last executing test programs: 2.610808397s ago: executing program 0 (id=2785): r0 = socket$kcm(0x2, 0x2, 0x73) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) socket$kcm(0x2, 0x2, 0x73) 2.434780361s ago: executing program 0 (id=2787): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f9}, {0x8, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f9}, {0x8, 0x0, 0x6, 0x1}]}, 0x10) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) 2.203237201s ago: executing program 0 (id=2791): bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x14, 0x0, 0x0, @void, @value}, 0x20) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000003c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1, 0xffffffffffffffff}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@newqdisc={0x38, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.071241638s ago: executing program 2 (id=2794): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d1d0b90c8997e6917226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67a4cbb1280955e9a59cd8", 0xae}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be2518043", 0x7f}, {&(0x7f0000000700)="6a8fa35a5ac69c3f3504610b7a65154b8a319d412cae86d445126356a7ea73e2cc334fba45667941bdeaebee3915c7685d4a2c125a1898bb727147075b79a19e162ca01c17cdb0398d7303a2955433e8f9de6d144dddc2ca170b10d505c3eb024dcacee0c139b5a9044f1f3a0fd4e958406a6ba551007ed89e2312e678f38707c8f37e5c8fe3cb977b70", 0x8a}], 0x3}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b81db48f9ceb270e506af840503c6fbf20760e4cd8df9c220cd0728585229123d5c61507d00561b8f1a15e64fa2779be424fdeff46058eaee7acfc80b2ae9840e9ac1e33ac8378c98695a08bdb8f2a756b1704c036e3b0ff2d1e9d397a82e24debd371e6855b7dc2dea47d57a9dfbf4fb2ccb3f975c3851c6b5399ab80c4ba95604f70a69674cfe820d82fb06b243625a8a9e4ee52e7c2ec4d63241fb00efd1a485a36dfb4a7dd573c6584c4afc55b3ff0a93509fe41aa0e8892c95ccad3e04", 0xdc}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 2.070993522s ago: executing program 0 (id=2795): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d1d0b90c8997e6917226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67a4cbb1280955e9a59cd8", 0xae}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180", 0x7e}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b81db48f9ceb270e506af840503c6fbf20760e4cd8df9c220cd0728585229123d5c61507d00561b8f1a15e64fa2779be424fdeff46058eaee7acfc80b2ae9840e9ac1e33ac8378c98695a08bdb8f2a756b1", 0x6e}], 0x1}}], 0x2, 0x0) 1.773829834s ago: executing program 4 (id=2799): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x50, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x50}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x8000, @empty, 0x7ff}}, 0xf66, 0xd4, 0xffffffff, 0x8, 0x10, 0xb49, 0x8}, 0x9c) (async) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.679732071s ago: executing program 4 (id=2801): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0x10b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800003}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0001400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) socketpair(0xa, 0x5, 0xffffffff, &(0x7f0000000100)) socket$kcm(0x10, 0x2, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0x10b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800003}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x0) (async) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0001400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) socketpair(0xa, 0x5, 0xffffffff, &(0x7f0000000100)) (async) 1.494908628s ago: executing program 3 (id=2802): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) (async) r4 = accept4(r3, 0x0, 0x0, 0x80800) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000000c0)={0x3047, 0x6, 0x6, 0x6, 0x0, 0xa63, 0x8, 0x8}, 0x20) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}]}]}, 0x28}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000060000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r5, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mreq(r6, 0x29, 0x8, 0x0, 0x0) (async) syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x8}, @multicast1}, {{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r7, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @bcast, @default, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) (async) close(r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000004000000060000008000000000000000", @ANYRES32, @ANYBLOB="00000000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000017c0)={r8, &(0x7f0000001700), &(0x7f0000001780), 0x3}, 0x20) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r9}) socket$inet(0x2, 0x80000, 0x5) (async) ioctl$sock_netrom_SIOCADDRT(r10, 0x890b, &(0x7f00000000c0)={0x0, @bcast, @rose={'rose', 0x0}, 0xf303, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2, 0x8, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10}}, 0xc8}}, 0x0) 1.494720852s ago: executing program 4 (id=2803): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x206, 0x0, 0x0, 0x70, 0x72, 0x1, 0x3, 0x7, 0x0, 0xfffffff4, 'syz1\x00'}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) socket(0xa, 0x2400000001, 0x0) 1.374805541s ago: executing program 1 (id=2805): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000011c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0xc554}]}}}]}, 0x3c}, 0x1, 0xba01, 0x0, 0x44844}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000180)={r1, 0x8, 0x1, "beb92bcdc9edac938f76923d83fcfb2d4c7dc8067872ef9fca1211ac7d6d0c30526c47686516961a835572dd39095c8600345702eb2177759908960b5e85070cc4194dcef9"}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc900}, 0x0) 1.239062127s ago: executing program 3 (id=2806): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) bind$bt_hci(r2, &(0x7f00000002c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) close(r2) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x60, r4, 0x1, 0xfffffffd, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2081}}, {0x8, 0x6, r3}}}]}}]}, 0x60}, 0x1, 0xf000, 0x0, 0x24004800}, 0x28044) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711053000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.214992353s ago: executing program 4 (id=2807): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4}}}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000034001680300001802c000c"], 0x5c}}, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async, rerun: 64) recvmmsg(r3, &(0x7f00000078c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/124, 0x7c}], 0x1}, 0x100}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x0, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x20, 0x3, 0x8, 0x5, 0x0, 0x0, {0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xffffffffffffff40}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) 1.196404247s ago: executing program 1 (id=2808): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e0000000345e1898ed000005d4ead9be4e98600000010090c3fd8866cde7142baa27ae40c19549d1c103bf211a58b2a66b2f6df31be14", @ANYRES32, @ANYBLOB="fb6e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000001000000050000000d00"/28], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x20, &(0x7f0000000980)=@raw=[@map_fd={0x18, 0x9}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff7}}], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x3b, &(0x7f0000000400)=""/59, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x5, 0x200, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x0, @void, @value}, 0x94) sendto(0xffffffffffffffff, &(0x7f0000001340)="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", 0x1000, 0x4040815, &(0x7f0000000080)=@xdp={0x2c, 0x8, 0x0, 0x3a}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)={@map, 0xffffffffffffffff, 0x26, 0x0, 0x0, @void, @value=r1}, 0x20) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="02001000bf389654545421004127ef8b4ea032ed1de9bddea6c1fb1c17cfa9bf9aabcde20736a804125161f755d4650147bf3e8adca2fac9c8a3e3260ab74a887ff0fce0b1000000003f5dd6475a88c174298ba66d726055"], 0x26}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x311842, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth0_to_hsr\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e25, 0xfffffffc, @local, 0x567c}, 0x1c) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)={0x2c, r6, 0x603, 0x0, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x5e}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}]}, 0x2c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x10) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000002eeed88696", @ANYRES32=r4], 0x20}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r12, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) ioctl$sock_SIOCGPGRP(r12, 0x8904, &(0x7f0000000900)=0x0) ioctl$sock_SIOCSPGRP(r12, 0x8902, &(0x7f0000000940)=r13) 1.131086581s ago: executing program 2 (id=2809): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x2, 0x800, 0x7, {0x77359400}, {0x0, 0x2710}, {0x1, 0x1, 0x0, 0x1}, 0x1, @canfd={{}, 0x34, 0x1, 0x0, 0x0, "996744bcec535f83687bb7eff536ef72b05ed123636b84e86e01c39ad77b65ab792c2769bbe30cadb61da16587b0d6c757de07ef88c49ab49179b5be54220304"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r3) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x88, r6, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:mount_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_team\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:power_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x200000c0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000004000000140005000303000000000000005dc00000000001080002000500000014000600"], 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x4040000) write(r4, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x40, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x20, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "67f01a05647aca00"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x28}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x2800a000}, 0x8010) 1.130597412s ago: executing program 0 (id=2810): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FIOCLEX(r1, 0x5451) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000280)=0x2, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x30, 0x11, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {0x0, 0xe22, 0x30, 0x0, @wg=@data={0x4, 0xe, 0xfaac, "dce0b827723a2929fcb986facfba7af71c14cfe3cdd179ab"}}}}}}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x4000) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x251b, 0x0, &(0x7f0000000040)) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x2000000, 0x0, 0x54}, 0x9c) 1.062515518s ago: executing program 3 (id=2811): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, 0x2a, 0xb, 0x0, 0x25dfdbff, {0x2}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x10004}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x28}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r12}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4001000}, 0x24000000) 853.649112ms ago: executing program 2 (id=2812): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8084) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="240000002c000100000000003000000004000080"], 0x24}], 0x1}, 0x0) 762.817301ms ago: executing program 1 (id=2813): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x420000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r0, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7d}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "2af1201ac99014d7b609c02db7"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "aeb698caf9867730e220cf8f1b"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x41) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, r3, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x40800}, 0x24000080) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000440)={r1}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x58, &(0x7f00000004c0)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=@ipv6_getaddr={0x74, 0x16, 0x4, 0x70bd2b, 0x25dfdbfd, {0xa, 0x80, 0x2, 0x0, r5}, [@IFA_CACHEINFO={0x14, 0x6, {0x8, 0x9a, 0x1, 0x5}}, @IFA_FLAGS={0x8, 0x8, 0x400}, @IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_ADDRESS={0x14, 0x1, @private2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x8040}, 0x40) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0xf503, 0x0) (async) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0xf503, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'veth0_to_team\x00', 0x0}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000a40)={&(0x7f0000000700), 0xc, &(0x7f0000000a00)={&(0x7f0000000800)={0x1e8, r7, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x10}, 0x20040) read$alg(r4, &(0x7f0000000a80), 0x0) (async) read$alg(r4, &(0x7f0000000a80), 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) connect$netlink(r10, &(0x7f0000000ac0), 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ABORT_SCAN(r11, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x2c}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x8010) socket$can_j1939(0x1d, 0x2, 0x7) (async) r12 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_int(r12, 0x1, 0x6, &(0x7f0000000c00)=0x9, 0x4) openat$cgroup(0xffffffffffffffff, &(0x7f0000000c40)='syz1\x00', 0x200002, 0x0) (async) r13 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000c40)='syz1\x00', 0x200002, 0x0) r14 = openat$cgroup_ro(r13, &(0x7f0000000c80)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000000cc0), &(0x7f0000000d00)=0x30) (async) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000000cc0), &(0x7f0000000d00)=0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000e80)={r14, &(0x7f0000000d80)="5435d722da403db3d051414f4ca80737a9b2daf174ca32aa0b05f9493f31253cc6ea92248c7c2f3a2750460599663fb41845b57a95a92198ee73c25ec730b0a2538d6ea894faab664d99e211822fb8e1faca9e5c897688b5a7c3f1955043921abe6f0b091087c64bc05122069e4d6d0ee358fdc0a55dea0984ae108a248a989d3da90b9907be5db406b9ee0b39c2a648", &(0x7f0000000e40)=""/64}, 0x20) sendmsg$netlink(r4, &(0x7f0000001d40)={&(0x7f0000000ec0)=@proc={0x10, 0x0, 0x25dfdbff, 0x80}, 0xc, &(0x7f0000001cc0)=[{&(0x7f0000000f00)={0x174, 0x3d, 0x4, 0x70bd26, 0x25dfdbff, "", [@nested={0x103, 0x2, 0x0, 0x1, [@typed={0x8, 0x4e, 0x0, 0x0, @uid=0xee00}, @generic="377b2d37c82a1b8f57481de83e0349d3cc7a0e9a4c152dead6164fe781a9f37d31f584da9948283aaeb2c8e94dfb9e1ff212a2654a34eea0e4867e1be54d3e43f198f78472e1943dd962ed8f37aac056180821e9381fd19831a7039cfe9ab1fe63ad32d17b20ecee5ecbc38dc032a433cc946372645f579c4df85d37f0836acedb109ba5f3e5a99d301176f331792050cdec81924eb890e018c46540e12062880889d5158025a244e0d74692f7e30b13eb2c22e3e98c2cc77f818e0732c9d4898f571627fbe708b7de1db21650961ce3fe3507324a010e172024f4bdde3a3deb5bda797bcd4a677008af763866fa0902a59c1a290b5db9"]}, @nested={0x54, 0x61, 0x0, 0x1, [@generic="66ffcc15d4ea849287af153753bc25e4e100ce44b16566f57ad22fa2c26420e209f2d9cef9e23f8ccc4f1958c59489a71c49ef90140b8d574be72b011ed2137a", @typed={0x8, 0x7, 0x0, 0x0, @fd=r10}, @typed={0x8, 0x10e, 0x0, 0x0, @u32=0x5}]}, @typed={0xc, 0x78, 0x0, 0x0, @u64=0x6}]}, 0x174}, {&(0x7f0000001080)={0x1ac, 0x11, 0x200, 0x70bd27, 0x25dfdbfb, "", [@nested={0x8f, 0x112, 0x0, 0x1, [@generic="4fc0585fec476dfb6b1a0c04ce611f6de23c61bd1aac8bce04817c6676", @nested={0x4, 0xe}, @nested={0x4, 0x6}, @generic="1acaf4895a92cae73fb723b92cb31b9240f6d966143c221588e3b1ad252f436df8fc011f85a029994e6ace09d63e250754c22648620daf70405e91e3f1f7def7cd5743005ffc875b03b75166003684ac8b9e56a1609eeef04f15", @typed={0xc, 0x10c, 0x0, 0x0, @u64=0x401}]}, @generic="72761381f0b6c6094181a695032b16022bb84862d2dbb56e655b3dbc9d751301dc30dcaf6bd48db3491cc03a03edce2f9cf8c38d942301ee795192398d8a5e8931bdd07b1ec986410bc8ad8d6a27a56e9b520c651ce379e4d751403addcad51f809b3415ecd114893dc5525c", @generic="46d1a99dec8825bb507e38a6ca21f0bfdf576367f3e1c5cea0999430c08299384b6536463be9493ea6fb722b91f38a20abe8b7751ba84b5bc8577c89fa0dd47d1b4980ae7b9461c45a69baf73f1c124e80e32924036e2d5661cdec5c110808fa91e31a3c6f5df5b7271e7c44fa428efadbcc8c4b33a9fd967323dc4624de71c197e678cf1d2de9566157c544e84668c48aead66929a009d5892f98feb6"]}, 0x1ac}, {&(0x7f0000001240)={0x4a4, 0x1f, 0x1, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x8, 0x14, 0x0, 0x0, @uid}, @generic="8fe3f543dc6d361a2bec87761ae289c75cbdfffbf18d04abb0b2040bdb8aed95baf375b6441af9904896370964a18584a378c53cef5a1ace78358b8b2e6a0d6e37fc8b82ec10d00b190a27ad43f260", @typed={0x8, 0x149, 0x0, 0x0, @pid}, @nested={0xbd, 0xca, 0x0, 0x1, [@nested={0x4, 0xe9}, @generic="5ac89d1d8564a58a797379f234557e73df8691203c7810a00566c018dcbd3e54fa9da8c4cf55e7defe913c4d96dd08f94071b2b8714d8c0c3f4372391205ea732bb460c08c0a5b09523a574057396e3ddc07901a139b93461232971423030864091f5831703bdd71f5a2b794d61917f8285ea3e59944ff32eb82c4dd3331236dba4f15763587f73969b5183bd44ff89f61a644e4009ed1809abb4d1eefdcaf2e179e79469bd2292f98b56a57e941684d28180cb7ba"]}, @generic="8e37b9cb4b830538019a4912379bc62a69acac0706bfe9155f27dde956c512c3f7d97e998432cd1cdf456cabfd2c9a751f7e39e0f6167bdd7350f32a58f87322943f6a752ce2849b1322245015d80446006ae3703da51aa8f580ec588650471412866416000c17d1f6", @nested={0x21b, 0xaf, 0x0, 0x1, [@nested={0x4, 0x103}, @generic="595994c920d716cdbd8cfb391fc8216e049ddbf40a4407857a3444e9b00dca37a99b242cb44a7745d7", @nested={0x4, 0x127}, @generic="03fb24bebb6e876e8b15db701d3ef569eaf68a5e69622d1b41e31ca2781a69d67fdaff4d9eb098423f3e48d3d206f7dcb9949714380193d7504e6d355b08d8b9f1cab3c4103f70e2743a1d6eaae51a65705bb0574fc6d69b8f68ecd136b8921bbfecc063279647e708b8a9f709cc98df3173a0aeb6c0df9aa280f911056a20fa4cafa6a6a229abf91e2879cb2fece502f105cb080be7a00e3c8e1b248700ac3546252197c69d1551c85f61cee318fbc9d384b563b8e9e4093c58e41ea06f3dae500a323c39ccd48a32710662a353f5f0d1d008a6e76cd02880d371ac9f08be6b0f37135fc6d31217ef35da8110bf9fcf2397", @typed={0x8, 0x144, 0x0, 0x0, @u32=0x7}, @generic="46f01057fce23672cfbcf8e89bc8ca79a5996c18abd9acb879177e661ba268d7eb75a1708e7bf5228ceb451e373f6709a9a803d3997f9681420fe3ff6dd4a733a77e13c56f6571703dc012f711233aefa28135139908113785a30e790856f5f55782b1585f6c9c1df4a473e2303621475a6000fc00438cf9efa92e3f2415743e7f375a9be8c06fd6c13481be73924b78d0d1c261637511bb337c14fe0fa9c0954d31afa377cbc5d5f0d384b16e47bf6aaafd39dc7b310b0dd6e9d8e5de33ab934c0eaff7cc333162b725a10aca2f509ee836f96fff51f03f42996a70cd4420fcd13f64434a1413dc21cbeb42"]}, @generic="ab175ef0a0bdf24d64b9781818a602168bce52c3213490ab3441cfcd5059a040db5364b86d3dc2029a14302d430fea34c3c6723fa3cc908fe43cf317db87a00ce4a60d696f00669371bf527b29181773dfac6ebdac4accb955ba98e109f73e98badd1f24f5d96e88b316f235e1f65d29f0c02974792e767b0cf97092b45e57849ef33c7c0e14385e7af2bd3083bff7f3a23f3b48175fffe786e7d3bb2aac3f130eabe955f5cbdf99ed738927575bb841b4369b81e4bca14ee18459bf01105b24cd3e0c639cfc8e82ef439d2eaae701f1e54194242915d96fc80959", @nested={0x14, 0x80, 0x0, 0x1, [@nested={0x4, 0x124}, @nested={0x4, 0x10e}, @nested={0x4, 0x14d}, @nested={0x4, 0x74}]}]}, 0x4a4}, {&(0x7f00000017c0)={0x4cc, 0x11, 0x20, 0x70bd2c, 0x25dfdbff, "", [@typed={0x2e, 0x48, 0x0, 0x0, @binary="7bba5d439ae4ec42d54efaf4730676a25ab324d3dbe7eb7fc0066394570c25b9539eb28f473e385772f6"}, @nested={0x82, 0xb, 0x0, 0x1, [@generic="debdaf8690ca429b9ad62df345f4e1289cd869a0d4f9f42c6e329e9a007d7cb132243a2c67fbc63bbfd2c9596fe3e6f3bb7befd22b53d87d105ac6338cf191ff96c416f9dded544d3fadb9695faf", @typed={0x8, 0xf4, 0x0, 0x0, @uid}, @typed={0xc, 0x9c, 0x0, 0x0, @u64=0xc918}, @typed={0x8, 0xa5, 0x0, 0x0, @pid}, @nested={0x4, 0x70}, @typed={0x6, 0xbd, 0x0, 0x0, @str='}\x00'}, @nested={0x4, 0x50}, @typed={0x4, 0xca}]}, @generic="a5ddcd25bfdbad6fb327d0de6d04536972c802a63787fa03c76e8fc2a2546f2d935ac8307ba17b22cd9abb5391b5db3da3bd822a30d53f77600aadb89f0196dd32052e713dcf2d5c3d52a047a735f96b1c9613c49e7ed4c4722d6ae631f8a2063434bb3f08843577ba7423ceae7dc2b9db30e56ca9397d8fae0cdd30", @nested={0x38a, 