last executing test programs: 11.897989103s ago: executing program 1 (id=1912): sendto$phonet(0xffffffffffffffff, &(0x7f0000000300)="9c296b7eaa3c6bcb9bc1ea05e8bf8c519dc53d0020472af2405fc01e733afe67717c2a92f859385b55b7488e66627f45719ced8902cd6beeb529d6713b92027130b996f98953561008931498b5d771f075324327ba1dbe0d6274610d", 0x5c, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/123, 0x7b}, 0x3}], 0x1, 0x2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x80) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x1c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xb8}}, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r3) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r8, 0x100, 0x70bd26, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000001}, 0x44095) 10.897630728s ago: executing program 1 (id=1921): socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000340)={0x0, 0x9, 0xbd, "fd30214fdbc562ac8d02474bf93b9c6d23d76bbbe3927da2320df6c19496d6935725b2290f7c83cf5b5ff87f3ad2280caa316e3c8110aa067482a09aefdf8bae5553553ac1a9cd030355f436ec26badecbd0c113449f94848fabb26a3922dc6f7da9bf0296cdba5043c7f6294ade73c48c88fda9f0e5474ed310d327080e7407b3ea9dfa87f34790ad8db8eb463657a3c91b30fc4c2238cfe1927fae3979d2a2c551f923f511f276a26632bc034aab6ee17e69d785aa53d606cc3ec957"}, 0xc5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000000, 0x0) socket$netlink(0x10, 0x3, 0x12) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) close(0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070040000900010073797a30000000003c0000001c0a010400000000000000000700000008000a40000000000900020073797a31000000000900"], 0x364}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r4, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={0x0, 0x0, 0x4020, r5}, 0x18) 9.974449593s ago: executing program 1 (id=1925): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$ax25(r1, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close(0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x40, r3, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nicvf0\x00'}]}, 0x40}, 0x1, 0x40030000000000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x10000001) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=0x0, @ANYBLOB="1d00509900ff0750ef00e700"], 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f00000002c0)=@random="8c", 0x1, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$ax25(0x3, 0x2, 0xcc) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) epoll_pwait(0xffffffffffffffff, &(0x7f0000000240)=[{}, {}, {}], 0x3, 0x6, &(0x7f0000000280)={[0x8]}, 0x8) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 9.585923893s ago: executing program 1 (id=1929): sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast1, 0x0, 0x700, 0x6, 0x41}}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x5}, {0x4}, {0x8, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r4 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) 6.497087046s ago: executing program 0 (id=1949): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x700, 0x2, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x3a8, 0xffffffff, 0x1c0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [0x0, 0x0, 0x0, 0xff], [], 'macsec0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x6, 0x0, 0x1, 0x48}, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0x50cc}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x42b5}}}}, {{@ipv6={@private2, @mcast1, [0x0, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xffffff00], 'macvlan1\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x6c, 0x6, 0x6}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x80, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8810}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)={0x2c, 0x0, 0x301, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x2c}}, 0x20000000) 6.406138186s ago: executing program 2 (id=1950): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = socket(0x10, 0x3, 0xc) write(r6, &(0x7f0000000040), 0x0) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) 4.613358204s ago: executing program 0 (id=1954): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x44}}, 0x48040) 4.212285385s ago: executing program 0 (id=1956): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}]}}}]}, 0x3c}}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4000) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000034000580300001800e000100696d6d656469617465"], 0x88}}, 0x0) unshare(0x6a040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4000) r5 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r8}, @call={0x85, 0x0, 0x0, 0x75}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, 0x0, &(0x7f00000002c0)) 3.645344908s ago: executing program 2 (id=1957): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000500)={0x10, 0x2c, 0x1, 0xfffffffc, 0x0, "", [@generic]}, 0x10}], 0x1, 0x0, 0x0, 0x40440d4}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000), 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, &(0x7f0000000180)=0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000200)={r8, 0xa00}, 0x8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1}, [@call={0x85, 0x0, 0x0, 0x7d}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f00000006c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:46'], 0xa) 3.383597186s ago: executing program 2 (id=1959): socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40201, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) close(0x3) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r2]) 2.109429781s ago: executing program 0 (id=1965): r0 = socket(0x840000000002, 0x3, 0x100) r1 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0xfffd, @private=0xa010100}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$unix(0x1, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r4, &(0x7f0000000080)=@file={0x1}, 0x6e) close(r2) r5 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000440), &(0x7f0000000700)=0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2}, 0x38) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4e21, 0x90, 0x4e22, 0xa3, 0xa, 0x10, 0x20, 0x2b}, {0x10, 0x1, 0xa173, 0x2000000000000006, 0xfffffffffffffffb, 0x7b, 0xeb, 0xb9d}, {0x8d, 0x7, 0xa4, 0x101}, 0x5, 0x6e6bbf, 0x2, 0x1, 0x2, 0x1}, {{@in6=@empty, 0x4d6, 0x32}, 0xa, @in=@loopback, 0x34ff, 0x5, 0x0, 0xc7, 0x4, 0x10000}}, 0xe8) r6 = socket(0x2b, 0x80801, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'lo\x00', 0x3}, 0x18) 1.755528381s ago: executing program 2 (id=1968): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) unshare(0x20000400) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="eead6730a0d049c9fe8b2c9769ba45cf14000000", @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x80c4}, 0x80) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x4) ioctl$TUNSETOFFLOAD(r1, 0x8008743f, 0xf0ff1f00000000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@struct={0x1, 0x0, 0x0, 0x4, 0x1, 0x5}]}, {0x0, [0x61]}}, &(0x7f0000000f40)=""/4089, 0x27, 0xff9, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) accept4(r7, &(0x7f00000000c0)=@x25, &(0x7f0000000180)=0x80, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x40000b9}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}}, 0x0) 1.444264136s ago: executing program 0 (id=1969): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000c}}, 0x1c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, @void, @value}, 0x94) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x7fff, @remote, 0x9}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) shutdown(r2, 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010000000400"}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x8, 0xffffffff, 0x9, 0x1008, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0xd, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f0000000440), &(0x7f0000000300)=""/156}, 0x20) close(0x3) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 1.325685674s ago: executing program 3 (id=1971): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) shutdown(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0x59cc, 0x4) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x5, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x2, 0x0) 1.236738544s ago: executing program 1 (id=1972): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) syz_emit_ethernet(0x38, &(0x7f0000000780)=ANY=[@ANYBLOB="bbbbbbbbbbbbfffaffffffff81002a0008004500002600056d64b90cd3d20000002f90780000000000000000008b836832cfd4d288a8"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200)=0x5, 0xfffffe97) socket(0x840000000002, 0x1, 0x100) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x20, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) 1.163513155s ago: executing program 4 (id=1973): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) shutdown(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0x59cc, 0x4) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x5, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.042436954s ago: executing program 4 (id=1974): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x40) 968.153544ms ago: executing program 3 (id=1975): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000004c0)={0x1f, 0xfffd, @none}, 0xe) 844.791372ms ago: executing program 3 (id=1976): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000500)={0x10, 0x2c, 0x1, 0xfffffffc, 0x0, "", [@generic]}, 0x10}], 0x1, 0x0, 0x0, 0x40440d4}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000), 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, &(0x7f0000000180)=0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000200)={r8, 0xa00}, 0x8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1}, [@call={0x85, 0x0, 0x0, 0x7d}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f00000006c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:46'], 0xa) 813.906775ms ago: executing program 4 (id=1977): socket$inet(0x2, 0x4000000000000001, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0, 0x0, 0x5}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$kcm(0x2d, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x3, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005940)) socket$igmp(0x2, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYRES64=r1], 0x10) 661.758407ms ago: executing program 3 (id=1978): r0 = socket$netlink(0x10, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000200)=0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) connect$inet6(r4, &(0x7f0000000440)={0xa, 0x4e24, 0x401, @remote, 0xc}, 0x1c) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) close(r4) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000580)={{r1}, r3, 0x4, @inherit={0x48, &(0x7f0000000240)={0x0, 0x0, 0x7, 0x1, {0x3a, 0x100000000, 0x6, 0xbc, 0xf0f}}}, @subvolid=0x4}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000100000000000000000000020000000087000000180100002020702500000000002020207b1af8ff00001000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000009500000000000000b0ef41405968d7b09c5015bc2ad4e00f4ce54f140e2a2056dfa05baa02d9c08e087bd2100622661c79d45629260657f62453faac840af82829c46b415ab2f357a25a43c219900e3baa15538bd4d3"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0x401, 0x10, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1104}, [@IFLA_MAP={0x24, 0xe, {0x8, 0x2, 0xd, 0x1, 0x5, 0x10}}, @IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}]}, 0x58}}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x12, 0x0, 0x0, &(0x7f00000004c0), 0x31}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@flushsa={0x38, 0x1c, 0x400, 0x70bd2a, 0x25dfdbfd, {0xff}, [@lifetime_val={0x24, 0x9, {0x6, 0x7, 0x234b2314, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004040) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r0) sendmsg$nl_route(r6, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)=@mpls_getroute={0x44, 0x1a, 0x8, 0x70bd27, 0x25dfdbfc, {0x1c, 0x20, 0x20, 0x7, 0xfd, 0x0, 0xfe, 0x5, 0x1c00}, [@RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x9, "ecbe8597b0ca10d82abef69ea238"}}, @RTA_MULTIPATH={0xc, 0x9, {0x2, 0x5, 0x7}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0xd1) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7a, 0x15}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x8, 0x8c, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) 624.559769ms ago: executing program 1 (id=1979): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000001240)="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", 0x480}], 0x2}, 0x0) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r1}, 0x18) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000001640)={0xe3f0, 0x9, 0x9, 0x3, 0x200, 0x7, 0x8, 0x800}, &(0x7f0000000040)={0x95fc, 0x2, 0x1b4, 0x4, 0x1000, 0xf9, 0x1000, 0x381d930a}, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x2) syz_init_net_socket$llc(0x1a, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 563.428715ms ago: executing program 2 (id=1980): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, 0x0, 0x48040) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000280)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}]}, &(0x7f0000000180)=0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x500}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d2, &(0x7f0000000100)) 540.772378ms ago: executing program 4 (id=1981): socket$inet(0x2, 0x4000000000000001, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0, 0x0, 0x5}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$kcm(0x2d, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x3, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYRES64=r1], 0x10) 419.367251ms ago: executing program 0 (id=1982): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004441) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xe429, @none, 0x401}, 0xe) socket(0x2b, 0x6, 0x8000) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x10}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x0, 0x2, 0x3, 0x3, 0x8, 0xfffffffffffffff4, 0xfffffffffffffffc}]}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x51, &(0x7f0000000200)=""/81, 0x41100, 0x4, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r4, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, r5, r2, r2], 0x0, 0x10, 0x5, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 419.060254ms ago: executing program 3 (id=1983): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000500)={0x10, 0x2c, 0x1, 0xfffffffc, 0x0, "", [@generic]}, 0x10}], 0x1, 0x0, 0x0, 0x40440d4}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000), 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, &(0x7f0000000180)=0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000200)={r8, 0xa00}, 0x8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1}, [@call={0x85, 0x0, 0x0, 0x7d}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f00000006c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:46'], 0xa) 320.546132ms ago: executing program 4 (id=1984): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x20040000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[@ANYBLOB='+cpu'], 0x5) write$cgroup_subtree(r4, &(0x7f00000001c0), 0x0) r5 = openat$cgroup_type(r2, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000440)={{{@in=@local, @in=@multicast1, 0x0, 0xfffe, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000000}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x3, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_getnexthop={0x18, 0x6a, 0x10, 0x70bd27, 0x25dfdbfb}, 0x18}, 0x1, 0x0, 0x0, 0x20048041}, 0x40800) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10], 0x90}}, 0x0) 269.728418ms ago: executing program 3 (id=1985): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x4c, 0x1a, 0x190, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'netdevsim0\x00', 'macvlan1\x00'}, 0x0, 0x160, 0x190, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0xcc}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r2, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe4, &(0x7f0000000840)=[{}], 0x8, 0x10, &(0x7f0000000880), 0x0, 0x0, 0xc4, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) close(r5) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000400)=@req3={0x45c8, 0x8, 0x100, 0x3, 0x0, 0x1, 0x9}, 0x1c) sendto$packet(r6, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x81, @mcast2, 0x7}}, 0x3, 0x7}, 0x90) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f80080001400000000008000340000000000800"], 0x88}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x2c004000) 123.672165ms ago: executing program 2 (id=1986): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a3000000000400004803c0001800a0001006c696d69740000002c0002800c000240000000008000000108000440000000010c0001"], 0xf0}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x4d, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/ipc\x00') bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 0s ago: executing program 4 (id=1987): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001480)={0x34, r2, 0x1, 0x0, 0x2, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x8044804}, 0x24000014) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x1, 0x9fd4, 0x61, @local, @local, 0x8, 0x80, 0x80, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="4dfb04f0d556f1327da4b2dd", 0xc}, 0x1, 0x0, 0x0, 0x20040040}, 0xee) r5 = socket(0x2b, 0x80801, 0x1) read$alg(r5, &(0x7f0000000400)=""/8, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000000100001040040", @ANYRES32=0x0, @ANYBLOB="08910400000000003400128009000100766c616e000000002400028004000480100003800c00010009008000080000000c0002000f0000000400000014000300766c616e"], 0x68}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x4}, 0x18) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=@newtfilter={0x2c, 0x11, 0x111, 0x70bd25, 0x100004, {0x0, 0x0, 0x74, r3, {0xf, 