last executing test programs: 4.030889533s ago: executing program 0 (id=1685): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r3, &(0x7f0000004340)={&(0x7f0000004100)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000004280)=[{&(0x7f0000004140)="2da1a5", 0x3}], 0x1, &(0x7f00000042c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x50}, 0x4000840) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRESDEC=r0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000a80c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000004d53c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000bb000000003c00000000000000fe80000000000000000000000000000e0000000000000000020000000000000001000000ac1414bb000000000000000000000000000000006c00000000000000ac1414aa0000000000000000000000000000000000030000000000000000000000000000fe8000000000000000000000000000aa000004d6330000000000000000000000000000000000ffffac1414bb0300000000008100000000000000000000000000fe880000000000000000000000000001fffffffe6c00000000000000e00000010000000000000000000000000000000000000300000000000000000000000000e002000000000000000000000000000000006d0000000a000000fc0100000000000000000000000000000000000004000200"/495], 0x23c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) sendmsg$inet(r3, &(0x7f0000004340)={&(0x7f0000004100)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000004280)=[{&(0x7f0000004140)="2da1a5", 0x3}], 0x1, &(0x7f00000042c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x50}, 0x4000840) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRESDEC=r0, @ANYRES32, @ANYBLOB="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"/495], 0x23c}}, 0x0) (async) 3.777740168s ago: executing program 0 (id=1689): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r1, &(0x7f0000000800)=[{{&(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000003c0)='XK', 0x2}, {0x0, 0x60}], 0x2}}], 0x1, 0x80) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0)={r2, 0x2, 0x7}, 0x8) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x2, &(0x7f00000002c0)=0x1, 0x4) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e24, 0xffff, @loopback, 0x5}, 0x1c) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r2, 0x400}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={r2, 0x915}, &(0x7f00000003c0)=0xc) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d080006007c02e8fc55a10a0015000600142603600e120800060000000401a8000100fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d", 0xa2}, {&(0x7f00000005c0)="b8cadd1b63d27c4fc2da", 0xa}, {&(0x7f0000000980)="84c03e5a63b49ad64070db02fc47dcbdcdc74d23d861c56fa46597169f24bf325d642f3d8ec69e6e1ba23958", 0x2c}], 0x3}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r5, 0x29, 0x1d, &(0x7f0000000200)={@empty}, 0x14) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2.835974573s ago: executing program 4 (id=1700): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c00168008000f00884827"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) 2.728173792s ago: executing program 0 (id=1701): r0 = socket$nl_route(0x10, 0x3, 0x0) close(r0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2.566536967s ago: executing program 0 (id=1703): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x400, 0x4140}}}}}}]}, 0x48}}, 0x0) sendmsg$inet(r0, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="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", 0x4c1}], 0x1, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x82, 0xd, "66581ddb34253c0556c786"}]}}}], 0x40}, 0x4) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000000)={0xfffffffffffffff8, 0x5, 0x1}) 2.522853068s ago: executing program 1 (id=1704): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="d40000001b000301000000000000000000000000000000000000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0010008a"], 0xd4}}, 0x0) 2.318080245s ago: executing program 4 (id=1707): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f00000000c0)=0x46, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15460100ef010000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB="0a0003"], 0x48}}, 0x0) 2.232157567s ago: executing program 0 (id=1708): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x7800, 0x1, 0x1, 0xfc1b, {{0xf, 0x4, 0x0, 0x2f, 0x3c, 0x65, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x26}, @multicast1, {[@timestamp={0x44, 0x10, 0xb8, 0x0, 0x8, [0x4, 0x7ff, 0xfffffc00]}, @ssrr={0x89, 0x17, 0xbf, [@remote, @rand_addr=0x64010100, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}]}}}}}) r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@abs={0x1}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv4_newnexthop={0x18, 0x68, 0x200, 0x70bd29, 0x25dfdbfb, {0x2, 0x0, 0x2, 0x0, 0x10}}, 0x18}, 0x1, 0x0, 0x0, 0x4048904}, 0x4) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 2.23140888s ago: executing program 1 (id=1709): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xe5a01e6e238456fc) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f00000000c0)=@netrom={'nr', 0x0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="380004000000010000000000000000000a000000ff0000000000000014000300736974300000000000000000000000000800060000000000"], 0x38}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xe, &(0x7f0000000200)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd0}}, @jmp={0x5, 0x0, 0x7, 0x9, 0x5, 0x1a}, @ldst={0x3, 0x0, 0x3, 0x3, 0x9, 0x6328db76b4dd6316}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x4, 0xa, 0xd7f, 0x9}, 0x10, 0x2f942, 0xffffffffffffffff, 0x7, &(0x7f0000000300)=[0x1], &(0x7f0000000340)=[{0x2, 0x2, 0x8, 0x8}, {0x5, 0x2, 0xa, 0x3}, {0x3, 0x2, 0xa, 0xa}, {0x1, 0x1, 0x2, 0x1}, {0x2, 0x2, 0x7, 0x4}, {0x5, 0x4, 0xd, 0x1}, {0x1, 0x4, 0x2, 0x1}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback=r1, 0x25, 0x0, 0x0, &(0x7f0000000480)=[0x0], 0x1, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0], 0x0}, 0x40) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup/syz0\x00', 0x200002, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x9, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @tail_call]}, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0xfa, &(0x7f0000000700)=""/250, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000840)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000880)=[{0x0, 0x2, 0x9, 0x8}, {0x2, 0x4, 0xe, 0x7}, {0x1, 0x3, 0x4, 0xa}, {0x1, 0x2, 0x9}, {0x1, 0x2, 0x5, 0x2}, {0x5, 0x5, 0x8}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@cgroup=r6, r4, 0x19, 0x10, 0x0, @void, @value=r7, @void, @void, r5}, 0x20) r8 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000140)="280320000a00140000007ef52f555f2a0c9fe67025c10806fbf719143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e666ee78895e16f37fe8c0295f5c4db4c60c", 0x48, 0x24000840, &(0x7f0000000080)={0x11, 0x86dd, r9, 0x1, 0xe2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x14) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xa, 0x18, 0x0, 0x0, @str='bond0\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.976193843s ago: executing program 2 (id=1712): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x8) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r1, &(0x7f0000000140)="8f0e1380a7000000000000a33e0c22c9e636778ca88000b3d2c7a348fbaf64e7bb4065de6bd6dddd8f116c077b9a02c70418fae6361b85e331373904cacda49e616dd0838af1dfffc1eadc3340dfba8aeb8bbaf68ef925ade0396d7553525f6ed05bcbb7bced322a16", 0x69) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x34, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x34}}, 0x4000000) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000001c00128009000100626f6e64000000000c0002800500010085000000c31466fcab3496c12e1a7dac8ad5739ba3a5f962dcbf07d2be8f6af48f83a54a17f9556dc7d732d378c3e03589057c5352d8c3e333c597e2d752c106da8691448f1dbeda31003d6eae76406ec810be4cd4b7991fd87a9461adf6b6a691b61ac22304dfbd244ff938a2e021c2cf0c70958ee2445806a8da5308485a41"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x40800) 1.924357993s ago: executing program 1 (id=1713): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0xc3, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000003000000", 0x30) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x84, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe}]}, 0x84}}, 0x80) 1.768049701s ago: executing program 2 (id=1715): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, r1, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x28}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x4000054) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, r1, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x28}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x4000054) (async) 1.741555319s ago: executing program 4 (id=1716): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22528, 0x800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x9}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/143, 0x8f}], 0x1}}], 0x2, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x810000}, 0xc) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r4) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, r7, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x30}}, 0x4800) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100261c0}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)=@delqdisc={0x2b8, 0x25, 0x8, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x6}, {0x10, 0xd}, {0xfff1, 0x5}}, [@qdisc_kind_options=@q_blackhole={0xe}, @TCA_STAB={0xf0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7f, 0x0, 0x3, 0x100, 0x2, 0xffff, 0x4, 0x1}}, {0x6, 0x2, [0x80]}}, {{0x1c, 0x1, {0x0, 0x75, 0xff, 0x9, 0x0, 0x1, 0x3, 0x1}}, {0x6, 0x2, [0x8001]}}, {{0x1c, 0x1, {0x0, 0x8, 0x5, 0x8, 0x0, 0x3, 0x88a, 0x3}}, {0xa, 0x2, [0x100, 0xc2c8, 0x6]}}, {{0x1c, 0x1, {0x3, 0x2, 0x1, 0x7ff, 0x2, 0x3, 0x7ff, 0x4}}, {0xc, 0x2, [0x0, 0x1000, 0x7, 0x691]}}, {{0x1c, 0x1, {0x4, 0x0, 0x294, 0x7, 0x0, 0x1, 0x7fffffff, 0x4}}, {0xc, 0x2, [0x2, 0x8000, 0x0, 0x7]}}, {{0x1c, 0x1, {0xc7, 0x2, 0xef5, 0x1, 0x0, 0x9, 0x2025, 0x6}}, {0x10, 0x2, [0x7, 0x8, 0x6, 0xe63, 0x3, 0x5]}}]}, @TCA_STAB={0xd8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x0, 0xf, 0xffff, 0x2, 0x608a, 0x7, 0x7}}, {0x12, 0x2, [0xffff, 0x9, 0x1, 0x2, 0x26, 0x3, 0x4]}}, {{0x1c, 0x1, {0x4, 0x7, 0x7, 0xfffffffe, 0x2, 0xffffffff, 0x1, 0x3}}, {0xa, 0x2, [0xc000, 0x3ff, 0x66]}}, {{0x1c, 0x1, {0x1, 0x3, 0x3ff, 0x401, 0x1, 0x40, 0x80000001, 0x2}}, {0x8, 0x2, [0xa07, 0x9]}}, {{0x1c, 0x1, {0x7f, 0x9, 0x7, 0xb8000000, 0x2, 0xfffffffc, 0x2, 0x3}}, {0xa, 0x2, [0xffff, 0x5, 0xade9]}}, {{0x1c, 0x1, {0x10, 0x8, 0x8, 0x35634, 0x1, 0xffffffff, 0x8, 0x7}}, {0x12, 0x2, [0x9, 0x8, 0x4, 0xa2c, 0xfffd, 0x200, 0x6]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_RATE={0x6, 0x5, {0xd, 0x1}}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x5, 0xb, 0x3ff, 0x2, 0x7, 0x4, 0x1}}, {0x6, 0x2, [0x80]}}, {{0x1c, 0x1, {0xfb, 0x2, 0x3, 0x101, 0x0, 0x3, 0x7ff, 0x5}}, {0xe, 0x2, [0x8, 0x200, 0x1, 0xff00, 0x8]}}, {{0x1c, 0x1, {0x8, 0x7c, 0x24, 0xd52e, 0x2, 0x2a, 0x37, 0x6}}, {0x10, 0x2, [0x3, 0x0, 0x1, 0x2, 0x80, 0xa4f1]}}, {{0x1c, 0x1, {0xb, 0x5, 0x8eb1, 0x82a, 0x1, 0xd, 0x8, 0x6}}, {0x10, 0x2, [0x5, 0x1000, 0x8, 0x4, 0x9, 0x2]}}]}]}, 0x2b8}}, 0x800) 1.696869279s ago: executing program 1 (id=1717): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000001"], 0xa) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="250276671e8222f42e4cc8d7c1181dcee8d1c3493f677bfb084de98925", @ANYRESDEC=r1, @ANYBLOB="3027c0f34df78f1a172c2c5c7061254e3a46d7df9db6c1591512cfad9684e9db34bd0a0b19ab0ee828513632d353e88712da17c65130be918f30b7851aaf1bcb98dc3999d329918fb12c31c435e304b07ca2725210fd0f9edd65edc0cdb2a2ec4d90b86b2a4563a96c3175fce8e397572e4673259816045291bb988b4c5ec5926f2c9e75d298c713ab7c999305e3e64ffe272fc85ef164c293d8d85f8ca8fe74a36f49783c701209cb95b1e66138189b813a3c0146e82e9d503590185599404aa584e81a7338003e6176f802"], 0x1c}], 0x1, 0x0, 0x0, 0x40}, 0x0) 1.607402528s ago: executing program 0 (id=1719): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1ff}, 0x8) 1.440860423s ago: executing program 1 (id=1720): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x3}, @TCA_FQ_QUANTUM={0xffffffffffffff0f}]}}]}, 0x48}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xa0}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7, 0xfffb}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="9c0000001000030400"/20, @ANYRES32, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c000280060001"], 0x9c}, 0x1, 0xba01}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00"], 0x528}}, 0xc000) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$key(r3, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090b000000000000000000000003000600000000000200000000000000000000000000000002000100000000000000fb0200000000030005000000000002000000ac1414aa0000000000000000010008000029"], 0x58}, 0x1, 0x7}, 0x0) 1.29203446s ago: executing program 4 (id=1722): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syzkaller1\x00', &(0x7f0000000140)=@ethtool_cmd={0x3}}) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x64, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100), 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syzkaller1\x00', &(0x7f0000000140)=@ethtool_cmd={0x3}}) (async) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x64, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) 1.288850795s ago: executing program 2 (id=1723): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001000390429bd70000000000000000000", @ANYRES32=r6, @ANYBLOB="019800000100ba79795458e22ffd345b"], 0x38}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004) sendto$packet(r3, &(0x7f0000000900)="31696ddd20c5926100ea235ce7a83eab0614", 0x12, 0x40, &(0x7f0000000200)={0x11, 0x8100, r6, 0x1, 0x7, 0x6, @random="734c594dead2"}, 0x14) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x20, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x7, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x9}, @random="589733b902f1", @device_b, @device_a, {0x2, 0x500}, "", @void, @value=@ver_80211n={0x0, 0xdf, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @a_msdu}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.251298259s ago: executing program 3 (id=1724): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x62b8, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8}, 0x50) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x4, 0x0, 0x8, 0x3e, 0x9, 0xe8, 0xa0, 0x4, 0x3, 0x0, 0x3, 0x6, 0x1}, 0xe) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x200, 0xfffffffd, 0x2, {0x0, 0x0, 0x0, 0x0, 0xd088, 0xc574450d1af3b5ac}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000000) syz_emit_ethernet(0x7e, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @private=0xa010100, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@local}, {@loopback}, {@loopback}]}, @cipso={0x86, 0x1e, 0x0, [{0x0, 0x12, "00000000000000963d096612e35232da"}, {0x0, 0x4, "4eb8"}, {0x0, 0x2}]}, @ssrr={0x89, 0x3}]}}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) r5 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000340)=0x60) accept$nfc_llcp(r5, &(0x7f00000004c0), &(0x7f0000000380)=0x60) bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000040)={r4, 0x7fff, 0x1, 0x5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000002c0)=@ccm_128={{0x7}, "0200", "1b63040001000400", '\f\x00', "6ad3e9e1505b5e1e"}, 0x28) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r9) sendmsg$IEEE802154_LLSEC_SETPARAMS(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="190026bd7000ffdbdf25250000000c002d000201aaaaaaaaaaaa05002e00bd00000005002b0003000000060006000200000008000200", @ANYRES32=r8, @ANYBLOB="060004000000000005002a"], 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x44004094) setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xc8, 0x0, 0xc000000) r11 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r11, 0x0, 0x0, 0x40800, &(0x7f0000000100)={0xa, 0x4e21, 0xbdb, @local, 0x7}, 0x1c) 939.687811ms ago: executing program 3 (id=1725): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x24008800) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000280)={0x3, &(0x7f0000000100)=[{0x28, 0x0, 0xf9, 0xfffff030}, {0x4d, 0x0, 0x0, 0x3}, {0x6}]}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xff, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x1, [@bcast, @default, @default, @bcast, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000076000104000000000002000000000000", @ANYRES32=0x0, @ANYBLOB="080001"], 0x20}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x5}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000043) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)=@delqdisc={0xc8, 0x25, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0x1}, {0x2, 0xc}, {0x9, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xc7}}, @qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0x200, 0x1d, 0x2, 0x8, 0x8001, 0x2}}, {0x8, 0x2, [0x722, 0x5]}}, {{0x1c, 0x1, {0x9, 0xff, 0x24fa, 0x94e, 0x1, 0x9, 0xc51b, 0x3}}, {0xa, 0x2, [0x8, 0x7fff, 0x6]}}, {{0x1c, 0x1, {0x6, 0x3, 0x9, 0x3, 0x2, 0x2, 0x2, 0x2}}, {0x8, 0x2, [0x2, 0x5]}}]}, @TCA_RATE={0x6, 0x5, {0x8, 0x6}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9ae5}]}, 0xc8}, 0x1, 0x0, 0x0, 0x22008000}, 0x20084085) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6, 0xffffffffffffffff}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000bb00007b8a00fe0000000087080000000000007b8af0ff00000000bda1ac6716f39f00000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70400000800000085000000490000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff48, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r2) 871.877551ms ago: executing program 2 (id=1726): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@gettaction={0x14, 0x32, 0x20, 0x70bd25, 0x25dfdbfb}, 0x14}}, 0x8004) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2e, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x698472dc6a8b23b9, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x10040000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d6163736563000014000280050009000200"], 0x44}}, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r4, &(0x7f0000002a40)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000003f00)=[{&(0x7f0000000280)="91dad46fd2bb24e0a5bb07ff1b5eb9de93b18c9f5998ceec770b2788b6cff9257393787213c8d7cf835b19256e3f5e80ba57cf3d3571f8eee6c75fd5809c705ba3059acc6daf0091", 0x48}, {&(0x7f00000013c0)="294b67d2ae260d8c9caec5120aac812705c5bde622647261f520565559fb17774480a1f293d61bc28c9a44e25f47", 0x2e}, {&(0x7f0000002c80)="0c1aedbb52942f0b261442c5311e747e6d33856799d21bdd3037ccc6e1c462dc38d506c602d058176f8121314af3134701e893eeee925675d2044e1f4d69e89c12764e73d392ba3bed27b5c01d440a66cce35a536ab09b44d2be550f69a1e9e2d933bbe46303524fa79bbb2f19edc90591845ea33a7a8655b23afa732b291de2fc86a6fafd4c84fcdd1d8b58e2b323d9fc76f0daa3f3753941ea008c5c1b32fec247e2ec87c855858b02f2d624d9ed938ca77291985b8b0cce7dcc80fcca878fbf9190b25e0b200e1607b3d53f7c1e982d294b5366c441ea11ac48599e89a2fc521b46cfdd", 