0x31, 0x0, 0x1, [@nested={0x4, 0x22}, @generic="45ef83a8497afd74a75ab0e607b37da059c221bad862a2e878c090167065d59f7dc4806a084789be2bd121290995c9ab5da41c9e24109457035035cdcf98a60536b82c744d4b15f4889155b340906672073293948b8e6786f0367c447cd4d68546589e59fd311817b782d10e91479ddb0ff2fa29d2ee13ebaa7a414183ff7bcae55dfd09283f430ef0a5943b352b15965b2a8389058deee35bd067bf893d2511bb9c5fda4f4d495518962b99c780780c7d1fa4dbb619bbbdd18c7be9815df20b910695db521590f052d7ee7331c28e8ccaf051eca214597b5a9df14e3acbc99b2b8de642e4fe4a3f66694953f0ac2124c7954511e7308305d25c6feb4853be", @generic="26468b2ae769bf2600fcf7f6ef01e539aafe971ca6514d256a0bad3a3f6f315858e5d1d23f903cc6003dcfdac48567689fcf1f61d9973b587ccaab9a35cb107d1fdc142a589646e9d656ebe757adb423d7f931afe4c4bc19a33d5147fbb50a9ab39a7e3252f17a85c32578cc7016acf15fd587978fab2d7def694abab6fe5a7f6b23bc380d228d5220c40e196d2a9ddac9e6cbf11e83ecdda1edd4cf1259707fdf1e29f84e0dc8262f1c6ae6e821397b4c640ff4b72a53c1eed85ad58e399e7f377219dc97c2875351f78e5e", @generic="6db4048f7ae66f5e572a58e5fac434c352eb55b411a41c1daf0c1ee29593f916cd09090f7eb99dd01b4586f6ae2f4b559cd4bd72f1dd3ba4d3f24c1d4d8230753bf98283ddcb2e10f5206b198e0ab39f640e6f70c5878c8246c8713fe1f57e77b68dd0a045f60d3fba89ba18ffbf312ea0e52f7e2b3e0a98f4013588658a50be32ce1c5b822343d8701773d709e79d9c37cc21732f248c1e6c00aaf0cee855772b558cfc201acab20b9b348a4e6ceddb2d5c671d1155ba7d4ea6f8ff146613a3771d9033508f1172c31ff0", @typed={0x8, 0x61, 0x0, 0x0, @u32=0x5}, @nested={0x4, 0x8b}, @typed={0xdb, 0x11d, 0x0, 0x0, @binary="d54996280c6fac25cf7f20f7b19d2b99a80a612dc8413dc995d4f70a291075c877dd44d289d615f2926083fb90205f46dbf0e3a2f4ffec856f955c07a64f9576a7585659d3d234fbb50d066fbbad6bfa778bd72eaeaec81fbd74aa105914370a174c9814cd1e05ff68522ea71ad4a4f150b084ca40e22a7394033d097d210c5ef872ceeb845c77880d79673a2486c673b2cc5f0130106607e04989479df61ce579594742ebe369d96d0f69c60accd74735643d1a8072b18978ade5303d1aadd010265f3bb05791b3486a0f4fd4d3567bfc7bc8f6a89112"}, @nested={0x4, 0x2a}]}]}, 0x4cc}], 0x4, &(0x7f0000001d00)=[@cred={{0x1c}}], 0x20, 0x40800}, 0x10000000) 723.580592ms ago: executing program 3 (id=2814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x80800) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000000c0)={r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000a000000080001"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a01030000000000000000050000000900010073797a30000000000900030073797a320000000008000a4000000003280004800800024000000012080001400000000014000300776c616e31000000000000000000000014000000110001"], 0xa4}}, 0x0) shutdown(r1, 0x1) 666.399234ms ago: executing program 2 (id=2815): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xf5, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 32) r3 = accept4(r1, &(0x7f0000000080)=@hci, &(0x7f0000000000)=0x80, 0x800) (rerun: 32) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f00000001c0)={0x9}, 0x4) 527.024244ms ago: executing program 1 (id=2816): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000080000000400"/20, @ANYRES32=0x1, @ANYBLOB="000000e8ffffffffffffff000000000000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000000100"/28], 0x48) ioctl$SIOCPNENABLEPIPE(r0, 0x89e0, 0x500) socket$phonet_pipe(0x23, 0x5, 0x2) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000080000000400"/20, @ANYRES32=0x1, @ANYBLOB="000000e8ffffffffffffff000000000000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000000100"/28], 0x48) (async) ioctl$SIOCPNENABLEPIPE(r0, 0x89e0, 0x500) (async) 523.341829ms ago: executing program 3 (id=2817): r0 = socket(0x2b, 0x801, 0x1) mmap(&(0x7f000087d000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x20}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x88, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, {0x0, 0x0, 0x0, 0x81}}}, 0xb8}}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f000087cf79)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x0, 0x0, "0000000000000099010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be4f28860000000000000000ffe300"}, 0xd8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x81}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) socket(0x2b, 0x801, 0x1) (async) mmap(&(0x7f000087d000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x20}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x88, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, {0x0, 0x0, 0x0, 0x81}}}, 0xb8}}, 0x0) (async) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f000087cf79)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x0, 0x0, "0000000000000099010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be4f28860000000000000000ffe300"}, 0xd8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x81}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) (async) 470.173479ms ago: executing program 1 (id=2818): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x80800) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6e617481e6ea5e6faf259800000000000000000000000000000000000000000004"], &(0x7f0000001740)=0x2c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r3, r5, 0x4, 0x0, 0x0, @void, @value}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r6, r7, 0x26, 0x0, 0x0, @void, @value}, 0x10) r8 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r6, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r8}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r3, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r8}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r2}, 0x20) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, 0x19, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x8800) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x35288}, [@IFLA_TARGET_NETNSID={0x0, 0x2e, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) 355.200968ms ago: executing program 2 (id=2819): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r1) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7ff}]}, 0x1c}}, 0x2008004) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x31}, 0x7f}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @empty, @local, {[], {0x4e20, 0xe22, 0x8}}}}}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'dummy0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xff}}}) 298.628066ms ago: executing program 3 (id=2820): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="280000002c00010000000000000000660400008014001600ff"], 0x28}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x18, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x1a, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000900)={'ip6gre0\x00', &(0x7f0000000880)={'syztnl0\x00', 0x0, 0x2f, 0xce, 0x5, 0x178b, 0x2a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x80, 0x10, 0x1, 0x1}}) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {}, {0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000940)={'bridge_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) r12 = socket(0x11, 0x2, 0x2000004) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000580)={'dummy0\x00', 0x0}) bind$packet(r12, &(0x7f0000000080)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x2, 0x81, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x40, 0x80, 0x4, 0x1ff}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000ac0)={'wg2\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000b00)={@private2, 0x0}, &(0x7f0000000b40)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000c00)={'syztnl1\x00', &(0x7f0000000b80)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0xc, 0x8000, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x10, 0x7, 0x3, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000c40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000d00)={'tunl0\x00', &(0x7f0000000c80)={'gretap0\x00', 0x0, 0x700, 0x7800, 0xcb60, 0x5, {{0x11, 0x4, 0x3, 0x9, 0x44, 0x65, 0x0, 0x8, 0x4, 0x0, @multicast2, @private=0xa010101, {[@timestamp={0x44, 0x8, 0xbc, 0x0, 0x5, [0x3]}, @cipso={0x86, 0x12, 0x1, [{0x6, 0x4, '\bI'}, {0x0, 0x8, "6f9310a42c56"}]}, @timestamp_prespec={0x44, 0x14, 0xcb, 0x3, 0xd, [{@empty, 0x9}, {@private=0xa010100, 0x17180}]}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000d40)={0x0, @empty, @local}, &(0x7f0000000d80)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2084120}, 0xc, &(0x7f0000001bc0)={&(0x7f0000000dc0)={0xdcc, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xf0}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x40, 0x1, @lb_hash_stats={{{}, {}, {0x0, 0x4, 0x4}}}}]}}, {{0x8, 0x1, r6}, {0x1b0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xab5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r10}, {0x26c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x18}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x72bb}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r15}, {0x218, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r17}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r18}}}]}}, {{0x8, 0x1, r19}, {0x1f0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r20}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0xdcc}, 0x1, 0x0, 0x0, 0x881}, 0x0) 272.737634ms ago: executing program 2 (id=2821): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711227000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x7ff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@newsa={0xf0, 0x10, 0x400, 0x70bd2d, 0x25dfdbfc, {{@in=@multicast1, @in6=@empty, 0x4e21, 0x0, 0x4e24, 0x9, 0x2, 0x20, 0xa0, 0x62}, {@in=@loopback, 0x4d6, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x4, 0x38cf, 0x81, 0x100000000, 0x2, 0x7, 0x0, 0xbe}, {0x8, 0x3, 0x5, 0xfffffffffffffff9}, {0x8001, 0x8, 0x32fb}, 0x70bd29, 0x3507, 0xa, 0x3, 0x8, 0x4}}, 0xf0}, 0x1, 0x0, 0x0, 0xc001}, 0x4008011) sendmmsg$alg(r5, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0xc024}], 0x1, 0x4000) recvmsg$can_j1939(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000600)=""/183, 0xb7}], 0x1}, 0x41) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r6, &(0x7f00000001c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @empty}}}, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r8, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x13, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5}]}]}]}, 0x38}}, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x420}, {r0, 0xc080}, {r0, 0x4000}, {r1, 0x8040}, {r6, 0x220}, {r0, 0x2000}, {r0, 0x200}], 0x7, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x5]}, 0x8) 264.044231ms ago: executing program 1 (id=2822): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x40, 0x0, {0x0, 0x48, 0x0, r0, 0x21eae}}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r5, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000000008000500070000000a0018"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) listen(r2, 0x401) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 147.099203ms ago: executing program 4 (id=2823): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000040)=0x4, 0x4) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001340)={r2, &(0x7f00000012c0), 0x0}, 0x20) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000380)="100081005496042053a0a168acd7306b34d8175172cce2a25aa051bd53e883874e8acdb3abdcec1dcc2ad9099b244f177027d487f7d0d3ae56c6f784ac71cb77f4e73df804b6a46136d4b4e552288b28243665683c3e9b018cc6e8f0a90e2b15e0195fc5a6578ccfaa4acece6fe9c5b6e4e59de866f0a3a7cc6ce1f70b8f", 0x7e, 0x0, &(0x7f0000000340)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000560000009500"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r1], 0x8c}}, 0x0) 105.816706ms ago: executing program 0 (id=2824): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b7", 0x77}, {&(0x7f0000000800)="6a8fa35a5ac69c3f3504610b7a65154b8a319d412cae86d445126356a7ea73e2cc685d4a2c125a1898bb727147075b79a19e162ca01c17cdb0398d7303a2955433e8f9de6d144dddc2ca170b10d5", 0x4e}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000d000000000005000c"], 0x44}}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) (async) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 0s ago: executing program 4 (id=2825): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8084) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="240000002c000100000000003f00000004000080"], 0x24}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ype 1 has an invalid length. [ 128.399932][ T8016] netlink: 'syz.0.614': attribute type 8 has an invalid length. [ 128.415353][ T8016] netlink: 134664 bytes leftover after parsing attributes in process `syz.0.614'. [ 128.775416][ T8047] xt_TPROXY: Can be used only with -p tcp or -p udp [ 128.978161][ T8054] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 129.005444][ T8055] netlink: 'syz.0.625': attribute type 8 has an invalid length. [ 129.031557][ T8054] bond2: entered promiscuous mode [ 129.037214][ T8054] bond2: entered allmulticast mode [ 129.042733][ T8054] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.262087][ T8062] netlink: 'syz.4.629': attribute type 6 has an invalid length. [ 129.270177][ T5884] tipc: Node number set to 10398378 [ 129.447754][ T8072] netlink: 'syz.0.633': attribute type 4 has an invalid length. [ 129.616116][ T8082] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 129.623502][ T8082] IPv6: NLM_F_CREATE should be set when creating new route [ 129.661046][ T8082] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 129.825573][ T8094] netlink: 'syz.1.641': attribute type 7 has an invalid length. [ 129.880138][ T8098] tipc: Enabled bearer , priority 10 [ 130.535048][ T5884] hid-generic 0005:7FFF:0008.0001: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 130.802892][ T8133] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 131.322992][ T8159] netlink: 'syz.3.666': attribute type 32 has an invalid length. [ 131.938173][ T8186] __nla_validate_parse: 13 callbacks suppressed [ 131.938197][ T8186] netlink: 16 bytes leftover after parsing attributes in process `syz.0.674'. [ 132.058627][ T8192] netlink: 28 bytes leftover after parsing attributes in process `syz.4.677'. [ 132.124972][ T8193] x_tables: duplicate underflow at hook 1 [ 132.566037][ T8205] netlink: 40 bytes leftover after parsing attributes in process `syz.3.681'. [ 132.614489][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.683'. [ 132.880333][ T8219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.687'. [ 132.906699][ T8219] netlink: 56 bytes leftover after parsing attributes in process `syz.0.687'. [ 132.915651][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.687'. [ 133.048685][ T8223] sit0: entered promiscuous mode [ 133.102003][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.102679][ T8223] netlink: 'syz.2.689': attribute type 1 has an invalid length. [ 133.116640][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.136749][ T8223] netlink: 1 bytes leftover after parsing attributes in process `syz.2.689'. [ 133.744166][ T8266] netlink: 'syz.3.704': attribute type 1 has an invalid length. [ 133.929902][ T8276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.932146][ T8268] bond2: entered allmulticast mode [ 134.009547][ T8266] netlink: 28 bytes leftover after parsing attributes in process `syz.3.704'. [ 134.136283][ T8284] Bluetooth: MGMT ver 1.23 [ 134.404805][ T8295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.715'. [ 134.805321][ T8315] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 134.894874][ T8315] team1: entered promiscuous mode [ 134.900743][ T8315] 8021q: adding VLAN 0 to HW filter on device team1 [ 135.063005][ T8323] 0ªĂøÂFNđ¡: left allmulticast mode [ 135.093138][ T8323] sit1: left allmulticast mode [ 135.139486][ T8328] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.241838][ T8328] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.460575][ T8328] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.635741][ T8328] team0: Port device netdevsim0 removed [ 135.653248][ T8328] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.654811][ T8] IPVS: starting estimator thread 0... [ 135.773570][ T8351] IPVS: using max 18 ests per chain, 43200 per kthread [ 135.892256][ T8365] sctp: [Deprecated]: syz.4.735 (pid 8365) Use of struct sctp_assoc_value in delayed_ack socket option. [ 135.892256][ T8365] Use struct sctp_sack_info instead [ 135.921766][ T8328] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.943473][ T8328] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.992102][ T8328] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.038260][ T8328] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.207647][ T8383] xt_TCPMSS: Only works on TCP SYN packets [ 136.328711][ T8379] netlink: 'syz.4.740': attribute type 21 has an invalid length. [ 136.337563][ T8379] netlink: 'syz.4.740': attribute type 5 has an invalid length. [ 136.680628][ T8412] dccp_invalid_packet: P.Data Offset(100) too large [ 136.712540][ T8412] netlink: 'syz.4.746': attribute type 21 has an invalid length. [ 137.209628][ T8438] netlink: 'syz.0.754': attribute type 3 has an invalid length. [ 137.237963][ T8438] __nla_validate_parse: 19 callbacks suppressed [ 137.237985][ T8438] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.754'. [ 137.460870][ T8447] netlink: 72 bytes leftover after parsing attributes in process `syz.0.759'. [ 137.478122][ T8447] netlink: 72 bytes leftover after parsing attributes in process `syz.0.759'. [ 137.713678][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.762'. [ 138.042133][ T8480] netlink: 'syz.2.770': attribute type 19 has an invalid length. [ 138.053831][ T8480] netlink: 'syz.2.770': attribute type 1 has an invalid length. [ 138.064738][ T8480] netlink: 'syz.2.770': attribute type 19 has an invalid length. [ 138.073701][ T8482] netlink: 'syz.2.770': attribute type 1 has an invalid length. [ 138.305577][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 138.369891][ T8497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.778'. [ 138.419084][ T8499] netlink: 'syz.3.778': attribute type 12 has an invalid length. [ 138.432085][ T8499] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 139.077979][ T8535] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.783'. [ 139.528235][ T8561] netlink: 'syz.4.795': attribute type 1 has an invalid length. [ 139.890880][ T8576] netlink: 16 bytes leftover after parsing attributes in process `syz.2.799'. [ 140.116668][ T8581] hsr_slave_0: left promiscuous mode [ 140.162318][ T8581] hsr_slave_1: left promiscuous mode [ 140.272952][ T8590] netlink: 'syz.4.807': attribute type 9 has an invalid length. [ 140.524032][ T8601] tipc: Invalid UDP bearer configuration [ 140.524077][ T8601] tipc: Enabling of bearer rejected, failed to enable media [ 140.539327][ T8603] netlink: 'syz.4.811': attribute type 1 has an invalid length. [ 140.605718][ T8608] ip6tnl1: entered promiscuous mode [ 140.613436][ T8608] ip6tnl1: entered allmulticast mode [ 140.851415][ T8628] pim6reg1: entered promiscuous mode [ 140.857690][ T8628] pim6reg1: entered allmulticast mode [ 140.888970][ T8619] netlink: 16 bytes leftover after parsing attributes in process `syz.1.815'. [ 140.931381][ T8611] "syz.2.813" (8611) uses obsolete ecb(arc4) skcipher [ 141.136845][ T8639] syzkaller0: entered promiscuous mode [ 141.142742][ T8639] syzkaller0: entered allmulticast mode [ 141.267512][ T8645] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20002 [ 141.337395][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.826'. [ 141.373253][ T8650] netlink: 24 bytes leftover after parsing attributes in process `syz.1.826'. [ 141.458951][ T8645] IPVS: set_ctl: invalid protocol: 51 172.20.20.63:20003 [ 141.487183][ T8642] xt_CONNSECMARK: invalid mode: 0 [ 142.506405][ T8662] delete_channel: no stack [ 143.704360][ T8708] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 143.731871][ T8704] netlink: 'syz.3.838': attribute type 29 has an invalid length. [ 143.740558][ T8702] netlink: 'syz.3.838': attribute type 29 has an invalid length. [ 143.752054][ T8702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.838'. [ 144.184551][ T8730] Bluetooth: MGMT ver 1.23 [ 144.253812][ T8715] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 144.564003][ T8752] FAULT_INJECTION: forcing a failure. [ 144.564003][ T8752] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 144.578234][ T8752] CPU: 0 UID: 0 PID: 8752 Comm: syz.2.853 Not tainted 6.13.0-rc2-syzkaller-00131-g429fde2d81bc #0 [ 144.588988][ T8752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 144.599196][ T8752] Call Trace: [ 144.602504][ T8752] [ 144.605556][ T8752] dump_stack_lvl+0x241/0x360 [ 144.610327][ T8752] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.615581][ T8752] ? __pfx__printk+0x10/0x10 [ 144.620239][ T8752] should_fail_ex+0x3b0/0x4e0 [ 144.624988][ T8752] _copy_from_user+0x2f/0xc0 [ 144.629632][ T8752] move_addr_to_kernel+0x82/0x150 [ 144.634708][ T8752] __sys_sendto+0x268/0x4c0 [ 144.639257][ T8752] ? __pfx___sys_sendto+0x10/0x10 [ 144.644332][ T8752] ? __mutex_unlock_slowpath+0x21e/0x790 [ 144.650031][ T8752] ? __fget_files+0x2a/0x410 [ 144.654680][ T8752] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 144.660712][ T8752] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 144.667179][ T8752] __x64_sys_sendto+0xde/0x100 [ 144.672006][ T8752] do_syscall_64+0xf3/0x230 [ 144.676659][ T8752] ? clear_bhb_loop+0x35/0x90 [ 144.681386][ T8752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.687328][ T8752] RIP: 0033:0x7f6ca2585d19 [ 144.691784][ T8752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.711413][ T8752] RSP: 002b:00007f6ca335c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 144.719860][ T8752] RAX: ffffffffffffffda RBX: 00007f6ca2775fa0 RCX: 00007f6ca2585d19 [ 144.727844][ T8752] RDX: 000000000000fee4 RSI: 0000000020847fff RDI: 0000000000000003 [ 144.735822][ T8752] RBP: 00007f6ca335c090 R08: 000000002005ffe4 R09: 000000000000001c [ 144.743804][ T8752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.751785][ T8752] R13: 0000000000000000 R14: 00007f6ca2775fa0 R15: 00007ffcb52162a8 [ 144.759794][ T8752] [ 145.059971][ T8772] netlink: 'syz.2.859': attribute type 2 has an invalid length. [ 145.069637][ T8771] netlink: 24 bytes leftover after parsing attributes in process `syz.1.860'. [ 145.601262][ T8803] netlink: 20 bytes leftover after parsing attributes in process `syz.3.870'. [ 145.700224][ T8806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.871'. [ 145.709701][ T8808] netlink: 'syz.1.869': attribute type 4 has an invalid length. [ 145.776087][ T8808] syzkaller1: entered promiscuous mode [ 145.786484][ T8808] syzkaller1: entered allmulticast mode [ 145.822031][ T8808] netlink: 'syz.1.869': attribute type 9 has an invalid length. [ 145.844432][ T8813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.872'. [ 146.001640][ T8822] netlink: 24 bytes leftover after parsing attributes in process `syz.3.875'. [ 146.062790][ T8823] netlink: 24 bytes leftover after parsing attributes in process `syz.3.875'. [ 146.082848][ T8826] netlink: 20 bytes leftover after parsing attributes in process `syz.4.877'. [ 146.103495][ T8823] netlink: 16 bytes leftover after parsing attributes in process `syz.3.875'. [ 146.107465][ T8826] netlink: 20 bytes leftover after parsing attributes in process `syz.4.877'. [ 146.837126][ T8858] batadv0: entered promiscuous mode [ 146.891226][ T8858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.139994][ T8879] FAULT_INJECTION: forcing a failure. [ 147.139994][ T8879] name failslab, interval 1, probability 0, space 0, times 1 [ 147.182029][ T8879] CPU: 0 UID: 0 PID: 8879 Comm: syz.3.894 Not tainted 6.13.0-rc2-syzkaller-00131-g429fde2d81bc #0 [ 147.192719][ T8879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 147.193986][ T8883] syzkaller0: entered promiscuous mode [ 147.202792][ T8879] Call Trace: [ 147.202855][ T8879] [ 147.202867][ T8879] dump_stack_lvl+0x241/0x360 [ 147.208700][ T8883] syzkaller0: entered allmulticast mode [ 147.211608][ T8879] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.230127][ T8879] ? __pfx__printk+0x10/0x10 [ 147.234776][ T8879] ? __kmalloc_cache_noprof+0x48/0x390 [ 147.240291][ T8879] ? __pfx___might_resched+0x10/0x10 [ 147.245618][ T8879] should_fail_ex+0x3b0/0x4e0 [ 147.250351][ T8879] should_failslab+0xac/0x100 [ 147.255075][ T8879] __kmalloc_cache_noprof+0x70/0x390 [ 147.260416][ T8879] ? sctp_association_new+0x8a/0x2400 [ 147.265844][ T8879] sctp_association_new+0x8a/0x2400 [ 147.271132][ T8879] ? sctp_has_association+0x1d4/0x1f0 [ 147.276555][ T8879] ? sctp_has_association+0x2f/0x1f0 [ 147.281893][ T8879] ? __ipv6_addr_type+0x146/0x2f0 [ 147.286975][ T8879] sctp_connect_new_asoc+0x2d8/0x6c0 [ 147.292320][ T8879] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 147.298202][ T8879] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 147.304052][ T8879] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 147.309992][ T8879] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 147.315846][ T8879] __sctp_connect+0x66d/0xe30 [ 147.320580][ T8879] ? __local_bh_enable_ip+0x168/0x200 [ 147.326026][ T8879] ? __pfx___sctp_connect+0x10/0x10 [ 147.331273][ T8879] ? sctp_inet_connect+0xa7/0x1f0 [ 147.336354][ T8879] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 147.342140][ T8879] ? do_raw_spin_unlock+0x13c/0x8b0 [ 147.347391][ T8879] sctp_inet_connect+0x149/0x1f0 [ 147.352394][ T8879] __sys_connect+0x288/0x2d0 [ 147.357008][ T8879] ? __fget_files+0x2a/0x410 [ 147.361715][ T8879] ? __pfx___sys_connect+0x10/0x10 [ 147.366854][ T8879] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 147.373219][ T8879] ? do_syscall_64+0x100/0x230 [ 147.378008][ T8879] __x64_sys_connect+0x7a/0x90 [ 147.382785][ T8879] do_syscall_64+0xf3/0x230 [ 147.387306][ T8879] ? clear_bhb_loop+0x35/0x90 [ 147.392007][ T8879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.397918][ T8879] RIP: 0033:0x7f62b1185d19 [ 147.402345][ T8879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.421983][ T8879] RSP: 002b:00007f62b1edc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 147.430414][ T8879] RAX: ffffffffffffffda RBX: 00007f62b1376080 RCX: 00007f62b1185d19 [ 147.438428][ T8879] RDX: 000000000000001c RSI: 0000000020000240 RDI: 0000000000000004 [ 147.446411][ T8879] RBP: 00007f62b1edc090 R08: 0000000000000000 R09: 0000000000000000 [ 147.454396][ T8879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.462380][ T8879] R13: 0000000000000000 R14: 00007f62b1376080 R15: 00007ffc0705b3b8 [ 147.470376][ T8879] [ 147.585995][ T8891] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 147.906378][ T8903] netlink: 'syz.1.904': attribute type 20 has an invalid length. [ 148.063469][ T8906] veth0_to_batadv: entered promiscuous mode [ 148.101878][ T8906] veth0_to_batadv: entered allmulticast mode [ 148.189161][ T8916] IPVS: set_ctl: invalid protocol: 384 0.0.0.0:1536 [ 148.234353][ T8906] netlink: 'syz.2.905': attribute type 10 has an invalid length. [ 148.269642][ T8906] team0: Device ipvlan1 failed to register rx_handler [ 148.277423][ T8916] IPVS: set_ctl: invalid protocol: 384 0.0.0.0:1536 [ 148.353341][ T8924] syzkaller0: entered allmulticast mode [ 148.428086][ T8924] syzkaller0 (unregistering): left allmulticast mode [ 148.533518][ T8933] IPv6: sit1: Disabled Multicast RS [ 148.545337][ T8933] sit1: entered allmulticast mode [ 148.803994][ T8942] __nla_validate_parse: 2 callbacks suppressed [ 148.804017][ T8942] netlink: 244 bytes leftover after parsing attributes in process `syz.3.919'. [ 148.806326][ T8906] syz.2.905 (8906) used greatest stack depth: 18288 bytes left [ 148.880774][ T8941] netlink: 36 bytes leftover after parsing attributes in process `syz.1.920'. [ 149.581728][ T8970] syz.2.929: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 149.600784][ T8970] CPU: 0 UID: 0 PID: 8970 Comm: syz.2.929 Not tainted 6.13.0-rc2-syzkaller-00131-g429fde2d81bc #0 [ 149.611449][ T8970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 149.621642][ T8970] Call Trace: [ 149.624985][ T8970] [ 149.627967][ T8970] dump_stack_lvl+0x241/0x360 [ 149.632697][ T8970] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.637943][ T8970] ? __pfx__printk+0x10/0x10 [ 149.642581][ T8970] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 149.649053][ T8970] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 149.655618][ T8970] warn_alloc+0x278/0x410 [ 149.660009][ T8970] ? __pfx_warn_alloc+0x10/0x10 [ 149.664906][ T8970] ? xskq_create+0xb6/0x170 [ 149.669448][ T8970] ? __get_vm_area_node+0x1c8/0x2d0 [ 149.674700][ T8970] ? __get_vm_area_node+0x25c/0x2d0 [ 149.679969][ T8970] __vmalloc_node_range_noprof+0x62f/0x1380 [ 149.685940][ T8970] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 149.692330][ T8970] ? __kasan_kmalloc+0x98/0xb0 [ 149.697143][ T8970] vmalloc_user_noprof+0x74/0x80 [ 149.702121][ T8970] ? xskq_create+0xb6/0x170 [ 149.706680][ T8970] xskq_create+0xb6/0x170 [ 149.711055][ T8970] xsk_init_queue+0xa1/0x100 [ 149.715691][ T8970] xsk_setsockopt+0x4ea/0x950 [ 149.720411][ T8970] ? __pfx_xsk_setsockopt+0x10/0x10 [ 149.725650][ T8970] ? __pfx_aa_sk_perm+0x10/0x10 [ 149.730550][ T8970] ? aa_sock_opt_perm+0x79/0x120 [ 149.735532][ T8970] ? __pfx_xsk_setsockopt+0x10/0x10 [ 149.740771][ T8970] do_sock_setsockopt+0x3af/0x720 [ 149.745861][ T8970] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 149.751463][ T8970] ? __fget_files+0x395/0x410 [ 149.756194][ T8970] ? __fget_files+0x2a/0x410 [ 149.761109][ T8970] __x64_sys_setsockopt+0x1ee/0x280 [ 149.766365][ T8970] do_syscall_64+0xf3/0x230 [ 149.770921][ T8970] ? clear_bhb_loop+0x35/0x90 [ 149.775657][ T8970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.781606][ T8970] RIP: 0033:0x7f6ca2585d19 [ 149.786071][ T8970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.805726][ T8970] RSP: 002b:00007f6ca335c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 149.814225][ T8970] RAX: ffffffffffffffda RBX: 00007f6ca2775fa0 RCX: 00007f6ca2585d19 [ 149.822225][ T8970] RDX: 0000000000000005 RSI: 000000000000011b RDI: 0000000000000003 [ 149.830294][ T8970] RBP: 00007f6ca2601a20 R08: 0000000000000004 R09: 0000000000000000 [ 149.838272][ T8970] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000000 [ 149.846249][ T8970] R13: 0000000000000000 R14: 00007f6ca2775fa0 R15: 00007ffcb52162a8 [ 149.854246][ T8970] [ 149.857566][ T8970] Mem-Info: [ 149.860720][ T8970] active_anon:4415 inactive_anon:0 isolated_anon:0 [ 149.860720][ T8970] active_file:1378 inactive_file:38277 isolated_file:0 [ 149.860720][ T8970] unevictable:768 dirty:174 writeback:0 [ 149.860720][ T8970] slab_reclaimable:10624 slab_unreclaimable:104424 [ 149.860720][ T8970] mapped:28769 shmem:1465 pagetables:748 [ 149.860720][ T8970] sec_pagetables:0 bounce:0 [ 149.860720][ T8970] kernel_misc_reclaimable:0 [ 149.860720][ T8970] free:1337281 free_pcp:630 free_cma:0 [ 149.913104][ T8970] Node 0 active_anon:17560kB inactive_anon:0kB active_file:5512kB inactive_file:153032kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115076kB dirty:696kB writeback:0kB shmem:4324kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11176kB pagetables:2992kB sec_pagetables:0kB all_unreclaimable? no [ 149.945871][ T8970] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 149.956628][ T8979] bridge0: entered allmulticast mode [ 149.976864][ T8970] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 150.010143][ T8970] lowmem_reserve[]: 0 2465 2466 0 0 [ 150.015479][ T8970] Node 0 DMA32 free:1422788kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:17520kB inactive_anon:0kB active_file:5512kB inactive_file:152196kB unevictable:1536kB writepending:696kB present:3129332kB managed:2552780kB mlocked:0kB bounce:0kB free_pcp:3128kB local_pcp:2052kB free_cma:0kB [ 150.046814][ T8970] lowmem_reserve[]: 0 0 0 0 0 [ 150.051607][ T8970] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 150.079058][ T8970] lowmem_reserve[]: 0 0 0 0 0 [ 150.083850][ T8970] Node 1 Normal free:3910264kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 150.116781][ T8970] lowmem_reserve[]: 0 0 0 0 0 [ 150.121692][ T8970] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 150.134771][ T8970] Node 0 DMA32: 1*4kB (E) 90*8kB (ME) 84*16kB (UME) 84*32kB (UME) 123*64kB (UME) 40*128kB (UME) 22*256kB (UME) 19*512kB (UME) 17*1024kB (UME) 12*2048kB (U) 329*4096kB (UM) = 1422676kB [ 150.153838][ T8970] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 150.165681][ T8970] Node 1 Normal: 202*4kB (U) 42*8kB (UME) 42*16kB (UME) 199*32kB (UME) 98*64kB (UME) 26*128kB (UME) 17*256kB (UME) 12*512kB (UME) 3*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3910264kB [ 150.184735][ T8970] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 150.194458][ T8970] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 150.204357][ T8970] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 150.214911][ T8970] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 150.225083][ T8970] 41140 total pagecache pages [ 150.229891][ T8970] 0 pages in swap cache [ 150.234083][ T8970] Free swap = 124996kB [ 150.239121][ T8970] Total swap = 124996kB [ 150.243326][ T8970] 2097051 pages RAM [ 150.247286][ T8970] 0 pages HighMem/MovableOnly [ 150.252094][ T8970] 427006 pages reserved [ 150.256283][ T8970] 0 pages cma reserved [ 150.484069][ T9000] veth1_to_hsr: entered promiscuous mode [ 150.510815][ T9000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.937'. [ 150.529455][ T9004] vlan3: entered promiscuous mode [ 150.535425][ T9004] bond0: entered promiscuous mode [ 150.546652][ T9004] 0ªĂøÂFNđ¡: entered promiscuous mode [ 150.553864][ T9004] bond_slave_1: entered promiscuous mode [ 150.568487][ T9004] bond0: left promiscuous mode [ 150.582906][ T9004] 0ªĂøÂFNđ¡: left promiscuous mode [ 150.590016][ T9004] bond_slave_1: left promiscuous mode [ 150.815611][ T9020] netlink: 1275 bytes leftover after parsing attributes in process `syz.2.943'. [ 150.825371][ T9020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.105936][ T9030] netlink: 'syz.0.947': attribute type 10 has an invalid length. [ 151.307668][ T9035] netlink: 28 bytes leftover after parsing attributes in process `syz.2.952'. [ 151.421346][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.951'. [ 151.637014][ T9046] netlink: 24 bytes leftover after parsing attributes in process `syz.4.956'. [ 151.862103][ T9069] xt_CT: You must specify a L4 protocol and not use inversions on it [ 152.169950][ T9085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.966'. [ 152.373406][ T9096] netlink: 'syz.1.969': attribute type 4 has an invalid length. [ 152.597894][ T9113] pim6reg: entered allmulticast mode [ 152.885277][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.975'. [ 153.307576][ T5909] hid-generic 0005:07C0:5500.0002: item fetching failed at offset 0/1 [ 153.316334][ T5909] hid-generic 0005:07C0:5500.0002: probe with driver hid-generic failed with error -22 [ 153.543934][ T9159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.981'. [ 153.580368][ T9143] raw_sendmsg: syz.1.981 forgot to set AF_INET. Fix it! [ 153.885980][ T9175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.991'. [ 153.903683][ T9172] netlink: 24 bytes leftover after parsing attributes in process `syz.0.990'. [ 154.007930][ T9183] netlink: 20 bytes leftover after parsing attributes in process `syz.2.993'. [ 154.129417][ T9185] FAULT_INJECTION: forcing a failure. [ 154.129417][ T9185] name failslab, interval 1, probability 0, space 0, times 0 [ 154.179458][ T9185] CPU: 0 UID: 0 PID: 9185 Comm: syz.4.994 Not tainted 6.13.0-rc2-syzkaller-00131-g429fde2d81bc #0 [ 154.190188][ T9185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 154.200285][ T9185] Call Trace: [ 154.203600][ T9185] [ 154.206582][ T9185] dump_stack_lvl+0x241/0x360 [ 154.211408][ T9185] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.212273][ T9190] netlink: 16 bytes leftover after parsing attributes in process `syz.2.998'. [ 154.216638][ T9185] ? __pfx__printk+0x10/0x10 [ 154.216677][ T9185] ? __kmalloc_cache_noprof+0x48/0x390 [ 154.216711][ T9185] ? __pfx___might_resched+0x10/0x10 [ 154.235634][ T9185] should_fail_ex+0x3b0/0x4e0 [ 154.245691][ T9185] should_failslab+0xac/0x100 [ 154.250403][ T9185] __kmalloc_cache_noprof+0x70/0x390 [ 154.255708][ T9185] ? sctp_copy_one_addr+0x328/0x680 [ 154.260928][ T9185] sctp_copy_one_addr+0x328/0x680 [ 154.265979][ T9185] sctp_bind_addr_copy+0xad/0x3b0 [ 154.271026][ T9185] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 154.277372][ T9185] sctp_connect_new_asoc+0x2f3/0x6c0 [ 154.282677][ T9185] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 154.288499][ T9185] ? sctp_sendmsg+0xbb9/0x3520 [ 154.293281][ T9185] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 154.299102][ T9185] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 154.305009][ T9185] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 154.310581][ T9185] sctp_sendmsg+0x219a/0x3520 [ 154.315374][ T9185] ? __pfx_sctp_sendmsg+0x10/0x10 [ 154.320417][ T9185] ? __pfx_aa_sk_perm+0x10/0x10 [ 154.325291][ T9185] ? inet_sendmsg+0x330/0x390 [ 154.330012][ T9185] __sock_sendmsg+0x1a6/0x270 [ 154.334733][ T9185] __sys_sendto+0x363/0x4c0 [ 154.339257][ T9185] ? __pfx___sys_sendto+0x10/0x10 [ 154.344296][ T9185] ? __mutex_unlock_slowpath+0x21e/0x790 [ 154.349973][ T9185] ? __fget_files+0x2a/0x410 [ 154.354588][ T9185] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 154.360587][ T9185] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 154.366938][ T9185] __x64_sys_sendto+0xde/0x100 [ 154.371728][ T9185] do_syscall_64+0xf3/0x230 [ 154.376254][ T9185] ? clear_bhb_loop+0x35/0x90 [ 154.380953][ T9185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.386869][ T9185] RIP: 0033:0x7f864f185d19 [ 154.391308][ T9185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.410941][ T9185] RSP: 002b:00007f864ff2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 154.419553][ T9185] RAX: ffffffffffffffda RBX: 00007f864f375fa0 RCX: 00007f864f185d19 [ 154.427542][ T9185] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000003 [ 154.435538][ T9185] RBP: 00007f864ff2e090 R08: 0000000020000140 R09: 000000000000001c [ 154.443524][ T9185] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001 [ 154.451505][ T9185] R13: 0000000000000000 R14: 00007f864f375fa0 R15: 00007ffcd983b2f8 [ 154.459528][ T9185] [ 154.686349][ T9198] netlink: 'syz.4.999': attribute type 1 has an invalid length. [ 154.728098][ T9198] netlink: 'syz.4.999': attribute type 3 has an invalid length. [ 154.753314][ T9198] netlink: 216 bytes leftover after parsing attributes in process `syz.4.999'. [ 154.775516][ T9198] NCSI netlink: No device for ifindex 813332851 [ 155.026624][ T9188] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 155.200169][ T9231] tunl0: entered promiscuous mode [ 155.218319][ T9231] netlink: 'syz.2.1008': attribute type 3 has an invalid length. [ 155.235620][ T9231] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1008'. [ 155.255476][ T9232] netlink: 'syz.3.1005': attribute type 1 has an invalid length. [ 155.525346][ T9242] FAULT_INJECTION: forcing a failure. [ 155.525346][ T9242] name failslab, interval 1, probability 0, space 