0x9}, {0x0, 0x1}, {0xfff1, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x80000000}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x840}, 0xc4) kernel console output (not intermixed with test programs): netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.608009][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.695505][ T49] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.721907][ T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.782546][ T7348] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 162.115081][ T7359] Cannot find del_set index 0 as target [ 163.721459][ T7386] syz.3.362: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 163.792149][ T7386] CPU: 0 UID: 0 PID: 7386 Comm: syz.3.362 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 163.792180][ T7386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.792200][ T7386] Call Trace: [ 163.792209][ T7386] [ 163.792219][ T7386] dump_stack_lvl+0x189/0x250 [ 163.792271][ T7386] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.792306][ T7386] ? __pfx__printk+0x10/0x10 [ 163.792330][ T7386] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 163.792355][ T7386] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 163.792381][ T7386] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 163.792406][ T7386] warn_alloc+0x214/0x310 [ 163.792429][ T7386] ? stack_depot_save_flags+0x429/0x900 [ 163.792461][ T7386] ? __pfx_warn_alloc+0x10/0x10 [ 163.792487][ T7386] ? kasan_save_track+0x4f/0x80 [ 163.792519][ T7386] ? xskq_create+0x56/0x170 [ 163.792550][ T7386] ? xsk_init_queue+0xb0/0x110 [ 163.792577][ T7386] ? xsk_setsockopt+0x43f/0x710 [ 163.792603][ T7386] ? do_sock_setsockopt+0x257/0x3e0 [ 163.792630][ T7386] ? __x64_sys_setsockopt+0x18b/0x220 [ 163.792656][ T7386] ? do_syscall_64+0xfa/0x3b0 [ 163.792674][ T7386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.792704][ T7386] __vmalloc_node_range_noprof+0x125/0x12f0 [ 163.792764][ T7386] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 163.792790][ T7386] ? xskq_create+0x56/0x170 [ 163.792823][ T7386] ? __kasan_kmalloc+0x93/0xb0 [ 163.792847][ T7386] vmalloc_user_noprof+0xad/0xf0 [ 163.792878][ T7386] ? xskq_create+0xbf/0x170 [ 163.792911][ T7386] xskq_create+0xbf/0x170 [ 163.792946][ T7386] xsk_init_queue+0xb0/0x110 [ 163.792980][ T7386] xsk_setsockopt+0x43f/0x710 [ 163.793013][ T7386] ? __pfx_xsk_setsockopt+0x10/0x10 [ 163.793045][ T7386] ? __lock_acquire+0xab9/0xd20 [ 163.793087][ T7386] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 163.793114][ T7386] ? __pfx_xsk_setsockopt+0x10/0x10 [ 163.793146][ T7386] do_sock_setsockopt+0x257/0x3e0 [ 163.793179][ T7386] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 163.793215][ T7386] ? __fget_files+0x2a/0x420 [ 163.793249][ T7386] __x64_sys_setsockopt+0x18b/0x220 [ 163.793286][ T7386] do_syscall_64+0xfa/0x3b0 [ 163.793305][ T7386] ? lockdep_hardirqs_on+0x9c/0x150 [ 163.793338][ T7386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.793358][ T7386] ? clear_bhb_loop+0x60/0xb0 [ 163.793383][ T7386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.793403][ T7386] RIP: 0033:0x7f007c18e929 [ 163.793429][ T7386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.793446][ T7386] RSP: 002b:00007f007cf25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 163.793468][ T7386] RAX: ffffffffffffffda RBX: 00007f007c3b6080 RCX: 00007f007c18e929 [ 163.793483][ T7386] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 163.793495][ T7386] RBP: 00007f007c210b39 R08: 0000000000000004 R09: 0000000000000000 [ 163.793508][ T7386] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.793521][ T7386] R13: 0000000000000000 R14: 00007f007c3b6080 R15: 00007ffd4401c418 [ 163.793556][ T7386] [ 164.119633][ T7386] Mem-Info: [ 164.122813][ T7386] active_anon:5630 inactive_anon:0 isolated_anon:0 [ 164.122813][ T7386] active_file:1363 inactive_file:39875 isolated_file:0 [ 164.122813][ T7386] unevictable:768 dirty:404 writeback:0 [ 164.122813][ T7386] slab_reclaimable:10377 slab_unreclaimable:99052 [ 164.122813][ T7386] mapped:30531 shmem:1367 pagetables:1134 [ 164.122813][ T7386] sec_pagetables:0 bounce:0 [ 164.122813][ T7386] kernel_misc_reclaimable:0 [ 164.122813][ T7386] free:1327127 free_pcp:21625 free_cma:0 [ 164.168804][ T7386] Node 0 active_anon:22520kB inactive_anon:0kB active_file:5452kB inactive_file:159304kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122124kB dirty:1616kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12796kB pagetables:4444kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 164.202851][ T7386] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:92kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 164.235037][ T7386] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 164.264483][ T7386] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 164.270408][ T7386] Node 0 DMA32 free:1390304kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22476kB inactive_anon:0kB active_file:5452kB inactive_file:157472kB unevictable:1536kB writepending:1616kB present:3129332kB managed:2561032kB mlocked:0kB bounce:0kB free_pcp:65936kB local_pcp:35540kB free_cma:0kB [ 164.303450][ T7386] lowmem_reserve[]: 0 0 1 1 1 [ 164.305686][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'. [ 164.308215][ T7386] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 164.347091][ T7386] lowmem_reserve[]: 0 0 0 0 0 [ 164.351993][ T7386] Node 1 Normal free:3903028kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19932kB local_pcp:9592kB free_cma:0kB [ 164.352809][ T7391] openvswitch: netlink: Flow actions attr not present in new flow. [ 164.386131][ T7386] lowmem_reserve[]: 0 0 0 0 0 [ 164.403860][ T7386] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 164.416776][ T7386] Node 0 DMA32: 1846*4kB (UM) 552*8kB (UME) 158*16kB (UME) 691*32kB (UM) 226*64kB (UME) 170*128kB (UME) 128*256kB (UM) 82*512kB (UME) 55*1024kB (UE) 1*2048kB (M) 290*4096kB (UM) = 1393624kB [ 164.436116][ T7386] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 164.541818][ T7386] Node 1 Normal: 167*4kB (UE) 41*8kB (UME) 43*16kB (UME) 75*32kB (UME) 21*64kB (UME) 8*128kB (UME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 949*4096kB (M) = 3903028kB [ 164.574538][ T7391] netlink: 16 bytes leftover after parsing attributes in process `syz.1.363'. [ 164.642231][ T7386] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 164.676661][ T7386] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 164.708487][ T7393] lo speed is unknown, defaulting to 1000 [ 164.718340][ T7386] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 164.761544][ T7386] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 164.794617][ T7400] netlink: 244 bytes leftover after parsing attributes in process `syz.4.366'. [ 164.835994][ T7386] 42578 total pagecache pages [ 164.902358][ T7386] 0 pages in swap cache [ 164.936338][ T7386] Free swap = 124996kB [ 164.977386][ T7386] Total swap = 124996kB [ 165.006580][ T7386] 2097051 pages RAM [ 165.022400][ T7386] 0 pages HighMem/MovableOnly [ 165.035255][ T7386] 424687 pages reserved [ 165.065669][ T7386] 0 pages cma reserved [ 165.176151][ T7407] netlink: 'syz.4.369': attribute type 4 has an invalid length. [ 165.493563][ T7424] netlink: 48 bytes leftover after parsing attributes in process `syz.3.372'. [ 165.549315][ T7427] netlink: 32 bytes leftover after parsing attributes in process `syz.3.372'. [ 165.561777][ T7427] netlink: del zone limit has 4 unknown bytes [ 165.743306][ T7419] veth0_to_bond: left allmulticast mode [ 165.993285][ T7419] vlan2: left promiscuous mode [ 166.000946][ T7419] vlan2: left allmulticast mode [ 166.005985][ T7419] hsr_slave_1: left allmulticast mode [ 166.016911][ T7419] vlan4: left promiscuous mode [ 166.031783][ T7419] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 166.044686][ T7419] vlan4: left allmulticast mode [ 166.055748][ T7419] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 166.136337][ T7427] vxcan3: entered allmulticast mode [ 166.408814][ T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.432051][ T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.468480][ T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.523580][ T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.575986][ T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.629293][ T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.648799][ T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.695370][ T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.233269][ T7453] bridge1: entered promiscuous mode [ 167.322590][ T7451] lo speed is unknown, defaulting to 1000 [ 167.849358][ T7464] dvmrp1: entered allmulticast mode [ 167.911826][ T7466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.386'. [ 167.927057][ T7464] netlink: 14 bytes leftover after parsing attributes in process `syz.4.385'. [ 168.077586][ T7476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.388'. [ 168.133144][ T7476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.388'. [ 168.196419][ T7477] syzkaller1: entered promiscuous mode [ 168.242518][ T7477] syzkaller1: entered allmulticast mode [ 168.368777][ T7476] netlink: 60 bytes leftover after parsing attributes in process `syz.0.388'. [ 168.407131][ T7476] vlan0: entered promiscuous mode [ 168.593305][ T7481] netlink: 'syz.3.389': attribute type 2 has an invalid length. [ 168.644526][ T7481] : entered promiscuous mode [ 169.447057][ T7503] lo speed is unknown, defaulting to 1000 [ 169.449133][ T7508] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 171.356516][ T7203] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.398906][ T7203] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.609800][ T7203] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.652000][ T7203] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.694167][ T7549] netlink: 'syz.0.413': attribute type 15 has an invalid length. [ 171.709328][ T7549] __nla_validate_parse: 1 callbacks suppressed [ 171.709347][ T7549] netlink: 666 bytes leftover after parsing attributes in process `syz.0.413'. [ 171.732919][ T7546] Cannot find del_set index 0 as target [ 171.766478][ T5206] udevd[5206]: worker [5976] terminated by signal 33 (Unknown signal 33) [ 171.780934][ T5206] udevd[5206]: worker [5976] failed while handling '/devices/virtual/block/loop4' [ 171.811703][ T7554] netlink: 'syz.0.413': attribute type 1 has an invalid length. [ 172.310218][ T7568] syz.2.419 (7568) used greatest stack depth: 17992 bytes left [ 172.345988][ T7571] lo speed is unknown, defaulting to 1000 [ 172.355868][ T7576] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.367344][ T7576] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 44930 - 0 [ 172.407330][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.420'. [ 172.434309][ T7576] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.510206][ T7576] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 44930 - 0 [ 172.626689][ T7576] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.649444][ T7576] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 44930 - 0 [ 172.736578][ T7576] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.746952][ T7576] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 44930 - 0 [ 172.869371][ T7583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.423'. [ 173.146868][ T7583] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.329109][ T7587] netlink: 452 bytes leftover after parsing attributes in process `syz.3.424'. [ 173.412548][ T7593] netlink: 'syz.4.426': attribute type 1 has an invalid length. [ 173.480061][ T7592] netlink: 'syz.4.426': attribute type 15 has an invalid length. [ 173.498931][ T7592] netlink: 666 bytes leftover after parsing attributes in process `syz.4.426'. [ 173.587728][ T7595] vlan0: left promiscuous mode [ 173.757783][ T7595] syzkaller1: left promiscuous mode [ 173.773560][ T7595] syzkaller1: left allmulticast mode [ 173.867955][ T7175] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 44930 - 0 [ 173.895482][ T7175] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 173.928538][ T7603] team0: Port device vxlan0 added [ 173.957949][ T7175] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 44930 - 0 [ 173.979168][ T7175] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 174.017656][ T7175] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 44930 - 0 [ 174.048210][ T7175] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 174.082426][ T7175] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.104614][ T7175] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.132658][ T7175] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.151849][ T7175] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.186975][ T7175] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 44930 - 0 [ 174.216157][ T7175] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 174.237036][ T7608] netlink: 452 bytes leftover after parsing attributes in process `syz.2.429'. [ 174.471231][ T7616] lo speed is unknown, defaulting to 1000 [ 175.348884][ T7627] xt_ecn: cannot match TCP bits for non-tcp packets [ 175.747784][ T7636] lo speed is unknown, defaulting to 1000 [ 176.473454][ T30] audit: type=1800 audit(1750353129.775:3): pid=7648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.439" name="memory.events" dev="tmpfs" ino=411 res=0 errno=0 [ 176.812856][ T7658] A link change request failed with some changes committed already. Interface veth3 may have been left with an inconsistent configuration, please check. [ 176.952596][ T7659] syz.4.440: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 176.992179][ T7659] CPU: 1 UID: 0 PID: 7659 Comm: syz.4.440 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 176.992212][ T7659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 176.992225][ T7659] Call Trace: [ 176.992234][ T7659] [ 176.992244][ T7659] dump_stack_lvl+0x189/0x250 [ 176.992287][ T7659] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.992321][ T7659] ? __pfx__printk+0x10/0x10 [ 176.992346][ T7659] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 176.992370][ T7659] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 176.992397][ T7659] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 176.992424][ T7659] warn_alloc+0x214/0x310 [ 176.992457][ T7659] ? __pfx_warn_alloc+0x10/0x10 [ 176.992492][ T7659] ? __get_vm_area_node+0x28f/0x300 [ 176.992515][ T7659] ? xp_alloc_tx_descs+0x68/0xc0 [ 176.992542][ T7659] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 176.992603][ T7659] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 176.992632][ T7659] ? rcu_is_watching+0x15/0xb0 [ 176.992666][ T7659] ? xp_alloc_tx_descs+0x68/0xc0 [ 176.992685][ T7659] ? xp_alloc_tx_descs+0x68/0xc0 [ 176.992702][ T7659] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 176.992725][ T7659] ? xp_alloc_tx_descs+0x68/0xc0 [ 176.992742][ T7659] ? __pfx_xsk_lookup_xsk_from_fd+0x10/0x10 [ 176.992775][ T7659] ? dev_get_by_index+0x22/0x2e0 [ 176.992800][ T7659] xp_alloc_tx_descs+0x68/0xc0 [ 176.992821][ T7659] xsk_bind+0xca5/0xf90 [ 176.992864][ T7659] __sys_bind+0x2c3/0x3e0 [ 176.992888][ T7659] ? count_memcg_event_mm+0x21/0x260 [ 176.992922][ T7659] ? __pfx___sys_bind+0x10/0x10 [ 176.992990][ T7659] __x64_sys_bind+0x7a/0x90 [ 176.993017][ T7659] do_syscall_64+0xfa/0x3b0 [ 176.993036][ T7659] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.993069][ T7659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.993091][ T7659] ? clear_bhb_loop+0x60/0xb0 [ 176.993119][ T7659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.993141][ T7659] RIP: 0033:0x7f504878e929 [ 176.993161][ T7659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.993179][ T7659] RSP: 002b:00007f50495f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 176.993202][ T7659] RAX: ffffffffffffffda RBX: 00007f50489b6160 RCX: 00007f504878e929 [ 176.993217][ T7659] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 176.993231][ T7659] RBP: 00007f5048810b39 R08: 0000000000000000 R09: 0000000000000000 [ 176.993243][ T7659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.993256][ T7659] R13: 0000000000000001 R14: 00007f50489b6160 R15: 00007ffd3e346168 [ 176.993292][ T7659] [ 176.993300][ T7659] Mem-Info: [ 177.273087][ T7659] active_anon:8273 inactive_anon:0 isolated_anon:0 [ 177.273087][ T7659] active_file:1376 inactive_file:39885 isolated_file:0 [ 177.273087][ T7659] unevictable:768 dirty:536 writeback:0 [ 177.273087][ T7659] slab_reclaimable:10394 slab_unreclaimable:100183 [ 177.273087][ T7659] mapped:30785 shmem:4465 pagetables:1033 [ 177.273087][ T7659] sec_pagetables:0 bounce:0 [ 177.273087][ T7659] kernel_misc_reclaimable:0 [ 177.273087][ T7659] free:1315818 free_pcp:23515 free_cma:0 [ 177.333895][ T7659] Node 0 active_anon:30292kB inactive_anon:0kB active_file:5504kB inactive_file:159344kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123940kB dirty:2144kB writeback:0kB shmem:13724kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12608kB pagetables:3940kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 177.392336][ T7659] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:92kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 177.447449][ T7659] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 177.477276][ T7659] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 177.483400][ T7659] Node 0 DMA32 free:1351300kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21348kB inactive_anon:0kB active_file:5504kB inactive_file:157512kB unevictable:1536kB writepending:2144kB present:3129332kB managed:2561032kB mlocked:0kB bounce:0kB free_pcp:80748kB local_pcp:54708kB free_cma:0kB [ 177.517089][ T7659] lowmem_reserve[]: 0 0 1 1 1 [ 177.527755][ T7659] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 177.572333][ T7659] lowmem_reserve[]: 0 0 0 0 0 [ 177.577231][ T7659] Node 1 Normal