last executing test programs: 6.373526104s ago: executing program 1 (id=9702): r0 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) (async) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x50, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xffffffffffffff9f, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffff00, 0xffffffff, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}]}}]}, 0x50}}, 0x4040004) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f00000002c0)=r10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x8040) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1e3ab}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x2}]}}]}, 0x44}}, 0x2) close(r6) socket$unix(0x1, 0x2, 0x0) (async) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r12, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003c000300000000ff8800000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)={0x12c, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0xf, 0x0, 0x1, [@typed={0x8, 0x91, 0x0, 0x0, @str='-.&\x00'}, @typed={0x8, 0xaa, 0x0, 0x0, @u32=0xc}, @generic="0bdab8e40bb2cc70c3b110471372ae7a003c5cb1ab849fdd0df1b20649d4a008faa649712237cc8c83a39badfeaa65e92cb0b7d844f5cb0e9b525d84332c5058fc0f216adb72b6d473fd1dde93b2587c9fc4aa3ca4e37ed8c4847643bad824eb0b7d548050d76fefd2fd7e96e3e611a0ffb0ebf0cd108b0d6185235857288810225277077fcd2e4b9ed69c790b1e904d1c4804ae0afbb887e14d2bd623df9f7d7dc61e7911bb204a0c429bb22f715c59884afd7c32541dc3e82691fb99ac7ae6ed1730566a36197dc440f59451553939a2ba9aef55819a9b8a7e01", @generic="95c3e087693de123597de2c63d45c71ca8c416d0d7"]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r2}]}, 0x12c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_plug={{0x9}, {0x4}}]}, 0x60}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_plug={{0x9}, {0x4}}]}, 0x60}}, 0x0) 6.14613742s ago: executing program 2 (id=9706): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x3aaf9437, 0x30}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={r1, 0x6c}, &(0x7f0000000100)=0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c000000030601040000fcffffff0000070000080900020073797a3200000000050001"], 0x4c}}, 0x0) 5.938240442s ago: executing program 2 (id=9710): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x48010) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="6e06301805b50c1fc4ad51a16e77c1a7", 0x10) close(r2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x584, 0x10, 0x701, 0x80000, 0x0, {0xc}, [@nested={0x564, 0x3a, 0x0, 0x1, [@typed={0x8, 0x67, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x25}}, @nested={0x134, 0x143, 0x0, 0x1, [@generic="1e9b4d92d2032cb7244827b6adbf937650c392265501b2d8cd54367e4acc74c887190a1763633d5fd26c6adbbc2c12d0fd1fccc37a", @typed={0x8, 0x7f, 0x0, 0x0, @ipv4=@remote}, @generic, @generic="9dfe49c7b85a", @generic="956fef04746b1631a2c6b5dbec8bce2a097b1675d9854a0f6e0e4dea8326da3917fb4fc952515deab35619ac93eec7143d289ccb63258022e9596f444fca99faf4a5edc90acf2547f1483a9459b2e3dc9ad551ca59bdf7d136fe95bc4d7842ca7bbf3d08c06c442e91faff5096a296c3d8ac02cd3edd7ff996a894ded711342c49406f994835708a5093e405cf4d9e4d1da92d4199abb747499b58b60fe8354a26238c02c10140914cba166f9145aa09413ce5c4f44942460de7addd3191875c41d8f42e30f29122b23fb58f0c28237be494a5456598f9c150b72fbbdf8cc4f463755310414a22fe24", @nested={0x4, 0x13b}]}, @typed={0x8, 0x1, 0x0, 0x0, @pid=r3}, @nested={0x20, 0xaf, 0x0, 0x1, [@typed={0x8, 0x122, 0x0, 0x0, @u32=0x2}, @nested={0x4, 0x67}, @nested={0x4, 0xad}, @typed={0x8, 0x117, 0x0, 0x0, @fd=r2}, @nested={0x4, 0x8d}]}, @nested={0x4, 0x116}, @nested={0xdc, 0x115, 0x0, 0x1, [@nested={0x4, 0x125}, @generic="1a0fa0b6e9822020bbb31388760ea80f9a1d53b44614ea8082d0bd3a24d82116da42d49ba4ac899459c6a30f585c918794613c4cb568aa9c83d18c42baea6e94c5c0059d2c16083c7bda3b7d05c7122194782c357ed2e400f7979109896ed89676e28a87cf517ce5d027b53b8bdc1c39cd0f63bf27b90aaa80af408e3a97af6ae891249716e79fa041707ce285c88323cb2a0d41ccb2c58ecc237c817dcac23db334c889ceee88229ab5fec45883f0f95d46174abd150a4cbddaf0bf7911cf69099798ef1de774a3de31e97ec9080945", @nested={0x4, 0x5}]}, @nested={0x319, 0x3b, 0x0, 0x1, [@typed={0x4, 0xeb}, @typed={0x14, 0xbc, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1d}}, @generic="04690ffa394cb91ab058015180dece568b668d49a0c6ce5c1ca50f057d9618e711416a58f125cc5fd585e11719c8d6b5265c3c9c4c0a41605c7e8e10f9c8ed8d5c69997b04283d68c41bab174dfc82abe50b113a4d20834d1541be4a221a90debf7de23edf39b130f64b423e4ddd5cca19c97a2eb9feb5b3c1ec26532ee1f2b1f678d274477927fc82497010b6ba15467d69c2d1d9dae909b0b722c7e362bcff04ebf744ae7a4d17fe2a51d49ace13f782a38fbc9e0a7050325d429759a8bf9d3517a9a6fcf3c6847225defdc01c0e09bff26c80c3e162ded2a32c5e76740dc362f1ab595e60d1aa59fb51259b043e0ec7df", @generic="6a84fccc24d47a7f38aaa23a23bc56343167b715d670c1766d48a9a5149a3f66330401c8967d3d895ddd103d6008a640157783df85d2531e562534e5c73aeba8917c0de268da42ab3ed7a3bae57d4ffe10dbbcf1c97fd41bcae2fd2e12521b9b24e3f17c4d91babf5d97a0fe99522525cda2540b4f65976b38f4d3b25b228fc7739377d406a49fcfd472be06657fe2d95682874004a611c1c3a6b2b693a5e87d83f40238004e3722d74f8d72b3e795b5d9d2819aba41909f79d99e898cba49c1934b74cd3ab62ef1d49b225a42cb48c7488b2091c098d947c491", @generic="2d91459c34370055aba681e4e7381701bf1e4651ad855b5321f620b428418bebc09ae280fb86a81d54d51694628525129c983426285fed8c9ee64ae842423a2a40a3cbd80f98a093a079cabb1224101fdc25cd8c1751b8658116e3d86d7e18da10964a05b531b47764d81c813e235f3168b892d369eb4ab4c581f59d4f99c5d950325128e8e95f1f01e43fa8bde7663d0d8c68553f93497d9e12988db323068ce2f2ecf32abef91a54e32d842006141db313b494d269fdb51dbd68a689981a4301cbec1ab6de05cf14a0d9af51", @generic="0fa911bbecb91de4179c34a583349983ed35b53927e7c2590464aa3058981c6bca9a8373c442bf0f78030c4d9fb5ecd47084477cfc4d0cb814c7ba397587c99441750b6d99b78070656261972b65a2da", @typed={0x8, 0x4d, 0x0, 0x0, @fd=r0}, @typed={0x8, 0xf7, 0x0, 0x0, @fd=r2}, @nested={0x4, 0xcb}]}]}, @typed={0xc, 0xa, 0x0, 0x0, @u64=0x2}]}, 0x584}}, 0x0) 5.474275952s ago: executing program 1 (id=9713): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30b) close(r3) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0)={0x27, r4, 0x0, 0x5, 0x5, 0x4, "3b78cc137b303bdd58d55b2c02a503defd41eb23d150336307e64c9305ba70067b8b539e25863455c3ac3dce314ba729a426000f63ef05a5ac01b90fe94e84", 0x3f}, 0x60) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x66, &(0x7f0000000600)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @local, {[@fragment={0x67}, @hopopts={0x0, 0x3, '\x00', [@generic={0x0, 0x17, "0ce3c4989ea1a39290312280e6388bb3012ab2f6fcb2ba"}]}]}}}}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r6, 0x84, 0x4, 0x0, &(0x7f0000000180)) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x468, 0x24, 0x100, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x2, 0x5, 0x2, 0x1, 0x8, 0x3, 0x6, 0x3, 0xe, 0x2, 0x3, 0x7, 0x2, 0x7, 0x9, 0x2, 0x6, 0x9, 0x6, 0xffff, 0x2dc, 0x9, 0x6, 0x200, 0x6, 0x22a5, 0x2, 0xb, 0xffffffff, 0xc, 0xffff, 0x6, 0x7, 0x8000, 0x2, 0x80000001, 0xa, 0x1000, 0x2, 0x7d, 0x7, 0x7af, 0x800, 0x7f, 0x7, 0x81, 0xd, 0x0, 0x3, 0xc, 0x9, 0xfffffffa, 0x3, 0x40, 0xf3400, 0xfffffc01, 0x6, 0x30000000, 0xa6, 0x8, 0x4, 0x400, 0x6, 0xe, 0x1, 0x1, 0xffffffff, 0xffe0, 0x10, 0x2c0, 0x4d, 0x2f03, 0x10000, 0xde, 0x1, 0x0, 0x58, 0x7, 0x6, 0xd, 0x400, 0x9, 0x6, 0x6004, 0x800, 0x83, 0x2, 0x401, 0x1, 0x9, 0x3, 0x0, 0x7ff, 0x80000000, 0x40d5, 0x800, 0x802001, 0x8000, 0x3, 0x1, 0x4, 0x800, 0xffffffff, 0x3ff, 0x0, 0x5, 0x9, 0x7, 0x101, 0xe33, 0x4, 0x10, 0x7a, 0x7eb5, 0x5, 0x7, 0x5, 0xfff, 0x56, 0x3, 0x3, 0x4, 0x7, 0xfffffffa, 0x400, 0x9, 0x4, 0x1, 0x9, 0x40, 0x3, 0xffffffc0, 0x2, 0xb, 0x3, 0x3, 0x8f, 0x914, 0x9, 0x8, 0x0, 0x7, 0x52115ca6, 0x4, 0x401, 0x8000, 0x3f, 0x1, 0x400, 0x4ac, 0xb, 0x0, 0x8, 0x6, 0x4, 0xffffff7f, 0x0, 0x81, 0x7, 0xffe, 0x7f000000, 0x0, 0x1, 0x2, 0x5, 0x3, 0xc000, 0x3f7, 0x4, 0x3, 0x4, 0x1067, 0x4a041e8a, 0x800, 0x3ff, 0xfefc, 0x6, 0x7, 0x5, 0x1, 0x8, 0xe133de6c, 0x2, 0x823, 0x9024, 0x5, 0x5, 0x3, 0x8, 0x7, 0x1000, 0x4, 0x8, 0x3ff, 0x4, 0xef87, 0xe729, 0x7, 0x3, 0x1, 0x7fffffff, 0xfffffffe, 0x8, 0x3, 0x5, 0x4, 0x6, 0x1, 0x7f, 0x1ffc, 0x8, 0xfffffffc, 0x8, 0x329, 0x8fc4, 0x7, 0xc, 0x2, 0xd, 0x9, 0x6, 0x8, 0xa, 0x400, 0x2, 0x8000, 0x2, 0xc76, 0xd, 0xe, 0x8, 0x2, 0x0, 0xd4e, 0xfff, 0x7, 0x9, 0x2, 0x6, 0x5d6e, 0x9, 0xa, 0x6, 0x0, 0xffffab49, 0x10000, 0xffff, 0x5, 0x2, 0x1, 0xffffffff, 0x2, 0x3, 0x1, 0xaf11]}, @TCA_TBF_RATE64={0xc, 0x4, 0xdcd9be68b5bd509}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x6, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x3, 0x5, 0x7}, 0x6db63122, 0x7, 0x1257}}]}}]}, 0x468}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x6, 0xd}, {0xffff, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x30, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x40}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x101}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240048f0}, 0x44800) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x3}}, [@tmpl={0x144, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffffc, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@remote, 0x3502}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4}]}]}, 0x1fc}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2.888800908s ago: executing program 4 (id=9716): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000340)=@file={0x0, './cgroup.cpu/cgroup.procs/file0\x00'}, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000100)={@val={0x0, 0x88b5}, @void, @eth={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0xfe6d, 0x65, 0x0, 0x1, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @empty}}}}}}, 0x6d) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.881677909s ago: executing program 2 (id=9717): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)=0x6, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$netlink(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (async) close(0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) r2 = socket(0x23, 0x2, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, 0x0, 0x0) (async) connect$can_bcm(r1, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000000c0)=0x1d, 0x4) 2.879010989s ago: executing program 1 (id=9718): sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x37}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x12fd}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x10d}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x366}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000015) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x10, 0x8000, 0x10001, 0x0, {{0x14, 0x4, 0x2, 0x4, 0x50, 0x66, 0x0, 0x2, 0x29, 0x0, @local, @local, {[@timestamp={0x44, 0x20, 0x9c, 0x0, 0x8, [0x101, 0x0, 0x1, 0x6, 0x1, 0x8, 0x4]}, @rr={0x7, 0x7, 0xd2, [@private=0xa010101]}, @ssrr={0x89, 0x13, 0xeb, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x38}, @local, @rand_addr=0x64010100]}]}}}}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000740)={{0xffffffffffffffff, &(0x7f0000000580)='-\\--])(,\x00', 0x101002, &(0x7f00000005c0)={@_ha_fsid={[0x200]}, {0x2, 0x8f9a, 0x6, 0x9}}, 0xfffffffc, &(0x7f0000000600)={@_ha_fsid}, &(0x7f0000000640)=0x9}, {[0x200, 0x9, 0x2, 0x2]}, 0x7, 0x8b, &(0x7f0000000680)=""/139}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x83cd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)='%-5lx \x00'}, 0x20) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0xf02, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x22, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xbe43}, [@ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x4de5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x3}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xdc, &(0x7f0000000300)=""/220, 0x41000, 0x0, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000500)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x0, 0x80000001, 0x58c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000980)=[0xffffffffffffffff, r3, 0xffffffffffffffff, r4, r5, 0x1, r6], &(0x7f00000009c0), 0x10, 0x1}, 0x94) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r7, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2300004}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, r8, 0x200, 0x70bd2c, 0xb3ad, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x44}}, 0x800) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r9, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0x8c, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6003}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x24f}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x4004) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x28, r10, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x9, 0x19}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8010) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000fc0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000001080)={&(0x7f0000000f40), 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x3c, r12, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008804}, 0x5) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000010c0), r14) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x2c, r10, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x74}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x800) r15 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r15) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000001240)={0xc, 0x5, {0x8, @usage=0x2, 0x0, 0x8000000000000000, 0xe5, 0x8001, 0xfde, 0x2, 0x40, @usage=0x8, 0x2, 0x80000001, [0xf5, 0x95d, 0x4, 0x100000001, 0x5, 0x1]}, {0x2, @struct={0x7fffffff}, 0x0, 0xc, 0x7, 0x81, 0x2, 0xb, 0x84, @struct={0x2d, 0xb}, 0x7, 0xc, [0x64, 0x21, 0x3, 0x3, 0xba2c, 0x6]}, {0x3, @usage=0x7, 0x0, 0x5, 0x81, 0x2faa583, 0x8, 0x3, 0x4d, @struct={0x8, 0x9}, 0x7bc0, 0x80000001, [0x5, 0x9, 0x1, 0x2, 0xffffffff, 0x4]}, {0x8, 0x26d7, 0x7fffffff}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000001640)={r16, 0xfffffffffffffffd, 0x1, [0x5, 0x1000, 0x1, 0x4, 0x38e1], [0x7f, 0x22, 0x1, 0x0, 0x1ff, 0x2, 0x8cb7, 0x9, 0x3, 0x401, 0x8, 0x38c63804, 0x8, 0x1, 0x2, 0x0, 0xf8, 0x0, 0x7ff, 0xffffffff, 0x84, 0x6, 0x7dd9, 0x3, 0xe9, 0x6, 0xdc3, 0x4, 0x14000, 0x6, 0xd23, 0xd255, 0x6, 0x8000000000000001, 0xfffffffffffffffc, 0x10001, 0x7fffffff, 0x2, 0x4, 0x9, 0x36, 0xfffffffffffffffd, 0x9, 0x80000000, 0x5, 0x6, 0x1000, 0x1, 0x80, 0x7, 0xffffffff, 0x9bf, 0x4, 0x0, 0x7, 0x2, 0x9, 0x8, 0x9, 0x0, 0xa, 0x4, 0xfffffffffffffffd, 0xb, 0xfffffffffffffff7, 0x6, 0x9, 0x1, 0xffffffffffffff8f, 0x7, 0x3, 0x8, 0x4, 0x0, 0x8, 0x800, 0xd, 0x449f, 0xfffffffffffffffd, 0x10, 0x3, 0xe63, 0x100000000, 0xfffffffffffffff9, 0x8, 0xfffffffffffffffc, 0xfffffffffffff000, 0x101, 0x4000000000000, 0x100000000, 0x3, 0x8000, 0xb3b, 0x47db, 0x7, 0x7, 0x19, 0x8a, 0x0, 0x0, 0xc9ae, 0x0, 0x4, 0xfffffffffffffffb, 0x3, 0x8d3d, 0x0, 0xff, 0xffffffffffffffff, 0x1, 0xff, 0xdf0, 0x0, 0x8, 0x7fff, 0x9, 0xfffffffffffffffc, 0x5, 0x0, 0x0, 0x1]}) socket$netlink(0x10, 0x3, 0x6) 2.465587667s ago: executing program 1 (id=9722): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="180000001000000000000000e5f3000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b702000014e6ff00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xffffffff, 0x4080, 0x3, 0x280, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0x2}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x2, 0x1, 0x7, 0x100, 0x8f3, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000011c0)=@newqdisc={0x88, 0x24, 0xd0f, 0x70bd2d, 0x3, {0x60, 0x0, 0x0, r9, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0x2, 0x9, 0x6, 0x9, 0x8, 0x9, 0xa, 0x6, 0x5, 0x2, 0x2, 0x4, 0x8, 0x2, 0x2, 0xf], 0x0, [0x0, 0x3, 0xd, 0x6, 0x5, 0xf, 0x7, 0x8, 0x2, 0xfb42, 0xc4b, 0x7ff, 0x9, 0x0, 0xb, 0x54], [0xfff9, 0x9, 0xffff, 0xff, 0x2, 0x9f1, 0x1, 0x3b27, 0x1, 0xd, 0x337, 0x5, 0x91b, 0x3, 0x20, 0x7]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x82, &(0x7f00000001c0)={r7, 0x0, 0x3ff}, 0x8) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x6, [@enum64={0xe, 0x1, 0x0, 0x13, 0x0, 0x0, [{0xa, 0xffff, 0x1}]}, @struct={0x6, 0x9, 0x0, 0x4, 0x0, 0xc, [{0x0, 0x5, 0xffffe000}, {0x9, 0x1, 0x1}, {0xf, 0x3, 0x97f8}, {0x4, 0x3}, {0xe, 0x2, 0x7ff}, {0x4, 0x5, 0xffffff08}, {0xe, 0x3, 0x400}, {0x1, 0x4, 0x6}, {0x10, 0x5, 0x2}]}]}, {0x0, [0x2e, 0x5f, 0x2e, 0x2e]}}, &(0x7f0000000dc0)=""/4096, 0xae, 0x1000, 0x1, 0x5}, 0x28) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x13, r11, 0xc252d000) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1e, 0x8, 0xf26, 0xe, 0x48c0a, r3, 0x4, '\x00', 0x0, r10, 0x1, 0x5, 0x0, 0x0, @value=r11}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r12, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14"], 0x18}, 0xc800) setsockopt$sock_int(r13, 0x1, 0x2a, &(0x7f0000000000), 0x4) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r15 = openat$cgroup_ro(r14, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_pid(r15, &(0x7f0000000140), 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000780)=@raw=[@map_idx={0x18, 0xb, 0x5, 0x0, 0x8}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x1}, @generic={0x8, 0x3, 0x7, 0x3, 0x1}], &(0x7f0000000840)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, 0x19, r15, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x5, 0x9, 0x7, 0x7fffffff}, 0x10, 0x12a5f5, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000980), 0x10, 0x7}, 0x94) recvmsg(r13, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2040) ioctl$TUNSETGROUP(r4, 0x400454ce, 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x26, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @call={0x85, 0x0, 0x0, 0x22}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0xfffffff8}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x3}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @alu={0x3, 0x0, 0xb, 0x4, 0x6, 0x6, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x800, 0xe0, &(0x7f0000000200)=""/224, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x7, 0x8, 0x6}, 0x10, 0x2960, r0, 0x6, &(0x7f0000000480)=[r2, r3], &(0x7f00000004c0)=[{0x3, 0x2, 0x5, 0x1}, {0x3, 0x5, 0x6}, {0x5, 0x4}, {0x5, 0x5, 0x4, 0x6}, {0x2, 0x5, 0xb, 0x1}, {0x3, 0x2, 0x2, 0x3}], 0x10, 0x4}, 0x94) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 2.262013286s ago: executing program 4 (id=9723): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r1, 0x111, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x40}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x3}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x800}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x6}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40050}, 0x20000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x7, 0x4932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r2}, 0x38) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}}, 0x24048000) 2.204109492s ago: executing program 0 (id=9725): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "000000200100", "376a30a11e8e279cec09440756a936a7e3971a8c35c47e580c00", "8dfdf808", "fffffffffffffffd"}, 0x38) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00"/36, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f"], 0x254}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000810000000000002df67e932a2dfdfcce7052be000200000018500000ab96000000000000"], &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1, 0xffffffffffffffff, r1, r1], 0x0, 0x10, 0xc}, 0x94) 2.123405121s ago: executing program 3 (id=9726): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="380016da10000104000000000000ff0000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000001800128008000100677470000c00028008000100", @ANYRESOCT, @ANYBLOB="1af9eccc23783b35e2904ceffb0ebbbf782aeb26a52d77d2dec644172496970aafc2b9e722623668d81943be1b"], 0x38}}, 0x0) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETINFO(r2, 0x89ed, &(0x7f0000000000)) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async) ioctl$sock_netdev_private(r5, 0x89f5, &(0x7f0000000000)) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001a00010000eeffff09008000", @ANYRES32=0x0, @ANYBLOB="00000100080002000c000000fdad1f1d070d6d65dcfb017712a2a5930b94bb95f48ed8c5bc74aa969c1231852740cfea"], 0x24}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, 0x28012, r6, 0x4000) (async) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r7, 0x113, 0x3, &(0x7f0000000000)=0xffffffff, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r3, 0x0, 0x46, 0x4f, 0x0, &(0x7f0000000500)=""/74, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg0\x00'}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000b1"], 0x0, 0x8000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400}) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r11, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r11, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 2.026280742s ago: executing program 4 (id=9727): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2008800}, 0x40440c5) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x1, 0xd, 0x3, @vifc_lcl_addr=@multicast1, @broadcast}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x364, 0x24, 0x700, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x1, 0x9}, {0xa, 0x8}, {0xfff9, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_RATE={0x6, 0x5, {0xbe, 0x80}}, @TCA_STAB={0x1b0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0xc6, 0x1, 0x3, 0x1, 0x4, 0x4e, 0x4}}, {0xc, 0x2, [0xff, 0x800, 0x0, 0x8]}}, {{0x1c, 0x1, {0x4, 0x3, 0x401, 0x8, 0x1, 0x5, 0xb, 0x6}}, {0x10, 0x2, [0x4, 0xfffe, 0xae02, 0x4, 0x92, 0xe1]}}, {{0x1c, 0x1, {0x6, 0x7f, 0x3, 0x3, 0x0, 0xff, 0xf, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x2, 0xf8, 0x5, 0x7, 0x1, 0x3, 0x2, 0x7}}, {0x12, 0x2, [0x3, 0x9, 0x6608, 0xfff8, 0xffff, 0x7, 0x7]}}, {{0x1c, 0x1, {0x8, 0x3, 0x1, 0x3, 0x2, 0x800, 0x5, 0x7}}, {0x12, 0x2, [0x7f, 0x2, 0xaa51, 0x8, 0x5, 0x384, 0xfc75]}}, {{0x1c, 0x1, {0x44, 0xa, 0xcc45, 0x4, 0x1, 0x6, 0x2, 0x2}}, {0x8, 0x2, [0x3ff, 0x9]}}, {{0x1c, 0x1, {0x8, 0x7f, 0xfff, 0x9, 0x1, 0x1, 0x7, 0x6}}, {0x10, 0x2, [0x2, 0xf, 0x4, 0x7, 0x8, 0x7ff]}}, {{0x1c, 0x1, {0xfc, 