last executing test programs: 1.605050074s ago: executing program 3 (id=2441): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x0, 0x7, 0x1, 0x0, "041f5d9c796eadc072579b28bead2fc605179a4de6e873fb508624686ead83d52138a58b1438267e85eaa0f324dadd1c8a22734e0117b78abb1a87b57f3f1ef2f622427d27615330296732f213ce81ffbe5a12779e4e68960034be47b8c68933fbac2b686278cf9583a69a57aed84c6adceb9c72610638c85f57a5fc5d89a6d5ca0312a10d4a8eab1bb8bd10b09c4cda24e4c14d1e"}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x7e, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}}}]}]}], {0x14}}, 0x88}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x7c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}], @NL80211_ATTR_FRAME={0x48, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x7ff0}, @broadcast, @broadcast, @from_mac=@device_b, {0x1, 0x5}, @value=@ver_80211n={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x8001, @default, 0x103, @void, @void, @void, @val={0x4, 0x6, {0xfa, 0xfc, 0xfff, 0xd1}}, @val={0x6, 0x2, 0x4}, @val={0x5, 0x3, {0xd, 0x97, 0x1a}}, @val={0x25, 0x3, {0x1, 0x1e, 0x48}}, @void, @val={0x3c, 0x4, {0x1, 0x1, 0xac, 0x8}}, @void, @void, @void, @void}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10d0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r10) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r13, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x2}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}]}}]}, 0x50}}, 0x4008000) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042cbd7000ffdbdf250200000008006900de5301042cac8639d1ab8f5774bb7b0100feff07000c01ffffff7f08006100fe5b00000800610003005a00080040004000000005003e0005000000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 1.47066566s ago: executing program 0 (id=2443): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4000}]}}]}, 0x40}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x4e21}, {@in=@empty, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x8}, {}, {}, 0x0, 0x3502, 0xa}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd29, 0x70bd25, 0x70bd25, 0x70bd27, 0xcc}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x158}}, 0x1000) 1.340584101s ago: executing program 0 (id=2445): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) recvmsg$unix(r2, &(0x7f0000000380)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000140)=""/203, 0xcb}, {&(0x7f0000000240)=""/251, 0xfb}, {&(0x7f0000000040)=""/16, 0x10}, {&(0x7f0000000440)=""/139, 0x8b}], 0x4, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x8, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x1, 0x0, 0xf407}, 0xfffffffb, 0x0, 0x0, 0x4, 0x7, 0x0, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) 740.677376ms ago: executing program 4 (id=2462): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x800, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffff9, 0xfffffffa, 0x10, 0xffff}}]}]}}}]}, 0x6c}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x8100, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062019c000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x800, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffff9, 0xfffffffa, 0x10, 0xffff}}]}]}}}]}, 0x6c}}, 0x0) (async) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x8100, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062019c000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) 616.082392ms ago: executing program 3 (id=2465): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe8000000000000000000000000000bb"], 0xf8}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400"], 0x14}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r5, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r8, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x41, 0x5f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000024c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r10, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000027c0)={0x20, r9, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x20}}, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x7, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xc2}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x7c}}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000000000003d551f541bfcb0000000000000000000700fe12c3240240000000020c0001004e46515545554500a7eeaa7eb3e73c4589fafb95c64a45cff21ada9adcd2814bd0ddaa088432191e3ade3a2469cc9f73b55ce1e5d9d79208ce3d0192de400d7149acca4ac9da84fd3ca7fdafbfeef6fe234711528a08206d8175e0c8609faa2e1b01ee1d987b92c66f45d20e650c6ef2e908d27a5c6232fb8a0c40bb9a0ed72ef97b8e079511209ac64f298919817406c6af15d95a7fedcefc80fb7261ac9592"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24040800) 564.775109ms ago: executing program 4 (id=2466): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r1, 0x29, 0x4e, 0x0, 0x0) write$cgroup_subtree(r0, 0x0, 0x4d) 564.204453ms ago: executing program 2 (id=2467): r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) (async) read(r0, &(0x7f0000001080)=""/135, 0x87) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001140)={0x0, 0x6}, &(0x7f0000001180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001200)={r1, 0x1c, &(0x7f00000011c0)=[@in6={0xa, 0x4e20, 0x400, @mcast2, 0x967d}]}, &(0x7f0000001240)=0x10) writev(r0, &(0x7f0000002300)=[{&(0x7f0000001280)="4814139803ad1c28d2ee91bf9face9c6afa170f7b5272d52adc500b6853f0aaf0bfc271548bbed0c4fe8d5441fe1fac15976f5612c4aca1bee41b905f30ad116500be70e54a2800a0d40a464fc1260e1122c99c3a5c9cbdb5bfe", 0x5a}, {&(0x7f0000001300)="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", 0x1000}], 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000002340)) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000002380)={r2, 0x3, 0x0, 0x8001}, &(0x7f00000023c0)=0x10) (async) r5 = accept4$packet(r0, &(0x7f0000002400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002440)=0x14, 0x800) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000002480)={0x3, 0x4}, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000002500), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r7, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x30, r8, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0xfffffffa, @bearer=@l2={'eth', 0x3a, 'vcan0\x00'}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004080}, 0x5f3fc86ebc2f07a6) sendmsg$TIPC_CMD_SET_LINK_PRI(r7, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000026c0)={&(0x7f0000002640)={0x68, r8, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x6, @link='syz0\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x2004c080}, 0x8000) (async) connect$pppl2tp(r0, &(0x7f0000002740)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x2, 0x0, 0x1, 0x2}}, 0x26) (async) connect$pppl2tp(r0, &(0x7f0000002780)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x1, 0x4, 0x3, 0x1, {0xa, 0xf20, 0x7, @remote, 0x7}}}, 0x32) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000002800), r7) sendmsg$DEVLINK_CMD_SB_POOL_GET(r9, &(0x7f0000002a00)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002840)={0x150, r10, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9a}, {0x6, 0x11, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6}}]}, 0x150}}, 0x24004040) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000002a40)={r4, 0x6, 0x30}, &(0x7f0000002a80)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000002b00)={r11, 0x1c, &(0x7f0000002ac0)=[@in6={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}]}, &(0x7f0000002b40)=0x10) (async) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000002b80), &(0x7f0000002bc0)=0x4) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000002c00)={r2, 0xff}, 0x8) (async) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, &(0x7f0000003d40)={r0, 0x5, 0x6, 0x7}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003e40)={0x6, 0x11, &(0x7f0000002c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x10}, {}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2b77}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002d00)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000002d40)=""/4096, 0x41100, 0x20, '\x00', r6, 0x25, r12, 0x8, &(0x7f0000003d80)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000003dc0)={0x3, 0x10, 0x4, 0x1}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000003e00)=[{0x4, 0x1, 0x1, 0xc}, {0x1, 0x2, 0xa, 0x2}, {0x1, 0x4, 0xb, 0xa}, {0x5, 0x5, 0x6, 0xc}], 0x10, 0x5}, 0x94) bind$isdn(r0, &(0x7f0000003f00)={0x22, 0x6, 0x7, 0x2, 0xf0}, 0x6) (async) getsockopt$inet_mreqn(r12, 0x0, 0x24, &(0x7f0000003f40)={@loopback, @multicast1, 0x0}, &(0x7f0000003f80)=0xc) (async) r14 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000004000)=@o_path={&(0x7f0000003fc0)='./file0\x00', 0x0, 0x8, r7}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000004040)={r14, r13, 0x25, 0x10, @void}, 0x10) 562.007582ms ago: executing program 1 (id=2468): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = accept4(r0, &(0x7f0000000040)=@xdp, &(0x7f00000000c0)=0x80, 0x800) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x400, 0xc, 0x1, 0x5c, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0x9, 0x5, 0x0, 0x2, 0x7fffffff, 0x100, 0x1, 0x9, r2}, &(0x7f00000001c0)=0x20) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) syz_emit_ethernet(0x52, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"5e4cd36bb96bd2b9"}}}}}}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={r3, 0x7f, 0x3}, &(0x7f0000000240)=0x8) 546.405228ms ago: executing program 4 (id=2469): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000011002901000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800068004000500080000003e"], 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000006740)={0x0, 0x0, &(0x7f0000006700)={&(0x7f0000006680)={0x1c, r1, 0x809, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) 527.13692ms ago: executing program 3 (id=2470): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x7c, r1}) r3 = socket(0xa, 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006a00090126bd7000fddbdf250a0000000b0004000b008400090008000a020000000008000a0001004dd6568202005238fcfe753ed0000004000b00000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) 464.342296ms ago: executing program 1 (id=2471): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001c0000000000000064000000640000000300000003"], 0x0, 0x7f, 0x0, 0x1, 0x2}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000140001f4ffffff0000000000020000ff", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000340)=0x9, 0x4) r6 = socket(0x26, 0x1, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) 464.017026ms ago: executing program 2 (id=2472): clock_gettime(0x3, &(0x7f0000000540)) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x9) writev(r0, &(0x7f00000033c0)=[{&(0x7f0000000140)='M', 0x1}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0xa8}, 0x1, 0x0, 0x0, 0x44810}, 0x4004091) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x746}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x20300, 0x0, 0x0, 0x1}, 0x1c) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000040)) 461.995048ms ago: executing program 0 (id=2473): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) 427.007756ms ago: executing program 3 (id=2474): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYBLOB="1400010000000000f00000000000ffff81"], 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x74000000, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x30, 0x9, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x05G'}]}, @typed={0x8, 0x2, 0x0, 0x0, @u32}]}, 0x28}}, 0x0) getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0xd0, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0xbc, 0x1, [@m_sample={0xb8, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x8b, 0x6, "cb370072e16228b080583be9b90d5bda6171735dc4b651a5e678484c613ef8834063f1a588c388a88c2fb7318084cc93c7ea7812cc6d6e3a5566f53f994f3626dc9d953aa483fe476fe29cad180af36434546b4f6713af120685f3fd6a0275bbf75407a5d69046f7338f58b62f76df04fcd3d5ac87efdd012aea253ab0056db37fcdd74417b07d"}, {0xc, 0x7, {0x1}}, {0xc, 0x4, {0x3}}}}]}]}, 0xd0}}, 0x4000000) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x7800, 0x7, 0x81, 0xeb, {{0xc, 0x4, 0x2, 0x3, 0x30, 0x65, 0x0, 0x2, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0xd}, {[@end, @end, @generic={0x88, 0x8, "c11658da2f36"}, @generic={0x82, 0x10, "3f66ea328860856cd3e9646dc48e"}]}}}}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56d45, 0x70b923, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0x2, 0xb}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x1000c844) r7 = getuid() r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9}, 0x94) r11 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_ax25_SIOCADDRT(r11, 0x890b, &(0x7f0000004800)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x40, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r10, 0x0, 0x0}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private0, 0x4e24, 0x5, 0x4e23, 0x0, 0x2, 0x0, 0x80, 0x5c, r3, r7}, {0x1, 0x9, 0xeba, 0x1, 0x10, 0x8, 0x1, 0x2}, {0x5, 0xedb, 0x377, 0x8}, 0x7, 0x6e6bbf, 0x0, 0x1, 0x2, 0x2}, {{@in6=@empty, 0x4d5, 0x32}, 0xa, @in6=@local, 0x24e, 0x4, 0x1, 0x81, 0x8, 0x9800000, 0x1}}, 0xe8) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x44, 0x10, 0x50f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x5}, @IFLA_MACSEC_ENCODING_SA={0x5}]}}}]}, 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x58}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) 425.492829ms ago: executing program 1 (id=2475): r0 = socket(0x10, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xe, 0x0, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) recvfrom$unix(r0, &(0x7f0000000240)=""/244, 0xf4, 0x0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000740)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}]}]}, 0x70}}, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3ff}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd8}}, 0x0) (async) openat$cgroup_ro(r4, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) 385.044395ms ago: executing program 2 (id=2476): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x14, 0x8, 0x6, 0x801}, 0x14}}, 0x0) r4 = socket(0x10, 0x80000, 0xfffffffd) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000006ac0)=@newtfilter={0x34, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0xfff3, 0x9}, {}, {0x9, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGSKNS(r6, 0x894c, &(0x7f0000000000)=0x7) 280.540671ms ago: executing program 4 (id=2477): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r1 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@nl=@unspec, &(0x7f0000000240)=0x80, 0x80000) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000340)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00000002c0)={r3, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000002c0)={r3}, &(0x7f0000000300)=0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r4, 0x0) mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x0, 0x0, 0x0, 0x4}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="a800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="000000000000000088001a8020000a80050008000700000014000700fe88000000000000000000000000040104001c002800028024000180080003000500000008000800ef000000080018001000000008001d004000000004001c00300002802c0001800800140008000000080008000800000008000c000a000000080020000300000008001d002f00000004000700"], 0xa8}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) 279.784665ms ago: executing program 0 (id=2478): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x70bd25, 0x25dbdbfa, {0x2}}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f00000000c0)="00008828", 0x4, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r3, 0x1, 0x8, 0x6, @random="069c2d1ae2dc"}, 0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8001}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004081}, 0x40000) syz_emit_ethernet(0xd2, &(0x7f0000000100)={@random="8e7c66ce7fef", @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7d8ff", 0x9c, 0x3c, 0x0, @local, @mcast2, {[], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "abf9a9b08b40a1dc367c4dc078e27c26e9e42239289acc5aad0c6189fcc415e9", "4001d9e099f96e96b6fea41f00", "857c00661436f168db59cbbb93c5ba7cd13875e36fa3c3b8976b9dc0", {"7840a612fe1a814c065cd1094fa8ac89", "23a6cc482526163958fa4d52fc2d8623"}}}}}}}}, 0x0) 278.277348ms ago: executing program 1 (id=2479): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000280), 0x4) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a0bcb4f7aa0599b2563b50000085c000480580001280a0001006d617463680000000800d53c4427a6aafc246dc9b7ffffc7961eb6e816e2fa144f7707e5f7f6cbd498a6b1affd1a3a7027bb2a1535664f6c1793c8ab258d7f10080002400000000308000240000000010900020073797a32000000000900010073797a31000000001400000011000100"], 0xb0}}, 0x0) (async) socket$netlink(0x10, 0x3, 0xc) (async) socket(0x1e, 0x805, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0x4) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r3, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$key(0xf, 0x3, 0x2) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000021b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x0) (async) sendmsg$key(r7, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="021800000b0000000000000000000000030005000000000002000000e00000010000000000000000030012000000000002000000000000000000000000000000030006000000000002000000ffffffff00000000000000000f67b579649da49e8d98ba276ea3426a112a6cbcc37441d93c7e898e41b79c6c15741ff95af07ae740b728eb2ef326b04af9c5d6a2dc4f694c72a39c884210a57e863228529035cf329cb50e1da0d61b227a6001b3c71fcac2b8e3f3775bee3e076b824255c005a050fd0a5762530b2bb1a25646fd97843223493334ddaabaa8f7e0520ae0a57355d5e9a9881880fbc1dc7eb6617e270cee3a577639768d1ba2d369f9d49b34ce3c8ef71dc9ed71412e41ca6849689967a6c42b269c8f0cf3aa255440f155896cbf95ae92722abbc75d1f0f5c97c36a1d0926cf6b753ff68c4b7fb24db6ac0221180f5c317377fa6f531ef7879b8f713f4ba3079fae6e873fc0034f2c62e67a3a5457a7a0181b845d24df2367051c55b042d999458b724d4f35d9ec3e0b04cb2e4ccc24c94d4e3ebb6e018c219dba1f153bb3282612364732ec9ece5cda06461d80f3ae3eeb"], 