last executing test programs: 10.993266565s ago: executing program 1 (id=2397): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x840}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/45, 0x2d, 0x40004132, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 10.009310311s ago: executing program 1 (id=2398): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @multicast1}, 0x2, 0x1, 0x3, 0x7}}, 0x26) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xba}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r6, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000002060300000000000000"], 0x48}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r9, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r10, r7, 0x4, r8}, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r11, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x0) unshare(0x2c060000) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) unshare(0x24020400) 9.219729015s ago: executing program 1 (id=2399): socket$can_raw(0x1d, 0x3, 0x1) r0 = socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x4008014) bind$packet(r0, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) unshare(0x22020600) read$alg(r3, 0x0, 0x0) writev(r3, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 8.456884881s ago: executing program 0 (id=2403): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @multicast1}, 0x2, 0x1, 0x3, 0x7}}, 0x26) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xba}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r6, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000000206030000000000000000000500"], 0x48}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r9, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r10, r7, 0x4, r8}, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r11, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x0) unshare(0x2c060000) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) unshare(0x24020400) 8.359281649s ago: executing program 1 (id=2404): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f0000000600)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x8080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="c235535a17ac64791bbe00309033", 0x0, 0x7fffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@deltaction={0x19c, 0x31, 0x500, 0x70bd26, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x88, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x74}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x19c}}, 0x400c0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18) recvmmsg(r5, &(0x7f0000001d40)=[{{0x0, 0xfdbb, 0x0, 0x0, &(0x7f0000000440)=""/217, 0xcd}, 0x218}], 0x40000ee, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$SIOCGSTAMPNS(r5, 0x8907, 0x0) 8.054818085s ago: executing program 4 (id=2407): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$rds(0x15, 0x5, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x94) sendmmsg$inet6(r1, &(0x7f0000000440), 0x0, 0x20008050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) ioctl(r3, 0x8b22, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r1], 0x1000f) 7.446006895s ago: executing program 3 (id=2408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xffff93d3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r3, 0x58, &(0x7f0000000300)}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140faff"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8}]}, 0x2c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x8044) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000140)=""/170, &(0x7f0000000200)=0xaa) socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x74) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r6, 0x118, 0x1, 0x0, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x30, 0x1405, 0x900, 0x8070bd26, 0x25dfdbfe, "", [{{0x8, 0x1, 0x3}, {0xfd79, 0x3, 0x200401}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x0, 0x1, 0xfffffffd}}, {{}, {0x0, 0x3, 0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c040}, 0x20000100) 7.272604389s ago: executing program 0 (id=2409): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x4e24, 0x0, 0x2}, {0x0, 0xfffffffffffffffb, 0x6, 0xfffffffffffffffe, 0x4000000000000000, 0x80040000000}, {0xfffffffffffffffc, 0x0, 0x0, 0x7}, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@local, 0x2, 0x3c}, 0x2, @in6=@private1, 0x0, 0x4, 0x0, 0x0, 0x7, 0xfffffffc, 0x1002}}, 0xe8) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x18, &(0x7f0000000000)=0x2, 0x4) connect$inet6(r1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000440)={{r3}, r4, 0x10, @unused=[0x6, 0x3a, 0x7, 0x1], @subvolid=0xfffffffffffffffd}) pipe(&(0x7f0000000240)={0xffffffffffffffff}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001440), &(0x7f0000001480)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001540)={'gre0\x00', &(0x7f00000014c0)={'tunl0\x00', 0x0, 0x20, 0x8, 0x6, 0x2, {{0x14, 0x4, 0x3, 0x3, 0x50, 0x66, 0x0, 0x1, 0x2f, 0x0, @multicast1, @empty, {[@ra={0x94, 0x4}, @rr={0x7, 0xf, 0x4b, [@empty, @rand_addr=0x64010102, @empty]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0x33, 0x0, 0x1, [0x1ff, 0x15, 0x6, 0x4, 0x4, 0xffffffff, 0x5, 0xb]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001600)={'syztnl2\x00', &(0x7f0000001580)={'ip6gre0\x00', 0x0, 0x2f, 0x8, 0x3, 0xf, 0x0, @loopback, @private0, 0x20, 0x10, 0x100, 0x3ff}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001640)={'batadv_slave_0\x00'}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'veth1\x00'}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000016c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001680)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x44040) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket(0x1e, 0x4, 0x0) recvmmsg$unix(r7, &(0x7f00000043c0), 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000003"], 0x64}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 7.152257355s ago: executing program 4 (id=2410): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$rds(0x15, 0x5, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f6", 0x5a}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x94) sendmmsg$inet6(r1, &(0x7f0000000440), 0x0, 0x20008050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) ioctl(r3, 0x8b22, &(0x7f0000000040)) 7.059587436s ago: executing program 3 (id=2411): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000840}, 0x0) recvmsg$can_raw(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/34, 0x22}, {&(0x7f00000006c0)=""/117, 0x4e}], 0x2}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0x209d, 0x3, 0x0, 0x7ffffff9}, 0x10) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r6, 0x101, 0x1, &(0x7f0000000000)=0x2, 0x4) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="b3a6f617525226f6dff9dad9c316da5a5dad6b2cfb8a58727781b010b8ce923c648376d6789dfcbf96923ccdd51d362fa16e0ef6ea4fc3bf60fa53d36b94cf3cd4885a2895cf58acb3102ea7fc5a283088a8f9cbf1861677cd11001ad701cd4c0d127f7b9f7782eecbbe", 0x6a) write(r5, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000240)={'veth1_vlan\x00', 0x8}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x3c}, {0xfffffffffffffffe, 0x4, 0x1, 0x0, 0x0, 0x9, 0xf0e}, {0x1ff, 0xc, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in=@loopback, 0x1, 0x32}, 0x2, @in=@private=0xa010101, 0x3502, 0x1, 0x0, 0x0, 0x2, 0xfffffffd}}, 0xe8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) 6.992522149s ago: executing program 0 (id=2412): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0c0003000000000000000000080002006c"], 0x30}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[], 0x0, 0x65, 0x0, 0x1, 0x7}, 0x28) sendto$unix(r2, 0x0, 0x0, 0x404c880, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1019, &(0x7f0000001200)=""/4121, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) syz_emit_ethernet(0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60f7d8ff003c3c00fe8000000000000000000000000000aaff0200000000000000000000000000010004000000000000c91000000000000000000000001b"], 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000280)="65687a2b658489f95c65083fdfca254257b5000de3a73cad5820d4c7ed9838298218d21d35c4827762a8ff818b8b9bcbb14918c976cd70c98f1f511cb99eb85588de82150d9975a307dfa90a46e172e24028489d07d781a16ce1de75be93b9278ba762728757aa07b0c6afb0efe510b4ac361189987220dc35795680ed182edc6a79987a0bb7e3c6dee447f59e2c7fb876dee53cedefa5c4c880c6b8de3ad33a7c78141ece19239049e6c785495ecc8f7dd8bdfab0130e95ee29cd4ae8f98e", 0xbf}], 0x2, 0x0, 0x0, 0x404c050}], 0x1, 0x0) r4 = socket$inet(0x2, 0xa, 0xfffffffe) getsockopt$inet_opts(r4, 0x0, 0x12, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24d973c4c8c84f63}, 0x40080) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000008c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x540, 0x180, 0x180, 0x288, 0x98, 0x0, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x61}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{}, {0xc}}]}, @TTL={0x28}}, {{@ip={@remote, @local, 0xffffff00, 0xffffff00, 'veth1_vlan\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x8, 0x0, 0x5c}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x6]}}}, @common=@addrtype={{}, {0x100, 0x900}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0x9}}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'pim6reg0\x00', 'erspan0\x00'}, 0x0, 0xe8, 0x110}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'lo\x00', 'nr0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298b2d52f8acf654) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @default, @default]}) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) 6.761893349s ago: executing program 0 (id=2413): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea616f", 0x3}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x3a8, 0xffffffff, 0x1c0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [0x0, 0x0, 0x0, 0xff], [], 'macsec0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x6, 0x0, 0x1, 0x48}, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0x50cc}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x42b5}}}}, {{@ipv6={@private2, @mcast1, [0x0, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xffffff00], 'macvlan1\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x6c, 0x6, 0x6}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x80, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r8) sendmsg$TIPC_NL_PUBL_GET(r8, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x14, r9, 0x341, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)={0x2c, r11, 0x301, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x2c}}, 0x20000000) sendmsg$ETHTOOL_MSG_RINGS_SET(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r11, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x4}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x6d3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004011) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0xfffffffffffff20, [{}, {0x0, 0x100000000000000}]}, 0x68) 6.467246186s ago: executing program 4 (id=2416): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r3, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) socket$rxrpc(0x21, 0x2, 0xa) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) pipe(&(0x7f0000000800)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f00000009c0)={'sit0\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x7, 0x700, 0x9, 0x92, {{0x1e, 0x4, 0x0, 0x1f, 0x78, 0x64, 0x0, 0x4, 0x4, 0x0, @multicast2, @multicast2, {[@timestamp_addr={0x44, 0x14, 0x74, 0x1, 0x6, [{@remote, 0x4}, {@rand_addr=0x64010100, 0x2}]}, @end, @noop, @timestamp_prespec={0x44, 0xc, 0xf7, 0x3, 0x8, [{@empty, 0x800}]}, @ssrr={0x89, 0xb, 0xac, [@rand_addr=0x64010101, @rand_addr=0x64010100]}, @ssrr={0x89, 0xf, 0xa3, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x20}, @dev={0xac, 0x14, 0x14, 0x1d}]}, @lsrr={0x83, 0x27, 0x1b, [@rand_addr=0x64010101, @loopback, @local, @rand_addr=0x64010101, @empty, @remote, @rand_addr=0x64010100, @multicast1, @loopback]}]}}}}}) 6.010275616s ago: executing program 3 (id=2417): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000}, 0x38) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) shutdown(r0, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) 5.0709741s ago: executing program 3 (id=2419): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x1c}, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a000000020000", 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r1, &(0x7f0000000500), 0x0, 0x2000c851, 0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, 0x0, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="2f0000001c0005fffffff7000d000000020000000b000000ec0091c913000180f0ffffeb46860f21244e36c3fdb9c3", 0x2f}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket(0x2, 0x6, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x61}, {0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 3.615681815s ago: executing program 2 (id=2420): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x4, 0x0, 0x0, 0x44003, 0xffffffffffffffff, 0x1d1d, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2, 0x7}, 0x50) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x3, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x24000000) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2d, 0x9, 0x70bd27, 0x25dfdbfe, {0x5}, [@typed={0x8, 0xa, 0x0, 0x0, @uid}]}, 0x1c}}, 0x20000086) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000000)=ANY=[], 0x114}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0x50, 0x30, 0x1, 0xfffffffc, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xfa}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)={0x2, 'nr0\x00', {0x10001}, 0x6}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r1, 0x5a}, 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r1, 0x4}, &(0x7f0000000040)=0x8) syz_emit_ethernet(0x1e, &(0x7f0000000440)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@can={0xc, {{0x0, 0x0, 0x1}, 0x2, 0x6, 0x0, 0x0, "1eaa66fb411f199c"}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x420, 0x3e8, 0x4, 0x70bd2c, 0x25dfdbfe, {0x6, 0x2, 0x3c, [0x0, 0x1, 0x3, 0x2, 0x6, 0x8000, 0xdb2, 0x22ef, 0x1ff, 0x10001, 0x5, 0x401, 0x1, 0x6, 0x141e16d, 0x8, 0xb, 0x8, 0x25ed8f50, 0x4, 0x6, 0x6, 0xaa32, 0x2, 0x7, 0xfffff9e7, 0x2, 0x8, 0x1000, 0x7, 0x4, 0x9, 0xe, 0x89f4, 0x40, 0x401, 0x81, 0x5, 0x6, 0x7fff, 0x9, 0x7, 0x6, 0x40, 0xd64e, 0x2, 0x1, 0x7, 0x6, 0xe7f, 0x8, 0x7, 0x92b0, 0xd, 0x2, 0x8001, 0x5, 0x6, 0x4, 0xaf, 0x0, 0x73396a94, 0x3, 0x4], [0x3, 0x80000006, 0x0, 0x3, 0xfffffff9, 0xcd, 0xfffffffd, 0xffff, 0xaa, 0x5, 0x9, 0x5, 0xc, 0x0, 0x2000000, 0x81, 0x4, 0x7900, 0x782, 0x100, 0xffff0001, 0x0, 0x1, 0x0, 0x3, 0x9, 0x4000001, 0x3, 0x0, 0x4, 0x6, 0x10, 0x5, 0x0, 0x1, 0x4, 0xac, 0x3, 0x10, 0x3ff, 0x6, 0x8, 0x9, 0x8, 0x2, 0x0, 0xb195, 0xffffdd80, 0x3, 0x100001, 0x3, 0x6, 0x8, 0xb, 0x5, 0xac, 0x2009, 0x0, 0x6, 0xc, 0x1, 0x2, 0x0, 0xfffffffc], [0x7, 0xe, 0xce, 0x1, 0x1, 0xd, 0x0, 0x8, 0x3, 0x7ff, 0x1, 0x4, 0xee1e, 0x5, 0x6, 0x2, 0x8, 0x5, 0x3, 0x7, 0x758, 0x9, 0x1, 0x6, 0x0, 0x77cc, 0x7, 0x2, 0x6, 0x8, 0x3, 0xf64, 0x8, 0x1, 0x4, 0x10000, 0x2, 0x5, 0xee8, 0x7fff, 0x15e18422, 0x10000, 0x5, 0x7ff, 0x1, 0x2, 0x6, 0x8, 0x8, 0x2, 0x4, 0x1000, 0x3ff, 0x3, 0x7b6f0000, 0x2, 0x4000003, 0x9, 0x68ec, 0x4, 0x9, 0x7, 0xffff8f0d, 0x3], [0x9, 0x8, 0x1, 0x200, 0xfffffff8, 0x400, 0x3, 0xa, 0x90, 0x6, 0x8, 0x4e6b, 0xc, 0x0, 0xc8, 0xad, 0x3, 0x5, 0x4, 0x6, 0xfffffff1, 0x1, 0x1, 0x4, 0x8, 0x6, 0x9, 0xff, 0x400, 0x9, 0xfff, 0x6, 0x651, 0x8001, 0x1, 0xee83, 0x7, 0x4, 0xe, 0xa, 0xffff, 0x4, 0x9, 0x20000000, 0x7, 0x74, 0x0, 0x6, 0x5, 0x101, 0x9, 0x2, 0x2, 0x0, 0x5, 0x6, 0x2, 0x4, 0x6, 0x4, 0x7, 0x6, 0x8]}}, 0x420}}, 0x40040) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x20, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e7"], 0x38}, 0x200048d0) bind$bt_hci(r6, &(0x7f0000001ac0), 0x6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000014c0)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x881}, 0x0) 3.121874888s ago: executing program 3 (id=2421): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$rds(0x15, 0x5, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x94) sendmmsg$inet6(r1, &(0x7f0000000440), 0x0, 0x20008050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) ioctl(r3, 0x8b22, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r1], 0x1000f) 2.856511926s ago: executing program 2 (id=2422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$netlink(r0, &(0x7f0000000200)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0xd5f810af1735f624}, 0xc, &(0x7f0000000180)=[{&(0x7f0000000440)={0xf8, 0x24, 0x0, 0x70bd2a, 0x25dfdbfe, "", [@nested={0xe8, 0x6e, 0x0, 0x1, [@generic="f535ddd9f0500c832d54b020017ca27e3ec7e9a3135b6b29ebfa2b84b340c8d871e9b6bcfcd128defb68fb1548a6b5cb1d48d0cbc2dac7c73ff129177e77e01c1be3185b88efc283a994a13100f7ae9f5d383ab34eaf401bd438b7d48be85c487f0d6bd4b46b1bb1474c63a4888a79a2f3da641f56eb9988ddfbba48bb65d2b9f1f3b25c0fa5a13595", @nested={0x4, 0x83}, @typed={0x8, 0xf3, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x14, 0x27, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="ab27ca9cf0a301502506d626c963ddfc7076400794eab24cb707765b9ddd863ed23b41ce2b80a8bdabcff428f027fe8f99ca9490c5aac3074bccf0"]}]}, 0xf8}], 0x1, 0x0, 0x0, 0x80}, 0x41) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000021c0)=ANY=[@ANYBLOB="181600002400e5ff25bd7000fedbdf25051600800c00010002"], 0x1618}], 0x1}, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r8, 0x0, 0xc, &(0x7f0000000040)=0x3, 0x2) recvmmsg(r8, &(0x7f0000005100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/17, 0x11}, 0xa65}], 0x1, 0x45833af92e4b39ff, 0x0) getsockopt$netrom_NETROM_T4(r7, 0x103, 0x6, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r5, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a00000000000000000c000008001900", @ANYBLOB="06a4000000230000"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000b0000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000075090200020000007b9a00fe00000000b509000000000000c39a04fe41000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r4], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r3, 0x201, 0x70bd26, 0xfffffffe, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x31}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x4c}, 0x8, 0x3000000000002}, 0x844) r9 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r9, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="00301d0000000009cb10014a98956b45a81b9a4400000000", 0x18}, {&(0x7f00000001c0)='\f', 0x1}], 0x2}}], 0x1, 0x20040050) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe0}}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 2.722222726s ago: executing program 4 (id=2423): close(0xffffffffffffffff) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) connect$vsock_stream(r0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 2.503328119s ago: executing program 2 (id=2424): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x840}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/45, 0x2d, 0x40004132, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000340)={0x0, @empty, @dev}, &(0x7f0000000380)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.44516995s