0, times 0 [ 155.572153][ T9242] CPU: 0 UID: 0 PID: 9242 Comm: syz.2.1009 Not tainted 6.13.0-rc2-syzkaller-00131-g429fde2d81bc #0 [ 155.582928][ T9242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 155.593035][ T9242] Call Trace: [ 155.596349][ T9242] [ 155.599311][ T9242] dump_stack_lvl+0x241/0x360 [ 155.604044][ T9242] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.609289][ T9242] ? __pfx__printk+0x10/0x10 [ 155.613920][ T9242] ? __kmalloc_cache_noprof+0x48/0x390 [ 155.619431][ T9242] ? __pfx___might_resched+0x10/0x10 [ 155.624770][ T9242] should_fail_ex+0x3b0/0x4e0 [ 155.629511][ T9242] should_failslab+0xac/0x100 [ 155.634272][ T9242] __kmalloc_cache_noprof+0x70/0x390 [ 155.639586][ T9242] ? sctp_transport_new+0x7e/0x5d0 [ 155.644715][ T9242] ? sctp_copy_one_addr+0x341/0x680 [ 155.649933][ T9242] sctp_transport_new+0x7e/0x5d0 [ 155.654888][ T9242] sctp_assoc_add_peer+0x228/0x15c0 [ 155.660099][ T9242] ? sctp_bind_addr_copy+0x36c/0x3b0 [ 155.665415][ T9242] sctp_connect_new_asoc+0x31d/0x6c0 [ 155.670716][ T9242] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 155.676536][ T9242] ? sctp_sendmsg+0xbb9/0x3520 [ 155.681354][ T9242] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 155.687174][ T9242] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 155.693080][ T9242] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 155.698650][ T9242] sctp_sendmsg+0x219a/0x3520 [ 155.703365][ T9242] ? __pfx_sctp_sendmsg+0x10/0x10 [ 155.708409][ T9242] ? __pfx_aa_sk_perm+0x10/0x10 [ 155.713323][ T9242] ? inet_sendmsg+0x330/0x390 [ 155.718019][ T9242] __sock_sendmsg+0x1a6/0x270 [ 155.722737][ T9242] __sys_sendto+0x363/0x4c0 [ 155.727282][ T9242] ? __pfx___sys_sendto+0x10/0x10 [ 155.732321][ T9242] ? __mutex_unlock_slowpath+0x21e/0x790 [ 155.737989][ T9242] ? __fget_files+0x2a/0x410 [ 155.742612][ T9242] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 155.748708][ T9242] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 155.755139][ T9242] __x64_sys_sendto+0xde/0x100 [ 155.759926][ T9242] do_syscall_64+0xf3/0x230 [ 155.764539][ T9242] ? clear_bhb_loop+0x35/0x90 [ 155.769263][ T9242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.775193][ T9242] RIP: 0033:0x7f6ca2585d19 [ 155.779645][ T9242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.799447][ T9242] RSP: 002b:00007f6ca335c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 155.807899][ T9242] RAX: ffffffffffffffda RBX: 00007f6ca2775fa0 RCX: 00007f6ca2585d19 [ 155.815885][ T9242] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000003 [ 155.823867][ T9242] RBP: 00007f6ca335c090 R08: 0000000020000140 R09: 000000000000001c [ 155.831861][ T9242] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001 [ 155.839887][ T9242] R13: 0000000000000000 R14: 00007f6ca2775fa0 R15: 00007ffcb52162a8 [ 155.847911][ T9242] [ 155.867446][ T9247] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1011'. [ 155.950806][ T9249] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1012'. [ 155.986378][ T9249] netlink: 'syz.3.1012': attribute type 10 has an invalid length. [ 155.995059][ T5884] IPVS: starting estimator thread 0... [ 156.061973][ T9249] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.117428][ T9253] IPVS: using max 21 ests per chain, 50400 per kthread [ 156.150244][ T9249] bond0: (slave team0): Enslaving as an active interface with an up link [ 156.196889][ T9256] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.205403][ T9256] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.217596][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1016'. [ 156.229183][ T9256] bridge0: entered allmulticast mode [ 156.299150][ T9260] netlink: 'syz.4.1015': attribute type 3 has an invalid length. [ 156.335236][ T9264] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 156.417758][ T9270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.507811][ T9275] netlink: 5692 bytes leftover after parsing attributes in process `syz.0.1019'. [ 157.413592][ T9311] netlink: 'syz.0.1029': attribute type 10 has an invalid length. [ 157.445821][ T9311] tipc: Resetting bearer [ 157.462981][ T9311] macvlan0: entered promiscuous mode [ 157.473470][ T9311] macvlan0: entered allmulticast mode [ 157.507120][ T9311] tipc: Resetting bearer [ 157.548071][ T9311] veth1_vlan: entered allmulticast mode [ 157.588859][ T9311] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 157.913961][ T9333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.967525][ T9333] team0: Port device bond0 added [ 158.792845][ T9371] netlink: 'syz.1.1049': attribute type 4 has an invalid length. [ 158.870737][ T9373] netlink: 'syz.4.1051': attribute type 29 has an invalid length. [ 158.937465][ T9374] netlink: 'syz.4.1051': attribute type 29 has an invalid length. [ 159.034004][ T9381] netlink: 'syz.1.1054': attribute type 1 has an invalid length. [ 159.135010][ T9383] __nla_validate_parse: 6 callbacks suppressed [ 159.135035][ T9383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1055'. [ 160.020148][ T9429] syzkaller0: left promiscuous mode [ 160.058370][ T9429] syzkaller0: left allmulticast mode [ 160.438530][ T9439] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 160.585791][ T9434] mac80211_hwsim hwsim10 ÿ: renamed from wlan1 (while UP) [ 160.652949][ T9454] sctp: [Deprecated]: syz.4.1073 (pid 9454) Use of struct sctp_assoc_value in delayed_ack socket option. [ 160.652949][ T9454] Use struct sctp_sack_info instead [ 161.123624][ T9458] xt_nat: multiple ranges no longer supported [ 161.375763][ T9475] netlink: 'syz.1.1083': attribute type 1 has an invalid length. [ 161.388468][ T9475] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1083'. [ 161.435489][ T9478] netlink: 'syz.0.1081': attribute type 1 has an invalid length. [ 161.458064][ T9481] xt_cluster: you have exceeded the maximum number of cluster nodes (768 > 32) [ 161.479536][ T9475] bond3: entered promiscuous mode [ 161.484653][ T9475] bond3: entered allmulticast mode [ 161.490406][ T9475] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.513682][ T9478] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 161.560071][ T9489] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1084'. [ 161.689882][ T9495] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1087'. [ 161.704409][ T9489] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1084'. [ 161.715333][ T9489] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.724745][ T9489] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.731951][ T9489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.133869][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1093'. [ 162.457148][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 162.491092][ T9538] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1101'. [ 162.505841][ T9538] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1101'. [ 162.692456][ T9551] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1105'. [ 163.077612][ T29] audit: type=1107 audit(1734168742.051:2): pid=9566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ws=y«Å)×ÍÊỎ˜Fmaa¶Ï€—áº+Nf# 1•”\Óôq†Q'Å7©Óø¢‹YL·<ơS `uIê£ƠV÷âë$ÏØô»5QXáˆĐÖ' [ 163.207620][ T9571] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.1112'. [ 163.254453][ T9571] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 163.519908][ T9588] veth1_to_hsr: entered promiscuous mode [ 163.770674][ T9588] hsr_slave_1 (unregistering): left promiscuous mode [ 163.818656][ T9594] netlink: 'syz.3.1120': attribute type 15 has an invalid length. [ 164.349419][ T9641] FAULT_INJECTION: forcing a failure. [ 164.349419][ T9641] name failslab, interval 1, probability 0, space 0, times 0 [ 164.379032][ T9641] CPU: 1 UID: 0 PID: 9641 Comm: syz.1.1134 Not tainted 6.13.0-rc2-syzkaller-00131-g429fde2d81bc #0 [ 164.389792][ T9641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 164.399893][ T9641] Call Trace: [ 164.403186][ T9641] [ 164.406128][ T9641] dump_stack_lvl+0x241/0x360 [ 164.410840][ T9641] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.416062][ T9641] ? __pfx__printk+0x10/0x10 [ 164.420683][ T9641] ? __kmalloc_cache_noprof+0x48/0x390 [ 164.426175][ T9641] ? __pfx___might_resched+0x10/0x10 [ 164.431473][ T9641] should_fail_ex+0x3b0/0x4e0 [ 164.436192][ T9641] should_failslab+0xac/0x100 [ 164.440914][ T9641] __kmalloc_cache_noprof+0x70/0x390 [ 164.446219][ T9641] ? sctp_datamsg_from_user+0x88/0xf20 [ 164.451704][ T9641] sctp_datamsg_from_user+0x88/0xf20 [ 164.457021][ T9641] ? __sk_mem_raise_allocated+0xa5f/0x1140 [ 164.462861][ T9641] sctp_sendmsg_to_asoc+0xf7e/0x1800 [ 164.468159][ T9641] ? sctp_v6_to_sk_saddr+0x101/0x1c0 [ 164.473474][ T9641] ? __asan_memcpy+0x40/0x70 [ 164.478078][ T9641] ? sctp_assoc_add_peer+0xe3c/0x15c0 [ 164.483472][ T9641] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 164.489210][ T9641] ? sctp_connect_new_asoc+0x3fe/0x6c0 [ 164.494684][ T9641] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 164.500502][ T9641] ? sctp_sendmsg+0xbb9/0x3520 [ 164.505282][ T9641] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 164.511103][ T9641] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 164.517013][ T9641] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 164.522581][ T9641] sctp_sendmsg+0x1bc3/0x3520 [ 164.527283][ T9641] ? __pfx_sctp_sendmsg+0x10/0x10 [ 164.532323][ T9641] ? __pfx_aa_sk_perm+0x10/0x10 [ 164.537288][ T9641] ? inet_sendmsg+0x330/0x390 [ 164.541990][ T9641] __sock_sendmsg+0x1a6/0x270 [ 164.546708][ T9641] __sys_sendto+0x363/0x4c0 [ 164.551244][ T9641] ? __pfx___sys_sendto+0x10/0x10 [ 164.556282][ T9641] ? __mutex_unlock_slowpath+0x21e/0x790 [ 164.561945][ T9641] ? __fget_files+0x2a/0x410 [ 164.566573][ T9641] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 164.572574][ T9641] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 164.578922][ T9641] __x64_sys_sendto+0xde/0x100 [ 164.583701][ T9641] do_syscall_64+0xf3/0x230 [ 164.588314][ T9641] ? clear_bhb_loop+0x35/0x90 [ 164.593021][ T9641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.598932][ T9641] RIP: 0033:0x7f48a1985d19 [ 164.603361][ T9641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.623002][ T9641] RSP: 002b:00007f48a2872038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 164.631533][ T9641] RAX: ffffffffffffffda RBX: 00007f48a1b75fa0 RCX: 00007f48a1985d19 [ 164.639518][ T9641] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000003 [ 164.647595][ T9641] RBP: 00007f48a2872090 R08: 0000000020000140 R09: 000000000000001c [ 164.655581][ T9641] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 164.663565][ T9641] R13: 0000000000000000 R14: 00007f48a1b75fa0 R15: 00007fff8afe6c28 [ 164.671561][ T9641] [ 164.700623][ T9643] __nla_validate_parse: 8 callbacks suppressed [ 164.700645][ T9643] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1135'. [ 164.766065][ T9645] xt_cluster: node mask cannot exceed total number of nodes [ 164.795625][ T9643] bond1: entered promiscuous mode [ 164.834982][ T9643] bond1: entered allmulticast mode [ 164.867685][ T9643] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.964795][ T9651] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1138'. [ 165.002809][ T9651] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1138'. [ 165.069666][ T9662] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 165.192309][ T9654] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.363390][ T9654] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.563339][ T9654] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.596234][ T9682] netlink: 'syz.1.1145': attribute type 1 has an invalid length. [ 165.625729][ T9679] IPv6: sit1: Disabled Multicast RS [ 165.731893][ T9654] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.942548][ T9654] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.060078][ T9654] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.108236][ T9654] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.168995][ T9654] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.298532][ T5145] Bluetooth: hci2: command tx timeout [ 166.328030][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1153'. [ 166.400140][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1152'. [ 166.593532][ T9727] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1154'. [ 166.909354][ T9726] lo speed is unknown, defaulting to 1000 [ 166.915579][ T9726] lo speed is unknown, defaulting to 1000 [ 166.938591][ T9726] lo speed is unknown, defaulting to 1000 [ 166.969062][ T9726] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 167.025145][ T9750] netlink: 'syz.4.1162': attribute type 18 has an invalid length. [ 167.068817][ T9726] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 167.075588][ T9751] netlink: 'syz.4.1162': attribute type 18 has an invalid length. [ 167.139256][ T9750] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.148490][ T9750] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.157303][ T9750] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.166040][ T9750] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.205301][ T9726] lo speed is unknown, defaulting to 1000 [ 167.227094][ T9726] lo speed is unknown, defaulting to 1000 [ 167.234082][ T9726] lo speed is unknown, defaulting to 1000 [ 167.268453][ T9726] lo speed is unknown, defaulting to 1000 [ 167.275367][ T9726] lo speed is unknown, defaulting to 1000 [ 167.555735][ T9766] lo: entered allmulticast mode [ 167.560962][ T9767] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1167'. [ 167.751165][ T9765] lo: left allmulticast mode [ 168.173171][ T9807] batadv_slave_0: entered promiscuous mode [ 168.226208][ T9806] batadv_slave_0: left promiscuous mode [ 168.613921][ T9822] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1184'. [ 168.660908][ T9824] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1185'. [ 169.271806][ T9835] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1188'. [ 170.908988][ T9840] netlink: 'syz.3.1190': attribute type 1 has an invalid length. [ 170.938447][ T9851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1193'. [ 171.030169][ T9840] 8021q: adding VLAN 0 to HW filter on device bond3 [ 171.117086][ T9859] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 171.131650][ T9862] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1196'. [ 171.133861][ T9854] bond3: (slave veth5): Enslaving as an active interface with a down link [ 171.184283][ T9840] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 171.236200][ T9840] bond3: (slave batadv1): making interface the new active one [ 171.283139][ T9840] batadv1: entered promiscuous mode [ 171.298294][ T9840] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 172.093605][ T9912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1211'. [ 172.259511][ T9922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.334632][ T9924] FAULT_INJECTION: forcing a failure. [ 172.334632][ T9924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.391851][ T9924] CPU: 1 UID: 0 PID: 9924 Comm: syz.4.1215 Not tainted 6.13.0-rc2-syzkaller-00131-g429fde2d81bc #0 [ 172.402613][ T9924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 172.412714][ T9924] Call Trace: [ 172.416039][ T9924] [ 172.419021][ T9924] dump_stack_lvl+0x241/0x360 [ 172.423849][ T9924] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.429110][ T9924] ? __pfx__printk+0x10/0x10 [ 172.433765][ T9924] ? __pfx_lock_release+0x10/0x10 [ 172.438854][ T9924] should_fail_ex+0x3b0/0x4e0 [ 172.443609][ T9924] _copy_from_user+0x2f/0xc0 [ 172.448263][ T9924] copy_msghdr_from_user+0xae/0x680 [ 172.453564][ T9924] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 172.459442][ T9924] ? __fget_files+0x2a/0x410 [ 172.464185][ T9924] ? __fget_files+0x2a/0x410 [ 172.468861][ T9924] __sys_sendmsg+0x209/0x350 [ 172.473504][ T9924] ? __pfx_lock_release+0x10/0x10 [ 172.478592][ T9924] ? __pfx___sys_sendmsg+0x10/0x10 [ 172.483758][ T9924] ? __pfx_vfs_write+0x10/0x10 [ 172.488590][ T9924] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 172.494967][ T9924] ? do_syscall_64+0x100/0x230 [ 172.499782][ T9924] ? do_syscall_64+0xb6/0x230 [ 172.504512][ T9924] do_syscall_64+0xf3/0x230 [ 172.509073][ T9924] ? clear_bhb_loop+0x35/0x90 [ 172.513813][ T9924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.519851][ T9924] RIP: 0033:0x7f864f185d19 [ 172.524326][ T9924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.544116][ T9924] RSP: 002b:00007f864ff2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.552590][ T9924] RAX: ffffffffffffffda RBX: 00007f864f375fa0 RCX: 00007f864f185d19 [ 172.560703][ T9924] RDX: 0000000020000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 172.568738][ T9924] RBP: 00007f864ff2e090 R08: 0000000000000000 R09: 0000000000000000 [ 172.576766][ T9924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.584785][ T9924] R13: 0000000000000000 R14: 00007f864f375fa0 R15: 00007ffcd983b2f8 [ 172.592814][ T9924] [ 172.688198][ T9936] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1217'. [ 172.789101][ T9943] xt_policy: too many policy elements [ 172.821756][ T9949] openvswitch: netlink: Unknown nsh attribute 0 [ 172.849691][ T9954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1222'. [ 172.859117][ T9953] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1223'. [ 172.877548][ T9950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1221'. [ 172.879677][ T9949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.168088][ T9974] netlink: 'syz.2.1227': attribute type 11 has an invalid length. [ 173.199444][ T9972] bond4: entered promiscuous mode [ 173.218102][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1229'. [ 173.492847][ T9987] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1232'. [ 173.577966][ T9993] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1234'. [ 173.629322][ T9993] sctp: [Deprecated]: syz.4.1234 (pid 9993) Use of int in maxseg socket option. [ 173.629322][ T9993] Use struct sctp_assoc_value instead [ 174.181124][T10015] netlink: 'syz.2.1240': attribute type 29 has an invalid length. [ 174.211076][T10015] netlink: 'syz.2.1240': attribute type 29 has an invalid length. [ 174.255153][T10016] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.436106][T10016] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.539638][T10016] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.706762][T10016] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.913786][T10016] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.939452][T10016] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.969969][T10016] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.985285][T10016] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.074517][T10047] FAULT_INJECTION: forcing a failure. [ 175.074517][T10047] name failslab, interval 1, probability 0, space 0, times 0 [ 175.096084][T10047] CPU: 1 UID: 0 PID: 10047 Comm: syz.0.1252 Not tainted 6.13.0-rc2-syzkaller-00131-g429fde2d81bc #0 [ 175.106946][T10047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 175.117051][T10047] Call Trace: [ 175.120372][T10047] [ 175.123355][T10047] dump_stack_lvl+0x241/0x360 [ 175.128118][T10047] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.133375][T10047] ? __pfx__printk+0x10/0x10 [ 175.138025][T10047] should_fail_ex+0x3b0/0x4e0 [ 175.142758][T10047] should_failslab+0xac/0x100 [ 175.147486][T10047] __kmalloc_cache_noprof+0x70/0x390 [ 175.152793][T10047] ? sctp_auth_asoc_copy_shkeys+0x13b/0x580 [ 175.158714][T10047] sctp_auth_asoc_copy_shkeys+0x13b/0x580 [ 175.164482][T10047] sctp_association_new+0x15aa/0x2400 [ 175.169882][T10047] sctp_make_temp_asoc+0x8b/0x160 [ 175.174929][T10047] sctp_sf_do_unexpected_init+0x58f/0x11d0 [ 175.180770][T10047] ? __pfx_sctp_sf_do_unexpected_init+0x10/0x10 [ 175.187041][T10047] ? sctp_sf_do_5_2_1_siminit+0x25/0x50 [ 175.192653][T10047] ? __pfx_sctp_cname+0x10/0x10 [ 175.197528][T10047] sctp_do_sm+0x1f1/0x60c0 [ 175.201981][T10047] ? __pfx_sctp_do_sm+0x10/0x10 [ 175.206849][T10047] ? mark_lock+0x9a/0x360 [ 175.211239][T10047] ? sctp_inq_pop+0xba2/0xf50 [ 175.215940][T10047] sctp_assoc_bh_rcv+0x3f1/0x640 [ 175.220907][T10047] sctp_backlog_rcv+0x177/0x3f0 [ 175.225805][T10047] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 175.231193][T10047] __release_sock+0x243/0x350 [ 175.235896][T10047] release_sock+0x61/0x1f0 [ 175.240338][T10047] sctp_sendmsg+0x21e2/0x3520 [ 175.245050][T10047] ? __pfx_sctp_sendmsg+0x10/0x10 [ 175.250127][T10047] ? __pfx_aa_sk_perm+0x10/0x10 [ 175.255006][T10047] ? inet_sendmsg+0x330/0x390 [ 175.259700][T10047] __sock_sendmsg+0x1a6/0x270 [ 175.264431][T10047] __sys_sendto+0x363/0x4c0 [ 175.268951][T10047] ? __pfx___sys_sendto+0x10/0x10 [ 175.273991][T10047] ? __mutex_unlock_slowpath+0x21e/0x790 [ 175.279654][T10047] ? __fget_files+0x2a/0x410 [ 175.284271][T10047] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 175.290275][T10047] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 175.296637][T10047] __x64_sys_sendto+0xde/0x100 [ 175.301428][T10047] do_syscall_64+0xf3/0x230 [ 175.306025][T10047] ? clear_bhb_loop+0x35/0x90 [ 175.310726][T10047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.316638][T10047] RIP: 0033:0x7fb702b85d19 [ 175.321083][T10047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.340787][T10047] RSP: 002b:00007fb703a8a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 175.349222][T10047] RAX: ffffffffffffffda RBX: 00007fb702d75fa0 RCX: 00007fb702b85d19 [ 175.357205][T10047] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000003 [ 175.365184][T10047] RBP: 00007fb703a8a090 R08: 0000000020000140 R09: 000000000000001c [ 175.373167][T10047] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 175.381154][T10047] R13: 0000000000000000 R14: 00007fb702d75fa0 R15: 00007ffc66f0c288 [ 175.389151][T10047] [ 176.567868][T10127] __nla_validate_parse: 42 callbacks suppressed [ 176.567891][T10127] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1270'. [ 176.684465][T10112] netlink: 'syz.3.1270': attribute type 1 has an invalid length. [ 176.851142][T10141] sctp: [Deprecated]: syz.2.1273 (pid 10141) Use of struct sctp_assoc_value in delayed_ack socket option. [ 176.851142][T10141] Use struct sctp_sack_info instead [ 176.900014][T10141] sctp: [Deprecated]: syz.2.1273 (pid 10141) Use of struct sctp_assoc_value in delayed_ack socket option. [ 176.900014][T10141] Use struct sctp_sack_info instead [ 177.234485][T10167] netlink: 'syz.3.1281': attribute type 11 has an invalid length. [ 177.282021][T10167] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1281'. [ 177.508429][T10179] SET target dimension over the limit! [ 178.205339][T10205] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1296'. [ 178.379413][T10214] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1299'. [ 178.501799][T10216] netlink: 'syz.0.1301': attribute type 1 has an invalid length. [ 178.535331][T10220] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1302'. [ 178.602979][T10216] 8021q: adding VLAN 0 to HW filter on device bond3 [ 178.769049][T10222] bond3: (slave gretap2): making interface the new active one [ 178.778696][T10222] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 179.587017][T10268] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1315'. [ 179.965376][T10285] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1322'. [ 180.556737][T10303] netlink: 'syz.1.1328': attribute type 5 has an invalid length. [ 180.727666][T10315] netlink: 'syz.3.1335': attribute type 10 has an invalid length. [ 180.751475][T10315] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.759155][T10315] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.817403][T10315] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.824657][T10315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.832313][T10315] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.839521][T10315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.891366][T10324] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1338'. [ 180.914013][T10315] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 181.004461][T10331] rdma_rxe: rxe_newlink: failed to add lo [ 181.524851][T10353] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1346'. [ 181.631719][T10361] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1349'. [ 181.743547][T10357] netlink: 'syz.0.1347': attribute type 2 has an invalid length. [ 181.829735][T10357] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1347'. [ 181.915772][T10368] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1349'. [ 182.288645][T10380] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1354'. [ 182.366015][T10387] FAULT_INJECTION: forcing a failure. [ 182.366015][T10387] name failslab, interval 1, probability 0, space 0, times 0 [ 182.416862][T10387] CPU: 1 UID: 0 PID: 10387 Comm: syz.0.1356 Not tainted 6.13.0-rc2-syzkaller-00131-g429fde2d81bc #0 [ 182.427723][T10387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 182.437885][T10387] Call Trace: [ 182.441199][T10387] [ 182.444164][T10387] dump_stack_lvl+0x241/0x360 [ 182.448929][T10387] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.454201][T10387] ? __pfx__printk+0x10/0x10 [ 182.458861][T10387] ? ref_tracker_alloc+0x332/0x490 [ 182.464030][T10387] should_fail_ex+0x3b0/0x4e0 [ 182.468777][T10387] should_failslab+0xac/0x100 [ 182.473516][T10387] ? skb_clone+0x20c/0x390 [ 182.477982][T10387] kmem_cache_alloc_noprof+0x70/0x380 [ 182.483414][T10387] skb_clone+0x20c/0x390 [ 182.487715][T10387] __netlink_deliver_tap+0x3cc/0x7f0 [ 182.493051][T10387] ? netlink_deliver_tap+0x2e/0x1b0 [ 182.498293][T10387] netlink_deliver_tap+0x19d/0x1b0 [ 182.503446][T10387] netlink_sendskb+0x68/0x140 [ 182.508207][T10387] netlink_unicast+0x39d/0x990 [ 182.513034][T10387] ? __pfx_netlink_unicast+0x10/0x10 [ 182.518422][T10387] netlink_rcv_skb+0x262/0x430 [ 182.523232][T10387] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 182.528729][T10387] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 182.534058][T10387] ? netlink_deliver_tap+0x2e/0x1b0 [ 182.539316][T10387] netlink_unicast+0x7f6/0x990 [ 182.544116][T10387] ? __pfx_netlink_unicast+0x10/0x10 [ 182.549434][T10387] ? __virt_addr_valid+0x45f/0x530 [ 182.554567][T10387] ? __phys_addr_symbol+0x2f/0x70 [ 182.559626][T10387] ? __check_object_size+0x47a/0x730 [ 182.564952][T10387] netlink_sendmsg+0x8e4/0xcb0 [ 182.569759][T10387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.575071][T10387] ? aa_sock_msg_perm+0x91/0x160 [ 182.580034][T10387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.585337][T10387] __sock_sendmsg+0x221/0x270 [ 182.590070][T10387] ____sys_sendmsg+0x52a/0x7e0 [ 182.594885][T10387] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.600193][T10387] ? __fget_files+0x2a/0x410 [ 182.604808][T10387] ? __fget_files+0x2a/0x410 [ 182.609420][T10387] __sys_sendmsg+0x269/0x350 [ 182.614021][T10387] ? __pfx_lock_release+0x10/0x10 [ 182.619103][T10387] ? __pfx___sys_sendmsg+0x10/0x10 [ 182.624242][T10387] ? __pfx_vfs_write+0x10/0x10 [ 182.629041][T10387] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 182.635389][T10387] ? do_syscall_64+0x100/0x230 [ 182.640187][T10387] ? do_syscall_64+0xb6/0x230 [ 182.644887][T10387] do_syscall_64+0xf3/0x230 [ 182.649413][T10387] ? clear_bhb_loop+0x35/0x90 [ 182.654116][T10387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.660031][T10387] RIP: 0033:0x7fb702b85d19 [ 182.664474][T10387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.684099][T10387] RSP: 002b:00007fb703a8a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.692531][T10387] RAX: ffffffffffffffda RBX: 00007fb702d75fa0 RCX: 00007fb702b85d19 [ 182.700515][T10387] RDX: 0000000020000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 182.708496][T10387] RBP: 00007fb703a8a090 R08: 0000000000000000 R09: 0000000000000000 [ 182.716477][T10387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.724461][T10387] R13: 0000000000000000 R14: 00007fb702d75fa0 R15: 00007ffc66f0c288 [ 182.732458][T10387] [ 182.787251][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1357'. [ 182.919024][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1357'. [ 182.928705][T10401] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 183.141511][T10407] netlink: 'syz.2.1361': attribute type 10 has an invalid length. [ 183.160228][T10407] veth1_macvtap: left promiscuous mode [ 183.233956][T10413] geneve3: entered promiscuous mode [ 183.246199][T10413] geneve3: entered allmulticast mode [ 183.322839][T10420] bridge0: left allmulticast mode [ 183.345232][T10420] ip6tnl1: left allmulticast mode [ 183.354325][T10419] netlink: 'syz.0.1365': attribute type 4 has an invalid length. [ 183.426957][ T3573] batadv1: left promiscuous mode [ 183.645577][T10432] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1369'. [ 183.968552][T10444] netlink: 'syz.1.1372': attribute type 1 has an invalid length. [ 184.071428][T10444] 8021q: adding VLAN 0 to HW filter on device bond4 [ 184.214485][T10446] bond4: (slave veth5): Enslaving as an active interface with a down link [ 184.290358][T10452] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 184.322868][T10452] bond4: (slave batadv1): making interface the new active one [ 184.357045][T10452] batadv1: entered promiscuous mode [ 184.381116][T10452] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 184.508913][T10461] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1379'. [ 184.518299][T10461] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1379'. [ 184.549414][T10471] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1383'. [ 185.028254][T10491] can: request_module (can-proto-0) failed. [ 185.073047][T10496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.328544][T10511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.798092][T10501] lo speed is unknown, defaulting to 1000 [ 185.904324][T10540] netlink: 'syz.3.1402': attribute type 11 has an invalid length. [ 186.085401][T10549] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 186.154620][T10552] team0: Mode changed to "loadbalance" [ 186.517614][T10564] netlink: 'syz.4.1410': attribute type 4 has an invalid length. [ 186.794477][T10580] tipc: Enabling of bearer rejected, already enabled [ 187.050210][T10594] __nla_validate_parse: 73 callbacks suppressed [ 187.050232][T10594] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1416'. [ 187.080420][T10596] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1419'. [ 187.112238][T10596] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 187.273400][T10603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1421'. [ 187.395458][T10609] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1424'. [ 187.581747][T10621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1428'. [ 187.598005][T10618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1426'. [ 187.607142][T10618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1426'. [ 187.689657][T10624] netlink: 'syz.1.1428': attribute type 1 has an invalid length. [ 188.045579][T10642] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1434'. [ 188.068222][T10642] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 188.353514][T10654] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1438'. [ 188.586822][T10663] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.594003][T10663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.649789][T10666] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1441'. [ 188.718297][T10664] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.725462][T10664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.747131][T10663] netlink: 'syz.0.1439': attribute type 2 has an invalid length. [ 188.933087][T10676] netlink: 'syz.0.1444': attribute type 7 has an invalid length. [ 189.458240][T10699] xt_bpf: check failed: parse error [ 189.695282][T10713] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 190.159139][T10733] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 190.247687][T10738] syz.2.1468 uses old SIOCAX25GETINFO [ 190.690405][T10767] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 190.716288][T10767] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 190.744758][T10767] gretap3: entered promiscuous mode [ 190.758550][T10767] gretap3: entered allmulticast mode [ 191.190181][T10796] ieee802154 phy0 wpan0: encryption failed: -22 [ 191.295800][T10802] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 191.363984][T10809] nbd: must specify an index to disconnect [ 191.746853][ T5145] Bluetooth: hci0: command tx timeout [ 192.108811][T10846] macvlan2: entered promiscuous mode [ 192.116377][T10846] macvlan2: entered allmulticast mode [ 192.129464][T10839] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 192.204595][T10851] __nla_validate_parse: 17 callbacks suppressed [ 192.204616][T10851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1496'. [ 192.239310][T10849] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1495'. [ 192.254747][T10851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1496'. [ 192.269332][T10848] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1495'. [ 192.448006][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.459307][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.633014][T10869] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1505'. [ 193.328691][T10895] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1515'. [ 193.475659][T10903] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 193.667369][T10911] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1521'. [ 194.080367][T10928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1526'. [ 194.091066][T10928] bridge0: left allmulticast mode [ 194.179327][T10931] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1528'. [ 194.469625][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1531'. [ 194.545462][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.559098][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.650561][T10952] netlink: 'syz.1.1534': attribute type 21 has an invalid length. [ 195.285719][T10980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.506408][T10998] netlink: 'syz.0.1546': attribute type 33 has an invalid length. [ 195.655255][ T3448] batadv1: left promiscuous mode [ 196.226675][T11039] pim6reg1: entered promiscuous mode [ 196.256720][T11039] pim6reg1: entered allmulticast mode [ 196.374438][T11051] netlink: 'syz.3.1561': attribute type 3 has an invalid length. [ 196.412678][T11051] xt_nat: multiple ranges no longer supported [ 196.617130][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 196.617680][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 196.628771][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 196.774771][T11063] netlink: 'syz.3.1565': attribute type 30 has an invalid length. [ 196.796903][T11063] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 196.806111][T11063] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 197.089303][T11075] netlink: 'syz.3.1570': attribute type 1 has an invalid length. [ 197.203495][T11083] netlink: 'syz.2.1571': attribute type 25 has an invalid length. [ 197.247711][T11083] __nla_validate_parse: 11 callbacks suppressed [ 197.247738][T11083] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1571'. [ 197.543033][T11101] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1575'. [ 197.721979][T11110] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1580'. [ 197.746929][T11110] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1580'. [ 197.762305][T11115] netlink: 'syz.0.1581': attribute type 1 has an invalid length. [ 197.789168][T11112] netlink: 'syz.1.1578': attribute type 1 has an invalid length. [ 197.797429][T11112] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1578'. [ 197.810719][T11110] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1580'. [ 198.134481][T11138] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.151857][T11134] netlink: 'syz.4.1586': attribute type 10 has an invalid length. [ 198.470420][T11159] netlink: 'syz.2.1593': attribute type 3 has an invalid length. [ 198.479195][T11159] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1593'. [ 198.931310][T11176] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1595'. [ 200.023003][T11217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1604'. [ 200.041226][T11217] validate_nla: 1 callbacks suppressed [ 200.041250][T11217] netlink: 'syz.1.1604': attribute type 3 has an invalid length. [ 200.065584][T11220] vlan3: entered promiscuous mode [ 200.353838][T11233] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1608'. [ 200.354390][T11231] geneve2: entered promiscuous mode [ 200.363482][T11231] geneve2: entered allmulticast mode [ 201.257795][T11274] netlink: 'syz.3.1620': attribute type 16 has an invalid length. [ 201.265876][T11274] netlink: 'syz.3.1620': attribute type 3 has an invalid length. [ 201.468686][T11269] bond0 (unregistering): (slave 00ªĂøÂFNđ¡): Releasing backup interface [ 201.502669][T11269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.527166][T11269] bond0 (unregistering): Released all slaves [ 201.842494][T11292] netlink: 'syz.2.1625': attribute type 2 has an invalid length. [ 201.872425][T11292] netlink: 'syz.2.1625': attribute type 2 has an invalid length. [ 201.901024][T11292] netlink: 'syz.2.1625': attribute type 2 has an invalid length. [ 202.110719][T11306] batadv_slave_1: entered promiscuous mode [ 202.118187][T11304] batadv_slave_1: left promiscuous mode [ 202.273891][T11313] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 202.295693][T11313] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 202.450357][T11318] pim6reg527: entered allmulticast mode [ 202.471106][T11318] netlink: 'syz.1.1633': attribute type 14 has an invalid length. [ 202.623373][T11326] __nla_validate_parse: 4 callbacks suppressed [ 202.623396][T11326] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1635'. [ 202.787937][T11328] veth7: entered allmulticast mode [ 202.812168][T11333] ip_vti0: entered promiscuous mode [ 202.826945][T11333] vlan3: entered promiscuous mode [ 202.895795][T11333] ip_vti0: left promiscuous mode [ 203.177235][T11344] netlink: 'syz.0.1642': attribute type 10 has an invalid length. [ 203.195384][T11344] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 203.215639][T11344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.426900][T11355] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1644'. [ 203.442501][T11354] openvswitch: netlink: Key type 34 is out of range max 32 [ 203.693600][T11360] IPVS: length: 131 != 8 [ 203.783393][T11365] ip6tnl1: entered promiscuous mode [ 203.789917][T11365] ip6tnl1: entered allmulticast mode [ 203.861530][T11367] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1649'. [ 203.872131][T11365] veth7: entered allmulticast mode [ 203.990398][T11367] xt_bpf: check failed: parse error [ 204.372381][T11390] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1657'. [ 204.414308][T11391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1655'. [ 204.628319][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1659'. [ 204.912783][T11417] netlink: 'syz.3.1665': attribute type 29 has an invalid length. [ 204.923577][T11417] netlink: 'syz.3.1665': attribute