T8951] __nla_validate_parse: 12 callbacks suppressed [ 125.629903][ T8951] netlink: 20 bytes leftover after parsing attributes in process `syz.0.894'. [ 125.630898][ T8948] tipc: Can't bind to reserved service type 0 [ 125.729564][ T8957] netlink: 300 bytes leftover after parsing attributes in process `syz.4.896'. [ 125.926977][ T8976] validate_nla: 1 callbacks suppressed [ 125.927001][ T8976] netlink: 'syz.0.904': attribute type 10 has an invalid length. [ 125.948175][ T8976] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 125.966943][ T8976] team0: Port device hsr0 added [ 126.058402][ T8985] netlink: 'syz.4.907': attribute type 1 has an invalid length. [ 126.066947][ T8985] netlink: 'syz.4.907': attribute type 3 has an invalid length. [ 126.078023][ T8982] pimreg3: entered allmulticast mode [ 126.082489][ T8985] netlink: 224 bytes leftover after parsing attributes in process `syz.4.907'. [ 126.095547][ T8985] NCSI netlink: No device for ifindex 0 [ 126.210261][ T8994] macsec1: entered promiscuous mode [ 126.219361][ T8996] sctp: [Deprecated]: syz.4.910 (pid 8996) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.219361][ T8996] Use struct sctp_sack_info instead [ 126.237965][ T8994] macsec1: entered allmulticast mode [ 126.253974][ T8995] macsec2: entered promiscuous mode [ 126.267845][ T8995] bridge0: entered promiscuous mode [ 126.276118][ T8995] bridge0: port 4(macsec2) entered blocking state [ 126.285079][ T8995] bridge0: port 4(macsec2) entered disabled state [ 126.296008][ T8995] macsec2: entered allmulticast mode [ 126.302591][ T8995] bridge0: entered allmulticast mode [ 126.310386][ T8995] macsec2: left allmulticast mode [ 126.316527][ T8995] bridge0: left allmulticast mode [ 126.324276][ T8995] bridge0: left promiscuous mode [ 126.553380][ T9024] netlink: 24 bytes leftover after parsing attributes in process `syz.3.918'. [ 126.857404][ T9031] vlan2: left promiscuous mode [ 126.864474][ T9031] bond2: left promiscuous mode [ 126.869438][ T9031] gretap1: left promiscuous mode [ 126.883466][ T9033] geneve2: entered promiscuous mode [ 126.889829][ T9033] geneve2: entered allmulticast mode [ 126.903790][ T7016] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.925192][ T7016] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 126.960067][ T7016] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.987706][ T7016] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 126.997701][ T7016] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.012807][ T7016] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 127.024034][ T7016] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.024213][ T9045] netlink: 128 bytes leftover after parsing attributes in process `syz.2.925'. [ 127.034944][ T7016] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 127.137516][ T9053] netlink: 360 bytes leftover after parsing attributes in process `syz.2.929'. [ 127.181873][ T9056] vlan3: entered promiscuous mode [ 127.313218][ T9065] netlink: 'syz.0.933': attribute type 1 has an invalid length. [ 127.323181][ T9065] netlink: 224 bytes leftover after parsing attributes in process `syz.0.933'. [ 127.335336][ T9065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.933'. [ 127.404552][ T9072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.936'. [ 127.560217][ T9087] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.596688][ T9087] netlink: 1 bytes leftover after parsing attributes in process `syz.2.941'. [ 127.632634][ T9087] xt_policy: neither incoming nor outgoing policy selected [ 127.921872][ T9113] ipvlan0: entered promiscuous mode [ 127.927501][ T9113] ipvlan0: entered allmulticast mode [ 127.942433][ T9113] veth0_vlan: entered allmulticast mode [ 128.072350][ T9123] netlink: 'syz.2.954': attribute type 1 has an invalid length. [ 128.149433][ T9123] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.381621][ T9180] tipc: Enabling of bearer rejected, already enabled [ 129.421699][ T9182] team0: Device gtp0 is of different type [ 129.453914][ T9180] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 129.465127][ T9180] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 129.505125][ T9180] tipc: Resetting bearer [ 129.542091][ T9192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.562362][ T9196] netlink: 'syz.1.977': attribute type 1 has an invalid length. [ 129.570370][ T9196] netlink: 'syz.1.977': attribute type 1 has an invalid length. [ 129.946172][ T9224] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 129.963008][ T9224] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 129.983894][ T9231] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 