last executing test programs: 9.576006253s ago: executing program 4 (id=2899): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) r2 = socket$phonet(0x23, 0x2, 0x1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x8}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c000) (async) bind$phonet(r2, &(0x7f0000000040)={0x23, 0x7, 0x8, 0x6}, 0x10) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_getnetconf={0x4c, 0x52, 0x20, 0x70bd28, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x4}, @NETCONFA_IFINDEX={0x8, 0x1, r1}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x100}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7}, @NETCONFA_IFINDEX={0x8, 0x1, r1}, @NETCONFA_RP_FILTER={0x8, 0x3, 0xfb0d}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0xd}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) (rerun: 32) 9.399163297s ago: executing program 4 (id=2900): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e23, 0x9, @mcast1, 0x8}, {0xa, 0x4e23, 0x1, @empty, 0xa}, 0xffffffffffffffff, {[0x2, 0x0, 0x8, 0x0, 0x5, 0x0, 0x7ff, 0x3caf5c82]}}, 0x5c) r2 = socket$inet6(0xa, 0x5, 0x6) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x7, 0x4, 0x74ab, 0xffff}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000100)={r3, 0x1000, "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"}, &(0x7f0000001140)=0x1008) (async) setsockopt$inet6_int(r1, 0x29, 0x17, &(0x7f0000001180)=0x6, 0x4) (async, rerun: 64) close(r2) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000011c0)={0x1, [0x0]}, &(0x7f0000001200)=0x8) (async, rerun: 32) r5 = accept4$x25(0xffffffffffffffff, &(0x7f0000001240), &(0x7f0000001280)=0x12, 0x800) (rerun: 32) ioctl$sock_x25_SIOCADDRT(r5, 0x890b, &(0x7f00000012c0)={@null, 0xa, 'lo\x00'}) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r6, 0x114, 0x5, &(0x7f00000013c0), 0x4) (async) r7 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r7, 0x6b, 0x3, &(0x7f0000001400), 0x4) (async) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000001440)={r4, @in={{0x2, 0x4e23, @multicast1}}}, 0x84) (async) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000001500), 0x8) recvfrom$llc(r8, &(0x7f0000001540)=""/63, 0x3f, 0x1, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000001600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001640)=0x14) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001700)={0x200, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x12, 0x6, &(0x7f0000001580)=@raw=[@jmp={0x5, 0x0, 0x9, 0x6, 0x0, 0x20, 0xfffffffffffffff0}, @map_idx={0x18, 0x2}, @ldst={0x2, 0x0, 0x6, 0x8, 0x4, 0x100, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7}], &(0x7f00000015c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x26, '\x00', r9, @cgroup_sock_addr=0x20, r6, 0x8, &(0x7f0000001680)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000016c0)={0x0, 0xc, 0x69, 0x4}, 0x10, r10, r8, 0x2, &(0x7f0000001740)=[r0, r8, r8], &(0x7f0000001780)=[{0x0, 0x4, 0x2}, {0x4, 0x1, 0xe, 0xa}], 0x10, 0x3}, 0x94) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000019c0)={'vcan0\x00', 0x0}) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002a80)={&(0x7f0000001a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x5, [@float={0xd, 0x0, 0x0, 0x10, 0x4}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x5, 0x1}, @fwd={0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @var={0x9, 0x0, 0x0, 0xe, 0x3, 0x1}, @func={0xf, 0x0, 0x0, 0xc, 0x4}, @typedef={0x7, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x2e, 0x5f, 0x30]}}, &(0x7f0000001a80)=""/4096, 0x79, 0x1000, 0x0, 0x0, 0x10000, @value=r8}, 0x28) (async) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002b80)=@generic={&(0x7f0000002b40)='./file0\x00'}, 0x18) (async) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002bc0)={0x1b, 0x0, 0x0, 0x4, 0x0, r8, 0xd5, '\x00', 0x0, r8, 0x1, 0x1, 0x3}, 0x50) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002c40)={0x1b, 0x0, 0x0, 0xe4, 0x0, 0x1, 0x5, '\x00', r9, r8, 0x4, 0x1, 0x4}, 0x50) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002cc0)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x4d8d, '\x00', r9, r7, 0x5, 0x2, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002e40)={0x18, 0x7, &(0x7f0000001880)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x8}], &(0x7f00000018c0)='syzkaller\x00', 0xf621, 0xb2, &(0x7f0000001900)=""/178, 0x40f00, 0x1a, '\x00', r11, @fallback=0x8, r12, 0x8, &(0x7f0000002ac0)={0x7f0, 0x5}, 0x8, 0x10, &(0x7f0000002b00)={0x4, 0xb, 0xbd1c, 0x8}, 0x10, 0xffffffffffffffff, r8, 0x9, &(0x7f0000002d40)=[r8, r13, r8, r14, r8, r8, r15, r8, r8, r16], &(0x7f0000002d80)=[{0x0, 0x4, 0xd, 0x6}, {0x0, 0x1, 0x8, 0x1}, {0x5, 0x3, 0x4, 0xb}, {0x1, 0x1, 0x7, 0xa}, {0x0, 0x4, 0x5, 0xa}, {0x0, 0x2, 0x9, 0x4}, {0x3, 0x1, 0x9, 0x8}, {0x1, 0x1, 0x3, 0x4}, {0x2, 0x3, 0xc, 0x7}], 0x10, 0x6}, 0x94) (async) socketpair(0x15, 0x80000, 0x10000, &(0x7f0000002f00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r17, 0x8912, &(0x7f0000002fc0)=@req={0x28, &(0x7f0000002f80)={'virt_wifi0\x00', @ifru_data=&(0x7f0000002f40)="9428253177988cca8b93eeb95b507cd55f12117aefff8c559bcf24cdfa461ec5"}}) 9.21519505s ago: executing program 4 (id=2901): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) (async) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001000)={'batadv_slave_0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r2, @ANYBLOB="08000b00cd5e21000400"], 0x54}, 0x1, 0x0, 0x0, 0x20008082}, 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x32fbe000) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) unshare(0x24020400) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c0080003e0007012dbd7000fcdbdf25047c0000040000001400018006000600800a000008001400ffffff7f"], 0x2c}}, 0x0) (async) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg$sock(r6, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@can, 0x80, 0x0}}], 0x1, 0x48014) (async) getsockname$packet(r6, 0x0, &(0x7f0000000240)) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000400000000000900020073797a30000000000520010007000000050005000a000000140007800800114000000000080012400000ffff1300032c69666163650000"], 0x60}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da0"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYBLOB='/\x00\x00\x00\b'], 0x20) socket$inet_icmp(0x2, 0x2, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) socket(0x6, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 8.964523439s ago: executing program 4 (id=2903): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x1, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x21f6, 0x4) sendmmsg$inet(r2, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) recvfrom(r2, &(0x7f0000000200)=""/131, 0x83, 0x2000, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x1, 0x4}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x21f6, 0x4) (async) sendmmsg$inet(r2, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) (async) recvfrom(r2, &(0x7f0000000200)=""/131, 0x83, 0x2000, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) 4.464797842s ago: executing program 2 (id=2944): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x2000000, 0xd50, 0x0, &(0x7f00000002c0)="fef351f6b11f421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) sendmsg$nl_route(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r5, &(0x7f0000000d00)=[{&(0x7f0000000600)="0de8a4d20018c437e2bc761adf47fdfd3e1c3cf248adbc4cd1ecf3580594d4df7b2d0f06a729af47052e10f844f5a88a464a7f9eaf03367b539f9d004df9f2a9fffec2bbd693e7976492d8bd7bd6197b966fd339c13020220719e7d838443ca56bc0a51ceed655dee896ef7748ad7def93fa3b0d257fc6132d2b068a36b198c9910470d3933fc42617625bc51995b806853326830b370188346b0568f14a9d9767dab19d6874cad1a05767f96320e6a6f88bd95d5da446a1a9fc727877ce1ba605e44a29b1b11400069d3644a0967c3cf31794", 0xd3}, {&(0x7f0000000700)="20e9b2fcfdb5791ea78edcbae08d53248a5934709fd2313acb428d182ad1f5e25d051cf123586b2577eddb2d9cea3ac3d9eca1111026548bc91b1b90d1a9cf0bbaa428c8255d23f9c79c71f206594745844461abb8557b3cfced604f4a1065b9e30204b967bca01cf2c875221c35de8fabe51e2c3f18f8443c07c0061206473694a23a6a56c02b1e7164965e129c9fb57e979d45666f1d3db74a0e3c7689238a30d9dd65f7f30ddde5a92fb3ddcdb829a7ce995de566ea28c70cf3f00f1cefd42321bcee418ce207244b4b22bc061c6820aada5a7d6104f91aac14520ca01b90d1d6e788fd00b2e0ef364a759a632d81c020aeed127221c4", 0xf8}, {&(0x7f0000000180)="6c147c1e3e3f313c5284a2efa479213b46893cd9a0e2cc91fa0a39ba94bd19", 0x1f}, {&(0x7f0000000500)="df7efdc87a1da2affb564ba784018431d9cf579866bfbb0a0be5d7b5fc4a1086c7242187a5b65229400cafb3970c921a0be4b918d7c3a86af82fc4fb0db2838e90ce89329bc39079c7317adbaf0a4f39c88cc361fc91e96306b76330d821e78cdb069625e8f4674f2efcff1849f064d9121f0b6e765fb1843507281bb080d2505b4a5b024f84909e6c04f11d33771e42", 0x90}, {&(0x7f0000000800)="d23508ed5e3ce9b5672bf3ae528cd0efa5fa6e365d3360ddd1c70bb6abe5afd66c88b395acbc62fb83bbbb1f5c7d373d8a27c3c233b5a6419e866db96ffb76706eb96dd70045ad2fcf82318682c0e2f495ed4bb4784823b98d6ae5903fa7bce265569398189e37a8aafe5462c99474da2816379663fb84582c24f4679ef85348ce69d1859b131c3df1a010dbe28e7e15f84262323382d9007dbae0943a377938218e43ec96cad789eba6afa1e7270304a3cad3c15ee416d652d7c79211e1b458e3660b6363aa02fcbc68c834212eaaeac87ded", 0xd3}, {&(0x7f0000000a00)="2b2e500c05bed1c69fe082c6f9048ea3b9c51b33dac10ea91edab0963f840ea82ecfc58da3872c98a0cea063fb3ce519a801de7d83c22ea7d797d5d7ef6faafe59db7edd4e10e4301c7bd4c426ad4f56779ce492ce1dbdf31c4379a6f20955d8dbd45f1a1acdbbfb33b5d4286d2a3150f35e8badc2e4439385a64a4c1f64ca0d2393d9fe350e533be989c22e4a311a6370eac6815bf4ac2f7cdf042245d524faa55cf4f6211169e5fd95840371b5f868f49e0440770007ba88241eb5f1cf854df30b743c15ab3f0f0f3e36a62f75a4", 0xcf}, {&(0x7f0000000900)="e09d27f5105975b86a5ee0c88e866f50aa27ed38dec0c8e6d134c5ddfa1979d3f008d857718fde7dd20109bb5eb9f5aa81beedf90ef08543508839f8c027a6e12a9b1c8b86f6e72685381823459b526c5d27c6f4cdf26236b1733faa7d3e6c2adc78113118fa21d36a64f47404179383b1e9cdbc8bba6b389367c05376616289b3a0c4daeceac64163c82c76db4b568fe6d5f6a830dcff8abad858763f5d01f684e0ed6b290657350559b90b963642109103cb", 0xb3}, {&(0x7f0000000b00)="6658dc52397ea0b3c38bbecdad889b232a8f843164a8647a4042b2d13807da5c05e867b8b7f19187f52917af157d8fa02288bc48c5a46a9ea9932571fae6fc7e2bf7de8c8cf115327dc28da5c2986b2104a42c825ba8bdc70fd41ec62d679ccd3cdb0ffef6f866c52e194fff89b6cd539af1fd09cb28d97e71a5f7e46f7750c5d8ade7a486a5ce7af6e74a929acf888d067d85b3ba6d7a9927239c0b2f56c2ff2f09b5c925afee1c243e130cc9ae1bd0f7050185349d8e9314be02a40a2212cc53053a76c7571e071450ec791eeeea35a533b6811c0322a290b396b95e96a08bca49075dcdba1a951171c3c09704514eb6af21fa5d661f", 0xf7}, {&(0x7f0000000c00)="8428671a03cad4f89801969f253e37218e14c6f9add98e3c2fcbc1e47cf98e42690ddd91b8b79efe53abdeb3fedc1725d480eff5faf6a07f8f5ac10dc96c5b5543327dd179c256f7b02a72f7f55dfc3441e7553e7982247543fef057ff38c657c1c3b315d355abc6d376b3750b2eb2d55679bbd99619ac40fd54d31bf30b2223107011f29bcae81ff56ebec390ce1d75e66fe57732d8eaf762d8740bf3c1866a24603ddadf98cb3c24b5285fc3c04c08c0c30040b038b899679691b3355d6dcf660045a76ee4", 0xc6}, {&(0x7f00000003c0)="c6632fb6086705c7dbfc7cb2f14a26064331261014b1950fd9732dde6f79f6bbf079dc2ac883ba4eb245e58c88b25082208112556d026f998a", 0x39}], 0xa) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 2.936322307s ago: executing program 3 (id=2950): socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a3100000000050001"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300010029bd7000fedbdf2500000000", @ANYRES32=r1, @ANYBLOB="d45006000200000024001a802000028014"], 0x44}, 0x1, 0x0, 0x0, 0x8081}, 0x20040000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) sendmsg$nl_crypto(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@upd={0xf0, 0x12, 0x1, 0x70bd2b, 0x25dfdbfe, {{'lrw-camellia-asm\x00'}, '\x00', '\x00', 0x2000, 0x2400}, [{0x8, 0x1, 0x7}, {0x8, 0x1, 0x2}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000040000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300), 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYRES32=r5, @ANYRES8=r4, @ANYRES16=r5, @ANYRES64=r7, @ANYBLOB="f21e2a97dea7d3cc72846b273550efcdd9aca15306a622217e9f874a583f7d5c840e874bc496decc566080e364f0fdfcedd44c3a2064c003afab72f9866592297e967a6bd8c8fe2d5ecc191c10b640abe58cae2cf523b6eb872fd9f422e73f1d23e3a68599092b86966b911ea9345b510c7c85dc74ea6503dfe1c7a94034c46ea71797fb1266aefb61efd2a20a35a708d6a1a2d7023216", @ANYRESOCT=r9], 0x5c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r10, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r10, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071126f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6b, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) 2.540050875s ago: executing program 3 (id=2953): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000100001002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="1011925784800000140003006e657464657673696d3000000000000014001680100001800c0057c6ee2931c2"], 0x48}, 0x1, 0x0, 0x0, 0x20004084}, 0x4800) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000a000000000200000700000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r3, &(0x7f0000000a40), 0x0}, 0x20) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/89}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x440c0}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1424785c49305fcc750d732e9e10a15a00000215"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) close(0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000003c0)='ns/user\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, 0x1407, 0x400, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x48045) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000001c0), &(0x7f0000000280)=0x8) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc43", 0xf) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x2, 0xfffffffc) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000240)={@any, 0x2}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) 2.471967128s ago: executing program 0 (id=2954): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4, 0xa, r2}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r6, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r7, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c001780040005000400040014000400766c616e30000000000000000000000005005300000000000a00180003030303030300000a00e80008021100000000001c0017800400010004000300040002000400020004000400040006"], 0x138}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x30}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.415304754s ago: executing program 2 (id=2955): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x90, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket(0x2b, 0x80801, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xa, 0x9, 0x0, 0x0, 0x7fffffff, 0x400}, 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xf) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) 1.983024127s ago: executing program 0 (id=2959): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffff59}, [@call={0x85, 0x0, 0x0, 0x53}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="14002d800a000000020202020202000004000000be39fc4f0a2c7c032f8b9ec546eb0bcf061ab1f430747c011c8c566033a884fdc5f9b33240422ce52a012b8698a03690294ca3f1c9a01bdc596025772604"], 0x30}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xe, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="17010000a4fc8a000500feff"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x7f, &(0x7f0000000200)=""/127, 0x41000, 0x62, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000008f0800000000f2b9ee3e0000000000008500000061000000850000005000000095000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r6, 0x0, 0x12, 0x0, &(0x7f00000001c0)="ea0080670000ec67078717bd88a82ffc8fd7", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x30}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}}, 0x0) 1.927906685s ago: executing program 3 (id=2960): socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000740)="d4", 0x1}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000b80)='\a', 0x1}], 0x1}}], 0x2, 0x4000050) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) close(r3) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000380)=@bcast) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xbc, 0x0, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x32}, 0x10, 0x0, 0xe7, 0x2}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) recvmsg(r2, 0x0, 0x10022) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x50044) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000400)=0x110494) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000080)={@empty, @empty, 0x1, 0x5, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @remote, @loopback]}, 0x24) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0x7d, &(0x7f0000000340)={0x8, 0x77, 0x6, 0x10, 0x39c1, 0x4, 0x4}, &(0x7f0000000840)=0x20) ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000200)=0x2) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@local, 0xfffffff7, 0x2, 0x0, 0x2, 0x1, 0x4}, 0x20) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x4e24, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) 1.760162892s ago: executing program 0 (id=2962): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'gre0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x80, 0x7800, 0x40000000, 0x9d2, {{0x8, 0x4, 0x0, 0x6, 0x20, 0x66, 0x0, 0x6, 0x2f, 0x0, @private=0xa010100, @rand_addr=0x64010102, {[@ra={0x94, 0x4, 0x1}, @end, @lsrr={0x83, 0x7, 0x2e, [@remote]}]}}}}}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r3, 0x0, 0x1100000000f336, 0x0) socketpair(0x3d, 0x100000005, 0xfffffffd, &(0x7f0000000140)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, 0x0, 0x4008004) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x44040) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), 0xffffffffffffffff) syz_emit_ethernet(0x2d8, &(0x7f0000000dc0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x2a2, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x8, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac1"}, {0x0, 0x1, "000000050000000026000400"}, {0x5, 0x2b, "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"}, {0x0, 0x2, "06aa85616177c41bc943afcb84619755"}, {0x1}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x24, r6, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) r7 = socket(0x1e, 0x805, 0x0) connect$tipc(r7, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) connect$tipc(r7, &(0x7f00000001c0)=@id, 0x10) 1.531674008s ago: executing program 1 (id=2963): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1}, 0x80) r2 = socket$kcm(0x1e, 0x4, 0x0) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef) (async) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000004340)={'netdevsim0\x00', &(0x7f0000004300)=@ethtool_pauseparam={0x13, 0x0, 0x9, 0x2}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0x7, 0x3, 0x2, @mcast1, @empty, 0x7800, 0x10, 0xbab4, 0x1}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0x7, 0x3, 0x2, @mcast1, @empty, 0x7800, 0x10, 0xbab4, 0x1}}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x96, 0x96, 0x6, [@datasec={0x10, 0x4, 0x0, 0xf, 0x3, [{0x2, 0x0, 0xcd3}, {0x3, 0xbc30, 0x5}, {0x3, 0x200, 0x631e}, {0x5, 0x5, 0x3ff}], "0f83ae"}, @datasec={0x1, 0x5, 0x0, 0xf, 0x3, [{0x5, 0x5, 0xd}, {0x3, 0x2, 0x8b3}, {0x1, 0x0, 0x1}, {0x5, 0x2, 0x81}, {0x4, 0xfffffa1b, 0x1}], "d99d91"}, @restrict={0x0, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x5f, 0x30, 0x30, 0x5f]}}, &(0x7f0000000380)=""/193, 0xb6, 0xc1, 0x0, 0x2, 0x10000}, 0x28) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000000380)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1c}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYRES8=r9], 0x50) (async) r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYRES8=r9], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='\a'], 0x10) close(r9) (async) close(r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r10}, &(0x7f0000000240), &(0x7f0000000140)=r11}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r10}, &(0x7f0000000080), &(0x7f00000000c0)=r9}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@generic={&(0x7f0000000600)='./file0\x00', 0x0, 0x10}, 0x18) (async) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@generic={&(0x7f0000000600)='./file0\x00', 0x0, 0x10}, 0x18) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x10, 0x1, 0x4, 0xb, 0x50, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2}, [@call={0x85, 0x0, 0x0, 0xce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x3a, &(0x7f0000000180)=""/58, 0x41100, 0x40, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000500)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x9, 0x30, 0x1}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000700)=[r8, 0xffffffffffffffff, r10, r12, r13, r14], &(0x7f0000000740)=[{0x2, 0x2, 0x0, 0x1}, {0x2, 0x1, 0x3}, {0x1, 0x2}, {0x0, 0x4, 0xd, 0x2}, {0x4, 0x1, 0xb, 0x7}, {0x3, 0x1, 0xd, 0x9}, {0x1, 0x4, 0x2, 0x6}], 0x10, 0x40}, 0x94) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000005000500aff700000500060000000000080003"], 0x2c}}, 0x0) (async) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000005000500aff700000500060000000000080003"], 0x2c}}, 0x0) 1.328438275s ago: executing program 2 (id=2964): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c23003f) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd"], 0xa) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', r3, 0x2f, 0x12, 0x5, 0x8, 0xd, @private1, @local, 0x1, 0x8, 0x9, 0x200}}) 1.152531227s ago: executing program 1 (id=2965): pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000500)={0xffffffffffffffff}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000400)}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x24, &(0x7f00000002c0)=@raw=[@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}}, @map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @alu={0x4, 0x1, 0x3, 0x7, 0x2, 0x18, 0xffffffffffffffec}, @generic={0x3, 0x7, 0x7, 0x9, 0xddd}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x14, 0x36, 0x701, 0x0, 0x2, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) 943.691453ms ago: executing program 1 (id=2966): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'team0\x00', &(0x7f0000000300)=@ethtool_drvinfo={0x3, "e55971277418921583c74b99353b9d55d90908b6ea7cafd3188b931053629563", "d2e91e1188a3a6208b5e013818b75a932a2934e7cb5f9bcc53167b323a69eacb", "94d16db71df3a371c4f2294565f888dbc7a32ab04fa38b3c82a67f05ef87e88f", "3e19aa35f2f7b5d3a59b86ed9f130f0574c90f48b2a5c02c6465aebcda9a59f9", "55841bf439f886e44c5aa56197f103b446e00a88a651523af566b9830c4134d9", "6b29a0ff0d9f919c93b5a267", 0x10, 0x44, 0x7ffbffff, 0x5, 0x8}}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000000000000200000008000300", @ANYRES32, @ANYBLOB="080026006c09000008009f0001"], 0x34}, 0x1, 0x0, 0x0, 0x48010}, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010700000000fcdbdf256700000008000300", @ANYRES32=r4, @ANYBLOB="0800c300741300000800c4"], 0x2c}}, 0x40) 849.211728ms ago: executing program 2 (id=2967): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x10, 0x5, &(0x7f00000000c0)=@framed={{}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000640)={0x54, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '\xaa\xaa\xaa\xaa\xaa'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x54}}, 0x20000000) (async) r3 = socket$packet(0x11, 0x3, 0x300) accept$packet(r3, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000bc0)=0x14) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40800) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x3c) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) (async) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r9}, &(0x7f0000000500), &(0x7f00000002c0)=r8}, 0x20) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r7, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x810) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r14, 0x891c, &(0x7f0000000080)={'dummy0\x00', {0x2, 0x4e20, @rand_addr=0x64010101}}) sendmsg$nl_route(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="680000001000010400400000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="08d10000000000003400128009000100766c616e00000000240002800c0002000c0000000c00000004000480100004806fff0100000000001000000014000300766c616e300000000000c195000000000000"], 0x68}}, 0x41012) 758.464566ms ago: executing program 0 (id=2968): socket$inet6_sctp(0xa, 0x801, 0x84) socket$kcm(0x10, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000700)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x18, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000020a01040000000000000000010000000900010073797a300000000034000000030a010100000000000000000100000009000b0073797a31000000000900010073797a300000000008000a400000000414000000020a05"], 0x90}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x41, &(0x7f0000000100)=r3, 0x8) setsockopt$sock_attach_bpf(r2, 0x1, 0x41, &(0x7f0000000100)=r1, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0x7, 0x0, r4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x316, r5, 0x4}, 0x38) 757.975911ms ago: executing program 1 (id=2969): pipe(&(0x7f00000000c0)={0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000063019f000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet(0x2, 0x2, 0x1) (async) setsockopt$MRT_PIM(r1, 0x0, 0xcf, &(0x7f0000000000)=0x2, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @loopback}, 0x4, 0x1, 0x0, 0x2}}, 0x26) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006112247f0000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) (async) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000ee, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000e710859d0f1421d7bb54f0976fbeee3466fa4b49658c1947ff598687086cfe0eaeb38ef15ea8cf4bc5b77a9ffbbfe468662aa525e305cb23a246d6579d57a0e08f0bfa9d56c5077d05dcdab90f5e6b9ab202465200376de1a6aa08e20944fa41e2d6a73c5569fdaf85c46a86d0b0c17dadeee929d795c1bf", @ANYRESHEX=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='percpu_alloc_percpu\x00', r7}, 0x18) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000003c0007010000000000000000017c00001c00fc80180008800e0031002a27262d2e2b2a7b2e0000000400a7800c00018006000600800a0000080002"], 0x4c}, 0x1, 0x0, 0x0, 0x401c}, 0x400c040) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r3], 0xc4}}, 0x0) 506.029695ms ago: executing program 2 (id=2970): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r1, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000000)=@ethtool_stats}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000013c0)=@mpls_getnetconf={0x14, 0x52, 0xd03, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000800}, 0x8014) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000002c0)={0x30, r5, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_IE={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x200000c5}, 0x20040890) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time\x00', 0x26e1, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) close(r8) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) ioctl$SIOCSIFHWADDR(r8, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="bcff03400200"}) (async) recvmmsg(r7, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2) (async) sendmmsg$inet(r7, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x0) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000180)={0x7, &(0x7f0000000680)=[{}, {@fixed}, {@none}, {}, {@fixed}, {}, {@none}]}) (async) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x20}, &(0x7f0000000100)=0x8) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) 502.857653ms ago: executing program 3 (id=2971): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001640)=@newtaction={0x48, 0x32, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x7ffffffe}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0xfffffffe}}, {{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x100b}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000004c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="aeaa000000000000711011000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 418.589174ms ago: executing program 0 (id=2972): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000001400002c00128009000100626f6e64000000001c00028008000b0004200000050006000000000008000700"], 0x4c}}, 0x0) r2 = socket(0xf, 0x80000, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="0000080001050700030080000600"], 0x1e7) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3e00}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 412.52392ms ago: executing program 1 (id=2973): syz_emit_ethernet(0x98, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x1b, 0x4, 0x0, 0x4, 0x8a, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local, {[@noop, @noop, @timestamp_addr={0x44, 0xc, 0x88, 0x1, 0x9, [{@private=0xa010100, 0x3}]}, @end, @end, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0xd, "61e6d94972ce2f991ba797"}, @cipso={0x86, 0xa, 0x1, [{0x5, 0x4, "1a32"}]}, @lsrr={0x83, 0x2b, 0x39, [@local, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @remote, @loopback, @multicast2, @empty, @private=0xa010100, @multicast2]}]}}, {0x11, 0x1, 0x0, @multicast1, "1e067b9a1bd8bb0447e16f29cac56d241cad10c9ee87"}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) (async) r3 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) ioctl$SIOCAX25CTLCON(r3, 0x89e8, &(0x7f0000000180)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xa, 0xfffffffffffffffe, 0x1, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @default]}) (async) ioctl$SIOCAX25CTLCON(r3, 0x89e8, &(0x7f0000000180)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xa, 0xfffffffffffffffe, 0x1, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @default]}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r2, @ANYBLOB="08000b002100000008000200ac"], 0x54}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0) 291.935467ms ago: executing program 2 (id=2974): pipe(&(0x7f0000000000)) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 278.061851ms ago: executing program 3 (id=2975): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0xff0c, 'pptp\x00'}}]}, 0x74}}, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 269.997104ms ago: executing program 4 (id=2906): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ad915d564c90c20025", 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000001}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 162.956107ms ago: executing program 1 (id=2977): r0 = socket(0x1e, 0x4, 0x0) connect(r0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x2}, 0x80) unshare(0x8000400) unshare(0x0) unshare(0x400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) sendmsg(r0, &(0x7f0000000540)={&(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x4, 0x4, 0x3, 0x4}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)="8062835829d396a3d54a677dd56b99510b5cd9140da07eec199b3e0afea6bdf4083c32b46c87615f62cd1d2fb5a1cf36be6a89bb8ebaae684038a228addebde3ca55ab0c4ed236648500b1713352947aa3bf8005624134ecce73255782e5ac306d77879e4466f24042c5e0d7e6f3ead3d3f3fff53ee9909e47e2d74e0c16c9c563db724c763291826e52d5faa6845238f5ce386c0d87ff78f724e27acc093f4ee801ed0f781165a90e158011c52a7703723d3bae308a9101905e830c8cfee3326e50fd7a4ed2603008c5", 0xca}, {&(0x7f0000000140)}, {&(0x7f0000000440)="3ad4e16df3ecc2d436607ed5ddf4d995fa3d05042f", 0x15}], 0x3, &(0x7f00000004c0)=[{0x80, 0x101, 0x2, "abea5eb1f7257a72ae9f8f3c077d16bf8c29f8f855c206dfad4f6fbf116a4fcfec3bdc53bce9a8a1f983ca6f0597b50eef5c72ce45ebfecc2bbe8d24af1af5b9eb3e14caeb5163f26957a85709ca1c712cd015eba33e5e4c0849b582b5a3d972bfdb685ad9b0b031a9ca"}], 0x80}, 0x40001) accept4$netrom(r0, &(0x7f0000000240)={{0x3, @bcast}, [@bcast, @rose, @default, @netrom, @rose, @default, @default, @bcast]}, &(0x7f0000000000)=0x48, 0x80000) 102.510165ms ago: executing program 4 (id=2978): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) (async) bind$rds(r0, &(0x7f0000000380)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async, rerun: 32) sendmsg$rds(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@zcopy_cookie={0x10, 0x114, 0xc, 0x7fff}], 0x10, 0x8800}, 0x4000000) (async, rerun: 32) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = accept(r1, &(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x80) sendmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000040)="03f674c69a6586023a19fd3aa24d17106d875438eb4048b763372d368f383f5bfce2661a59e5967de702d2816ad1afe724", 0x31}, {&(0x7f0000000200)="36822eaccdfba4a0a1b2982bb7d9cbe1592efbc255dc2d3ecd4a8ac442446187e2ccf4f87f451371811a25e267c4096752b504095f234ba313eb5c7f81206e581e405418b0935706f2892123589fc3a4f5c4e757b338242f2b4822c4f194aed1d84e812c785ab12f274b81945f1a103b748de38f3e92c0d9456f41d2fb43e66a0784a96c5b19", 0x86}, {&(0x7f0000000080)="dd6fcd5b50519d40d36d681392e44ca67992f6878ec8a0b7c8ea54b655d30ba794a31fe0e6b054c03a03f3a37c92d4454099c9e65d2a799fc036a04ac110657e0fbe49974d3f3dad1c1464", 0x4b}, {&(0x7f00000003c0)="378130eca7d1415ae794706531de33bb789436699870ab90e2583dc36bb3e593ac8028faa990581e8073fa871d2e3de6deacae7c4b577bc9693129b02943071b1c824e294a8f4b5a2c4fc8cc0769d955790281e26a668c52e01f410c05b85c406e04999db0f9396458a6d79b9fb6a908be1bf999a0818c18ab296b618d3201eb5d7fb1a9e8bb359186853531558c23dabc1ad64cd2f0372f29beed9bd2e953ee5ee66c610080ff", 0xa7}, {&(0x7f0000000300)="98f2", 0x2}, {&(0x7f00000004c0)="c79d1bbd5b9b87a96254b608289d244ca1a6e545e93f0674b523aaee7780a37d32c6b2ca040eeb008b9bd07c4c18c631aeb4c0db08f791f3ec5002ed20461fd0b5697d92899eedb5cfc689744ed666d3d74be0bb57e3c5acb7bfce3873f22794c63fa504b8a532daa1652761fd23415342e187dbe6ee04f7", 0x78}, {&(0x7f00000006c0)="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", 0xfb}, {&(0x7f0000000540)="582e11b5b378145ee9752afbc7d4b54b9bfdfecd8c857882984aae9ae18469d8978ebd099f77e09ce0d65b55a804404b637261fb8d59adee45f74fe0516e9beba665f808a93adcdfa72e30b203fc829d1d7be5d3ac55d09113f8a1ed85f3b2dfc7b8c45a83c08868d8210c163839d2ef4578dd805b37a3f323db38", 0x7b}], 0x8, &(0x7f0000000840)=[{0x48, 0x10c, 0x3, "6429ea0e011b6932de5303b89e77576bc80817bd480329e20d90c3a658fc32ff38d32218be69d3a12becf69853d91cd9d245d9"}, {0xe8, 0x10e, 0x2, "4e9284c7345ba87f2ed2c390518624921961d647426142f067781331fad0ed72d6a07dc5b9345aeb2f4428d6e073d005f6916b0f68128f8f27e93bf4e70bbc4404b7d29337be47e540be974bd57a297ce527c91fc47e228cbac0054e891d45ed5d3ae2ff2bd44d8897532f620bdc9370724e2c7c9b2e3f1b55bc00199be65422221fed9449b0f4132b0f001207621b49fc7cbd6683141eb6fad74498f764eeb959a9daa6e5f3c82ce4eb8066310d7a2bb9224f06e432c41746ee283cdcfc0e8713fb6b565d5b65a470bd12463e7e88a9c873"}, {0x68, 0x109, 0x5, "474c73f6830a27120cfdb150a757e81f4ae54548e128a58f03b4e121447c21ce830426212a7ba9e8eb233ab2aa8f5c051fd8a0188bb03a8b6bcfeabfd1ece4b94337a03c8eded04f54912b077ace313a379b2317"}, {0xd0, 0x6, 0x10, "e1014b018149259b16d1546e58409523852d36740cb214e169c6b4ea7e1122819d7e409cf446fcc96134e6352de922e334067c1ecd0736bbbe8f5a2f5bb62a7a94ed8783359c7154cb24e173339eb593553c6dd92f048ca7cc43f0280ea7682e23bd16945e5b6633917edbf26c45734297c5f17332dc42255580d54c95bc820e233badf10c5503266239dbc95791519b9dd78a6735014062a63eadd4405b64773e4627c386a71aad2a31bf36835afd22391bf9c9c6151e1fb3f983a503"}], 0x268}, 0x200400d2) (async) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x1, 'syz1\x00', @bcast, 0xff, 0x8, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) sendmsg(r3, &(0x7f00000003c0)={&(0x7f0000000200)=@phonet={0x23, 0x1, 0x81, 0x40}, 0x80, 0x0}, 0x40041) (async) ioctl$SIOCNRDECOBS(r3, 0x89e2) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x34, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009805}, 0x4000080) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001b80)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b40)={&(0x7f0000000ac0)={0x1070, r5, 0x0, 0x4, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x1008, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffff}]}, @ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x1070}, 0x1, 0x0, 0x0, 0x80}, 0x40) 75.679275ms ago: executing program 3 (id=2979): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffce5, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x48}}, 0x0) (async) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) (async) unshare(0x22020400) unshare(0x10000400) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r4, r2, 0x5}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0) (async) sendmsg$nl_netfilter(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x18, 0x0, 0x3, 0x5, 0x0, 0x0, {}, [@generic="92"]}, 0x18}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d000000000000000002"], 0x30}}, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) sendmsg$inet6(r1, &(0x7f00000007c0)={&(0x7f0000000100)={0xa, 0x4e24, 0x7, @remote, 0x2}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000280)="a8dd9185260ce82dc484e8868abf8dac0c0a8c9022f0b5cdfa723423dbb50a91c886d2a2c410ea4fe846874d2573dd04ec2f6f1a73d5c42cfd5c46c2d74074e93473de77b7cc546b05836eac9914c3ab9a029223dbb563a68ce5e0681e3cdb15119e422d72a474dc7173a3ef97d08dab0fdd2840234c64142abd714a7eb6d857894908e1e9fad7259fa4c71c0e5035e082e6d773119c7cbb2f5048f4cd62d339c754c51ba6766bda07403adb7be1704ce93fe116f4f90cd53c8d889d44208071987400106aef1ac7d5011b75af8ab17d4c2cf3f4f0cc891040df4f519aee9795dbfdff3cc8d08a87e1e997e81af2f25dacc765ad009c2b0a80e69287", 0xfc}, {&(0x7f0000000380)="3c3a9763928b166b74b2768113cf3c37b7f6070f1c56cf8e1910f1f235f7a0c4160183b513ee0ed700cb09879c3e9eb253d5d8e753769009cdc83859c3c7cde79940247299c39b6410876ecfffd279d5778004138bfa888b4406739e97c1170ca506bec196fd5906d0f8c8d287560cec437e0b657e5e6950b14ccce133d2da5a5a", 0x81}, {&(0x7f0000000440)="46de1dcbeef6a819fd1b5fc8f3e67758a974d5056e8d76db01fa79a56ba144979a188ab01eb6d8c753b90ddf93e4e57a9997eafc91886313227841a774a434b7526d950b8cb958bfb2cb4e5ab9c08270625bb04119726b1477540667fa5f824f347c492e0fc0f402edceb07130744e40205bcda92537da8a5d59f3b4bdf77008f43605cd8fec58543fb370ab97cf7ec1f8aa7140602d706dd342d59f066ecee740b4e74f148f68cde17cfa268eb379de8cb57cbbbe5478c06c15d3342cd51459a80999e69aacffa82d767d54128a3997e3b550c9eefa29574ec319af934fe486", 0xe0}], 0x3, &(0x7f0000000540)=[@hopopts_2292={{0x20, 0x29, 0x36, {0x73, 0x0, '\x00', [@pad1, @generic={0x7}]}}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x32, 0xc, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @calipso={0x7, 0x30, {0x2, 0xa, 0x0, 0xab1, [0x8, 0x0, 0x4ad, 0x32, 0x4]}}, @pad1, @enc_lim={0x4, 0x1, 0x6}]}}}, @dstopts={{0xb8, 0x29, 0x37, {0x4, 0x13, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x9, 0xc, "4f96dc09a1dbcd80b8583fd0"}, @jumbo, @jumbo={0xc2, 0x4, 0x80000000}, @jumbo={0xc2, 0x4, 0xa46}, @pad1, @calipso={0x7, 0x18, {0x0, 0x4, 0x1, 0x401, [0x9, 0x4]}}, @jumbo={0xc2, 0x4, 0xe000000}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x0, 0x10, 0x8, 0x1a80, [0x8, 0x400, 0x0, 0x7fffffff, 0x8001, 0x6, 0x1, 0xffffffffffff8524]}}]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x89, 0x2, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}], 0x1b8}, 0x4080) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xfff1}, {0xfff1}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 0 (id=2980): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r2 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) writev(r2, &(0x7f0000002c00)=[{0x0}, {&(0x7f0000002940)="59721f1223e8d1f829bfa3e27a317bdab2973149c7b70b981e5e3dbd2a155a52d656b4905bdd65efe73e0d7896bd62023c88703efa4f3caea27440771a984b72af9c1b77c769c079910affdf3a6062f4e02dab52e170341db4f21427ceff61104fb0733ad13a4eabd6", 0x69}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000080)={0x30, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x3f, r2}}]}, @NBD_ATTR_SOCKETS={0x0, 0x7, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, {0x0, 0x1, r2}}, {0x0, 0x1, 0x0, 0x1, {0x0, 0x1, r2}}, {0x0, 0x1, 0x0, 0x1, {0x0, 0x1, r3}}, {0x0, 0x1, 0x0, 0x1, {0x0, 0x1, r2}}]}]}, 0xfffffffffffffdce}, 0x1, 0x0, 0x0, 0x40}, 0x4010044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1d, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f0400000000000000000085000000bb00000085000000d100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) kernel console output (not intermixed with test programs): isolated(anon):0kB isolated(file):0kB mapped:120092kB dirty:360kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12760kB pagetables:3920kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 303.049838][T11975] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 303.080871][T11990] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 303.084579][T11975] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 303.130106][T11975] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 303.137367][T11975] Node 0 DMA32 free:1178420kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26276kB inactive_anon:0kB active_file:12832kB inactive_file:157860kB unevictable:1536kB writepending:360kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:30656kB local_pcp:13712kB free_cma:0kB [ 303.177882][T11975] lowmem_reserve[]: 0 0 1 1 1 [ 303.182948][T11975] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 303.210602][T11993] netlink: 'syz.2.1625': attribute type 2 has an invalid length. [ 303.217421][T11975] lowmem_reserve[]: 0 0 0 0 0 [ 303.226133][T11993] netlink: 'syz.2.1625': attribute type 1 has an invalid length. [ 303.236647][T11975] Node 1 Normal free:3883136kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19552kB local_pcp:13056kB free_cma:0kB [ 303.269217][T11975] lowmem_reserve[]: 0 0 0 0 0 [ 303.276689][T11975] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 303.290834][T11975] Node 0 DMA32: 2215*4kB (UME) 995*8kB (UME) 370*16kB (UM) 671*32kB (UME) 363*64kB (UM) 159*128kB (UME) 88*256kB (UM) 44*512kB (UME) 29*1024kB (UM) 2*2048kB (M) 247*4096kB (M) = 1178356kB [ 303.311748][T11975] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 303.325960][T11975] Node 1 Normal: 208*4kB (UME) 56*8kB (UME) 36*16kB (UME) 120*32kB (UME) 43*64kB (UME) 5*128kB (UME) 5*256kB (UME) 4*512kB (ME) 2*1024kB (UM) 1*2048kB (E) 944*4096kB (M) = 3883136kB [ 303.345222][T11975] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 303.355768][T11975] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 303.365538][T11975] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 303.375508][T11975] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 303.388023][T11975] 44500 total pagecache pages [ 303.395241][T11975] 0 pages in swap cache [ 303.399434][T11975] Free swap = 124996kB [ 303.407244][T11975] Total swap = 124996kB [ 303.411714][T11975] 2097051 pages RAM [ 303.416817][T11975] 0 