last executing test programs: 11.465083322s ago: executing program 0 (id=2985): unshare(0x6a040000) (async) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2d, 0xb, 0x0, 0xd2f, 0x40, @dev={0xfe, 0x80, '\x00', 0x2e}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x20, 0x689f7241, 0x31f}}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x2bc, r1, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xff, 0x60}}}}, [@NL80211_ATTR_TX_RATES={0x214, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x4, 0x800, 0xfffc, 0x81, 0x8, 0x3ff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x1}, {0x2, 0x4}, {0x1, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x0, 0x2}, {0x5, 0x9}, {0x4, 0x6}, {0x0, 0x9}, {0x1, 0x9}, {0x4, 0x8}, {0x5, 0x5}, {0x4, 0xa}, {0x6, 0x2}, {0x1}, {0x5, 0x9}, {0x0, 0x1}, {0x5, 0xa}, {0x6, 0x7}, {0x0, 0x9}, {0x1, 0x2}, {}, {0x3, 0x3}, {0x4}, {0x3, 0x9}, {0x3, 0x1}, {0x4, 0x5}, {0x4, 0x9}, {0x4, 0x1}, {0x7, 0x9}, {0x7, 0x2}, {0x2, 0x6}, {0x6, 0x1}, {0x6, 0x4}, {0x3, 0x7}, {0x0, 0x5}, {0x4, 0x7}, {0x4, 0x3}, {0x7, 0x2}, {0x5, 0x8}, {0x3, 0x9}, {0x5, 0x2}, {0x6, 0x8}, {0x1, 0x1}, {0x3, 0x5}, {0x7, 0x4}, {0x2, 0x6}, {0x0, 0x3}, {0x0, 0x1}, {0x3, 0x3}, {0x6, 0x3}, {0x5, 0xa}, {0x2, 0xa}, {0x2, 0x4}, {0x0, 0x4}, {0x0, 0x4}, {0x4}, {0x2, 0x3}, {0x0, 0xa}, {0x4, 0x5}, {0x1, 0x9}, {0x1, 0x1}, {0x1}, {0x2, 0x4}, {0x1}, {0x0, 0x1}, {0x4, 0x3}, {0x2, 0x8}]}]}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0xc, 0x4, 0x36, 0x30, 0x1, 0xb, 0x24, 0x45]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x1b, 0x2, 0x36, 0x4, 0x9, 0x6a, 0xc, 0x60, 0x30, 0x2, 0x24, 0x12, 0x12, 0x5, 0x6, 0x30, 0x2, 0x3, 0x2, 0xb, 0x60, 0xb, 0x3, 0x60, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2e, 0xbf53, 0xe7, 0x4, 0x0, 0xffff, 0x6, 0x6]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x6, 0x6}, {0x3, 0x5}, {0x1, 0x9}, {0x7, 0x1}, {0x1, 0xa}, {0x1}, {0x7, 0x4}, {0x0, 0x8}, {0x1, 0x6}, {0x5, 0x5}, {0x5, 0x4}, {0x2}, {0x1, 0x6}, {0x0, 0x6}, {0x3, 0x9}, {0x7, 0x9}, {0x5, 0x5}, {0x0, 0x6}, {0x1, 0x2}, {0x0, 0x2}, {0x1, 0x4}, {0x7, 0x8}, {0x6, 0x1}, {0x6, 0x1}, {0x1, 0xa}, {0x4, 0x1}, {0x0, 0x7}, {0x7, 0x7}, {0x0, 0x9}, {0x1, 0x8}, {0x5, 0x2}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x5}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xf0, 0x4, 0x1b, 0x16, 0x6c, 0xc, 0xc, 0x4, 0x4, 0x1, 0x30, 0xc, 0x9, 0x48, 0x16, 0x4, 0x1, 0x1b, 0x1, 0x6, 0xb, 0x4, 0x36, 0x6c, 0x1, 0xec33b71fd18c6b7d, 0xb, 0x8, 0x17, 0xc, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x2, 0x78, 0x60, 0x36]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x4, 0xa}, {0x0, 0x7}, {0x1, 0x7}, {0x2, 0x2}, {0x3, 0x7}, {0x7, 0xa}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x6}, {0x0, 0x9}, {0x3, 0x8}, {0x5, 0x5}, {0x6}, {0x6, 0x7}, {0x0, 0x8}, {0x0, 0x4}, {0x6, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x2, 0x3}, {0x2, 0x8}, {0x7, 0x2}, {0x6, 0x2}, {0x6, 0x7}, {0x7, 0x5}, {0x0, 0xa}, {0x3, 0x3}, {0x3, 0x7}, {0x2, 0x1}, {0x4, 0x9}, {0x2, 0x8}, {0x7}, {0x6, 0x6}, {0x2, 0xa}, {0x7, 0x1}, {0x0, 0x1}, {0x6, 0x7}, {0x6, 0x3}, {0x6, 0x6}, {0x0, 0x8}, {0x6, 0x2}, {0x0, 0xa}, {0x6, 0x4}, {0x3, 0x1}, {0x7, 0x1}, {0x4, 0x2}, {0x0, 0x6}, {0x2, 0x9}, {0x5, 0x1}, {0x2, 0x8}, {0x7, 0x3}, {0x0, 0x2}, {0x6, 0xa}, {0x6}, {0x4, 0x2}, {0x2, 0x2}, {0x2, 0x4}, {0x5, 0x3}, {0x7, 0x7}, {0x5, 0x7}, {}, {0x0, 0x1}, {0x1}, {0x1, 0x6}, {0x7, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x9}, {0x4, 0x4}, {0x7, 0x2}, {0x7, 0xa}, {0x7, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x1, 0x6}, {0x7, 0x5}, {0x5, 0x3}, {0x5}, {0x1, 0xa}, {0x5}, {0x4, 0x9}, {0x3, 0x8}, {0x1, 0x2}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x6, 0x6}, {0x7, 0xa}, {0x3, 0x4}, {0x6}, {0x2, 0x1}, {0x0, 0x8}, {0x5}, {0x0, 0x4}, {0x3}, {0x5, 0x5}, {0x5, 0x9}, {0x1, 0x7}, {0x5, 0x2}, {0x4, 0x2}, {0x2}, {0x6}, {0x0, 0x6}, {0x4, 0x3}, {0x1, 0xa}, {0x3, 0x8}, {0x6, 0x7}, {0x4, 0x3}, {0x1, 0x7}, {0x6, 0x2}, {0x7, 0x6}, {0x5, 0x4}, {0x2, 0x3}, {0x5}, {0x4, 0x8}, {0x4, 0x2}, {0x2, 0x5}, {0x4, 0xa}, {0x1, 0x5}, {0x1, 0x2}, {0x5, 0x9}, {0x1, 0x6}, {0x3, 0x6}, {0x5, 0x3}, {0x2, 0x3}, {0x0, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x5, 0x4}, {0x6, 0x3}, {0x0, 0x8}, {0x2, 0x1}, {0x4, 0x3}, {0x3, 0x7}, {0x7, 0x3}, {0x4, 0x1}, {0x7, 0x7}, {0x6, 0x6}, {0x5, 0x6}, {0x0, 0x7}, {0x7, 0x2}, {0x5, 0x7}, {0x7, 0x8}, {0x0, 0x7}, {0x7, 0x4}, {0x2, 0x1}, {0x4, 0x3}, {0x0, 0x8}, {0x3}, {0x7, 0x4}, {0x6, 0x6}, {0x0, 0x7}, {0x0, 0x2}, {0x4, 0x9}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf001, 0xa, 0x6, 0x0, 0x2, 0x0, 0xffff, 0x96]}}]}]}, @NL80211_ATTR_TX_RATES={0x88, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6c, 0x30, 0x1b, 0x60, 0x65a329562aaca686, 0x1, 0x30, 0x2, 0x1, 0x36, 0x16, 0x6, 0x48, 0x4, 0x30, 0x6c, 0x48, 0x61, 0x5, 0x30, 0x9, 0x36, 0x3]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x3}, {0x1, 0x9}, {0x4, 0x2}, {0x7, 0xa}, {0x2}, {0x2}, {0x7, 0x5}, {0x7, 0x7}, {0x6, 0x9}, {0x6, 0x2}, {0x7, 0x8}, {0x2, 0x6}, {0x1, 0x4}, {0x0, 0x4}, {0x6, 0x4}, {0x6, 0xa}, {0x5, 0x8}, {0x7, 0x4}, {0x4, 0x6}, {0x2, 0x7}, {0x3, 0x7}, {0x2, 0x8}, {0x4, 0x1}, {0x6, 0x5}, {0x0, 0xa}, {0x2, 0x9}, {0x2, 0x6}, {0x1, 0x3}, {0x4, 0xa}, {0x3, 0x8}, {0x3, 0x3}, {0x1, 0xd}, {0x4, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x18, 0x4, 0x16, 0xc, 0x0, 0xb, 0x36, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0xd66, 0xabdf, 0x9, 0x7, 0x8, 0x9c, 0x7]}}]}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x1}, 0x8004) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r2 = socket$rxrpc(0x21, 0x2, 0xa) (async) r3 = socket$kcm(0x2, 0xa, 0x2) (async) r4 = socket(0x1e, 0x805, 0x0) connect$tipc(r4, &(0x7f0000000000)=@id, 0x10) (async) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8915, 0x0) (async) bind$rxrpc(r2, &(0x7f00000001c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0xb, @ipv4={'\x00', '\xff\xff', @local}, 0x9}}, 0x24) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 7.298883737s ago: executing program 0 (id=3008): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000480)=""/217, 0xd9}], 0x1}, 0x10101) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000002c0)="8670638d82a2d8826aaa7cabb4b9e3d0efa7e77809b2c326f58b46374fdf01ec846e29cafe07c05937f4e5bccc2869f9", 0x30) (async) r3 = accept4$alg(r2, 0x0, 0x0, 0x80000) read$alg(r3, &(0x7f0000001140)=""/137, 0x89) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) recvmmsg(r4, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f0000000700)=""/86, 0x56}], 0x1}, 0x7}], 0x1, 0x2, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="24000000070605000000000000000000050000010500010007"], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x4) 6.557879901s ago: executing program 0 (id=3015): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000003800010325bd700035effd9006"], 0x14}}, 0x40000c4) (async) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20040600) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) sendto$packet(r2, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15afaef1bd7efe075ff441b16e244b8b05fe09e29583ad142567826dfa5cbc6f979b050015bde8c4441cd0fa6be03213181bfe84743015ec12ced8b1aa8f44e5c30afac6f9fd2ab1303be0d1b2c02533bcc97cce7da9b507b053b11821323590d379e9e350a3291fbedb6382de878b7a56e4e38c7f746d0424029f5d49b04697a4", 0xfffffffffffffe20, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r5, &(0x7f0000004340)={&(0x7f0000004100)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000004280)=[{&(0x7f0000004140)="2da1a5", 0x3}], 0x1, &(0x7f00000042c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x50}, 0x4000840) (async) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) unshare(0x10000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff50, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r2, @ANYRES16=r0], 0x9c}}, 0x41) 6.176138182s ago: executing program 0 (id=3020): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0200000001010000000000000a00000904000000000000000000000400000000040000000000000f030000000000000061"], 0x0, 0x52}, 0x20) (async) socket(0x1d, 0x4, 0x1) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000010c0)=@newtfilter={0x3c, 0x26, 0xd27, 0x0, 0x0, {}, [@filter_kind_options=@f_basic={{0x4}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x23}}}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a0d4e0c651d63b72"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x40880) 5.910525657s ago: executing program 0 (id=3024): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r2, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01f71800000000000000240000002400000002000000000000000000000400000003000000000000000000000000000000000000000d0200000000000006"], 0xffffffffffffffff, 0x3e, 0x0, 0xa}, 0x28) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x0, 0x5}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006"], 0x68}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) close(0x3) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r7, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) listen(r7, 0x80) r8 = accept$netrom(r7, 0x0, 0x0) write$cgroup_devices(r5, &(0x7f0000000040)=ANY=[], 0xffdd) close(0x4) accept4(r8, 0x0, 0x0, 0x80000) close(0x3) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500c00108005400000060ec9700019888"], 0xfdef) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x18, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x17fd147c801ae9ab, 0xff00) 4.849161354s ago: executing program 0 (id=3036): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4}, 0x48) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x14, 0x30, 0xb, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f00000001c0)=@tcp6}, 0x20) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x4000) (async) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000000c0)=0x4, 0x4) syz_emit_ethernet(0x211, &(0x7f0000000300)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x1db, 0x3a, 0x1, @dev={0xfe, 0x80, '\x00', 0x30}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@hopopts={0x97, 0x0, '\x00', [@pad1]}], @ndisc_na={0x88, 0x0, 0x0, 0x1, '\x00', @mcast1, [{0x1, 0x1c, "a950004ca561aad21c6843218d58f667edab03ed34f163e9e6dc1ecd893c9e2d496112a33230542366110df4b235f0985c12d28ab104c9fce05cbcd730543e2c5aff028a1a53ec36dfc4129b1895c4232c634670a9ac20cdfe983f73af836e64faa065b84dac509fc5de2b54591e1027e09388fe6c0ccfc7fdc84b4957d57b8c1602faa8849d287eae9f99332e5e1ea5ebb658107ce705075483f06a22d8d46143718bf7301c9b4db6aa9e94b6d12ff9728336ce181306fe744e58a5f2cc5f66af044e729d46102f5ae8f2965d47b0ad8d746542ee8c90b655acd7290d2d43"}, {0x19, 0x1a, "edc366c3b28bda18b2cedfdac07695f826c49a759a0144f2f3bb97f393cdf3f9a44090d04c37a35ec6073edf6ba04b2b438be6086539bdd6f0c6428849c5c92912e49e31fbe0aa98c687537d9041835f4c2497897b799edfd5a91706036898a9e81799c5603245d25b33eec74078594bc0bd36f805ff11420b33cf072eefcca2ea5484ece8649f663797af3304b2d6191ed84f98c74fe7f3c6484a2d5d9009321df85496be04c948f1a3237638c38ceeb4c01391b06aba315316736fe2137a4c74c2f1b95f5bebb66a6ede5c285036a4"}]}}}}}}, 0x0) 3.515763723s ago: executing program 4 (id=3052): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqsrc(r1, 0x0, 0x21, 0x0, &(0x7f0000000080)) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000", @ANYBLOB="b4bf861871f16ca4c6d8071b2c5abffb7c5ca9638827536f838fba0450dcc1a6fe3e63acced3af800932c04e10b18be998790b4d84b1e745806261fbd30b785893ca2cd22ec218db8e15546ba90c8dcc514109a8199aaf6584d13ac4d485609bbcc3deea937065131b23e056adc14964ac97e6c964545e66a13dd588ba1122856e8dc95d12d48c1dfb4b42", @ANYRES64, @ANYRESDEC=r1, @ANYRES32, @ANYRES8=r0, @ANYRESDEC=r0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)='L', 0x1}], 0x1}, 0xc4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f00000002c0)=r2}, 0x20) recvmsg$unix(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000800)=""/231, 0xe7}], 0x1}, 0x42) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x4) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r7, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r8) sendmsg$NLBL_MGMT_C_REMOVE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r9, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, '+%$+(%&\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x2c000040) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000000300), r5) sendmsg$SMC_PNETID_DEL(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x34, r11, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r13, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x800) sendmsg(r7, &(0x7f0000000140)={&(0x7f00000000c0)=@in6={0xa, 0x4e24, 0x2, @empty, 0x10000}, 0x80, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000500)="89647377", 0x4}, {&(0x7f0000000580)="29835cfb2c7cf50d39eaecf1906afccaee181cd42499158d1c0f3b1c649c142be0bf437cda7baeb46c7bd9dfc7e6a0257c32907e4be1a8638212171c909896da227e10409432e25cf811542a989ce7fed5093159a89caf1ffd26b691e0c60368ffee27c725d6c48ce36a3e3b1b7bd4b2dc87047fc9d7a2ae45da7c42d2bc3b36e5b94054e7b153db6f3b692561315186820347d96f7cbbfba6b478a0999b52f6172f5268b276019f98f54187fd59374d6ac838ec535165e45bfdd2b7e7786990087e196a86dfc509aa0249a41eecaf83f0871b76af32e45d02104e10cc4b570c1d103edfe051f646d36a12feb831ed", 0xef}, {&(0x7f0000000780)}], 0x4}, 0x40000) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x114, 0x22, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000cb748edb353d70010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x80) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r12) 3.222920293s ago: executing program 3 (id=3055): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@setneightbl={0x14, 0x43, 0x1}, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001800128008000100767469000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="608291430ab74e15fbae84821120aadc"], 0x40}, 0x1, 0x0, 0x0, 0x20000881}, 0x4004044) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x128, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x80f3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}]}, @NFTA_RULE_USERDATA={0xe6, 0x7, 0x1, 0x0, "4116b2839dec2c4bd243fe67663415a9f56bda3effafea738c92df37fde9fe2ee6831a0c04d5a75062b862bf5f1754e19d2913a9f5cbe66adac2945d153fe7bc1758a57aa522d6277cb64bf9d6c6b53b16c9d2ac4615e1590a3ebec2dc3132c0bd7eecc4d116f2ba0bf2b37f45a84c149bddae5d3b71340245f48773a0a4fed4c734d5b1eea64bcd37b7ebcd96f2f2bae3afbcc3b4c33cb4fee96174c9440e5f2629443665b95b8b1e02fa14d1957e476843c02f2cf9a369f6d00fd1c314e1f30c61b98dc87e6e136d4b19106ebbe1ee55f5534fc7eef2d78861b2f32fd89955b72a"}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}]}], {0x14}}, 0x1b0}}, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350224cc0fea76c72ca08507235c67346722f20690fde0790f040f5fd3eff75f9b291cc5e9c686ebaadbe756c6fa039ff441e427ed12578d5cb041ebf729cfaa575cc852fbdb54e60435e6d62b9d270433b220ed9ff1ff042b8d3d866231c460765"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x94, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xa}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x725}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_DCCP_CLOSING={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x30) close(r1) 3.167293391s ago: executing program 4 (id=3056): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@alg={0xe0, 0x10, 0x1, 0x0, 0x0, {{'drbg_pr_hmac_sha384\x00'}}}, 0xe0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x3c}}, 0xc0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x29b0}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1bb666b79999b156}, 0x4000000) r5 = socket(0x10, 0x803, 0x0) read$alg(r5, &(0x7f0000000040)=""/126, 0x7e) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100001040059baff182a000000000000", @ANYRES32=0x0, @ANYBLOB="00010000ac0000002c0012800b000100697036746e6c00001c000280050004000300000008001400080000000800070000000100"], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 2.989784054s ago: executing program 4 (id=3059): r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000000940)=[{{&(0x7f00000000c0)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x3, 0x4}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4) socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x34, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xd, 0x9}, {0xe, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x404c0c0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="440100001a0001000000000000000000000000000000000000e6ff0000000000000000000000000000003300000000000d6352742a3badee0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e40010000000000000000000000000000000033000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000008001600810000004c0014"], 0x144}}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket(0x14, 0x2, 0x4) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x2010}) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x44, 0x0, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_BYTES={0xc}, @NFACCT_QUOTA={0xc}, @NFACCT_PKTS={0xc}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 2.783081052s ago: executing program 2 (id=3060): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, @remote, @empty, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) (async) write(r1, &(0x7f000018efdc)="240000005a001f0214f9f407000904fcffffff1010000300feffffff0800000000000000", 0x24) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x6c, r3, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "408922a0bd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_TYPE={0x8}]}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.782395813s ago: executing program 3 (id=3061): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8, 0x10}, @TCA_CT_LABELS={0x14, 0x7, "296524f13eb7394549979c0db12f7a74"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8, 0x10}, @TCA_CT_LABELS={0x14, 0x7, "296524f13eb7394549979c0db12f7a74"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) (async) 2.549872763s ago: executing program 2 (id=3062): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x26, 0x2, 0x20a) (async) r1 = socket(0x26, 0x2, 0x20a) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0x8) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="ad237f1863d2d2d1a397e2a489c4ee1564e9eefdb4b79061470cc823e53d854435579529b39d744f960b8ed0bba79f9df628ff262afb11e4c03b500df2985e8f7a86f3ab28aa6e65dc1668e18aa4168755523a88d020c8955b46806d3f69f8112e948be32c675bd54ac2a8fae35dd71d00f06ab2cea8236060d1dcf3d1edf529357f70b8e066aaf93e5b32683568c00392ab3f0f8b1ac8a2ec51caacb1cc69306d814957a18b04bec4fae32726ae9013fe17948367ec6494080c4859841ebdb4d9237640caef0b7010d479", 0xcb}, {&(0x7f0000000d80)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a823d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df895d9907e4afb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b907e0974f1073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf4dee8512f3bac440f5d5e4bed6b897608b01eae26a54433e5f5c74a2ee3c2fc50067be05a677ff52a7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fedb679328f114f7c8238ac955391b24614d91b1ae07c170a9c299fcf3d0ac4cea07e88", 0x386}], 0x2, 0x0, 0x0, 0x8004}, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) (async) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xc8}}, 0x404c011) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xc8}}, 0x404c011) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140)={r5, 0x5}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0x9, 0x0, 0x0, 0x8, r6}, &(0x7f0000000380)=0x10) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0x9, 0x0, 0x0, 0x8, r6}, &(0x7f0000000380)=0x10) 2.422491371s ago: executing program 3 (id=3063): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x13, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x52}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x24004800) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x12, "e490b4226fc69d5ffc197538c27838ca120a"}, &(0x7f0000000080)=0x1a) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000000c0)={r2, 0x6}, &(0x7f0000000100)=0x8) r3 = socket$inet(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee3, 