ago: executing program 1 (id=2425): socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000700)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffa, @private0, 0x0, 0x2}, 0x20) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x270, 0x2b8, 0xb0000010, 0x160, 0x5c8fca04, 0x270, 0x3a8, 0x3a8, 0x270, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'team_slave_0\x00', 'veth0_to_team\x00'}, 0x0, 0xf8, 0x160, 0x700, {}, [@common=@inet=@dscp={{0x28}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0xd}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "78ed9300032ce416ae19db66c8fb2158fbc487a284b992e42fef198c9f58"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)}}], 0x48}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="4ffc0000cb149bc5cb99cbc949e6db96867c79eb937a8e5f1435d8e827340ee882a4c436f592ba21eb815af3558a6cac9f8ecc84316f9496dfec32327d3855a49119f2e5c0c4fe856d25d5b729837d1036c4f7e91faf4b9f3084d5aabf846749b2f3b01ca5994ee5fbff0212c7aca1bb5998ce408187d24a992da97dca056e00d1de8d14789c51d685792deb17a9fa8edead0cd72627f604e19a2d35edd577f4d4671c598d8976173d3782b4e8d09f60311029cca91dbd1f3165092cf2791c11aff68dc600"/206, @ANYRES16, @ANYBLOB="050000000000fbdbdf252e0000000800", @ANYRES32=r6, @ANYBLOB="080034002a1cb3e20400cc0004"], 0x2c}, 0x1, 0x0, 0x0, 0x8894}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a8014000700fe88000000000000000000000000010114003500776731"], 0x50}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000b80)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="97e592af3c822b0b4fa2c881f77ad762900eb64305025bbb1e570b0c5fb874caba3b8c4b3392652f8ff50fedca3b132c0a5b577896b559c229cd6502c30f74a637cc8dfdfded4f990f0c66b6fdbbf78e7bee84b5e79cf0ea33ee56f4f1980fe9ca21ee32f82252672780e360ce380f4b40ae09498365b55ca236cf0c9def714ef6da72e2e3619d58f76884f81967d7b47892e08304c99336afadce17ccf004000000d11e1ebed2f4aee9de1565945216596cf065071112553e6b", @ANYRES8=r7, @ANYBLOB, @ANYRESHEX=r6], &(0x7f0000000400)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, 0x2}, 0x94) socket$inet(0x2, 0x4, 0xd991) 2.079714999s ago: executing program 1 (id=2426): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$rds(0x15, 0x5, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f698", 0x5b}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x94) sendmmsg$inet6(r1, &(0x7f0000000440), 0x0, 0x20008050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) ioctl(r3, 0x8b22, &(0x7f0000000040)) 1.848443808s ago: executing program 0 (id=2427): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000840}, 0x0) recvmsg$can_raw(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/34, 0x22}, {&(0x7f00000006c0)=""/117, 0x4e}], 0x2}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0x209d, 0x3, 0x0, 0x7ffffff9}, 0x10) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r6, 0x101, 0x1, &(0x7f0000000000)=0x2, 0x4) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="b3a6f617525226f6dff9dad9c316da5a5dad6b2cfb8a58727781b010b8ce923c648376d6789dfcbf96923ccdd51d362fa16e0ef6ea4fc3bf60fa53d36b94cf3cd4885a2895cf58acb3102ea7fc5a283088a8f9cbf1861677cd11001ad701cd4c0d127f7b9f7782eecbbe", 0x6a) write(r5, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000240)={'veth1_vlan\x00', 0x8}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x3c}, {0xfffffffffffffffe, 0x4, 0x1, 0x0, 0x0, 0x9, 0xf0e}, {0x1ff, 0xc, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in=@loopback, 0x1, 0x32}, 0x2, @in=@private=0xa010101, 0x3502, 0x1, 0x0, 0x0, 0x2, 0xfffffffd}}, 0xe8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) 1.602250968s ago: executing program 4 (id=2428): r0 = socket$caif_seqpacket(0x25, 0x5, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000a0000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100000000000008000000000000"], 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x29, 0x66, 0x6, 0xff, 0x2e, @mcast1, @private0, 0x10, 0x80, 0x7fff, 0xfffffff0}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x4, 0x2, 0x400, 0x5, 0x80680294, r5}) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRES8=r2, @ANYRESDEC=r0], 0x3c}}, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000000)={{r1}, 0x2a, 0x80000007ff, 0x2}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(anubis)\x00'}, 0x58) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYBLOB="050028bd70000000000700ffeb00080003005b03e56786f0d9b1effdc45b488833a1c6c5c5046fea768fa66b0b05fc51f400d817e3e2c74a6429b5bbb9a37ce040bedb194f2900351a73b0d99dfe02ebcf03b69d8a724f16bd", @ANYRES16=r4, @ANYRES8=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40011}, 0x4000006) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000040)=0xfffff5db, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa000000000000711037000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x3f}, 0x94) socket$key(0xf, 0x3, 0x2) r8 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r9, @ANYBLOB="01000000000000000000010000002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b00736970000600010002000000080005"], 0xc4}}, 0x0) connect$bt_rfcomm(r1, &(0x7f0000000240)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}, 0xa) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) 1.525134112s ago: executing program 3 (id=2429): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000}, 0x38) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) shutdown(r0, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) 1.364598441s ago: executing program 2 (id=2430): mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00'}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, 0x0, &(0x7f00000003c0)) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r5, 0x0, 0x8c4) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f00000007c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0x64010102}}, 0x24) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) accept4$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @default}, [@null, @null, @default, @bcast, @remote, @netrom, @bcast, @default]}, &(0x7f00000001c0)=0x48, 0x80000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000540), 0x0}, 0x20) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) 863.004407ms ago: executing program 2 (id=2431): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x5, @multicast2}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0xa0}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffec3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES64, @ANYRES32=r4, @ANYRESOCT=0x0, @ANYRES32, @ANYBLOB="0000000000e8ffffffffffffff00"/25], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x24, 0x0, &(0x7f0000002700)="035a95e24550e0748674a95588a8144686ddb5465cfcc1f50f4ba186629ce21d3227eda8", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000300)=@req3={0x30000000, 0x0, 0x0, 0x7, 0x4, 0xf8000000, 0x7ffe}, 0x1c) close(r7) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7}) write$bt_hci(r6, &(0x7f0000000080)=ANY=[], 0x6) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="001b000000000000b7080000008af8ff00000000bfa200000000000007ffffffff8e6affb703000008000000b7040000000000008500000001000000950000000035fcf67ecf347149628aebeaf3e9351bf1f231e85f3668a94bd2a702e4dd2f9e1cc7922825b3d3030d7c99d38e5b0432f75bef0a2fa47c3c4e6f6d395b3464cdb3b903"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f00000002c0), &(0x7f00000005c0)=r8}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r9}, 0x10) 845.938782ms ago: executing program 0 (id=2432): socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000"], 0x0, 0x2}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r2, r2, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) shutdown(r2, 0x1) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 628.464898ms ago: executing program 4 (id=2433): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x80, 0x0, 0x0, 0x542000, 0x90}, 0x9c) socket$packet(0x11, 0xa, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x400c0d5}, 0x0) bind$inet(r0, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x4004084, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000ac0)={'wg2\x00', 0x0}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x20000000000000d2, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty, 0x8}, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x19, 0x4, 0x4, 0x4a7, 0x4, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'dvmrp0\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x30}, 0x0, 0x238, 0x268, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@rt={{0x138}, {0xf, [0xd, 0x4], 0x0, 0x4, 0x6, [@empty, @private0, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @mcast2, @empty, @dev={0xfe, 0x80, '\x00', 0x2d}, @mcast2, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @loopback, @loopback, @mcast2], 0xa}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x200}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg(r8, &(0x7f0000000480)=[{{0x0, 0x30, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd8}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 0s ago: executing program 2 (id=2434): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = accept$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @remote, @rose, @rose, @netrom, @null, @null, @bcast]}, &(0x7f0000000080)=0x48) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x8f, @remote, 0xfffffff6}, 0x1c) getsockname$netrom(r1, &(0x7f0000000100)={{0x3, @bcast}, [@netrom, @null, @remote, @null, @rose, @netrom, @remote, @null]}, &(0x7f0000000180)=0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)={0xa8, 0x34, 0x100, 0x70bd25, 0x25dfdbfe, "", [@nested={0x97, 0x83, 0x0, 0x1, [@generic, @nested={0x4, 0x14f}, @typed={0x8, 0xb3, 0x0, 0x0, @u32=0xfff}, @generic="4df22d5090c00490375d8e4199893c83c2c5db69446d81b6c9a45446bab2304c19ead31ed74c3868b22086c1b6a13f9c6034a6389a00ef388deaed00f965f08f5494f533ab47f72cf505cf0bc8cf9502e99ee1a82399553c75db3e58998c84a0586d5c9012f3ccdfa42da57548b4e26579c90e8e600c10f95bb7847cc61bd5b46b3fec", @typed={0x4, 0x14d}]}]}, 0xa8}], 0x1, 0x0, 0x0, 0x24000041}, 0x80) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000400)={@remote, 0x3, 0x2, 0x2, 0x2, 0x8, 0x3}, 0x20) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000440)=@gcm_256={{0x304}, "fff21360703cdc48", "a249da3b1dac97e4b41543fe0ddb2849d2511ed0dd2413eb729ea9c8533540fa", "3f17c07a", "9af5534a0da68400"}, 0x38) r5 = socket(0x1d, 0x5, 0x7) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x8001, 0x1, 0x2, 0x83f7, 0x3ff}, &(0x7f0000000540)=0x98) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000580)={r6, 0x2a, "f2be9ee386b1bf7363af440b6e718d6e625ad7f4ae6bccd1d0df88b57c4faae6a10b789988fdab24161d"}, &(0x7f00000005c0)=0x32) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000600)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000640)={'gre0\x00', r7, 0x700, 0x80, 0x4, 0x3ff, {{0xe, 0x4, 0x2, 0x0, 0x38, 0x65, 0x0, 0x4, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @rand_addr=0x64010102, {[@end, @generic={0x83, 0x8, "603d98cad162"}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0x8a, [@empty, @multicast1, @rand_addr=0x64010100, @multicast1, @broadcast]}]}}}}}) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r9, 0x0, 0x12, &(0x7f0000000700)=""/207, &(0x7f0000000800)=0xcf) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x2a, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9f}, @ldst={0x3, 0x3, 0x1, 0x4, 0xa, 0x1, 0x4}, @map_fd={0x18, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @exit, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe4e}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000a00)='syzkaller\x00', 0x1, 0x44, &(0x7f0000000a40)=""/68, 0x40f00, 0x0, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b00)={0x1, 0xc, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[0x1, 0x1, 0x1], &(0x7f0000000b80), 0x10, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d00)={&(0x7f0000000840)='svc_alloc_arg_err\x00', r10, 0x0, 0x6}, 0x18) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000d40)={r8, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x10) socket$alg(0x26, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000d80)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000001100)={r6, 0xfffffff3}, &(0x7f0000001140)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000001180)={r11, @in={{0x2, 0x4e23, @broadcast}}, 0xfffffff8, 0xd72, 0x9, 0xffff, 0x10, 0x800, 0x4}, &(0x7f0000001240)=0x9c) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000001280)={{{@in=@multicast1, @in=@loopback}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, 0x0) kernel console output (not intermixed with test programs): ooth: hci4: command 0x0405 tx timeout [ 198.171895][ T8145] lo speed is unknown, defaulting to 1000 [ 199.290679][ T8229] netlink: 'syz.3.465': attribute type 1 has an invalid length. [ 199.303713][ T8230] netlink: 64 bytes leftover after parsing attributes in process `syz.2.466'. [ 199.332816][ T8229] netlink: 144 bytes leftover after parsing attributes in process `syz.3.465'. [ 199.376353][ T8229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.465'. [ 199.414013][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.467'. [ 199.644090][ T8236] netlink: 'syz.1.467': attribute type 10 has an invalid length. [ 199.674845][ T8236] netlink: 40 bytes leftover after parsing attributes in process `syz.1.467'. [ 199.717426][ T8248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'. [ 199.922737][ T8236] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 200.005199][ T8236] team0: Failed to send options change via netlink (err -105) [ 200.218202][ T8236] team0: Port device geneve0 added [ 200.957421][ T8260] netlink: 'syz.3.472': attribute type 303 has an invalid length. [ 201.002378][ T8260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.472'. [ 201.067294][ T7191] IPVS: starting estimator thread 0... [ 201.179591][ T8270] IPVS: using max 28 ests per chain, 67200 per kthread [ 201.552813][ T8261] lo speed is unknown, defaulting to 1000 [ 201.749168][ T8278] dummy0: left allmulticast mode [ 201.764403][ T8278] dummy0: left promiscuous mode [ 201.776817][ T8278] bridge0: port 3(dummy0) entered disabled state [ 201.800172][ T8275] netlink: 'syz.4.478': attribute type 10 has an invalid length. [ 201.830558][ T8278] bridge_slave_0: left allmulticast mode [ 201.860369][ T8278] bridge_slave_0: left promiscuous mode [ 201.884367][ T8278] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.893964][ T8283] netlink: 64 bytes leftover after parsing attributes in process `syz.2.479'. [ 201.907335][ T8278] bridge_slave_1: left allmulticast mode [ 201.913022][ T8278] bridge_slave_1: left promiscuous mode [ 201.922512][ T8278] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.931767][ T8286] netlink: 'syz.0.480': attribute type 1 has an invalid length. [ 201.949034][ T8278] bond0: (slave bond_slave_0): Releasing backup interface [ 201.960351][ T8278] bond0: (slave bond_slave_1): Releasing backup interface [ 201.973041][ T8278] team0: Port device team_slave_0 removed [ 201.981472][ T8278] team0: Port device team_slave_1 removed [ 202.045354][ T8289] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 202.136004][ T8286] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.144295][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 202.277887][ T1166] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 202.288790][ T8289] veth7: entered promiscuous mode [ 202.313282][ T8289] bond1: (slave veth7): Enslaving as a backup interface with a down link [ 202.345519][ T8294] bond1: (slave ip6gretap1): Removing an active aggregator [ 202.359770][ T8294] bond1: (slave ip6gretap1): Releasing backup interface [ 202.370348][ T8294] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 1e:37:ea:36:75:ad - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 202.420124][ T8294] bond1: (slave veth7): Releasing backup interface [ 202.638751][ T8317] netlink: 404 bytes leftover after parsing attributes in process `syz.0.486'. [ 202.702026][ T5955] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 202.709886][ T5955] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 202.827308][ T8307] macsec2: entered promiscuous mode [ 202.849826][ T8307] macsec2: entered allmulticast mode [ 202.871552][ T5955] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 204.511128][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.490'. [ 204.654695][ T8357] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.492'. [ 204.805576][ T8359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.893085][ T8359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.996031][ T8367] netlink: 172 bytes leftover after parsing attributes in process `syz.2.496'. [ 205.023413][ T8359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.481536][ T8350] lo speed is unknown, defaulting to 1000 [ 205.818448][ T8376] xt_bpf: check failed: parse error [ 205.928870][ T8376] netlink: 'syz.3.498': attribute type 8 has an invalid length. [ 205.971968][ T8384] netlink: 'syz.4.500': attribute type 1 has an invalid length. [ 206.086724][ T8387] batadv0: entered promiscuous mode [ 206.116501][ T8387] vlan2: entered promiscuous mode [ 206.216453][ T8399] netlink: 76 bytes leftover after parsing attributes in process `syz.0.503'. [ 206.244213][ T8388] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 206.291911][ T6089] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 206.292352][ T8392] 8021q: adding VLAN 0 to HW filter on device bond1 [ 206.342751][ T8397] veth5: entered promiscuous mode [ 206.371749][ T8397] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 206.418443][ T6096] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 206.526604][ T8384] bond1: (slave ip6gretap1): Removing an active aggregator [ 206.555002][ T8384] bond1: (slave ip6gretap1): Releasing backup interface [ 206.591790][ T8384] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 8a:c9:98:bf:87:45 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 206.625344][ T8410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.505'. [ 206.687010][ T8384] bond1: (slave veth5): Releasing backup interface [ 206.985428][ T8414] xt_hashlimit: size too large, truncated to 1048576 [ 207.005601][ T8414] xt_hashlimit: overflow, try lower: 3/0 [ 207.078164][ T8414] Unsupported ieee802154 address type: 0 [ 207.105363][ T8417] !: renamed from dummy0 (while UP) [ 207.145047][ T8417] netlink: 'syz.4.507': attribute type 5 has an invalid length. [ 207.318197][ T8420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.508'. [ 207.336756][ T8420] netlink: 3 bytes leftover after parsing attributes in process `syz.3.508'. [ 207.362862][ T8420] batadv1: entered promiscuous mode [ 207.387140][ T8420] batadv1: entered allmulticast mode [ 207.490263][ T8390] lo speed is unknown, defaulting to 1000 [ 207.531791][ T8424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.509'. [ 208.052318][ T8434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.511'. [ 208.063615][ T8434] xt_TCPMSS: Only works on TCP SYN packets [ 