pages HighMem/MovableOnly [ 303.421731][T11975] 425656 pages reserved [ 303.430057][T11975] 0 pages cma reserved [ 303.601256][T12007] netlink: 'syz.0.1630': attribute type 4 has an invalid length. [ 303.937371][T12020] Bluetooth: MGMT ver 1.23 [ 304.648618][T12043] bond0: default FDB implementation only supports local addresses [ 305.300970][T12086] tipc: Enabled bearer , priority 0 [ 305.317262][T12086] syzkaller0: entered promiscuous mode [ 305.326063][T12086] syzkaller0: entered allmulticast mode [ 305.337210][T12086] veth0_vlan: mtu less than device minimum [ 305.346396][T12085] tipc: Resetting bearer [ 305.390972][T12085] tipc: Disabling bearer [ 305.435443][T12093] syzkaller1: entered promiscuous mode [ 305.441329][T12093] syzkaller1: entered allmulticast mode [ 305.679434][T12104] __nla_validate_parse: 25 callbacks suppressed [ 305.679452][T12104] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1664'. [ 305.712761][T12108] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1666'. [ 306.067630][T12119] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1668'. [ 306.139855][T12123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1670'. [ 306.469310][T12143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1674'. [ 306.505391][T12145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 306.523360][T12149] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1676'. [ 306.569041][T12143] geneve0 speed is unknown, defaulting to 1000 [ 306.610536][T12143] lo speed is unknown, defaulting to 1000 [ 306.660507][T12143] lo speed is unknown, defaulting to 1000 [ 306.953450][T12160] tipc: Enabled bearer , priority 0 [ 307.204327][T12171] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1684'. [ 307.267074][T12172] tipc: Resetting bearer [ 307.420285][T12143] netlink: 'syz.3.1674': attribute type 13 has an invalid length. [ 307.432794][T12184] netlink: zone id is out of range [ 307.443987][T12184] netlink: zone id is out of range [ 307.449468][T12184] netlink: zone id is out of range [ 307.454851][T12143] netlink: 'syz.3.1674': attribute type 17 has an invalid length. [ 307.456929][T12185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.463758][T12184] netlink: zone id is out of range [ 307.494404][T12143] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 307.509346][T12181] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1686'. [ 307.514241][T12184] netlink: zone id is out of range [ 307.521764][T12185] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1686'. [ 307.603567][T12184] netlink: zone id is out of range [ 307.613364][T12184] netlink: zone id is out of range [ 307.644709][T12188] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1688'. [ 308.075919][T12159] tipc: Disabling bearer [ 308.117891][T12197] batadv1: entered promiscuous mode [ 308.133748][T12197] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 308.417566][T12213] netlink: 'syz.0.1697': attribute type 1 has an invalid length. [ 308.746576][ C0] vcan0: j1939_session_tx_dat: 0xffff888058016000: queue data error: -100 [ 308.755393][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 308.761863][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 308.768535][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 308.775309][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 308.783320][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 308.791244][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 308.799550][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 308.807549][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 308.816244][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 308.824143][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 308.832197][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 308.840076][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 308.848075][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 308.856136][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 308.864316][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 308.872265][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 308.880351][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 308.888245][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 308.896245][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 308.904378][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 308.913387][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 308.921341][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 308.929692][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 308.937938][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 308.946531][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 308.954906][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 309.117723][T12241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.226259][T12251] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.270501][T12253] bridge0: port 1(ipvlan3) entered blocking state [ 309.278980][T12253] bridge0: port 1(ipvlan3) entered disabled state [ 309.289591][T12253] ipvlan3: entered allmulticast mode [ 309.299231][T12253] bridge0: entered allmulticast mode [ 309.307786][T12253] ipvlan3: left allmulticast mode [ 309.312941][T12253] bridge0: left allmulticast mode [ 309.341118][T12259] netlink: 'syz.1.1707': attribute type 28 has an invalid length. [ 309.437384][T12251] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.532736][T12266] IPVS: set_ctl: invalid protocol: 4 172.20.20.68:20003 [ 309.579667][T12267] IPVS: set_ctl: invalid protocol: 4 172.20.20.68:20003 [ 309.586441][T12251] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.738093][T12251] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.789654][T12282] syzkaller1: entered promiscuous mode [ 309.795592][T12282] syzkaller1: entered allmulticast mode [ 310.164343][T12298] netlink: 'syz.2.1715': attribute type 1 has an invalid length. [ 310.188574][T12299] pimreg: entered allmulticast mode [ 310.216689][T12299] pimreg: left allmulticast mode [ 310.546319][T12312] nbd: nbd0 already in use [ 310.556435][T12312] block nbd0: NBD_DISCONNECT [ 310.562252][T12312] block nbd0: Send disconnect failed -107 [ 310.570088][T12312] block nbd0: shutting down sockets [ 310.620032][T12312] net_ratelimit: 338 callbacks suppressed [ 310.620057][T12312] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 310.933051][T12319] ip_vti0: entered allmulticast mode [ 310.969870][T12325] tipc: Enabled bearer , priority 0 [ 310.990830][T12325] __nla_validate_parse: 16 callbacks suppressed [ 310.990854][T12325] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1725'. [ 311.221707][T12325] tipc: Resetting bearer [ 311.240944][T12324] tipc: Disabling bearer [ 311.306497][T12335] netlink: 'syz.3.1728': attribute type 16 has an invalid length. [ 311.316149][T12335] netlink: 'syz.3.1728': attribute type 17 has an invalid length. [ 311.887906][T12347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1731'. [ 311.998852][ T30] audit: type=1800 audit(1755534956.021:5): pid=12351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1731" name="memory.events" dev="tmpfs" ino=1860 res=0 errno=0 [ 312.090427][T12339] tipc: Enabling of bearer rejected, failed to enable media [ 312.375675][T12357] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1734'. [ 312.438741][T12362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1734'. [ 312.586361][T12367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1737'. [ 312.686428][T12369] : entered promiscuous mode [ 312.806165][T12374] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1740'. [ 312.885799][T12377] netlink: 'syz.2.1741': attribute type 10 has an invalid length. [ 312.907727][T12377] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.931437][T12377] team0: entered allmulticast mode [ 312.941195][T12377] bond3: entered allmulticast mode [ 312.951407][T12377] bond0: (slave team0): Enslaving as an active interface with a down link [ 313.084976][T12386] netlink: 'syz.2.1744': attribute type 3 has an invalid length. [ 313.302768][T12394] geneve0 speed is unknown, defaulting to 1000 [ 313.321219][T12394] lo speed is unknown, defaulting to 1000 [ 313.337597][T12394] lo speed is unknown, defaulting to 1000 [ 313.554090][T12404] sctp: [Deprecated]: syz.2.1748 (pid 12404) Use of struct sctp_assoc_value in delayed_ack socket option. [ 313.554090][T12404] Use struct sctp_sack_info instead [ 313.580125][T12403] sctp: [Deprecated]: syz.2.1748 (pid 12403) Use of struct sctp_assoc_value in delayed_ack socket option. [ 313.580125][T12403] Use struct sctp_sack_info instead [ 313.712381][T12407] geneve0: entered promiscuous mode [ 314.030750][T12422] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1753'. [ 314.048839][T12423] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1752'. [ 314.415650][T12435] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1756'. [ 314.668824][T12445] geneve0 speed is unknown, defaulting to 1000 [ 314.688270][T12445] lo speed is unknown, defaulting to 1000 [ 314.690979][T12451] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 314.716300][T12445] lo speed is unknown, defaulting to 1000 [ 314.730841][T12452] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.741194][T12452] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.830064][T12452] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.840393][T12452] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.892055][T12456] geneve0 speed is unknown, defaulting to 1000 [ 314.900487][T12456] lo speed is unknown, defaulting to 1000 [ 314.909803][T12456] lo speed is unknown, defaulting to 1000 [ 314.920244][T12452] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.938048][T12452] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.111952][T12452] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.128523][T12452] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.302599][T12469] netlink: 'syz.3.1764': attribute type 1 has an invalid length. [ 315.312997][T12469] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1764'. [ 315.325248][T12470] tipc: Enabling of bearer rejected, failed to enable media [ 315.335178][T12288] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.344029][T12288] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.428250][T12288] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.447963][T12288] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.478611][T12288] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.503361][T12288] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.634801][T12467] netlink: 'syz.4.1763': attribute type 18 has an invalid length. [ 315.954191][T12471] macsec0: left allmulticast mode [ 315.973762][T12471] veth3: left promiscuous mode [ 315.994133][T12471] batadv1: left promiscuous mode [ 316.001997][T12472] syzkaller0: entered promiscuous mode [ 316.007932][T12472] syzkaller0: entered allmulticast mode [ 316.028421][T12288] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.038268][T12288] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.047672][T12288] netdevsim netdevsim3 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.059828][T12288] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.069248][T12288] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.078905][T12288] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.090591][T12288] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.102195][T12288] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.180998][T12288] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.191071][T12288] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.389486][T12500] __nla_validate_parse: 2 callbacks suppressed [ 316.389513][T12500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1769'. [ 316.480788][T12500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.504150][T12511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1772'. [ 316.530349][T12512] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.550537][T12502] geneve0 speed is unknown, defaulting to 1000 [ 316.561928][T12502] lo speed is unknown, defaulting to 1000 [ 316.570380][T12502] lo speed is unknown, defaulting to 1000 [ 316.638912][T12514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1772'. [ 316.677315][T12512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1770'. [ 316.683189][T12519] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1774'. [ 317.377159][T12552] geneve0 speed is unknown, defaulting to 1000 [ 317.385902][T12552] lo speed is unknown, defaulting to 1000 [ 317.396120][T12552] lo speed is unknown, defaulting to 1000 [ 317.549089][T12559] netlink: 'syz.3.1785': attribute type 21 has an invalid length. [ 317.714382][T12564] netlink: 'syz.4.1786': attribute type 1 has an invalid length. [ 317.841115][T12564] 8021q: adding VLAN 0 to HW filter on device bond6 [ 317.908036][T12571] 8021q: adding VLAN 0 to HW filter on device bond6 [ 317.928452][T12571] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 317.949878][T12571] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 318.336383][T12564] bond6: (slave bridge6): Enslaving as an active interface with a down link [ 318.492362][T12577] tc_dump_action: action bad kind [ 318.656759][T12579] geneve0 speed is unknown, defaulting to 1000 [ 318.806578][T12579] lo speed is unknown, defaulting to 1000 [ 318.840837][T12579] lo speed is unknown, defaulting to 1000 [ 318.955192][T12612] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 318.961651][T12605] macvtap1: entered allmulticast mode [ 318.977325][T12605] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 319.297689][T12615] netlink: 'syz.0.1796': attribute type 1 has an invalid length. [ 319.326641][T12606] geneve0 speed is unknown, defaulting to 1000 [ 319.373027][T12606] lo speed is unknown, defaulting to 1000 [ 319.388706][T12617] bond0: (slave bridge4): making interface the new active one [ 319.397380][T12617] bond0: (slave bridge4): Enslaving as an active interface with an up link [ 319.428155][T12606] lo speed is unknown, defaulting to 1000 [ 319.440348][T12615] netlink: 'syz.0.1796': attribute type 15 has an invalid length. [ 321.000647][T12627] geneve3: entered promiscuous mode [ 321.013444][ T51] Bluetooth: hci0: command tx timeout [ 321.437111][T12646] geneve0 speed is unknown, defaulting to 1000 [ 321.466063][T12649] netlink: 'syz.3.1806': attribute type 10 has an invalid length. [ 321.482247][T12646] lo speed is unknown, defaulting to 1000 [ 321.486104][T12649] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 321.497821][T12651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1807'. [ 321.509595][T12649] wlan1: mtu less than device minimum [ 321.515618][T12651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1807'. [ 321.530596][T12649] Ã: (slave wlan1): Error -22 calling dev_set_mtu [ 321.542082][T12646] lo speed is unknown, defaulting to 1000 [ 321.552109][T12651] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 321.956574][T12662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.980039][T12673] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1816'. [ 322.461649][T12700] syzkaller0: entered promiscuous mode [ 322.471676][T12700] syzkaller0: entered allmulticast mode [ 322.905979][T12721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1825'. [ 323.182034][T12735] !: renamed from dummy0 [ 323.266569][T12732] tipc: Enabled bearer , priority 0 [ 323.308357][T12732] syzkaller0: entered promiscuous mode [ 323.311285][T12742] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1832'. [ 323.337477][T12732] syzkaller0: entered allmulticast mode [ 323.364681][T12732] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 323.384786][T12742] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1832'. [ 323.562791][T12750] bond0: option use_carrier: invalid value (6) [ 323.601641][T12743] geneve0 speed is unknown, defaulting to 1000 [ 323.634634][T12743] lo speed is unknown, defaulting to 1000 [ 323.655233][T12743] lo speed is unknown, defaulting to 1000 [ 324.019868][T12727] tipc: Resetting bearer [ 324.208442][T12727] tipc: Disabling bearer [ 324.874677][T12814] geneve0 speed is unknown, defaulting to 1000 [ 324.890125][T12814] lo speed is unknown, defaulting to 1000 [ 324.915826][T12814] lo speed is unknown, defaulting to 1000 [ 324.939847][T12822] netlink: 'syz.4.1842': attribute type 10 has an invalid length. [ 324.948177][T12822] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 325.150542][T12826] bridge7: entered allmulticast mode [ 325.336625][T12839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1844'. [ 325.424089][T12842] net veth1_virt_wifi veth0_virv_wifi: renamed from virt_wifi0 [ 325.920270][T12859] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1849'. [ 326.013602][T12861] netlink: 'syz.4.1850': attribute type 13 has an invalid length. [ 326.626495][T12870] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1852'. [ 327.639649][T12872] netlink: 'syz.0.1852': attribute type 3 has an invalid length. [ 327.650095][T12872] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1852'. [ 327.702826][T12874] geneve0 speed is unknown, defaulting to 1000 [ 327.737173][T12874] lo speed is unknown, defaulting to 1000 [ 327.789323][T12874] lo speed is unknown, defaulting to 1000 [ 328.031252][T12895] tap0: tun_chr_ioctl cmd 1074812118 [ 328.345945][ T30] audit: type=1804 audit(1755534972.371:6): pid=12918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1863" name="memory.events" dev="tmpfs" ino=1957 res=1 errno=0 [ 328.375460][ T30] audit: type=1800 audit(1755534972.371:7): pid=12918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1863" name="memory.events" dev="tmpfs" ino=1957 res=0 errno=0 [ 328.601570][T12923] veth2: entered allmulticast mode [ 328.662095][T12925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1867'. [ 328.704954][T12928] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 328.828876][T12925] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1867'. [ 328.879507][T12932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1867'. [ 329.010813][T12943] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1870'. [ 329.208778][T12936] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 329.218982][T12944] tipc: Cannot configure node identity twice [ 329.311432][T12939] geneve0 speed is unknown, defaulting to 1000 [ 329.330069][T12939] lo speed is unknown, defaulting to 1000 [ 329.374190][T12939] lo speed is unknown, defaulting to 1000 [ 329.492678][T12957] tipc: Enabled bearer , priority 0 [ 329.549063][T12957] syzkaller0: entered promiscuous mode [ 329.554987][T12957] syzkaller0: entered allmulticast mode [ 329.578002][T12970] openvswitch: netlink: IP tunnel dst address not specified [ 329.658026][T12975] tipc: Resetting bearer [ 329.728110][T12978] netlink: 'syz.4.1880': attribute type 1 has an invalid length. [ 329.763863][T12955] tipc: Resetting bearer [ 329.810519][T12955] tipc: Disabling bearer [ 329.859731][T12985] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1881'. [ 329.883958][T12978] 8021q: adding VLAN 0 to HW filter on device bond8 [ 329.907506][T12985] netlink: 'syz.1.1881': attribute type 1 has an invalid length. [ 330.175680][T13002] netlink: 'syz.3.1885': attribute type 1 has an invalid length. [ 330.193685][T13002] netlink: 'syz.3.1885': attribute type 2 has an invalid length. [ 330.202354][T13001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1884'. [ 330.264300][T13002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1885'. [ 330.393985][T13002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1885'. [ 330.487718][T13013] _ÐZ`Ô€@: entered promiscuous mode [ 331.401654][T13060] netlink: 'syz.2.1900': attribute type 3 has an invalid length. [ 331.474613][T13063] netlink: 'syz.4.1902': attribute type 1 has an invalid length. [ 331.499780][T13063] netlink: 'syz.4.1902': attribute type 11 has an invalid length. [ 331.919163][T13079] __nla_validate_parse: 5 callbacks suppressed [ 331.919187][T13079] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1906'. [ 332.217605][T13085] geneve0 speed is unknown, defaulting to 1000 [ 332.250788][T13087] geneve0 speed is unknown, defaulting to 1000 [ 332.258473][T13085] lo speed is unknown, defaulting to 1000 [ 332.274999][T13087] lo speed is unknown, defaulting to 1000 [ 332.282155][T13085] lo speed is unknown, defaulting to 1000 [ 332.306348][ T30] audit: type=1804 audit(1755534976.331:8): pid=13093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1909" name="memory.events" dev="tmpfs" ino=2040 res=1 errno=0 [ 332.307669][T13087] lo speed is unknown, defaulting to 1000 [ 332.382077][ T30] audit: type=1800 audit(1755534976.331:9): pid=13093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1909" name="memory.events" dev="tmpfs" ino=2040 res=0 errno=0 [ 332.583762][T13101] sctp: [Deprecated]: syz.2.1912 (pid 13101) Use of int in max_burst socket option. [ 332.583762][T13101] Use struct sctp_assoc_value instead [ 332.869080][T13114] netlink: 'syz.2.1914': attribute type 1 has an invalid length. [ 332.889576][T13118] netlink: 'syz.2.1914': attribute type 1 has an invalid length. [ 332.949232][T13116] tipc: Enabled bearer , priority 0 [ 332.974852][T13116] syzkaller0: entered