0x9031, r4, 0x0) r5 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x61d9, &(0x7f0000000100)={'gre0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$l2tp6(0xa, 0x2, 0x73) r7 = socket$netlink(0x10, 0x3, 0x2) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000180)="6db3ee7579d92e02aa06db39") r8 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r8, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/48, 0x30}, 0x400000}], 0x1, 0x20010060, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)=@ethtool_gfeatures={0x3a, 0x3, [{}, {}, {}]}}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x3, {0x0, 0x0, 0x12, r6, {0xfff3}, {0xffff, 0xffe0}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 2.39720085s ago: executing program 1 (id=3064): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="0207ff050200000029bd7000fcdbdf3b67ed2f3c824afb3f00b0d98704d895bdb4af8311a7f9f87587f75a25e59843ed"], 0x10}}, 0x20008000) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f00000001c0), 0xa5) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000004f8ae0a24d4cd35f087ec4120000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021140000000c0a010000001000010000000000000000000084000a00"/164], 0x98}}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3, 0x0, 0xff, 0x0, 0xffc0, 0x3}, &(0x7f0000000180)=0x20) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c00"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x4}, {0xe40ca4f7c51e5624, 0xd}, {0xfff1, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xfa}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) r10 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000100)={r10}) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000000c0)) 1.327299054s ago: executing program 4 (id=3065): r0 = socket$inet6(0xa, 0x3, 0x100) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x1a, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @alu={0x7, 0x1, 0xc, 0x1, 0x0, 0x8, 0x1}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28}}], 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @remote}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@private=0xa010101, @in=@multicast1}, {@in=@multicast2, 0x4d6, 0x32}, @in=@dev, {0x0, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x2, 0x2}, [@algo_auth={0x48, 0x1, {{'sha384-avx\x00'}}}]}, 0x138}}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000010000000000000300000014000180060001"], 0x28}}, 0x0) 1.319937582s ago: executing program 1 (id=3066): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) close(r3) recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) shutdown(r1, 0x1) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="68020000210001000000000000000000ff0200000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000a001000060000000000000008000b00000000002c001300e0000001000000000000000000000000fc0000000000000000000000000000000000000000000000cc0111"], 0x268}}, 0x0) r8 = socket$rxrpc(0x21, 0x2, 0x2) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) getsockopt(r8, 0x110, 0x9, 0x0, &(0x7f0000000280)) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x4000000) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x2) 1.042930539s ago: executing program 2 (id=3067): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000180)="240000005800410f9c00f4f90085b3b45c91fddf08ca642e3996f7a224e151fd86da6ebd0001000501009f08000180010000006f701e011ba2b1100fb647ea1d7256b6b3a6916b0dc368df1f4f9851304f3bd1a4cd0816fbda043b779b", 0x5d) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) 939.488075ms ago: executing program 4 (id=3068): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000400)={0x0, 0x2, "64da36", 0xb, 0x8b}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) 873.383697ms ago: executing program 3 (id=3069): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x52895}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x4c}}, 0x4000040) 786.127669ms ago: executing program 1 (id=3070): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x0, 0x7ffe}, 0xffffffffffffff1f) (async) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x0, 0x7ffe}, 0xffffffffffffff1f) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x7c, "6cf49dc43bee69eecd991d10975cf5cde8a669aea8720d7f387287ef75fb82f82a0a7d14b09f045b41dc502376a21dfca6233e1f83355c257ff46c2d3bff66462bc16543d3c60d70b2360dcf11630959d70ed23a88379904b4151c8f01733ad31ca39b457ca877cbb2c049977b9b081cc937deceabb3f2cdadcdebaa"}, &(0x7f0000000240)=0xa0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x8, 0x12, r1, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/net\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) (async) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x63) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) (async) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r3, &(0x7f0000000680)=[{&(0x7f0000000080)='~', 0x1}], 0x1) (async) writev(r3, &(0x7f0000000680)=[{&(0x7f0000000080)='~', 0x1}], 0x1) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000000c0)=""/191, 0xbf, 0x20, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mreq(r4, 0x29, 0x8, 0x0, 0x0) (async) setsockopt$inet6_mreq(r4, 0x29, 0x8, 0x0, 0x0) recvmsg$qrtr(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x38, 0x40010001) 651.282015ms ago: executing program 2 (id=3071): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffb}, 0x48) sendmsg$sock(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="9de95c1d599f109b53d03c20bf04f15cc508dd49c2e3e81691a4d973d7fb1bc92c1fdcc3dcc79c0c7c70ae8c5dd76706594507fd0c4ae29239ded6bc94ef9ff0ec28b08395a073e5a3fb1ab8f6acdd7c394005ee3c3307708bd1307b53ac517ab6c45542ecb9420088c1d60206e8e9bf1efb081dad079a5879128f06e8cf0ed6e3e87503c7739af95917302b8799eefea6da1f55ae912bd16a844bdf09289964030b801df0d0d96dc6cb3b716351cf18f636c2addc3518791d63b3e7e6543cf7e777cee96f3853", 0xc7}, {&(0x7f0000000380)="594f1e90adb865bca101f0dcad1b725ce6a3685aeb2213b905e0a6e433a5d94c713876aac030a2c3defc59acd45e3673f2af8813620e286eaddba724c0ad20792a88aad74fe551191d5fdf63a0d0ceb37b147f8e263dcea40254915dcddc297c465444ab1d1cfb3cceec62c36284710e1e777c940789e68eadaa73816a4751e7b3330e8af16221e92518181f482f445e2c46b5096b006356effb9ff2ad313bc9f09ec75a579af247448b53a99942679a9c1df441190d72", 0xb7}, {&(0x7f0000000440)="229697b36854adb2761797ba713fc8971b1d360c1430dc482dd6a77b2a1500c01c92f091b5f28a2613554798ac045e84f39a562d1930932c1ddc3ecaaa4e15dfb895617c6fdc48a1f55f2ddb93038c589a591bb5366c03071f5d21e91614953eb43ff1cc0029e3f57c3a87c65bd3fa7a69cf4137906e84342fbe0246fb215cdef702520ea639bcd175f1aa5c8fec29e3a3371bb208abf870cd68c4f5e4b425943744ad", 0xa3}, {&(0x7f0000001ac0)="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", 0x1000}], 0x4, &(0x7f00000002c0)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x18}, 0x50) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffd14, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x5, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="e0fe8b6181000000000400100000000000000000", @ANYRES32, @ANYBLOB="0137f2367a0000001c0012000c"], 0x3c}}, 0x0) write(r2, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c040007031a000300", 0x33a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000000)="06ff03076844268cb89e14f0080040e0ffff00febabec41177fb86dd1402e000030c", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 624.400381ms ago: executing program 3 (id=3072): syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000150a0500000000000000000007000004302230132cab9f6bc84eb9580f468c6e208f7ee7a1436351f906b888b3202ef287e53c934a9d18ee95d71f59d33f6541722b1c1fa361f0cd16486596ced5e875750806bb8f36b567826ec7e640eba5f8f9452132c5535f243de3f6bcdbba3fd0330e8821c24dc37a215650b42bcdf645497a71efae9d9a012c94fc30ac2ee5afa514217c07710f9f2c66bbe88e6f965c5fb2dddbbdd68fe973bdcadb511daca1640495128d66de9c0278a4b0108360c67889c9d0b3dcaf5948dcd750ce616b70ff293f4ce191950bca60cb4c23de2c99278a1a37c57251eea3"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x3, 0x7f, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4004810) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000000)=0xb3fa, 0x4) 596.943166ms ago: executing program 1 (id=3073): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x1, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x1, @local}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) (async) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) (async) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) (async) 418.816803ms ago: executing program 2 (id=3074): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)={0x98, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0xffffffe3}, {0x8, 0x4, 0xfffffffa}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x800}, 0x8001) r4 = getpid() r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xf0, r2, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x810}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) sendmsg$nl_route(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv6_getrule={0x1c, 0x22, 0x4, 0x70bd27, 0x25dfdbfc, {0xa, 0x20, 0x80, 0x5, 0x40, 0x0, 0x0, 0x8, 0x9}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x4}]}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr, @func={0x4, 0x0, 0x0, 0xf, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x56}, 0x20) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 371.41371ms ago: executing program 2 (id=3075): socket$key(0xf, 0x3, 0x2) r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0x0, 0x0) r1 = socket(0x28, 0x5, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@gettaction={0x30, 0x32, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1b9}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x2}, 0x94) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r8, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r11, 0x0, 0xf3a, 0x0) splice(r7, 0x0, r11, 0x0, 0x80, 0x4) read(r7, &(0x7f0000000240)=""/233, 0xe9) write(r9, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r2, 0x0, 0x3}, 0x18) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r12, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2c000011) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r13 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r1, &(0x7f00000000c0)={0x20000000}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 256.306063ms ago: executing program 1 (id=3076): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "baa32ad2976d1307d6faf33ee3a49671"}}}]}, 0x48}}, 0x8804) 47.510556ms ago: executing program 3 (id=3077): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800, 0x10000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010825bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00040000ffc300000800280073f1000008001b0000000000"], 0x30}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x26}, 0x2f}) 28.762709ms ago: executing program 4 (id=3078): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="03009000"}) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @local}}, 0x24) (async) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x39}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x80}}, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000002c0)={@val={0x0, 0x88b5}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x2f, 0x0, @private=0x1fe1, @local}, {0xa000, 0x86dd, 0x8}}}}}}, 0x2e) (async) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xcd) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r6, &(0x7f00000000c0)=ANY=[@ANYRES64=r6], 0x6) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xffffffffffffff67) (async) ioctl$sock_netdev_private(r0, 0x8924, &(0x7f0000000000)) writev(r5, &(0x7f0000000540)=[{&(0x7f0000000200)="49b1920ec5272b9661cace873040fd2a93660efef8abaa14a7487336c7904da73473fbe02cb806fda1806c5ba21f3868de9af93494e4ac6a7eb9e5b5090931ae9e8160b7acea3799eadff018a963f5a8b14d25738391b75c340f24a48d92820e0d0fbdaabf8188224a6de9c0490a6fa8b22c99433006cb7c5654475641020bcc03728aeda12a05a07ceea404dc7eb55769f244f95d2c7d31b7ae9a34c5fd1a14ef65c0ef8d1ead2ce6a43339783a47c5c6ea0564be6579b8f7ecd6906d6d071ebb9f33f5fefe67511bc025ea675e1c", 0xcf}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000300)="63d0cf315e64412730479cfcfacea82405c3f9710c854d4142935566d56f5283ebcc4fb2c41e41c498a76b9865ac2ee5ea2dd00e1f5fbf73d20cc92df9a5d4c695166618d3a93dbb99a45eb2bb4833844d3bfa987b2c2c92bd7edd13e5ad948163cbd7f61dfb59c6bdc64698abb94c64a162162c5c84e7545dcd243410c65ee1052f326796c984165d1f4e886dfef8e8d0d7b26551074b1a757fec574f881527767666ada910307911f00ec27aa1f2c8fd1b615e669fd6fad41ed4958172d0c1f3f295b001b102c7f036f33c2a", 0xcd}, {&(0x7f0000000400)="b0ceb4112510b0b3ecd4994a58b5d419c1385e9f5656ee32fe62ec8272354ec87df79178e6d3fd82c91a6ffa3d3b5fc537898d7d7ca25489df6bb3306a98f8", 0x3f}, {&(0x7f0000000440)="7d2bfe69c50bb1bec39ab46f9d1f02e3ba2846f1bbe125d1a5e24f5c5ae97641b229b4060523753097b5ea62be228e5dfb99d77d1269a93a59e7ef00952e0cd7883781e0f7f81d235d4fc39fa7648ca3b7b31f3b39c1ec0285fe29d23c9d241f1670ac5750e0f2829114d6c0bafa49dc5a708e06399854fb626ecf33051c19a25e354bfaf523bade3657ca6c99efdc3ce8a1d975388cbd990eb7e1992d24abf4da505779df251b6bca9e1e9a", 0xac}, {&(0x7f0000000500)="4458aa5f4ee160085df5e075ada31b03f25802ec802ecc5ca88f9344f7abbc39d09853c51cacbf757570ebe7438008300d6c1731", 0x34}], 0x6) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000207000000000000001bbf92ed7f8e1ff6559a000000957fda84601cff6718f2be62de29d6cafb6ed4a3f7ee08592800c653f8e831862f889595d2b90c3fa51a77"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async, rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x54}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 1 (id=3079): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000003800010700000000000000000800000096b2ba891bd219155d6cc72f1e239ab1beede994748e84deee"], 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x4904, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0xffffff1f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40802, 0x35288}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x4}, @IFLA_GRE_FLOWINFO={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000080) kernel console output (not intermixed with test programs): envswitch: netlink: Missing key (keys=40, expected=10000000) [ 223.014997][T10201] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 223.389218][T10213] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1131'. [ 223.531428][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1130'. [ 223.541187][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1130'. [ 224.628983][T10221] gtp0: entered promiscuous mode [ 224.638540][T10221] gtp0: entered allmulticast mode [ 225.282487][T10258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1142'. [ 225.789146][T10286] openvswitch: netlink: IPv4 tun info is not correct [ 225.991843][T10288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1152'. [ 226.580991][T10311] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1155'. [ 226.736616][T10307] tipc: Enabled bearer , priority 0 [ 226.869218][T10307] syzkaller0: entered promiscuous mode [ 226.946965][T10307] syzkaller0: entered allmulticast mode [ 227.000645][T10308] tipc: Resetting bearer [ 227.236120][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032eaa800: rx timeout, send abort [ 227.246572][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888032eaa800: 0x2fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 227.407907][T10327] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1163'. [ 228.084625][T10343] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1168'. [ 228.118680][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a299400: rx timeout, send abort [ 228.127657][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a299400: 0x2fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 228.187261][T10306] tipc: Resetting bearer [ 228.263941][T10306] tipc: Disabling bearer [ 228.331327][T10348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1170'. [ 228.475268][T10355] block nbd2: server does not support multiple connections per device. [ 228.489531][T10355] block nbd2: shutting down sockets [ 228.711161][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a287800: rx timeout, send abort [ 228.719639][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a286000: rx timeout, send abort [ 228.728471][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a287800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 228.742900][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a286000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 228.880905][T10381] netlink: 'syz.1.1180': attribute type 11 has an invalid length. [ 228.892427][T10380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.994389][T10388] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 229.359957][T10400] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1188'. [ 229.372541][T10400] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.399555][T10400] rdma_op ffff888052ee11f0 conn xmit_rdma 0000000000000000 [ 229.614143][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1190'. [ 229.640966][T10411] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1190'. [ 229.726109][T10414] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1193'. [ 229.768664][T10414] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1193'. [ 229.861705][T10417] tunl0: left promiscuous mode [ 229.898934][T10425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1196'. [ 229.935882][T10425] netlink: 'syz.3.1196': attribute type 3 has an invalid length. [ 229.999325][T10417] bridge0: port 1(syz_tun) entered blocking state [ 230.005990][T10417] bridge0: port 1(syz_tun) entered forwarding state [ 230.017617][T10417] 8021q: adding VLAN 0 to HW filter on device ` [ 230.026666][T10417] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.036497][T10417] batman_adv: batadv0: Interface activated: team0 [ 230.051474][T10417] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.187848][T10439] sctp: [Deprecated]: syz.0.1200 (pid 10439) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.187848][T10439] Use struct sctp_sack_info instead [ 230.497765][T10447] netlink: 'syz.3.1201': attribute type 1 has an invalid length. [ 230.554621][T10452] netlink: 'syz.3.1201': attribute type 1 has an invalid length. [ 230.580468][T10457] openvswitch: netlink: Tunnel attr 47 out of range max 16 [ 230.582833][T10458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1203'. [ 230.594732][T10447] netlink: 'syz.3.1201': attribute type 2 has an invalid length. [ 230.630185][T10452] netlink: 'syz.3.1201': attribute type 2 has an invalid length. [ 231.224539][T10481] netlink: 'syz.1.1211': attribute type 4 has an invalid length. [ 231.238972][T10483] lo speed is unknown, defaulting to 1000 [ 232.099629][T10533] netlink: 'syz.0.1223': attribute type 12 has an invalid length. [ 232.164627][T10534] netlink: 'syz.0.1223': attribute type 12 has an invalid length. [ 232.234960][T10533] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 232.304990][T10534] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 232.457385][T10551] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 232.873908][T10563] __nla_validate_parse: 6 callbacks suppressed [ 232.873927][T10563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1232'. [ 233.298209][T10571] veth5: entered allmulticast mode [ 233.312496][T10580] netlink: 'syz.2.1238': attribute type 1 has an invalid length. [ 233.598763][T10584] bond4: (slave gretap0): making interface the new active one [ 233.624996][T10584] bond4: (slave gretap0): Enslaving as an active interface with an up link [ 233.663649][T10595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1241'. [ 233.679877][T10595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1241'. [ 233.701102][T10595] 8021q: VLANs not supported on wg1 [ 233.905860][T10610] validate_nla: 1 callbacks suppressed [ 233.905879][T10610] netlink: 'syz.0.1245': attribute type 29 has an invalid length. [ 233.950546][T10610] netlink: 