0x58}}, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_GETFLAGS(r9, 0x80086601, &(0x7f0000000200)) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000001000000000400000241000000030013"], 0x2c}}, 0x0) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r6) (async) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r12, 0x6, 0x1b, 0x0, &(0x7f0000000240)) (async) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="100027bd7000ffdbdf2502000000080008000400000014000c00fe880000000000a616c01211b15f9801"], 0x30}, 0x1, 0x0, 0x0, 0x4c084}, 0x10) 227.055708ms ago: executing program 2 (id=2480): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x100000000}, {0x1, 0x0, 0x80}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@multicast1, 0x800000, 0x3}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf}, {{@in6=@local, 0x4d4, 0x6c}, 0x0, @in=@multicast1, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0xa, @in6=@private1, 0x0, 0x1, 0x0, 0x0, 0x1}]}]}, 0x23c}}, 0x0) 198.16821ms ago: executing program 1 (id=2481): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r0, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000024c0)=0x80) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000240)={0x7, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100020e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) getsockname(r0, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000024c0)=0x80) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r3, &(0x7f0000000240)={0x7, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100020e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) (async) 140.719339ms ago: executing program 4 (id=2482): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048880}, 0x44000) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'nr0\x00', 0x1}) 140.218807ms ago: executing program 3 (id=2483): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="940000002b000b00000000000208000005000000040003007c0001"], 0x94}}, 0xc00) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newsa={0xf0, 0x18, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {@in6=@loopback, 0x4d4, 0x32}, @in=@dev, {}, {0x0, 0x200000004, 0x0, 0x100000}, {}, 0x1, 0x0, 0x2, 0x4}}, 0xf0}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) splice(r2, 0x0, r4, 0x0, 0xfffffffffffffff1, 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x90000000}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0xa0, 0x0, 0xc20, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10, 0x13}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "68e02f28c6"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "313e40ed628cdc06dce13cf60c"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "df5ecf5929a2b4da8ea4ebba730e"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "e9d7a79c60c2669d"}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4008000}, 0x800) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 139.510017ms ago: executing program 2 (id=2484): r0 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/75, 0x4b}, {&(0x7f0000000140)=""/134, 0x86}, {&(0x7f0000000200)=""/222, 0xde}, {&(0x7f0000000300)=""/253, 0xfd}], 0x4, &(0x7f0000000500)=""/144, 0x90}, 0x1}], 0x1, 0x40002002, &(0x7f00000005c0)={r1, r2+60000000}) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) 67.744678ms ago: executing program 0 (id=2485): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000040)={{0x2, 0x4e20, @multicast1}, {0xf0c5701234cda043, @remote}, 0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'vlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="d700000001000000bfa30000000000000703000030feffff720af0fff8ffffff71a4f0ff000000002d040000000000003d400300000000006504000001ed000079110000000000006c440000000000007a0ab0fe000000007b13000000000000c500f9ffffff00009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e6b3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7a29aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e17fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4314f244a94aa8e98b0b263f0083bf93f05beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc06000000000000008fe26e37037f27f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e05000000d03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba77f35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf2871ed2aa2a05e319374511c8b0bf1b69d2b3782b3f481c314e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0babcb0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b22589f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b24464e0ff504b87c90697ec2a82bbfd1c31713190d3e6e502c434909d6ba06cd0361a0fd90552272f24519ea9938413947edd3a0a7aa780c1dcdddf13b46ca94f37c89664c9cc1857d64ca371fa1b6131"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x50}, 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) accept4$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000100)=0x10, 0x80400) 59.483443ms ago: executing program 4 (id=2486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000000)=0x4, 0x4) (async) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x800000, 0x11, r1, 0x100000000) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x19, 0x4c}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x49, 0x10, &(0x7f0000000000), 0x3}, 0x28) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r3, 0x29, 0x1d, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) (async) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000070a0104000000000000000002000000a425fbf94c1c3256000000000900010073797ae22c18ccdc56912c71d7973000000000"], 0x2c}}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000900000000000000001103000000000000000400090000000000000000000600000000000008020000000000"], 0x0, 0x42, 0x0, 0x1, 0x7}, 0x28) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NL80211_CMD_SET_BEACON(r7, 0x0, 0x0) 58.862978ms ago: executing program 3 (id=2487): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20020400) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, 0x0, 0x3c) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000000c0)={'raw\x00', 0x2, [{}, {}]}, 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x58840}, 0x0) 8.468291ms ago: executing program 1 (id=2488): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x5, 0x0}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x60, 0x4, 0xfd}, {}, {}, {0x6, 0x3}]}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'ip6gretap0\x00', 0x800}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000780)=@get={0x1, &(0x7f0000000700)=""/67, 0xfff}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000580)=""/220, &(0x7f0000000680)=0xdc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073119900000000008510000002000000850000000000000095000810000000009500a5050000a87e"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f00000006c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0xc, &(0x7f0000000540)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r5 = socket(0xa, 0x1, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x7a, 0x0, &(0x7f0000000180)=0x57) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x6, 0x7, 0x0, 0x2, 0x11, 0xcf51, 0x3}, &(0x7f0000000180)=0x9c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f00000001c0)={r6, 0x6f, "8230186ec84cf1bf73e81f0db58b2cad6ac12e5e2bc06ccec0302cbeecfb0bc1c7d44b016a3acb8fc65c619a9f658150b2a62b68512eb3ff7cfd4931afda11ad0cc7956b87eaa807837b85748501916d39694763780774eed7e3455b9da5c8f342088eb2a4cd84f34a62afbbdaa872"}, &(0x7f0000000300)=0x77) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000540)) socket$key(0xf, 0x3, 0x2) 8.203528ms ago: executing program 2 (id=2489): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 0s ago: executing program 0 (id=2490): socket$inet6(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r3) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x38, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xf}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040014}, 0x20000000) getsockopt$sock_int(r0, 0x1, 0x4a, 0x0, &(0x7f00000001c0)) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x11, &(0x7f0000000140)={&(0x7f00000002c0)=@flushpolicy={0x38, 0x12, 0xcdf625c385892729, 0x0, 0x0, "", [@address_filter={0x28, 0x1a, {@in=@multicast1, @in6=@dev, 0x0, 0xef}}]}, 0x38}}, 0x0) setsockopt$llc_int(r5, 0x10c, 0x7, &(0x7f00000001c0), 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x4c, &(0x7f000002eff0)={0x20000000000003da, &(0x7f0000000000)=[{}]}, 0x10) writev(r10, &(0x7f0000006840)=[{&(0x7f00000053c0)='+', 0xfdef}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001400090500000000fddbdf25020100cb", @ANYRES32=r9, @ANYBLOB="080004006401010108000a000400000008000200ac1e0001080002006401010208000900030100007a524a43abcf05251d555d461097430331346b7f5a8f6286cf121f83869c8844d9334215040000000000000056ee016ea352a92c3f50f5"], 0x40}}, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000e19351b87fa2f4a90000000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r11}, &(0x7f0000000280), &(0x7f00000000c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r11}, 0x4) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r12, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x5f787c6e6fac81a5}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@ipv4_newnexthop={0x6c, 0x68, 0x801c65999077ac1e, 0x70bd27, 0x25dfdbff, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP_TYPE={0x6}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_TABLE={0x8, 0x3, 0x8bf}}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NHA_FDB={0x4}, @NHA_GROUP_TYPE={0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.759449][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.777121][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.784238][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.810286][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.859383][ T5862] hsr_slave_0: entered promiscuous mode [ 72.865935][ T5862] hsr_slave_1: entered promiscuous mode [ 72.872057][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 72.878555][ T5862] Cannot create hsr debugfs directory [ 72.886737][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.893760][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.919824][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.932285][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.939323][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.965678][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.029186][ T5860] hsr_slave_0: entered promiscuous mode [ 73.035762][ T5860] hsr_slave_1: entered promiscuous mode [ 73.041689][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 73.047584][ T5860] Cannot create hsr debugfs directory [ 73.063352][ T5182] Bluetooth: hci1: command tx timeout [ 73.081491][ T5858] hsr_slave_0: entered promiscuous mode [ 73.088363][ T5858] hsr_slave_1: entered promiscuous mode [ 73.094285][ T5858] debugfs: 'hsr0' already exists in 'hsr' [ 73.100030][ T5858] Cannot create hsr debugfs directory [ 73.143621][ T51] Bluetooth: hci3: command tx timeout [ 73.149236][ T5861] Bluetooth: hci0: command tx timeout [ 73.154951][ T5867] Bluetooth: hci4: command tx timeout [ 73.156795][ T5182] Bluetooth: hci2: command tx timeout [ 73.170539][ T5854] hsr_slave_0: entered promiscuous mode [ 73.176779][ T5854] hsr_slave_1: entered promiscuous mode [ 73.182644][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 73.188591][ T5854] Cannot create hsr debugfs directory [ 73.385062][ T5869] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.399086][ T5869] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.426486][ T5869] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.447845][ T5869] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.485522][ T5862] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.508686][ T5862] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.517771][ T5862] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.528774][ T5862] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.569575][ T5858] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.579056][ T5858] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.598043][ T5858] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.616231][ T5858] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.659899][ T5854] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.681228][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.689547][ T5854] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.713385][ T5854] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.722072][ T5854] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.755417][ T5860] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.766135][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.791127][ T5860] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.807685][ T5860] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.817274][ T5860] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.827959][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.835098][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.864289][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.872578][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.879740][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.941847][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.990688][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.031308][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.040943][ T4525] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.048059][ T4525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.066381][ T4525] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.073577][ T4525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.088064][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.104284][ T4525] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.111474][ T4525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.141773][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.148971][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.167154][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.189807][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.196954][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.220923][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.228135][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.256717][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.272911][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.299190][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.319238][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.326418][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.369861][ T4525] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.377118][ T4525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.431629][ T5854] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.465517][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.569228][ T5869] veth0_vlan: entered promiscuous mode [ 74.584814][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.625182][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.644576][ T5869] veth1_vlan: entered promiscuous mode [ 74.725196][ T5869] veth0_macvtap: entered promiscuous mode [ 74.751343][ T5858] veth0_vlan: entered promiscuous mode [ 74.782795][ T5869] veth1_macvtap: entered promiscuous mode [ 74.810819][ T5858] veth1_vlan: entered promiscuous mode [ 74.836912][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.859394][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.886460][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.908745][ T5858] veth0_macvtap: entered promiscuous mode [ 74.921503][ T42] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.930556][ T42] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.955290][ T5858] veth1_macvtap: entered promiscuous mode [ 74.980792][ T42] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.990628][ T42] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.012825][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.030443][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.043838][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.078555][ T42] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.088684][ T42] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.106743][ T42] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.115865][ T42] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.136336][ T5854] veth0_vlan: entered promiscuous mode [ 75.145104][ T5182] Bluetooth: hci1: command tx timeout [ 75.154568][ T5860] veth0_vlan: entered promiscuous mode [ 75.157157][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.164972][ T5860] veth1_vlan: entered promiscuous mode [ 75.176303][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.192984][ T5854] veth1_vlan: entered promiscuous mode [ 75.224769][ T5182] Bluetooth: hci2: command tx timeout [ 75.225440][ T51] Bluetooth: hci3: command tx timeout [ 75.239030][ T5867] Bluetooth: hci4: command tx timeout [ 75.243804][ T5861] Bluetooth: hci0: command tx timeout [ 75.256052][ T5862] veth0_vlan: entered promiscuous mode [ 75.290224][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.304485][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.314144][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.322338][ T5860] veth0_macvtap: entered promiscuous mode [ 75.331122][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.341236][ T5862] veth1_vlan: entered promiscuous mode [ 75.360907][ T5860] veth1_macvtap: entered promiscuous mode [ 75.375695][ T5854] veth0_macvtap: entered promiscuous mode [ 75.376273][ T5869] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.416626][ T5854] veth1_macvtap: entered promiscuous mode [ 75.436689][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.448544][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.456894][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.470277][ T5975] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.472362][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.491582][ T5862] veth0_macvtap: entered promiscuous mode [ 75.509986][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.526511][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.537769][ T5862] veth1_macvtap: entered promiscuous mode [ 75.586567][ T5980] sctp: failed to load transform for md5: -2 [ 75.626210][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.655670][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.709009][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.721025][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.730843][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.748580][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.764266][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.782793][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.804350][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.824747][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.846440][ T5992] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.860216][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.882267][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.909738][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.921550][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.932852][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.950331][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.004628][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.025786][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.057981][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.059365][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 76.068189][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.088607][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.101485][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.133968][ T6001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.141871][ T6001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.250294][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.280336][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.335550][ T6020] netlink: 188 bytes leftover after parsing attributes in process `syz.2.13'. [ 76.492163][ T6025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 76.500350][ T6032] netlink: 'syz.0.15': attribute type 21 has an invalid length. [ 76.542647][ T6032] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15'. [ 76.668534][ T6036] netlink: 'syz.3.17': attribute type 21 has an invalid length. [ 76.677658][ T6042] warning: `syz.2.