promiscuous mode [ 332.997573][T13116] syzkaller0: entered allmulticast mode [ 333.043841][T13116] tipc: Resetting bearer [ 333.090648][T13115] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1915'. [ 333.150183][T13116] tipc: Disabling bearer [ 333.354095][T13128] ‚: renamed from bond_slave_0 [ 333.802707][T13142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1921'. [ 333.843665][T13142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1921'. [ 333.929174][T13147] netlink: 'syz.0.1923': attribute type 1 has an invalid length. [ 333.956387][T13147] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1923'. [ 333.997009][T13147] netlink: 'syz.0.1923': attribute type 1 has an invalid length. [ 334.030470][T13150] geneve0 speed is unknown, defaulting to 1000 [ 334.050875][T13150] lo speed is unknown, defaulting to 1000 [ 334.076052][T13150] lo speed is unknown, defaulting to 1000 [ 334.290698][T13154] geneve0 speed is unknown, defaulting to 1000 [ 334.308925][T13154] lo speed is unknown, defaulting to 1000 [ 334.318663][T13154] lo speed is unknown, defaulting to 1000 [ 334.411746][T13164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1927'. [ 334.685517][T13172] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1929'. [ 334.723702][T13172] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1929'. [ 335.028964][T13186] netlink: 'syz.4.1931': attribute type 5 has an invalid length. [ 335.049845][T13185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.082956][T13184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1932'. [ 335.103900][T13185] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1933'. [ 335.268627][T13180] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 335.692721][T13200] geneve0 speed is unknown, defaulting to 1000 [ 335.723644][T13200] lo speed is unknown, defaulting to 1000 [ 335.731819][T13200] lo speed is unknown, defaulting to 1000 [ 336.528983][T13237] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 336.533093][T13240] tipc: New replicast peer: 255.255.255.255 [ 336.550583][T13240] tipc: Enabled bearer , priority 10 [ 336.938709][T13263] __nla_validate_parse: 2 callbacks suppressed [ 336.938735][T13263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1954'. [ 337.244389][T13267] geneve0 speed is unknown, defaulting to 1000 [ 337.279555][T13267] lo speed is unknown, defaulting to 1000 [ 337.290905][T13282] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1957'. [ 337.305106][T13282] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1957'. [ 337.334371][T13267] lo speed is unknown, defaulting to 1000 [ 337.425702][T13284] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1960'. [ 337.562505][T13289] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 337.574847][T13289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1962'. [ 337.629024][T13291] syz.3.1961: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 337.719646][T13291] CPU: 1 UID: 0 PID: 13291 Comm: syz.3.1961 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 337.719682][T13291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 337.719695][T13291] Call Trace: [ 337.719705][T13291] [ 337.719715][T13291] dump_stack_lvl+0x189/0x250 [ 337.719751][T13291] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.719777][T13291] ? __pfx__printk+0x10/0x10 [ 337.719808][T13291] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 337.719835][T13291] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 337.719861][T13291] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 337.719891][T13291] warn_alloc+0x214/0x310 [ 337.719927][T13291] ? stack_depot_save_flags+0x40/0x860 [ 337.719959][T13291] ? __pfx_warn_alloc+0x10/0x10 [ 337.719996][T13291] ? kasan_save_track+0x4f/0x80 [ 337.720025][T13291] ? xskq_create+0x56/0x170 [ 337.720051][T13291] ? xsk_init_queue+0xb0/0x110 [ 337.720075][T13291] ? xsk_setsockopt+0x4dc/0x8d0 [ 337.720098][T13291] ? do_sock_setsockopt+0x17c/0x1b0 [ 337.720117][T13291] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 337.720136][T13291] ? do_syscall_64+0xfa/0x3b0 [ 337.720166][T13291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.720210][T13291] __vmalloc_node_range_noprof+0x125/0x12f0 [ 337.720279][T13291] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 337.720321][T13291] ? __kasan_kmalloc+0x93/0xb0 [ 337.720356][T13291] vmalloc_user_noprof+0xad/0xf0 [ 337.720387][T13291] ? xskq_create+0xbf/0x170 [ 337.720417][T13291] xskq_create+0xbf/0x170 [ 337.720449][T13291] xsk_init_queue+0xb0/0x110 [ 337.720480][T13291] xsk_setsockopt+0x4dc/0x8d0 [ 337.720509][T13291] ? __pfx_xsk_setsockopt+0x10/0x10 [ 337.720536][T13291] ? __pfx_aa_sk_perm+0x10/0x10 [ 337.720573][T13291] ? aa_sock_opt_perm+0xff/0x1b0 [ 337.720597][T13291] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 337.720620][T13291] ? __pfx_xsk_setsockopt+0x10/0x10 [ 337.720648][T13291] do_sock_setsockopt+0x17c/0x1b0 [ 337.720674][T13291] __x64_sys_setsockopt+0x13f/0x1b0 [ 337.720702][T13291] do_syscall_64+0xfa/0x3b0 [ 337.720732][T13291] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.720760][T13291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.720780][T13291] ? clear_bhb_loop+0x60/0xb0 [ 337.720807][T13291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.720828][T13291] RIP: 0033:0x7ff8c9b8ebe9 [ 337.720848][T13291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.720865][T13291] RSP: 002b:00007ff8caa7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 337.720888][T13291] RAX: ffffffffffffffda RBX: 00007ff8c9db6090 RCX: 00007ff8c9b8ebe9 [ 337.720904][T13291] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 337.720916][T13291] RBP: 00007ff8c9c11e19 R08: 0000000000000004 R09: 0000000000000000 [ 337.720929][T13291] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.720943][T13291] R13: 00007ff8c9db6128 R14: 00007ff8c9db6090 R15: 00007fff0447c5c8 [ 337.720980][T13291] [ 337.721012][T13291] Mem-Info: [ 338.078547][T13302] xt_socket: unknown flags 0xfc [ 338.091078][T13291] active_anon:7205 inactive_anon:0 isolated_anon:0 [ 338.091078][T13291] active_file:3208 inactive_file:39922 isolated_file:0 [ 338.091078][T13291] unevictable:768 dirty:207 writeback:0 [ 338.091078][T13291] slab_reclaimable:12362 slab_unreclaimable:144154 [ 338.091078][T13291] mapped:30996 shmem:1936 pagetables:985 [ 338.091078][T13291] sec_pagetables:0 bounce:0 [ 338.091078][T13291] kernel_misc_reclaimable:0 [ 338.091078][T13291] free:1272834 free_pcp:22623 free_cma:0 [ 338.146869][T13304] validate_nla: 1 callbacks suppressed [ 338.146895][T13304] netlink: 'syz.0.1966': attribute type 10 has an invalid length. [ 338.169813][T13291] Node 0 active_anon:29520kB inactive_anon:0kB active_file:12832kB inactive_file:159488kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124184kB dirty:828kB writeback:0kB shmem:6808kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13156kB pagetables:3916kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 338.215407][T13304] team0: Device ipvlan1 failed to register rx_handler [ 338.243158][T13291] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 338.280619][T13311] tipc: Enabled bearer , priority 0 [ 338.319361][T13310] syzkaller0: entered promiscuous mode [ 338.329875][T13310] syzkaller0: entered allmulticast mode [ 338.342679][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.351266][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.382046][T13291] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 338.417910][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.426131][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.466363][T13291] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 338.472459][T13291] Node 0 DMA32 free:1182444kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34892kB inactive_anon:0kB active_file:12832kB inactive_file:157916kB unevictable:1536kB writepending:828kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:74400kB local_pcp:34204kB free_cma:0kB [ 338.509992][T13291] lowmem_reserve[]: 0 0 1 1 1 [ 338.518436][T13291] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 338.557037][T13291] lowmem_reserve[]: 0 0 0 0 0 [ 338.563016][T13291] Node 1 Normal free:3884432kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18816kB local_pcp:12544kB free_cma:0kB [ 338.595385][T13291] lowmem_reserve[]: 0 0 0 0 0 [ 338.600464][T13291] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 338.616063][T13291] Node 0 DMA32: 776*4kB (UM) 611*8kB (UE) 223*16kB (UME) 1131*32kB (UM) 187*64kB (UM) 87*128kB (UME) 16*256kB (UM) 45*512kB (UME) 31*1024kB (UM) 2*2048kB (UE) 256*4096kB (UM) = 1182408kB [ 338.640324][T13291] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 338.653653][T13291] Node 1 Normal: 208*4kB (UME) 56*8kB (UME) 37*16kB (UME) 138*32kB (UME) 44*64kB (UME) 6*128kB (UME) 5*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 944*4096kB (M) = 3884432kB [ 338.673803][T13291] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 338.683953][T13291] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 338.693517][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.708396][T13291] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 338.718933][T13291] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 338.727351][T13324] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1970'. [ 338.728687][T13291] 44543 total pagecache pages [ 338.742613][T13291] 0 pages in swap cache [ 338.745443][T13324] netlink: 'syz.1.1970': attribute type 7 has an invalid length. [ 338.747095][T13291] Free swap = 124996kB [ 338.759145][T13291] Total swap = 124996kB [ 338.763493][T13291] 2097051 pages RAM [ 338.767649][T13291] 0 pages HighMem/MovableOnly [ 338.777379][T13324] netlink: 'syz.1.1970': attribute type 8 has an invalid length. [ 338.783585][T13291] 425656 pages reserved [ 338.786419][T13324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1970'. [ 338.789501][T13291] 0 pages cma reserved [ 338.814621][T13315] IPv6: sit2: Disabled Multicast RS [ 338.821324][T13315] sit2: entered allmulticast mode [ 338.885402][T13317] IPv6: sit2: Disabled Multicast RS [ 338.898099][T13317] sit2: entered allmulticast mode [ 338.961792][T13329] netlink: 'syz.3.1971': attribute type 2 has an invalid length. [ 338.973034][T13329] netlink: 'syz.3.1971': attribute type 1 has an invalid length. [ 338.974196][T13309] tipc: Resetting bearer [ 338.989224][T13329] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1971'. [ 339.092310][T13309] tipc: Disabling bearer [ 339.237873][T13341] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1974'. [ 339.263070][T13342] geneve0 speed is unknown, defaulting to 1000 [ 339.292485][T13342] lo speed is unknown, defaulting to 1000 [ 339.312533][T13342] lo speed is unknown, defaulting to 1000 [ 339.382279][T13351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1976'. [ 339.430452][T13358] netlink: 'syz.4.1978': attribute type 1 has an invalid length. [ 339.443198][T13358] netlink: 'syz.4.1978': attribute type 3 has an invalid length. [ 339.752089][T13378] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 340.136199][T13387] netlink: 'syz.4.1984': attribute type 1 has an invalid length. [ 340.238821][T13391] bond9: (slave gretap2): making interface the new active one [ 340.250237][T13391] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 340.289305][T13393] netlink: 'syz.1.1986': attribute type 1 has an invalid length. [ 340.458261][T13404] netlink: 'syz.4.1988': attribute type 16 has an invalid length. [ 340.791125][T13424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.742477][T13468] bond7: entered promiscuous mode [ 342.002323][T13479] __nla_validate_parse: 13 callbacks suppressed [ 342.002349][T13479] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2012'. [ 342.074405][T13486] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 342.147247][T13492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.358285][T13506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2017'. [ 342.544080][T13520] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2021'. [ 342.562393][T13520] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2021'. [ 342.583195][T13520] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2021'. [ 342.606513][T13520] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2021'. [ 342.608767][T13523] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2022'. [ 343.138325][T13548] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2030'. [ 343.215238][T13550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2029'. [ 343.456193][T13554] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2031'. [ 343.483494][T13558] validate_nla: 5 callbacks suppressed [ 343.483524][T13558] netlink: 'syz.3.2033': attribute type 3 has an invalid length. [ 343.486245][ T30] audit: type=1804 audit(1755534987.511:10): pid=13556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2032" name="/newroot/415/cgroup.controllers" dev="tmpfs" ino=2162 res=1 errno=0 [ 343.524272][ T30] audit: type=1800 audit(1755534987.541:11): pid=13556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2032" name="cgroup.controllers" dev="tmpfs" ino=2162 res=0 errno=0 [ 344.171767][T13591] netlink: 'syz.4.2044': attribute type 1 has an invalid length. [ 344.241700][T13598] netlink: 'syz.0.2046': attribute type 1 has an invalid length. [ 344.334910][T13600] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.345164][T13600] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.417095][T13600] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.470361][T13600] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.514061][T13606] netlink: 'syz.0.2047': attribute type 10 has an invalid length. [ 344.567092][T13600] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.589825][T13600] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.667040][T13600] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.691714][T13600] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.882008][T12288] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.904041][T12288] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.918144][T12288] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.929001][T12288] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.958496][T12288] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.972979][T12288] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.011025][T12288] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.021746][T12288] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.671501][T13642] geneve0 speed is unknown, defaulting to 1000 [ 345.692563][T13642] lo speed is unknown, defaulting to 1000 [ 345.701131][T13642] lo speed is unknown, defaulting to 1000 [ 346.342150][T13665] geneve0 speed is unknown, defaulting to 1000 [ 346.350594][T13665] lo speed is unknown, defaulting to 1000 [ 346.359153][T13665] lo speed is unknown, defaulting to 1000 [ 346.943192][T13696] netlink: 'syz.2.2073': attribute type 1 has an invalid length. [ 346.965898][T13696] netlink: 'syz.2.2073': attribute type 10 has an invalid length. [ 347.408239][T13723] __nla_validate_parse: 8 callbacks suppressed [ 347.408266][T13723] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2079'. [ 347.462605][T13725] tipc: Enabled bearer , priority 0 [ 347.480191][T13725] syzkaller0: entered promiscuous mode [ 347.496601][T13725] syzkaller0: entered allmulticast mode [ 347.558026][T13725] tipc: Resetting bearer [ 347.567970][T13724] tipc: Resetting bearer [ 347.638879][T13724] tipc: Disabling bearer [ 347.709238][T13732] Bluetooth: MGMT ver 1.23 [ 347.756244][T13732] geneve2: entered promiscuous mode [ 347.768675][T13736] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 347.896013][T13734] sctp: [Deprecated]: syz.4.2083 (pid 13734) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.896013][T13734] Use struct sctp_sack_info instead [ 348.784313][T13777] netlink: 'syz.4.2092': attribute type 21 has an invalid length. [ 348.807071][T13777] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2092'. [ 348.937602][T13786] netlink: 'syz.3.2095': attribute type 4 has an invalid length. [ 349.151518][T13794] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2096'. [ 349.264829][ T30] audit: type=1800 audit(1755534993.281:12): pid=13799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2098" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1949 res=0 errno=0 [ 349.526869][T13817] syz.2.2102: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 349.588780][T13817] CPU: 0 UID: 0 PID: 13817 Comm: syz.2.2102 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 349.588813][T13817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 349.588826][T13817] Call Trace: [ 349.588834][T13817] [ 349.588843][T13817] dump_stack_lvl+0x189/0x250 [ 349.588879][T13817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.588903][T13817] ? __pfx__printk+0x10/0x10 [ 349.588936][T13817] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 349.588961][T13817] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 349.588988][T13817] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 349.589016][T13817] warn_alloc+0x214/0x310 [ 349.589054][T13817] ? __pfx_warn_alloc+0x10/0x10 [ 349.589095][T13817] ? __get_vm_area_node+0x28f/0x300 [ 349.589124][T13817] ? hash_mac_create+0x332/0xe80 [ 349.589157][T13817] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 349.589215][T13817] ? alloc_pages_mpol+0x3cd/0x4a0 [ 349.589250][T13817] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 349.589284][T13817] ? rcu_is_watching+0x15/0xb0 [ 349.589306][T13817] ? hash_mac_create+0x332/0xe80 [ 349.589331][T13817] ? hash_mac_create+0x332/0xe80 [ 349.589354][T13817] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 349.589383][T13817] ? hash_mac_create+0x332/0xe80 [ 349.589407][T13817] ? hash_mac_create+0x2d7/0xe80 [ 349.589445][T13817] hash_mac_create+0x332/0xe80 [ 349.589479][T13817] ? __nla_parse+0x40/0x60 [ 349.589510][T13817] ? __pfx_hash_mac_create+0x10/0x10 [ 349.589537][T13817] ip_set_create+0xa94/0x1940 [ 349.589564][T13817] ? ip_set_create+0x4a2/0x1940 [ 349.589601][T13817] ? __pfx_ip_set_create+0x10/0x10 [ 349.589662][T13817] nfnetlink_rcv_msg+0xb4a/0x1130 [ 349.589691][T13817] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 349.589740][T13817] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 349.589800][T13817] ? trace_buffer_unlock_commit_regs+0x14f/0x550 [ 349.589846][T13817] netlink_rcv_skb+0x205/0x470 [ 349.589877][T13817] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 349.589903][T13817] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 349.589943][T13817] ? bpf_lsm_capable+0x9/0x20 [ 349.589969][T13817] ? security_capable+0x7e/0x2e0 [ 349.590006][T13817] nfnetlink_rcv+0x26a/0x2520 [ 349.590031][T13817] ? is_bpf_text_address+0x26/0x2b0 [ 349.590075][T13817] ? kernel_text_address+0xa5/0xe0 [ 349.590105][T13817] ? __kernel_text_address+0xd/0x40 [ 349.590131][T13817] ? unwind_get_return_address+0x4d/0x90 [ 349.590155][T13817] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 349.590179][T13817] ? arch_stack_walk+0xfc/0x150 [ 349.590221][T13817] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 349.590249][T13817] ? stack_depot_save_flags+0x40/0x860 [ 349.590281][T13817] ? __lock_acquire+0xab9/0xd20 [ 349.590341][T13817] ? __lock_acquire+0xab9/0xd20 [ 349.590384][T13817] ? netlink_deliver_tap+0x2e/0x1b0 [ 349.590428][T13817] ? netlink_deliver_tap+0x2e/0x1b0 [ 349.590466][T13817] netlink_unicast+0x82c/0x9e0 [ 349.590502][T13817] ? __pfx_netlink_unicast+0x10/0x10 [ 349.590530][T13817] ? netlink_sendmsg+0x642/0xb30 [ 349.590557][T13817] ? skb_put+0x11b/0x210 [ 349.590581][T13817] netlink_sendmsg+0x805/0xb30 [ 349.590621][T13817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.590655][T13817] ? aa_sock_msg_perm+0xf1/0x1d0 [ 349.590691][T13817] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 349.590714][T13817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.590744][T13817] __sock_sendmsg+0x219/0x270 [ 349.590776][T13817] ____sys_sendmsg+0x505/0x830 [ 349.590804][T13817] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.590837][T13817] ? import_iovec+0x74/0xa0 [ 349.590865][T13817] ___sys_sendmsg+0x21f/0x2a0 [ 349.590889][T13817] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.590918][T13817] ? futex_wait+0x285/0x360 [ 349.590994][T13817] __x64_sys_sendmsg+0x19b/0x260 [ 349.591018][T13817] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 349.591052][T13817] ? rcu_is_watching+0x15/0xb0 [ 349.591079][T13817] ? do_syscall_64+0xbe/0x3b0 [ 349.591113][T13817] do_syscall_64+0xfa/0x3b0 [ 349.591140][T13817] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.591168][T13817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.591188][T13817] ? clear_bhb_loop+0x60/0xb0 [ 349.591213][T13817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.591232][T13817] RIP: 0033:0x7f9e05d8ebe9 [ 349.591251][T13817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.591268][T13817] RSP: 002b:00007f9e06b6d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.591290][T13817] RAX: ffffffffffffffda RBX: 00007f9e05fb5fa0 RCX: 00007f9e05d8ebe9 [ 349.591305][T13817] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 349.591317][T13817] RBP: 00007f9e05e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 349.591330][T13817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.591342][T13817] R13: 00007f9e05fb6038 R14: 00007f9e05fb5fa0 R15: 00007ffe30880c68 [ 349.591377][T13817] [ 349.591595][T13817] Mem-Info: [ 350.103350][T13817] active_anon:7109 inactive_anon:0 isolated_anon:0 [ 350.103350][T13817] active_file:3208 inactive_file:39926 isolated_file:0 [ 350.103350][T13817] unevictable:768 dirty:130 writeback:0 [ 350.103350][T13817] slab_reclaimable:12462 slab_unreclaimable:146464 [ 350.103350][T13817] mapped:29021 shmem:1891 pagetables:1014 [ 350.103350][T13817] sec_pagetables:0 bounce:0 [ 350.103350][T13817] kernel_misc_reclaimable:0 [ 350.103350][T13817] free:1273500 free_pcp:18836 free_cma:0 [ 350.154230][T13817] Node 0 active_anon:28436kB inactive_anon:0kB active_file:12832kB inactive_file:159504kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116084kB dirty:520kB writeback:0kB shmem:6028kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13056kB pagetables:3832kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 350.223478][T13817] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 350.340538][T13817] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 350.454968][T13817] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 350.487238][T13817] Node 0 DMA32 free:1199244kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26376kB inactive_anon:0kB active_file:12832kB inactive_file:157932kB unevictable:1536kB writepending:540kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:54188kB local_pcp:24040kB free_cma:0kB [ 350.545972][T13817] lowmem_reserve[]: 0 0 1 1 1 [ 350.563577][T13817] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 350.597149][T13840] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2110'. [ 350.617944][T13840] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2110'. [ 350.637296][T13817] lowmem_reserve[]: 0 0 0 0 0 [ 350.642136][T13817] Node 1 Normal free:3884720kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18660kB local_pcp:6016kB free_cma:0kB [ 350.677666][T13817] lowmem_reserve[]: 0 0 0 0 0 [ 350.682602][T13817] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 350.705248][T13817] Node 0 DMA32: 618*4kB (UM) 890*8kB (UME) 508*16kB (UME) 1211*32kB (UME) 270*64kB (UME) 91*128kB (UM) 19*256kB (UM) 42*512kB (UM) 30*1024kB (UM) 6*2048kB (UME) 255*4096kB (UM) = 1199256kB [ 350.783479][T13817] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 350.793513][T13853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2111'. [ 350.837296][T13817] Node 1 Normal: 208*4kB (UME) 56*8kB (UME) 37*16kB (UME) 145*32kB (UME) 45*64kB (UME) 6*128kB (UME) 5*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 944*4096kB (M) = 3884720kB [ 350.901370][T13817] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 350.921594][T13817] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 350.944993][T13817] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 350.955202][T13817] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 350.965351][T13817] 44492 total pagecache pages [ 350.970170][T13817] 0 pages in swap cache [ 350.976562][T13817] Free swap = 124996kB [ 350.981289][T13817] Total swap = 124996kB [ 350.985917][T13817] 2097051 pages RAM [ 350.990244][T13817] 0 pages HighMem/MovableOnly [ 350.995117][T13817] 425656 pages reserved [ 350.999328][T13817] 0 pages cma reserved [ 351.227746][T13874] netlink: 'syz.1.2118': attribute type 1 has an invalid length. [ 351.308390][T13876] !: renamed from dummy0 [ 351.332906][T13881] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 351.464241][T13874] 8021q: adding VLAN 0 to HW filter on device bond4 [ 351.466536][T12288] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 351.584313][T13874] veth5: entered promiscuous mode [ 351.599972][T13874] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 351.640577][ T2992] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 351.696147][T13897] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 351.706019][T13897] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 351.841071][T13891] geneve0 speed is unknown, defaulting to 1000 [ 351.924091][T13906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2125'. [ 352.270704][T13904] bond0: entered promiscuous mode [ 352.277007][T13904] bridge4: entered promiscuous mode [ 352.286741][T13904] batadv0: entered promiscuous mode [ 352.294320][T13904] debugfs: 'hsr1' already exists in 'hsr' [ 352.300362][T13904] Cannot create hsr debugfs directory [ 352.306243][T13904] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 352.335912][T13904] hsr1: entered allmulticast mode [ 352.356400][T13904] bond0: entered allmulticast mode [ 352.373798][T13904] bridge4: entered allmulticast mode [ 352.390137][T13904] batadv0: entered allmulticast mode [ 352.399687][T13915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2127'. [ 352.421481][T13904] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 352.448416][T13915] netlink: 'syz.4.2127': attribute type 5 has an invalid length. [ 352.473677][T13915] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2127'. [ 352.526643][T13904] bond0: left promiscuous mode [ 352.531607][T13904] bridge4: left promiscuous mode [ 352.546697][T13904] batadv0: left promiscuous mode [ 352.710275][T13891] lo speed is unknown, defaulting to 1000 [ 352.958432][T13915] geneve3: entered promiscuous mode [ 352.993483][T13915] geneve3: entered allmulticast mode [ 353.033023][T13891] lo speed is unknown, defaulting to 1000 [ 353.491733][T13944] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 353.547893][T13945] bond4: (slave ip6gretap1): Removing an active aggregator [ 353.580945][T13945] bond4: (slave ip6gretap1): Releasing backup interface [ 353.590963][T13945] bond4: (slave ip6gretap1): the permanent HWaddr of slave - e6:23:86:28:6f:b9 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 353.629487][T13952] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2135'. [ 353.656152][T13945] bond4: (slave veth5): Releasing backup interface [ 353.831814][T13966] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2138'. [ 353.927149][T13969] tipc: Enabled bearer , priority 0 [ 353.942472][T13969] syzkaller0: entered promiscuous mode [ 353.950104][T13969] syzkaller0: entered allmulticast mode [ 353.999335][T13969] tipc: Resetting bearer [ 354.016980][T13968] tipc: Resetting bearer [ 354.028748][T13975] rdma_op ffff8880314919f0 conn xmit_rdma 0000000000000000 [ 354.053621][T13968] tipc: Disabling bearer [ 355.213113][T14019] bond0: (slave wlan1): Releasing backup interface [ 355.249617][T14016] tipc: Enabled bearer , priority 0 [ 355.258983][T14016] syzkaller0: entered promiscuous mode [ 355.269567][T14016] syzkaller0: entered allmulticast mode [ 355.329626][T14016] tipc: Resetting bearer [ 355.438180][T14024] syzkaller0: entered promiscuous mode [ 355.450138][T14024] syzkaller0: entered allmulticast mode [ 355.458368][T14014] tipc: Resetting bearer [ 355.490577][T14014] tipc: Disabling bearer [ 355.739031][T14044] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2162'. [ 357.635421][T14050] tipc: Enabled bearer , priority 0 [ 357.770925][T14060] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2166'. [ 357.789466][T14057] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2164'. [ 357.806548][T14057] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2164'. [ 357.860139][T14070] pimreg: entered allmulticast mode [ 357.887347][T14070] pimreg: left allmulticast mode [ 358.051067][T14072] syzkaller0: entered promiscuous mode [ 358.062581][T14080] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 358.067396][T14072] syzkaller0: entered allmulticast mode [ 358.158634][T14072] _ÐZ`Ô€@: entered promiscuous mode [ 358.273545][T14088] veth1_to_team: entered allmulticast mode [ 358.280720][T14088] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 358.392274][T14092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2174'. [ 358.461692][T14099] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2176'. [ 358.516913][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 358.535286][ T13] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 358.626466][T14105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2176'. [ 358.668627][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 358.692849][ T13] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 358.810571][ T2992] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 358.839356][ T2992] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 358.850547][T14115] netlink: 'syz.3.2176': attribute type 6 has an invalid length. [ 358.873496][ T2992] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 358.881860][ T2992] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 358.962292][T14099] geneve0 speed is unknown, defaulting to 1000 [ 359.077221][T14099] lo speed is unknown, defaulting to 1000 [ 359.187816][T14099] lo speed is unknown, defaulting to 1000 [ 359.199527][T14134] tipc: Enabled bearer , priority 0 [ 359.280260][T14141] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2184'. [ 359.443960][T14147] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2187'. [ 359.476671][T14147] openvswitch: netlink: Flow key attr not present in new flow. [ 359.527600][T14147] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2187'. [ 359.591765][T14154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2188'. [ 359.618705][T14154] netlink: 'syz.1.2188': attribute type 6 has an invalid length. [ 359.836490][T14165] netlink: 'syz.1.2191': attribute type 9 has an invalid length. [ 360.133929][ T51] Bluetooth: hci0: command tx timeout [ 360.618228][T14187] wireguard1: entered promiscuous mode [ 360.630507][T14186] netlink: 'syz.1.2198': attribute type 1 has an invalid length. [ 360.643821][T14187] wireguard1: entered allmulticast mode [ 360.798818][T14203] netlink: 'syz.4.2202': attribute type 39 has an invalid length. [ 361.389496][T14238] TCP: TCP_TX_DELAY enabled [ 361.568733][T14254] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 362.492284][ T30] audit: type=1107 audit(1755535006.501:13): pid=14301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 362.808108][T14310] tipc: Enabled bearer , priority 0 [ 362.951673][T14310] syzkaller0: entered promiscuous mode [ 362.981156][T14310] syzkaller0: entered allmulticast mode [ 363.436674][T14341] __nla_validate_parse: 15 callbacks suppressed [ 363.436697][T14341] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2235'. [ 363.512598][T14319] tipc: Resetting bearer [ 363.924535][T11093] tipc: Node number set to 38609428 [ 364.128837][T14343] tipc: Resetting bearer [ 364.216729][T14309] tipc: Resetting bearer [ 364.257508][T14353] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2237'. [ 364.320439][T14309] tipc: Disabling bearer [ 364.360126][ T9180] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.368830][ T9180] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.390013][T14355] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2238'. [ 364.399998][T14363] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2238'. [ 364.420884][T12290] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.466620][T12290] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.522153][T12290] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.563442][T12290] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.607673][T12290] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.621576][T12290] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.664730][T14375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2240'. [ 364.740549][T14355] geneve0 speed is unknown, defaulting to 1000 [ 364.755026][T14355] lo speed is unknown, defaulting to 1000 [ 364.762767][T14355] lo speed is unknown, defaulting to 1000 [ 365.092351][T14392] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2244'. [ 365.401046][T14402] macsec0: entered allmulticast mode [ 365.410674][T14402] syz_tun: entered allmulticast mode [ 365.439945][T14402] syz_tun: left allmulticast mode [ 365.813130][T14416] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2250'. [ 365.844153][T14413] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2250'. [ 366.144704][T14455] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2258'. [ 366.177832][T14451] veth7: entered promiscuous mode [ 366.380297][T14472] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2262'. [ 366.423561][T14467] ip_vti0: entered promiscuous mode [ 366.428842][T14467] ip_vti0: left allmulticast mode [ 366.488662][T14474] syzkaller0: entered promiscuous mode [ 366.503416][T14474] syzkaller0: entered allmulticast mode [ 366.602121][T14480] syzkaller0: entered promiscuous mode [ 366.612490][T14480] syzkaller0: entered allmulticast mode [ 366.777250][T14494] tipc: Enabling of bearer rejected, already enabled [ 366.788574][T14493] syzkaller0: entered promiscuous mode [ 366.794966][T14493] syzkaller0: entered allmulticast mode [ 366.855654][T14493] tipc: Resetting bearer [ 366.947029][T14505] netlink: 'syz.3.2271': attribute type 10 has an invalid length. [ 366.974985][T14505] !: entered promiscuous mode [ 366.996814][T14505] !: entered allmulticast mode [ 367.008388][T14505] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 367.229153][T14517] geneve0 speed is unknown, defaulting to 1000 [ 367.247604][T14517] lo speed is unknown, defaulting to 1000 [ 367.261476][T14517] lo speed is unknown, defaulting to 1000 [ 367.560811][T14541] geneve0 speed is unknown, defaulting to 1000 [ 367.569261][T14541] lo speed is unknown, defaulting to 1000 [ 367.582344][T14543] ip_vti0: left promiscuous mode [ 367.721735][T14543] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.739668][T14543] tipc: Resetting bearer [ 367.746360][T14543] tipc: Resetting bearer [ 367.761397][T14543] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 367.778482][T14541] lo speed is unknown, defaulting to 1000 [ 367.778607][T11113] lo speed is unknown, defaulting to 1000 [ 367.804385][T11113] syz2: Port: 1 Link ACTIVE [ 367.912329][T14551] !: renamed from dummy0 [ 367.971579][T14542] geneve0 speed is unknown, defaulting to 1000 [ 368.039195][T14542] lo speed is unknown, defaulting to 1000 [ 368.066415][T14542] lo speed is unknown, defaulting to 1000 [ 368.474922][T14590] __nla_validate_parse: 3 callbacks suppressed [ 368.474948][T14590] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2292'. [ 369.629093][T14633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2305'. [ 369.681562][T14633] 8021q: adding VLAN 0 to HW filter on device bond8 [ 369.766389][T14639] macvlan3: entered promiscuous mode [ 369.771758][T14639] macvlan3: entered allmulticast mode [ 369.795508][T14639] bond8: entered promiscuous mode [ 369.809804][T14639] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 369.831399][T14639] bond8: left promiscuous mode [ 370.160969][T14656] tipc: Enabled bearer , priority 0 [ 370.169028][T14656] syzkaller0: entered promiscuous mode [ 370.184432][T14656] syzkaller0: entered allmulticast mode [ 370.257187][T14656] tipc: Resetting bearer [ 370.302560][T14652] tipc: Resetting bearer [ 370.389097][T14652] tipc: Disabling bearer [ 370.458466][T14672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2315'. [ 370.460214][T14669] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 370.638023][T14686] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2318'. [ 370.729978][T14690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2319'. [ 370.784999][T14690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2319'. [ 370.891657][T14695] netlink: 'syz.4.2320': attribute type 11 has an invalid length. [ 370.952084][T14697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2322'. [ 371.062383][T14705] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2324'. [ 371.337708][T14712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.352896][T14712] netlink: 'syz.3.2326': attribute type 10 has an invalid length. [ 371.361476][T14712] !: left promiscuous mode [ 371.369631][T14712] !: left allmulticast mode [ 371.429831][T14715] netlink: 'syz.3.2326': attribute type 10 has an invalid length. [ 371.489331][T14715] Ã: (slave 0!): Enslaving as an active interface with an up link [ 371.537477][T14718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2328'. [ 371.554499][T14718] netlink: 'syz.2.2328': attribute type 1 has an invalid length. [ 371.575227][T14718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2328'. [ 372.440801][T14753] à (unregistering): (slave 0!): Releasing backup interface [ 372.468706][T14753] à (unregistering): Released all slaves [ 372.680967][T14767] netlink: 'syz.3.2343': attribute type 21 has an invalid length. [ 372.722907][T14769] netlink: 'syz.1.2342': attribute type 13 has an invalid length. [ 372.768631][T14769] netlink: 'syz.1.2342': attribute type 17 has an invalid length. [ 373.087094][T14769] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.137530][T14785] netlink: 'syz.4.2348': attribute type 21 has an invalid length. [ 373.151189][T14769] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 373.213885][T14785] netlink: 'syz.4.2348': attribute type 6 has an invalid length. [ 373.259196][T14784] geneve0 speed is unknown, defaulting to 1000 [ 373.273939][T14773] geneve0 speed is unknown, defaulting to 1000 [ 373.281645][T14784] lo speed is unknown, defaulting to 1000 [ 373.296189][T14773] lo speed is unknown, defaulting to 1000 [ 373.308288][T14773] lo speed is unknown, defaulting to 1000 [ 373.329439][T14784] lo speed is unknown, defaulting to 1000 [ 373.469155][T14798] sctp: [Deprecated]: syz.0.2351 (pid 14798) Use of struct sctp_assoc_value in delayed_ack socket option. [ 373.469155][T14798] Use struct sctp_sack_info instead [ 373.595740][T14806] __nla_validate_parse: 4 callbacks suppressed [ 373.595760][T14806] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2353'. [ 373.619179][T14806] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2353'. [ 374.472090][T14834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2360'. [ 374.809427][T14851] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2363'. [ 375.094448][T14862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2365'. [ 375.386145][T14869] 8021q: VLANs not supported on ip_vti0 [ 375.397342][T14870] IPVS: set_ctl: invalid protocol: 137 10.1.1.2:0 [ 375.404289][T14867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2368'. [ 375.525178][T14879] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2370'. [ 375.668007][T14879] netlink: 'syz.1.2370': attribute type 15 has an invalid length. [ 375.713015][T14879] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2370'. [ 376.133992][T14906] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2376'. [ 376.147115][T14906] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2376'. [ 376.508226][T14920] netlink: 'syz.1.2380': attribute type 9 has an invalid length. [ 376.568753][T14919] geneve0 speed is unknown, defaulting to 1000 [ 376.577485][T14919] lo speed is unknown, defaulting to 1000 [ 376.585723][T14919] lo speed is unknown, defaulting to 1000 [ 376.826326][T14924] 8021q: VLANs not supported on vcan0 [ 377.686970][T14942] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 378.152114][T14952] pim6reg: entered allmulticast mode [ 378.218523][T14952] netlink: 'syz.4.2393': attribute type 29 has an invalid length. [ 378.336834][T14957] netlink: 'syz.0.2395': attribute type 13 has an invalid length. [ 378.350549][T14957] netlink: 'syz.0.2395': attribute type 17 has an invalid length. [ 378.473977][T14957] tipc: Resetting bearer [ 378.486882][T14957] tipc: Resetting bearer [ 378.507686][T14957] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 378.541152][T14966] tipc: Enabled bearer , priority 0 [ 378.583808][T14967] syzkaller0: entered promiscuous mode [ 378.589362][T14967] syzkaller0: entered allmulticast mode [ 378.692527][T14961] tipc: Resetting bearer [ 378.720920][T14969] netlink: 'syz.4.2398': attribute type 1 has an invalid length. [ 378.747734][T14969] __nla_validate_parse: 2 callbacks suppressed [ 378.747757][T14969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2398'. [ 378.767932][T14969] netlink: 'syz.4.2398': attribute type 1 has an invalid length. [ 378.768172][T14960] tipc: Resetting bearer [ 378.837417][T14960] tipc: Disabling bearer [ 378.966029][T14978] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2401'. [ 379.098012][T14989] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2404'. [ 379.185363][T14995] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 379.232930][T14995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2405'. [ 379.291516][T14998] netlink: 'syz.0.2407': attribute type 10 has an invalid length. [ 379.333495][T14998] team0: Port device 0! added [ 379.368716][T14998] netlink: 'syz.0.2407': attribute type 10 has an invalid length. [ 379.384648][T14998] team0: Failed to send port change of device 0! via netlink (err -105) [ 379.454634][T14998] team0: Failed to send options change via netlink (err -105) [ 379.483674][T14998] team0: Failed to send port change of device 0! via netlink (err -105) [ 379.503105][T14998] team0: Port device 0! removed [ 379.524020][T12288] tipc: Resetting bearer [ 379.529544][T15005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2410'. [ 379.768599][T15000] netlink: 536 bytes leftover after parsing attributes in process `syz.4.2408'. [ 379.795749][T15012] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2412'. [ 379.854699][T15000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2408'. [ 380.389911][T15032] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2417'. [ 380.445178][T15032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2417'. [ 381.834973][T15088] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004 [ 381.865397][T15088] netlink: 'syz.4.2433': attribute type 9 has an invalid length. [ 382.869904][T15125] warn_alloc: 1 callbacks suppressed [ 382.869927][T15125] syz.4.2438: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 382.930829][T15125] CPU: 0 UID: 0 PID: 15125 Comm: syz.4.2438 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 382.930883][T15125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 382.930902][T15125] Call Trace: [ 382.930912][T15125] [ 382.930923][T15125] dump_stack_lvl+0x189/0x250 [ 382.930963][T15125] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.930992][T15125] ? __pfx__printk+0x10/0x10 [ 382.931026][T15125] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 382.931056][T15125] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 382.931084][T15125] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 382.931113][T15125] warn_alloc+0x214/0x310 [ 382.931148][T15125] ? stack_depot_save_flags+0x40/0x860 [ 382.931181][T15125] ? __pfx_warn_alloc+0x10/0x10 [ 382.931216][T15125] ? kasan_save_track+0x4f/0x80 [ 382.931252][T15125] ? xskq_create+0x56/0x170 [ 382.931280][T15125] ? xsk_init_queue+0xb0/0x110 [ 382.931303][T15125] ? xsk_setsockopt+0x4dc/0x8d0 [ 382.931325][T15125] ? do_sock_setsockopt+0x17c/0x1b0 [ 382.931343][T15125] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 382.931360][T15125] ? do_syscall_64+0xfa/0x3b0 [ 382.931389][T15125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.931420][T15125] __vmalloc_node_range_noprof+0x125/0x12f0 [ 382.931485][T15125] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 382.931523][T15125] ? __kasan_kmalloc+0x93/0xb0 [ 382.931553][T15125] vmalloc_user_noprof+0xad/0xf0 [ 382.931584][T15125] ? xskq_create+0xbf/0x170 [ 382.931621][T15125] xskq_create+0xbf/0x170 [ 382.931654][T15125] xsk_init_queue+0xb0/0x110 [ 382.931684][T15125] xsk_setsockopt+0x4dc/0x8d0 [ 382.931714][T15125] ? __pfx_xsk_setsockopt+0x10/0x10 [ 382.931740][T15125] ? __pfx_aa_sk_perm+0x10/0x10 [ 382.931784][T15125] ? aa_sock_opt_perm+0xff/0x1b0 [ 382.931808][T15125] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 382.931832][T15125] ? __pfx_xsk_setsockopt+0x10/0x10 [ 382.931860][T15125] do_sock_setsockopt+0x17c/0x1b0 [ 382.931885][T15125] __x64_sys_setsockopt+0x13f/0x1b0 [ 382.931918][T15125] do_syscall_64+0xfa/0x3b0 [ 382.931948][T15125] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.931977][T15125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.932098][T15125] ? clear_bhb_loop+0x60/0xb0 [ 382.932129][T15125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.932160][T15125] RIP: 0033:0x7f1d6ed8ebe9 [ 382.932181][T15125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.932202][T15125] RSP: 002b:00007f1d6fbc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 382.932228][T15125] RAX: ffffffffffffffda RBX: 00007f1d6efb6090 RCX: 00007f1d6ed8ebe9 [ 382.932245][T15125] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 382.932259][T15125] RBP: 00007f1d6ee11e19 R08: 0000000000000004 R09: 0000000000000000 [ 382.932271][T15125] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.932284][T15125] R13: 00007f1d6efb6128 R14: 00007f1d6efb6090 R15: 00007ffedf2c56f8 [ 382.932319][T15125] [ 382.991529][T15128] vlan1: entered promiscuous mode [ 383.063376][T15125] Mem-Info: [ 383.245507][T15128] bond0: entered promiscuous mode [ 383.255581][T15125] active_anon:9912 inactive_anon:0 isolated_anon:0 [ 383.255581][T15125] active_file:3208 inactive_file:39939 isolated_file:0 [ 383.255581][T15125] unevictable:768 dirty:123 writeback:9 [ 383.255581][T15125] slab_reclaimable:12519 slab_unreclaimable:165895 [ 383.255581][T15125] mapped:29017 shmem:1361 pagetables:1072 [ 383.255581][T15125] sec_pagetables:0 bounce:0 [ 383.255581][T15125] kernel_misc_reclaimable:0 [ 383.255581][T15125] free:1246948 free_pcp:24390 free_cma:0 [ 383.366232][T15125] Node 0 active_anon:39748kB inactive_anon:0kB active_file:12832kB inactive_file:159556kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116068kB dirty:488kB writeback:36kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13340kB pagetables:3964kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 383.458817][T15125] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 383.573673][T15125] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 383.640933][T15140] geneve0 speed is unknown, defaulting to 1000 [ 383.645402][T15125] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 383.662194][T15125] Node 0 DMA32 free:1094652kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39944kB inactive_anon:0kB active_file:12832kB inactive_file:157992kB unevictable:1536kB writepending:512kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:71648kB local_pcp:43264kB free_cma:0kB [ 383.714455][T15125] lowmem_reserve[]: 0 0 1 1 1 [ 383.719374][T15125] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 383.783085][T15125] lowmem_reserve[]: 0 0 0 0 0 [ 383.789373][T15125] Node 1 Normal free:3885748kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17632kB local_pcp:11616kB free_cma:0kB [ 383.821437][T15125] lowmem_reserve[]: 0 0 0 0 0 [ 383.828697][T15125] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 383.841852][T15125] Node 0 DMA32: 759*4kB (UME) 108*8kB (U) 60*16kB (UE) 562*32kB (UME) 347*64kB (UME) 141*128kB (UME) 30*256kB (UM) 36*512kB (UE) 28*1024kB (UME) 3*2048kB (UM) 237*4096kB (M) = 1094780kB [ 383.861411][T15125] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 383.879822][T15125] Node 1 Normal: 211*4kB (UME) 57*8kB (UME) 40*16kB (UME) 161*32kB (UME) 50*64kB (UME) 7*128kB (UME) 5*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 944*4096kB (M) = 3885748kB [ 383.903704][T15125] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 383.917457][T15125] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 383.927736][T15125] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 383.942454][T15125] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 383.952964][T15125] 44513 total pagecache pages [ 383.961773][T15125] 0 pages in swap cache [ 383.967408][T15125] Free swap = 124996kB [ 383.972348][T15125] Total swap = 124996kB [ 383.981578][T15125] 2097051 pages RAM [ 383.986952][T15125] 0 pages HighMem/MovableOnly [ 383.991765][T15125] 425656 pages reserved [ 383.999953][T15125] 0 pages cma reserved [ 384.010203][T15140] lo speed is unknown, defaulting to 1000 [ 384.020051][T15146] tipc: Enabling of bearer rejected, already enabled [ 384.031921][T15140] lo speed is unknown, defaulting to 1000 [ 384.374883][T15159] netlink: 'syz.4.2446': attribute type 1 has an invalid length. [ 384.411144][T15160] netlink: 'syz.4.2446': attribute type 1 has an invalid length. [ 384.626477][T15169] __nla_validate_parse: 5 callbacks suppressed [ 384.626501][T15169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2449'. [ 384.845313][T15179] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2452'. [ 384.891973][T15181] bond0: Error: Cannot enslave bond to itself. [ 385.002636][T15184] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 385.021994][T15181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2451'. [ 385.117064][T15187] netlink: 'syz.0.2454': attribute type 10 has an invalid length. [ 385.176154][T15187] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 385.743058][T15215] geneve0 speed is unknown, defaulting to 1000 [ 385.770219][T15215] lo speed is unknown, defaulting to 1000 [ 385.781296][T15215] lo speed is unknown, defaulting to 1000 [ 385.924073][T15220] geneve0 speed is unknown, defaulting to 1000 [ 385.955008][T15220] lo speed is unknown, defaulting to 1000 [ 385.957830][T15224] geneve0 speed is unknown, defaulting to 1000 [ 385.963186][T15220] lo speed is unknown, defaulting to 1000 [ 386.017729][T15226] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 386.038879][T15224] lo speed is unknown, defaulting to 1000 [ 386.049312][T15224] lo speed is unknown, defaulting to 1000 [ 386.535099][T15246] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2471'. [ 386.580952][T15252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2472'. [ 386.830851][T15256] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2474'. [ 386.859171][T15240] geneve0 speed is unknown, defaulting to 1000 [ 386.907158][T15240] lo speed is unknown, defaulting to 1000 [ 386.908704][T15261] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2475'. [ 386.917553][T15240] lo speed is unknown, defaulting to 1000 [ 386.961242][T15262] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2475'. [ 387.066805][T15257] geneve0 speed is unknown, defaulting to 1000 [ 387.126815][T15257] lo speed is unknown, defaulting to 1000 [ 387.182907][T15257] lo speed is unknown, defaulting to 1000 [ 387.559104][T15272] netlink: 'syz.0.2478': attribute type 10 has an invalid length. [ 387.594500][T15272] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2478'. [ 387.680204][T15272] !: entered promiscuous mode [ 387.708482][T15272] !: entered allmulticast mode [ 387.742121][T15272] bridge0: port 1(0!) entered blocking state [ 387.771935][T15272] bridge0: port 1(0!) entered disabled state [ 387.796300][T15272] bridge0: port 1(0!) entered blocking state [ 387.802747][T15272] bridge0: port 1(0!) entered forwarding state [ 387.813490][T15278] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 387.862353][T15283] tipc: Enabled bearer , priority 0 [ 387.965459][T15279] tipc: Disabling bearer [ 388.011306][T15289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.225256][T15293] erspan0: entered promiscuous mode [ 388.233498][T15293] batman_adv: batadv0: Adding interface: macvlan3 [ 388.240635][T15293] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.286541][T15293] batman_adv: batadv0: Interface activated: macvlan3 [ 388.752648][T15311] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2489'. [ 388.811468][T15313] netlink: zone id is out of range [ 388.818180][T15313] netlink: get zone limit has 8 unknown bytes [ 389.268613][T15317] bridge0: port 1(0!) entered disabled state [ 389.501150][T15327] tipc: Enabled bearer , priority 0 [ 389.528253][T15323] syzkaller0: entered promiscuous mode [ 389.552104][T15323] syzkaller0: entered allmulticast mode [ 389.643932][T15323] tipc: Resetting bearer [ 389.662986][T15329] __nla_validate_parse: 2 callbacks suppressed [ 389.663007][T15329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2494'. [ 389.689062][T15321] tipc: Resetting bearer [ 389.774838][T15321] tipc: Disabling bearer [ 390.086474][T15346] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2498'. [ 390.104601][T15346] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2498'. [ 390.150285][T15351] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2500'. [ 390.565261][T15362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2501'. [ 390.584428][T15364] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2503'. [ 390.593705][T15365] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2503'. [ 390.604360][T15359] geneve0 speed is unknown, defaulting to 1000 [ 390.637379][T15362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2501'. [ 390.677416][T15359] lo speed is unknown, defaulting to 1000 [ 390.708777][T15359] lo speed is unknown, defaulting to 1000 [ 390.746948][T15369] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2504'. [ 390.767666][T15365] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2503'. [ 392.053744][T15412] veth0_virt_wifi: renamed from vlan0 [ 392.148979][T15411] tipc: Enabled bearer , priority 0 [ 392.234506][T15415] syzkaller0: entered promiscuous mode [ 392.246467][T15415] syzkaller0: entered allmulticast mode [ 392.324851][T15415] tipc: Resetting bearer [ 392.350646][T15408] tipc: Resetting bearer [ 392.471786][T15408] tipc: Disabling bearer [ 392.647476][T15434] vcan0: entered allmulticast mode [ 392.685391][T15434] vcan0: left allmulticast mode [ 392.862894][T15444] bridge: RTM_NEWNEIGH with invalid ether address [ 393.428660][T15471] vlan0: entered allmulticast mode [ 393.435392][T15471] bridge_slave_0: entered allmulticast mode [ 394.524290][T15507] wireguard1: entered promiscuous mode [ 394.558535][T15507] wireguard1: entered allmulticast mode [ 395.520544][T15533] macsec0: entered promiscuous mode [ 395.825686][T15543] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 396.295189][T15565] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 396.811748][T15587] netem: change failed [ 397.161434][T15601] vcan0: entered allmulticast mode [ 397.174829][T15601] vcan0: left allmulticast mode [ 397.188269][T15600] vlan2: entered allmulticast mode [ 397.193999][T15600] bridge_slave_0: entered allmulticast mode [ 397.919228][T15630] __nla_validate_parse: 10 callbacks suppressed [ 397.919253][T15630] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2614'. [ 398.731938][T15670] tipc: Failed to remove unknown binding: 66,1,1/7:2920166739/2920166741 [ 399.362936][T15700] pimreg3: entered allmulticast mode [ 399.556388][T15712] netlink: 'syz.3.2652': attribute type 1 has an invalid length. [ 399.600874][T15720] netlink: 'syz.1.2655': attribute type 3 has an invalid length. [ 399.681918][T15712] 8021q: adding VLAN 0 to HW filter on device bond3 [ 399.781415][T15724] bond3: (slave geneve3): making interface the new active one [ 399.791626][T15724] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 399.816420][T15730] netlink: 'syz.2.2656': attribute type 3 has an invalid length. [ 399.826288][ T9180] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.841644][ T9180] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.851416][ T9180] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.890799][ T9180] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.079857][T15743] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2660'. [ 400.106259][T15745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2660'. [ 400.153937][T15746] bond0 (unregistering): (slave team0): Releasing backup interface [ 400.179279][T15746] team0: left allmulticast mode [ 400.207328][T15746] bond3: left allmulticast mode [ 400.244553][T15746] bond0 (unregistering): Released all slaves [ 400.439193][T15746] geneve0 speed is unknown, defaulting to 1000 [ 400.505509][T15746] lo speed is unknown, defaulting to 1000 [ 400.513137][T15746] lo speed is unknown, defaulting to 1000 [ 400.889775][T15777] veth5: entered allmulticast mode [ 401.010011][T15789] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2668'. [ 401.310640][T15802] netlink: 'syz.4.2671': attribute type 178 has an invalid length. [ 401.340024][T15803] geneve0 speed is unknown, defaulting to 1000 [ 401.351323][T15803] lo speed is unknown, defaulting to 1000 [ 401.358675][T15803] lo speed is unknown, defaulting to 1000 [ 401.376974][T15805] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 401.550950][T15811] IPv6: NLM_F_REPLACE set, but no existing node found! [ 401.643664][T15810] geneve0 speed is unknown, defaulting to 1000 [ 401.669610][T15810] lo speed is unknown, defaulting to 1000 [ 401.684318][T15810] lo speed is unknown, defaulting to 1000 [ 401.795702][T15823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2677'. [ 402.457977][T15857] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2687'. [ 402.531980][T15856] tipc: Enabled bearer , priority 0 [ 402.877479][T15877] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 403.192958][T15852] tipc: Disabling bearer [ 403.204533][T15891] netlink: 'syz.2.2699': attribute type 13 has an invalid length. [ 403.606906][T15906] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 403.627806][T15906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2703'. [ 403.640270][T15906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2703'. [ 403.820809][T15916] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2706'. [ 403.883573][T15916] tipc: Invalid UDP bearer configuration [ 403.883644][T15916] tipc: Enabling of bearer rejected, failed to enable media [ 403.904362][T15920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2708'. [ 404.064648][T15913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2706'. [ 404.204432][T15933] netlink: 'syz.1.2710': attribute type 39 has an invalid length. [ 404.273493][T15941] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2713'. [ 404.471104][T15951] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2717'. [ 404.594257][T15965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2719'. [ 404.666004][T15975] netlink: 'syz.1.2719': attribute type 11 has an invalid length. [ 404.713133][T15975] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2719'. [ 404.797805][T15978] bridge0: port 1(gretap0) entered blocking state [ 404.819582][T15978] bridge0: port 1(gretap0) entered disabled state [ 404.832778][T15978] gretap0: entered allmulticast mode [ 404.840835][T15978] gretap0: entered promiscuous mode [ 404.893727][T15982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2722'. [ 404.979085][T15986] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 405.302780][T16005] can: request_module (can-proto-3) failed. [ 405.603263][T16022] syzkaller0: entered promiscuous mode [ 405.609388][T16022] syzkaller0: entered allmulticast mode [ 405.635848][T16020] tipc: Enabled bearer , priority 0 [ 405.651994][T16020] tipc: Enabling of bearer rejected, already enabled [ 405.685314][T16021] tipc: Enabled bearer , priority 0 [ 405.704934][T16021] syzkaller0: entered promiscuous mode [ 405.710743][T16021] syzkaller0: entered allmulticast mode [ 405.760584][T16018] tipc: Resetting bearer [ 405.782619][T16018] tipc: Disabling bearer [ 405.812702][T16022] tipc: Resetting bearer [ 405.887216][T16022] tipc: Disabling bearer [ 406.362622][T16065] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 406.370192][T16065] IPv6: NLM_F_CREATE should be set when creating new route [ 406.377623][T16065] IPv6: NLM_F_CREATE should be set when creating new route [ 406.568465][T16076] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 406.581889][T16070] bond0: entered promiscuous mode [ 406.802732][T16088] netlink: 'syz.2.2753': attribute type 1 has an invalid length. [ 407.016079][T16092] netlink: 'syz.3.2755': attribute type 1 has an invalid length. [ 407.059081][T16092] bond4: entered promiscuous mode [ 407.064874][T16092] 8021q: adding VLAN 0 to HW filter on device bond4 [ 407.120721][T16092] bond4: (slave bridge2): making interface the new active one [ 407.134427][T16092] bridge2: entered promiscuous mode [ 407.142036][T16092] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 407.153102][T16097] netlink: 'syz.0.2757': attribute type 1 has an invalid length. [ 407.180735][T16097] netlink: 'syz.0.2757': attribute type 9 has an invalid length. [ 407.300999][T16106] netlink: 'syz.2.2758': attribute type 1 has an invalid length. [ 407.516045][T16118] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 407.870589][T16133] tipc: Enabling of bearer rejected, failed to enable media [ 408.498157][T16171] netlink: 'syz.2.2773': attribute type 13 has an invalid length. [ 408.533520][T16171] netlink: 'syz.2.2773': attribute type 17 has an invalid length. [ 408.720875][T16172] __nla_validate_parse: 12 callbacks suppressed [ 408.720899][T16172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2773'. [ 408.761891][T16178] netlink: 206036 bytes leftover after parsing attributes in process `syz.0.2778'. [ 408.982847][T16171] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.025562][T16171] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 409.169654][T16175] geneve0 speed is unknown, defaulting to 1000 [ 409.189741][T16175] lo speed is unknown, defaulting to 1000 [ 409.239482][T16175] lo speed is unknown, defaulting to 1000 [ 409.747124][T16233] netlink: 'syz.0.2792': attribute type 4 has an invalid length. [ 409.798913][T16233] netlink: 'syz.0.2792': attribute type 4 has an invalid length. [ 409.833003][T11113] lo speed is unknown, defaulting to 1000 [ 409.843971][T11113] syz2: Port: 1 Link DOWN [ 409.938545][T16243] netlink: 'syz.4.2793': attribute type 33 has an invalid length. [ 409.954232][T16243] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2793'. [ 409.972408][T11108] lo speed is unknown, defaulting to 1000 [ 409.978729][T16241] netlink: 'syz.2.2794': attribute type 1 has an invalid length. [ 409.991418][T16241] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.2794'. [ 409.998670][T11108] syz2: Port: 1 Link ACTIVE [ 410.046379][T16233] tipc: Enabling of bearer rejected, already enabled [ 410.190931][T16259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2797'. [ 410.202301][T16238] geneve0 speed is unknown, defaulting to 1000 [ 410.215638][T16238] lo speed is unknown, defaulting to 1000 [ 