129.998169][ T9227] netlink: 'syz.1.988': attribute type 1 has an invalid length. [ 130.096255][ T9224] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 130.114449][ T9224] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 130.194694][ T9224] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 130.251027][ T9224] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 130.413094][ T9224] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 130.460993][ T9224] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 130.548323][ T1325] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.562814][ T1325] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 130.599676][ T1325] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.610134][ T1325] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 130.635752][ T1325] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.655775][ T1325] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 130.675964][ T1325] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.715536][ T1325] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 130.727130][ T9257] __nla_validate_parse: 7 callbacks suppressed [ 130.727149][ T9257] netlink: 20 bytes leftover after parsing attributes in process `syz.0.997'. [ 130.727642][ T9261] netlink: 'syz.3.995': attribute type 10 has an invalid length. [ 130.743082][ T9259] netlink: 'syz.1.998': attribute type 3 has an invalid length. [ 130.767870][ T9261] netlink: 40 bytes leftover after parsing attributes in process `syz.3.995'. [ 130.779141][ T9259] team0: No ports can be present during mode change [ 130.793745][ T9261] ipvlan1: entered promiscuous mode [ 130.800565][ T9261] ipvlan1: entered allmulticast mode [ 130.809659][ T9261] veth0_vlan: entered allmulticast mode [ 130.817680][ T9261] bridge0: port 4(ipvlan1) entered blocking state [ 130.825474][ T9261] bridge0: port 4(ipvlan1) entered disabled state [ 130.834834][ T9261] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 130.853134][ T9265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.997'. [ 130.882038][ T9263] tipc: Enabled bearer , priority 0 [ 130.901520][ T9263] syzkaller0: entered promiscuous mode [ 130.907757][ T9263] syzkaller0: entered allmulticast mode [ 130.920687][ T9263] tipc: Resetting bearer [ 131.019297][ T9262] tipc: Resetting bearer [ 131.057545][ T9262] tipc: Disabling bearer [ 131.155862][ T9287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1006'. [ 131.894426][ T9327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1013'. [ 132.175449][ T9329] !: renamed from dummy0 (while UP) [ 132.312581][ T9337] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1016'. [ 132.343285][ T9337] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1016'. [ 132.609603][ T9357] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1023'. [ 132.679327][ T9363] validate_nla: 1 callbacks suppressed [ 132.679350][ T9363] netlink: 'syz.2.1022': attribute type 32 has an invalid length. [ 132.783961][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.832707][ T9372] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1026'. [ 132.857142][ T9372] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1026'. [ 133.260894][ T9398] nbd2: detected capacity change from 0 to 549764202496 [ 133.348136][ T9405] 0ªî{X¹¦: renamed from gretap0 [ 133.356950][ T9405] 0ªî{X¹¦: left promiscuous mode [ 133.367030][ T9405] 0ªî{X¹¦: entered allmulticast mode [ 133.374783][ T9405] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 133.407017][ T9407] tipc: Enabled bearer , priority 0 [ 133.430411][ T9407] syzkaller0: MTU too low for tipc bearer [ 133.437569][ T9407] tipc: Disabling bearer [ 133.516087][ T9414] netlink: 'syz.2.1038': attribute type 13 has an invalid length. [ 133.613323][ T5871] block nbd2: Receive control failed (result -32) [ 133.863517][ T9436] openvswitch: netlink: Message has 4 unknown bytes. [ 133.877043][ T9436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.323990][ T9455] netlink: 'syz.3.1056': attribute type 8 has an invalid length. [ 134.443827][ T9457] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 134.662370][ T9303] Set syz1 is full, maxelem 65536 reached [ 134.810896][ T9477] netlink: 'syz.4.1063': attribute type 2 has an invalid length. [ 135.363311][ T9523] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 135.420013][ T9526] netlink: 'syz.4.1081': attribute type 1 has an invalid length. [ 135.458177][ T9526] 8021q: adding VLAN 0 to HW filter on device bond10 [ 135.478966][ T9526] vlan2: entered allmulticast mode [ 135.484731][ T9526] veth1: entered allmulticast