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 76.679586][ T6044] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20'. [ 76.722143][ T6036] netlink: 132 bytes leftover after parsing attributes in process `syz.3.17'. [ 76.752638][ T6044] Zero length message leads to an empty skb [ 76.961972][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26'. [ 77.086050][ T6060] veth0_macvtap: left promiscuous mode [ 77.123087][ T6080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30'. [ 77.150630][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'. [ 77.152323][ T6078] netlink: 28 bytes leftover after parsing attributes in process `syz.1.32'. [ 77.172628][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.31'. [ 77.224134][ T5861] Bluetooth: hci1: command tx timeout [ 77.303682][ T5861] Bluetooth: hci0: command tx timeout [ 77.310133][ T5861] Bluetooth: hci2: command tx timeout [ 77.312653][ T51] Bluetooth: hci3: command tx timeout [ 77.315683][ T5861] Bluetooth: hci4: command tx timeout [ 77.490890][ T6087] netlink: 'syz.2.33': attribute type 5 has an invalid length. [ 77.853037][ T6111] netlink: 'syz.2.43': attribute type 2 has an invalid length. [ 78.038238][ T6124] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 78.242231][ T6134] team0: Port device team_slave_1 removed [ 78.401250][ T6146] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 78.408465][ T979] IPVS: starting estimator thread 0... [ 78.469259][ T6155] bond0: entered promiscuous mode [ 78.474500][ T6155] bond_slave_0: entered promiscuous mode [ 78.480274][ T6155] bond_slave_1: entered promiscuous mode [ 78.487927][ T6155] batadv0: entered promiscuous mode [ 78.493960][ T6155] hsr1: entered allmulticast mode [ 78.499029][ T6155] bond0: entered allmulticast mode [ 78.504510][ T6155] bond_slave_0: entered allmulticast mode [ 78.510336][ T6155] bond_slave_1: entered allmulticast mode [ 78.513437][ T6151] IPVS: using max 72 ests per chain, 172800 per kthread [ 78.517012][ T6155] batadv0: entered allmulticast mode [ 78.528855][ T6155] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 78.538959][ T6155] bond0: left promiscuous mode [ 78.547715][ T6155] bond_slave_0: left promiscuous mode [ 78.553724][ T6155] bond_slave_1: left promiscuous mode [ 78.561103][ T6155] batadv0: left promiscuous mode [ 78.881184][ T6174] syz.1.61 uses obsolete (PF_INET,SOCK_PACKET) [ 79.075388][ T6192] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.133008][ T6192] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.159635][ T6202] netlink: 'syz.1.69': attribute type 10 has an invalid length. [ 79.164561][ T6201] netlink: 'syz.1.69': attribute type 10 has an invalid length. [ 79.182017][ T6202] team0: Port device geneve0 added [ 79.257693][ T6192] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.270881][ T6208] netlink: 'syz.1.71': attribute type 1 has an invalid length. [ 79.303978][ T5861] Bluetooth: hci1: command tx timeout [ 79.338933][ T6192] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.384207][ T5861] Bluetooth: hci4: command tx timeout [ 79.384619][ T5867] Bluetooth: hci3: command tx timeout [ 79.389666][ T5861] Bluetooth: hci2: command tx timeout [ 79.395707][ T5867] Bluetooth: hci0: command tx timeout [ 79.416193][ T6215] netlink: 'syz.1.74': attribute type 10 has an invalid length. [ 79.430335][ T6215] team0: Port device dummy0 added [ 79.440132][ T6215] netlink: 'syz.1.74': attribute type 10 has an invalid length. [ 79.445060][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.464839][ T6215] team0: Port device dummy0 removed [ 79.474277][ T6215] dummy0: entered allmulticast mode [ 79.480752][ T6215] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 79.499310][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.517929][ T6215] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 79.529616][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.552268][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.595145][ T6220] bond0: (slave bond_slave_1): Releasing backup interface [ 79.624887][ T6220] bond_slave_1 (unregistering): left allmulticast mode [ 79.729494][ T6228] netlink: 'syz.3.78': attribute type 10 has an invalid length. [ 79.740985][ T6228] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.749791][ T6228] bond0: (slave team0): Enslaving as an active interface with an up link [ 79.863883][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.017559][ T6247] veth1_macvtap: left promiscuous mode [ 80.068037][ T6252] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.075671][ T6252] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.201797][ T6001] tipc: Subscription rejected, illegal request [ 80.325474][ T6274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.719706][ T6333] veth0_to_team: entered promiscuous mode [ 81.736203][ T6335] __nla_validate_parse: 16 callbacks suppressed [ 81.736223][ T6335] netlink: 1196 bytes leftover after parsing attributes in process `syz.2.109'. [ 81.743331][ T6333] veth0_to_team: entered allmulticast mode [ 81.805173][ T6336] netlink: 'syz.2.109': attribute type 39 has an invalid length. [ 81.805173][ T6335] validate_nla: 4 callbacks suppressed [ 81.805194][ T6335] netlink: 'syz.2.109': attribute type 39 has an invalid length. [ 81.898077][ T6344] netlink: 28 bytes leftover after parsing attributes in process `syz.1.112'. [ 81.909423][ T6343] netlink: 'syz.2.109': attribute type 11 has an invalid length. [ 81.919130][ T6336] netlink: 'syz.2.109': attribute type 11 has an invalid length. [ 81.928563][ T6344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'. [ 82.158955][ T6363] netlink: 48 bytes leftover after parsing attributes in process `syz.2.118'. [ 82.195972][ T6364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.116'. [ 82.218116][ T6363] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.118'. [ 82.488964][ T6377] syzkaller0: entered promiscuous mode [ 82.508064][ T6377] syzkaller0: entered allmulticast mode [ 82.516527][ T6380] syzkaller1: entered promiscuous mode [ 82.522236][ T6380] syzkaller1: entered allmulticast mode [ 82.548107][ T6392] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.596008][ T6392] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.603208][ T6392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.696448][ T6401] netlink: 'syz.2.128': attribute type 1 has an invalid length. [ 82.998029][ T6406] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 83.030598][ T6406] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 83.049598][ T6406] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 83.070869][ T6411] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 83.083504][ T6411] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 83.151451][ T6427] netlink: 'syz.4.135': attribute type 10 has an invalid length. [ 83.161266][ T6411] netlink: 'syz.2.128': attribute type 1 has an invalid length. [ 83.162354][ T6427] netlink: 40 bytes leftover after parsing attributes in process `syz.4.135'. [ 83.178170][ T6427] batadv0: entered promiscuous mode [ 83.183458][ T6427] batadv0: entered allmulticast mode [ 83.189498][ T6427] bridge0: port 3(batadv0) entered blocking state [ 83.196549][ T6427] bridge0: port 3(batadv0) entered disabled state [ 83.205964][ T6427] bridge0: port 3(batadv0) entered blocking state [ 83.212724][ T6427] bridge0: port 3(batadv0) entered forwarding state [ 83.241718][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 83.251504][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 83.580166][ T6447] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 83.742592][ T6440] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 83.825723][ T6456] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.833342][ T6456] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.957958][ T6456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.971402][ T6456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.093046][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.104654][ T6468] netlink: 16 bytes leftover after parsing attributes in process `syz.1.144'. [ 84.123421][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.141725][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.184236][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.203051][ T6472] netlink: 72 bytes leftover after parsing attributes in process `syz.2.145'. [ 84.357018][ T6477] tipc: Started in network mode [ 84.362042][ T6477] tipc: Node identity 6252d4740d0e, cluster identity 4711 [ 84.372680][ T6477] tipc: Enabled bearer , priority 0 [ 84.544587][ T6476] tipc: Resetting bearer [ 84.628061][ T6476] tipc: Disabling bearer [ 84.638758][ T6493] tipc: Enabling of bearer rejected, failed to enable media [ 84.732383][ T6507] netlink: 'syz.4.156': attribute type 6 has an invalid length. [ 84.746757][ T6507] netlink: 'syz.4.156': attribute type 6 has an invalid length. [ 84.910140][ T6527] nftables ruleset with unbound set [ 84.923970][ T5867] block nbd0: Receive control failed (result -32) [ 85.081603][ T6541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.165'. [ 85.172813][ T6546] netlink: 'syz.1.167': attribute type 15 has an invalid length. [ 85.221683][ T6546] Bluetooth: MGMT ver 1.23 [ 85.241122][ T6551] netlink: 'syz.3.166': attribute type 1 has an invalid length. [ 85.800568][ T6604] netlink: 'syz.2.183': attribute type 30 has an invalid length. [ 86.776728][ T6657] can: request_module (can-proto-3) failed. [ 86.914359][ T6673] netlink: 'syz.0.204': attribute type 1 has an invalid length. [ 86.938430][ T6674] openvswitch: netlink: Missing key (keys=40, expected=100) [ 86.939934][ T6673] netlink: 'syz.0.204': attribute type 3 has an invalid length. [ 86.955744][ T6673] __nla_validate_parse: 9 callbacks suppressed [ 86.955761][ T6673] netlink: 224 bytes leftover after parsing attributes in process `syz.0.204'. [ 86.986163][ T2155] cfg80211: failed to load regulatory.db [ 87.003380][ T6673] NCSI netlink: No device for ifindex 0 [ 87.218445][ T6682] bond1: entered promiscuous mode [ 87.242174][ T6682] bond1: entered allmulticast mode [ 87.261069][ T6682] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.274125][ T6682] bond1 (unregistering): Released all slaves [ 87.504929][ T6699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.212'. [ 87.639002][ T6707] netlink: 'syz.0.214': attribute type 1 has an invalid length. [ 87.776703][ T6710] veth3: entered promiscuous mode [ 87.892955][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.218'. [ 87.937001][ T6717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'. [ 87.942428][ T6721] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 87.958405][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.220'. [ 87.981575][ T6722] pim6reg1: entered promiscuous mode [ 87.987130][ T6722] pim6reg1: entered allmulticast mode [ 88.258845][ T6743] netlink: 'syz.4.227': attribute type 83 has an invalid length. [ 88.503093][ T6766] block nbd3: not configured, cannot reconfigure [ 88.905120][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.121176][ T6806] netlink: 'syz.0.244': attribute type 10 has an invalid length. [ 89.122769][ T6805] netlink: 'syz.0.244': attribute type 10 has an invalid length. [ 89.177502][ T6806] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 89.248524][ T6814] nbd: must specify at least one socket [ 89.366522][ T6823] netlink: 'syz.2.248': attribute type 1 has an invalid length. [ 89.388150][ T6823] netlink: 'syz.2.248': attribute type 1 has an invalid length. [ 89.418976][ T6821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.247'. [ 89.583014][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.254'. [ 89.662520][ T6844] netlink: 'syz.2.254': attribute type 1 has an invalid length. [ 89.690557][ T6844] netlink: 244 bytes leftover after parsing attributes in process `syz.2.254'. [ 89.719609][ T6852] netlink: 48 bytes leftover after parsing attributes in process `syz.1.256'. [ 89.909626][ T6867] lo: entered allmulticast mode [ 89.949367][ T6869] netlink: 'syz.4.263': attribute type 1 has an invalid length. [ 90.005999][ T6869] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.070474][ T6869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.263'. [ 90.128326][ T6886] unsupported nlmsg_type 40 [ 90.359983][ T6909] IPVS: length: 129 != 8 [ 90.387400][ T6909] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 90.428534][ T6907] syz.0.274 (6907) used greatest stack depth: 17432 bytes left [ 90.627216][ T6931] bridge0: port 3(batadv0) entered disabled state [ 90.644394][ T6931] bridge_slave_0: left allmulticast mode [ 90.650132][ T6931] bridge_slave_0: left promiscuous mode [ 90.658308][ T6931] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.669233][ T6931] bridge_slave_1: left allmulticast mode [ 90.675626][ T6931] bridge_slave_1: left promiscuous mode [ 90.682138][ T6931] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.698797][ T6931] bond0: (slave bond_slave_0): Releasing backup interface [ 90.709818][ T6931] bond0: (slave bond_slave_1): Releasing backup interface [ 90.725022][ T6931] team0: Port device team_slave_0 removed [ 90.735910][ T6931] team0: Port device team_slave_1 removed [ 90.742569][ T6931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.754510][ T6931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.764614][ T6931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.772386][ T6931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.048746][ T6960] team0: Device hsr_slave_0 failed to register rx_handler [ 91.061250][ T6959] team0: Device hsr_slave_0 failed to register rx_handler [ 91.479817][ T6991] IPVS: Error joining to the multicast group [ 91.500791][ T7000] sock: sock_timestamping_bind_phc: sock not bind to device [ 91.730835][ T7018] tun0: tun_chr_ioctl cmd 1074025675 [ 91.752123][ T7018] tun0: persist disabled [ 92.113764][ T7037] __nla_validate_parse: 5 callbacks suppressed [ 92.113785][ T7037] netlink: 28 bytes leftover after parsing attributes in process `syz.4.313'. [ 92.131299][ T7035] netlink: 56 bytes leftover after parsing attributes in process `syz.1.311'. [ 92.139412][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.313'. [ 92.157736][ T7046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.316'. [ 92.194441][ T7035] netlink: 20 bytes leftover after parsing attributes in process `syz.1.311'. [ 92.215164][ T7046] hsr0 speed is unknown, defaulting to 1000 [ 92.225014][ T7046] hsr0 speed is unknown, defaulting to 1000 [ 92.245725][ T7037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.313'. [ 92.253735][ T7046] hsr0 speed is unknown, defaulting to 1000 [ 92.271459][ T7035] netlink: 2 bytes leftover after parsing attributes in process `syz.1.311'. [ 92.280764][ T7035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.282703][ T7046] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 92.358320][ T7046] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 92.452246][ T7046] hsr0 speed is unknown, defaulting to 1000 [ 92.490845][ T7046] hsr0 speed is unknown, defaulting to 1000 [ 92.536053][ T7046] hsr0 speed is unknown, defaulting to 1000 [ 92.575749][ T7046] hsr0 speed is unknown, defaulting to 1000 [ 92.611762][ T7046] hsr0 speed is unknown, defaulting to 1000 [ 92.848628][ T7101] validate_nla: 3 callbacks suppressed [ 92.848649][ T7101] netlink: 'syz.2.328': attribute type 15 has an invalid length. [ 92.849616][ T7100] netlink: 28 bytes leftover after parsing attributes in process `syz.4.331'. [ 93.005477][ T7108] netlink: 40 bytes leftover after parsing attributes in process `syz.3.332'. [ 