free:3903028kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19964kB local_pcp:9592kB free_cma:0kB [ 177.609460][ T7659] lowmem_reserve[]: 0 0 0 0 0 [ 177.614377][ T7659] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 177.627796][ T7659] Node 0 DMA32: 194*4kB (ME) 104*8kB (UM) 164*16kB (UME) 202*32kB (UME) 283*64kB (UM) 180*128kB (UME) 154*256kB (UM) 91*512kB (UM) 63*1024kB (UME) 3*2048kB (U) 279*4096kB (UM) = 1351304kB [ 177.648979][ T7659] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 177.673843][ T7659] Node 1 Normal: 167*4kB (UE) 41*8kB (UME) 43*16kB (UME) 75*32kB (UME) 21*64kB (UME) 8*128kB (UME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 949*4096kB (M) = 3903028kB [ 177.694460][ T7659] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 177.704672][ T7659] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 177.714575][ T7659] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 177.724900][ T7659] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 177.736783][ T7659] 42647 total pagecache pages [ 177.741920][ T7659] 0 pages in swap cache [ 177.746207][ T7659] Free swap = 124996kB [ 177.751372][ T7659] Total swap = 124996kB [ 177.755673][ T7659] 2097051 pages RAM [ 177.760445][ T7659] 0 pages HighMem/MovableOnly [ 177.765336][ T7659] 424687 pages reserved [ 177.770436][ T7659] 0 pages cma reserved [ 178.399188][ T7687] Cannot find del_set index 0 as target [ 178.419852][ T7691] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 178.689441][ T7700] netlink: 16 bytes leftover after parsing attributes in process `syz.0.454'. [ 178.724481][ T7701] macvtap1: entered promiscuous mode [ 178.736732][ T7701] hsr0: entered promiscuous mode [ 178.747052][ T7701] macvtap1: entered allmulticast mode [ 178.760431][ T7701] hsr0: entered allmulticast mode [ 178.790063][ T7701] hsr_slave_0: entered allmulticast mode [ 178.814018][ T7701] hsr_slave_1: entered allmulticast mode [ 178.863414][ T7701] hsr0: left allmulticast mode [ 178.970648][ T7701] hsr_slave_0: left allmulticast mode [ 179.006695][ T7701] hsr_slave_1: left allmulticast mode [ 179.047590][ T7701] hsr0: left promiscuous mode [ 179.206940][ T7700] batadv0: entered promiscuous mode [ 179.224221][ T7700] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 179.233704][ T7700] batadv0: left promiscuous mode [ 179.407741][ T7705] lo speed is unknown, defaulting to 1000 [ 179.769479][ T7732] netlink: 48 bytes leftover after parsing attributes in process `syz.1.463'. [ 179.789551][ T7731] netlink: 36 bytes leftover after parsing attributes in process `syz.3.464'. [ 179.826313][ T7731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.464'. [ 179.837137][ T7732] netlink: 32 bytes leftover after parsing attributes in process `syz.1.463'. [ 179.855645][ T7705] netlink: 'syz.2.457': attribute type 4 has an invalid length. [ 179.889365][ T7728] netlink: del zone limit has 4 unknown bytes [ 180.070803][ T7728] vxcan1: entered allmulticast mode [ 180.349261][ T7736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.466'. [ 180.414898][ T7738] netlink: 36 bytes leftover after parsing attributes in process `syz.1.477'. [ 180.421006][ T7736] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.466007][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.477'. [ 180.515149][ T7743] netlink: 248 bytes leftover after parsing attributes in process `syz.2.468'. [ 180.533323][ T7741] bond1: (slave veth3): Enslaving as an active interface with an up link [ 180.562460][ T7101] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0 [ 180.587491][ T7101] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0 [ 180.630915][ T7101] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 180.889237][ T7751] netlink: 'syz.4.467': attribute type 1 has an invalid length. [ 181.040235][ T7736] vlan0: entered allmulticast mode [ 181.045734][ T7736] veth1: entered allmulticast mode [ 181.384384][ T7755] netlink: 40 bytes leftover after parsing attributes in process `syz.3.470'. [ 181.428040][ T7759] bpq0: entered promiscuous mode [ 181.437063][ T7759] bpq0: entered allmulticast mode [ 181.876453][ T7783] netlink: del zone limit has 4 unknown bytes [ 182.251178][ T7788] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.291798][ T7790] bond1: (slave veth3): Enslaving as an active interface with an up link [ 182.317621][ T7788] vlan0: entered allmulticast mode [ 182.322891][ T7788] veth1: entered allmulticast mode [ 182.878473][ T7193] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.905246][ T7193] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.966699][ T7193] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.002442][ T7193] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.052703][ T7807] bond1: (slave veth3): Releasing backup interface [ 183.102836][ T7811] bpq0: left promiscuous mode [ 183.117948][ T7811] bpq0: left allmulticast mode [ 183.335842][ T7818] macvtap1: entered promiscuous mode [ 183.343470][ T7818] hsr0: entered promiscuous mode [ 183.349184][ T7818] macvtap1: entered allmulticast mode [ 183.355405][ T7818] hsr0: entered allmulticast mode [ 183.371028][ T7818] hsr_slave_0: entered allmulticast mode [ 183.378139][ T7818] hsr_slave_1: entered allmulticast mode [ 183.394051][ T7818] hsr0: left allmulticast mode [ 183.410053][ T7818] hsr_slave_0: left allmulticast mode [ 183.437533][ T7818] hsr_slave_1: left allmulticast mode [ 183.469764][ T7818] hsr0: left promiscuous mode [ 183.836241][ T7829] __nla_validate_parse: 8 callbacks suppressed [ 183.836261][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.496'. [ 185.352967][ T7866] netlink: 'syz.1.509': attribute type 16 has an invalid length. [ 185.361017][ T7866] netlink: 'syz.1.509': attribute type 17 has an invalid length. [ 185.458252][ T7871] netlink: 'syz.0.510': attribute type 1 has an invalid length. [ 185.481830][ T7872] IPv6: NLM_F_REPLACE set, but no existing node found! [ 185.531464][ T7871] netlink: 224 bytes leftover after parsing attributes in process `syz.0.510'. [ 185.974524][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.509'. [ 186.028649][ T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.050159][ T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 44930 - 0 [ 186.097826][ T13] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 186.128826][ T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.137291][ T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 44930 - 0 [ 186.156859][ T13] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 186.266057][ T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.313071][ T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 44930 - 0 [ 186.338890][ T13] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 186.357063][ T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.376432][ T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 44930 - 0 [ 186.386545][ T13] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 186.423690][ T7894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.518'. [ 186.528242][ T7899] bridge1: port 1(ip6gretap1) entered blocking state [ 186.543715][ T7899] bridge1: port 1(ip6gretap1) entered disabled state [ 186.561504][ T7899] ip6gretap1: entered allmulticast mode [ 186.569950][ T7899] ip6gretap1: entered promiscuous mode [ 186.616990][ T7902] netlink: 'syz.1.519': attribute type 2 has an invalid length. [ 186.640284][ T7902] þ`Ì: entered promiscuous mode [ 186.740376][ T7907] netlink: zone id is out of range [ 186.747474][ T7907] netlink: zone id is out of range [ 186.753075][ T7907] netlink: zone id is out of range [ 186.754652][ T7894] veth5: entered promiscuous mode [ 186.762504][ T7907] netlink: zone id is out of range [ 186.777389][ T7907] netlink: zone id is out of range [ 186.784084][ T7894] bridge1: port 2(veth5) entered blocking state [ 186.793789][ T7907] netlink: zone id is out of range [ 186.806158][ T7907] netlink: zone id is out of range [ 186.806817][ T7894] bridge1: port 2(veth5) entered disabled state [ 186.831507][ T7894] veth5: entered allmulticast mode [ 186.955621][ T7907] netlink: set zone limit has 4 unknown bytes [ 187.504801][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.525'. [ 187.922423][ T7931] netlink: 32 bytes leftover after parsing attributes in process `syz.4.529'. [ 187.970659][ T7931] lo speed is unknown, defaulting to 1000 [ 188.504098][ T7943] lo speed is unknown, defaulting to 1000 [ 189.629030][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.540'. [ 189.634591][ T7108] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0 [ 189.646776][ T7108] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0 [ 189.657814][ T7108] hid-generic 0005:16BF:5505.0003: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 190.213933][ T7984] warn_alloc: 1 callbacks suppressed [ 190.213962][ T7984] syz.0.545: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 190.262893][ T7984] CPU: 1 UID: 0 PID: 7984 Comm: syz.0.545 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 190.262926][ T7984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.262940][ T7984] Call Trace: [ 190.262948][ T7984] [ 190.262958][ T7984] dump_stack_lvl+0x189/0x250 [ 190.263015][ T7984] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.263051][ T7984] ? __pfx__printk+0x10/0x10 [ 190.263076][ T7984] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 190.263101][ T7984] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 190.263128][ T7984] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 190.263155][ T7984] warn_alloc+0x214/0x310 [ 190.263181][ T7984] ? stack_depot_save_flags+0x40/0x900 [ 190.263214][ T7984] ? __pfx_warn_alloc+0x10/0x10 [ 190.263248][ T7984] ? kasan_save_track+0x4f/0x80 [ 190.263282][ T7984] ? xskq_create+0x56/0x170 [ 190.263318][ T7984] ? xsk_init_queue+0xb0/0x110 [ 190.263347][ T7984] ? xsk_setsockopt+0x43f/0x710 [ 190.263379][ T7984] ? do_sock_setsockopt+0x257/0x3e0 [ 190.263407][ T7984] ? __x64_sys_setsockopt+0x18b/0x220 [ 190.263433][ T7984] ? do_syscall_64+0xfa/0x3b0 [ 190.263452][ T7984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.263485][ T7984] __vmalloc_node_range_noprof+0x125/0x12f0 [ 190.263546][ T7984] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 190.263578][ T7984] ? __kasan_kmalloc+0x93/0xb0 [ 190.263603][ T7984] vmalloc_user_noprof+0xad/0xf0 [ 190.263628][ T7984] ? xskq_create+0xbf/0x170 [ 190.263661][ T7984] xskq_create+0xbf/0x170 [ 190.263697][ T7984] xsk_init_queue+0xb0/0x110 [ 190.263733][ T7984] xsk_setsockopt+0x43f/0x710 [ 190.263767][ T7984] ? __pfx_xsk_setsockopt+0x10/0x10 [ 190.263796][ T7984] ? __lock_acquire+0xab9/0xd20 [ 190.263839][ T7984] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 190.263866][ T7984] ? __pfx_xsk_setsockopt+0x10/0x10 [ 190.263900][ T7984] do_sock_setsockopt+0x257/0x3e0 [ 190.263933][ T7984] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 190.263969][ T7984] ? __fget_files+0x2a/0x420 [ 190.264004][ T7984] __x64_sys_setsockopt+0x18b/0x220 [ 190.264042][ T7984] do_syscall_64+0xfa/0x3b0 [ 190.264061][ T7984] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.264094][ T7984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.264115][ T7984] ? clear_bhb_loop+0x60/0xb0 [ 190.264142][ T7984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.264163][ T7984] RIP: 0033:0x7fde4658e929 [ 190.264190][ T7984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.264209][ T7984] RSP: 002b:00007fde473c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 190.264232][ T7984] RAX: ffffffffffffffda RBX: 00007fde467b6080 RCX: 00007fde4658e929 [ 190.264265][ T7984] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 190.264278][ T7984] RBP: 00007fde46610b39 R08: 0000000000000004 R09: 0000000000000000 [ 190.264291][ T7984] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.264304][ T7984] R13: 0000000000000000 R14: 00007fde467b6080 R15: 00007ffc17ea6208 [ 190.264340][ T7984] [ 190.265816][ T7984] Mem-Info: [ 190.333866][ T7985] netlink: 20 bytes leftover after parsing attributes in process `syz.3.546'. [ 190.339360][ T7984] active_anon:4487 inactive_anon:0 isolated_anon:0 [ 190.339360][ T7984] active_file:1376 inactive_file:39891 isolated_file:0 [ 190.339360][ T7984] unevictable:2813 dirty:407 writeback:0 [ 190.339360][ T7984] slab_reclaimable:10926 slab_unreclaimable:97775 [ 190.339360][ T7984] mapped:31268 shmem:3418 pagetables:1038 [ 190.339360][ T7984] sec_pagetables:0 bounce:0 [ 190.339360][ T7984] kernel_misc_reclaimable:0 [ 190.339360][ T7984] free:1328446 free_pcp:18727 free_cma:0 [ 190.380837][ T7985] netlink: 40 bytes leftover after parsing attributes in process `syz.3.546'. [ 190.389036][ T7986] netlink: 56 bytes leftover after parsing attributes in process `syz.3.546'. [ 190.619011][ T7984] Node 0 active_anon:17748kB inactive_anon:0kB active_file:5504kB inactive_file:159368kB unevictable:13716kB isolated(anon):0kB isolated(file):0kB mapped:129072kB dirty:1628kB writeback:0kB shmem:16136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12760kB pagetables:4060kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 190.659416][ T7985] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551615) [ 190.703557][ T7984] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:92kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 190.707421][ T7985] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 190.766034][ T7984] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 190.798078][ T7990] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.807253][ T7984] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 190.819334][ T7984] Node 0 DMA32 free:1392980kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17904kB inactive_anon:0kB active_file:5504kB inactive_file:157536kB unevictable:13716kB writepending:1628kB present:3129332kB managed:2561032kB mlocked:12240kB bounce:0kB free_pcp:53516kB local_pcp:17740kB free_cma:0kB [ 190.868822][ T7984] lowmem_reserve[]: 0 0 1 1 1 [ 190.873627][ T7984] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 190.935645][ T7990] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.980612][ T7984] lowmem_reserve[]: 0 0 0 0 0 [ 191.001961][ T7984] Node 1 Normal free:3903028kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19964kB local_pcp:9592kB free_cma:0kB [ 191.039653][ T7984] lowmem_reserve[]: 0 0 0 0 0 [ 191.045179][ T7984] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 191.052927][ T7990] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.063523][ T7984] Node 0 DMA32: 2565*4kB (UME) 947*8kB (UME) 379*16kB (UME) 1373*32kB (UME) 522*64kB (UME) 307*128kB (UME) 204*256kB (UM) 132*512kB (UME) 87*1024kB (UME) 15*2048kB (UE) 250*4096kB (UM) = 1404156kB [ 191.112127][ T7984] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 191.148199][ T7984] Node 1 Normal: 167*4kB (UE) 41*8kB (UME) 43*16kB (UME) 75*32kB (UME) 21*64kB (UME) 8*128kB (UME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 949*4096kB (M) = 3903028kB [ 191.174920][ T7990] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.175988][ T7984] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 191.195642][ T7984] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 191.207238][ T7984] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 191.221728][ T7984] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 191.232736][ T7984] 42646 total pagecache pages [ 191.237625][ T7984] 0 pages in swap cache [ 191.244887][ T7984] Free swap = 124996kB [ 191.250971][ T7984] Total swap = 124996kB [ 191.255489][ T7984] 2097051 pages RAM [ 191.270045][ T7984] 0 pages HighMem/MovableOnly [ 191.275288][ T7984] 424687 pages reserved [ 191.287327][ T7984] 0 pages cma reserved [ 191.383556][ T1094] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.429443][ T49] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.461363][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.549'. [ 191.479329][ T1094] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.507732][ T7193] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.567690][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.551'. [ 191.592677][ T8008] macsec1: entered promiscuous mode [ 191.629742][ T8008] gretap0: entered promiscuous mode [ 191.635348][ T8008] macsec1: entered allmulticast mode [ 191.641441][ T8008] gretap0: entered allmulticast mode [ 191.775368][ T8016] batadv_slave_1: entered promiscuous mode [ 191.803068][ T8015] batadv_slave_1: left promiscuous mode [ 191.942182][ T8018] lo speed is unknown, defaulting to 1000 [ 192.005978][ T8028] ip6tnl1: entered promiscuous mode [ 192.019050][ T8028] ip6tnl1: entered allmulticast mode [ 192.034171][ T8028] team0: Device ip6tnl1 is of different type [ 192.104534][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.560'. [ 192.499331][ T8034] veth3: left promiscuous mode [ 192.515970][ T8034] geneve2: left promiscuous mode [ 192.545228][ T8034] geneve2: left allmulticast mode [ 192.621566][ T8036] dummy0: entered promiscuous mode [ 192.626919][ T8036] macsec1: entered promiscuous mode [ 192.647456][ T8036] macsec1: entered allmulticast mode [ 192.665707][ T8036] dummy0: entered allmulticast mode [ 192.676864][ T8036] dummy0: left allmulticast mode [ 192.682546][ T8036] dummy0: left promiscuous mode [ 192.798967][ T8038] vlan0: entered promiscuous mode [ 192.822799][ T8038] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 192.853349][ T8038] vlan0: entered allmulticast mode [ 192.870967][ T8038] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 192.924818][ T8044] bond0: entered promiscuous mode [ 192.942220][ T8044] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 193.001370][ T8044] bond0: left promiscuous mode [ 193.086090][ T8021] lo speed is unknown, defaulting to 1000 [ 193.113190][ T8021] lo speed is unknown, defaulting to 1000 [ 193.151450][ T8021] lo speed is unknown, defaulting to 1000 [ 193.243045][ T8021] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 