0xe5}, {&(0x7f0000002d80)="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", 0x446}, {0x0}], 0x5}}, {{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000002780)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002a00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x18}}], 0x4, 0x20004086) 867.27447ms ago: executing program 4 (id=1727): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000040)=ANY=[@ANYBLOB="d6ddfbc6822fe2c77390a843cf807329dcbc", @ANYRES16=r4, @ANYBLOB="010000000000fcdbdf251200000008000300", @ANYRES32=r5, @ANYBLOB="0a000600ffffffffffff00000800118004000500"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f00000002c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x1}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000c40)="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", 0x227}, {&(0x7f0000000e80)="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", 0x386}], 0x2}, 0x48404) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)="9d", 0x1}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r7, &(0x7f0000000180)={0x1d, r8}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x2, &(0x7f0000000000)=0x5cfa, 0x4) bind$can_raw(r7, &(0x7f0000000480), 0x10) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=r6, @ANYBLOB="83060067726500001400028008000500090000000800010040805390273b3677196e2733f2632192739396b55fe740b2397a5d1fb531e5b2806c", @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000008a80), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000008b00)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r10, &(0x7f0000008c00)={0x0, 0x0, &(0x7f0000008bc0)={&(0x7f0000008b40)={0x1c, r11, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000800) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x60, r11, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_SEC_DEVICE={0x44, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20000890) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000380)={0x2, 0xe1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4) r15 = accept4$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14, 0x0) ioctl$sock_SIOCETHTOOL(r15, 0x8946, &(0x7f0000000340)={'vlan0\x00', &(0x7f0000000280)=@ethtool_sset_info={0x37, 0x23ff, 0x1, [0x0, 0x6, 0x10000, 0x4]}}) 657.560161ms ago: executing program 3 (id=1728): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f00000000c0)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x118, r1, 0x20, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x249f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0xa1d}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9d2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff9}]}, 0x118}, 0x1, 0x0, 0x0, 0x1}, 0x0) 567.893662ms ago: executing program 1 (id=1729): socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000000600000001228290081e949b93897bc3b0000000040007d01ff020000000000000000000000000001"], 0xfdef) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast2}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0x1c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "3f25378bcaaee148996b36d592161073a2"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'dummy0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2b780af2}]}]}], {0x14}}, 0x90}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0006"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc01000039000100000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000a80c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004010500ac1414aa000000000000000000000000000004d53c00000000000000ffffffff0000000000000000000000000000000000000100000000000000000000000000fe8000000000000000000000000000bb000000003c00000000000000200100000000000000000000000000010000000000000000000800000000000001000000ac1414bb000000000000000000000000000000006c00000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000006d0000000a000000fc0100000000000000000000000000000000000004000200"/372], 0x1bc}}, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB="0100000000000000000003000000400001800d0001007564703a73797a31000000002c0004001400010002004e23ac1414aa000000000000000074e1673eb032d6abe00000020000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="00000000000000000000000000002467c4f2594f8e7713b299248ebb4b3ec0bb78694913b908fc93d4caf0ff640168c5514a2737f2a96332e6b6216fa148062759075fb41fe2f0851b81320ab14b71334860784ae7021285fc3921d7dc2ddcca3596c067ec770ad6f787f22bda7c8e2e9f711af2a1ff3a401c13db05302ebe8a4987e39a385d537e47d1c92c03423b2ec64f7652fbee73086c41ddb573ff19a64ec8cd1681e58b263d5252eacac068e9f3901dd07e5dcdbfdf2b39419c51a472f2b483fd0ef679128c89413bd4785ec009e87a1f7757241dd065c60f57de6870bc6bce93f2c938edae", @ANYRES16=r9, @ANYBLOB="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"], 0x1f4}, 0x1, 0x0, 0x0, 0x15}, 0x24000010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x53}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)}, 0x0) 559.206494ms ago: executing program 2 (id=1730): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.bfq.empty_time\x00', 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1, 0x4, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1}, 0x6e) bind$unix(r2, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e) 458.23064ms ago: executing program 3 (id=1731): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0xfffffffffffffff5, 0x4, 0x13e1}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xa, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 400.165403ms ago: executing program 4 (id=1732): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000300)="80fd0fa67941", 0x6}], 0x1, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000340)={'filter\x00', 0x0, 0x4, 0xc2, [0x3dbd, 0x9f6, 0xb, 0x9, 0xffffffff, 0xa], 0x3, &(0x7f0000000100)=[{}, {}, {}], &(0x7f0000000240)=""/194}, &(0x7f0000000140)=0x78) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="00200000ffffffffffffaaaaaaaaaabb08004500006cd26d07ccbba9401723fdc4a6aaa2f50000299078ac1e0001e000000103000000002a907802002a0000000000ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099bdac9"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r6, 0xff04, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)) ioctl$FICLONERANGE(r8, 0x4020940d, &(0x7f0000000000)={{r8}}) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSNPMODE(r7, 0x4008744b, &(0x7f0000000080)={0x29}) 349.378191ms ago: executing program 2 (id=1733): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd26}, 0x10}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c720000000000000000000002000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) 261.205514ms ago: executing program 3 (id=1734): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0x35, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xde, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x6, 0x4, 0x9, 0x1000, 0xffffffffffffffff, 0x0, '\x00', r0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r1}, 0x50) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14, 0xc0000) recvfrom$packet(r3, &(0x7f0000000400)=""/154, 0x9a, 0x140, &(0x7f0000000540)={0x11, 0x1b, r0, 0x1, 0xd2}, 0x14) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@rand_addr=0x4, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x4d3, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8, 0x1}}, 0xe8) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x80}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r8, 0x0) r9 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r9, 0x80044944, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r11, &(0x7f0000000000)="240000001a00590214f9f407000904101f00000000000000000200000800040001000000", 0x24) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) 0s ago: executing program 3 (id=1735): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x5d}}, &(0x7f0000000480)='GPL\x00'}, 0x90) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r2, 0x5) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newchain={0x2c, 0x64, 0x30, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xa, 0xffe0}, {0x8, 0x2d993314525b4692}, {0xfff3, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8864}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x8080}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r11, {0x6, 0x7}, {}, {0x7, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x7, 0xcd}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x0) accept$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f0000000180)=0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.136' (ED25519) to the list of known hosts. [ 83.189236][ T5828] cgroup: Unknown subsys name 'net' [ 83.381928][ T5828] cgroup: Unknown subsys name 'cpuset' [ 83.391789][ T5828] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.073894][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.897021][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.906782][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.915205][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.923511][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.932461][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.941084][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.942379][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.949264][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.955765][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.964893][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.970103][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.977361][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.984805][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.997749][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.998587][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.016527][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.031147][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.033531][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.048580][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.049449][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.063982][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.072529][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.083218][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.091712][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.100245][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.814656][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 89.826418][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 89.883677][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 89.992659][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 90.050048][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 90.124580][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.132878][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.144795][ T5853] bridge_slave_0: entered allmulticast mode [ 90.153386][ T5853] bridge_slave_0: entered promiscuous mode [ 90.164337][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.171989][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.181006][ T5853] bridge_slave_1: entered allmulticast mode [ 90.193123][ T5853] bridge_slave_1: entered promiscuous mode [ 90.268842][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.276035][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.283316][ T5840] bridge_slave_0: entered allmulticast mode [ 90.291530][ T5840] bridge_slave_0: entered promiscuous mode [ 90.351320][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.358605][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.366343][ T5840] bridge_slave_1: entered allmulticast mode [ 90.374569][ T5840] bridge_slave_1: entered promiscuous mode [ 90.411682][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.452546][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.477452][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.500616][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.508634][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.515923][ T5846] bridge_slave_0: entered allmulticast mode [ 90.523517][ T5846] bridge_slave_0: entered promiscuous mode [ 90.534636][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.609323][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.616610][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.623971][ T5846] bridge_slave_1: entered allmulticast mode [ 90.632848][ T5846] bridge_slave_1: entered promiscuous mode [ 90.670916][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.678136][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.685578][ T5845] bridge_slave_0: entered allmulticast mode [ 90.693288][ T5845] bridge_slave_0: entered promiscuous mode [ 90.702988][ T5853] team0: Port device team_slave_0 added [ 90.713025][ T5853] team0: Port device team_slave_1 added [ 90.719385][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.726682][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.734228][ T5839] bridge_slave_0: entered allmulticast mode [ 90.741585][ T5839] bridge_slave_0: entered promiscuous mode [ 90.778025][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.785195][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.792710][ T5845] bridge_slave_1: entered allmulticast mode [ 90.800402][ T5845] bridge_slave_1: entered promiscuous mode [ 90.835106][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.842329][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.849791][ T5839] bridge_slave_1: entered allmulticast mode [ 90.857622][ T5839] bridge_slave_1: entered promiscuous mode [ 90.893502][ T5840] team0: Port device team_slave_0 added [ 90.929002][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.935979][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.962624][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.991336][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.005015][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.021728][ T5840] team0: Port device team_slave_1 added [ 91.030847][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.041060][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.048382][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.074509][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.088173][ T5847] Bluetooth: hci4: command tx timeout [ 91.089356][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.093992][ T5851] Bluetooth: hci1: command tx timeout [ 91.110861][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.148856][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.167492][ T5851] Bluetooth: hci3: command tx timeout [ 91.167511][ T5854] Bluetooth: hci0: command tx timeout [ 91.167880][ T5847] Bluetooth: hci2: command tx timeout [ 91.222146][ T5846] team0: Port device team_slave_0 added [ 91.246150][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.253316][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.279855][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.313419][ T5845] team0: Port device team_slave_0 added [ 91.336095][ T5846] team0: Port device team_slave_1 added [ 91.342868][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.350703][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.377135][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.397578][ T5845] team0: Port device team_slave_1 added [ 91.406085][ T5839] team0: Port device team_slave_0 added [ 91.415163][ T5839] team0: Port device team_slave_1 added [ 91.491693][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.498743][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.524846][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.538419][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.545396][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.571840][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.668948][ T5840] hsr_slave_0: entered promiscuous mode [ 91.675484][ T5840] hsr_slave_1: entered promiscuous mode [ 91.683111][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.690308][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.716638][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.733344][ T5853] hsr_slave_0: entered promiscuous mode [ 91.740364][ T5853] hsr_slave_1: entered promiscuous mode [ 91.746557][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 91.752766][ T5853] Cannot create hsr debugfs directory [ 91.759371][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.766416][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.792489][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.805639][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.812993][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.839226][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.874461][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.881604][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.910837][ T24] cfg80211: failed to load regulatory.db [ 91.916795][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.019515][ T5846] hsr_slave_0: entered promiscuous mode [ 92.026073][ T5846] hsr_slave_1: entered promiscuous mode [ 92.032633][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 92.038446][ T5846] Cannot create hsr debugfs directory [ 92.180350][ T5839] hsr_slave_0: entered promiscuous mode [ 92.186947][ T5839] hsr_slave_1: entered promiscuous mode [ 92.193666][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 92.199497][ T5839] Cannot create hsr debugfs directory [ 92.231455][ T5845] hsr_slave_0: entered promiscuous mode [ 92.238259][ T5845] hsr_slave_1: entered promiscuous mode [ 92.244400][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 92.250840][ T5845] Cannot create hsr debugfs directory [ 92.735727][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.751624][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.762836][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.784535][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.863492][ T5853] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.874200][ T5853] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.887000][ T5853] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.911388][ T5853] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.996612][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.008439][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.019701][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.032650][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.155189][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.168305][ T5847] Bluetooth: hci1: command tx timeout [ 93.168353][ T5851] Bluetooth: hci4: command tx timeout [ 93.191808][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.211302][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.232919][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.245729][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.252665][ T5851] Bluetooth: hci2: command tx timeout [ 93.252764][ T5854] Bluetooth: hci3: command tx timeout [ 93.263933][ T5847] Bluetooth: hci0: command tx timeout [ 93.319870][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.364834][ T1336] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.372130][ T1336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.403958][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.411206][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.458096][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.472385][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.484723][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.496920][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.542576][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.618127][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.633026][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.685626][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.692825][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.731847][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.739027][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.803474][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.815512][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.841873][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.849074][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.882070][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.889317][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.924027][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.009803][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.016995][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.048959][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.056314][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.129441][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.163142][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.242717][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.272681][ T3457] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.279955][ T3457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.344395][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.351616][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.501253][ T5840] veth0_vlan: entered promiscuous mode [ 94.544302][ T5840] veth1_vlan: entered promiscuous mode [ 94.662793][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.696921][ T5840] veth0_macvtap: entered promiscuous mode [ 94.730360][ T5840] veth1_macvtap: entered promiscuous mode [ 94.791957][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.874083][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.922378][ T3457] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.935324][ T3457] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.953198][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.968184][ T3457] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.977561][ T152] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.085306][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.252109][ T5854] Bluetooth: hci1: command tx timeout [ 95.254896][ T5847] Bluetooth: hci4: command tx timeout [ 95.286896][ T1336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.312344][ T1336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.328290][ T5847] Bluetooth: hci3: command tx timeout [ 95.328338][ T5854] Bluetooth: hci0: command tx timeout [ 95.333746][ T5851] Bluetooth: hci2: command tx timeout [ 95.357946][ T5845] veth0_vlan: entered promiscuous mode [ 95.384531][ T5846] veth0_vlan: entered promiscuous mode [ 95.396154][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.421599][ T5846] veth1_vlan: entered promiscuous mode [ 95.434360][ T1336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.444156][ T1336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.453814][ T5845] veth1_vlan: entered promiscuous mode [ 95.565023][ T5846] veth0_macvtap: entered promiscuous mode [ 95.565630][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.583672][ T5846] veth1_macvtap: entered promiscuous mode [ 95.596225][ T5839] veth0_vlan: entered promiscuous mode [ 95.622851][ T5845] veth0_macvtap: entered promiscuous mode [ 95.645862][ T5839] veth1_vlan: entered promiscuous mode [ 95.671858][ T5845] veth1_macvtap: entered promiscuous mode [ 95.713596][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.745154][ T5853] veth0_vlan: entered promiscuous mode [ 95.791754][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.810541][ T5853] veth1_vlan: entered promiscuous mode [ 95.845143][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.866277][ T5957] Zero length message leads to an empty skb [ 95.894282][ T152] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.919203][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.933722][ T152] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.947186][ T5839] veth0_macvtap: entered promiscuous mode [ 95.968976][ T152] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.996992][ T3457] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.021512][ T5839] veth1_macvtap: entered promiscuous mode [ 96.070949][ T3457] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.094087][ T3457] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.104245][ T3457] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.132123][ T3457] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.171194][ T5853] veth0_macvtap: entered promiscuous mode [ 96.185421][ T1336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.228646][ T1336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.238366][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.265014][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.284398][ T5853] veth1_macvtap: entered promiscuous mode [ 96.310869][ T5969] netlink: 'syz.1.7': attribute type 1 has an invalid length. [ 96.320801][ T3457] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.331728][ T1336] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.377371][ T1336] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.424615][ T3457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.435301][ T1336] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.450374][ T3457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.463436][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.503610][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.603938][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.636665][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.671305][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.689200][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.727996][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.806774][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.843725][ T3492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.896475][ T3492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.957379][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.965332][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.145543][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.197171][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.236534][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.289016][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.330231][ T5851] Bluetooth: hci1: command tx timeout [ 97.333993][ T5854] Bluetooth: hci4: command tx timeout [ 97.412196][ T5992] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.417231][ T5854] Bluetooth: hci2: command tx timeout [ 97.423720][ T5851] Bluetooth: hci0: command tx timeout [ 97.429085][ T5847] Bluetooth: hci3: command tx timeout [ 97.581975][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.637569][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.855797][ T6021] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.431168][ T6043] netlink: 6 bytes leftover after parsing attributes in process `syz.0.21'. [ 98.475505][ T6043] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.557423][ T6049] unknown channel width for channel at 909000KHz? [ 98.596046][ T6049] unknown channel width for channel at 909000KHz? [ 98.621007][ T6055] netlink: 56 bytes leftover after parsing attributes in process `syz.4.23'. [ 98.636575][ T6049] unknown channel width for channel at 909000KHz? [ 98.637497][ T6053] netlink: 'syz.3.24': attribute type 6 has an invalid length. [ 98.680705][ T6053] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.24'. [ 98.907229][ T6067] netlink: 'syz.4.29': attribute type 1 has an invalid length. [ 98.940647][ T6068] netlink: 48 bytes leftover after parsing attributes in process `syz.0.27'. [ 99.014403][ T6070] netlink: 28 bytes leftover after parsing attributes in process `syz.4.29'. [ 99.027498][ T6069] netlink: 20 bytes leftover after parsing attributes in process `syz.0.27'. [ 99.838252][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'. [ 100.468918][ T6114] team0: Device xfrm1 is of different type [ 100.675145][ T6119] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.695757][ T6121] delete_channel: no stack [ 101.395216][ T6149] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 101.513531][ T6149] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 101.633272][ T6170] netlink: 'syz.0.54': attribute type 1 has an invalid length. [ 101.681911][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.56'. [ 101.851475][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.57'. [ 101.983642][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.59'. [ 102.276262][ T6192] tipc: Enabling of bearer rejected, failed to enable media [ 102.672025][ T6224] netlink: 'syz.4.65': attribute type 1 has an invalid length. [ 104.182589][ T6281] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 104.222860][ T6286] __nla_validate_parse: 4 callbacks suppressed [ 104.222877][ T6286] netlink: 6 bytes leftover after parsing attributes in process `syz.4.83'. [ 104.271252][ T6286] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.400653][ T6292] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 104.456274][ T6290] bridge_slave_0: left allmulticast mode [ 104.479609][ T6290] bridge_slave_0: left promiscuous mode [ 104.493843][ T6290] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.536347][ T6290] bridge_slave_1: left allmulticast mode [ 104.547256][ T6290] bridge_slave_1: left promiscuous mode [ 104.561072][ T6290] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.640234][ T6290] bond0: (slave bond_slave_0): Releasing backup interface [ 104.667878][ T6290] bond0: (slave bond_slave_1): Releasing backup interface [ 104.684303][ T6290] team0: Port device team_slave_0 removed [ 104.714211][ T6290] team0: Port device team_slave_1 removed [ 104.721202][ T6290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.730083][ T6290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.744709][ T6290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.752703][ T6290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.879923][ T6299] team0: Mode changed to "loadbalance" [ 104.903172][ T6301] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 104.951647][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.86'. [ 105.005323][ T6295] vlan0: entered promiscuous mode [ 105.052616][ T6295] team0: Port device vlan0 added [ 105.277760][ T6326] netlink: 256 bytes leftover after parsing attributes in process `syz.0.92'. [ 105.474049][ T6335] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.563435][ T6341] netlink: 'syz.1.96': attribute type 1 has an invalid length. [ 105.676333][ T6335] netlink: 16 bytes leftover after parsing attributes in process `syz.0.94'. [ 105.693586][ T6341] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.817307][ T6347] tipc: Started in network mode [ 105.822246][ T6347] tipc: Node identity ded6d3184dfa, cluster identity 4711 [ 105.834084][ T6347] tipc: Enabled bearer , priority 0 [ 105.851160][ T6351] syzkaller0: entered promiscuous mode [ 105.862012][ T6351] syzkaller0: entered allmulticast mode [ 105.883900][ T6347] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 105.929735][ T6347] tipc: Resetting bearer [ 105.975471][ T6355] sctp: [Deprecated]: syz.1.98 (pid 6355) Use of int in max_burst socket option. [ 105.975471][ T6355] Use struct sctp_assoc_value instead [ 106.415382][ T6367] netlink: 16 bytes leftover after parsing attributes in process `syz.3.103'. [ 106.507428][ T6346] tipc: Resetting bearer [ 106.581987][ T6346] tipc: Disabling bearer [ 106.963754][ T6390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.110'. [ 106.968283][ T6395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.111'. [ 107.083375][ T6403] pim6reg: entered allmulticast mode [ 107.149219][ T6408] syz.0.109 uses obsolete (PF_INET,SOCK_PACKET) [ 107.431697][ T6413] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 107.442874][ T6413] netdevsim netdevsim2: Falling back to sysfs fallback for: [ 107.452706][ T6414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.116'. [ 107.491344][ T6424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.117'. [ 108.781483][ T6482] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 108.793706][ T6481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.131'. [ 108.899074][ T6486] syzkaller1: entered promiscuous mode [ 108.914346][ T6486] syzkaller1: entered allmulticast mode [ 109.145620][ T6500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.250201][ T6504] netlink: zone id is out of range [ 109.269958][ T6504] __nla_validate_parse: 2 callbacks suppressed [ 109.269978][ T6504] netlink: 24 bytes leftover after parsing attributes in process `syz.1.137'. [ 109.948748][ T6535] team_slave_0: mtu greater than device maximum [ 110.412939][ T6560] Bluetooth: MGMT ver 1.23 [ 110.629381][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.155'. [ 110.685261][ T6570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.751409][ T6570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.977937][ T6581] netlink: 'syz.3.159': attribute type 1 has an invalid length. [ 111.284388][ T6593] netlink: 5 bytes leftover after parsing attributes in process `syz.2.163'. [ 111.335404][ T6595] netlink: 'syz.4.166': attribute type 1 has an invalid length. [ 111.388275][ T6600] netlink: 28 bytes leftover after parsing attributes in process `syz.4.166'. [ 111.432302][ T6598] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 111.661261][ T6595] netlink: 28 bytes leftover after parsing attributes in process `syz.4.166'. [ 111.680077][ T6611] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 111.702060][ T6620] netlink: 20 bytes leftover after parsing attributes in process `syz.2.168'. [ 111.715048][ T6611] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 111.754209][ T6615] bond1: (slave gretap1): making interface the new active one [ 111.778511][ T6615] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 111.816320][ T6595] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.928156][ T6623] netlink: 104 bytes leftover after parsing attributes in process `syz.1.172'. [ 112.156313][ T6631] netlink: 656 bytes leftover after parsing attributes in process `syz.4.174'. [ 112.300935][ T6638] Driver unsupported XDP return value 0 on prog (id 37) dev N/A, expect packet loss! [ 112.356587][ T6644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.178'. [ 112.420984][ T6651] syzkaller0: entered promiscuous mode [ 112.459535][ T6651] syzkaller0: entered allmulticast mode [ 112.678874][ T6662] netlink: 24 bytes leftover after parsing attributes in process `syz.3.183'. [ 112.697547][ T6658] netlink: 'syz.4.182': attribute type 1 has an invalid length. [ 112.727409][ T6658] netlink: 'syz.4.182': attribute type 2 has an invalid length. [ 113.063427][ T6687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.542107][ T6716] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 113.555081][ T6716] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 113.566210][ T6716] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 114.717950][ T6774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.760799][ T6770] bond0: entered promiscuous mode [ 114.778746][ T6770] bond_slave_0: entered promiscuous mode [ 114.806088][ T6770] bond_slave_1: entered promiscuous mode [ 114.839290][ T6770] batadv0: entered promiscuous mode [ 114.880255][ T6770] hsr1: entered allmulticast mode [ 114.895154][ T6770] bond0: entered allmulticast mode [ 114.934516][ T6770] bond_slave_0: entered allmulticast mode [ 114.946302][ T6770] bond_slave_1: entered allmulticast mode [ 114.952717][ T6770] batadv0: entered allmulticast mode [ 114.959148][ T6770] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 114.976880][ T6770] bond0: left promiscuous mode [ 114.996619][ T6770] bond_slave_0: left promiscuous mode [ 115.002790][ T6770] bond_slave_1: left promiscuous mode [ 115.023615][ T6770] batadv0: left promiscuous mode [ 115.091658][ T6779] __nla_validate_parse: 6 callbacks suppressed [ 115.091677][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.210'. [ 115.262971][ T6789] rdma_op ffff8880540cc9f0 conn xmit_rdma 0000000000000000 [ 115.392903][ T6797] netlink: 'syz.1.216': attribute type 1 has an invalid length. [ 115.424139][ T6797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.216'. [ 115.438424][ T6799] netlink: 'syz.3.217': attribute type 33 has an invalid length. [ 115.462741][ T6799] netlink: 152 bytes leftover after parsing attributes in process `syz.3.217'. [ 115.478150][ T6797] netlink: 'syz.1.216': attribute type 32 has an invalid length. [ 115.509238][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.217'. [ 115.685083][ T6810] netlink: 'syz.4.219': attribute type 83 has an invalid length. [ 115.811772][ T6813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.220'. [ 116.054233][ T1336] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.098722][ T1336] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.145923][ T1336] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.211347][ T1336] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.261235][ T6832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.225'. [ 116.327595][ T6832] chnl_net:caif_netlink_parms(): no params data found [ 116.566779][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.229'. [ 117.396873][ T6889] netlink: 'syz.4.234': attribute type 21 has an invalid length. [ 117.437868][ T6889] netlink: 128 bytes leftover after parsing attributes in process `syz.4.234'. [ 117.456220][ T6887] sctp: [Deprecated]: syz.2.233 (pid 6887) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.456220][ T6887] Use struct sctp_sack_info instead [ 117.478433][ T6889] netlink: 'syz.4.234': attribute type 4 has an invalid length. [ 117.486148][ T6889] netlink: 'syz.4.234': attribute type 5 has an invalid length. [ 117.530938][ T6896] netlink: 'syz.4.234': attribute type 21 has an invalid length. [ 117.569924][ T6889] netlink: 3 bytes leftover after parsing attributes in process `syz.4.234'. [ 117.603508][ T6896] netlink: 128 bytes leftover after parsing attributes in process `syz.4.234'. [ 