93.140244][ T7119] netlink: 'syz.2.337': attribute type 1 has an invalid length. [ 93.192037][ T7119] 8021q: adding VLAN 0 to HW filter on device bond3 [ 93.225909][ T7119] bond3: (slave gretap1): making interface the new active one [ 93.237017][ T7119] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 93.269886][ T7127] netlink: 24 bytes leftover after parsing attributes in process `syz.1.341'. [ 93.307402][ T7134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.378949][ T7140] nbd: nbd0 already in use [ 93.460442][ T7148] netlink: 'syz.1.348': attribute type 13 has an invalid length. [ 93.481036][ T7141] veth3: entered allmulticast mode [ 93.500817][ T7148] lo: entered promiscuous mode [ 93.506846][ T7148] lo: entered allmulticast mode [ 93.530272][ T7148] tunl0: entered promiscuous mode [ 93.542750][ T7148] tunl0: entered allmulticast mode [ 93.561479][ T7148] gre0: entered promiscuous mode [ 93.576068][ T7148] gre0: entered allmulticast mode [ 93.611178][ T7148] gretap0: entered promiscuous mode [ 93.635866][ T7148] gretap0: entered allmulticast mode [ 93.651697][ T7168] openvswitch: netlink: Key type 29 is not supported [ 93.652794][ T7148] gretap0: refused to change device tx_queue_len [ 93.670081][ T7148] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 93.909008][ T7189] netlink: 'syz.3.360': attribute type 2 has an invalid length. [ 94.219391][ T7208] sctp: [Deprecated]: syz.3.365 (pid 7208) Use of int in max_burst socket option. [ 94.219391][ T7208] Use struct sctp_assoc_value instead [ 94.377500][ T7221] unknown channel width for channel at 909000KHz? [ 94.498815][ T7234] netlink: 'syz.0.374': attribute type 1 has an invalid length. [ 94.521453][ T7234] netlink: 'syz.0.374': attribute type 1 has an invalid length. [ 94.531917][ T7233] team0: Device wireguard0 is of different type [ 94.839823][ T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.860388][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.906702][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.938533][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.961256][ T7284] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.968729][ T7284] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.990582][ T7284] bridge_slave_1: left allmulticast mode [ 95.003310][ T7284] bridge_slave_1: left promiscuous mode [ 95.016129][ T7284] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.039796][ T7284] bridge_slave_0: left allmulticast mode [ 95.057663][ T7284] bridge_slave_0: left promiscuous mode [ 95.074745][ T7284] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.147204][ T7291] netdevsim netdevsim1: Direct firmware load for vc_accept_upcall failed with error -2 [ 95.189781][ T7291] netdevsim netdevsim1: Falling back to sysfs fallback for: vc_accept_upcall [ 95.222221][ T7300] team0 (unregistering): Port device team_slave_0 removed [ 95.238420][ T7300] team0 (unregistering): Port device team_slave_1 removed [ 95.249806][ T7303] netlink: 'syz.4.387': attribute type 1 has an invalid length. [ 95.259161][ T7303] netlink: 'syz.4.387': attribute type 1 has an invalid length. [ 95.439731][ T7320] netlink: 'syz.0.393': attribute type 11 has an invalid length. [ 95.501237][ T7324] netlink: 'syz.2.391': attribute type 1 has an invalid length. [ 95.597598][ T7334] netlink: 'syz.2.397': attribute type 30 has an invalid length. [ 95.616357][ T7336] tipc: Enabling of bearer rejected, failed to enable media [ 95.635227][ T6001] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.647489][ T6001] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.664888][ T6001] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.709347][ T7338] geneve2: entered promiscuous mode [ 95.730766][ T7338] geneve2: entered allmulticast mode [ 95.749886][ T6001] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.790824][ T6001] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 95.811106][ T6001] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 95.837999][ T6001] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 95.859195][ T6001] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 96.328881][ T7398] netlink: 'syz.3.419': attribute type 11 has an invalid length. [ 96.339153][ T7398] netlink: 'syz.3.419': attribute type 11 has an invalid length. [ 96.507589][ T7414] tipc: Started in network mode [ 96.512541][ T7414] tipc: Node identity eaa7731885, cluster identity 4711 [ 96.529449][ T7414] tipc: Enabled bearer , priority 0 [ 96.544658][ T7416] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 96.577045][ T7414] syzkaller0: entered promiscuous mode [ 96.582568][ T7414] syzkaller0: entered allmulticast mode [ 96.637085][ T7414] tipc: Resetting bearer [ 96.644838][ T7425] vlan1: entered allmulticast mode [ 96.650135][ T7425] veth0_vlan: entered allmulticast mode [ 96.657946][ T7413] tipc: Resetting bearer [ 96.704763][ T7413] tipc: Disabling bearer [ 96.805878][ T7435] 8021q: adding VLAN 0 to HW filter on device bond4 [ 96.841917][ T7435] 8021q: adding VLAN 0 to HW filter on device bond4 [ 96.858133][ T7435] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 96.881836][ T7435] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 96.959495][ T7442] tipc: Trying to set illegal importance in message [ 97.061816][ T1109] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 97.281884][ T7478] __nla_validate_parse: 32 callbacks suppressed [ 97.281906][ T7478] netlink: 52 bytes leftover after parsing attributes in process `syz.3.442'. [ 97.319279][ T7481] siw: device registration error -23 [ 97.556926][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.451'. [ 97.586258][ T7508] netlink: 16 bytes leftover after parsing attributes in process `syz.1.450'. [ 97.891627][ T7525] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 97.977400][ T44] hid-generic 0005:15C2:5505.0001: item fetching failed at offset 0/1 [ 98.025628][ T44] hid-generic 0005:15C2:5505.0001: probe with driver hid-generic failed with error -22 [ 98.066973][ T7549] validate_nla: 2 callbacks suppressed [ 98.066993][ T7549] netlink: 'syz.2.467': attribute type 2 has an invalid length. [ 98.350337][ T7578] tipc: Enabling of bearer rejected, failed to enable media [ 98.473805][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.479'. [ 98.495434][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.479'. [ 98.541217][ T7591] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 98.662907][ T7614] netlink: 24 bytes leftover after parsing attributes in process `syz.4.483'. [ 98.730235][ T7614] atomic_op ffff88805568f198 conn xmit_atomic 0000000000000000 [ 98.737158][ T7621] netlink: 92 bytes leftover after parsing attributes in process `syz.3.485'. [ 98.771144][ T7619] netlink: 'syz.0.484': attribute type 2 has an invalid length. [ 98.818078][ T7633] netlink: 'syz.4.488': attribute type 1 has an invalid length. [ 98.875888][ T7636] netlink: 5 bytes leftover after parsing attributes in process `syz.1.490'. [ 98.888740][ T7633] 8021q: adding VLAN 0 to HW filter on device bond3 [ 98.897924][ T7633] bond2: (slave bond3): making interface the new active one [ 98.905872][ T7633] bond2: (slave bond3): Enslaving as an active interface with an up link [ 99.161996][ T7661] tipc: Invalid UDP bearer configuration [ 99.162039][ T7661] tipc: Enabling of bearer rejected, failed to enable media [ 99.246049][ T7670] netlink: 32 bytes leftover after parsing attributes in process `syz.3.497'. [ 99.327087][ T7678] netlink: 32 bytes leftover after parsing attributes in process `syz.3.497'. [ 99.436716][ T7689] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20002 [ 99.562709][ T7703] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 99.824793][ T7722] netlink: 'syz.2.510': attribute type 10 has an invalid length. [ 99.852194][ T7722] veth1_macvtap: left promiscuous mode [ 100.364284][ T7780] netlink: 'syz.3.528': attribute type 1 has an invalid length. [ 100.387921][ T7782] netlink: 'syz.4.529': attribute type 1 has an invalid length. [ 100.439295][ T7782] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 100.472234][ T7787] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 100.491188][ T7788] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 100.505287][ T7793] syzkaller1: entered promiscuous mode [ 100.521077][ T7793] syzkaller1: entered allmulticast mode [ 100.577874][ T7799] tipc: Cannot configure node identity twice [ 100.605908][ T7802] syz_tun: entered promiscuous mode [ 100.612234][ T7802] batadv_slave_0: entered promiscuous mode [ 100.621392][ T7802] hsr1: entered allmulticast mode [ 100.629594][ T7802] syz_tun: entered allmulticast mode [ 100.636034][ T7802] batadv_slave_0: entered allmulticast mode [ 100.784220][ T7820] netlink: 'syz.4.541': attribute type 1 has an invalid length. [ 100.792103][ T7820] netlink: 'syz.4.541': attribute type 1 has an invalid length. [ 100.806808][ T7820] netlink: 'syz.4.541': attribute type 2 has an invalid length. [ 100.810002][ T7826] netlink: 'syz.3.543': attribute type 21 has an invalid length. [ 100.821254][ T7824] trusted_key: syz.2.542 sent an empty control message without MSG_MORE. [ 100.837619][ T7823] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 100.983297][ T5867] Bluetooth: hci4: command 0x0405 tx timeout [ 102.227414][ T7895] tipc: Enabling of bearer rejected, failed to enable media [ 102.379152][ T7907] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 102.386587][ T7907] IPv6: NLM_F_CREATE should be set when creating new route [ 102.393885][ T7907] IPv6: NLM_F_CREATE should be set when creating new route [ 102.412481][ T7907] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 102.532407][ T7919] delete_channel: no stack [ 102.594919][ T7925] Bluetooth: MGMT ver 1.23 [ 102.739335][ T7937] pim6reg527: entered allmulticast mode [ 103.042016][ T7959] bond4: entered promiscuous mode [ 103.050756][ T7959] bond4: entered allmulticast mode [ 103.080273][ T7959] 8021q: adding VLAN 0 to HW filter on device bond4 [ 103.115141][ T7980] __nla_validate_parse: 13 callbacks suppressed [ 103.115165][ T7980] netlink: 212264 bytes leftover after parsing attributes in process `syz.3.590'. [ 103.388455][ T7999] netlink: 48 bytes leftover after parsing attributes in process `syz.3.596'. [ 103.570747][ T8016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.600'. [ 103.580686][ T8013] netlink: 204 bytes leftover after parsing attributes in process `syz.2.598'. [ 103.786807][ T8023] syzkaller0: entered promiscuous mode [ 103.794348][ T8023] syzkaller0: entered allmulticast mode [ 103.989339][ T8046] netlink: 28 bytes leftover after parsing attributes in process `syz.1.608'. [ 104.036467][ T8048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.609'. [ 104.065417][ T8048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.609'. [ 104.107961][ T8049] veth5: entered promiscuous mode [ 104.152635][ T8046] Driver unsupported XDP return value 0 on prog (id 130) dev N/A, expect packet loss! [ 104.177269][ T8051] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 104.183924][ T8051] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 104.197171][ T8051] xt_HMARK: proto mask must be zero with L3 mode [ 104.204001][ T8046] netlink: 28 bytes leftover after parsing attributes in process `syz.1.608'. [ 104.322713][ T8067] syzkaller1: entered promiscuous mode [ 104.344282][ T8067] syzkaller1: entered allmulticast mode [ 104.353002][ T8062] vlan1: left allmulticast mode [ 104.358063][ T8062] veth0_vlan: left allmulticast mode [ 104.544492][ T8082] validate_nla: 2 callbacks suppressed [ 104.544512][ T8082] netlink: 'syz.0.620': attribute type 1 has an invalid length. [ 104.560017][ T8082] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 104.568506][ T8084] netlink: 24 bytes leftover after parsing attributes in process `syz.1.621'. [ 104.591202][ T8082] netlink: 236 bytes leftover after parsing attributes in process `syz.0.620'. [ 104.615028][ T42] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.633254][ T42] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.642044][ T42] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.690056][ T42] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.831061][ T8109] netlink: 'syz.0.625': attribute type 11 has an invalid length. [ 104.870620][ T8109] netlink: 'syz.0.625': attribute type 4 has an invalid length. [ 105.222431][ T8142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.235180][ T8142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.248242][ T8145] netlink: 'syz.2.635': attribute type 11 has an invalid length. [ 105.502049][ T8162] 0{X: renamed from gretap0 [ 105.511484][ T8162] 0{X: entered allmulticast mode [ 105.518578][ T8162] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 105.543642][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.652536][ T8186] netlink: 'syz.0.647': attribute type 3 has an invalid length. [ 105.667608][ T8186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.947217][ T8230] batadv0: left allmulticast mode [ 106.006183][ T8238] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 106.732945][ T8312] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 106.936425][ T8328] netlink: 'syz.0.689': attribute type 1 has an invalid length. [ 106.945852][ T8328] netlink: 'syz.0.689': attribute type 1 has an invalid length. [ 106.954072][ T8328] netlink: 'syz.0.689': attribute type 1 has an invalid length. [ 106.961760][ T8328] netlink: 'syz.0.689': attribute type 2 has an invalid length. [ 106.969615][ T8329] netlink: 'syz.0.689': attribute type 1 has an invalid length. [ 106.977970][ T8329] netlink: 'syz.0.689': attribute type 1 has an invalid length. [ 107.014609][ T8336] sctp: [Deprecated]: syz.4.691 (pid 8336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 107.014609][ T8336] Use struct sctp_sack_info instead [ 107.037364][ T8337] sctp: [Deprecated]: syz.4.691 (pid 8337) Use of struct sctp_assoc_value in delayed_ack socket option. [ 107.037364][ T8337] Use struct sctp_sack_info instead [ 107.264775][ T8354] bond_slave_0: entered allmulticast mode [ 107.291145][ T8356] openvswitch: netlink: IP tunnel dst address not specified [ 107.439198][ T8367] gtp0: entered promiscuous mode [ 107.449155][ T8367] gtp0: entered allmulticast mode [ 107.535338][ T8377] can: request_module (can-proto-4) failed. [ 107.888674][ T8407] 8021q: adding VLAN 0 to HW filter on device bond3 [ 107.906969][ T8407] 8021q: adding VLAN 0 to HW filter on device bond3 [ 107.915472][ T8407] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 107.929815][ T8407] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 107.958097][ T8413] veth5: entered promiscuous mode [ 107.966837][ T8413] bond3: (slave veth5): Enslaving as an active interface with a down link [ 107.979362][ T8412] macsec2: entered promiscuous mode [ 107.984660][ T8412] macsec2: entered allmulticast mode [ 107.995531][ T8413] gretap1: entered allmulticast mode [ 108.006427][ T8413] bond3: (slave gretap1): making interface the new active one [ 108.014686][ T8413] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 108.058175][ T8418] wg1: entered promiscuous mode [ 108.239087][ T8437] syz.0.728: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 108.245012][ T8433] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 108.254275][ T8437] CPU: 1 UID: 0 PID: 8437 Comm: syz.0.728 Not tainted syzkaller #0 PREEMPT(full) [ 108.254301][ T8437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.254312][ T8437] Call Trace: [ 108.254319][ T8437] [ 108.254327][ T8437] dump_stack_lvl+0x189/0x250 [ 108.254355][ T8437] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.254375][ T8437] ? __pfx__printk+0x10/0x10 [ 108.254399][ T8437] ? lock_release+0x4b/0x3e0 [ 108.254425][ T8437] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 108.254447][ T8437] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 108.254467][ T8437] warn_alloc+0x214/0x310 [ 108.254493][ T8437] ? stack_depot_save_flags+0x40/0x860 [ 108.254517][ T8437] ? __pfx_warn_alloc+0x10/0x10 [ 108.254552][ T8437] ? kasan_save_track+0x4f/0x80 [ 108.254573][ T8437] ? xskq_create+0x56/0x170 [ 108.254594][ T8437] ? xsk_init_queue+0xb0/0x110 [ 108.254615][ T8437] ? xsk_setsockopt+0x4dc/0x8d0 [ 108.254634][ T8437] ? do_sock_setsockopt+0x17c/0x1b0 [ 108.254650][ T8437] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 108.254666][ T8437] ? do_syscall_64+0xfa/0x3b0 [ 108.254690][ T8437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.254710][ T8437] __vmalloc_node_range_noprof+0x125/0x12f0 [ 108.254745][ T8437] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 108.254769][ T8437] ? xsk_setsockopt+0x462/0x8d0 [ 108.254791][ T8437] ? __kasan_kmalloc+0x93/0xb0 [ 108.254814][ T8437] vmalloc_user_noprof+0xad/0xf0 [ 108.254838][ T8437] ? xskq_create+0xbf/0x170 [ 108.254860][ T8437] xskq_create+0xbf/0x170 [ 108.254883][ T8437] xsk_init_queue+0xb0/0x110 [ 108.254905][ T8437] xsk_setsockopt+0x4dc/0x8d0 [ 108.254927][ T8437] ? __pfx_xsk_setsockopt+0x10/0x10 [ 108.254950][ T8437] ? __pfx_aa_sk_perm+0x10/0x10 [ 108.254974][ T8437] ? lock_release+0x4b/0x3e0 [ 108.254998][ T8437] ? aa_sock_opt_perm+0xff/0x1b0 [ 108.255014][ T8437] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 108.255033][ T8437] ? __pfx_xsk_setsockopt+0x10/0x10 [ 108.255055][ T8437] do_sock_setsockopt+0x17c/0x1b0 [ 108.255073][ T8437] __x64_sys_setsockopt+0x13f/0x1b0 [ 108.255091][ T8437] do_syscall_64+0xfa/0x3b0 [ 108.255116][ T8437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.255133][ T8437] ? clear_bhb_loop+0x60/0xb0 [ 108.255151][ T8437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.255168][ T8437] RIP: 0033:0x7f462e38ebe9 [ 108.255190][ T8437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.255205][ T8437] RSP: 002b:00007f462f1f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 108.255225][ T8437] RAX: ffffffffffffffda RBX: 00007f462e5b5fa0 RCX: 00007f462e38ebe9 [ 108.255239][ T8437] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 108.255250][ T8437] RBP: 00007f462e411e19 R08: 0000000000000004 R09: 0000000000000000 [ 108.255261][ T8437] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.255272][ T8437] R13: 00007f462e5b6038 R14: 00007f462e5b5fa0 R15: 00007ffec04220c8 [ 108.255291][ T8437] [ 108.255397][ T8437] Mem-Info: [ 108.565055][ T8437] active_anon:10541 inactive_anon:0 isolated_anon:0 [ 108.565055][ T8437] active_file:2505 inactive_file:39838 isolated_file:0 [ 108.565055][ T8437] unevictable:768 dirty:36 writeback:0 [ 108.565055][ T8437] slab_reclaimable:11611 slab_unreclaimable:97133 [ 108.565055][ T8437] mapped:28912 shmem:1357 pagetables:1207 [ 108.565055][ T8437] sec_pagetables:0 bounce:0 [ 108.565055][ T8437] kernel_misc_reclaimable:0 [ 108.565055][ T8437] free:1320982 free_pcp:16224 free_cma:0 [ 108.611071][ T8437] Node 0 active_anon:41964kB inactive_anon:0kB active_file:10020kB inactive_file:159148kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115648kB dirty:144kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11968kB pagetables:4780kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 108.647879][ T8437] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 108.681115][ T8437] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 108.713457][ T8437] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 108.752327][ T8437] Node 0 DMA32 free:1381572kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42012kB inactive_anon:0kB active_file:10020kB inactive_file:157588kB unevictable:1536kB writepending:144kB present:3129332kB managed:2557456kB mlocked:0kB bounce:0kB free_pcp:45420kB local_pcp:26140kB free_cma:0kB [ 108.791698][ T8465] __nla_validate_parse: 27 callbacks suppressed [ 108.791717][ T8465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.735'. [ 108.795474][ T8437] lowmem_reserve[]: 0 0 1 1 1 [ 108.822612][ T8437] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1560kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 108.853043][ T8437] lowmem_reserve[]: 0 0 0 0 0 [ 108.858027][ T8437] Node 1 Normal free:3886532kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19936kB local_pcp:12704kB free_cma:0kB [ 108.889738][ T8465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.735'. [ 108.890210][ T8437] lowmem_reserve[]: 0 0 0 0 0 [ 108.907904][ T8437] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 108.921060][ T8437] Node 0 DMA32: 148*4kB (UME) 80*8kB (UME) 145*16kB (UM) 195*32kB (UME) 190*64kB (UM) 106*128kB (UM) 84*256kB (UME) 49*512kB (UME) 29*1024kB (UE) 8*2048kB (UM) 306*4096kB (UM) = 1381568kB [ 108.945040][ T8437] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 108.960444][ T8437] Node 1 Normal: 201*4kB (UE) 66*8kB (UME) 45*16kB (UME) 46*32kB (UME) 22*64kB (UME) 9*128kB (UME) 6*256kB (UM) 6*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 945*4096kB (M) = 3886532kB [ 108.982150][ T8437] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 108.985106][ T8465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.735'. [ 109.004452][ T8437] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 109.017214][ T8437] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 109.037630][ T8437] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 109.047960][ T8465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.735'. [ 109.058148][ T8437] 43696 total pagecache pages [ 109.062888][ T8437] 0 pages in swap cache [ 109.069159][ T8437] Free swap = 124996kB [ 109.074459][ T8465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.735'. [ 109.084107][ T8473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.738'. [ 109.094117][ T8437] Total swap = 124996kB [ 109.098382][ T8437] 2097051 pages RAM [ 109.102206][ T8437] 0 pages HighMem/MovableOnly [ 109.107309][ T8437] 425661 pages reserved [ 109.111805][ T8465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.735'. [ 109.137435][ T8437] 0 pages cma reserved [ 109.161914][ T8465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.735'. [ 109.172923][ T8481] tipc: Enabled bearer , priority 0 [ 109.186305][ T8481] syzkaller0: entered promiscuous mode [ 109.191816][ T8481] syzkaller0: entered allmulticast mode [ 109.224146][ T8485] netlink: 16 bytes leftover after parsing attributes in process `syz.0.743'. [ 109.251359][ T8465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.735'. [ 109.263966][ T8481] tipc: Resetting bearer [ 109.279091][ T8480] tipc: Resetting bearer [ 109.307496][ T8480] tipc: Disabling bearer [ 109.427111][ T8495] ip6gre1: entered allmulticast mode [ 109.708001][ T8525] sock: sock_timestamping_bind_phc: sock not bind to device [ 109.745491][ T8530] syz_tun: entered promiscuous mode [ 109.815198][ T8534] validate_nla: 5 callbacks suppressed [ 109.815217][ T8534] netlink: 'syz.2.759': attribute type 7 has an invalid length. [ 109.837860][ T8534] bridge0: port 3(vlan2) entered blocking state [ 109.853948][ T8534] bridge0: port 3(vlan2) entered disabled state [ 109.860471][ T8534] vlan2: entered allmulticast mode [ 109.881629][ T8543] openvswitch: netlink: Missing key (keys=40, expected=100) [ 109.904733][ T8534] bridge0: entered allmulticast mode [ 109.916063][ T8534] vlan2: left allmulticast mode [ 109.921401][ T8534] bridge0: left allmulticast mode [ 109.942200][ T8542] netlink: 'syz.0.762': attribute type 2 has an invalid length. [ 109.958286][ T8542] netlink: 'syz.0.762': attribute type 10 has an invalid length. [ 110.001447][ T8542] bridge_slave_1: left allmulticast mode [ 110.027988][ T8542] bridge_slave_1: left promiscuous mode [ 110.047501][ T8542] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.096498][ T8542] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 110.265033][ T5867] Bluetooth: hci0: command 0x0c20 tx timeout [ 110.593752][ T8605] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 110.625548][ T8607] netlink: 'syz.1.783': attribute type 4 has an invalid length. [ 110.674395][ T8607] netlink: 'syz.1.783': attribute type 4 has an invalid length. [ 110.699706][ T8615] netlink: 'syz.0.785': attribute type 6 has an invalid length. [ 110.816602][ T8632] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 110.844489][ T8632] netlink: 'syz.1.790': attribute type 1 has an invalid length. [ 110.869382][ T8632] netlink: 'syz.1.790': attribute type 3 has an invalid length. [ 110.878799][ T8632] NCSI netlink: No device for ifindex 813332851 [ 111.096123][ T8655] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 111.117981][ T8659] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 111.142450][ T8655] tipc: MTU too low for tipc bearer [ 111.184381][ T8651] netlink: 'syz.3.793': attribute type 1 has an invalid length. [ 111.192102][ T8651] nbd: error processing sock list [ 111.197374][ T8651] block nbd1: shutting down sockets [ 111.216400][ T8662] netlink: 'syz.1.796': attribute type 21 has an invalid length. [ 111.251396][ T8667] : entered promiscuous mode [ 111.395156][ T8683] sctp: [Deprecated]: syz.0.803 (pid 8683) Use of struct sctp_assoc_value in delayed_ack socket option. [ 111.395156][ T8683] Use struct sctp_sack_info instead [ 111.457157][ T8688] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 111.555267][ T8696] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 111.715158][ T8712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.329912][ T8755] : renamed from vlan0 (while UP) [ 112.569038][ T8769] sctp: [Deprecated]: syz.3.830 (pid 8769) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.569038][ T8769] Use struct sctp_sack_info instead [ 112.612541][ T8779] sctp: [Deprecated]: syz.3.830 (pid 8779) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.612541][ T8779] Use struct sctp_sack_info instead [ 112.694086][ T8789] bridge: RTM_NEWNEIGH with invalid ether address [ 112.703517][ T8789] bridge: RTM_NEWNEIGH with invalid ether address [ 112.769175][ T8792] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.776907][ T8792] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.831187][ T8792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.845078][ T8792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.907670][ T5924] hsr0 speed is unknown, defaulting to 1000 [ 112.913945][ T5924] syz2: Port: 1 Link DOWN [ 112.920474][ T42] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.937426][ T42] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 112.959714][ T8806] syzkaller0: entered promiscuous mode [ 112.969514][ T8806] syzkaller0: entered allmulticast mode [ 112.977231][ T36] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.986134][ T36] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 112.999019][ T36] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.008042][ T36] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 113.023793][ T36] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.053512][ T36] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 113.145332][ T5867] Bluetooth: hci4: command 0x0405 tx timeout [ 113.187652][ T8825] veth1_macvtap: left promiscuous mode [ 113.306128][ T30] audit: type=1800 audit(1756347823.769:2): pid=8833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.850" name="memory.events" dev="tmpfs" ino=870 res=0 errno=0 [ 113.328294][ T30] audit: type=1804 audit(1756347823.769:3): pid=8833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.850" name="/newroot/166/memory.events" dev="tmpfs" ino=870 res=1 errno=0 [ 113.548063][ T8852] team0: Device gtp1 is up. Set it down before adding it as a team port [ 113.591368][ T8855] veth0: entered promiscuous mode [ 113.645178][ T8860] veth0: left promiscuous mode [ 113.807419][ T8881] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 113.855157][ T8883] macvtap1: entered promiscuous mode [ 113.860522][ T8883] vlan0: entered promiscuous mode [ 113.868435][ T8883] macvtap1: entered allmulticast mode [ 113.874597][ T8883] vlan0: entered allmulticast mode [ 113.879878][ T8883] veth0_vlan: entered allmulticast mode [ 113.931361][ T8890] __nla_validate_parse: 91 callbacks suppressed [ 113.931383][ T8890] netlink: 48 bytes leftover after parsing attributes in process `syz.4.867'. [ 113.968755][ T8895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.865'. [ 113.981626][ T8895] geneve0: entered promiscuous mode [ 113.994106][ T8895] geneve0: left promiscuous mode [ 114.126386][ T8910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.873'. [ 114.182808][ T8909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.871'. [ 114.185963][ T8910] team1: entered promiscuous mode [ 114.197980][ T8910] team1: entered allmulticast mode [ 114.203821][ T8915] netlink: 24 bytes leftover after parsing attributes in process `syz.3.876'. [ 114.218778][ T8909] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 114.230340][ T8915] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.876'. [ 114.248139][ T8915] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 114.253994][ T8921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.875'. [ 114.265869][ T8915] netlink: 16 bytes leftover after parsing attributes in process `syz.3.876'. [ 114.277646][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.876'. [ 114.300071][ T8909] veth7: entered promiscuous mode [ 114.328144][ T8909] bond6: (slave veth7): Enslaving as a backup interface with a down link [ 114.427103][ T8936] tipc: Started in network mode [ 114.442358][ T8936] tipc: Node identity ac14142f, cluster identity 4711 [ 114.452516][ T8936] tipc: Enabling of bearer rejected, failed to enable media [ 114.655523][ T8958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.889'. [ 114.971337][ T8979] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 114.979066][ T5973] IPVS: starting estimator thread 0... [ 115.041938][ T8988] validate_nla: 13 callbacks suppressed [ 115.041958][ T8988] netlink: 'syz.0.894': attribute type 64 has an invalid length. [ 115.086471][ T8981] IPVS: using max 38 ests per chain, 91200 per kthread [ 115.228671][ T9003] vlan0: entered promiscuous mode [ 115.239451][ T9003] vlan0: entered allmulticast mode [ 115.245882][ T9003] veth0_vlan: entered allmulticast mode [ 115.357669][ T9018] tipc: Enabling of bearer rejected, failed to enable media [ 115.537517][ T9035] syzkaller0: entered promiscuous mode [ 115.556753][ T9035] syzkaller0: entered allmulticast mode [ 115.769481][ T9057] hsr0 speed is unknown, defaulting to 1000 [ 115.849100][ T9073] vlan2: entered promiscuous mode [ 115.879716][ T9076] rdma_rxe: rxe_newlink: failed to add bond0 [ 115.921278][ T6001] nci: nci_rx_work: unknown MT 0x7 [ 115.978145][ T9087] netlink: 'syz.1.917': attribute type 75 has an invalid length. [ 115.995366][ T9090] netlink: 'syz.3.923': attribute type 10 has an invalid length. [ 116.009197][ T9090] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 116.111150][ T9094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.409277][ T9148] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.428601][ T9148] bond0: (slave bond1): Enslaving as an active interface with an up link [ 118.051446][ T9200] batman_adv: batadv0: adding TT local entry 02:04:00:bf:05:00 to non-existent VLAN 2621 [ 118.234348][ T9213] syz_tun: entered allmulticast mode [ 118.375687][ T9230] C: renamed from team_slave_0 [ 118.380971][ T9231] openvswitch: netlink: Missing key (keys=40, expected=100) [ 118.410317][ T9230] netlink: 'syz.2.968': attribute type 1 has an invalid length. [ 118.418495][ T9230] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 118.459141][ T9242] netlink: 'syz.0.969': attribute type 19 has an invalid length. [ 118.821626][ T9292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.939767][ T9307] bridge_slave_0: entered allmulticast mode [ 118.963912][ T9307] bridge_slave_0: entered promiscuous mode [ 119.031282][ T9318] __nla_validate_parse: 14 callbacks suppressed [ 119.031305][ T9318] netlink: 244 bytes leftover after parsing attributes in process `syz.0.984'. [ 119.032399][ T9314] IPv6: sit1: Disabled Multicast RS [ 119.054312][ T9314] sit1: entered allmulticast mode [ 119.358949][ T9352] 8021q: VLANs not supported on rose0 [ 119.375493][ T9356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.991'. [ 119.477774][ T9361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.998'. [ 119.505136][ T9361] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 119.517085][ T9361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.526404][ T9363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.999'. [ 119.556597][ T9363] syz_tun (unregistering): left promiscuous mode [ 119.622572][ T9370] veth1_to_bond: entered allmulticast mode [ 119.631498][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1002'. [ 119.702078][ T9375] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1002'. [ 119.733065][ T9382] netlink: 'syz.0.1004': attribute type 1 has an invalid length. [ 119.742633][ T9382] netlink: 'syz.0.1004': attribute type 4 has an invalid length. [ 119.750987][ T9382] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1004'. [ 119.794337][ T9379] hsr0 speed is unknown, defaulting to 1000 [ 119.796003][ T9368] veth1_to_bond: left allmulticast mode [ 119.844322][ T9384] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 119.871663][ T9384] erspan0: entered allmulticast mode [ 120.039609][ T9402] bond7: entered promiscuous mode [ 120.051844][ T9402] bond7: entered allmulticast mode [ 120.057694][ T9402] 8021q: adding VLAN 0 to HW filter on device bond7 [ 120.065138][ T9405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1012'. [ 120.081816][ T9405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1012'. [ 120.092357][ T9402] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 120.129260][ T9402] IPv6: sit1: Disabled Multicast RS [ 120.150489][ T9402] sit1: entered allmulticast mode [ 120.206123][ T9422] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1018'. [ 120.301565][ T9431] netlink: 'syz.2.1022': attribute type 1 has an invalid length. [ 120.327775][ T9435] netlink: 'syz.4.1023': attribute type 39 has an invalid length. [ 120.521603][ T9450] tipc: Enabling of bearer rejected, failed to enable media [ 120.587150][ T9460] netlink: 'syz.3.1029': attribute type 21 has an invalid length. [ 120.776120][ T9465] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 120.786361][ T36] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 120.845935][ T9487] siw: device registration error -23 [ 120.978427][ T9498] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 121.088503][ T9507] team0: Device wireguard0 is up. Set it down before adding it as a team port [ 121.232385][ T9518] netlink: 'syz.3.1047': attribute type 1 has an invalid length. [ 121.434945][ T9537] pim6reg527: entered allmulticast mode [ 121.770851][ T9566] netlink: 'syz.2.1061': attribute type 1 has an invalid length. [ 121.811738][ T9566] bond8: entered promiscuous mode [ 121.834673][ T9573] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20000 [ 121.847953][ T9566] 8021q: adding VLAN 0 to HW filter on device bond8 [ 121.964504][ T9566] 8021q: adding VLAN 0 to HW filter on device bond8 [ 121.971608][ T9566] bond8: (slave wireguard0): The slave device specified does not support setting the MAC address [ 121.992339][ T9566] bond8: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 122.011260][ T9566] bond8: (slave wireguard0): making interface the new active one [ 122.020210][ T9566] wireguard0: entered promiscuous mode [ 122.029785][ T9566] bond8: (slave wireguard0): Enslaving as an active interface with an up link [ 122.188969][ T9607] netlink: 'syz.2.1073': attribute type 12 has an invalid length. [ 122.318232][ T9619] netlink: 'syz.4.1080': attribute type 29 has an invalid length. [ 122.352191][ T9619] netlink: 'syz.4.1080': attribute type 29 has an invalid length. [ 122.942571][ T9688] nbd: must specify a device to reconfigure [ 123.005209][ T9699] bond0: (slave bridge_slave_1): Releasing backup interface [ 123.927711][ T9784] netlink: 'syz.3.1131': attribute type 25 has an invalid length. [ 123.950202][ T9780] netlink: 'syz.4.1129': attribute type 11 has an invalid length. [ 124.112277][ T9801] __nla_validate_parse: 27 callbacks suppressed [ 124.112299][ T9801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1139'. [ 124.129118][ T9801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1139'. [ 