'syz.0.1245': attribute type 29 has an invalid length. [ 233.983735][T10610] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1245'. [ 233.991619][T10612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1246'. [ 234.068533][T10612] macsec3: entered promiscuous mode [ 234.074055][T10612] team0: entered promiscuous mode [ 234.079381][T10612] macsec3: entered allmulticast mode [ 234.096615][T10612] team0: entered allmulticast mode [ 234.104060][T10612] team0: Device macsec3 is already an upper device of the team interface [ 234.148355][T10612] team0: left allmulticast mode [ 234.159996][T10612] team0: left promiscuous mode [ 234.231624][T10619] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1249'. [ 234.517346][T10629] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1251'. [ 234.638133][T10638] netlink: 'syz.0.1255': attribute type 21 has an invalid length. [ 234.663462][T10638] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1255'. [ 234.671607][T10640] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1256'. [ 234.683264][T10638] netlink: 'syz.0.1255': attribute type 5 has an invalid length. [ 234.694692][T10638] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1255'. [ 234.905809][T10651] netlink: 'syz.4.1258': attribute type 1 has an invalid length. [ 234.966793][T10651] vlan2: entered allmulticast mode [ 234.993419][T10651] veth1: entered allmulticast mode [ 235.005523][T10657] syz_tun: entered allmulticast mode [ 235.019628][T10657] syz_tun: left allmulticast mode [ 235.802200][T10688] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.035979][T10710] bridge_slave_0: invalid flags given to default FDB implementation [ 236.915787][T10744] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 236.926363][T10744] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 237.440506][T10764] netlink: 'syz.0.1290': attribute type 1 has an invalid length. [ 237.487205][T10764] 8021q: adding VLAN 0 to HW filter on device bond4 [ 237.588585][T10764] gretap1: entered promiscuous mode [ 237.863928][T10784] netlink: 'syz.1.1294': attribute type 25 has an invalid length. [ 238.101981][T10789] bridge0: port 4(batadv1) entered blocking state [ 238.163049][T10789] bridge0: port 4(batadv1) entered disabled state [ 238.188825][T10789] batadv1: entered allmulticast mode [ 238.211109][T10789] batadv1: entered promiscuous mode [ 238.253660][T10806] netlink: 'syz.4.1300': attribute type 6 has an invalid length. [ 238.555367][ T7556] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 238.565256][ T7556] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 238.603850][T10826] __nla_validate_parse: 5 callbacks suppressed [ 238.603869][T10826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1305'. [ 238.647367][T10826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1305'. [ 238.812243][T10853] netlink: 'syz.4.1306': attribute type 58 has an invalid length. [ 238.843701][T10853] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1306'. [ 239.245213][T10874] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 239.475367][T10887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1318'. [ 239.504319][T10887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1318'. [ 239.576022][T10887] netlink: 'syz.1.1318': attribute type 18 has an invalid length. [ 239.649070][T10887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1318'. [ 239.697149][T10887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1318'. [ 239.748406][T10887] netlink: 'syz.1.1318': attribute type 18 has an invalid length. [ 240.283942][T10916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1325'. [ 240.454272][T10920] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 240.481355][T10920] netlink: 'syz.3.1328': attribute type 21 has an invalid length. [ 240.493098][T10920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1328'. [ 240.633633][T10934] netlink: 'syz.0.1332': attribute type 24 has an invalid length. [ 240.851188][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1335'. [ 241.708364][T10846] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.732116][T10846] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.831369][T10846] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.053096][T10994] sctp: [Deprecated]: syz.0.1346 (pid 10994) Use of int in max_burst socket option. [ 242.053096][T10994] Use struct sctp_assoc_value instead [ 242.289030][T11009] netlink: 'syz.0.1349': attribute type 28 has an invalid length. [ 242.297578][T11009] netlink: 'syz.0.1349': attribute type 3 has an invalid length. [ 242.314440][T11011] Unsupported ieee802154 address type: 0 [ 242.855205][T11021] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.553239][T11020] lo speed is unknown, defaulting to 1000 [ 243.715532][T11028] netlink: 'syz.1.1354': attribute type 21 has an invalid length. [ 243.724997][T11026] __nla_validate_parse: 2 callbacks suppressed [ 243.725014][T11026] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1353'. [ 243.755477][T11028] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1354'. [ 243.807042][T11037] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1354'. [ 243.863953][T11028] netlink: 'syz.1.1354': attribute type 21 has an invalid length. [ 243.908808][T11028] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1354'. [ 243.908936][T11037] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1354'. [ 243.931779][T11040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1353'. [ 243.982454][T11043] netlink: 'syz.3.1357': attribute type 10 has an invalid length. [ 244.000356][T11043] netlink: 'syz.3.1357': attribute type 17 has an invalid length. [ 244.044133][T11043] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.179021][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1358'. [ 244.211800][T11049] syz_tun: entered allmulticast mode [ 244.263477][T11049] dvmrp1: entered allmulticast mode [ 244.293968][T11047] syz_tun: left allmulticast mode [ 244.619422][T11063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1365'. [ 244.914015][T11079] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1371'. [ 245.440497][T11097] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1377'. [ 245.452524][T11100] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20002 [ 245.480297][T11095] dvmrp0: entered allmulticast mode [ 246.336149][T11144] netlink: 'syz.3.1391': attribute type 11 has an invalid length. [ 246.597690][T11153] pim6reg1: entered promiscuous mode [ 246.639116][T11153] pim6reg1: entered allmulticast mode [ 246.790876][ T30] audit: type=1800 audit(1754961351.746:7): pid=11148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1391" name="memory.events" dev="tmpfs" ino=1350 res=0 errno=0 [ 247.286827][T11180] netlink: 'syz.4.1401': attribute type 4 has an invalid length. [ 248.063839][ C1] vcan0: j1939_tp_rxtimer: 0xffff888023a8e800: rx timeout, send abort [ 248.477066][T11238] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 248.572160][ C1] vcan0: j1939_tp_rxtimer: 0xffff888023a8e800: abort rx timeout. Force session deactivation [ 248.704122][T11241] ipvlan1: entered promiscuous mode [ 248.747991][T11241] bridge0: port 1(ipvlan1) entered blocking state [ 248.768770][T11241] bridge0: port 1(ipvlan1) entered disabled state [ 248.781795][T11241] ipvlan1: entered allmulticast mode [ 248.787632][T11241] bridge0: entered allmulticast mode [ 248.808800][T11241] ipvlan1: left allmulticast mode [ 248.821089][T11241] bridge0: left allmulticast mode [ 248.916472][T11247] bond0: (slave bond_slave_1): Releasing backup interface [ 248.939297][T11247] bond_slave_1: left promiscuous mode [ 248.950082][T11247] bond_slave_1: left allmulticast mode [ 249.180576][T11267] __nla_validate_parse: 11 callbacks suppressed [ 249.180597][T11267] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1423'. [ 249.199096][T11266] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1426'. [ 249.200342][T11265] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1427'. [ 249.314160][T11267] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 249.345127][T11267] pimreg: entered allmulticast mode [ 249.420299][T11275] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1429'. [ 250.008319][T11299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.026417][T11299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1436'. [ 250.100669][T11301] team0: Device wireguard0 is of different type [ 250.172798][T11302] team0: Device wireguard0 is of different type [ 250.201028][T11310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1439'. [ 250.377988][T11312] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1440'. [ 250.467255][T11317] batman_adv: batadv0: Adding interface: dummy0 [ 250.474278][T11317] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.500339][T11317] batman_adv: batadv0: Interface activated: dummy0 [ 250.513046][T11317] batadv0: mtu less than device minimum [ 250.520021][T11317] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 250.531810][T11317] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 250.543611][T11317] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 250.555061][T11317] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 250.567057][T11317] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 250.578981][T11317] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 250.590674][T11317] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 250.602233][T11317] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 250.867687][T11325] netlink: 'syz.2.1445': attribute type 21 has an invalid length. [ 250.871787][T11326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1444'. [ 250.875865][T11325] IPv6: NLM_F_CREATE should be specified when creating new route [ 250.875963][T11325] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 250.876022][T11325] IPv6: NLM_F_CREATE should be set when creating new route [ 250.876081][T11325] IPv6: NLM_F_CREATE should be set when creating new route [ 250.914507][T11325] IPv6: NLM_F_CREATE should be set when creating new route [ 250.931852][T11325] netlink: 'syz.2.1445': attribute type 1 has an invalid length. [ 250.939706][T11325] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1445'. [ 251.137732][T11334] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 251.550974][T11353] netlink: 'syz.2.1455': attribute type 9 has an invalid length. [ 251.590673][T11361] netlink: 'syz.2.1455': attribute type 9 has an invalid length. [ 251.884831][T11373] netlink: 'syz.2.1460': attribute type 1 has an invalid length. [ 251.894826][T11373] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1460'. [ 252.186410][T11389] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 252.194712][T11390] netlink: 'syz.1.1466': attribute type 10 has an invalid length. [ 252.215257][T11390] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 252.959044][T11427] tipc: Enabling of bearer rejected, failed to enable media [ 253.781872][T11441] tipc: Enabled bearer , priority 0 [ 254.117671][T11440] tipc: Disabling bearer [ 254.797124][T11499] bridge0: port 3(syz_tun) entered disabled state [ 254.804168][T11499] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.812914][T11499] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.973919][T11509] IPv6: NLM_F_CREATE should be specified when creating new route [ 255.972712][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.056797][T11541] tipc: Enabling of bearer rejected, failed to enable media [ 256.067235][T11542] tipc: Enabling of bearer rejected, failed to enable media [ 256.114943][T11541] unsupported nlmsg_type 40 [ 256.140723][T11541] __nla_validate_parse: 1 callbacks suppressed [ 256.140739][T11541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1504'. [ 256.235507][T11548] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.1506'. [ 256.468293][T11559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1510'. [ 256.517037][T11559] netlink: 'syz.3.1510': attribute type 2 has an invalid length. [ 256.534773][T11559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1510'. [ 256.696735][T11569] netlink: 'syz.2.1513': attribute type 4 has an invalid length. [ 256.708215][T11568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1512'. [ 256.723180][T11568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1512'. [ 256.848818][T11581] netlink: 4304 bytes leftover after parsing attributes in process `syz.2.1516'. [ 257.123647][T11580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1515'. [ 257.273882][T11605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1523'. [ 257.287647][T11605] nbd: nbd0 already in use [ 257.484513][T11616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1524'. [ 257.830106][T11632] tipc: Enabled bearer , priority 0 [ 257.862036][T11632] syzkaller0: entered promiscuous mode [ 257.868645][T11641] netlink: 'syz.0.1533': attribute type 1 has an invalid length. [ 257.900676][T11632] syzkaller0: entered allmulticast mode [ 257.910487][T11641] netlink: 'syz.0.1533': attribute type 4 has an invalid length. [ 257.936052][T11632] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 257.967998][T11632] tipc: Resetting bearer [ 258.020690][T11631] tipc: Resetting bearer [ 258.156962][T11631] tipc: Disabling bearer [ 258.734988][T11674] 8021q: adding VLAN 0 to HW filter on device bond2 [ 258.777266][T11674] team0: Failed to send port change of device bond2 via netlink (err -105) [ 258.788774][T11674] team0: Failed to send options change via netlink (err -105) [ 258.799485][T11674] team0: Port device bond2 added [ 258.840085][T10844] team0: Failed to send port change of device bond2 via netlink (err -105) [ 258.943644][T11695] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 259.128358][T11708] netlink: 'syz.3.1552': attribute type 1 has an invalid length. [ 259.170242][T11711] 0ªî{X¹¦: entered promiscuous mode [ 259.200177][T11711] 0ªî{X¹¦: left allmulticast mode [ 259.214876][ T5855] IPVS: starting estimator thread 0... [ 259.303236][T11716] IPVS: using max 27 ests per chain, 64800 per kthread [ 259.368981][T11717] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 259.377778][T11717] 1ªî{X¹¦: left promiscuous mode [ 259.386179][T11717] 1ªî{X¹¦: entered allmulticast mode [ 259.395046][T11717] net_ratelimit: 11 callbacks suppressed [ 259.395062][T11717] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 259.687719][T11743] netlink: 'syz.3.1562': attribute type 8 has an invalid length. [ 259.743230][T11747] block nbd0: NBD_DISCONNECT [ 259.751685][T11747] block nbd0: Send disconnect failed -32 [ 259.926558][T11751] syzkaller1: entered allmulticast mode [ 260.241307][T11767] netlink: 'syz.0.1568': attribute type 29 has an invalid length. [ 260.651225][T11785] openvswitch: netlink: IPv4 tun info is not correct [ 260.918941][T11794] lo speed is unknown, defaulting to 1000 [ 261.054043][T11807] netlink: 'syz.4.1583': attribute type 1 has an invalid length. [ 261.083134][T11808] : renamed from hsr0 (while UP) [ 261.157667][T11810] syzkaller1: entered promiscuous mode [ 261.163374][T11810] syzkaller1: entered allmulticast mode [ 261.483375][T11819] dvmrp0: left allmulticast mode [ 261.605403][T11830] __nla_validate_parse: 20 callbacks suppressed [ 261.605422][T11830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1587'. [ 262.020009][T11851] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1595'. [ 262.047442][T11855] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1595'. [ 262.064830][T11848] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 262.143196][T11861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1596'. [ 262.352150][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1598'. [ 262.576658][T11883] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1603'. [ 262.589256][T11883] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1603'. [ 262.679063][T11887] netlink: 'syz.4.1605': attribute type 1 has an invalid length. [ 262.976601][T11894] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 263.070208][T11894] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 263.221396][T11887] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1605'. [ 263.271749][T11921] netlink: 'syz.2.1610': attribute type 33 has an invalid length. [ 263.577666][T11939] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1618'. [ 263.587264][T11939] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1618'. [ 263.645551][T11946] netlink: 'syz.4.1620': attribute type 15 has an invalid length. [ 265.193299][T12013] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 265.278971][T12021] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.569805][T12036] netlink: 'syz.4.1642': attribute type 1 has an invalid length. [ 265.772530][T12036] 8021q: adding VLAN 0 to HW filter on device bond4 [ 265.830395][T12047] veth9: entered promiscuous mode [ 265.845454][T12047] bond4: (slave veth9): Enslaving as an active interface with a down link [ 265.866763][T12045] vlan3: entered allmulticast mode [ 265.871956][T12045] bond4: entered allmulticast mode [ 265.881356][T12045] bond4: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 265.917237][T12054] warn_alloc: 1 callbacks suppressed [ 265.917257][T12054] syz.2.1646: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 265.940256][T12054] CPU: 1 UID: 0 PID: 12054 Comm: syz.2.1646 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) [ 265.940298][T12054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 265.940330][T12054] Call Trace: [ 265.940338][T12054] [ 265.940347][T12054] dump_stack_lvl+0x189/0x250 [ 265.940380][T12054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.940405][T12054] ? __pfx__printk+0x10/0x10 [ 265.940434][T12054] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 265.940459][T12054] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 265.940485][T12054] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 265.940513][T12054] warn_alloc+0x214/0x310 [ 265.940545][T12054] ? stack_depot_save_flags+0x40/0x860 [ 265.940571][T12054] ? __pfx_warn_alloc+0x10/0x10 [ 265.940604][T12054] ? kasan_save_track+0x4f/0x80 [ 265.940630][T12054] ? xskq_create+0x56/0x170 [ 265.940652][T12054] ? xsk_init_queue+0xb0/0x110 [ 265.940672][T12054] ? xsk_setsockopt+0x4dc/0x8d0 [ 265.940691][T12054] ? do_sock_setsockopt+0x17c/0x1b0 [ 265.940724][T12054] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 265.940751][T12054] ? do_syscall_64+0xfa/0x3b0 [ 265.940775][T12054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.940804][T12054] __vmalloc_node_range_noprof+0x125/0x12f0 [ 265.940886][T12054] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 265.940926][T12054] ? __kasan_kmalloc+0x93/0xb0 [ 265.940970][T12054] vmalloc_user_noprof+0xad/0xf0 [ 265.941000][T12054] ? xskq_create+0xbf/0x170 [ 265.941024][T12054] xskq_create+0xbf/0x170 [ 265.941051][T12054] xsk_init_queue+0xb0/0x110 [ 265.941080][T12054] xsk_setsockopt+0x4dc/0x8d0 [ 265.941105][T12054] ? __pfx_xsk_setsockopt+0x10/0x10 [ 265.941128][T12054] ? __pfx_aa_sk_perm+0x10/0x10 [ 265.941158][T12054] ? aa_sock_opt_perm+0xff/0x1b0 [ 265.941191][T12054] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 265.941213][T12054] ? __pfx_xsk_setsockopt+0x10/0x10 [ 265.941237][T12054] do_sock_setsockopt+0x17c/0x1b0 [ 265.941270][T12054] __x64_sys_setsockopt+0x13f/0x1b0 [ 265.941305][T12054] do_syscall_64+0xfa/0x3b0 [ 265.941330][T12054] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.941354][T12054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.941374][T12054] ? clear_bhb_loop+0x60/0xb0 [ 265.941399][T12054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.941419][T12054] RIP: 0033:0x7f1d3f98ebe9 [ 265.941436][T12054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.941454][T12054] RSP: 002b:00007f1d40738038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 265.941475][T12054] RAX: ffffffffffffffda RBX: 00007f1d3fbb6180 RCX: 00007f1d3f98ebe9 [ 265.941489][T12054] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 