117.682362][ T6896] netlink: 'syz.4.234': attribute type 4 has an invalid length. [ 117.702199][ T6896] netlink: 'syz.4.234': attribute type 5 has an invalid length. [ 117.931135][ T6897] syzkaller0: entered promiscuous mode [ 117.951517][ T6897] syzkaller0: entered allmulticast mode [ 118.095517][ T6919] IPVS: set_ctl: invalid protocol: 47 172.30.0.5:20004 [ 118.194942][ T1332] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.238084][ T1332] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.295205][ T6932] netlink: 'syz.4.244': attribute type 7 has an invalid length. [ 119.511300][ T1332] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.520441][ T1332] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.949629][ T6959] syzkaller0: entered promiscuous mode [ 119.977885][ T6959] syzkaller0: entered allmulticast mode [ 120.067890][ T6971] vlan2: entered promiscuous mode [ 120.124028][ T6982] nftables ruleset with unbound chain [ 120.131577][ T6971] vlan2: entered allmulticast mode [ 120.156541][ T6971] hsr_slave_1: entered allmulticast mode [ 120.482258][ T6997] netlink: 'syz.4.257': attribute type 30 has an invalid length. [ 120.496187][ T6998] __nla_validate_parse: 5 callbacks suppressed [ 120.496205][ T6998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.258'. [ 120.603265][ T7004] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 121.474179][ T6997] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 121.483556][ T6997] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 121.637570][ T7007] netlink: 108 bytes leftover after parsing attributes in process `syz.3.260'. [ 121.772202][ T7021] openvswitch: netlink: Missing key (keys=40, expected=100) [ 122.694036][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.273'. [ 122.740514][ T7069] netlink: 28 bytes leftover after parsing attributes in process `syz.4.276'. [ 122.775075][ T7069] netlink: 11 bytes leftover after parsing attributes in process `syz.4.276'. [ 123.031551][ T7079] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒžóúz [ 123.407788][ T7092] team0: Device ip6gre1 is of different type [ 123.457371][ T7101] netlink: 224 bytes leftover after parsing attributes in process `syz.0.284'. [ 123.493900][ T7101] netlink: 212388 bytes leftover after parsing attributes in process `syz.0.284'. [ 123.497166][ T7097] tipc: Started in network mode [ 123.535330][ T7097] tipc: Node identity d6fc9765172d, cluster identity 4711 [ 123.541633][ T7101] openvswitch: netlink: Message has 5 unknown bytes. [ 123.549418][ T7097] tipc: Enabled bearer , priority 0 [ 123.695159][ T7102] syzkaller0: entered promiscuous mode [ 123.755480][ T7102] syzkaller0: entered allmulticast mode [ 123.761405][ T7112] netlink: 'syz.0.286': attribute type 8 has an invalid length. [ 123.781437][ T7102] tipc: Resetting bearer [ 124.238181][ T7131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.291'. [ 124.266513][ T7095] tipc: Resetting bearer [ 124.273483][ T7131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.291'. [ 124.548817][ T6880] tipc: Node number set to 3251738469 [ 125.391702][ T7095] tipc: Disabling bearer [ 125.915939][ T7167] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 129 [ 125.955346][ T7163] netlink: 'syz.0.300': attribute type 8 has an invalid length. [ 126.053345][ T7170] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.302'. [ 126.298551][ T7184] netlink: 'syz.4.308': attribute type 5 has an invalid length. [ 126.834646][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.312'. [ 126.868842][ T7212] Bluetooth: MGMT ver 1.23 [ 126.888182][ T7212] netlink: 108 bytes leftover after parsing attributes in process `syz.0.313'. [ 126.900156][ T7211] netlink: 20 bytes leftover after parsing attributes in process `syz.4.312'. [ 128.423666][ T7277] netlink: 28 bytes leftover after parsing attributes in process `syz.3.324'. [ 128.647589][ T7290] netlink: 9 bytes leftover after parsing attributes in process `syz.0.328'. [ 128.699746][ T7295] netlink: 5 bytes leftover after parsing attributes in process `syz.0.328'. [ 128.776737][ T7290] gretap0: entered promiscuous mode [ 128.817505][ T7295] 0ªî{X¹¦: renamed from gretap0 [ 128.849937][ T7295] 0ªî{X¹¦: left promiscuous mode [ 128.885788][ T7295] 0ªî{X¹¦: entered allmulticast mode [ 128.909670][ T7295] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 129.111070][ T7312] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 129.148684][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.333'. [ 129.206833][ T7321] IPVS: ip_vs_edit_dest(): server weight less than zero [ 129.216574][ T24] IPVS: starting estimator thread 0... [ 129.241111][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.336'. [ 129.367364][ T7322] IPVS: using max 26 ests per chain, 62400 per kthread [ 129.522061][ T7336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.340'. [ 130.706265][ T7388] netlink: 'syz.4.356': attribute type 1 has an invalid length. [ 130.762555][ T7388] netlink: 'syz.4.356': attribute type 1 has an invalid length. [ 131.547857][ T7419] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0 [ 131.699110][ T7430] netlink: 'syz.3.370': attribute type 33 has an invalid length. [ 131.834886][ T7433] __nla_validate_parse: 2 callbacks suppressed [ 131.834903][ T7433] netlink: 48 bytes leftover after parsing attributes in process `syz.1.372'. [ 132.122199][ T7449] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 132.781653][ T7486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.385'. [ 132.865970][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.874922][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.995564][ T7502] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 133.120261][ T7519] nbd: illegal input index -1 [ 133.201502][ T7502] bond2: entered promiscuous mode [ 133.216409][ T7502] bond2: entered allmulticast mode [ 133.226958][ T7502] 8021q: adding VLAN 0 to HW filter on device bond2 [ 133.302663][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'. [ 133.317976][ T7528] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 133.753561][ T7539] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 133.780926][ T7539] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 133.866382][ T7546] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 133.930680][ T7541] netlink: 32 bytes leftover after parsing attributes in process `syz.2.395'. [ 134.144426][ T7553] netlink: 28 bytes leftover after parsing attributes in process `syz.0.398'. [ 134.248653][ T7557] tipc: Started in network mode [ 134.258813][ T7557] tipc: Node identity 3ec447b5b21b, cluster identity 4711 [ 134.297826][ T7557] tipc: Enabled bearer , priority 0 [ 134.364518][ T7557] tipc: Resetting bearer [ 134.395097][ T7562] syzkaller0: entered promiscuous mode [ 134.415891][ T7562] syzkaller0: entered allmulticast mode [ 134.443145][ T7554] tipc: Resetting bearer [ 134.563375][ T7554] tipc: Disabling bearer [ 134.721576][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.403'. [ 134.834735][ T7588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.405'. [ 134.885412][ T7588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.405'. [ 135.878452][ T5847] Bluetooth: hci4: link tx timeout [ 135.884765][ T5847] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 135.971931][ T7634] tipc: Enabled bearer , priority 0 [ 136.228568][ T7642] openvswitch: netlink: IPv4 tunnel dst address is zero [ 136.494356][ T7632] tipc: Disabling bearer [ 136.500452][ T7651] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 136.527929][ T7651] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 136.752362][ T7663] trusted_key: syz.4.422 sent an empty control message without MSG_MORE. [ 137.089876][ T7678] netlink: 'syz.4.424': attribute type 1 has an invalid length. [ 137.265152][ T7678] 8021q: adding VLAN 0 to HW filter on device bond3 [ 137.351506][ T7684] netlink: 'syz.4.424': attribute type 11 has an invalid length. [ 137.386411][ T7682] 8021q: adding VLAN 0 to HW filter on device bond3 [ 137.421096][ T7684] netlink: 228 bytes leftover after parsing attributes in process `syz.4.424'. [ 137.473930][ T7682] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 137.525186][ T7682] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 137.693664][ T7678] veth3: entered promiscuous mode [ 137.739177][ T7678] bond3: (slave veth3): Enslaving as an active interface with a down link [ 137.826681][ T7697] vlan2: entered allmulticast mode [ 137.875307][ T7697] bond3: entered allmulticast mode [ 137.967491][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 138.227287][ T7711] netlink: 'syz.3.430': attribute type 1 has an invalid length. [ 138.309606][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.430'. [ 138.554403][ T7716] netlink: 'syz.4.432': attribute type 2 has an invalid length. [ 138.562809][ T7716] netlink: 'syz.4.432': attribute type 1 has an invalid length. [ 138.574797][ T7716] netlink: 'syz.4.432': attribute type 1 has an invalid length. [ 138.583181][ T7718] netlink: 60 bytes leftover after parsing attributes in process `syz.3.431'. [ 138.592519][ T7716] netlink: 'syz.4.432': attribute type 2 has an invalid length. [ 138.804806][ T7727] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.435'. [ 139.411351][ T7747] netlink: 72 bytes leftover after parsing attributes in process `syz.0.442'. [ 139.717142][ T7757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.446'. [ 140.277342][ T7779] netlink: 28 bytes leftover after parsing attributes in process `syz.0.453'. [ 140.312468][ T7779] netlink: 28 bytes leftover after parsing attributes in process `syz.0.453'. [ 140.413155][ T7784] syzkaller0: create flow: hash 73634516 index 1 [ 140.584434][ T7790] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.454'. [ 140.600047][ T7792] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.454'. [ 140.637617][ T7784] syzkaller0: delete flow: hash 73634516 index 1 [ 140.665917][ T7793] netlink: 'syz.1.456': attribute type 33 has an invalid length. [ 141.688927][ T7564] Set syz1 is full, maxelem 65536 reached [ 142.331444][ T7790] team0: Device ip6gre1 is of different type [ 142.542808][ T7809] netlink: 'syz.0.460': attribute type 1 has an invalid length. [ 142.601353][ T7810] raw_sendmsg: syz.3.461 forgot to set AF_INET. Fix it! [ 142.641619][ T7810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.461'. [ 142.685604][ T7815] : entered promiscuous mode [ 143.735535][ T7852] netlink: 'syz.0.472': attribute type 1 has an invalid length. [ 143.758624][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.472'. [ 143.787393][ T7852] openvswitch: netlink: Unknown nsh attribute 0 [ 143.793727][ T7852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.881295][ T7861] netlink: 44 bytes leftover after parsing attributes in process `syz.0.472'. [ 144.026030][ T7865] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 144.037298][ T7863] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 144.421189][ T7879] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 144.431308][ T6880] IPVS: starting estimator thread 0... [ 144.516784][ T7878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.477'. [ 144.563551][ T7881] IPVS: using max 24 ests per chain, 57600 per kthread [ 144.704977][ T7886] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 144.928947][ T5854] Bluetooth: hci4: command 0x0405 tx timeout [ 145.165449][ T7911] netlink: 'syz.4.483': attribute type 1 has an invalid length. [ 145.224742][ T7915] netlink: 188 bytes leftover after parsing attributes in process `syz.1.485'. [ 145.519347][ T7927] tap0: tun_chr_ioctl cmd 2148553947 [ 145.576908][ T7933] !€ÿ: renamed from bond_slave_0 (while UP) [ 145.663944][ T7935] vxcan1: tx drop: invalid da for name 0x0000000000000014 [ 145.705088][ T7933] netlink: 57825 bytes leftover after parsing attributes in process `syz.4.488'. [ 145.949068][ T7952] netlink: 36 bytes leftover after parsing attributes in process `syz.3.496'. [ 146.111192][ T7956] netlink: 20 bytes leftover after parsing attributes in process `syz.2.498'. [ 146.133306][ T7958] netlink: 24 bytes leftover after parsing attributes in process `syz.1.499'. [ 146.144448][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'. [ 146.452580][ T7972] sctp: [Deprecated]: syz.0.503 (pid 7972) Use of int in maxseg socket option. [ 146.452580][ T7972] Use struct sctp_assoc_value instead [ 146.705015][ T7984] ip6gretap0: entered allmulticast mode [ 147.544165][ T8033] netlink: 'syz.3.519': attribute type 21 has an invalid length. [ 147.708490][ T8037] netlink: 'syz.1.521': attribute type 1 has an invalid length. [ 147.729684][ T8037] __nla_validate_parse: 6 callbacks suppressed [ 147.729703][ T8037] netlink: 224 bytes leftover after parsing attributes in process `syz.1.521'. [ 147.821532][ T8045] netlink: 'syz.2.524': attribute type 5 has an invalid length. [ 147.858556][ T8045] netlink: 140 bytes leftover after parsing attributes in process `syz.2.524'. [ 148.489127][ T8066] team0: Port device vlan0 removed [ 148.562752][ T8082] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.531'. [ 148.598923][ T8082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.531'. [ 148.787232][ T8082] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 149.610568][ T8115] netlink: 60 bytes leftover after parsing attributes in process `syz.0.541'. [ 149.966156][ T8136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.548'. [ 150.415956][ T8156] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 150.610139][ T8168] netlink: 56 bytes leftover after parsing attributes in process `syz.4.558'. [ 150.626677][ T8169] netlink: 24 bytes leftover after parsing attributes in process `syz.0.560'. [ 150.733787][ T8174] netlink: 68 bytes leftover after parsing attributes in process `syz.2.562'. [ 150.753375][ T8177] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 150.760202][ T8177] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 150.762552][ T8174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.562'. [ 151.910800][ T8209] syz.0.566 (8209) used greatest stack depth: 19288 bytes left [ 152.092816][ T8236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.249709][ T8242] netlink: 'syz.2.576': attribute type 21 has an invalid length. [ 152.458188][ T8252] netlink: 'syz.0.578': attribute type 5 has an invalid length. [ 152.836255][ T8271] __nla_validate_parse: 9 callbacks suppressed [ 152.836275][ T8271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'. [ 152.852648][ T8271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.584'. [ 152.904426][ T7494] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.923569][ T7494] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.943132][ T7494] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.962356][ T7494] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.062208][ T8276] tipc: Enabled bearer , priority 0 [ 153.080494][ T8276] syzkaller0: entered promiscuous mode [ 153.086038][ T8276] syzkaller0: entered allmulticast mode [ 153.102410][ T7494] syzkaller0: tun_net_xmit 70 [ 153.113921][ T8276] tipc: Resetting bearer [ 153.121393][ T8276] syzkaller0: tun_net_xmit 90 [ 153.138336][ T8275] tipc: Resetting bearer [ 153.152666][ T8275] tipc: Disabling bearer [ 153.371023][ T8291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.588'. [ 153.407839][ T8291] tc_dump_action: action bad kind [ 153.782491][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.596'. [ 153.798441][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.596'. [ 153.830347][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.596'. [ 153.869097][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.596'. [ 153.898713][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.596'. [ 153.928014][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.596'. [ 153.950736][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.596'. [ 154.290339][ T8336] gretap0: entered promiscuous mode [ 154.956475][ T8372] netlink: 'syz.2.614': attribute type 1 has an invalid length. [ 155.350175][ T8388] 8021q: adding VLAN 0 to HW filter on device bond4 [ 155.381218][ T8389] vlan2: entered allmulticast mode [ 155.386632][ T8389] bond4: entered allmulticast mode [ 155.646707][ T8407] netlink: 'syz.1.625': attribute type 1 has an invalid length. [ 155.672320][ T8407] netlink: 'syz.1.625': attribute type 1 has an invalid length. [ 155.700588][ T8406] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20002 [ 156.802373][ T8448] sit1: entered promiscuous mode [ 156.817913][ T8448] sit1: entered allmulticast mode [ 157.173024][ T8461] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 157.180633][ T8465] netlink: 'syz.4.642': attribute type 5 has an invalid length. [ 157.320129][ T8460] veth5: entered allmulticast mode [ 157.510493][ T8481] tipc: Started in network mode [ 157.515436][ T8481] tipc: Node identity 42b9244bc85c, cluster identity 4711 [ 157.532065][ T8481] tipc: Enabled bearer , priority 0 [ 157.582296][ T8488] syzkaller0: entered promiscuous mode [ 157.615438][ T8488] syzkaller0: entered allmulticast mode [ 157.702483][ T8481] tipc: Resetting bearer [ 157.723573][ T8497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.733109][ T8480] tipc: Resetting bearer [ 158.014072][ T8480] tipc: Disabling bearer [ 158.746710][ T8551] bridge0: entered promiscuous mode [ 158.752970][ T8554] __nla_validate_parse: 47 callbacks suppressed [ 158.753029][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.663'. [ 158.762201][ T8551] macsec2: entered promiscuous mode [ 158.780350][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.663'. [ 159.002179][ T8564] netlink: 20 bytes leftover after parsing attributes in process `syz.2.666'. [ 159.053951][ T8564] netlink: 788 bytes leftover after parsing attributes in process `syz.2.666'. [ 159.166178][ T8568] bridge0: port 1(batadv1) entered blocking state [ 159.185577][ T8568] bridge0: port 1(batadv1) entered disabled state [ 159.207666][ T8568] batadv1: entered allmulticast mode [ 159.245250][ T8568] batadv1: entered promiscuous mode [ 159.324375][ T8577] team0: Device xfrm1 is of different type [ 159.420342][ T8578] tipc: Enabled bearer , priority 0 [ 159.469749][ T8581] syzkaller0: entered promiscuous mode [ 159.479921][ T8581] syzkaller0: entered allmulticast mode [ 159.528630][ T8575] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 159.636856][ T8575] tipc: Resetting bearer [ 159.656226][ T8593] netlink: 108 bytes leftover after parsing attributes in process `syz.2.672'. [ 159.667702][ T3457] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 159.677520][ T3457] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 159.725721][ T8574] tipc: Resetting bearer [ 159.773562][ T8574] tipc: Disabling bearer [ 159.811765][ T8601] 8021q: VLANs not supported on vxcan1 [ 160.082940][ T8614] netlink: 76 bytes leftover after parsing attributes in process `syz.2.680'. [ 160.149230][ T8614] netlink: 'syz.2.680': attribute type 11 has an invalid length. [ 160.181609][ T8614] netlink: 76 bytes leftover after parsing attributes in process `syz.2.680'. [ 160.208985][ T8618] netlink: 'syz.1.678': attribute type 4 has an invalid length. [ 160.439398][ T8630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.685'. [ 160.455699][ T8630] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 160.479618][ T8630] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.558528][ T8640] netlink: 16 bytes leftover after parsing attributes in process `syz.3.687'. [ 160.634685][ T8645] netlink: 'syz.0.688': attribute type 83 has an invalid length. [ 160.649319][ T8645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.688'. [ 161.356285][ T8681] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒžóúzR' [ 161.398022][ T8681] CPU: 0 UID: 0 PID: 8681 Comm: syz.0.695 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10 #0 PREEMPT(full) [ 161.398055][ T8681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 161.398076][ T8681] Call Trace: [ 161.398086][ T8681] [ 161.398100][ T8681] dump_stack_lvl+0x189/0x250 [ 161.398140][ T8681] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.398163][ T8681] ? __pfx__printk+0x10/0x10 [ 161.398190][ T8681] ? kernfs_path_from_node+0x2c/0x260 [ 161.398216][ T8681] ? kernfs_path_from_node+0x2c/0x260 [ 161.398239][ T8681] ? kernfs_path_from_node+0x2c/0x260 [ 161.398266][ T8681] ? kernfs_path_from_node+0x22c/0x260 [ 161.398290][ T8681] ? kernfs_path_from_node+0x2c/0x260 [ 161.398319][ T8681] sysfs_warn_dup+0x8e/0xa0 [ 161.398344][ T8681] sysfs_do_create_link_sd+0xc0/0x110 [ 161.398372][ T8681] device_add_class_symlinks+0x1cf/0x240 [ 161.398404][ T8681] device_add+0x475/0xb50 [ 161.398436][ T8681] wiphy_register+0x1ba6/0x28d0 [ 161.398486][ T8681] ? __pfx_wiphy_register+0x10/0x10 [ 161.398516][ T8681] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 161.398551][ T8681] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 161.398580][ T8681] ieee80211_register_hw+0x3425/0x4080 [ 161.398625][ T8681] ? ieee80211_register_hw+0x1411/0x4080 [ 161.398660][ T8681] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 161.398690][ T8681] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 161.398729][ T8681] ? __hrtimer_setup+0x187/0x210 [ 161.398761][ T8681] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 161.398801][ T8681] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 161.398867][ T8681] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 161.398897][ T8681] ? trace_kmalloc+0x1f/0xd0 [ 161.398926][ T8681] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 161.398968][ T8681] ? kstrndup+0xbf/0x160 [ 161.399003][ T8681] hwsim_new_radio_nl+0xea4/0x1b10 [ 161.399042][ T8681] ? __pfx___nla_validate_parse+0x10/0x10 [ 161.399084][ T8681] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 161.399118][ T8681] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 161.399153][ T8681] ? __nla_parse+0x40/0x60 [ 161.399181][ T8681] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 161.399216][ T8681] genl_family_rcv_msg_doit+0x215/0x300 [ 161.399251][ T8681] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 161.399293][ T8681] ? bpf_lsm_capable+0x9/0x20 [ 161.399323][ T8681] ? security_capable+0x7e/0x2e0 [ 161.399360][ T8681] genl_rcv_msg+0x60e/0x790 [ 161.399393][ T8681] ? __pfx_genl_rcv_msg+0x10/0x10 [ 161.399418][ T8681] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 161.399465][ T8681] netlink_rcv_skb+0x205/0x470 [ 161.399494][ T8681] ? __lock_acquire+0xab9/0xd20 [ 161.399525][ T8681] ? __pfx_genl_rcv_msg+0x10/0x10 [ 161.399551][ T8681] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 161.399605][ T8681] ? down_read+0x1ad/0x2e0 [ 161.399629][ T8681] genl_rcv+0x28/0x40 [ 161.399651][ T8681] netlink_unicast+0x82c/0x9e0 [ 161.399691][ T8681] ? __pfx_netlink_unicast+0x10/0x10 [ 161.399724][ T8681] ? netlink_sendmsg+0x642/0xb30 [ 161.399755][ T8681] ? skb_put+0x11b/0x210 [ 161.399781][ T8681] netlink_sendmsg+0x805/0xb30 [ 161.399826][ T8681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.399865][ T8681] ? aa_sock_msg_perm+0x94/0x160 [ 161.399896][ T8681] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 161.399921][ T8681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.399963][ T8681] __sock_sendmsg+0x21c/0x270 [ 161.399996][ T8681] ____sys_sendmsg+0x505/0x830 [ 161.400025][ T8681] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.400059][ T8681] ? import_iovec+0x74/0xa0 [ 161.400094][ T8681] ___sys_sendmsg+0x21f/0x2a0 [ 161.400121][ T8681] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.400187][ T8681] ? __fget_files+0x2a/0x420 [ 161.400208][ T8681] ? __fget_files+0x3a0/0x420 [ 161.400242][ T8681] __x64_sys_sendmsg+0x19b/0x260 [ 161.400269][ T8681] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 161.400305][ T8681] ? rcu_is_watching+0x15/0xb0 [ 161.400347][ T8681] ? do_syscall_64+0xbe/0x3b0 [ 161.400384][ T8681] do_syscall_64+0xfa/0x3b0 [ 161.400415][ T8681] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.400445][ T8681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.400466][ T8681] ? clear_bhb_loop+0x60/0xb0 [ 161.400492][ T8681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.400513][ T8681] RIP: 0033:0x7f78e6d8eb69 [ 161.400543][ T8681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.400561][ T8681] RSP: 002b:00007f78e4bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.400589][ T8681] RAX: ffffffffffffffda RBX: 00007f78e6fb5fa0 RCX: 00007f78e6d8eb69 [ 161.400604][ T8681] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 161.400617][ T8681] RBP: 00007f78e6e11df1 R08: 0000000000000000 R09: 0000000000000000 [ 161.400629][ T8681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.400641][ T8681] R13: 0000000000000000 R14: 00007f78e6fb5fa0 R15: 00007ffd65a6a8b8 [ 161.400673][ T8681] [ 161.926204][ T8686] netlink: 'syz.1.696': attribute type 6 has an invalid length. [ 162.170907][ T8693] bridge0: port 3(batadv1) entered blocking state [ 162.203698][ T8693] bridge0: port 3(batadv1) entered disabled state [ 162.210763][ T8693] batadv1: entered allmulticast mode [ 162.222378][ T8693] batadv1: entered promiscuous mode [ 162.586699][ T8715] tipc: Enabling of bearer rejected, failed to enable media [ 162.608789][ T3492] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 162.618632][ T3492] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 162.963341][ T8716] syzkaller1: entered promiscuous mode [ 162.970695][ T8716] syzkaller1: entered allmulticast mode [ 163.126877][ T8728] !: renamed from dummy0 (while UP) [ 163.518559][ T8752] netlink: 'syz.1.713': attribute type 8 has an invalid length. [ 163.992470][ T8768] __nla_validate_parse: 8 callbacks suppressed [ 163.992491][ T8768] netlink: 244 bytes leftover after parsing attributes in process `syz.0.719'. [ 164.014830][ T8772] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 164.023493][ T8769] netlink: 16 bytes leftover after parsing attributes in process `syz.2.718'. [ 164.034553][ T8772] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 164.098400][ T8773] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 164.183988][ T8781] netlink: 'syz.2.723': attribute type 24 has an invalid length. [ 164.573760][ T8800] netlink: 'syz.0.729': attribute type 10 has an invalid length. [ 164.618405][ T8800] netlink: 40 bytes leftover after parsing attributes in process `syz.0.729'. [ 164.748193][ T8800] team0: Port device geneve0 added [ 164.952820][ T8820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.088639][ T8819] netlink: 28 bytes leftover after parsing attributes in process `syz.3.735'. [ 165.117238][ T8819] netlink: 28 bytes leftover after parsing attributes in process `syz.3.735'. [ 165.338767][ T8834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.741'. [ 165.381427][ T8834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.741'. [ 165.402960][ T8834] netlink: 'syz.2.741': attribute type 5 has an invalid length. [ 165.481302][ T7494] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.532266][ T8833] netlink: 300 bytes leftover after parsing attributes in process `syz.0.742'. [ 165.567609][ T7494] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.624787][ T7494] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.634988][ T8837] nbd0: detected capacity change from 0 to 549764202496 [ 165.644424][ T7494] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.719215][ T8833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.742'. [ 165.930134][ T8862] netlink: 'syz.3.748': attribute type 30 has an invalid length. [ 166.123616][ T8871] netlink: 212232 bytes leftover after parsing attributes in process `syz.1.750'. [ 166.153192][ T8871] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 166.790250][ T8905] netlink: 'syz.1.760': attribute type 10 has an invalid length. [ 166.944772][ T8891] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 166.950828][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880571cc000: rx timeout, send abort [ 166.969294][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880571cc000: 0x2fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 166.977667][ T8905] dummy0: entered promiscuous mode [ 166.999105][ T5854] block nbd0: Receive control failed (result -104) [ 167.029879][ T8905] bridge0: port 4(dummy0) entered blocking state [ 167.036623][ T8905] bridge0: port 4(dummy0) entered disabled state [ 167.043744][ T8905] dummy0: entered allmulticast mode [ 167.052193][ T8905] bridge0: port 4(dummy0) entered blocking state [ 167.058747][ T8905] bridge0: port 4(dummy0) entered forwarding state [ 167.071749][ T7510] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.080890][ T7510] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.092185][ T7510] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.101834][ T7510] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.163762][ T7479] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.207563][ T7479] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.247467][ T7479] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.272676][ T7479] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.455744][ T8925] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 167.463352][ T24] IPVS: starting estimator thread 0... [ 167.580482][ T8929] IPVS: using max 25 ests per chain, 60000 per kthread [ 167.880356][ T8942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.910906][ T8949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.949080][ T8942] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 168.545135][ T8976] netlink: 'syz.3.778': attribute type 32 has an invalid length. [ 168.597161][ T8976] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 168.667982][ T8987] netlink: 'syz.4.780': attribute type 39 has an invalid length. [ 168.678203][ T8978] ip6tnl1: entered promiscuous mode [ 168.689038][ T8978] A link change request failed with some changes committed already. Interface ip6tnl1 may have been left with an inconsistent configuration, please check. [ 168.856896][ T8989] netlink: 'syz.0.783': attribute type 39 has an invalid length. [ 169.004222][ T9003] __nla_validate_parse: 12 callbacks suppressed [ 169.004244][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.785'. [ 169.093021][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.785'. [ 169.550683][ T9032] netlink: 60 bytes leftover after parsing attributes in process `syz.4.790'. [ 169.606262][ T9031] netlink: 144 bytes leftover after parsing attributes in process `syz.1.789'. [ 169.786743][ T9039] netlink: 20 bytes leftover after parsing attributes in process `syz.2.794'. [ 170.259164][ T9063] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.521746][ T9078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.665414][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.810'. [ 170.698630][ T9081] syzkaller1: entered promiscuous mode [ 170.720136][ T9081] syzkaller1: entered allmulticast mode [ 171.008751][ T9099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.812'. [ 171.059717][ T9104] netlink: 28 bytes leftover after parsing attributes in process `syz.4.812'. [ 171.779233][ T9140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.824'. [ 171.995256][ T9149] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20000 [ 172.551269][ T9179] netlink: 248 bytes leftover after parsing attributes in process `syz.3.834'. [ 172.642568][ T9182] netlink: 'syz.2.835': attribute type 21 has an invalid length. [ 172.703369][ T9182] netlink: 'syz.2.835': attribute type 21 has an invalid length. [ 173.189877][ T9198] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.383443][ T9198] bridge_slave_1 (unregistering): left allmulticast mode [ 173.445887][ T9198] bridge_slave_1 (unregistering): left promiscuous mode [ 173.483802][ T9198] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.955727][ T9233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.149366][ T9244] __nla_validate_parse: 41 callbacks suppressed [ 174.149386][ T9244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.850'. [ 174.203933][ T9244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.850'. [ 174.995077][ T9269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.859'. [ 175.093627][ T9274] netlink: 144 bytes leftover after parsing attributes in process `syz.4.860'. [ 175.379202][ T9293] netlink: 64 bytes leftover after parsing attributes in process `syz.1.865'. [ 175.393697][ T9292] netlink: 64 bytes leftover after parsing attributes in process `syz.1.865'. [ 175.523364][ T9298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.866'. [ 175.875935][ T9310] netlink: 788 bytes leftover after parsing attributes in process `syz.3.869'. [ 176.419766][ T9327] tipc: Enabled bearer , priority 0 [ 176.470488][ T9327] syzkaller0: entered promiscuous mode [ 176.494386][ T9327] syzkaller0: entered allmulticast mode [ 176.612663][ T9327] tipc: Resetting bearer [ 176.812715][ T9344] netlink: 48 bytes leftover after parsing attributes in process `syz.4.878'. [ 177.054875][ T9359] netlink: 28 bytes leftover after parsing attributes in process `syz.0.880'. [ 177.129187][ T9362] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 177.189513][ T9326] tipc: Resetting bearer [ 177.292100][ T9326] tipc: Disabling bearer [ 177.844027][ T9400] IPVS: length: 8 != 46855605376 [ 178.526659][ T9419] 8021q: VLANs not supported on sit0 [ 179.180175][ T9439] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 179.229947][ T9438] netlink: 'syz.3.902': attribute type 11 has an invalid length. [ 179.270292][ T9438] netlink: 'syz.3.902': attribute type 11 has an invalid length. [ 179.282647][ T9438] __nla_validate_parse: 7 callbacks suppressed [ 179.282664][ T9438] netlink: 224 bytes leftover after parsing attributes in process `syz.3.902'. [ 179.389437][ T9449] netlink: 'syz.0.906': attribute type 1 has an invalid length. [ 179.476595][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.902'. [ 179.516434][ T9449] bond3: entered promiscuous mode [ 179.522421][ T9458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.905'. [ 179.523412][ T9449] 8021q: adding VLAN 0 to HW filter on device bond3 [ 179.625045][ T9456] 8021q: adding VLAN 0 to HW filter on device bond3 [ 179.639310][ T9456] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 179.654110][ T9456] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 179.674766][ T9456] bond3: (slave wireguard0): making interface the new active one [ 179.688240][ T9456] wireguard0: entered promiscuous mode [ 179.695943][ T9456] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 179.758539][ T9460] netlink: 48 bytes leftover after parsing attributes in process `syz.2.908'. [ 180.079046][ T9483] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 180.104458][ T9490] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 180.115049][ T9483] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 180.125261][ T9492] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 180.153223][ T9483] gretap0: entered promiscuous mode [ 180.158972][ T9483] gretap0: entered allmulticast mode [ 180.571443][ T9495] team0 (unregistering): Port device team_slave_0 removed [ 180.608578][ T9495] team0 (unregistering): Port device team_slave_1 removed [ 180.724361][ T9510] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 180.872718][ T9515] netlink: 104 bytes leftover after parsing attributes in process `syz.4.921'. [ 180.917700][ T9515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.921'. [ 181.051437][ T9527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.922'. [ 181.247350][ T9524] netlink: 20 bytes leftover after parsing attributes in process `syz.2.923'. [ 181.762459][ T9555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.934'. [ 181.955614][ T9555] netlink: 'syz.2.934': attribute type 1 has an invalid length. [ 181.984498][ T9555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.934'. [ 182.936764][ T9604] sctp: [Deprecated]: syz.4.946 (pid 9604) Use of int in maxseg socket option. [ 182.936764][ T9604] Use struct sctp_assoc_value instead [ 184.553347][ T9630] dummy0: left allmulticast mode [ 184.584952][ T9630] bridge0: port 4(dummy0) entered disabled state [ 184.624527][ T9641] __nla_validate_parse: 6 callbacks suppressed [ 184.624546][ T9641] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.958'. [ 184.657635][ T9635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.956'. [ 184.708942][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.957'. [ 184.749111][ T9650] netlink: 'syz.2.958': attribute type 6 has an invalid length. [ 184.788307][ T9651] netlink: 24 bytes leftover after parsing attributes in process `syz.4.956'. [ 184.807937][ T9630] bridge_slave_0: left allmulticast mode [ 184.814330][ T9630] bridge_slave_0: left promiscuous mode [ 184.831688][ T9630] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.856230][ T9630] bridge_slave_1: left allmulticast mode [ 184.864442][ T9630] bridge_slave_1: left promiscuous mode [ 184.870673][ T9630] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.884815][ T9630] bond0: (slave bond_slave_0): Releasing backup interface [ 184.894742][ T9630] bond_slave_0: left allmulticast mode [ 184.904706][ T9630] bond0: (slave bond_slave_1): Releasing backup interface [ 184.916388][ T9630] bond_slave_1: left allmulticast mode [ 184.938733][ T9630] team0: Port device team_slave_0 removed [ 184.954216][ T9630] team0: Port device team_slave_1 removed [ 184.961255][ T9630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.969328][ T9630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.978738][ T9630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.993137][ T9630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.012359][ T9630] batadv1: left allmulticast mode [ 185.017597][ T9630] batadv1: left promiscuous mode [ 185.023681][ T9630] bridge0: port 3(batadv1) entered disabled state [ 185.038785][ T9636] netlink: 81 bytes leftover after parsing attributes in process `syz.2.958'. [ 185.066489][ T9639] team0: Mode changed to "loadbalance" [ 185.303685][ T9664] netlink: 108 bytes leftover after parsing attributes in process `syz.3.959'. [ 185.339196][ T9664] netlink: 108 bytes leftover after parsing attributes in process `syz.3.959'. [ 185.356500][ T9664] netlink: 108 bytes leftover after parsing attributes in process `syz.3.959'. [ 185.406433][ T9668] netlink: 9 bytes leftover after parsing attributes in process `syz.4.962'. [ 185.426051][ T9668] gretap0: entered promiscuous mode [ 185.531201][ T9676] sctp: [Deprecated]: syz.4.964 (pid 9676) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.531201][ T9676] Use struct sctp_sack_info instead [ 185.549541][ T9676] netlink: 'syz.4.964': attribute type 10 has an invalid length. [ 185.575077][ T9676] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 186.053201][ T9687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.966'. [ 186.457871][ T9699] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 186.551492][ T9712] netlink: 'syz.1.971': attribute type 21 has an invalid length. [ 187.256281][ T9747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.318314][ T9747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.593871][ T9754] tipc: Enabled bearer , priority 0 [ 187.737540][ T9770] sctp: [Deprecated]: syz.2.988 (pid 9770) Use of int in max_burst socket option. [ 187.737540][ T9770] Use struct sctp_assoc_value instead [ 187.964221][ T9756] syzkaller0: entered promiscuous mode [ 187.982265][ T9756] syzkaller0: entered allmulticast mode [ 188.115176][ T9753] tipc: Resetting bearer [ 188.507929][ T9799] sctp: [Deprecated]: syz.2.996 (pid 9799) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.507929][ T9799] Use struct sctp_sack_info instead [ 188.538375][ T9799] sctp: [Deprecated]: syz.2.996 (pid 9799) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.538375][ T9799] Use struct sctp_sack_info instead [ 188.700312][ T5922] tipc: Node number set to 2363443125 [ 189.705176][ T9753] tipc: Disabling bearer [ 189.878689][ T9813] netlink: 'syz.1.998': attribute type 8 has an invalid length. [ 190.096579][ T9821] __nla_validate_parse: 10 callbacks suppressed [ 190.096600][ T9821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1003'. [ 190.135784][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1001'. [ 190.163570][ T9821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1003'. [ 190.181794][ T9821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1003'. [ 190.196136][ T9827] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1001'. [ 190.436964][ T9834] netlink: 'syz.2.1006': attribute type 24 has an invalid length. [ 191.163748][ T9859] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1016'. [ 191.185082][ T9860] netlink: 644 bytes leftover after parsing attributes in process `syz.1.1016'. [ 191.215856][ T9860] netlink: 508 bytes leftover after parsing attributes in process `syz.1.1016'. [ 191.285604][ T9860] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1016'. [ 191.461051][ T9859] delete_channel: no stack [ 191.465956][ T9875] netlink: 'syz.0.1020': attribute type 3 has an invalid length. [ 191.966243][ T9906] bridge0: entered promiscuous mode [ 191.976248][ T9906] macsec3: entered promiscuous mode [ 192.031684][ T9908] syzkaller0: entered promiscuous mode [ 192.037441][ T9908] syzkaller0: entered allmulticast mode [ 192.183222][ T9917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1030'. [ 192.199311][ T9913] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 192.545500][ T9937] team_slave_1: entered allmulticast mode [ 192.605820][ T9942] delete_channel: no stack [ 192.749885][ T9947] netlink: 'syz.0.1041': attribute type 39 has an invalid length. [ 192.784933][ T9947] netlink: 'syz.0.1041': attribute type 39 has an invalid length. [ 193.059068][ T9963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.307352][ T9968] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.400319][ T9973] pim6reg1: entered promiscuous mode [ 193.405891][ T9973] pim6reg1: entered allmulticast mode [ 193.670250][ T9984] lo: entered allmulticast mode [ 194.216285][T10008] can: request_module (can-proto-0) failed. [ 194.243756][T10008] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 194.283589][T10008] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 194.335579][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.783465][T10040] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.916150][T10047] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 195.080330][T10053] netlink: 'syz.2.1072': attribute type 10 has an invalid length. [ 195.127771][T10053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.186757][T10053] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 195.548356][T10077] netlink: 'syz.1.1079': attribute type 58 has an invalid length. [ 195.556236][T10077] __nla_validate_parse: 7 callbacks suppressed [ 195.556254][T10077] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1079'. [ 195.852259][T10093] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20004 [ 195.860275][T10093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1082'. [ 195.914282][T10095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1082'. [ 195.935542][T10083] bridge_slave_0: invalid flags given to default FDB implementation [ 196.217109][ T55] block nbd0: Possible stuck request ffff88802578e000: control (read@0,4096B). Runtime 30 seconds [ 196.464378][T10109] netlink: 'syz.2.1088': attribute type 13 has an invalid length. [ 196.478562][T10109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1088'. [ 197.189892][T10150] openvswitch: netlink: Message has -1 unknown bytes. [ 197.316056][T10154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1101'. [ 197.900075][T10179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1106'. [ 198.134308][T10188] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1110'. [ 198.335193][T10200] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1113'. [ 198.377561][T10202] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 198.661372][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1117'. [ 198.970718][T10231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1123'. [ 198.984365][T10235] netlink: 'syz.1.1123': attribute type 18 has an invalid length. [ 199.051378][T10231] geneve2: entered promiscuous mode [ 199.649118][ T5909] hid-generic 0005:16C0:5507.0001: hidraw0: BLUETOOTH HID v0.8d Device [syz0] on aa:aa:aa:aa:aa:aa [ 200.005621][T10278] fido_id[10278]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 201.096144][T10338] tipc: Enabled bearer , priority 0 [ 201.118296][T10338] syzkaller0: entered promiscuous mode [ 201.130360][T10338] syzkaller0: entered allmulticast mode [ 201.276520][T10338] tipc: Resetting bearer [ 201.428952][T10335] tipc: Resetting bearer [ 201.522456][T10335] tipc: Disabling bearer [ 201.849552][T10376] __nla_validate_parse: 2 callbacks suppressed [ 201.849574][T10376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1160'. [ 201.989929][T10387] netlink: 'syz.1.1160': attribute type 30 has an invalid length. [ 202.109713][T10393] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1163'. [ 202.141897][T10393] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1163'. [ 202.164834][T10393] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1163'. [ 202.179116][T10397] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1165'. [ 202.371611][T10402] gretap0: left promiscuous mode [ 202.572938][T10402] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 202.573128][T10411] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1168'. [ 202.669279][T10411] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.678256][T10411] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.048773][T10431] sctp: [Deprecated]: syz.3.1175 (pid 10431) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.048773][T10431] Use struct sctp_sack_info instead [ 203.176544][T10436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1176'. [ 203.266815][T10428] dvmrp1: entered allmulticast mode [ 203.462036][T10443] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1178'. [ 203.495829][T10447] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1180'. [ 203.806144][T10457] netlink: 'syz.1.1183': attribute type 1 has an invalid length. [ 203.871827][T10457] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1183'. [ 204.123068][T10471] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 204.170533][T10471] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€ [ 204.711450][T10498] bridge_slave_0: left allmulticast mode [ 204.719596][T10498] bridge_slave_0: left promiscuous mode [ 204.725639][T10498] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.876221][ T6880] IPVS: starting estimator thread 0... [ 204.885153][T10507] IPVS: ip_vs_edit_dest(): server weight less than zero [ 204.915770][T10507] netlink: zone id is out of range [ 204.922390][T10507] netlink: zone id is out of range [ 204.942090][T10507] netlink: zone id is out of range [ 204.947686][T10507] netlink: zone id is out of range [ 204.953258][T10507] netlink: zone id is out of range [ 204.973161][T10508] IPVS: using max 33 ests per chain, 79200 per kthread [ 204.980544][T10507] netlink: zone id is out of range [ 205.020589][T10507] netlink: zone id is out of range [ 205.050797][T10507] netlink: zone id is out of range [ 205.075016][T10507] netlink: zone id is out of range [ 205.087931][T10507] netlink: zone id is out of range [ 205.123339][T10509] tipc: Enabled bearer , priority 0 [ 205.149776][T10510] syzkaller0: entered promiscuous mode [ 205.162837][T10524] netlink: 'syz.4.1200': attribute type 1 has an invalid length. [ 205.177455][T10510] syzkaller0: entered allmulticast mode [ 205.226217][T10502] tipc: Resetting bearer [ 205.624938][T10500] tipc: Resetting bearer [ 205.654153][T10500] tipc: Disabling bearer [ 206.724723][T10584] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073704970493) [ 206.905477][T10593] veth0: entered promiscuous mode [ 206.955401][T10592] veth0: left promiscuous mode [ 207.219268][T10605] __nla_validate_parse: 8 callbacks suppressed [ 207.219287][T10605] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1223'. [ 207.308284][T10610] netlink: 'syz.1.1225': attribute type 10 has an invalid length. [ 207.342931][T10619] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1226'. [ 207.368041][T10610] veth0_macvtap: left promiscuous mode [ 207.610668][T10628] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1228'. [ 207.857612][T10638] netlink: 'syz.2.1231': attribute type 10 has an invalid length. [ 207.866538][T10638] batman_adv: batadv0: Adding interface: team0 [ 207.905442][T10638] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.969969][T10638] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 208.265705][T10662] netlink: 'syz.4.1239': attribute type 1 has an invalid length. [ 208.461295][T10662] 8021q: adding VLAN 0 to HW filter on device bond6 [ 208.478467][T10662] bond5: (slave bond6): making interface the new active one [ 208.502268][T10662] bond5: (slave bond6): Enslaving as an active interface with an up link [ 208.547727][T10662] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1239'. [ 208.602611][T10662] 8021q: adding VLAN 0 to HW filter on device bond5 [ 208.682575][T10671] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1239'. [ 208.846330][T10686] tipc: New replicast peer: 0.0.0.0 [ 208.853843][T10686] tipc: Enabled bearer , priority 10 [ 208.868040][T10686] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 208.926697][T10688] vlan2: entered promiscuous mode [ 208.961651][T10688] bridge0: entered promiscuous mode [ 208.968638][T10688] vlan2: entered allmulticast mode [ 208.975054][T10688] bridge0: entered allmulticast mode [ 209.060550][T10692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1247'. [ 209.270613][T10707] tipc: Enabling of bearer rejected, media not registered [ 209.300013][T10708] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1250'. [ 209.321617][T10707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1251'. [ 209.341666][T10708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1250'. [ 209.635903][T10724] netlink: 'syz.4.1255': attribute type 1 has an invalid length. [ 209.729040][T10724] netlink: 'syz.4.1255': attribute type 12 has an invalid length. [ 209.774067][T10724] netlink: 'syz.4.1255': attribute type 29 has an invalid length. [ 209.802189][T10724] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1255'. [ 210.474880][T10756] tipc: Enabled bearer , priority 0 [ 210.543241][T10756] netlink: 'syz.4.1262': attribute type 1 has an invalid length. [ 210.653985][T10759] syzkaller0: entered promiscuous mode [ 210.670225][T10759] syzkaller0: entered allmulticast mode [ 210.690405][T10769] tipc: Started in network mode [ 210.706106][T10769] tipc: Node identity 080211000001, cluster identity 4711 [ 210.736699][T10769] tipc: Enabled bearer , priority 0 [ 210.758488][T10756] tipc: Resetting bearer [ 210.791894][T10770] tipc: Resetting bearer [ 210.847950][T10755] tipc: Resetting bearer [ 210.950347][T10755] tipc: Disabling bearer [ 211.069088][T10788] netlink: 'syz.2.1267': attribute type 4 has an invalid length. [ 211.161409][T10790] netlink: 'syz.2.1267': attribute type 4 has an invalid length. [ 211.699365][T10809] bond0: (slave bond_slave_0): Releasing backup interface [ 211.728951][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 211.728980][ T5159] Bluetooth: hci1: command 0x0406 tx timeout [ 211.735083][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 211.832746][ T5922] tipc: Node number set to 134418688 [ 211.869614][T10809] bond0: (slave bond_slave_1): Releasing backup interface [ 211.944554][T10809] team0: Port device team_slave_0 removed [ 211.959947][T10826] netlink: 'syz.3.1279': attribute type 83 has an invalid length. [ 211.983221][T10809] team0: Port device team_slave_1 removed [ 211.999587][T10809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.032712][T10809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.101580][T10809] team0: Port device geneve0 removed [ 212.140761][T10809] bond3: (slave wireguard0): Releasing backup interface [ 212.152177][T10809] wireguard0: left promiscuous mode [ 212.173796][T10809] tipc: Resetting bearer [ 212.788819][T10859] __nla_validate_parse: 11 callbacks suppressed [ 212.788838][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1285'. [ 212.842842][T10863] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1286'. [ 212.886808][T10863] netlink: 'syz.4.1286': attribute type 10 has an invalid length. [ 213.310850][T10882] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 213.722498][T10902] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1296'. [ 213.748536][T10907] unsupported nlmsg_type 40 [ 213.794917][T10906] netlink: 'syz.4.1298': attribute type 29 has an invalid length. [ 213.807529][T10910] netlink: 'syz.4.1298': attribute type 29 has an invalid length. [ 213.887682][T10906] netlink: 'syz.4.1298': attribute type 29 has an invalid length. [ 213.922652][T10906] netlink: 'syz.4.1298': attribute type 29 has an invalid length. [ 213.976287][T10910] netlink: 'syz.4.1298': attribute type 21 has an invalid length. [ 214.078859][T10924] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1301'. [ 214.409967][T10947] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1304'. [ 214.417822][T10943] netlink: 'syz.0.1305': attribute type 4 has an invalid length. [ 214.604909][T10955] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 214.626863][T10947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1304'. [ 214.657873][T10961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1307'. [ 215.083432][T10982] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1312'. [ 215.150878][T10983] tipc: Enabled bearer , priority 0 [ 215.184877][T10987] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1313'. [ 215.237805][T10991] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1314'. [ 215.368154][T10980] syzkaller0: entered promiscuous mode [ 215.376589][T10980] syzkaller0: entered allmulticast mode [ 215.385553][T10980] tipc: Resetting bearer [ 215.416086][T10979] tipc: Resetting bearer [ 215.485451][T11003] net_ratelimit: 395 callbacks suppressed [ 215.485473][T11003] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 216.257267][ T981] tipc: Node number set to 2330272843 [ 217.012001][T10979] tipc: Disabling bearer [ 217.060306][T11014] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 217.592173][T11034] syzkaller1: entered promiscuous mode [ 217.654292][T11034] syzkaller1: entered allmulticast mode [ 218.307781][T11071] __nla_validate_parse: 5 callbacks suppressed [ 218.307802][T11071] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1337'. [ 218.616385][T11082] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1338'. [ 218.625389][T11081] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1339'. [ 219.403830][T11116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1347'. [ 219.445417][T11116] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1347'. [ 219.603633][T11124] netlink: 'syz.0.1350': attribute type 4 has an invalid length. [ 219.625021][T11124] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1350'. [ 219.637216][T11077] infiniband syz!: set down [ 219.645524][T11077] infiniband syz!: added team_slave_0 [ 219.662969][T11077] syz!: rxe_create_cq: returned err = -12 [ 219.675502][T11077] infiniband syz!: Couldn't create ib_mad CQ [ 219.682686][T11077] infiniband syz!: Couldn't open port 1 [ 219.729062][T11077] RDS/IB: syz!: added [ 219.733866][T11077] smc: adding ib device syz! with port count 1 [ 219.742682][T11077] smc: ib device syz! port 1 has pnetid [ 219.770922][T11125] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 219.810105][T11131] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 220.098708][T11140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.123871][T11140] v: renamed from dummy0 [ 220.186765][T11138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1352'. [ 220.459303][T11151] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1357'. [ 220.571681][T11154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1360'. [ 220.596330][T11151] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1357'. [ 220.810048][T11159] netlink: 'syz.0.1362': attribute type 1 has an invalid length. [ 221.436637][T11184] netlink: 'syz.3.1369': attribute type 7 has an invalid length. [ 221.444676][T11184] netlink: 'syz.3.1369': attribute type 8 has an invalid length. [ 221.577917][T11190] netlink: 'syz.2.1372': attribute type 1 has an invalid length. [ 222.943118][T11246] vlan3: entered allmulticast mode [ 222.956800][T11246] gretap0: entered allmulticast mode [ 223.106000][T11259] netlink: 'syz.3.1393': attribute type 3 has an invalid length. [ 223.188462][T11259] netlink: 'syz.3.1393': attribute type 1 has an invalid length. [ 223.223321][T11261] netlink: 'syz.3.1393': attribute type 3 has an invalid length. [ 