last executing test programs: 2.360068521s ago: executing program 1 (id=1172): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000180), 0x2) r4 = openat$cgroup_int(r1, &(0x7f0000000100)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000180), 0x2) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_GET_MR(r5, 0x114, 0x2, &(0x7f0000000140)={{0x0}, 0x0, 0x3b}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x56e, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f0000000100)={0xf}, 0x1) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x17, 0x0, 0x1, [@generic="b0"]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) 2.104289459s ago: executing program 0 (id=1177): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}, {{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x7e6bb0}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x134}}, 0x0) socket$inet(0x2, 0x80000, 0x3) 1.844780537s ago: executing program 0 (id=1183): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) 1.743554816s ago: executing program 3 (id=1185): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)}, 0x0) (async, rerun: 32) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) (async, rerun: 32) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 1.626093794s ago: executing program 4 (id=1186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x94}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb4}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000001740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x3}]}, @enum, @int]}, {0x0, [0x0, 0x0]}}, 0x0, 0x4c, 0x0, 0x3}, 0x28) close(0x3) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="2f0000001c0005fffffff7000d000000020000000b000000ec0091c913000180f0ffffeb46860f21244e36c3fdb9c3", 0x2f}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x10, 0x8000, 0x0, 0x40, {{0x7, 0x4, 0x0, 0x22, 0x1c, 0x64, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010100, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@broadcast]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x80, 0x7800, 0x8, 0x800, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x65, 0x0, 0x7, 0x29, 0x0, @multicast1, @empty, {[@end]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x90, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000080}, 0x44008) 1.403184472s ago: executing program 1 (id=1189): socket$nl_route(0x10, 0x3, 0x0) getpid() r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) writev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e3371", 0x24}], 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-arm64\x00'}, 0x58) r5 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2d}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r5, 0x84, 0x9, &(0x7f0000000380), 0x98) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x10d95}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044080}, 0x4040) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r7, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e000c371303ed6a33fe86890df20e87"]) ioctl$TUNGETIFF(r7, 0x800454d2, &(0x7f0000000140)={'vcan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010002800a1ea29", @ANYRES32=0x0, @ANYBLOB="1720000021200000280012800b0001006970366772650000180002801400060000000000000000000000ffff0a01010214000300"/68], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 1.38884572s ago: executing program 0 (id=1190): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) readv(r1, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000001c0)=""/50, 0x32}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000068000301000000ef00000000000100000000000006000300000000000800010000000000240002"], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 1.271350734s ago: executing program 1 (id=1191): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000002c00070100000000fddbdf25017c000008000180020000001c000280180001"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x800, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 1.220096798s ago: executing program 2 (id=1192): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) close(r0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) recvmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)=""/99, 0x63}, {&(0x7f0000000280)=""/142, 0x8e}, {&(0x7f0000000340)=""/216, 0xd8}, {&(0x7f0000000440)=""/139, 0x8b}], 0x4, &(0x7f0000000500)=""/207, 0xcf}, 0x40002000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, r2, 0x5, 0x0, 0x1fffe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xe7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc014}, 0x24018034) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r4}, 0x10) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) 1.212687549s ago: executing program 4 (id=1193): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='vm_unmapped_area\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='vm_unmapped_area\x00', r2}, 0x18) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4}, 0x50) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 1.158965114s ago: executing program 2 (id=1194): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='syzkaller0\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) bind(r1, &(0x7f0000000080)=@nfc_llcp={0x27, r2, 0xffffffffffffffff, 0x5, 0x8, 0x1, "777483993ebabe3f9e62982bd0c693eb43d9e67af0735a0d6009b80e2b10c060b0e3a44cad1ac038f135499cad44eeee9ba923b56720a25cccbbd291bc02f9", 0x13}, 0x80) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000100)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000140)=0x2c) r3 = socket$inet6(0xa, 0x80000, 0x1) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000180)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000001c0)={0x1f, 0x3, 0x2}, 0x6) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000200)={r1, 0x0, 0x7a, 0x7}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f00000002c0)={0x354, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0xc0, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}, {0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x649}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xb69c}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x40}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x72c4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x400}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffff8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x66}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0x18c, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x100}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xdeb}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x10001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4762}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x48}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x10001}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8001}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfff}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffe2c}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8000}]}, {0x4}]}, @NL80211_ATTR_REG_RULES={0xcc, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000001}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x40}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7bb}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x40}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x26}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80000001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x51fe8142}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}]}, 0x354}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000740)={0x0, @vsock={0x28, 0x0, 0x2710}, @can={0x1d, r7}, @nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x2000000}, 0xfff, 0x0, 0x0, 0x0, 0xf97, &(0x7f0000000700), 0x3, 0x3, 0xf}) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0x7, &(0x7f00000007c0)={0x0, 0xfffffffe, 0x9, 0x1000}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, [@exit]}, &(0x7f0000000840)='syzkaller\x00', 0x3574, 0xde, &(0x7f0000000880)=""/222, 0x41100, 0x0, '\x00', r7, @fallback=0x32, r5, 0x8, &(0x7f0000000980)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000009c0)={0x1, 0x2, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000a00)=[r5], &(0x7f0000000a40)=[{0x2, 0x1, 0x5, 0xf}, {0x1, 0x3, 0x7, 0x8}, {0x4, 0x5, 0xe, 0x7}, {0x5, 0x3, 0x3, 0x7}, {0x1, 0x2, 0x6, 0x2}, {0x3, 0x1, 0xc, 0xa}], 0x10, 0x101}, 0x94) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000bc0)=0x0) sendmsg$nl_route(r5, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)=@RTM_GETNSID={0x44, 0x5a, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NETNSA_PID={0x8}, @NETNSA_NSID={0x8}, @NETNSA_PID={0x8}, @NETNSA_PID={0x8, 0x2, r9}, @NETNSA_FD={0x8, 0x3, r5}, @NETNSA_FD={0x8, 0x3, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000d40), r5) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x34, r10, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000e40)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5db1}) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000ec0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000f80)={&(0x7f0000000e80), 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x34, r6, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xd, 0x52}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xc7a}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0xc880) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000fc0)=0xffffffffffffffff, 0x4) splice(r5, &(0x7f0000001000)=0x200, r11, &(0x7f0000001040)=0x8, 0x0, 0xa) write$rfkill(r5, &(0x7f0000001080)={0x400, 0x3, 0x2, 0x0, 0x1}, 0x8) 1.108013811s ago: executing program 0 (id=1195): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff07000d0001000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x0, 0x0, 'lblcr\x00', 0xc, 0xfffffff7}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @multicast}, 0xfffffffffffffce0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async) socket$netlink(0x10, 0x3, 0x0) (async) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff07000d0001000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x0, 0x0, 'lblcr\x00', 0xc, 0xfffffff7}, 0x2c) (async) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) (async) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x6) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @multicast}, 0xfffffffffffffce0) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) (async) 1.093867479s ago: executing program 1 (id=1196): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071120f000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe400001000000000800010000000100"], 0x24}}, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@tipc=@name, &(0x7f00000000c0)=0x80, 0x800) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000007c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000040}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="40050000", @ANYRES16=0x0, @ANYBLOB="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"], 0x540}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071120f000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe400001000000000800010000000100"], 0x24}}, 0x0) (async) accept4(0xffffffffffffffff, &(0x7f0000000040)=@tipc=@name, &(0x7f00000000c0)=0x80, 0x800) (async) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000007c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000040}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="40050000", @ANYRES16=0x0, @ANYBLOB="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"], 0x540}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) 1.09099674s ago: executing program 4 (id=1197): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) connect$pppoe(r1, &(0x7f0000000440)={0x18, 0x0, {0x1, @local, 'bridge_slave_1\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000007640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000008c0)="ab36bb1d1e97066fbddb0a9a7918896e5fe8d16f6e3c3e44446d030467d59627135d4e0ba3c8fecd9797b789e26fcffc39e4541078c61aaf021c38632b253f5dba3cb20a2dca3fd7", 0x48}, {&(0x7f0000000940)="935b825961637eedd13847a2b4d1cfcde13c358b3424954a3d0e1b594854f14578b3a704295041e5ba9ce03aa1a855780284276938d06ed7a033277ce11d486101dc80e052c8c77a98a58a6952f3e3fd981045ab65f4c0caf555ec441ecef9155c99b8ed5d021b27d1fc42271e4d326261a2ca03ad6fa2798f4b070cdefd16593fa491647009f75d0abfa339cae23f3b0a958413ae00bb375bbf66199721b22486b64fbd79ddc0699721432365bbc8cbb144738129f760626ac30e6243f8580cf98cf01ca69f97586de55012288cd0a9a6f16ada47e8f32b1d005d0268aee0ea90ad81cfe5acb5032cd6", 0xea}, {&(0x7f0000000a40)="f0bda5dd40985afe7197", 0xa}, {&(0x7f0000000a80)="4076987192ae1bbfa67d906469ad89929ae093fe37d3d277f0edc5bb2549ac0e7d3cc1deccf9ff822d0dcf0082c5ef8859996416b0d9741fe3f6e2fd319ceb9d8f07e7427dc9859c881662dfa8d8b5be36091d72110e83234c4b9aac6d96863de31fe9518a", 0x65}, {&(0x7f0000000b00)="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", 0x44a}], 0x5}}], 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x10, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@generic="7d042c7c05f82f9f82c4d3048fddc18d6920ce34a9768cfab685c12d8f459e"]}, 0x34}}, 0x0) 948.839847ms ago: executing program 0 (id=1198): r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0xd, 0x6, 0xb03, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x3c, r6, 0x1, 0x0, 0x0, {0x49}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 903.937669ms ago: executing program 4 (id=1199): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0x20, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38}}) r5 = accept$ax25(0xffffffffffffffff, &(0x7f0000000740)={{0x3, @default}, [@null, @netrom, @remote, @netrom, @rose, @default, @bcast]}, &(0x7f0000000800)=0x48) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000840)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000940)=0xe8) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000980)={0x3, @bcast, r6}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000400007012bbd7000fedbdf250400c28004000180040008"], 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x2c, 0x0, 0xb, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8880) setsockopt(r8, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000180)={r10, @in={{0x2, 0x4e22, @broadcast}}}, &(0x7f0000000280)=0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000731139000000000020000000000000009500200000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x19, &(0x7f0000000340), 0x8) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x88}}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000600)={'vxcan0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, r12, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffff}]}, 0x60}, 0x1, 0x0, 0x0, 0xf3e64dd7a843a216}, 0x4) socket(0x1e, 0x4, 0x0) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000070000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 903.211072ms ago: executing program 2 (id=1200): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, 0x0, &(0x7f0000000100)) (async) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5, 0xffffffffffffffff, 0x4, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x68}}, 0x0) 901.015284ms ago: executing program 1 (id=1201): ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000440)) socketpair(0x22, 0x80803, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x2a, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xffffff00}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @local}]}}]}, 0x44}}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_channels={0x2b}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in=@initdev, @in6=@remote}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x30, r8, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2b}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x2f}}]}, 0x30}}, 0x20000010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0x400, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff1, 0xfff3}, {0x6}, {0x5, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 809.937722ms ago: executing program 3 (id=1202): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x81, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff886411004048633321fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f249", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[], 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) poll(&(0x7f0000000040), 0x55, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000080)=@srh, 0x8) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000100)=ANY=[], 0x68) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) recvmsg(r4, &(0x7f0000000300)={&(0x7f0000000080)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)=""/196, 0xc4}], 0x1, &(0x7f0000000200)=""/207, 0xcf}, 0x1) write$6lowpan_control(r0, &(0x7f0000000340)='connect aa:aa:aa:aa:aa:10 2', 0x1b) ioctl(r4, 0x8b0f, &(0x7f0000000040)) 794.412779ms ago: executing program 2 (id=1203): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @rand_addr=0x64010103}}, 0x0, 0x0, 0x39, 0x0, "c3218d82c5890101d7cdb23c72887c897926a8856263b50c57bfccf9f362f16f21f5c8facc1d1518103bbde1a9fe13f6545bbdff9c1351ba69e297337d6a5e4a94bd192900"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x0, 0x0, 0x0, 0x4000000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 727.174872ms ago: executing program 4 (id=1204): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xfb5, 0xfffffffe}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600156f"], 0x18}}, 0x8080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x4, &(0x7f0000001500)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6e}]}, &(0x7f0000001600)='syzkaller\x00'}, 0x90) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES16=r1], 0xfc}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) 689.239523ms ago: executing program 4 (id=1205): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0xffffffff}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x2c}, 0x20) syz_emit_ethernet(0x56, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800200600fe880000000000000000000000000001fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8ac2d8f161a210f2de10c8010412b48dcea1dd2411bfe1e1c38f84ab6da3aa6a2ceaa6176d7eb8befc765f95a5f62443d182f77af471ba1ed978c6e75a6505ef9f1151dc8d9695e5fb0ad94acbb44489dde7a1d785d2146327bd40366c"], 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000000)) r1 = socket(0x2, 0x80805, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001000010027bd7004ffdbdf2500000000", @ANYRES32, @ANYBLOB="104e0600"], 0x4c}, 0x1, 0x0, 0x0, 0x400c880}, 0x4008002) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000478000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c13024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6174655f3000000000080001"], 0xd4}}, 0x4000010) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) writev(r4, &(0x7f0000000040)=[{&(0x7f00000012c0)="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", 0xfd1}], 0x1) syz_emit_ethernet(0xbe, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x4e21, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0xfffffffd, "717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe0a9a66d4", "0838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c7209", "7b8d57a7c7bce1276d915e2d6d05e53c86a47b318a3ac04c5dd38853", {"7719eecd7b1f5591c287cd8bdc5cb100", "705e0032bb769f2581b5b6ae81bd7bad"}}}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400eaef", @ANYRES16, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYBLOB='\f'], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000002c0)={r6, 0x7}, 0x8) sendmsg$kcm(r1, &(0x7f0000000740)={&(0x7f0000000040)=@hci={0x1f, 0x8, 0x3}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="31e487db9b646bb4cff1737fb5eb9d30ab472c52298e5e999694ac677ae1fb994c88fbc5", 0x24}, {&(0x7f0000000100)="039e902a0fce55374ad1861b4ed76026b3bedcfc2a2a789581d107221c98a0cbecfe8c9cc868eb3d4ca76238d5cbb745b970e4d05a9cec0a7905d9a4cd854d57d06933b99ee569985cd5d449bb7dac3409a6140ff2adf01350a012ca9b3289", 0x5f}, {&(0x7f00000002c0)="7cca19934361d614181d8cf64f8d717729062506d6eec2a4fe912792ecfb2846416c2c3cf004f758bcbbdcdf28a0699c730e25c1bb58a9734ad52c69536617659f582b87a9bb788ad1e9b7e5781b0827fdd7a57f6d12ce7af0de996edafdbd84eefae76a574c04c3ccf18c8f5b5292ef397a9b5c91b220d32d313a93d4669d2fa9d4cd66578797669765422197bf48cc97d1112ac1876887e0032b", 0x9b}, {&(0x7f0000000380)="c3dab3b0c6e67ade307fef760ecd58752c818680d7568705be2fdbd60c220803a0d85188c890b2c6b90ed300d9b694a1d29d1c321e851dc199123650fcd044dec0fdf8050f046a1e95130a17ae", 0x4d}], 0x4, &(0x7f0000000400)=[{0x58, 0x119, 0x0, "8ba927a1390ee9d4c406e7eb5172411e6f903c3d759b36c825c1cd436b721d0ddf567d8286d86eb57309ef6a2161919b359962428f64e20652495f58ae0b07e00d"}, {0x68, 0x116, 0xa0, "3ed94e871c90c49f3fa3b2033b57bacbdaa44d977598fc5b6f64987787a94660d749d4aeaf2cccff5fbbf8cd83371522d9b5a78febda11265244865bab2470c7d2527b692261131fdbfad5711d1ad4996c7f18"}, {0x58, 0x101, 0x800, "3e18aa4fc17f9d39b929b6dbe8b41ea078e712920c2a1650069d76c05dab9d7913bef98d642b2b3cf99bb769bcd82c5af1d6f79d96ae9c3e224870c3119be809224d6ce1"}, {0x18, 0x104, 0xd94a, "6a1e0f"}, {0x80, 0x107, 0x3, "c0b0e258935cda8088c8edcdc5d1ef316081d34349418b28dd096199c264ee2ab880b71a8045b42135c740485285cda6db749a666b3f021eaf9a5fcd15bff12fc8f00ae0db2ac98c8530e81682a3deec19234e1a1473db1f7d1dce9a1ba2efbc6b246be889cde68e9f9c8d7f3522"}, {0x48, 0x29, 0xc89c20b, "71626ccb02b190eeb795816de0c870469d50958bb47937419a2e9da4c49012f751018a48535301841165474aa2560c929a2d"}, {0x30, 0x10d, 0x6, "75ec7caadf8398b971a3988cb03bf8082f2c339127bf9ebfffa296ca613e89"}, {0x48, 0x107, 0x4, "fe6a14089522c5a9918bd54ce46a588bd7f2b928057146facf308359941d9c0df36b8cfb79f36bfac56f12336a68fc898b68c51e"}, {0x30, 0x117, 0xe72, "42bc7edbffb5f4837347791aca50d041856613873d415794d210f9"}, {0x60, 0x1d, 0x9, "fe4c6c84516ac59319bddb63ee68066ac4c24d7d5661c4b54a3c01e14a60390d39afce13e9a6f1c0f8825a988e06aee0c7bdb1e1c818d17daa2ef846c4516d3321fb40813b68a972fa8678be9cf0"}], 0x300}, 0x4000) 670.159123ms ago: executing program 2 (id=1206): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x2, &(0x7f0000000300)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x49, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000005c0)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8e}, 0x90) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb8100100086dd624bc7fb0000000000000000000000000000000000000000ffff000000004e204e22043190782cc8fd14070ebb69a2e61eaa97a6c53be217717f60d63afd30196f3c6cee451539c3394692068cf54873ad99bd68659c5365fba227be210ce876758e32700be2f0d44b9c81f5899f23167a641a44c6"], 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}, {0x0, 0x2}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x4, 0x4}]}}, 0x0, 0x56}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0xc}, {0x6}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000340)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x88}}}}}}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r4, 0x6, 0xd, &(0x7f0000000000)="b86bc0", 0x3) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x25, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0xc, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7fff}, @map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x80000d}, @map_idx, @generic={0x6, 0x7, 0x1, 0x6, 0x800}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9416}}], &(0x7f0000000200)='GPL\x00', 0x68a880, 0x4c, &(0x7f00000002c0)=""/76, 0x1e00, 0x22, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000240)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x8200, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000b40)={'ip6erspan0\x00', 0x20}) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r5, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0], 0x0, 0x6f, &(0x7f0000000540), 0x0, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xcd, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f00000000c0)={'veth0_to_bridge\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x5}}) setsockopt$inet6_tcp_int(r4, 0x6, 0x22, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r5, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000780)=[0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa9, &(0x7f0000000800)=[{}, {}], 0x10, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x73, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) 628.08287ms ago: executing program 1 (id=1207): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000380)=@req={0x40, 0x8, 0x400, 0x81}, 0x10) r2 = socket(0x10, 0x80002, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e5002abd7000ffffffff07000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="00000000fe88ea0000000000000000000000010186dd00"], 0x38}}, 0xc4c4) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x28, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x39) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030000797a320000000014000000110001", @ANYRES16=r4], 0x7c}, 0x1, 0x0, 0x0, 0x4044010}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000300)=ANY=[@ANYRESOCT], &(0x7f0000000280)='GPL\x00', 0x5, 0xcc, &(0x7f0000000580)=""/204, 0x0, 0x0, '\x00', r6, @flow_dissector, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100da"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$NFT_BATCH(r7, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) gettid() r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050427bd7000fddbdf250100000008000100", @ANYRES32=r12, @ANYBLOB="4400028040"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x460d4) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r13, &(0x7f0000002300)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000000940)='z', 0x1}], 0x1}}], 0x2, 0x0) 531.901215ms ago: executing program 2 (id=1208): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x11, &(0x7f00000000c0)=0xfffffffe, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) setsockopt$inet6_tcp_int(r4, 0x6, 0xc, &(0x7f0000000240)=0x40, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="050018013000000005001901fe98a9447803d60c000000080026008516000016539491efc8614f4b97452fe545306e24e56d4f70b792ace68868aacb700bdcefb166d8a3c5c0d0c6d74e63b7760c0d97692223a98c2cdd"], 0x34}}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x83c2f250af135e4a) 522.339741ms ago: executing program 3 (id=1209): r0 = socket$inet(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r2}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r3, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x2, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xf3f, 0x70bd27, 0x25dfdbbd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x4044000) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a40)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x3a8, 0x3a8, 0xffffffff, 0x2c0, 0x228, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x48}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r11) sendmsg$NLBL_UNLABEL_C_STATICADD(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r12, 0x201, 0x0, 0x0, {0x7, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x7, 0x4, @initdev={0xac, 0x35, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @NLBL_UNLABEL_A_IPV4MASK={0x5, 0x5, @local={0xac, 0x14, 0x3}}]}, 0x4c}, 0x8, 0x3000000000002}, 0x0) ioctl$HCIINQUIRY(r10, 0x800448d4, &(0x7f0000000000)={0x0, 0x2, '\x00', 0x0, 0xfd}) 320.062615ms ago: executing program 3 (id=1210): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180)=0x6e) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1400000004000000080000000600000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002ff00"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x200000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), r2) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010026bd7000fbdbdf25020000000900010073797a3100000000140002007663616e3000000000000000000000000900030073797a3200000000"], 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300001d0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000200fe8000000000000000000000000000bb000000000000000004000400000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe880000000000000000000000000001000000000000000005000700000000000a00000000000000fc01000000000000000000000000000000000000000000000200130001"], 0xe8}}, 0x0) (async) r5 = socket(0x1, 0x803, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="620ac4ff0000000071108d000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) (async) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) sendmsg$NL80211_CMD_RELOAD_REGDB(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r10, 0x1, 0x70bd22, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r11 = socket$igmp(0x2, 0x3, 0x2) (async) r12 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r12, &(0x7f00000052c0)=@nameseq={0x1e, 0x4}, 0x10) (async) setsockopt$MRT_TABLE(r11, 0x0, 0xcf, &(0x7f0000000040)=0xfe, 0x4) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0, 0x3}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4, r13, 0x4}, 0x38) getpeername$inet(r11, &(0x7f0000000200)={0x2, 0x0, @broadcast}, &(0x7f0000000280)=0x10) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x1c, r7, 0xa586dda9ab162a1b, 0x0, 0xffffffff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd}]}, 0x1c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 306.768335ms ago: executing program 3 (id=1211): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111b8000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f00000001c0)=0x8, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockname(r5, 0x0, &(0x7f00000000c0)) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000680)=[{&(0x7f00000002c0)="39192e86ef3a9507844cbf2ebe5767a67d04b76fdb2517e5ef35fbbafb03e86df2e1049bd42d211f9141b322084724c04f9d2a75e64ab6edab8cedea3d73721392b9e4bc4a5e86bac752fdc28d990294a6d0c8fdd6eca9e71b2add927334876c6a8d18a2fadc9cdc4b243651d91079f8a9850e9ebedcabc0f90c1fb6120d25f08884bab448a092a75263d41afea8475439bde50c644499f3642003ee0b43a88f239e9e7aea9a954fb887f7990bf1e938ddd2ed281fd6dc0bbd0fc354002d3def7fb1b250213446e193", 0xc9}, {&(0x7f00000003c0)="9d5841c25c0ee2636cff1ce13083c9e34dfda974d790fd1aed24bc4bf81a9b3617fb1f687a3a1b024766cceee22890826f2533903964629a3ab230dbabcd632182eeeb0d532c67e41fad7608d34f2eef951552b7170f24af7988e65fb53acef083c08007c4c36ade92b27e963d275e5e61dd8d9ab3c1e809eaf6d436518d1f8e0a18c3ed72517ef78eb5978a33b633957887245d0ab7de6b1bba88a18194313d48c1cc78b6f9605df330c71ee4cf17e9a3a57c6a6bc8abb4dce2a901", 0xbc}, {&(0x7f0000000480)="da29a978f0f57127306e06f94cb171ced00e234bfda364dfa4be3bbc32978f64ff5d1cf3bdc8bf0bfedde952ded66045da2d4cbc2fe06f026a08182a96bd1b3a3b34f18fc113111ef646c7cc0f86a8a0af270417f669d15597e09a4cdfd67b3c7d686cfe4de648cf144df7e90e846caa151f7fbf9a12d668b9b0791dafad2cb9cc9b618ab28814b0bc038d01a932e5acbd17df67c07bfa42581c658713bd72ba9459e374d94b3708b8169ff2675d51833b5efb7b93f15f2b9e044db8fbcb9f4a863322b6869dda76c3fe8e529d12444903f520", 0xd3}, {&(0x7f0000000200)="a0d76d3223bd", 0x6}, {&(0x7f0000000580)="e4f2ede02da162c126ba9033a078d67c4e2d40302ebf59bb95348a144f595f98f22030c865cc08963d91ff92d0548da79c114e9bbd0ba9da2e728ff4c1c09faf345b6910b7f1ce6b62b6906823d85d7521d733e5885d4ae16105db7ac69e020cb21eeba74565b4ef0dc147b4d823a3dcd24c495ae11746cec56796d86e1f735ac39f586e5950b44fdeb9db798db1ffda6948c010fc21ec84c3baaee346a1957b06b50708b89d6c00fe88908d85dbbe7181bafad8500a633b65d2f0496f95db0ca1491559a2c4ce5e5eaf583847b7978656079203574c6a4952f6ddd3eaea81f8879b367d63f6cd0c627305d03b9b235b22b9ac", 0xf3}], 0x5}, 0x48084) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 222.144861ms ago: executing program 3 (id=1212): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000240)={r1, 0x2}, 0x8) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x11e}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket(0x1e, 0x4, 0x0) (async) r4 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r4, &(0x7f0000000440)=[{{&(0x7f0000000180)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f00000005c0)="a1c0ffff000039a9029e2d34161c00006145f0d9", 0x14}], 0x1}}], 0x1, 0x20000880) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000500), &(0x7f0000000540)=0x4) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r6, @ANYBLOB="00000000000000001c002b8008000800", @ANYRES32, @ANYRES16=r7, @ANYRES32=r6], 0x44}}, 0x0) (async) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e21, @rand_addr=0x64010102}, 0x1, 0x1, 0x0, 0xffff}}, 0x26) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) (async) close(0x3) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000003f00), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r10, &(0x7f0000003fc0)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f0000003f40)={0x24, r11, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000010711000"/24], &(0x7f0000000480)='GPL\x00'}, 0x90) 0s ago: executing program 0 (id=1213): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x1d, 0x17, 0x9}}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2, @mcast1, 0x5, 0x3}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000a40)="f4000900062b2c25fe80000000000000dc8b66cc00000000000000000000000000000000e4986919", 0x28}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x22000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0x402, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x100}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x48195) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.55' (ED25519) to the list of known hosts. [ 65.894764][ T5815] cgroup: Unknown subsys name 'net' [ 66.035899][ T5815] cgroup: Unknown subsys name 'cpuset' [ 