265.941501][T12054] RBP: 00007f1d3fa11e19 R08: 0000000000000004 R09: 0000000000000000 [ 265.941512][T12054] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.941524][T12054] R13: 00007f1d3fbb6218 R14: 00007f1d3fbb6180 R15: 00007ffda10e8a88 [ 265.941556][T12054] [ 265.941621][T12054] Mem-Info: [ 266.250340][T12054] active_anon:4558 inactive_anon:0 isolated_anon:0 [ 266.250340][T12054] active_file:1095 inactive_file:39890 isolated_file:0 [ 266.250340][T12054] unevictable:768 dirty:43 writeback:0 [ 266.250340][T12054] slab_reclaimable:10980 slab_unreclaimable:104208 [ 266.250340][T12054] mapped:28887 shmem:1363 pagetables:1074 [ 266.250340][T12054] sec_pagetables:0 bounce:0 [ 266.250340][T12054] kernel_misc_reclaimable:0 [ 266.250340][T12054] free:1321651 free_pcp:18900 free_cma:0 [ 266.296918][T12054] Node 0 active_anon:18232kB inactive_anon:0kB active_file:4380kB inactive_file:159364kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115548kB dirty:172kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13844kB pagetables:4136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 266.329657][T12054] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 266.366905][T12054] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 266.396500][T12054] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 266.402423][T12054] Node 0 DMA32 free:1381932kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18288kB inactive_anon:0kB active_file:4380kB inactive_file:157784kB unevictable:1536kB writepending:172kB present:3129332kB managed:2557520kB mlocked:0kB bounce:0kB free_pcp:57564kB local_pcp:32600kB free_cma:0kB [ 266.437944][T12054] lowmem_reserve[]: 0 0 1 1 1 [ 266.443278][T12054] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 266.475021][T12036] veth0_virt_wifi: renamed from vlan0 (while UP) [ 266.486715][T12054] lowmem_reserve[]: 0 0 0 0 0 [ 266.525943][T12054] Node 1 Normal free:3889500kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17400kB local_pcp:8280kB free_cma:0kB [ 266.575538][T12054] lowmem_reserve[]: 0 0 0 0 0 [ 266.580474][T12054] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 266.632494][T12054] Node 0 DMA32: 125*4kB (UME) 562*8kB (UM) 518*16kB (UM) 144*32kB (UM) 550*64kB (UM) 160*128kB (UM) 53*256kB (UM) 37*512kB (UM) 13*1024kB (UME) 8*2048kB (UME) 304*4096kB (UM) = 1380964kB [ 266.656998][T12054] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 266.671700][T12054] Node 1 Normal: 199*4kB (UME) 34*8kB (UME) 39*16kB (UME) 122*32kB (UME) 38*64kB (UME) 8*128kB (UME) 4*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3889500kB [ 266.730990][T12054] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 266.748727][T12054] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 266.766161][T12054] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 266.775595][T12068] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.777250][T12054] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 266.807676][T12070] __nla_validate_parse: 65 callbacks suppressed [ 266.807703][T12070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1652'. [ 266.831669][T12054] 42344 total pagecache pages [ 266.837331][T12054] 0 pages in swap cache [ 266.841521][T12054] Free swap = 124996kB [ 266.847891][T12054] Total swap = 124996kB [ 266.852946][T12054] 2097051 pages RAM [ 266.856787][T12054] 0 pages HighMem/MovableOnly [ 266.889787][T12072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1653'. [ 266.908932][T12054] 425645 pages reserved [ 266.948936][T12054] 0 pages cma reserved [ 267.067101][T12084] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.1657'. [ 267.085636][T12084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1657'. [ 267.129091][T12080] can: request_module (can-proto-0) failed. [ 267.240405][T12096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1659'. [ 267.323293][T12099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1661'. [ 267.447349][T12111] netlink: 'syz.0.1664': attribute type 1 has an invalid length. [ 267.469138][T12110] netlink: 'syz.0.1664': attribute type 1 has an invalid length. [ 267.811830][T12130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1670'. [ 267.948786][T12138] lo speed is unknown, defaulting to 1000 [ 268.132236][T12143] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1673'. [ 268.205023][T12146] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1674'. [ 268.225873][T12144] pim6reg1: entered promiscuous mode [ 268.231324][T12144] pim6reg1: entered allmulticast mode [ 268.506176][T12158] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1677'. [ 269.175316][T12192] IPv4: Oversized IP packet from 172.20.20.11 [ 269.657213][T12223] team0: Device vti0 is of different type [ 269.782280][T12237] netlink: 'syz.1.1704': attribute type 1 has an invalid length. [ 269.811714][T12237] netlink: 'syz.1.1704': attribute type 1 has an invalid length. [ 270.018041][T12248] lo speed is unknown, defaulting to 1000 [ 270.143325][T12264] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 270.659431][T12285] IPVS: length: 3119 != 24 [ 270.843363][T12282] veth1_vlan (unregistering): left allmulticast mode [ 270.974673][T12282] bond0: (slave macvlan2): Releasing backup interface [ 271.296475][T12298] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 271.308016][T12306] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 271.337582][T12306] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 271.558830][T12313] 8021q: adding VLAN 0 to HW filter on device bond4 [ 271.981826][T12338] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 272.162043][T12341] __nla_validate_parse: 9 callbacks suppressed [ 272.162063][T12341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1732'. [ 272.402059][T12356] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1735'. [ 272.424365][T12356] netlink: 'syz.4.1735': attribute type 7 has an invalid length. [ 272.446631][T12356] netlink: 'syz.4.1735': attribute type 8 has an invalid length. [ 272.462909][T12356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1735'. [ 272.796626][T12377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1741'. [ 272.846416][T12377] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 273.042490][T12390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1746'. [ 273.136683][T12400] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1747'. [ 274.116627][T12461] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 274.126740][T12453] 8021q: adding VLAN 0 to HW filter on device bond6 [ 274.145863][T12453] bond0: (slave bond6): Enslaving as an active interface with an up link [ 274.155499][T12463] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1764'. [ 274.360705][T12475] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1767'. [ 274.379583][T12480] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1768'. [ 274.545259][T12489] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1773'. [ 275.627016][T12558] bridge0: port 1(syz_tun) entered disabled state [ 275.690675][T12558] syz_tun (unregistering): left allmulticast mode [ 275.698231][T12558] syz_tun (unregistering): left promiscuous mode [ 275.705896][T12558] bridge0: port 1(syz_tun) entered disabled state [ 275.899732][T12562] can: request_module (can-proto-0) failed. [ 275.908386][T12568] tap0: tun_chr_ioctl cmd 1074025678 [ 275.919007][T12568] tap0: group set to 0 [ 276.122462][T12583] tipc: Enabling of bearer rejected, failed to enable media [ 276.136397][T12585] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 276.241284][T12590] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 276.258140][T12591] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 276.300116][T12583] veth7: entered allmulticast mode [ 276.330628][T12590] dummy0: entered promiscuous mode [ 276.381055][T12590] batadv_slave_1: entered promiscuous mode [ 276.426472][T12590] batadv_slave_1: left promiscuous mode [ 276.448932][T12590] dummy0: left promiscuous mode [ 276.496237][T12599] dummy0: entered promiscuous mode [ 276.509260][T12599] batadv_slave_1: entered promiscuous mode [ 276.520536][T12599] batadv_slave_1: left promiscuous mode [ 276.541266][T12599] dummy0: left promiscuous mode [ 277.197344][T12653] __nla_validate_parse: 15 callbacks suppressed [ 277.197372][T12653] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1816'. [ 277.293758][T12662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1819'. [ 277.305343][T12662] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1819'. [ 277.408493][T12667] netlink: 'syz.0.1820': attribute type 1 has an invalid length. [ 277.452280][T12676] netlink: 'syz.3.1821': attribute type 1 has an invalid length. [ 277.460279][T12667] 8021q: adding VLAN 0 to HW filter on device bond5 [ 277.478820][T12676] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1821'. [ 277.489214][T12676] netlink: 'syz.3.1821': attribute type 1 has an invalid length. [ 277.499454][T12676] netlink: 'syz.3.1821': attribute type 2 has an invalid length. [ 277.509143][T12667] bond5: (slave veth9): Enslaving as an active interface with a down link [ 277.509555][T12676] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1821'. [ 277.538952][T12671] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 277.742773][T12697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1826'. [ 277.754803][T12696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1826'. [ 278.174124][T12717] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 278.331637][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1837'. [ 278.346682][T12733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1837'. [ 278.370411][T12733] netlink: 'syz.2.1837': attribute type 7 has an invalid length. [ 278.414476][T12740] netlink: 'syz.4.1838': attribute type 1 has an invalid length. [ 278.440696][T12742] tipc: Enabled bearer , priority 0 [ 278.463930][T12742] syzkaller0: entered promiscuous mode [ 278.480123][T12742] syzkaller0: entered allmulticast mode [ 278.530968][T12742] tipc: Resetting bearer [ 278.553500][T12739] tipc: Resetting bearer [ 278.599556][T12739] tipc: Disabling bearer [ 278.711461][T12756] netlink: 'syz.1.1843': attribute type 3 has an invalid length. [ 278.728921][T12756] netlink: 'syz.1.1843': attribute type 13 has an invalid length. [ 278.747358][T12755] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1842'. [ 278.771905][T12756] digital: digital_start_poll: Unknown protocol [ 279.056326][ T30] audit: type=1107 audit(1754961384.016:8): pid=12768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 279.822371][T12836] netlink: 'syz.4.1864': attribute type 32 has an invalid length. [ 280.192856][ T5875] Bluetooth: hci1: command 0x0406 tx timeout [ 280.289801][T12869] netlink: 'syz.1.1874': attribute type 1 has an invalid length. [ 280.354201][T12869] 8021q: adding VLAN 0 to HW filter on device bond4 [ 280.477395][T12881] tipc: Enabling of bearer rejected, failed to enable media [ 280.566371][T12885] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 281.111780][T12917] openvswitch: netlink: Message has 5 unknown bytes. [ 282.486054][T12955] sctp: [Deprecated]: syz.4.1900 (pid 12955) Use of int in maxseg socket option. [ 282.486054][T12955] Use struct sctp_assoc_value instead [ 282.487586][T12958] bond0: entered promiscuous mode [ 282.527890][T12958] batadv0: entered promiscuous mode [ 282.551774][T12958] debugfs: 'hsr1' already exists in 'hsr' [ 282.553015][T12959] sctp: [Deprecated]: syz.4.1900 (pid 12959) Use of int in maxseg socket option. [ 282.553015][T12959] Use struct sctp_assoc_value instead [ 282.572478][T12958] Cannot create hsr debugfs directory [ 282.585995][T12958] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 282.602344][T12962] netlink: 'syz.1.1902': attribute type 8 has an invalid length. [ 282.611812][T12958] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 282.615904][T12963] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 282.623107][T12958] hsr1: entered allmulticast mode [ 282.644762][T12958] bond0: entered allmulticast mode [ 282.652960][T12958] batadv0: entered allmulticast mode [ 282.669207][T12958] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 282.913894][T12957] team0 (unregistering): Port device team_slave_0 removed [ 282.954988][T12957] team0 (unregistering): Port device team_slave_1 removed [ 283.017255][T12984] __nla_validate_parse: 17 callbacks suppressed [ 283.017270][T12984] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1909'. [ 283.205978][T12986] IPVS: set_ctl: invalid protocol: 137 100.1.1.1:20000 [ 283.220773][T12992] tap0: tun_chr_ioctl cmd 2148553947 [ 283.242271][T12992] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1913'. [ 283.263513][T12993] bridge0: port 1(syz_tun) entered blocking state [ 283.283414][T12993] bridge0: port 1(syz_tun) entered disabled state [ 283.291546][T12993] syz_tun: entered allmulticast mode [ 283.308651][T12993] syz_tun: entered promiscuous mode [ 283.350642][T12997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1915'. [ 283.371701][T12997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1915'. [ 283.568129][T13013] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1918'. [ 283.701492][T13019] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1920'. [ 284.145432][T13050] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1931'. [ 284.271026][T13059] delete_channel: no stack [ 284.392119][T13053] delete_channel: no stack [ 284.990949][T13098] pim6reg: entered allmulticast mode [ 285.027052][T13098] pim6reg: left allmulticast mode [ 285.038799][T13103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1949'. [ 285.180673][T13109] openvswitch: netlink: IPv4 tun info is not correct [ 285.298806][T13115] netlink: 'syz.0.1953': attribute type 13 has an invalid length. [ 285.323874][T13115] netlink: 'syz.0.1953': attribute type 17 has an invalid length. [ 285.482157][T13115] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 285.499562][T13138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1959'. [ 286.798387][T13115] macvtap5: left promiscuous mode [ 286.803762][T13115] macvtap5: left allmulticast mode [ 287.068329][T13115] macvtap6: left promiscuous mode [ 287.073832][T13115] vlan0: left promiscuous mode [ 287.079321][T13115] macvtap6: left allmulticast mode [ 287.085118][T13115] vlan0: left allmulticast mode [ 287.353369][T13115] ip6gre1: left allmulticast mode [ 287.359692][T13115] bond1: left allmulticast mode [ 287.370155][T13115] bond3: left promiscuous mode [ 287.375015][T13115] bond3: left allmulticast mode [ 287.382440][T13115] gretap1: left promiscuous mode [ 287.390997][T13115] veth7: left allmulticast mode [ 287.400355][T13115] hsr1: left allmulticast mode [ 287.405356][T13115] bond0: left allmulticast mode [ 287.410241][T13115] batadv0: left allmulticast mode [ 287.458517][T13144] !€ÿ: renamed from bond_slave_0 (while UP) [ 287.654208][T13151] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1963'. [ 287.720444][T13163] sctp: [Deprecated]: syz.4.1965 (pid 13163) Use of struct sctp_assoc_value in delayed_ack socket option. [ 287.720444][T13163] Use struct sctp_sack_info instead [ 288.021699][T13176] syzkaller1: entered promiscuous mode [ 288.042385][T13176] syzkaller1: entered allmulticast mode [ 288.060640][T13178] netlink: 'syz.3.1972': attribute type 6 has an invalid length. [ 288.082312][T13180] syzkaller1: entered promiscuous mode [ 288.098639][T13180] syzkaller1: entered allmulticast mode [ 288.149087][T13180] __nla_validate_parse: 1 callbacks suppressed [ 288.149106][T13180] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1973'. [ 288.257550][T13193] tipc: MTU too low for tipc bearer [ 288.282883][T13195] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1976'. [ 288.296510][T13197] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1976'. [ 288.498232][T13207] netlink: 'syz.1.1980': attribute type 10 has an invalid length. [ 288.524965][T13207] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1980'. [ 288.551940][T13207] batadv0: entered promiscuous mode [ 288.563854][T13207] batadv0: entered allmulticast mode [ 288.570391][T13207] bridge0: port 3(batadv0) entered blocking state [ 288.584788][T13207] bridge0: port 3(batadv0) entered disabled state [ 288.601888][T13207] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 288.622753][T13207] bridge0: port 3(batadv0) entered blocking state [ 288.629363][T13207] bridge0: port 3(batadv0) entered forwarding state [ 288.665319][T13222] netlink: 'syz.2.1984': attribute type 29 has an invalid length. [ 288.685843][T13222] netlink: 'syz.2.1984': attribute type 29 has an invalid length. [ 288.705964][T13222] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1984'. [ 288.778594][T13226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1986'. [ 288.811052][T13227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1986'. [ 288.819372][T13229] lo: left promiscuous mode [ 288.837335][T13229] 1ªî{X¹¦: left allmulticast mode [ 288.943910][T10844] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 288.953320][T10844] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 288.987847][T13229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.006184][T13229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.182581][ T7556] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.235569][ T7556] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.289269][ T7556] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.310621][ T7556] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.360433][ T7556] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.372010][ T7556] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.389904][T13249] ipvlan1: entered promiscuous mode [ 289.401503][T13249] bridge0: port 4(ipvlan1) entered blocking state [ 289.408580][T13249] bridge0: port 4(ipvlan1) entered disabled state [ 289.417338][T13249] ipvlan1: entered allmulticast mode [ 289.430247][T13249] bridge0: entered allmulticast mode [ 289.447359][T13249] ipvlan1: left allmulticast mode [ 289.466892][T13249] bridge0: left allmulticast mode [ 290.188116][ T4786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.222408][ T4786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.437459][T13305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2005'. [ 290.554623][T13312] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2007'. [ 291.802042][T13380] pim6reg527: entered allmulticast mode [ 291.814947][T13384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2026'. [ 292.002749][T13392] netlink: 'syz.3.2028': attribute type 32 has an invalid length. [ 292.013286][T13392] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 292.108989][T13395] bridge0: port 1(syz_tun) entered blocking state [ 292.133592][T13395] bridge0: port 1(syz_tun) entered disabled state [ 292.140702][T13395] syz_tun: entered allmulticast mode [ 292.151594][T13395] syz_tun: entered promiscuous mode [ 292.161546][T13400] netlink: 'syz.0.2029': attribute type 11 has an invalid length. [ 292.169946][T13400] netlink: 'syz.0.2029': attribute type 11 has an invalid length. [ 292.213831][T13404] netlink: 'syz.1.2030': attribute type 11 has an invalid length. [ 293.677977][T13446] __nla_validate_parse: 5 callbacks suppressed [ 293.677997][T13446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2042'. [ 293.991662][T13474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2050'. [ 294.002142][T13475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2050'. [ 294.247626][T13456] openvswitch: netlink: Message has 8 unknown bytes. [ 295.040082][T13515] pim6reg: entered allmulticast mode [ 295.165784][T13520] veth0_to_team: entered promiscuous mode [ 295.192497][T13520] veth0_to_team: entered allmulticast mode [ 295.630880][ T5875] Bluetooth: hci4: link tx timeout [ 295.638313][ T5875] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 295.648322][ T5865] Bluetooth: hci4: link tx timeout [ 295.662592][ T5865] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 