mode [ 135.495038][ T9526] bond10: (slave vlan2): Opening slave failed [ 135.550161][ T9532] IPVS: set_ctl: invalid protocol: 0 172.20.20.15:20001 [ 135.717810][ T9548] tc_dump_action: action bad kind [ 135.729196][ T9548] tc_dump_action: action bad kind [ 136.265274][ T9575] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 136.390312][ T9592] __nla_validate_parse: 12 callbacks suppressed [ 136.390333][ T9592] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1099'. [ 136.525545][ T9612] pim6reg1: entered promiscuous mode [ 136.533784][ T9612] pim6reg1: entered allmulticast mode [ 136.739246][ T9629] netlink: 'syz.1.1111': attribute type 1 has an invalid length. [ 136.747708][ T9629] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1111'. [ 136.887195][ T9650] tipc: Enabling of bearer rejected, failed to enable media [ 136.918322][ T9655] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 138.163880][ T9690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1132'. [ 138.166697][ T9689] netlink: 'syz.4.1131': attribute type 7 has an invalid length. [ 138.265641][ T9689] : entered promiscuous mode [ 138.275113][ T9698] tipc: Enabling of bearer rejected, failed to enable media [ 138.463356][ T9714] netlink: 'syz.3.1137': attribute type 5 has an invalid length. [ 138.565895][ T9719] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 138.577699][ T9719] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 138.628255][ T9723] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1140'. [ 138.652497][ T9729] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1143'. [ 138.705261][ T9732] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.1145'. [ 138.722213][ T9732] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 139.207246][ T9792] IPv6: Can't replace route, no match found [ 139.215585][ T9792] Bluetooth: MGMT ver 1.23 [ 139.224149][ T9792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1161'. [ 139.799857][ T9807] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1167'. [ 139.810117][ T9807] netlink: zone id is out of range [ 139.818119][ T9807] netlink: get zone limit has 8 unknown bytes [ 139.920832][ T9816] netlink: 'syz.2.1170': attribute type 7 has an invalid length. [ 139.928875][ T9816] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1170'. [ 140.112981][ T9822] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 140.196827][ T9825] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 140.207483][ T9825] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 140.235234][ T9828] tipc: Enabling of bearer rejected, already enabled [ 140.309344][ T9837] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1179'. [ 140.326287][ T9840] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 140.488388][ T9851] netlink: 'syz.2.1184': attribute type 1 has an invalid length. [ 140.530403][ T9851] netlink: 'syz.2.1184': attribute type 1 has an invalid length. [ 140.696936][ T9871] netlink: 'syz.2.1188': attribute type 10 has an invalid length. [ 140.749875][ T9876] sctp: [Deprecated]: syz.0.1190 (pid 9876) Use of int in max_burst socket option. [ 140.749875][ T9876] Use struct sctp_assoc_value instead [ 140.765925][ T9875] sctp: [Deprecated]: syz.0.1190 (pid 9875) Use of int in max_burst socket option. [ 140.765925][ T9875] Use struct sctp_assoc_value instead [ 141.193178][ T9902] syzkaller1: entered promiscuous mode [ 141.205906][ T9902] syzkaller1: entered allmulticast mode [ 141.342450][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 141.497620][ T9933] netlink: 'syz.2.1206': attribute type 3 has an invalid length. [ 141.521939][ T9933] __nla_validate_parse: 5 callbacks suppressed [ 141.521960][ T9933] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.1206'. [ 141.590637][ T9937] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 141.683444][ T9942] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 141.766985][ T9594] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.824429][ T9594] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.847497][ T9594] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.902942][ T9594] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.921772][ T9952] syzkaller0: entered promiscuous mode [ 141.927406][ T9952] syzkaller0: entered allmulticast mode [ 142.118921][ T9951] infiniband syz!: set down [ 142.140381][ T9951] infiniband syz!: added team_slave_0 [ 142.224030][ T9951] RDS/IB: syz!: added [ 142.228182][ T9951] smc: adding ib device syz! with port count 1 [ 142.234909][ T9951] smc: ib device syz! port 1 has pnetid [ 142.353033][ T9991] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1222'. [ 