208.363438][ T8440] netlink: 'syz.4.513': attribute type 10 has an invalid length. [ 208.378401][ T8440] openvswitch: netlink: Flow key attr not present in new flow. [ 208.751730][ T8447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.759702][ T8447] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 208.918039][ T8431] lo speed is unknown, defaulting to 1000 [ 208.925093][ T8408] lo speed is unknown, defaulting to 1000 [ 208.953842][ T8412] lo speed is unknown, defaulting to 1000 [ 209.089887][ T8393] lo speed is unknown, defaulting to 1000 [ 209.152072][ T8399] lo speed is unknown, defaulting to 1000 [ 209.798406][ T8449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.515'. [ 209.951504][ T8451] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 210.515401][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.516'. [ 210.767581][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.517'. [ 211.152095][ T8467] SET target dimension over the limit! [ 211.328310][ T8477] netlink: 'syz.0.522': attribute type 1 has an invalid length. [ 211.385530][ T8471] netlink: 'syz.2.521': attribute type 13 has an invalid length. [ 211.394203][ T8471] netlink: 'syz.2.521': attribute type 17 has an invalid length. [ 211.513728][ T8471] eql: refused to change device tx_queue_len [ 211.520135][ T8471] A link change request failed with some changes committed already. Interface eql may have been left with an inconsistent configuration, please check. [ 211.576327][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 211.576504][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 211.586908][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 211.621016][ T8484] 8021q: adding VLAN 0 to HW filter on device bond2 [ 211.762799][ T8477] veth9: entered promiscuous mode [ 211.796262][ T8477] bond2: (slave veth9): Enslaving as a backup interface with a down link [ 211.918699][ T8488] team0: Port device geneve0 removed [ 211.990785][ T8480] bond2: (slave veth9): Releasing backup interface [ 212.136461][ T5913] lo speed is unknown, defaulting to 1000 [ 212.257874][ T8500] netlink: 24 bytes leftover after parsing attributes in process `syz.4.524'. [ 212.351059][ T8505] netlink: 'syz.1.525': attribute type 27 has an invalid length. [ 212.406485][ T8476] lo speed is unknown, defaulting to 1000 [ 213.283215][ T8461] lo speed is unknown, defaulting to 1000 [ 214.736423][ T8534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.530'. [ 215.026843][ T8546] netlink: 'syz.4.532': attribute type 4 has an invalid length. [ 215.130012][ T8547] can: request_module (can-proto-3) failed. [ 215.280957][ T8552] SET target dimension over the limit! [ 215.859486][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'. [ 216.297938][ T8587] netlink: 24 bytes leftover after parsing attributes in process `syz.2.538'. [ 216.449785][ T8561] veth0_to_bond: left allmulticast mode [ 216.473349][ T8561] veth5: left promiscuous mode [ 216.936311][ T5154] Bluetooth: hci4: command 0x0405 tx timeout [ 217.289836][ T8617] netlink: 'syz.0.545': attribute type 10 has an invalid length. [ 217.301166][ T8617] netlink: 40 bytes leftover after parsing attributes in process `syz.0.545'. [ 217.317066][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.543'. [ 217.428384][ T8617] A link change request failed with some changes committed already. Interface nr29 may have been left with an inconsistent configuration, please check. [ 217.824599][ T8621] lo speed is unknown, defaulting to 1000 [ 217.968798][ T8644] netlink: 64 bytes leftover after parsing attributes in process `syz.0.548'. [ 218.169151][ T8648] netlink: 'syz.1.549': attribute type 1 has an invalid length. [ 218.333215][ T8654] netlink: 'syz.1.549': attribute type 1 has an invalid length. [ 218.560767][ T8659] netlink: 64 bytes leftover after parsing attributes in process `syz.2.550'. [ 219.048187][ T8669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.552'. [ 219.597801][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.556'. [ 220.151445][ T8693] IPVS: nq: UDP 224.0.0.2:20004 - no destination available [ 220.209395][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.559'. [ 220.456665][ T8707] xt_CT: No such helper "snmp" [ 220.998280][ T8721] netlink: 64 bytes leftover after parsing attributes in process `syz.4.564'. [ 221.018096][ T8722] netlink: 24 bytes leftover after parsing attributes in process `syz.3.563'. [ 221.404422][ T8733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.493639][ T8733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.568990][ T8733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.983568][ T8722] lo speed is unknown, defaulting to 1000 [ 222.577077][ T8736] syz.1.565: vmalloc error: size 268435456, failed to allocated page array size 524288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 222.676330][ T8736] CPU: 1 UID: 0 PID: 8736 Comm: syz.1.565 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 222.676359][ T8736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 222.676372][ T8736] Call Trace: [ 222.676381][ T8736] [ 222.676390][ T8736] dump_stack_lvl+0x189/0x250 [ 222.676440][ T8736] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 222.676469][ T8736] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.676500][ T8736] ? __pfx__printk+0x10/0x10 [ 222.676522][ T8736] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 222.676544][ T8736] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 222.676574][ T8736] warn_alloc+0x214/0x310 [ 222.676604][ T8736] ? __pfx_warn_alloc+0x10/0x10 [ 222.676638][ T8736] ? __get_vm_area_node+0x28f/0x300 [ 222.676660][ T8736] ? __do_replace+0xb4/0xaa0 [ 222.676682][ T8736] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 222.676712][ T8736] ? stack_depot_save_flags+0x40/0x900 [ 222.676762][ T8736] ? translate_table+0x1b4d/0x1f90 [ 222.676796][ T8736] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 222.676826][ T8736] ? __do_replace+0xb4/0xaa0 [ 222.676844][ T8736] vzalloc_noprof+0xb2/0xf0 [ 222.676865][ T8736] ? __do_replace+0xb4/0xaa0 [ 222.676885][ T8736] __do_replace+0xb4/0xaa0 [ 222.676905][ T8736] ? __pfx_translate_table+0x10/0x10 [ 222.676942][ T8736] ? __pfx___do_replace+0x10/0x10 [ 222.676970][ T8736] ? _copy_from_user+0x94/0xb0 [ 222.676995][ T8736] do_arpt_set_ctl+0xa2a/0xf10 [ 222.677031][ T8736] ? __mutex_trylock_common+0x153/0x260 [ 222.677055][ T8736] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 222.677089][ T8736] ? rcu_is_watching+0x15/0xb0 [ 222.677137][ T8736] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 222.677162][ T8736] ? __pfx___mutex_lock+0x10/0x10 [ 222.677202][ T8736] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 222.677222][ T8736] ? aa_sk_perm+0x81e/0x950 [ 222.677252][ T8736] ? __pfx_aa_sk_perm+0x10/0x10 [ 222.677285][ T8736] nf_setsockopt+0x26f/0x290 [ 222.677316][ T8736] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 222.677345][ T8736] do_sock_setsockopt+0x25a/0x3e0 [ 222.677379][ T8736] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 222.677416][ T8736] ? __fget_files+0x2a/0x420 [ 222.677449][ T8736] __x64_sys_setsockopt+0x18b/0x220 [ 222.677486][ T8736] do_syscall_64+0xfa/0x3b0 [ 222.677507][ T8736] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.677526][ T8736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.677546][ T8736] ? clear_bhb_loop+0x60/0xb0 [ 222.677571][ T8736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.677591][ T8736] RIP: 0033:0x7fd12d98e929 [ 222.677618][ T8736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.677635][ T8736] RSP: 002b:00007fd12e806038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 222.677657][ T8736] RAX: ffffffffffffffda RBX: 00007fd12dbb6240 RCX: 00007fd12d98e929 [ 222.677672][ T8736] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 222.677684][ T8736] RBP: 00007fd12da10b39 R08: 0000000000000068 R09: 0000000000000000 [ 222.677706][ T8736] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 222.677718][ T8736] R13: 0000000000000000 R14: 00007fd12dbb6240 R15: 00007ffe91f88738 [ 222.677751][ T8736] [ 222.677759][ T8736] Mem-Info: [ 222.779669][ T8749] netlink: 56 bytes leftover after parsing attributes in process `syz.2.569'. [ 222.822753][ T8736] active_anon:16422 inactive_anon:0 isolated_anon:0 [ 222.822753][ T8736] active_file:1362 inactive_file:39906 isolated_file:0 [ 222.822753][ T8736] unevictable:768 dirty:420 writeback:0 [ 222.822753][ T8736] slab_reclaimable:11129 slab_unreclaimable:143111 [ 222.822753][ T8736] mapped:37452 shmem:7106 pagetables:1228 [ 222.822753][ T8736] sec_pagetables:0 bounce:0 [ 222.822753][ T8736] kernel_misc_reclaimable:0 [ 222.822753][ T8736] free:1255882 free_pcp:14857 free_cma:0 [ 223.063906][ T8736] Node 0 active_anon:65784kB inactive_anon:0kB active_file:5448kB inactive_file:159420kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:149832kB dirty:1752kB writeback:0kB shmem:26920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13160kB pagetables:4796kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 223.116343][ T8736] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 223.205667][ T8736] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 223.283164][ T8736] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 223.299499][ T8736] Node 0 DMA32 free:1092652kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:65740kB inactive_anon:0kB active_file:5448kB inactive_file:157588kB unevictable:1536kB writepending:1752kB present:3129332kB managed:2561008kB mlocked:0kB bounce:0kB free_pcp:39364kB local_pcp:17672kB free_cma:0kB [ 223.347123][ T8736] lowmem_reserve[]: 0 0 1 1 1 [ 223.351896][ T8736] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 223.383288][ T8736] lowmem_reserve[]: 0 0 0 0 0 [ 223.396816][ T8736] Node 1 Normal free:3908636kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:14240kB local_pcp:5472kB free_cma:0kB [ 223.432556][ T8736] lowmem_reserve[]: 0 0 0 0 0 [ 223.438997][ T8736] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 223.452208][ T8736] Node 0 DMA32: 1*4kB (E) 9*8kB (UE) 2*16kB (ME) 134*32kB (U) 442*64kB (UME) 56*128kB (UE) 14*256kB (UM) 13*512kB (UM) 4*1024kB (U) 7*2048kB (UME) 248*4096kB (UM) = 1084332kB [ 223.477327][ T8736] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 223.492733][ T8736] Node 1 Normal: 181*4kB (UE) 53*8kB (UME) 40*16kB (UME) 137*32kB (UME) 40*64kB (UME) 8*128kB (UME) 2*256kB (M) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 950*4096kB (M) = 3908636kB [ 223.517026][ T8736] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 223.574707][ T8736] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 223.585013][ T8736] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 223.595138][ T8736] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 223.605029][ T8736] 48378 total pagecache pages [ 223.610031][ T8736] 0 pages in swap cache [ 223.614208][ T8736] Free swap = 124996kB [ 223.619861][ T8736] Total swap = 124996kB [ 223.647243][ T8736] 2097051 pages RAM [ 223.651348][ T8736] 0 pages HighMem/MovableOnly [ 223.667384][ T8736] 424693 pages reserved [ 223.671749][ T8736] 0 pages cma reserved [ 223.769232][ T8729] lo speed is unknown, defaulting to 1000 [ 223.809148][ T8732] lo speed is unknown, defaulting to 1000 [ 225.183151][ T8780] lo speed is unknown, defaulting to 1000 [ 225.638167][ T8783] lo speed is unknown, defaulting to 1000 [ 225.651621][ T8785] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 225.703258][ T8794] netlink: 404 bytes leftover after parsing attributes in process `syz.1.582'. [ 225.907914][ T8799] Cannot find add_set index 4 as target [ 226.163727][ T8806] netlink: 20 bytes leftover after parsing attributes in process `syz.2.584'. [ 226.312852][ T8813] netlink: 'syz.4.585': attribute type 4 has an invalid length. [ 228.095905][ T8846] netlink: 28 bytes leftover after parsing attributes in process `syz.4.592'. [ 228.224497][ T8825] lo speed is unknown, defaulting to 1000 [ 228.234894][ T8841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.601'. [ 228.829617][ T8839] lo speed is unknown, defaulting to 1000 [ 229.037337][ T8860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.595'. [ 229.441040][ T8871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.597'. [ 229.679778][ T8874] tipc: New replicast peer: 255.255.255.255 [ 229.696314][ T8874] tipc: Enabled bearer , priority 10 [ 230.243443][ T8889] tipc: Can't bind to reserved service type 2 [ 230.375353][ T8897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.464802][ T8897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.569679][ T8901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.816764][ T8908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 231.163755][ T8882] lo speed is unknown, defaulting to 1000 [ 231.319683][ T8917] netlink: 48 bytes leftover after parsing attributes in process `syz.3.608'. [ 231.585471][ T8882] netlink: 28 bytes leftover after parsing attributes in process `syz.0.602'. [ 231.776142][ T8886] lo speed is unknown, defaulting to 1000 [ 232.330430][ T8940] netlink: 404 bytes leftover after parsing attributes in process `syz.4.611'. [ 232.493876][ T8915] lo speed is unknown, defaulting to 1000 [ 232.517130][ T8896] lo speed is unknown, defaulting to 1000 [ 233.316661][ T8956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.612'. [ 233.961927][ T8971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.617'. [ 233.982040][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.617'. [ 234.047140][ T8950] lo speed is unknown, defaulting to 1000 [ 234.074921][ T8974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.618'. [ 234.347702][ T8978] netlink: 'syz.2.619': attribute type 1 has an invalid length. [ 234.384769][ T8978] netlink: 224 bytes leftover after parsing attributes in process `syz.2.619'. [ 234.434012][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.619'. [ 236.283020][ T9014] netlink: 'syz.1.628': attribute type 10 has an invalid length. [ 236.351692][ T9014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.397488][ T9014] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 236.502980][ T5955] syz1: Port: 1 Link ACTIVE [ 236.611559][ T9018] __nla_validate_parse: 2 callbacks suppressed [ 236.611578][ T9018] netlink: 56 bytes leftover after parsing attributes in process `syz.3.629'. [ 237.052841][ T9025] gretap0: left promiscuous mode [ 237.115381][ T9025] bridge0: port 4(erspan0) entered disabled state [ 237.428795][ T9025] bridge0: port 5(syz_tun) entered disabled state [ 237.563646][ T9025] veth0_to_bond: left allmulticast mode [ 237.575332][ T9025] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 237.635136][ T9025] macsec2: left promiscuous mode [ 237.653575][ T9025] macsec2: left allmulticast mode [ 237.674628][ T9017] lo speed is unknown, defaulting to 1000 [ 237.684727][ T9022] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 238.096879][ T9042] netlink: 'syz.3.637': attribute type 1 has an invalid length. [ 238.138475][ T9042] netlink: 208 bytes leftover after parsing attributes in process `syz.3.637'. [ 238.340976][ T9048] netlink: 'syz.2.638': attribute type 303 has an invalid length. [ 238.416670][ T9049] trusted_key: syz.2.638 sent an empty control message without MSG_MORE. [ 238.613793][ T30] audit: type=1800 audit(1750833420.845:4): pid=9054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.640" name="memory.events" dev="tmpfs" ino=793 res=0 errno=0 [ 238.669191][ T30] audit: type=1804 audit(1750833420.895:5): pid=9054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.640" name="memory.events" dev="tmpfs" ino=793 res=1 errno=0 [ 238.739399][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.640'. [ 238.756425][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.640'. [ 239.020060][ T9065] bridge0: port 1(syz_tun) entered blocking state [ 239.026831][ T9065] bridge0: port 1(syz_tun) entered disabled state [ 239.055733][ T9065] syz_tun: entered allmulticast mode [ 239.099132][ T9065] syz_tun: entered promiscuous mode [ 239.127134][ T9065] bridge0: port 1(syz_tun) entered blocking state [ 239.133747][ T9065] bridge0: port 1(syz_tun) entered forwarding state [ 239.185826][ T9071] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 239.474480][ T9076] netlink: 36 bytes leftover after parsing attributes in process `syz.3.645'. [ 239.521207][ T9076] netlink: 16 bytes leftover after parsing attributes in process `syz.3.645'. [ 239.552008][ T9076] netlink: 36 bytes leftover after parsing attributes in process `syz.3.645'. [ 239.594432][ T9076] netlink: 36 bytes leftover after parsing attributes in process `syz.3.645'. [ 239.784533][ T9083] 8021q: adding VLAN 0 to HW filter on device bond2 [ 239.934893][ T9083] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 240.125731][ T9092] bridge0: entered promiscuous mode [ 240.133668][ T9092] bridge0: entered allmulticast mode [ 240.162830][ T9092] team0: Port device bridge0 added [ 240.169758][ T9073] lo speed is unknown, defaulting to 1000 [ 240.181349][ T9093] rdma_rxe: rxe_newlink: failed to add macvlan1 [ 240.346804][ T9098] bond2: (slave gretap1): Releasing backup interface [ 240.421251][ T9099] netlink: 'syz.2.653': attribute type 12 has an invalid length. [ 240.429887][ T9099] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.653'. [ 240.533203][ T9101] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 240.813262][ T9104] netlink: 'syz.0.654': attribute type 303 has an invalid length. [ 240.855814][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.654'. [ 240.934608][ T9109] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 241.459921][ T9124] Bluetooth: MGMT ver 1.23 [ 241.522172][ T9127] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 241.726433][ T9130] __nla_validate_parse: 5 callbacks suppressed [ 241.726453][ T9130] netlink: 20 bytes leftover after parsing attributes in process `syz.2.662'. [ 241.940671][ T9127] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 242.035344][ T9111] lo speed is unknown, defaulting to 1000 [ 242.535997][ T9150] veth0_to_bond: entered allmulticast mode [ 243.019261][ T9157] openvswitch: netlink: Message has 20 unknown bytes. [ 243.027333][ T9157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.160604][ T9139] lo speed is unknown, defaulting to 1000 [ 243.173213][ T9153] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 243.468674][ T9166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.669'. [ 244.791942][ T9163] lo speed is unknown, defaulting to 1000 [ 245.471345][ T9188] IPVS: set_ctl: invalid protocol: 115 100.1.1.0:19999 [ 245.540343][ T9188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.674'. [ 245.573631][ T9190] netlink: 'syz.0.675': attribute type 1 has an invalid length. [ 245.673659][ T9194] xt_TPROXY: Can be used only with -p tcp or -p udp [ 245.755383][ T9190] bond3 (unregistering): Released all slaves [ 245.918166][ T9193] vlan2: entered promiscuous mode [ 245.936898][ T9193] bridge0: entered promiscuous mode [ 245.956669][ T9193] vlan2: entered allmulticast mode [ 245.973621][ T9193] bridge0: entered allmulticast mode [ 246.000883][ T9178] lo speed is unknown, defaulting to 1000 [ 246.622778][ T9201] netlink: 20 bytes leftover after parsing attributes in process `syz.3.676'. [ 246.644056][ T9212] syz0: rxe_newlink: already configured on batadv_slave_1 [ 246.848073][ T9210] veth0_to_bond: entered allmulticast mode [ 246.968071][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.681'. [ 248.873302][ T9271] netlink: 'syz.2.693': attribute type 142 has an invalid length. [ 249.181438][ T9282] netlink: 'syz.2.696': attribute type 12 has an invalid length. [ 249.195722][ T9282] netlink: 132 bytes leftover after parsing attributes in process `syz.2.696'. [ 249.212340][ T9285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.695'. [ 249.656122][ T9296] geneve0: entered allmulticast mode [ 249.758778][ T9296] vxcan5: entered allmulticast mode [ 249.888253][ T9252] lo speed is unknown, defaulting to 1000 [ 249.918997][ T9263] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 250.102700][ T9302] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 251.459346][ T9306] lo speed is unknown, defaulting to 1000 [ 252.462146][ T9325] tipc: Resetting bearer [ 252.737973][ T9325] veth0_to_bond: left allmulticast mode [ 253.234245][ T5842] lo speed is unknown, defaulting to 1000 [ 253.240294][ T5842] syz2: Port: 1 Link DOWN [ 253.266338][ T9308] lo speed is unknown, defaulting to 1000 [ 253.300110][ T6096] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.317168][ T6096] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.471862][ T6096] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.517129][ T6096] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.927638][ T9334] netlink: 248 bytes leftover after parsing attributes in process `syz.1.705'. [ 254.171084][ T9333] lo speed is unknown, defaulting to 1000 [ 254.436506][ T9319] lo speed is unknown, defaulting to 1000 [ 255.599492][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.678045][ T9361] IPVS: set_ctl: invalid protocol: 58 172.30.0.3:20003 [ 256.041084][ T9368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.711'. [ 256.378052][ T9383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'. [ 256.432922][ T9385] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 256.590138][ T9381] syz_tun: left allmulticast mode [ 256.616389][ T9381] syz_tun: left promiscuous mode [ 256.662386][ T9381] bridge0: port 1(syz_tun) entered disabled state [ 257.382580][ T9394] netlink: 56 bytes leftover after parsing attributes in process `syz.4.716'. [ 257.563106][ T9390] lo speed is unknown, defaulting to 1000 [ 258.618686][ T9400] lo speed is unknown, defaulting to 1000 [ 258.637394][ T9415] lo speed is unknown, defaulting to 1000 [ 259.626882][ T9435] syzkaller0: create flow: hash 3368388949 index 1 [ 260.131706][ T6096] syzkaller0: tun_net_xmit 76 [ 260.276072][ T9330] syzkaller0: tun_net_xmit 76 [ 260.281518][ T6096] syzkaller0: tun_net_xmit 48 [ 260.294200][ T9427] syzkaller0: delete flow: hash 3368388949 index 1 [ 260.966064][ T9458] netlink: 24 bytes leftover after parsing attributes in process `syz.0.725'. [ 261.098933][ T9459] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 261.211309][ T9461] netlink: 'syz.0.725': attribute type 4 has an invalid length. [ 262.485989][ T9466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.727'. [ 262.528068][ T9467] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:0 [ 262.650417][ T9475] nbd: socks must be embedded in a SOCK_ITEM attr [ 262.667959][ T9475] block nbd0: shutting down sockets [ 262.772861][ T9469] veth0_to_bond: entered allmulticast mode [ 262.908117][ T9467] erspan0: left allmulticast mode [ 262.913285][ T9467] erspan0: left promiscuous mode [ 262.929240][ T9467] bridge0: port 4(erspan0) entered disabled state [ 262.977356][ T9467] syz_tun: left allmulticast mode [ 262.987524][ T9467] syz_tun: left promiscuous mode [ 262.996006][ T9467] bridge0: port 5(syz_tun) entered disabled state [ 263.013656][ T9467] team0: left allmulticast mode [ 263.022423][ T9467] team_slave_0: left allmulticast mode [ 263.029037][ T9467] team_slave_1: left allmulticast mode [ 263.034726][ T9467] team0: left promiscuous mode [ 263.040294][ T9467] team_slave_0: left promiscuous mode [ 263.048551][ T9487] x_tables: duplicate underflow at hook 3 [ 263.049109][ T9467] team_slave_1: left promiscuous mode [ 263.061188][ T9467] bridge0: port 3(team0) entered disabled state [ 263.077957][ T9467] bridge_slave_0: left allmulticast mode [ 263.083803][ T9467] bridge_slave_0: left promiscuous mode [ 263.090220][ T9467] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.100722][ T9467] bridge_slave_1: left allmulticast mode [ 263.106888][ T9467] bridge_slave_1: left promiscuous mode [ 263.112836][ T9467] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.134167][ T9467] bond0: (slave bond_slave_0): Releasing backup interface [ 263.145331][ T9467] bond0: (slave bond_slave_1): Releasing backup interface [ 263.162181][ T9467] team0: Port device team_slave_0 removed [ 263.172464][ T9467] team0: Port device team_slave_1 removed [ 263.179518][ T9467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.188327][ T9467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.212829][ T9491] netlink: 44 bytes leftover after parsing attributes in process `syz.1.732'. [ 263.224528][ T9467] batman_adv: batadv0: Removing interface: virt_wifi0 [ 263.226477][ T9491] netlink: 43 bytes leftover after parsing attributes in process `syz.1.732'. [ 263.256374][ T9491] netlink: 'syz.1.732': attribute type 6 has an invalid length. [ 263.264532][ T9473] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 263.277756][ T9491] netlink: 'syz.1.732': attribute type 5 has an invalid length. [ 263.285412][ T9491] netlink: 43 bytes leftover after parsing attributes in process `syz.1.732'. [ 263.294926][ T9473] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 263.382332][ T9493] netlink: 'syz.1.732': attribute type 16 has an invalid length. [ 263.390390][ T9493] netlink: 'syz.1.732': attribute type 17 has an invalid length. [ 263.623041][ T9487] ip6gre1: entered promiscuous mode [ 263.680951][ T9493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.692646][ T9493] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.705349][ T9493] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 263.766261][ T9330] lo speed is unknown, defaulting to 1000 [ 263.772043][ T9330] syz2: Port: 1 Link ACTIVE [ 263.836059][ T9501] veth0_to_bond: left allmulticast mode [ 263.894045][ T9501] geneve2: left promiscuous mode [ 263.913193][ T9501] geneve2: left allmulticast mode [ 263.923609][ T9501] veth7: left promiscuous mode [ 263.939779][ T9501] veth9: left promiscuous mode [ 263.981591][ T9501] bridge0: left promiscuous mode [ 264.003515][ T9501] bridge0: left allmulticast mode [ 264.052695][ T9505] bond0: entered promiscuous mode [ 264.054016][ T9511] netlink: 'syz.1.738': attribute type 1 has an invalid length. [ 264.070286][ T9505] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 264.105225][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.738'. [ 264.120212][ T9505] bond0: left promiscuous mode [ 264.234277][ T9511] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 264.277297][ T9511] netlink: 28 bytes leftover after parsing attributes in process `syz.1.738'. [ 264.534095][ T9523] block nbd2: not configured, cannot reconfigure [ 264.550375][ T9527] veth0: entered promiscuous mode [ 264.566273][ T9523] netlink: 64 bytes leftover after parsing attributes in process `syz.2.740'. [ 264.592742][ T9523] netlink: 64 bytes leftover after parsing attributes in process `syz.2.740'. [ 264.794448][ T9539] netlink: 20 bytes leftover after parsing attributes in process `syz.2.745'. [ 264.908617][ T30] audit: type=1804 audit(1750833447.135:6): pid=9541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.743" name="/newroot/130/memory.events" dev="tmpfs" ino=704 res=1 errno=0 [ 264.966019][ T30] audit: type=1800 audit(1750833447.135:7): pid=9541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.743" name="memory.events" dev="tmpfs" ino=704 res=0 errno=0 [ 265.379923][ T9520] veth0: left promiscuous mode [ 265.500357][ T9522] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 265.751284][ T9553] 8021q: VLANs not supported on ipvlan1 [ 265.799430][ T9556] x_tables: duplicate underflow at hook 3 [ 265.857810][ T9556] ip6gre1: entered promiscuous mode [ 266.007158][ T9563] netlink: 'syz.4.749': attribute type 2 has an invalid length. [ 266.126132][ T9563] : entered promiscuous mode [ 266.419695][ T9572] __nla_validate_parse: 3 callbacks suppressed [ 266.419715][ T9572] netlink: 100 bytes leftover after parsing attributes in process `syz.3.752'. [ 266.792923][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.751'. [ 267.399250][ T9568] veth0_to_bond: left allmulticast mode [ 267.410435][ T5154] Bluetooth: hci4: link tx timeout [ 267.420311][ T5154] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 267.458928][ T9568] hsr1: left promiscuous mode [ 267.471235][ T30] audit: type=1800 audit(1750833449.705:8): pid=9573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.751" name="cgroup.controllers" dev="tmpfs" ino=965 res=0 errno=0 [ 267.561360][ T9568] batadv1: left promiscuous mode [ 267.596575][ T9568] batadv1: left allmulticast mode [ 267.603386][ T9568] ip6gre1: left promiscuous mode [ 267.902169][ T9587] netlink: 56 bytes leftover after parsing attributes in process `syz.0.755'. [ 268.033264][ T9591] netlink: 20 bytes leftover after parsing attributes in process `syz.2.756'. [ 268.430606][ T9603] netlink: 'syz.4.759': attribute type 11 has an invalid length. [ 268.466688][ T9603] netlink: 228 bytes leftover after parsing attributes in process `syz.4.759'. [ 268.491031][ T9603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.759'. [ 268.871568][ T9615] pim6reg1: entered promiscuous mode [ 268.883156][ T9615] pim6reg1: entered allmulticast mode [ 268.942905][ T9610] netlink: 'syz.1.761': attribute type 12 has an invalid length. [ 269.169470][ T9615] netlink: 32 bytes leftover after parsing attributes in process `syz.0.763'. [ 269.210693][ T9620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.764'. [ 269.286894][ T9618] 8021q: adding VLAN 0 to HW filter on device bond4 [ 269.305967][ T9618] team0: Port device bond4 added [ 269.496345][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 269.538962][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.549243][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.565647][ T9632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.889762][ T9643] netlink: 20 bytes leftover after parsing attributes in process `syz.4.768'. [ 269.990161][ T9647] netlink: 'syz.1.769': attribute type 1 has an invalid length. [ 270.013340][ T9646] bridge2: entered promiscuous mode [ 270.030116][ T9646] bridge2: entered allmulticast mode [ 270.061465][ T9646] team0: Port device bridge2 added [ 270.102264][ T9653] netlink: 3 bytes leftover after parsing attributes in process `syz.1.769'. [ 270.152203][ T9647] bond1: entered promiscuous mode [ 270.158676][ T9647] 8021q: adding VLAN 0 to HW filter on device bond1 [ 270.174106][ T9653] batadv2: entered promiscuous mode [ 270.342475][ T9653] batadv2: entered allmulticast mode [ 270.404243][ T9653] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 270.479903][ T9653] bond1: (slave batadv2): making interface the new active one [ 270.517699][ T9653] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 270.596756][ T9627] lo speed is unknown, defaulting to 1000 [ 270.623390][ T9648] rdma_rxe: rxe_newlink: failed to add macvlan1 [ 270.839225][ T9667] ip6gre1: left promiscuous mode [ 270.900160][ T9675] batadv_slave_1: entered promiscuous mode [ 270.972840][ T9679] netlink: 'syz.1.775': attribute type 10 has an invalid length. [ 271.027008][ T9679] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 272.883340][ T9721] __nla_validate_parse: 3 callbacks suppressed [ 272.883358][ T9721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.781'. [ 272.946655][ T9722] ipt_ECN: cannot use operation on non-tcp rule [ 273.302579][ T9703] lo speed is unknown, defaulting to 1000 [ 273.475917][ T9732] tipc: Enabled bearer , priority 10 [ 273.719559][ T9738] netlink: 20 bytes leftover after parsing attributes in process `syz.2.785'. [ 274.303371][ T9745] netlink: 28 bytes leftover after parsing attributes in process `syz.3.786'. [ 274.395444][ T9745] netlink: 24 bytes leftover after parsing attributes in process `syz.3.786'. [ 274.500016][ T9751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.787'. [ 274.555294][ T9747] netlink: 24 bytes leftover after parsing attributes in process `syz.1.787'. [ 274.651203][ T9745] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 274.651533][ T9748] netlink: 'syz.3.786': attribute type 4 has an invalid length. [ 274.718458][ T9745] netlink: 'syz.3.786': attribute type 4 has an invalid length. [ 275.065121][ T9765] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 275.099667][ T9765] netlink: 'syz.1.789': attribute type 4 has an invalid length. [ 275.825073][ T9765] tipc: Resetting bearer [ 275.995710][ T7193] lo speed is unknown, defaulting to 1000 [ 276.006331][ T7193] syz2: Port: 1 Link DOWN [ 276.059554][ T9741] lo speed is unknown, defaulting to 1000 [ 276.065599][ T9776] veth0_to_bond: entered allmulticast mode [ 276.195935][ T9781] veth0_to_bond: left allmulticast mode [ 276.215171][ T9782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.792'. [ 276.394536][ T9787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.795'. [ 276.722410][ T9787] team0 (unregistering): Port device bridge0 removed [ 276.731239][ T9787] team0 (unregistering): Port device bond4 removed [ 277.184301][ T9805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.799'. [ 277.219060][ T9805] tipc: Started in network mode [ 277.223961][ T9805] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 277.275055][ T9805] tipc: Enabling of bearer rejected, failed to enable media [ 277.290468][ T9809] batadv_slave_1: entered promiscuous mode [ 277.310111][ T9808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.801'. [ 277.523088][ T9812] bridge3: entered promiscuous mode [ 277.536630][ T9812] bridge3: entered allmulticast mode [ 277.567785][ T9812] team0: Port device bridge3 added [ 278.547850][ T9840] __nla_validate_parse: 1 callbacks suppressed [ 278.547872][ T9840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.807'. [ 278.705072][ T9842] veth0_to_bond: left allmulticast mode [ 278.723718][ T9842] batadv_slave_1: left promiscuous mode [ 278.840874][ T9842] bridge2: left promiscuous mode [ 278.870848][ T9842] bridge2: left allmulticast mode [ 278.928720][ T9815] lo speed is unknown, defaulting to 1000 [ 280.021565][ T9826] lo speed is unknown, defaulting to 1000 [ 280.042067][ T9859] netlink: 'syz.1.812': attribute type 1 has an invalid length. [ 280.152960][ T9862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.812'. [ 280.681381][ T9867] batman_adv: batadv0: Adding interface: macvlan2 [ 280.767326][ T9867] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.879261][ T9877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.814'. [ 280.922041][ T9867] batman_adv: batadv0: Interface activated: macvlan2 [ 280.966716][ T9881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.816'. [ 281.253970][ T9881] bridge0: entered promiscuous mode [ 281.259731][ T9881] bridge0: entered allmulticast mode [ 281.291964][ T9881] team0: Port device bridge0 added [ 281.611017][ T9861] lo speed is unknown, defaulting to 1000 [ 282.081047][ T9904] netlink: 52 bytes leftover after parsing attributes in process `syz.4.823'. [ 282.090973][ T9900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.113223][ T9900] netlink: 'syz.2.822': attribute type 13 has an invalid length. [ 282.169238][ T9900] netlink: 'syz.2.822': attribute type 17 has an invalid length. [ 282.270489][ T9910] xt_CT: You must specify a L4 protocol and not use inversions on it [ 282.285884][ T9900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.304789][ T9900] eql: remember to turn off Van-Jacobson compression on your slave devices [ 282.419405][ T9900] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 282.450600][ T9905] netlink: 24 bytes leftover after parsing attributes in process `syz.4.823'. [ 282.465500][ T9905] netlink: 24 bytes leftover after parsing attributes in process `syz.4.823'. [ 282.475932][ T9905] netlink: 'syz.4.823': attribute type 3 has an invalid length. [ 282.836961][ T9920] netlink: 'syz.1.825': attribute type 1 has an invalid length. [ 282.844661][ T9920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.825'. [ 282.967062][ T9902] lo speed is unknown, defaulting to 1000 [ 283.769372][ T9932] netlink: 248 bytes leftover after parsing attributes in process `syz.4.827'. [ 284.024736][ T9928] netlink: 24 bytes leftover after parsing attributes in process `syz.4.827'. [ 284.147158][ T9919] lo speed is unknown, defaulting to 1000 [ 284.495108][ T9936] xt_CT: No such helper "snmp" [ 284.696844][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 285.209479][ T9961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.831'. [ 285.573062][ T9964] SET target dimension over the limit! [ 286.062887][ T9930] lo speed is unknown, defaulting to 1000 [ 286.150581][ T9925] lo speed is unknown, defaulting to 1000 [ 286.361985][ T9929] lo speed is unknown, defaulting to 1000 [ 287.987259][T10003] nbd: socks must be embedded in a SOCK_ITEM attr [ 288.052804][T10003] block nbd0: shutting down sockets [ 288.275374][T10003] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 288.351944][T10003] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 289.190104][T10044] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 289.693528][T10022] bond0 (unregistering): Released all slaves [ 289.816572][T10023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.840'. [ 289.949040][T10059] batman_adv: batadv0: Interface deactivated: macvlan2 [ 290.314480][T10065] SET target dimension over the limit! [ 290.513034][T10077] netlink: 'syz.2.847': attribute type 21 has an invalid length. [ 290.537280][T10073] netlink: 16 bytes leftover after parsing attributes in process `syz.3.846'. [ 290.548452][T10077] netlink: 'syz.2.847': attribute type 6 has an invalid length. [ 290.556118][T10077] netlink: 64 bytes leftover after parsing attributes in process `syz.2.847'. [ 290.620329][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.847'. [ 290.669938][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.847'. [ 290.704194][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.847'. [ 290.931858][T10088] ipt_ECN: cannot use operation on non-tcp rule [ 291.091588][T10092] syzkaller0: entered allmulticast mode [ 291.183556][T10091] syzkaller0 (unregistering): left allmulticast mode [ 291.395260][T10063] lo speed is unknown, defaulting to 1000 [ 291.598040][T10066] netlink: 20 bytes leftover after parsing attributes in process `syz.1.845'. [ 291.648974][T10066] SET target dimension over the limit! [ 