295.689637][T13553] syzkaller1: entered promiscuous mode [ 295.695488][T13553] syzkaller1: entered allmulticast mode [ 295.773618][T13558] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2073'. [ 295.859851][T13560] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2074'. [ 296.006794][T13568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2077'. [ 296.153613][T13575] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 296.206400][ T30] audit: type=1800 audit(1754961401.156:9): pid=13579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2081" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2122 res=0 errno=0 [ 296.251968][T13582] tc_dump_action: action bad kind [ 296.270202][T13583] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.2084'. [ 296.293209][T13583] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 296.309538][T13583] openvswitch: netlink: Duplicate key (type 0). [ 296.436236][T13592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.639622][T13604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2088'. [ 296.746899][T13604] hsr_slave_1 (unregistering): left promiscuous mode [ 296.947660][T13620] netlink: 'syz.0.2091': attribute type 2 has an invalid length. [ 296.988170][T13620] netlink: 'syz.0.2091': attribute type 2 has an invalid length. [ 297.329326][T13647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2098'. [ 297.362410][T13644] syzkaller1: entered promiscuous mode [ 297.373320][T13644] syzkaller1: entered allmulticast mode [ 297.402094][T13649] gtp1: entered promiscuous mode [ 297.419131][T13649] gtp1: entered allmulticast mode [ 297.439672][T13652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2101'. [ 297.712954][ T5865] Bluetooth: hci4: command 0x0405 tx timeout [ 297.775268][T13669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.323273][T13699] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 298.424023][T13699] IPVS: set_ctl: invalid protocol: 135 100.1.1.1:20002 [ 298.494503][T13709] vlan0: entered promiscuous mode [ 298.499759][T13709] gretap0: entered promiscuous mode [ 298.755740][T13723] IPVS: set_ctl: invalid protocol: 43 172.30.0.1:20000 [ 298.963667][T13719] lo speed is unknown, defaulting to 1000 [ 299.015410][T13729] __nla_validate_parse: 71 callbacks suppressed [ 299.015430][T13729] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2122'. [ 299.145021][T13736] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2125'. [ 299.482999][T13743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2127'. [ 299.592484][T13756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2130'. [ 299.642384][T13760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2131'. [ 299.766938][T13765] sctp: [Deprecated]: syz.1.2134 (pid 13765) Use of struct sctp_assoc_value in delayed_ack socket option. [ 299.766938][T13765] Use struct sctp_sack_info instead [ 299.827020][T13753] lo speed is unknown, defaulting to 1000 [ 300.068549][T13778] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2135'. [ 300.182141][T13783] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2138'. [ 300.191441][T13780] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2135'. [ 300.649129][T13754] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2129'. [ 300.839223][T13818] sctp: [Deprecated]: syz.0.2147 (pid 13818) Use of int in max_burst socket option deprecated. [ 300.839223][T13818] Use struct sctp_assoc_value instead [ 301.181786][T13833] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2151'. [ 301.824690][T13859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.832227][T13859] batadv0: mtu less than device minimum [ 301.841350][T13859] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 301.853581][T13859] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 301.865476][T13859] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 301.877390][T13859] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 301.889285][T13859] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 301.901193][T13859] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 301.913186][T13859] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 301.925087][T13859] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 301.937012][T13859] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 302.369358][T13859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.012749][T13899] netlink: 'syz.1.2166': attribute type 7 has an invalid length. [ 303.394593][T13922] netlink: 'syz.1.2174': attribute type 5 has an invalid length. [ 303.500160][T13927] netlink: 'syz.4.2176': attribute type 10 has an invalid length. [ 303.521538][T13927] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 303.761435][T13944] netlink: 'syz.2.2178': attribute type 10 has an invalid length. [ 303.908700][T13954] netlink: 'syz.0.2185': attribute type 4 has an invalid length. [ 304.167106][T13968] __nla_validate_parse: 9 callbacks suppressed [ 304.167125][T13968] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2192'. [ 304.212727][T13975] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2193'. [ 304.367034][T13985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2193'. [ 304.375566][T13984] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2194'. [ 304.407304][T13985] batman_adv: batadv0: Interface deactivated: dummy0 [ 304.468543][T13990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2194'. [ 304.519673][T13985] batman_adv: batadv0: Removing interface: dummy0 [ 304.542447][T13995] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2197'. [ 304.560499][T13995] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2197'. [ 304.604294][T13995] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2197'. [ 304.625718][T13993] tipc: Enabled bearer , priority 0 [ 304.638444][T13995] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2197'. [ 304.638873][T13993] syzkaller0: entered promiscuous mode [ 304.651310][T13995] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2197'. [ 304.674648][T13993] syzkaller0: entered allmulticast mode [ 304.732187][T13991] tipc: Resetting bearer [ 304.802401][T13991] tipc: Disabling bearer [ 304.848116][T14003] vlan5: entered promiscuous mode [ 304.888025][T14010] : renamed from hsr0 (while UP) [ 305.033117][T14022] netlink: 'syz.2.2203': attribute type 5 has an invalid length. [ 305.157192][T14027] netlink: 'syz.4.2206': attribute type 6 has an invalid length. [ 305.161364][T14024] netlink: 'syz.0.2204': attribute type 4 has an invalid length. [ 305.396414][T14041] netlink: 'syz.4.2211': attribute type 1 has an invalid length. [ 305.522045][T14041] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 305.737117][T14059] pim6reg: entered allmulticast mode [ 305.824708][T14062] pim6reg: left allmulticast mode [ 306.287353][T14084] netlink: 'syz.0.2220': attribute type 4 has an invalid length. [ 306.537323][T14097] workqueue: Failed to create a rescuer kthread for wq "nfc8_nci_rx_wq": -EINTR [ 308.099503][T14173] syzkaller0: entered promiscuous mode [ 308.121111][T14173] syzkaller0: entered allmulticast mode [ 308.132172][T14173] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 308.655472][T14207] net_ratelimit: 12 callbacks suppressed [ 308.655494][T14207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.225785][T14234] __nla_validate_parse: 74 callbacks suppressed [ 309.225809][T14234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2259'. [ 309.618724][T14252] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 309.777555][T14256] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2267'. [ 309.809415][T14256] netlink: 'syz.3.2267': attribute type 1 has an invalid length. [ 309.941788][T14259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2269'. [ 309.971739][T14256] 8021q: adding VLAN 0 to HW filter on device bond6 [ 310.020935][T14270] bond6: (slave gretap1): making interface the new active one [ 310.031654][T14270] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 310.205710][T14282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2274'. [ 310.235161][T14282] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2274'. [ 310.263401][T14282] netlink: 'syz.0.2274': attribute type 1 has an invalid length. [ 310.310742][T14283] syzkaller1: entered promiscuous mode [ 310.356468][T14283] syzkaller1: entered allmulticast mode [ 310.387559][T14292] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 310.408718][T14293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2276'. [ 310.443204][T14293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2276'. [ 310.472240][T14296] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2276'. [ 310.509436][T14299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.710872][T14306] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 310.799728][T14313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2282'. [ 310.954374][T14324] sctp: [Deprecated]: syz.3.2286 (pid 14324) Use of int in max_burst socket option. [ 310.954374][T14324] Use struct sctp_assoc_value instead [ 311.204669][T14334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2290'. [ 311.541790][T14344] syz.0.2292: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 311.593879][T14344] CPU: 1 UID: 0 PID: 14344 Comm: syz.0.2292 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) [ 311.593909][T14344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 311.593922][T14344] Call Trace: [ 311.593930][T14344] [ 311.593940][T14344] dump_stack_lvl+0x189/0x250 [ 311.593975][T14344] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.594000][T14344] ? __pfx__printk+0x10/0x10 [ 311.594030][T14344] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 311.594064][T14344] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 311.594095][T14344] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 311.594124][T14344] warn_alloc+0x214/0x310 [ 311.594162][T14344] ? __pfx_warn_alloc+0x10/0x10 [ 311.594220][T14344] ? __get_vm_area_node+0x28f/0x300 [ 311.594250][T14344] ? nf_tables_newset+0x132b/0x2530 [ 311.594288][T14344] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 311.594349][T14344] ? alloc_pages_mpol+0x3cd/0x4a0 [ 311.594382][T14344] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 311.594419][T14344] ? rcu_is_watching+0x15/0xb0 [ 311.594443][T14344] ? nf_tables_newset+0x132b/0x2530 [ 311.594474][T14344] ? nf_tables_newset+0x132b/0x2530 [ 311.594536][T14344] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 311.594568][T14344] ? nf_tables_newset+0x132b/0x2530 [ 311.594603][T14344] ? nft_set_lookup+0x121/0x150 [ 311.594624][T14344] ? nft_hash_privsize+0x6f/0xf0 [ 311.594655][T14344] nf_tables_newset+0x132b/0x2530 [ 311.594704][T14344] ? __pfx_nf_tables_newset+0x10/0x10 [ 311.594763][T14344] ? __nla_parse+0x40/0x60 [ 311.594797][T14344] nfnetlink_rcv+0x1132/0x2520 [ 311.594868][T14344] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 311.594927][T14344] ? ref_tracker_free+0x63a/0x7d0 [ 311.595017][T14344] ? __netlink_deliver_tap+0x807/0x850 [ 311.595045][T14344] ? netlink_deliver_tap+0x2e/0x1b0 [ 311.595097][T14344] netlink_unicast+0x82c/0x9e0 [ 311.595131][T14344] ? __pfx_netlink_unicast+0x10/0x10 [ 311.595158][T14344] ? netlink_sendmsg+0x642/0xb30 [ 311.595183][T14344] ? skb_put+0x11b/0x210 [ 311.595215][T14344] netlink_sendmsg+0x805/0xb30 [ 311.595253][T14344] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.595285][T14344] ? aa_sock_msg_perm+0xf1/0x1d0 [ 311.595316][T14344] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 311.595339][T14344] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.595370][T14344] __sock_sendmsg+0x219/0x270 [ 311.595398][T14344] ____sys_sendmsg+0x505/0x830 [ 311.595437][T14344] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.595480][T14344] ? import_iovec+0x74/0xa0 [ 311.595505][T14344] ___sys_sendmsg+0x21f/0x2a0 [ 311.595540][T14344] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.595615][T14344] ? __fget_files+0x2a/0x420 [ 311.595652][T14344] ? __fget_files+0x3a0/0x420 [ 311.595717][T14344] __x64_sys_sendmsg+0x19b/0x260 [ 311.595753][T14344] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 311.595799][T14344] ? rcu_is_watching+0x15/0xb0 [ 311.595828][T14344] ? do_syscall_64+0xbe/0x3b0 [ 311.595863][T14344] do_syscall_64+0xfa/0x3b0 [ 311.595893][T14344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.595915][T14344] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 311.595937][T14344] ? clear_bhb_loop+0x60/0xb0 [ 311.595964][T14344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.595987][T14344] RIP: 0033:0x7fb48218ebe9 [ 311.596007][T14344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.596027][T14344] RSP: 002b:00007fb4830d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.596049][T14344] RAX: ffffffffffffffda RBX: 00007fb4823b5fa0 RCX: 00007fb48218ebe9 [ 311.596071][T14344] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000e [ 311.596085][T14344] RBP: 00007fb482211e19 R08: 0000000000000000 R09: 0000000000000000 [ 311.596097][T14344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.596109][T14344] R13: 00007fb4823b6038 R14: 00007fb4823b5fa0 R15: 00007fffb2893158 [ 311.596145][T14344] [ 311.596229][T14344] Mem-Info: [ 312.002193][T14344] active_anon:8672 inactive_anon:0 isolated_anon:0 [ 312.002193][T14344] active_file:1191 inactive_file:39908 isolated_file:0 [ 312.002193][T14344] unevictable:2561 dirty:69 writeback:0 [ 312.002193][T14344] slab_reclaimable:11710 slab_unreclaimable:1141549 [ 312.002193][T14344] mapped:33509 shmem:7267 pagetables:1072 [ 312.002193][T14344] sec_pagetables:0 bounce:0 [ 312.002193][T14344] kernel_misc_reclaimable:0 [ 312.002193][T14344] free:279090 free_pcp:12729 free_cma:0 [ 312.060917][T14344] Node 0 active_anon:35988kB inactive_anon:0kB active_file:4764kB inactive_file:159436kB unevictable:7408kB isolated(anon):0kB isolated(file):0kB mapped:132836kB dirty:276kB writeback:0kB shmem:27532kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14040kB pagetables:4228kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 312.100352][T14344] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 312.142121][T14357] gre2: entered promiscuous mode [ 312.153301][T14344] Node 0 DMA free:11264kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 312.163229][T14357] gre2: entered allmulticast mode [ 312.206690][T14344] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 312.222782][T14344] Node 0 DMA32 free:110572kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40620kB inactive_anon:0kB active_file:4764kB inactive_file:157856kB unevictable:1592kB writepending:276kB present:3129332kB managed:2557520kB mlocked:56kB bounce:0kB free_pcp:36104kB local_pcp:16960kB free_cma:0kB [ 312.302625][T14344] lowmem_reserve[]: 0 0 1 1 1 [ 312.307560][T14344] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 312.384887][T14344] lowmem_reserve[]: 0 0 0 0 0 [ 312.389689][T14344] Node 1 Normal free:994140kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16888kB local_pcp:8608kB free_cma:0kB [ 312.426414][T14344] lowmem_reserve[]: 0 0 0 0 0 [ 312.431216][T14344] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11264kB [ 312.459502][T14344] Node 0 DMA32: 209*4kB (ME) 72*8kB (UME) 35*16kB (UM) 580*32kB (UM) 582*64kB (UME) 132*128kB (UME) 55*256kB (UME) 29*512kB (UE) 14*1024kB (UM) 0*2048kB 0*4096kB = 117940kB [ 312.484614][T14344] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 312.501537][T14344] Node 1 Normal: 199*4kB (UME) 34*8kB (UME) 39*16kB (UME) 130*32kB (UME) 42*64kB (UME) 8*128kB (UME) 4*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 238*4096kB (UM) = 994140kB [ 312.548666][T14344] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 312.562677][T14344] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 312.572226][T14344] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 312.582500][T14344] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 312.592300][T14344] 42500 total pagecache pages [ 312.623415][T14344] 0 pages in swap cache [ 312.627747][T14344] Free swap = 124996kB [ 312.632278][T14344] Total swap = 124996kB [ 312.637467][T14344] 2097051 pages RAM [ 312.641492][T14344] 0 pages HighMem/MovableOnly [ 312.646729][T14344] 425645 pages reserved [ 312.651125][T14344] 0 pages cma reserved [ 313.098512][T14386] bond6: entered promiscuous mode [ 313.107281][T14386] bond6: entered allmulticast mode [ 313.113189][T14386] 8021q: adding VLAN 0 to HW filter on device bond6 [ 313.366253][T14386] bond6 (unregistering): Released all slaves [ 313.506549][T14405] netlink: 'syz.1.2309': attribute type 10 has an invalid length. [ 313.739079][T14418] netlink: 'syz.0.2315': attribute type 29 has an invalid length. [ 313.750557][T14420] netlink: 'syz.0.2315': attribute type 29 has an invalid length. [ 314.205010][T14451] netlink: 'syz.2.2321': attribute type 4 has an invalid length. [ 314.435912][T14465] __nla_validate_parse: 7 callbacks suppressed [ 314.435933][T14465] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2325'. [ 314.689685][T14481] bond0: (slave rose0): Error: Device can not be enslaved while up [ 314.807894][T14492] `: entered promiscuous mode [ 314.821275][T14492] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2332'. [ 314.851291][T14492] sit0: entered promiscuous mode [ 314.852013][T14500] netlink: 'syz.3.2334': attribute type 1 has an invalid length. [ 314.871821][T14492] netlink: 'syz.0.2332': attribute type 1 has an invalid length. [ 314.891578][T14492] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2332'. [ 314.934483][T14500] 8021q: adding VLAN 0 to HW filter on device bond7 [ 314.973309][T14505] 8021q: adding VLAN 0 to HW filter on device bond7 [ 314.980440][T14505] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address [ 314.997073][T14505] bond7: (slave vxcan5): Error -95 calling set_mac_address [ 315.049421][T14508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2336'. [ 315.069761][T14500] veth5: entered promiscuous mode [ 315.078304][T14500] bond7: (slave veth5): Enslaving as an active interface with a down link [ 315.105870][T14505] vlan5: entered allmulticast mode [ 315.141947][T14505] bond7: entered allmulticast mode [ 315.212063][T14512] tipc: Enabled bearer , priority 0 [ 315.221462][T14512] syzkaller0: entered promiscuous mode [ 315.229263][T14512] syzkaller0: entered allmulticast mode [ 315.256215][T14512] tipc: Resetting bearer [ 315.270196][T14511] tipc: Resetting bearer [ 315.297283][T14511] tipc: Disabling bearer [ 315.449777][T14522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.483796][T14522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.598041][T14526] netlink: 'syz.3.2343': attribute type 1 has an invalid length. [ 315.697992][T14536] nbd: must specify a size in bytes for the device [ 315.849782][T14541] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 315.883116][T14546] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2349'. [ 315.971534][T14550] netlink: 'syz.3.2350': attribute type 11 has an invalid length. [ 315.980437][T14550] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2350'. [ 316.077740][T14552] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2351'. [ 316.097448][T14552] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2351'. [ 316.277192][T14556] team0: Device vti0 is of different type [ 316.642795][T14580] netlink: 'syz.2.2357': attribute type 83 has an invalid length. [ 317.401944][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.704970][T14637] netlink: 'syz.2.2371': attribute type 1 has an invalid length. [ 318.059639][T14644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2374'. [ 318.326318][T14653] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2377'. [ 319.640083][T14666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2381'. [ 319.709444][T14666] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 320.620953][T14732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2400'. [ 320.680018][T14729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2399'. [ 