66.044485][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.397445][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.809255][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.819778][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.828973][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.837114][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.846062][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.853602][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.863369][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.868777][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.870819][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.886504][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.888508][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.894434][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.901639][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.920956][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.934312][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.942181][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.950965][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.959749][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.968121][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.977195][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.985733][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.994073][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.002016][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.011085][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.019642][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.520218][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 70.587578][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 70.788817][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 70.821299][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 70.928164][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.936709][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.944198][ T5834] bridge_slave_0: entered allmulticast mode [ 70.951197][ T5834] bridge_slave_0: entered promiscuous mode [ 70.959941][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.967106][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.974287][ T5825] bridge_slave_0: entered allmulticast mode [ 70.981220][ T5825] bridge_slave_0: entered promiscuous mode [ 71.017045][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.024430][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.031531][ T5834] bridge_slave_1: entered allmulticast mode [ 71.038655][ T5834] bridge_slave_1: entered promiscuous mode [ 71.046000][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.053213][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.060334][ T5825] bridge_slave_1: entered allmulticast mode [ 71.067359][ T5825] bridge_slave_1: entered promiscuous mode [ 71.078862][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 71.177942][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.185161][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.192266][ T5838] bridge_slave_0: entered allmulticast mode [ 71.199406][ T5838] bridge_slave_0: entered promiscuous mode [ 71.209624][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.221369][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.254539][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.261728][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.268947][ T5838] bridge_slave_1: entered allmulticast mode [ 71.276507][ T5838] bridge_slave_1: entered promiscuous mode [ 71.285479][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.297247][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.319169][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.325593][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.327327][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.339645][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.346857][ T5829] bridge_slave_0: entered allmulticast mode [ 71.354089][ T5829] bridge_slave_0: entered promiscuous mode [ 71.398630][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.406059][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.413213][ T5829] bridge_slave_1: entered allmulticast mode [ 71.420094][ T5829] bridge_slave_1: entered promiscuous mode [ 71.488645][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.500534][ T5834] team0: Port device team_slave_0 added [ 71.508364][ T5825] team0: Port device team_slave_0 added [ 71.539876][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.550378][ T5834] team0: Port device team_slave_1 added [ 71.557436][ T5825] team0: Port device team_slave_1 added [ 71.565461][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.574910][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.582061][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.589816][ T5833] bridge_slave_0: entered allmulticast mode [ 71.597068][ T5833] bridge_slave_0: entered promiscuous mode [ 71.638819][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.648294][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.655518][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.663376][ T5833] bridge_slave_1: entered allmulticast mode [ 71.670253][ T5833] bridge_slave_1: entered promiscuous mode [ 71.731152][ T5838] team0: Port device team_slave_0 added [ 71.738493][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.745537][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.772508][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.784816][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.791771][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.817981][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.850954][ T5838] team0: Port device team_slave_1 added [ 71.858446][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.865479][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.892111][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.904077][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.910997][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.936950][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.949288][ T5829] team0: Port device team_slave_0 added [ 71.955461][ T52] Bluetooth: hci0: command tx timeout [ 71.955468][ T5842] Bluetooth: hci2: command tx timeout [ 71.958648][ T5829] team0: Port device team_slave_1 added [ 71.974839][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.019244][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.033357][ T52] Bluetooth: hci4: command tx timeout [ 72.033363][ T5842] Bluetooth: hci3: command tx timeout [ 72.047383][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.054845][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.081048][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.094028][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.100964][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.127178][ T52] Bluetooth: hci1: command tx timeout [ 72.127459][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.219066][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.226361][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.252840][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.276425][ T5833] team0: Port device team_slave_0 added [ 72.312046][ T5825] hsr_slave_0: entered promiscuous mode [ 72.318611][ T5825] hsr_slave_1: entered promiscuous mode [ 72.326010][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.333070][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.359897][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.372160][ T5833] team0: Port device team_slave_1 added [ 72.383042][ T5834] hsr_slave_0: entered promiscuous mode [ 72.389232][ T5834] hsr_slave_1: entered promiscuous mode [ 72.395414][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 72.401181][ T5834] Cannot create hsr debugfs directory [ 72.411880][ T5838] hsr_slave_0: entered promiscuous mode [ 72.418412][ T5838] hsr_slave_1: entered promiscuous mode [ 72.424600][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 72.430315][ T5838] Cannot create hsr debugfs directory [ 72.510018][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.517697][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.543631][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.576794][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.584168][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.610113][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.689837][ T5829] hsr_slave_0: entered promiscuous mode [ 72.696469][ T5829] hsr_slave_1: entered promiscuous mode [ 72.702424][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 72.708664][ T5829] Cannot create hsr debugfs directory [ 72.880810][ T5833] hsr_slave_0: entered promiscuous mode [ 72.887582][ T5833] hsr_slave_1: entered promiscuous mode [ 72.893814][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 72.899537][ T5833] Cannot create hsr debugfs directory [ 73.184944][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.207500][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.218347][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.236710][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.295367][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.305640][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.330213][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.340181][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.406969][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.421369][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.438079][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.449273][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.534199][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.565698][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.580563][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.616079][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.625851][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.669286][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.701613][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.708898][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.757448][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.764616][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.780959][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.801286][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.811303][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.825934][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.841147][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.950534][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.984968][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.992098][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.007021][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.033692][ T52] Bluetooth: hci2: command tx timeout [ 74.034889][ T5842] Bluetooth: hci0: command tx timeout [ 74.040528][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.075241][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.082391][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.108045][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.114861][ T5842] Bluetooth: hci4: command tx timeout [ 74.123695][ T5842] Bluetooth: hci3: command tx timeout [ 74.140732][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.155420][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.162547][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.190599][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.197728][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.205545][ T5842] Bluetooth: hci1: command tx timeout [ 74.234117][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.241191][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.281856][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.311329][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.318438][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.418262][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.520084][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.539581][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.546798][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.568058][ T5825] veth0_vlan: entered promiscuous mode [ 74.596438][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.603616][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.669365][ T5825] veth1_vlan: entered promiscuous mode [ 74.761115][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.833846][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.855425][ T5825] veth0_macvtap: entered promiscuous mode [ 74.885178][ T5825] veth1_macvtap: entered promiscuous mode [ 74.949955][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.963831][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.988871][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.029436][ T5838] veth0_vlan: entered promiscuous mode [ 75.070785][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.087639][ T5829] veth0_vlan: entered promiscuous mode [ 75.104721][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.119445][ T5838] veth1_vlan: entered promiscuous mode [ 75.133411][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.154856][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.178995][ T5834] veth0_vlan: entered promiscuous mode [ 75.201352][ T5834] veth1_vlan: entered promiscuous mode [ 75.210025][ T5829] veth1_vlan: entered promiscuous mode [ 75.223959][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.287352][ T5838] veth0_macvtap: entered promiscuous mode [ 75.322145][ T5834] veth0_macvtap: entered promiscuous mode [ 75.349988][ T3561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.357602][ T5834] veth1_macvtap: entered promiscuous mode [ 75.366603][ T3561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.374593][ T5838] veth1_macvtap: entered promiscuous mode [ 75.418951][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.449874][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.467631][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.478433][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.489289][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.501855][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.509131][ T5829] veth0_macvtap: entered promiscuous mode [ 75.523334][ T5829] veth1_macvtap: entered promiscuous mode [ 75.534622][ T1110] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.568034][ T1110] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.577788][ T1110] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.598360][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.618877][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.647417][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.665415][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.683723][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.729942][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.744015][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.757306][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.802302][ T1168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.831658][ T1168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.845215][ T1168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.885373][ T1168] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.905790][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.914794][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.947020][ T5943] bridge_slave_0: left allmulticast mode [ 75.959087][ T5943] bridge_slave_0: left promiscuous mode [ 75.965842][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.977065][ T5943] bridge_slave_1: left allmulticast mode [ 75.984155][ T5943] bridge_slave_1: left promiscuous mode [ 75.989897][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.001226][ T5943] bond0: (slave bond_slave_0): Releasing backup interface [ 76.012101][ T5944] Zero length message leads to an empty skb [ 76.019671][ T5943] bond0: (slave bond_slave_1): Releasing backup interface [ 76.032381][ T5943] team0: Port device team_slave_0 removed [ 76.043288][ T5943] team0: Port device team_slave_1 removed [ 76.049445][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.057969][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.066526][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.074186][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.084785][ T5943] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 76.112954][ T5842] Bluetooth: hci0: command tx timeout [ 76.116223][ T52] Bluetooth: hci2: command tx timeout [ 76.141438][ T3561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.153478][ T3561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.182318][ T5833] veth0_vlan: entered promiscuous mode [ 76.204693][ T52] Bluetooth: hci3: command tx timeout [ 76.204703][ T5842] Bluetooth: hci4: command tx timeout [ 76.238765][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.247204][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.269215][ T5833] veth1_vlan: entered promiscuous mode [ 76.275368][ T52] Bluetooth: hci1: command tx timeout [ 76.287884][ T3561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.299994][ T3561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.347642][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.375995][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.526042][ T5950] netlink: 'syz.0.7': attribute type 1 has an invalid length. [ 76.534408][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.542237][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.570170][ T5954] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 76.588589][ T5833] veth0_macvtap: entered promiscuous mode [ 76.598817][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 76.617030][ T5833] veth1_macvtap: entered promiscuous mode [ 76.698035][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.790708][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.816473][ T5962] netlink: 'syz.0.9': attribute type 12 has an invalid length. [ 76.875182][ T5964] netlink: 'syz.0.9': attribute type 12 has an invalid length. [ 76.896124][ T1110] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.924346][ T1110] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.961048][ T1110] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.980697][ T1110] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.225186][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'. [ 77.308456][ T5989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14'. [ 77.344752][ T5991] netlink: 52 bytes leftover after parsing attributes in process `syz.3.12'. [ 77.367937][ T5985] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 77.387657][ T5985] netlink: 148 bytes leftover after parsing attributes in process `syz.3.12'. [ 77.414349][ T5989] macvlan2: entered promiscuous mode [ 77.419653][ T5989] macvlan2: entered allmulticast mode [ 77.436434][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.472178][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.625876][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.673618][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.055024][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'. [ 78.069072][ T6027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'. [ 78.101139][ T6028] netlink: 52 bytes leftover after parsing attributes in process `syz.3.22'. [ 78.132839][ T6028] netlink: 40 bytes leftover after parsing attributes in process `syz.3.22'. [ 78.150407][ T6026] warning: `syz.3.22' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 78.195016][ T52] Bluetooth: hci2: command tx timeout [ 78.200521][ T5842] Bluetooth: hci0: command tx timeout [ 78.236384][ T6031] ip6gre1: entered allmulticast mode [ 78.273883][ T52] Bluetooth: hci3: command tx timeout [ 78.279322][ T52] Bluetooth: hci4: command tx timeout [ 78.297208][ T6033] netlink: 32 bytes leftover after parsing attributes in process `syz.2.24'. [ 78.316082][ T6036] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.356567][ T52] Bluetooth: hci1: command tx timeout [ 78.371540][ T6039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.497199][ T6044] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.032440][ T6064] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 79.055763][ T6064] syzkaller0: entered promiscuous mode [ 79.061443][ T6064] syzkaller0: entered allmulticast mode [ 79.244112][ T6073] bond1 (unregistering): Released all slaves [ 80.004583][ T6092] Bluetooth: MGMT ver 1.23 [ 80.107876][ T6083] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 80.138672][ T6089] macvtap1: entered allmulticast mode [ 80.157475][ T6089] veth0_macvtap: entered allmulticast mode [ 80.195366][ T6094] netlink: 'syz.0.43': attribute type 11 has an invalid length. [ 80.213478][ T10] IPVS: starting estimator thread 0... [ 80.223293][ T6094] smc: net device gre0 applied user defined pnetid SYZ1 [ 80.240105][ T6094] smc: net device gre0 erased user defined pnetid SYZ1 [ 80.312720][ T6100] IPVS: using max 39 ests per chain, 93600 per kthread [ 80.646309][ T6121] syz.2.49 uses obsolete (PF_INET,SOCK_PACKET) [ 80.777626][ T6131] netlink: 'syz.0.52': attribute type 32 has an invalid length. [ 80.941440][ T6142] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 80.955262][ T6142] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 81.499777][ T6163] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 82.001129][ T6009] IPVS: starting estimator thread 0... [ 82.007078][ T6190] __nla_validate_parse: 9 callbacks suppressed [ 82.007092][ T6190] netlink: 32 bytes leftover after parsing attributes in process `syz.2.69'. [ 82.026713][ T6191] xt_l2tp: v2 doesn't support IP mode [ 82.049719][ T6195] sctp: [Deprecated]: syz.4.70 (pid 6195) Use of int in max_burst socket option. [ 82.049719][ T6195] Use struct sctp_assoc_value instead [ 82.122688][ T6194] IPVS: using max 33 ests per chain, 79200 per kthread [ 82.231019][ T6204] netlink: 20 bytes leftover after parsing attributes in process `syz.1.71'. [ 82.948218][ T6220] netlink: 277 bytes leftover after parsing attributes in process `syz.3.75'. [ 83.112812][ T6228] bond0: option ad_select: unable to set because the bond device is up [ 83.132260][ T6228] netlink: 116 bytes leftover after parsing attributes in process `syz.2.78'. [ 83.479226][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.87'. [ 84.151485][ T6305] veth1_to_bond: entered allmulticast mode [ 84.205502][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.99'. [ 84.341667][ T6305] bond0: (slave bond_slave_1): Releasing backup interface [ 84.399959][ T6305] veth1_to_bond (unregistering): left allmulticast mode [ 84.464246][ T6320] netlink: 'syz.1.103': attribute type 8 has an invalid length. [ 84.557248][ T6326] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 84.658867][ T6320] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.667762][ T6320] bond0: (slave bond1): Enslaving as an active interface with an up link [ 84.686986][ T6329] x_tables: duplicate underflow at hook 1 [ 84.863651][ T6339] netlink: 'syz.4.107': attribute type 8 has an invalid length. [ 84.892341][ T5902] hid-generic 0005:15C2:5508.0001: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 84.996033][ T6345] xt_hashlimit: invalid rate [ 85.239352][ T6361] netlink: 14 bytes leftover after parsing attributes in process `syz.2.116'. [ 85.441139][ T6371] netlink: 16 bytes leftover after parsing attributes in process `syz.3.118'. [ 85.499901][ T6371] netlink: 192 bytes leftover after parsing attributes in process `syz.3.118'. [ 85.534292][ T6371] netlink: 'syz.3.118': attribute type 8 has an invalid length. [ 85.576433][ T6361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.588046][ T6361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.599384][ T6361] bond0 (unregistering): Released all slaves [ 85.841536][ T6395] netlink: 'syz.4.122': attribute type 4 has an invalid length. [ 86.027197][ T6407] x_tables: duplicate underflow at hook 2 [ 86.045032][ T6408] x_tables: duplicate underflow at hook 2 [ 86.155238][ T6414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.168211][ T6418] netlink: 165 bytes leftover after parsing attributes in process `syz.3.128'. [ 86.212253][ T6418] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 86.375442][ T197] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.412700][ T197] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.426215][ T6429] netlink: 'syz.4.130': attribute type 1 has an invalid length. [ 86.464959][ T6426] netlink: 'syz.2.131': attribute type 1 has an invalid length. [ 86.494125][ T197] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.535913][ T197] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.698370][ T43] cfg80211: failed to load regulatory.db [ 86.709054][ T6449] Driver unsupported XDP return value 0 on prog (id 30) dev N/A, expect packet loss! [ 86.772265][ T6454] gretap1: entered promiscuous mode [ 86.816379][ T6454] gretap1: entered allmulticast mode [ 87.034752][ T6471] __nla_validate_parse: 8 callbacks suppressed [ 87.034768][ T6471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.140'. [ 87.245199][ T6486] netlink: 348 bytes leftover after parsing attributes in process `syz.4.144'. [ 87.354748][ T6492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.146'. [ 87.551620][ T6503] veth1_to_bond: entered allmulticast mode [ 87.552211][ T6506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.148'. [ 87.616452][ T6509] netlink: 236 bytes leftover after parsing attributes in process `syz.2.150'. [ 87.724763][ T6506] bond0: (slave bond_slave_1): Releasing backup interface [ 87.764992][ T6506] veth1_to_bond (unregistering): left allmulticast mode [ 87.953764][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.171749][ T6539] x_tables: duplicate entry at hook 3 [ 88.420694][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.164'. [ 88.461467][ T6559] netlink: 'syz.3.163': attribute type 1 has an invalid length. [ 88.571027][ T6559] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.635222][ T6559] veth3: entered promiscuous mode [ 88.745994][ T6574] netlink: 20 bytes leftover after parsing attributes in process `syz.0.168'. [ 88.751635][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.169'. [ 88.765098][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.169'. [ 88.768014][ T6570] netlink: 64 bytes leftover after parsing attributes in process `syz.4.166'. [ 88.791667][ T6577] xt_hashlimit: max too large, truncated to 1048576 [ 89.283993][ T6596] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.304881][ T6596] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.312101][ T6596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.506464][ T6614] netlink: 'syz.4.180': attribute type 11 has an invalid length. [ 89.697489][ T6632] netlink: 'syz.3.184': attribute type 1 has an invalid length. [ 89.717868][ T6629] netlink: 'syz.2.185': attribute type 30 has an invalid length. [ 89.859351][ T6629] bond0: option arp_missed_max: invalid value (0) [ 89.886420][ T6629] bond0: option arp_missed_max: allowed values 1 - 255 [ 89.900757][ T6629] bond0 (unregistering): Released all slaves [ 89.958586][ T6639] gre0: entered promiscuous mode [ 89.969516][ T6639] gre0: entered allmulticast mode [ 89.980451][ T6640] syzkaller1: entered promiscuous mode [ 90.015029][ T6640] syzkaller1: entered allmulticast mode [ 90.046931][ T6649] netlink: 'syz.3.189': attribute type 2 has an invalid length. [ 90.063221][ T6647] netlink: 'syz.1.188': attribute type 1 has an invalid length. [ 90.447547][ T6672] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 90.466315][ T6672] bond1 (unregistering): Released all slaves [ 90.551881][ T6674] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 90.566473][ T6674] bond1 (unregistering): Released all slaves [ 90.857462][ T5902] IPVS: starting estimator thread 0... [ 90.941273][ T6700] syzkaller0: entered promiscuous mode [ 90.960618][ T6700] syzkaller0: entered allmulticast mode [ 90.967729][ T6698] IPVS: using max 33 ests per chain, 79200 per kthread [ 91.209989][ T6711] vlan2: entered allmulticast mode [ 91.215307][ T6711] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode [ 91.421338][ T6727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.516940][ T6733] syz.2.213: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 91.571826][ T6733] CPU: 1 UID: 0 PID: 6733 Comm: syz.2.213 Not tainted syzkaller #0 PREEMPT(full) [ 91.571850][ T6733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 91.571866][ T6733] Call Trace: [ 91.571872][ T6733] [ 91.571879][ T6733] dump_stack_lvl+0x189/0x250 [ 91.571916][ T6733] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.571937][ T6733] ? __pfx__printk+0x10/0x10 [ 91.571953][ T6733] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 91.571975][ T6733] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 91.571997][ T6733] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 91.572022][ T6733] warn_alloc+0x214/0x310 [ 91.572051][ T6733] ? __pfx_warn_alloc+0x10/0x10 [ 91.572082][ T6733] ? __get_vm_area_node+0x28f/0x300 [ 91.572106][ T6733] ? hash_ipportnet_create+0x358/0xfe0 [ 91.572133][ T6733] __vmalloc_node_range_noprof+0x690/0x12d0 [ 91.572157][ T6733] ? __alloc_frozen_pages_noprof+0x9f/0x370 [ 91.572201][ T6733] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 91.572224][ T6733] ? hash_ipportnet_create+0x358/0xfe0 [ 91.572257][ T6733] ? rcu_is_watching+0x15/0xb0 [ 91.572276][ T6733] ? hash_ipportnet_create+0x358/0xfe0 [ 91.572299][ T6733] __kvmalloc_node_noprof+0x674/0x910 [ 91.572322][ T6733] ? hash_ipportnet_create+0x358/0xfe0 [ 91.572341][ T6733] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 91.572362][ T6733] ? hash_ipportnet_create+0x2fe/0xfe0 [ 91.572388][ T6733] hash_ipportnet_create+0x358/0xfe0 [ 91.572417][ T6733] ? __nla_parse+0x40/0x60 [ 91.572436][ T6733] ? __pfx_hash_ipportnet_create+0x10/0x10 [ 91.572459][ T6733] ip_set_create+0xa97/0x1940 [ 91.572481][ T6733] ? ip_set_create+0x4a2/0x1940 [ 91.572514][ T6733] ? __pfx_ip_set_create+0x10/0x10 [ 91.572572][ T6733] nfnetlink_rcv_msg+0xb4d/0x1130 [ 91.572594][ T6733] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 91.572630][ T6733] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 91.572649][ T6733] ? kasan_save_track+0x4f/0x80 [ 91.572718][ T6733] netlink_rcv_skb+0x208/0x470 [ 91.572733][ T6733] ? lockdep_hardirqs_on+0x9c/0x150 [ 91.572757][ T6733] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 91.572779][ T6733] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 91.572808][ T6733] ? bpf_lsm_capable+0x9/0x20 [ 91.572827][ T6733] ? security_capable+0x7e/0x2e0 [ 91.572856][ T6733] nfnetlink_rcv+0x282/0x2590 [ 91.572882][ T6733] ? __dev_queue_xmit+0x27b/0x3b50 [ 91.572903][ T6733] ? __dev_queue_xmit+0x1d79/0x3b50 [ 91.572920][ T6733] ? kasan_save_track+0x3e/0x80 [ 91.572939][ T6733] ? __kasan_slab_alloc+0x6c/0x80 [ 91.572971][ T6733] ? __dev_queue_xmit+0x27b/0x3b50 [ 91.573002][ T6733] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 91.573024][ T6733] ? __pfx___dev_queue_xmit+0x10/0x10 [ 91.573057][ T6733] ? ref_tracker_free+0x63a/0x7d0 [ 91.573074][ T6733] ? __asan_memcpy+0x40/0x70 [ 91.573094][ T6733] ? __pfx_ref_tracker_free+0x10/0x10 [ 91.573108][ T6733] ? __skb_clone+0x63/0x7a0 [ 91.573131][ T6733] ? __skb_clone+0x483/0x7a0 [ 91.573156][ T6733] ? skb_clone+0x246/0x3a0 [ 91.573177][ T6733] ? __netlink_deliver_tap+0x807/0x850 [ 91.573194][ T6733] ? netlink_deliver_tap+0x2e/0x1b0 [ 91.573217][ T6733] ? netlink_deliver_tap+0x2e/0x1b0 [ 91.573248][ T6733] netlink_unicast+0x82f/0x9e0 [ 91.573279][ T6733] ? __pfx_netlink_unicast+0x10/0x10 [ 91.573304][ T6733] ? netlink_sendmsg+0x642/0xb30 [ 91.573319][ T6733] ? skb_put+0x11b/0x210 [ 91.573339][ T6733] netlink_sendmsg+0x805/0xb30 [ 91.573365][ T6733] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.573385][ T6733] ? aa_sock_msg_perm+0xf1/0x1d0 [ 91.573411][ T6733] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 91.573426][ T6733] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.573443][ T6733] __sock_sendmsg+0x21c/0x270 [ 91.573468][ T6733] ____sys_sendmsg+0x505/0x830 [ 91.573492][ T6733] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.573520][ T6733] ? import_iovec+0x74/0xa0 [ 91.573544][ T6733] ___sys_sendmsg+0x21f/0x2a0 [ 91.573565][ T6733] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.573620][ T6733] ? __fget_files+0x2a/0x420 [ 91.573635][ T6733] ? __fget_files+0x3a0/0x420 [ 91.573662][ T6733] __x64_sys_sendmsg+0x19b/0x260 [ 91.573683][ T6733] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 91.573718][ T6733] ? do_syscall_64+0xbe/0xfa0 [ 91.573745][ T6733] do_syscall_64+0xfa/0xfa0 [ 91.573765][ T6733] ? lockdep_hardirqs_on+0x9c/0x150 [ 91.573786][ T6733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.573803][ T6733] ? clear_bhb_loop+0x60/0xb0 [ 91.573823][ T6733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.573840][ T6733] RIP: 0033:0x7f8628b8f6c9 [ 91.573867][ T6733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.573880][ T6733] RSP: 002b:00007f86299b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.573898][ T6733] RAX: ffffffffffffffda RBX: 00007f8628de6090 RCX: 00007f8628b8f6c9 [ 91.573910][ T6733] RDX: 0000000000004020 RSI: 0000200000000040 RDI: 0000000000000003 [ 91.573920][ T6733] RBP: 00007f8628c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 91.573931][ T6733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.573941][ T6733] R13: 00007f8628de6128 R14: 00007f8628de6090 R15: 00007ffdbd962b98 [ 91.573971][ T6733] [ 92.084454][ T6733] Mem-Info: [ 92.087664][ T6733] active_anon:5881 inactive_anon:0 isolated_anon:0 [ 92.087664][ T6733] active_file:2436 inactive_file:39905 isolated_file:0 [ 92.087664][ T6733] unevictable:768 dirty:432 writeback:0 [ 92.087664][ T6733] slab_reclaimable:10461 slab_unreclaimable:95478 [ 92.087664][ T6733] mapped:29100 shmem:1405 pagetables:1192 [ 92.087664][ T6733] sec_pagetables:0 bounce:0 [ 92.087664][ T6733] kernel_misc_reclaimable:0 [ 92.087664][ T6733] free:1336999 free_pcp:12478 free_cma:0 [ 92.172505][ T6733] Node 0 active_anon:23424kB