type 29 has an invalid length. [ 204.936725][T11417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1665'. [ 204.948119][T11417] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1665'. [ 204.959551][T11419] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1664'. [ 205.092048][T11425] netlink: 'syz.3.1666': attribute type 15 has an invalid length. [ 205.116787][T11425] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1666'. [ 205.550992][T11443] netlink: 'syz.0.1672': attribute type 5 has an invalid length. [ 205.952344][T11458] –eth0_vlan: renamed from bridge_slave_1 (while UP) [ 206.320191][T11474] x_tables: duplicate underflow at hook 1 [ 206.617918][T11487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.874522][T11494] 8021q: adding VLAN 0 to HW filter on device bond6 [ 207.447429][T11524] lo: entered promiscuous mode [ 207.475196][T11524] netlink: 'syz.2.1702': attribute type 2 has an invalid length. [ 207.504217][T11524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.802712][T11548] __nla_validate_parse: 13 callbacks suppressed [ 207.802737][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1711'. [ 208.308055][T11567] pimreg: entered allmulticast mode [ 208.323825][T11569] netlink: 'syz.4.1719': attribute type 1 has an invalid length. [ 208.365719][T11569] 8021q: adding VLAN 0 to HW filter on device bond4 [ 208.403171][T11571] 8021q: adding VLAN 0 to HW filter on device bond4 [ 208.414268][T11571] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 208.426150][T11571] bond4: (slave wireguard0): Error -95 calling set_mac_address [ 208.461796][T11569] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 208.478091][T11569] bond4: (slave batadv1): making interface the new active one [ 208.487884][T11569] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 208.738549][T11582] netlink: 'syz.1.1722': attribute type 10 has an invalid length. [ 208.758317][T11581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1723'. [ 208.802948][T11585] hsr0: entered promiscuous mode [ 208.808840][T11588] netlink: 'syz.1.1722': attribute type 10 has an invalid length. [ 209.361034][ T5908] hid-generic 0005:046D:FFF9.0003: item fetching failed at offset 0/1 [ 209.377380][ T5908] hid-generic 0005:046D:FFF9.0003: probe with driver hid-generic failed with error -22 [ 209.437275][T11613] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1732'. [ 209.446950][T11614] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1732'. [ 209.884662][T11635] net veth1_virt_wifi : renamed from virt_wifi0 [ 210.197975][T11646] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1744'. [ 210.317316][T11653] netlink: 'syz.1.1745': attribute type 10 has an invalid length. [ 210.517189][T11653] veth1_macvtap: left promiscuous mode [ 210.906791][T11663] netlink: 'syz.1.1748': attribute type 2 has an invalid length. [ 210.912060][T11675] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1750'. [ 211.052233][T11680] netlink: 'syz.0.1749': attribute type 10 has an invalid length. [ 211.107556][T11682] veth0_to_hsr: entered promiscuous mode [ 211.189732][T11682] netlink: 'syz.1.1753': attribute type 29 has an invalid length. [ 211.221186][T11682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1753'. [ 211.243958][T11692] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1756'. [ 211.274725][T11692] netlink: 'syz.4.1756': attribute type 1 has an invalid length. [ 211.292602][T11692] netlink: 'syz.4.1756': attribute type 3 has an invalid length. [ 211.301289][T11692] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1756'. [ 211.448214][T11693] hsr_slave_0 (unregistering): left promiscuous mode [ 211.463628][T11697] netlink: 1044 bytes leftover after parsing attributes in process `syz.3.1757'. [ 212.070410][T11732] openvswitch: netlink: Flow actions attr not present in new flow. [ 212.144332][T11735] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 212.186929][T11735] openvswitch: netlink: Flow actions attr not present in new flow. [ 212.730703][T11763] Bluetooth: MGMT ver 1.23 [ 212.848278][T11768] __nla_validate_parse: 5 callbacks suppressed [ 212.848302][T11768] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1782'. [ 213.082239][T11778] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1784'. [ 213.540931][T11803] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1790'. [ 213.573648][T11808] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 213.755445][T11814] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1793'. [ 213.808952][T11816] netlink: 'syz.3.1794': attribute type 30 has an invalid length. [ 213.850627][T11818] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1795'. [ 213.863471][T11818] netlink: 'syz.4.1795': attribute type 9 has an invalid length. [ 214.068632][T11822] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1796'. [ 214.091751][T11823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1797'. [ 214.119120][T11823] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1797'. [ 214.161276][T11825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1796'. [ 214.396867][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1796'. [ 214.484853][T11831] netlink: 'syz.0.1798': attribute type 9 has an invalid length. [ 215.125044][T11853] IPVS: set_ctl: invalid protocol: 1 172.30.0.4:20000 [ 215.415873][T11868] dvmrp1: entered allmulticast mode [ 215.449643][T11868] dvmrp0: left allmulticast mode [ 215.454750][T11868] dvmrp1: left allmulticast mode [ 215.742445][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bef4400: rx timeout, send abort [ 215.752835][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ea81400: rx timeout, send abort [ 215.762293][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807bef4400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 215.778121][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ea81400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 215.902786][T11891] netlink: 'syz.2.1817': attribute type 29 has an invalid length. [ 215.958716][T11891] netlink: 'syz.2.1817': attribute type 29 has an invalid length. [ 216.130177][T11901] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 216.183712][T11907] nbd: couldn't find device at index 0 [ 216.437379][T11917] netlink: 'syz.1.1827': attribute type 10 has an invalid length. [ 216.476062][T11917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.532336][T11917] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 216.750659][T11932] netlink: 'syz.2.1832': attribute type 4 has an invalid length. [ 216.750907][ T8] IPVS: starting estimator thread 0... [ 216.796012][T11932] netlink: 'syz.2.1832': attribute type 4 has an invalid length. [ 216.852734][T11936] IPVS: using max 19 ests per chain, 45600 per kthread [ 216.914856][T11943] netlink: 'syz.4.1834': attribute type 2 has an invalid length. [ 217.104871][T11950] netlink: 'syz.1.1839': attribute type 3 has an invalid length. [ 217.172848][T11955] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 217.233963][T11955] nbd: couldn't find device at index 0 [ 217.807968][T11987] xt_CT: You must specify a L4 protocol and not use inversions on it [ 218.048453][T11993] __nla_validate_parse: 11 callbacks suppressed [ 218.048487][T11993] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1854'. [ 218.048779][T11996] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 218.102346][T11996] nbd: couldn't find device at index 0 [ 218.313668][T12009] x_tables: duplicate underflow at hook 1 [ 218.597651][T12022] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1864'. [ 218.966365][T12044] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1869'. [ 218.969493][T12045] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1870'. [ 219.000632][T12044] netlink: 'syz.4.1869': attribute type 11 has an invalid length. [ 219.028512][T12044] x_tables: duplicate underflow at hook 4 [ 219.431844][T12070] netlink: 'syz.0.1874': attribute type 10 has an invalid length. [ 219.503562][T12067] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 219.547388][T12067] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 219.638503][T12082] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1880'. [ 219.661415][T12082] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1880'. [ 219.828701][T12090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1883'. [ 240.579457][T12143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1898'. [ 240.605324][T12148] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1899'. [ 240.810774][T12156] IPv6: sit4: Disabled Multicast RS [ 241.045591][T12174] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1908'. [ 241.169443][T12173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1908'. [ 241.196196][T12173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1908'. [ 241.225962][T12179] netlink: 'syz.0.1910': attribute type 1 has an invalid length. [ 241.398836][T12195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.624316][T12205] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 241.753979][T12207] pim6reg1: entered promiscuous mode [ 241.763622][T12207] pim6reg1: entered allmulticast mode [ 241.812759][T12209] netlink: 'syz.2.1920': attribute type 13 has an invalid length. [ 241.821837][T12209] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1920'. [ 241.836462][T12209] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 241.895645][T12209] netlink: 'syz.2.1920': attribute type 1 has an invalid length. [ 242.376058][T12230] sctp: [Deprecated]: syz.1.1925 (pid 12230) Use of struct sctp_assoc_value in delayed_ack socket option. [ 242.376058][T12230] Use struct sctp_sack_info instead [ 242.728125][T12252] tipc: Enabled bearer , priority 7 [ 242.757401][T12252] ªªªªªª: renamed from syzkaller0 [ 242.785741][T12252] tipc: Disabling bearer [ 242.818497][T12261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1933'. [ 242.924252][T12269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1936'. [ 242.937026][T12266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1935'. [ 242.951914][T12269] netlink: 'syz.2.1936': attribute type 4 has an invalid length. [ 243.063768][T12271] netlink: 'syz.4.1937': attribute type 1 has an invalid length. [ 243.093832][T12271] netlink: 134744 bytes leftover after parsing attributes in process `syz.4.1937'. [ 243.107975][T12278] netlink: zone id is out of range [ 243.113161][T12278] netlink: zone id is out of range [ 243.152385][T12278] netlink: zone id is out of range [ 243.187141][T12278] netlink: zone id is out of range [ 243.212019][T12278] netlink: zone id is out of range [ 243.237050][T12278] netlink: zone id is out of range [ 243.242245][T12278] netlink: zone id is out of range [ 243.247654][T12278] netlink: zone id is out of range [ 243.430338][T12296] netlink: 'syz.4.1944': attribute type 4 has an invalid length. [ 243.607119][T12304] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 243.655249][T12304] nbd: couldn't find device at index 0 [ 243.852637][T12314] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20003 [ 244.276026][T12334] netlink: 'syz.0.1953': attribute type 11 has an invalid length. [ 244.778535][T12362] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 244.801908][T12362] nbd: couldn't find device at index 0 [ 245.399469][T12400] tipc: Started in network mode [ 245.427154][T12400] tipc: Node identity , cluster identity 4711 [ 245.449096][T12400] tipc: Failed to set node id, please configure manually [ 245.475436][T12400] tipc: Enabling of bearer rejected, failed to enable media [ 245.527712][T12405] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 245.573919][T12405] nbd: couldn't find device at index 0 [ 245.630620][T12409] __nla_validate_parse: 7 callbacks suppressed [ 245.630643][T12409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1976'. [ 245.784196][T12419] netlink: 'syz.4.1978': attribute type 16 has an invalid length. [ 245.807062][T12419] netlink: 'syz.4.1978': attribute type 3 has an invalid length. [ 245.837083][T12419] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1978'. [ 246.069217][T12433] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1982'. [ 246.181751][T12441] netlink: 'syz.0.1985': attribute type 1 has an invalid length. [ 246.239611][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1986'. [ 246.276777][T12444] –eth0_vlan: left allmulticast mode [ 246.297199][T12444] –eth0_vlan: left promiscuous mode [ 246.331739][T12444] bridge0: port 2(–eth0_vlan) entered disabled state [ 246.358908][T12444] bridge_slave_0: left allmulticast mode [ 246.366815][T12444] bridge_slave_0: left promiscuous mode [ 246.382904][T12444] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.474146][T12461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1990'. [ 246.544478][T12463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1994'. [ 246.557854][T12463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.572693][T12463] x_tables: duplicate underflow at hook 2 [ 246.580552][T12448] IPv6: Can't replace route, no match found [ 246.728898][T12476] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1995'. [ 246.834804][T12477] netlink: 'syz.3.1996': attribute type 1 has an invalid length. [ 246.842840][T12477] netlink: 'syz.3.1996': attribute type 2 has an invalid length. [ 246.852738][T12478] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1997'. [ 246.864667][T12477] net_ratelimit: 129 callbacks suppressed [ 246.864688][T12477] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 246.903943][T12481] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 247.089679][T12488] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1999'. [ 247.104504][T12488] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 247.111604][T12493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2000'. [ 247.155833][T12488] nbd: couldn't find device at index 0 [ 247.616199][T12512] netlink: 'syz.1.2009': attribute type 12 has an invalid length. [ 247.895211][T12526] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 247.967611][T12534] FAULT_INJECTION: forcing a failure. [ 247.967611][T12534] name failslab, interval 1, probability 0, space 0, times 0 [ 248.018648][T12534] CPU: 0 UID: 0 PID: 12534 Comm: syz.4.2012 Not tainted 6.13.0-rc2-syzkaller-00131-g429fde2d81bc #0 [ 248.029508][T12534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 248.039614][T12534] Call Trace: [ 248.042938][T12534] [ 248.045906][T12534] dump_stack_lvl+0x241/0x360 [ 248.050671][T12534] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.055934][T12534] ? __pfx__printk+0x10/0x10 [ 248.060592][T12534] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 248.066637][T12534] ? __pfx___might_resched+0x10/0x10 [ 248.072000][T12534] should_fail_ex+0x3b0/0x4e0 [ 248.076745][T12534] should_failslab+0xac/0x100 [ 248.081474][T12534] kmem_cache_alloc_node_noprof+0x77/0x380 [ 248.087330][T12534] ? __alloc_skb+0x1c3/0x440 [ 248.091970][T12534] __alloc_skb+0x1c3/0x440 [ 248.096433][T12534] ? __pfx___alloc_skb+0x10/0x10 [ 248.101410][T12534] ? netlink_autobind+0xd6/0x2f0 [ 248.106398][T12534] ? netlink_autobind+0x2b0/0x2f0 [ 248.111464][T12534] netlink_sendmsg+0x638/0xcb0 [ 248.116253][T12534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.121581][T12534] ? aa_sock_msg_perm+0x91/0x160 [ 248.126602][T12534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.132201][T12534] __sock_sendmsg+0x221/0x270 [ 248.136916][T12534] ____sys_sendmsg+0x52a/0x7e0 [ 248.141720][T12534] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.147021][T12534] ? __fget_files+0x2a/0x410 [ 248.151718][T12534] ? __fget_files+0x2a/0x410 [ 248.156329][T12534] __sys_sendmsg+0x269/0x350 [ 248.161023][T12534] ? __pfx_lock_release+0x10/0x10 [ 248.166066][T12534] ? __pfx___sys_sendmsg+0x10/0x10 [ 248.171210][T12534] ? __pfx_vfs_write+0x10/0x10 [ 248.176004][T12534] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 248.182363][T12534] ? do_syscall_64+0x100/0x230 [ 248.187162][T12534] ? do_syscall_64+0xb6/0x230 [ 248.191858][T12534] do_syscall_64+0xf3/0x230 [ 248.196390][T12534] ? clear_bhb_loop+0x35/0x90 [ 248.201099][T12534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.207011][T12534] RIP: 0033:0x7f864f185d19 [ 248.211436][T12534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.231148][T12534] RSP: 002b:00007f864ff0d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.239582][T12534] RAX: ffffffffffffffda RBX: 00007f864f376080 RCX: 00007f864f185d19 [ 248.247567][T12534] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000009 [ 248.255547][T12534] RBP: 00007f864ff0d090 R08: 0000000000000000 R09: 0000000000000000 [ 248.263534][T12534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.271516][T12534] R13: 0000000000000000 R14: 00007f864f376080 R15: 00007ffcd983b2f8 [ 248.279514][T12534] [ 248.539713][T12513] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 248.667252][T12556] openvswitch: netlink: nsh attr 0 has unexpected len 507 expected 0 [ 248.700990][T12556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.883412][T12565] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 248.943569][T12565] nbd: couldn't find device at index 0 [ 249.197617][T12575] netlink: 'syz.2.2028': attribute type 1 has an invalid length. [ 249.636172][T12601] netlink: 'syz.1.2038': attribute type 1 has an invalid length. [ 249.727350][T12601] 8021q: adding VLAN 0 to HW filter on device bond5 [ 249.872186][T12611] x_tables: duplicate underflow at hook 2 [ 250.219370][T12620] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 250.233435][T12627] netlink: 'syz.0.2045': attribute type 5 has an invalid length. [ 250.279994][T12634] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 251.068592][T12665] __nla_validate_parse: 12 callbacks suppressed [ 251.068612][T12665] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2054'. [ 251.279385][T12671] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2055'. [ 252.171003][T12716] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2068'. [ 252.500613][T12734] x_tables: unsorted entry at hook 3 [ 252.576257][T12738] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 252.625337][T12728] geneve0: entered promiscuous mode [ 252.651532][T12728] geneve0: left promiscuous mode [ 253.233521][T12772] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2084'. [ 253.352030][T12783] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 253.397625][T12783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2086'. [ 253.532077][T12792] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2090'. [ 253.578468][T12792] xt_bpf: check failed: parse error [ 253.860137][T12814] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2096'. [ 253.968129][T12816] Cannot find add_set index 3 as target [ 254.025063][T12823] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2101'. [ 254.035400][T12823] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2101'. [ 254.443483][T12842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2107'. [ 254.608173][T12858] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 254.827124][T12868] openvswitch: netlink: nsh attr 0 has unexpected len 507 expected 0 [ 254.841116][T12868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.609993][T12910] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 255.769295][T12878] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 255.981942][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.988946][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.043261][T12930] netlink: 'syz.1.2132': attribute type 5 has an invalid length. [ 256.389894][T12947] __nla_validate_parse: 