321.040620][T14752] netlink: 'syz.4.2406': attribute type 4 has an invalid length. [ 321.075906][T14752] netlink: 'syz.4.2406': attribute type 4 has an invalid length. [ 321.200393][T14763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2409'. [ 321.218633][T14763] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2409'. [ 321.365166][T14763] bond0 (unregistering): (slave bond6): Releasing backup interface [ 321.378443][T14763] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 321.390684][ T6900] nci: nci_rsp_packet: unsupported rsp opcode 0xf2d [ 321.395107][T14763] bond0 (unregistering): Released all slaves [ 321.530373][T14778] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2414'. [ 321.821901][T14789] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2419'. [ 322.146583][T14811] macsec0: entered promiscuous mode [ 322.151875][T14811] macsec0: entered allmulticast mode [ 322.177866][T14812] veth1_macvtap: entered allmulticast mode [ 322.199513][T14812] veth1_macvtap: entered promiscuous mode [ 322.208534][T14812] macsec0: left promiscuous mode [ 322.215042][T14812] veth1_macvtap: left promiscuous mode [ 322.220825][T14812] macsec0: left allmulticast mode [ 322.226796][T14812] veth1_macvtap: left allmulticast mode [ 322.261971][T14815] tipc: Enabled bearer , priority 0 [ 322.351408][T14815] syzkaller0: entered promiscuous mode [ 322.360430][T14815] syzkaller0: entered allmulticast mode [ 322.371274][T14815] tipc: Resetting bearer [ 322.401848][T14810] tipc: Resetting bearer [ 322.531446][T14831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2433'. [ 322.703599][T14843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2433'. [ 322.930028][T14847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2437'. [ 324.220438][T14810] tipc: Disabling bearer [ 324.455374][T14838] lo speed is unknown, defaulting to 1000 [ 324.624592][T14869] netlink: 'syz.2.2442': attribute type 2 has an invalid length. [ 324.633513][T14869] netlink: 'syz.2.2442': attribute type 8 has an invalid length. [ 324.683221][T14868] __nla_validate_parse: 2 callbacks suppressed [ 324.683244][T14868] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2443'. [ 324.721680][T14866] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2443'. [ 324.760945][T14866] gretap0: entered promiscuous mode [ 324.770366][T14868] 0ªî{X¹¦: renamed from gretap0 [ 324.775940][T14866] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2443'. [ 324.816020][T14868] 0ªî{X¹¦: left promiscuous mode [ 324.821229][T14868] 0ªî{X¹¦: entered allmulticast mode [ 324.833663][T14868] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 324.852071][T14866] 0ªî{X¹¦: entered promiscuous mode [ 324.864617][T14866] 0ªî{X¹¦: left allmulticast mode [ 324.878265][T14866] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2443'. [ 324.898879][T14866] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2443'. [ 324.918677][T14866] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2443'. [ 324.941757][T14866] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2443'. [ 324.965958][T14866] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2443'. [ 325.002463][T14866] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2443'. [ 325.032238][T14866] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2443'. [ 325.346705][T14881] netlink: 'syz.1.2446': attribute type 4 has an invalid length. [ 325.602005][T14892] netlink: 'syz.2.2449': attribute type 1 has an invalid length. [ 326.287729][T14926] netlink: 'syz.0.2460': attribute type 8 has an invalid length. [ 327.579035][T15005] IPv6: NLM_F_CREATE should be specified when creating new route [ 327.775479][T15011] veth0_to_bond: entered allmulticast mode [ 327.822973][T15011] netlink: 'syz.1.2486': attribute type 21 has an invalid length. [ 328.091094][T15034] netlink: 'syz.2.2493': attribute type 1 has an invalid length. [ 328.154807][T15034] 8021q: adding VLAN 0 to HW filter on device bond6 [ 328.235870][T15039] veth5: entered allmulticast mode [ 328.268375][T15039] bond6: (slave veth5): Enslaving as an active interface with a down link [ 328.291842][T15043] netlink: 'syz.0.2495': attribute type 10 has an invalid length. [ 328.317378][T15034] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 328.331884][T15043] wlan1: mtu less than device minimum [ 328.355747][T15043] `: (slave wlan1): Error -22 calling dev_set_mtu [ 328.722200][T15081] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 329.741404][T15135] netlink: 'syz.4.2519': attribute type 10 has an invalid length. [ 329.757064][T15135] netlink: 'syz.4.2519': attribute type 10 has an invalid length. [ 329.871331][T15142] __nla_validate_parse: 37 callbacks suppressed [ 329.871352][T15142] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2521'. [ 329.928469][T15142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2521'. [ 329.941160][T15142] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2521'. [ 330.168956][T15155] netlink: 'syz.0.2525': attribute type 33 has an invalid length. [ 330.442203][T15171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2530'. [ 330.610231][T15184] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2533'. [ 331.006728][T15213] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 331.061816][T15212] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2538'. [ 331.199297][T15220] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2540'. [ 331.325299][T15228] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2543'. [ 331.459649][T15234] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2545'. [ 331.647404][T15245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2548'. [ 332.090412][T15263] geneve2: entered promiscuous mode [ 332.112272][ T6900] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.138465][ T7556] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.159165][ T7556] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.189575][ T7556] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.289643][T15270] netlink: 'syz.4.2559': attribute type 12 has an invalid length. [ 332.550946][T15287] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 333.900442][T15313] netlink: 'syz.1.2571': attribute type 4 has an invalid length. [ 334.468143][T15347] tipc: Enabled bearer , priority 0 [ 334.499205][T15347] syzkaller0: entered promiscuous mode [ 334.506212][T15347] syzkaller0: entered allmulticast mode [ 334.701429][T15358] netlink: 'syz.0.2584': attribute type 1 has an invalid length. [ 334.712095][T15347] tipc: Resetting bearer [ 334.919653][T15384] netlink: 'syz.1.2590': attribute type 4 has an invalid length. [ 335.125573][T15392] __nla_validate_parse: 14 callbacks suppressed [ 335.125595][T15392] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2592'. [ 335.147970][T15392] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2592'. [ 335.170970][T15392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2592'. [ 335.186332][T15343] tipc: Resetting bearer [ 335.188312][T15392] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2592'. [ 335.259884][T15343] tipc: Disabling bearer [ 335.267907][T15404] netlink: 'syz.0.2596': attribute type 10 has an invalid length. [ 335.282545][T15405] netlink: 'syz.0.2596': attribute type 10 has an invalid length. [ 335.297037][T15397] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2593'. [ 335.301183][T15404] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2596'. [ 335.364386][T15405] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2596'. [ 335.427676][T15405] team0: Port device geneve0 added [ 335.717564][T15425] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2599'. [ 335.784343][ T928] IPVS: starting estimator thread 0... [ 335.809167][T15424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2600'. [ 335.829648][T15431] netlink: 'syz.4.2602': attribute type 1 has an invalid length. [ 335.872758][T15429] IPVS: using max 28 ests per chain, 67200 per kthread [ 335.948104][T15424] hsr_slave_0 (unregistering): left promiscuous mode [ 335.986120][T15431] bridge7: entered promiscuous mode [ 335.991601][T15431] bridge7: entered allmulticast mode [ 336.249113][T15457] netlink: 'syz.0.2608': attribute type 1 has an invalid length. [ 336.263992][T15457] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2608'. [ 336.991898][T15502] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 337.201931][T15516] Bluetooth: MGMT ver 1.23 [ 337.291418][T15519] geneve2: entered promiscuous mode [ 337.308428][T15519] geneve2: entered allmulticast mode [ 337.367309][T15520] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.390341][T15520] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.416490][ T6900] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 337.438690][ T6900] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 337.461304][ T6900] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 337.606728][T15535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.629637][T15529] bond6 (unregistering): Released all slaves [ 337.651057][T15525] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.658301][T15525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.668026][T15537] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 337.719514][T15535] ip6tnl2: entered promiscuous mode [ 337.738256][T15535] ip6tnl2: entered allmulticast mode [ 338.084513][T15562] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.105005][T15562] batman_adv: batadv0: Interface activated: team0 [ 338.141566][T15562] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 338.426166][T15584] sit2: entered allmulticast mode [ 338.948819][T15520] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.989608][T15520] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.029546][T15520] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 339.144532][T15603] bond7: entered allmulticast mode [ 339.150536][T15603] 8021q: adding VLAN 0 to HW filter on device bond7 [ 339.162412][T15603] bridge0: port 1(bond7) entered blocking state [ 339.170620][T15603] bridge0: port 1(bond7) entered disabled state [ 339.180284][T15603] bond7: entered promiscuous mode [ 339.187081][T15603] bridge0: port 1(bond7) entered blocking state [ 339.193598][T15603] bridge0: port 1(bond7) entered forwarding state [ 339.230300][T15607] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 339.376936][T15520] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.391402][T15520] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.402325][T15520] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 339.561876][T15520] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.584820][T15637] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 339.607485][T15520] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.630125][T15520] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 339.655180][T15634] syzkaller1: entered promiscuous mode [ 339.661746][T15634] syzkaller1: entered allmulticast mode [ 339.675763][T15639] netlink: 'syz.1.2663': attribute type 21 has an invalid length. [ 339.709773][T15639] netlink: 'syz.1.2663': attribute type 21 has an invalid length. [ 339.846184][T10846] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.862330][T10846] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 339.871243][T10846] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 339.895989][T10845] bridge0: port 1(bond7) entered disabled state [ 339.923330][T10846] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.931629][T10846] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 339.945666][T10846] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 339.970162][T10846] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.980383][T10846] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 339.994918][T10846] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 340.030351][ T7556] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.043921][ T7556] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 340.077527][ T7556] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 340.579537][T15674] lo speed is unknown, defaulting to 1000 [ 340.713225][T15691] netlink: 'syz.3.2678': attribute type 10 has an invalid length. [ 340.745735][T15691] bond0: (slave wlan1): Opening slave failed [ 341.034428][T15699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.051026][T15699] __nla_validate_parse: 20 callbacks suppressed [ 341.051047][T15699] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2682'. [ 341.498219][T15719] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2689'. [ 341.713988][ T5875] Bluetooth: hci4: command 0x0405 tx timeout [ 342.131503][T15747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2696'. [ 342.320561][T15752] netlink: 'syz.0.2698': attribute type 10 has an invalid length. [ 342.339699][T15752] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 342.371413][T15757] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2700'. [ 342.422147][T15752] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 342.430583][T15752] `: (slave netdevsim0): Enslaving as an active interface with an up link [ 342.505643][T15760] team0: No ports can be present during mode change [ 342.540539][T15757] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2700'. [ 342.796665][T15771] gtp2: entered promiscuous mode [ 342.802391][T15771] gtp2: entered allmulticast mode [ 342.809963][T15769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2704'. [ 343.290095][T15805] netlink: 'syz.1.2714': attribute type 1 has an invalid length. [ 343.300094][T15805] netlink: 'syz.1.2714': attribute type 4 has an invalid length. [ 343.322710][T15805] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2714'. [ 343.337262][T15812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2715'. [ 343.341879][T15811] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2716'. [ 343.508345][T15820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2718'. [ 344.051639][T15844] gretap2: entered promiscuous mode [ 344.060302][T15844] gretap2: entered allmulticast mode [ 344.278734][T15857] netlink: 'syz.4.2729': attribute type 1 has an invalid length. [ 345.991979][T15948] netlink: 'syz.0.2751': attribute type 16 has an invalid length. [ 346.049500][T15948] netlink: 'syz.0.2751': attribute type 17 has an invalid length. [ 346.101454][T15948] 0ªî{X¹¦: left promiscuous mode [ 346.119150][T15948] sit0: left promiscuous mode [ 346.162111][T15948] `: left promiscuous mode [ 346.172914][T15948] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 346.181586][T15948] 8021q: adding VLAN 0 to HW filter on device ` [ 346.196053][T15948] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 346.247655][T15958] pim6reg: entered allmulticast mode [ 346.450831][T15964] __nla_validate_parse: 10 callbacks suppressed [ 346.450855][T15964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2757'. [ 346.532381][T15976] sctp: [Deprecated]: syz.1.2761 (pid 15976) Use of int in maxseg socket option. [ 346.532381][T15976] Use struct sctp_assoc_value instead [ 346.572436][T15975] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2762'. [ 346.590091][T15975] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2762'. [ 346.827437][T15990] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2761'. [ 346.877312][T15990] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2761'. [ 346.948250][T15998] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2767'. [ 346.957830][T15998] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2767'. [ 347.161399][T16010] sctp: [Deprecated]: syz.2.2773 (pid 16010) Use of int in maxseg socket option. [ 347.161399][T16010] Use struct sctp_assoc_value instead [ 347.224990][T16016] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2774'. [ 347.249127][T16021] netlink: 'syz.0.2775': attribute type 21 has an invalid length. [ 347.262460][T16021] netlink: 'syz.0.2775': attribute type 22 has an invalid length. [ 347.270809][T16021] netlink: 'syz.0.2775': attribute type 23 has an invalid length. [ 347.308637][T16021] netlink: 'syz.0.2775': attribute type 25 has an invalid length. [ 347.338675][T16021] netlink: 'syz.0.2775': attribute type 26 has an invalid length. [ 347.350417][T16021] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2775'. [ 347.392884][T16014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2774'. [ 347.580396][T16034] bond9: entered allmulticast mode [ 347.586786][T16034] 8021q: adding VLAN 0 to HW filter on device bond9 [ 347.595088][T16034] bridge0: port 5(bond9) entered blocking state [ 347.601726][T16034] bridge0: port 5(bond9) entered disabled state [ 347.612738][T16034] bond9: entered promiscuous mode [ 347.682133][T16047] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 347.831678][T16056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.846813][T16057] netlink: 'syz.1.2784': attribute type 4 has an invalid length. [ 347.895663][T16062] Bluetooth: MGMT ver 1.23 [ 348.542390][T16094] netlink: 'syz.1.2797': attribute type 10 has an invalid length. [ 348.561156][T16094] netlink: 'syz.1.2797': attribute type 17 has an invalid length. [ 348.593750][T16094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.656188][T16099] pimreg: left allmulticast mode [ 349.321942][T16141] pim6reg1: entered promiscuous mode [ 349.362598][T16141] pim6reg1: entered allmulticast mode [ 349.866223][T16161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.111069][T16174] erspan0: entered promiscuous mode [ 350.125326][T16174] debugfs: 'hsr0' already exists in 'hsr' [ 350.131113][T16174] Cannot create hsr debugfs directory [ 350.293867][T16185] tipc: Enabled bearer , priority 0 [ 350.302158][T16185] syzkaller0: entered promiscuous mode [ 350.309521][T16185] syzkaller0: entered allmulticast mode [ 350.409452][T16185] tipc: Resetting bearer [ 350.417331][T16191] openvswitch: netlink: Message has 5 unknown bytes. [ 350.442438][T16184] tipc: Resetting bearer [ 350.493371][T16184] tipc: Disabling bearer [ 350.842754][T16219] bridge_slave_1: left allmulticast mode [ 350.854757][T16219] bridge_slave_1: left promiscuous mode [ 350.857124][T16221] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 350.869844][T16219] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.916128][T16219] bridge_slave_1: entered promiscuous mode [ 350.927804][T16219] bridge_slave_1: entered allmulticast mode [ 350.935104][T16219] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 351.069736][T16235] warn_alloc: 1 callbacks suppressed [ 351.069765][T16235] syz.3.2841: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 351.133656][T16235] CPU: 1 UID: 0 PID: 16235 Comm: syz.3.2841 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) [ 351.133707][T16235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 351.133730][T16235] Call Trace: [ 351.133745][T16235] [ 351.133764][T16235] dump_stack_lvl+0x189/0x250 [ 351.133800][T16235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.133827][T16235] ? __pfx__printk+0x10/0x10 [ 351.133858][T16235] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 351.133885][T16235] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 351.133913][T16235] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 351.133942][T16235] warn_alloc+0x214/0x310 [ 351.133976][T16235] ? stack_depot_save_flags+0x40/0x860 [ 351.134004][T16235] ? __pfx_warn_alloc+0x10/0x10 [ 351.134041][T16235] ? kasan_save_track+0x4f/0x80 [ 351.134069][T16235] ? xskq_create+0x56/0x170 [ 351.134092][T16235] ? xsk_init_queue+0xb0/0x110 [ 351.134113][T16235] ? xsk_setsockopt+0x4dc/0x8d0 [ 351.134133][T16235] ? do_sock_setsockopt+0x17c/0x1b0 [ 351.134160][T16235] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 351.134188][T16235] ? do_syscall_64+0xfa/0x3b0 [ 351.134214][T16235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.134244][T16235] __vmalloc_node_range_noprof+0x125/0x12f0 [ 351.134311][T16235] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 