142.501127][T10003] bond0: (slave gretap0): Opening slave failed [ 142.515871][T10003] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1225'. [ 142.866741][T10015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1230'. [ 142.901045][T10015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.974046][T10025] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1232'. [ 143.006289][T10025] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1232'. [ 143.024810][T10027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1233'. [ 143.051917][T10015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.233745][T10032] netlink: 'syz.1.1235': attribute type 1 has an invalid length. [ 143.285261][T10032] bond3: (slave gretap2): making interface the new active one [ 143.325152][T10032] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 143.341086][T10037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1235'. [ 143.471728][ T5924] IPVS: starting estimator thread 0... [ 143.572016][T10045] IPVS: using max 40 ests per chain, 96000 per kthread [ 143.592264][T10055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1241'. [ 143.611746][T10055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1241'. [ 143.911776][ T5924] IPVS: starting estimator thread 0... [ 144.009056][T10083] IPVS: using max 35 ests per chain, 84000 per kthread [ 144.107516][T10098] netlink: 'syz.3.1253': attribute type 1 has an invalid length. [ 144.150577][T10100] netlink: 'syz.4.1254': attribute type 1 has an invalid length. [ 144.218492][ T30] audit: type=1800 audit(1756204763.153:2): pid=10106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1255" name="blkio.bfq.io_service_bytes" dev="tmpfs" ino=1256 res=0 errno=0 [ 144.238762][T10105] bond11: (slave gretap0): making interface the new active one [ 144.257820][T10105] bond11: (slave gretap0): Enslaving as an active interface with an up link [ 144.268746][T10108] tc_dump_action: action bad kind [ 144.300108][T10094] 8021q: adding VLAN 0 to HW filter on device bond11 [ 144.395204][T10119] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 144.406191][T10119] netlink: 'syz.3.1260': attribute type 30 has an invalid length. [ 144.426034][T10119] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 144.442814][T10119] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 190.567075][T10143] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 190.601444][T10149] syzkaller0: refused to change device tx_queue_len [ 190.619671][T10157] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 190.628028][T10157] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 190.687522][T10162] netlink: 'syz.0.1268': attribute type 10 has an invalid length. [ 190.747325][T10162] team0: Device ipvlan1 failed to register rx_handler [ 190.756836][T10168] __nla_validate_parse: 6 callbacks suppressed [ 190.756855][T10168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1271'. [ 190.880656][T10176] netlink: 'syz.3.1272': attribute type 1 has an invalid length. [ 191.010392][T10189] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1278'. [ 191.293159][T10211] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.1287'. [ 191.308719][T10211] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.1287'. [ 191.319646][T10214] netlink: 'syz.0.1289': attribute type 1 has an invalid length. [ 191.327424][T10218] syz_tun: left promiscuous mode [ 191.413550][T10225] netlink: 'syz.4.1292': attribute type 2 has an invalid length. [ 191.426167][T10226] netlink: 'syz.4.1292': attribute type 2 has an invalid length. [ 191.453461][T10225] netlink: 119 bytes leftover after parsing attributes in process `syz.4.1292'. [ 191.493730][T10226] netlink: 119 bytes leftover after parsing attributes in process `syz.4.1292'. [ 191.545964][T10226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1292'. [ 191.555702][T10231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1292'. [ 191.699926][T10235] 8021q: adding VLAN 0 to HW filter on device bond6 [ 191.717201][T10235] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1293'. [ 192.114973][T10276] sctp: [Deprecated]: syz.4.1304 (pid 10276) Use of int in max_burst socket option. [ 192.114973][T10276] Use struct sctp_assoc_value instead [ 192.161691][T10274] veth3: entered allmulticast mode [ 192.182721][T10274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1301'. [ 192.364679][T10304] netdevsim netdevsim3: Direct firmware load for /.€ failed with error -2 [ 192.374587][T10304] netdevsim netdevsim3: Falling back to sysfs fallback for: /.