410.256841][T16238] lo speed is unknown, defaulting to 1000 [ 410.395137][T16264] only policy match revision 0 supported [ 410.395160][T16264] unable to load match [ 410.584161][T16274] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2802'. [ 410.662379][T16274] geneve0 speed is unknown, defaulting to 1000 [ 410.686170][T16281] netlink: 'syz.1.2803': attribute type 21 has an invalid length. [ 410.700200][T16274] lo speed is unknown, defaulting to 1000 [ 410.723389][T16281] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2803'. [ 410.757477][T16280] geneve0 speed is unknown, defaulting to 1000 [ 410.764013][T16274] lo speed is unknown, defaulting to 1000 [ 410.819656][T16280] lo speed is unknown, defaulting to 1000 [ 410.821790][T16288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2806'. [ 410.883028][T16280] lo speed is unknown, defaulting to 1000 [ 410.914206][T16291] ÿ: renamed from bond_slave_0 [ 411.149171][T16301] sock: sock_timestamping_bind_phc: sock not bind to device [ 411.291397][T16307] netlink: 'syz.1.2812': attribute type 4 has an invalid length. [ 411.741693][T16330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.788144][T16331] nbd: must specify a size in bytes for the device [ 411.986601][T16337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2821'. [ 412.093467][T16337] openvswitch: netlink: Flow key attr not present in new flow. [ 413.198053][T16372] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2832'. [ 413.235093][T16372] 0ªî{X¹¦: renamed from gretap0 [ 413.287997][T16372] bridge0: port 1(30ªî{X¹¦) entered blocking state [ 413.295073][T16372] bridge0: port 1(30ªî{X¹¦) entered forwarding state [ 413.341778][T16372] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 413.880897][T16397] netlink: 'syz.3.2837': attribute type 6 has an invalid length. [ 414.044644][ T5181] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 414.055144][ T5181] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 414.070033][ T5181] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 414.095285][ T5181] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 414.140714][ T5181] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 414.161513][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 414.169533][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 414.177569][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 414.191040][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 414.201174][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 414.259536][T16404] __nla_validate_parse: 2 callbacks suppressed [ 414.259559][T16404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2839'. [ 414.312314][T16404] netlink: 'syz.3.2839': attribute type 1 has an invalid length. [ 414.396961][T16398] geneve0 speed is unknown, defaulting to 1000 [ 414.416626][T16398] lo speed is unknown, defaulting to 1000 [ 414.425601][T16398] lo speed is unknown, defaulting to 1000 [ 414.667262][T16398] chnl_net:caif_netlink_parms(): no params data found [ 414.710022][ T9180] tipc: Resetting bearer [ 414.915912][ T9180] batman_adv: batadv0: Interface deactivated: macvlan3 [ 414.936460][ T9180] batman_adv: batadv0: Removing interface: macvlan3 [ 415.206263][ T9180] bond6 (unregistering): (slave bridge2): Releasing active interface [ 415.306352][ T9180] bond0 (unregistering): (slave bridge4): Releasing active interface [ 415.314780][ T9180] bridge4 (unregistering): left allmulticast mode [ 415.437442][ T9180] tipc: Disabling bearer [ 415.489000][ T9180] bond1 (unregistering): Released all slaves [ 415.590988][ T9180] bond2 (unregistering): Released all slaves [ 415.690531][ T9180] bond3 (unregistering): Released all slaves [ 415.803123][ T9180] bond4 (unregistering): Released all slaves [ 415.819445][ T9180] bond5 (unregistering): Released all slaves [ 415.930711][ T9180] bond6 (unregistering): Released all slaves [ 415.951314][ T9180] bond0 (unregistering): Released all slaves [ 415.967065][ T9180] bond7 (unregistering): Released all slaves [ 416.076054][ T9180] bond8 (unregistering): Released all slaves [ 416.204320][T16398] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.211933][T16398] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.221022][T16398] bridge_slave_0: entered allmulticast mode [ 416.230517][T16398] bridge_slave_0: entered promiscuous mode [ 416.239769][T16398] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.247208][T16398] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.254705][T16398] bridge_slave_1: entered allmulticast mode [ 416.262549][T16398] bridge_slave_1: entered promiscuous mode [ 416.269967][ T9180] : left promiscuous mode [ 416.295154][ T5181] Bluetooth: hci5: command tx timeout [ 416.340615][T16398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.353016][T16398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.389431][ T9180] tipc: Disabling bearer [ 416.398415][ T9180] tipc: Disabling bearer [ 416.404467][ T9180] tipc: Left network mode [ 416.451219][T16398] team0: Port device team_slave_0 added [ 416.460527][T16398] team0: Port device team_slave_1 added [ 416.502993][T16398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.513280][T16398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.540979][T16398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.576104][T16398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.583116][T16398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.610271][T16398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.708632][T16398] hsr_slave_0: entered promiscuous mode [ 416.716868][T16398] hsr_slave_1: entered promiscuous mode [ 416.723458][T16398] debugfs: 'hsr0' already exists in 'hsr' [ 416.729226][T16398] Cannot create hsr debugfs directory [ 416.742068][ T9180] hsr_slave_0: left promiscuous mode [ 416.748322][ T9180] hsr_slave_1: left promiscuous mode [ 417.638087][ T5926] lo speed is unknown, defaulting to 1000 [ 417.646634][ T5926] syz2: Port: 1 Link DOWN [ 417.977490][ T9180] IPVS: stop unused estimator thread 0... [ 418.110202][T16398] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 418.120917][T16398] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 418.132596][T16398] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 418.143052][T16398] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 418.223126][T16398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.248461][T16398] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.261487][ T9180] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.268756][ T9180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.287015][T12290] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.294302][T12290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.373547][ T5181] Bluetooth: hci5: command tx timeout [ 418.505360][T16398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.547768][T16398] veth0_vlan: entered promiscuous mode [ 418.560344][T16398] veth1_vlan: entered promiscuous mode [ 418.592926][T16398] veth0_macvtap: entered promiscuous mode [ 418.604161][T16398] veth1_macvtap: entered promiscuous mode [ 418.625345][T16398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.639231][T16398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.652524][ T9180] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.665712][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.675541][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.690520][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.766558][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.777483][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.809852][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.819720][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.870937][T16426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2827'. [ 418.880579][T16426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.453504][ T5181] Bluetooth: hci5: command tx timeout [ 422.538339][ T5181] Bluetooth: hci5: command tx timeout [ 459.212756][T16430] vlan4: entered promiscuous mode [ 459.224467][T16430] hsr_slave_1: entered promiscuous mode [ 459.246576][T16430] vlan4: entered allmulticast mode [ 459.304293][T16430] hsr_slave_1: entered allmulticast mode [ 459.346210][T16448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2841'. [ 459.349849][T16447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2842'. [ 459.396750][T16439] block nbd1: server does not support multiple connections per device. [ 459.410514][T16439] block nbd1: shutting down sockets [ 459.433414][T16447] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2842'. [ 460.277097][T16482] netlink: 'syz.1.2853': attribute type 12 has an invalid length. [ 460.303316][T16480] netlink: 'syz.1.2853': attribute type 12 has an invalid length. [ 460.466183][T16491] netlink: zone id is out of range [ 460.471371][T16491] netlink: zone id is out of range [ 460.493868][T16491] netlink: zone id is out of range [ 460.499114][T16491] netlink: zone id is out of range [ 460.513104][T16491] netlink: zone id is out of range [ 460.542792][T16491] netlink: zone id is out of range [ 460.560592][T16491] netlink: zone id is out of range [ 460.570738][T16491] netlink: zone id is out of range [ 460.588015][T16491] netlink: zone id is out of range [ 460.598281][T16491] netlink: zone id is out of range [ 460.605211][T16494] netlink: 'syz.2.2857': attribute type 21 has an invalid length. [ 460.647436][T16494] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2857'. [ 460.660452][T16500] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2857'. [ 460.708619][T16494] netlink: 'syz.2.2857': attribute type 4 has an invalid length. [ 460.719050][T16494] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2857'. [ 460.766720][T16502] geneve0 speed is unknown, defaulting to 1000 [ 460.825274][T16502] lo speed is unknown, defaulting to 1000 [ 461.244811][T16516] netlink: 576 bytes leftover after parsing attributes in process `syz.2.2862'. [ 461.302027][T16517] netlink: 'syz.2.2862': attribute type 1 has an invalid length. [ 461.329320][T16517] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2862'. [ 462.216212][T16540] netlink: 'syz.1.2869': attribute type 4 has an invalid length. [ 462.309451][T16542] netlink: 'syz.0.2870': attribute type 3 has an invalid length. [ 462.327813][T16542] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 462.455921][T16546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2873'. [ 463.031646][T16573] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2876'. [ 463.175665][T16573] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 463.214548][T16580] macsec1: entered promiscuous mode [ 463.236473][T16580] team0: entered promiscuous mode [ 463.457154][T16596] netlink: 'syz.0.2881': attribute type 1 has an invalid length. [ 463.521495][T16601] netlink: 'syz.0.2881': attribute type 16 has an invalid length. [ 463.576773][T16596] 8021q: adding VLAN 0 to HW filter on device bond1 [ 464.020205][T16626] netlink: 'syz.1.2889': attribute type 1 has an invalid length. [ 464.164997][T16631] delete_channel: no stack [ 464.193621][T16631] lo speed is unknown, defaulting to 1000 [ 464.199492][T16631] lo speed is unknown, defaulting to 1000 [ 464.210241][T16631] lo speed is unknown, defaulting to 1000 [ 464.245441][T16631] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 464.317541][T16631] lo speed is unknown, defaulting to 1000 [ 464.327604][T16631] lo speed is unknown, defaulting to 1000 [ 464.388373][T16631] lo speed is unknown, defaulting to 1000 [ 464.396743][T16631] lo speed is unknown, defaulting to 1000 [ 464.406026][T16631] lo speed is unknown, defaulting to 1000 [ 464.462120][ T2992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.487438][ T2992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.592983][T16658] geneve0 speed is unknown, defaulting to 1000 [ 464.618858][T16657] __nla_validate_parse: 9 callbacks suppressed [ 464.618878][T16657] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2898'. [ 464.672810][T16658] lo speed is unknown, defaulting to 1000 [ 464.708678][T16658] lo speed is unknown, defaulting to 1000 [ 465.502757][ T9180] nci: nci_rsp_packet: unsupported rsp opcode 0xf2d [ 466.021527][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 466.032099][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 466.040385][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 466.050049][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 466.058135][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 466.096283][T16704] geneve0 speed is unknown, defaulting to 1000 [ 466.104062][T16704] lo speed is unknown, defaulting to 1000 [ 466.111111][T16704] lo speed is unknown, defaulting to 1000 [ 466.306812][T16704] chnl_net:caif_netlink_parms(): no params data found [ 466.424369][T16715] net_ratelimit: 11 callbacks suppressed [ 466.424391][T16715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.471632][T16717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2909'. [ 466.491055][T16718] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2910'. [ 466.565931][T16723] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2911'. [ 466.639284][T16704] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.663548][T16704] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.674130][T16704] bridge_slave_0: entered allmulticast mode [ 466.686144][T16704] bridge_slave_0: entered promiscuous mode [ 466.717937][T16704] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.737473][T16704] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.754465][T16704] bridge_slave_1: entered allmulticast mode [ 466.776766][T16704] bridge_slave_1: entered promiscuous mode [ 466.951160][T16704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.985384][T16704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.192823][T16704] team0: Port device team_slave_0 added [ 467.224508][T16704] team0: Port device team_slave_1 added [ 467.360348][T16760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2921'. [ 467.458266][T16704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.475931][T16704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.524736][T16704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.592962][T16704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.653361][T16704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.714511][T16770] validate_nla: 2 callbacks suppressed [ 467.714534][T16770] netlink: 'syz.3.2924': attribute type 10 has an invalid length. [ 467.740141][T16704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.866451][T16732] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 467.987990][T16704] hsr_slave_0: entered promiscuous mode [ 468.011218][T16704] hsr_slave_1: entered promiscuous mode [ 468.031513][T16704] debugfs: 'hsr0' already exists in 'hsr' [ 468.043300][T16704] Cannot create hsr debugfs directory [ 468.133534][ T51] Bluetooth: hci2: command tx timeout [ 468.643731][T16704] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 468.664498][T16704] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 468.838347][T16704] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 468.854980][T16704] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 468.938968][T16704] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 468.951683][T16704] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 469.075692][T16704] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 469.106862][T16704] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 469.258722][T16818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2935'. [ 469.273703][T16818] 0ªî{X¹¦: left promiscuous mode [ 469.279203][T16818] bridge0: port 1(30ªî{X¹¦) entered disabled state [ 469.631071][T16704] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 469.695581][T16704] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 469.734421][T16704] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 469.759282][T16835] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2942'. [ 469.767822][T16704] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 469.785939][T16833] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2941'. [ 469.879188][T16846] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2942'. [ 469.889106][T16846] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2942'. [ 469.962105][T16849] !: renamed from dummy0 (while UP) [ 470.019121][T16704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.128494][T16853] geneve0 speed is unknown, defaulting to 1000 [ 470.158225][T16704] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.169422][T16853] lo speed is unknown, defaulting to 1000 [ 470.182230][T16850] tipc: Started in network mode [ 470.198333][T16850] tipc: Node identity 4e04b5944e5d, cluster identity 4711 [ 470.209345][T16850] tipc: Enabled bearer , priority 0 [ 470.217163][ T51] Bluetooth: hci2: command tx timeout [ 470.233885][T16853] lo speed is unknown, defaulting to 1000 [ 470.242269][ T9180] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.249633][ T9180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.348139][T16850] syzkaller0: entered promiscuous mode [ 470.360719][T16850] syzkaller0: entered allmulticast mode [ 470.421516][T16862] tipc: Enabling of bearer rejected, failed to enable media [ 470.474223][T16858] geneve0 speed is unknown, defaulting to 1000 [ 470.528382][ T9180] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.535637][ T9180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.565811][T16850] tipc: Resetting bearer [ 470.591812][T16858] lo speed is unknown, defaulting to 1000 [ 470.700788][T16858] lo speed is unknown, defaulting to 1000 [ 471.169984][T16850] tipc: Resetting bearer [ 471.264720][T16850] tipc: Disabling bearer [ 471.544892][T16892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2950'. [ 471.555274][T16894] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2949'. [ 471.563740][T16892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2950'. [ 471.963505][T16909] netlink: 'syz.3.2953': attribute type 13 has an invalid length. [ 472.056863][T16916] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2954'. [ 472.296217][ T51] Bluetooth: hci2: command tx timeout [ 472.312213][ T9180] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.321474][ T9180] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20001 - 0 [ 472.342893][ T9180] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.352380][ T9180] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20001 - 0 [ 472.364116][ T9180] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.373732][ T9180] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20001 - 0 [ 472.393862][ T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.423387][ T13] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20001 - 0 [ 472.470931][T16704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.496204][T16931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2958'. [ 472.512176][T16924] syzkaller0: entered promiscuous mode [ 472.518284][T16924] syzkaller0: entered allmulticast mode [ 472.704537][T16941] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2961'. [ 473.319432][T16704] veth0_vlan: entered promiscuous mode [ 473.341875][T16704] veth1_vlan: entered promiscuous mode [ 473.450308][T16704] veth0_macvtap: entered promiscuous mode [ 473.472661][T16704] veth1_macvtap: entered promiscuous mode [ 473.514740][T16704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.557800][T16704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.602475][ T2992] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.647296][ T2992] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.659812][ T2992] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.673823][ T2992] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.704481][T16969] nbd1: detected capacity change from 0 to 127 [ 473.716349][T16970] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 473.738593][T16975] netlink: 'syz.0.2968': attribute type 11 has an invalid length. [ 473.812900][ T51] block nbd1: Receive control failed (result -32) [ 473.835068][ T2992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.859722][ T2992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.927286][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.958665][T16987] netlink: 'syz.3.2971': attribute type 3 has an invalid length. [ 473.993705][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.050481][T16993] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 474.054105][T16994] netlink: 'syz.1.2973': attribute type 11 has an invalid length. [ 474.073765][T16993] netlink: 'syz.0.2972': attribute type 1 has an invalid length. [ 474.379297][ T51] Bluetooth: hci2: command tx timeout [ 474.462025][T17011] [ 474.464434][T17011] ====================================================== [ 474.471650][T17011] WARNING: possible circular locking dependency detected [ 474.478805][T17011] 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 Not tainted [ 474.486036][T17011] ------------------------------------------------------ [ 474.493080][T17011] syz.4.2978/17011 is trying to acquire lock: [ 474.499345][T17011] ffffffff8f68d298 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 474.508537][T17011] [ 474.508537][T17011] but task is already holding lock: [ 474.515925][T17011] ffff8880772e5770 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 474.525194][T17011] [ 474.525194][T17011] which lock already depends on the new lock. [ 474.525194][T17011] [ 474.535623][T17011] [ 474.535623][T17011] the existing dependency chain (in reverse order) is: [ 474.544729][T17011] [ 474.544729][T17011] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 474.552819][T17011] lock_acquire+0x120/0x360 [ 474.557957][T17011] _raw_spin_lock_bh+0x36/0x50 [ 474.563339][T17011] nr_rt_ioctl+0x193/0xd50 [ 474.568301][T17011] sock_do_ioctl+0xd9/0x300 [ 474.573337][T17011] sock_ioctl+0x576/0x790 [ 474.578877][T17011] __se_sys_ioctl+0xf9/0x170 [ 474.584009][T17011] do_syscall_64+0xfa/0x3b0 [ 474.589049][T17011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.595464][T17011] [ 474.595464][T17011] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 474.603391][T17011] lock_acquire+0x120/0x360 [ 474.608427][T17011] _raw_spin_lock_bh+0x36/0x50 [ 474.613809][T17011] nr_rt_device_down+0xa9/0x720 [ 474.619288][T17011] nr_device_event+0x137/0x150 [ 474.624592][T17011] notifier_call_chain+0x1b6/0x3e0 [ 474.630238][T17011] __dev_notify_flags+0x18d/0x2e0 [ 474.635792][T17011] netif_change_flags+0xe8/0x1a0 [ 474.641343][T17011] dev_change_flags+0x130/0x260 [ 474.646736][T17011] dev_ioctl+0x7b4/0x1150 [ 474.651611][T17011] sock_do_ioctl+0x22c/0x300 [ 474.656820][T17011] sock_ioctl+0x576/0x790 [ 474.661707][T17011] __se_sys_ioctl+0xf9/0x170 [ 474.666825][T17011] do_syscall_64+0xfa/0x3b0 [ 474.671868][T17011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.678288][T17011] [ 474.678288][T17011] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 474.686291][T17011] validate_chain+0xb9b/0x2140 [ 474.691580][T17011] __lock_acquire+0xab9/0xd20 [ 474.696793][T17011] lock_acquire+0x120/0x360 [ 474.701860][T17011] _raw_spin_lock_bh+0x36/0x50 [ 474.707239][T17011] nr_rt_ioctl+0x390/0xd50 [ 474.712983][T17011] sock_do_ioctl+0xd9/0x300 [ 474.718015][T17011] sock_ioctl+0x576/0x790 [ 474.722881][T17011] __se_sys_ioctl+0xf9/0x170 [ 474.728117][T17011] do_syscall_64+0xfa/0x3b0 [ 474.733178][T17011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.739613][T17011] [ 474.739613][T17011] other info that might help us debug this: [ 474.739613][T17011] [ 474.749875][T17011] Chain exists of: [ 474.749875][T17011] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 474.749875][T17011] [ 474.764243][T17011] Possible unsafe locking scenario: [ 474.764243][T17011] [ 474.771899][T17011] CPU0 CPU1 [ 474.777631][T17011] ---- ---- [ 474.783004][T17011] lock(&nr_node->node_lock); [ 474.787784][T17011] lock(nr_node_list_lock); [ 474.794969][T17011] lock(&nr_node->node_lock); [ 474.802353][T17011] lock(nr_neigh_list_lock); [ 474.807044][T17011] [ 474.807044][T17011] *** DEADLOCK *** [ 474.807044][T17011] [ 474.815219][T17011] 2 locks held by syz.4.2978/17011: [ 474.820544][T17011] #0: ffffffff8f68d2f8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 474.831403][T17011] #1: ffff8880772e5770 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 474.841280][T17011] [ 474.841280][T17011] stack backtrace: [ 474.847200][T17011] CPU: 0 UID: 0 PID: 17011 Comm: syz.4.2978 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 474.847228][T17011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 474.847241][T17011] Call Trace: [ 474.847251][T17011] [ 474.847261][T17011] dump_stack_lvl+0x189/0x250 [ 474.847290][T17011] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.847309][T17011] ? __pfx__printk+0x10/0x10 [ 474.847332][T17011] ? stack_trace_save+0x9c/0xe0 [ 474.847358][T17011] print_circular_bug+0x2ee/0x310 [ 474.847380][T17011] check_noncircular+0x134/0x160 [ 474.847401][T17011] validate_chain+0xb9b/0x2140 [ 474.847422][T17011] ? look_up_lock_class+0x74/0x170 [ 474.847446][T17011] ? register_lock_class+0x51/0x320 [ 474.847472][T17011] __lock_acquire+0xab9/0xd20 [ 474.847499][T17011] ? nr_rt_ioctl+0x390/0xd50 [ 474.847518][T17011] lock_acquire+0x120/0x360 [ 474.847542][T17011] ? nr_rt_ioctl+0x390/0xd50 [ 474.847562][T17011] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 474.847584][T17011] ? nr_rt_ioctl+0x390/0xd50 [ 474.847607][T17011] _raw_spin_lock_bh+0x36/0x50 [ 474.847629][T17011] ? nr_rt_ioctl+0x390/0xd50 [ 474.847648][T17011] nr_rt_ioctl+0x390/0xd50 [ 474.847672][T17011] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 474.847696][T17011] ? apparmor_capable+0x137/0x1b0 [ 474.847720][T17011] ? capable+0x89/0xe0 [ 474.847736][T17011] ? nr_ioctl+0x1b1/0x3b0 [ 474.847752][T17011] sock_do_ioctl+0xd9/0x300 [ 474.847775][T17011] ? __pfx_sock_do_ioctl+0x10/0x10 [ 474.847794][T17011] ? __lock_acquire+0xab9/0xd20 [ 474.847824][T17011] sock_ioctl+0x576/0x790 [ 474.847844][T17011] ? __pfx_sock_ioctl+0x10/0x10 [ 474.847863][T17011] ? __fget_files+0x2a/0x420 [ 474.847878][T17011] ? __fget_files+0x3a0/0x420 [ 474.847891][T17011] ? __fget_files+0x2a/0x420 [ 474.847905][T17011] ? bpf_lsm_file_ioctl+0x9/0x20 [ 474.847926][T17011] ? __pfx_sock_ioctl+0x10/0x10 [ 474.847945][T17011] __se_sys_ioctl+0xf9/0x170 [ 474.847965][T17011] do_syscall_64+0xfa/0x3b0 [ 474.847989][T17011] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.848011][T17011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.848028][T17011] ? clear_bhb_loop+0x60/0xb0 [ 474.848047][T17011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.848064][T17011] RIP: 0033:0x7fdbe718ebe9 [ 474.848083][T17011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.848098][T17011] RSP: 002b:00007fdbe7f8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 474.848117][T17011] RAX: ffffffffffffffda RBX: 00007fdbe73b6090 RCX: 00007fdbe718ebe9 [ 474.848129][T17011] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000006 [ 474.848140][T17011] RBP: 00007fdbe7211e19 R08: 0000000000000000 R09: 0000000000000000 [ 474.848150][T17011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.848160][T17011] R13: 00007fdbe73b6128 R14: 00007fdbe73b6090 R15: 00007ffc6be8f438 [ 474.848179][T17011] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 475.256568][T17009] geneve0 speed is unknown, defaulting to 1000 [ 475.263874][T17009] lo speed is unknown, defaulting to 1000 [ 475.270655][T17009] lo speed is unknown, defaulting to 1000 [ 475.344462][ T5181] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 475.352279][ T5181] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 475.370317][T16399] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 475.471810][T16399] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 475.481664][T16399] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 475.558227][T17016] geneve0 speed is unknown, defaulting to 1000 [ 475.594241][T17016] lo speed is unknown, defaulting to 1000 [ 475.721942][T17016] lo speed is unknown, defaulting to 1000 [ 476.065289][ T13] dvmrp1 (unregistering): left allmulticast mode [ 476.436890][ T13] bond1 (unregistering): Released all slaves [ 476.535527][ T13] bond2 (unregistering): Released all slaves [ 476.617851][ T13] bond3 (unregistering): Released all slaves [ 476.697768][ T13] bond0 (unregistering): Released all slaves [ 476.782766][ T13] bond4 (unregistering): Released all slaves [ 476.868687][ T13] _ÐZ`Ô€@ÿÿ: left promiscuous mode [ 476.898462][T17016] chnl_net:caif_netlink_parms(): no params data found [ 476.950384][ T13] : left promiscuous mode [ 476.990108][T17016] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.011027][T17016] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.018898][T17016] bridge_slave_0: entered allmulticast mode [ 477.027924][T17016] bridge_slave_0: entered promiscuous mode [ 477.056144][ T13] tipc: Left network mode [ 477.056284][T17016] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.068975][T17016] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.076879][T17016] bridge_slave_1: entered allmulticast mode [ 477.084567][T17016] bridge_slave_1: entered promiscuous mode [ 477.115244][T17016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.126878][T17016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.152610][T17016] team0: Port device team_slave_0 added [ 477.165453][T17016] team0: Port device team_slave_1 added [ 477.199799][T17016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.206996][T17016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.234121][T17016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.245949][T17016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.252913][T17016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.279317][T17016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.314842][T17016] hsr_slave_0: entered promiscuous mode [ 477.321306][T17016] hsr_slave_1: entered promiscuous mode [ 477.327473][T17016] debugfs: 'hsr0' already exists in 'hsr' [ 477.333808][T17016] Cannot create hsr debugfs directory [ 477.529211][ T13] team0: left promiscuous mode [ 477.573386][T16399] Bluetooth: hci4: command tx timeout [ 477.581190][ T13] pim6reg9 (unregistering): left allmulticast mode [ 478.245207][T17016] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 478.255601][T17016] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 478.272412][T17016] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 478.291610][T17016] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 478.359102][T17016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.372472][ T13] IPVS: stop unused estimator thread 0... [ 478.377700][T17016] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.392110][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.399342][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.416227][ T9180] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.423931][ T9180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.488966][ T13] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 478.528945][ T13] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 478.573084][T17016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.587794][ T13] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 478.617334][T17016] veth0_vlan: entered promiscuous mode [ 478.627633][ T13] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 478.644314][T17016] veth1_vlan: entered promiscuous mode [ 478.667206][T17016] veth0_macvtap: entered promiscuous mode [ 478.677107][T17016] veth1_macvtap: entered promiscuous mode [ 478.692789][T17016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.706443][T17016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.737493][ T9180] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.747199][ T9180] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.760672][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.775591][ T9180] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.785070][ T9180] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.808513][T17016] ieee80211 phy42: Selected rate control algorithm 'minstrel_ht' [ 478.828973][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.850034][ T2992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.852216][T17016] ieee80211 phy43: Selected rate control algorithm 'minstrel_ht' [ 478.859532][ T2992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.889755][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.905778][ T2992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.915930][ T2992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.949996][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.043020][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.099382][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.168014][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.239308][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.316152][ T13] bridge_slave_1: left allmulticast mode [ 479.321920][ T13] bridge_slave_1: left promiscuous mode [ 479.327979][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.340146][ T13] bridge_slave_0: left allmulticast mode [ 479.346148][ T13] bridge_slave_0: left promiscuous mode [ 479.351849][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.362549][ T13] bridge_slave_1: left allmulticast mode [ 479.368738][ T13] bridge_slave_1: left promiscuous mode [ 479.374673][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.383794][ T13] bridge_slave_0: left allmulticast mode [ 479.389645][ T13] bridge_slave_0: left promiscuous mode [ 479.395977][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.599754][ T13] bond3 (unregistering): (slave geneve3): Releasing active interface [ 479.691789][ T13] bond4 (unregistering): (slave bridge2): Releasing backup interface [ 479.700164][ T13] bridge2 (unregistering): left promiscuous mode [ 479.725979][ T13] bond1 (unregistering): Released all slaves [ 479.811051][ T13] bond2 (unregistering): Released all slaves [ 479.936548][ T13] bond0 (unregistering): Released all slaves [ 480.020809][ T13] bond3 (unregistering): Released all slaves [ 480.105305][ T13] bond4 (unregistering): Released all slaves [ 480.199606][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.210159][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.221601][ T13] bond0 (unregistering): Released all slaves [ 480.359640][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.369922][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.383527][ T13] bond0 (unregistering): Released all slaves [ 480.467361][ T13] bond1 (unregistering): Released all slaves [ 480.549480][ T13] tipc: Left network mode [ 480.946168][ T13] hsr_slave_0: left promiscuous mode [ 480.951952][ T13] hsr_slave_1: left promiscuous mode [ 480.960223][ T13] hsr_slave_0: left promiscuous mode [ 480.967287][ T13] hsr_slave_1: left promiscuous mode [ 480.978612][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.987588][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.995973][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.005014][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.015798][ T13] hsr_slave_0: left promiscuous mode [ 481.021737][ T13] hsr_slave_1: left promiscuous mode [ 481.027738][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.035601][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.043560][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.050964][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.065459][ T13] veth1_macvtap: left promiscuous mode [ 481.071326][ T13] veth0_macvtap: left promiscuous mode [ 481.077332][ T13] veth1_vlan: left promiscuous mode [ 481.082689][ T13] veth0_vlan: left promiscuous mode [ 481.089189][ T13] veth1_vlan: left promiscuous mode [ 481.096857][ T13] veth0_vlan: left promiscuous mode [ 481.221412][ T13] pimreg3 (unregistering): left allmulticast mode [ 481.272816][ T13] pim6reg (unregistering): left allmulticast mode [ 481.748310][ T13] team0 (unregistering): Port device team_slave_1 removed [ 481.771811][ T13] team0 (unregistering): Port device team_slave_0 removed [ 481.942027][ T13] team0 (unregistering): Port device team_slave_1 removed [ 481.966684][ T13] team0 (unregistering): Port device team_slave_0 removed [ 482.838025][ T13] ------------[ cut here ]------------ [ 482.843680][ T13] WARNING: CPU: 0 PID: 13 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x7e/0x100 [ 482.854078][ T13] Modules linked in: [ 482.858027][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 482.870248][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 482.880478][ T13] Workqueue: netns cleanup_net [ 482.885556][ T13] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100 [ 482.891763][ T13] Code: a8 81 df f7 4b 83 3c 2c 00 75 19 e8 4c 18 7c f7 49 81 fd f8 07 00 00 74 1d e8 3e 18 7c f7 49 83 c5 08 eb c9 e8 33 18 7c f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6 [ 482.912408][ T13] RSP: 0018:ffffc900001278b0 EFLAGS: 00010293 [ 482.918961][ T13] RAX: ffffffff8a43935d RBX: ffff88807ef7c000 RCX: ffff88801cea8000 [ 482.927086][ T13] RDX: 0000000000000000 RSI: ffffffff8be333e0 RDI: ffff88807ef7c0b8 [ 482.935697][ T13] RBP: ffffc900001279b0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6 [ 482.943914][ T13] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff88807ef7c000 [ 482.952046][ T13] R13: 00000000000000b8 R14: ffff88807a490000 R15: dffffc0000000000 [ 482.960168][ T13] FS: 0000000000000000(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 482.969640][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 482.976419][ T13] CR2: 00007f5cefdba048 CR3: 000000000df36000 CR4: 00000000003526f0 [ 482.984803][ T13] Call Trace: [ 482.988222][ T13] [ 482.991163][ T13] ops_undo_list+0x49a/0x990 [ 482.996005][ T13] ? __pfx_ops_undo_list+0x10/0x10 [ 483.001225][ T13] ? do_raw_spin_unlock+0x122/0x240 [ 483.006485][ T13] cleanup_net+0x4c5/0x800 [ 483.011011][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 483.016211][ T13] ? rcu_is_watching+0x15/0xb0 [ 483.021006][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 483.026917][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 483.033018][ T13] process_scheduled_works+0xade/0x17b0 [ 483.038650][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 483.044765][ T13] worker_thread+0x8a0/0xda0 [ 483.049575][ T13] kthread+0x70e/0x8a0 [ 483.053713][ T13] ? __pfx_worker_thread+0x10/0x10 [ 483.059102][ T13] ? __pfx_kthread+0x10/0x10 [ 483.063796][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 483.069127][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 483.074412][ T13] ? __pfx_kthread+0x10/0x10 [ 483.079020][ T13] ret_from_fork+0x3f9/0x770 [ 483.084011][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 483.089140][ T13] ? __switch_to_asm+0x39/0x70 [ 483.094012][ T13] ? __switch_to_asm+0x33/0x70 [ 483.099091][ T13] ? __pfx_kthread+0x10/0x10 [ 483.103930][ T13] ret_from_fork_asm+0x1a/0x30 [ 483.108827][ T13] [ 483.111945][ T13] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 483.119233][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 483.131226][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 483.141314][ T13] Workqueue: netns cleanup_net [ 483.146203][ T13] Call Trace: [ 483.149488][ T13] [ 483.152439][ T13] dump_stack_lvl+0x99/0x250 [ 483.157036][ T13] ? __asan_memcpy+0x40/0x70 [ 483.161723][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.166932][ T13] ? __pfx__printk+0x10/0x10 [ 483.171562][ T13] vpanic+0x281/0x750 [ 483.175552][ T13] ? __pfx__printk+0x10/0x10 [ 483.180232][ T13] ? __pfx_vpanic+0x10/0x10 [ 483.184747][ T13] ? is_bpf_text_address+0x292/0x2b0 [ 483.190047][ T13] panic+0xb9/0xc0 [ 483.193777][ T13] ? __pfx_panic+0x10/0x10 [ 483.198206][ T13] __warn+0x31b/0x4b0 [ 483.202301][ T13] ? xfrm6_tunnel_net_exit+0x7e/0x100 [ 483.207673][ T13] ? xfrm6_tunnel_net_exit+0x7e/0x100 [ 483.213039][ T13] report_bug+0x2be/0x4f0 [ 483.217550][ T13] ? xfrm6_tunnel_net_exit+0x7e/0x100 [ 483.222931][ T13] ? xfrm6_tunnel_net_exit+0x7e/0x100 [ 483.228309][ T13] ? xfrm6_tunnel_net_exit+0x80/0x100 [ 483.239080][ T13] handle_bug+0x84/0x160 [ 483.243354][ T13] exc_invalid_op+0x1a/0x50 [ 483.247966][ T13] asm_exc_invalid_op+0x1a/0x20 [ 483.252819][ T13] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100 [ 483.258816][ T13] Code: a8 81 df f7 4b 83 3c 2c 00 75 19 e8 4c 18 7c f7 49 81 fd f8 07 00 00 74 1d e8 3e 18 7c f7 49 83 c5 08 eb c9 e8 33 18 7c f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6 [ 483.278690][ T13] RSP: 0018:ffffc900001278b0 EFLAGS: 00010293 [ 483.284812][ T13] RAX: ffffffff8a43935d RBX: ffff88807ef7c000 RCX: ffff88801cea8000 [ 483.292802][ T13] RDX: 0000000000000000 RSI: ffffffff8be333e0 RDI: ffff88807ef7c0b8 [ 483.301061][ T13] RBP: ffffc900001279b0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6 [ 483.309100][ T13] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff88807ef7c000 [ 483.317203][ T13] R13: 00000000000000b8 R14: ffff88807a490000 R15: dffffc0000000000 [ 483.325290][ T13] ? xfrm6_tunnel_net_exit+0x7d/0x100 [ 483.330750][ T13] ops_undo_list+0x49a/0x990 [ 483.335468][ T13] ? __pfx_ops_undo_list+0x10/0x10 [ 483.340759][ T13] ? do_raw_spin_unlock+0x122/0x240 [ 483.346074][ T13] cleanup_net+0x4c5/0x800 [ 483.350521][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 483.355581][ T13] ? rcu_is_watching+0x15/0xb0 [ 483.360352][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 483.366338][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 483.372202][ T13] process_scheduled_works+0xade/0x17b0 [ 483.377883][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 483.383886][ T13] worker_thread+0x8a0/0xda0 [ 483.388620][ T13] kthread+0x70e/0x8a0 [ 483.392707][ T13] ? __pfx_worker_thread+0x10/0x10 [ 483.398082][ T13] ? __pfx_kthread+0x10/0x10 [ 483.402742][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 483.407985][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 483.413584][ T13] ? __pfx_kthread+0x10/0x10 [ 483.419009][ T13] ret_from_fork+0x3f9/0x770 [ 483.424020][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 483.429692][ T13] ? __switch_to_asm+0x39/0x70 [ 483.434516][ T13] ? __switch_to_asm+0x33/0x70 [ 483.439576][ T13] ? __pfx_kthread+0x10/0x10 [ 483.444362][ T13] ret_from_fork_asm+0x1a/0x30 [ 483.449156][ T13] [ 483.452576][ T13] Kernel Offset: disabled [ 483.457136][ T13] Rebooting in 86400 seconds..