124.145773][ T9803] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1138'. [ 124.171726][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1140'. [ 124.252311][ T9810] veth5: entered allmulticast mode [ 124.282777][ T9819] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 124.322164][ T9819] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 124.334436][ T9819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.342938][ T9822] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1144'. [ 124.362012][ T9819] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 124.439400][ T9819] bond0: (slave wlan1): Releasing backup interface [ 124.468227][ T9819] bond2: (slave bond3): Releasing backup interface [ 124.489683][ T9830] pimreg: entered allmulticast mode [ 124.764127][ T9860] bridge_slave_0: invalid flags given to default FDB implementation [ 124.828014][ T9865] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1159'. [ 124.905662][ T9878] bond0: entered promiscuous mode [ 124.910758][ T9878] bond_slave_0: entered promiscuous mode [ 124.918140][ T9878] bond_slave_1: entered promiscuous mode [ 124.925660][ T9878] dummy0: entered promiscuous mode [ 125.658907][ T9900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1171'. [ 125.790278][ T9918] validate_nla: 6 callbacks suppressed [ 125.790298][ T9918] netlink: 'syz.0.1175': attribute type 1 has an invalid length. [ 125.808450][ T9913] tipc: Enabled bearer , priority 0 [ 125.820774][ T9916] syzkaller0: entered promiscuous mode [ 125.826770][ T9916] syzkaller0: entered allmulticast mode [ 125.839355][ T9913] tipc: Resetting bearer [ 125.845477][ T9924] netlink: 'syz.2.1178': attribute type 1 has an invalid length. [ 125.853823][ T9911] tipc: Resetting bearer [ 125.860870][ T9911] tipc: Disabling bearer [ 125.883062][ T9924] 8021q: adding VLAN 0 to HW filter on device bond9 [ 125.936014][ T9924] bond9: (slave veth11): Enslaving as an active interface with a down link [ 126.030535][ T9943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1182'. [ 126.040031][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1181'. [ 126.045359][ T30] audit: type=1107 audit(1756347836.489:4): pid=9942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5n6qDUA٠0ltݕ/ 6򊨊' [ 126.071550][ T9945] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1183'. [ 126.284735][ T9963] tipc: Started in network mode [ 126.289799][ T9963] tipc: Node identity 3e2c465e1c0f, cluster identity 4711 [ 126.300964][ T9963] tipc: Enabled bearer , priority 0 [ 126.309886][ T9963] syzkaller0: entered promiscuous mode [ 126.332859][ T9963] syzkaller0: entered allmulticast mode [ 126.349843][ T9963] tipc: Resetting bearer [ 126.362433][ T9962] tipc: Resetting bearer [ 126.372225][ T9962] tipc: Disabling bearer [ 126.390680][ T9971] netlink: 'syz.1.1194': attribute type 29 has an invalid length. [ 126.400031][ T9971] netlink: 'syz.1.1194': attribute type 29 has an invalid length. [ 126.461668][ T9979] syzkaller0: entered promiscuous mode [ 126.469160][ T9979] syzkaller0: entered allmulticast mode [ 126.481114][ T9979] tipc: Enabled bearer , priority 0 [ 126.544337][ T9986] tipc: Resetting bearer [ 126.676595][ T9920] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 127.219107][ T9970] tipc: Resetting bearer [ 127.227188][ T9970] tipc: Disabling bearer [ 127.578360][T10049] netlink: 'syz.1.1213': attribute type 27 has an invalid length. [ 127.592958][T10045] netlink: 'syz.0.1215': attribute type 3 has an invalid length. [ 127.604627][T10049] netlink: 'syz.1.1213': attribute type 10 has an invalid length. [ 127.616877][T10049] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 127.632694][T10045] netlink: 'syz.0.1215': attribute type 10 has an invalid length. [ 127.642140][T10045] syz_tun: entered promiscuous mode [ 127.650849][T10045] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 127.737877][T10058] vlan0: entered allmulticast mode [ 127.864677][ T5867] Bluetooth: hci0: command 0x0c20 tx timeout [ 127.940624][T10083] tipc: Enabled bearer , priority 0 [ 127.961869][T10083] syzkaller0: entered promiscuous mode [ 127.968068][T10083] syzkaller0: entered allmulticast mode [ 127.984889][T10084] tipc: Resetting bearer [ 128.004390][T10082] tipc: Resetting bearer [ 128.030663][T10082] tipc: Disabling bearer [ 128.172171][T10102] syzkaller1: entered promiscuous mode [ 128.177941][T10102] syzkaller1: entered allmulticast mode [ 128.288207][T10114] netlink: 'syz.3.1236': attribute type 1 has an invalid length. [ 128.383417][T10120] syzkaller0: entered promiscuous mode [ 128.389690][T10120] syzkaller0: entered allmulticast mode [ 128.403015][T10124] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 128.840193][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880574c7800: rx timeout, send abort [ 128.848632][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880574c6400: rx timeout, send abort [ 128.857301][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880574c7800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 128.871897][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880574c6400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 129.019185][T10180] netlink: 'syz.1.1254': attribute type 4 has an invalid length. [ 129.125552][T10194] __nla_validate_parse: 14 callbacks suppressed [ 129.125576][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1260'. [ 129.142834][T10197] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1257'. [ 129.261615][T10203] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1262'. [ 129.372607][T10217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1267'. [ 129.432255][T10224] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1270'. [ 129.527563][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1273'. [ 129.918288][T10258] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1279'. [ 129.997561][T10271] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1283'. [ 130.008033][T10271] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1283'. [ 130.139431][T10286] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1288'. [ 130.234358][T10286] block nbd1: server does not support multiple connections per device. [ 130.243600][T10286] block nbd1: shutting down sockets [ 130.469101][T10317] bridge_slave_0: left allmulticast mode [ 130.482110][T10317] bridge_slave_0: left promiscuous mode [ 130.488247][T10317] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.546061][T10321] veth13: entered promiscuous mode [ 130.551337][T10321] veth13: entered allmulticast mode [ 130.567353][T10319] xfrm1: entered promiscuous mode [ 130.579671][T10319] xfrm1: entered allmulticast mode [ 130.672104][T10334] geneve2: entered promiscuous mode [ 130.694457][T10334] geneve2: entered allmulticast mode [ 130.701281][ T42] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 130.720385][ T42] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 130.743495][ T42] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 130.762985][ T42] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 131.454913][T10408] syzkaller1: entered promiscuous mode [ 131.460443][T10408] syzkaller1: entered allmulticast mode [ 131.466183][ T5861] Bluetooth: hci4: command 0x0405 tx timeout [ 131.909805][T10468] sock: sock_timestamping_bind_phc: sock not bind to device [ 131.977487][T10471] validate_nla: 2 callbacks suppressed [ 131.977507][T10471] netlink: 'syz.2.1349': attribute type 3 has an invalid length. [ 132.504898][T10523] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 132.564117][T10531] openvswitch: netlink: Key type 85 is out of range max 32 [ 132.605936][T10536] veth1_to_bond: entered allmulticast mode [ 132.626616][T10536] pim6reg1: entered promiscuous mode [ 132.632040][T10536] pim6reg1: entered allmulticast mode [ 132.699948][T10539] bond0: (slave bond_slave_1): Releasing backup interface [ 132.712865][T10539] veth1_to_bond (unregistering): left allmulticast mode [ 132.976178][T10557] syzkaller0: entered allmulticast mode [ 133.065834][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.072700][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.396309][T10612] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 133.531272][T10630] raw_sendmsg: syz.0.1394 forgot to set AF_INET. Fix it! [ 133.688326][T10641] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 133.744442][T10647] netlink: 'syz.2.1401': attribute type 2 has an invalid length. [ 133.767569][T10647] netlink: 'syz.2.1401': attribute type 13 has an invalid length. [ 133.785535][T10647] veth0_macvtap: left promiscuous mode [ 133.791524][T10647] macvtap0: entered allmulticast mode [ 133.816230][T10647] macvtap0: refused to change device tx_queue_len [ 133.934007][T10665] nbd: must specify at least one socket [ 133.948516][T10665] nbd: must specify at least one socket [ 134.053662][T10682] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 134.061002][T10682] IPv6: NLM_F_CREATE should be set when creating new route [ 134.068282][T10682] IPv6: NLM_F_CREATE should be set when creating new route [ 134.076058][T10682] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 134.124849][T10686] IPVS: set_ctl: invalid protocol: 98 100.1.1.1:20003 [ 134.170878][T10694] __nla_validate_parse: 30 callbacks suppressed [ 134.170899][T10694] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1416'. [ 134.229319][T10695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1415'. [ 134.239666][T10695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1415'. [ 134.372047][T10716] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1423'. [ 134.382582][T10716] sctp: [Deprecated]: syz.1.1423 (pid 10716) Use of int in max_burst socket option deprecated. [ 134.382582][T10716] Use struct sctp_assoc_value instead [ 134.406893][T10713] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 134.467390][T10722] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1424'. [ 134.494301][T10726] bond0: (slave wlan1): Releasing backup interface [ 134.504592][T10726] batman_adv: batadv0: Adding interface: wlan1 [ 134.510819][T10726] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.537563][T10726] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 134.671485][T10742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1432'. [ 134.735686][T10751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1435'. [ 134.790257][T10759] IPv6: Can't replace route, no match found [ 134.843722][ T5861] Bluetooth: hci4: link tx timeout [ 134.848940][ T5861] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 134.902227][T10771] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1442'. [ 135.040406][T10775] openvswitch: netlink: Key type 29 is not supported [ 135.087010][T10783] sctp: [Deprecated]: syz.1.1447 (pid 10783) Use of struct sctp_assoc_value in delayed_ack socket option. [ 135.087010][T10783] Use struct sctp_sack_info instead [ 135.121627][T10783] netlink: 'syz.1.1447': attribute type 10 has an invalid length. [ 135.129807][T10783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1447'. [ 135.168006][T10787] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 135.233300][ T5182] Bluetooth: hci0: command 0x0c20 tx timeout [ 135.237747][T10792] syzkaller0: entered promiscuous mode [ 135.239592][ T5867] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 135.251835][T10792] syzkaller0: entered allmulticast mode [ 135.263802][T10794] tipc: Enabled bearer , priority 0 [ 135.270943][T10796] syzkaller1: left promiscuous mode [ 135.276399][T10796] syzkaller1: left allmulticast mode [ 135.282466][T10798] tipc: Enabling of bearer rejected, already enabled [ 135.294070][T10792] tipc: Resetting bearer [ 135.300759][T10724] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 135.374464][T10790] tipc: Resetting bearer [ 135.387596][T10790] tipc: Disabling bearer [ 135.391773][T10801] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1452'. [ 135.406481][T10801] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 135.471965][T10806] 8021q: adding VLAN 0 to HW filter on device bond10 [ 135.612013][T10824] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 135.624576][T10824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.947254][T10851] openvswitch: netlink: IPv4 tun info is not correct [ 136.272017][T10874] netlink: 'syz.0.1475': attribute type 32 has an invalid length. [ 136.283074][T10874] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 136.375708][T10871] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 136.621044][T10892] gre2: entered promiscuous mode [ 136.626273][T10892] gre2: entered allmulticast mode [ 136.699696][T10894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.904347][ T5867] Bluetooth: hci4: command 0x0405 tx timeout [ 137.099280][T10908] veth11: entered promiscuous mode [ 137.135617][T10910] netlink: 'syz.3.1487': attribute type 12 has an invalid length. [ 137.144683][T10910] netlink: 'syz.3.1487': attribute type 29 has an invalid length. [ 137.197234][T10914] netlink: 'syz.3.1489': attribute type 2 has an invalid length. [ 137.272573][T10920] netlink: 'syz.2.1492': attribute type 32 has an invalid length. [ 137.298769][T10920] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 137.313343][ T5861] Bluetooth: hci0: command 0x0c20 tx timeout [ 137.428901][T10931] netlink: 'syz.2.1496': attribute type 1 has an invalid length. [ 137.459702][T10931] 8021q: adding VLAN 0 to HW filter on device bond12 [ 137.484556][T10934] netlink: 'syz.0.1497': attribute type 1 has an invalid length. [ 137.494014][T10931] 8021q: adding VLAN 0 to HW filter on device bond12 [ 137.501298][T10931] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address [ 137.506386][T10934] netlink: 'syz.0.1497': attribute type 1 has an invalid length. [ 137.513202][T10931] bond12: (slave vxcan3): Error -95 calling set_mac_address [ 137.594571][T10939] veth15: entered promiscuous mode [ 137.802138][T10970] netlink: 'syz.4.1505': attribute type 1 has an invalid length. [ 137.872612][T10970] bond5: (slave bridge9): making interface the new active one [ 137.883034][T10970] bond5: (slave bridge9): Enslaving as an active interface with an up link [ 137.931854][T10984] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 138.159938][T11009] tipc: Enabling of bearer rejected, failed to enable media [ 138.330091][ T30] audit: type=1800 audit(1756347848.789:5): pid=11021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1518" name="memory.events" dev="tmpfs" ino=1543 res=0 errno=0 [ 138.386069][ T30] audit: type=1804 audit(1756347848.789:6): pid=11021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1518" name="/newroot/298/memory.events" dev="tmpfs" ino=1543 res=1 errno=0 [ 138.718484][T11044] tipc: New replicast peer: 255.255.255.255 [ 138.736315][T11044] tipc: Enabled bearer , priority 10 [ 139.272838][T11094] __nla_validate_parse: 28 callbacks suppressed [ 139.272860][T11094] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1538'. [ 139.317270][T11103] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1541'. [ 139.420434][T11106] syzkaller0: entered promiscuous mode [ 139.427399][T11106] syzkaller0: entered allmulticast mode [ 139.489094][T11119] netlink: 'syz.1.1543': attribute type 6 has an invalid length. [ 139.736830][T11144] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 139.774572][T11144] bond13: entered promiscuous mode [ 139.782529][T11144] bond13: entered allmulticast mode [ 139.790108][T11144] 8021q: adding VLAN 0 to HW filter on device bond13 [ 139.847674][T11148] syzkaller1: entered promiscuous mode [ 139.854152][ T979] tipc: Node number set to 1868354676 [ 139.859721][T11148] syzkaller1: entered allmulticast mode [ 139.889556][T11162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1556'. [ 139.951588][T11170] openvswitch: netlink: Duplicate or invalid key (type 0). [ 139.959204][T11170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.037081][T11176] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1561'. [ 140.084716][ T5917] IPVS: starting estimator thread 0... [ 140.183408][T11180] IPVS: using max 36 ests per chain, 86400 per kthread [ 140.555579][T11182] netlink: 'syz.2.1563': attribute type 21 has an invalid length. [ 140.574473][T11186] tipc: Enabled bearer , priority 0 [ 140.577378][T11182] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1563'. [ 140.599345][T11193] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1567'. [ 140.617492][T11187] GUP no longer grows the stack in syz.3.1564 (11187): 200000003000-20000000a000 (200000001000) [ 140.628922][T11186] syzkaller0: entered promiscuous mode [ 140.629389][T11187] CPU: 0 UID: 0 PID: 11187 Comm: syz.3.1564 Not tainted syzkaller #0 PREEMPT(full) [ 140.629413][T11187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 140.629424][T11187] Call Trace: [ 140.629431][T11187] [ 140.629438][T11187] dump_stack_lvl+0x189/0x250 [ 140.629471][T11187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.629493][T11187] ? __pfx__printk+0x10/0x10 [ 140.629516][T11187] ? find_vma+0xe7/0x160 [ 140.629539][T11187] ? unwind_next_frame+0xa5/0x2390 [ 140.629564][T11187] __get_user_pages+0x24d0/0x2ce0 [ 140.629585][T11187] ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190 [ 140.629613][T11187] ? __gup_longterm_locked+0xc68/0x1660 [ 140.629641][T11187] ? rcu_is_watching+0x15/0xb0 [ 140.629660][T11187] __gup_longterm_locked+0xde9/0x1660 [ 140.629686][T11187] ? sanity_check_pinned_pages+0x123a/0x1300 [ 140.629710][T11187] gup_fast_fallback+0x1e6a/0x2010 [ 140.629744][T11187] ? __pfx_gup_fast_fallback+0x10/0x10 [ 140.629764][T11187] ? stack_trace_save+0x9c/0xe0 [ 140.629784][T11187] ? __pfx_stack_trace_save+0x10/0x10 [ 140.629809][T11187] ? pin_user_pages_fast+0x4d/0xb0 [ 140.629830][T11187] iov_iter_extract_pages+0x35a/0x5e0 [ 140.629855][T11187] extract_iter_to_sg+0xe46/0x24e0 [ 140.629886][T11187] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 140.629919][T11187] ? __asan_memset+0x22/0x50 [ 140.629938][T11187] af_alg_get_rsgl+0x436/0x810 [ 140.629965][T11187] aead_recvmsg+0x4cc/0x13f0 [ 140.629997][T11187] ? __pfx_aead_recvmsg+0x10/0x10 [ 140.630028][T11187] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 140.630046][T11187] ? security_socket_recvmsg+0x7e/0x2e0 [ 140.630066][T11187] ? __pfx_aead_recvmsg+0x10/0x10 [ 140.630089][T11187] sock_recvmsg_nosec+0x183/0x1c0 [ 140.630114][T11187] ____sys_recvmsg+0x3aa/0x460 [ 140.630136][T11187] ? __pfx_____sys_recvmsg+0x10/0x10 [ 140.630160][T11187] ? import_iovec+0x74/0xa0 [ 140.630180][T11187] ___sys_recvmsg+0x1b5/0x510 [ 140.630200][T11187] ? __pfx____sys_recvmsg+0x10/0x10 [ 140.630217][T11187] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 140.630242][T11187] ? __fget_files+0x2a/0x420 [ 140.630274][T11187] ? rcu_is_watching+0x15/0xb0 [ 140.630290][T11187] ? lock_release+0x4b/0x3e0 [ 140.630315][T11187] ? __might_fault+0xcc/0x130 [ 140.630338][T11187] do_recvmmsg+0x307/0x770 [ 140.630359][T11187] ? __pfx_do_recvmmsg+0x10/0x10 [ 140.630376][T11187] ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0 [ 140.630407][T11187] ? __pfx_do_futex+0x10/0x10 [ 140.630435][T11187] __x64_sys_recvmmsg+0x190/0x240 [ 140.630454][T11187] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 140.630472][T11187] ? rcu_is_watching+0x15/0xb0 [ 140.630490][T11187] ? rcu_is_watching+0x15/0xb0 [ 140.630507][T11187] do_syscall_64+0xfa/0x3b0 [ 140.630533][T11187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.630550][T11187] ? clear_bhb_loop+0x60/0xb0 [ 140.630569][T11187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.630585][T11187] RIP: 0033:0x7feac898ebe9 [ 140.630601][T11187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.630617][T11187] RSP: 002b:00007feac982b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 140.630638][T11187] RAX: ffffffffffffffda RBX: 00007feac8bb5fa0 RCX: 00007feac898ebe9 [ 140.630652][T11187] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000a [ 140.630663][T11187] RBP: 00007feac8a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 140.630675][T11187] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000 [ 140.630685][T11187] R13: 00007feac8bb6038 R14: 00007feac8bb5fa0 R15: 00007ffee3d6d228 [ 140.630705][T11187] [ 140.632812][T11187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1564'. [ 140.634578][T11186] syzkaller0: entered allmulticast mode [ 141.006751][T11182] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1563'. [ 141.065018][T11203] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 141.116544][T11207] tipc: Resetting bearer [ 141.164641][T11220] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1574'. [ 141.179282][T11183] tipc: Resetting bearer [ 141.201324][T11183] tipc: Disabling bearer [ 141.232423][T11222] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1572'. [ 141.703878][ T5867] Bluetooth: hci4: command 0x0405 tx timeout [ 142.494122][T11291] netlink: 'syz.0.1592': attribute type 2 has an invalid length. [ 142.556035][T11303] netlink: 'syz.1.1594': attribute type 10 has an invalid length. [ 142.588096][T11303] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.607498][T11303] team0: entered allmulticast mode [ 142.613092][T11303] team_slave_0: entered allmulticast mode [ 142.619091][T11303] team_slave_1: entered allmulticast mode [ 142.650448][T11303] geneve0: entered allmulticast mode [ 142.666640][T11302] netlink: 'syz.1.1594': attribute type 10 has an invalid length. [ 142.667679][T11303] bond0: (slave team0): Enslaving as an active interface with an up link [ 142.708762][T11309] veth0: entered promiscuous mode [ 142.744773][T11302] syz_tun: entered allmulticast mode [ 142.759822][T11302] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 142.769730][T11321] openvswitch: netlink: IPv4 tun info is not correct [ 142.807988][T11311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.990372][T11339] IPVS: Unknown mcast interface: bridge_slave_1 [ 143.046748][T11308] veth0: left promiscuous mode [ 143.077409][T11347] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 143.208406][T11349] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 143.236612][T11347] tipc: Enabling of bearer rejected, failed to enable media [ 143.250920][T11347] syzkaller0: entered promiscuous mode [ 143.258947][T11347] syzkaller0: entered allmulticast mode [ 143.345179][T11375] rdma_rxe: rxe_newlink: failed to add bond0 [ 143.747414][T11413] hsr0 speed is unknown, defaulting to 1000 [ 144.011618][T11451] netlink: 'syz.2.1636': attribute type 1 has an invalid length. [ 144.099098][T11460] nbd: must specify an index to disconnect [ 144.108667][T11460] lo: left allmulticast mode [ 144.124554][T11460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.195537][T11467] : renamed from veth0_vlan (while UP) [ 144.426261][T11489] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 144.475824][T11494] __nla_validate_parse: 13 callbacks suppressed [ 144.475845][T11494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1648'. [ 144.527843][T11494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1648'. [ 144.755493][T11516] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1654'. [ 144.773986][T11516] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1654'. [ 144.949852][T11539] netlink: 'syz.1.1663': attribute type 1 has an invalid length. [ 145.021927][T11539] 8021q: adding VLAN 0 to HW filter on device bond4 [ 145.049553][T11539] 8021q: adding VLAN 0 to HW filter on device bond4 [ 145.061362][T11539] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 145.073765][T11539] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 145.102436][T11553] veth13: entered promiscuous mode [ 145.114269][T11553] bond4: (slave veth13): Enslaving as an active interface with a down link [ 145.146431][T11557] IPVS: set_ctl: invalid protocol: 22 10.1.1.1:20000 [ 145.251470][T11567] netlink: 'syz.2.1673': attribute type 1 has an invalid length. [ 145.379437][T11575] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1676'. [ 145.440674][T11583] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1680'. [ 145.510070][T11585] delete_channel: no stack [ 145.588277][T11598] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1685'. [ 145.605044][T11598] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1685'. [ 145.647820][T11603] netlink: 'syz.0.1687': attribute type 1 has an invalid length. [ 145.690049][T11603] 8021q: adding VLAN 0 to HW filter on device bond4 [ 145.691178][T11608] netlink: 'syz.4.1689': attribute type 11 has an invalid length. [ 145.736534][T11608] netlink: 'syz.4.1689': attribute type 11 has an invalid length. [ 145.744548][T11608] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1689'. [ 145.757707][T11608] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1689'. [ 145.831052][T11617] netlink: 'syz.2.1692': attribute type 1 has an invalid length. [ 145.860974][T11628] team0: No ports can be present during mode change [ 146.013253][ T42] nci: nci_rx_work: unknown MT 0x7 [ 146.018235][T11648] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 146.059368][T11644] netlink: 'syz.4.1700': attribute type 1 has an invalid length. [ 146.067963][T11644] netlink: 'syz.4.1700': attribute type 2 has an invalid length. [ 146.240933][T11670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.982399][T11692] syzkaller0: entered allmulticast mode [ 146.991290][T11697] Bluetooth: MGMT ver 1.23 [ 147.223291][ T5867] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 147.223613][ T5861] Bluetooth: hci0: command 0x0c20 tx timeout [ 147.235389][T11716] syzkaller0: entered promiscuous mode [ 147.241375][T11716] syzkaller0: entered allmulticast mode [ 147.250913][T11714] 8021q: VLANs not supported on ipvlan1 [ 147.359087][T11715] syzkaller0: entered promiscuous mode [ 147.366471][T11715] syzkaller0: entered allmulticast mode [ 147.377701][T11734] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 147.529569][T11752] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 147.608603][T11759] validate_nla: 4 callbacks suppressed [ 147.608624][T11759] netlink: 'syz.3.1731': attribute type 8 has an invalid length. [ 147.657397][T11762] netlink: 'syz.0.1730': attribute type 30 has an invalid length. [ 148.066941][T11797] syzkaller0: entered promiscuous mode [ 148.072555][T11797] syzkaller0: entered allmulticast mode [ 148.082619][T11799] netlink: 'syz.3.1743': attribute type 1 has an invalid length. [ 148.093420][T11799] netlink: 'syz.3.1743': attribute type 2 has an invalid length. [ 148.163911][T11806] netlink: 'syz.0.1744': attribute type 3 has an invalid length. [ 148.173024][T11806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.500229][T11839] sctp: [Deprecated]: syz.2.1754 (pid 11839) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.500229][T11839] Use struct sctp_sack_info instead [ 148.566847][T11844] dvmrp1: entered allmulticast mode [ 148.627320][T11847] hsr0 speed is unknown, defaulting to 1000 [ 148.785686][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 149.659262][T11890] syzkaller0: entered promiscuous mode [ 149.661499][T11886] __nla_validate_parse: 5 callbacks suppressed [ 149.661515][T11886] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1769'. [ 149.669330][T11890] syzkaller0: entered allmulticast mode [ 149.757839][T11895] netlink: 'syz.1.1774': attribute type 8 has an invalid length. [ 149.872009][ T7262] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 149.961140][ T7262] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 149.979393][T11924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1781'. [ 149.989018][ T7262] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 149.999641][ T7262] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 150.142317][T11944] netlink: 'syz.0.1790': attribute type 21 has an invalid length. [ 150.151027][T11941] netlink: 'syz.1.1789': attribute type 33 has an invalid length. [ 150.156106][T11944] IPv6: NLM_F_CREATE should be specified when creating new route [ 150.168493][T11941] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1789'. [ 150.188384][T11949] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1791'. [ 150.200507][T11939] bond0: (slave dummy0): Releasing backup interface [ 150.209650][T11939] dummy0 (unregistering): left allmulticast mode [ 150.236052][T11944] veth0: entered promiscuous mode [ 150.241980][T11943] veth0: left promiscuous mode [ 150.277747][T11953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1792'. [ 150.309411][T11955] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 150.360854][T11959] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 150.415350][T11968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.452864][ T5861] block nbd1: Receive control failed (result -32) [ 150.585129][T11980] hsr0 speed is unknown, defaulting to 1000 [ 150.621187][T11987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1803'. [ 150.725540][T11993] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1803'. [ 150.772494][T11994] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1804'. [ 151.050473][T12003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1808'. [ 151.072939][T12004] netlink: 'syz.3.1809': attribute type 7 has an invalid length. [ 151.090058][T12004] : entered promiscuous mode [ 151.139201][T12009] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1811'. [ 151.340967][T12024] tipc: Enabled bearer , priority 0 [ 151.350597][T12027] syzkaller0: entered promiscuous mode [ 151.356526][T12027] syzkaller0: entered allmulticast mode [ 151.367226][T12027] netlink: 'syz.1.1816': attribute type 5 has an invalid length. [ 151.401730][T12035] tipc: Resetting bearer [ 151.465151][T12023] tipc: Resetting bearer [ 151.478538][T12023] tipc: Disabling bearer [ 151.655659][T12049] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.909826][T12078] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.098966][T12095] wg2: entered promiscuous mode [ 152.106241][T12095] wg2: entered allmulticast mode [ 152.375866][T12122] syzkaller1: entered promiscuous mode [ 152.381501][T12122] syzkaller1: entered allmulticast mode [ 152.410324][T12127] tipc: Enabled bearer , priority 0 [ 152.441102][T12127] syzkaller0: entered promiscuous mode [ 152.462031][T12127] syzkaller0: entered allmulticast mode [ 152.481506][T12127] tipc: Resetting bearer [ 152.516828][T12126] tipc: Resetting bearer [ 152.517135][T12135] sctp: [Deprecated]: syz.0.1852 (pid 12135) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.517135][T12135] Use struct sctp_sack_info instead [ 152.551605][T12126] tipc: Disabling bearer [ 152.833843][T12166] netlink: 'syz.1.1861': attribute type 83 has an invalid length. [ 152.903043][T12170] team0: Device macvtap1 is already an upper device of the team interface [ 153.000766][T12185] netlink: 'syz.3.1866': attribute type 10 has an invalid length. [ 153.014796][T12185] bridge_slave_1: left allmulticast mode [ 153.023738][T12185] bridge_slave_1: left promiscuous mode [ 153.046095][T12185] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.061343][T12185] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 153.549156][T12241] netlink: 'syz.0.1882': attribute type 21 has an invalid length. [ 153.562301][T12245] veth0: entered promiscuous mode [ 153.655935][T12251] siw: device registration error -23 [ 153.666129][T12258] tipc: Invalid UDP bearer configuration [ 153.666179][T12258] tipc: Enabling of bearer rejected, failed to enable media [ 153.903227][T12283] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 154.122115][T12307] ip6gre1: entered allmulticast mode [ 154.217248][T12321] bridge_slave_0: invalid flags given to default FDB implementation [ 154.368451][T12338] team0: Device vti0 is up. Set it down before adding it as a team port [ 154.537062][T12352] netlink: 'syz.2.1921': attribute type 33 has an invalid length. [ 154.570296][T12361] netlink: 'syz.4.1924': attribute type 1 has an invalid length. [ 154.603888][T12364] netlink: 'syz.3.1923': attribute type 4 has an invalid length. [ 154.683824][T12370] tipc: Started in network mode [ 154.688754][T12370] tipc: Node identity 0a3cd0ab3c6a, cluster identity 4711 [ 154.697337][T12370] tipc: Enabled bearer , priority 0 [ 154.706031][T12369] syzkaller0: entered promiscuous mode [ 154.711577][T12369] syzkaller0: entered allmulticast mode [ 154.719765][T12370] __nla_validate_parse: 18 callbacks suppressed [ 154.719786][T12370] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1925'. [ 154.742491][T12369] tipc: Resetting bearer [ 154.758330][T12367] tipc: Resetting bearer [ 154.769266][T12367] tipc: Disabling bearer [ 154.830501][T12381] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1928'. [ 155.023949][T12397] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 155.086275][T12402] sctp: [Deprecated]: syz.4.1934 (pid 12402) Use of struct sctp_assoc_value in delayed_ack socket option. [ 155.086275][T12402] Use struct sctp_sack_info instead [ 155.118028][T12406] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1935'. [ 155.231529][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1936'. [ 155.240692][T12415] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 155.240722][T12415] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 155.266352][T12417] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1936'. [ 155.280596][T12417] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1936'. [ 155.322213][T12422] pim6reg1: entered promiscuous mode [ 155.328467][T12422] pim6reg1: entered allmulticast mode [ 155.335537][T12424] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1943'. [ 155.337554][T12421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1942'. [ 155.355733][T12424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1943'. [ 155.368974][T12422] netlink: 'syz.2.1941': attribute type 1 has an invalid length. [ 155.377058][T12422] netlink: 'syz.2.1941': attribute type 4 has an invalid length. [ 155.385354][T12422] netlink: 9422 bytes leftover after parsing attributes in process `syz.2.1941'. [ 155.533207][T12443] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 156.290771][T12477] netlink: 'syz.4.1957': attribute type 1 has an invalid length. [ 156.309345][T12477] 8021q: adding VLAN 0 to HW filter on device bond6 [ 156.328202][T12478] bond6: (slave gretap1): making interface the new active one [ 156.337161][T12478] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 156.775292][T12522] netlink: 'syz.4.1973': attribute type 27 has an invalid length. [ 156.997746][T12548] IPVS: length: 8 != 1152 [ 157.581950][T12600] 8021q: adding VLAN 0 to HW filter on device bond7 [ 157.615828][T12610] bond0: (slave team0): Releasing backup interface [ 157.624824][T12610] bridge_slave_0: left allmulticast mode [ 157.630682][T12610] bridge_slave_0: left promiscuous mode [ 157.643720][T12610] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.663152][T12610] bond0: (slave bridge_slave_1): Releasing backup interface [ 157.674998][T12610] bond0: (slave bond_slave_0): Releasing backup interface [ 157.685241][T12610] team0: Port device team_slave_0 removed [ 157.691384][T12610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.699647][T12610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.707624][T12610] batman_adv: batadv0: Removing interface: wlan1 [ 157.716273][T12610] bond0: (slave bond1): Releasing backup interface [ 158.031198][T12647] validate_nla: 2 callbacks suppressed [ 158.031220][T12647] netlink: 'syz.2.2009': attribute type 1 has an invalid length. [ 158.120002][T12652] netlink: 'syz.1.2011': attribute type 4 has an invalid length. [ 158.682767][T12699] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 158.911411][T12713] IPVS: set_ctl: invalid protocol: 59 172.20.20.65:20001 [ 158.925532][T12713] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 159.022831][T12718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.705357][T12782] netlink: 'syz.1.2053': attribute type 1 has an invalid length. [ 159.760588][T12787] __nla_validate_parse: 20 callbacks suppressed [ 159.760610][T12787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2054'. [ 159.976247][T12817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2061'. [ 160.002706][T12821] netlink: 