inactive_anon:0kB active_file:9744kB inactive_file:159416kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120000kB dirty:1716kB writeback:0kB shmem:4084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12184kB pagetables:4532kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 92.204635][ T6750] __nla_validate_parse: 9 callbacks suppressed [ 92.204650][ T6750] netlink: 28 bytes leftover after parsing attributes in process `syz.3.212'. [ 92.221331][ T6733] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 92.251602][ T6733] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 92.288996][ T6733] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 92.294913][ T6733] Node 0 DMA32 free:1438248kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23424kB inactive_anon:0kB active_file:9744kB inactive_file:159416kB unevictable:1536kB writepending:1716kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:31788kB local_pcp:22744kB free_cma:0kB [ 92.328700][ T6733] lowmem_reserve[]: 0 0 0 0 0 [ 92.333503][ T6733] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 92.363743][ T6733] lowmem_reserve[]: 0 0 0 0 0 [ 92.368544][ T6733] Node 1 Normal free:3895400kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:12kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18176kB local_pcp:10272kB free_cma:0kB [ 92.402753][ T6733] lowmem_reserve[]: 0 0 0 0 0 [ 92.407493][ T6733] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 92.420531][ T6733] Node 0 DMA32: 328*4kB (UME) 283*8kB (UM) 69*16kB (UM) 189*32kB (UE) 44*64kB (UME) 7*128kB (UM) 5*256kB (UME) 6*512kB (M) 4*1024kB (M) 7*2048kB (UME) 342*4096kB (M) = 1438056kB [ 92.443856][ T6733] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 92.455510][ T6733] Node 1 Normal: 202*4kB (UME) 42*8kB (UME) 31*16kB (UME) 38*32kB (UME) 15*64kB (UME) 9*128kB (UME) 3*256kB (ME) 3*512kB (UM) 1*1024kB (M) 2*2048kB (UE) 948*4096kB (M) = 3895400kB [ 92.474243][ T6733] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 92.483838][ T6733] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 92.494555][ T6733] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 92.504888][ T6733] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 92.514310][ T6733] 43692 total pagecache pages [ 92.518998][ T6733] 0 pages in swap cache [ 92.523210][ T6733] Free swap = 124996kB [ 92.527363][ T6733] Total swap = 124996kB [ 92.531508][ T6733] 2097051 pages RAM [ 92.535670][ T6733] 0 pages HighMem/MovableOnly [ 92.540351][ T6733] 424119 pages reserved [ 92.544706][ T6733] 0 pages cma reserved [ 92.588636][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.216'. [ 92.725211][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.216'. [ 92.845350][ T6770] netlink: 432 bytes leftover after parsing attributes in process `syz.4.223'. [ 93.040661][ T6785] netlink: 'syz.1.226': attribute type 1 has an invalid length. [ 93.060729][ T6785] netlink: 224 bytes leftover after parsing attributes in process `syz.1.226'. [ 93.087129][ T6788] netlink: 'syz.4.227': attribute type 1 has an invalid length. [ 93.104192][ T6790] netlink: 'syz.1.226': attribute type 1 has an invalid length. [ 93.106471][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.227'. [ 93.132950][ T6790] netlink: 224 bytes leftover after parsing attributes in process `syz.1.226'. [ 93.135580][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.227'. [ 93.163736][ T6793] batadv_slave_1: entered promiscuous mode [ 93.308718][ T6800] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 93.354104][ T6793] batadv_slave_1: left promiscuous mode [ 93.440645][ T6809] netlink: 40 bytes leftover after parsing attributes in process `syz.4.234'. [ 93.455570][ T6804] netlink: 'syz.1.231': attribute type 21 has an invalid length. [ 93.473738][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.231'. [ 93.556968][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.565822][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.587303][ T6804] netlink: 'syz.1.231': attribute type 21 has an invalid length. [ 93.609658][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.629738][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.735677][ T6822] bridge0: port 3(ipvlan2) entered blocking state [ 93.742408][ T6822] bridge0: port 3(ipvlan2) entered disabled state [ 93.749936][ T6822] ipvlan2: entered allmulticast mode [ 93.757978][ T6822] bridge0: entered allmulticast mode [ 93.779252][ T6822] ipvlan2: left allmulticast mode [ 93.791615][ T6822] bridge0: left allmulticast mode [ 93.868176][ T6833] netlink: 'syz.3.236': attribute type 5 has an invalid length. [ 94.452403][ T6873] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 94.504076][ T6878] tipc: Trying to set illegal importance in message [ 94.653495][ T6886] trusted_key: syz.2.257 sent an empty control message without MSG_MORE. [ 94.673827][ T6888] Cannot find add_set index 2 as target [ 94.693288][ T6888] Cannot find add_set index 2 as target [ 95.211446][ T6926] validate_nla: 2 callbacks suppressed [ 95.211463][ T6926] netlink: 'syz.4.268': attribute type 5 has an invalid length. [ 95.622764][ T6941] netlink: 'syz.2.276': attribute type 1 has an invalid length. [ 95.637663][ T6942] netlink: 'syz.3.275': attribute type 1 has an invalid length. [ 95.650142][ T6938] Cannot find del_set index 0 as target [ 95.728002][ T6944] netlink: 'syz.2.276': attribute type 1 has an invalid length. [ 96.411602][ T6980] netlink: 'syz.2.284': attribute type 11 has an invalid length. [ 96.547691][ T6986] netlink: 'syz.2.287': attribute type 1 has an invalid length. [ 96.612921][ T6986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.757704][ T6990] bond0: (slave veth3): Enslaving as an active interface with a down link [ 97.245452][ T7026] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 97.261738][ T7026] bond3 (unregistering): Released all slaves [ 97.274935][ T7035] netlink: 'syz.0.299': attribute type 1 has an invalid length. [ 97.286787][ T7035] netlink: 'syz.0.299': attribute type 1 has an invalid length. [ 97.298219][ T7027] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 97.299325][ T7033] __nla_validate_parse: 19 callbacks suppressed [ 97.299339][ T7033] netlink: 288 bytes leftover after parsing attributes in process `syz.1.296'. [ 97.300108][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.299'. [ 97.317677][ T7037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.549171][ T7049] netlink: 'syz.2.303': attribute type 5 has an invalid length. [ 97.565491][ T7049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.303'. [ 97.613086][ T7049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.303'. [ 97.619216][ T7044] ip6gre0: Master is either lo or non-ether device [ 97.962191][ T7067] team0: Device ip6gre1 is of different type [ 98.070990][ T7074] netlink: 28 bytes leftover after parsing attributes in process `syz.0.312'. [ 98.071556][ T7070] tipc: Started in network mode [ 98.092055][ T7074] netlink: 60 bytes leftover after parsing attributes in process `syz.0.312'. [ 98.113650][ T7070] tipc: Node identity ac14140f, cluster identity 4711 [ 98.120976][ T7070] tipc: New replicast peer: 255.255.255.255 [ 98.129383][ T7070] tipc: Enabled bearer , priority 10 [ 98.145811][ T7067] netlink: 12 bytes leftover after parsing attributes in process `syz.4.310'. [ 98.216239][ T7070] team0: Device ip6gre1 is of different type [ 98.473048][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.318'. [ 98.483226][ T7094] lo: entered allmulticast mode [ 98.520309][ T7094] dvmrp6: entered allmulticast mode [ 98.526529][ T7095] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 98.546357][ T7093] lo: left allmulticast mode [ 98.886746][ T7115] netlink: 'syz.0.321': attribute type 11 has an invalid length. [ 98.899501][ T7111] netlink: 'syz.0.321': attribute type 11 has an invalid length. [ 98.958364][ T7139] IPv6: NLM_F_CREATE should be specified when creating new route [ 98.963991][ T7136] netlink: 24 bytes leftover after parsing attributes in process `syz.4.325'. [ 98.976739][ T7115] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 99.010296][ T7111] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 99.017990][ T7115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.096395][ T7111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.215435][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.330'. [ 99.243091][ T7151] 8021q: VLANs not supported on ipvlan1 [ 99.275166][ T6009] tipc: Node number set to 2886997007 [ 99.630216][ T7175] IPv6: sit1: Disabled Multicast RS [ 99.641416][ T7175] sit1: entered allmulticast mode [ 99.739132][ T7170] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.768950][ T7184] netlink: 'syz.2.340': attribute type 4 has an invalid length. [ 99.955375][ T52] Bluetooth: hci4: command tx timeout [ 100.030805][ T7193] bond1: option all_slaves_active: invalid value (222) [ 100.060280][ T7193] bond1 (unregistering): Released all slaves [ 100.095626][ T7209] netlink: 'syz.3.345': attribute type 11 has an invalid length. [ 100.125777][ T7211] netlink: 'syz.3.345': attribute type 11 has an invalid length. [ 100.225062][ T7214] netlink: 'syz.3.346': attribute type 83 has an invalid length. [ 100.347775][ T7217] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 100.542575][ T7235] netlink: 'syz.3.351': attribute type 10 has an invalid length. [ 100.625175][ T7233] : entered promiscuous mode [ 100.672881][ T7235] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 101.372019][ T7281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.538273][ T7283] netlink: 'syz.1.362': attribute type 23 has an invalid length. [ 101.915959][ T6009] IPVS: starting estimator thread 0... [ 101.999859][ T7312] gre1: entered promiscuous mode [ 102.024251][ T7309] IPVS: using max 29 ests per chain, 69600 per kthread [ 102.025607][ T7312] gre1: entered allmulticast mode [ 102.070161][ T7300] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 102.075955][ T7319] netlink: 'syz.1.366': attribute type 1 has an invalid length. [ 102.365182][ T7340] x_tables: duplicate underflow at hook 2 [ 102.496429][ T7351] netlink: 'syz.0.379': attribute type 33 has an invalid length. [ 102.516391][ T7351] __nla_validate_parse: 7 callbacks suppressed [ 102.516407][ T7351] netlink: 152 bytes leftover after parsing attributes in process `syz.0.379'. [ 102.537990][ T7353] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 102.715136][ T7356] xt_limit: Overflow, try lower: 271964/0 [ 103.257142][ T7395] netlink: 'syz.0.394': attribute type 11 has an invalid length. [ 103.294976][ T7395] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.394'. [ 103.560794][ T7412] batadv_slave_0: entered promiscuous mode [ 103.601028][ T7420] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 103.610661][ T7420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.642163][ T7409] batadv_slave_0: left promiscuous mode [ 103.828779][ T7427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.404'. [ 103.850773][ T7427] netlink: 'syz.0.404': attribute type 5 has an invalid length. [ 103.862298][ T7427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.404'. [ 103.891128][ T7428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.403'. [ 103.935322][ T7427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.404'. [ 103.938838][ T7438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.405'. [ 103.968927][ T3561] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.978477][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'. [ 103.991934][ T3561] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.012820][ T7427] netlink: 'syz.0.404': attribute type 5 has an invalid length. [ 104.020478][ T7427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.404'. [ 104.031477][ T3561] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.065542][ T1168] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.215110][ T7441] netlink: 348 bytes leftover after parsing attributes in process `syz.3.407'. [ 104.462846][ T7461] xt_hashlimit: size too large, truncated to 1048576 [ 104.595525][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.829209][ T7471] netlink: 'syz.3.416': attribute type 1 has an invalid length. [ 104.927006][ T7475] netlink: 'syz.0.417': attribute type 10 has an invalid length. [ 104.953256][ T7475] bridge0: port 1(team0) entered blocking state [ 104.959761][ T7475] bridge0: port 1(team0) entered disabled state [ 104.974923][ T7475] team0: entered allmulticast mode [ 105.004911][ T7475] team0: entered promiscuous mode [ 105.011715][ T7478] netlink: 'syz.4.418': attribute type 1 has an invalid length. [ 105.122564][ T7487] bond2: (slave ip6gretap1): making interface the new active one [ 105.136273][ T7487] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 105.149678][ T7478] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 105.431862][ T7505] sctp: [Deprecated]: syz.0.424 (pid 7505) Use of int in max_burst socket option. [ 105.431862][ T7505] Use struct sctp_assoc_value instead [ 105.593820][ T7510] netlink: 'syz.3.427': attribute type 1 has an invalid length. [ 105.630171][ T7510] netlink: 'syz.3.427': attribute type 4 has an invalid length. [ 105.640012][ T7514] netlink: 'syz.0.425': attribute type 8 has an invalid length. [ 105.748506][ T7516] bridge4: entered promiscuous mode [ 105.785843][ T7516] bridge4: entered allmulticast mode [ 106.092117][ T7541] vxcan2: entered allmulticast mode [ 106.164929][ T7539] syz.0.434 (7539) used greatest stack depth: 17640 bytes left [ 106.332843][ T7558] netlink: 'syz.0.439': attribute type 1 has an invalid length. [ 106.340618][ T7557] netlink: 'syz.0.439': attribute type 1 has an invalid length. [ 106.377226][ T7558] veth3: entered promiscuous mode [ 106.475738][ T7557] veth3: entered promiscuous mode [ 106.518807][ T7566] vxcan1 speed is unknown, defaulting to 1000 [ 106.531466][ T7566] vxcan1 speed is unknown, defaulting to 1000 [ 106.592247][ T7566] vxcan1 speed is unknown, defaulting to 1000 [ 106.748174][ T7573] xt_policy: neither incoming nor outgoing policy selected [ 106.831900][ T7583] syz_tun: entered allmulticast mode [ 106.867231][ T7583] dvmrp6: entered allmulticast mode [ 106.953941][ T7585] syz_tun: left allmulticast mode [ 107.047760][ T7592] Bluetooth: MGMT ver 1.23 [ 107.112046][ T7600] netlink: 'syz.4.454': attribute type 1 has an invalid length. [ 107.127294][ T7592] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 107.140418][ T7592] bond4 (unregistering): Released all slaves [ 107.171558][ T7566] infiniband syz2: set active [ 107.184871][ T7566] infiniband syz2: added vxcan1 [ 107.269274][ T7600] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 107.269842][ T6009] vxcan1 speed is unknown, defaulting to 1000 [ 107.288648][ T7610] netlink: 'syz.3.455': attribute type 83 has an invalid length. [ 107.296967][ T7566] RDS/IB: syz2: added [ 107.301632][ T7566] smc: adding ib device syz2 with port count 1 [ 107.318551][ T7566] smc: ib device syz2 port 1 has no pnetid [ 107.328248][ T5902] vxcan1 speed is unknown, defaulting to 1000 [ 107.340122][ T7566] vxcan1 speed is unknown, defaulting to 1000 [ 107.506812][ T7618] netlink: 'syz.3.458': attribute type 2 has an invalid length. [ 107.574458][ T7618] kthread_run failed with err -4 [ 107.709877][ T7634] netlink: 'syz.3.461': attribute type 4 has an invalid length. [ 107.942206][ T7566] vxcan1 speed is unknown, defaulting to 1000 [ 108.022241][ T7652] __nla_validate_parse: 17 callbacks suppressed [ 108.022257][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.466'. [ 108.064644][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.466'. [ 108.088285][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.466'. [ 108.097784][ T7654] netlink: 24 bytes leftover after parsing attributes in process `syz.4.467'. [ 108.186656][ T7660] netlink: 2 bytes leftover after parsing attributes in process `syz.0.468'. [ 108.206050][ T7660] netlink: 4492 bytes leftover after parsing attributes in process `syz.0.468'. [ 108.216022][ T7660] openvswitch: netlink: Flow key attr not present in new flow. [ 108.321535][ T7667] netlink: 80 bytes leftover after parsing attributes in process `syz.4.469'. [ 108.341443][ T7667] netlink: 80 bytes leftover after parsing attributes in process `syz.4.469'. [ 108.505855][ T7566] vxcan1 speed is unknown, defaulting to 1000 [ 108.588989][ T7676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.473'. [ 108.606114][ T7681] IPVS: sh: SCTP 127.0.0.1:0 - no destination available [ 108.620106][ T7680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.475'. [ 108.646736][ T7681] xt_limit: Overflow, try lower: 271964/0 [ 108.689029][ T7687] x_tables: unsorted underflow at hook 4 [ 108.876413][ T30] audit: type=1107 audit(1763477106.260:2): pid=7694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=';SvÈÅŒ(•ü¦Zg÷«è×ÿ}~ nsˆè½Qd<‰üûÒ,©ÝœÒ¨Î}èÜYò«Ä¹Jf#!