291.897754][T10104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.860'. [ 292.020813][T10074] lo speed is unknown, defaulting to 1000 [ 292.077229][T10109] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 292.845967][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.852'. [ 293.097788][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.853'. [ 293.264862][T10123] team0: Port device bridge0 removed [ 294.646897][T10163] SET target dimension over the limit! [ 295.087413][ T30] audit: type=1107 audit(1750833477.315:9): pid=10170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1Žd»¥]:xJÐP@cd$JnyãÒOº^øDØ#z' [ 295.133051][T10176] bridge0: port 1(syz_tun) entered blocking state [ 295.159032][T10176] bridge0: port 1(syz_tun) entered disabled state [ 295.195003][T10176] syz_tun: entered allmulticast mode [ 295.222170][T10176] syz_tun: entered promiscuous mode [ 295.513108][T10187] veth0_to_bond: left allmulticast mode [ 295.543111][T10187] batadv_slave_1: left promiscuous mode [ 295.604935][T10187] sctp: [Deprecated]: syz.3.866 (pid 10187) Use of struct sctp_assoc_value in delayed_ack socket option. [ 295.604935][T10187] Use struct sctp_sack_info instead [ 295.760779][T10187] __nla_validate_parse: 6 callbacks suppressed [ 295.760798][T10187] netlink: 100 bytes leftover after parsing attributes in process `syz.3.866'. [ 296.187111][T10160] lo speed is unknown, defaulting to 1000 [ 297.681339][T10171] lo speed is unknown, defaulting to 1000 [ 298.489844][T10238] netlink: 'syz.3.872': attribute type 303 has an invalid length. [ 298.740491][T10243] syz.2.875: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 298.807680][T10243] CPU: 1 UID: 0 PID: 10243 Comm: syz.2.875 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 298.807713][T10243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 298.807726][T10243] Call Trace: [ 298.807735][T10243] [ 298.807744][T10243] dump_stack_lvl+0x189/0x250 [ 298.807788][T10243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.807821][T10243] ? __pfx__printk+0x10/0x10 [ 298.807845][T10243] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 298.807871][T10243] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 298.807896][T10243] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 298.807922][T10243] warn_alloc+0x214/0x310 [ 298.807946][T10243] ? stack_depot_save_flags+0x40/0x900 [ 298.807979][T10243] ? __pfx_warn_alloc+0x10/0x10 [ 298.808005][T10243] ? kasan_save_track+0x4f/0x80 [ 298.808035][T10243] ? xskq_create+0x56/0x170 [ 298.808053][T10243] ? xsk_init_queue+0xb0/0x110 [ 298.808080][T10243] ? xsk_setsockopt+0x43f/0x710 [ 298.808106][T10243] ? do_sock_setsockopt+0x25a/0x3e0 [ 298.808134][T10243] ? __x64_sys_setsockopt+0x18b/0x220 [ 298.808161][T10243] ? do_syscall_64+0xfa/0x3b0 [ 298.808181][T10243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.808211][T10243] __vmalloc_node_range_noprof+0x125/0x12f0 [ 298.808268][T10243] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 298.808294][T10243] ? xskq_create+0x56/0x170 [ 298.808316][T10243] ? __kasan_kmalloc+0x93/0xb0 [ 298.808339][T10243] vmalloc_user_noprof+0xad/0xf0 [ 298.808362][T10243] ? xskq_create+0xbf/0x170 [ 298.808404][T10243] xskq_create+0xbf/0x170 [ 298.808426][T10243] xsk_init_queue+0xb0/0x110 [ 298.808460][T10243] xsk_setsockopt+0x43f/0x710 [ 298.808492][T10243] ? __pfx_xsk_setsockopt+0x10/0x10 [ 298.808520][T10243] ? __lock_acquire+0xab9/0xd20 [ 298.808561][T10243] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 298.808587][T10243] ? __pfx_xsk_setsockopt+0x10/0x10 [ 298.808620][T10243] do_sock_setsockopt+0x25a/0x3e0 [ 298.808660][T10243] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 298.808697][T10243] ? __fget_files+0x2a/0x420 [ 298.808730][T10243] __x64_sys_setsockopt+0x18b/0x220 [ 298.808769][T10243] do_syscall_64+0xfa/0x3b0 [ 298.808789][T10243] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.808808][T10243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.808829][T10243] ? clear_bhb_loop+0x60/0xb0 [ 298.808854][T10243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.808874][T10243] RIP: 0033:0x7fd338d8e929 [ 298.808894][T10243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.808912][T10243] RSP: 002b:00007fd336bd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 298.808934][T10243] RAX: ffffffffffffffda RBX: 00007fd338fb6080 RCX: 00007fd338d8e929 [ 298.808949][T10243] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 298.808962][T10243] RBP: 00007fd338e10b39 R08: 0000000000000004 R09: 0000000000000000 [ 298.808975][T10243] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.808988][T10243] R13: 0000000000000000 R14: 00007fd338fb6080 R15: 00007ffd42279918 [ 298.809021][T10243] [ 298.809030][T10243] Mem-Info: [ 299.062788][T10251] netlink: 'syz.1.877': attribute type 15 has an invalid length. [ 299.164541][T10232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.872'. [ 299.222990][T10253] netlink: 'syz.1.877': attribute type 282 has an invalid length. [ 299.231983][T10251] netlink: 'syz.1.877': attribute type 3 has an invalid length. [ 299.233858][T10243] active_anon:10352 inactive_anon:0 isolated_anon:0 [ 299.233858][T10243] active_file:1362 inactive_file:39936 isolated_file:0 [ 299.233858][T10243] unevictable:768 dirty:508 writeback:0 [ 299.233858][T10243] slab_reclaimable:11439 slab_unreclaimable:163833 [ 299.233858][T10243] mapped:37822 shmem:1387 pagetables:1279 [ 299.233858][T10243] sec_pagetables:0 bounce:0 [ 299.233858][T10243] kernel_misc_reclaimable:0 [ 299.233858][T10243] free:1246103 free_pcp:19006 free_cma:0 [ 299.261246][T10251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.877'. [ 299.347875][T10243] Node 0 active_anon:41608kB inactive_anon:0kB active_file:5448kB inactive_file:159540kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:151388kB dirty:2032kB writeback:0kB shmem:4012kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13780kB pagetables:4980kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 299.473276][T10243] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 299.649284][T10243] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 299.797465][T10243] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 299.820594][T10243] Node 0 DMA32 free:1065064kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41348kB inactive_anon:0kB active_file:5448kB inactive_file:157708kB unevictable:1536kB writepending:1292kB present:3129332kB managed:2561008kB mlocked:0kB bounce:0kB free_pcp:59728kB local_pcp:38452kB free_cma:0kB [ 299.877575][T10243] lowmem_reserve[]: 0 0 1 1 1 [ 299.882359][T10243] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 299.918393][T10243] lowmem_reserve[]: 0 0 0 0 0 [ 299.923170][T10243] Node 1 Normal free:3910924kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:11968kB local_pcp:8128kB free_cma:0kB [ 300.036593][T10243] lowmem_reserve[]: 0 0 0 0 0 [ 300.061165][T10264] netlink: 'syz.3.878': attribute type 13 has an invalid length. [ 300.076337][T10243] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 300.116669][T10243] Node 0 DMA32: 2014*4kB (UME) 854*8kB (UME) 372*16kB (UME) 532*32kB (UME) 689*64kB (UME) 230*128kB (UME) 99*256kB (UM) 48*512kB (UME) 31*1024kB (UME) 6*2048kB (U) 210*4096kB (M) = 1065512kB [ 300.170233][T10243] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 300.205927][T10243] Node 1 Normal: 181*4kB (UE) 55*8kB (UME) 40*16kB (UME) 160*32kB (UME) 48*64kB (UME) 10*128kB (UME) 3*256kB (UM) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 950*4096kB (M) = 3910924kB [ 300.275585][T10243] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 300.312788][T10243] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 300.347055][T10243] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 300.381791][T10243] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 300.413399][T10243] 42681 total pagecache pages [ 300.434665][T10243] 0 pages in swap cache [ 300.452758][T10243] Free swap = 124996kB [ 300.477718][T10243] Total swap = 124996kB [ 300.493568][T10243] 2097051 pages RAM [ 300.506413][T10243] 0 pages HighMem/MovableOnly [ 300.518087][T10243] 424693 pages reserved [ 300.528200][T10243] 0 pages cma reserved [ 300.948301][T10285] netlink: 'syz.2.881': attribute type 13 has an invalid length. [ 300.978254][T10285] netlink: 'syz.2.881': attribute type 17 has an invalid length. [ 301.478210][T10285] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.732242][T10285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 301.962552][T10276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.288686][T10327] netlink: 24 bytes leftover after parsing attributes in process `syz.0.890'. [ 302.349515][T10325] netlink: 64 bytes leftover after parsing attributes in process `syz.3.892'. [ 302.802443][T10288] lo speed is unknown, defaulting to 1000 [ 302.958379][T10344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.894'. [ 303.012939][T10344] macvtap1: entered promiscuous mode [ 303.018666][T10344] !: entered promiscuous mode [ 303.024864][T10344] macvtap1: entered allmulticast mode [ 303.030811][T10344] !: entered allmulticast mode [ 303.103141][T10349] !: left allmulticast mode [ 303.116336][T10349] !: left promiscuous mode [ 303.203834][T10351] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 303.634912][T10365] syz_tun: left allmulticast mode [ 303.648004][T10365] syz_tun: left promiscuous mode [ 303.693625][T10365] bridge0: port 1(syz_tun) entered disabled state [ 303.945424][T10327] lo speed is unknown, defaulting to 1000 [ 304.422835][T10387] netlink: 'syz.1.901': attribute type 4 has an invalid length. [ 304.638904][T10394] netlink: 64 bytes leftover after parsing attributes in process `syz.4.904'. [ 305.044744][T10407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.907'. [ 305.195862][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.907'. [ 305.330967][T10416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.908'. [ 305.604760][T10419] xt_CT: You must specify a L4 protocol and not use inversions on it [ 305.866706][T10423] macvtap1: left promiscuous mode [ 305.923385][T10423] macvtap1: left allmulticast mode [ 306.408806][T10435] xt_socket: unknown flags 0x8 [ 306.714804][T10414] lo speed is unknown, defaulting to 1000 [ 307.232256][T10465] netlink: 64 bytes leftover after parsing attributes in process `syz.2.918'. [ 308.333467][T10475] lo speed is unknown, defaulting to 1000 [ 308.622879][T10494] netlink: 44 bytes leftover after parsing attributes in process `syz.0.924'. [ 308.917402][T10500] team0: Port device bridge3 removed [ 309.064306][T10509] netlink: 48 bytes leftover after parsing attributes in process `syz.0.925'. [ 309.664099][T10473] lo speed is unknown, defaulting to 1000 [ 309.673860][T10503] lo speed is unknown, defaulting to 1000 [ 310.837905][T10536] netlink: 24 bytes leftover after parsing attributes in process `syz.4.933'. [ 311.223344][T10548] netlink: 'syz.0.939': attribute type 4 has an invalid length. [ 311.399352][T10557] netlink: 24 bytes leftover after parsing attributes in process `syz.4.944'. [ 311.445028][T10559] bridge0: port 1(syz_tun) entered blocking state [ 311.466950][T10559] bridge0: port 1(syz_tun) entered disabled state [ 311.473978][T10559] syz_tun: entered allmulticast mode [ 311.507145][T10559] syz_tun: entered promiscuous mode [ 311.677121][T10573] netlink: 'syz.0.950': attribute type 4 has an invalid length. [ 311.877521][T10581] netlink: 'syz.2.953': attribute type 4 has an invalid length. [ 311.994235][T10584] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 312.029570][T10586] netlink: 'syz.0.952': attribute type 10 has an invalid length. [ 312.110604][T10586] netlink: 40 bytes leftover after parsing attributes in process `syz.0.952'. [ 312.314709][T10586] batman_adv: batadv0: Adding interface: virt_wifi0 [ 312.376666][T10586] batman_adv: batadv0: Interface activated: virt_wifi0 [ 312.607943][T10606] netlink: 24 bytes leftover after parsing attributes in process `syz.3.959'. [ 312.822739][T10613] netlink: 'syz.3.962': attribute type 4 has an invalid length. [ 313.309441][T10585] lo speed is unknown, defaulting to 1000 [ 313.692461][T10620] lo speed is unknown, defaulting to 1000 [ 314.097575][T10630] netlink: 248 bytes leftover after parsing attributes in process `syz.2.967'. [ 314.207160][T10639] netlink: 24 bytes leftover after parsing attributes in process `syz.2.967'. [ 314.769369][T10627] lo speed is unknown, defaulting to 1000 [ 314.805494][T10656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.971'. [ 314.820453][T10624] lo speed is unknown, defaulting to 1000 [ 315.285143][T10660] netlink: 24 bytes leftover after parsing attributes in process `syz.3.972'. [ 315.604297][T10670] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 315.784614][T10673] netlink: 'syz.3.975': attribute type 4 has an invalid length. [ 316.250147][T10683] SET target dimension over the limit! [ 317.021519][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.055212][T10703] netlink: 24 bytes leftover after parsing attributes in process `syz.2.983'. [ 317.230587][T10711] netlink: 56 bytes leftover after parsing attributes in process `syz.1.986'. [ 317.258983][T10713] netlink: 'syz.2.987': attribute type 21 has an invalid length. [ 317.279722][T10711] netlink: 56 bytes leftover after parsing attributes in process `syz.1.986'. [ 317.853943][T10737] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 317.865191][T10737] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 318.247823][T10748] netlink: 24 bytes leftover after parsing attributes in process `syz.1.997'. [ 319.149088][T10782] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1009'. [ 319.168607][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1007'. [ 319.217519][T10782] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1009'. [ 319.429799][T10789] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1011'. [ 319.607786][T10796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1013'. [ 319.634797][T10798] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 319.749471][T10802] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 319.826627][T10804] netlink: 'syz.0.1016': attribute type 10 has an invalid length. [ 319.963845][T10810] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1017'. [ 320.169959][T10815] @ÿ: renamed from bond_slave_0 [ 320.300434][T10824] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1022'. [ 320.465119][T10830] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 320.662911][T10835] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1026'. [ 320.920437][T10847] netlink: 'syz.1.1031': attribute type 3 has an invalid length. [ 320.959107][T10847] netlink: 'syz.1.1031': attribute type 1 has an invalid length. [ 321.040016][T10853] netlink: 'syz.2.1032': attribute type 10 has an invalid length. [ 321.068746][T10853] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1032'. [ 321.092269][T10853] bridge0: port 1(0!) entered blocking state [ 321.137664][T10853] bridge0: port 1(0!) entered disabled state [ 321.171010][T10853] !: entered allmulticast mode [ 321.192761][T10853] !: entered promiscuous mode [ 321.201711][T10853] bridge0: port 1(0!) entered blocking state [ 321.208071][T10853] bridge0: port 1(0!) entered forwarding state [ 321.532855][T10861] lo speed is unknown, defaulting to 1000 [ 321.547526][T10867] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1035'. [ 321.656503][ T5154] Bluetooth: hci0: command tx timeout [ 321.716866][T10873] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 322.837205][T10920] netlink: 'syz.3.1050': attribute type 10 has an invalid length. [ 322.847972][T10920] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 322.886635][T10918] syz0: rxe_newlink: already configured on batadv_slave_1 [ 323.559003][T10924] lo speed is unknown, defaulting to 1000 [ 323.922770][T10957] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 324.341890][T10977] __nla_validate_parse: 10 callbacks suppressed [ 324.341910][T10977] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1064'. [ 324.359514][T10976] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1067'. [ 324.384060][T10978] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1065'. [ 324.635213][T10985] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1069'. [ 324.964300][T11001] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.1074'. [ 324.999164][T11001] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.1074'. [ 325.292490][T11013] netlink: 'syz.4.1079': attribute type 10 has an invalid length. [ 325.315369][T11013] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1079'. [ 325.394376][T11013] A link change request failed with some changes committed already. Interface nr29 may have been left with an inconsistent configuration, please check. [ 325.398245][T11023] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1080'. [ 325.672744][T11034] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1082'. [ 325.939024][T11019] lo speed is unknown, defaulting to 1000 [ 325.972312][T11046] netlink: 'syz.2.1085': attribute type 10 has an invalid length. [ 326.004376][T11050] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1084'. [ 326.734309][T11046] lo speed is unknown, defaulting to 1000 [ 328.374882][T11099] lo speed is unknown, defaulting to 1000 [ 328.859883][T11147] netlink: 'syz.2.1105': attribute type 4 has an invalid length. [ 329.141563][T11138] lo speed is unknown, defaulting to 1000 [ 330.054412][T11191] __nla_validate_parse: 5 callbacks suppressed [ 330.054432][T11191] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1123'. [ 330.097654][T11190] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1122'. [ 330.193490][T11193] netlink: 'syz.3.1124': attribute type 10 has an invalid length. [ 330.205753][T11193] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1124'. [ 330.286823][T11193] A link change request failed with some changes committed already. Interface nr29 may have been left with an inconsistent configuration, please check. [ 330.547227][T11205] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1125'. [ 330.722211][T11188] lo speed is unknown, defaulting to 1000 [ 330.757857][T11171] lo speed is unknown, defaulting to 1000 [ 331.628790][T11195] lo speed is unknown, defaulting to 1000 [ 332.766702][T11239] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1136'. [ 332.840471][T11241] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1137'. [ 333.655625][T11236] lo speed is unknown, defaulting to 1000 [ 335.137749][T11298] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1152'. [ 335.172165][T11276] lo speed is unknown, defaulting to 1000 [ 336.151961][T11329] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1159'. [ 336.263221][T11330] netlink: 'syz.0.1160': attribute type 10 has an invalid length. [ 336.327633][T11330] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1160'. [ 336.424725][T11330] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 336.897474][T11348] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1164'. [ 337.353720][T11337] lo speed is unknown, defaulting