193.345128][ T8050] netlink: 14 bytes leftover after parsing attributes in process `syz.1.567'. [ 193.675604][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.569'. [ 193.943474][ T8050] bond0 (unregistering): Released all slaves [ 194.021791][ T8021] lo speed is unknown, defaulting to 1000 [ 194.038253][ T8021] lo speed is unknown, defaulting to 1000 [ 194.072941][ T8021] lo speed is unknown, defaulting to 1000 [ 194.097114][ T8021] lo speed is unknown, defaulting to 1000 [ 194.151410][ T8021] lo speed is unknown, defaulting to 1000 [ 194.182255][ T8021] lo speed is unknown, defaulting to 1000 [ 194.261057][ T8064] netlink: 'syz.3.582': attribute type 1 has an invalid length. [ 194.291377][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.582'. [ 194.381532][ T8067] bridge0: port 1(veth0_to_bridge) entered blocking state [ 194.389106][ T8067] bridge0: port 1(veth0_to_bridge) entered disabled state [ 194.396416][ T8067] veth0_to_bridge: entered allmulticast mode [ 194.407240][ T8067] veth0_to_bridge: entered promiscuous mode [ 194.437040][ T8065] netlink: 'syz.1.571': attribute type 10 has an invalid length. [ 194.614072][ T8073] macvtap1: entered promiscuous mode [ 194.619932][ T8073] macvtap1: entered allmulticast mode [ 194.676771][ T8078] bridge_slave_0: left allmulticast mode [ 194.717273][ T8078] bridge_slave_0: left promiscuous mode [ 194.737443][ T8078] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.827705][ T8078] bridge_slave_1: left allmulticast mode [ 194.844767][ T8078] bridge_slave_1: left promiscuous mode [ 194.851850][ T8078] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.911133][ T8078] bond0: (slave bond_slave_0): Releasing backup interface [ 194.973095][ T8078] bond0: (slave bond_slave_1): Releasing backup interface [ 195.063070][ T8078] team0: Port device team_slave_0 removed [ 195.131447][ T8078] team0: Port device team_slave_1 removed [ 195.150633][ T8078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.159889][ T8078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.181449][ T8078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.195484][ T8078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.236901][ T8089] __nla_validate_parse: 1 callbacks suppressed [ 195.236917][ T8089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.577'. [ 195.256844][ T8078] team0: Port device vxlan0 removed [ 195.271251][ T8078] bond1: (slave veth3): Releasing backup interface [ 195.327332][ T8092] netlink: 16 bytes leftover after parsing attributes in process `syz.4.576'. [ 195.397879][ T8083] bridge0: port 1(vlan1) entered blocking state [ 195.412122][ T8083] bridge0: port 1(vlan1) entered disabled state [ 195.425500][ T8083] vlan1: entered allmulticast mode [ 195.433281][ T8083] bond0: entered allmulticast mode [ 195.498381][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.578'. [ 195.510435][ T8089] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.523397][ T8100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.579'. [ 195.605770][ T8100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.655328][ T8108] netlink: 192 bytes leftover after parsing attributes in process `syz.3.581'. [ 195.793913][ T8104] bond0: (slave veth7): Enslaving as an active interface with an up link [ 195.820453][ T8100] vlan0: entered allmulticast mode [ 196.417582][ T8138] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 196.457829][ T8137] lo speed is unknown, defaulting to 1000 [ 196.464294][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 196.476074][ T8137] lo speed is unknown, defaulting to 1000 [ 196.730790][ T8142] netlink: 192 bytes leftover after parsing attributes in process `syz.4.595'. [ 197.081262][ T8152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.599'. [ 197.134805][ T8152] 8021q: adding VLAN 0 to HW filter on device bond3 [ 197.146629][ T8145] netlink: 16 bytes leftover after parsing attributes in process `syz.0.596'. [ 197.205858][ T8156] bond3: (slave veth5): Enslaving as an active interface with an up link [ 197.324500][ T8166] netlink: 'syz.4.603': attribute type 16 has an invalid length. [ 197.371341][ T8166] netlink: 'syz.4.603': attribute type 17 has an invalid length. [ 197.378033][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.604'. [ 197.389275][ T8170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.603'. [ 197.399875][ T8170] IPv6: NLM_F_REPLACE set, but no existing node found! [ 197.404181][ T8166] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 197.440330][ T8166] gretap0: left allmulticast mode [ 197.470427][ T8166] hsr0: left allmulticast mode [ 197.475218][ T8166] hsr_slave_0: left allmulticast mode [ 197.481022][ T8166] hsr_slave_1: left allmulticast mode [ 197.596585][ T7203] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.605480][ T1094] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.614011][ T1094] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.622637][ T1094] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.100998][ T8178] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.120586][ T8180] IPVS: set_ctl: invalid protocol: 29 100.1.1.0:20001 [ 198.155199][ T8178] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.206755][ T8172] lo speed is unknown, defaulting to 1000 [ 198.220058][ T8178] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.233038][ T8178] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.255897][ T8172] lo speed is unknown, defaulting to 1000 [ 198.323740][ T8178] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.336875][ T8178] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.424887][ T8178] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.435432][ T8178] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.461662][ T5845] Bluetooth: hci0: command tx timeout [ 198.563777][ T1094] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.579139][ T1094] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.622391][ T1094] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.646119][ T1094] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.851046][ T49] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.867409][ T49] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.918469][ T49] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.927584][ T49] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.337153][ T8212] lo speed is unknown, defaulting to 1000 [ 199.356857][ T8212] lo speed is unknown, defaulting to 1000 [ 199.422790][ T8220] IPVS: set_ctl: invalid protocol: 29 100.1.1.0:20001 [ 200.004164][ T8235] lo speed is unknown, defaulting to 1000 [ 200.033507][ T8235] lo speed is unknown, defaulting to 1000 [ 201.560051][ T8268] lo speed is unknown, defaulting to 1000 [ 201.568043][ T8268] lo speed is unknown, defaulting to 1000 [ 202.187273][ T8284] __nla_validate_parse: 1 callbacks suppressed [ 202.187293][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.642'. [ 202.253152][ T9] hid-generic 0005:16BF:5505.0004: unknown main item tag 0x0 [ 202.309249][ T9] hid-generic 0005:16BF:5505.0004: unknown main item tag 0x0 [ 202.363119][ T9] hid-generic 0005:16BF:5505.0004: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 202.408555][ T8285] lo speed is unknown, defaulting to 1000 [ 202.426733][ T8285] lo speed is unknown, defaulting to 1000 [ 202.916764][ T8297] netlink: 192 bytes leftover after parsing attributes in process `syz.2.649'. [ 203.156814][ T8307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.651'. [ 203.233055][ T30] audit: type=1800 audit(1750353156.535:4): pid=8294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.646" name="memory.events" dev="tmpfs" ino=718 res=0 errno=0 [ 203.262747][ T8307] 8021q: adding VLAN 0 to HW filter on device bond2 [ 203.350602][ T8309] bond2: (slave veth5): Enslaving as an active interface with an up link [ 203.414472][ T8310] vlan0: entered allmulticast mode [ 203.768551][ T8320] netlink: 192 bytes leftover after parsing attributes in process `syz.3.665'. [ 203.798859][ T8317] x_tables: ip_tables: ah match: only valid for protocol 51 [ 203.806869][ T8313] lo speed is unknown, defaulting to 1000 [ 203.832312][ T8313] lo speed is unknown, defaulting to 1000 [ 204.123572][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.659'. [ 204.305102][ T8326] lo speed is unknown, defaulting to 1000 [ 204.385843][ T8326] lo speed is unknown, defaulting to 1000 [ 204.495465][ T8335] Â: renamed from pim6reg1 [ 205.324042][ T8350] Cannot find del_set index 0 as target [ 205.352845][ T8356] netlink: 192 bytes leftover after parsing attributes in process `syz.0.674'. [ 205.387731][ T8352] macvtap0: entered promiscuous mode [ 205.393295][ T8352] hsr0: entered promiscuous mode [ 205.398556][ T8352] macvtap0: entered allmulticast mode [ 205.405624][ T8352] hsr0: entered allmulticast mode [ 205.411431][ T8352] hsr_slave_0: entered allmulticast mode [ 205.417244][ T8352] hsr_slave_1: entered allmulticast mode [ 205.445700][ T8352] hsr0: left allmulticast mode [ 205.470861][ T8352] hsr_slave_0: left allmulticast mode [ 205.482344][ T8352] hsr_slave_1: left allmulticast mode [ 205.492702][ T8352] hsr0: left promiscuous mode [ 205.541468][ T8355] netlink: 248 bytes leftover after parsing attributes in process `syz.2.664'. [ 205.675811][ T8363] batman_adv: batadv0: Removing interface: virt_wifi0 [ 205.743047][ T8357] lo speed is unknown, defaulting to 1000 [ 205.760561][ T8357] lo speed is unknown, defaulting to 1000 [ 206.038785][ T8371] nbd4: detected capacity change from 0 to 63 [ 206.045355][ T8375] block nbd4: NBD_DISCONNECT [ 206.053308][ T8375] block nbd4: Disconnected due to user request. [ 206.064383][ T8375] block nbd4: shutting down sockets [ 206.304210][ T8383] netlink: 192 bytes leftover after parsing attributes in process `syz.3.675'. [ 206.611933][ T8390] netlink: 'syz.0.678': attribute type 33 has an invalid length. [ 206.623529][ T8390] netlink: 152 bytes leftover after parsing attributes in process `syz.0.678'. [ 206.634593][ T8390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.678'. [ 206.680423][ T8392] Cannot find del_set index 0 as target [ 206.916331][ T8398] lo speed is unknown, defaulting to 1000 [ 206.930089][ T8398] lo speed is unknown, defaulting to 1000 [ 207.036596][ T8407] netlink: 'syz.0.684': attribute type 2 has an invalid length. [ 207.384473][ T8420] __nla_validate_parse: 1 callbacks suppressed [ 207.384493][ T8420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.689'. [ 207.405337][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.688'. [ 207.676159][ T1094] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.685541][ T1094] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.697859][ T1094] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.716192][ T1094] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.419811][ T8429] Cannot find del_set index 0 as target [ 208.544841][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.696'. [ 208.639307][ T8443] 8021q: adding VLAN 0 to HW filter on device bond3 [ 208.738056][ T8447] bond3: (slave veth7): Enslaving as an active interface with an up link [ 209.243949][ T30] audit: type=1800 audit(1750353162.535:5): pid=8459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.701" name="memory.events" dev="tmpfs" ino=707 res=0 errno=0 [ 210.126026][ T8474] lo speed is unknown, defaulting to 1000 [ 210.152124][ T8474] lo speed is unknown, defaulting to 1000 [ 210.354763][ T8480] Cannot find del_set index 0 as target [ 210.877276][ T8487] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.708'. [ 211.412376][ T8504] netlink: 'syz.0.714': attribute type 16 has an invalid length. [ 211.420701][ T8504] netlink: 'syz.0.714': attribute type 17 has an invalid length. [ 211.461946][ T8504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.714'. [ 211.473890][ T8504] IPv6: NLM_F_REPLACE set, but no existing node found! [ 211.581724][ T8508] lo speed is unknown, defaulting to 1000 [ 211.593286][ T8508] lo speed is unknown, defaulting to 1000 [ 211.740339][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 211.749075][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 211.750807][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 211.757834][ T8510] lo speed is unknown, defaulting to 1000 [ 211.777755][ T8515] netlink: 24 bytes leftover after parsing attributes in process `syz.3.718'. [ 211.959369][ T8510] lo speed is unknown, defaulting to 1000 [ 212.251277][ T8524] netlink: 192 bytes leftover after parsing attributes in process `syz.4.719'. [ 212.959141][ T8543] netlink: 16 bytes leftover after parsing attributes in process `syz.3.724'. [ 213.004046][ T8538] lo speed is unknown, defaulting to 1000 [ 213.623183][ T8538] lo speed is unknown, defaulting to 1000 [ 213.632742][ T8535] lo speed is unknown, defaulting to 1000 [ 213.754613][ T8535] lo speed is unknown, defaulting to 1000 [ 214.266350][ T8548] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 215.244907][ T8572] netlink: 192 bytes leftover after parsing attributes in process `syz.3.736'. [ 215.331606][ T8575] lo speed is unknown, defaulting to 1000 [ 215.363305][ T8575] lo speed is unknown, defaulting to 1000 [ 215.379713][ T8580] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 215.401820][ T8579] x_tables: ip_tables: ah match: only valid for protocol 51 [ 216.207162][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.743'. [ 216.306470][ T8594] ip6t_srh: unknown srh invflags 4449 [ 216.736921][ T8603] netlink: 'syz.1.746': attribute type 21 has an invalid length. [ 216.778904][ T8603] netlink: 'syz.1.746': attribute type 6 has an invalid length. [ 216.809474][ T8603] netlink: 64 bytes leftover after parsing attributes in process `syz.1.746'. [ 216.879242][ T8603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.746'. [ 216.925263][ T8611] netlink: 192 bytes leftover after parsing attributes in process `syz.0.749'. [ 216.957176][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.746'. [ 216.987988][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.746'. [ 217.105022][ T8615] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 217.178251][ T8621] Cannot find del_set index 0 as target [ 217.461925][ T8629] tipc: Started in network mode [ 217.466843][ T8629] tipc: Node identity ffffa848, cluster identity 4711 [ 217.510719][ T8629] tipc: Node number set to 4294944840 [ 217.526229][ T8629] netlink: 'syz.2.755': attribute type 39 has an invalid length. [ 218.120551][ T8640] lo speed is unknown, defaulting to 1000 [ 218.175339][ T8640] lo speed is unknown, defaulting to 1000 [ 218.973071][ T8655] netlink: 192 bytes leftover after parsing attributes in process `syz.1.763'. [ 219.331144][ T8660] netlink: 'syz.4.764': attribute type 11 has an invalid length. [ 219.714665][ T8669] netlink: 'syz.3.769': attribute type 12 has an invalid length. [ 220.004298][ T8659] x_tables: ip_tables: ah match: only valid for protocol 51 [ 220.494622][ T8688] netlink: 192 bytes leftover after parsing attributes in process `syz.3.776'. [ 220.754870][ T8694] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 220.989293][ T8700] wg1: entered promiscuous mode [ 220.996847][ T8700] wg1: entered allmulticast mode [ 221.107800][ T8704] Cannot find del_set index 0 as target [ 221.459246][ T8711] nbd1: detected capacity change from 0 to 63 [ 221.495662][ T8713] block nbd1: NBD_DISCONNECT [ 221.510835][ T8713] block nbd1: Disconnected due to user request. [ 221.517238][ T8713] block nbd1: shutting down sockets [ 221.672087][ T8720] netlink: 192 bytes leftover after parsing attributes in process `syz.0.789'. [ 221.769855][ T8723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.790'. [ 222.020450][ T8723] 8021q: adding VLAN 0 to HW filter on device bond2 [ 222.336787][ T8728] bond2: (slave veth9): Enslaving as an active interface with an up link [ 222.379062][ T8733] vlan0: entered allmulticast mode [ 222.385118][ T8733] bond2: (slave vlan0): Opening slave failed [ 222.889010][ T8744] Cannot find del_set index 0 as target [ 223.142780][ T8763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.803'. [ 223.246060][ T8763] 8021q: adding VLAN 0 to HW filter on device bond4 [ 223.294787][ T8772] bond4: (slave veth9): Enslaving as an active interface with an up link [ 223.370772][ T8763] vlan0: entered allmulticast mode [ 223.376649][ T8763] bond4: (slave vlan0): Opening slave failed [ 223.413282][ T8774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.804'. [ 223.426478][ T8777] lo speed is unknown, defaulting to 1000 [ 223.437343][ T8777] lo speed is unknown, defaulting to 1000 [ 224.075140][ T8796] lo speed is unknown, defaulting to 1000 [ 224.116299][ T8796] lo speed is unknown, defaulting to 1000 [ 224.220129][ T8801] x_tables: ip_tables: ah match: only valid for protocol 51 [ 224.413453][ T7108] IPVS: starting estimator thread 0... [ 224.447362][ T8807] lo speed is unknown, defaulting to 1000 [ 224.455529][ T8807] lo speed is unknown, defaulting to 1000 [ 224.569007][ T8811] IPVS: using max 24 ests per chain, 57600 per kthread [ 225.429738][ T8822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.817'. [ 225.582787][ T8822] 8021q: adding VLAN 0 to HW filter on device bond2 [ 225.664689][ T8825] bond2: (slave veth5): Enslaving as an active interface with an up link [ 225.683948][ T8826] vlan2: entered allmulticast mode [ 225.690590][ T8826] veth1: entered promiscuous mode [ 225.707347][ T8826] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 226.127885][ T8839] x_tables: ip_tables: ah match: only valid for protocol 51 [ 226.193803][ T8842] netlink: 14 bytes leftover after parsing attributes in process `syz.0.826'. [ 226.473892][ T8849] lo speed is unknown, defaulting to 1000 [ 226.511413][ T8849] lo speed is unknown, defaulting to 1000 [ 227.911135][ T8886] netlink: 20 bytes leftover after parsing attributes in process `syz.2.843'. [ 