5 callbacks suppressed [ 256.389916][T12947] netlink: 45 bytes leftover after parsing attributes in process `syz.3.2141'. [ 256.418652][T12948] netlink: 45 bytes leftover after parsing attributes in process `syz.3.2141'. [ 256.462108][T12955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2142'. [ 256.668282][T12964] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2145'. [ 256.939623][T12977] netlink: 'syz.2.2149': attribute type 1 has an invalid length. [ 257.008192][T12979] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2151'. [ 257.147187][T12984] IPVS: Unknown mcast interface: pim6reg0 [ 257.179938][T12979] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 257.349869][T12993] sctp: [Deprecated]: syz.4.2156 (pid 12993) Use of int in max_burst socket option deprecated. [ 257.349869][T12993] Use struct sctp_assoc_value instead [ 257.478304][T13003] netlink: 'syz.3.2159': attribute type 6 has an invalid length. [ 257.622135][T13018] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2162'. [ 257.644344][T13018] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 257.781546][T13018] nbd: couldn't find device at index 0 [ 258.059686][T13038] sctp: [Deprecated]: syz.3.2168 (pid 13038) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.059686][T13038] Use struct sctp_sack_info instead [ 258.202100][T13046] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2171'. [ 258.230430][T13046] netlink: 'syz.0.2171': attribute type 8 has an invalid length. [ 258.239258][T13046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2171'. [ 258.615640][T13037] lo speed is unknown, defaulting to 1000 [ 258.664522][T13064] v: renamed from veth1_virt_wifi (while UP) [ 258.749776][T13066] geneve2: entered promiscuous mode [ 258.755077][T13066] geneve2: entered allmulticast mode [ 259.037245][T13076] veth0: entered promiscuous mode [ 259.077153][T13075] veth0: left promiscuous mode [ 259.462170][T13095] netlink: 'syz.2.2187': attribute type 5 has an invalid length. [ 259.603798][T13103] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 259.615938][T13100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2188'. [ 259.703036][T13109] nbd: couldn't find device at index 0 [ 259.732030][T13108] ieee802154 phy0 wpan0: encryption failed: -90 [ 259.741308][T13105] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 259.808545][T13108] batman_adv: batadv0: adding TT local entry 02:04:00:bf:05:00 to non-existent VLAN 1280 [ 259.832251][T13105] nbd: couldn't find device at index 0 [ 260.196871][T13126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2199'. [ 260.592741][T13152] sch_fq: defrate 0 ignored. [ 260.682757][T13155] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 260.742617][T13155] nbd: couldn't find device at index 0 [ 260.987342][T13166] sctp: [Deprecated]: syz.3.2214 (pid 13166) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.987342][T13166] Use struct sctp_sack_info instead [ 261.010234][T13164] netlink: 'syz.2.2212': attribute type 1 has an invalid length. [ 261.022387][T13169] netlink: 'syz.4.2215': attribute type 7 has an invalid length. [ 261.076391][T13169] xfrm1: entered promiscuous mode [ 261.092952][T13169] xfrm1: entered allmulticast mode [ 261.307691][T13181] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 261.357051][T13185] netlink: 'syz.4.2220': attribute type 10 has an invalid length. [ 261.429011][T13190] __nla_validate_parse: 6 callbacks suppressed [ 261.429035][T13190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2221'. [ 261.595312][T13194] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2222'. [ 261.625031][T13194] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 261.664319][T13194] nbd: couldn't find device at index 0 [ 261.739217][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2223'. [ 262.131181][ T8] hid-generic 0005:7FFF:0008.0004: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 262.226294][T13226] netlink: 'syz.1.2231': attribute type 1 has an invalid length. [ 262.299303][T13226] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2231'. [ 262.564774][T13243] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2233'. [ 262.653996][T13248] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2236'. [ 262.681761][T13248] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 262.727994][T13250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2237'. [ 262.738434][T13248] nbd: couldn't find device at index 0 [ 262.859696][T13252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2238'. [ 262.914466][T13256] Cannot find del_set index 4 as target [ 263.390580][T13278] xt_cgroup: xt_cgroup: no path or classid specified [ 263.430956][T13281] netlink: 'syz.0.2249': attribute type 13 has an invalid length. [ 263.528539][T13284] x_tables: duplicate underflow at hook 1 [ 263.539071][T13284] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2250'. [ 263.923104][T13298] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2252'. [ 263.975854][T13298] netlink: get zone limit has 8 unknown bytes [ 264.263334][T13319] syzkaller1: entered promiscuous mode [ 264.272912][T13319] syzkaller1: entered allmulticast mode [ 264.276644][T13329] syz.0.2262: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 264.327019][T13329] CPU: 1 UID: 0 PID: 13329 Comm: syz.0.2262 Not tainted 6.13.0-rc2-syzkaller-00131-g429fde2d81bc #0 [ 264.337887][T13329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 264.347991][T13329] Call Trace: [ 264.351314][T13329] [ 264.354302][T13329] dump_stack_lvl+0x241/0x360 [ 264.359046][T13329] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.364310][T13329] ? __pfx__printk+0x10/0x10 [ 264.368980][T13329] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 264.375559][T13329] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 264.382143][T13329] warn_alloc+0x278/0x410 [ 264.386526][T13329] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 264.392648][T13329] ? __pfx_warn_alloc+0x10/0x10 [ 264.397561][T13329] ? kasan_save_track+0x3f/0x80 [ 264.402467][T13329] ? __kasan_kmalloc+0x98/0xb0 [ 264.407261][T13329] ? xsk_setsockopt+0x4ea/0x950 [ 264.412128][T13329] ? do_sock_setsockopt+0x3af/0x720 [ 264.417348][T13329] ? __x64_sys_setsockopt+0x1ee/0x280 [ 264.422743][T13329] ? do_syscall_64+0xf3/0x230 [ 264.427442][T13329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.433545][T13329] __vmalloc_node_range_noprof+0x126/0x1380 [ 264.439479][T13329] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 264.445830][T13329] ? __kasan_kmalloc+0x98/0xb0 [ 264.450613][T13329] vmalloc_user_noprof+0x74/0x80 [ 264.455561][T13329] ? xskq_create+0xb6/0x170 [ 264.460086][T13329] xskq_create+0xb6/0x170 [ 264.464432][T13329] xsk_init_queue+0xa1/0x100 [ 264.469041][T13329] xsk_setsockopt+0x4ea/0x950 [ 264.473733][T13329] ? __pfx_xsk_setsockopt+0x10/0x10 [ 264.478947][T13329] ? __pfx_aa_sk_perm+0x10/0x10 [ 264.483829][T13329] ? aa_sock_opt_perm+0x79/0x120 [ 264.488785][T13329] ? __pfx_xsk_setsockopt+0x10/0x10 [ 264.494010][T13329] do_sock_setsockopt+0x3af/0x720 [ 264.499060][T13329] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 264.504623][T13329] ? __fget_files+0x395/0x410 [ 264.509320][T13329] ? __fget_files+0x2a/0x410 [ 264.513933][T13329] __x64_sys_setsockopt+0x1ee/0x280 [ 264.519161][T13329] do_syscall_64+0xf3/0x230 [ 264.523683][T13329] ? clear_bhb_loop+0x35/0x90 [ 264.528387][T13329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.534302][T13329] RIP: 0033:0x7fb702b85d19 [ 264.538730][T13329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.558368][T13329] RSP: 002b:00007fb703a8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 264.566810][T13329] RAX: ffffffffffffffda RBX: 00007fb702d75fa0 RCX: 00007fb702b85d19 [ 264.574803][T13329] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 264.582785][T13329] RBP: 00007fb702c01a20 R08: 0000000000000004 R09: 0000000000000000 [ 264.590789][T13329] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.598778][T13329] R13: 0000000000000000 R14: 00007fb702d75fa0 R15: 00007ffc66f0c288 [ 264.606779][T13329] [ 264.633413][T13329] Mem-Info: [ 264.646695][T13329] active_anon:4221 inactive_anon:0 isolated_anon:0 [ 264.646695][T13329] active_file:1641 inactive_file:38326 isolated_file:0 [ 264.646695][T13329] unevictable:768 dirty:178 writeback:0 [ 264.646695][T13329] slab_reclaimable:11869 slab_unreclaimable:113322 [ 264.646695][T13329] mapped:29735 shmem:1486 pagetables:718 [ 264.646695][T13329] sec_pagetables:0 bounce:0 [ 264.646695][T13329] kernel_misc_reclaimable:0 [ 264.646695][T13329] free:1327391 free_pcp:205 free_cma:0 [ 264.723460][T13340] netlink: 'syz.0.2262': attribute type 3 has an invalid length. [ 264.741306][T13329] Node 0 active_anon:17084kB inactive_anon:0kB active_file:6564kB inactive_file:153228kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119540kB dirty:712kB writeback:0kB shmem:4408kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11688kB pagetables:2972kB sec_pagetables:0kB all_unreclaimable? no [ 264.784292][T13329] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 264.825021][T13329] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 264.870929][T13329] lowmem_reserve[]: 0 2465 2466 0 0 [ 264.884514][T13329] Node 0 DMA32 free:1384108kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:16944kB inactive_anon:0kB active_file:6564kB inactive_file:152392kB unevictable:1536kB writepending:712kB present:3129332kB managed:2552780kB mlocked:0kB bounce:0kB free_pcp:1328kB local_pcp:864kB free_cma:0kB [ 264.925314][T13329] lowmem_reserve[]: 0 0 0 0 0 [ 264.930779][T13329] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 264.987079][T13329] lowmem_reserve[]: 0 0 0 0 0 [ 264.992068][T13329] Node 1 Normal free:3910292kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 265.035583][T13329] lowmem_reserve[]: 0 0 0 0 0 [ 265.051381][T13329] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 265.080970][T13329] Node 0 DMA32: 132*4kB (UE) 330*8kB (UME) 253*16kB (UME) 160*32kB (UME) 197*64kB (UME) 69*128kB (UME) 31*256kB (UME) 9*512kB (UM) 12*1024kB (UM) 1*2048kB (U) 323*4096kB (UM) = 1383664kB [ 265.120636][T13329] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 265.145515][T13329] Node 1 Normal: 199*4kB (U) 43*8kB (UME) 42*16kB (UME) 198*32kB (UME) 99*64kB (UME) 26*128kB (UME) 17*256kB (UME) 12*512kB (UME) 3*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3910292kB [ 265.165885][T13329] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 265.176241][T13329] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 265.187379][T13329] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 265.198708][T13329] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 265.232640][T13329] 41453 total pagecache pages [ 265.245463][T13329] 0 pages in swap cache [ 265.252364][T13329] Free swap = 124996kB [ 265.297081][T13329] Total swap = 124996kB [ 265.301526][T13329] 2097051 pages RAM [ 265.305373][T13329] 0 pages HighMem/MovableOnly [ 265.352532][T13329] 427006 pages reserved [ 265.360084][T13329] 0 pages cma reserved [ 266.520949][T13410] __nla_validate_parse: 12 callbacks suppressed [ 266.520972][T13410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2288'. [ 266.607026][T13413] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 266.744858][T13419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2291'. [ 266.821751][T13428] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2292'. [ 266.858950][T13429] netlink: 'syz.3.2294': attribute type 4 has an invalid length. [ 266.875172][T13429] IPv6: NLM_F_CREATE should be specified when creating new route [ 266.892174][T13431] sit0: entered promiscuous mode [ 266.902486][T13431] netlink: 'syz.1.2295': attribute type 1 has an invalid length. [ 266.911293][T13431] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2295'. [ 266.922062][T13432] netlink: 'syz.1.2295': attribute type 1 has an invalid length. [ 266.930425][T13432] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2295'. [ 266.945039][T13431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2295'. [ 266.954291][T13432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2295'. [ 267.070383][T13439] sctp: [Deprecated]: syz.2.2297 (pid 13439) Use of int in max_burst socket option deprecated. [ 267.070383][T13439] Use struct sctp_assoc_value instead [ 267.466084][T13459] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2305'. [ 267.520216][T13461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2304'. [ 267.570466][T13461] team1: entered promiscuous mode [ 267.599716][T13461] 8021q: adding VLAN 0 to HW filter on device team1 [ 267.774817][T13471] netlink: 'syz.2.2310': attribute type 8 has an invalid length. [ 268.014863][T13482] netlink: 'syz.1.2314': attribute type 10 has an invalid length. [ 268.106284][T13482] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 268.211371][T13497] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2317'. [ 268.746143][T13530] netlink: 'syz.0.2325': attribute type 2 has an invalid length. [ 269.260099][T13568] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 269.294794][T13568] netem: incorrect gi model size [ 269.327622][T13568] netem: change failed [ 269.720692][T13596] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 269.847746][T13596] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 269.886786][T13596] gretap1: entered promiscuous mode [ 269.895243][T13596] gretap1: entered allmulticast mode [ 270.086739][T13616] tipc: MTU too low for tipc bearer [ 270.291231][T13632] netlink: 'syz.2.2357': attribute type 21 has an invalid length. [ 270.392387][T13638] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 270.438144][T13638] nbd: couldn't find device at index 0 [ 270.446154][T13638] nbd: couldn't find device at index 0 [ 270.904645][T13656] sctp: [Deprecated]: syz.4.2364 (pid 13656) Use of int in max_burst socket option. [ 270.904645][T13656] Use struct sctp_assoc_value instead [ 270.979167][T13661] netlink: 'syz.2.2365': attribute type 33 has an invalid length. [ 271.446739][T13685] netlink: 'syz.3.2374': attribute type 3 has an invalid length. [ 271.473223][T13685] netlink: 'syz.3.2374': attribute type 3 has an invalid length. [ 272.592845][T13736] netlink: 'syz.4.2388': attribute type 24 has an invalid length. [ 272.989279][T13748] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 60 [ 273.442296][T13768] __nla_validate_parse: 8 callbacks suppressed [ 273.442320][T13768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2399'. [ 273.503351][T13772] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2400'. [ 273.540822][T13772] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 273.556302][T13776] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2402'. [ 273.665457][T13771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2401'. [ 273.683716][ T3437] tipc: Resetting bearer [ 273.887281][T13787] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2407'. [ 273.951483][T13792] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2408'. [ 273.963887][T13794] netlink: 'syz.2.2406': attribute type 5 has an invalid length. [ 273.973756][T13793] netlink: 'syz.0.2405': attribute type 20 has an invalid length. [ 274.189182][T13801] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2411'. [ 274.298469][T13805] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2414'. [ 274.389835][T13809] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2415'. [ 274.488329][T13812] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 274.512504][T13812] nbd: couldn't find device at index 0 [ 274.651563][T13819] Cannot find set identified by id 752 to match [ 274.731334][T13824] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2421'. [ 274.857602][T13830] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 275.085647][T13840] bridge_slave_1: left allmulticast mode [ 275.134783][T13840] bridge_slave_1: left promiscuous mode [ 275.159211][T13840] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.184841][T13840] bridge_slave_0: left allmulticast mode [ 275.192046][T13840] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.452492][T13855] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 275.528916][T13862] netlink: 'syz.2.2433': attribute type 1 has an invalid length. [ 275.577021][T13862] netlink: 'syz.2.2433': attribute type 2 has an invalid length. [ 276.229020][T13910] netlink: 'syz.1.2444': attribute type 1 has an invalid length. [ 276.414381][T13917] netlink: 'syz.4.2447': attribute type 1 has an invalid length. [ 276.654974][T13929] netlink: 'syz.4.2451': attribute type 6 has an invalid length. [ 278.217505][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 278.685854][T14043] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.695614][T14043] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.379138][T14069] __nla_validate_parse: 22 callbacks suppressed [ 279.379162][T14069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2493'. [ 279.552055][T14083] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2497'. [ 279.580573][T14086] netlink: 'syz.3.2499': attribute type 1 has an invalid length. [ 279.588663][T14086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2499'. [ 279.818317][T14095] sctp: [Deprecated]: syz.1.2502 (pid 14095) Use of int in maxseg socket option. [ 279.818317][T14095] Use struct sctp_assoc_value instead [ 280.042132][T14104] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2504'. [ 280.234521][T14116] sctp: [Deprecated]: syz.2.2510 (pid 14116) Use of int in max_burst socket option. [ 280.234521][T14116] Use struct sctp_assoc_value instead [ 280.569622][T14143] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2519'. [ 280.944069][T14160] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2524'. [ 280.956845][T14164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2525'. [ 281.062590][T14164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.071109][T14164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.121771][T14164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.130302][T14164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.300967][T14178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2528'. [ 281.319420][T14177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.389300][T14185] delete_channel: no stack [ 281.395335][T14164] bond0: (slave batadv0): Releasing backup interface [ 281.433001][T14180] netlink: 'syz.3.2530': attribute type 4 has an invalid length. [ 281.575385][T14192] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2534'. [ 281.585499][T14192] unsupported nlmsg_type 40 [ 281.669843][T14197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2537'. [ 281.868199][T14209] netlink: 'syz.4.2539': attribute type 4 has an invalid length. [ 281.893276][T14206] sctp: [Deprecated]: syz.1.2536 (pid 14206) Use of int in max_burst socket option. [ 281.893276][T14206] Use struct sctp_assoc_value instead [ 282.045203][T14215] openvswitch: netlink: Missing key (keys=40, expected=100) [ 282.058429][T14214] ipip0: entered promiscuous mode [ 282.086804][T14215] xt_ecn: cannot match TCP bits for non-tcp packets [ 282.289796][T14228] SET target dimension over the limit! [ 282.688501][T14257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.724841][T14263] netlink: 'syz.2.2554': attribute type 9 has an invalid length. [ 282.747754][T14265] netlink: 'syz.2.2554': attribute type 9 has an invalid length. [ 282.880652][T14270] netlink: 'syz.0.2556': attribute type 2 has an invalid length. [ 282.900811][T14270] netlink: 'syz.0.2556': attribute type 9 has an invalid length. [ 283.159886][T14282] netlink: 