to 1000 [ 337.671464][T11366] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1169'. [ 337.693373][T11363] netlink: zone id is out of range [ 337.711550][T11363] netlink: zone id is out of range [ 337.721694][T11363] netlink: zone id is out of range [ 337.735733][T11363] netlink: zone id is out of range [ 337.750659][T11363] netlink: zone id is out of range [ 337.756022][T11363] netlink: zone id is out of range [ 337.761850][T11363] netlink: zone id is out of range [ 337.767949][T11363] netlink: zone id is out of range [ 337.773311][T11363] netlink: zone id is out of range [ 338.390162][T11365] lo speed is unknown, defaulting to 1000 [ 339.206589][T11391] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1177'. [ 339.215956][T11387] !: left allmulticast mode [ 339.248265][T11387] !: left promiscuous mode [ 339.270852][T11387] bridge0: port 1(0!) entered disabled state [ 339.406030][T11387] team0: Port device bridge2 removed [ 339.436960][T11387] batman_adv: batadv0: Removing interface: macvlan2 [ 340.268745][T11421] netlink: 'syz.0.1188': attribute type 10 has an invalid length. [ 340.301194][T11421] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1188'. [ 340.835201][T11424] lo speed is unknown, defaulting to 1000 [ 341.279200][T11445] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1197'. [ 342.184733][T11474] netlink: 'syz.4.1208': attribute type 10 has an invalid length. [ 342.203198][T11474] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1208'. [ 342.241591][T11474] net_ratelimit: 46 callbacks suppressed [ 342.241607][T11474] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 343.102407][T11474] lo speed is unknown, defaulting to 1000 [ 344.213202][T11517] Cannot find del_set index 0 as target [ 345.107515][T11537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1231'. [ 345.999120][T11568] SET target dimension over the limit! [ 346.674761][T11551] lo speed is unknown, defaulting to 1000 [ 346.765335][T11591] netlink: 'syz.2.1247': attribute type 14 has an invalid length. [ 347.169641][T11604] tipc: Enabling of bearer rejected, failed to enable media [ 347.432156][T11615] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1256'. [ 347.685850][T11615] team0: Mode changed to "loadbalance" [ 347.971171][T11637] syz0: rxe_newlink: already configured on batadv_slave_1 [ 348.234443][T11650] netlink: 'syz.4.1266': attribute type 10 has an invalid length. [ 348.304445][T11650] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1266'. [ 348.439831][T11650] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 349.507220][T11646] lo speed is unknown, defaulting to 1000 [ 350.168057][T11673] lo speed is unknown, defaulting to 1000 [ 350.203982][T11679] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 352.283711][T11762] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1305'. [ 352.311506][T11753] lo speed is unknown, defaulting to 1000 [ 352.421217][T11768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1307'. [ 352.494793][T11771] netlink: 'syz.4.1304': attribute type 10 has an invalid length. [ 352.525003][T11771] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1304'. [ 352.561030][T11771] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 353.478378][T11806] tap0: tun_chr_ioctl cmd 1074025677 [ 353.495176][T11806] tap0: linktype set to 823 [ 353.616448][T11785] lo speed is unknown, defaulting to 1000 [ 354.071324][T11823] tun0: tun_chr_ioctl cmd 1074025677 [ 354.083384][T11823] tun0: linktype set to 778 [ 354.463594][T11819] lo speed is unknown, defaulting to 1000 [ 354.475151][T11805] lo speed is unknown, defaulting to 1000 [ 354.555458][T11839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1328'. [ 354.752382][T11841] vxcan1: entered allmulticast mode [ 354.882527][T11841] vxcan1: left allmulticast mode [ 355.015602][T11821] lo speed is unknown, defaulting to 1000 [ 355.837789][T11861] netlink: 'syz.4.1339': attribute type 4 has an invalid length. [ 356.188282][T11873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1346'. [ 356.209630][T11873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1346'. [ 356.210963][T11875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1345'. [ 356.242474][T11875] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 356.433314][T11885] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 356.591956][T11893] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1355'. [ 356.660750][T11895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1354'. [ 356.711834][T11898] SET target dimension over the limit! [ 357.262406][T11908] lo speed is unknown, defaulting to 1000 [ 357.412198][T11920] netlink: 'syz.1.1364': attribute type 10 has an invalid length. [ 357.420780][T11920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1364'. [ 357.453553][T11920] A link change request failed with some changes committed already. Interface nr29 may have been left with an inconsistent configuration, please check. [ 357.595003][T11932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1367'. [ 357.666034][T11932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1367'. [ 358.036816][T11943] syz_tun: left allmulticast mode [ 358.042218][T11943] syz_tun: left promiscuous mode [ 358.050332][T11943] bridge0: port 1(syz_tun) entered disabled state [ 358.079611][T11943] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 358.089670][T11943] batman_adv: batadv0: Removing interface: virt_wifi0 [ 358.116696][T11912] lo speed is unknown, defaulting to 1000 [ 358.123874][T11954] netlink: 'syz.2.1372': attribute type 4 has an invalid length. [ 358.574050][T11924] lo speed is unknown, defaulting to 1000 [ 359.068511][T11976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1381'. [ 359.424597][T11982] netlink: 'syz.2.1384': attribute type 4 has an invalid length. [ 360.343509][T12013] netlink: 'syz.0.1395': attribute type 4 has an invalid length. [ 361.070370][T12019] lo speed is unknown, defaulting to 1000 [ 361.633441][T12022] lo speed is unknown, defaulting to 1000 [ 362.029329][T12071] syzkaller1: entered promiscuous mode [ 362.034858][T12071] syzkaller1: entered allmulticast mode [ 363.320320][T12110] syzkaller1: entered promiscuous mode [ 363.326020][T12110] syzkaller1: entered allmulticast mode [ 363.709041][T12130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1430'. [ 364.995031][T12155] lo speed is unknown, defaulting to 1000 [ 365.111053][T12176] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1448'. [ 365.568009][T12192] bond0: (slave batadv0): Releasing backup interface [ 365.640638][T12192] bond1: (slave batadv2): Releasing active interface [ 365.674700][ T5954] syz1: Port: 1 Link DOWN [ 365.678081][T12158] lo speed is unknown, defaulting to 1000 [ 366.014742][T12206] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 366.147408][T12212] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1461'. [ 367.240120][T12261] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 367.699104][T12279] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1485'. [ 367.997128][T12294] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 368.146648][T12303] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1494'. [ 368.427214][T12316] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1501'. [ 368.765277][T12338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1508'. [ 368.877610][T12342] netlink: 'syz.1.1511': attribute type 1 has an invalid length. [ 368.885678][T12342] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1511'. [ 368.965108][T12347] netlink: 'syz.0.1513': attribute type 10 has an invalid length. [ 369.002257][T12347] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1513'. [ 369.020517][T12347] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 369.253874][T12358] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300 [ 369.594268][T12365] syzkaller1: entered promiscuous mode [ 369.600582][T12365] syzkaller1: entered allmulticast mode [ 369.734287][T12356] lo speed is unknown, defaulting to 1000 [ 369.815402][T12378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1523'. [ 370.239090][T12397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1532'. [ 370.598833][T12409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1536'. [ 370.629847][T12410] netlink: 'syz.1.1537': attribute type 10 has an invalid length. [ 370.661784][T12410] team0: Port device geneve1 added [ 370.694072][ T138] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.726756][ T138] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.752912][ T138] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.784456][ T138] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.977598][T12421] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1543'. [ 371.335379][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1549'. [ 371.357089][T12435] team0: Port device geneve1 removed [ 371.398237][ T36] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.433581][ T36] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.449403][ T36] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.465949][ T36] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.486610][T12449] netlink: 'syz.2.1552': attribute type 10 has an invalid length. [ 371.494572][T12449] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1552'. [ 371.508076][T12449] bridge0: port 1(0!) entered blocking state [ 371.514591][T12449] bridge0: port 1(0!) entered disabled state [ 371.522305][T12449] !: entered allmulticast mode [ 371.529973][T12449] !: entered promiscuous mode [ 371.535916][T12449] bridge0: port 1(0!) entered blocking state [ 371.542264][T12449] bridge0: port 1(0!) entered forwarding state [ 372.085651][T12449] lo speed is unknown, defaulting to 1000 [ 372.091650][T12472] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1560'. [ 372.463417][T12469] lo speed is unknown, defaulting to 1000 [ 373.197175][T12518] netlink: 'syz.0.1574': attribute type 10 has an invalid length. [ 373.236443][T12518] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 373.752073][T12528] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 373.938628][T12533] netlink: 'syz.2.1578': attribute type 1 has an invalid length. [ 373.960122][T12529] syzkaller1: entered promiscuous mode [ 373.970266][T12529] syzkaller1: entered allmulticast mode [ 374.079947][T12533] bond0: entered promiscuous mode [ 374.098829][T12533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.242321][T12537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.257340][T12537] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 374.302494][T12537] bond0: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 374.312357][T12540] ieee802154 phy0 wpan0: encryption failed: -22 [ 374.333161][T12537] bond0: (slave ip6gre1): making interface the new active one [ 374.346899][T12537] ip6gre1: entered promiscuous mode [ 374.355216][T12537] bond0: (slave ip6gre1): Enslaving as an active interface with an up link [ 374.366258][T12521] lo speed is unknown, defaulting to 1000 [ 374.395444][T12545] __nla_validate_parse: 1 callbacks suppressed [ 374.395462][T12545] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1581'. [ 375.148850][T12542] lo speed is unknown, defaulting to 1000 [ 375.322413][T12575] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1589'. [ 375.517979][T12577] syzkaller1: entered promiscuous mode [ 375.523920][T12577] syzkaller1: entered allmulticast mode [ 376.019059][T12589] xfrm1: entered allmulticast mode [ 376.291824][T12601] netlink: 'syz.3.1597': attribute type 10 has an invalid length. [ 376.340819][T12601] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1597'. [ 376.404546][T12604] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1601'. [ 376.685049][T12595] lo speed is unknown, defaulting to 1000 [ 377.247762][T12640] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1611'. [ 377.617742][T12646] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1616'. [ 377.950637][T12633] lo speed is unknown, defaulting to 1000 [ 378.227279][T12675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1627'. [ 378.467757][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.633938][T12688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1633'. [ 379.112942][T12708] netlink: 'syz.4.1640': attribute type 4 has an invalid length. [ 379.269157][T12717] netlink: 'syz.2.1643': attribute type 10 has an invalid length. [ 379.285875][T12717] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1643'. [ 379.289453][T12719] syzkaller1: entered promiscuous mode [ 379.334730][T12719] syzkaller1: entered allmulticast mode [ 379.627995][T12735] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1648'. [ 379.833641][T12727] lo speed is unknown, defaulting to 1000 [ 380.094975][T12747] netlink: 'syz.1.1652': attribute type 4 has an invalid length. [ 380.507490][T12755] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1655'. [ 382.369861][T12745] lo speed is unknown, defaulting to 1000 [ 382.516221][T12733] lo speed is unknown, defaulting to 1000 [ 382.686080][T12786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1662'. [ 382.773103][T12788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1663'. [ 383.137762][T12791] syzkaller1: entered promiscuous mode [ 383.144965][T12791] syzkaller1: entered allmulticast mode [ 383.349131][T12795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1665'. [ 383.587596][T12800] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1666'. [ 383.706367][T12804] openvswitch: netlink: Key type 94 is out of range max 32 [ 383.760187][T12806] netlink: 'syz.2.1669': attribute type 1 has an invalid length. [ 383.778535][T12806] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1669'. [ 384.540707][T12841] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1679'. [ 384.710096][T12832] lo speed is unknown, defaulting to 1000 [ 384.999031][T12828] lo speed is unknown, defaulting to 1000 [ 385.773145][T12878] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 386.236786][T12898] netlink: 'syz.4.1697': attribute type 10 has an invalid length. [ 386.255028][T12898] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1697'. [ 386.281366][T12898] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 386.381330][T12902] netlink: 'syz.2.1699': attribute type 1 has an invalid length. [ 386.595905][T12910] bond1: (slave gretap1): making interface the new active one [ 386.646613][T12910] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 386.889909][T12914] netlink: 'syz.2.1701': attribute type 4 has an invalid length. [ 387.106445][T12894] lo speed is unknown, defaulting to 1000 [ 387.115088][T12922] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 387.537957][T12936] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1710'. [ 387.764439][T12923] lo speed is unknown, defaulting to 1000 [ 388.627965][T12960] syz0: rxe_newlink: already configured on batadv_slave_1 [ 388.849985][T12967] gtp0: entered promiscuous mode [ 388.890480][T12973] bridge0: port 1(syz_tun) entered blocking state [ 388.907004][T12973] bridge0: port 1(syz_tun) entered disabled state [ 388.913608][T12973] syz_tun: entered allmulticast mode [ 388.942782][T12973] syz_tun: entered promiscuous mode [ 389.074567][T12981] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1723'. [ 389.325990][ T5154] Bluetooth: hci4: link tx timeout [ 389.331674][ T5154] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 389.350544][ T5849] Bluetooth: hci4: link tx timeout [ 389.355706][ T5849] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 389.372160][ T5849] Bluetooth: hci4: link tx timeout [ 389.379176][ T5849] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 389.387310][ T5849] Bluetooth: hci4: link tx timeout [ 389.392619][ T5849] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 389.400614][ T5849] Bluetooth: hci4: link tx timeout [ 389.405934][ T5849] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 389.413891][ T5849] Bluetooth: hci4: link tx timeout [ 389.419399][ T5849] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 389.427687][ T5849] Bluetooth: hci4: link tx timeout [ 389.433051][ T5849] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 389.842997][T12996] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 389.990051][T13002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1731'. [ 390.257320][T13014] netlink: 71 bytes leftover after parsing attributes in process `syz.3.1736'. [ 390.668900][T13007] lo speed is unknown, defaulting to 1000 [ 391.430872][T13039] lo speed is unknown, defaulting to 1000 [ 391.442411][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 391.538043][T13050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1745'. [ 393.347374][T13067] lo speed is unknown, defaulting to 1000 [ 393.670883][T13092] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1761'. [ 393.723718][T13092] geneve2: entered promiscuous mode [ 393.737370][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.773878][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.796757][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.825878][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.969398][T13083] lo speed is unknown, defaulting to 1000 [ 394.971424][T13119] netlink: 532 bytes leftover after parsing attributes in process `syz.1.1771'. [ 395.485050][T13129] netlink: 'syz.1.1774': attribute type 4 has an invalid length. [ 395.990407][T13149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1782'. [ 396.275830][T13163] bridge0: port 1(syz_tun) entered blocking state [ 396.283059][T13163] bridge0: port 1(syz_tun) entered disabled state [ 396.289970][T13163] syz_tun: entered allmulticast mode [ 396.297431][T13163] syz_tun: entered promiscuous mode [ 396.580639][T13170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1791'. [ 396.590122][T13170] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1791'. [ 396.606520][T13170] gtp0: entered promiscuous mode [ 396.612419][T13170] gtp0: entered allmulticast mode [ 397.181709][T13191] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1801'. [ 397.623202][T13216] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 397.790860][T13218] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 398.531793][T13240] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1817'. [ 398.802185][T13253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1823'. [ 398.822351][T13253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1823'. [ 399.448067][T13282] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1831'. [ 399.646003][T13263] lo speed is unknown, defaulting to 1000 [ 399.941908][T13292] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1834'. [ 400.224681][T13299] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 400.853753][T13319] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1843'. [ 401.130606][T13330] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1849'. [ 401.671965][T13345] Cannot find del_set index 0 as target [ 401.897883][T13356] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1859'. [ 402.271958][T13357] lo speed is