'syz.3.2062': attribute type 4 has an invalid length. [ 160.009230][T12817] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2061'. [ 160.021997][T12817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2061'. [ 160.182107][T12845] sock: sock_set_timeout: `syz.1.2070' (pid 12845) tries to set negative timeout [ 160.215367][T12847] openvswitch: netlink: Unknown key attributes 2 [ 160.322581][T12863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2076'. [ 160.327738][T12861] smc: net device bond0 applied user defined pnetid SYZ2 [ 160.340736][T12863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2076'. [ 160.365315][T12861] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2074'. [ 160.368455][T12855] netlink: 'syz.3.2073': attribute type 11 has an invalid length. [ 160.386781][T12855] netlink: 276 bytes leftover after parsing attributes in process `syz.3.2073'. [ 160.425601][T12861] smc: removing net device bond0 with user defined pnetid SYZ2 [ 160.435576][T12861] bond0 (unregistering): Released all slaves [ 160.441651][T12871] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2079'. [ 160.456009][T12871] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2079'. [ 160.549137][T12878] tipc: Enabling of bearer rejected, failed to enable media [ 160.655002][T12893] bond0: entered promiscuous mode [ 161.170328][T12936] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 161.180556][T12936] netlink: 'syz.3.2100': attribute type 11 has an invalid length. [ 161.295998][T12942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.607031][T12971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.820934][T12980] bridge3: port 1(veth1) entered blocking state [ 161.847678][T12980] bridge3: port 1(veth1) entered disabled state [ 161.867778][T12980] veth1: entered allmulticast mode [ 161.885705][T12980] veth1: entered promiscuous mode [ 161.902979][T12992] bridge3: port 2(veth0_to_bond) entered blocking state [ 161.911034][T12992] bridge3: port 2(veth0_to_bond) entered disabled state [ 161.920774][T12992] veth0_to_bond: entered allmulticast mode [ 161.928321][T12992] veth0_to_bond: entered promiscuous mode [ 162.232942][T13023] hsr0 speed is unknown, defaulting to 1000 [ 162.381311][T13039] netlink: zone id is out of range [ 162.387163][T13039] netlink: zone id is out of range [ 162.392672][T13039] netlink: zone id is out of range [ 162.409235][T13039] netlink: get zone limit has 8 unknown bytes [ 162.455932][T13047] pim6reg527: entered allmulticast mode [ 162.740683][T13073] vlan0: entered promiscuous mode [ 162.764861][T13073] vlan0: entered allmulticast mode [ 162.770510][T13073] hsr_slave_1: entered allmulticast mode [ 162.894199][T13092] tipc: Enabled bearer , priority 0 [ 162.974061][T13096] tipc: Resetting bearer [ 163.067496][T13090] tipc: Disabling bearer [ 163.241275][T13122] netlink: 'syz.3.2153': attribute type 1 has an invalid length. [ 163.405659][T13127] bond4: (slave gretap1): making interface the new active one [ 163.416154][T13127] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 163.618824][T13157] netlink: 'syz.2.2164': attribute type 8 has an invalid length. [ 163.995721][T13197] ip6erspan0: entered promiscuous mode [ 164.061056][T13209] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 164.485908][T13255] netlink: 'syz.3.2194': attribute type 1 has an invalid length. [ 164.498669][T13257] veth0_to_team: entered promiscuous mode [ 164.506328][T13257] veth0_to_team: entered allmulticast mode [ 164.616941][T13268] netlink: 'syz.3.2198': attribute type 1 has an invalid length. [ 164.670515][T13268] veth11: entered promiscuous mode [ 164.679465][T13268] bond5: (slave veth11): Enslaving as a backup interface with a down link [ 164.691232][T13270] netlink: 'syz.2.2199': attribute type 1 has an invalid length. [ 164.744375][T13271] bond15: (slave bridge8): making interface the new active one [ 164.754646][T13271] bond15: (slave bridge8): Enslaving as an active interface with an up link [ 164.780805][T13270] bond15: (slave bridge9): Enslaving as an active interface with a down link [ 164.790322][T13279] __nla_validate_parse: 39 callbacks suppressed [ 164.790344][T13279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2198'. [ 164.814296][T13268] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2198'. [ 165.228152][T13324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2215'. [ 165.271266][T13325] netem: change failed [ 165.334437][T13335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.348361][T13335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.364517][T13336] netlink: 'syz.0.2219': attribute type 10 has an invalid length. [ 165.407738][T13338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2222'. [ 165.423368][T13338] bond0: left promiscuous mode [ 165.428194][T13338] bond_slave_0: left promiscuous mode [ 165.436458][T13338] bond_slave_1: left promiscuous mode [ 165.442268][T13338] dummy0: left promiscuous mode [ 165.572511][T13357] bridge: RTM_NEWNEIGH with invalid ether address [ 165.599987][T13357] syzkaller1: left promiscuous mode [ 165.605669][T13357] syzkaller1: left allmulticast mode [ 165.687376][T13368] netlink: 'syz.1.2229': attribute type 29 has an invalid length. [ 165.738450][T13369] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2229'. [ 165.760138][T13366] syzkaller0: entered promiscuous mode [ 165.768249][T13366] syzkaller0: entered allmulticast mode [ 165.909942][T13376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2232'. [ 165.914104][T13381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2234'. [ 165.937759][T13381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2234'. [ 166.134198][T13409] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2241'. [ 166.187785][T13406] hsr0 speed is unknown, defaulting to 1000 [ 166.214066][T13402] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2237'. [ 166.226367][T13417] tipc: Enabled bearer , priority 0 [ 166.263002][T13417] syzkaller0: entered promiscuous mode [ 166.285935][T13417] syzkaller0: entered allmulticast mode [ 166.292593][T13417] tipc: Resetting bearer [ 166.309343][ T6001] tipc: Resetting bearer [ 166.333454][T13416] tipc: Resetting bearer [ 166.433491][T13416] tipc: Disabling bearer [ 166.749321][T13444] gretap0: entered promiscuous mode [ 166.777472][T13444] 0{X: renamed from gretap0 [ 166.785922][T13444] 0{X: left promiscuous mode [ 166.796021][T13444] 0{X: entered allmulticast mode [ 166.805553][T13444] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 187.879604][T13509] __nla_validate_parse: 9 callbacks suppressed [ 187.879626][T13509] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2272'. [ 187.911350][T13509] gretap0: entered promiscuous mode [ 188.086068][T13521] netlink: 'syz.0.2275': attribute type 3 has an invalid length. [ 188.214856][ T44] IPVS: starting estimator thread 0... [ 188.281120][T13552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2281'. [ 188.303373][T13548] IPVS: using max 51 ests per chain, 122400 per kthread [ 188.386726][T13563] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.650238][T13587] netlink: 'syz.2.2292': attribute type 1 has an invalid length. [ 188.691027][T13589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2293'. [ 188.799138][T13597] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2296'. [ 188.932812][T13608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2297'. [ 189.060147][T13604] veth13: entered promiscuous mode [ 189.088799][T13628] netlink: 'syz.2.2305': attribute type 11 has an invalid length. [ 189.119615][T13628] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2305'. [ 189.362051][T13648] netlink: 'syz.1.2308': attribute type 83 has an invalid length. [ 189.396106][T13653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2311'. [ 189.405261][T13653] netlink: 'syz.0.2311': attribute type 8 has an invalid length. [ 189.689120][T13679] lo: MTU too low for tipc bearer [ 189.698109][T13673] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2315'. [ 189.707763][T13679] tipc: Enabling of bearer rejected, failed to enable media [ 189.731867][T13679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2319'. [ 189.745237][T13682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2321'. [ 190.394542][T13718] netlink: 'syz.2.2330': attribute type 1 has an invalid length. [ 190.408511][T13718] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 190.522225][T13733] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 190.539418][T13735] netlink: 'syz.4.2336': attribute type 4 has an invalid length. [ 191.642768][T13784] macvlan2: entered promiscuous mode [ 191.653953][T13784] macvlan2: entered allmulticast mode [ 191.667634][T13784] veth1_to_bond: entered promiscuous mode [ 191.678883][T13784] veth1_to_bond: entered allmulticast mode [ 191.686800][T13784] team0: Port device macvlan2 added [ 191.822437][T13814] IPVS: set_ctl: invalid protocol: 94 172.20.20.170:20001 [ 191.846791][T13820] netlink: 'syz.3.2360': attribute type 14 has an invalid length. [ 191.896013][T13536] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.896084][T13820] netlink: 'syz.3.2360': attribute type 14 has an invalid length. [ 191.918174][T13536] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.977184][T13536] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.993627][T13536] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.157324][T13840] netem: change failed [ 192.282577][T13872] netlink: 'syz.0.2373': attribute type 1 has an invalid length. [ 192.290458][T13872] netlink: 'syz.0.2373': attribute type 1 has an invalid length. [ 192.352912][T13877] bond5: (slave bridge9): Releasing active interface [ 192.380686][T13877] bond6: (slave gretap1): Releasing active interface [ 192.423374][T13877] veth1_to_bond: left allmulticast mode [ 192.429166][T13877] veth1_to_bond: left promiscuous mode [ 192.450171][T13877] team0: Port device macvlan2 removed [ 192.991005][T13950] __nla_validate_parse: 48 callbacks suppressed [ 192.991028][T13950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2396'. [ 193.011350][T13950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2396'. [ 193.023066][T13951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2396'. [ 193.037334][T13951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2396'. [ 193.112972][T13955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2399'. [ 193.138787][T13962] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2400'. [ 193.219141][T13969] validate_nla: 2 callbacks suppressed [ 193.219160][T13969] netlink: 'syz.0.2402': attribute type 1 has an invalid length. [ 193.276111][T13969] 8021q: adding VLAN 0 to HW filter on device bond6 [ 193.290551][T13968] 8021q: adding VLAN 0 to HW filter on device bond6 [ 193.298062][T13968] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 193.323532][T13968] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 193.377273][T13983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2407'. [ 193.436388][T13991] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2409'. [ 193.649347][T14011] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 193.670603][T14011] tun0: tun_chr_ioctl cmd 1074025675 [ 193.676207][T14011] tun0: persist disabled [ 193.884936][T14037] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2422'. [ 194.002140][T14039] netlink: 'syz.0.2425': attribute type 4 has an invalid length. [ 194.018655][T14039] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2425'. [ 194.041931][T14039] `: renamed from bond0 [ 194.317542][T14072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.398637][T14081] netlink: 'syz.0.2435': attribute type 4 has an invalid length. [ 194.506710][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.513915][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.593518][T14099] tipc: Enabled bearer , priority 0 [ 194.619147][T14099] syzkaller0: entered promiscuous mode [ 194.629323][T14099] syzkaller0: entered allmulticast mode [ 194.660303][T14103] netlink: 'syz.2.2444': attribute type 16 has an invalid length. [ 194.677811][T14089] tipc: Resetting bearer [ 194.698620][T14103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.958593][T14124] veth1_to_bond: entered allmulticast mode [ 194.968817][T14124] veth1_to_bond: left allmulticast mode [ 194.984885][T14124] veth1_to_bond: entered allmulticast mode [ 195.009101][T14124] veth1_to_bond: left allmulticast mode [ 195.065049][T14142] netlink: 'syz.4.2455': attribute type 1 has an invalid length. [ 195.065049][T14140] netlink: 'syz.4.2455': attribute type 1 has an invalid length. [ 195.095231][T14137] bond16: entered promiscuous mode [ 195.100436][T14137] bond16: entered allmulticast mode [ 195.106474][T14137] 8021q: adding VLAN 0 to HW filter on device bond16 [ 195.117679][T14137] bond16 (unregistering): Released all slaves [ 195.162446][T14152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.218545][T14155] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20002 [ 195.288931][T14161] netlink: 'syz.2.2461': attribute type 1 has an invalid length. [ 195.296835][T14161] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 195.312298][T14088] tipc: Resetting bearer [ 195.320029][T14088] tipc: Disabling bearer [ 195.337606][T14157] bridge: RTM_NEWNEIGH with invalid ether address [ 195.345957][T14157] netlink: 'syz.1.2458': attribute type 3 has an invalid length. [ 195.917082][T14226] netlink: 'syz.3.2483': attribute type 1 has an invalid length. [ 196.031008][T14240] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 196.042984][T14240] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 196.051457][T14240] CPU: 0 UID: 0 PID: 14240 Comm: syz.1.2488 Not tainted syzkaller #0 PREEMPT(full) [ 196.061001][T14240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 196.071094][T14240] RIP: 0010:rose_rt_ioctl+0x162/0x1250 [ 196.076585][T14240] Code: 3f 31 ff 44 89 fe e8 3d de 52 f7 45 85 ff 74 0a e8 33 db 52 f7 e9 76 02 00 00 48 8b 44 24 28 48 8d 50 10 49 89 d7 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 48 89 54 24 20 0f 85 87 02 00 00 44 0f b6 22 [ 196.096475][T14240] RSP: 0018:ffffc9001d27fae0 EFLAGS: 00010202 [ 196.102575][T14240] RAX: 0000000000000000 RBX: ffff888057554800 RCX: 0000000000000002 [ 196.110552][T14240] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 196.118962][T14240] RBP: ffffc9001d27fc10 R08: 0000000000000003 R09: 0000000000000004 [ 196.127023][T14240] R10: dffffc0000000000 R11: fffff52003a4ff4c R12: dffffc0000000000 [ 196.135001][T14240] R13: dffffc0000000000 R14: ffff888031bc7100 R15: 0000000000000002 [ 196.142989][T14240] FS: 00007fbb904c26c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 196.152007][T14240] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.158592][T14240] CR2: 000000110c36a506 CR3: 000000004f75c000 CR4: 00000000003526f0 [ 196.166569][T14240] Call Trace: [ 196.169852][T14240] [ 196.172786][T14240] ? __pfx_rose_rt_ioctl+0x10/0x10 [ 196.177917][T14240] ? bpf_lsm_capable+0x9/0x20 [ 196.182612][T14240] ? security_capable+0x7e/0x2e0 [ 196.187575][T14240] rose_ioctl+0x3ce/0x8b0 [ 196.191917][T14240] ? __pfx_rose_ioctl+0x10/0x10 [ 196.196766][T14240] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 196.201808][T14240] sock_do_ioctl+0xd9/0x300 [ 196.206340][T14240] ? __pfx_sock_do_ioctl+0x10/0x10 [ 196.211473][T14240] ? do_futex+0x333/0x420 [ 196.215807][T14240] ? security_bpf+0x7e/0x300 [ 196.220409][T14240] sock_ioctl+0x576/0x790 [ 196.224740][T14240] ? lock_release+0x4b/0x3e0 [ 196.229532][T14240] ? __pfx_sock_ioctl+0x10/0x10 [ 196.234384][T14240] ? __fget_files+0x2a/0x420 [ 196.238984][T14240] ? __fget_files+0x3a0/0x420 [ 196.243676][T14240] ? __fget_files+0x2a/0x420 [ 196.248280][T14240] ? bpf_lsm_file_ioctl+0x9/0x20 [ 196.253223][T14240] ? __pfx_sock_ioctl+0x10/0x10 [ 196.258101][T14240] __se_sys_ioctl+0xfc/0x170 [ 196.262697][T14240] do_syscall_64+0xfa/0x3b0 [ 196.267300][T14240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.273372][T14240] ? clear_bhb_loop+0x60/0xb0 [ 196.278057][T14240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.283949][T14240] RIP: 0033:0x7fbb8f58ebe9 [ 196.288393][T14240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.308093][T14240] RSP: 002b:00007fbb904c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.316511][T14240] RAX: ffffffffffffffda RBX: 00007fbb8f7b5fa0 RCX: 00007fbb8f58ebe9 [ 196.324498][T14240] RDX: 0000000000000000 RSI: 00000000000089e4 RDI: 0000000000000004 [ 196.332560][T14240] RBP: 00007fbb8f611e19 R08: 0000000000000000 R09: 0000000000000000 [ 196.340531][T14240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.348503][T14240] R13: 00007fbb8f7b6038 R14: 00007fbb8f7b5fa0 R15: 00007ffc18766408 [ 196.356496][T14240] [ 196.359530][T14240] Modules linked in: [ 196.363539][T14240] ---[ end trace 0000000000000000 ]--- [ 196.369025][T14240] RIP: 0010:rose_rt_ioctl+0x162/0x1250 [ 196.374550][T14240] Code: 3f 31 ff 44 89 fe e8 3d de 52 f7 45 85 ff 74 0a e8 33 db 52 f7 e9 76 02 00 00 48 8b 44 24 28 48 8d 50 10 49 89 d7 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 48 89 54 24 20 0f 85 87 02 00 00 44 0f b6 22 [ 196.394471][T14240] RSP: 0018:ffffc9001d27fae0 EFLAGS: 00010202 [ 196.400586][T14240] RAX: 0000000000000000 RBX: ffff888057554800 RCX: 0000000000000002 [ 196.408616][T14240] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 196.416806][T14240] RBP: ffffc9001d27fc10 R08: 0000000000000003 R09: 0000000000000004 [ 196.424829][T14240] R10: dffffc0000000000 R11: fffff52003a4ff4c R12: dffffc0000000000 [ 196.432921][T14240] R13: dffffc0000000000 R14: ffff888031bc7100 R15: 0000000000000002 [ 196.436368][T14247] hsr0 speed is unknown, defaulting to 1000 [ 196.440982][T14240] FS: 00007fbb904c26c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 196.456039][T14240] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.462650][T14240] CR2: 000000110c36a506 CR3: 000000004f75c000 CR4: 00000000003526f0 [ 196.470674][T14240] Kernel panic - not syncing: Fatal exception in interrupt [ 196.478031][T14240] Kernel Offset: disabled [ 196.482357][T14240] Rebooting in 86400 seconds..