229.119148][ T8918] vlan0: entered allmulticast mode [ 229.427936][ T8929] gretap0: left allmulticast mode [ 229.459188][ T8929] gretap0: left promiscuous mode [ 229.469120][ T8929] macsec1: left promiscuous mode [ 229.474141][ T8929] macsec1: left allmulticast mode [ 229.726832][ T7193] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.760779][ T7193] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.788915][ T7193] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.797322][ T7193] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.148255][ T8939] lo speed is unknown, defaulting to 1000 [ 230.286089][ T8939] lo speed is unknown, defaulting to 1000 [ 231.897677][ T8967] netlink: 192 bytes leftover after parsing attributes in process `syz.2.873'. [ 231.981893][ T8970] netlink: 'syz.3.874': attribute type 39 has an invalid length. [ 232.050964][ T8971] lo speed is unknown, defaulting to 1000 [ 232.090620][ T8971] lo speed is unknown, defaulting to 1000 [ 232.249513][ T8980] netlink: 32 bytes leftover after parsing attributes in process `syz.4.879'. [ 232.408463][ T8983] netlink: 32 bytes leftover after parsing attributes in process `syz.4.879'. [ 233.350173][ T9007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.887'. [ 233.378201][ T9009] Cannot find del_set index 0 as target [ 233.455313][ T9013] netlink: 'syz.2.891': attribute type 39 has an invalid length. [ 233.622723][ T9024] netlink: 28 bytes leftover after parsing attributes in process `syz.0.892'. [ 233.670997][ T9023] netlink: 100 bytes leftover after parsing attributes in process `syz.2.894'. [ 233.737157][ T9026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.795700][ T9026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.895'. [ 234.591627][ T9046] lo speed is unknown, defaulting to 1000 [ 234.649893][ T9046] lo speed is unknown, defaulting to 1000 [ 235.652918][ T9071] lo speed is unknown, defaulting to 1000 [ 235.692246][ T9071] lo speed is unknown, defaulting to 1000 [ 235.809922][ T9079] lo speed is unknown, defaulting to 1000 [ 235.915129][ T9079] lo speed is unknown, defaulting to 1000 [ 236.613812][ T9099] netlink: 24 bytes leftover after parsing attributes in process `syz.3.917'. [ 236.714307][ T9103] netlink: 24 bytes leftover after parsing attributes in process `syz.2.918'. [ 236.747725][ T9099] lo speed is unknown, defaulting to 1000 [ 236.756425][ T9105] x_tables: ip_tables: ah match: only valid for protocol 51 [ 236.885802][ T9099] lo speed is unknown, defaulting to 1000 [ 236.896591][ T9101] lo speed is unknown, defaulting to 1000 [ 236.925478][ T9101] lo speed is unknown, defaulting to 1000 [ 237.220228][ T9109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.921'. [ 237.539620][ T9124] x_tables: duplicate underflow at hook 4 [ 237.570266][ T9127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.927'. [ 237.729423][ T9127] 8021q: adding VLAN 0 to HW filter on device bond2 [ 237.807349][ T9125] lo speed is unknown, defaulting to 1000 [ 238.069020][ T9125] lo speed is unknown, defaulting to 1000 [ 238.092304][ T9142] x_tables: ip_tables: ah match: only valid for protocol 51 [ 238.099549][ T9147] netlink: 40 bytes leftover after parsing attributes in process `syz.4.930'. [ 238.108859][ T9147] netlink: 60 bytes leftover after parsing attributes in process `syz.4.930'. [ 238.294958][ T9149] macvtap1: entered promiscuous mode [ 238.301219][ T9149] hsr0: entered promiscuous mode [ 238.306953][ T9149] macvtap1: entered allmulticast mode [ 238.314743][ T9149] hsr0: entered allmulticast mode [ 238.320611][ T9149] hsr_slave_0: entered allmulticast mode [ 238.326452][ T9149] hsr_slave_1: entered allmulticast mode [ 238.376641][ T9149] hsr0: left allmulticast mode [ 238.398751][ T9149] hsr_slave_0: left allmulticast mode [ 238.414021][ T9149] hsr_slave_1: left allmulticast mode [ 238.420192][ T9149] hsr0: left promiscuous mode [ 238.813715][ T9161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.934'. [ 238.990301][ T9167] x_tables: duplicate underflow at hook 4 [ 239.112537][ T9170] netlink: 192 bytes leftover after parsing attributes in process `syz.4.940'. [ 239.423863][ T9178] lo speed is unknown, defaulting to 1000 [ 239.453920][ T9178] lo speed is unknown, defaulting to 1000 [ 239.962573][ T9189] lo speed is unknown, defaulting to 1000 [ 240.047489][ T9199] x_tables: duplicate underflow at hook 4 [ 240.048231][ T9189] lo speed is unknown, defaulting to 1000 [ 240.464676][ T9] IPVS: starting estimator thread 0... [ 240.579568][ T9214] IPVS: using max 23 ests per chain, 55200 per kthread [ 240.897288][ T9220] netlink: 16 bytes leftover after parsing attributes in process `syz.4.955'. [ 241.133002][ T9222] x_tables: ip_tables: ah match: only valid for protocol 51 [ 241.863507][ T9242] x_tables: duplicate underflow at hook 4 [ 242.030761][ T9248] lo speed is unknown, defaulting to 1000 [ 242.038412][ T9248] lo speed is unknown, defaulting to 1000 [ 242.241503][ T9257] netlink: 20 bytes leftover after parsing attributes in process `syz.4.969'. [ 242.245866][ T9255] Cannot find del_set index 0 as target [ 242.706856][ T9275] x_tables: duplicate underflow at hook 4 [ 242.744080][ T9270] lo speed is unknown, defaulting to 1000 [ 242.821513][ T9270] lo speed is unknown, defaulting to 1000 [ 243.339803][ T9283] lo speed is unknown, defaulting to 1000 [ 243.382899][ T9283] lo speed is unknown, defaulting to 1000 [ 243.450532][ T9290] netlink: 192 bytes leftover after parsing attributes in process `syz.0.982'. [ 244.469920][ T9309] x_tables: duplicate underflow at hook 4 [ 244.651922][ T9315] bridge1: entered allmulticast mode [ 245.015305][ T9324] netlink: 192 bytes leftover after parsing attributes in process `syz.3.993'. [ 245.228505][ T9326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.995'. [ 245.241073][ T9326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.995'. [ 245.711008][ T9339] x_tables: duplicate underflow at hook 4 [ 245.741689][ T9341] lo speed is unknown, defaulting to 1000 [ 245.759630][ T9341] lo speed is unknown, defaulting to 1000 [ 245.910871][ T9349] x_tables: duplicate underflow at hook 4 [ 245.957835][ T9350] lo speed is unknown, defaulting to 1000 [ 245.973823][ T9350] lo speed is unknown, defaulting to 1000 [ 246.466397][ T9355] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1004'. [ 246.659006][ T9362] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1003'. [ 246.955841][ T9370] netlink: 'syz.1.1008': attribute type 1 has an invalid length. [ 246.990172][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1008'. [ 247.153377][ T9374] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1008'. [ 247.172067][ T9372] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 248.040723][ T9386] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 248.069126][ T9385] x_tables: duplicate underflow at hook 4 [ 248.941416][ T9408] lo speed is unknown, defaulting to 1000 [ 248.950553][ T9408] lo speed is unknown, defaulting to 1000 [ 248.997917][ T9411] Bluetooth: MGMT ver 1.23 [ 249.109558][ T9411] geneve2: entered promiscuous mode [ 249.178701][ T5845] Bluetooth: hci0: command tx timeout [ 249.192486][ T9411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1023'. [ 249.259240][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 249.281515][ T9416] x_tables: duplicate underflow at hook 4 [ 249.863619][ T9430] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 249.932157][ T9408] siw: device registration error -23 [ 249.974580][ T9433] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1029'. [ 250.465221][ T9447] x_tables: duplicate underflow at hook 4 [ 250.552624][ T9448] lo speed is unknown, defaulting to 1000 [ 250.625084][ T9448] lo speed is unknown, defaulting to 1000 [ 250.664273][ T9453] x_tables: duplicate underflow at hook 4 [ 250.907786][ T9465] x_tables: duplicate underflow at hook 4 [ 251.085417][ T9469] lo speed is unknown, defaulting to 1000 [ 251.094829][ T9469] lo speed is unknown, defaulting to 1000 [ 251.461525][ T9476] netlink: 'syz.4.1044': attribute type 7 has an invalid length. [ 251.485204][ T9481] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1045'. [ 251.593034][ T9484] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 251.851206][ T9489] x_tables: duplicate underflow at hook 4 [ 251.901008][ T5156] Bluetooth: hci0: command tx timeout [ 252.297590][ T9497] netlink: 'syz.4.1052': attribute type 1 has an invalid length. [ 252.340379][ T9499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1053'. [ 252.365485][ T9497] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1052'. [ 252.423733][ T9499] 8021q: adding VLAN 0 to HW filter on device bond3 [ 252.503701][ T9505] bond3: (slave veth7): Enslaving as an active interface with an up link [ 252.560896][ T9506] bond0: entered promiscuous mode [ 252.584229][ T9506] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 252.612441][ T9506] bond0: left promiscuous mode [ 252.746235][ T9510] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1056'. [ 252.883553][ T9517] x_tables: ip_tables: ah match: only valid for protocol 51 [ 252.967737][ T9518] lo speed is unknown, defaulting to 1000 [ 253.033655][ T9518] lo speed is unknown, defaulting to 1000 [ 253.188709][ T9525] Cannot find del_set index 0 as target [ 253.234069][ T9527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1061'. [ 253.342387][ T9530] vlan0: entered promiscuous mode [ 253.347719][ T9530] vlan0: entered allmulticast mode [ 253.354806][ T9530] hsr_slave_1: entered allmulticast mode [ 253.459500][ T9533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1062'. [ 253.955175][ T9543] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1067'. [ 254.048303][ T9541] lo speed is unknown, defaulting to 1000 [ 254.063616][ T9545] x_tables: duplicate underflow at hook 4 [ 254.075879][ T9541] lo speed is unknown, defaulting to 1000 [ 254.246021][ T9550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1069'. [ 254.387406][ T9550] 8021q: adding VLAN 0 to HW filter on device bond4 [ 254.401569][ T9562] x_tables: ip_tables: ah match: only valid for protocol 51 [ 254.425076][ T9563] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 254.524296][ T9556] bond4: (slave veth9): Enslaving as an active interface with an up link [ 254.572692][ T9560] vlan0: entered allmulticast mode [ 254.586734][ T9560] bond4: (slave vlan0): Opening slave failed [ 254.818855][ T9567] nbd2: detected capacity change from 0 to 63 [ 254.827002][ T9567] block nbd2: NBD_DISCONNECT [ 254.833258][ T9567] block nbd2: Disconnected due to user request. [ 254.858917][ T9567] block nbd2: shutting down sockets [ 255.123570][ T9573] netlink: 'syz.2.1076': attribute type 33 has an invalid length. [ 255.158721][ T9573] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1076'. [ 255.186005][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1076'. [ 255.382479][ T9575] lo speed is unknown, defaulting to 1000 [ 255.430303][ T9583] x_tables: duplicate underflow at hook 4 [ 255.454591][ T9575] lo speed is unknown, defaulting to 1000 [ 255.967849][ T9592] lo speed is unknown, defaulting to 1000 [ 256.034260][ T9592] lo speed is unknown, defaulting to 1000 [ 256.045595][ T9602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1088'. [ 256.179014][ T9602] 8021q: adding VLAN 0 to HW filter on device bond3 [ 256.263277][ T9604] bond3: (slave veth11): Enslaving as an active interface with an up link [ 256.621297][ T9615] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1091'. [ 256.690790][ T9612] lo speed is unknown, defaulting to 1000 [ 256.746880][ T9612] lo speed is unknown, defaulting to 1000 [ 257.264693][ T9612] siw: device registration error -23 [ 257.465649][ T9626] lo speed is unknown, defaulting to 1000 [ 257.510677][ T9626] lo speed is unknown, defaulting to 1000 [ 257.752884][ T9632] x_tables: duplicate underflow at hook 4 [ 259.063990][ T9657] lo speed is unknown, defaulting to 1000 [ 259.119397][ T9659] lo speed is unknown, defaulting to 1000 [ 259.119967][ T9657] lo speed is unknown, defaulting to 1000 [ 259.220948][ T9659] lo speed is unknown, defaulting to 1000 [ 259.704574][ T9667] x_tables: duplicate underflow at hook 4 [ 259.938078][ T9669] lo speed is unknown, defaulting to 1000 [ 260.025560][ T9669] lo speed is unknown, defaulting to 1000 [ 260.544511][ T9669] siw: device registration error -23 [ 261.043854][ T9693] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1114'. [ 261.699982][ T9710] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 262.381459][ T9718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1124'. [ 262.517718][ T9718] 8021q: adding VLAN 0 to HW filter on device bond5 [ 262.680784][ T9722] bond5: (slave veth11): Enslaving as an active interface with an up link [ 262.827966][ T9718] vlan0: entered allmulticast mode [ 262.846397][ T9718] bond5: (slave vlan0): Opening slave failed [ 263.442623][ T9739] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 263.458060][ T9736] x_tables: duplicate underflow at hook 4 [ 263.487536][ T9741] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1131'. [ 263.738739][ T5156] Bluetooth: hci0: command tx timeout [ 264.038885][ T9757] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 264.322374][ T9759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1137'. [ 264.365724][ T9759] 8021q: adding VLAN 0 to HW filter on device bond4 [ 264.410482][ T9759] bond4: (slave veth13): Enslaving as an active interface with an up link [ 264.492268][ T9763] netlink: 'syz.1.1136': attribute type 1 has an invalid length. [ 264.541249][ T9763] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1136'. [ 264.626186][ T9769] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 264.791611][ T9769] wg1: entered promiscuous mode [ 264.796708][ T9769] wg1: entered allmulticast mode [ 265.171350][ T9782] Cannot find del_set index 0 as target [ 265.705691][ T9795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1149'. [ 265.767039][ T9795] 8021q: adding VLAN 0 to HW filter on device bond6 [ 265.964272][ T9799] bond6: (slave veth13): Enslaving as an active interface with an up link [ 266.024441][ T9803] vlan0: entered allmulticast mode [ 266.040829][ T9803] bond6: (slave vlan0): Opening slave failed [ 266.060134][ T5156] Bluetooth: hci0: command tx timeout [ 266.095158][ T9801] bond0: entered promiscuous mode [ 266.110547][ T9801] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 266.171178][ T9801] bond0: left promiscuous mode [ 266.431898][ T9809] lo speed is unknown, defaulting to 1000 [ 266.483276][ T9809] lo speed is unknown, defaulting to 1000 [ 266.660258][ T9818] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1157'. [ 267.755919][ T9842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1165'. [ 267.891515][ T9842] 8021q: adding VLAN 0 to HW filter on device bond4 [ 268.077314][ T9847] bond4: (slave veth11): Enslaving as an active interface with an up link [ 268.291862][ T9849] lo speed is unknown, defaulting to 1000 [ 268.323496][ T9849] lo speed is unknown, defaulting to 1000 [ 268.590625][ T9857] lo speed is unknown, defaulting to 1000 [ 268.629996][ T9857] lo speed is unknown, defaulting to 1000 [ 269.070325][ T9873] nbd4: detected capacity change from 0 to 63 [ 269.084112][ T9877] block nbd4: NBD_DISCONNECT [ 269.112647][ T9877] block nbd4: Disconnected due to user request. [ 269.148824][ T9877] block nbd4: shutting down sockets [ 269.316230][ T9882] x_tables: ip_tables: ah match: only valid for protocol 51 [ 270.006081][ T9894] x_tables: duplicate underflow at hook 4 [ 270.260309][ T9896] lo speed is unknown, defaulting to 1000 [ 270.300049][ T9896] lo speed is unknown, defaulting to 1000 [ 270.515148][ T9906] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 271.659470][ T9928] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1201'. [ 271.830024][ T9932] x_tables: duplicate underflow at hook 4 [ 271.919173][ T9937] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1192'. [ 272.034096][ T9947] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1198'. [ 272.052713][ T9938] lo speed is unknown, defaulting to 1000 [ 272.081132][ T9938] lo speed is unknown, defaulting to 1000 [ 272.541617][ T5156] Bluetooth: hci0: command tx timeout [ 272.574360][ T9963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1204'. [ 272.625966][ T9963] 8021q: adding VLAN 0 to HW filter on device bond3 [ 272.711191][ T9965] bond3: (slave veth11): Enslaving as an active interface with an up link [ 272.746054][ T9963] vlan0: entered allmulticast mode [ 272.766149][ T9963] bond3: (slave vlan0): Opening slave failed [ 273.039423][ T9969] x_tables: duplicate underflow at hook 4 [ 273.361494][ T9976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1207'. [ 273.420959][ T9976] 8021q: adding VLAN 0 to HW filter on device bond5 [ 273.482931][ T9985] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1219'. [ 273.566847][ T9982] bond5: (slave veth15): Enslaving as an active interface with an up link [ 273.767175][ T9993] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1223'. [ 273.794495][ T9994] netlink: 'syz.2.1211': attribute type 1 has an invalid length. [ 273.812601][ T9994] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1211'. [ 274.095675][ T9998] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1213'. [ 274.592000][T10015] lo speed is unknown, defaulting to 1000 [ 274.637843][T10015] lo speed is unknown, defaulting to 1000 [ 274.658423][T10016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1216'. [ 274.986168][T10019] netlink: 'syz.4.1217': attribute type 1 has an invalid length. [ 275.009014][T10005] x_tables: ip_tables: ah match: only valid for protocol 51 [ 275.138982][T10019] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1217'. [ 275.328245][T10009] mpoa:mpoad_close: () going down [ 277.822228][T10076] netlink: 'syz.2.1236': attribute type 1 has an invalid length. [ 