unknown, defaulting to 1000 [ 402.311913][T13366] netlink: 'syz.0.1862': attribute type 4 has an invalid length. [ 402.390167][T13366] netlink: 'syz.0.1862': attribute type 4 has an invalid length. [ 403.292481][T13374] lo speed is unknown, defaulting to 1000 [ 403.304845][ T5154] block nbd0: Receive control failed (result -32) [ 403.944607][T13417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1881'. [ 404.071075][T13422] syz_tun: left allmulticast mode [ 404.078794][T13422] syz_tun: left promiscuous mode [ 404.092015][T13422] bridge0: port 1(syz_tun) entered disabled state [ 404.639634][T13443] bridge0: port 2(syz_tun) entered blocking state [ 404.656356][T13443] bridge0: port 2(syz_tun) entered disabled state [ 404.686554][T13443] syz_tun: entered allmulticast mode [ 404.700086][T13443] syz_tun: entered promiscuous mode [ 404.708305][T13443] bridge0: port 2(syz_tun) entered blocking state [ 404.714873][T13443] bridge0: port 2(syz_tun) entered forwarding state [ 405.008581][T13455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1891'. [ 405.114431][T13461] syzkaller1: entered promiscuous mode [ 405.126790][T13461] syzkaller1: entered allmulticast mode [ 405.813440][T13481] lo speed is unknown, defaulting to 1000 [ 406.265744][T13490] lo speed is unknown, defaulting to 1000 [ 406.831729][T13518] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1912'. [ 407.325840][T13534] netlink: 'syz.1.1920': attribute type 1 has an invalid length. [ 407.621566][T13548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1923'. [ 407.640903][T13548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1923'. [ 407.856511][T13554] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1925'. [ 408.198106][T13538] lo speed is unknown, defaulting to 1000 [ 408.670400][T13543] lo speed is unknown, defaulting to 1000 [ 409.131900][T13567] lo speed is unknown, defaulting to 1000 [ 409.141292][T13572] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 410.323197][T13600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1937'. [ 410.455366][T13604] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1939'. [ 411.107855][T13608] lo speed is unknown, defaulting to 1000 [ 411.633504][T13634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1947'. [ 412.433956][T13650] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 412.499785][T13654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1951'. [ 412.582006][T13655] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1952'. [ 412.900943][T13646] lo speed is unknown, defaulting to 1000 [ 412.932668][T13666] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1957'. [ 413.553749][T13679] veth1_to_bond: entered allmulticast mode [ 413.566030][T13679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1962'. [ 413.681504][T13679] veth1_to_bond (unregistering): left allmulticast mode [ 413.873872][T13685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1964'. [ 413.886679][T13688] SET target dimension over the limit! [ 414.693846][T13705] lo speed is unknown, defaulting to 1000 [ 415.094814][T13722] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1973'. [ 415.236075][T13706] lo speed is unknown, defaulting to 1000 [ 415.592938][T13734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1978'. [ 415.830383][T13736] SET target dimension over the limit! [ 415.836858][T13738] netlink: 'syz.3.1980': attribute type 4 has an invalid length. [ 416.151160][T13748] syzkaller1: entered promiscuous mode [ 416.176809][T13748] syzkaller1: entered allmulticast mode [ 416.258250][T13754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1985'. [ 416.443307][T13757] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1986'. [ 416.625881][T13767] netlink: 'syz.4.1991': attribute type 4 has an invalid length. [ 416.901069][T13775] Cannot find del_set index 0 as target [ 417.815900][T13803] syzkaller1: entered promiscuous mode [ 417.842446][T13803] syzkaller1: entered allmulticast mode [ 417.863170][T13782] lo speed is unknown, defaulting to 1000 [ 418.373409][T13811] syz_tun: left allmulticast mode [ 418.383543][T13811] syz_tun: left promiscuous mode [ 418.394098][T13811] bridge0: port 2(syz_tun) entered disabled state [ 418.432545][T13811] !: left allmulticast mode [ 418.446537][T13811] !: left promiscuous mode [ 418.451426][T13811] bridge0: port 1(0!) entered disabled state [ 418.634014][T13811] bond0: (slave ip6gre1): Releasing backup interface [ 418.641526][T13811] ip6gre1: left promiscuous mode [ 418.676682][T13811] bond1: (slave gretap1): Releasing active interface [ 418.705925][T13820] netlink: 'syz.1.2003': attribute type 4 has an invalid length. [ 418.943569][T13824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2005'. [ 419.106586][T13829] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2005'. [ 419.155628][T13828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2016'. [ 419.338221][T13833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2008'. [ 419.355976][T13835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2010'. [ 419.416335][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 420.500259][T13858] netlink: 'syz.0.2017': attribute type 3 has an invalid length. [ 420.508451][T13858] netlink: 'syz.0.2017': attribute type 3 has an invalid length. [ 420.532690][T13858] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2017'. [ 421.814403][T13871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2020'. [ 422.701146][T13855] syzkaller0: entered promiscuous mode [ 422.706725][T13855] syzkaller0: entered allmulticast mode [ 424.846821][T13905] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2030'. [ 424.875651][T13908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2031'. [ 424.953458][T13889] lo speed is unknown, defaulting to 1000 [ 425.002352][T13911] bridge0: port 1(syz_tun) entered blocking state [ 425.009263][T13911] bridge0: port 1(syz_tun) entered disabled state [ 425.016012][T13911] syz_tun: entered allmulticast mode [ 425.024367][T13911] syz_tun: entered promiscuous mode [ 425.031386][T13911] bridge0: port 1(syz_tun) entered blocking state [ 425.038009][T13911] bridge0: port 1(syz_tun) entered forwarding state [ 425.527312][T13924] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2037'. [ 427.326630][T13945] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2044'. [ 427.582599][T13958] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2048'. [ 428.147017][T13957] lo speed is unknown, defaulting to 1000 [ 428.206037][T13981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2057'. [ 428.414398][T13984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2058'. [ 428.747549][T13991] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2062'. [ 428.930816][T13977] lo speed is unknown, defaulting to 1000 [ 429.048081][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.082095][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.154198][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.745683][T13998] lo speed is unknown, defaulting to 1000 [ 429.792490][T13979] lo speed is unknown, defaulting to 1000 [ 430.603662][T14014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2068'. [ 430.645985][T14014] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2068'. [ 430.773860][T14014] vlan2: entered allmulticast mode [ 430.794845][T14014] hsr0: entered allmulticast mode [ 430.810087][T14014] hsr_slave_0: entered allmulticast mode [ 430.815963][T14014] hsr_slave_1: entered allmulticast mode [ 430.998316][T14016] netlink: 'syz.3.2069': attribute type 4 has an invalid length. [ 431.210263][T14004] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.319588][T14004] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.398428][T14026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2073'. [ 431.504487][T14004] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.691810][ T6093] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.729473][ T6093] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.755158][ T6093] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.769417][T14038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2078'. [ 431.895310][ T6096] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.913606][T14041] netlink: 'syz.2.2079': attribute type 4 has an invalid length. [ 432.129863][T14054] netlink: 'syz.2.2082': attribute type 4 has an invalid length. [ 432.174667][T14053] syzkaller0: entered promiscuous mode [ 432.180511][T14053] syzkaller0: entered allmulticast mode [ 432.537281][T14047] lo speed is unknown, defaulting to 1000 [ 432.857226][T14073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2089'. [ 433.190395][T14043] lo speed is unknown, defaulting to 1000 [ 434.307340][T14102] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2098'. [ 434.590149][T14088] lo speed is unknown, defaulting to 1000 [ 435.358875][T14115] syz_tun: left allmulticast mode [ 435.364151][T14115] syz_tun: left promiscuous mode [ 435.369646][T14115] bridge0: port 1(syz_tun) entered disabled state [ 435.640143][T14092] lo speed is unknown, defaulting to 1000 [ 436.471256][T14131] lo speed is unknown, defaulting to 1000 [ 436.597213][T14143] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2110'. [ 438.245645][T14164] lo speed is unknown, defaulting to 1000 [ 438.357468][T14178] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2121'. [ 438.537344][T14185] netlink: 'syz.3.2123': attribute type 10 has an invalid length. [ 438.761709][T14167] lo speed is unknown, defaulting to 1000 [ 439.733734][T14195] lo speed is unknown, defaulting to 1000 [ 439.830023][T14170] lo speed is unknown, defaulting to 1000 [ 441.419229][T14218] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2135'. [ 441.666608][T14227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2137'. [ 441.703060][T14227] vlan0: entered promiscuous mode [ 441.715329][T14227] syz_tun: entered promiscuous mode [ 442.717136][T14252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2145'. [ 442.948017][T14256] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2147'. [ 443.247368][T14245] lo speed is unknown, defaulting to 1000 [ 443.700327][T14268] netlink: 'syz.2.2149': attribute type 13 has an invalid length. [ 443.713552][T14268] netlink: 'syz.2.2149': attribute type 1 has an invalid length. [ 443.726193][T14268] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2149'. [ 444.311056][T14277] pim6reg1: entered promiscuous mode [ 444.316558][T14277] pim6reg1: entered allmulticast mode [ 444.383718][T14286] tipc: Enabled bearer , priority 10 [ 444.461943][T14286] tipc: Resetting bearer [ 444.484567][T14285] tipc: Resetting bearer [ 445.899073][T14285] tipc: Disabling bearer [ 446.116230][T14289] Failed to register nexthop notifier [ 446.188215][T14263] lo speed is unknown, defaulting to 1000 [ 446.228249][T14242] lo speed is unknown, defaulting to 1000 [ 446.340639][T14280] lo speed is unknown, defaulting to 1000 [ 447.597204][T14311] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2160'. [ 447.638956][T14316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2162'. [ 447.940701][T14324] syzkaller0: entered promiscuous mode [ 447.960089][T14324] syzkaller0: entered allmulticast mode [ 448.329276][T14330] xt_HMARK: spi-set and port-set can't be combined [ 450.212862][ T6096] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.228200][T14317] lo speed is unknown, defaulting to 1000 [ 450.254707][T14346] bridge2: entered promiscuous mode [ 450.272454][ T6096] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.280918][ T6096] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.316372][ T6096] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.562608][T14362] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2172'. [ 450.605750][T14359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2172'. [ 450.655093][T14361] syzkaller0: entered promiscuous mode [ 450.668352][T14361] syzkaller0: entered allmulticast mode [ 452.960092][T14370] syz_tun: left allmulticast mode [ 452.965278][T14370] syz_tun: left promiscuous mode [ 452.970725][T14370] bridge0: port 1(syz_tun) entered disabled state [ 453.864667][T14393] lo speed is unknown, defaulting to 1000 [ 454.719218][T14441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2195'. [ 455.242271][T14467] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2203'. [ 455.468134][T14479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2206'. [ 455.508674][T14479] vlan0: entered promiscuous mode [ 455.527401][T14479] team0: entered promiscuous mode [ 455.909041][T14486] netlink: 'syz.2.2209': attribute type 3 has an invalid length. [ 456.006969][T14486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2209'. [ 457.534291][T14472] lo speed is unknown, defaulting to 1000 [ 457.556467][T14501] team0: Mode changed to "broadcast" [ 457.576251][T14498] vlan0: entered promiscuous mode [ 458.881458][T14528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2223'. [ 459.032788][T14536] netlink: 'syz.1.2225': attribute type 39 has an invalid length. [ 459.127541][T14539] netlink: 'syz.0.2226': attribute type 10 has an invalid length. [ 459.260330][T14541] bridge3: entered allmulticast mode [ 459.346615][T14538] @: renamed from vlan0 [ 459.648593][T14550] syzkaller0: entered promiscuous mode [ 459.658352][T14550] syzkaller0: entered allmulticast mode [ 460.182241][T14576] SET target dimension over the limit! [ 460.535699][T14587] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2240'. [ 462.099904][T14605] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2246'. [ 462.137386][T14609] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 462.508398][T14619] macvtap1: entered promiscuous mode [ 462.515277][T14619] hsr0: entered promiscuous mode [ 462.528381][T14619] macvtap1: entered allmulticast mode [ 462.545824][T14619] hsr0: entered allmulticast mode [ 462.552771][T14619] hsr_slave_0: entered allmulticast mode [ 462.564103][T14619] hsr_slave_1: entered allmulticast mode [ 462.651543][T14624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2249'. [ 462.675959][T14619] hsr0: left allmulticast mode [ 462.738773][T14619] hsr_slave_0: left allmulticast mode [ 462.756809][T14619] hsr_slave_1: left allmulticast mode [ 462.776726][T14619] hsr0: left promiscuous mode [ 462.872944][T14628] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2251'. [ 463.008119][T14631] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 463.034137][T14622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2248'. [ 463.043602][T14622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2248'. [ 463.086403][T14622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2248'. [ 463.116046][T14622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2248'. [ 463.146322][T14622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2248'. [ 463.196439][T14622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2248'. [ 463.592322][T14638] SET target dimension over the limit! [ 463.621263][T14643] tipc: Enabled bearer , priority 0 [ 463.755035][T14643] syzkaller0: entered promiscuous mode [ 463.760715][T14643] syzkaller0: entered allmulticast mode [ 463.768108][T14643] tipc: Resetting bearer [ 463.805024][T14642] tipc: Resetting bearer [ 464.646889][ T7193] tipc: Node number set to 1 [ 465.543849][T14642] tipc: Disabling bearer [ 465.554772][T14650] netlink: 'syz.4.2257': attribute type 4 has an invalid length. [ 465.712165][T14678] __nla_validate_parse: 90 callbacks suppressed [ 465.712185][T14678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2261'. [ 465.925105][T14687] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2265'. [ 466.187472][T14697] SET target dimension over the limit! [ 466.548873][T14706] vlan0: entered promiscuous mode [ 466.556718][T14706] netlink: 'syz.3.2269': attribute type 3 has an invalid length. [ 466.586491][T14706] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2269'. [ 467.005158][T14717] netlink: 'syz.2.2271': attribute type 4 has an invalid length. [ 467.274581][T14690] lo speed is unknown, defaulting to 1000 [ 467.320946][T14727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2275'. [ 467.584658][T14731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2277'. [ 467.688501][T14731] syz_tun: entered promiscuous mode [ 467.709839][T14731] macvtap2: entered promiscuous mode [ 467.715356][T14731] macvtap2: entered allmulticast mode [ 467.729656][T14731] syz_tun: entered allmulticast mode [ 467.775636][T14736] syz_tun: left allmulticast mode [ 467.792572][T14736] syz_tun: left promiscuous mode [ 468.024707][T14738] SET target dimension over the limit! [ 468.114817][T14745] sch_fq: defrate 0 ignored. [ 468.819812][T14771] xt_CT: You must specify a L4 protocol and not use inversions on it [ 468.957519][T14773] netlink: 'syz.0.2290': attribute type 10 has an invalid length. [ 469.348965][T14750] lo speed is unknown, defaulting to 1000 [ 469.579859][T14785] SET target dimension over the limit! [ 469.943542][T14797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2298'. [ 470.004136][T14797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2298'. [ 470.046173][T14797] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2298'. [ 470.083910][T14797] vlan0: entered promiscuous mode [ 470.121315][T14797] syzkaller1: entered promiscuous mode [ 470.151027][T14797] syzkaller1: entered allmulticast mode [ 470.704096][T14813] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2302'. [ 471.374555][T14822] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2304'. [ 471.383803][T14822] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2304'. [ 472.592163][T14830] lo speed is unknown, defaulting to 1000 [ 472.814563][T14842] netlink: 'syz.1.2311': attribute type 39 has an invalid length. [ 473.050919][T14845] netlink: 'syz.4.2307': attribute type 16 has an invalid length. [ 473.059272][T14845] netlink: 'syz.4.2307': attribute type 17 has an invalid length. [ 473.180873][T14859] SET target dimension over the limit! [ 473.195939][T14845] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 474.093809][T14870] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2317'. [ 475.524677][T14877] pim6reg: entered allmulticast mode [ 476.286264][T14863] lo speed is unknown, defaulting to 1000 [ 476.325564][T14910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2329'. [ 476.630086][T14920] SET target dimension over the limit! [ 477.499938][T14928] pim6reg: entered allmulticast mode [ 477.565720][T14924] lo speed is unknown, defaulting to 1000 [ 477.574105][T14931] netlink: 'syz.2.2334': attribute type 1 has an invalid length. [ 478.226860][T14945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2338'. [ 478.235813][T14945] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2338'. [ 478.316911][T14926] pim6reg: left allmulticast mode [ 478.379111][T14922] lo speed is unknown, defaulting to 1000 [ 478.421418][T14951] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2341'. [ 478.618220][T14955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2342'. [ 478.655184][T14957] raw_sendmsg: syz.4.2343 forgot to