351.134345][T16235] ? xskq_create+0x56/0x170 [ 351.134373][T16235] ? __kasan_kmalloc+0x93/0xb0 [ 351.134405][T16235] vmalloc_user_noprof+0xad/0xf0 [ 351.134437][T16235] ? xskq_create+0xbf/0x170 [ 351.134463][T16235] xskq_create+0xbf/0x170 [ 351.134493][T16235] xsk_init_queue+0xb0/0x110 [ 351.134521][T16235] xsk_setsockopt+0x4dc/0x8d0 [ 351.134549][T16235] ? __pfx_xsk_setsockopt+0x10/0x10 [ 351.134573][T16235] ? __pfx_aa_sk_perm+0x10/0x10 [ 351.134605][T16235] ? aa_sock_opt_perm+0xff/0x1b0 [ 351.134639][T16235] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 351.134663][T16235] ? __pfx_xsk_setsockopt+0x10/0x10 [ 351.134694][T16235] do_sock_setsockopt+0x17c/0x1b0 [ 351.134782][T16235] __x64_sys_setsockopt+0x13f/0x1b0 [ 351.134821][T16235] do_syscall_64+0xfa/0x3b0 [ 351.134848][T16235] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.134875][T16235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.134897][T16235] ? clear_bhb_loop+0x60/0xb0 [ 351.134924][T16235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.134946][T16235] RIP: 0033:0x7fca1798ebe9 [ 351.134966][T16235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.134986][T16235] RSP: 002b:00007fca15bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 351.135009][T16235] RAX: ffffffffffffffda RBX: 00007fca17bb5fa0 RCX: 00007fca1798ebe9 [ 351.135025][T16235] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 351.135039][T16235] RBP: 00007fca17a11e19 R08: 0000000000000004 R09: 0000000000000000 [ 351.135052][T16235] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.135066][T16235] R13: 00007fca17bb6038 R14: 00007fca17bb5fa0 R15: 00007fff7abd5d58 [ 351.135103][T16235] [ 351.142227][T16235] Mem-Info: [ 351.460045][T16243] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 351.532800][T16235] active_anon:4566 inactive_anon:0 isolated_anon:0 [ 351.532800][T16235] active_file:1287 inactive_file:39924 isolated_file:0 [ 351.532800][T16235] unevictable:768 dirty:84 writeback:25 [ 351.532800][T16235] slab_reclaimable:12372 slab_unreclaimable:1145452 [ 351.532800][T16235] mapped:28921 shmem:1363 pagetables:1076 [ 351.532800][T16235] sec_pagetables:0 bounce:0 [ 351.532800][T16235] kernel_misc_reclaimable:0 [ 351.532800][T16235] free:275809 free_pcp:19933 free_cma:0 [ 351.581078][T16235] Node 0 active_anon:18264kB inactive_anon:0kB active_file:5148kB inactive_file:159500kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115684kB dirty:336kB writeback:100kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14396kB pagetables:4144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 351.619536][T16235] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 351.651179][T16235] Node 0 DMA free:10328kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 351.706097][T16235] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 351.712113][T16235] Node 0 DMA32 free:118980kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18120kB inactive_anon:0kB active_file:5148kB inactive_file:157920kB unevictable:1536kB writepending:336kB present:3129332kB managed:2557520kB mlocked:0kB bounce:0kB free_pcp:42572kB local_pcp:21776kB free_cma:0kB [ 351.827508][T16235] lowmem_reserve[]: 0 0 1 1 1 [ 351.838555][T16235] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 351.839005][T16262] tipc: Enabled bearer , priority 0 [ 351.891511][T16235] lowmem_reserve[]: 0 0 0 0 0 [ 351.900104][T16235] Node 1 Normal free:973916kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:37176kB local_pcp:16608kB free_cma:0kB [ 351.933147][T16235] lowmem_reserve[]: 0 0 0 0 0 [ 351.937932][T16235] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (E) 0*64kB 0*128kB 0*256kB 0*512kB 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (M) = 10272kB [ 351.954851][T16235] Node 0 DMA32: 995*4kB (UME) 529*8kB (UME) 264*16kB (UM) 485*32kB (UME) 532*64kB (UME) 147*128kB (UME) 62*256kB (UM) 18*512kB (UM) 12*1024kB (UE) 0*2048kB 0*4096kB = 118196kB [ 351.977005][T16275] __nla_validate_parse: 17 callbacks suppressed [ 351.977026][T16275] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2848'. [ 351.996539][T16273] syzkaller0: entered promiscuous mode [ 352.002040][T16273] syzkaller0: entered allmulticast mode [ 352.044338][T16273] tipc: Resetting bearer [ 352.069042][T16235] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 352.096881][T16235] Node 1 Normal: 199*4kB (UME) 34*8kB (UME) 39*16kB (UME) 136*32kB (UME) 43*64kB (UME) 8*128kB (UME) 4*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 233*4096kB (UM) = 973916kB [ 352.140931][T16235] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 352.151013][T16235] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 352.171162][T16235] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 352.190825][T16235] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 352.204270][T16235] 42570 total pagecache pages [ 352.208996][T16235] 0 pages in swap cache [ 352.219925][T16235] Free swap = 124996kB [ 352.225345][T16235] Total swap = 124996kB [ 352.230167][T16235] 2097051 pages RAM [ 352.235114][T16235] 0 pages HighMem/MovableOnly [ 352.239828][T16235] 425645 pages reserved [ 352.245302][T16235] 0 pages cma reserved [ 352.264934][T16287] validate_nla: 5 callbacks suppressed [ 352.264953][T16287] netlink: 'syz.2.2852': attribute type 2 has an invalid length. [ 352.278832][T16287] netlink: 119 bytes leftover after parsing attributes in process `syz.2.2852'. [ 352.389643][T16261] tipc: Resetting bearer [ 353.687975][T16261] tipc: Disabling bearer [ 353.900528][ T5855] hid-generic 0005:0C45:1012.0003: item fetching failed at offset 0/1 [ 353.910165][ T5855] hid-generic 0005:0C45:1012.0003: probe with driver hid-generic failed with error -22 [ 353.957012][T16302] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 353.970848][T16312] sctp: [Deprecated]: syz.4.2858 (pid 16312) Use of struct sctp_assoc_value in delayed_ack socket option. [ 353.970848][T16312] Use struct sctp_sack_info instead [ 353.990609][T16313] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 354.027735][T16313] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 354.038112][T16313] gretap3: entered promiscuous mode [ 354.047620][T16313] gretap3: entered allmulticast mode [ 354.111170][T16302] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 354.122310][T16309] lo speed is unknown, defaulting to 1000 [ 354.251734][T16329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2862'. [ 354.318577][T16324] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 354.330231][T16324] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 354.598511][T16338] netlink: 'syz.0.2864': attribute type 10 has an invalid length. [ 354.648357][T16343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2865'. [ 354.676053][T16344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2865'. [ 354.837611][T16338] `: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 354.847343][T16339] infiniband syz0: set down [ 354.852070][T16339] infiniband syz0: added ipvlan1 [ 354.915136][T16339] RDS/IB: syz0: added [ 354.919423][T16339] smc: adding ib device syz0 with port count 1 [ 354.933415][T16339] smc: ib device syz0 port 1 has pnetid [ 355.052981][T16359] netlink: 'syz.1.2869': attribute type 39 has an invalid length. [ 355.288431][T16369] netlink: 'syz.0.2873': attribute type 9 has an invalid length. [ 355.311466][T16369] netlink: 212260 bytes leftover after parsing attributes in process `syz.0.2873'. [ 355.394065][T16378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2875'. [ 355.424389][T16378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2875'. [ 356.048894][T16386] netlink: 'syz.1.2877': attribute type 29 has an invalid length. [ 356.075552][T16386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2877'. [ 356.321929][T16411] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2886'. [ 356.953931][T16440] netlink: 'syz.4.2896': attribute type 5 has an invalid length. [ 357.224582][T16449] __nla_validate_parse: 1 callbacks suppressed [ 357.224602][T16449] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2898'. [ 357.988405][T16480] IPVS: length: 36 != 24 [ 359.504757][T16485] netlink: 'syz.4.2909': attribute type 1 has an invalid length. [ 359.524279][T16485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2909'. [ 359.534131][T16486] netlink: 'syz.1.2908': attribute type 21 has an invalid length. [ 359.542668][T16485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2909'. [ 359.862792][T16504] IPVS: stopping master sync thread 9056 ... [ 360.020370][T16508] tipc: Enabled bearer , priority 0 [ 360.042002][T16510] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 360.061113][T16508] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 360.101661][T16508] tipc: Resetting bearer [ 360.185265][T16507] tipc: Disabling bearer [ 360.351183][T16521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2921'. [ 360.532775][T16526] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2923'. [ 360.646459][T16532] netlink: 'syz.0.2924': attribute type 21 has an invalid length. [ 360.712640][T16532] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2924'. [ 360.756619][T16535] netlink: 'syz.4.2925': attribute type 64 has an invalid length. [ 360.787440][T16535] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2925'. [ 361.197612][T16544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2926'. [ 361.219613][ T5865] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 361.230054][ T5865] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 361.249310][ T5865] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 361.258375][ T5865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 361.267834][ T5865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 361.985824][T16576] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2933'. [ 362.083788][T16578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2934'. [ 362.088839][T16501] lo speed is unknown, defaulting to 1000 [ 362.710624][T16601] netlink: 'syz.4.2943': attribute type 1 has an invalid length. [ 362.739997][T16601] netlink: 'syz.4.2943': attribute type 2 has an invalid length. [ 362.756215][T16601] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2943'. [ 363.028176][T16543] lo speed is unknown, defaulting to 1000 [ 363.039629][T16613] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2945'. [ 363.066866][T16615] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2946'. [ 363.154275][T16617] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2947'. [ 363.165086][T16615] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2946'. [ 363.312962][ T5875] Bluetooth: hci3: command tx timeout [ 363.373977][ T9231] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.464651][T16624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2948'. [ 363.549783][ T9231] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.746576][ T9231] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.836798][T16636] tipc: Enabled bearer , priority 0 [ 363.967600][T16638] syzkaller0: entered promiscuous mode [ 363.974166][T16638] syzkaller0: entered allmulticast mode [ 363.980369][T16638] tipc: Resetting bearer [ 364.057386][ T9231] bond0: (slave netdevsim0): Releasing backup interface [ 364.082835][T16645] tls_set_device_offload: netdev not found [ 364.398427][T16657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2958'. [ 364.452418][T16629] tipc: Resetting bearer [ 364.487385][T16663] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2959'. [ 365.394369][ T5865] Bluetooth: hci3: command tx timeout [ 366.059357][T16629] tipc: Disabling bearer [ 366.210479][T16543] chnl_net:caif_netlink_parms(): no params data found [ 366.343505][ T9231] bridge0: port 3(batadv0) entered disabled state [ 366.370182][ T9231] bridge_slave_1: left allmulticast mode [ 366.387386][ T9231] bridge_slave_1: left promiscuous mode [ 366.397707][ T9231] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.420058][ T9231] bridge_slave_0: left allmulticast mode [ 366.428837][T16682] netlink: 'syz.4.2965': attribute type 17 has an invalid length. [ 366.431754][ T9231] bridge_slave_0: left promiscuous mode [ 366.449441][ T9231] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.457224][T16682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2965'. [ 366.466696][T16682] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2965'. [ 366.692113][T16686] netlink: 'syz.3.2967': attribute type 11 has an invalid length. [ 366.775626][ T9231] erspan0 (unregistering): left promiscuous mode [ 366.890625][ T9231] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 367.329524][ T9231] bond0 (unregistering): (slave 1!€ÿ): Releasing backup interface [ 367.340632][ T9231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.351337][ T9231] bond0 (unregistering): Released all slaves [ 367.454419][ T9231] bond1 (unregistering): Released all slaves [ 367.468554][ T9231] bond2 (unregistering): Released all slaves [ 367.475574][ T5865] Bluetooth: hci3: command 0x040f tx timeout [ 367.486850][ T9231] bond3 (unregistering): Released all slaves [ 367.588130][ T9231] bond4 (unregistering): Released all slaves [ 367.603659][ T9231] bond5 (unregistering): Released all slaves [ 367.825459][T16694] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 367.834047][ T9231] tipc: Disabling bearer [ 367.850369][ T9231] tipc: Left network mode [ 367.855561][T16543] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.883968][T16697] netlink: 'syz.2.2970': attribute type 3 has an invalid length. [ 367.884278][T16543] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.919283][T16543] bridge_slave_0: entered allmulticast mode [ 367.960102][T16543] bridge_slave_0: entered promiscuous mode [ 368.097201][T16543] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.122436][T16708] __nla_validate_parse: 2 callbacks suppressed [ 368.122458][T16708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2972'. [ 368.124287][T16543] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.161979][T16711] netlink: 'syz.0.2974': attribute type 1 has an invalid length. [ 368.169564][T16543] bridge_slave_1: entered allmulticast mode [ 368.178634][T16543] bridge_slave_1: entered promiscuous mode [ 368.195344][T16701] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 368.206855][T16701] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 368.215831][T16701] gretap2: entered promiscuous mode [ 368.221077][T16701] gretap2: entered allmulticast mode [ 368.436081][ T5875] Bluetooth: hci4: link tx timeout [ 368.441751][ T5875] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 368.503963][T16718] 8021q: adding VLAN 0 to HW filter on device bond8 [ 368.629738][T16720] veth11: entered promiscuous mode [ 368.650292][T16720] bond8: (slave veth11): Enslaving as a backup interface with a down link [ 368.816986][T16543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.826034][T16732] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2978'. [ 368.849168][T16729] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20004 [ 368.857426][T16732] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 368.862932][T16543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.905357][T16736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2980'. [ 368.915366][T16736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2980'. [ 369.087571][T16543] team0: Port device team_slave_0 added [ 369.108485][T16737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2980'. [ 369.197536][T16742] syzkaller0: entered promiscuous mode [ 369.213770][T16742] syzkaller0: entered allmulticast mode [ 369.255199][T16543] team0: Port device team_slave_1 added [ 369.481198][T16543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.509289][T16543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.562792][ T5865] Bluetooth: hci3: command 0x040f tx timeout [ 369.569077][T16757] netlink: 'syz.4.2986': attribute type 7 has an invalid length. [ 369.582044][T16543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.620723][T16757] : entered promiscuous mode [ 369.630215][ T9231] hsr_slave_1: left promiscuous mode [ 369.643684][ T9231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.651413][ T9231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.676754][ T9231] veth0_macvtap: left promiscuous mode [ 369.771179][ T9231] pim6reg (unregistering): left allmulticast mode [ 370.274906][T16543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.282072][T16543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.308454][T16543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.341952][T16753] lo speed is unknown, defaulting to 1000 [ 370.513638][ T5865] Bluetooth: hci4: command 0x0405 tx timeout [ 371.634596][ T5875] Bluetooth: hci3: command 0x040f tx timeout [ 371.940737][T16543] hsr_slave_0: entered promiscuous mode [ 371.947229][T16775] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2992'. [ 371.970589][T16543] hsr_slave_1: entered promiscuous mode [ 371.977201][T16543] debugfs: 'hsr0' already exists in 'hsr' [ 371.990143][T16543] Cannot create hsr debugfs directory [ 372.340532][ T9231] IPVS: stop unused estimator thread 0... [ 372.429929][T16790] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2996'. [ 372.460886][T16787] tipc: Enabled bearer , priority 0 [ 372.469187][T16787] netlink: 'syz.4.2995': attribute type 6 has an invalid length. [ 372.490312][T16787] syzkaller0: entered promiscuous mode [ 372.496797][T16787] syzkaller0: entered allmulticast mode [ 372.541216][T16787] tipc: Resetting bearer [ 372.568788][T16786] tipc: Resetting bearer [ 372.585771][T16786] tipc: Disabling bearer [ 373.184490][T16813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3001'. [ 373.472013][T16543] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 373.486938][T16543] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 373.528704][T16543] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 373.592355][T16543] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 374.130481][T16543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.195980][T16543] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.239006][ T4786] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.247242][ T4786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.302240][T10844] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.309498][T10844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.326275][T16868] netlink: 'syz.2.3014': attribute type 1 has an invalid length. [ 374.348209][T16866] bond0: Device is already in use. [ 374.867188][T16892] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3022'. [ 374.932170][T16892] netlink: 'syz.2.3022': attribute type 1 has an invalid length. [ 374.952843][T16892] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3022'. [ 375.028936][T16903] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3024'. [ 375.074133][T16543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.083071][T16905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3025'. [ 375.184489][T16543] veth0_vlan: entered promiscuous mode [ 375.201121][T16543] veth1_vlan: entered promiscuous mode [ 375.250821][T16543] veth0_macvtap: entered promiscuous mode [ 375.275744][T16543] veth1_macvtap: entered promiscuous mode [ 375.307868][T16918] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 375.367482][T16543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.445089][T16543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.476211][T10846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.495150][T10846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.517751][T10846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.531154][T10846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.687756][T10846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.707398][T10846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.845647][T10846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.878211][T10846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.951234][T16946] netlink: 51 bytes leftover after parsing attributes in process `syz.3.3034'. [ 376.141180][T16950] 8021q: adding VLAN 0 to HW filter on device bond7 [ 376.400888][T16970] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3040'. [ 376.446772][T16970] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 376.498300][T16974] netlink: 'syz.3.3041': attribute type 1 has an invalid length. [ 376.517589][T16974] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3041'. [ 376.545892][T16974] netlink: 'syz.3.3041': attribute type 1 has an invalid length. [ 376.719352][T16982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3043'. [ 376.935788][T16990] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 377.081605][T16997] netlink: 'syz.4.3048': attribute type 33 has an invalid length. [ 377.177942][T17001] bridge10: entered promiscuous mode [ 377.186625][T17001] bridge10: entered allmulticast mode [ 377.189190][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 377.206544][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 377.224729][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 377.234143][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 377.255240][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 377.310224][T16999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3049'. [ 377.446236][T17011] netlink: 'syz.4.3052': attribute type 1 has an invalid length. [ 377.529328][T17003] lo speed is unknown, defaulting to 1000 [ 377.938947][T17034] tipc: Started in network mode [ 377.963952][T17034] tipc: Node identity 125f06051975, cluster identity 4711 [ 377.983106][T17034] tipc: Enabled bearer , priority 0 [ 377.990665][T17040] netlink: 'syz.1.3058': attribute type 6 has an invalid length. [ 378.066408][T17034] syzkaller0: entered promiscuous mode [ 378.086785][T17034] syzkaller0: entered allmulticast mode [ 378.127137][T17048] netlink: 'syz.2.3060': attribute type 3 has an invalid length. [ 378.134603][T17034] tipc: Resetting bearer [ 378.178102][T17033] tipc: Resetting bearer [ 378.222692][T17033] tipc: Disabling bearer [ 378.537564][T17066] __nla_validate_parse: 3 callbacks suppressed [ 378.537585][T17066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3064'. [ 379.317127][ T5875] Bluetooth: hci0: command tx timeout [ 379.589790][T17003] chnl_net:caif_netlink_parms(): no params data found [ 379.670091][T17095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3065'. [ 379.702158][T17095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3065'. [ 379.756009][T17097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3066'. [ 380.003657][T17104] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3067'. [ 380.073022][T17111] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3067'. [ 380.195796][T17115] netlink: 'syz.2.3071': attribute type 6 has an invalid length. [ 380.211846][T17003] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.233722][T17003] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.241055][T17003] bridge_slave_0: entered allmulticast mode [ 380.254567][T17003] bridge_slave_0: entered promiscuous mode [ 380.276703][T17115] netlink: 'syz.2.3071': attribute type 3 has an invalid length. [ 380.284965][T17115] netlink: 766 bytes leftover after parsing attributes in process `syz.2.3071'. [ 380.300736][T17003] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.308148][T17003] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.316086][T17003] bridge_slave_1: entered allmulticast mode [ 380.324894][T17003] bridge_slave_1: entered promiscuous mode [ 380.331864][T17121] netlink: 'syz.1.3073': attribute type 3 has an invalid length. [ 380.520864][T17121] netlink: 'syz.1.3073': attribute type 3 has an invalid length. [ 380.601974][T17003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.638179][T17135] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3076'. [ 380.638355][T17003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.651481][T17135] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3076'. [ 380.674577][T17135] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3076'. [ 380.729760][T17103] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 381.029536][T17139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.054668][ T6900] [ 381.057132][ T6900] ====================================================== [ 381.064169][ T6900] WARNING: possible circular locking dependency detected [ 381.071218][ T6900] 6.16.0-syzkaller-12084-g33caa208dba6 #0 Not tainted [ 381.077981][ T6900] ------------------------------------------------------ [ 381.085010][ T6900] kworker/u8:9/6900 is trying to acquire lock: [ 381.091180][ T6900] ffff88807ea28f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 381.100254][ T6900] [ 381.100254][ T6900] but task is already holding lock: [ 381.107616][ T6900] ffff88805ab74958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 381.117489][ T6900] [ 381.117489][ T6900] which lock already depends on the new lock. [ 381.117489][ T6900] [ 381.127898][ T6900] [ 381.127898][ T6900] the existing dependency chain (in reverse order) is: [ 381.136912][ T6900] [ 381.136912][ T6900] -> #1 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}: [ 381.145194][ T6900] lock_acquire+0x120/0x360 [ 381.150236][ T6900] _raw_spin_lock+0x2e/0x40 [ 381.155276][ T6900] sch_direct_xmit+0x153/0x4b0 [ 381.160591][ T6900] __dev_queue_xmit+0x1857/0x3b50 [ 381.166153][ T6900] hsr_forward_skb+0x158b/0x2860 [ 381.171648][ T6900] hsr_dev_xmit+0x1a5/0x220 [ 381.176697][ T6900] dev_hard_start_xmit+0x2d7/0x830 [ 381.182342][ T6900] __dev_queue_xmit+0x1b8d/0x3b50 [ 381.187889][ T6900] ip6_finish_output2+0x11fe/0x16a0 [ 381.193641][ T6900] ndisc_send_skb+0xb54/0x1440 [ 381.198949][ T6900] ndisc_send_ns+0xcb/0x150 [ 381.203989][ T6900] addrconf_dad_work+0xaae/0x14b0 [ 381.209565][ T6900] process_scheduled_works+0xade/0x17b0 [ 381.215634][ T6900] worker_thread+0x8a0/0xda0 [ 381.220755][ T6900] kthread+0x70e/0x8a0 [ 381.225358][ T6900] ret_from_fork+0x3fc/0x770 [ 381.230469][ T6900] ret_from_fork_asm+0x1a/0x30 [ 381.235807][ T6900] [ 381.235807][ T6900] -> #0 (&hsr->seqnr_lock){+.-.}-{3:3}: [ 381.243541][ T6900] validate_chain+0xb9b/0x2140 [ 381.248843][ T6900] __lock_acquire+0xab9/0xd20 [ 381.254066][ T6900] lock_acquire+0x120/0x360 [ 381.259120][ T6900] _raw_spin_lock_bh+0x36/0x50 [ 381.264424][ T6900] hsr_dev_xmit+0x19a/0x220 [ 381.269457][ T6900] dev_hard_start_xmit+0x2d7/0x830 [ 381.275125][ T6900] __dev_queue_xmit+0x1b8d/0x3b50 [ 381.280678][ T6900] NF_HOOK+0x310/0x3a0 [ 381.285356][ T6900] arp_xmit+0x16c/0x270 [ 381.290043][ T6900] arp_solicit+0xc1d/0xe60 [ 381.295001][ T6900] __neigh_event_send+0xf70/0x1560 [ 381.300642][ T6900] neigh_resolve_output+0x198/0x750 [ 381.306380][ T6900] ip_finish_output2+0xd40/0x1160 [ 381.311949][ T6900] ip_output+0x2a1/0x3c0 [ 381.316731][ T6900] iptunnel_xmit+0x592/0xa40 [ 381.321855][ T6900] ip_tunnel_xmit+0x1c41/0x2390 [ 381.327235][ T6900] gre_tap_xmit+0x590/0x7a0 [ 381.332281][ T6900] dev_hard_start_xmit+0x2d7/0x830 [ 381.337924][ T6900] sch_direct_xmit+0x241/0x4b0 [ 381.343215][ T6900] __dev_queue_xmit+0x1857/0x3b50 [ 381.348765][ T6900] alb_send_lp_vid+0x324/0x510 [ 381.354076][ T6900] alb_send_learning_packets+0x10d/0x2c0 [ 381.360262][ T6900] bond_alb_monitor+0x3e4/0x1800 [ 381.365726][ T6900] process_scheduled_works+0xade/0x17b0 [ 381.371802][ T6900] worker_thread+0x8a0/0xda0 [ 381.376939][ T6900] kthread+0x70e/0x8a0 [ 381.381540][ T6900] ret_from_fork+0x3fc/0x770 [ 381.386659][ T6900] ret_from_fork_asm+0x1a/0x30 [ 381.391957][ T6900] [ 381.391957][ T6900] other info that might help us debug this: [ 381.391957][ T6900] [ 381.402182][ T6900] Possible unsafe locking scenario: [ 381.402182][ T6900] [ 381.404293][ T5875] Bluetooth: hci0: command tx timeout [ 381.409631][ T6900] CPU0 CPU1 [ 381.420382][ T6900] ---- ---- [ 381.425746][ T6900] lock(&qdisc_xmit_lock_key#4); [ 381.430781][ T6900] lock(&hsr->seqnr_lock); [ 381.437812][ T6900] lock(&qdisc_xmit_lock_key#4); [ 381.445374][ T6900] lock(&hsr->seqnr_lock); [ 381.449910][ T6900] [ 381.449910][ T6900] *** DEADLOCK *** [ 381.449910][ T6900] [ 381.458075][ T6900] 10 locks held by kworker/u8:9/6900: [ 381.463476][ T6900] #0: ffff888056f02948 ((wq_completion)bond6#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 381.474587][ T6900] #1: ffffc9001a5bfbc0 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 381.487519][ T6900] #2: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf1/0x1800 [ 381.497112][ T6900] #3: ffffffff8e139f40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 381.507048][ T6900] #4: ffff888026678258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x138a/0x3b50 [ 381.519720][ T6900] #5: ffff88805ab74958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 381.530042][ T6900] #6: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x60/0x3c0 [ 381.538935][ T6900] #7: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x1160 [ 381.548706][ T6900] #8: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 381.557518][ T6900] #9: ffffffff8e139f40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 381.567477][ T6900] [ 381.567477][ T6900] stack backtrace: [ 381.573379][ T6900] CPU: 0 UID: 0 PID: 6900 Comm: kworker/u8:9 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) [ 381.573399][ T6900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 381.573410][ T6900] Workqueue: bond6 bond_alb_monitor [ 381.573433][ T6900] Call Trace: [ 381.573441][ T6900] [ 381.573448][ T6900] dump_stack_lvl+0x189/0x250 [ 381.573470][ T6900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.573488][ T6900] ? __pfx__printk+0x10/0x10 [ 381.573511][ T6900] ? print_lock_name+0xde/0x100 [ 381.573532][ T6900] print_circular_bug+0x2ee/0x310 [ 381.573552][ T6900] check_noncircular+0x134/0x160 [ 381.573571][ T6900] validate_chain+0xb9b/0x2140 [ 381.573588][ T6900] ? unwind_next_frame+0xa5/0x2390 [ 381.573608][ T6900] ? unwind_next_frame+0xa5/0x2390 [ 381.573643][ T6900] ? unwind_next_frame+0xa5/0x2390 [ 381.573669][ T6900] __lock_acquire+0xab9/0xd20 [ 381.573707][ T6900] ? hsr_dev_xmit+0x19a/0x220 [ 381.573721][ T6900] lock_acquire+0x120/0x360 [ 381.573742][ T6900] ? hsr_dev_xmit+0x19a/0x220 [ 381.573759][ T6900] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 381.573791][ T6900] ? hsr_dev_xmit+0x19a/0x220 [ 381.573811][ T6900] _raw_spin_lock_bh+0x36/0x50 [ 381.573833][ T6900] ? hsr_dev_xmit+0x19a/0x220 [ 381.573850][ T6900] hsr_dev_xmit+0x19a/0x220 [ 381.573865][ T6900] dev_hard_start_xmit+0x2d7/0x830 [ 381.573898][ T6900] __dev_queue_xmit+0x1b8d/0x3b50 [ 381.573912][ T6900] ? arp_send_dst+0xa7/0x2d0 [ 381.573926][ T6900] ? arp_solicit+0xc1d/0xe60 [ 381.573939][ T6900] ? __neigh_event_send+0xf70/0x1560 [ 381.573961][ T6900] ? __dev_queue_xmit+0x27b/0x3b50 [ 381.573975][ T6900] ? ret_from_fork_asm+0x1a/0x30 [ 381.574001][ T6900] ? __pfx___dev_queue_xmit+0x10/0x10 [ 381.574021][ T6900] ? __lock_acquire+0xab9/0xd20 [ 381.574051][ T6900] ? NF_HOOK+0x9e/0x3a0 [ 381.574066][ T6900] NF_HOOK+0x310/0x3a0 [ 381.574081][ T6900] ? __pfx_arp_xmit_finish+0x10/0x10 [ 381.574095][ T6900] ? NF_HOOK+0x9e/0x3a0 [ 381.574108][ T6900] ? __pfx_NF_HOOK+0x10/0x10 [ 381.574122][ T6900] ? arp_xmit+0x23/0x270 [ 381.574140][ T6900] arp_xmit+0x16c/0x270 [ 381.574153][ T6900] ? arp_xmit+0x23/0x270 [ 381.574167][ T6900] arp_solicit+0xc1d/0xe60 [ 381.574184][ T6900] ? arp_solicit+0x11a/0xe60 [ 381.574200][ T6900] ? __pfx_arp_solicit+0x10/0x10 [ 381.574219][ T6900] ? __neigh_event_send+0xf08/0x1560 [ 381.574238][ T6900] ? __pfx_arp_solicit+0x10/0x10 [ 381.574252][ T6900] __neigh_event_send+0xf70/0x1560 [ 381.574276][ T6900] neigh_resolve_output+0x198/0x750 [ 381.574295][ T6900] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 381.574311][ T6900] ? __lock_acquire+0xab9/0xd20 [ 381.574335][ T6900] ip_finish_output2+0xd40/0x1160 [ 381.574353][ T6900] ? ip_finish_output2+0x452/0x1160 [ 381.574368][ T6900] ? __pfx_ip_finish_output2+0x10/0x10 [ 381.574384][ T6900] ? ip_skb_dst_mtu+0x1a5/0xab0 [ 381.574397][ T6900] ? ip_skb_dst_mtu+0x866/0xab0 [ 381.574411][ T6900] ? ip_finish_output+0x33a/0x3f0 [ 381.574435][ T6900] ip_output+0x2a1/0x3c0 [ 381.574458][ T6900] ? ip_output+0x60/0x3c0 [ 381.574480][ T6900] iptunnel_xmit+0x592/0xa40 [ 381.574504][ T6900] ip_tunnel_xmit+0x1c41/0x2390 [ 381.574530][ T6900] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 381.574543][ T6900] ? gre_build_header+0x3fd/0xa40 [ 381.574570][ T6900] ? __pfx_gre_build_header+0x10/0x10 [ 381.574593][ T6900] ? iptunnel_handle_offloads+0x2fd/0x630 [ 381.574646][ T6900] gre_tap_xmit+0x590/0x7a0 [ 381.574673][ T6900] ? __pfx_gre_tap_xmit+0x10/0x10 [ 381.574694][ T6900] ? __lock_acquire+0xab9/0xd20 [ 381.574726][ T6900] dev_hard_start_xmit+0x2d7/0x830 [ 381.574769][ T6900] sch_direct_xmit+0x241/0x4b0 [ 381.574797][ T6900] ? __pfx_sch_direct_xmit+0x10/0x10 [ 381.574826][ T6900] __dev_queue_xmit+0x1857/0x3b50 [ 381.574845][ T6900] ? __dev_queue_xmit+0x27b/0x3b50 [ 381.574871][ T6900] ? __pfx___dev_queue_xmit+0x10/0x10 [ 381.574893][ T6900] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 381.574922][ T6900] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 381.574956][ T6900] ? __build_skb_around+0x257/0x3e0 [ 381.574984][ T6900] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 381.575006][ T6900] ? alb_send_lp_vid+0x139/0x510 [ 381.575026][ T6900] alb_send_lp_vid+0x324/0x510 [ 381.575043][ T6900] ? rcu_is_watching+0x15/0xb0 [ 381.575060][ T6900] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 381.575080][ T6900] ? __lock_acquire+0xab9/0xd20 [ 381.575106][ T6900] alb_send_learning_packets+0x10d/0x2c0 [ 381.575125][ T6900] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 381.575148][ T6900] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 381.575171][ T6900] bond_alb_monitor+0x3e4/0x1800 [ 381.575191][ T6900] ? bond_alb_monitor+0xf1/0x1800 [ 381.575207][ T6900] ? process_scheduled_works+0x9ef/0x17b0 [ 381.575222][ T6900] ? __pfx_bond_alb_monitor+0x10/0x10 [ 381.575239][ T6900] ? _raw_spin_unlock_irq+0x23/0x50 [ 381.575256][ T6900] ? process_scheduled_works+0x9ef/0x17b0 [ 381.575270][ T6900] ? process_scheduled_works+0x9ef/0x17b0 [ 381.575286][ T6900] process_scheduled_works+0xade/0x17b0 [ 381.575313][ T6900] ? __pfx_process_scheduled_works+0x10/0x10 [ 381.575335][ T6900] worker_thread+0x8a0/0xda0 [ 381.575361][ T6900] kthread+0x70e/0x8a0 [ 381.575381][ T6900] ? __pfx_worker_thread+0x10/0x10 [ 381.575396][ T6900] ? __pfx_kthread+0x10/0x10 [ 381.575415][ T6900] ? _raw_spin_unlock_irq+0x23/0x50 [ 381.575431][ T6900] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.575449][ T6900] ? __pfx_kthread+0x10/0x10 [ 381.575468][ T6900] ret_from_fork+0x3fc/0x770 [ 381.575485][ T6900] ? __pfx_ret_from_fork+0x10/0x10 [ 381.575503][ T6900] ? __switch_to_asm+0x39/0x70 [ 381.575523][ T6900] ? __switch_to_asm+0x33/0x70 [ 381.575542][ T6900] ? __pfx_kthread+0x10/0x10 [ 381.575561][ T6900] ret_from_fork_asm+0x1a/0x30 [ 381.575588][ T6900] [ 382.216227][T17139] macsec0: left promiscuous mode [ 382.242048][T17139] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 382.270493][T17139] veth0_macvtap: left allmulticast mode [ 382.278172][T17139] macvtap1: left allmulticast mode [ 382.286816][T17139] geneve2: left promiscuous mode [ 382.291885][T17139] geneve2: left allmulticast mode [ 382.315293][T17139] bond3: left promiscuous mode [ 382.320129][T17139] bond3: left allmulticast mode [ 382.328146][T17139] bridge3: left promiscuous mode [ 382.333850][T17139] bridge3: left allmulticast mode [ 382.347398][T17139] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 382.356637][T17139] hsr1: left allmulticast mode [ 382.361482][T17139] bond0: left allmulticast mode [ 382.373410][T17139] bond_slave_0: left allmulticast mode [ 382.380241][T17139] bridge_slave_1: left allmulticast mode [ 382.386348][T17139] batadv0: left allmulticast mode [ 382.400751][T17139] veth5: left promiscuous mode [ 382.410702][T17139] gretap2: left promiscuous mode [ 382.416103][T17139] gretap2: left allmulticast mode [ 382.441615][T17003] team0: Port device team_slave_0 added [ 382.456687][ T5926] lo speed is unknown, defaulting to 1000 [ 382.462489][ T5926] syz2: Port: 1 Link DOWN [ 382.467050][ T5926] lo speed is unknown, defaulting to 1000 [ 382.482460][T17003] team0: Port device team_slave_1 added [ 382.536200][ T6900] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.545352][ T6900] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 382.556806][ T6900] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.566569][ T6900] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 382.597006][ T6900] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.607225][ T6900] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 382.619346][T17003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.627262][T17003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.653449][T17003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.667224][ T6900] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.676323][ T6900] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 382.686271][T17003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.693768][T17003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.720324][T17003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.753218][T17003] hsr_slave_0: entered promiscuous mode [ 382.759448][T17003] hsr_slave_1: entered promiscuous mode [ 382.766092][T17003] debugfs: 'hsr0' already exists in 'hsr' [ 382.771843][T17003] Cannot create hsr debugfs directory [ 382.850269][T17003] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.904300][T17003] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.986131][T17003] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.038587][T17003] `: (slave netdevsim0): Releasing backup interface [ 383.046440][T17003] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.110569][T17003] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 383.119901][T17003] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 383.129492][T17003] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 383.138830][T17003] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 383.200977][T17003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.220067][T17003] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.230799][T10845] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.237931][T10845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.254039][T10845] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.261175][T10845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.404035][T17003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.437030][T17003] veth0_vlan: entered promiscuous mode [ 383.447509][T17003] veth1_vlan: entered promiscuous mode [ 383.470211][T17003] veth0_macvtap: entered promiscuous mode [ 383.478874][T17003] veth1_macvtap: entered promiscuous mode [ 383.484767][ T5875] Bluetooth: hci0: command 0x040f tx timeout [ 383.498560][T17003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.511549][T17003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.525815][T10845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.535861][T10845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.546138][T10845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.555773][T10845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.582158][T17003] ieee80211 phy40: Selected rate control algorithm 'minstrel_ht' [ 383.608058][ T7546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.609845][T17003] ieee80211 phy41: Selected rate control algorithm 'minstrel_ht' [ 383.625082][ T7546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.647514][ T7042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.656388][ T7042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.562780][ T5875] Bluetooth: hci0: command 0x040f tx timeout [ 387.632849][ T5875] Bluetooth: hci0: command 0x040f tx timeout