0xad, 0x5, 0xf00, 0x0, 0x7fe00, 0x9, 0x7}}, {0x12, 0x2, [0x6, 0x4, 0x84d2, 0xe0, 0x6, 0xf159, 0x5]}}, {{0x1c, 0x1, {0xa4, 0x4, 0x69, 0x78d, 0x0, 0x8, 0x6, 0x4}}, {0xc, 0x2, [0xe, 0x9, 0x7fff, 0xd]}}, {{0x1c, 0x1, {0xed, 0x8, 0x3, 0x0, 0x0, 0xfffffffe, 0x3, 0x5}}, {0xe, 0x2, [0x5, 0x9, 0x1, 0x8, 0xc3]}}]}, @TCA_STAB={0xd8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x80, 0x1, 0x1, 0x1, 0x3, 0x7, 0x2}}, {0x8, 0x2, [0xff, 0x0]}}, {{0x1c, 0x1, {0x72, 0x0, 0x7ff, 0x0, 0x2, 0x1, 0x1, 0x3}}, {0xa, 0x2, [0x1, 0x401, 0xfff8]}}, {{0x1c, 0x1, {0x9, 0x2b, 0x6, 0x7, 0x0, 0x3, 0x7fffffff, 0x9}}, {0x16, 0x2, [0x9, 0x2e, 0x44, 0x5, 0xff25, 0xe, 0x5, 0xa0, 0x7]}}, {{0x1c, 0x1, {0x6, 0x7, 0x1, 0x80000, 0x0, 0x9, 0x8, 0x5}}, {0xe, 0x2, [0xfffd, 0xef0, 0x6a31, 0x0, 0x8]}}, {{0x1c, 0x1, {0x7, 0x9, 0x6, 0xca6, 0x0, 0x65, 0x2, 0x4}}, {0xc, 0x2, [0x9, 0xc12, 0xe91, 0x7]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_STAB={0x98, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x69, 0x2, 0x734, 0x0, 0x1, 0x5, 0x9}}, {0x4}}, {{0x1c, 0x1, {0x31, 0x4, 0x6, 0x80000000, 0x0, 0x4ff, 0x6, 0x2}}, {0x8, 0x2, [0x4, 0x6]}}, {{0x1c, 0x1, {0x6, 0x0, 0x4, 0x3ff, 0x2, 0xfff, 0x800, 0x2}}, {0x8, 0x2, [0x1, 0x1]}}, {{0x1c, 0x1, {0xd, 0x81, 0x4, 0x1, 0x0, 0x6, 0xc, 0x5}}, {0xe, 0x2, [0x4, 0x0, 0x4, 0x2, 0x5]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x40}}]}, 0x364}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) close(r8) 2.022952551s ago: executing program 0 (id=9728): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1, 0xffffffffffffffff, 0x500}, 0x57) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000240)=""/4096}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r2, r3, 0x5}, 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x786c4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1.993477446s ago: executing program 1 (id=9729): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000002a40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x81}}}}}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000100)=0x5, 0x4) (async, rerun: 32) recvmsg(r2, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x20) (async, rerun: 32) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x20, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}]}, 0x20}}, 0x20000001) (async) r4 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1}}}]}]}, 0x50}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="bf5dba82feb3"}]}, 0x44}}, 0x0) 1.770095778s ago: executing program 3 (id=9730): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x3, 0x33) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) 1.756259181s ago: executing program 0 (id=9731): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000088000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0x4, 0x28}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={&(0x7f0000000200)="8d182f56dbc063bc6a5beb3a0fec87d363ddaf07d199613de7a23fd08ed3217015c46d547c21c0943adb50f38724f93375b91f229cbc405d9a5af909df74fa70d5493df3fdc630e528852b68bd170d51f04eae3696bd453fd73cc7aaaaf9bba3ab514a7c9a0a4daaf9383ec338b03de51002e5d3347f2ac10612e3a485de002704b4d90fd31e5542d91e2eea4ebabc0c12759b7766af1b42dab1a2447400a22ea841cf45696e62e8dff16622f85b56eb765214f6381dcd", &(0x7f0000000300)=""/108, &(0x7f0000000380)="1fd4dd21c87ec7b8a0263ec467094f10cf5f79250873422deb3f0d788220cf8527d80be1f166f31197df18fba13baa0b99c6fb0ef5fb0b0ee1c74599b07993d18a218a74fe73299fd173da4022951ec79627d042edfe1ae7c09bd58c8f99e6ff8a5d0bf5d5f1533eec24ea1f146808a8b606fa403b4c8d8b3c554b14b9cafe27289857754b650b93e006fca792c364c0230e9d", &(0x7f0000000500)="a367f156ea81fab0eb177082d2ca8462028c17c484a6d81d9c1c94cf59d7a876339c00286e3f421425fa947a9d339da3ec27f24a31bb6af5d04fa8e21cf5ebcb0408dd9a3e2cb45f8454434f911711b4f96f0c6fcabc411f2626e5b74a34f909c37e847de95fa39aaa34e37c1157451c022791289d59f59b1124449073dc4904d68135b682a6eacfade07c890538e3c2cea57963a185bb518441d10b1cbe300f4daeda2927eaa79eae89b303e2fa235fc07f09e433e367b0c55acbd48b3e786730488bda670c4d0c4034f7aedf4ca904c6c6b8a6476f4efa52d957fa30793a481151a3754caca8c26fa7ccddde8611c9f730e426f0a49690", 0x5, r6, 0x4}, 0x38) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r3) recvfrom$rxrpc(r3, 0x0, 0x0, 0x10001, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3804000900000000000001facf340b70b5cf8100", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00'], 0x38}}, 0x0) 1.735356454s ago: executing program 2 (id=9732): syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x0, @rand_addr=0x64010100}}, 0x0, 0x0, 0x80000001, 0x0, 0xce03d4}, 0x9c) 1.666682644s ago: executing program 4 (id=9733): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="02000403", @ANYRES16=r1, @ANYBLOB="00022dbd7000ffdbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00020000000c008f0000000000000000000c009000fdffffffffffffff"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) 1.57412994s ago: executing program 3 (id=9734): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33}, {0x0, [0x0]}}, 0x0, 0x1b}, 0x28) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b050c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x48010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$caif_stream(0x25, 0x1, 0x4) ppoll(&(0x7f0000000740)=[{r3, 0x26}, {r4, 0x8424}], 0x2, 0x0, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x7d4165c9) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x1, 0xa, 0x801}, 0x14}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x210, 0x206, 0x240, 0x210, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xd8, 0x138, 0x0, {0x390, 0x8f00}, [@common=@set={{0x40}, {{0x0, [0x5, 0x2, 0x1, 0x4, 0x5], 0x3}}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x7, 0x0, [0x2d, 0x12, 0x2e, 0x40, 0xd, 0x3a, 0x23, 0x2b, 0x103, 0x1c, 0x4037, 0x15, 0x31, 0x4, 0x31, 0x1d], 0x1, 0x8, 0x7}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x900, 0x10, 0x8, 'snmp\x00', 'syz0\x00', {0x8000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044800}, 0x4c800) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@alg={0x130, 0x10, 0x1, 0x1, 0x0, {{'drbg_pr_hmac_sha384\x00'}}, [{0x8, 0x1, 0x8}, {0x8, 0x1, 0x4}, {0x8, 0x1, 0x2f}, {0x8, 0x1, 0x27}, {0x8, 0x1, 0xf1}, {0x8, 0x1, 0x10}, {0x8, 0x1, 0xf78}, {0x8, 0x1, 0x400}, {0x8, 0x1, 0x400}, {0x8, 0x1, 0x1}]}, 0x130}}, 0x0) sendto(r10, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000540)=""/115, 0x73}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r5, @ANYRES32=0x0, @ANYBLOB="0800090000000000080008f2ffffffff130001"], 0x64}}, 0x0) 1.552290362s ago: executing program 0 (id=9735): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000080)={0xffffffff, 'syz0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x51}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) 1.507851984s ago: executing program 2 (id=9736): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e20, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb3c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0xe79}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@bridge_getneigh={0x20, 0x1e, 0xeed0b46ffaee1393, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x8001, 0x12010}}, 0x20}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000200)=r1}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000016c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14f, 0x14f, 0x8, [@union={0x5, 0x8, 0x0, 0x5, 0x0, 0x3, [{0x8, 0x5, 0x5}, {0x5, 0x4, 0x7f}, {0x9, 0x1, 0xfff}, {0x7, 0x3, 0x7}, {0xf, 0x2, 0xfffffff7}, {0x10}, {0x5, 0x2, 0x8}, {0x3, 0x4, 0x6}]}, @datasec={0x9, 0x7, 0x0, 0xf, 0x3, [{0x4, 0x9, 0x7}, {0x4, 0x7fff, 0x7}, {0x3, 0xe75, 0x5}, {0x5, 0x7, 0xc000000}, {0x2, 0xffff, 0x7}, {0x3, 0x4, 0x3}, {0x3, 0x7, 0x7}], "d92780"}, @enum64={0xe, 0x7, 0x0, 0x13, 0x1, 0x0, [{0xf, 0xc0, 0xa}, {0x7, 0x2d4a, 0x7}, {0xc, 0x4}, {0x10, 0x4, 0x9}, {0x7, 0x1, 0xab97}, {0xd, 0x9, 0x7}, {0x4, 0x7fffffff, 0xb}]}, @float={0x5, 0x0, 0x0, 0x10, 0x4}, @enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x5, 0x7}]}]}, {0x0, [0x2e, 0x5f, 0x30, 0x0, 0x5f, 0x61]}}, &(0x7f00000003c0)=""/125, 0x170, 0x7d, 0x0, 0x200, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001840)={0x6, 0x12, &(0x7f0000000300)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe40, 0x0, 0x0, 0x0, 0x7}, @map_fd={0x18, 0x4, 0x1, 0x0, 0x1}, @tail_call, @map_fd={0x18, 0x3, 0x1, 0x0, r2}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x1000, &(0x7f00000006c0)=""/4096, 0x41000, 0xa, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000540)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0xc, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x10, 0x9}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.479027679s ago: executing program 4 (id=9737): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5f5e0ff}, @call]}, &(0x7f0000000000)='GPL\x00', 0xc, 0x26, &(0x7f00000001c0)=""/226}, 0x21) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x1170, 0x1398, 0x0, 0x1170, 0x2c8, 0x1398, 0x1398, 0x2c8, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@socket1={{0x28}, 0x17470f201d1ec251}, @inet=@rpfilter={{0x28}, {0xf}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x2, 0x6, 0x800}}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x1, 0x0, 0x0, 0x0, 0x0, @loopback, @private0={0xfc, 0x0, '\x00', 0xfe}, @loopback, [0x0, 0x0, 0x0, 0xff], [], [0xffffff, 0x0, 0xff000000], 0x0, 0x803}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001110400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0xa0}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 1.39057375s ago: executing program 0 (id=9738): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000003c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x2000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000080)={r1, 0x200, 0x9, 0x72}) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x50483}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x9005}, 0x0) socket$packet(0x11, 0xa, 0x300) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1.243127319s ago: executing program 3 (id=9739): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x6, 0x5, &(0x7f0000000000), 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000240)={{r0, &(0x7f0000000040)='#!(\x00', 0x301200, &(0x7f0000000080)={@align=0x4, {0x7, 0x1, 0x2, 0x6}}, 0x5, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x4}, {[0x7, 0x9, 0x8000, 0x2]}, 0x380, 0xf6, &(0x7f0000000140)=""/246}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x3c, r2, 0x10, 0x70bd29, 0x7, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x1, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) (async) sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x30004001) (async) setsockopt$sock_attach_bpf(r0, 0x6, 0x5, &(0x7f0000000000), 0x4) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000240)={{r0, &(0x7f0000000040)='#!(\x00', 0x301200, &(0x7f0000000080)={@align=0x4, {0x7, 0x1, 0x2, 0x6}}, 0x5, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x4}, {[0x7, 0x9, 0x8000, 0x2]}, 0x380, 0xf6, &(0x7f0000000140)=""/246}) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x3c, r2, 0x10, 0x70bd29, 0x7, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x1, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) 1.178234739s ago: executing program 4 (id=9740): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) splice(r2, 0x0, r1, 0x0, 0x8000f25, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="61128c00000000006113850000000000bf20000000000000070000000f0000002d030100000000009500ffb1000000006926000000000000bf67000000000000150002000fff5d004507000007000000d60600000ee60000bf1600000000000040700000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c043a7bc4b29d2dc480dd7a0d981422b32d93bad720100010000000000b39d0af449deaa27ea949e8f9000d885dfea27834aa7eb8d33ac04060630e78a30fc835e29eb532ba8546fc020c196738b5f32b09f95f5d5b196b9ffc02f952ac53e817671d1000000008ba8583aa4c77097f1c75df9bdd8288fd2f8743924cd6dd4ed457183edc74ca79c79a3da0cea39dbacd0e4b608cece26817f0f53dde0d43388e8f92d0bfdd4b427ee5b708aa2685c735f840e055a163e38a276b7fd16492587edaec8bc43f312c7ddfa59a53c9e772832f527c0ae9afcf582413f6f8c442ce39039a64965facb4340f2249cc60a8dec5b8a9ac6d60e36f57dbe1664decf85b7cae19a1d0d7bce02902284aa9041366eed09c3baafb2a4c14a373f8ffdfe107d401b7b93866f8aadff4df0f226f411d43d579541275f0bacd2dc24faf2d4d992d9f8031a422f2a30cf35e9d00644acc1ff674781281c6b93447312cc93c738b6a83a2e83225af295e0776d033557913ac9096ee1e119a06a38fcd918a18f4c01f60692a1684c55086bec71e819f8b345a5f80d3e5bc7e6854e2ea7a035b975b96e9459382fafc5f6fd106fbbd3b014b5a546f523afd9c9bed9212d7bb745123259e8f46b413e633db1668ad038725e3e01bd6707aee08b267dcd54b961c4d56b608d903ae06cc23eb1d79b3384512f2c424739aba4297063005376b6b900f3416835151fb61f08dfb4ad3732fc0f5a05339608b003a80cce6b032f13b5f2890ec29130022ff6fa874ce885e91c8e4df772286210e5aca1a64dfb12f0a2c1e992aae6afb3514afd648230650e532e8ec540a25b65657a7259922602ffdd3375a4b0f864db09907c7b8e97abb824c1f3167cff71e96682f37f37b156833d729d7369af37345fb97f3ac3e9c01328a3d7f36ae6d48c94bcf630fe6e94c5a080fe3ccde9ff72f98bd0454203a5cbe34ab7df76e54ec26942835ca6b9e0db2b24d19de496bf22d5cac91b6deb25b5622ddd7bddad97d4850735df6fff37098b06d660e5d73efdce87be427bc79e67ad31d7768d65f811ed84f29db15b8456dc951dcb8be1da330fd0c1371dbbfcedaff57e29b95b4277b46aa41eab05a756d8556d4c14b570770bc0a3c9cdd688e3e583ee2284fc32c6eed47d70c6c22c8226ae8d4144fac10d2ca22673cbe55ee11b68bf18f4811cf943b9a7f30f07be34ae41ae192b1222ccc12000966d63ee0f75e73c0ae0cd660cc27583f3a7c81f652948c92569f0ca58d4c42e91000000000000000000000000d8e5c9a920c1418f62bf914bcac98ad06c42b86346d4cc4658abfdf3475a579337d1cf5529a14b64f14c478c0e390628c4702c3daf07d681e412c91484a6bc790ecdb597a461d9ac4d69a005f3fdf015d622c027c0e0181631a9f6d56361187e2076a14caf88c82a37248ff7b26d20a1ff7c1f1a31fe22ed64360c29124bf041f978042f5a23624447ee4d1612268c80e5c3b88a2a22264ad8012750997733121fcbaa2a094ef8ab27579d4daa10d9b42b9f75ef42df0c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x60, 0x24, 0x200, 0x4, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x34, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2, 0x1}, @TCA_FQ_QUANTUM={0x8, 0x2, 0x700}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x1}, @TCA_FQ_PLIMIT={0x8}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x1}]}}]}, 0x60}}, 0x800) 1.063081376s ago: executing program 3 (id=9741): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x30802042}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x240440a1}, 0x4020001) (async) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_int(r4, 0x1, 0x2e, 0x0, &(0x7f0000000500)=0x5c) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x890) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="34010000", @ANYRES16=r3, @ANYBLOB="0100000000003fc14d7a0100000004000480080002000100000008000100000000000400088008010c8054000b800800090000000000080009000000000008000a0000000000080009000000000008000a00000000000800090000000009"], 0x134}, 0x1, 0x0, 0x0, 0x8004}, 0x4) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x11}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xfffffffd}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x7}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x22}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3ff, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44090}, 0x4040004) 971.918738ms ago: executing program 1 (id=9742): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={r0, &(0x7f0000000000)='nr0\x00', 0x509342, &(0x7f0000000040)={@_ha_fsid={[0x6, 0x8]}, {0x5, 0x8001, 0xd, 0x1}}, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0xfffffffe}) (async) r2 = socket(0x2b, 0x1, 0x0) listen(r2, 0x0) (async) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) (async) sendmmsg$alg(r1, &(0x7f0000003a00)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="3a83ec786e475a89065540694914cfaad644b63083eddd3d55893e0aeeb46bd5", 0x20}, {&(0x7f00000001c0)="91d3e8b90cdaba364ced214d67fad93728ce7bfc7f7058d118302c4f2829ff72ba370937e18a", 0x26}, {&(0x7f0000000200)="fa4bca4ade4574ec6de1c7433f39ff81884f018a2faf7b1438fec310f15191a2fdd55162", 0x24}, {&(0x7f0000000240)="c3049b28fa40bded01c3b2c1", 0xc}, {&(0x7f0000000280)="663209b29cb1bbdb7e8504a4c8b982516633c89be91f00f6390a901d9dbff08e866481f31b22c67b2aaa780216d80f5c81390eb12cc3b9f39d0ccb2ec5a8599ef1", 0x41}], 0x5, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x6116}, @iv={0x110, 0x117, 0x2, 0xfc, "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"}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x48, 0x117, 0x2, 0x30, "84914c56e4551c9a3ce498d22260d5660ae72ac90958071d8bd5a46f7b1e305fb7d89d6b491d9c3520044a0a5e38cc12"}, @iv={0x108, 0x117, 0x2, 0xf0, "017cc8f5b0771e64c391676ef691d8f5c8de93bbe036a3c6da2e04592b40d24953891a7a614ff5bcfd727f73ec6cf2d6adcc81cd6e84ac919aa4c0c63634fcba21ca8195182af784a2c53c48ae8e21997ffede1cb58c9316b73d47c4afb705ce1c25e62f90150a2573da707444bb97ff96e3b42af57b83de858c5736fab6e237070eaee3ae21cf96f4bee53a052d9231b0017fffbf4f31d07ac0f9ef56b49db04896175f3e5cd19f6a509f7fdbf88c40b685035f5497c5f72c0aa3ce0d2997c896f47fb3445a472b637637f2579f903d3e458e8bafe6a3744605c8b7ade2406ccbdce8fae554be35fe06ebfcbe860bde"}, @iv={0xb0, 0x117, 0x2, 0x99, "75a4dc7b642ad4fc114c817d53c716c220b20d2f61cc446deaf9d684108d0d48f7ba59d1bd55e98f62cb5f30c91a17b63fa25ceca03265f1c889ae5cd3dc5e8ddf4db094ccc76c572639bd90c13d3bf5f0e9fbe07b9275de7ce13ed664694a9a213d2b94ae02759bfc0a6d69b780a5315bd510bdffc3ef096291482a203cc85b589e875b557fb97cdfa32f3440e78eef1436523e8f67455533"}, @assoc={0x18, 0x117, 0x4, 0x1000}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0x58, 0x117, 0x2, 0x43, "36f14df20dd384d7eb58521af6a9f71527eecf905a4c6357829320197b8cf1b71cc1515065072c0fa91ba3f6bf7a7a4a4cd58af9588859553a880117dd42227fe51530"}, @iv={0xa0, 0x117, 0x2, 0x8b, "10b5b59280eea9362c249bca93e2b18adf50faed3f4a22679d1aa04ac53d0f597426a60bec8e71cef91d14b7c387cfd5a509b950dc64e294237212397927c8dc66fa44caed39a47c5afac0e75cac86ad6f33507b87f5bfc3933a58d371d925dc3565aa6b23550447e69db6dd115afb0b5ad72a10ee46ead9ca41f048fe2fd7e1323f4a995c8f58406ae392"}], 0x468, 0x4008}, {0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000800)="5643bda8934359c7fe2d684c9505e10c695b5e99e2e3d833270b8c67f39f605af9d1809b7f3dee5ab537f2c412e6720bb2a08c77ec69d133f1bcc5def39ead803392e8989e468d56fd65fcd75851e649bc5705259e817b4cd1b04403b8c20167363c045b58970c9b275d8412a862307a0b0f7504c45069692f1c7a5068432b47a13f8f57bfdeb573071df599d706f3955cd37a3ed0e4ba7b71c72a3e4e8b1dc454584d139807c859cc", 0xa9}, {&(0x7f00000008c0)="c9b7650d6bf1aa2a6d6180a94511a8a227c97763956a19a439bdf4c5ae8ff9dedf4f3df875ab0a87e6877fd843f7ea385b652112cd7a8937404f132f47b53bc7cc0fbde42a2afaa46a1ae542d0ccaef1beac7d484c52036e7e1a09fd1f91d2e3ff376edc3736916d3c600bc61e246725dd57421c015a4459795d754d11a4edca3e5809abf41b0fab302e3f64f6b242602dc967183d0d769d34ec2dc03d534e0d0813db76db8b306ff3f3c546d2dd082b0c98", 0xb2}], 0x2, &(0x7f00000009c0)=[@iv={0x18}], 0x18, 0x4000}, {0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000a00)="3dcfa7c4bca8ed11fade5e4ed205b535b452f668c71ebafa617f570b4ae1c2908e9e24d3af703b6ba62a24de47e93d0d20a505ef1d34905e35c6", 0x3a}, {&(0x7f0000000a40)="38a71476198ee14f2b7649ead8b12cfa32434376c320842a191697accde0dc3b85d95356b3905758ef5c2491e04fd9be1befa8b11e1cb6f715575679f558aeadbf2a3bc71b87cb669c23e337a259eeb4ee94ec23df6ef4e7dd0f963f3d90b40b9d4459ec7c9dce8a633ddd9c38776543bd2413a342e1a1b5c340a7f164d5027980d9639df32b6b32a06437408f01ecebfa163a3bea3fb56b3b886ea947884025c35f607a784f9ff073cc19f50972f7b19f86bd31", 0xb4}, {&(0x7f0000000b00)="c3b34dbbc4743b2a9e31eda5a3d0976a6f3b3c6110cc2d6d9cc9a3a2330f4f4244f99648c632d02261b877c1e855de6d5531f0", 0x33}, {&(0x7f0000000b40)="4435fee98f42c32187bc72f5fe91690b27fc3798d086ca77aa2a8e9fb0", 0x1d}, {&(0x7f0000000b80)="0bc15677390e4bb31eea3ae7371171485cc4d45c62bd4e863925487a8380c7c94831447fb120f59642e71737a5cf2cafd5e8b0c50e840585995b87dbd0d3c7412097fd39ddef9020699b646d647cb04d6c0cb86c53a25715899961495db8db51e533dcd514a8ee569542074758038c2c31554493fa1d894e4d69883c4219ebe94e0d5ddfa2eb30187d63ab82b4947ef5cbc9b8fbb7fa6465e5e31f8521ca3f76f67afed140a7accd7cbe1d0a7cca3987dc56f6e90e63f4684b067024be13d9e9db6008f5730aa6fd15f1e4cdb18a72b4b9f8acf4d24e964f1efa727339fa3e787531502b1f8f", 0xe6}, {&(0x7f0000000c80)="7ca2425eb12b3f6b513e12c4051d4f51f6b065ba446347145208cfd245c09b05028ebc88717f368e35049eb177def278da9227f832f0d0972ec98992170f44ef01440275e4ff1ed49213060f40bf1a6af25852a24bfa508d1dd2edd32f290b74b68f183a069a85ded5cfa44d53091e02b9c6dab74f546179663ffbafca667899b3b378e10a86bc2d20b8b5286b5b7faeee31646ce9e3db05f071343cab3ba605457fdf92bb0e4497fccc881a6906b8e3e4ffce66eb36d8e47fb74de7dbdad359cdc12f1c6007cf2b011743", 0xcb}, {&(0x7f0000000d80)="4a9b07225be81903b0ec1f131bfcb1a6d50a00c9b1ccb077afeb54e1e15811fed2694892", 0x24}, {&(0x7f0000000dc0)="1a74a1a5f2c22e0d39d6048a36fbe2e342c7b99af4af8b9a084d95bcef6f5b53ba9e361df1c5cff6bfb68315aafe207fb89e72b283f67475155805753dca1d983eaca42afea740e5862d35bdd42970bf64c1f2f8e7414b7a6ceeb1453234f160024354d37ca248d36146d7dce756e30c57214cc4b6a2749da7d335035540f56beca547354c08b3980727093ca0fdec2997b1254ec3a1b9fd509f9de22e36f8a8d3ceee729f6ad61e029e66c625d6339999b9c4b6b57fb84131d5018d204fb35afc2edb9436aa78aa8a70534852634b1638a2e59deb0af03ef0646dbb171ee7f8b2ec0207d72ceb1983b98ca34f7a5f744535", 0xf2}, {&(0x7f0000000ec0)="0d388600f43f923d0ccab799c6bc493383cc89297c3515ca46dd83e8e53d5aa0a9bd93731fba241057c5215a3841b76c34573868840bb3c66c3995db96f42d06ff29c35f0bbdf4396811fa6894ff7aa8f7001b732b49ea42ee548f4df8a5501fd0f5d734a528a8300e24af38daf2432407d04971386a538790e51c9f6e9592e540a86622b23d8842a29b47536b74559488e83539acd5c4bfdeb175a17adb4bd3fe80918b80029b64992fdcf92fdfeed756b9c8", 0xb3}, {&(0x7f0000000f80)="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", 0x1000}], 0xa, &(0x7f0000003c00)=ANY=[@ANYBLOB="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"], 0x278}, {0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000022c0)="a89311a51528edcad53d5502b4d4c240c863c1d2dbd52a5ef063a326a9c511d667b12c77fe58cfd048360aaccaebfd6d6f22b32e33919454feb6a930cdbfefbf4042470ae52860b3df603a27d1834e1c5cce4e1a050811195c9f4dabc2d95692de62abf8cac5ba85b919089622064ad201a6b9259313bf0caf07308bd55518d63e64ee66e2835f699084cc84fa9c99896a6840846b13e8238d460c00fc1d65", 