277.845501][T10076] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1236'. [ 277.920235][T10078] lo speed is unknown, defaulting to 1000 [ 277.963372][T10078] lo speed is unknown, defaulting to 1000 [ 278.302945][T10083] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1239'. [ 278.570718][T10089] x_tables: ip_tables: ah match: only valid for protocol 51 [ 278.602555][T10090] lo speed is unknown, defaulting to 1000 [ 278.638016][T10090] lo speed is unknown, defaulting to 1000 [ 278.937295][T10106] lo speed is unknown, defaulting to 1000 [ 278.959114][T10106] lo speed is unknown, defaulting to 1000 [ 279.388866][T10111] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1258'. [ 279.510025][T10113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.586307][T10113] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1248'. [ 279.982252][T10126] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1252'. [ 280.152624][T10129] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1252'. [ 280.304563][T10136] netlink: 'syz.3.1255': attribute type 1 has an invalid length. [ 280.317270][T10136] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1255'. [ 280.617678][T10140] x_tables: ip_tables: ah match: only valid for protocol 51 [ 280.829389][T10149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1261'. [ 280.850193][T10147] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1260'. [ 280.924226][T10149] 8021q: adding VLAN 0 to HW filter on device bond5 [ 280.984199][T10153] bond5: (slave veth13): Enslaving as an active interface with an up link [ 281.300112][T10161] x_tables: duplicate underflow at hook 4 [ 281.481688][T10165] lo speed is unknown, defaulting to 1000 [ 281.511098][T10165] lo speed is unknown, defaulting to 1000 [ 281.611420][T10174] lo speed is unknown, defaulting to 1000 [ 281.680307][T10174] lo speed is unknown, defaulting to 1000 [ 284.594479][T10184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1280'. [ 284.613761][T10183] x_tables: ip_tables: ah match: only valid for protocol 51 [ 284.640175][T10184] 8021q: adding VLAN 0 to HW filter on device bond5 [ 284.734553][T10191] bond5: (slave veth11): Enslaving as an active interface with an up link [ 284.764578][T10195] netlink: 'syz.3.1270': attribute type 1 has an invalid length. [ 284.776150][T10184] vlan0: entered allmulticast mode [ 284.793390][T10184] bond5: (slave vlan0): Opening slave failed [ 284.802912][T10195] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1270'. [ 285.108429][T10200] lo speed is unknown, defaulting to 1000 [ 285.196365][T10200] lo speed is unknown, defaulting to 1000 [ 285.196752][T10206] lo speed is unknown, defaulting to 1000 [ 285.325871][T10206] lo speed is unknown, defaulting to 1000 [ 285.766405][T10215] lo speed is unknown, defaulting to 1000 [ 285.814192][T10215] lo speed is unknown, defaulting to 1000 [ 285.832950][T10216] lo speed is unknown, defaulting to 1000 [ 285.894217][T10221] lo speed is unknown, defaulting to 1000 [ 285.903710][T10216] lo speed is unknown, defaulting to 1000 [ 285.967513][T10221] lo speed is unknown, defaulting to 1000 [ 286.683363][T10237] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1286'. [ 286.937234][T10242] netlink: 'syz.0.1287': attribute type 1 has an invalid length. [ 286.977283][T10241] x_tables: ip_tables: ah match: only valid for protocol 51 [ 286.994858][T10242] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1287'. [ 287.720464][T10272] x_tables: ip_tables: ah match: only valid for protocol 51 [ 288.434393][T10277] lo speed is unknown, defaulting to 1000 [ 288.443259][T10277] lo speed is unknown, defaulting to 1000 [ 288.479163][T10283] bond0: entered promiscuous mode [ 288.487957][T10283] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 288.503117][T10283] bond0: left promiscuous mode [ 288.545395][T10288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1305'. [ 288.783830][T10288] 8021q: adding VLAN 0 to HW filter on device bond4 [ 288.903619][T10290] vlan0: entered allmulticast mode [ 289.005659][T10284] lo speed is unknown, defaulting to 1000 [ 289.070620][T10284] lo speed is unknown, defaulting to 1000 [ 289.379462][T10312] x_tables: duplicate underflow at hook 4 [ 289.490707][T10302] lo speed is unknown, defaulting to 1000 [ 289.525203][T10302] lo speed is unknown, defaulting to 1000 [ 290.274265][T10314] Cannot find del_set index 0 as target [ 291.103090][T10340] lo speed is unknown, defaulting to 1000 [ 291.187206][T10340] lo speed is unknown, defaulting to 1000 [ 291.218906][T10343] x_tables: duplicate underflow at hook 4 [ 291.447193][T10349] bond0: entered promiscuous mode [ 291.471034][T10349] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 291.502587][T10349] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 291.529847][T10349] bond0: left promiscuous mode [ 291.536853][T10349] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 291.883669][T10356] lo speed is unknown, defaulting to 1000 [ 291.892761][T10356] lo speed is unknown, defaulting to 1000 [ 291.955107][T10355] lo speed is unknown, defaulting to 1000 [ 292.026225][T10355] lo speed is unknown, defaulting to 1000 [ 292.952089][T10366] Cannot find del_set index 0 as target [ 293.042885][T10374] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1329'. [ 293.259900][T10378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1332'. [ 293.448407][T10383] x_tables: duplicate underflow at hook 4 [ 293.593588][T10378] 8021q: adding VLAN 0 to HW filter on device bond6 [ 293.710254][T10379] bond6: (slave veth13): Enslaving as an active interface with an up link [ 293.755604][T10384] vlan0: entered allmulticast mode [ 293.773403][T10384] bond6: (slave vlan0): Opening slave failed [ 293.952902][T10390] lo speed is unknown, defaulting to 1000 [ 294.007011][T10390] lo speed is unknown, defaulting to 1000 [ 294.507592][T10400] lo speed is unknown, defaulting to 1000 [ 294.558029][T10400] lo speed is unknown, defaulting to 1000 [ 295.034694][T10409] lo speed is unknown, defaulting to 1000 [ 295.043193][T10409] lo speed is unknown, defaulting to 1000 [ 295.099188][T10414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1341'. [ 295.129200][T10414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1341'. [ 295.318101][T10419] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1343'. [ 295.621025][T10424] x_tables: duplicate underflow at hook 4 [ 295.772211][T10429] Cannot find del_set index 0 as target [ 296.115859][T10433] lo speed is unknown, defaulting to 1000 [ 296.140950][T10433] lo speed is unknown, defaulting to 1000 [ 296.324758][T10441] lo speed is unknown, defaulting to 1000 [ 296.345082][T10441] lo speed is unknown, defaulting to 1000 [ 296.563572][T10445] lo speed is unknown, defaulting to 1000 [ 296.627248][T10445] lo speed is unknown, defaulting to 1000 [ 297.659299][T10462] Cannot find del_set index 0 as target [ 297.753783][T10468] x_tables: duplicate underflow at hook 4 [ 298.007495][T10473] lo speed is unknown, defaulting to 1000 [ 298.117870][T10483] netlink: 'syz.4.1365': attribute type 39 has an invalid length. [ 298.139486][T10473] lo speed is unknown, defaulting to 1000 [ 298.237026][T10487] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1367'. [ 298.703604][T10494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1369'. [ 299.169003][T10493] geneve2: entered promiscuous mode [ 299.224675][ T49] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.238970][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.279625][ T49] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.442148][ T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.600392][T10503] lo speed is unknown, defaulting to 1000 [ 299.633811][T10503] lo speed is unknown, defaulting to 1000 [ 299.967158][T10513] x_tables: duplicate underflow at hook 4 [ 300.062834][T10516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1376'. [ 300.182981][T10516] 8021q: adding VLAN 0 to HW filter on device bond7 [ 300.222389][T10516] vlan0: entered allmulticast mode [ 300.229561][T10516] bond7: (slave vlan0): Opening slave failed [ 300.237030][T10522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1378'. [ 300.366880][T10519] bond7: (slave veth15): Enslaving as an active interface with an up link [ 300.412379][T10526] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1379'. [ 300.458478][T10522] 8021q: adding VLAN 0 to HW filter on device bond7 [ 300.498749][T10524] vlan0: entered allmulticast mode [ 300.505720][T10524] bond7: (slave vlan0): Opening slave failed [ 300.956462][T10543] lo speed is unknown, defaulting to 1000 [ 300.984008][T10543] lo speed is unknown, defaulting to 1000 [ 301.076239][T10547] x_tables: duplicate underflow at hook 4 [ 301.522140][T10551] lo speed is unknown, defaulting to 1000 [ 301.651230][T10551] lo speed is unknown, defaulting to 1000 [ 301.890806][T10565] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1393'. [ 302.180906][T10571] Cannot find del_set index 0 as target [ 302.861996][T10598] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1406'. [ 303.107082][T10602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1408'. [ 303.168968][T10602] 8021q: adding VLAN 0 to HW filter on device bond8 [ 303.307878][T10605] bond8: (slave veth17): Enslaving as an active interface with an up link [ 303.357781][T10602] vlan0: entered allmulticast mode [ 303.369249][T10602] bond8: (slave vlan0): Opening slave failed [ 303.446662][T10609] x_tables: duplicate underflow at hook 4 [ 303.711273][T10616] lo speed is unknown, defaulting to 1000 [ 303.731032][T10616] lo speed is unknown, defaulting to 1000 [ 303.953744][T10628] lo speed is unknown, defaulting to 1000 [ 304.104481][T10628] lo speed is unknown, defaulting to 1000 [ 304.703163][T10648] lo speed is unknown, defaulting to 1000 [ 304.722537][T10648] lo speed is unknown, defaulting to 1000 [ 304.788355][T10644] xt_CT: No such helper "snmp" [ 304.911316][T10651] x_tables: duplicate underflow at hook 4 [ 305.032387][T10654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1427'. [ 305.140581][T10654] 8021q: adding VLAN 0 to HW filter on device bond6 [ 305.235225][T10658] bond6: (slave veth15): Enslaving as an active interface with an up link [ 305.508014][T10675] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1433'. [ 305.982878][T10687] x_tables: duplicate underflow at hook 4 [ 306.320409][T10694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1441'. [ 306.354454][T10694] 8021q: adding VLAN 0 to HW filter on device bond9 [ 306.389511][T10694] bond9: (slave veth19): Enslaving as an active interface with an up link [ 306.416565][T10694] vlan0: entered allmulticast mode [ 306.454008][T10694] bond9: (slave vlan0): Opening slave failed [ 306.733063][T10705] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1446'. [ 307.195499][T10720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1452'. [ 307.316367][T10720] 8021q: adding VLAN 0 to HW filter on device bond10 [ 307.419382][T10724] bond10: (slave veth21): Enslaving as an active interface with an up link [ 307.456114][T10720] vlan0: entered allmulticast mode [ 307.469611][T10720] bond10: (slave vlan0): Opening slave failed [ 307.748089][T10744] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1459'. [ 308.792476][T10772] x_tables: duplicate underflow at hook 4 [ 308.863728][T10776] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1473'. [ 309.632346][T10801] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1484'. [ 309.672788][T10799] x_tables: duplicate underflow at hook 4 [ 310.208725][T10819] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 310.446472][T10824] netlink: 'syz.1.1491': attribute type 11 has an invalid length. [ 310.760722][T10830] x_tables: duplicate underflow at hook 4 [ 311.028477][T10840] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 311.093735][T10840] wg1: entered promiscuous mode [ 311.099790][T10840] wg1: entered allmulticast mode [ 311.243832][T10843] lo speed is unknown, defaulting to 1000 [ 311.256785][T10843] lo speed is unknown, defaulting to 1000 [ 311.755008][T10862] netlink: 'syz.4.1508': attribute type 2 has an invalid length. [ 311.775383][T10862] þ`Ì: entered promiscuous mode [ 311.808474][T10863] x_tables: duplicate underflow at hook 4 [ 311.859263][T10866] netlink: zone id is out of range [ 311.865076][T10866] netlink: zone id is out of range [ 311.870566][T10866] netlink: zone id is out of range [ 311.876669][T10866] netlink: zone id is out of range [ 311.903253][T10866] netlink: zone id is out of range [ 311.918829][T10866] netlink: zone id is out of range [ 311.938442][T10866] netlink: zone id is out of range [ 312.003178][T10872] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1513'. [ 312.021377][T10866] netlink: set zone limit has 4 unknown bytes [ 312.062106][T10869] lo speed is unknown, defaulting to 1000 [ 312.088301][T10869] lo speed is unknown, defaulting to 1000 [ 312.631436][T10886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1519'. [ 312.710611][T10895] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1531'. [ 312.774308][T10886] 8021q: adding VLAN 0 to HW filter on device bond7 [ 312.857743][T10891] bond7: (slave veth17): Enslaving as an active interface with an up link [ 313.166217][T10905] x_tables: duplicate underflow at hook 4 [ 313.537788][T10910] x_tables: duplicate underflow at hook 4 [ 313.627252][T10920] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1528'. [ 313.840564][T10932] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1534'. [ 313.860916][T10933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1535'. [ 313.983615][T10933] 8021q: adding VLAN 0 to HW filter on device bond8 [ 314.105284][T10937] bond8: (slave veth19): Enslaving as an active interface with an up link [ 314.820654][T10954] lo speed is unknown, defaulting to 1000 [ 314.871417][T10956] x_tables: duplicate underflow at hook 4 [ 314.871527][T10954] lo speed is unknown, defaulting to 1000 [ 314.961180][T10960] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1545'. [ 315.319453][T10968] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1548'. [ 315.536797][T10975] lo speed is unknown, defaulting to 1000 [ 315.561499][T10975] lo speed is unknown, defaulting to 1000 [ 316.174410][T10991] lo speed is unknown, defaulting to 1000 [ 316.197140][T10991] lo speed is unknown, defaulting to 1000 [ 316.473659][T10996] lo speed is unknown, defaulting to 1000 [ 316.512259][T10996] lo speed is unknown, defaulting to 1000 [ 316.567234][T10998] lo speed is unknown, defaulting to 1000 [ 316.668222][T10998] lo speed is unknown, defaulting to 1000 [ 316.961874][T11002] lo speed is unknown, defaulting to 1000 [ 317.016056][T10991] netlink: 'syz.0.1556': attribute type 4 has an invalid length. [ 317.157033][T11002] lo speed is unknown, defaulting to 1000 [ 318.470669][T11030] lo speed is unknown, defaulting to 1000 [ 318.519119][T11030] lo speed is unknown, defaulting to 1000 [ 318.884013][T11038] netlink: 'syz.0.1571': attribute type 39 has an invalid length. [ 319.226190][T11048] x_tables: duplicate underflow at hook 4 [ 319.398543][T11054] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1578'. [ 319.510318][T11056] lo speed is unknown, defaulting to 1000 [ 319.521390][T11056] lo speed is unknown, defaulting to 1000 [ 319.624143][T11060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1580'. [ 319.626689][T11058] lo speed is unknown, defaulting to 1000 [ 319.736017][T11060] 8021q: adding VLAN 0 to HW filter on device bond9 [ 319.746390][T11058] lo speed is unknown, defaulting to 1000 [ 319.816088][T11063] bond9: (slave veth21): Enslaving as an active interface with an up link [ 320.086508][T11065] lo speed is unknown, defaulting to 1000 [ 320.222352][T11065] lo speed is unknown, defaulting to 1000 [ 320.330651][T11070] lo speed is unknown, defaulting to 1000 [ 320.506949][T11070] lo speed is unknown, defaulting to 1000 [ 320.518355][T11082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1585'. [ 320.531140][T11076] lo speed is unknown, defaulting to 1000 [ 320.558663][T11073] lo speed is unknown, defaulting to 1000 [ 320.646818][T11082] 8021q: adding VLAN 0 to HW filter on device bond8 [ 320.663658][T11076] lo speed is unknown, defaulting to 1000 [ 320.715248][T11083] bond8: (slave veth15): Enslaving as an active interface with an up link [ 320.741758][T11087] vlan0: entered allmulticast mode [ 320.749187][T11087] bond8: (slave vlan0): Opening slave failed [ 320.793884][T11073] lo speed is unknown, defaulting to 1000 [ 321.075586][T11091] tipc: Cannot configure node identity twice [ 321.410715][T11095] netlink: 'syz.0.1588': attribute type 39 has an invalid length. [ 321.784943][T11104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1592'. [ 321.812704][T11104] netlink: 'syz.2.1592': attribute type 1 has an invalid length. [ 321.837274][T11104] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1592'. [ 321.910970][T11108] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 321.991604][T11111] lo speed is unknown, defaulting to 1000 [ 322.012663][T11111] lo speed is unknown, defaulting to 1000 [ 322.464936][T11111] netlink: 'syz.4.1594': attribute type 4 has an invalid length. [ 322.945263][T11129] lo speed is unknown, defaulting to 1000 [ 322.952878][T11134] Cannot find del_set index 0 as target [ 323.016561][T11129] lo speed is unknown, defaulting to 1000 [ 323.187752][T11139] lo speed is unknown, defaulting to 1000 [ 323.240179][T11139] lo speed is unknown, defaulting to 1000 [ 323.753045][T11143] lo speed is unknown, defaulting to 1000 [ 323.883395][T11164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1605'. [ 323.905028][T11143] lo speed is unknown, defaulting to 1000 [ 325.637562][T11211] Cannot find del_set index 0 as target [ 325.889962][T11218] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1613'. [ 328.431862][T11248] x_tables: ip_tables: ah match: only valid for protocol 51 [ 328.556285][T11245] lo speed is unknown, defaulting to 1000 [ 328.615283][T11245] lo speed is unknown, defaulting to 1000 [ 329.070456][T11257] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1629'. [ 329.127843][T11259] netlink: 'syz.0.1628': attribute type 11 has an invalid length. [ 329.459985][T11263] lo speed is unknown, defaulting to 1000 [ 329.485126][T11263] lo speed is unknown, defaulting to 1000 [ 329.954632][T11281] netlink: 'syz.0.1634': attribute type 303 has an invalid length. [ 330.221164][T11275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1634'. [ 330.824154][T11291] Cannot find del_set index 0 as target [ 331.034500][T11297] batadv0: entered promiscuous mode [ 331.926901][T11318] lo speed is unknown, defaulting to 1000 [ 331.940229][T11318] lo speed is unknown, defaulting to 1000 [ 331.974778][T11320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1646'. [ 332.094330][T11320] 8021q: adding VLAN 0 to HW filter on device bond6 [ 332.624586][T11338] x_tables: ip_tables: ah match: only valid for protocol 51 [ 333.160351][T11346] lo speed is unknown, defaulting to 1000 [ 333.168579][T11343] lo speed is unknown, defaulting to 1000 [ 333.263525][T11343] lo speed is unknown, defaulting to 1000 [ 333.272711][T11353] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1656'. [ 333.367643][T11346] lo speed is unknown, defaulting to 1000 [ 333.426659][T11352] lo speed is unknown, defaulting to 1000 [ 333.531182][T11352] lo speed is unknown, defaulting to 1000 [ 334.131676][T11346] netlink: 'syz.2.1654': attribute type 4 has an invalid length. [ 334.391785][T11376] wg1: left promiscuous mode [ 334.396455][T11376] wg1: left allmulticast mode [ 334.442748][T11376] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 334.748456][T11385] x_tables: ip_tables: ah match: only valid for protocol 51 [ 334.807207][T11379] lo speed is unknown, defaulting to 1000 [ 334.898115][T11379] lo speed is unknown, defaulting to 1000 [ 335.194538][T11397] netlink: 'syz.2.1668': attribute type 39 has an invalid length. [ 335.342507][T11402] x_tables: duplicate underflow at hook 4 [ 335.563156][T11389] lo speed is unknown, defaulting to 1000 [ 335.607738][T11389] lo speed is unknown, defaulting to 1000 [ 335.699703][T11403] lo speed is unknown, defaulting to 1000 [ 335.764359][T11403] lo speed is unknown, defaulting to 1000 [ 335.955111][T11409] nbd2: detected capacity change from 0 to 63 [ 335.980015][T11410] block nbd2: NBD_DISCONNECT [ 335.987188][T11410] block nbd2: Disconnected due to user request. [ 335.995425][T11410] block nbd2: shutting down sockets [ 336.297710][T11418] netlink: 'syz.2.1675': attribute type 12 has an invalid length. [ 336.318111][T11420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1676'. [ 336.482896][T11420] 8021q: adding VLAN 0 to HW filter on device bond11 [ 336.586685][T11424] vlan0: entered allmulticast mode [ 336.623218][T11429] Cannot find del_set index 0 as target [ 336.877306][T11437] geneve3: entered promiscuous mode [ 336.979353][T11443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1691'. [ 337.076060][ T64] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.087667][ T64] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.103229][ T64] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.173007][T11447] x_tables: duplicate underflow at hook 4 [ 337.627666][T11444] wg1: left promiscuous mode [ 337.633555][T11444] wg1: left allmulticast mode [ 337.768605][T11456] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1686'. [ 337.888018][T11444] hsr0: left promiscuous mode [ 337.905017][T11460] netlink: 'syz.1.1685': attribute type 7 has an invalid length. [ 338.100326][T11444] bridge1: left promiscuous mode [ 338.180198][T11444] vlan0: left promiscuous mode [ 338.190840][T11444] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 338.204445][T11444] vlan0: left allmulticast mode [ 338.211048][T11444] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 338.232203][T11444] vlan2: left allmulticast mode [ 338.240580][T11444] geneve2: left promiscuous mode [ 338.410537][ T64] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.436553][ T64] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.469275][ T64] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.522451][ T64] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.541935][ T64] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.581650][ T64] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.611514][ T64] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.662750][ T64] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.696497][ T64] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.763820][T11470] netlink: 'syz.0.1692': attribute type 12 has an invalid length. [ 338.797538][T11464] lo speed is unknown, defaulting to 1000 [ 338.852633][T11464] lo speed is unknown, defaulting to 1000 [ 338.870367][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1690'. [ 338.881282][T11475] lo speed is unknown, defaulting to 1000 [ 338.936295][T11473] lo speed is unknown, defaulting to 1000 [ 339.005385][T11475] lo speed is unknown, defaulting to 1000 [ 339.128780][T11473] lo speed is unknown, defaulting to 1000 [ 339.456440][T11483] Cannot find del_set index 0 as target [ 339.733113][T11490] x_tables: duplicate underflow at hook 4 [ 340.000736][ T977] IPVS: starting estimator thread 0... [ 340.119323][T11498] IPVS: using max 29 ests per chain, 69600 per kthread [ 340.205682][T11493] lo speed is unknown, defaulting to 1000 [ 340.224581][T11494] lo speed is unknown, defaulting to 1000 [ 340.237941][T11493] lo speed is unknown, defaulting to 1000 [ 340.281220][T11494] lo speed is unknown, defaulting to 1000 [ 340.786573][T11503] lo speed is unknown, defaulting to 1000 [ 340.870185][T11503] lo speed is unknown, defaulting to 1000 [ 341.236299][T11515] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1701'. [ 341.483511][T11505] netlink: 'syz.3.1699': attribute type 4 has an invalid length. [ 341.796607][T11519] macvtap1: entered promiscuous mode [ 341.828320][T11519] hsr0: entered promiscuous mode [ 341.844397][T11519] macvtap1: entered allmulticast mode [ 341.870742][T11519] hsr0: entered allmulticast mode [ 341.877490][T11519] hsr_slave_0: entered allmulticast mode [ 341.885432][T11519] hsr_slave_1: entered allmulticast mode [ 341.895061][T11519] hsr0: left allmulticast mode [ 341.900383][T11519] hsr_slave_0: left allmulticast mode [ 341.905833][T11519] hsr_slave_1: left allmulticast mode [ 341.913042][T11519] hsr0: left promiscuous mode [ 342.324238][T11539] x_tables: ip_tables: ah match: only valid for protocol 51 [ 342.572877][T11546] lo speed is unknown, defaulting to 1000 [ 342.616113][T11546] lo speed is unknown, defaulting to 1000 [ 342.634032][T11549] lo speed is unknown, defaulting to 1000 [ 342.723222][T11549] lo speed is unknown, defaulting to 1000 [ 343.262057][T11553] lo speed is unknown, defaulting to 1000 [ 343.454931][T11553] lo speed is unknown, defaulting to 1000 [ 344.105876][T11568] x_tables: duplicate underflow at hook 4 [ 344.357989][T11572] lo speed is unknown, defaulting to 1000 [ 344.609649][T11572] lo speed is unknown, defaulting to 1000 [ 344.625648][T11578] lo speed is unknown, defaulting to 1000 [ 344.691019][T11578] lo speed is unknown, defaulting to 1000 [ 345.364223][T11579] netlink: 'syz.2.1717': attribute type 4 has an invalid length. [ 345.384677][T11587] x_tables: ip_tables: ah match: only valid for protocol 51 [ 345.602976][T11592] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1720'. [ 345.715037][T11596] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 345.759759][T11590] lo speed is unknown, defaulting to 1000 [ 345.774518][T11590] lo speed is unknown, defaulting to 1000 [ 346.156543][T11606] lo speed is unknown, defaulting to 1000 [ 346.222402][T11606] lo speed is unknown, defaulting to 1000 [ 346.276244][T11611] lo speed is unknown, defaulting to 1000 [ 346.336510][T11611] lo speed is unknown, defaulting to 1000 [ 346.656635][T11615] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1726'. [ 346.947756][T11615] lo speed is unknown, defaulting to 1000 [ 347.041065][T11621] macvtap1: entered promiscuous mode [ 347.046543][T11621] hsr0: entered promiscuous mode [ 347.070327][T11621] macvtap1: entered allmulticast mode [ 347.108741][T11621] hsr0: entered allmulticast mode [ 347.115483][T11621] hsr_slave_0: entered allmulticast mode [ 347.126574][T11621] hsr_slave_1: entered allmulticast mode [ 347.135597][T11621] hsr0: left allmulticast mode [ 347.141705][T11621] hsr_slave_0: left allmulticast mode [ 347.147998][T11621] hsr_slave_1: left allmulticast mode [ 347.156723][T11621] hsr0: left promiscuous mode [ 347.198778][T11615] lo speed is unknown, defaulting to 1000 [ 347.618106][T11633] Cannot find del_set index 0 as target [ 347.641671][T11631] lo speed is unknown, defaulting to 1000 [ 347.668910][T11634] lo speed is unknown, defaulting to 1000 [ 347.672078][T11631] lo speed is unknown, defaulting to 1000 [ 347.747192][T11634] lo speed is unknown, defaulting to 1000 [ 348.117568][T11639] lo speed is unknown, defaulting to 1000 [ 348.242651][T11639] lo speed is unknown, defaulting to 1000 [ 348.830972][T11654] netlink: 'syz.1.1733': attribute type 303 has an invalid length. [ 348.898339][T11649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1733'. [ 348.913259][T11653] lo speed is unknown, defaulting to 1000 [ 349.142913][T11653] lo speed is unknown, defaulting to 1000 [ 349.732002][T11676] netlink: 'syz.0.1740': attribute type 39 has an invalid length. [ 349.777413][T11678] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 349.807446][T11682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1743'. [ 349.935248][T11687] batadv1: entered promiscuous mode [ 350.021276][T11653] netlink: 'syz.4.1734': attribute type 4 has an invalid length. [ 350.290485][T11697] lo speed is unknown, defaulting to 1000 [ 350.338257][T11697] lo speed is unknown, defaulting to 1000 [ 350.742880][T11710] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 351.724010][ T7116] hid (null): global environment stack underflow [ 351.831526][T11731] netlink: 'syz.1.1755': attribute type 39 has an invalid length. [ 351.978965][T11735] x_tables: duplicate underflow at hook 4 [ 352.483375][T11753] batadv0: entered promiscuous mode [ 352.836169][T11762] netlink: 'syz.2.1767': attribute type 10 has an invalid length. [ 352.846500][T11762] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1767'. [ 353.056821][T11770] lo speed is unknown, defaulting to 1000 [ 353.104134][T11770] lo speed is unknown, defaulting to 1000 [ 353.124873][T11768] lo speed is unknown, defaulting to 1000 [ 353.246791][T11768] lo speed is unknown, defaulting to 1000 [ 353.416293][ T7116] hid-generic 0005:0B57:9C16.0005: unknown main item tag 0x6 [ 353.438743][ T7116] hid-generic 0005:0B57:9C16.0005: global environment stack underflow [ 353.457599][ T7116] hid-generic 0005:0B57:9C16.0005: item 0 4 1 11 parsing failed [ 353.470067][T11778] lo speed is unknown, defaulting to 1000 [ 353.480530][ T7116] hid-generic 0005:0B57:9C16.0005: probe with driver hid-generic failed with error -22 [ 353.568013][T11778] lo speed is unknown, defaulting to 1000 [ 353.923414][T11788] x_tables: duplicate underflow at hook 4 [ 354.338254][T11779] netlink: 'syz.4.1769': attribute type 4 has an invalid length. [ 354.463529][ T7116] lo speed is unknown, defaulting to 1000 [ 354.473558][T11791] lo speed is unknown, defaulting to 1000 [ 354.496247][ T7116] syz2: Port: 1 Link ACTIVE [ 354.507224][T11809] netlink: 'syz.2.1774': attribute type 39 has an invalid length. [ 354.518150][T11791] lo speed is unknown, defaulting to 1000 [ 355.255200][T11830] x_tables: duplicate underflow at hook 4 [ 356.208434][T11848] x_tables: duplicate underflow at hook 4 [ 356.882788][T11861] pimreg: entered allmulticast mode [ 356.903131][T11866] vlan0: entered allmulticast mode [ 356.971906][T11867] netlink: 'syz.3.1789': attribute type 10 has an invalid length. [ 357.035412][T11867] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 357.084158][T11869] lo speed is unknown, defaulting to 1000 [ 357.110193][T11869] lo speed is unknown, defaulting to 1000 [ 357.271893][T11874] lo speed is unknown, defaulting to 1000 [ 357.297263][T11874] lo speed is unknown, defaulting to 1000 [ 357.654696][T11874] netlink: 'syz.0.1794': attribute type 4 has an invalid length. [ 358.754195][T11898] x_tables: duplicate underflow at hook 4 [ 358.994766][T11903] x_tables: duplicate underflow at hook 4 [ 359.132060][T11900] lo speed is unknown, defaulting to 1000 [ 359.161656][T11900] lo speed is unknown, defaulting to 1000 [ 359.671771][T11900] netlink: 'syz.4.1800': attribute type 4 has an invalid length. [ 359.837939][T11926] lo speed is unknown, defaulting to 1000 [ 359.859406][T11926] lo speed is unknown, defaulting to 1000 [ 360.385863][T11932] lo speed is unknown, defaulting to 1000 [ 360.474592][T11932] lo speed is unknown, defaulting to 1000 [ 360.683414][T11935] IPVS: Error connecting to the multicast addr [ 360.979641][T11941] x_tables: duplicate underflow at hook 4 [ 361.159562][T11945] x_tables: duplicate underflow at hook 4 [ 362.018895][T11967] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1820'. [ 362.120198][T11971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1820'. [ 362.152667][T11964] lo speed is unknown, defaulting to 1000 [ 362.255829][T11964] lo speed is unknown, defaulting to 1000 [ 362.308206][T11973] lo speed is unknown, defaulting to 1000 [ 362.384850][T11976] lo speed is unknown, defaulting to 1000 [ 362.428081][T11973] lo speed is unknown, defaulting to 1000 [ 362.534305][T11976] lo speed is unknown, defaulting to 1000 [ 362.740711][T11981] x_tables: duplicate underflow at hook 4 [ 363.094999][T11985] x_tables: duplicate underflow at hook 4 [ 363.576223][T11964] netlink: 'syz.0.1819': attribute type 4 has an invalid length. [ 363.998872][T11992] lo speed is unknown, defaulting to 1000 [ 364.055717][T11992] lo speed is unknown, defaulting to 1000 [ 364.230487][T12006] x_tables: duplicate underflow at hook 4 [ 364.718097][T12017] x_tables: duplicate underflow at hook 4 [ 364.786723][T12021] tap0: tun_chr_ioctl cmd 1074025677 [ 364.797602][T12020] x_tables: duplicate underflow at hook 4 [ 364.802935][T12021] tap0: linktype set to 0 [ 365.004599][T12029] lo speed is unknown, defaulting to 1000 [ 365.032154][T12029] lo speed is unknown, defaulting to 1000 [ 365.074665][T12032] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1839'. [ 365.401534][T12040] x_tables: duplicate underflow at hook 4 [ 365.464214][T12037] lo speed is unknown, defaulting to 1000 [ 365.543526][T12037] lo speed is unknown, defaulting to 1000 [ 366.370809][T12057] x_tables: duplicate underflow at hook 4 [ 366.412520][T12049] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1843'. [ 366.710708][T12065] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.770099][T12060] lo speed is unknown, defaulting to 1000 [ 366.814550][T12060] lo speed is unknown, defaulting to 1000 [ 366.829975][T12064] lo speed is unknown, defaulting to 1000 [ 366.906434][T12065] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 366.989494][T12064] lo speed is unknown, defaulting to 1000 [ 367.292696][T12075] netlink: 'syz.2.1852': attribute type 12 has an invalid length. [ 367.561398][T12092] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 367.585935][T12068] netlink: 'syz.0.1849': attribute type 4 has an invalid length. [ 367.631954][ T5974] lo speed is unknown, defaulting to 1000 [ 367.633192][T12091] lo speed is unknown, defaulting to 1000 [ 367.637959][ T5974] syz1: Port: 1 Link ACTIVE [ 367.717727][T12091] lo speed is unknown, defaulting to 1000 [ 368.206725][T12100] x_tables: duplicate underflow at hook 4 [ 368.324607][T12105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1859'. [ 368.365440][T12105] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1859'. [ 368.406549][T12108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 368.522753][T12103] 8021q: adding VLAN 0 to HW filter on device bond7 [ 368.547533][T12103] bridge0: port 2(bond7) entered blocking state [ 368.577051][T12103] bridge0: port 2(bond7) entered disabled state [ 368.599250][T12103] bond7: entered allmulticast mode [ 368.607796][T12103] bond7: entered promiscuous mode [ 368.691457][T12101] lo speed is unknown, defaulting to 1000 [ 368.710953][T12105] dummy0: entered promiscuous mode [ 368.718279][T12105] team0: entered promiscuous mode [ 368.727258][T12105] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 368.740613][T12105] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 368.754881][T12105] bridge0: port 3(hsr1) entered blocking state [ 368.764243][T12105] bridge0: port 3(hsr1) entered disabled state [ 368.789529][T12105] hsr1: entered allmulticast mode [ 368.794594][T12119] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1863'. [ 368.796183][T12105] dummy0: entered allmulticast mode [ 368.838577][T12105] team0: entered allmulticast mode [ 368.848217][T12105] hsr1: entered promiscuous mode [ 368.880905][T12101] lo speed is unknown, defaulting to 1000 [ 369.000073][T12119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1863'. [ 369.050386][T12124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1864'. [ 369.095524][T12124] 8021q: adding VLAN 0 to HW filter on device bond8 [ 369.226294][T12124] bond8: (slave veth19): Enslaving as an active interface with an up link [ 369.445933][T12136] : entered promiscuous mode [ 369.458299][T12136] trusted_key: syz.4.1867 sent an empty control message without MSG_MORE. [ 369.670389][T12140] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1869'. [ 369.771670][T12142] x_tables: duplicate underflow at hook 4 [ 369.785141][T12143] lo speed is unknown, defaulting to 1000 [ 369.822734][T12143] lo