223.530455][T11273] __nla_validate_parse: 13 callbacks suppressed [ 223.530474][T11273] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1397'. [ 224.082311][T11293] netlink: 'syz.1.1402': attribute type 9 has an invalid length. [ 224.134436][T11302] netlink: 'syz.1.1402': attribute type 9 has an invalid length. [ 224.162312][T11296] netlink: 30 bytes leftover after parsing attributes in process `syz.2.1403'. [ 224.177645][T11296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1403'. [ 224.210806][T11296] netlink: 30 bytes leftover after parsing attributes in process `syz.2.1403'. [ 224.220957][T11296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1403'. [ 224.435347][T11320] pim6reg: entered allmulticast mode [ 224.585962][T11328] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1411'. [ 224.696884][T11331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1413'. [ 224.814995][T11336] syzkaller1: entered promiscuous mode [ 224.835498][T11336] syzkaller1: entered allmulticast mode [ 224.867474][T11334] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1414'. [ 224.998691][T11342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1417'. [ 225.009993][T11344] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 225.381223][T11351] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1421'. [ 225.555461][T11358] netlink: 'syz.3.1425': attribute type 21 has an invalid length. [ 225.686750][T11364] Bluetooth: MGMT ver 1.23 [ 225.862671][T11370] netlink: 'syz.3.1428': attribute type 2 has an invalid length. [ 225.873991][T11373] netlink: 'syz.3.1428': attribute type 21 has an invalid length. [ 226.309974][ T55] block nbd0: Connection timed out, retrying (0/1 alive) [ 226.318249][ T55] block nbd0: Dead connection, failed to find a fallback [ 226.325542][ T55] block nbd0: shutting down sockets [ 226.331251][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 226.341728][ T55] Buffer I/O error on dev nbd0, logical block 0, async page read [ 226.350944][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 226.375943][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read [ 226.424592][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 226.485560][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read [ 226.493780][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 226.516021][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read [ 226.522209][T11400] netlink: 'syz.1.1438': attribute type 21 has an invalid length. [ 226.570608][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 226.583141][T11400] netlink: 'syz.1.1438': attribute type 21 has an invalid length. [ 226.617144][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read [ 226.658993][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 226.688474][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read [ 226.689400][T11405] vlan0: entered allmulticast mode [ 226.722296][T11405] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 226.729927][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 226.775999][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read [ 226.804682][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 226.842041][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read [ 226.865045][ T5850] ldm_validate_partition_table(): Disk read failed. [ 226.877339][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 226.896807][T11417] netlink: 'syz.3.1441': attribute type 21 has an invalid length. [ 226.903750][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read [ 226.913385][T11417] netlink: 'syz.3.1441': attribute type 22 has an invalid length. [ 226.919650][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 226.946610][T11417] netlink: 'syz.3.1441': attribute type 23 has an invalid length. [ 226.972098][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read [ 227.003350][ T5850] Dev nbd0: unable to read RDB block 0 [ 227.025377][ T5850] nbd0: unable to read partition table [ 227.030581][T11417] netlink: 'syz.3.1441': attribute type 25 has an invalid length. [ 227.055819][ T5850] ldm_validate_partition_table(): Disk read failed. [ 227.082927][T11417] netlink: 'syz.3.1441': attribute type 26 has an invalid length. [ 227.091178][ T5850] Dev nbd0: unable to read RDB block 0 [ 227.091877][ T5850] nbd0: unable to read partition table [ 227.186089][ T24] IPVS: starting estimator thread 0... [ 227.279254][T11427] IPVS: using max 24 ests per chain, 57600 per kthread [ 227.928918][T11460] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 228.280742][T11476] veth1_to_batadv: entered promiscuous mode [ 228.681790][T11500] __nla_validate_parse: 12 callbacks suppressed [ 228.681810][T11500] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1470'. [ 228.691782][T11497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1467'. [ 228.719352][T11488] 8021q: adding VLAN 0 to HW filter on device bond2 [ 228.727798][T11497] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1467'. [ 228.815642][T11488] veth7: entered promiscuous mode [ 228.903881][T11493] 8021q: adding VLAN 0 to HW filter on device bond2 [ 228.911430][T11493] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 228.923435][T11493] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 229.004409][T11505] vlan3: entered allmulticast mode [ 229.025494][T11505] bond2: entered allmulticast mode [ 229.106548][T11509] syzkaller0: entered allmulticast mode [ 229.799573][T11543] syzkaller1: entered promiscuous mode [ 229.805117][T11543] syzkaller1: entered allmulticast mode [ 229.829637][T11545] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1483'. [ 229.861544][T11543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 229.869221][T11543] IPv6: NLM_F_CREATE should be set when creating new route [ 229.890742][T11548] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1484'. [ 230.005720][T11554] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 230.256766][T11566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1488'. [ 230.316276][T11568] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1490'. [ 230.327238][T11566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1488'. [ 230.397857][T11566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1488'. [ 230.425438][T11566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1488'. [ 230.633968][T11585] gretap0: entered promiscuous mode [ 230.647191][T11585] 0ªî{X¹¦: renamed from gretap0 [ 230.663837][T11585] 0ªî{X¹¦: left promiscuous mode [ 230.676218][T11585] 0ªî{X¹¦: entered allmulticast mode [ 230.710354][T11585] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 230.942970][T11598] sctp: [Deprecated]: syz.2.1502 (pid 11598) Use of int in maxseg socket option. [ 230.942970][T11598] Use struct sctp_assoc_value instead [ 231.746132][T11644] lo: entered allmulticast mode [ 231.916621][T11649] pimreg: entered allmulticast mode [ 232.062154][T11657] dvmrp0: entered allmulticast mode [ 232.848314][T11699] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.855706][T11699] team0: Cannot enslave team device to itself [ 233.132647][T11719] syz.3.1535: vmalloc error: size 4722688, failed to allocated page array size 9224, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 233.176023][T11719] CPU: 1 UID: 0 PID: 11719 Comm: syz.3.1535 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10 #0 PREEMPT(full) [ 233.176055][T11719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 233.176068][T11719] Call Trace: [ 233.176076][T11719] [ 233.176086][T11719] dump_stack_lvl+0x189/0x250 [ 233.176119][T11719] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.176142][T11719] ? __pfx__printk+0x10/0x10 [ 233.176170][T11719] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 233.176195][T11719] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 233.176221][T11719] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 233.176249][T11719] warn_alloc+0x214/0x310 [ 233.176278][T11719] ? __pfx_warn_alloc+0x10/0x10 [ 233.176311][T11719] ? __get_vm_area_node+0x28f/0x300 [ 233.176346][T11719] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 233.176383][T11719] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 233.176437][T11719] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 233.176457][T11719] ? __futex_wait+0x1d1/0x3e0 [ 233.176487][T11719] ? __pfx_aa_get_newest_label+0x10/0x10 [ 233.176513][T11719] ? __futex_wait+0x34f/0x3e0 [ 233.176551][T11719] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 233.176580][T11719] __vmalloc_noprof+0xb1/0xf0 [ 233.176600][T11719] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 233.176635][T11719] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 233.176672][T11719] bpf_prog_alloc+0x3c/0x1a0 [ 233.176706][T11719] bpf_prog_load+0x735/0x1930 [ 233.176751][T11719] ? __pfx_bpf_prog_load+0x10/0x10 [ 233.176807][T11719] ? bpf_lsm_bpf+0x9/0x20 [ 233.176843][T11719] ? security_bpf+0x7e/0x300 [ 233.176872][T11719] __sys_bpf+0x528/0x870 [ 233.176904][T11719] ? __pfx___sys_bpf+0x10/0x10 [ 233.176956][T11719] ? rcu_is_watching+0x15/0xb0 [ 233.177001][T11719] __x64_sys_bpf+0x7c/0x90 [ 233.177029][T11719] do_syscall_64+0xfa/0x3b0 [ 233.177060][T11719] ? lockdep_hardirqs_on+0x9c/0x150 [ 233.177090][T11719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.177111][T11719] ? clear_bhb_loop+0x60/0xb0 [ 233.177138][T11719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.177158][T11719] RIP: 0033:0x7f797698eb69 [ 233.177178][T11719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.177196][T11719] RSP: 002b:00007f79777d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 233.177220][T11719] RAX: ffffffffffffffda RBX: 00007f7976bb6160 RCX: 00007f797698eb69 [ 233.177236][T11719] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 233.177249][T11719] RBP: 00007f7976a11df1 R08: 0000000000000000 R09: 0000000000000000 [ 233.177262][T11719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.177274][T11719] R13: 0000000000000000 R14: 00007f7976bb6160 R15: 00007ffc66cf33d8 [ 233.177307][T11719] [ 233.463105][T11719] Mem-Info: [ 233.466416][T11719] active_anon:6497 inactive_anon:0 isolated_anon:0 [ 233.466416][T11719] active_file:1171 inactive_file:39908 isolated_file:0 [ 233.466416][T11719] unevictable:768 dirty:74 writeback:0 [ 233.466416][T11719] slab_reclaimable:11007 slab_unreclaimable:106707 [ 233.466416][T11719] mapped:30709 shmem:2994 pagetables:1062 [ 233.466416][T11719] sec_pagetables:0 bounce:0 [ 233.466416][T11719] kernel_misc_reclaimable:0 [ 233.466416][T11719] free:1321682 free_pcp:14157 free_cma:0 [ 233.533419][T11719] Node 0 active_anon:26888kB inactive_anon:0kB active_file:4684kB inactive_file:159428kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123736kB dirty:292kB writeback:0kB shmem:11240kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13072kB pagetables:4116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 233.597842][T11719] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 233.695192][T11719] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 233.815717][T11719] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 233.822805][T11732] validate_nla: 7 callbacks suppressed [ 233.822823][T11732] netlink: 'syz.0.1538': attribute type 12 has an invalid length. [ 233.823405][T11719] Node 0 DMA32 free:1362556kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31140kB inactive_anon:0kB active_file:4684kB inactive_file:157612kB unevictable:1536kB writepending:292kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:39072kB local_pcp:20324kB free_cma:0kB [ 233.870674][T11719] lowmem_reserve[]: 0 0 1 1 1 [ 233.875456][T11719] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1816kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 233.956386][T11719] lowmem_reserve[]: 0 0 0 0 0 [ 233.992094][T11719] Node 1 Normal free:3903600kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17792kB local_pcp:8480kB free_cma:0kB [ 234.072345][T11719] lowmem_reserve[]: 0 0 0 0 0 [ 234.103679][T11719] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 234.184684][T11743] nftables ruleset with unbound set [ 234.197306][T11719] Node 0 DMA32: 280*4kB (UME) 387*8kB (UM) 37*16kB (UME) 26*32kB (UE) 40*64kB (UME) 16*128kB (UME) 8*256kB (UME) 7*512kB (UME) 8*1024kB (M) 6*2048kB (UME) 324*4096kB (UM) = 1363464kB [ 234.262689][T11719] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 234.311898][T11719] Node 1 Normal: 168*4kB (UME) 46*8kB (UME) 38*16kB (UME) 112*32kB (UME) 36*64kB (UME) 12*128kB (UME) 3*256kB (UM) 3*512kB (ME) 3*1024kB (UME) 1*2048kB (E) 949*4096kB (M) = 3903600kB [ 234.395979][T11719] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 234.432255][T11719] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 234.482560][T11719] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 234.513394][T11751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.539365][T11719] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 234.570796][T11719] 42477 total pagecache pages [ 234.575637][T11719] 0 pages in swap cache [ 234.580653][T11752] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0 [ 234.611536][T11719] Free swap = 124996kB [ 234.615885][T11719] Total swap = 124996kB [ 234.658525][T11719] 2097051 pages RAM [ 234.664672][T11719] 0 pages HighMem/MovableOnly [ 234.677865][T11719] 424872 pages reserved [ 234.682062][T11719] 0 pages cma reserved [ 235.193719][T11776] __nla_validate_parse: 9 callbacks suppressed [ 235.193738][T11776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1550'. [ 235.322647][T11779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.909597][T11811] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1561'. [ 236.144959][T11821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1565'. [ 236.202602][T11821] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 236.284394][T11821] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 236.306208][T11821] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 236.341614][T11821] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 236.360262][T11821] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 236.444585][T11821] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 236.497518][T11821] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 236.526230][T11821] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 236.589472][T11844] bond0: Error: Cannot enslave bond to itself. [ 236.611508][T11821] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 236.683328][T11821] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 237.194706][T11868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1579'. [ 237.381676][T11874] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1581'. [ 237.424131][T11874] netlink: 'syz.1.1581': attribute type 7 has an invalid length. [ 237.908054][T11906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1589'. [ 238.106034][T11909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1591'. [ 238.302604][T11921] netlink: 284 bytes leftover after parsing attributes in process `syz.1.1593'. [ 238.387155][T11923] netlink: 284 bytes leftover after parsing attributes in process `syz.1.1593'. [ 238.709620][T11942] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1601'. [ 238.765678][T11946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.498560][T11982] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 239.669505][T11985] tipc: Enabled bearer , priority 0 [ 239.692750][T11985] syzkaller0: entered promiscuous mode [ 239.712268][T11985] syzkaller0: entered allmulticast mode [ 239.821096][T11984] tipc: Resetting bearer [ 239.897850][T11984] tipc: Disabling bearer [ 239.963401][T12001] IPVS: Error connecting to the multicast addr [ 240.018029][T12005] netlink: 'syz.3.1626': attribute type 1 has an invalid length. [ 240.266827][T12015] __nla_validate_parse: 3 callbacks suppressed [ 240.266847][T12015] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1628'. [ 240.436193][T12029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1632'. [ 240.733393][T12039] netlink: 'syz.4.1636': attribute type 1 has an invalid length. [ 240.750592][T12036] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1635'. [ 240.756753][T12039] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1636'. [ 240.775496][T12039] netlink: 'syz.4.1636': attribute type 1 has an invalid length. [ 240.785934][T12038] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1635'. [ 240.840983][T12036] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1635'. [ 240.866373][T12047] netlink: 'syz.4.1636': attribute type 83 has an invalid length. [ 241.338359][T12071] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1644'. [ 241.380707][T12071] netlink: 'syz.4.1644': attribute type 7 has an invalid length. [ 241.444903][T12071] netlink: 'syz.4.1644': attribute type 8 has an invalid length. [ 241.492228][T12071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1644'. [ 241.509139][T12075] netlink: 'syz.0.1645': attribute type 1 has an invalid length. [ 241.527586][T12075] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1645'. [ 241.541951][T12080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1647'. [ 241.554150][T12075] netlink: 'syz.0.1645': attribute type 1 has an invalid length. [ 241.686480][T12080] hsr_slave_1 (unregistering): left promiscuous mode [ 242.667445][T12115] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 243.291882][T12157] netlink: 'syz.4.1671': attribute type 10 has an invalid length. [ 243.847984][T12178] tipc: Enabled bearer , priority 0 [ 243.879040][T12178] syzkaller0: entered allmulticast mode [ 243.919764][T12178] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 243.960582][T12178] tipc: Resetting bearer [ 244.126148][T12177] tipc: Disabling bearer [ 244.318613][T12215] netlink: 'syz.1.1686': attribute type 83 has an invalid length. [ 244.336742][T12202] veth9: entered allmulticast mode [ 244.382394][T12216] : renamed from bond0 [ 244.465613][T12207] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 244.485412][T12207] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 244.493751][T12207] gretap1: entered promiscuous mode [ 244.504680][T12207] gretap1: entered allmulticast mode [ 245.138842][T12248] team_slave_0: entered promiscuous mode [ 245.144850][T12248] team_slave_1: entered promiscuous mode [ 245.151085][T12248] macsec4: entered allmulticast mode [ 245.156414][T12248] team0: entered allmulticast mode [ 245.161936][T12248] team_slave_0: entered allmulticast mode [ 245.169025][T12248] team_slave_1: entered allmulticast mode [ 245.212596][T12248] team0: left allmulticast mode [ 245.222918][T12248] team_slave_0: left allmulticast mode [ 245.229788][T12248] team_slave_1: left allmulticast mode [ 245.235561][T12248] team_slave_0: left promiscuous mode [ 245.241177][T12248] team_slave_1: left promiscuous mode [ 245.461298][T12264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.597562][T12269] __nla_validate_parse: 43 callbacks suppressed [ 245.597583][T12269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1704'. [ 