0x9f}, {&(0x7f0000002380)="0705ef01d9948f25acf92d02f80f20047fc89d6b9945c2ee6c045b83226d", 0x1e}], 0x2, &(0x7f0000002400)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0xe8, 0x117, 0x2, 0xd2, "c853a2f392ba49f31fdf930c55a23248c620081486b2c9056d2cfcb4325c4cf448f31a5acf30735366af9a40538416602a93d40a1dd61c31d7be123ac5ee8f2d9445ad73c3f4eecf613f5cd46920ec34e2d9c7e4339869cdd32c229202c5fc2af398a5729e2e03d728e3f3d40a20bbf0eeedd0f34f5ab40f09cbec87736c7d29870b12876bf968eae9cdc8268a171ba8ae5d81aedfc120121970495832b858f994d2c82c8b035f0310da49f7a1736386a8e856b1c86d591c01fdbc2bba24f4627d95a25cbc77e3963e7a4cc1544f7a271f01"}], 0x1118, 0x801}, {0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000003540)="3280cfcede98699f671a9ae2aad04cfa1541e3fba7f7d6ca728e311100968f4980a17e251fe1f7719a6c598896978309977a7d62015f8aa323ba7a2462d25d8c8be337a4c7d43037b9f6349ea365cfc0516f027801377c65f8587cc95cd6114dcb4143b29414f4ff0ef1e5c57336601356589d9a52fc49c31fe845196c75dd49a08e3fa08aeee598f3322e99e9500e9f191a27a599c947f6842ba26b6164942a220e170344f12b792bba2c3afb5f8cde6d5cf673b4ae6443fe65a6e8f90920a4b7e12d1eec5e7342087a63d80e", 0xcd}, {&(0x7f0000003640)}], 0x2, &(0x7f00000036c0)=[@assoc={0x18, 0x117, 0x4, 0x2}, @iv={0xe8, 0x117, 0x2, 0xd4, "2e24c137826a0a470ac1cd36345fe8b8e129cd5044422e79597bf37baca26f5c87e6ce161f5ab746564c68af193a294e71ffd46eab3a17ab0050c9f83fe9c5c2f798ce8cde1fd80222aa5f2ee66d04f98703c8c4e423aae8fbc2c8e1905bc47e1ddbacf5ec744b16aa42b25cee9284cf170669f19f8d77145236ca15befa4fff93101a5d0d7e39cb7e820804fd80e81a77c76f06ccb08514b6633f6dfb8496818efd4d082966f84b30549bef68a2b3f49bbb9fbea469a9a2c55254f353c5f0e660f6364557933474f6d50c1cada51f6bf6f077c4"}], 0x100, 0x20000000}, {0x0, 0x0, &(0x7f0000003880)=[{&(0x7f00000037c0)="f5f1288b8c21241acfba67a27dc5835b3a0f09e53e037d7ec561b7562b466e2a0c669e0b25e898a4c33bb9ae87c87477f9de4fe0b125703afd966476dc40", 0x3e}, {&(0x7f0000003800)="2c4da6f7d75055b5e552e3de65796b95e79f0277c47cdc6526186d7ac88a8481812a58cd027d02433603afcd081a33bc646afc5535c77589ca8f047c30e42a30b4acf82a427ac606a473a55f200aa886d26c55d314edb37d5803da1bfa2b787f9d84e336231f5d46f2ea9f6a7cd894", 0x6f}], 0x2, &(0x7f00000038c0)=[@assoc={0x18, 0x117, 0x4, 0x1df}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x8000}, @iv={0x48, 0x117, 0x2, 0x34, "975bb10867dd1e17258056a0a3e45b4d8fde3e13231dd7576d192c4987a14d6a9a838bad49fa8e89c6c5f697c795ac752d527214"}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0x78, 0x117, 0x2, 0x60, "32f51d046828899ee37ac1b421b6b1659daec874a684e62fde91bd1f504f9cee1f799cc4f6b7acab3f03bf495d0400a50cf316e25a43e30ad433873e418890f008fb2b866b8cda85653447c86993b627dcca1f538ef0c0a62fa6aafb52848baf"}], 0x138}], 0x6, 0x4) (async) r3 = socket(0x1f, 0x5, 0x6) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000003640)={0x0, 0x2, 0x4ac, 0x0, 0x3, 0x1}, &(0x7f0000003b80)=0x14) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000003bc0)={r4, 0x3}, 0x8) 971.159461ms ago: executing program 3 (id=9743): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) sendfile(r1, r2, &(0x7f0000000140), 0x6) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "d482449a"}}}}}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x10, 0x400, 0x4, @rand_addr=' \x01\x00', @loopback, 0x64e91e306b4fab98, 0x700, 0xd, 0x10000}}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000180)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced\x00', 0x0, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced\x00', 0x0, 0x0) sendfile(r0, r4, &(0x7f0000000100)=0xfffffffffffff2c9, 0x2213) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0xa6}, 0x4) (async) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0xa6}, 0x4) sendmmsg$unix(r0, &(0x7f0000008280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x8001}}], 0x2, 0x80) (async) sendmmsg$unix(r0, &(0x7f0000008280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x8001}}], 0x2, 0x80) 481.85799ms ago: executing program 2 (id=9744): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20002060}, 0x4000000) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8402, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'vlan1\x00', 0x2000}) (async) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r3, 0x114, 0x5, &(0x7f00000001c0), 0x4) (async) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000280)) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000580)={&(0x7f00000002c0), 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1fc, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x100}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6383}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd0eb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x57a1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9dbf}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x100}]}, @TIPC_NLA_NODE={0x108, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1ff}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffff00}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "b6712dcd7317dfb6a9d7884ca9bc6cd93f125e7a3debf35cab0afb2c0dcc4a6eebd1"}}, @TIPC_NLA_NODE_ID={0x98, 0x3, "dc34251f3974e49fcc149d935989ebbf54da4d9799b6115fb32136e0f1b1228d2b05ea3636448706260774c04c8f35bc826c39abe6db66ac967c57d0c8606280a93b4dee4d96aa652d912a29d7485e1dbaa07b32a89f4027f2ed08729e4e86a8ed0525afb64550054e0246387a2f18e1159f4776e057d0342d0b1a7f1b813597de0ed6c1bd36e5341e2324b89f38470e8fadb1ae"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x20000000}, 0x814) (async) r5 = accept4$ax25(0xffffffffffffffff, &(0x7f00000005c0)={{0x3, @default}, [@null, @bcast, @bcast, @remote, @default, @default, @bcast, @null]}, &(0x7f0000000640)=0x48, 0x80800) setsockopt$ax25_int(r5, 0x101, 0xc, &(0x7f0000000680)=0x9, 0x4) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r6, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0xa, &(0x7f0000000800)=0x1a2, 0x4) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), r0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r7, 0x100, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x42001}, 0x12) (async) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e00)={&(0x7f00000009c0)={0x42c, 0x3f4, 0x400, 0x70bd27, 0x25dfdbfb, {0x2, 0x1, 0x37, [0xe460, 0xe, 0x4, 0x7ff, 0x846f, 0xc, 0x4, 0x3ff, 0x4, 0x6, 0x800, 0x5, 0xfb8, 0x400, 0x3f, 0x4, 0x6, 0x26, 0xffffffff, 0x81, 0xd7d, 0x4, 0x5, 0x8, 0x8780, 0xd, 0xe, 0x0, 0x4, 0x1eb60ae3, 0x3, 0x6, 0x8a, 0x2, 0x5, 0x3ff, 0xfffff318, 0x1, 0x8, 0x200, 0x10001, 0x1, 0x4, 0x5d4593c5, 0x8, 0x0, 0x1, 0x800, 0xe9a, 0x7ff, 0xfffffff1, 0x9, 0x200, 0x1000, 0x81cb, 0x3, 0x7, 0x7, 0x3b3, 0x1, 0x100, 0xf44, 0x3], [0x2, 0x5, 0x7, 0xb, 0x1ece, 0x9, 0x7fffffff, 0x1ff, 0x13e, 0xcd68, 0x8, 0x6, 0x0, 0x1, 0xffffff00, 0x1, 0x1, 0xffffffff, 0x8, 0x6, 0x10, 0x3, 0x1348559a, 0x2, 0x4800000, 0x851, 0x7, 0x5, 0x3ff, 0x200, 0x4, 0x8, 0xdfa4, 0x6, 0x410, 0x0, 0x1000, 0x7fffffff, 0x9, 0x9, 0xfffffffb, 0x6, 0x3, 0x7fffffff, 0x5, 0x5, 0xb, 0x40, 0x2, 0x1, 0x3, 0xa000000, 0x5, 0x1, 0x6, 0x100, 0xb88e, 0x95f, 0x8, 0xfbe, 0x5, 0xffffffff, 0x8000, 0x401], [0x6, 0x9, 0x6, 0x8001, 0x80000000, 0x8, 0x7, 0x7, 0x48, 0x7fff, 0xe, 0x3, 0x7d5b, 0x40000000, 0x101, 0x0, 0x3, 0x40, 0x0, 0x4, 0x7, 0x9, 0x2, 0x3, 0x9, 0x3, 0x7, 0x2, 0x0, 0x80000001, 0x8001, 0x8, 0x6, 0x8, 0x683, 0x5, 0xfffffffd, 0xfd, 0x200, 0x4, 0x80000000, 0xe000000, 0x2, 0x25, 0x9, 0x9, 0x5, 0x5, 0x80000000, 0x3, 0x2, 0x44, 0x3, 0x7, 0x1, 0x19a, 0x7b59, 0x8001, 0x7fffffff, 0xc, 0x10000, 0x7, 0x7f, 0x2000000], [0x10000, 0x3ff, 0x0, 0x2, 0xfffffffa, 0x3, 0x5, 0x1, 0xff, 0x5, 0xfffffff0, 0x101, 0x4, 0xffffffff, 0x7, 0x4, 0x9, 0x9, 0x3, 0x4, 0xa, 0x4945, 0x7, 0xffff, 0x7, 0xacd, 0x400, 0x9, 0xfff, 0x7, 0x5, 0x5, 0x1, 0xfffffff9, 0x10, 0x4, 0x0, 0x5, 0x6, 0x4, 0xf4, 0x8, 0x7, 0x5, 0x4, 0x7bb2, 0x5, 0x7f, 0x8115, 0x8, 0x0, 0x0, 0x7, 0xa, 0x1ff, 0x9, 0x3, 0x354, 0x80000001, 0x6d, 0xffffffff, 0x3, 0x10001, 0xffff8001], 0xb, ['^\x00', '&\\@*.-*$\x00']}, ["", "", "", "", "", "", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x4044040}, 0x4000000) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000e80)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000fc0)={@fallback=r0, 0x0, 0x1, 0x0, &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f40)=[0x0], &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x2, &(0x7f0000001040)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0x1}], &(0x7f0000001080)='syzkaller\x00', 0x1, 0xcd, &(0x7f00000010c0)=""/205, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0x91cd}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001000)={@fallback=r0, r8, 0x3, 0x4, 0x0, @void, @value=r11, @void, @void, r10}, 0x20) (async) r12 = accept4$bt_l2cap(r9, 0x0, &(0x7f0000001300), 0x0) getsockopt$bt_l2cap_L2CAP_LM(r12, 0x6, 0x3, &(0x7f0000001340), &(0x7f0000001380)=0x4) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001400), r0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000014c0)={r9, 0x58, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000001580)={'ip6_vti0\x00', &(0x7f0000001500)={'syztnl0\x00', 0x0, 0x0, 0x4, 0x80, 0x190a, 0x2, @private2, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x10, 0x8000, 0xd1ae, 0x65a}}) getsockname$packet(r9, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001600)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r9, &(0x7f0000001700)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x78, r13, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x200000c0}, 0x240000c1) 0s ago: executing program 0 (id=9745): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(khazad)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000240)="11", 0x1, 0x8010, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) r5 = accept4$unix(r4, &(0x7f00000002c0)=@abs, &(0x7f0000000040)=0x6e, 0x100000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'rose0\x00'}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0xff01, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x34, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "31c944", 0x0, 0x2b, 0x0, @empty, @remote, [], "d4a3fb00"}}}}}}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000004e40)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000008000000a00000a200000000e0a03000000000000000000020000020900010073797a31000f0000140000001100010000000000000000000700000a9aa49dead43945c9b506801c7f01af0fca7ae6d3e9aba81b799070e2273b37d3bd10d003bc64c6c03ff19fe9a58d8111a9612c0400000000000000f5b0aec5c0e1024041c13d39d5ecec972df5ce3af46b705d871ca8b16bcded8a07128d76"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4) kernel console output (not intermixed with test programs): ] netlink: 'syz.3.8250': attribute type 1 has an invalid length. [ 790.576258][ T3357] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 790.924736][ T3388] veth1_macvtap: left promiscuous mode [ 791.272707][ T3415] IPVS: ip_vs_edit_dest(): server weight less than zero [ 791.819618][ T3430] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 791.931429][ T3434] __nla_validate_parse: 5 callbacks suppressed [ 791.931449][ T3434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8281'. [ 792.019438][ T3438] only policy match revision 0 supported [ 792.019461][ T3438] unable to load match [ 792.115369][ T3445] syzkaller0: entered promiscuous mode [ 792.134209][ T3445] syzkaller0: entered allmulticast mode [ 792.207761][ T3451] netlink: 'syz.0.8286': attribute type 83 has an invalid length. [ 792.246024][ T3453] mac80211_hwsim hwsim57 wlan1: Caught tx_queue_len zero misconfig [ 792.304947][ T3455] netlink: 'syz.1.8288': attribute type 1 has an invalid length. [ 792.372226][ T3455] 8021q: adding VLAN 0 to HW filter on device bond6 [ 792.439681][ T3460] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 792.528463][ T3455] 8021q: adding VLAN 0 to HW filter on device bond7 [ 792.566119][ T3455] bond6: (slave bond7): Enslaving as an active interface with a down link [ 793.156648][ T3512] netlink: 'syz.4.8305': attribute type 2 has an invalid length. [ 793.166725][ T3512] netlink: 244 bytes leftover after parsing attributes in process `syz.4.8305'. [ 793.183124][ T3512] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8305'. [ 793.256826][ T3518] netlink: 'syz.4.8306': attribute type 1 has an invalid length. [ 793.453898][ T3528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8309'. [ 793.471791][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 793.527252][ T3529] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8308'. [ 793.674887][ T3535] x_tables: duplicate underflow at hook 2 [ 793.784548][ T3540] netlink: 'syz.4.8312': attribute type 4 has an invalid length. [ 793.907882][ T3544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 793.988626][ T3549] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8314'. [ 794.437758][ T3579] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8325'. [ 794.485364][ T3579] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8325'. [ 794.497242][ T3573] bond8: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 794.533852][ T3573] bond8 (unregistering): Released all slaves [ 794.554517][ T3587] netlink: 'syz.4.8329': attribute type 2 has an invalid length. [ 794.732106][ T3599] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8333'. [ 794.847046][ T3603] tipc: Resetting bearer [ 794.892212][ T3603] tipc: Disabling bearer [ 795.035269][ T3603] vlan1 (unregistering): left allmulticast mode [ 795.042586][ T3603] veth0_vlan (unregistering): left allmulticast mode [ 795.069726][ T3613] syzkaller1: entered promiscuous mode [ 795.077310][ T3613] syzkaller1: entered allmulticast mode [ 795.409293][ T3636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8343'. [ 795.467431][ T3640] netlink: 'syz.3.8344': attribute type 1 has an invalid length. [ 795.508349][ T3643] netlink: 'syz.3.8344': attribute type 1 has an invalid length. [ 796.004929][ T3669] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 796.729044][ T3725] SET target dimension over the limit! [ 796.829273][ T3733] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 796.897319][ T3732] netlink: 'syz.3.8366': attribute type 8 has an invalid length. [ 796.957639][ T3732] bond0: entered promiscuous mode [ 796.999020][ T3732] gretap0: entered promiscuous mode [ 797.025656][ T3732] bond0: left promiscuous mode [ 797.052222][ T3732] gretap0: left promiscuous mode [ 797.091797][ T3742] gtp1: entered promiscuous mode [ 797.096992][ T3742] gtp1: entered allmulticast mode [ 797.229111][ T3748] __nla_validate_parse: 4 callbacks suppressed [ 797.229131][ T3748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8371'. [ 797.278033][ T3753] netlink: 228 bytes leftover after parsing attributes in process `syz.3.8373'. [ 797.373528][ T3748] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 797.633617][ T3776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8379'. [ 797.793878][ T3785] netlink: 'syz.2.8382': attribute type 1 has an invalid length. [ 797.816753][ T3785] netlink: 'syz.2.8382': attribute type 1 has an invalid length. [ 797.833953][ T3789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8382'. [ 797.875625][ T3792] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8385'. [ 797.914096][ T3793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8384'. [ 797.925079][ T3793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8384'. [ 798.127922][ T3803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8388'. [ 798.483971][ T3826] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8392'. [ 798.689826][ T3791] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 798.801784][ T3841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8398'. [ 798.838453][ T3841] netlink: 'syz.0.8398': attribute type 3 has an invalid length. [ 798.887120][ T3841] openvswitch: netlink: Message has 6 unknown bytes. [ 799.027103][ T3858] bond3: option mode: unable to set because the bond device has slaves [ 799.060482][ T3859] bond3: option mode: unable to set because the bond device has slaves [ 799.098831][ T3858] bond3: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 799.136634][ T3869] xt_CT: You must specify a L4 protocol and not use inversions on it [ 799.153808][ T3858] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 799.170292][ T3868] netlink: 'syz.4.8407': attribute type 39 has an invalid length. [ 799.241320][ T3874] netlink: 'syz.0.8408': attribute type 1 has an invalid length. [ 799.264126][ T3875] netlink: 'syz.0.8408': attribute type 1 has an invalid length. [ 799.570812][ T3874] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 799.576975][ T3875] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 799.836083][ T3894] netlink: 'syz.0.8412': attribute type 3 has an invalid length. [ 800.029505][ T3904] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 800.506448][ T3941] lo speed is unknown, defaulting to 1000 [ 800.588613][ T3952] netlink: 'syz.1.8430': attribute type 15 has an invalid length. [ 800.628241][ T3952] netlink: 'syz.1.8430': attribute type 15 has an invalid length. [ 800.691230][ T3958] netlink: 'syz.4.8431': attribute type 1 has an invalid length. [ 800.761980][ T3958] 8021q: adding VLAN 0 to HW filter on device bond9 [ 800.835688][ T3965] 8021q: adding VLAN 0 to HW filter on device bond9 [ 800.846078][ T3965] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 800.868181][ T3965] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 800.942869][ T3970] vlan0: entered allmulticast mode [ 800.948043][ T3970] bond9: entered allmulticast mode [ 801.146639][ T3981] syzkaller1: entered promiscuous mode [ 801.157457][ T3981] syzkaller1: entered allmulticast mode [ 801.827398][ T4025] 8021q: VLANs not supported on sit0 [ 802.182904][ T4036] bond4 (unregistering): Released all slaves [ 802.279882][ T4046] __nla_validate_parse: 17 callbacks suppressed [ 802.279908][ T4046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8452'. [ 802.296600][ T4046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8452'. [ 802.370449][ T4046] netlink: 'syz.3.8452': attribute type 7 has an invalid length. [ 802.416809][ T4046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8452'. [ 802.451589][ T4046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8452'. [ 802.497689][ T4046] netlink: 'syz.3.8452': attribute type 7 has an invalid length. [ 802.526306][ T4058] SET target dimension over the limit! [ 802.983065][ T4086] netlink: 'syz.0.8462': attribute type 2 has an invalid length. [ 802.999560][ T4091] netlink: 'syz.3.8465': attribute type 11 has an invalid length. [ 803.007829][ T4091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8465'. [ 803.046236][ T4091] netlink: 'syz.3.8465': attribute type 11 has an invalid length. [ 803.076395][ T4091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8465'. [ 803.184944][ T30] audit: type=1800 audit(1771411724.313:14): pid=4096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8467" name="memory.events" dev="tmpfs" ino=2052 res=0 errno=0 [ 803.186729][ T4096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8467'. [ 803.271079][ T4107] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 803.547709][ T4118] netlink: 'syz.1.8473': attribute type 21 has an invalid length. [ 803.565584][ T4118] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 803.572945][ T4118] IPv6: NLM_F_CREATE should be set when creating new route [ 803.580269][ T4118] IPv6: NLM_F_CREATE should be set when creating new route [ 803.587520][ T4118] IPv6: NLM_F_CREATE should be set when creating new route [ 804.007131][ T4146] netlink: 'syz.4.8483': attribute type 1 has an invalid length. [ 804.035132][ T4149] macvlan0: entered promiscuous mode [ 804.039692][ T4146] netlink: 280 bytes leftover after parsing attributes in process `syz.4.8483'. [ 804.062623][ T4149] macvlan0: entered allmulticast mode [ 804.083755][ T4149] bond0: (slave macvlan0): Opening slave failed [ 804.093043][ T4156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8485'. [ 804.317216][ T4160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8487'. [ 804.376966][ T4160] tipc: Enabled bearer , priority 0 [ 804.453460][ T4167] syzkaller0: entered promiscuous mode [ 804.476613][ T4167] syzkaller0: entered allmulticast mode [ 804.499753][ T4167] 0: reclassify loop, rule prio 0, protocol 800 [ 804.699852][ T4159] tipc: Disabling bearer [ 805.266881][ T4218] syzkaller0: entered promiscuous mode [ 805.276113][ T4218] syzkaller0: entered allmulticast mode [ 805.286190][ T4217] syzkaller0: entered promiscuous mode [ 805.293839][ T4217] syzkaller0: entered allmulticast mode [ 805.352110][ T4217] syzkaller0: left promiscuous mode [ 805.357488][ T4217] syzkaller0: left allmulticast mode [ 805.640590][ T4239] validate_nla: 4 callbacks suppressed [ 805.640610][ T4239] netlink: 'syz.4.8505': attribute type 9 has an invalid length. [ 806.168644][ T4273] netlink: 'syz.3.8516': attribute type 1 has an invalid length. [ 806.202732][ T4274] netlink: 'syz.3.8516': attribute type 1 has an invalid length. [ 806.265468][ T4273] bond9: entered promiscuous mode [ 806.303182][ T4273] 8021q: adding VLAN 0 to HW filter on device bond9 [ 806.418965][ T4292] netlink: 'syz.0.8523': attribute type 18 has an invalid length. [ 806.449650][ T4292] bridge0: entered promiscuous mode [ 806.455641][ T4292] macsec2: entered promiscuous mode [ 806.482411][ T4292] macsec2: entered allmulticast mode [ 806.500738][ T4292] bridge0: entered allmulticast mode [ 806.514440][ T4292] bridge0: port 1(macsec2) entered blocking state [ 806.537241][ T4292] bridge0: port 1(macsec2) entered disabled state [ 806.597460][ T4292] bridge0: left allmulticast mode [ 806.613292][ T4292] bridge0: left promiscuous mode [ 806.743358][ T4313] Cannot find map_set index 65533 as target [ 807.289607][ T4351] syzkaller0: entered promiscuous mode [ 807.295805][ T4351] syzkaller0: entered allmulticast mode [ 807.988400][ T4388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 808.028242][ T4380] __nla_validate_parse: 12 callbacks suppressed [ 808.028261][ T4380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8545'. [ 808.046980][ T4380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8545'. [ 809.413597][ T4380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8545'. [ 809.448595][ T4380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8545'. [ 809.463402][ T4399] netlink: 'syz.1.8548': attribute type 83 has an invalid length. [ 809.751355][ T4401] netlink: 596 bytes leftover after parsing attributes in process `syz.4.8549'. [ 809.892247][ T4422] netlink: 'syz.1.8557': attribute type 1 has an invalid length. [ 809.955696][ T4428] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8558'. [ 809.976811][ T4428] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8558'. [ 809.987486][ T4428] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8558'. [ 809.999747][ T4428] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8558'. [ 810.014422][ T4428] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8558'. [ 810.044636][ T4433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 810.091649][ T4432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 810.287204][ T4448] x_tables: duplicate underflow at hook 3 [ 810.611597][ T4460] veth0: entered promiscuous mode [ 810.702537][ T4458] veth0: left promiscuous mode [ 810.707725][ T4472] netlink: 'syz.2.8571': attribute type 25 has an invalid length. [ 810.901150][ T4481] netlink: 'syz.3.8575': attribute type 1 has an invalid length. [ 810.927167][ T4481] NCSI netlink: No device for ifindex 0 [ 810.961787][ T4486] IPv6: sit2: Disabled Multicast RS [ 810.978278][ T4486] sit2: entered allmulticast mode [ 811.119489][ T4497] smc: net device caif0 applied user defined pnetid SYZ2 [ 811.226740][ T4502] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 811.319098][ T4507] netlink: 'syz.3.8581': attribute type 3 has an invalid length. [ 811.862732][ T4538] syzkaller0: entered promiscuous mode [ 811.868272][ T4538] syzkaller0: entered allmulticast mode [ 812.195373][ T4559] syzkaller0: entered promiscuous mode [ 812.201370][ T4559] syzkaller0: entered allmulticast mode [ 812.212636][ T4559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 812.299279][ T4568] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 812.716579][ T4593] tipc: Enabling of bearer rejected, failed to enable media [ 812.887251][ T4615] xt_cgroup: path and classid specified [ 813.037824][ T4618] syzkaller0: entered promiscuous mode [ 813.043492][ T4618] syzkaller0: entered allmulticast mode [ 813.053333][ T4626] __nla_validate_parse: 73 callbacks suppressed [ 813.053362][ T4626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8614'. [ 813.153963][ T4627] can: request_module (can-proto-0) failed. [ 813.262918][ T4633] netlink: 'syz.2.8616': attribute type 8 has an invalid length. [ 813.282545][ T4633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8616'. [ 813.311731][ T4633] bond0: entered promiscuous mode [ 813.328359][ T4633] bond0: left promiscuous mode [ 813.733179][ T4660] netlink: 'syz.0.8625': attribute type 1 has an invalid length. [ 813.741229][ T4660] netlink: 136 bytes leftover after parsing attributes in process `syz.0.8625'. [ 813.757786][ T4660] netlink: 'syz.0.8625': attribute type 1 has an invalid length. [ 813.777416][ T4660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8625'. [ 813.958720][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 814.285232][ T4685] netlink: 'syz.2.8631': attribute type 8 has an invalid length. [ 814.326232][ T4686] lo speed is unknown, defaulting to 1000 [ 814.332493][ T4685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8631'. [ 814.410561][ T4689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8632'. [ 814.451109][ T4689] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8632'. [ 814.639186][ T4692] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8632'. [ 814.680381][ T4688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 814.897459][ T4685] bond0: entered promiscuous mode [ 814.904590][ T4685] bond0: left promiscuous mode [ 814.947039][ T4689] geneve3: entered promiscuous mode [ 814.952786][ T4689] geneve3: entered allmulticast mode [ 815.206083][ T4701] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.237778][ T4701] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.508025][ T4701] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.528564][ T4701] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.729752][ T4701] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.764878][ T4701] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.937317][ T4737] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8642'. [ 815.942390][ T4701] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.963318][ T4701] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.020934][ T4739] netlink: 'syz.3.8642': attribute type 1 has an invalid length. [ 816.041365][ T4739] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8642'. [ 816.066591][ T4739] netlink: 'syz.3.8642': attribute type 1 has an invalid length. [ 816.102293][ T4739] netlink: 'syz.3.8642': attribute type 8 has an invalid length. [ 816.231019][T25728] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.243690][T25728] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.315180][T25728] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.328409][T25728] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.366254][T25728] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.381325][T25728] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.440098][T25731] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.448349][T25731] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.517425][ T4762] gre3: entered promiscuous mode [ 816.533239][ T4762] gre3: entered allmulticast mode [ 816.565767][ T4765] netlink: 'syz.3.8648': attribute type 1 has an invalid length. [ 816.667910][ T4765] 8021q: adding VLAN 0 to HW filter on device bond10 [ 816.693546][ T4769] ip6erspan1: entered promiscuous mode [ 816.704144][ T4769] bond10: (slave ip6erspan1): making interface the new active one [ 816.714122][ T4769] bond10: (slave ip6erspan1): Enslaving as an active interface with an up link [ 816.764995][ T4777] netlink: 'syz.1.8652': attribute type 39 has an invalid length. [ 817.032032][ T4800] netlink: 'syz.0.8657': attribute type 8 has an invalid length. [ 817.049303][ T4795] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 817.098148][ T4800] bond0: entered promiscuous mode [ 817.124181][ T4800] gretap0: entered promiscuous mode [ 817.149970][ T4800] bond0: left promiscuous mode [ 817.163176][ T4800] gretap0: left promiscuous mode [ 818.230259][ T4876] __nla_validate_parse: 11 callbacks suppressed [ 818.230280][ T4876] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8675'. [ 818.247682][ T4876] netlink: 666 bytes leftover after parsing attributes in process `syz.3.8675'. [ 818.477510][ T4890] netlink: 100 bytes leftover after parsing attributes in process `syz.1.8678'. [ 818.743260][ T4914] syzkaller1: entered promiscuous mode [ 818.748998][ T4914] syzkaller1: entered allmulticast mode [ 818.863876][ T4922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8688'. [ 818.990024][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 818.998126][ C1] lec:lec_tx_timeout: lec0 [ 819.050405][ T4938] x_tables: duplicate underflow at hook 2 [ 819.102507][ T4941] tipc: Resetting bearer [ 819.117222][ T4943] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8695'. [ 819.204473][ T4945] netlink: 276 bytes leftover after parsing attributes in process `syz.1.8696'. [ 819.239464][ T4947] netlink: 'syz.3.8697': attribute type 8 has an invalid length. [ 819.248681][ T4947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8697'. [ 819.268607][ T4947] bond0: entered promiscuous mode [ 819.305300][ T4947] gretap0: entered promiscuous mode [ 819.334720][ T4947] bond0: left promiscuous mode [ 819.343523][ T4947] gretap0: left promiscuous mode [ 819.384090][ T4952] netlink: 'syz.1.8698': attribute type 39 has an invalid length. [ 819.434765][ T4956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8700'. [ 819.524641][ T6807] lec:lec_start_xmit: lec0:No lecd attached [ 819.941979][ T4987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8706'. [ 819.984747][ T4990] netlink: 332 bytes leftover after parsing attributes in process `syz.2.8706'. [ 820.312354][ T5006] netlink: 'syz.1.8711': attribute type 8 has an invalid length. [ 820.344898][ T5006] bond0: entered promiscuous mode [ 820.362405][ T5006] gretap0: entered promiscuous mode [ 820.369124][ T5006] bond0: left promiscuous mode [ 820.376044][ T5006] gretap0: left promiscuous mode [ 820.512313][ T5016] openvswitch: netlink: IPv4 tun info is not correct [ 820.922919][ T5044] netlink: 'syz.1.8723': attribute type 10 has an invalid length. [ 820.997133][ T5051] bond0: entered promiscuous mode [ 821.014502][ T5051] bond0: left promiscuous mode [ 821.604349][ T5084] validate_nla: 1 callbacks suppressed [ 821.604370][ T5084] netlink: 'syz.2.8733': attribute type 29 has an invalid length. [ 821.686843][ T5084] netlink: 'syz.2.8733': attribute type 29 has an invalid length. [ 821.869628][ T5097] netlink: 'syz.2.8736': attribute type 10 has an invalid length. [ 821.905329][ T5099] netlink: 'syz.1.8735': attribute type 2 has an invalid length. [ 822.099565][ T5109] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 822.284549][ T5119] xt_hashlimit: size too large, truncated to 1048576 [ 822.518367][ T5130] wireguard0: entered promiscuous mode [ 822.525333][ T5130] wireguard0: entered allmulticast mode [ 822.907359][ T5147] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 823.112494][ T5122] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 823.128878][ T5166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 823.201017][ T5172] netlink: 'syz.0.8754': attribute type 1 has an invalid length. [ 823.252084][ T5173] gretap5: entered promiscuous mode [ 823.261850][ T5173] bond8: (slave gretap5): making interface the new active one [ 823.271200][ T5173] bond8: (slave gretap5): Enslaving as an active interface with an up link [ 823.385394][ T5186] __nla_validate_parse: 8 callbacks suppressed [ 823.385413][ T5186] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8757'. [ 823.672413][ T5210] netlink: 'syz.1.8764': attribute type 2 has an invalid length. [ 823.690332][ T5211] netlink: 'syz.1.8764': attribute type 2 has an invalid length. [ 823.710679][ T5209] netlink: 84 bytes leftover after parsing attributes in process `syz.3.8762'. [ 823.861329][ T5221] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8769'. [ 823.920591][ T5226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8767'. [ 824.115089][ T5236] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8773'. [ 824.635012][ T5265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8779'. [ 824.723547][ T5265] 8021q: adding VLAN 0 to HW filter on device bond4 [ 824.990032][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5460 ms [ 824.998153][ C1] lec:lec_tx_timeout: lec0 [ 825.351471][ T5305] netlink: 'syz.3.8793': attribute type 1 has an invalid length. [ 825.354807][ T5314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8791'. [ 825.463619][ T5323] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8792'. [ 825.557393][ T5311] bond12: (slave bridge0): making interface the new active one [ 825.599707][ T5311] bond12: (slave bridge0): Enslaving as an active interface with an up link [ 825.619476][ T5332] xt_hashlimit: size too large, truncated to 1048576 [ 825.845526][ T5346] syzkaller0: entered promiscuous mode [ 825.869511][ T5346] syzkaller0: entered allmulticast mode [ 825.890846][ T5343] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8797'. [ 826.222259][ T5358] netlink: 'syz.2.8801': attribute type 1 has an invalid length. [ 826.298241][ T5355] syzkaller0: entered promiscuous mode [ 826.313187][ T5364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8804'. [ 826.363876][ T5355] syzkaller0: entered allmulticast mode [ 826.445730][ T5367] bridge4: port 1(veth11) entered blocking state [ 826.453703][ T5367] bridge4: port 1(veth11) entered disabled state [ 826.461770][ T5367] veth11: entered allmulticast mode [ 826.469760][ T5367] veth11: entered promiscuous mode [ 828.098940][ T5364] bridge4: port 2(veth0_to_bond) entered blocking state [ 828.106600][ T5364] bridge4: port 2(veth0_to_bond) entered disabled state [ 828.115506][ T5364] veth0_to_bond: entered allmulticast mode [ 828.123599][ T5364] veth0_to_bond: entered promiscuous mode [ 828.218008][ T5379] ip6t_srh: unknown srh invflags 4000 [ 828.478636][ T5400] __nla_validate_parse: 3 callbacks suppressed [ 828.478656][ T5400] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8809'. [ 828.531522][ T5397] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8809'. [ 828.545481][ T5397] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8809'. [ 828.661382][ T5407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8816'. [ 828.805556][ T5421] syzkaller0: entered promiscuous mode [ 828.812174][ T5421] syzkaller0: entered allmulticast mode [ 829.009038][ T5431] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 831.663457][ T5409] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 831.688933][ T5467] netlink: 244 bytes leftover after parsing attributes in process `syz.4.8830'. [ 831.920466][ T5480] sctp: [Deprecated]: syz.4.8832 (pid 5480) Use of struct sctp_assoc_value in delayed_ack socket option. [ 831.920466][ T5480] Use struct sctp_sack_info instead [ 832.174547][ T5496] syzkaller0: entered promiscuous mode [ 832.200722][ T5496] syzkaller0: entered allmulticast mode [ 832.246238][ T5496] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8837'. [ 832.270785][ T5496] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8837'. [ 832.999946][ T5542] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 833.051089][ T5540] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 833.144261][ T5550] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8850'. [ 833.207944][T26312] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 833.219650][T26312] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 833.230852][T26312] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 833.239678][T26312] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 833.252130][T26312] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 833.349794][ T5552] lo speed is unknown, defaulting to 1000 [ 833.735973][ T5577] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8854'. [ 833.959302][ T5552] chnl_net:caif_netlink_parms(): no params data found [ 834.049722][ T5552] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.057048][ T5552] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.064886][ T5552] bridge_slave_0: entered allmulticast mode [ 834.073484][ T5552] bridge_slave_0: entered promiscuous mode [ 834.081920][ T5552] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.089106][ T5552] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.096456][ T5552] bridge_slave_1: entered allmulticast mode [ 834.104674][ T5552] bridge_slave_1: entered promiscuous mode [ 834.137947][ T5552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 834.151222][ T5552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 834.188169][ T5552] team0: Port device team_slave_0 added [ 834.197473][ T5552] team0: Port device team_slave_1 added [ 834.226127][ T5552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 834.233401][ T5552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 834.260543][ T5552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 834.274129][ T5552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 834.281889][ T5552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 834.308973][ T5552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 834.362020][ T5552] hsr_slave_0: entered promiscuous mode [ 834.368756][ T5552] hsr_slave_1: entered promiscuous mode [ 834.376140][ T5552] debugfs: 'hsr0' already exists in 'hsr' [ 834.382365][ T5552] Cannot create hsr debugfs directory [ 834.524520][ T5552] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 834.535377][ T5552] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.624859][ T5552] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 834.635669][ T5552] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.705914][ T5552] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 834.716383][ T5552] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.311311][ T5827] Bluetooth: hci2: command tx timeout [ 835.429827][ T5514] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 835.439851][ T5559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8852'. [ 835.462782][ T5552] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 835.578970][ T5552] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 835.629479][ T5552] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 835.691470][ T5552] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 835.708903][ T5598] netlink: 'syz.0.8858': attribute type 1 has an invalid length. [ 835.744536][ T5598] netlink: 228 bytes leftover after parsing attributes in process `syz.0.8858'. [ 835.917027][ T5616] netlink: 'syz.3.8861': attribute type 29 has an invalid length. [ 835.931519][ T5616] netlink: 596 bytes leftover after parsing attributes in process `syz.3.8861'. [ 836.004990][ T5552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 836.057272][ T5552] 8021q: adding VLAN 0 to HW filter on device team0 [ 836.086899][T25720] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.094151][T25720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 836.185096][T25714] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.192335][T25714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 836.243100][ T5630] openvswitch: netlink: Missing key (keys=40, expected=100) [ 836.415232][ T5641] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.8866'. [ 836.567730][ T5648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8869'. [ 836.599973][ T5648] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8869'. [ 836.609715][ T5648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8869'. [ 836.681192][ T5648] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8869'. [ 836.710969][ T5656] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 836.778824][ T5552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 836.881053][ T5552] veth0_vlan: entered promiscuous mode [ 836.926585][ T5552] veth1_vlan: entered promiscuous mode [ 837.019618][ T5552] veth0_macvtap: entered promiscuous mode [ 837.065082][ T5552] veth1_macvtap: entered promiscuous mode [ 837.107041][ T5669] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8875'. [ 837.144422][ T5674] lo speed is unknown, defaulting to 1000 [ 837.153219][ T5679] bridge_slave_0: entered promiscuous mode [ 837.216992][ T5552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 837.268473][ T5552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 837.319738][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.350565][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.391469][ T5827] Bluetooth: hci2: command tx timeout [ 837.412249][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.450611][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.680507][T25714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.701239][T25714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.813057][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.832046][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.999895][ T5693] tipc: Enabled bearer , priority 10 [ 838.059058][ T5698] netlink: 'syz.0.8881': attribute type 6 has an invalid length. [ 838.081351][ T5699] netlink: 'syz.0.8881': attribute type 6 has an invalid length. [ 838.188477][ T5698] netlink: 'syz.0.8881': attribute type 1 has an invalid length. [ 838.216661][ T5698] netlink: 'syz.0.8881': attribute type 1 has an invalid length. [ 838.260706][ T5698] netlink: 'syz.0.8881': attribute type 2 has an invalid length. [ 838.429420][ T5717] Cannot find del_set index 4 as target [ 838.485075][ T5718] syzkaller0: entered promiscuous mode [ 838.496417][ T5718] syzkaller0: entered allmulticast mode [ 838.716300][ T5738] netlink: 'syz.2.8891': attribute type 8 has an invalid length. [ 839.472412][ T5827] Bluetooth: hci2: command tx timeout [ 840.402552][ T5738] bond0: entered promiscuous mode [ 840.407764][ T5738] bond_slave_0: entered promiscuous mode [ 840.414666][ T5738] bond_slave_1: entered promiscuous mode [ 840.422597][ T5738] gretap0: entered promiscuous mode [ 840.429164][ T5738] bond0: left promiscuous mode [ 840.435252][ T5738] bond_slave_0: left promiscuous mode [ 840.446438][ T5738] bond_slave_1: left promiscuous mode [ 840.461043][ T5738] gretap0: left promiscuous mode [ 840.476121][ T5748] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 840.521798][ T5751] __nla_validate_parse: 8 callbacks suppressed [ 840.521819][ T5751] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8893'. [ 840.739241][ T5768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8898'. [ 840.877077][ T5771] syzkaller0: entered promiscuous mode [ 840.891904][ T5771] syzkaller0: entered allmulticast mode [ 840.918085][ T5773] lo speed is unknown, defaulting to 1000 [ 841.555354][ T5827] Bluetooth: hci2: command tx timeout [ 842.556224][ T5779] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8902'. [ 842.567136][ T5779] netlink: 23 bytes leftover after parsing attributes in process `syz.2.8902'. [ 842.577280][ T5779] netlink: 23 bytes leftover after parsing attributes in process `syz.2.8902'. [ 843.981330][ T5784] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 844.167979][ T5856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8919'. [ 844.202806][ T5856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8919'. [ 844.330739][ T5890] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 844.567268][ T5915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8928'. [ 844.640710][ T5919] syz.4.8927: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 844.670293][ T5919] CPU: 0 UID: 0 PID: 5919 Comm: syz.4.8927 Not tainted syzkaller #0 PREEMPT(full) [ 844.670338][ T5919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 844.670353][ T5919] Call Trace: [ 844.670362][ T5919] [ 844.670373][ T5919] dump_stack_lvl+0xe8/0x150 [ 844.670437][ T5919] warn_alloc+0x249/0x340 [ 844.670469][ T5919] ? stack_trace_save+0xa9/0x100 [ 844.670505][ T5919] ? __pfx_warn_alloc+0x10/0x10 [ 844.670542][ T5919] ? kasan_save_track+0x4f/0x80 [ 844.670569][ T5919] ? kasan_save_track+0x3e/0x80 [ 844.670594][ T5919] ? __kasan_kmalloc+0x93/0xb0 [ 844.670622][ T5919] ? __kmalloc_cache_noprof+0x31c/0x660 [ 844.670649][ T5919] ? xskq_create+0x56/0x170 [ 844.670674][ T5919] ? xsk_setsockopt+0x54c/0x990 [ 844.670695][ T5919] ? do_sock_setsockopt+0x17c/0x1b0 [ 844.670721][ T5919] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 844.670745][ T5919] ? do_syscall_64+0x14d/0xf80 [ 844.670779][ T5919] __vmalloc_node_range_noprof+0x132/0x1730 [ 844.670845][ T5919] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 844.670882][ T5919] ? __kasan_kmalloc+0x93/0xb0 [ 844.670926][ T5919] vmalloc_user_noprof+0xad/0xe0 [ 844.670955][ T5919] ? xskq_create+0xbf/0x170 [ 844.670982][ T5919] xskq_create+0xbf/0x170 [ 844.671010][ T5919] xsk_init_queue+0xad/0x110 [ 844.671038][ T5919] xsk_setsockopt+0x54c/0x990 [ 844.671065][ T5919] ? __pfx_xsk_setsockopt+0x10/0x10 [ 844.671089][ T5919] ? __pfx_aa_sk_perm+0x10/0x10 [ 844.671122][ T5919] ? aa_sock_opt_perm+0xff/0x1a0 [ 844.671157][ T5919] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 844.671187][ T5919] ? __pfx_xsk_setsockopt+0x10/0x10 [ 844.671216][ T5919] do_sock_setsockopt+0x17c/0x1b0 [ 844.671249][ T5919] __x64_sys_setsockopt+0x13d/0x1b0 [ 844.671282][ T5919] do_syscall_64+0x14d/0xf80 [ 844.671310][ T5919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.671332][ T5919] ? trace_irq_disable+0x37/0x100 [ 844.671356][ T5919] ? clear_bhb_loop+0x40/0x90 [ 844.671383][ T5919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.671404][ T5919] RIP: 0033:0x7f2130d9c629 [ 844.671425][ T5919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.671443][ T5919] RSP: 002b:00007f2131ce7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 844.671467][ T5919] RAX: ffffffffffffffda RBX: 00007f2131016090 RCX: 00007f2130d9c629 [ 844.671483][ T5919] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 844.671497][ T5919] RBP: 00007f2130e32b39 R08: 0000000000000004 R09: 0000000000000000 [ 844.671511][ T5919] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 844.671525][ T5919] R13: 00007f2131016128 R14: 00007f2131016090 R15: 00007ffe87b696f8 [ 844.671561][ T5919] [ 844.677549][ T5919] Mem-Info: [ 844.985626][ T5919] active_anon:12698 inactive_anon:7 isolated_anon:0 [ 844.985626][ T5919] active_file:2956 inactive_file:40607 isolated_file:0 [ 844.985626][ T5919] unevictable:768 dirty:70 writeback:0 [ 844.985626][ T5919] slab_reclaimable:14104 slab_unreclaimable:154799 [ 844.985626][ T5919] mapped:30646 shmem:1372 pagetables:1417 [ 844.985626][ T5919] sec_pagetables:0 bounce:0 [ 844.985626][ T5919] kernel_misc_reclaimable:0 [ 844.985626][ T5919] free:1249432 free_pcp:13987 free_cma:0 [ 845.100143][ T5919] Node 0 active_anon:51208kB inactive_anon:28kB active_file:11824kB inactive_file:162228kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119040kB dirty:208kB writeback:0kB shmem:4352kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18336kB pagetables:5392kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 845.185023][ T5919] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4096kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 845.216974][ T5919] Node 0 DMA free:11256kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 845.273046][ T5919] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 845.294860][ T5919] Node 0 DMA32 free:1079000kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:53508kB inactive_anon:28kB active_file:11824kB inactive_file:162228kB unevictable:1536kB writepending:208kB zspages:0kB present:3129332kB managed:2554004kB mlocked:0kB bounce:0kB free_pcp:29584kB local_pcp:16592kB free_cma:0kB [ 845.341226][ T5931] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.8932'. [ 845.454365][ T5919] lowmem_reserve[]: 0 0 0 0 0 [ 845.459180][ T5919] Node 0 Normal free:8kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:920kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:0kB free_cma:0kB [ 845.568481][ T5919] lowmem_reserve[]: 0 0 0 0 0 [ 845.597567][ T5942] netlink: 'syz.3.8935': attribute type 8 has an invalid length. [ 845.624963][ T5942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8935'. [ 845.648335][ T5943] netlink: 'syz.0.8936': attribute type 1 has an invalid length. [ 845.656271][ T5919] Node 1 Normal free:3907464kB boost:0kB min:55684kB low:69604kB high:83524kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:25032kB local_pcp:25032kB free_cma:0kB [ 845.697671][ T5942] bond0: entered promiscuous mode [ 845.705201][ T5942] gretap0: entered promiscuous mode [ 845.713201][ T5919] lowmem_reserve[]: 0 0 0 0 0 [ 845.723776][ T5919] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11256kB [ 845.740398][ T5942] bond0: left promiscuous mode [ 845.747816][ T5919] Node 0 DMA32: 11983*4kB (U) 8190*8kB (U) 4087*16kB (U) 140*32kB (UE) 41*64kB (UM) 123*128kB (UE) 505*256kB (UME) 436*512kB (UM) 304*1024kB (UE) 104*2048kB (U) 0*4096kB = 1078492kB [ 845.769463][ T5942] gretap0: left promiscuous mode [ 845.776303][ T5919] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 845.798815][ T5919] Node 1 Normal: 2*4kB (UM) 6*8kB (UM) 15*16kB (UME) 15*32kB (UME) 10*64kB (UME) 8*128kB (UME) 6*256kB (UME) 6*512kB (UME) 3*1024kB (UM) 3*2048kB (UE) 950*4096kB (UM) = 3907464kB [ 845.900982][ T5919] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 845.976901][ T5953] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 845.995908][ T5919] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 846.073575][ T5919] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 846.106318][ T5919] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 846.118204][ T5919] 47803 total pagecache pages [ 846.123795][ T5919] 0 pages in swap cache [ 846.128782][ T5919] Free swap = 124996kB [ 846.160728][ T5919] Total swap = 124996kB [ 846.185201][ T5919] 2097051 pages RAM [ 846.201012][ T5919] 0 pages HighMem/MovableOnly [ 846.205856][ T5919] 426705 pages reserved [ 846.212158][ T5919] 0 pages cma reserved [ 846.386176][ T5975] SET target dimension over the limit! [ 846.485629][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8946'. [ 846.509626][ T5981] netlink: 'syz.2.8946': attribute type 5 has an invalid length. [ 846.530392][ T5981] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8946'. [ 846.674859][ T5988] netlink: 220 bytes leftover after parsing attributes in process `syz.4.8950'. [ 846.773476][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8950'. [ 846.921342][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8954'. [ 846.932501][T26312] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 846.944590][T26312] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 846.957920][T26312] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 846.971320][T26312] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 846.993706][T26312] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 847.026785][ T6000] bond9: option xmit_hash_policy: invalid value (64) [ 847.039190][ T6000] bond9 (unregistering): Released all slaves [ 847.089684][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8954'. [ 847.173475][ T6008] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 847.193947][ T5996] lo speed is unknown, defaulting to 1000 [ 847.606959][ T6056] nbd: nbd3 already in use [ 847.634910][ T6056] block nbd3: NBD_DISCONNECT [ 847.639575][ T6056] block nbd3: Send disconnect failed -32 [ 847.678589][ T6056] block nbd3: shutting down sockets [ 847.817102][ T6063] sctp: [Deprecated]: syz.0.8966 (pid 6063) Use of int in maxseg socket option. [ 847.817102][ T6063] Use struct sctp_assoc_value instead [ 848.675402][ T6188] bond4 (unregistering): (slave bridge11): Removing an active aggregator [ 848.685762][ T6188] bond4 (unregistering): (slave bridge11): Releasing backup interface [ 848.697191][ T6188] bridge11 (unregistering): left promiscuous mode [ 848.704743][ T6188] bridge11 (unregistering): left allmulticast mode [ 848.741262][ T6065] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 848.755881][ T6188] bond0 (unregistering): Released all slaves [ 848.792842][ T6188] bond1 (unregistering): Released all slaves [ 848.827519][ T6188] bond2 (unregistering): Released all slaves [ 848.862893][ T6188] bond3 (unregistering): Released all slaves [ 848.898665][ T6188] bond4 (unregistering): Released all slaves [ 849.071108][T26312] Bluetooth: hci1: command tx timeout [ 849.216207][ T6188] tipc: Left network mode [ 849.264763][ T6097] vxlan1: entered promiscuous mode [ 849.269942][ T6097] vxlan1: entered allmulticast mode [ 849.276856][T25733] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 849.277252][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8977'. [ 849.297657][ T6105] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8978'. [ 849.363711][T25733] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 849.401791][T25733] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 849.412450][ T6107] netlink: 124 bytes leftover after parsing attributes in process `syz.0.8980'. [ 849.432620][ T5996] chnl_net:caif_netlink_parms(): no params data found [ 850.003413][ T5996] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.011361][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.019843][ T5996] bridge_slave_0: entered allmulticast mode [ 850.028076][ T5996] bridge_slave_0: entered promiscuous mode [ 850.051158][ T5996] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.068621][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.094791][ T5996] bridge_slave_1: entered allmulticast mode [ 850.132060][ T5996] bridge_slave_1: entered promiscuous mode [ 850.364516][ T5996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 850.423366][ T5996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 850.572759][ T6188] hsr_slave_0: left promiscuous mode [ 850.601951][ T6188] hsr_slave_1: left promiscuous mode [ 851.150656][T26312] Bluetooth: hci1: command tx timeout [ 851.506868][ T5996] team0: Port device team_slave_0 added [ 851.585764][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9000'. [ 851.608595][ T5996] team0: Port device team_slave_1 added [ 851.795503][ T5996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 851.828843][ T5996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 851.916793][ T5996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 851.932825][ T5996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 851.939940][ T5996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 852.003019][ T5996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 852.291306][ T6264] netlink: 165 bytes leftover after parsing attributes in process `syz.4.9013'. [ 852.329858][ T5996] hsr_slave_0: entered promiscuous mode [ 852.356481][ T5996] hsr_slave_1: entered promiscuous mode [ 852.374778][ T5996] debugfs: 'hsr0' already exists in 'hsr' [ 852.381380][ T5996] Cannot create hsr debugfs directory [ 852.391473][ T6188] IPVS: stop unused estimator thread 0... [ 853.116382][ T5996] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 853.134448][ T6310] netlink: 'syz.2.9025': attribute type 1 has an invalid length. [ 853.143440][ T5996] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.143564][ T6314] netlink: 'syz.3.9024': attribute type 10 has an invalid length. [ 853.166579][ T5996] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 39839 - 0 [ 853.183774][ T6310] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9025'. [ 853.230633][T26312] Bluetooth: hci1: command tx timeout [ 853.236447][ T6307] team0: Port device ip6gre2 added [ 853.414679][ T5996] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 853.451957][ T5996] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.475052][ T6329] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9029'. [ 853.480656][ T5996] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 39839 - 0 [ 853.582176][ T6329] nbd: must specify an index to disconnect [ 853.695836][ T5996] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 853.734806][ T5996] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.754627][ T6347] nbd: illegal input index 2958377 [ 853.757084][ T5996] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 39839 - 0 [ 853.828912][ T6352] vlan2: entered promiscuous mode [ 853.837039][ T6352] vlan2: entered allmulticast mode [ 853.843327][ T6352] hsr_slave_1: entered allmulticast mode [ 853.851521][ T6354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 853.868913][ T6350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9033'. [ 854.091086][ T5996] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 854.111082][ T6367] sctp: [Deprecated]: syz.3.9037 (pid 6367) Use of int in maxseg socket option. [ 854.111082][ T6367] Use struct sctp_assoc_value instead [ 854.133329][ T5996] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.170606][ T5996] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 39839 - 0 [ 854.406773][ T6382] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.9042'. [ 854.419770][ T6386] netlink: 'syz.4.9043': attribute type 2 has an invalid length. [ 854.442473][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9043'. [ 854.454806][ T6382] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.9042'. [ 854.493850][ T6386] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9043'. [ 854.527054][ T6386] netlink: 'syz.4.9043': attribute type 23 has an invalid length. [ 854.745802][ T5996] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 854.782462][ T5996] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 854.813266][ T6406] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9044'. [ 854.828251][ T5996] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 854.875794][ T5996] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 855.170182][ T6423] xt_TPROXY: Can be used only with -p tcp or -p udp [ 855.213492][ T5996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.259878][ T5996] 8021q: adding VLAN 0 to HW filter on device team0 [ 855.316424][T26312] Bluetooth: hci1: command tx timeout [ 855.369900][T25726] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.377162][T25726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 855.398689][T25740] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.405986][T25740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 855.612750][ T6450] macvlan0: entered promiscuous mode [ 855.642000][ T6453] netlink: 'syz.4.9056': attribute type 4 has an invalid length. [ 855.989854][ T5996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 856.121776][ T5996] veth0_vlan: entered promiscuous mode [ 856.142220][ T5996] veth1_vlan: entered promiscuous mode [ 856.180928][ T5996] veth0_macvtap: entered promiscuous mode [ 856.215602][ T5996] veth1_macvtap: entered promiscuous mode [ 856.266478][ T5996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 856.288197][ T5996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 856.326501][T25750] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.353270][T25750] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.380730][T25750] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.408883][T25750] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.656179][T25750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.686140][T25750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.747813][ T6493] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9063'. [ 856.777792][T25726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.793160][T25726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.829360][ T6496] IPVS: set_ctl: invalid protocol: 136 10.1.1.2:20002 [ 856.903176][ T6502] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8949'. [ 857.065611][ T6512] x_tables: unsorted underflow at hook 3 [ 857.257625][ T6520] netlink: 'syz.1.9071': attribute type 16 has an invalid length. [ 857.273531][ T6520] netlink: 'syz.1.9071': attribute type 17 has an invalid length. [ 857.366379][ T6530] netlink: 'syz.2.9074': attribute type 8 has an invalid length. [ 857.394411][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9071'. [ 857.403499][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9074'. [ 857.405883][ T6533] netlink: 'syz.1.9071': attribute type 30 has an invalid length. [ 857.429225][ T6520] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 857.440827][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9071'. [ 857.465756][ T6530] bond0: entered promiscuous mode [ 857.475508][ T6530] bond_slave_0: entered promiscuous mode [ 857.482838][ T6530] bond_slave_1: entered promiscuous mode [ 857.491001][ T6530] gretap0: entered promiscuous mode [ 857.498318][ T6530] bond0: left promiscuous mode [ 857.504923][ T6530] bond_slave_0: left promiscuous mode [ 857.511210][ T6530] bond_slave_1: left promiscuous mode [ 857.526740][ T6530] gretap0: left promiscuous mode [ 857.566152][ T6528] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.796488][ T6553] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9080'. [ 857.855643][ T6555] netlink: 88 bytes leftover after parsing attributes in process `syz.1.9081'. [ 857.926560][ T6557] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9083'. [ 857.955970][ T6559] vxcan1: entered promiscuous mode [ 858.007835][ T6562] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9083'. [ 858.131055][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9085'. [ 858.257576][ T6577] netlink: 'syz.2.9088': attribute type 1 has an invalid length. [ 858.383043][ T6586] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 858.418018][ T6586] input: failed to attach handler evdev to device input6, error: -4 [ 858.655970][ T6605] netlink: 'syz.4.9095': attribute type 13 has an invalid length. [ 858.845533][ T6618] xt_hashlimit: size too large, truncated to 1048576 [ 858.906830][ T6620] : renamed from vxcan1 [ 859.014580][ T6626] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 859.128640][ T6634] netdevsim netdevsim3 : renamed from netdevsim0 [ 859.465851][ T6659] netlink: 'syz.2.9110': attribute type 1 has an invalid length. [ 859.477538][ T6658] netlink: 'syz.2.9110': attribute type 1 has an invalid length. [ 859.701309][ T6672] netlink: 'syz.3.9115': attribute type 1 has an invalid length. [ 861.643415][ T6703] netlink: 'syz.2.9122': attribute type 13 has an invalid length. [ 861.697336][ T6706] netlink: 'syz.2.9122': attribute type 3 has an invalid length. [ 861.742485][ T6706] netlink: 'syz.2.9122': attribute type 16 has an invalid length. [ 861.773209][ T6706] netlink: 'syz.2.9122': attribute type 17 has an invalid length. [ 861.812085][ T6713] __nla_validate_parse: 39 callbacks suppressed [ 861.812124][ T6713] netlink: 388 bytes leftover after parsing attributes in process `syz.3.9126'. [ 861.830079][ T6713] openvswitch: netlink: Flow key attr not present in new flow. [ 861.897922][ T6706] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 861.936551][ T6716] mac80211_hwsim hwsim82 wlan0: entered promiscuous mode [ 862.108454][ T6726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9128'. [ 862.128482][ T6729] mac80211_hwsim hwsim83 : renamed from wlan1 (while UP) [ 862.509081][ T6743] bond9: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 862.553184][ T6743] bond9 (unregistering): Released all slaves [ 862.713101][ T6753] set match dimension is over the limit! [ 862.882496][ T6763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9140'. [ 862.906736][ T6767] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9141'. [ 862.931147][ T6763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9140'. [ 862.943178][ T6767] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9141'. [ 863.017499][ T6771] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9143'. [ 863.109076][ T6777] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9147'. [ 863.123195][ T6777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9147'. [ 863.144178][ T6777] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 863.172685][ T6777] team0: Port device batadv1 added [ 863.221538][ T6782] netlink: 'syz.4.9146': attribute type 33 has an invalid length. [ 863.232552][ T6782] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9146'. [ 863.606579][ T6811] netlink: 'syz.1.9156': attribute type 8 has an invalid length. [ 863.908297][ T6826] gretap1: entered promiscuous mode [ 863.934625][ T6828] tipc: Enabling of bearer rejected, media not registered [ 863.969905][ T6834] macvlan2: entered promiscuous mode [ 863.990898][ T6834] macvlan2: entered allmulticast mode [ 864.161661][ T6841] netlink: 'syz.4.9164': attribute type 21 has an invalid length. [ 864.245293][ T6843] openvswitch: netlink: Multiple metadata blocks provided [ 864.296119][ T6851] delete_channel: no stack [ 864.304992][ T6850] team0: Device ip6gre1 is of different type [ 864.358004][ T6853] geneve2: entered promiscuous mode [ 864.365353][T25726] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 58365 - 0 [ 864.390210][T25726] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 58365 - 0 [ 864.424160][T25726] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 58365 - 0 [ 864.547648][ T6853] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.678518][ T6874] netlink: 'syz.4.9174': attribute