speed is unknown, defaulting to 1000 [ 369.963263][T12152] x_tables: duplicate underflow at hook 4 [ 370.000900][T12155] netlink: 'syz.0.1871': attribute type 10 has an invalid length. [ 370.166008][T12157] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 370.212588][T12160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1874'. [ 370.239958][T12160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1874'. [ 370.272259][T12160] netlink: 'syz.4.1874': attribute type 1 has an invalid length. [ 370.300749][T12160] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1874'. [ 370.349202][T12160] nbd: socks must be embedded in a SOCK_ITEM attr [ 370.399029][T12160] block nbd1: shutting down sockets [ 370.439617][T12170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1877'. [ 370.555962][T12170] 8021q: adding VLAN 0 to HW filter on device bond9 [ 370.650891][T12172] bond9: (slave veth17): Enslaving as an active interface with an up link [ 370.701091][T12170] vlan0: entered allmulticast mode [ 370.708745][T12170] bond9: (slave vlan0): Opening slave failed [ 370.763635][T12181] netlink: 'syz.4.1879': attribute type 16 has an invalid length. [ 370.772560][T12181] netlink: 'syz.4.1879': attribute type 17 has an invalid length. [ 370.790724][T12181] gretap0: left promiscuous mode [ 370.833418][T12181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.843774][T12181] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.863069][T12181] bridge0: port 3(hsr1) entered blocking state [ 370.871438][T12181] bridge0: port 3(hsr1) entered forwarding state [ 370.905860][T12181] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 371.360582][T12186] lo speed is unknown, defaulting to 1000 [ 371.405933][T12186] lo speed is unknown, defaulting to 1000 [ 371.469562][T12194] x_tables: duplicate underflow at hook 4 [ 371.669127][T12201] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 373.594283][T12243] lo speed is unknown, defaulting to 1000 [ 373.632292][T12243] lo speed is unknown, defaulting to 1000 [ 373.774272][T12255] x_tables: duplicate underflow at hook 4 [ 374.243688][T12264] __nla_validate_parse: 1 callbacks suppressed [ 374.243791][T12264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1900'. [ 374.287847][T12264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1900'. [ 374.654066][T12277] bond0: (slave wlan1): Releasing backup interface [ 374.737867][T12272] lo speed is unknown, defaulting to 1000 [ 374.746515][T12272] lo speed is unknown, defaulting to 1000 [ 375.026031][T12283] lo speed is unknown, defaulting to 1000 [ 375.092941][T12283] lo speed is unknown, defaulting to 1000 [ 375.536095][T12298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 376.161226][T12309] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1911'. [ 376.419114][T12311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1911'. [ 376.817544][T12325] x_tables: duplicate underflow at hook 4 [ 376.827991][T12327] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1916'. [ 376.970715][T12322] lo speed is unknown, defaulting to 1000 [ 377.011518][T12322] lo speed is unknown, defaulting to 1000 [ 377.018438][T12334] lo speed is unknown, defaulting to 1000 [ 377.068887][T12334] lo speed is unknown, defaulting to 1000 [ 378.312541][T12368] IPVS: Error connecting to the multicast addr [ 378.451164][T12377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1924'. [ 378.640868][T12384] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1926'. [ 378.811744][T12387] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1928'. [ 378.822942][T12387] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1928'. [ 379.005641][T12403] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1933'. [ 379.071069][T12400] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.437996][T12400] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.528357][T12400] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.588003][T12400] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.897002][T12415] lo speed is unknown, defaulting to 1000 [ 379.939786][T12415] lo speed is unknown, defaulting to 1000 [ 379.976490][ T1094] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.121545][ T7204] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.140792][T12426] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1937'. [ 380.177092][ T7204] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.256685][T12427] netlink: 'syz.0.1937': attribute type 10 has an invalid length. [ 380.318719][ T7204] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.478863][T12427] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 381.009903][T12440] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1940'. [ 381.147092][T12443] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1942'. [ 381.173980][T12439] lo speed is unknown, defaulting to 1000 [ 381.193443][T12439] lo speed is unknown, defaulting to 1000 [ 381.422306][T12449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1944'. [ 381.445430][T12449] macvtap1: entered promiscuous mode [ 381.468622][T12449] erspan0: entered promiscuous mode [ 381.474284][T12449] macvtap1: entered allmulticast mode [ 381.493650][T12449] erspan0: entered allmulticast mode [ 381.537187][T12454] x_tables: duplicate underflow at hook 4 [ 381.552794][T12449] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1944'. [ 381.654509][T12452] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1944'. [ 382.136579][T12468] lo speed is unknown, defaulting to 1000 [ 382.177764][T12467] lo speed is unknown, defaulting to 1000 [ 382.181002][T12468] lo speed is unknown, defaulting to 1000 [ 382.317172][T12467] lo speed is unknown, defaulting to 1000 [ 382.684947][T12476] lo speed is unknown, defaulting to 1000 [ 383.057819][T12476] lo speed is unknown, defaulting to 1000 [ 383.126870][T12493] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 383.957869][T12503] IPVS: Error connecting to the multicast addr [ 384.219919][T12511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1955'. [ 384.303739][T12513] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1956'. [ 384.409485][T12513] lo speed is unknown, defaulting to 1000 [ 384.435943][T12513] lo speed is unknown, defaulting to 1000 [ 385.045473][T12524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1960'. [ 385.128061][T12525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1960'. [ 385.167389][T12520] lo speed is unknown, defaulting to 1000 [ 385.360696][T12520] lo speed is unknown, defaulting to 1000 [ 386.066192][T12520] netlink: 'syz.2.1959': attribute type 4 has an invalid length. [ 386.411345][T12542] bond3: (slave veth5): Releasing backup interface [ 386.507487][T12542] bond4: (slave veth9): Releasing backup interface [ 386.547647][T12542] bond5: (slave veth11): Releasing backup interface [ 386.589403][T12542] bond6: (slave veth13): Releasing backup interface [ 386.616672][T12542] bond7: (slave veth15): Releasing backup interface [ 386.644110][T12542] bond8: (slave veth17): Releasing backup interface [ 386.672547][T12542] bond9: (slave veth19): Releasing backup interface [ 386.716073][T12542] bond10: (slave veth21): Releasing backup interface [ 386.827872][T12545] IPVS: Error connecting to the multicast addr [ 386.854270][T12550] netlink: 'syz.2.1968': attribute type 1 has an invalid length. [ 386.879283][T12550] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1968'. [ 386.903816][T12551] macvtap2: entered promiscuous mode [ 386.911773][T12551] vlan0: entered promiscuous mode [ 386.917932][T12551] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 386.930486][T12551] macvtap2: entered allmulticast mode [ 386.951710][T12551] vlan0: entered allmulticast mode [ 386.967875][T12551] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 386.999360][T12551] vlan0: left allmulticast mode [ 387.004547][T12551] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 387.041606][T12551] vlan0: left promiscuous mode [ 387.046836][T12551] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 388.043672][T12588] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1984'. [ 388.053066][T12588] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1984'. [ 388.093964][T12588] bridge0: entered promiscuous mode [ 388.121583][T12588] batadv_slave_1: entered promiscuous mode [ 388.161895][T12588] hsr2: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.316529][T12600] xt_hashlimit: size too large, truncated to 1048576 [ 388.317349][T12602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1985'. [ 388.335694][ T7116] [ 388.338161][ T7116] ============================================ [ 388.344572][ T7116] WARNING: possible recursive locking detected [ 388.350856][ T7116] 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 Not tainted [ 388.358091][ T7116] -------------------------------------------- [ 388.364464][ T7116] kworker/0:13/7116 is trying to acquire lock: [ 388.371176][ T7116] ffff88805b212f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 388.380355][ T7116] [ 388.380355][ T7116] but task is already holding lock: [ 388.387838][ T7116] ffff88807d458f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 388.397183][ T7116] [ 388.397183][ T7116] other info that might help us debug this: [ 388.405472][ T7116] Possible unsafe locking scenario: [ 388.405472][ T7116] [ 388.413027][ T7116] CPU0 [ 388.416418][ T7116] ---- [ 388.419721][ T7116] lock(&hsr->seqnr_lock); [ 388.424614][ T7116] lock(&hsr->seqnr_lock); [ 388.429232][ T7116] [ 388.429232][ T7116] *** DEADLOCK *** [ 388.429232][ T7116] [ 388.438011][ T7116] May be due to missing lock nesting notation [ 388.438011][ T7116] [ 388.446359][ T7116] 11 locks held by kworker/0:13/7116: [ 388.453598][ T7116] #0: ffff888030114948 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 388.465392][ T7116] #1: ffffc90003387bc0 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 388.480201][ T7116] #2: ffff88802811b538 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xde0 [ 388.491257][ T7116] #3: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x1de/0xd80 [ 388.501049][ T7116] #4: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x701/0x16a0 [ 388.510962][ T7116] #5: ffffffff8e13ee00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70 [ 388.521189][ T7116] #6: ffff88807d458f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 388.530778][ T7116] #7: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0x9e/0x2860 [ 388.540311][ T7116] #8: ffffffff8e13ee00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70 [ 388.550279][ T7116] #9: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x185/0x1840 [ 388.559625][ T7116] #10: ffffffff8e13ee00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70 [ 388.570306][ T7116] [ 388.570306][ T7116] stack backtrace: [ 388.576310][ T7116] CPU: 0 UID: 0 PID: 7116 Comm: kworker/0:13 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 388.576334][ T7116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 388.576346][ T7116] Workqueue: mld mld_ifc_work [ 388.576378][ T7116] Call Trace: [ 388.576387][ T7116] [ 388.576396][ T7116] dump_stack_lvl+0x189/0x250 [ 388.576426][ T7116] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.576453][ T7116] ? __pfx__printk+0x10/0x10 [ 388.576472][ T7116] ? print_lock_name+0xde/0x100 [ 388.576491][ T7116] print_deadlock_bug+0x28b/0x2a0 [ 388.576508][ T7116] validate_chain+0x1a3f/0x2140 [ 388.576527][ T7116] ? __lock_acquire+0xab9/0xd20 [ 388.576551][ T7116] ? unwind_next_frame+0xa5/0x2390 [ 388.576576][ T7116] ? rcu_is_watching+0x15/0xb0 [ 388.576602][ T7116] ? __kasan_check_byte+0x12/0x40 [ 388.576619][ T7116] ? unwind_next_frame+0xa5/0x2390 [ 388.576645][ T7116] __lock_acquire+0xab9/0xd20 [ 388.576671][ T7116] ? hsr_dev_xmit+0x19a/0x220 [ 388.576691][ T7116] lock_acquire+0x120/0x360 [ 388.576713][ T7116] ? hsr_dev_xmit+0x19a/0x220 [ 388.576735][ T7116] ? unwind_next_frame+0xa5/0x2390 [ 388.576771][ T7116] ? hsr_dev_xmit+0x19a/0x220 [ 388.576791][ T7116] _raw_spin_lock_bh+0x36/0x50 [ 388.576815][ T7116] ? hsr_dev_xmit+0x19a/0x220 [ 388.576835][ T7116] hsr_dev_xmit+0x19a/0x220 [ 388.576858][ T7116] dev_hard_start_xmit+0x2d4/0x830 [ 388.576891][ T7116] __dev_queue_xmit+0x1adf/0x3a70 [ 388.576921][ T7116] ? __dev_queue_xmit+0x27e/0x3a70 [ 388.576950][ T7116] ? __local_bh_enable_ip+0x12d/0x1c0 [ 388.576976][ T7116] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.577004][ T7116] ? __pfx___dev_queue_xmit+0x10/0x10 [ 388.577035][ T7116] ? do_raw_read_unlock+0x3d/0x80 [ 388.577073][ T7116] ? ebt_do_table+0x265b/0x2820 [ 388.577095][ T7116] ? __lock_acquire+0xab9/0xd20 [ 388.577131][ T7116] br_dev_queue_push_xmit+0x6c5/0x890 [ 388.577152][ T7116] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 388.577170][ T7116] ? NF_HOOK+0x9e/0x3c0 [ 388.577186][ T7116] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 388.577202][ T7116] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 388.577219][ T7116] NF_HOOK+0x31d/0x3c0 [ 388.577236][ T7116] ? NF_HOOK+0x9e/0x3c0 [ 388.577250][ T7116] ? __pfx_NF_HOOK+0x10/0x10 [ 388.577267][ T7116] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 388.577289][ T7116] br_forward_finish+0xd3/0x130 [ 388.577305][ T7116] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 388.577321][ T7116] ? __pfx_br_forward_finish+0x10/0x10 [ 388.577337][ T7116] ? __pfx_br_forward_finish+0x10/0x10 [ 388.577352][ T7116] NF_HOOK+0x31d/0x3c0 [ 388.577369][ T7116] ? NF_HOOK+0x9e/0x3c0 [ 388.577383][ T7116] ? __pfx_NF_HOOK+0x10/0x10 [ 388.577398][ T7116] ? br_multicast_count+0xf2/0xdc0 [ 388.577417][ T7116] ? __pfx_br_forward_finish+0x10/0x10 [ 388.577438][ T7116] __br_forward+0x41e/0x600 [ 388.577463][ T7116] ? __pfx_br_forward_finish+0x10/0x10 [ 388.577478][ T7116] ? maybe_deliver+0xc6/0x160 [ 388.577494][ T7116] ? __pfx___br_forward+0x10/0x10 [ 388.577512][ T7116] ? br_dev_xmit+0x185/0x1840 [ 388.577531][ T7116] br_dev_xmit+0x11b3/0x1840 [ 388.577552][ T7116] ? br_dev_xmit+0x185/0x1840 [ 388.577573][ T7116] ? __pfx_br_dev_xmit+0x10/0x10 [ 388.577592][ T7116] ? validate_xmit_xfrm+0xbf/0x1130 [ 388.577605][ T7116] ? __pfx_skb_network_protocol+0x10/0x10 [ 388.577629][ T7116] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 388.577655][ T7116] ? __pfx_passthru_features_check+0x10/0x10 [ 388.577683][ T7116] dev_hard_start_xmit+0x2d4/0x830 [ 388.577711][ T7116] __dev_queue_xmit+0x1adf/0x3a70 [ 388.577738][ T7116] ? __dev_queue_xmit+0x27e/0x3a70 [ 388.577790][ T7116] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 388.577813][ T7116] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 388.577829][ T7116] ? __pfx___dev_queue_xmit+0x10/0x10 [ 388.577852][ T7116] ? __copy_skb_header+0xa7/0x550 [ 388.577874][ T7116] ? __asan_memcpy+0x40/0x70 [ 388.577894][ T7116] ? __pskb_copy_fclone+0x9b5/0xfb0 [ 388.577917][ T7116] ? __asan_memcpy+0x40/0x70 [ 388.577937][ T7116] ? __pskb_copy_fclone+0x9b5/0xfb0 [ 388.577966][ T7116] ? hsr_addr_subst_dest+0x307/0xac0 [ 388.577989][ T7116] hsr_forward_skb+0x158b/0x2860 [ 388.578018][ T7116] ? hsr_forward_skb+0x9e/0x2860 [ 388.578041][ T7116] ? __pfx_hsr_forward_skb+0x10/0x10 [ 388.578062][ T7116] ? do_raw_spin_lock+0x121/0x290 [ 388.578079][ T7116] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 388.578098][ T7116] ? hsr_dev_xmit+0x19a/0x220 [ 388.578117][ T7116] hsr_dev_xmit+0x1a5/0x220 [ 388.578137][ T7116] dev_hard_start_xmit+0x2d4/0x830 [ 388.578166][ T7116] __dev_queue_xmit+0x1adf/0x3a70 [ 388.578193][ T7116] ? __dev_queue_xmit+0x27e/0x3a70 [ 388.578222][ T7116] ? __pfx___dev_queue_xmit+0x10/0x10 [ 388.578245][ T7116] ? read_seqbegin+0x122/0x250 [ 388.578260][ T7116] ? neigh_connected_output+0x1ea/0x460 [ 388.578277][ T7116] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.578299][ T7116] ? read_seqbegin+0x1ac/0x250 [ 388.578315][ T7116] ? __pfx_read_seqbegin+0x10/0x10 [ 388.578331][ T7116] ? eth_header+0x11b/0x200 [ 388.578351][ T7116] ? __asan_memcpy+0x40/0x70 [ 388.578382][ T7116] ip6_finish_output2+0x11fe/0x16a0 [ 388.578405][ T7116] ? ip6_finish_output2+0x701/0x16a0 [ 388.578429][ T7116] ? __pfx_ip6_finish_output2+0x10/0x10 [ 388.578450][ T7116] ? ip6_mtu+0x7d/0x3f0 [ 388.578468][ T7116] ? ip6_mtu+0x7d/0x3f0 [ 388.578487][ T7116] ip6_finish_output+0x234/0x7d0 [ 388.578510][ T7116] NF_HOOK+0x9e/0x380 [ 388.578540][ T7116] ? NF_HOOK+0x101/0x380 [ 388.578564][ T7116] ? __pfx_NF_HOOK+0x10/0x10 [ 388.578590][ T7116] ? __pfx_dst_output+0x10/0x10 [ 388.578613][ T7116] ? icmp6_dst_alloc+0x3a5/0x420 [ 388.578638][ T7116] ? icmp6_dst_alloc+0x3a5/0x420 [ 388.578661][ T7116] mld_sendpack+0x800/0xd80 [ 388.578703][ T7116] ? mld_sendpack+0x1de/0xd80 [ 388.578726][ T7116] ? __pfx_mld_sendpack+0x10/0x10 [ 388.578766][ T7116] mld_ifc_work+0x835/0xde0 [ 388.578789][ T7116] ? _raw_spin_unlock_irq+0x23/0x50 [ 388.578814][ T7116] ? process_scheduled_works+0x9ef/0x17b0 [ 388.578841][ T7116] process_scheduled_works+0xae1/0x17b0 [ 388.578881][ T7116] ? __pfx_process_scheduled_works+0x10/0x10 [ 388.578914][ T7116] worker_thread+0x8a0/0xda0 [ 388.578953][ T7116] kthread+0x70e/0x8a0 [ 388.578973][ T7116] ? __pfx_worker_thread+0x10/0x10 [ 388.578999][ T7116] ? __pfx_kthread+0x10/0x10 [ 388.579020][ T7116] ? _raw_spin_unlock_irq+0x23/0x50 [ 388.579043][ T7116] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.579068][ T7116] ? __pfx_kthread+0x10/0x10 [ 388.579087][ T7116] ret_from_fork+0x3fc/0x770 [ 388.579112][ T7116] ? __pfx_ret_from_fork+0x10/0x10 [ 388.579138][ T7116] ? __switch_to_asm+0x39/0x70 [ 388.579156][ T7116] ? __switch_to_asm+0x33/0x70 [ 388.579171][ T7116] ? __pfx_kthread+0x10/0x10 [ 388.579190][ T7116] ret_from_fork_asm+0x1a/0x30 [ 388.579215][ T7116] [ 389.383036][T12602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1985'. [ 389.451771][T12610] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1987'. [ 389.595870][T12603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1987'.