245.715614][T12272] validate_nla: 2 callbacks suppressed [ 245.715632][T12272] netlink: 'syz.3.1705': attribute type 1 has an invalid length. [ 245.748025][T12274] netlink: 'syz.3.1705': attribute type 1 has an invalid length. [ 245.909453][T12287] tipc: Can't bind to reserved service type 0 [ 245.920604][T12282] netlink: 'syz.1.1709': attribute type 11 has an invalid length. [ 245.927765][T12291] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1708'. [ 245.941637][T12282] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1709'. [ 246.003008][T12291] netlink: zone id is out of range [ 246.023726][T12291] netlink: zone id is out of range [ 246.043488][T12291] netlink: zone id is out of range [ 246.074666][T12291] netlink: zone id is out of range [ 246.081266][T12295] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 246.106135][T12291] netlink: zone id is out of range [ 246.145074][T12291] netlink: zone id is out of range [ 246.170399][T12291] netlink: zone id is out of range [ 246.186823][T12291] netlink: zone id is out of range [ 246.257126][T12291] netlink: zone id is out of range [ 246.417293][T12304] netlink: 'syz.4.1716': attribute type 9 has an invalid length. [ 246.432552][T12302] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 246.446872][ T30] audit: type=1800 audit(1754278977.014:2): pid=12302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1715" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 246.475418][T12304] netlink: 'syz.4.1716': attribute type 9 has an invalid length. [ 246.497330][T12302] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 246.543357][T12302] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 246.652353][T12313] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.693479][T12302] syz.2.1715 (12302) used greatest stack depth: 17864 bytes left [ 246.719123][T12313] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.896517][T12319] netlink: 'syz.1.1720': attribute type 1 has an invalid length. [ 246.915018][T12332] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1723'. [ 246.933524][T12319] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1720'. [ 246.946493][T12313] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.960994][T12313] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.981393][T12319] netlink: 'syz.1.1720': attribute type 1 has an invalid length. [ 247.166073][T12313] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.195293][T12313] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.240755][T12344] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1727'. [ 247.256215][T12341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1726'. [ 247.322525][T12313] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.347836][T12313] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.502514][T12351] tipc: Enabling of bearer rejected, failed to enable media [ 247.664930][ T7495] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.692100][ T7495] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.827597][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1734'. [ 247.843170][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1734'. [ 247.865807][ T7510] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.883575][ T7510] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.911264][ T7510] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.931596][ T7510] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.032399][ T3457] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.043417][ T3457] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.059237][T12315] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.072390][T12315] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.095159][ T3457] ================================================================== [ 248.103275][ T3457] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1340 [ 248.110877][ T3457] Read of size 8 at addr ffff88805f9e30b0 by task kworker/u8:8/3457 [ 248.118883][ T3457] [ 248.121244][ T3457] CPU: 1 UID: 0 PID: 3457 Comm: kworker/u8:8 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10 #0 PREEMPT(full) [ 248.121274][ T3457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 248.121289][ T3457] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 248.121329][ T3457] Call Trace: [ 248.121338][ T3457] [ 248.121347][ T3457] dump_stack_lvl+0x189/0x250 [ 248.121370][ T3457] ? __kasan_check_byte+0x12/0x40 [ 248.121406][ T3457] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.121427][ T3457] ? lock_release+0x4b/0x3e0 [ 248.121459][ T3457] ? __virt_addr_valid+0x4a5/0x5c0 [ 248.121486][ T3457] print_report+0xca/0x240 [ 248.121517][ T3457] ? __mutex_lock+0x147/0x1340 [ 248.121547][ T3457] kasan_report+0x118/0x150 [ 248.121577][ T3457] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 248.121607][ T3457] ? __mutex_lock+0x147/0x1340 [ 248.121642][ T3457] __mutex_lock+0x147/0x1340 [ 248.121676][ T3457] ? __mutex_lock+0x5b6/0x1340 [ 248.121709][ T3457] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 248.121741][ T3457] ? __pfx___mutex_lock+0x10/0x10 [ 248.121776][ T3457] ? __lock_acquire+0xab9/0xd20 [ 248.121811][ T3457] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 248.121855][ T3457] ? process_scheduled_works+0x9ef/0x17b0 [ 248.121886][ T3457] ? process_scheduled_works+0x9ef/0x17b0 [ 248.121918][ T3457] process_scheduled_works+0xae1/0x17b0 [ 248.121966][ T3457] ? __pfx_process_scheduled_works+0x10/0x10 [ 248.122007][ T3457] worker_thread+0x8a0/0xda0 [ 248.122054][ T3457] kthread+0x70e/0x8a0 [ 248.122078][ T3457] ? __pfx_worker_thread+0x10/0x10 [ 248.122111][ T3457] ? __pfx_kthread+0x10/0x10 [ 248.122134][ T3457] ? _raw_spin_unlock_irq+0x23/0x50 [ 248.122161][ T3457] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.122189][ T3457] ? __pfx_kthread+0x10/0x10 [ 248.122213][ T3457] ret_from_fork+0x3fc/0x770 [ 248.122247][ T3457] ? __pfx_ret_from_fork+0x10/0x10 [ 248.122282][ T3457] ? __switch_to_asm+0x39/0x70 [ 248.122305][ T3457] ? __switch_to_asm+0x33/0x70 [ 248.122328][ T3457] ? __pfx_kthread+0x10/0x10 [ 248.122352][ T3457] ret_from_fork_asm+0x1a/0x30 [ 248.122395][ T3457] [ 248.122403][ T3457] [ 248.329080][ T3457] Allocated by task 12313: [ 248.333683][ T3457] kasan_save_track+0x3e/0x80 [ 248.342554][ T3457] __kasan_kmalloc+0x93/0xb0 [ 248.347188][ T3457] __kmalloc_noprof+0x27a/0x4f0 [ 248.352073][ T3457] udp_tunnel_nic_netdevice_event+0x854/0x19f0 [ 248.358250][ T3457] notifier_call_chain+0x1b3/0x3e0 [ 248.363376][ T3457] register_netdevice+0x1608/0x1ae0 [ 248.368593][ T3457] nsim_create+0xae8/0xf10 [ 248.373046][ T3457] __nsim_dev_port_add+0x6b6/0xb10 [ 248.378176][ T3457] nsim_dev_port_add_all+0x37/0xf0 [ 248.383313][ T3457] nsim_dev_reload_up+0x451/0x780 [ 248.388358][ T3457] devlink_reload+0x4ec/0x8d0 [ 248.393058][ T3457] devlink_nl_reload_doit+0xb35/0xd50 [ 248.398472][ T3457] genl_family_rcv_msg_doit+0x215/0x300 [ 248.404042][ T3457] genl_rcv_msg+0x60e/0x790 [ 248.408583][ T3457] netlink_rcv_skb+0x205/0x470 [ 248.413370][ T3457] genl_rcv+0x28/0x40 [ 248.417368][ T3457] netlink_unicast+0x82c/0x9e0 [ 248.422155][ T3457] netlink_sendmsg+0x805/0xb30 [ 248.426947][ T3457] __sock_sendmsg+0x21c/0x270 [ 248.431651][ T3457] ____sys_sendmsg+0x505/0x830 [ 248.436431][ T3457] ___sys_sendmsg+0x21f/0x2a0 [ 248.441430][ T3457] __x64_sys_sendmsg+0x19b/0x260 [ 248.446391][ T3457] do_syscall_64+0xfa/0x3b0 [ 248.450925][ T3457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.456834][ T3457] [ 248.459178][ T3457] Freed by task 12315: [ 248.463259][ T3457] kasan_save_track+0x3e/0x80 [ 248.467963][ T3457] kasan_save_free_info+0x46/0x50 [ 248.473009][ T3457] __kasan_slab_free+0x62/0x70 [ 248.477799][ T3457] kfree+0x18e/0x440 [ 248.481719][ T3457] udp_tunnel_nic_netdevice_event+0x1332/0x19f0 [ 248.487983][ T3457] notifier_call_chain+0x1b3/0x3e0 [ 248.493111][ T3457] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 248.499549][ T3457] unregister_netdevice_queue+0x33c/0x380 [ 248.505293][ T3457] nsim_destroy+0x1dd/0x670 [ 248.509820][ T3457] __nsim_dev_port_del+0x14d/0x1b0 [ 248.514954][ T3457] nsim_dev_reload_destroy+0x288/0x490 [ 248.520437][ T3457] nsim_dev_reload_down+0x8a/0xc0 [ 248.525482][ T3457] devlink_reload+0x1b3/0x8d0 [ 248.530182][ T3457] devlink_nl_reload_doit+0xb35/0xd50 [ 248.535583][ T3457] genl_family_rcv_msg_doit+0x215/0x300 [ 248.541146][ T3457] genl_rcv_msg+0x60e/0x790 [ 248.545671][ T3457] netlink_rcv_skb+0x205/0x470 [ 248.550461][ T3457] genl_rcv+0x28/0x40 [ 248.554545][ T3457] netlink_unicast+0x82c/0x9e0 [ 248.559332][ T3457] netlink_sendmsg+0x805/0xb30 [ 248.564172][ T3457] __sock_sendmsg+0x21c/0x270 [ 248.568870][ T3457] ____sys_sendmsg+0x505/0x830 [ 248.573648][ T3457] ___sys_sendmsg+0x21f/0x2a0 [ 248.578339][ T3457] __x64_sys_sendmsg+0x19b/0x260 [ 248.583294][ T3457] do_syscall_64+0xfa/0x3b0 [ 248.587824][ T3457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.593735][ T3457] [ 248.596066][ T3457] Last potentially related work creation: [ 248.601787][ T3457] kasan_save_stack+0x3e/0x60 [ 248.606490][ T3457] kasan_record_aux_stack+0xbd/0xd0 [ 248.611712][ T3457] insert_work+0x3d/0x330 [ 248.616197][ T3457] __queue_work+0xbd9/0xfe0 [ 248.620732][ T3457] queue_work_on+0x181/0x270 [ 248.625336][ T3457] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 248.631001][ T3457] udp_tunnel_push_rx_port+0x180/0x200 [ 248.636480][ T3457] geneve_offload_rx_ports+0xd7/0x160 [ 248.641871][ T3457] geneve_netdevice_event+0x6a/0x80 [ 248.647223][ T3457] notifier_call_chain+0x1b3/0x3e0 [ 248.652357][ T3457] call_netdevice_notifiers+0x88/0xc0 [ 248.657754][ T3457] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 248.664025][ T3457] notifier_call_chain+0x1b3/0x3e0 [ 248.669145][ T3457] register_netdevice+0x1608/0x1ae0 [ 248.674353][ T3457] nsim_create+0xae8/0xf10 [ 248.678786][ T3457] __nsim_dev_port_add+0x6b6/0xb10 [ 248.683924][ T3457] nsim_dev_port_add_all+0x37/0xf0 [ 248.689056][ T3457] nsim_dev_reload_up+0x451/0x780 [ 248.694105][ T3457] devlink_reload+0x4ec/0x8d0 [ 248.698805][ T3457] devlink_nl_reload_doit+0xb35/0xd50 [ 248.704200][ T3457] genl_family_rcv_msg_doit+0x215/0x300 [ 248.709770][ T3457] genl_rcv_msg+0x60e/0x790 [ 248.714305][ T3457] netlink_rcv_skb+0x205/0x470 [ 248.719092][ T3457] genl_rcv+0x28/0x40 [ 248.723101][ T3457] netlink_unicast+0x82c/0x9e0 [ 248.727887][ T3457] netlink_sendmsg+0x805/0xb30 [ 248.732684][ T3457] __sock_sendmsg+0x21c/0x270 [ 248.737385][ T3457] ____sys_sendmsg+0x505/0x830 [ 248.742206][ T3457] ___sys_sendmsg+0x21f/0x2a0 [ 248.746895][ T3457] __x64_sys_sendmsg+0x19b/0x260 [ 248.751839][ T3457] do_syscall_64+0xfa/0x3b0 [ 248.756363][ T3457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.762265][ T3457] [ 248.764596][ T3457] Second to last potentially related work creation: [ 248.771180][ T3457] kasan_save_stack+0x3e/0x60 [ 248.775874][ T3457] kasan_record_aux_stack+0xbd/0xd0 [ 248.781082][ T3457] insert_work+0x3d/0x330 [ 248.785445][ T3457] __queue_work+0xcfc/0xfe0 [ 248.789954][ T3457] queue_work_on+0x181/0x270 [ 248.794551][ T3457] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 248.800197][ T3457] udp_tunnel_push_rx_port+0x180/0x200 [ 248.805664][ T3457] vxlan_offload_rx_ports+0x139/0x200 [ 248.811051][ T3457] vxlan_netdevice_event+0x111/0x470 [ 248.816515][ T3457] notifier_call_chain+0x1b3/0x3e0 [ 248.821630][ T3457] call_netdevice_notifiers+0x88/0xc0 [ 248.827022][ T3457] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 248.833294][ T3457] notifier_call_chain+0x1b3/0x3e0 [ 248.838451][ T3457] register_netdevice+0x1608/0x1ae0 [ 248.843663][ T3457] nsim_create+0xae8/0xf10 [ 248.848088][ T3457] __nsim_dev_port_add+0x6b6/0xb10 [ 248.853212][ T3457] nsim_dev_port_add_all+0x37/0xf0 [ 248.858335][ T3457] nsim_dev_reload_up+0x451/0x780 [ 248.863481][ T3457] devlink_reload+0x4ec/0x8d0 [ 248.868162][ T3457] devlink_nl_reload_doit+0xb35/0xd50 [ 248.873537][ T3457] genl_family_rcv_msg_doit+0x215/0x300 [ 248.879090][ T3457] genl_rcv_msg+0x60e/0x790 [ 248.883599][ T3457] netlink_rcv_skb+0x205/0x470 [ 248.888376][ T3457] genl_rcv+0x28/0x40 [ 248.892363][ T3457] netlink_unicast+0x82c/0x9e0 [ 248.897152][ T3457] netlink_sendmsg+0x805/0xb30 [ 248.902017][ T3457] __sock_sendmsg+0x21c/0x270 [ 248.906694][ T3457] ____sys_sendmsg+0x505/0x830 [ 248.911464][ T3457] ___sys_sendmsg+0x21f/0x2a0 [ 248.916149][ T3457] __x64_sys_sendmsg+0x19b/0x260 [ 248.921102][ T3457] do_syscall_64+0xfa/0x3b0 [ 248.925626][ T3457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.931559][ T3457] [ 248.933886][ T3457] The buggy address belongs to the object at ffff88805f9e3000 [ 248.933886][ T3457] which belongs to the cache kmalloc-256 of size 256 [ 248.948037][ T3457] The buggy address is located 176 bytes inside of [ 248.948037][ T3457] freed 256-byte region [ffff88805f9e3000, ffff88805f9e3100) [ 248.961843][ T3457] [ 248.964173][ T3457] The buggy address belongs to the physical page: [ 248.970584][ T3457] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5f9e2 [ 248.979362][ T3457] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 248.987892][ T3457] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 248.995452][ T3457] page_type: f5(slab) [ 248.999452][ T3457] raw: 00fff00000000040 ffff88801a441b40 ffffea0000bec580 dead000000000002 [ 249.008049][ T3457] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 249.016671][ T3457] head: 00fff00000000040 ffff88801a441b40 ffffea0000bec580 dead000000000002 [ 249.025450][ T3457] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 249.034128][ T3457] head: 00fff00000000001 ffffea00017e7881 00000000ffffffff 00000000ffffffff [ 249.042812][ T3457] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 249.051496][ T3457] page dumped because: kasan: bad access detected [ 249.057926][ T3457] page_owner tracks the page as allocated [ 249.063644][ T3457] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5853, tgid 5853 (syz-executor), ts 92920803353, free_ts 92675392055 [ 249.085021][ T3457] post_alloc_hook+0x240/0x2a0 [ 249.089821][ T3457] get_page_from_freelist+0x21e4/0x22c0 [ 249.095377][ T3457] __alloc_frozen_pages_noprof+0x181/0x370 [ 249.101195][ T3457] alloc_pages_mpol+0x232/0x4a0 [ 249.106062][ T3457] allocate_slab+0x8a/0x3b0 [ 249.110578][ T3457] ___slab_alloc+0xbfc/0x1480 [ 249.115273][ T3457] __kmalloc_noprof+0x305/0x4f0 [ 249.120144][ T3457] __register_sysctl_table+0xba1/0x1340 [ 249.125704][ T3457] neigh_sysctl_register+0x9a2/0xa80 [ 249.130994][ T3457] devinet_sysctl_register+0xad/0x200 [ 249.136375][ T3457] inetdev_event+0xef2/0x15b0 [ 249.141067][ T3457] notifier_call_chain+0x1b3/0x3e0 [ 249.146182][ T3457] netif_change_name+0x5e9/0x960 [ 249.151134][ T3457] do_setlink+0x9f6/0x41c0 [ 249.155551][ T3457] rtnl_newlink+0x160b/0x1c70 [ 249.160239][ T3457] rtnetlink_rcv_msg+0x7cf/0xb70 [ 249.165185][ T3457] page last free pid 5839 tgid 5839 stack trace: [ 249.171509][ T3457] __free_frozen_pages+0xc71/0xe70 [ 249.176623][ T3457] __put_partials+0x161/0x1c0 [ 249.181302][ T3457] put_cpu_partial+0x17c/0x250 [ 249.186071][ T3457] __slab_free+0x2f7/0x400 [ 249.190494][ T3457] qlist_free_all+0x97/0x140 [ 249.195095][ T3457] kasan_quarantine_reduce+0x148/0x160 [ 249.200568][ T3457] __kasan_slab_alloc+0x22/0x80 [ 249.205539][ T3457] __kmalloc_cache_noprof+0x1be/0x3d0 [ 249.210931][ T3457] netdevice_event+0x3a1/0x8a0 [ 249.215701][ T3457] notifier_call_chain+0x1b3/0x3e0 [ 249.220814][ T3457] __netdev_upper_dev_link+0x3c3/0x590 [ 249.226298][ T3457] netdev_upper_dev_link+0x9d/0xf0 [ 249.231425][ T3457] macsec_newlink+0xaec/0x11b0 [ 249.236281][ T3457] rtnl_newlink_create+0x310/0xb00 [ 249.241396][ T3457] rtnl_newlink+0x16d6/0x1c70 [ 249.246087][ T3457] rtnetlink_rcv_msg+0x7cf/0xb70 [ 249.251033][ T3457] [ 249.253362][ T3457] Memory state around the buggy address: [ 249.259006][ T3457] ffff88805f9e2f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 249.267077][ T3457] ffff88805f9e3000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 249.275147][ T3457] >ffff88805f9e3080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 249.283217][ T3457] ^ [ 249.288852][ T3457] ffff88805f9e3100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 249.296925][ T3457] ffff88805f9e3180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 249.304990][ T3457] ================================================================== [ 249.320314][ T3457] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 249.327565][ T3457] CPU: 0 UID: 0 PID: 3457 Comm: kworker/u8:8 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10 #0 PREEMPT(full) [ 249.339485][ T3457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 249.349572][ T3457] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 249.356908][ T3457] Call Trace: [ 249.360209][ T3457] [ 249.363176][ T3457] dump_stack_lvl+0x99/0x250 [ 249.367829][ T3457] ? __asan_memcpy+0x40/0x70 [ 249.372458][ T3457] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.377692][ T3457] ? __pfx__printk+0x10/0x10 [ 249.382326][ T3457] panic+0x2db/0x790 [ 249.386262][ T3457] ? __pfx_panic+0x10/0x10 [ 249.390745][ T3457] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 249.396693][ T3457] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 249.403310][ T3457] ? print_memory_metadata+0x314/0x400 [ 249.408833][ T3457] ? __mutex_lock+0x147/0x1340 [ 249.413642][ T3457] check_panic_on_warn+0x89/0xb0 [ 249.418622][ T3457] ? __mutex_lock+0x147/0x1340 [ 249.423428][ T3457] end_report+0x78/0x160 [ 249.427713][ T3457] kasan_report+0x129/0x150 [ 249.432251][ T3457] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 249.438176][ T3457] ? __mutex_lock+0x147/0x1340 [ 249.442986][ T3457] __mutex_lock+0x147/0x1340 [ 249.447641][ T3457] ? __mutex_lock+0x5b6/0x1340 [ 249.452455][ T3457] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 249.458742][ T3457] ? __pfx___mutex_lock+0x10/0x10 [ 249.463824][ T3457] ? __lock_acquire+0xab9/0xd20 [ 249.468719][ T3457] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 249.474835][ T3457] ? process_scheduled_works+0x9ef/0x17b0 [ 249.480591][ T3457] ? process_scheduled_works+0x9ef/0x17b0 [ 249.486353][ T3457] process_scheduled_works+0xae1/0x17b0 [ 249.492048][ T3457] ? __pfx_process_scheduled_works+0x10/0x10 [ 249.498113][ T3457] worker_thread+0x8a0/0xda0 [ 249.502856][ T3457] kthread+0x70e/0x8a0 [ 249.506962][ T3457] ? __pfx_worker_thread+0x10/0x10 [ 249.512119][ T3457] ? __pfx_kthread+0x10/0x10 [ 249.516747][ T3457] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.521987][ T3457] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.527265][ T3457] ? __pfx_kthread+0x10/0x10 [ 249.531890][ T3457] ret_from_fork+0x3fc/0x770 [ 249.536526][ T3457] ? __pfx_ret_from_fork+0x10/0x10 [ 249.541690][ T3457] ? __switch_to_asm+0x39/0x70 [ 249.546496][ T3457] ? __switch_to_asm+0x33/0x70 [ 249.551301][ T3457] ? __pfx_kthread+0x10/0x10 [ 249.555936][ T3457] ret_from_fork_asm+0x1a/0x30 [ 249.560752][ T3457] [ 249.564150][ T3457] Kernel Offset: disabled [ 249.568502][ T3457] Rebooting in 86400 seconds..