+†2ÓÎT¬Ãf­Ú–ý”Íü =ÈÃû’©ØtîÌÏSP©´ÞÔ,‚n(ŸrãR%¾ãŠ0t™‡DBT¿½³V}jrì' [ 109.207439][ T7566] vxcan1 speed is unknown, defaulting to 1000 [ 109.267564][ T7709] IPv6: Can't replace route, no match found [ 109.552289][ T7725] xt_TPROXY: Can be used only with -p tcp or -p udp [ 109.662259][ T7734] netlink: 'syz.4.490': attribute type 21 has an invalid length. [ 109.843404][ T7566] vxcan1 speed is unknown, defaulting to 1000 [ 110.538261][ T7778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.316057][ T7810] chnl_net:caif_netlink_parms(): no params data found [ 111.463145][ T30] audit: type=1800 audit(1763477108.850:3): pid=7824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.517" name="memory.events" dev="tmpfs" ino=470 res=0 errno=0 [ 111.520567][ T7832] netlink: 'syz.1.521': attribute type 10 has an invalid length. [ 111.550439][ T7832] dummy0: entered promiscuous mode [ 111.571349][ T7832] bridge0: port 3(dummy0) entered blocking state [ 111.588285][ T7832] bridge0: port 3(dummy0) entered disabled state [ 111.595143][ T7832] dummy0: entered allmulticast mode [ 111.642148][ T7832] bridge0: port 3(dummy0) entered blocking state [ 111.648965][ T7832] bridge0: port 3(dummy0) entered forwarding state [ 112.137883][ T7866] 8021q: VLANs not supported on ip_vti0 [ 112.179286][ T7873] tipc: Started in network mode [ 112.184381][ T7873] tipc: Node identity de8c3cec6941, cluster identity 4711 [ 112.191829][ T7873] tipc: Enabled bearer , priority 0 [ 112.282208][ T7873] syzkaller0: entered promiscuous mode [ 112.288644][ T7873] syzkaller0: entered allmulticast mode [ 112.303093][ T7879] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 112.326846][ T7873] sch_tbf: peakrate 9 is lower than or equals to rate 10240714937532171902 ! [ 112.380194][ T7873] tipc: Resetting bearer [ 112.405687][ T7871] tipc: Resetting bearer [ 112.450893][ T7871] tipc: Disabling bearer [ 112.789373][ T7897] netlink: 'syz.2.543': attribute type 1 has an invalid length. [ 112.951718][ T7909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.990251][ T7909] bond0: (slave rose0): Enslaving as an active interface with an up link [ 113.011850][ T7908] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 113.034194][ T7911] __nla_validate_parse: 19 callbacks suppressed [ 113.034209][ T7911] netlink: 212324 bytes leftover after parsing attributes in process `syz.0.547'. [ 113.418542][ T7941] netlink: 56 bytes leftover after parsing attributes in process `syz.2.554'. [ 114.387064][ T7940] vlan3: entered promiscuous mode [ 114.392120][ T7940] geneve1: entered promiscuous mode [ 114.397789][ T7940] vlan3: entered allmulticast mode [ 114.403122][ T7940] geneve1: entered allmulticast mode [ 114.410615][ T7941] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 114.509797][ T7952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.560'. [ 114.573184][ T7952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.560'. [ 114.819759][ T7975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.566'. [ 115.045210][ T7985] tipc: Started in network mode [ 115.051733][ T7985] tipc: Node identity 020f6f172f5c, cluster identity 4711 [ 115.068233][ T7985] tipc: Enabled bearer , priority 0 [ 115.082165][ T7985] syzkaller0: entered promiscuous mode [ 115.084539][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'. [ 115.099591][ T7985] syzkaller0: entered allmulticast mode [ 115.159711][ T7993] syzkaller0: entered promiscuous mode [ 115.204797][ T7993] syzkaller0: entered allmulticast mode [ 115.253060][ T8002] netlink: 68 bytes leftover after parsing attributes in process `syz.1.573'. [ 116.506426][ T7982] tipc: Resetting bearer [ 116.530390][ T7982] tipc: Disabling bearer [ 116.539135][ T6009] tipc: Node number set to 760442647 [ 116.634899][ T8023] netlink: 24 bytes leftover after parsing attributes in process `syz.0.580'. [ 116.896388][ T8040] netlink: 'syz.4.586': attribute type 10 has an invalid length. [ 116.916654][ T8040] netlink: 40 bytes leftover after parsing attributes in process `syz.4.586'. [ 116.928915][ T8040] batadv0: entered promiscuous mode [ 116.938385][ T8040] batadv0: entered allmulticast mode [ 116.945947][ T8040] bridge0: port 3(batadv0) entered blocking state [ 116.952800][ T8040] bridge0: port 3(batadv0) entered disabled state [ 116.962281][ T8040] bridge0: port 3(batadv0) entered blocking state [ 116.968936][ T8040] bridge0: port 3(batadv0) entered forwarding state [ 116.982434][ T8043] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 117.210358][ T8060] netlink: 'syz.0.593': attribute type 1 has an invalid length. [ 117.240550][ T8060] netlink: 'syz.0.593': attribute type 3 has an invalid length. [ 117.273366][ T8060] netlink: 'syz.0.593': attribute type 7 has an invalid length. [ 117.283092][ T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 117.292540][ T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 117.312777][ T8065] syz_tun: entered allmulticast mode [ 117.318459][ T8060] netlink: 'syz.0.593': attribute type 8 has an invalid length. [ 117.331994][ T8060] netlink: 184 bytes leftover after parsing attributes in process `syz.0.593'. [ 117.351311][ T8060] NCSI netlink: No device for ifindex 131092 [ 117.367641][ T8065] dvmrp8: entered allmulticast mode [ 117.375768][ T8071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.466751][ T8059] syz_tun: left allmulticast mode [ 118.334716][ T8127] __nla_validate_parse: 3 callbacks suppressed [ 118.334732][ T8127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.616'. [ 118.555296][ T8138] netlink: 412 bytes leftover after parsing attributes in process `syz.2.619'. [ 118.576822][ T8141] netlink: 412 bytes leftover after parsing attributes in process `syz.2.619'. [ 118.628359][ T8142] netlink: 20 bytes leftover after parsing attributes in process `syz.3.620'. [ 118.646361][ T8142] bridge6: entered promiscuous mode [ 118.651588][ T8142] bridge6: entered allmulticast mode [ 118.925468][ T8150] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 118.977226][ T8156] tipc: Started in network mode [ 118.978360][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.625'. [ 118.989413][ T8156] tipc: Node identity af0600000000000005, cluster identity 4711 [ 119.079902][ T1110] smc: removing ib device syz2 [ 119.095635][ T8166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.627'. [ 119.105304][ T6009] vxcan1 speed is unknown, defaulting to 1000 [ 119.116662][ T8164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.628'. [ 119.125835][ T6009] syz2: Port: 1 Link DOWN [ 119.139330][ T8164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.628'. [ 119.428173][ T13] nci: nci_rx_work: unknown MT 0x7 [ 119.550826][ T8191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'. [ 119.654943][ T8194] netlink: 'syz.1.634': attribute type 11 has an invalid length. [ 119.666768][ T8194] netlink: 24 bytes leftover after parsing attributes in process `syz.1.634'. [ 121.085004][ T8245] tipc: Enabled bearer , priority 10 [ 121.297214][ T8255] netlink: 'syz.2.655': attribute type 1 has an invalid length. [ 121.515545][ T8268] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 121.759949][ T8285] sctp: [Deprecated]: syz.2.665 (pid 8285) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.759949][ T8285] Use struct sctp_sack_info instead [ 121.949216][ T8291] bridge_slave_1 (unregistering): left promiscuous mode [ 121.956912][ T8291] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.987501][ T8287] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 122.823490][ T8338] macvtap0: entered promiscuous mode [ 122.839682][ T8338] vlan0: entered promiscuous mode [ 122.850121][ T8338] macvtap0: entered allmulticast mode [ 122.875382][ T8338] vlan0: entered allmulticast mode [ 122.895393][ T8351] netlink: 'syz.4.686': attribute type 1 has an invalid length. [ 122.904614][ T8338] veth0_vlan: entered allmulticast mode [ 122.916480][ T8351] netlink: 'syz.4.686': attribute type 1 has an invalid length. [ 122.956428][ T8355] macvtap1: entered promiscuous mode [ 122.957152][ T8356] netlink: 'syz.4.686': attribute type 39 has an invalid length. [ 122.970778][ T8355] macvtap1: entered allmulticast mode [ 123.475463][ T8382] __nla_validate_parse: 12 callbacks suppressed [ 123.475481][ T8382] netlink: 32 bytes leftover after parsing attributes in process `syz.0.697'. [ 123.590075][ T8382] netlink: 'syz.0.697': attribute type 2 has an invalid length. [ 123.808486][ T8390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.700'. [ 124.008713][ T8401] netlink: 132 bytes leftover after parsing attributes in process `syz.4.706'. [ 124.074594][ T8408] netlink: 'syz.1.708': attribute type 10 has an invalid length. [ 124.148039][ T8408] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.169745][ T8408] bond0: (slave team0): Enslaving as an active interface with an up link [ 124.210291][ T8416] netlink: 'syz.0.709': attribute type 13 has an invalid length. [ 124.218830][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.709'. [ 124.555940][ T8440] netlink: 132 bytes leftover after parsing attributes in process `syz.4.716'. [ 124.813647][ T8469] netlink: 'syz.4.722': attribute type 1 has an invalid length. [ 124.902288][ T8475] netlink: 24 bytes leftover after parsing attributes in process `syz.0.723'. [ 124.963270][ T8452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.720'. [ 124.982420][ T8452] netlink: 28 bytes leftover after parsing attributes in process `syz.2.720'. [ 125.057196][ T8469] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 125.066548][ T8461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.723'. [ 125.155996][ T8480] netlink: 24 bytes leftover after parsing attributes in process `syz.3.724'. [ 125.631672][ T8509] tipc: Enabled bearer , priority 0 [ 125.645963][ T8511] netlink: 'syz.3.736': attribute type 11 has an invalid length. [ 125.681008][ T8508] tipc: Disabling bearer [ 126.413329][ T8554] syzkaller0: entered promiscuous mode [ 126.440025][ T8554] syzkaller0: entered allmulticast mode [ 126.613876][ T8562] macvtap1: entered promiscuous mode [ 126.642524][ T8562] vlan0: entered promiscuous mode [ 126.671153][ T8562] macvtap1: entered allmulticast mode [ 126.687503][ T8562] vlan0: entered allmulticast mode [ 126.707123][ T8562] veth0_vlan: entered allmulticast mode [ 126.747505][ T8567] macvtap2: entered promiscuous mode [ 126.753693][ T8567] macvtap2: entered allmulticast mode [ 127.368076][ T8611] gre1: entered promiscuous mode [ 127.379585][ T8611] gre1: entered allmulticast mode [ 127.567586][ T8630] sctp: [Deprecated]: syz.3.770 (pid 8630) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.567586][ T8630] Use struct sctp_sack_info instead [ 127.779438][ T8638] tipc: Enabling of bearer rejected, failed to enable media [ 128.035089][ T8656] netem: change failed [ 128.606147][ T8689] 8021q: adding VLAN 0 to HW filter on device bond4 [ 128.669259][ T8699] sctp: [Deprecated]: syz.2.792 (pid 8699) Use of int in max_burst socket option deprecated. [ 128.669259][ T8699] Use struct sctp_assoc_value instead [ 128.794301][ T8702] Bluetooth: MGMT ver 1.23 [ 128.872953][ T8705] __nla_validate_parse: 11 callbacks suppressed [ 128.872971][ T8705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.793'. [ 129.049176][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.799'. [ 129.063335][ T8723] syzkaller0: entered promiscuous mode [ 129.070496][ T8725] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 129.072838][ T8723] syzkaller0: entered allmulticast mode [ 129.097970][ T8725] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 129.105523][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.799'. [ 129.121320][ T8725] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 129.164291][ T8725] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 129.186151][ T8725] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 129.197040][ T8725] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 129.207452][ T8725] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 129.207489][ T8733] netlink: 'syz.4.800': attribute type 39 has an invalid length. [ 129.217388][ T8725] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 129.217572][ T8725] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 129.245581][ T8725] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 131.232708][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 131.388277][ T8752] xt_hashlimit: invalid interval [ 131.526146][ T8756] netlink: 'syz.3.810': attribute type 10 has an invalid length. [ 131.628911][ T8756] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 131.684650][ T8756] netlink: 'syz.3.810': attribute type 10 has an invalid length. [ 131.692568][ T8756] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 131.706919][ T8756] netlink: 'syz.3.810': attribute type 10 has an invalid length. [ 131.778785][ T8756] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 131.796379][ T8769] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.815'. [ 131.809229][ T8769] rdma_op ffff8880733471f0 conn xmit_rdma 0000000000000000 [ 131.820269][ T8770] syzkaller0: entered promiscuous mode [ 131.826985][ T8756] netlink: 'syz.3.810': attribute type 10 has an invalid length. [ 131.835118][ T8770] syzkaller0: entered allmulticast mode [ 131.854678][ T8756] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 131.880290][ T8772] netlink: 40 bytes leftover after parsing attributes in process `syz.4.814'. [ 131.916216][ T8756] netlink: 'syz.3.810': attribute type 10 has an invalid length. [ 131.931471][ T8772] ip6tnl2: entered promiscuous mode [ 131.949497][ T8756] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 131.976870][ T8756] netlink: 'syz.3.810': attribute type 10 has an invalid length. [ 131.997389][ T8756] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 132.012445][ T8777] xt_ecn: cannot match TCP bits for non-tcp packets [ 132.028116][ T8756] netlink: 'syz.3.810': attribute type 10 has an invalid length. [ 132.061972][ T8756] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 132.124987][ T8756] netlink: 'syz.3.810': attribute type 10 has an invalid length. [ 132.169244][ T8756] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 132.217117][ T8756] netlink: 'syz.3.810': attribute type 10 has an invalid length. [ 132.248124][ T8756] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 132.277664][ T8756] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 132.302144][ T8756] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 132.718972][ T8799] netlink: 36 bytes leftover after parsing attributes in process `syz.1.822'. [ 132.739013][ T8801] tipc: Enabling of bearer rejected, failed to enable media [ 133.014717][ T8823] sctp: [Deprecated]: syz.4.823 (pid 8823) Use of int in max_burst socket option. [ 133.014717][ T8823] Use struct sctp_assoc_value instead [ 133.100056][ T8823] netlink: 40 bytes leftover after parsing attributes in process `syz.4.823'. [ 133.110509][ T8826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.828'. [ 133.134417][ T8819] bond3: option arp_all_targets: invalid value (18446744073709551613) [ 133.190499][ T8819] bond3 (unregistering): Released all slaves [ 133.588008][ T8848] ªªªªª>: renamed from bond_slave_0 [ 133.832107][ T8842] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.840029][ T8842] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.998364][ T8842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.016022][ T8842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.099339][ T8842] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 134.149170][ T8842] gretap1: left promiscuous mode [ 134.155153][ T8842] gretap1: left allmulticast mode [ 134.168542][ T8842] veth3: left promiscuous mode [ 134.279114][ T197] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.306138][ T8888] netlink: 20 bytes leftover after parsing attributes in process `syz.0.842'. [ 134.320898][ T197] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.336048][ T197] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.378124][ T197] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.415443][ T8892] validate_nla: 2 callbacks suppressed [ 134.415458][ T8892] netlink: 'syz.4.843': attribute type 6 has an invalid length. [ 134.593290][ T8906] block nbd0: NBD_DISCONNECT [ 134.928755][ T8925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.854'. [ 135.081459][ T8927] netlink: 'syz.4.855': attribute type 12 has an invalid length. [ 135.178274][ T8935] dvmrp0: entered allmulticast mode [ 135.384873][ T8948] syzkaller0: entered promiscuous mode [ 135.406640][ T8948] syzkaller0: entered allmulticast mode [ 135.566216][ T8962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.867'. [ 135.717813][ T8970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.869'. [ 135.830438][ T8970] netlink: 80 bytes leftover after parsing attributes in process `syz.2.869'. [ 135.913198][ T8980] netlink: 164 bytes leftover after parsing attributes in process `syz.1.873'. [ 135.930831][ T8984] netlink: 40 bytes leftover after parsing attributes in process `syz.0.875'. [ 136.060771][ T8991] netem: change