type 1 has an invalid length. [ 864.688389][ T6874] netlink: 'syz.4.9174': attribute type 1 has an invalid length. [ 864.917965][ T6886] C: left promiscuous mode [ 864.924145][ T6890] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 864.935690][ T6886] gre0: left promiscuous mode [ 864.941345][ T6886] gre0: left allmulticast mode [ 865.455911][ T6915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 865.636103][ T6921] netlink: 'syz.1.9193': attribute type 1 has an invalid length. [ 865.762523][ T6926] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 865.786985][ T6926] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 865.805676][ T6926] gretap1: entered promiscuous mode [ 865.814305][ T6926] gretap1: entered allmulticast mode [ 865.904829][ T6933] wg1: Caught tx_queue_len zero misconfig [ 866.108269][ T6913] lec:lec_atm_close: lec0: Shut down! [ 866.128895][ T6853] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.161216][ T6853] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 58365 - 0 [ 866.313112][ T6853] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.324966][ T6853] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 58365 - 0 [ 866.440797][ T6956] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 866.501971][ T6853] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.535659][ T6853] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 58365 - 0 [ 866.611288][ T6959] 8021q: VLANs not supported on ip6_vti0 [ 866.822209][T25736] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 58365 - 0 [ 866.835373][T25736] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 866.860845][ T6983] netlink: 'syz.4.9208': attribute type 1 has an invalid length. [ 867.001694][T25750] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 58365 - 0 [ 867.014127][T25750] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 867.096800][ T6978] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.135178][T25750] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 58365 - 0 [ 867.145689][T25750] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 867.162749][ T6990] siw: device registration error -23 [ 867.243867][ T6978] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.295573][ T6188] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 58365 - 0 [ 867.325234][ T6188] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 867.374665][ T6978] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.513974][ T6978] batman_adv: batadv0: Removing interface: netdevsim0 [ 867.548186][ T7003] __nla_validate_parse: 23 callbacks suppressed [ 867.548206][ T7003] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9214'. [ 867.568442][ T6978] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.859296][ T7022] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9216'. [ 867.912158][ T7021] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 867.934342][ T7021] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 867.944979][ T7018] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9216'. [ 867.960296][ T7018] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9216'. [ 867.969308][ T7018] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9216'. [ 867.990589][ T7021] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 868.005313][ T6188] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.063712][ T6188] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.085063][ T6188] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.114044][ T6188] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.192315][ T7034] netlink: 27 bytes leftover after parsing attributes in process `syz.2.9220'. [ 868.236349][ T7036] x_tables: unsorted entry at hook 1 [ 868.256019][ T7036] lo: Caught tx_queue_len zero misconfig [ 868.305182][ T7041] netlink: 'syz.2.9223': attribute type 11 has an invalid length. [ 868.314312][ T7041] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9223'. [ 868.326317][ T7041] netlink: 'syz.2.9223': attribute type 30 has an invalid length. [ 868.632960][ T7054] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 868.737387][ T7061] syzkaller1: entered promiscuous mode [ 868.750813][ T7061] syzkaller1: entered allmulticast mode [ 868.792198][ T7061] syzkaller1: left promiscuous mode [ 868.800668][ T7061] syzkaller1: left allmulticast mode [ 868.823332][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9227'. [ 868.847328][ T7055] netlink: 'syz.2.9227': attribute type 21 has an invalid length. [ 868.971893][ T7069] IPVS: Scheduler module ip_vs_sip not found [ 869.138495][ T7081] netlink: 'syz.4.9232': attribute type 8 has an invalid length. [ 869.161260][ T7081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9232'. [ 869.185864][ T7082] xt_CT: No such helper "syz1" [ 869.214303][ T7081] bond0: entered promiscuous mode [ 869.219399][ T7081] bond_slave_0: entered promiscuous mode [ 869.236830][ T7081] bond_slave_1: entered promiscuous mode [ 869.245586][ T7081] gretap0: entered promiscuous mode [ 869.254038][ T7081] bond0: left promiscuous mode [ 869.259287][ T7081] bond_slave_0: left promiscuous mode [ 869.268128][ T7081] bond_slave_1: left promiscuous mode [ 869.276328][ T7081] gretap0: left promiscuous mode [ 869.413754][ T7096] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9235'. [ 869.958620][ T7084] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 870.172873][ T7134] netlink: 'syz.4.9242': attribute type 1 has an invalid length. [ 870.789160][ T7160] netlink: 'syz.1.9250': attribute type 2 has an invalid length. [ 870.816251][ T7159] netlink: 'syz.1.9250': attribute type 2 has an invalid length. [ 870.841019][ T7159] netlink: 'syz.1.9250': attribute type 2 has an invalid length. [ 870.870942][ T7160] netlink: 'syz.1.9250': attribute type 2 has an invalid length. [ 871.110021][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 871.118117][ C1] lec:lec_tx_timeout: lec0 [ 871.532210][ T7187] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 871.585241][ T7205] syzkaller0: entered promiscuous mode [ 871.592876][ T7205] syzkaller0: entered allmulticast mode [ 871.754251][ T7205] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 871.847057][ T6982] udevd[6982]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 872.057713][ T7234] xt_TPROXY: Can be used only with -p tcp or -p udp [ 872.191524][ T7239] syzkaller0: entered promiscuous mode [ 872.216187][ T7239] syzkaller0: entered allmulticast mode [ 872.271662][ T7246] openvswitch: netlink: Missing valid actions attribute. [ 872.291725][ T7246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 872.748605][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 872.770407][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 872.785755][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 872.795122][ T7270] tipc: Enabling of bearer rejected, failed to enable media [ 872.805688][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 872.813467][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 872.823437][ T7269] tipc: Enabling of bearer rejected, failed to enable media [ 872.940889][ T7274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 872.958861][ T7278] __nla_validate_parse: 15 callbacks suppressed [ 872.958882][ T7278] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9281'. [ 873.044634][ T7271] lo speed is unknown, defaulting to 1000 [ 873.079837][ T7282] ip6t_srh: unknown srh invflags 4000 [ 873.358232][ T7296] syzkaller1: entered promiscuous mode [ 873.364722][ T7296] syzkaller1: entered allmulticast mode [ 873.383361][ T7291] syzkaller0: entered promiscuous mode [ 873.395629][ T7292] Cannot find del_set index 3 as target [ 873.400279][ T7291] syzkaller0: entered allmulticast mode [ 873.666192][ T7309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9292'. [ 873.771771][ T7316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9294'. [ 873.797824][ T7319] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9295'. [ 873.812772][ T7316] netlink: 13 bytes leftover after parsing attributes in process `syz.2.9294'. [ 873.862743][ T7322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9295'. [ 873.944064][ T7271] chnl_net:caif_netlink_parms(): no params data found [ 874.065397][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9297'. [ 874.298989][ T7271] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.332643][ T7271] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.385137][ T7271] bridge_slave_0: entered allmulticast mode [ 874.412765][ T7271] bridge_slave_0: entered promiscuous mode [ 874.452581][ T7271] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.470341][ T7271] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.500026][ T7271] bridge_slave_1: entered allmulticast mode [ 874.535746][ T7271] bridge_slave_1: entered promiscuous mode [ 874.719255][ T7271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.731494][ T7361] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.9303'. [ 874.767839][ T7271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.906047][ T7271] team0: Port device team_slave_0 added [ 874.913492][T26312] Bluetooth: hci5: command tx timeout [ 874.914676][ T7372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9304'. [ 874.950869][ T7271] team0: Port device team_slave_1 added [ 875.101248][ T7271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.108260][ T7271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.186531][ T7271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.211905][ T7271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.229261][ T7271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.263560][ T7386] netlink: 'syz.0.9308': attribute type 8 has an invalid length. [ 875.286036][ T7271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.297930][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9308'. [ 875.339801][ T7386] bond0: entered promiscuous mode [ 875.346717][ T7386] gretap0: entered promiscuous mode [ 875.358473][ T7386] bond0: left promiscuous mode [ 875.374717][ T7386] gretap0: left promiscuous mode [ 875.423776][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 875.585139][ T7271] hsr_slave_0: entered promiscuous mode [ 875.597564][ T7271] hsr_slave_1: entered promiscuous mode [ 875.605803][ T7271] debugfs: 'hsr0' already exists in 'hsr' [ 875.612095][ T7271] Cannot create hsr debugfs directory [ 875.818905][ T7271] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 875.833055][ T7420] netlink: 'syz.4.9318': attribute type 1 has an invalid length. [ 875.854785][ T7419] bridge_slave_0: left allmulticast mode [ 875.862057][ T7419] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.873775][ T7419] bridge_slave_1: left allmulticast mode [ 875.899811][ T7419] bridge_slave_1: left promiscuous mode [ 875.911313][ T7419] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.923306][ T7419] veth0_to_bond: left allmulticast mode [ 875.928931][ T7419] veth0_to_bond: left promiscuous mode [ 875.938299][ T7419] bridge4: port 2(veth0_to_bond) entered disabled state [ 875.960621][ T7419] bond0: (slave bond_slave_0): Releasing backup interface [ 875.970394][ T7419] bond0: (slave bond_slave_1): Releasing backup interface [ 875.979636][ T7419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 875.992975][ T7419] bond2: (slave gretap1): Releasing active interface [ 876.004048][ T7419] veth11: left allmulticast mode [ 876.009097][ T7419] veth11: left promiscuous mode [ 876.014808][ T7419] bridge4: port 1(veth11) entered disabled state [ 876.050732][ T7271] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 876.138698][ T7271] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 876.194022][ T7435] netlink: 'syz.0.9322': attribute type 8 has an invalid length. [ 876.221142][ T7435] bond0: entered promiscuous mode [ 876.227642][ T7435] gretap0: entered promiscuous mode [ 876.235264][ T7435] bond0: left promiscuous mode [ 876.242410][ T7435] gretap0: left promiscuous mode [ 876.990297][T26312] Bluetooth: hci5: command tx timeout [ 878.509198][ T7399] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 878.542436][ T7271] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 878.585843][ T7271] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 878.655563][ T7271] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 878.728595][ T7271] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 878.757066][ T7445] 8021q: VLANs not supported on ip6_vti0 [ 878.781910][ T7443] syzkaller1: entered promiscuous mode [ 878.787944][ T7443] syzkaller1: entered allmulticast mode [ 878.811674][ T7445] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 878.831156][ T7443] netlink: 'syz.0.9327': attribute type 39 has an invalid length. [ 878.974235][ T7271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 878.998242][ T7271] 8021q: adding VLAN 0 to HW filter on device team0 [ 879.071121][T26312] Bluetooth: hci5: command tx timeout [ 879.081520][ T7469] __nla_validate_parse: 3 callbacks suppressed [ 879.081539][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9331'. [ 879.149523][ T7471] netlink: 'syz.2.9332': attribute type 8 has an invalid length. [ 879.166350][ T7471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9332'. [ 879.199999][T25737] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.207203][T25737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 879.238680][ T7471] bond0: entered promiscuous mode [ 879.244883][ T7471] bond_slave_0: entered promiscuous mode [ 879.251548][ T7471] bond_slave_1: entered promiscuous mode [ 879.259131][ T7471] gretap0: entered promiscuous mode [ 879.266149][ T7471] bond0: left promiscuous mode [ 879.272425][ T7471] bond_slave_0: left promiscuous mode [ 879.279293][ T7471] bond_slave_1: left promiscuous mode [ 879.298532][ T7471] gretap0: left promiscuous mode [ 879.425791][T25737] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.433042][T25737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 879.831651][ T7271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 879.898309][ T7271] veth0_vlan: entered promiscuous mode [ 879.917112][ T7271] veth1_vlan: entered promiscuous mode [ 879.977801][ T7271] veth0_macvtap: entered promiscuous mode [ 879.989642][ T7271] veth1_macvtap: entered promiscuous mode [ 880.018742][ T7271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 880.048937][ T7271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 880.068681][T25731] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.097286][ T6039] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.114063][ T6039] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.138237][ T6039] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.244749][ T7518] tun0: tun_chr_ioctl cmd 1074025675 [ 880.251811][ T7518] tun0: persist disabled [ 880.348109][ T7520] openvswitch: netlink: Actions may not be safe on all matching packets [ 880.361892][ T7520] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9341'. [ 880.518076][ T7525] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20003 [ 880.990525][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5570 ms [ 880.998629][ C1] lec:lec_tx_timeout: lec0 [ 881.150744][T26312] Bluetooth: hci5: command tx timeout [ 882.364486][ T7488] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 882.464058][T25737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.479342][T25737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.562722][T25723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.593013][T25723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.771275][ T7552] netlink: 276 bytes leftover after parsing attributes in process `syz.3.9276'. [ 882.800529][ T7547] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 882.842710][ T7560] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 882.902890][ T7564] lo speed is unknown, defaulting to 1000 [ 882.999468][ T7571] netlink: 'syz.4.9353': attribute type 1 has an invalid length. [ 883.015551][ T6807] lec:lec_start_xmit: lec0:No lecd attached [ 883.038073][ T7571] netlink: 88 bytes leftover after parsing attributes in process `syz.4.9353'. [ 883.048454][ T7571] netlink: 1 bytes leftover after parsing attributes in process `syz.4.9353'. [ 883.065112][ T7571] netlink: 'syz.4.9353': attribute type 1 has an invalid length. [ 883.083667][ T7571] netlink: 634 bytes leftover after parsing attributes in process `syz.4.9353'. [ 883.121142][ T7575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 883.434495][ T7591] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 883.595458][ T7597] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9360'. [ 884.169739][ T7630] netlink: set zone limit has 4 unknown bytes [ 884.563480][ T7647] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9375'. [ 884.574340][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9375'. [ 884.830427][T26312] Bluetooth: hci2: command 0x0401 tx timeout [ 886.387046][ T7599] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 886.495106][ T7678] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 886.706523][ T7691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 886.876978][ T7704] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9392'. [ 886.896290][ T7704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9392'. [ 886.931104][ T7704] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9392'. [ 886.976586][ T7711] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9395'. [ 886.993312][ T7711] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9395'. [ 887.024201][ T7711] gretap0: entered promiscuous mode [ 887.137032][ T7722] netlink: 'syz.4.9391': attribute type 1 has an invalid length. [ 887.150668][ T7711] gretap0: left promiscuous mode [ 887.162855][ T7722] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9391'. [ 887.401330][ T7738] sctp: [Deprecated]: syz.4.9399 (pid 7738) Use of int in max_burst socket option. [ 887.401330][ T7738] Use struct sctp_assoc_value instead [ 887.571135][ T7741] syzkaller0: entered promiscuous mode [ 887.588518][ T7741] syzkaller0: entered allmulticast mode [ 887.596870][ T7747] syz.4.9403: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 887.632655][ T7746] netlink: 'syz.1.9402': attribute type 8 has an invalid length. [ 887.661203][ T7747] CPU: 1 UID: 0 PID: 7747 Comm: syz.4.9403 Not tainted syzkaller #0 PREEMPT(full) [ 887.661234][ T7747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 887.661249][ T7747] Call Trace: [ 887.661259][ T7747] [ 887.661269][ T7747] dump_stack_lvl+0xe8/0x150 [ 887.661306][ T7747] warn_alloc+0x249/0x340 [ 887.661337][ T7747] ? stack_trace_save+0xa9/0x100 [ 887.661372][ T7747] ? __pfx_warn_alloc+0x10/0x10 [ 887.661408][ T7747] ? kasan_save_track+0x4f/0x80 [ 887.661434][ T7747] ? kasan_save_track+0x3e/0x80 [ 887.661458][ T7747] ? __kasan_kmalloc+0x93/0xb0 [ 887.661485][ T7747] ? __kmalloc_cache_noprof+0x31c/0x660 [ 887.661521][ T7747] ? xskq_create+0x56/0x170 [ 887.661546][ T7747] ? xsk_setsockopt+0x54c/0x990 [ 887.661567][ T7747] ? do_sock_setsockopt+0x17c/0x1b0 [ 887.661592][ T7747] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 887.661617][ T7747] ? do_syscall_64+0x14d/0xf80 [ 887.661645][ T7747] __vmalloc_node_range_noprof+0x132/0x1730 [ 887.661695][ T7747] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 887.661723][ T7747] ? __kasan_kmalloc+0x93/0xb0 [ 887.661751][ T7747] vmalloc_user_noprof+0xad/0xe0 [ 887.661774][ T7747] ? xskq_create+0xbf/0x170 [ 887.661796][ T7747] xskq_create+0xbf/0x170 [ 887.661820][ T7747] xsk_init_queue+0xad/0x110 [ 887.662295][ T7747] xsk_setsockopt+0x54c/0x990 [ 887.662319][ T7747] ? __pfx_xsk_setsockopt+0x10/0x10 [ 887.662339][ T7747] ? __pfx_aa_sk_perm+0x10/0x10 [ 887.662367][ T7747] ? aa_sock_opt_perm+0xff/0x1a0 [ 887.662394][ T7747] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 887.662419][ T7747] ? __pfx_xsk_setsockopt+0x10/0x10 [ 887.662440][ T7747] do_sock_setsockopt+0x17c/0x1b0 [ 887.662472][ T7747] __x64_sys_setsockopt+0x13d/0x1b0 [ 887.662512][ T7747] do_syscall_64+0x14d/0xf80 [ 887.662540][ T7747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.662562][ T7747] ? trace_irq_disable+0x37/0x100 [ 887.662587][ T7747] ? clear_bhb_loop+0x40/0x90 [ 887.662614][ T7747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.662635][ T7747] RIP: 0033:0x7f2130d9c629 [ 887.662655][ T7747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 887.662673][ T7747] RSP: 002b:00007f2131d08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 887.662696][ T7747] RAX: ffffffffffffffda RBX: 00007f2131015fa0 RCX: 00007f2130d9c629 [ 887.662713][ T7747] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 887.662726][ T7747] RBP: 00007f2130e32b39 R08: 0000000000000004 R09: 0000000000000000 [ 887.662740][ T7747] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 887.662754][ T7747] R13: 00007f2131016038 R14: 00007f2131015fa0 R15: 00007ffe87b696f8 [ 887.662792][ T7747] [ 887.666683][ T7747] Mem-Info: [ 887.952636][ T7747] active_anon:12697 inactive_anon:7 isolated_anon:0 [ 887.952636][ T7747] active_file:2956 inactive_file:40627 isolated_file:0 [ 887.952636][ T7747] unevictable:768 dirty:75 writeback:0 [ 887.952636][ T7747] slab_reclaimable:14402 slab_unreclaimable:158721 [ 887.952636][ T7747] mapped:29701 shmem:1369 pagetables:1366 [ 887.952636][ T7747] sec_pagetables:0 bounce:0 [ 887.952636][ T7747] kernel_misc_reclaimable:0 [ 887.952636][ T7747] free:1230810 free_pcp:18422 free_cma:0 [ 887.999156][ T7747] Node 0 active_anon:50788kB inactive_anon:28kB active_file:11824kB inactive_file:162308kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:65648kB dirty:296kB writeback:0kB shmem:3940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:19264kB pagetables:5320kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 888.032076][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 888.032105][ C1] lec:lec_tx_timeout: lec0 [ 888.056329][ T7724] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 888.070181][ T7531] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 888.091211][ T7531] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 888.099334][ T7531] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 888.109383][ T7531] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 888.119224][ T7531] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 888.126615][ T7747] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:53248kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 888.126676][ T7747] Node 0 DMA free:11256kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 888.126742][ T7747] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 888.126805][ T7747] Node 0 DMA32 free:1116356kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:50784kB inactive_anon:28kB active_file:11824kB inactive_file:162312kB unevictable:1536kB writepending:312kB zspages:0kB present:3129332kB managed:2554004kB mlocked:0kB bounce:0kB free_pcp:40848kB local_pcp:21080kB free_cma:0kB [ 888.126870][ T7747] lowmem_reserve[]: 0 0 0 0 0 [ 888.126916][ T7747] Node 0 Normal free:8kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:920kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:24kB free_cma:0kB [ 888.126975][ T7747] lowmem_reserve[]: 0 0 0 0 0 [ 888.127021][ T7747] Node 1 Normal free:3801536kB boost:0kB min:55684kB low:69604kB high:83524kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:32652kB local_pcp:28876kB free_cma:0kB [ 888.127083][ T7747] lowmem_reserve[]: 0 0 0 0 0 [ 888.353391][ T7747] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11256kB [ 888.369904][ T7747] Node 0 DMA32: 11542*4kB (UM) 8641*8kB (UM) 4452*16kB (UM) 325*32kB (UME) 68*64kB (UME) 39*128kB (UM) 518*256kB (UME) 461*512kB (UM) 327*1024kB (UM) 103*2048kB (UM) 0*4096kB = 1120704kB [ 888.389161][ T7747] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 888.403004][ T7747] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 3*16kB (UME) 4*32kB (ME) 4*64kB (UME) 2*128kB (ME) 3*256kB (ME) 4*512kB (UME) 3*1024kB (UM) 3*2048kB (UE) 925*4096kB (M) = 3801536kB [ 888.477879][ T7747] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 888.537747][ T7747] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 888.595941][ T7747] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 888.623100][ T7747] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 888.633209][ T7747] 44949 total pagecache pages [ 888.637920][ T7747] 0 pages in swap cache [ 888.674032][ T7747] Free swap = 124996kB [ 888.678260][ T7747] Total swap = 124996kB [ 888.683343][ T7747] 2097051 pages RAM [ 888.687290][ T7747] 0 pages HighMem/MovableOnly [ 888.709628][ T7747] 426705 pages reserved [ 888.726417][ T7747] 0 pages cma reserved [ 890.322417][ T9952] syz1: Port: 1 Link DOWN [ 890.351455][ T7531] Bluetooth: hci3: command tx timeout [ 890.443899][ T7752] lo speed is unknown, defaulting to 1000 [ 890.595460][ T7543] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 890.629583][ T7543] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.701983][ T7787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 890.786155][ T7543] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 890.818974][ T7543] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.863337][ T7796] s5: renamed from vlan1 (while UP) [ 890.905399][ T7795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9414'. [ 890.926596][ T7795] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9414'. [ 890.967382][ T6053] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.976163][ T6053] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.024306][ T6053] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.041108][ T6053] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.084265][ T7543] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 891.110034][ T7543] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.185891][ T7543] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 891.200092][ T7543] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.335043][ T7807] netlink: 'syz.1.9417': attribute type 1 has an invalid length. [ 891.356985][ T7807] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.9417'. [ 891.530746][ T7789] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 891.603093][ T7816] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9419'. [ 891.675525][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9420'. [ 891.783617][ T7817] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9419'. [ 891.799704][ T7824] can: request_module (can-proto-0) failed. [ 892.431198][ T7531] Bluetooth: hci3: command tx timeout [ 892.638674][ T7543] bond4 (unregistering): (slave gretap1): Releasing active interface [ 892.677870][ T7543] bond8 (unregistering): (slave gretap5): Releasing active interface [ 892.706537][ T7543] dvmrp6 (unregistering): left allmulticast mode [ 893.105105][ T7543] bond0 (unregistering): Released all slaves [ 893.116384][ T7543] bond1 (unregistering): Released all slaves [ 893.131261][ T7543] bond2 (unregistering): Released all slaves [ 893.147691][ T7543] bond3 (unregistering): Released all slaves [ 893.175672][ T7543] bond4 (unregistering): Released all slaves [ 893.196646][ T7543] bond5 (unregistering): Released all slaves [ 893.211723][ T7543] bond6 (unregistering): Released all slaves [ 893.227087][ T7543] bond7 (unregistering): Released all slaves [ 893.253392][ T7543] bond8 (unregistering): Released all slaves [ 893.398816][ T7752] chnl_net:caif_netlink_parms(): no params data found [ 893.489098][ T7543] tipc: Left network mode [ 893.735707][ T7752] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.753937][ T7752] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.785876][ T7752] bridge_slave_0: entered allmulticast mode [ 893.793567][ T7866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9428'. [ 893.809126][ T7752] bridge_slave_0: entered promiscuous mode [ 893.826690][ T7752] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.834396][ T7752] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.842264][ T7752] bridge_slave_1: entered allmulticast mode [ 893.850885][ T7752] bridge_slave_1: entered promiscuous mode [ 894.022838][ T7885] netlink: 244 bytes leftover after parsing attributes in process `syz.3.9430'. [ 894.091278][ T7885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 894.102567][ T7885] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 894.158896][ T7885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 894.174168][ T7885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 894.367873][ T7752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 894.499722][ T7752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 894.514947][ T7531] Bluetooth: hci3: command tx timeout [ 894.568428][ T7903] xt_hashlimit: overflow, try lower: 3/0 [ 894.591403][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.604018][ T7478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.683918][ T7901] netlink: 112 bytes leftover after parsing attributes in process `syz.2.9435'. [ 894.838857][ T7478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.864374][ T7901] syzkaller0: entered promiscuous mode [ 894.884844][ T7912] netlink: 240 bytes leftover after parsing attributes in process `syz.3.9436'. [ 894.911348][ T7901] syzkaller0: entered allmulticast mode [ 894.926100][ T7752] team0: Port device team_slave_0 added [ 894.964121][ T7752] team0: Port device team_slave_1 added [ 895.230368][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.872433][ T7479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.591578][ T7531] Bluetooth: hci3: command tx timeout [ 896.889571][ T7543] hsr_slave_0: left promiscuous mode [ 896.895996][ T7543] hsr_slave_1: left promiscuous mode [ 896.910793][ T7479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.922438][ T7543] veth1_macvtap: left promiscuous mode [ 896.927933][ T7543] veth0_macvtap: left promiscuous mode [ 896.934010][ T7543] veth1_vlan: left promiscuous mode [ 896.939932][ T7543] veth0_vlan: left promiscuous mode [ 897.359864][ T7940] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 897.371493][ T7940] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 897.379420][ T7940] gretap2: entered promiscuous mode [ 897.385410][ T7940] gretap2: entered allmulticast mode [ 897.420977][ T7752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 897.436656][ T7752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.498269][ T7752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 897.515129][ T7752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 897.525802][ T7752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.556678][ T7752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 897.633356][ T5684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.751534][ T7957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9449'. [ 897.772353][ T7752] hsr_slave_0: entered promiscuous mode [ 897.779431][ T7752] hsr_slave_1: entered promiscuous mode [ 897.788618][ T7752] debugfs: 'hsr0' already exists in 'hsr' [ 897.808295][ T7752] Cannot create hsr debugfs directory [ 897.951124][ T7477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.131618][ T7961] syzkaller0: entered promiscuous mode [ 898.137151][ T7961] syzkaller0: entered allmulticast mode [ 898.218826][ T7978] pimreg: entered allmulticast mode [ 898.360902][ T7985] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9453'. [ 898.501090][ T7990] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9453'. [ 898.662222][ T7996] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9454'. [ 898.706485][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9453'. [ 898.990938][ T7479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.033859][ T7479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.117440][ T7543] IPVS: stop unused estimator thread 0... [ 900.431033][ T8009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.517979][ T8010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.672649][ T5684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.997673][ T8035] IPVS: ip_vs_add_dest(): server weight less than zero [ 901.070502][ T7477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.079391][ T8035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9464'. [ 901.100218][ T8035] ip6tnl0: Caught tx_queue_len zero misconfig [ 901.116830][ T8035] netlink: 2 bytes leftover after parsing attributes in process `syz.4.9464'. [ 901.133587][ T8039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9465'. [ 901.465353][ T8051] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9467'. [ 901.566331][ T8051] pim6reg1: entered promiscuous mode [ 901.572435][ T8051] pim6reg1: entered allmulticast mode [ 901.728825][ T8060] netlink: 'syz.1.9470': attribute type 21 has an invalid length. [ 901.776143][ T8060] IPv6: NLM_F_CREATE should be specified when creating new route [ 901.812006][ T7752] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 901.847666][ T7752] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 901.900723][ T7752] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 901.991245][ T7752] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 902.062709][ T8067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9471'. [ 902.110898][ T7477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.213111][ T8086] bond1: option arp_all_targets: invalid value (18446744073709551613) [ 902.234511][ T8086] bond1 (unregistering): Released all slaves [ 902.386782][ T8087] bond1: option arp_all_targets: invalid value (18446744073709551613) [ 902.400263][ T8087] bond1 (unregistering): Released all slaves [ 902.495735][ T8109] batadv_slave_0: Caught tx_queue_len zero misconfig [ 902.841812][ T7752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 902.902598][ T8129] netlink: 'syz.2.9481': attribute type 1 has an invalid length. [ 902.912258][ T7752] 8021q: adding VLAN 0 to HW filter on device team0 [ 902.946155][T25750] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.953407][T25750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 902.972112][ T8129] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9481'. [ 902.986620][ T8132] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9482'. [ 903.007176][T25737] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.014394][T25737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 903.111848][ T8141] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9483'. [ 903.249907][ T7752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 903.404877][ T8151] netlink: 'syz.2.9485': attribute type 39 has an invalid length. [ 903.552383][ T5684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.610798][ T8153] bond2: option resend_igmp: invalid value (32767) [ 903.617535][ T8153] bond2: option resend_igmp: allowed values 0 - 255 [ 903.644390][ T8160] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9486'. [ 903.666264][ T8153] bond2 (unregistering): Released all slaves [ 903.795114][ T8160] openvswitch: netlink: Flow actions attr not present in new flow. [ 903.951679][ T7752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 904.098347][ T7752] veth0_vlan: entered promiscuous mode [ 904.139338][ T8175] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 904.204960][ T9039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.242451][ T7752] veth1_vlan: entered promiscuous mode [ 904.418067][ T7752] veth0_macvtap: entered promiscuous mode [ 904.446082][ T8195] netlink: 'syz.4.9493': attribute type 83 has an invalid length. [ 904.461344][ T7752] veth1_macvtap: entered promiscuous mode [ 904.574970][ T7752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 904.619506][ T7752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 904.669516][T25750] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.715341][T25750] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.734535][ T8202] xt_hashlimit: size too large, truncated to 1048576 [ 904.745124][T25750] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.790129][T25750] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.843152][ T8215] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9498'. [ 904.934174][ T8215] netlink: 43 bytes leftover after parsing attributes in process `syz.4.9498'. [ 904.962697][ T8221] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9498'. [ 904.980496][ T8215] netlink: 'syz.4.9498': attribute type 5 has an invalid length. [ 905.003704][ T8215] netlink: 43 bytes leftover after parsing attributes in process `syz.4.9498'. [ 905.230687][ T8229] xt_TCPMSS: Only works on TCP SYN packets [ 905.238406][ T8229] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9501'. [ 905.257970][T25747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.296705][T25747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.415178][ T6053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.431050][ T6053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.683830][ T8242] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9505'. [ 906.011532][ T8258] bond1: entered promiscuous mode [ 906.020305][ T8258] bond1: entered allmulticast mode [ 906.050758][ T8258] 8021q: adding VLAN 0 to HW filter on device bond1 [ 906.192857][T26312] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 906.205501][T26312] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 906.216586][T26312] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 906.224979][T26312] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 906.238609][T26312] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 906.417447][ T8270] lo speed is unknown, defaulting to 1000 [ 906.719624][ T8285] netlink: 'syz.1.9514': attribute type 1 has an invalid length. [ 906.743883][ T8285] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 906.758672][ T8287] netlink: 'syz.2.9512': attribute type 1 has an invalid length. [ 906.924222][ T8292] erspan1: entered allmulticast mode [ 907.892563][ T8344] netlink: 'syz.0.9529': attribute type 1 has an invalid length. [ 907.948839][ T8341] can: request_module (can-proto-0) failed. [ 907.978317][ T8348] netlink: 'syz.3.9530': attribute type 12 has an invalid length. [ 908.013221][ T8348] __nla_validate_parse: 9 callbacks suppressed [ 908.013241][ T8348] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.9530'. [ 908.118809][ T8348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.141182][ T8348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.149680][ T8348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.161961][ T8348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.176572][ T8348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.186742][ T8348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.214383][ T8357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.255018][ T8357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.270928][ T7531] Bluetooth: hci0: command tx timeout [ 908.295789][ T8270] chnl_net:caif_netlink_parms(): no params data found [ 908.431355][ T9952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.457747][ T8366] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9533'. [ 908.521529][ T8372] netlink: 388 bytes leftover after parsing attributes in process `syz.3.9535'. [ 908.585021][ T8365] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9533'. [ 908.620733][ T5684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.657224][ T8365] nbd: device at index 64 is going down [ 908.736180][ T8377] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9536'. [ 908.767496][ T8379] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9537'. [ 908.842914][ T7195] udevd[7195]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 908.904232][ T6046] bridge0 (unregistering): left allmulticast mode [ 909.186214][ T6046] bond0 (unregistering): Released all slaves [ 909.198307][ T6046] bond1 (unregistering): Released all slaves [ 909.215200][ T6046] bond2 (unregistering): Released all slaves [ 909.235061][ T6046] bond3 (unregistering): Released all slaves [ 909.262800][ T6046] bond4 (unregistering): Released all slaves [ 909.277953][ T6046] bond5 (unregistering): Released all slaves [ 909.294368][ T6046] bond6 (unregistering): Released all slaves [ 909.319169][ T6046] bond7 (unregistering): Released all slaves [ 909.335647][ T6046] bond8 (unregistering): Released all slaves [ 909.361102][ T6046] bond9 (unregistering): Released all slaves [ 909.454345][ T8383] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9538'. [ 909.483531][ T8383] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9538'. [ 909.607299][ T8270] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.615612][ T8270] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.623330][ T8270] bridge_slave_0: entered allmulticast mode [ 909.631325][ T8270] bridge_slave_0: entered promiscuous mode [ 909.643247][ T8270] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.650601][ T8270] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.657876][ T8270] bridge_slave_1: entered allmulticast mode [ 909.666811][ T8270] bridge_slave_1: entered promiscuous mode [ 909.694289][ T6046] : left promiscuous mode [ 909.797354][ T8270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.823391][ T8270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 909.834378][ T8393] syzkaller0: entered promiscuous mode [ 909.841408][ T8393] syzkaller0: entered allmulticast mode [ 909.901480][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9543'. [ 909.937086][ T8406] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9545'. [ 909.954365][ T8270] team0: Port device team_slave_0 added [ 909.974885][ T6046] tipc: Left network mode [ 909.988540][ T8270] team0: Port device team_slave_1 added [ 910.154330][ T8419] netlink: 'syz.3.9547': attribute type 11 has an invalid length. [ 910.261589][ T8270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.268687][ T8270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.354817][ T7531] Bluetooth: hci0: command tx timeout [ 910.382150][ T8270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 910.396934][ T8270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 910.405675][ T8270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.435853][ T8270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 910.487986][ T8426] dvmrp0: entered allmulticast mode [ 910.566553][ T8425] delete_channel: no stack [ 910.667800][ T8430] IPVS: Scheduler module ip_vs_sip not found [ 910.779447][ T8270] hsr_slave_0: entered promiscuous mode [ 910.806393][ T8270] hsr_slave_1: entered promiscuous mode [ 910.840415][ T8270] debugfs: 'hsr0' already exists in 'hsr' [ 910.860076][ T8270] Cannot create hsr debugfs directory [ 911.961252][ T8502] x_tables: duplicate underflow at hook 2 [ 912.122419][ T8513] mac80211_hwsim hwsim79 wlan0: Caught tx_queue_len zero misconfig [ 912.432628][ T7531] Bluetooth: hci0: command tx timeout [ 912.885124][ T8529] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 913.093340][ T6046] IPVS: stop unused estimator thread 0... [ 913.150339][ C1] net_ratelimit: 16 callbacks suppressed [ 913.150361][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.207179][ T8533] __nla_validate_parse: 11 callbacks suppressed [ 913.207199][ T8533] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9570'. [ 913.224818][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9570'. [ 913.255703][ T8534] 8021q: adding VLAN 0 to HW filter on device bond2 [ 913.555073][ T8544] netlink: 'syz.2.9573': attribute type 1 has an invalid length. [ 913.557645][ T8545] netlink: 'syz.2.9573': attribute type 1 has an invalid length. [ 913.589292][ T8544] bond3: entered promiscuous mode [ 913.595058][ T8544] bond3: entered allmulticast mode [ 913.600715][ T8544] 8021q: adding VLAN 0 to HW filter on device bond3 [ 914.511110][ T7531] Bluetooth: hci0: command tx timeout [ 914.638862][ T8490] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 914.682743][ T8270] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 914.781432][ T8270] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 914.821469][ T8270] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 914.886758][ T8270] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 914.934128][ T8567] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9579'. [ 915.179785][ T8270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 915.188239][ T8588] netlink: 'syz.3.9583': attribute type 1 has an invalid length. [ 915.201293][ T8588] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9583'. [ 915.229184][ T8270] 8021q: adding VLAN 0 to HW filter on device team0 [ 915.279483][ T6054] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.286734][ T6054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 915.345489][ T6046] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.352772][ T6046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 915.512719][ T8603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9586'. [ 915.947038][ T8270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 916.218963][ T8633] delete_channel: no stack [ 916.468487][ T8648] netlink: 'syz.2.9593': attribute type 3 has an invalid length. [ 916.564461][ T8657] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 916.779610][ T8270] veth0_vlan: entered promiscuous mode [ 916.800879][ T8673] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9596'. [ 916.936627][ T8673] geneve2: entered promiscuous mode [ 916.943327][ T8673] geneve2: entered allmulticast mode [ 916.964252][ T6054] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 917.067256][ T8270] veth1_vlan: entered promiscuous mode [ 917.082788][ T6054] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 917.135888][ T6054] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 917.255792][ T6054] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 917.285266][ T8702] netlink: 220 bytes leftover after parsing attributes in process `syz.0.9604'. [ 917.313572][ T8270] veth0_macvtap: entered promiscuous mode [ 917.355215][ T8270] veth1_macvtap: entered promiscuous mode [ 917.416453][ T8704] bridge0: entered allmulticast mode [ 917.475137][ T8708] netlink: 'syz.1.9606': attribute type 1 has an invalid length. [ 917.498508][ T8270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 917.539418][ T8713] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 917.638681][ T8270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 917.767502][ T8721] IPVS: length: 211 != 8 [ 917.794609][ T6053] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.814301][ T6053] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.835667][ T6053] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.890691][ T6053] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.141116][ T6039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.177771][ T6039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 918.363932][ T6053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.380756][ T6053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 918.481819][ T8756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9615'. [ 918.753683][ T8770] netlink: 'syz.4.9508': attribute type 1 has an invalid length. [ 918.785168][ T8769] netlink: 'syz.4.9508': attribute type 1 has an invalid length. [ 918.810820][ T8769] netlink: 'syz.4.9508': attribute type 2 has an invalid length. [ 918.872869][ T8770] netlink: 'syz.4.9508': attribute type 2 has an invalid length. [ 918.900161][ T8770] netlink: 'syz.4.9508': attribute type 1 has an invalid length. [ 918.900661][ T8769] netlink: 'syz.4.9508': attribute type 1 has an invalid length. [ 918.937640][ T8770] netlink: 'syz.4.9508': attribute type 3 has an invalid length. [ 918.991244][ T8769] netlink: 'syz.4.9508': attribute type 3 has an invalid length. [ 918.999053][ T8769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9508'. [ 919.034080][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9621'. [ 919.043238][ T8770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9508'. [ 919.078868][ T8778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 919.224253][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9623'. [ 919.265532][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9624'. [ 919.270836][ T8789] netlink: 'syz.3.9623': attribute type 3 has an invalid length. [ 919.285398][ T8792] netlink: 'syz.2.9625': attribute type 4 has an invalid length. [ 919.301996][ T8792] netlink: 228 bytes leftover after parsing attributes in process `syz.2.9625'. [ 919.324758][ T8792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9625'. [ 919.359621][ T8792] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 919.592796][ T8801] gretap2: entered promiscuous mode [ 919.675121][ T8804] bond4: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 919.688813][ T8804] bond4 (unregistering): Released all slaves [ 919.720556][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.729420][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.737931][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.548609][ T8857] xt_hashlimit: size too large, truncated to 1048576 [ 920.617488][ T8859] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9646'. [ 920.699620][ T8868] netlink: 116 bytes leftover after parsing attributes in process `syz.0.9644'. [ 920.992151][ T7477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.499410][ T8906] lo speed is unknown, defaulting to 1000 [ 921.559675][ T8914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.662193][ T9036] IPVS: starting estimator thread 0... [ 921.669630][ T8921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.751097][ T8922] IPVS: using max 26 ests per chain, 62400 per kthread [ 921.841106][ T8928] IPv6: NLM_F_CREATE should be specified when creating new route [ 921.870521][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.879421][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.480940][ T8951] gtp0: entered promiscuous mode [ 922.485973][ T8951] gtp0: entered allmulticast mode [ 922.673331][ T8966] team0: Device veth1_macvtap failed to register rx_handler [ 922.902642][ T8979] chnl_net:caif_netlink_parms(): no params data found [ 923.053001][ T8987] vlan1: entered allmulticast mode [ 923.067389][ T8987] geneve1: entered allmulticast mode [ 923.266458][ T8996] syzkaller0: entered promiscuous mode [ 923.275436][ T8996] syzkaller0: entered allmulticast mode [ 923.662659][ T9024] bond_slave_1: entered promiscuous mode [ 923.670497][ T9024] bond_slave_1: left promiscuous mode [ 923.827390][ T9040] rdma_op ffff888025e491f0 conn xmit_rdma 0000000000000000 [ 923.894957][ T9036] IPVS: starting estimator thread 0... [ 923.907794][ T9046] __nla_validate_parse: 11 callbacks suppressed [ 923.907817][ T9046] netlink: 401 bytes leftover after parsing attributes in process `syz.1.9696'. [ 924.020648][ T9045] IPVS: using max 27 ests per chain, 64800 per kthread [ 924.079081][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9699'. [ 924.112466][ T9059] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9701'. [ 924.121992][ T7477] net_ratelimit: 14 callbacks suppressed [ 924.122009][ T7477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.233387][ T9064] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9702'. [ 924.251282][ T9067] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.9703'. [ 924.292963][ T9065] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9702'. [ 924.359413][ T9065] syzkaller0: entered promiscuous mode [ 924.371225][ T9065] syzkaller0: entered allmulticast mode [ 924.395988][ T9064] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 924.461039][ T9076] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9706'. [ 924.485140][ T9065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9702'. [ 924.516485][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9702'. [ 924.661035][ T9091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9709'. [ 924.705643][ T9082] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.713362][ T9082] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.917429][ T7541] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.926801][ T7541] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.936597][ T7541] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.958541][ T7541] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.997672][ T9103] syzkaller0: entered promiscuous mode [ 925.004155][ T9103] syzkaller0: entered allmulticast mode [ 925.150560][ T7477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.159067][ T9952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.192959][ T9110] syzkaller0: entered promiscuous mode [ 925.198565][ T9110] syzkaller0: entered allmulticast mode [ 925.232408][ T6054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.243124][ T9952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.253127][ T9039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.950919][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.961511][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.191561][ T7477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.778134][ T6053] dvmrp0 (unregistering): left allmulticast mode [ 927.325439][ T6053] bond0 (unregistering): Released all slaves [ 927.336223][ T6053] bond1 (unregistering): Released all slaves [ 927.352650][ T6053] bond2 (unregistering): Released all slaves [ 927.367649][ T6053] bond3 (unregistering): Released all slaves [ 927.388771][ T6053] bond4 (unregistering): Released all slaves [ 927.403815][ T6053] bond5 (unregistering): Released all slaves [ 927.418608][ T6053] bond6 (unregistering): Released all slaves [ 927.514219][ T9085] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 927.547824][ T6053] 9: left promiscuous mode [ 927.692154][ T9123] validate_nla: 4 callbacks suppressed [ 927.692173][ T9123] netlink: 'syz.4.9716': attribute type 10 has an invalid length. [ 927.758012][ T9123] 8021q: adding VLAN 0 to HW filter on device team0 [ 927.830373][ T9123] bond0: (slave team0): Enslaving as an active interface with an up link [ 927.854750][ T6053] tipc: Left network mode [ 928.092693][ T9143] netlink: 'syz.3.9721': attribute type 1 has an invalid length. [ 928.120137][ T9143] netlink: 'syz.3.9721': attribute type 3 has an invalid length. [ 928.128001][ T9143] NCSI netlink: No device for ifindex 813332851 [ 928.393918][ T9152] tls_set_device_offload: netdev not found [ 928.566139][ T9158] dvmrp1: entered allmulticast mode [ 928.667492][ T9161] ip6gre1: entered allmulticast mode [ 929.199727][ T9192] xt_socket: unknown flags 0x50 [ 929.313130][ T7479] net_ratelimit: 3 callbacks suppressed [ 929.313153][ T7479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.409154][ T9203] netlink: 'syz.4.9740': attribute type 21 has an invalid length. [ 929.428083][ T9203] __nla_validate_parse: 5 callbacks suppressed [ 929.428102][ T9203] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9740'. [ 929.464073][ T9205] netlink: 'syz.4.9740': attribute type 21 has an invalid length. [ 929.473104][ T9205] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9740'. [ 929.955229][ T6053] hsr_slave_0: left promiscuous mode [ 929.971305][ T6053] hsr_slave_1: left promiscuous mode [ 930.182781][ T6053] pimreg (unregistering): left allmulticast mode [ 930.259559][ T7541] smc: removing ib device  [ 930.353288][ T7477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.497620][ T9203] netlink: 'syz.4.9740': attribute type 4 has an invalid length. [ 930.506846][ T9203] netlink: 'syz.4.9740': attribute type 5 has an invalid length. [ 930.550738][ T9203] netlink: 3 bytes leftover after parsing attributes in process `syz.4.9740'. [ 930.571221][ T9205] netlink: 'syz.4.9740': attribute type 4 has an invalid length. [ 930.579010][ T9205] netlink: 'syz.4.9740': attribute type 5 has an invalid length. [ 930.593999][ T9205] netlink: 3 bytes leftover after parsing attributes in process `syz.4.9740'. [ 930.613440][ T9039] ================================================================== [ 930.621567][ T9039] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x5e/0x170 [ 930.630373][ T9039] Read of size 8 at addr ffff88804a11c2f0 by task kworker/0:10/9039 [ 930.638375][ T9039] [ 930.640718][ T9039] CPU: 0 UID: 0 PID: 9039 Comm: kworker/0:10 Not tainted syzkaller #0 PREEMPT(full) [ 930.640742][ T9039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 930.640756][ T9039] Workqueue: events smc_ib_port_event_work [ 930.640781][ T9039] Call Trace: [ 930.640790][ T9039] [ 930.640798][ T9039] dump_stack_lvl+0xe8/0x150 [ 930.640825][ T9039] print_report+0xba/0x230 [ 930.640845][ T9039] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 930.640869][ T9039] kasan_report+0x117/0x150 [ 930.640898][ T9039] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 930.640926][ T9039] __ethtool_get_link_ksettings+0x5e/0x170 [ 930.640951][ T9039] ib_get_eth_speed+0x180/0x7f0 [ 930.640973][ T9039] ? rxe_query_port+0x7e/0x3d0 [ 930.641002][ T9039] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 930.641027][ T9039] ? do_raw_spin_unlock+0xf5/0x210 [ 930.641054][ T9039] rxe_query_port+0x93/0x3d0 [ 930.641079][ T9039] ib_query_port+0x170/0x830 [ 930.641104][ T9039] smc_ib_port_event_work+0x15a/0x940 [ 930.641127][ T9039] ? process_scheduled_works+0xa0f/0x17a0 [ 930.641147][ T9039] ? process_scheduled_works+0xa0f/0x17a0 [ 930.641164][ T9039] process_scheduled_works+0xaec/0x17a0 [ 930.641193][ T9039] ? __pfx_process_scheduled_works+0x10/0x10 [ 930.641213][ T9039] ? assign_work+0x3d5/0x5e0 [ 930.641231][ T9039] worker_thread+0xa50/0xfc0 [ 930.641259][ T9039] kthread+0x388/0x470 [ 930.641280][ T9039] ? __pfx_worker_thread+0x10/0x10 [ 930.641296][ T9039] ? __pfx_kthread+0x10/0x10 [ 930.641316][ T9039] ret_from_fork+0x51e/0xb90 [ 930.641336][ T9039] ? __pfx_ret_from_fork+0x10/0x10 [ 930.641352][ T9039] ? __switch_to+0xc7d/0x1400 [ 930.641368][ T9039] ? __pfx_kthread+0x10/0x10 [ 930.641388][ T9039] ret_from_fork_asm+0x1a/0x30 [ 930.641416][ T9039] [ 930.641422][ T9039] [ 930.813964][ T9039] Allocated by task 17234: [ 930.818395][ T9039] kasan_save_track+0x3e/0x80 [ 930.823097][ T9039] __kasan_kmalloc+0x93/0xb0 [ 930.827753][ T9039] __kvmalloc_node_noprof+0x528/0x8a0 [ 930.833156][ T9039] alloc_netdev_mqs+0xa6/0x11b0 [ 930.838033][ T9039] rtnl_create_link+0x31f/0xd70 [ 930.843009][ T9039] rtnl_newlink_create+0x277/0xb70 [ 930.848141][ T9039] rtnl_newlink+0x1666/0x1be0 [ 930.852829][ T9039] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 930.857784][ T9039] netlink_rcv_skb+0x232/0x4b0 [ 930.862558][ T9039] netlink_unicast+0x80f/0x9b0 [ 930.867342][ T9039] netlink_sendmsg+0x813/0xb40 [ 930.872123][ T9039] __sys_sendto+0x709/0x7a0 [ 930.876644][ T9039] __x64_sys_sendto+0xde/0x100 [ 930.881425][ T9039] do_syscall_64+0x14d/0xf80 [ 930.886035][ T9039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.891942][ T9039] [ 930.894278][ T9039] Freed by task 6053: [ 930.898262][ T9039] kasan_save_track+0x3e/0x80 [ 930.902953][ T9039] kasan_save_free_info+0x46/0x50 [ 930.907991][ T9039] __kasan_slab_free+0x5c/0x80 [ 930.912771][ T9039] kfree+0x1c1/0x610 [ 930.916683][ T9039] device_release+0x9e/0x1d0 [ 930.921303][ T9039] kobject_put+0x228/0x560 [ 930.925750][ T9039] netdev_run_todo+0xc75/0xde0 [ 930.930546][ T9039] default_device_exit_batch+0x986/0xa00 [ 930.936193][ T9039] ops_undo_list+0x52b/0x940 [ 930.940808][ T9039] cleanup_net+0x56b/0x800 [ 930.945254][ T9039] process_scheduled_works+0xaec/0x17a0 [ 930.950841][ T9039] worker_thread+0xa50/0xfc0 [ 930.955475][ T9039] kthread+0x388/0x470 [ 930.959574][ T9039] ret_from_fork+0x51e/0xb90 [ 930.964192][ T9039] ret_from_fork_asm+0x1a/0x30 [ 930.968984][ T9039] [ 930.971321][ T9039] The buggy address belongs to the object at ffff88804a11c000 [ 930.971321][ T9039] which belongs to the cache kmalloc-cg-4k of size 4096 [ 930.985659][ T9039] The buggy address is located 752 bytes inside of [ 930.985659][ T9039] freed 4096-byte region [ffff88804a11c000, ffff88804a11d000) [ 930.999571][ T9039] [ 931.001918][ T9039] The buggy address belongs to the physical page: [ 931.008498][ T9039] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4a118 [ 931.017377][ T9039] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 931.025888][ T9039] memcg:ffff88804a119011 [ 931.030150][ T9039] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 931.037714][ T9039] page_type: f5(slab) [ 931.041723][ T9039] raw: 00fff00000000040 ffff88813feb7500 dead000000000100 dead000000000122 [ 931.050339][ T9039] raw: 0000000000000000 0000200000040004 00000000f5000000 ffff88804a119011 [ 931.058946][ T9039] head: 00fff00000000040 ffff88813feb7500 dead000000000100 dead000000000122 [ 931.067627][ T9039] head: 0000000000000000 0000200000040004 00000000f5000000 ffff88804a119011 [ 931.076317][ T9039] head: 00fff00000000003 ffffea0001284601 00000000ffffffff 00000000ffffffff [ 931.085014][ T9039] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 931.093694][ T9039] page dumped because: kasan: bad access detected [ 931.100154][ T9039] page_owner tracks the page as allocated [ 931.105899][ T9039] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 17234, tgid 17234 (syz-executor), ts 337038874595, free_ts 337024726386 [ 931.129364][ T9039] post_alloc_hook+0x228/0x280 [ 931.134164][ T9039] get_page_from_freelist+0x24dc/0x2580 [ 931.139737][ T9039] __alloc_frozen_pages_noprof+0x18d/0x380 [ 931.145601][ T9039] allocate_slab+0x77/0x660 [ 931.150140][ T9039] refill_objects+0x331/0x3c0 [ 931.154837][ T9039] __pcs_replace_empty_main+0x2b9/0x620 [ 931.160407][ T9039] __kvmalloc_node_noprof+0x657/0x8a0 [ 931.165808][ T9039] alloc_netdev_mqs+0xa6/0x11b0 [ 931.170686][ T9039] rtnl_create_link+0x31f/0xd70 [ 931.175573][ T9039] rtnl_newlink_create+0x277/0xb70 [ 931.180697][ T9039] rtnl_newlink+0x1666/0x1be0 [ 931.185397][ T9039] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 931.190352][ T9039] netlink_rcv_skb+0x232/0x4b0 [ 931.195136][ T9039] netlink_unicast+0x80f/0x9b0 [ 931.199921][ T9039] netlink_sendmsg+0x813/0xb40 [ 931.204698][ T9039] __sys_sendto+0x709/0x7a0 [ 931.209220][ T9039] page last free pid 17234 tgid 17234 stack trace: [ 931.215726][ T9039] __free_frozen_pages+0xbf8/0xd70 [ 931.221037][ T9039] __slab_free+0x263/0x2b0 [ 931.225481][ T9039] qlist_free_all+0x97/0x100 [ 931.230095][ T9039] kasan_quarantine_reduce+0x148/0x160 [ 931.235589][ T9039] __kasan_slab_alloc+0x22/0x80 [ 931.240554][ T9039] kmem_cache_alloc_node_noprof+0x384/0x690 [ 931.246466][ T9039] __alloc_skb+0x27d/0x7d0 [ 931.250907][ T9039] netlink_ack+0x146/0xa50 [ 931.255345][ T9039] netlink_rcv_skb+0x2b6/0x4b0 [ 931.260140][ T9039] netlink_unicast+0x80f/0x9b0 [ 931.264927][ T9039] netlink_sendmsg+0x813/0xb40 [ 931.269708][ T9039] __sys_sendto+0x709/0x7a0 [ 931.274238][ T9039] __x64_sys_sendto+0xde/0x100 [ 931.279043][ T9039] do_syscall_64+0x14d/0xf80 [ 931.283664][ T9039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.289571][ T9039] [ 931.291905][ T9039] Memory state around the buggy address: [ 931.297541][ T9039] ffff88804a11c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 931.305633][ T9039] ffff88804a11c200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 931.313712][ T9039] >ffff88804a11c280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 931.321841][ T9039] ^ [ 931.329581][ T9039] ffff88804a11c300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 931.337660][ T9039] ffff88804a11c380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 931.345734][ T9039] ================================================================== [ 931.417176][ T9036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.430686][ T7478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.570026][ T9039] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 931.577294][ T9039] CPU: 0 UID: 0 PID: 9039 Comm: kworker/0:10 Not tainted syzkaller #0 PREEMPT(full) [ 931.586800][ T9039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 931.596890][ T9039] Workqueue: events smc_ib_port_event_work [ 931.602728][ T9039] Call Trace: [ 931.606028][ T9039] [ 931.608972][ T9039] vpanic+0x1e0/0x670 [ 931.612980][ T9039] panic+0xc5/0xd0 [ 931.616744][ T9039] ? __pfx_panic+0x10/0x10 [ 931.621186][ T9039] ? preempt_schedule_thunk+0x16/0x30 [ 931.626581][ T9039] ? preempt_schedule_thunk+0x16/0x30 [ 931.631973][ T9039] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 931.638514][ T9039] check_panic_on_warn+0x89/0xb0 [ 931.643483][ T9039] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 931.649487][ T9039] end_report+0x6f/0x140 [ 931.653755][ T9039] kasan_report+0x128/0x150 [ 931.658292][ T9039] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 931.664302][ T9039] __ethtool_get_link_ksettings+0x5e/0x170 [ 931.670142][ T9039] ib_get_eth_speed+0x180/0x7f0 [ 931.675022][ T9039] ? rxe_query_port+0x7e/0x3d0 [ 931.679810][ T9039] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 931.685210][ T9039] ? do_raw_spin_unlock+0xf5/0x210 [ 931.690357][ T9039] rxe_query_port+0x93/0x3d0 [ 931.694972][ T9039] ib_query_port+0x170/0x830 [ 931.699586][ T9039] smc_ib_port_event_work+0x15a/0x940 [ 931.704984][ T9039] ? process_scheduled_works+0xa0f/0x17a0 [ 931.710738][ T9039] ? process_scheduled_works+0xa0f/0x17a0 [ 931.716483][ T9039] process_scheduled_works+0xaec/0x17a0 [ 931.722072][ T9039] ? __pfx_process_scheduled_works+0x10/0x10 [ 931.728078][ T9039] ? assign_work+0x3d5/0x5e0 [ 931.732687][ T9039] worker_thread+0xa50/0xfc0 [ 931.737320][ T9039] kthread+0x388/0x470 [ 931.741416][ T9039] ? __pfx_worker_thread+0x10/0x10 [ 931.746560][ T9039] ? __pfx_kthread+0x10/0x10 [ 931.751171][ T9039] ret_from_fork+0x51e/0xb90 [ 931.755779][ T9039] ? __pfx_ret_from_fork+0x10/0x10 [ 931.760912][ T9039] ? __switch_to+0xc7d/0x1400 [ 931.765626][ T9039] ? __pfx_kthread+0x10/0x10 [ 931.770241][ T9039] ret_from_fork_asm+0x1a/0x30 [ 931.775048][ T9039] [ 931.778689][ T9039] Kernel Offset: disabled [ 931.783015][ T9039] Rebooting in 86400 seconds..