'syz.4.2559': attribute type 10 has an invalid length. [ 283.269539][T14282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.310096][T14282] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 283.493594][T14298] netlink: 'syz.0.2565': attribute type 1 has an invalid length. [ 283.558150][T14298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.645569][T14298] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 283.945712][T14322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.040610][T14336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.126030][T14322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.265653][T14347] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 284.362000][T14350] sch_fq: defrate 0 ignored. [ 284.564390][T14360] __nla_validate_parse: 11 callbacks suppressed [ 284.564415][T14360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2588'. [ 284.596621][T14360] netlink: 'syz.0.2588': attribute type 30 has an invalid length. [ 284.610472][T14360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2588'. [ 284.827246][T14374] IPv6: sit2: Disabled Multicast RS [ 284.897679][T14378] netlink: 'syz.2.2593': attribute type 1 has an invalid length. [ 284.970624][T14378] 8021q: adding VLAN 0 to HW filter on device bond3 [ 285.100871][T14388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2594'. [ 285.414596][T14406] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2602'. [ 285.521243][T14406] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2602'. [ 285.571165][T14418] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2605'. [ 285.596647][T14418] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2605'. [ 285.622484][T14418] ipt_REJECT: ECHOREPLY no longer supported. [ 285.631682][T14420] netlink: 'syz.2.2606': attribute type 11 has an invalid length. [ 285.654928][T14422] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 285.854470][T14427] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.2610'. [ 285.874947][T14427] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.2610'. [ 285.886084][T14427] netlink: 640 bytes leftover after parsing attributes in process `syz.4.2610'. [ 285.897221][T14430] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 286.074625][T14434] gretap0: entered promiscuous mode [ 286.119608][T14434] gretap0: left promiscuous mode [ 286.254242][T14434] gretap0: entered promiscuous mode [ 286.325119][T14434] gretap0: left promiscuous mode [ 286.443307][T14434] gretap0: entered promiscuous mode [ 286.466336][T14434] gretap0: left promiscuous mode [ 286.581644][T14469] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 286.617368][T14434] gretap0: entered promiscuous mode [ 286.634328][T14434] gretap0: left promiscuous mode [ 286.770288][T14434] gretap0: entered promiscuous mode [ 286.817197][T14434] gretap0: left promiscuous mode [ 287.231594][T14503] tipc: Enabling of bearer rejected, failed to enable media [ 287.307186][T14505] batadv0: entered promiscuous mode [ 287.347494][T14505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.367909][T14505] syz.4.2632 (14505) used greatest stack depth: 18160 bytes left [ 288.514449][T14531] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 290.704081][T14552] __nla_validate_parse: 11 callbacks suppressed [ 290.704107][T14552] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2647'. [ 290.834707][T14559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2651'. [ 290.844342][T14559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2651'. [ 290.916319][T14557] xt_CT: No such helper "snmp" [ 291.043353][T14563] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2652'. [ 291.155319][T14570] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2655'. [ 291.211651][T14571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2654'. [ 291.220930][T14571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.283506][T14571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.701186][T14587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2662'. [ 291.728808][T14588] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2662'. [ 291.741995][T14587] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 291.808426][T14597] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2664'. [ 291.842189][T14597] netlink: 'syz.4.2664': attribute type 4 has an invalid length. [ 292.022911][T14608] tipc: Invalid UDP bearer configuration [ 292.024468][T14608] tipc: Enabling of bearer rejected, failed to enable media [ 292.149327][T14616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2670'. [ 292.912644][T14661] netlink: 'syz.2.2682': attribute type 15 has an invalid length. [ 292.947741][T14661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.977403][T14661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.014783][T14661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.047433][T14669] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 293.054418][T14661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.528325][T14696] netlink: 'syz.4.2692': attribute type 1 has an invalid length. [ 293.536377][T14695] netlink: 'syz.4.2692': attribute type 1 has an invalid length. [ 294.340215][T14742] netlink: 'syz.0.2702': attribute type 29 has an invalid length. [ 295.075587][T14783] netlink: 'syz.1.2715': attribute type 10 has an invalid length. [ 295.172300][T14783] bond0: (slave wlan1): Releasing backup interface [ 295.197658][T14785] netlink: 'syz.2.2718': attribute type 29 has an invalid length. [ 295.477784][T14809] Cannot find del_set index 4 as target [ 295.771081][T14827] xt_TCPMSS: Only works on TCP SYN packets [ 296.015825][T14844] __nla_validate_parse: 9 callbacks suppressed [ 296.015850][T14844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2735'. [ 296.043174][T14844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2735'. [ 296.193949][T14855] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2739'. [ 296.405747][T14858] nbd: must specify a size in bytes for the device [ 296.865572][T14868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.880451][T14868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.892000][T14868] bond0 (unregistering): Released all slaves [ 297.321654][T14898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2753'. [ 297.339374][T14899] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2752'. [ 297.346564][T14898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2753'. [ 297.375579][T14898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2753'. [ 297.398877][T14904] netlink: 'syz.0.2755': attribute type 10 has an invalid length. [ 297.408478][T14902] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 297.427194][T14904] geneve0: entered promiscuous mode [ 297.488355][T14904] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 297.654764][T14911] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.2757'. [ 297.689296][T14913] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.2759'. [ 297.714732][T14913] openvswitch: netlink: Flow actions attr not present in new flow. [ 297.792835][T14917] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2760'. [ 298.290341][T14943] netlink: 'syz.2.2769': attribute type 4 has an invalid length. [ 298.456887][ T5145] Bluetooth: hci4: command 0x0405 tx timeout [ 299.011862][T14988] netlink: 'syz.4.2784': attribute type 13 has an invalid length. [ 299.057284][T14988] net veth1_virt_wifi : refused to change device tx_queue_len [ 299.242433][T15002] openvswitch: netlink: Missing key (keys=40, expected=80) [ 299.273593][T15005] delete_channel: no stack [ 299.592713][T15015] netlink: 'syz.3.2793': attribute type 62 has an invalid length. [ 299.875303][T15037] netlink: 'syz.4.2801': attribute type 4 has an invalid length. [ 300.074913][T15047] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 300.504087][T15077] netlink: 'syz.3.2811': attribute type 1 has an invalid length. [ 300.525127][T15077] netlink: 'syz.3.2811': attribute type 1 has an invalid length. [ 300.624481][T15077] netlink: 'syz.3.2811': attribute type 1 has an invalid length. [ 301.064311][T15105] netlink: 'syz.3.2817': attribute type 8 has an invalid length. [ 301.096574][T15105] netlink: 'syz.3.2817': attribute type 8 has an invalid length. [ 301.140662][T15109] __nla_validate_parse: 10 callbacks suppressed [ 301.140687][T15109] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2818'. [ 301.264392][T15113] netlink: 'syz.3.2820': attribute type 11 has an invalid length. [ 301.374921][T15116] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 301.388529][T15120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2821'. [ 301.442684][T15118] bond0: entered promiscuous mode [ 301.459304][T15118] bond0: entered allmulticast mode [ 301.464851][T15118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.567561][T15132] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2825'. [ 301.637043][ T5908] ------------[ cut here ]------------ [ 301.643082][ T5908] Invalid VIF (ffff88807e14e9d0) magic 0x0, 08:02:11:00:00:01, 3/1 [ 301.651859][ T5908] WARNING: CPU: 0 PID: 5908 at drivers/net/wireless/virtual/mac80211_hwsim.c:237 mac80211_hwsim_tx+0x1b6f/0x23c0 [ 301.663904][ T5908] Modules linked in: [ 301.667889][ T5908] CPU: 0 UID: 0 PID: 5908 Comm: kworker/0:6 Not tainted 6.13.0-rc2-syzkaller-00131-g429fde2d81bc #0 [ 301.678732][ T5908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 301.688879][ T5908] Workqueue: mld mld_ifc_work [ 301.693627][ T5908] RIP: 0010:mac80211_hwsim_tx+0x1b6f/0x23c0 [ 301.699639][ T5908] Code: 28 84 c0 0f 85 06 08 00 00 45 0f b6 8e 61 04 00 00 48 c7 c7 40 2a a9 8c 4c 89 f6 44 89 e2 48 89 e9 41 89 d8 e8 52 e7 50 fa 90 <0f> 0b 90 90 e9 69 f2 ff ff e8 d3 3d 90 fa 90 0f 0b 90 e9 d5 f2 ff [ 301.719342][ T5908] RSP: 0018:ffffc9000479ebf0 EFLAGS: 00010246 [ 301.725477][ T5908] RAX: 8672fc10cd8df200 RBX: 0000000000000003 RCX: ffff888031a21e00 [ 301.733546][ T5908] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 301.741641][ T5908] RBP: ffff88807e14ee2a R08: ffffffff81600a42 R09: fffffbfff1cfa210 [ 301.749820][ T5908] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: 0000000000000000 [ 301.757901][ T5908] R13: dffffc0000000000 R14: ffff88807e14e9d0 R15: 0000000000000000 [ 301.765927][ T5908] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 301.774963][ T5908] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.781641][ T5908] CR2: 00007f48a26a56c0 CR3: 0000000061e5a000 CR4: 00000000003526f0 [ 301.789733][ T5908] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 301.797822][ T5908] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 301.805867][ T5908] Call Trace: [ 301.809246][ T5908] [ 301.812222][ T5908] ? __warn+0x165/0x4d0 [ 301.816438][ T5908] ? mac80211_hwsim_tx+0x1b6f/0x23c0 [ 301.821838][ T5908] ? report_bug+0x2b3/0x500 [ 301.826394][ T5908] ? mac80211_hwsim_tx+0x1b6f/0x23c0 [ 301.831791][ T5908] ? handle_bug+0x60/0x90 [ 301.836180][ T5908] ? exc_invalid_op+0x1a/0x50 [ 301.840964][ T5908] ? asm_exc_invalid_op+0x1a/0x20 [ 301.846054][ T5908] ? __warn_printk+0x292/0x360 [ 301.850930][ T5908] ? mac80211_hwsim_tx+0x1b6f/0x23c0 [ 301.856300][ T5908] ieee80211_handle_wake_tx_queue+0x1ae/0x2d0 [ 301.862486][ T5908] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 301.869200][ T5908] ? ieee80211_queue_skb+0x18b6/0x24b0 [ 301.874726][ T5908] ? do_raw_spin_unlock+0x13c/0x8b0 [ 301.880043][ T5908] ieee80211_queue_skb+0x1ae9/0x24b0 [ 301.885435][ T5908] ieee80211_tx+0x2c4/0x470 [ 301.890217][ T5908] ? __pfx_ieee80211_tx+0x10/0x10 [ 301.895326][ T5908] ? ieee80211_xmit+0x30f/0x3f0 [ 301.900295][ T5908] __ieee80211_subif_start_xmit+0xe93/0x1600 [ 301.906364][ T5908] ? ip6_finish_output2+0x12c7/0x17b0 [ 301.911847][ T5908] ? ip6_finish_output+0x41e/0x840 [ 301.917070][ T5908] ? __ieee80211_subif_start_xmit+0x300/0x1600 [ 301.923287][ T5908] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 301.929818][ T5908] ? __lock_acquire+0x1397/0x2100 [ 301.934928][ T5908] ieee80211_subif_start_xmit+0xde/0x4d0 [ 301.940702][ T5908] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 301.947069][ T5908] ? __pfx_lock_acquire+0x10/0x10 [ 301.952163][ T5908] dev_hard_start_xmit+0x27a/0x7d0 [ 301.957405][ T5908] __dev_queue_xmit+0x1b73/0x3f50 [ 301.962507][ T5908] ? __dev_queue_xmit+0x2f4/0x3f50 [ 301.967742][ T5908] ? __pfx___dev_queue_xmit+0x10/0x10 [ 301.973172][ T5908] ? neigh_resolve_output+0x450/0x740 [ 301.978651][ T5908] ? read_seqbegin+0x157/0x2b0 [ 301.983474][ T5908] ? lockdep_hardirqs_on+0x99/0x150 [ 301.988779][ T5908] ? read_seqbegin+0x208/0x2b0 [ 301.993597][ T5908] ? __pfx_read_seqbegin+0x10/0x10 [ 301.998810][ T5908] ? neigh_resolve_output+0x2e5/0x740 [ 302.004254][ T5908] ? eth_header+0x11c/0x1f0 [ 302.008853][ T5908] ? __asan_memcpy+0x40/0x70 [ 302.013523][ T5908] ip6_finish_output2+0x12c7/0x17b0 [ 302.018845][ T5908] ? ip6_mtu+0x81/0x3f0 [ 302.023053][ T5908] ? ip6_finish_output2+0x63a/0x17b0 [ 302.028442][ T5908] ? __pfx_ip6_finish_output2+0x10/0x10 [ 302.034051][ T5908] ? ip6_mtu+0x81/0x3f0 [ 302.038353][ T5908] ip6_finish_output+0x41e/0x840 [ 302.043355][ T5908] NF_HOOK+0x9e/0x430 [ 302.047436][ T5908] ? NF_HOOK+0xfa/0x430 [ 302.051655][ T5908] ? __pfx_NF_HOOK+0x10/0x10 [ 302.056303][ T5908] ? __pfx_dst_output+0x10/0x10 [ 302.061262][ T5908] ? icmp6_dst_alloc+0x3aa/0x420 [ 302.066259][ T5908] mld_sendpack+0x843/0xdb0 [ 302.070881][ T5908] ? __pfx_mld_newpack+0x10/0x10 [ 302.075890][ T5908] ? mld_sendpack+0x1e8/0xdb0 [ 302.080669][ T5908] ? __pfx_mld_sendpack+0x10/0x10 [ 302.085786][ T5908] mld_ifc_work+0x7d9/0xd90 [ 302.090401][ T5908] ? process_scheduled_works+0x976/0x1840 [ 302.096174][ T5908] process_scheduled_works+0xa66/0x1840 [ 302.101859][ T5908] ? __pfx_process_scheduled_works+0x10/0x10 [ 302.103782][T15149] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2826'. [ 302.107923][ T5908] ? assign_work+0x364/0x3d0 [ 302.108046][ T5908] worker_thread+0x870/0xd30 [ 302.108085][ T5908] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 302.132288][ T5908] ? __kthread_parkme+0x169/0x1d0 [ 302.137431][ T5908] ? __pfx_worker_thread+0x10/0x10 [ 302.142602][ T5908] kthread+0x2f0/0x390 [ 302.146782][ T5908] ? __pfx_worker_thread+0x10/0x10 [ 302.151948][ T5908] ? __pfx_kthread+0x10/0x10 [ 302.156641][ T5908] ret_from_fork+0x4b/0x80 [ 302.161104][ T5908] ? __pfx_kthread+0x10/0x10 [ 302.165746][ T5908] ret_from_fork_asm+0x1a/0x30 [ 302.170634][ T5908] [ 302.173707][ T5908] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 302.181019][ T5908] CPU: 0 UID: 0 PID: 5908 Comm: kworker/0:6 Not tainted 6.13.0-rc2-syzkaller-00131-g429fde2d81bc #0 [ 302.191817][ T5908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 302.201911][ T5908] Workqueue: mld mld_ifc_work [ 302.206664][ T5908] Call Trace: [ 302.209981][ T5908] [ 302.212948][ T5908] dump_stack_lvl+0x241/0x360 [ 302.217686][ T5908] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.222942][ T5908] ? __pfx__printk+0x10/0x10 [ 302.227595][ T5908] ? vscnprintf+0x5d/0x90 [ 302.231985][ T5908] panic+0x349/0x880 [ 302.236273][ T5908] ? __warn+0x174/0x4d0 [ 302.240469][ T5908] ? __pfx_panic+0x10/0x10 [ 302.244953][ T5908] ? ret_from_fork_asm+0x1a/0x30 [ 302.249934][ T5908] __warn+0x344/0x4d0 [ 302.253968][ T5908] ? mac80211_hwsim_tx+0x1b6f/0x23c0 [ 302.259317][ T5908] report_bug+0x2b3/0x500 [ 302.263692][ T5908] ? mac80211_hwsim_tx+0x1b6f/0x23c0 [ 302.269035][ T5908] handle_bug+0x60/0x90 [ 302.273240][ T5908] exc_invalid_op+0x1a/0x50 [ 302.277799][ T5908] asm_exc_invalid_op+0x1a/0x20 [ 302.282697][ T5908] RIP: 0010:mac80211_hwsim_tx+0x1b6f/0x23c0 [ 302.288644][ T5908] Code: 28 84 c0 0f 85 06 08 00 00 45 0f b6 8e 61 04 00 00 48 c7 c7 40 2a a9 8c 4c 89 f6 44 89 e2 48 89 e9 41 89 d8 e8 52 e7 50 fa 90 <0f> 0b 90 90 e9 69 f2 ff ff e8 d3 3d 90 fa 90 0f 0b 90 e9 d5 f2 ff [ 302.308306][ T5908] RSP: 0018:ffffc9000479ebf0 EFLAGS: 00010246 [ 302.314428][ T5908] RAX: 8672fc10cd8df200 RBX: 0000000000000003 RCX: ffff888031a21e00 [ 302.322530][ T5908] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 302.330544][ T5908] RBP: ffff88807e14ee2a R08: ffffffff81600a42 R09: fffffbfff1cfa210 [ 302.338567][ T5908] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: 0000000000000000 [ 302.346594][ T5908] R13: dffffc0000000000 R14: ffff88807e14e9d0 R15: 0000000000000000 [ 302.354709][ T5908] ? __warn_printk+0x292/0x360 [ 302.359568][ T5908] ieee80211_handle_wake_tx_queue+0x1ae/0x2d0 [ 302.365703][ T5908] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 302.372340][ T5908] ? ieee80211_queue_skb+0x18b6/0x24b0 [ 302.377884][ T5908] ? do_raw_spin_unlock+0x13c/0x8b0 [ 302.383137][ T5908] ieee80211_queue_skb+0x1ae9/0x24b0 [ 302.388508][ T5908] ieee80211_tx+0x2c4/0x470 [ 302.393072][ T5908] ? __pfx_ieee80211_tx+0x10/0x10 [ 302.398166][ T5908] ? ieee80211_xmit+0x30f/0x3f0 [ 302.403075][ T5908] __ieee80211_subif_start_xmit+0xe93/0x1600 [ 302.409108][ T5908] ? ip6_finish_output2+0x12c7/0x17b0 [ 302.414531][ T5908] ? ip6_finish_output+0x41e/0x840 [ 302.419708][ T5908] ? __ieee80211_subif_start_xmit+0x300/0x1600 [ 302.425919][ T5908] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 302.432392][ T5908] ? __lock_acquire+0x1397/0x2100 [ 302.437489][ T5908] ieee80211_subif_start_xmit+0xde/0x4d0 [ 302.443187][ T5908] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 302.449499][ T5908] ? __pfx_lock_acquire+0x10/0x10 [ 302.454626][ T5908] dev_hard_start_xmit+0x27a/0x7d0 [ 302.459801][ T5908] __dev_queue_xmit+0x1b73/0x3f50 [ 302.464893][ T5908] ? __dev_queue_xmit+0x2f4/0x3f50 [ 302.470069][ T5908] ? __pfx___dev_queue_xmit+0x10/0x10 [ 302.475490][ T5908] ? neigh_resolve_output+0x450/0x740 [ 302.480906][ T5908] ? read_seqbegin+0x157/0x2b0 [ 302.485716][ T5908] ? lockdep_hardirqs_on+0x99/0x150 [ 302.490967][ T5908] ? read_seqbegin+0x208/0x2b0 [ 302.495780][ T5908] ? __pfx_read_seqbegin+0x10/0x10 [ 302.500933][ T5908] ? neigh_resolve_output+0x2e5/0x740 [ 302.506349][ T5908] ? eth_header+0x11c/0x1f0 [ 302.510913][ T5908] ? __asan_memcpy+0x40/0x70 [ 302.515594][ T5908] ip6_finish_output2+0x12c7/0x17b0 [ 302.520853][ T5908] ? ip6_mtu+0x81/0x3f0 [ 302.525043][ T5908] ? ip6_finish_output2+0x63a/0x17b0 [ 302.530462][ T5908] ? __pfx_ip6_finish_output2+0x10/0x10 [ 302.536077][ T5908] ? ip6_mtu+0x81/0x3f0 [ 302.540294][ T5908] ip6_finish_output+0x41e/0x840 [ 302.545289][ T5908] NF_HOOK+0x9e/0x430 [ 302.549320][ T5908] ? NF_HOOK+0xfa/0x430 [ 302.553515][ T5908] ? __pfx_NF_HOOK+0x10/0x10 [ 302.558169][ T5908] ? __pfx_dst_output+0x10/0x10 [ 302.563064][ T5908] ? icmp6_dst_alloc+0x3aa/0x420 [ 302.568053][ T5908] mld_sendpack+0x843/0xdb0 [ 302.572634][ T5908] ? __pfx_mld_newpack+0x10/0x10 [ 302.577654][ T5908] ? mld_sendpack+0x1e8/0xdb0 [ 302.582367][ T5908] ? __pfx_mld_sendpack+0x10/0x10 [ 302.587459][ T5908] mld_ifc_work+0x7d9/0xd90 [ 302.592015][ T5908] ? process_scheduled_works+0x976/0x1840 [ 302.597778][ T5908] process_scheduled_works+0xa66/0x1840 [ 302.603401][ T5908] ? __pfx_process_scheduled_works+0x10/0x10 [ 302.609438][ T5908] ? assign_work+0x364/0x3d0 [ 302.614081][ T5908] worker_thread+0x870/0xd30 [ 302.618734][ T5908] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 302.624686][ T5908] ? __kthread_parkme+0x169/0x1d0 [ 302.629803][ T5908] ? __pfx_worker_thread+0x10/0x10 [ 302.634963][ T5908] kthread+0x2f0/0x390 [ 302.639089][ T5908] ? __pfx_worker_thread+0x10/0x10 [ 302.644278][ T5908] ? __pfx_kthread+0x10/0x10 [ 302.648916][ T5908] ret_from_fork+0x4b/0x80 [ 302.653371][ T5908] ? __pfx_kthread+0x10/0x10 [ 302.658014][ T5908] ret_from_fork_asm+0x1a/0x30 [ 302.662843][ T5908] [ 302.666234][ T5908] Kernel Offset: disabled [ 302.670686][ T5908] Rebooting in 86400 seconds..