€ [ 193.024862][T10363] netlink: 'syz.4.1326': attribute type 5 has an invalid length. [ 193.062650][T10368] netlink: ct family unspecified [ 193.067791][T10368] openvswitch: netlink: Actions may not be safe on all matching packets [ 193.085724][T10368] openvswitch: netlink: IP tunnel dst address not specified [ 193.183297][T10378] syzkaller0: entered promiscuous mode [ 193.189017][T10378] syzkaller0: entered allmulticast mode [ 193.533174][T10414] netlink: 'syz.1.1340': attribute type 1 has an invalid length. [ 193.543084][T10414] netlink: 'syz.1.1340': attribute type 1 has an invalid length. [ 193.682496][T10430] syz_tun: entered allmulticast mode [ 193.688668][T10430] syz_tun: left allmulticast mode [ 193.769222][T10439] syzkaller1: entered promiscuous mode [ 193.775381][T10439] syzkaller1: entered allmulticast mode [ 194.305106][T10447] ipvlan1: left promiscuous mode [ 194.310128][T10447] ipvlan1: left allmulticast mode [ 194.318227][T10447] veth0_vlan: left allmulticast mode [ 194.337040][T10447] bond2: left allmulticast mode [ 194.342504][T10447] macsec1: left promiscuous mode [ 194.351303][T10447] macsec1: left allmulticast mode [ 194.400569][ T7016] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.416392][ T7016] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.490427][ T7016] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.510056][ T7016] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.522237][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 194.826287][T10493] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 194.842435][T10495] netlink: 'syz.0.1366': attribute type 1 has an invalid length. [ 194.885759][T10495] 8021q: adding VLAN 0 to HW filter on device bond4 [ 194.958731][T10495] bond4: (slave veth5): Enslaving as an active interface with a down link [ 195.133910][T10511] gre1: entered promiscuous mode [ 195.163222][T10511] gre1: entered allmulticast mode [ 195.338190][T10531] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 195.359971][T10536] netlink: 'syz.0.1380': attribute type 1 has an invalid length. [ 195.428540][T10540] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.444622][T10540] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.508454][T10540] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.519119][T10540] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.571578][T10540] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.588988][T10540] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.627527][T10560] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 195.636329][T10560] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 195.645942][T10560] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 195.669054][T10540] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.680069][T10540] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.743942][ T3484] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.752729][ T3484] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.772883][ T9590] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.781707][ T9590] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.790107][ T9590] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.798766][ T9590] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.814296][ T9590] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.824435][ T9590] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.837711][T10539] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.849351][T10539] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.864260][ T9590] ================================================================== [ 195.872399][ T9590] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350 [ 195.879991][ T9590] Read of size 8 at addr ffff88807c7b3eb0 by task kworker/u8:24/9590 [ 195.888083][ T9590] [ 195.890446][ T9590] CPU: 0 UID: 0 PID: 9590 Comm: kworker/u8:24 Not tainted syzkaller #0 PREEMPT(full) [ 195.890472][ T9590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 195.890487][ T9590] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 195.890529][ T9590] Call Trace: [ 195.890537][ T9590] [ 195.890547][ T9590] dump_stack_lvl+0x189/0x250 [ 195.890578][ T9590] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.890604][ T9590] ? lock_release+0x4b/0x3e0 [ 195.890639][ T9590] ? __virt_addr_valid+0x4a5/0x5c0 [ 195.890670][ T9590] print_report+0xca/0x240 [ 195.890700][ T9590] ? __mutex_lock+0x147/0x1350 [ 195.890730][ T9590] kasan_report+0x118/0x150 [ 195.890759][ T9590] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 195.890788][ T9590] ? __mutex_lock+0x147/0x1350 [ 195.890824][ T9590] __mutex_lock+0x147/0x1350 [ 195.890857][ T9590] ? __mutex_lock+0x5bb/0x1350 [ 195.890891][ T9590] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 195.890925][ T9590] ? __pfx___mutex_lock+0x10/0x10 [ 195.890957][ T9590] ? do_raw_spin_unlock+0x122/0x240 [ 195.890986][ T9590] ? rcu_is_watching+0x15/0xb0 [ 195.891022][ T9590] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 195.891057][ T9590] ? process_scheduled_works+0x9ef/0x17b0 [ 195.891077][ T9590] ? process_scheduled_works+0x9ef/0x17b0 [ 195.891099][ T9590] process_scheduled_works+0xae1/0x17b0 [ 195.891136][ T9590] ? __pfx_process_scheduled_works+0x10/0x10 [ 195.891165][ T9590] worker_thread+0x8a0/0xda0 [ 195.891202][ T9590] kthread+0x70e/0x8a0 [ 195.891230][ T9590] ? __pfx_worker_thread+0x10/0x10 [ 195.891252][ T9590] ? __pfx_kthread+0x10/0x10 [ 195.891279][ T9590] ? rcu_is_watching+0x15/0xb0 [ 195.891298][ T9590] ? __pfx_kthread+0x10/0x10 [ 195.891325][ T9590] ret_from_fork+0x3f9/0x770 [ 195.891348][ T9590] ? __pfx_ret_from_fork+0x10/0x10 [ 195.891373][ T9590] ? __switch_to_asm+0x39/0x70 [ 195.891401][ T9590] ? __switch_to_asm+0x33/0x70 [ 195.891429][ T9590] ? __pfx_kthread+0x10/0x10 [ 195.891455][ T9590] ret_from_fork_asm+0x1a/0x30 [ 195.891492][ T9590] [ 195.891500][ T9590] [ 196.089801][ T9590] Allocated by task 10540: [ 196.094235][ T9590] kasan_save_track+0x3e/0x80 [ 196.098930][ T9590] __kasan_kmalloc+0x93/0xb0 [ 196.103531][ T9590] __kmalloc_noprof+0x27a/0x4f0 [ 196.108395][ T9590] udp_tunnel_nic_netdevice_event+0x854/0x19f0 [ 196.114576][ T9590] notifier_call_chain+0x1b3/0x3e0 [ 196.119694][ T9590] register_netdevice+0x1608/0x1ae0 [ 196.124899][ T9590] nsim_create+0xae8/0xf10 [ 196.129323][ T9590] __nsim_dev_port_add+0x6b6/0xb10 [ 196.134449][ T9590] nsim_dev_port_add_all+0x37/0xf0 [ 196.139573][ T9590] nsim_dev_reload_up+0x451/0x780 [ 196.144605][ T9590] devlink_reload+0x4e9/0x8d0 [ 196.149290][ T9590] devlink_nl_reload_doit+0x9c2/0xd50 [ 196.154721][ T9590] genl_family_rcv_msg_doit+0x215/0x300 [ 196.160274][ T9590] genl_rcv_msg+0x60e/0x790 [ 196.164781][ T9590] netlink_rcv_skb+0x208/0x470 [ 196.169557][ T9590] genl_rcv+0x28/0x40 [ 196.173542][ T9590] netlink_unicast+0x82c/0x9e0 [ 196.178317][ T9590] netlink_sendmsg+0x805/0xb30 [ 196.183093][ T9590] __sock_sendmsg+0x21c/0x270 [ 196.187796][ T9590] ____sys_sendmsg+0x505/0x830 [ 196.192591][ T9590] ___sys_sendmsg+0x21f/0x2a0 [ 196.197287][ T9590] __x64_sys_sendmsg+0x19b/0x260 [ 196.202244][ T9590] do_syscall_64+0xfa/0x3b0 [ 196.206764][ T9590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.212705][ T9590] [ 196.215128][ T9590] Freed by task 10539: [ 196.219206][ T9590] kasan_save_track+0x3e/0x80 [ 196.223993][ T9590] kasan_save_free_info+0x46/0x50 [ 196.229043][ T9590] __kasan_slab_free+0x5b/0x80 [ 196.233833][ T9590] kfree+0x18e/0x440 [ 196.237804][ T9590] udp_tunnel_nic_netdevice_event+0x1332/0x19f0 [ 196.244061][ T9590] notifier_call_chain+0x1b3/0x3e0 [ 196.249206][ T9590] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 196.255641][ T9590] unregister_netdevice_queue+0x33c/0x380 [ 196.261391][ T9590] nsim_destroy+0x1dd/0x670 [ 196.265908][ T9590] __nsim_dev_port_del+0x14d/0x1b0 [ 196.271036][ T9590] nsim_dev_reload_destroy+0x288/0x490 [ 196.276506][ T9590] nsim_dev_reload_down+0x8a/0xc0 [ 196.281560][ T9590] devlink_reload+0x1b3/0x8d0 [ 196.286254][ T9590] devlink_nl_reload_doit+0x9c2/0xd50 [ 196.291652][ T9590] genl_family_rcv_msg_doit+0x215/0x300 [ 196.297208][ T9590] genl_rcv_msg+0x60e/0x790 [ 196.301716][ T9590] netlink_rcv_skb+0x208/0x470 [ 196.306578][ T9590] genl_rcv+0x28/0x40 [ 196.310568][ T9590] netlink_unicast+0x82c/0x9e0 [ 196.315340][ T9590] netlink_sendmsg+0x805/0xb30 [ 196.320164][ T9590] __sock_sendmsg+0x21c/0x270 [ 196.324864][ T9590] ____sys_sendmsg+0x505/0x830 [ 196.329697][ T9590] ___sys_sendmsg+0x21f/0x2a0 [ 196.334390][ T9590] __x64_sys_sendmsg+0x19b/0x260 [ 196.339352][ T9590] do_syscall_64+0xfa/0x3b0 [ 196.343868][ T9590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.349773][ T9590] [ 196.352107][ T9590] Last potentially related work creation: [ 196.357848][ T9590] kasan_save_stack+0x3e/0x60 [ 196.362587][ T9590] kasan_record_aux_stack+0xbd/0xd0 [ 196.367812][ T9590] insert_work+0x3d/0x330 [ 196.372163][ T9590] __queue_work+0xbaf/0xfb0 [ 196.376682][ T9590] queue_work_on+0x181/0x270 [ 196.381292][ T9590] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 196.386966][ T9590] udp_tunnel_push_rx_port+0x180/0x200 [ 196.392449][ T9590] geneve_offload_rx_ports+0xd7/0x160 [ 196.397844][ T9590] geneve_netdevice_event+0x6a/0x80 [ 196.403054][ T9590] notifier_call_chain+0x1b3/0x3e0 [ 196.408171][ T9590] call_netdevice_notifiers+0x88/0xc0 [ 196.413576][ T9590] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 196.419840][ T9590] notifier_call_chain+0x1b3/0x3e0 [ 196.424958][ T9590] register_netdevice+0x1608/0x1ae0 [ 196.430261][ T9590] nsim_create+0xae8/0xf10 [ 196.434683][ T9590] __nsim_dev_port_add+0x6b6/0xb10 [ 196.439802][ T9590] nsim_dev_port_add_all+0x37/0xf0 [ 196.444930][ T9590] nsim_dev_reload_up+0x451/0x780 [ 196.449965][ T9590] devlink_reload+0x4e9/0x8d0 [ 196.454652][ T9590] devlink_nl_reload_doit+0x9c2/0xd50 [ 196.460031][ T9590] genl_family_rcv_msg_doit+0x215/0x300 [ 196.465582][ T9590] genl_rcv_msg+0x60e/0x790 [ 196.470099][ T9590] netlink_rcv_skb+0x208/0x470 [ 196.474880][ T9590] genl_rcv+0x28/0x40 [ 196.478879][ T9590] netlink_unicast+0x82c/0x9e0 [ 196.483669][ T9590] netlink_sendmsg+0x805/0xb30 [ 196.488454][ T9590] __sock_sendmsg+0x21c/0x270 [ 196.493137][ T9590] ____sys_sendmsg+0x505/0x830 [ 196.497908][ T9590] ___sys_sendmsg+0x21f/0x2a0 [ 196.502585][ T9590] __x64_sys_sendmsg+0x19b/0x260 [ 196.507529][ T9590] do_syscall_64+0xfa/0x3b0 [ 196.512048][ T9590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.517944][ T9590] [ 196.520268][ T9590] Second to last potentially related work creation: [ 196.526847][ T9590] kasan_save_stack+0x3e/0x60 [ 196.531531][ T9590] kasan_record_aux_stack+0xbd/0xd0 [ 196.536735][ T9590] insert_work+0x3d/0x330 [ 196.541081][ T9590] __queue_work+0xcd2/0xfb0 [ 196.545590][ T9590] queue_work_on+0x181/0x270 [ 196.550192][ T9590] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 196.556035][ T9590] udp_tunnel_push_rx_port+0x180/0x200 [ 196.561505][ T9590] vxlan_offload_rx_ports+0x139/0x200 [ 196.566890][ T9590] vxlan_netdevice_event+0x111/0x470 [ 196.572272][ T9590] notifier_call_chain+0x1b3/0x3e0 [ 196.577385][ T9590] call_netdevice_notifiers+0x88/0xc0 [ 196.582775][ T9590] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 196.589197][ T9590] notifier_call_chain+0x1b3/0x3e0 [ 196.594310][ T9590] register_netdevice+0x1608/0x1ae0 [ 196.599520][ T9590] nsim_create+0xae8/0xf10 [ 196.603941][ T9590] __nsim_dev_port_add+0x6b6/0xb10 [ 196.609058][ T9590] nsim_dev_port_add_all+0x37/0xf0 [ 196.614176][ T9590] nsim_dev_reload_up+0x451/0x780 [ 196.619216][ T9590] devlink_reload+0x4e9/0x8d0 [ 196.623917][ T9590] devlink_nl_reload_doit+0x9c2/0xd50 [ 196.629295][ T9590] genl_family_rcv_msg_doit+0x215/0x300 [ 196.634860][ T9590] genl_rcv_msg+0x60e/0x790 [ 196.639394][ T9590] netlink_rcv_skb+0x208/0x470 [ 196.644176][ T9590] genl_rcv+0x28/0x40 [ 196.648160][ T9590] netlink_unicast+0x82c/0x9e0 [ 196.652939][ T9590] netlink_sendmsg+0x805/0xb30 [ 196.657716][ T9590] __sock_sendmsg+0x21c/0x270 [ 196.662407][ T9590] ____sys_sendmsg+0x505/0x830 [ 196.667178][ T9590] ___sys_sendmsg+0x21f/0x2a0 [ 196.671856][ T9590] __x64_sys_sendmsg+0x19b/0x260 [ 196.676803][ T9590] do_syscall_64+0xfa/0x3b0 [ 196.681316][ T9590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.687211][ T9590] [ 196.689553][ T9590] The buggy address belongs to the object at ffff88807c7b3e00 [ 196.689553][ T9590] which belongs to the cache kmalloc-256 of size 256 [ 196.703614][ T9590] The buggy address is located 176 bytes inside of [ 196.703614][ T9590] freed 256-byte region [ffff88807c7b3e00, ffff88807c7b3f00) [ 196.717417][ T9590] [ 196.719750][ T9590] The buggy address belongs to the physical page: [ 196.726176][ T9590] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c7b2 [ 196.734952][ T9590] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 196.743460][ T9590] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 196.751452][ T9590] page_type: f5(slab) [ 196.755434][ T9590] raw: 00fff00000000040 ffff88801a441b40 0000000000000000 dead000000000001 [ 196.764023][ T9590] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 196.772615][ T9590] head: 00fff00000000040 ffff88801a441b40 0000000000000000 dead000000000001 [ 196.781312][ T9590] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 196.789994][ T9590] head: 00fff00000000001 ffffea0001f1ec81 00000000ffffffff 00000000ffffffff [ 196.798686][ T9590] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 196.807443][ T9590] page dumped because: kasan: bad access detected [ 196.813866][ T9590] page_owner tracks the page as allocated [ 196.819580][ T9590] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5870, tgid 5870 (syz-executor), ts 81838255306, free_ts 81834611732 [ 196.840976][ T9590] post_alloc_hook+0x240/0x2a0 [ 196.845759][ T9590] get_page_from_freelist+0x21e4/0x22c0 [ 196.851307][ T9590] __alloc_frozen_pages_noprof+0x181/0x370 [ 196.857114][ T9590] alloc_pages_mpol+0x232/0x4a0 [ 196.861975][ T9590] allocate_slab+0x8a/0x370 [ 196.866484][ T9590] ___slab_alloc+0xbeb/0x1410 [ 196.871173][ T9590] __kmalloc_noprof+0x305/0x4f0 [ 196.876051][ T9590] __list_lru_init+0xba/0x5c0 [ 196.880734][ T9590] alloc_super+0x7cb/0x970 [ 196.885162][ T9590] sget_fc+0x329/0xa40 [ 196.889324][ T9590] get_tree_nodev+0x2a/0x150 [ 196.893922][ T9590] vfs_get_tree+0x92/0x2b0 [ 196.898357][ T9590] do_new_mount+0x2a2/0x9e0 [ 196.902875][ T9590] __se_sys_mount+0x317/0x410 [ 196.907563][ T9590] do_syscall_64+0xfa/0x3b0 [ 196.912089][ T9590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.917986][ T9590] page last free pid 5865 tgid 5865 stack trace: [ 196.924311][ T9590] __free_frozen_pages+0xbc4/0xd30 [ 196.929434][ T9590] __slab_free+0x303/0x3c0 [ 196.933858][ T9590] qlist_free_all+0x97/0x140 [ 196.938458][ T9590] kasan_quarantine_reduce+0x148/0x160 [ 196.943926][ T9590] __kasan_slab_alloc+0x22/0x80 [ 196.948784][ T9590] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 196.954250][ T9590] getname_flags+0xb8/0x540 [ 196.958757][ T9590] vfs_fstatat+0x43/0x170 [ 196.963090][ T9590] __x64_sys_newfstatat+0x116/0x190 [ 196.968292][ T9590] do_syscall_64+0xfa/0x3b0 [ 196.972811][ T9590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.978718][ T9590] [ 196.981040][ T9590] Memory state around the buggy address: [ 196.986676][ T9590] ffff88807c7b3d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 196.994744][ T9590] ffff88807c7b3e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 197.002810][ T9590] >ffff88807c7b3e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 197.010969][ T9590] ^ [ 197.016629][ T9590] ffff88807c7b3f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 197.024690][ T9590] ffff88807c7b3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 197.032771][ T9590] ================================================================== [ 197.051100][ T9590] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 197.058467][ T9590] CPU: 0 UID: 0 PID: 9590 Comm: kworker/u8:24 Not tainted syzkaller #0 PREEMPT(full) [ 197.068079][ T9590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 197.078149][ T9590] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 197.085461][ T9590] Call Trace: [ 197.088746][ T9590] [ 197.091692][ T9590] dump_stack_lvl+0x99/0x250 [ 197.096303][ T9590] ? __asan_memcpy+0x40/0x70 [ 197.100907][ T9590] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.106117][ T9590] ? __pfx__printk+0x10/0x10 [ 197.110726][ T9590] vpanic+0x281/0x750 [ 197.114747][ T9590] ? preempt_schedule+0xae/0xc0 [ 197.119609][ T9590] ? __pfx_vpanic+0x10/0x10 [ 197.124120][ T9590] ? preempt_schedule_common+0x83/0xd0 [ 197.129598][ T9590] ? preempt_schedule+0xae/0xc0 [ 197.134457][ T9590] ? __pfx_preempt_schedule+0x10/0x10 [ 197.139843][ T9590] panic+0xb9/0xc0 [ 197.143665][ T9590] ? __pfx_panic+0x10/0x10 [ 197.148095][ T9590] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 197.154005][ T9590] ? __mutex_lock+0x147/0x1350 [ 197.158791][ T9590] check_panic_on_warn+0x89/0xb0 [ 197.163741][ T9590] ? __mutex_lock+0x147/0x1350 [ 197.168541][ T9590] end_report+0x78/0x160 [ 197.172806][ T9590] kasan_report+0x129/0x150 [ 197.177323][ T9590] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 197.183226][ T9590] ? __mutex_lock+0x147/0x1350 [ 197.188010][ T9590] __mutex_lock+0x147/0x1350 [ 197.192615][ T9590] ? __mutex_lock+0x5bb/0x1350 [ 197.197407][ T9590] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 197.203837][ T9590] ? __pfx___mutex_lock+0x10/0x10 [ 197.208874][ T9590] ? do_raw_spin_unlock+0x122/0x240 [ 197.214098][ T9590] ? rcu_is_watching+0x15/0xb0 [ 197.218887][ T9590] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 197.224983][ T9590] ? process_scheduled_works+0x9ef/0x17b0 [ 197.230720][ T9590] ? process_scheduled_works+0x9ef/0x17b0 [ 197.236459][ T9590] process_scheduled_works+0xae1/0x17b0 [ 197.242032][ T9590] ? __pfx_process_scheduled_works+0x10/0x10 [ 197.248047][ T9590] worker_thread+0x8a0/0xda0 [ 197.252662][ T9590] kthread+0x70e/0x8a0 [ 197.256746][ T9590] ? __pfx_worker_thread+0x10/0x10 [ 197.261873][ T9590] ? __pfx_kthread+0x10/0x10 [ 197.266492][ T9590] ? rcu_is_watching+0x15/0xb0 [ 197.271269][ T9590] ? __pfx_kthread+0x10/0x10 [ 197.275871][ T9590] ret_from_fork+0x3f9/0x770 [ 197.280483][ T9590] ? __pfx_ret_from_fork+0x10/0x10 [ 197.285620][ T9590] ? __switch_to_asm+0x39/0x70 [ 197.290404][ T9590] ? __switch_to_asm+0x33/0x70 [ 197.295188][ T9590] ? __pfx_kthread+0x10/0x10 [ 197.299801][ T9590] ret_from_fork_asm+0x1a/0x30 [ 197.304594][ T9590] [ 197.307948][ T9590] Kernel Offset: disabled [ 197.312279][ T9590] Rebooting in 86400 seconds..