failed [ 136.150108][ T8992] netem: change failed [ 136.455584][ T9013] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 136.588437][ T9020] gre0: left promiscuous mode [ 136.628083][ T9020] team0: left allmulticast mode [ 136.635925][ T9020] team0: left promiscuous mode [ 136.644251][ T9020] bridge0: port 1(team0) entered disabled state [ 136.741867][ T9020] net_ratelimit: 33018 callbacks suppressed [ 136.741882][ T9020] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 136.837595][ T9040] netlink: 16 bytes leftover after parsing attributes in process `syz.3.890'. [ 136.875109][ T9035] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.925541][ T9035] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.943541][ T9046] delete_channel: no stack [ 136.958606][ T9044] delete_channel: no stack [ 137.135822][ T9035] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.175280][ T9035] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.273438][ T9056] sctp: [Deprecated]: syz.1.895 (pid 9056) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.273438][ T9056] Use struct sctp_sack_info instead [ 137.331615][ T9061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.896'. [ 137.332228][ T9035] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.351651][ T9060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.896'. [ 137.361886][ T9035] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.382971][ T9062] tipc: Enabled bearer , priority 0 [ 137.390418][ T9062] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 137.398181][ T9062] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 137.408556][ T9062] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 137.465875][ T9062] tipc: Resetting bearer [ 137.496404][ T9035] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.507716][ T9035] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.531371][ T9058] netlink: 'syz.4.896': attribute type 1 has an invalid length. [ 137.755897][ T8619] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.770847][ T8619] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.832229][ T8619] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.857750][ T8619] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.904930][ T8624] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.913424][ T8624] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.961578][ T8624] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.971651][ T8624] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.019134][ T9087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.256487][ T9107] netlink: 'syz.1.912': attribute type 10 has an invalid length. [ 138.443999][ T981] tipc: Node number set to 2852519936 [ 138.514366][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.546391][ T9121] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 138.952477][ T9142] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 139.109467][ T9151] xt_hashlimit: overflow, try lower: 3/0 [ 139.427747][ T9185] __nla_validate_parse: 7 callbacks suppressed [ 139.427764][ T9185] netlink: 40 bytes leftover after parsing attributes in process `syz.3.936'. [ 139.678504][ T9201] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 139.708810][ T9204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.941'. [ 139.905722][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.945'. [ 140.045592][ T8619] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.058346][ T8619] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.068579][ T8619] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.077920][ T8619] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.126500][ T9236] openvswitch: netlink: IP tunnel dst address not specified [ 140.144749][ T9236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.950'. [ 140.154460][ T9236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.950'. [ 140.541603][ T9262] team_slave_0: entered promiscuous mode [ 140.547606][ T9262] team_slave_1: entered promiscuous mode [ 140.574905][ T9262] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 140.582430][ T9262] team0: Device macvtap1 is already an upper device of the team interface [ 140.598087][ T9262] team_slave_0: left promiscuous mode [ 140.603569][ T9262] team_slave_1: left promiscuous mode [ 140.665442][ T9267] netlink: 60 bytes leftover after parsing attributes in process `syz.1.956'. [ 140.813569][ T9283] netlink: 56 bytes leftover after parsing attributes in process `syz.4.964'. [ 141.016308][ T9299] netlink: 'syz.2.967': attribute type 2 has an invalid length. [ 141.197908][ T9313] xt_hashlimit: size too large, truncated to 1048576 [ 141.222325][ T9313] warn_alloc: 1 callbacks suppressed [ 141.222340][ T9313] syz.3.971: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 141.266927][ T9313] CPU: 1 UID: 0 PID: 9313 Comm: syz.3.971 Not tainted syzkaller #0 PREEMPT(full) [ 141.266950][ T9313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 141.266960][ T9313] Call Trace: [ 141.266967][ T9313] [ 141.266974][ T9313] dump_stack_lvl+0x189/0x250 [ 141.267004][ T9313] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.267024][ T9313] ? __pfx__printk+0x10/0x10 [ 141.267042][ T9313] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 141.267064][ T9313] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 141.267085][ T9313] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 141.267109][ T9313] warn_alloc+0x214/0x310 [ 141.267137][ T9313] ? __pfx_warn_alloc+0x10/0x10 [ 141.267167][ T9313] ? __get_vm_area_node+0x28f/0x300 [ 141.267189][ T9313] ? htable_create+0x101/0x7a0 [ 141.267213][ T9313] __vmalloc_node_range_noprof+0x690/0x12d0 [ 141.267258][ T9313] ? alloc_pages_mpol+0x3cd/0x4a0 [ 141.267277][ T9313] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 141.267304][ T9313] ? rcu_is_watching+0x15/0xb0 [ 141.267323][ T9313] ? htable_create+0x101/0x7a0 [ 141.267344][ T9313] __kvmalloc_node_noprof+0x674/0x910 [ 141.267367][ T9313] ? htable_create+0x101/0x7a0 [ 141.267385][ T9313] ? hashlimit_pernet+0x23/0x240 [ 141.267405][ T9313] ? hashlimit_pernet+0x23/0x240 [ 141.267423][ T9313] ? hashlimit_pernet+0x23/0x240 [ 141.267448][ T9313] htable_create+0x101/0x7a0 [ 141.267473][ T9313] hashlimit_mt_check_common+0x719/0xa10 [ 141.267500][ T9313] xt_check_match+0x3d1/0xab0 [ 141.267523][ T9313] ? __pfx_xt_check_match+0x10/0x10 [ 141.267540][ T9313] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 141.267565][ T9313] ? xt_find_match+0x1f7/0x250 [ 141.267585][ T9313] translate_table+0x1553/0x2040 [ 141.267621][ T9313] ? __pfx_translate_table+0x10/0x10 [ 141.267640][ T9313] ? __might_fault+0xb0/0x130 [ 141.267671][ T9313] ? _copy_from_user+0x94/0xb0 [ 141.267691][ T9313] do_ip6t_set_ctl+0x970/0xce0 [ 141.267712][ T9313] ? rcu_is_watching+0x15/0xb0 [ 141.267726][ T9313] ? trace_contention_end+0x39/0x120 [ 141.267749][ T9313] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 141.267784][ T9313] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 141.267810][ T9313] ? __pfx_aa_sk_perm+0x10/0x10 [ 141.267831][ T9313] nf_setsockopt+0x26f/0x290 [ 141.267852][ T9313] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 141.267871][ T9313] do_sock_setsockopt+0x17c/0x1b0 [ 141.267889][ T9313] __x64_sys_setsockopt+0x13f/0x1b0 [ 141.267906][ T9313] do_syscall_64+0xfa/0xfa0 [ 141.267922][ T9313] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.267939][ T9313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.267952][ T9313] ? clear_bhb_loop+0x60/0xb0 [ 141.267967][ T9313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.267980][ T9313] RIP: 0033:0x7f548538f6c9 [ 141.267993][ T9313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.268004][ T9313] RSP: 002b:00007f54861cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 141.268019][ T9313] RAX: ffffffffffffffda RBX: 00007f54855e5fa0 RCX: 00007f548538f6c9 [ 141.268028][ T9313] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 141.268036][ T9313] RBP: 00007f5485411f91 R08: 0000000000000588 R09: 0000000000000000 [ 141.268044][ T9313] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 141.268051][ T9313] R13: 00007f54855e6038 R14: 00007f54855e5fa0 R15: 00007ffe2d08e568 [ 141.268073][ T9313] [ 141.268145][ T9313] Mem-Info: [ 141.320831][ T9320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.333406][ T9313] active_anon:5026 inactive_anon:0 isolated_anon:0 [ 141.333406][ T9313] active_file:2628 inactive_file:39928 isolated_file:0 [ 141.333406][ T9313] unevictable:768 dirty:55 writeback:0 [ 141.333406][ T9313] slab_reclaimable:10843 slab_unreclaimable:98212 [ 141.333406][ T9313] mapped:29051 shmem:1355 pagetables:971 [ 141.333406][ T9313] sec_pagetables:0 bounce:0 [ 141.333406][ T9313] kernel_misc_reclaimable:0 [ 141.333406][ T9313] free:1332019 free_pcp:15826 free_cma:0 [ 141.373720][ T9320] C: renamed from team_slave_0 [ 141.376232][ T9313] Node 0 active_anon:20104kB inactive_anon:0kB active_file:10512kB inactive_file:159508kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116204kB dirty:216kB writeback:0kB shmem:3884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12760kB pagetables:3748kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 141.705846][ T9320] netlink: 'syz.0.974': attribute type 1 has an invalid length. [ 141.716194][ T9320] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 141.737404][ T9333] veth1_to_bond: entered allmulticast mode [ 141.769348][ T9313] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 141.883234][ T9313] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 141.942296][ T9313] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 141.948261][ T9313] Node 0 DMA32 free:1417900kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20360kB inactive_anon:0kB active_file:10512kB inactive_file:159508kB unevictable:1536kB writepending:216kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:43704kB local_pcp:21000kB free_cma:0kB [ 141.984005][ T9313] lowmem_reserve[]: 0 0 0 0 0 [ 141.988816][ T9313] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 142.005880][ T9329] veth1_to_bond: left allmulticast mode [ 142.019795][ T9313] lowmem_reserve[]: 0 0 0 0 0 [ 142.029142][ T9313] Node 1 Normal free:3896168kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17564kB local_pcp:7996kB free_cma:0kB [ 142.077187][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.977'. [ 142.077928][ T9313] lowmem_reserve[]: 0 0 0 0 0 [ 142.091423][ T9313] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 142.105764][ T9313] Node 0 DMA32: 1893*4kB (UME) 671*8kB (UME) 353*16kB (UME) 116*32kB (UM) 35*64kB (UM) 10*128kB (UME) 14*256kB (UME) 10*512kB (UM) 1*1024kB (M) 5*2048kB (UM) 335*4096kB (M) = 1417948kB [ 142.130045][ T9313] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 142.142499][ T9313] Node 1 Normal: 202*4kB (UME) 42*8kB (UME) 31*16kB (UME) 46*32kB (UME) 17*64kB (UME) 10*128kB (UME) 4*256kB (UME) 3*512kB (UM) 1*1024kB (M) 2*2048kB (UE) 948*4096kB (M) = 3896168kB [ 142.162021][ T9313] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 142.175351][ T9313] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 142.185104][ T9313] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 142.197467][ T9313] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 142.207192][ T9313] 43922 total pagecache pages [ 142.212072][ T9313] 0 pages in swap cache [ 142.216510][ T9313] Free swap = 124996kB [ 142.220759][ T9313] Total swap = 124996kB [ 142.225079][ T9313] 2097051 pages RAM [ 142.249483][ T9313] 0 pages HighMem/MovableOnly [ 142.257116][ T9313] 424119 pages reserved [ 142.262463][ T9313] 0 pages cma reserved [ 142.302776][ T9347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.437306][ T9328] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 142.449073][ T9354] netlink: 20 bytes leftover after parsing attributes in process `syz.1.982'. [ 142.534069][ T9362] openvswitch: netlink: Flow key attr not present in new flow. [ 142.544558][ T9362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.984'. [ 142.806495][ T9376] hsr0 speed is unknown, defaulting to 1000 [ 142.812561][ T9376] hsr0 speed is unknown, defaulting to 1000 [ 142.834546][ T9376] hsr0 speed is unknown, defaulting to 1000 [ 142.840691][ T9374] can: request_module (can-proto-0) failed. [ 142.879602][ T9376] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 142.925528][ T9376] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 143.025883][ T9376] hsr0 speed is unknown, defaulting to 1000 [ 143.047961][ T9376] hsr0 speed is unknown, defaulting to 1000 [ 143.101665][ T9376] hsr0 speed is unknown, defaulting to 1000 [ 143.127870][ T9376] hsr0 speed is unknown, defaulting to 1000 [ 143.148486][ T9376] hsr0 speed is unknown, defaulting to 1000 [ 143.169890][ T9390] tipc: Enabled bearer , priority 0 [ 143.181156][ T9390] tipc: Resetting bearer [ 143.195469][ T9389] tipc: Disabling bearer [ 143.504697][ T9401] netlink: 'syz.4.996': attribute type 10 has an invalid length. [ 143.693779][ T9414] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 143.706822][ T9414] 0ªî{X¹¦: entered allmulticast mode [ 143.716091][ T52] Bluetooth: hci0: command 0x080f tx timeout [ 143.723396][ T9414] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 143.851810][ T9421] netlink: 'syz.1.1004': attribute type 26 has an invalid length. [ 143.871313][ T9424] netlink: 'syz.1.1004': attribute type 26 has an invalid length. [ 143.956760][ T9425] netlink: 'syz.3.1003': attribute type 1 has an invalid length. [ 144.151405][ T9435] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 144.249747][ T9441] nbd: illegal input index -8454144 [ 144.268141][ T9441] nbd: illegal input index -8454144 [ 144.325973][ T9441] nbd: illegal input index -8454144 [ 144.702573][ T9466] netlink: 'syz.2.1020': attribute type 10 has an invalid length. [ 144.721616][ T9466] __nla_validate_parse: 10 callbacks suppressed [ 144.721631][ T9466] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1020'. [ 144.746845][ T9466] dummy0: entered promiscuous mode [ 144.757828][ T9466] bridge0: port 3(dummy0) entered blocking state [ 144.765666][ T9466] bridge0: port 3(dummy0) entered disabled state [ 144.775801][ T9466] dummy0: entered allmulticast mode [ 144.805373][ T9466] bridge0: port 3(dummy0) entered blocking state [ 144.811847][ T9466] bridge0: port 3(dummy0) entered forwarding state [ 144.924912][ T9475] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1023'. [ 145.656645][ T9493] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 145.748326][ T9495] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 145.770629][ T9497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1032'. [ 145.881429][ T9497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1032'. [ 145.893249][ T9497] netlink: 'syz.2.1032': attribute type 1 has an invalid length. [ 145.993869][ T9511] xt_ecn: cannot match TCP bits for non-tcp packets [ 146.087106][ T9516] netlink: 'syz.3.1039': attribute type 29 has an invalid length. [ 146.116114][ T9516] netlink: 'syz.3.1039': attribute type 29 has an invalid length. [ 146.177981][ T9521] netlink: 'syz.3.1039': attribute type 29 has an invalid length. [ 146.234285][ T9521] netlink: 'syz.3.1039': attribute type 29 has an invalid length. [ 146.736055][ T9563] syzkaller0: entered promiscuous mode [ 146.741638][ T9563] syzkaller0: entered allmulticast mode [ 147.558375][ T9600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1060'. [ 147.591923][ T9600] netlink: 'syz.2.1060': attribute type 2 has an invalid length. [ 147.619070][ T9606] openvswitch: netlink: nsh attribute has 65492 unknown bytes. [ 147.645459][ T9606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.850211][ T9616] sctp: [Deprecated]: syz.1.1065 (pid 9616) Use of int in maxseg socket option. [ 147.850211][ T9616] Use struct sctp_assoc_value instead [ 147.916003][ T9620] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1066'. [ 147.927287][ T9620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1066'. [ 147.941056][ T9616] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1065'. [ 148.020500][ T9624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1067'. [ 148.151763][ T9624] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1067'. [ 148.545313][ T9654] netlink: 'syz.3.1078': attribute type 7 has an invalid length. [ 148.575533][ T9644] nbd: must specify at least one socket [ 148.576322][ T9645] xt_TCPMSS: Only works on TCP SYN packets [ 149.048861][ T9686] xt_HMARK: spi-set and port-set can't be combined [ 149.190028][ T9696] tipc: Enabled bearer , priority 0 [ 149.224919][ T9698] tipc: Resetting bearer [ 149.252264][ T9695] tipc: Disabling bearer [ 149.516723][ T9713] xt_l2tp: missing protocol rule (udp|l2tpip) [ 149.555106][ T9708] syzkaller0: entered promiscuous mode [ 149.560689][ T9708] syzkaller0: entered allmulticast mode [ 149.567836][ T9713] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 149.839235][ T9736] netlink: 'syz.0.1104': attribute type 7 has an invalid