set AF_INET. Fix it! [ 480.425044][T14987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2351'. [ 480.473749][T14987] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2351'. [ 480.794068][T14994] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 480.849633][T14998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2355'. [ 481.073777][T14985] lo speed is unknown, defaulting to 1000 [ 481.285295][T15014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2359'. [ 481.450934][T15011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2358'. [ 481.724011][T14994] lo speed is unknown, defaulting to 1000 [ 481.738681][T15023] SET target dimension over the limit! [ 482.185027][T15036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2363'. [ 482.409617][T15039] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 482.613985][T15046] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 482.646578][T15045] delete_channel: no stack [ 482.652746][T15049] netlink: 'syz.0.2365': attribute type 6 has an invalid length. [ 483.413264][T15069] __nla_validate_parse: 4 callbacks suppressed [ 483.413282][T15069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2370'. [ 483.525849][T15072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2371'. [ 483.770331][T15073] bridge3: port 1(veth11) entered blocking state [ 483.777519][T15073] bridge3: port 1(veth11) entered disabled state [ 483.784360][T15073] veth11: entered allmulticast mode [ 483.793516][T15073] veth11: entered promiscuous mode [ 483.804138][T15074] bridge3: port 2(veth0_to_bond) entered blocking state [ 483.812114][T15074] bridge3: port 2(veth0_to_bond) entered disabled state [ 483.819795][T15074] veth0_to_bond: entered allmulticast mode [ 483.839109][T15074] veth0_to_bond: entered promiscuous mode [ 483.892589][T15072] vlan0: entered allmulticast mode [ 483.905719][T15072] veth1: entered allmulticast mode [ 483.911722][T15072] bridge3: port 3(vlan0) entered blocking state [ 483.925643][T15072] bridge3: port 3(vlan0) entered disabled state [ 483.935597][T15072] vlan0: entered promiscuous mode [ 483.948304][T15072] veth1: entered promiscuous mode [ 484.885590][T15093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2376'. [ 485.204604][T15087] x_tables: duplicate underflow at hook 3 [ 485.943922][T15121] netlink: 'syz.0.2383': attribute type 1 has an invalid length. [ 485.950188][T15117] vlan0: left promiscuous mode [ 485.960442][T15121] netlink: 'syz.0.2383': attribute type 1 has an invalid length. [ 485.972745][T15121] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2383'. [ 486.005918][T15117] bridge3: left promiscuous mode [ 486.014988][T15117] bridge3: left allmulticast mode [ 486.023015][T15117] gtp0: left promiscuous mode [ 486.032221][T15117] gtp0: left allmulticast mode [ 486.048379][T15121] vlan0 (unregistering): left promiscuous mode [ 486.055919][T15121] veth1: left promiscuous mode [ 486.065239][T15121] bridge3: port 3(vlan0) entered disabled state [ 486.427539][T15134] veth0_to_bond: left allmulticast mode [ 486.466239][T15134] veth0_to_bond: left promiscuous mode [ 486.490064][T15134] bridge3: port 2(veth0_to_bond) entered disabled state [ 486.570325][T15145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2388'. [ 486.579750][T15134] veth11: left allmulticast mode [ 486.599545][T15134] veth11: left promiscuous mode [ 486.612491][T15134] bridge3: port 1(veth11) entered disabled state [ 486.646615][T15147] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2389'. [ 487.946934][T15175] x_tables: duplicate underflow at hook 1 [ 488.017831][T15178] netlink: 'syz.1.2396': attribute type 303 has an invalid length. [ 488.050546][T15173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2396'. [ 489.217325][T15186] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2398'. [ 489.461077][T15188] wireguard0: entered promiscuous mode [ 489.469264][T15188] wireguard0: entered allmulticast mode [ 490.930128][T15213] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2403'. [ 491.325490][T15217] wireguard0: entered promiscuous mode [ 491.381080][T15217] wireguard0: entered allmulticast mode [ 491.869005][T15244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2408'. [ 491.962455][T15244] siw: device registration error -23 [ 492.041719][T15247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2409'. [ 492.199410][T15254] bridge0: port 1(syz_tun) entered blocking state [ 492.216185][T15254] bridge0: port 1(syz_tun) entered disabled state [ 492.240191][T15254] syz_tun: entered allmulticast mode [ 492.257249][T15254] syz_tun: left allmulticast mode [ 492.553750][T15264] netlink: 'syz.2.2414': attribute type 4 has an invalid length. [ 492.986298][T15273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.133220][T15273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.224377][T15273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.363093][T15278] syz.0.2413: vmalloc error: size 268435456, failed to allocated page array size 524288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 494.436234][T15278] CPU: 0 UID: 0 PID: 15278 Comm: syz.0.2413 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 494.436263][T15278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 494.436281][T15278] Call Trace: [ 494.436292][T15278] [ 494.436301][T15278] dump_stack_lvl+0x189/0x250 [ 494.436339][T15278] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.436368][T15278] ? __pfx__printk+0x10/0x10 [ 494.436391][T15278] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 494.436411][T15278] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 494.436432][T15278] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 494.436454][T15278] warn_alloc+0x214/0x310 [ 494.436481][T15278] ? __pfx_warn_alloc+0x10/0x10 [ 494.436510][T15278] ? __get_vm_area_node+0x28f/0x300 [ 494.436528][T15278] ? __do_replace+0xb4/0xaa0 [ 494.436548][T15278] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 494.436566][T15278] ? stack_depot_save_flags+0x40/0x900 [ 494.436611][T15278] ? translate_table+0x1b4d/0x1f90 [ 494.436639][T15278] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 494.436666][T15278] ? __do_replace+0xb4/0xaa0 [ 494.436682][T15278] vzalloc_noprof+0xb2/0xf0 [ 494.436701][T15278] ? __do_replace+0xb4/0xaa0 [ 494.436718][T15278] __do_replace+0xb4/0xaa0 [ 494.436737][T15278] ? __pfx_translate_table+0x10/0x10 [ 494.436770][T15278] ? __pfx___do_replace+0x10/0x10 [ 494.436795][T15278] ? _copy_from_user+0x94/0xb0 [ 494.436817][T15278] do_arpt_set_ctl+0xa2a/0xf10 [ 494.436848][T15278] ? __mutex_trylock_common+0x153/0x260 [ 494.436877][T15278] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 494.436909][T15278] ? rcu_is_watching+0x15/0xb0 [ 494.436952][T15278] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 494.436975][T15278] ? __pfx___mutex_lock+0x10/0x10 [ 494.436993][T15278] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 494.437011][T15278] ? aa_sk_perm+0x81e/0x950 [ 494.437037][T15278] ? __pfx_aa_sk_perm+0x10/0x10 [ 494.437064][T15278] nf_setsockopt+0x26f/0x290 [ 494.437092][T15278] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 494.437117][T15278] do_sock_setsockopt+0x25a/0x3e0 [ 494.437146][T15278] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 494.437177][T15278] ? __fget_files+0x2a/0x420 [ 494.437206][T15278] __x64_sys_setsockopt+0x18b/0x220 [ 494.437238][T15278] do_syscall_64+0xfa/0x3b0 [ 494.437256][T15278] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.437273][T15278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.437290][T15278] ? clear_bhb_loop+0x60/0xb0 [ 494.437311][T15278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.437332][T15278] RIP: 0033:0x7f4a3b58e929 [ 494.437349][T15278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.437365][T15278] RSP: 002b:00007f4a3c399038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 494.437385][T15278] RAX: ffffffffffffffda RBX: 00007f4a3b7b6240 RCX: 00007f4a3b58e929 [ 494.437399][T15278] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 494.437410][T15278] RBP: 00007f4a3b610b39 R08: 0000000000000068 R09: 0000000000000000 [ 494.437421][T15278] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 494.437433][T15278] R13: 0000000000000000 R14: 00007f4a3b7b6240 R15: 00007fff5c4b4cd8 [ 494.437461][T15278] [ 494.437553][T15278] Mem-Info: [ 494.826145][T15278] active_anon:18826 inactive_anon:0 isolated_anon:0 [ 494.826145][T15278] active_file:1362 inactive_file:40014 isolated_file:0 [ 494.826145][T15278] unevictable:768 dirty:396 writeback:0 [ 494.826145][T15278] slab_reclaimable:12626 slab_unreclaimable:236441 [ 494.826145][T15278] mapped:39128 shmem:8113 pagetables:1186 [ 494.826145][T15278] sec_pagetables:0 bounce:0 [ 494.826145][T15278] kernel_misc_reclaimable:0 [ 494.826145][T15278] free:1156145 free_pcp:16346 free_cma:0 [ 494.961090][T15278] Node 0 active_anon:77604kB inactive_anon:0kB active_file:5448kB inactive_file:159852kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158612kB dirty:1584kB writeback:0kB shmem:33016kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12916kB pagetables:4608kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 495.062778][T15278] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 495.152286][T15278] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 495.267312][T15278] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 495.273180][T15278] Node 0 DMA32 free:685448kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:84160kB inactive_anon:0kB active_file:5448kB inactive_file:158020kB unevictable:1536kB writepending:1584kB present:3129332kB managed:2561008kB mlocked:0kB bounce:0kB free_pcp:59220kB local_pcp:40076kB free_cma:0kB [ 495.382122][T15278] lowmem_reserve[]: 0 0 1 1 1 [ 495.411719][T15278] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 495.485553][T15278] lowmem_reserve[]: 0 0 0 0 0 [ 495.515948][T15278] Node 1 Normal free:3915132kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:7808kB local_pcp:1824kB free_cma:0kB [ 495.558264][T15278] lowmem_reserve[]: 0 0 0 0 0 [ 495.563171][T15278] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 495.589707][T15278] Node 0 DMA32: 2*4kB (UE) 2*8kB (UM) 1*16kB (U) 1*32kB (U) 552*64kB (UE) 202*128kB (U) 72*256kB (UM) 27*512kB (U) 30*1024kB (UME) 2*2048kB (U) 136*4096kB (UM) = 685384kB [ 495.623733][T15278] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 495.680653][T15278] Node 1 Normal: 181*4kB (UE) 57*8kB (UME) 40*16kB (UME) 209*32kB (UME) 75*64kB (UME) 17*128kB (UME) 3*256kB (UM) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 950*4096kB (M) = 3915132kB [ 495.759586][T15278] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 495.821816][T15278] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 495.876205][T15278] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 495.885807][T15278] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 495.963162][T15278] 46634 total pagecache pages [ 495.982428][T15278] 0 pages in swap cache [ 496.008629][T15278] Free swap = 124996kB [ 496.012841][T15278] Total swap = 124996kB [ 496.076179][T15278] 2097051 pages RAM [ 496.080031][T15278] 0 pages HighMem/MovableOnly [ 496.084719][T15278] 424693 pages reserved [ 496.124756][T15278] 0 pages cma reserved [ 496.435410][T15314] netlink: 'syz.2.2422': attribute type 1 has an invalid length. [ 496.489467][T15314] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.2422'. [ 496.587972][T15314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2422'. [ 496.876773][T15330] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 496.987542][T15330] wg1: entered promiscuous mode [ 496.992479][T15330] wg1: entered allmulticast mode [ 497.694090][T15350] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2428'. [ 499.279783][T15391] [ 499.282156][T15391] ====================================================== [ 499.289178][T15391] WARNING: possible circular locking dependency detected [ 499.296212][T15391] 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 Not tainted [ 499.303329][T15391] ------------------------------------------------------ [ 499.310360][T15391] syz.2.2434/15391 is trying to acquire lock: [ 499.316429][T15391] ffffffff8f66a618 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 499.325596][T15391] [ 499.325596][T15391] but task is already holding lock: [ 499.332965][T15391] ffff888032d94170 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 499.342202][T15391] [ 499.342202][T15391] which lock already depends on the new lock. [ 499.342202][T15391] [ 499.352609][T15391] [ 499.352609][T15391] the existing dependency chain (in reverse order) is: [ 499.361624][T15391] [ 499.361624][T15391] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 499.369636][T15391] lock_acquire+0x120/0x360 [ 499.374680][T15391] _raw_spin_lock_bh+0x36/0x50 [ 499.379992][T15391] nr_rt_device_down+0x12a/0x720 [ 499.385464][T15391] nr_device_event+0x137/0x150 [ 499.390766][T15391] notifier_call_chain+0x1b3/0x3e0 [ 499.396419][T15391] dev_close_many+0x29c/0x410 [ 499.401723][T15391] netif_close+0x158/0x210 [ 499.406681][T15391] dev_close+0x10a/0x220 [ 499.411488][T15391] bpq_device_event+0x2f4/0x600 [ 499.416875][T15391] notifier_call_chain+0x1b3/0x3e0 [ 499.422538][T15391] __dev_notify_flags+0x18d/0x2e0 [ 499.428113][T15391] netif_change_flags+0xe8/0x1a0 [ 499.433595][T15391] dev_change_flags+0x130/0x260 [ 499.438987][T15391] dev_ioctl+0x7b4/0x1150 [ 499.443855][T15391] sock_do_ioctl+0x22c/0x300 [ 499.448978][T15391] sock_ioctl+0x576/0x790 [ 499.453847][T15391] __se_sys_ioctl+0xfc/0x170 [ 499.458983][T15391] do_syscall_64+0xfa/0x3b0 [ 499.464045][T15391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.470506][T15391] [ 499.470506][T15391] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 499.478359][T15391] lock_acquire+0x120/0x360 [ 499.483413][T15391] _raw_spin_lock_bh+0x36/0x50 [ 499.488729][T15391] nr_rt_device_down+0xa9/0x720 [ 499.494129][T15391] nr_device_event+0x137/0x150 [ 499.499431][T15391] notifier_call_chain+0x1b3/0x3e0 [ 499.505107][T15391] dev_close_many+0x29c/0x410 [ 499.510325][T15391] netif_close+0x158/0x210 [ 499.515285][T15391] dev_close+0x10a/0x220 [ 499.520073][T15391] bpq_device_event+0x2f4/0x600 [ 499.525558][T15391] notifier_call_chain+0x1b3/0x3e0 [ 499.531220][T15391] __dev_notify_flags+0x18d/0x2e0 [ 499.536788][T15391] netif_change_flags+0xe8/0x1a0 [ 499.542268][T15391] dev_change_flags+0x130/0x260 [ 499.547657][T15391] dev_ioctl+0x7b4/0x1150 [ 499.552529][T15391] sock_do_ioctl+0x22c/0x300 [ 499.557659][T15391] sock_ioctl+0x576/0x790 [ 499.562529][T15391] __se_sys_ioctl+0xfc/0x170 [ 499.567675][T15391] do_syscall_64+0xfa/0x3b0 [ 499.572722][T15391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.579192][T15391] [ 499.579192][T15391] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 499.587119][T15391] validate_chain+0xb9b/0x2140 [ 499.592419][T15391] __lock_acquire+0xab9/0xd20 [ 499.597651][T15391] lock_acquire+0x120/0x360 [ 499.602700][T15391] _raw_spin_lock_bh+0x36/0x50 [ 499.608006][T15391] nr_rt_ioctl+0x390/0xd50 [ 499.612960][T15391] sock_do_ioctl+0xd9/0x300 [ 499.617999][T15391] sock_ioctl+0x576/0x790 [ 499.622866][T15391] __se_sys_ioctl+0xfc/0x170 [ 499.627999][T15391] do_syscall_64+0xfa/0x3b0 [ 499.633043][T15391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.639474][T15391] [ 499.639474][T15391] other info that might help us debug this: [ 499.639474][T15391] [ 499.649797][T15391] Chain exists of: [ 499.649797][T15391] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 499.649797][T15391] [ 499.663641][T15391] Possible unsafe locking scenario: [ 499.663641][T15391] [ 499.671135][T15391] CPU0 CPU1 [ 499.676509][T15391] ---- ---- [ 499.681885][T15391] lock(&nr_node->node_lock); [ 499.686671][T15391] lock(nr_node_list_lock); [ 499.693799][T15391] lock(&nr_node->node_lock); [ 499.701100][T15391] lock(nr_neigh_list_lock); [ 499.705798][T15391] [ 499.705798][T15391] *** DEADLOCK *** [ 499.705798][T15391] [ 499.713957][T15391] 2 locks held by syz.2.2434/15391: [ 499.719165][T15391] #0: ffffffff8f66a678 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 499.728699][T15391] #1: ffff888032d94170 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 499.738400][T15391] [ 499.738400][T15391] stack backtrace: [ 499.744301][T15391] CPU: 0 UID: 0 PID: 15391 Comm: syz.2.2434 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 499.744326][T15391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 499.744339][T15391] Call Trace: [ 499.744347][T15391] [ 499.744355][T15391] dump_stack_lvl+0x189/0x250 [ 499.744390][T15391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.744418][T15391] ? __pfx__printk+0x10/0x10 [ 499.744436][T15391] ? stack_trace_save+0x9c/0xe0 [ 499.744469][T15391] print_circular_bug+0x2ee/0x310 [ 499.744491][T15391] check_noncircular+0x134/0x160 [ 499.744513][T15391] validate_chain+0xb9b/0x2140 [ 499.744543][T15391] __lock_acquire+0xab9/0xd20 [ 499.744572][T15391] ? nr_rt_ioctl+0x390/0xd50 [ 499.744589][T15391] lock_acquire+0x120/0x360 [ 499.744613][T15391] ? nr_rt_ioctl+0x390/0xd50 [ 499.744635][T15391] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 499.744658][T15391] ? nr_rt_ioctl+0x390/0xd50 [ 499.744676][T15391] _raw_spin_lock_bh+0x36/0x50 [ 499.744703][T15391] ? nr_rt_ioctl+0x390/0xd50 [ 499.744722][T15391] nr_rt_ioctl+0x390/0xd50 [ 499.744741][T15391] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 499.744777][T15391] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 499.744803][T15391] ? apparmor_capable+0x137/0x1b0 [ 499.744825][T15391] ? capable+0x89/0xe0 [ 499.744852][T15391] ? nr_ioctl+0x1b1/0x3b0 [ 499.744880][T15391] sock_do_ioctl+0xd9/0x300 [ 499.744902][T15391] ? __pfx_sock_do_ioctl+0x10/0x10 [ 499.744920][T15391] ? __lock_acquire+0xab9/0xd20 [ 499.744953][T15391] sock_ioctl+0x576/0x790 [ 499.744972][T15391] ? __pfx_sock_ioctl+0x10/0x10 [ 499.744991][T15391] ? __fget_files+0x2a/0x420 [ 499.745011][T15391] ? __fget_files+0x3a0/0x420 [ 499.745030][T15391] ? __fget_files+0x2a/0x420 [ 499.745052][T15391] ? bpf_lsm_file_ioctl+0x9/0x20 [ 499.745079][T15391] ? __pfx_sock_ioctl+0x10/0x10 [ 499.745097][T15391] __se_sys_ioctl+0xfc/0x170 [ 499.745125][T15391] do_syscall_64+0xfa/0x3b0 [ 499.745144][T15391] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.745161][T15391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.745179][T15391] ? clear_bhb_loop+0x60/0xb0 [ 499.745200][T15391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.745218][T15391] RIP: 0033:0x7fd338d8e929 [ 499.745235][T15391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.745251][T15391] RSP: 002b:00007fd336bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 499.745271][T15391] RAX: ffffffffffffffda RBX: 00007fd338fb5fa0 RCX: 00007fd338d8e929 [ 499.745285][T15391] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 499.745296][T15391] RBP: 00007fd338e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 499.745308][T15391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 499.745319][T15391] R13: 0000000000000000 R14: 00007fd338fb5fa0 R15: 00007ffd42279918 [ 499.745340][T15391]