length. [ 151.076636][ T9761] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 151.216489][ T9759] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 151.281155][ T9759] __nla_validate_parse: 5 callbacks suppressed [ 151.281171][ T9759] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1109'. [ 151.392205][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1109'. [ 151.429153][ T9788] syzkaller0: entered promiscuous mode [ 151.458796][ T9788] syzkaller0: entered allmulticast mode [ 151.571859][ T9794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.768238][ T9803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1124'. [ 151.778425][ T9803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1124'. [ 151.802704][ T9803] netlink: 50 bytes leftover after parsing attributes in process `syz.2.1124'. [ 152.148856][ T9820] IPVS: Unknown mcast interface: nicvf0 [ 152.242229][ T9834] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 152.251428][ T9820] syzkaller1: entered promiscuous mode [ 152.257119][ T9820] syzkaller1: entered allmulticast mode [ 152.325520][ T9839] netlink: 'syz.3.1135': attribute type 15 has an invalid length. [ 152.594033][ T9856] xt_limit: Overflow, try lower: 271964/0 [ 152.620535][ T9856] netlink: 'syz.0.1139': attribute type 39 has an invalid length. [ 152.965832][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1148'. [ 153.344402][ T9911] syzkaller0: entered promiscuous mode [ 153.349910][ T9911] syzkaller0: entered allmulticast mode [ 153.471461][ T9921] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1156'. [ 153.482193][ T9921] xt_socket: unknown flags 0xe4 [ 153.491159][ T9921] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1156'. [ 153.498005][ T9922] xt_socket: unknown flags 0xe4 [ 153.544859][ T9926] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1157'. [ 153.937974][ T9937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1159'. [ 154.081743][ T9942] tipc: Enabled bearer , priority 2 [ 154.143301][ T9947] vlan4: entered allmulticast mode [ 154.261475][ T9956] netlink: 'syz.1.1163': attribute type 1 has an invalid length. [ 154.737247][ T9987] openvswitch: netlink: Message has 1 unknown bytes. [ 154.755175][ T9987] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.820243][ T9994] 8021q: VLANs not supported on ip6_vti0 [ 155.124401][T10012] netlink: 'syz.2.1181': attribute type 1 has an invalid length. [ 155.160492][T10012] netlink: 'syz.2.1181': attribute type 3 has an invalid length. [ 155.196146][T10012] netlink: 'syz.2.1181': attribute type 7 has an invalid length. [ 155.233829][T10012] netlink: 'syz.2.1181': attribute type 8 has an invalid length. [ 155.241592][T10012] NCSI netlink: No device for ifindex 131092 [ 155.742538][T10055] netlink: 'syz.0.1190': attribute type 83 has an invalid length. [ 155.791952][T10059] netlink: 'syz.1.1191': attribute type 1 has an invalid length. [ 156.405354][T10103] __nla_validate_parse: 7 callbacks suppressed [ 156.405371][T10103] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1205'. [ 156.808365][T10128] hsr0 speed is unknown, defaulting to 1000 [ 156.979607][T10134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.989952][T10134] [ 156.992296][T10134] ====================================================== [ 156.999289][T10134] WARNING: possible circular locking dependency detected [ 157.006298][T10134] syzkaller #0 Not tainted [ 157.010690][T10134] ------------------------------------------------------ [ 157.017684][T10134] syz.0.1213/10134 is trying to acquire lock: [ 157.023724][T10134] ffff888141786a18 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x22b7/0x3b50 [ 157.035880][T10134] [ 157.035880][T10134] but task is already holding lock: [ 157.040641][T10135] : entered promiscuous mode [ 157.043234][T10134] ffff888043bb3158 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 157.043294][T10134] [ 157.043294][T10134] which lock already depends on the new lock. [ 157.043294][T10134] [ 157.043301][T10134] [ 157.043301][T10134] the existing dependency chain (in reverse order) is: [ 157.043309][T10134] [ 157.043309][T10134] -> #1 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}: [ 157.043339][T10134] lock_acquire+0x120/0x360 [ 157.043357][T10134] _raw_spin_lock+0x2e/0x40 [ 157.043375][T10134] sch_direct_xmit+0x153/0x4b0 [ 157.043394][T10134] __dev_queue_xmit+0x1857/0x3b50 [ 157.043413][T10134] ip6_finish_output2+0xfb3/0x1480 [ 157.043433][T10134] ip6_output+0x340/0x550 [ 157.043448][T10134] ndisc_send_skb+0xbce/0x1510 [ 157.043464][T10134] ndisc_send_ns+0xcb/0x150 [ 157.043477][T10134] addrconf_dad_work+0xaae/0x14b0 [ 157.043491][T10134] process_scheduled_works+0xae1/0x17b0 [ 157.043506][T10134] worker_thread+0x8a0/0xda0 [ 157.143516][T10134] kthread+0x711/0x8a0 [ 157.148100][T10134] ret_from_fork+0x4bc/0x870 [ 157.153190][T10134] ret_from_fork_asm+0x1a/0x30 [ 157.158452][T10134] [ 157.158452][T10134] -> #0 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}: [ 157.168775][T10134] validate_chain+0xb9b/0x2140 [ 157.174042][T10134] __lock_acquire+0xab9/0xd20 [ 157.179218][T10134] lock_acquire+0x120/0x360 [ 157.184218][T10134] _raw_spin_lock+0x2e/0x40 [ 157.189223][T10134] __dev_queue_xmit+0x22b7/0x3b50 [ 157.194750][T10134] ip6_finish_output2+0xfb3/0x1480 [ 157.200369][T10134] ip6_output+0x340/0x550 [ 157.205206][T10134] ndisc_send_skb+0xbce/0x1510 [ 157.210473][T10134] ndisc_solicit+0x444/0x610 [ 157.215565][T10134] __neigh_event_send+0xf70/0x1560 [ 157.221182][T10134] neigh_resolve_output+0x198/0x750 [ 157.226883][T10134] ip6_finish_output2+0xfb3/0x1480 [ 157.232498][T10134] ip6_output+0x340/0x550 [ 157.237332][T10134] ip6_send_skb+0x1d5/0x390 [ 157.242338][T10134] icmp6_send+0x12c6/0x1940 [ 157.247342][T10134] ip6_link_failure+0x3b/0x4c0 [ 157.252608][T10134] ip_tunnel_xmit+0x175b/0x2390 [ 157.257962][T10134] __gre_xmit+0x19a/0x240 [ 157.262794][T10134] erspan_xmit+0xa04/0x1220 [ 157.267800][T10134] dev_hard_start_xmit+0x2d7/0x830 [ 157.273409][T10134] sch_direct_xmit+0x241/0x4b0 [ 157.278676][T10134] __qdisc_run+0xaa0/0x1540 [ 157.283682][T10134] __dev_queue_xmit+0x1056/0x3b50 [ 157.289207][T10134] ip6_finish_output2+0xfb3/0x1480 [ 157.294825][T10134] ip6_output+0x340/0x550 [ 157.299657][T10134] ip6_mr_output+0x4e9/0x1100 [ 157.304841][T10134] rawv6_send_hdrinc+0xe16/0x17a0 [ 157.310364][T10134] rawv6_sendmsg+0x12ee/0x1830 [ 157.315632][T10134] __sock_sendmsg+0x19c/0x270 [ 157.320814][T10134] ____sys_sendmsg+0x505/0x830 [ 157.326078][T10134] ___sys_sendmsg+0x21f/0x2a0 [ 157.331254][T10134] __x64_sys_sendmsg+0x19b/0x260 [ 157.336692][T10134] do_syscall_64+0xfa/0xfa0 [ 157.341699][T10134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.348095][T10134] [ 157.348095][T10134] other info that might help us debug this: [ 157.348095][T10134] [ 157.358300][T10134] Possible unsafe locking scenario: [ 157.358300][T10134] [ 157.365724][T10134] CPU0 CPU1 [ 157.371065][T10134] ---- ---- [ 157.376406][T10134] lock(&qdisc_xmit_lock_key#3); [ 157.381419][T10134] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 157.391030][T10134] lock(&qdisc_xmit_lock_key#3); [ 157.398563][T10134] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 157.405658][T10134] [ 157.405658][T10134] *** DEADLOCK *** [ 157.405658][T10134] [ 157.413788][T10134] 12 locks held by syz.0.1213/10134: [ 157.419057][T10134] #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: rawv6_send_hdrinc+0xc9f/0x17a0 [ 157.428785][T10134] #1: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ip6_mr_output+0x1ca/0x1100 [ 157.438168][T10134] #2: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 157.447199][T10134] #3: ffffffff8df3d700 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 157.457100][T10134] #4: ffff888043bb3158 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 157.467351][T10134] #5: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: icmp6_send+0x1e9/0x1940 [ 157.476470][T10134] #6: ffff88814c9b8a20 (k-slock-AF_INET6){+.-.}-{3:3}, at: icmp6_send+0xc5c/0x1940 [ 157.485844][T10134] #7: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ip6_send_skb+0x10f/0x390 [ 157.495052][T10134] #8: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 157.504084][T10134] #9: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x1e4/0x1510 [ 157.513548][T10134] #10: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 157.522679][T10134] #11: ffffffff8df3d700 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 157.532683][T10134] [ 157.532683][T10134] stack backtrace: [ 157.538552][T10134] CPU: 1 UID: 0 PID: 10134 Comm: syz.0.1213 Not tainted syzkaller #0 PREEMPT(full) [ 157.538568][T10134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.538576][T10134] Call Trace: [ 157.538582][T10134] [ 157.538588][T10134] dump_stack_lvl+0x189/0x250 [ 157.538609][T10134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.538626][T10134] ? __pfx__printk+0x10/0x10 [ 157.538640][T10134] ? print_lock_name+0xde/0x100 [ 157.538653][T10134] print_circular_bug+0x2ee/0x310 [ 157.538670][T10134] check_noncircular+0x134/0x160 [ 157.538688][T10134] validate_chain+0xb9b/0x2140 [ 157.538710][T10134] __lock_acquire+0xab9/0xd20 [ 157.538724][T10134] ? __dev_queue_xmit+0x22b7/0x3b50 [ 157.538738][T10134] lock_acquire+0x120/0x360 [ 157.538749][T10134] ? __dev_queue_xmit+0x22b7/0x3b50 [ 157.538764][T10134] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 157.538781][T10134] ? check_noncircular+0xe0/0x160 [ 157.538797][T10134] _raw_spin_lock+0x2e/0x40 [ 157.538812][T10134] ? __dev_queue_xmit+0x22b7/0x3b50 [ 157.538826][T10134] __dev_queue_xmit+0x22b7/0x3b50 [ 157.538844][T10134] ? __dev_queue_xmit+0x27b/0x3b50 [ 157.538861][T10134] ? neigh_resolve_output+0x438/0x750 [ 157.538879][T10134] ? __pfx___dev_queue_xmit+0x10/0x10 [ 157.538893][T10134] ? read_seqbegin+0x122/0x250 [ 157.538908][T10134] ? neigh_resolve_output+0x438/0x750 [ 157.538930][T10134] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.538948][T10134] ? read_seqbegin+0x1ac/0x250 [ 157.538964][T10134] ? __pfx_read_seqbegin+0x10/0x10 [ 157.538980][T10134] ? __local_bh_enable_ip+0x12d/0x1c0 [ 157.538993][T10134] ? eth_header+0x11b/0x200 [ 157.539007][T10134] ? __asan_memcpy+0x40/0x70 [ 157.539030][T10134] ip6_finish_output2+0xfb3/0x1480 [ 157.539053][T10134] ? __pfx_ip6_finish_output2+0x10/0x10 [ 157.539070][T10134] ? ip6_mtu+0x7d/0x490 [ 157.539086][T10134] ? ip6_mtu+0x38c/0x490 [ 157.539102][T10134] ? ip6_finish_output+0x2ef/0x4e0 [ 157.539117][T10134] ? ip6_output+0x126/0x550 [ 157.539133][T10134] ip6_output+0x340/0x550 [ 157.539150][T10134] ndisc_send_skb+0xbce/0x1510 [ 157.539164][T10134] ? ndisc_send_skb+0x1e4/0x1510 [ 157.539180][T10134] ? __pfx_ndisc_send_skb+0x10/0x10 [ 157.539193][T10134] ? __pfx_dst_output+0x10/0x10 [ 157.539208][T10134] ? ipv6_get_lladdr+0x2b/0x3f0 [ 157.539221][T10134] ? ipv6_get_lladdr+0x2b/0x3f0 [ 157.539232][T10134] ? ipv6_get_lladdr+0x2b/0x3f0 [ 157.539244][T10134] ? ipv6_get_lladdr+0x378/0x3f0 [ 157.539256][T10134] ? ipv6_get_lladdr+0x2b/0x3f0 [ 157.539268][T10134] ndisc_solicit+0x444/0x610 [ 157.539285][T10134] ? __pfx_ndisc_solicit+0x10/0x10 [ 157.539301][T10134] ? __neigh_event_send+0xf08/0x1560 [ 157.539319][T10134] ? __pfx_ndisc_solicit+0x10/0x10 [ 157.539333][T10134] __neigh_event_send+0xf70/0x1560 [ 157.539352][T10134] ? ___neigh_create+0x1c83/0x2260 [ 157.539369][T10134] neigh_resolve_output+0x198/0x750 [ 157.539391][T10134] ip6_finish_output2+0xfb3/0x1480 [ 157.539412][T10134] ? __pfx_ip6_finish_output2+0x10/0x10 [ 157.539430][T10134] ? ip6_mtu+0x7d/0x490 [ 157.539445][T10134] ? ip6_mtu+0x38c/0x490 [ 157.539460][T10134] ? ip6_finish_output+0x2ef/0x4e0 [ 157.539476][T10134] ? ip6_output+0x126/0x550 [ 157.539491][T10134] ip6_output+0x340/0x550 [ 157.539506][T10134] ? ip6_send_skb+0x10f/0x390 [ 157.539523][T10134] ip6_send_skb+0x1d5/0x390 [ 157.539541][T10134] icmp6_send+0x12c6/0x1940 [ 157.539554][T10134] ? icmp6_send+0x1e9/0x1940 [ 157.539572][T10134] ? __pfx_icmp6_send+0x10/0x10 [ 157.539585][T10134] ? __lock_acquire+0xab9/0xd20 [ 157.539602][T10134] ? ip6_neigh_lookup+0x14e/0x470 [ 157.539616][T10134] ? ip6_neigh_lookup+0x14e/0x470 [ 157.539629][T10134] ? ip6_neigh_lookup+0x397/0x470 [ 157.539642][T10134] ? ip6_neigh_lookup+0x14e/0x470 [ 157.539655][T10134] ? __pfx_ip6_neigh_lookup+0x10/0x10 [ 157.539668][T10134] ? ___sys_sendmsg+0x21f/0x2a0 [ 157.539682][T10134] ? do_syscall_64+0xfa/0xfa0 [ 157.539700][T10134] ip6_link_failure+0x3b/0x4c0 [ 157.539715][T10134] ip_tunnel_xmit+0x175b/0x2390 [ 157.539736][T10134] ? ip_tunnel_xmit+0x110/0x2390 [ 157.539757][T10134] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 157.539773][T10134] ? gre_build_header+0x31c/0xa40 [ 157.539792][T10134] ? __pfx_gre_build_header+0x10/0x10 [ 157.539811][T10134] __gre_xmit+0x19a/0x240 [ 157.539827][T10134] ? __pfx___gre_xmit+0x10/0x10 [ 157.539842][T10134] ? __asan_memset+0x22/0x50 [ 157.539857][T10134] ? erspan_build_header+0x19c/0x370 [ 157.539876][T10134] erspan_xmit+0xa04/0x1220 [ 157.539896][T10134] ? __pfx_erspan_xmit+0x10/0x10 [ 157.539915][T10134] dev_hard_start_xmit+0x2d7/0x830 [ 157.539938][T10134] sch_direct_xmit+0x241/0x4b0 [ 157.539956][T10134] ? __pfx_sch_direct_xmit+0x10/0x10 [ 157.539973][T10134] ? gred_dequeue+0x4a6/0x680 [ 157.539991][T10134] __qdisc_run+0xaa0/0x1540 [ 157.540013][T10134] __dev_queue_xmit+0x1056/0x3b50 [ 157.540028][T10134] ? register_lock_class+0x51/0x320 [ 157.540042][T10134] ? __dev_queue_xmit+0x27b/0x3b50 [ 157.540061][T10134] ? __pfx___dev_queue_xmit+0x10/0x10 [ 157.540075][T10134] ? read_seqbegin+0x122/0x250 [ 157.540091][T10134] ? neigh_resolve_output+0x438/0x750 [ 157.540107][T10134] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.540124][T10134] ? read_seqbegin+0x1ac/0x250 [ 157.540140][T10134] ? __pfx_read_seqbegin+0x10/0x10 [ 157.540155][T10134] ? __local_bh_enable_ip+0x12d/0x1c0 [ 157.540168][T10134] ? eth_header+0x11b/0x200 [ 157.540181][T10134] ? __asan_memcpy+0x40/0x70 [ 157.540204][T10134] ip6_finish_output2+0xfb3/0x1480 [ 157.540225][T10134] ? __pfx_ip6_finish_output2+0x10/0x10 [ 157.540243][T10134] ? ip6_mtu+0x7d/0x490 [ 157.540258][T10134] ? ip6_mtu+0x38c/0x490 [ 157.540273][T10134] ? ip6_finish_output+0x2ef/0x4e0 [ 157.540289][T10134] ? ip6_output+0x126/0x550 [ 157.540304][T10134] ip6_output+0x340/0x550 [ 157.540320][T10134] ip6_mr_output+0x4e9/0x1100 [ 157.540340][T10134] ? ip6_mr_output+0x1ca/0x1100 [ 157.540358][T10134] ? __pfx_ip6_mr_output+0x10/0x10 [ 157.540378][T10134] ? ip6t_do_table+0x1db/0x1560 [ 157.540396][T10134] ? __pfx_ip6t_do_table+0x10/0x10 [ 157.540417][T10134] ? skb_dst+0x4f/0xd0 [ 157.540429][T10134] ? dst_output+0x17b/0x1c0 [ 157.540441][T10134] ? rawv6_send_hdrinc+0xc9f/0x17a0 [ 157.540454][T10134] rawv6_send_hdrinc+0xe16/0x17a0 [ 157.540471][T10134] ? __pfx_rawv6_send_hdrinc+0x10/0x10 [ 157.540483][T10134] ? txopt_get+0x335/0x3f0 [ 157.540496][T10134] ? __pfx_dst_output+0x10/0x10 [ 157.540508][T10134] ? __pfx_txopt_get+0x10/0x10 [ 157.540522][T10134] rawv6_sendmsg+0x12ee/0x1830 [ 157.540540][T10134] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 157.540559][T10134] ? __pfx_aa_sk_perm+0x10/0x10 [ 157.540577][T10134] ? sock_rps_record_flow+0x19/0x410 [ 157.540595][T10134] ? inet_sendmsg+0x2f4/0x370 [ 157.540606][T10134] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 157.540620][T10134] __sock_sendmsg+0x19c/0x270 [ 157.540638][T10134] ____sys_sendmsg+0x505/0x830 [ 157.540652][T10134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.540668][T10134] ? import_iovec+0x74/0xa0 [ 157.540685][T10134] ___sys_sendmsg+0x21f/0x2a0 [ 157.540699][T10134] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.540722][T10134] ? __fget_files+0x2a/0x420 [ 157.540733][T10134] ? __fget_files+0x3a0/0x420 [ 157.540748][T10134] __x64_sys_sendmsg+0x19b/0x260 [ 157.540762][T10134] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 157.540779][T10134] ? do_syscall_64+0xbe/0xfa0 [ 157.540797][T10134] do_syscall_64+0xfa/0xfa0 [ 157.540813][T10134] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.540829][T10134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.540842][T10134] ? clear_bhb_loop+0x60/0xb0 [ 157.540855][T10134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.540868][T10134] RIP: 0033:0x7f5aa2f8f6c9 [ 157.540881][T10134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.540892][T10134] RSP: 002b:00007f5aa11ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.540905][T10134] RAX: ffffffffffffffda RBX: 00007f5aa31e5fa0 RCX: 00007f5aa2f8f6c9 [ 157.540915][T10134] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 157.540929][T10134] RBP: 00007f5aa3011f91 R08: 0000000000000000 R09: 0000000000000000 [ 157.540937][T10134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.540944][T10134] R13: 00007f5aa31e6038 R14: 00007f5aa31e5fa0 R15: 00007ffe1a159d88 [ 157.540959][T10134] [ 158.328767][T10134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.338210][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.392745][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog