last executing test programs: 7.089809968s ago: executing program 1 (id=1132): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, r3, 0x1, 0x7ffffc, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}}, 0x80) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000005c0)={0x2, {{0x2, 0x4e23, @multicast2=0xe0000001}}}, 0x88) 6.889132634s ago: executing program 1 (id=1134): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x80}, 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(0x3) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r3, 0x8001}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r2, 0xa}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0xfffffffc, @local, 0x10004}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="015f8fd2d5a8eccf3e6ae2b02ed9f2b9a026902f7e6f63f8542e5dbc9e96cdb667c97d0f82600a410f65b9e12340616b5fb1e119fc31539f54d9dddf4372f4bf23b48193", 0x44}], 0x1}}], 0x1, 0x40408d0) 5.913370274s ago: executing program 1 (id=1147): r0 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000100)={'macvlan0\x00', {0x2, 0x0, @initdev}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r1, 0x0, 0x0, 0x800) 5.746851883s ago: executing program 1 (id=1150): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in=@remote}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0200000002"], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[], 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000005fdffffff1000320003000000000000000000eeff0f0033000000000078724d5ee7b88c7efc024000000000000000000000000000030005000000000002000000ac1414aa000000000000000003000600000000000216610360343be8b203343b40b6"], 0x80}}, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xe) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x5a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000240), &(0x7f0000000340)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_process_wait\x00', r5}, 0x18) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r8, 0x11, 0x0, 0x0, @void, @value=r7}, 0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="06010000", @ANYRES16=r10, @ANYBLOB="00062bbd7000ffdbdf251700000008000300", @ANYRES32=r11, @ANYBLOB="0c0006000000000000000000a4003080140004002f169858411e5a7fcf1ee331a04f09b7050002000900000024000300204f2a1ff4b0bc999956d4413f46482c5bd6c05430bf376b27486c0206024a702000018008000400ff0700000c0005000100000000000000050002000200000014000400b04228b8334bb135728558a363b33c5f240003003c5819374905b4fb97f6e9430cdeae1f9ad2ff1d2c70e0da616d945d8deec1f1050002008700000008000300", @ANYRES32=r12, @ANYBLOB="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"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x20008800) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x8040}, 0x0) 5.475827131s ago: executing program 1 (id=1153): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000), 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="14800800020000000000000008000000001c970000000000008fc681bb2ce284af1b65484727fa4dc51b73998f156ecc2bce4c872e1be8f804a0e418de1e9bc46e1a71288b1ffa9dc06b38c30367df5198dd2a2201910346d681a700"/106, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r3, 0x0, &(0x7f0000000500)=""/184}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="2600000004a9bd1bd07602d7451ff8cfd892308578009de5a229a69732f1da3e68a597cc1d11753a7a6e860f1c2ba312e6ceca93f53d7fd96155cc6dd8", @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf2518000000"], 0x14}}, 0x400c040) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000b00)) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000040)="05000000010000", 0x7) r8 = socket(0x1, 0x803, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r10}, @IFLA_HSR_SLAVE1={0x8, 0x1, r11}, @IFLA_HSR_VERSION={0x5, 0x6, 0x1}]}}}]}, 0x48}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) setsockopt$TIPC_MCAST_BROADCAST(r8, 0x10f, 0x85) r12 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000640)={r5, r12, 0x6, 0xf, &(0x7f0000000340)="958d5f94724d7da8680777dfa73546", 0x4, 0x9, 0x400, 0x4, 0x80, 0x0, 0x0, 'syz0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711003000000f0ff9400000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x1, @any, 0x0, 0x1}, 0xe) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, &(0x7f0000000100)) 5.261547734s ago: executing program 1 (id=1157): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x50) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x12, 0x0, 0x0, @multicast1}}}}}, 0x0) 4.353362689s ago: executing program 3 (id=1169): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="19042cbd7000ffd3ff2502000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x4040) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000001100)=[{&(0x7f0000001140)="4647b4f310d036b398bd576db787e7b4202ee128ae26c942fc41e537802686e8c349eb6c1ed386de2085218c1cc9fb2decdb2a5f89154999df0aeebf9b9c41add84afb98", 0x44}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) (async) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'bridge_slave_0\x00'}}, 0x1e) (async) ioctl$FIONCLEX(r2, 0x5450) 4.187083834s ago: executing program 3 (id=1172): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x80, 0x8000, 0x1, 0x0, {{0x29, 0x4, 0x0, 0x3c, 0xa4, 0x67, 0x0, 0x5, 0x2f, 0x0, @loopback, @multicast2, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x8, [0xc, 0x8]}, @timestamp_prespec={0x44, 0x3c, 0xbb, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x2c}, 0x4}, {@multicast2, 0x5}, {@remote, 0x7}, {@rand_addr=0x64010101, 0x7dfd}, {@empty, 0x81}, {@multicast1}, {@local, 0x677}]}, @timestamp_prespec={0x44, 0x3c, 0xc1, 0x3, 0x4, [{@broadcast, 0x23}, {@remote, 0x357}, {@loopback}, {@loopback, 0x2}, {@private=0xa010100, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4a}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x200}]}, @timestamp_prespec={0x44, 0xc, 0xda, 0x3, 0x6, [{@local, 0x48000}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x80, 0x8000, 0x1, 0x0, {{0x29, 0x4, 0x0, 0x3c, 0xa4, 0x67, 0x0, 0x5, 0x2f, 0x0, @loopback, @multicast2, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0x8, [0xc, 0x8]}, @timestamp_prespec={0x44, 0x3c, 0xbb, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x2c}, 0x4}, {@multicast2, 0x5}, {@remote, 0x7}, {@rand_addr=0x64010101, 0x7dfd}, {@empty, 0x81}, {@multicast1}, {@local, 0x677}]}, @timestamp_prespec={0x44, 0x3c, 0xc1, 0x3, 0x4, [{@broadcast, 0x23}, {@remote, 0x357}, {@loopback}, {@loopback, 0x2}, {@private=0xa010100, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4a}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x200}]}, @timestamp_prespec={0x44, 0xc, 0xda, 0x3, 0x6, [{@local, 0x48000}]}]}}}}}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) (async) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r1}]]}}}]}, 0x38}, 0x1, 0x7500}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) socket$kcm(0x11, 0x3, 0x0) (async) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x28, r5, 0x5, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x28}}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001440)="c0a5e911", 0x4}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001440)="c0a5e911", 0x4}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3332be2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0xfdff}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001a00010000000000000000008180806a"], 0x30}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001a00010000000000000000008180806a"], 0x30}}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000700)={0x0, 0xae, 0x7, [0x3, 0x6, 0x6, 0x5, 0x62, 0xd5, 0x1]}, &(0x7f0000000bc0)=0x16) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x50, r5, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004040}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r7}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r7}, 0x38) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x200000, 0x20}, 0xc) (async) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x200000, 0x20}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000000540)={'gretap0\x00', &(0x7f0000000200)={'sit0\x00', r1, 0x8000, 0x80, 0x6, 0xfff, {{0x9, 0x4, 0x2, 0x25, 0x24, 0x64, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ra={0x94, 0x4}, @generic={0xa282fcfea8e20eca, 0x9, "8970ab5b7ce79c"}]}}}}}) socket$inet_udplite(0x2, 0x2, 0x88) 3.474725592s ago: executing program 2 (id=1176): writev(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r3}, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000080)=@int=0x7, 0x4) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x8000a4ff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000c600010020000000950000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002500d300000e0001006e657464657673696dcd59f99d0002016e657464657673696d30000037ff8b00", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) 3.309315669s ago: executing program 2 (id=1177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000600)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000}]}) close(0x3) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x40}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa, 0x7}]}, 0x28}}, 0x0) 3.308223504s ago: executing program 3 (id=1179): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000300000000000000a138000095"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff8, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) 3.174197064s ago: executing program 3 (id=1180): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x61010}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xa1af}]}, 0x28}, 0x1, 0xba01}, 0x0) 3.142217813s ago: executing program 4 (id=1181): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000a00)='syz0\x00', 0x1ff) (async) mkdirat$cgroup(r1, &(0x7f0000000a00)='syz0\x00', 0x1ff) write(r0, &(0x7f0000000340)='#\x00\x00\x00', 0x4) 3.00714727s ago: executing program 3 (id=1182): socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100030000000000fcff2600000008000300", @ANYRES32=r4], 0x1c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db029ea53c"}) write$cgroup_devices(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1e030800dd5c9801288563a20dad121406"], 0xffdd) 3.006443394s ago: executing program 4 (id=1183): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x8000, 0x0, 0x4}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0x26) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_TID={0xc}, @GTPA_VERSION={0x8}]}, 0x30}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xfffffffffffffe65, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) 2.992023488s ago: executing program 2 (id=1184): r0 = socket(0x21, 0x804, 0x9) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r1) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x903, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x64}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x300, 0x0, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0xc4014}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000012c0)={@cgroup, 0x1e, 0x0, 0xfffffffc, &(0x7f00000011c0)=[0x0], 0x1, 0x0, &(0x7f0000001200)=[0x0, 0x0, 0x0], &(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001280)=[0x0, 0x0], 0x0}, 0x40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001340)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000a700000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r9}, 0x10) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r11, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r12, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r13 = accept(r3, &(0x7f0000001640)=@can, &(0x7f00000016c0)=0x80) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r13, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x60, 0x140c, 0x400, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x6}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001580)={0x6, 0xa, &(0x7f0000001380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x8}]}, &(0x7f0000001400)='GPL\x00', 0x9, 0x5d, &(0x7f0000001440)=""/93, 0x41000, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001500)=[r4, r4, r2], &(0x7f0000001540)=[{0x4, 0x5, 0xe, 0xb}, {0x1, 0x2, 0x10, 0x2}, {0x4, 0x4, 0x10, 0x7}], 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001300)={@fallback=r14, 0xffffffffffffffff, 0xb, 0x18, 0x0, @void, @value=r7, @void, @void, r6}, 0x20) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000001c0)={0x0, "92b9c06e98213a95c923d8f3d878aa6b"}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, 0x0) 2.82703188s ago: executing program 4 (id=1185): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r2, 0x0, 0x0) (async) connect$inet(r2, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000016c0)={@remote, 0x0, 0x0, 0x2, 0x0, 0x9, 0xa}, &(0x7f0000001700)=0x20) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="30001b0020000103000000000000000002000000000000001c80000014001100626f6e643000"/48], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001}) 2.66879455s ago: executing program 2 (id=1186): r0 = socket(0x840000000002, 0x3, 0x100) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xfff2, 0xa}, {0x2, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x20000000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000003000000080002000000000008000100", @ANYRES32=0x0, @ANYBLOB="53bd495d51b108fbc0fe8c9c7a000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={{0x14}, [@NFT_MSG_NEWRULE={0x750, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x714, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x3d0, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x3bc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x110, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbc, 0x1, "dd601d2e36d0eeb9a023341c534a40ecceb681b9ef960d7f5651a3b1afb2f5a69ed499a0b7431f8774a63047a864469ed7a798732c1ace88834a0a1e5d2aa14ce1f9a6ba8307bc5104e7b494f575db2b09544100b78693980732a4393acc23714ac3166b177b7f37e3a0ef4113ffd33c7425dcab5a65565a55ecedf2f077cb8b3e3ba82d1ffe9ff769b92df8ea41a370cec025b762d50c120d7ba249f46e6f00b9550ec4b92c16a2fca8a6d5aa8b72aff4f7b51f9d2fa996"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_IMMEDIATE_DATA={0x1e8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xa3, 0x1, "6656a4dc26e484cca7ce3d77d8603191e806bf61f9d72b50a15459ce76e9660d46be69f560ef3c2323b17472b0775a5c0190ab14673f562c429920126734130cf05d2850e6b07902b8e1ae7cfd9600665849e879f2989c7e385644321ea8587ac511f02ce70b03181b32e884cdf59898ed791d0e7a8b6334c3a838c3804b6c460531b0ad506cf6f07cdcd90572d4bf3dc9771b46e37dd6c3358174b7da7756"}, @NFTA_DATA_VALUE={0xf7, 0x1, "94b933d86f55b0bdfcb25c146ae7f2037ee672657b5e173cd7837f17646029ea20cabcc5722b9f2406bea751965b9860bf567e0f3bb0b49796b37ede4362e1f1f9ed9204b4a35227da2b953abf37b1f7e8e7d35048b1c0b2fa597c287be40270eba4e404614dac5badd4a6c98a4e4d940444a2fbdd9e2b30798466ae3c51ff4dc88ead0991ea664dcc3b09bef5705e9bfec4d5c3dbf494fa251e8ba4aaf5f1b23ee6ef9f6eb4ee9bea7f1d2a4e87c99cc8a920bc3be86bce027eb5fa4dbec4a5fcecdd7ef0ddd7cb25dbfdb300de139d31cf1a8332ad67bbb19587d90178f14befb140df1e0d8f1ed6375938f5a97c398fa79e"}]}, @NFTA_IMMEDIATE_DATA={0xc0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbc, 0x1, "beb6b23efc7a975781c9e8f2f96524986066adeac8f8929b6c53b9a55931bff65aa1f8769c9103ab08ad119f8bb9923929423c0afaede5c6a00fceab2219cc9a1bd4780720b9d4c12779ed6fa81968e50c1c200cc3c126d762b66c1ad2b2db40b36a2d670ea51214961473b1299ca408a01697664ebd3807d75c74f331f855769862714aefb36cabe45466a46952315ae8934e27c8ec8227854d96bc099a0db15ef0bac577cad89f94c821f65feda54b6c53bd3990b13d18"}]}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x2ac, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x29c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x16}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_DYNSET_EXPRESSIONS={0x1a8, 0xa, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x15}]}}}, {0x38, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x21}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x2}]}}}, {0x58, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0xa8, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x98, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x3d}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_INNER_EXPR={0x5c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1a}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x23}]}}}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xf1}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", ""]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_DYNSET_TIMEOUT={0xc}, @NFTA_DYNSET_EXPRESSIONS={0xa0, 0xa, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x1f}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x778}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r9, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000800)=@ethtool_rxnfc={0x2f, 0x0, 0x0, {0x0, @udp_ip4_spec={@private, @dev}, {0x0, @link_local}, @usr_ip4_spec={@multicast1, @remote}, {0x0, @remote}}}}) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x108, 0x11, 0x148, 0x0, 0x10, 0x1a0, 0x2a8, 0x2a8, 0x1a0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x588, 0x548, 0x7}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x5, 0x3, 'syz0\x00', {0x4d}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0xffffffff, 'batadv_slave_1\x00', 'veth1_to_batadv\x00', {}, {}, 0x73, 0x2}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xdb, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) r12 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="20006c4a6fa637789c035ec52323ca0000140021ff000000000000000002000000", @ANYRES32=r13, @ANYBLOB="08000200ac141400"], 0x20}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x7f}, @IFLA_GTP_ROLE={0x8, 0x4, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xfe, r13}, [@IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x39}}]}, 0x20}}, 0x4) 2.653110165s ago: executing program 4 (id=1187): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000600008000f0fffeffe809005300fff5dd00000010000100080c10000000ffffffffffff", 0x58}], 0x1) syz_emit_ethernet(0x72, &(0x7f0000000a00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa81004a0086dd6000104000380600fe880000000000000000000000000001fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e40000009078515682f44cecac91ba1d12d243471da14fb23d079da4ca810000000000000000000000000000358a6465e4cff0d963d7d4d772307a6cbad25ab651cd32464b9e254adab3a59139c3761e15a09e1d0f0b672a1c3197a237a4644d21acbb7d7d407ea36b64cc4ae1d667c63ba66c7afcb51f102175759adc3099635fb74a3226fbaabf8138d3913ff8d22891df3e5bfe356cbf9a5935b1c9622479d7ebc6b996445caac0702a04209a211cd156d5140eac8b2ef90bd7f95c3b5a547d589c7322cdd570dc96fa37237d6c2be6248bcb4363c5ab13"], 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) writev(r3, &(0x7f0000000940)=[{&(0x7f0000000240)="e147895bd763009925ff711e39ec915a7fb17d0d65bbfcf08e7ab599cb2210477764bdf34e589e9200179d59e133d8bf444e6b51e7116caecd9e73e92d220dd1eb1f8ddd8113c581d8ce381c6f32a2536acc75f1bfeedf7c4ea392bbaa18c114cc677582fe42218694c5241a1f11830d513d52ab58028d751050fe395b03ed4e7e7b3e36a26c100accf9588fa4de380b15b8d6abac49939676ba73b3515fb97dabd46b7043fa203613e2011d91ef8e881574c3ffbabdc36664977e2e2f3eeb8557000b6cbd4fea4bb312a5671ace5898c5e9c454b84658f2852f0951ecf189bb7b186772e75debfec27d07cf04413e4a", 0xf0}, {&(0x7f0000000180)="1cc67b98e2796b2ebce6d34fbb2cdbe9f12cbc632c9e807ec4f5e07fe9aeca59aaddfa5a620dc29676fee0e6c773a0f84fddc642ef664f85b770f7b2d245d1511662f27176b56b3d4845df3b5a7309d8b37698", 0x53}, {&(0x7f0000000340)="92eb0161157760f8ea357424ae8e3810f885a5303479f197d9cf676336dea59f4bb370c4354dd7831ae57c15d3f85b2f46a16f50473e3c3a80012f90bd9266f70b00ae3a86b6fe21f41cdd1b82cc6fee529f3efe16f18bbbf967d842d9d37b9adb2fda089cf718f197052129c08b7d135cb4515109a85a22321a337c96fa73f1ae2f2e54908b4976918249ca433ba227330872e1a342c2490c", 0x99}, {&(0x7f0000000440)="6892ff574b5c7fb60146a368c60b258120ef9ef284af9975752c6fd69f144254b97fbb4705c65642ed0355aa48d861bdf951f3d438a4e9f46a4633ef51acff3feb95f6beb7415cff879b178479d0b2208c6f79cb531299f1b268f3ace31db467fa04abc19139a3c83f8d8ce0c04b306d85cd707e2fae5cd5ee0559a782450cd82548b3378116bf91c28ff8a215e735235f266c2054e47e93d47dc43c410d33d4b365f873cca083a32807828aa6d2e941fd6c5f056bf42dd04858a21dafd29ef0e003a43d266e0f71a16a5c5830ea26c62255221e2c97daf2c9", 0xd9}, {&(0x7f0000000540)="661904644a4720423877d463d517f99874de72350a0c0bc4efe88a3241df0ac4b5c824b6db4d079b80c2ac501aaf587a1fb8ab8c6dff08bacbffadde6f7ff277d4374f1fa2560380f4a1408904fd42e4999fcf001820e453c633f6952e735a55b5b496b1a845040579a0bfb74d020c1db3a5654697dd1a25c8082d4e894316", 0x7f}, {&(0x7f0000000600)="b70f0c8b32f7d22217db30fc7847ffffe43000dc7d17f04d207618fbba68c9b277edd0b16cf1fcf3a43d55d8b323012d230732875576cef815a0778902999b64c5fc654e8dbca60c557646a7c2968d587026452a1b63b015e562de837a8c625a48815dfc05f2f06c554348a8508c5323f64c7e18139dc3cc9e44eb92023627984e5ca5c7f56ed29d5b0f3fa035df64e22ed75ca67666e4a8c71ca112527a9aa46f2fc8710316c59e2211e84001fee092e3a6824a3c593bbfc1c342a56b51e1f8fa845fe899e4eaa5074ad68770897df5600fab1f6a603545f24a315e2075fecc1b66fb8b129382f488872177", 0xec}, {&(0x7f0000000700)="fe7ed9ec4a6c370deb8163f90f4b191bf57fced99635658247be2f942cacdd3b116ed8ffaa7db6a66b988c079fd2185b42549eb0bc2482dd47900e796da502402b6f713ec486a596e5e80e8488c705d0006c0e9c29460db82bf79c3b8f0e7c694d85516cdf1ae0cf3ffe07df3954a6b442c06b2af1ecad9d53dd25ef6a643bd793c7ce4fce7b35a04c424348a250d3d25ffc1c95325094b3825d60d3e435171e5dbcae8312e84a535130308c03dd76ed98b7e23d54194307674bef23249df84c83e56c9c27766f0bf36f6a698a5eb0d07e82c3a9278863", 0xd7}, {&(0x7f0000000800)="632e9ffd9c3c07bf1dda8207c57bc497d1fb9b07d7a38259ab56cb61a2d709a9c8612af79553700225720750027b0c26", 0x30}, {&(0x7f0000000840)="3b9fb4fcb45a27f4e6edf9ba3b9b12528a6bd1c681edcde251016430252eae87a480148a30102f022a7257", 0x2b}, {&(0x7f0000000880)="8a4a836bb72b436cbf950feab6d4ddbe81d3c25ab6d7dc18b742c9ff45559c351090a57baa354703ecb64f0e16e57980df51bef969215d91dd9ed6ec03e61a2e03578054a59872c148a808ddfabdcaf620a9d22eed4f819780bcbf7728448a971bfcc55100f5672ea4eba91f8dc822d5ead67dd07ce35a22fd10cf8e56a8c776d84e996acf5ebffd0d59b8ca58edca29739db0005295044369a21a66", 0x9c}], 0xa) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r4, 0x200}, 0x8) write(r1, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f00c0e90101c7bb0000b00000000000", 0x26) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000000000000030000008000100ac1414"], 0x24}}, 0x20004000) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000400), 0x4) sendto(r1, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 2.513727547s ago: executing program 4 (id=1188): mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_dccp(0x2, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) socket$packet(0x11, 0x2, 0x300) (async) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x30, r7, 0x601, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}]}, 0x30}}, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'erspan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8970, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) 2.134422732s ago: executing program 0 (id=1191): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f000018efdc)="240000005a001f0214f9f407000904fcffffff1010000300feffffff0800000000000000", 0x24) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_emit_ethernet(0xa6, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x70, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, [{0x0, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af2602"}, {0x0, 0x1, "00000500000000002600"}, {}]}}}}}}, 0x0) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) (async) write(r0, &(0x7f000018efdc)="240000005a001f0214f9f407000904fcffffff1010000300feffffff0800000000000000", 0x24) (async) socket$rds(0x15, 0x5, 0x0) (async) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) syz_emit_ethernet(0xa6, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x70, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, [{0x0, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af2602"}, {0x0, 0x1, "00000500000000002600"}, {}]}}}}}}, 0x0) (async) 1.969384279s ago: executing program 0 (id=1192): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x10, &(0x7f0000000180)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.958617352s ago: executing program 0 (id=1193): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001200)={0x60000018}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d}) close(0x4) r4 = openat$cgroup_int(r0, &(0x7f0000000100)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000180), 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r5, 0xffffffffffffffff, 0x26, 0x0, 0x0, @void, @value}, 0x10) ioctl$BTRFS_IOC_DEV_REPLACE(r5, 0xca289435, &(0x7f00000001c0)={0x2, 0x6, @status={[0x8001, 0x2, 0x7, 0xb33b, 0x9ad0, 0xf]}, [0xdf, 0x80, 0x6, 0xcd, 0x4, 0x0, 0x1, 0x7, 0x3, 0x10000, 0x2, 0x5, 0xf, 0x10001, 0x1, 0x3, 0x7, 0x2, 0xab0f, 0xab75, 0x86, 0x7, 0x4, 0x7, 0x2, 0x7, 0x3ff, 0x5, 0x5, 0x7ff, 0x1, 0x8, 0xcaa, 0xfffffffffffffffc, 0xd73, 0x9, 0x7f, 0x7, 0x200, 0x5, 0x800, 0xb, 0x7ffffffb, 0xb290, 0x4, 0xfffffffffffffffa, 0x8, 0x10000, 0x7, 0x2, 0xfffffffffffffff9, 0x100000000, 0x7, 0x7f, 0x1, 0x7, 0x7, 0x9, 0x3, 0x8, 0x4, 0x8001, 0x7, 0x4]}) 1.808697582s ago: executing program 0 (id=1194): r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x3, 0x4) (async) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) (async) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvfrom$x25(r2, &(0x7f0000000100)=""/87, 0x57, 0x10120, &(0x7f0000000180)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) (async) recvfrom$x25(r2, &(0x7f0000000100)=""/87, 0x57, 0x10120, &(0x7f0000000180)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r3, &(0x7f00000001c0)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x100, 0x1}, 0xe) getpeername(r3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x7, [@restrict={0x6}, @typedef={0xb}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x5}, @ptr={0x7}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x30, 0x2e, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000280)=""/198, 0x5b, 0xc6, 0x1, 0x1, 0x0, @void, @value}, 0x28) syz_emit_ethernet(0x7a, &(0x7f0000000400)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x23, 0x3a, 0xff, @private0, @mcast1, {[], @mld={0x83, 0x0, 0x0, 0x0, 0x3, @mcast1}}}}}}, 0x0) 645.226864ms ago: executing program 0 (id=1195): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x8, 0x4, 0x4, 0x20007, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x180, 0xffffffff, 0x3b0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x138, 0x180, 0x60030000, {0x0, 0xff000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], [], 0x0, 0xc475dc0a404da757}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}, @common=@inet=@set2={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x81, @loopback}, 0x1c) 574.499915ms ago: executing program 0 (id=1196): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000009500001b95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000030000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0403000b", @ANYRES16=r3, @ANYBLOB="00022abd7000fcdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x64094}, 0xc000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r6, 0x10d, 0xee, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$kcm(0x10, 0x2, 0x4) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmsg$kcm(r11, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 205.762409ms ago: executing program 3 (id=1197): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x6c, 0x2, 0x6, 0x1, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xa00}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x83, &(0x7f0000000140)={0x0}, &(0x7f0000000100)=0x10) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYBLOB="bf23c435acd8c9811f542777680f7a4d6400af75860cf3fdbbad0fda01f84bbb22efb7c5b8d127ecbee8fd67657ecce433c13ff28be29dca9cdeef46c972f8b1866c3e5f368ff4972b5364bf5027b0f3950767ba4cc8cb954a84e9dcf41e478b08b97b669c0b9d94e8c7e06f4e46cbbf9548ad9e6549433108d614624d5714", @ANYRES32, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYBLOB="08000300", @ANYRESOCT=r0, @ANYRES8=r3, @ANYRESHEX=r4, @ANYRESDEC=r0, @ANYRES16=r4], 0x60}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x6c, 0x2, 0x6, 0x1, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xa00}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x83, &(0x7f0000000140), &(0x7f0000000100)=0x10) (async) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYBLOB="bf23c435acd8c9811f542777680f7a4d6400af75860cf3fdbbad0fda01f84bbb22efb7c5b8d127ecbee8fd67657ecce433c13ff28be29dca9cdeef46c972f8b1866c3e5f368ff4972b5364bf5027b0f3950767ba4cc8cb954a84e9dcf41e478b08b97b669c0b9d94e8c7e06f4e46cbbf9548ad9e6549433108d614624d5714", @ANYRES32, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYBLOB="08000300", @ANYRESOCT=r0, @ANYRES8=r3, @ANYRESHEX=r4, @ANYRESDEC=r0, @ANYRES16=r4], 0x60}}, 0x0) (async) 117.122442ms ago: executing program 4 (id=1198): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1}, 0x4) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000006c0)={0x0, 0xe0, "f89b5a5b36a707126d3f0949832d021dd582c880afbde07ed69f32ac6bdea7457daf7a2c4f6856f9810320e577ba0a70eb85acade755829c33fd93d2ab6a0885a67742afe9b2d4289b322de9ec3cab8b811509c9366cc524f96f4aba10cefe54ac9741fd7effc7ea91208d1a841da470f4fba85f1d7afaa3e324cb08306d77554fc25478284ef5b1bd554b3469c738de3bb16908825b1b5280e1b122054511d5ee757ea4f2153bd64f48edcb164a9326126430622a8e1d5523d0808f438f0a263a73bfc26c746aeb2b0e36dbc9f6333fdb3cae815bca006a300c6e6ac3296b7e"}, &(0x7f00000005c0)=0xe8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={r2, 0x78, &(0x7f0000000540)=[@in={0x2, 0x0, @local}, @in6={0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e20, 0x12, @remote, 0x6}]}, &(0x7f0000000440)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={r2, 0x78, &(0x7f0000000540)=[@in={0x2, 0x0, @local}, @in6={0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e20, 0x12, @remote, 0x6}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000200)={r3, 0x7, 0x400}, 0x8) (async) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000200)={r3, 0x7, 0x400}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x1}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x1}, 0x1c}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000480)={0x4, 0x3, 0x81, 0x57, 0x0, 0x5, 0x4, 0x0, 0xe, 0x6, 0xd0, 0xff, 0x6e, 0x4}, 0xe) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000480)={0x4, 0x3, 0x81, 0x57, 0x0, 0x5, 0x4, 0x0, 0xe, 0x6, 0xd0, 0xff, 0x6e, 0x4}, 0xe) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xac6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x7, 0x3}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)="f5d28b7647b561fe617c8a9edf9ed8eb74d1f9c2179fe23fc6775fc0db794924a1dc50f1f655d8c4308a543ef003106df5aac4382635deb067b6b6900668da19a92e4c6c486b0da1328ed5ef367b95a9df49cbeb500d9b3ac01eb5f5e9d1fe789b547a1a61c8007da1351a30cec29316bc62d8a16bf1dabb3556023f7e65ebfdf1fbc21b772d546d1826f6a1f08f908efdfd207da7df3e3e3d9d100b3d992004c722cf", 0xa3}, {&(0x7f0000000040)="b5d1ba29662a2cea49166c3ee51ce62b9f4b8e3a13ffa6bb87a05b4d966d22a82a", 0x21}], 0x2, &(0x7f0000000300)=[{0x38, 0xff, 0xfff, "ccce1c23e0f1cf487f8be6b1efd8876ea746f75abb3fa3cdda622efae40b2681a4ba3572d6"}, {0xf8, 0x0, 0xfff, "a2ec0f929d2bdc65912ad2b789e4f78c338df48c7bc02e4c272ffb2b3a2d114c6f9a83c832762c8a340dbfe1afefe942e53cbc84a5ad5dff9f64bfd0a4febd3c95ff838397a8f9b8054e5b558f123957bf3fc86b5430fa67df80aa1c429d93bbfdfe33efcc2f02a1cfb8e828a1dac2d3f5cb0c6a32bf4ec2a5aa52ffe8c176fa8bfaf215730a59fe4a3d4c6958cfb56f14605c726d6d1986827270e6fe7a8c285d2a63d2fd736fbd291384bffae8613a087557deef27782c226d197d95f284b2538a3ac07f7fc0d76e269a051c82396cf704649b580f2f826b27b3c20278154273"}], 0x130}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x0, &(0x7f0000000200), &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000500)={[{0x2d, 'net'}, {0x2d, 'net'}, {0x2b, 'perf_event'}]}, 0x16) (async) write$cgroup_subtree(r6, &(0x7f0000000500)={[{0x2d, 'net'}, {0x2d, 'net'}, {0x2b, 'perf_event'}]}, 0x16) 116.588393ms ago: executing program 2 (id=1199): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000338000/0x2000)=nil, 0x2000, 0x1, 0x41071, r1, 0x1000) socket$netlink(0x10, 0x3, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000004c0)={0x1, 0x2, "ff9edf", 0x6c, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400fba21d73470000240001002dbddbb19df686"], 0x14}}, 0x0) 0s ago: executing program 2 (id=1200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000e80)=ANY=[@ANYBLOB="cc020000210a01"], 0x2cc}, 0x1, 0x0, 0x0, 0xc008040}, 0x41) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.54' (ED25519) to the list of known hosts. [ 82.777763][ T5829] cgroup: Unknown subsys name 'net' [ 82.887367][ T5829] cgroup: Unknown subsys name 'cpuset' [ 82.896797][ T5829] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.531813][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.320887][ T5858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.328936][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.334202][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.337815][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.353912][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.355106][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.374156][ T5861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.383050][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.392921][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.393732][ T5861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.401727][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.414218][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.422312][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.430557][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.440700][ T5860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.448256][ T5861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.456317][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.463822][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.471693][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.473662][ T5860] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.487708][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.488876][ T5860] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.495113][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.515628][ T5861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.524162][ T5860] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.070897][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 88.136959][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 88.355912][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.364744][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.372116][ T5841] bridge_slave_0: entered allmulticast mode [ 88.379880][ T5841] bridge_slave_0: entered promiscuous mode [ 88.417329][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.424618][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.432305][ T5841] bridge_slave_1: entered allmulticast mode [ 88.440478][ T5841] bridge_slave_1: entered promiscuous mode [ 88.453274][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 88.630067][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.646387][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.658082][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.665473][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.672943][ T5839] bridge_slave_0: entered allmulticast mode [ 88.680478][ T5839] bridge_slave_0: entered promiscuous mode [ 88.746577][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.754216][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.761556][ T5839] bridge_slave_1: entered allmulticast mode [ 88.769757][ T5839] bridge_slave_1: entered promiscuous mode [ 88.815000][ T5841] team0: Port device team_slave_0 added [ 88.854250][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 88.866718][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.874181][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.881367][ T5840] bridge_slave_0: entered allmulticast mode [ 88.889265][ T5840] bridge_slave_0: entered promiscuous mode [ 88.898796][ T5841] team0: Port device team_slave_1 added [ 88.920718][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 88.935711][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.947607][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.964046][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.971234][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.979085][ T5840] bridge_slave_1: entered allmulticast mode [ 88.986484][ T5840] bridge_slave_1: entered promiscuous mode [ 89.095703][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.107454][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.114751][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.140981][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.163071][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.170074][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.196487][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.210823][ T5839] team0: Port device team_slave_0 added [ 89.226461][ T5839] team0: Port device team_slave_1 added [ 89.236293][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.367704][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.374801][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.401220][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.450710][ T5841] hsr_slave_0: entered promiscuous mode [ 89.459877][ T5841] hsr_slave_1: entered promiscuous mode [ 89.467562][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.475049][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.501084][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.512317][ T5846] Bluetooth: hci0: command tx timeout [ 89.517884][ T5853] Bluetooth: hci1: command tx timeout [ 89.534714][ T5840] team0: Port device team_slave_0 added [ 89.561554][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.568829][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.576406][ T5847] bridge_slave_0: entered allmulticast mode [ 89.583145][ T5853] Bluetooth: hci2: command tx timeout [ 89.583154][ T5846] Bluetooth: hci4: command tx timeout [ 89.583474][ T5846] Bluetooth: hci3: command tx timeout [ 89.591885][ T5847] bridge_slave_0: entered promiscuous mode [ 89.612023][ T5840] team0: Port device team_slave_1 added [ 89.648209][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.655461][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.662618][ T5847] bridge_slave_1: entered allmulticast mode [ 89.673756][ T5847] bridge_slave_1: entered promiscuous mode [ 89.721800][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.729044][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.736340][ T5843] bridge_slave_0: entered allmulticast mode [ 89.744247][ T5843] bridge_slave_0: entered promiscuous mode [ 89.782627][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.825300][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.832546][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.842991][ T5843] bridge_slave_1: entered allmulticast mode [ 89.850269][ T5843] bridge_slave_1: entered promiscuous mode [ 89.860410][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.885351][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.892365][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.918828][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.956304][ T5839] hsr_slave_0: entered promiscuous mode [ 89.962822][ T5839] hsr_slave_1: entered promiscuous mode [ 89.969099][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.977738][ T5839] Cannot create hsr debugfs directory [ 90.028453][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.035831][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.062117][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.110753][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.123560][ T5847] team0: Port device team_slave_0 added [ 90.165759][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.178326][ T5847] team0: Port device team_slave_1 added [ 90.277998][ T5840] hsr_slave_0: entered promiscuous mode [ 90.287788][ T5840] hsr_slave_1: entered promiscuous mode [ 90.294414][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.302004][ T5840] Cannot create hsr debugfs directory [ 90.341864][ T5843] team0: Port device team_slave_0 added [ 90.349242][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.356535][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.382560][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.395229][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.402202][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.428768][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.462337][ T5843] team0: Port device team_slave_1 added [ 90.554814][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.561816][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.588758][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.629589][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.636644][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.663448][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.813454][ T5847] hsr_slave_0: entered promiscuous mode [ 90.819974][ T5847] hsr_slave_1: entered promiscuous mode [ 90.827491][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.835259][ T5847] Cannot create hsr debugfs directory [ 90.968018][ T5843] hsr_slave_0: entered promiscuous mode [ 90.974663][ T5843] hsr_slave_1: entered promiscuous mode [ 90.980917][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.988629][ T5843] Cannot create hsr debugfs directory [ 91.057944][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.080234][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.120768][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.131883][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.312102][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.322516][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.366768][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.407037][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.519543][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.534640][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.548902][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.559417][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.583228][ T5846] Bluetooth: hci0: command tx timeout [ 91.593845][ T5846] Bluetooth: hci1: command tx timeout [ 91.663200][ T5152] Bluetooth: hci2: command tx timeout [ 91.663259][ T5853] Bluetooth: hci4: command tx timeout [ 91.668733][ T5846] Bluetooth: hci3: command tx timeout [ 91.726112][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.747489][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.758953][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.781742][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.806646][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.901347][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.932640][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.947780][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.960075][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.977715][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.985047][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.006463][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.021640][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.028857][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.042010][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.066776][ T24] cfg80211: failed to load regulatory.db [ 92.077197][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.179915][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.197780][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.209114][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.216302][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.272571][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.279787][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.290559][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.297771][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.351378][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.358632][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.406678][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.475513][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.548403][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.555629][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.586946][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.594173][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.632597][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.736537][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.749149][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.808482][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.815766][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.872095][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.879281][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.110267][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.345845][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.372001][ T5840] veth0_vlan: entered promiscuous mode [ 93.461700][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.496596][ T5840] veth1_vlan: entered promiscuous mode [ 93.542582][ T5841] veth0_vlan: entered promiscuous mode [ 93.568259][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.597505][ T5847] veth0_vlan: entered promiscuous mode [ 93.606710][ T5841] veth1_vlan: entered promiscuous mode [ 93.646439][ T5840] veth0_macvtap: entered promiscuous mode [ 93.664269][ T5846] Bluetooth: hci1: command tx timeout [ 93.664282][ T5853] Bluetooth: hci0: command tx timeout [ 93.672204][ T5840] veth1_macvtap: entered promiscuous mode [ 93.704347][ T5847] veth1_vlan: entered promiscuous mode [ 93.729941][ T5841] veth0_macvtap: entered promiscuous mode [ 93.744075][ T5846] Bluetooth: hci4: command tx timeout [ 93.744098][ T5853] Bluetooth: hci3: command tx timeout [ 93.749487][ T5152] Bluetooth: hci2: command tx timeout [ 93.767840][ T5843] veth0_vlan: entered promiscuous mode [ 93.788265][ T5843] veth1_vlan: entered promiscuous mode [ 93.803497][ T5841] veth1_macvtap: entered promiscuous mode [ 93.824324][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.849494][ T5839] veth0_vlan: entered promiscuous mode [ 93.863781][ T5839] veth1_vlan: entered promiscuous mode [ 93.875333][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.908607][ T5840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.920650][ T5840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.929983][ T5840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.939254][ T5840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.969166][ T5843] veth0_macvtap: entered promiscuous mode [ 93.978854][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.990788][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.006179][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.026077][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.036858][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.048858][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.060932][ T5841] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.070976][ T5841] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.080170][ T5841] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.089308][ T5841] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.109088][ T5847] veth0_macvtap: entered promiscuous mode [ 94.122055][ T5843] veth1_macvtap: entered promiscuous mode [ 94.180257][ T5847] veth1_macvtap: entered promiscuous mode [ 94.207066][ T5839] veth0_macvtap: entered promiscuous mode [ 94.234641][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.246233][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.256659][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.267474][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.279731][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.298711][ T5839] veth1_macvtap: entered promiscuous mode [ 94.347913][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.359446][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.371572][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.382412][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.398618][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.408278][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.409923][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.421093][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.428323][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.445123][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.456258][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.470955][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.481505][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.494115][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.520970][ T5843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.530402][ T5843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.539980][ T5843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.548950][ T5843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.576589][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.584716][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.594866][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.606107][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.618267][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.629162][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.639220][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.649839][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.660930][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.671311][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.682350][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.692393][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.703993][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.713902][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.724470][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.736232][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.747086][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.758562][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.793615][ T5847] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.802366][ T5847] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.811873][ T5847] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.821499][ T5847] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.847259][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.858024][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.868497][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.879002][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.890147][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.900654][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.910856][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.921406][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.933317][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.952426][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.968247][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.990049][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.000774][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.010949][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.020447][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.045941][ T1315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.080633][ T1315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.165970][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.247816][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.280282][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.355991][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.381840][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.425206][ T5932] netdevsim netdevsim4: Firmware load for './file0/../file0' refused, path contains '..' component [ 95.470811][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.510532][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.546985][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.564563][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.614511][ T5936] Zero length message leads to an empty skb [ 95.707176][ T1315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.743135][ T1315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.744547][ T5152] Bluetooth: hci0: command tx timeout [ 95.756369][ T5846] Bluetooth: hci1: command tx timeout [ 95.778412][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.787901][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.823211][ T5152] Bluetooth: hci2: command tx timeout [ 95.828677][ T5152] Bluetooth: hci4: command tx timeout [ 95.835900][ T5846] Bluetooth: hci3: command tx timeout [ 95.943701][ T5943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8'. [ 95.953891][ T5946] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2'. [ 95.978910][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7'. [ 96.022233][ T5943] netlink: 'syz.2.8': attribute type 6 has an invalid length. [ 96.044493][ T5941] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 96.387119][ T5954] syz.4.9 uses obsolete (PF_INET,SOCK_PACKET) [ 96.665681][ T5965] xt_limit: Overflow, try lower: 2147483649/128 [ 96.986006][ T5978] netlink: 'syz.4.14': attribute type 1 has an invalid length. [ 97.260633][ T5989] tipc: Started in network mode [ 97.270822][ T5989] tipc: Node identity 5a579c50b316, cluster identity 4711 [ 97.292225][ T5989] tipc: Enabled bearer , priority 0 [ 97.465102][ T5989] syzkaller0: entered promiscuous mode [ 97.472909][ T5989] syzkaller0: entered allmulticast mode [ 97.480855][ T5989] tipc: Resetting bearer [ 97.525783][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24'. [ 97.606903][ T36] tipc: Resetting bearer [ 97.622996][ T6003] warning: `syz.3.20' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.646532][ T5988] tipc: Resetting bearer [ 97.886715][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'. [ 97.895921][ T6016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27'. [ 97.911549][ T6016] netlink: 'syz.0.27': attribute type 20 has an invalid length. [ 97.943569][ T6018] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.29'. [ 98.013390][ T6019] netlink: 56 bytes leftover after parsing attributes in process `syz.1.29'. [ 98.251956][ T6025] Cannot find add_set index 0 as target [ 98.383740][ T5897] tipc: Node number set to 3913391184 [ 99.025495][ T5988] tipc: Disabling bearer [ 99.050606][ T6018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.207972][ T6035] openvswitch: netlink: Missing key (keys=40, expected=80) [ 99.366743][ T6041] netlink: 'syz.3.38': attribute type 1 has an invalid length. [ 99.419414][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36'. [ 99.475159][ T6037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.36'. [ 99.654853][ T6042] team0: Port device team_slave_0 removed [ 100.105773][ T6073] syzkaller1: entered promiscuous mode [ 100.111311][ T6073] syzkaller1: entered allmulticast mode [ 101.006341][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.020199][ T6113] batadv_slave_1: entered promiscuous mode [ 101.047202][ T6113] batadv_slave_1: entered allmulticast mode [ 101.073560][ T6116] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.092575][ T6117] syzkaller0: entered promiscuous mode [ 101.125105][ T6117] syzkaller0: entered allmulticast mode [ 101.180116][ T6117] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 101.303973][ T6127] __nla_validate_parse: 2 callbacks suppressed [ 101.303994][ T6127] netlink: 24 bytes leftover after parsing attributes in process `syz.3.63'. [ 101.340879][ T6127] netlink: 28 bytes leftover after parsing attributes in process `syz.3.63'. [ 101.355483][ T6127] netlink: 'syz.3.63': attribute type 7 has an invalid length. [ 101.408621][ T6127] netlink: 'syz.3.63': attribute type 8 has an invalid length. [ 101.425668][ T6127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.63'. [ 101.475991][ T6135] netlink: 'syz.1.66': attribute type 7 has an invalid length. [ 101.501257][ T6137] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.667327][ T6142] netlink: 24 bytes leftover after parsing attributes in process `syz.1.66'. [ 101.682253][ T6147] netlink: 'syz.4.70': attribute type 1 has an invalid length. [ 101.690318][ T6144] netlink: 40 bytes leftover after parsing attributes in process `syz.3.69'. [ 101.715879][ T6144] xt_recent: Unsupported userspace flags (00000042) [ 101.940093][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'. [ 101.968072][ T6159] vlan2: entered allmulticast mode [ 101.975172][ T6159] ip6gretap0: entered allmulticast mode [ 102.000730][ T6157] netlink: 72 bytes leftover after parsing attributes in process `syz.2.72'. [ 102.009857][ T6157] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 102.232903][ T6169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.77'. [ 102.491422][ T6178] netlink: 84 bytes leftover after parsing attributes in process `syz.3.79'. [ 102.515782][ T6179] lo: entered allmulticast mode [ 102.533824][ T6179] lo: left allmulticast mode [ 102.547895][ T6178] netlink: 40 bytes leftover after parsing attributes in process `syz.3.79'. [ 104.296994][ T6236] xt_CT: No such helper "pptp" [ 105.864996][ T6313] xt_bpf: check failed: parse error [ 106.339464][ T6335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.401044][ T6340] __nla_validate_parse: 10 callbacks suppressed [ 106.401065][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 106.594272][ T6347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.138'. [ 106.638723][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a094800: rx timeout, send abort [ 106.875540][ T6365] netlink: 48 bytes leftover after parsing attributes in process `syz.4.142'. [ 107.139366][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029b05800: rx timeout, send abort [ 107.148009][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a094800: abort rx timeout. Force session deactivation [ 107.477412][ T6392] netlink: 'syz.4.149': attribute type 8 has an invalid length. [ 107.535199][ T6392] pim6reg527: entered allmulticast mode [ 107.560957][ T6392] netlink: 'syz.4.149': attribute type 11 has an invalid length. [ 107.647703][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029b05800: abort rx timeout. Force session deactivation [ 107.712971][ T6402] delete_channel: no stack [ 107.869124][ T6413] netlink: 'syz.2.156': attribute type 1 has an invalid length. [ 108.038341][ T6422] netlink: 'syz.2.156': attribute type 12 has an invalid length. [ 108.100350][ T6413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.156'. [ 108.636129][ T6453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.167'. [ 108.719082][ T6454] netlink: 11 bytes leftover after parsing attributes in process `syz.0.168'. [ 108.812468][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.171'. [ 108.833381][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.171'. [ 108.944623][ T6467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.173'. [ 108.966013][ T6468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.173'. [ 109.502203][ T6506] netlink: 'syz.1.182': attribute type 1 has an invalid length. [ 109.691231][ T6512] netlink: 'syz.4.183': attribute type 4 has an invalid length. [ 110.015606][ T6528] ieee802154 phy0 wpan0: encryption failed: -22 [ 110.674603][ T6556] netlink: 'syz.4.200': attribute type 10 has an invalid length. [ 110.682409][ T6556] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 110.697818][ T6556] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.928178][ T6567] netlink: 'syz.3.203': attribute type 1 has an invalid length. [ 110.957090][ T6562] syzkaller1: entered promiscuous mode [ 110.978227][ T6562] syzkaller1: entered allmulticast mode [ 111.265415][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 111.279019][ T6582] bond0: entered promiscuous mode [ 111.298094][ T6582] bond_slave_0: entered promiscuous mode [ 111.307938][ T6582] bond_slave_1: entered promiscuous mode [ 111.319212][ T6582] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 111.374941][ T6582] bond0: left promiscuous mode [ 111.387480][ T6582] bond_slave_0: left promiscuous mode [ 111.397860][ T6582] bond_slave_1: left promiscuous mode [ 111.501471][ T6588] vlan2: entered promiscuous mode [ 111.507939][ T6588] bond0: entered promiscuous mode [ 111.515277][ T6588] bond_slave_0: entered promiscuous mode [ 111.521422][ T6588] bond_slave_1: entered promiscuous mode [ 111.599686][ T6593] __nla_validate_parse: 8 callbacks suppressed [ 111.599705][ T6593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.211'. [ 111.607731][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.211'. [ 111.647645][ T6600] lo: entered allmulticast mode [ 111.652946][ T6600] lo: left allmulticast mode [ 111.743788][ T6603] netlink: 'syz.4.214': attribute type 4 has an invalid length. [ 111.783174][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.213'. [ 111.897483][ T6614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'. [ 112.213607][ T6628] netlink: 20 bytes leftover after parsing attributes in process `syz.0.220'. [ 112.294576][ T6631] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 112.394400][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.223'. [ 112.421379][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.223'. [ 112.440924][ T6639] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 112.786940][ T6651] netlink: 20 bytes leftover after parsing attributes in process `syz.2.228'. [ 113.321295][ T6681] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 113.489747][ T6691] ieee802154 phy1 wpan1: encryption failed: -22 [ 113.719398][ T6700] x_tables: duplicate underflow at hook 1 [ 113.877094][ T6711] netlink: 48 bytes leftover after parsing attributes in process `syz.0.247'. [ 114.032427][ T6714] netlink: 72 bytes leftover after parsing attributes in process `syz.1.248'. [ 114.096759][ T6714] team0: entered promiscuous mode [ 114.101980][ T6714] team_slave_0: entered promiscuous mode [ 114.108611][ T6714] team_slave_1: entered promiscuous mode [ 114.134926][ T6713] team0: left promiscuous mode [ 114.155718][ T6713] team_slave_0: left promiscuous mode [ 114.181952][ T6713] team_slave_1: left promiscuous mode [ 114.247218][ T10] IPVS: starting estimator thread 0... [ 114.265354][ T6716] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 114.331522][ T6716] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 114.362846][ T6728] IPVS: using max 26 ests per chain, 62400 per kthread [ 114.370491][ T6716] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 114.404792][ T6716] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 114.411967][ T6716] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 114.438240][ T6716] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 114.447515][ T6716] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 114.457095][ T6716] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 114.463151][ T5152] Bluetooth: hci0: command tx timeout [ 114.467116][ T6716] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 114.753640][ T6751] netlink: 'syz.2.258': attribute type 7 has an invalid length. [ 114.808361][ T6754] netlink: 'syz.2.258': attribute type 7 has an invalid length. [ 115.209780][ T6775] netem: unknown loss type 0 [ 115.247428][ T6775] netem: change failed [ 115.283352][ T6777] trusted_key: syz.1.266 sent an empty control message without MSG_MORE. [ 115.826033][ T10] IPVS: starting estimator thread 0... [ 115.877941][ T6809] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 115.944139][ T6808] IPVS: using max 27 ests per chain, 64800 per kthread [ 116.448572][ T6841] vlan2: entered allmulticast mode [ 116.485443][ T6841] erspan0: entered allmulticast mode [ 117.202340][ T6898] __nla_validate_parse: 7 callbacks suppressed [ 117.202359][ T6898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.296'. [ 117.244363][ T6897] hsr0: entered promiscuous mode [ 117.268752][ T6895] netlink: 40 bytes leftover after parsing attributes in process `syz.3.296'. [ 117.282080][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.294'. [ 117.627926][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d157800: rx timeout, send abort [ 118.123376][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d157000: rx timeout, send abort [ 118.142115][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d157800: abort rx timeout. Force session deactivation [ 118.640226][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d157000: abort rx timeout. Force session deactivation [ 119.722324][ T6898] hsr_slave_0: left promiscuous mode [ 119.728622][ T6898] hsr_slave_1: left promiscuous mode [ 120.047405][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d157c00: rx timeout, send abort [ 120.055959][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031d6ac00: rx timeout, send abort [ 120.064902][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d157c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 120.080058][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888031d6ac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 120.159985][ T6923] net_ratelimit: 24 callbacks suppressed [ 120.160005][ T6923] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 120.447090][ C1] Unknown status report in ack skb [ 120.593413][ T6941] netlink: 24 bytes leftover after parsing attributes in process `syz.4.309'. [ 120.604908][ T6940] netlink: 24 bytes leftover after parsing attributes in process `syz.4.309'. [ 120.652488][ T6940] vlan2: entered allmulticast mode [ 120.662097][ T6945] netlink: 45 bytes leftover after parsing attributes in process `syz.0.310'. [ 120.687637][ T6940] batadv0: entered allmulticast mode [ 120.790501][ T6949] netlink: 'syz.2.312': attribute type 3 has an invalid length. [ 120.832755][ T6949] netlink: 80 bytes leftover after parsing attributes in process `syz.2.312'. [ 121.182986][ T6963] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 121.267581][ T6969] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.318'. [ 121.695861][ T6985] tipc: Started in network mode [ 121.702491][ T6985] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 121.722920][ T6985] tipc: Enabled bearer , priority 10 [ 121.782012][ T6990] ÿ: renamed from ip6tnl0 (while UP) [ 121.887590][ T6994] xt_hashlimit: size too large, truncated to 1048576 [ 122.376246][ T7014] netlink: 'syz.0.332': attribute type 10 has an invalid length. [ 122.393610][ T7016] netlink: 'syz.2.333': attribute type 1 has an invalid length. [ 122.412749][ T7014] netlink: 40 bytes leftover after parsing attributes in process `syz.0.332'. [ 122.762869][ T2150] tipc: Node number set to 10136234 [ 123.096732][ T7049] netlink: 52 bytes leftover after parsing attributes in process `syz.4.341'. [ 123.207230][ T7053] netlink: 52 bytes leftover after parsing attributes in process `syz.4.341'. [ 123.464447][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.345'. [ 123.906227][ T7086] vlan1: entered promiscuous mode [ 123.923577][ T7078] netlink: 108 bytes leftover after parsing attributes in process `syz.4.348'. [ 123.972811][ T7078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.348'. [ 124.408906][ T7103] netlink: 'syz.1.355': attribute type 24 has an invalid length. [ 124.506853][ T7073] vlan1: left promiscuous mode [ 124.660503][ T7111] netlink: 104 bytes leftover after parsing attributes in process `syz.0.359'. [ 124.687855][ T7111] lo: entered allmulticast mode [ 124.717678][ T7111] dvmrp1: entered allmulticast mode [ 124.745048][ T7110] lo: left allmulticast mode [ 124.756804][ T7110] dvmrp1: left allmulticast mode [ 125.209849][ T7074] Cannot find set identified by id 0 to match [ 125.982134][ T7147] netlink: 24 bytes leftover after parsing attributes in process `syz.1.370'. [ 126.215450][ T7160] netlink: 'syz.2.374': attribute type 1 has an invalid length. [ 126.469809][ T7160] netlink: 24 bytes leftover after parsing attributes in process `syz.2.374'. [ 126.491158][ T7165] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 126.532815][ T7165] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 126.552857][ T7165] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 126.576339][ T7165] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 126.600259][ T7165] bond1: (slave geneve2): making interface the new active one [ 126.616347][ T7172] netlink: 32 bytes leftover after parsing attributes in process `syz.0.376'. [ 126.624532][ T7165] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 126.670414][ T7160] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.839936][ T7175] netlink: 'syz.0.377': attribute type 4 has an invalid length. [ 127.086312][ T7191] netlink: 'syz.0.380': attribute type 4 has an invalid length. [ 127.136509][ T7193] netlink: 'syz.0.380': attribute type 4 has an invalid length. [ 127.279080][ T7193] syz.0.380 (7193) used greatest stack depth: 18904 bytes left [ 127.652220][ T7205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.382'. [ 127.673721][ T7207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.381'. [ 128.150072][ T6922] Set syz1 is full, maxelem 65536 reached [ 128.710520][ T7242] netlink: 'syz.4.393': attribute type 1 has an invalid length. [ 128.768095][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.396'. [ 128.810635][ T7248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.396'. [ 128.850250][ T7250] netlink: 'syz.3.397': attribute type 64 has an invalid length. [ 128.877445][ T7250] netlink: 44 bytes leftover after parsing attributes in process `syz.3.397'. [ 128.979401][ T7257] netlink: 20 bytes leftover after parsing attributes in process `syz.0.400'. [ 129.046207][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.403'. [ 129.087375][ T7260] netlink: 12 bytes leftover after parsing attributes in process `syz.4.403'. [ 129.225805][ T7270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.405'. [ 129.259910][ T7270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.405'. [ 129.273793][ T7272] netlink: 'syz.4.403': attribute type 1 has an invalid length. [ 129.456671][ T7284] netlink: 'syz.4.410': attribute type 24 has an invalid length. [ 129.498127][ T7286] netlink: 'syz.2.409': attribute type 3 has an invalid length. [ 129.570436][ T7292] netlink: 'syz.0.412': attribute type 10 has an invalid length. [ 129.647555][ T7292] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.664800][ T7292] team0: entered promiscuous mode [ 129.671220][ T7292] team_slave_1: entered promiscuous mode [ 129.680579][ T7292] bond0: (slave team0): Enslaving as an active interface with an up link [ 130.421849][ T7340] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 130.450741][ T7340] Bluetooth: MGMT ver 1.23 [ 130.658845][ T7346] team0: Device bond0 is already an upper device of the team interface [ 131.306680][ T7397] validate_nla: 2 callbacks suppressed [ 131.306701][ T7397] netlink: 'syz.0.448': attribute type 1 has an invalid length. [ 131.424145][ T7400] xt_recent: Unsupported userspace flags (00000042) [ 131.976658][ T7432] netlink: 'syz.1.461': attribute type 1 has an invalid length. [ 132.093331][ T7428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.116820][ T7428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.128361][ T7428] bond0 (unregistering): Released all slaves [ 132.170244][ T7424] netlink: 'syz.2.459': attribute type 12 has an invalid length. [ 132.709702][ T7456] syzkaller0: entered promiscuous mode [ 132.716050][ T7456] syzkaller0: entered allmulticast mode [ 132.836169][ T7462] __nla_validate_parse: 13 callbacks suppressed [ 132.836195][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.470'. [ 134.639236][ T7483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.474'. [ 134.677203][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.476'. [ 134.997816][ T7523] netlink: 2 bytes leftover after parsing attributes in process `syz.0.486'. [ 135.027444][ T7523] netlink: 2 bytes leftover after parsing attributes in process `syz.0.486'. [ 135.048206][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.485'. [ 135.048492][ T7523] netlink: 2 bytes leftover after parsing attributes in process `syz.0.486'. [ 135.091797][ T7523] netlink: 2 bytes leftover after parsing attributes in process `syz.0.486'. [ 135.103638][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.484'. [ 135.145339][ T7523] netlink: 2 bytes leftover after parsing attributes in process `syz.0.486'. [ 135.226959][ T7532] netlink: 'syz.0.486': attribute type 2 has an invalid length. [ 135.617359][ T7549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.638479][ T7549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.656204][ T7549] bond0 (unregistering): Released all slaves [ 136.257810][ T7587] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 136.432403][ T7606] netlink: 'syz.0.508': attribute type 1 has an invalid length. [ 136.568676][ T7613] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 136.596569][ T7616] dccp_invalid_packet: pskb_may_pull failed [ 136.640257][ T7621] tipc: Enabled bearer , priority 10 [ 136.683362][ T7616] xt_CT: You must specify a L4 protocol and not use inversions on it [ 136.885446][ T7632] xt_CT: You must specify a L4 protocol and not use inversions on it [ 137.520841][ T7666] netlink: 'syz.4.526': attribute type 21 has an invalid length. [ 137.529508][ T7666] netlink: 'syz.4.526': attribute type 1 has an invalid length. [ 137.807059][ T7681] sctp: [Deprecated]: syz.0.531 (pid 7681) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.807059][ T7681] Use struct sctp_sack_info instead [ 137.867452][ T7684] Bluetooth: MGMT ver 1.23 [ 137.880616][ T7681] sctp: [Deprecated]: syz.0.531 (pid 7681) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.880616][ T7681] Use struct sctp_sack_info instead [ 137.935131][ T7696] FAULT_INJECTION: forcing a failure. [ 137.935131][ T7696] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 137.981258][ T7696] CPU: 1 UID: 0 PID: 7696 Comm: syz.2.532 Not tainted 6.14.0-syzkaller-12504-g8bc251e5d874 #0 PREEMPT(full) [ 137.981289][ T7696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 137.981306][ T7696] Call Trace: [ 137.981314][ T7696] [ 137.981323][ T7696] dump_stack_lvl+0x241/0x360 [ 137.981375][ T7696] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.981405][ T7696] ? __pfx__printk+0x10/0x10 [ 137.981447][ T7696] should_fail_ex+0x424/0x570 [ 137.981484][ T7696] _copy_from_iter+0x211/0x1c70 [ 137.981516][ T7696] ? alloc_pages_mpol+0x4e6/0x690 [ 137.981550][ T7696] ? __pfx__copy_from_iter+0x10/0x10 [ 137.981581][ T7696] ? set_page_refcounted+0xa1/0x1e0 [ 137.981611][ T7696] ? alloc_pages_noprof+0x136/0x190 [ 137.981636][ T7696] ? page_copy_sane+0x46/0x260 [ 137.981663][ T7696] copy_page_from_iter+0x7a/0x100 [ 137.981692][ T7696] tun_get_user+0x1f6c/0x47c0 [ 137.981730][ T7696] ? tun_get_user+0x852/0x47c0 [ 137.981777][ T7696] ? aa_file_perm+0x139/0xf60 [ 137.981807][ T7696] ? aa_file_perm+0x3f1/0xf60 [ 137.981834][ T7696] ? __pfx_tun_get_user+0x10/0x10 [ 137.981882][ T7696] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 137.981921][ T7696] ? tun_get+0x1e/0x2f0 [ 137.981950][ T7696] ? tun_get+0x1e/0x2f0 [ 137.982023][ T7696] ? tun_get+0x27d/0x2f0 [ 137.982053][ T7696] tun_chr_write_iter+0x10d/0x1f0 [ 137.982086][ T7696] vfs_write+0x70f/0xd10 [ 137.982117][ T7696] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 137.982148][ T7696] ? __pfx_vfs_write+0x10/0x10 [ 137.982174][ T7696] ? __fget_files+0x2a/0x420 [ 137.982196][ T7696] ? __fget_files+0x2a/0x420 [ 137.982223][ T7696] ksys_write+0x19d/0x2d0 [ 137.982248][ T7696] ? __pfx_ksys_write+0x10/0x10 [ 137.982277][ T7696] ? do_syscall_64+0xb6/0x230 [ 137.982302][ T7696] do_syscall_64+0xf3/0x230 [ 137.982323][ T7696] ? clear_bhb_loop+0x45/0xa0 [ 137.982347][ T7696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.982366][ T7696] RIP: 0033:0x7f2ca678bc1f [ 137.982391][ T7696] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 137.982407][ T7696] RSP: 002b:00007f2ca756e000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 137.982436][ T7696] RAX: ffffffffffffffda RBX: 00007f2ca69a6080 RCX: 00007f2ca678bc1f [ 137.982452][ T7696] RDX: 000000000000005e RSI: 00002000000002c0 RDI: 00000000000000c8 [ 137.982464][ T7696] RBP: 00007f2ca756e090 R08: 0000000000000000 R09: 0000000000000000 [ 137.982477][ T7696] R10: 000000000000005e R11: 0000000000000293 R12: 0000000000000001 [ 137.982489][ T7696] R13: 0000000000000001 R14: 00007f2ca69a6080 R15: 00007ffc1ed68a78 [ 137.982520][ T7696] [ 138.319005][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.398613][ T7700] __nla_validate_parse: 154 callbacks suppressed [ 138.398634][ T7700] netlink: 40 bytes leftover after parsing attributes in process `syz.0.536'. [ 138.808018][ T7730] xt_l2tp: v2 tid > 0xffff: 150994944 [ 138.978809][ T7743] netlink: 16 bytes leftover after parsing attributes in process `syz.4.548'. [ 139.308145][ T7761] netlink: 24 bytes leftover after parsing attributes in process `syz.0.553'. [ 139.579142][ T7775] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 139.782253][ T7785] tipc: Started in network mode [ 139.788015][ T7785] tipc: Node identity 1e247de2f8a9, cluster identity 4711 [ 139.798257][ T7785] tipc: Enabled bearer , priority 0 [ 139.807194][ T7785] syzkaller0: entered promiscuous mode [ 139.817058][ T7785] syzkaller0: entered allmulticast mode [ 139.856432][ T7785] tipc: Resetting bearer [ 140.060210][ T7784] tipc: Resetting bearer [ 140.113589][ T7784] tipc: Disabling bearer [ 140.411185][ T7813] veth0: entered promiscuous mode [ 140.635095][ T7813] veth0: left promiscuous mode [ 140.918532][ T7841] netlink: 'syz.1.575': attribute type 8 has an invalid length. [ 140.952607][ T7841] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 141.183185][ T7851] batman_adv: batadv0: Adding interface: gretap1 [ 141.198206][ T7851] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 141.709651][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.589'. [ 141.967584][ T7898] netlink: 80 bytes leftover after parsing attributes in process `syz.4.591'. [ 142.297360][ T7887] openvswitch: netlink: Missing key (keys=40, expected=100) [ 142.304513][ T7905] netlink: 2 bytes leftover after parsing attributes in process `syz.4.593'. [ 142.365191][ T7908] netlink: 'syz.2.594': attribute type 2 has an invalid length. [ 142.635394][ T7912] netlink: 'syz.1.595': attribute type 4 has an invalid length. [ 142.840398][ T7924] gtp0: entered promiscuous mode [ 142.844954][ T7920] syz.0.598: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 142.846328][ T7924] gtp0: entered allmulticast mode [ 142.867786][ T7920] CPU: 1 UID: 0 PID: 7920 Comm: syz.0.598 Not tainted 6.14.0-syzkaller-12504-g8bc251e5d874 #0 PREEMPT(full) [ 142.867818][ T7920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.867831][ T7920] Call Trace: [ 142.867840][ T7920] [ 142.867849][ T7920] dump_stack_lvl+0x241/0x360 [ 142.867889][ T7920] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.867919][ T7920] ? __pfx__printk+0x10/0x10 [ 142.867947][ T7920] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 142.867980][ T7920] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 142.868010][ T7920] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 142.868044][ T7920] warn_alloc+0x27c/0x410 [ 142.868068][ T7920] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 142.868091][ T7920] ? __pfx_warn_alloc+0x10/0x10 [ 142.868114][ T7920] ? kasan_save_track+0x3f/0x80 [ 142.868136][ T7920] ? __kasan_kmalloc+0x9d/0xb0 [ 142.868162][ T7920] ? xsk_setsockopt+0x449/0x840 [ 142.868192][ T7920] ? do_sock_setsockopt+0x3b1/0x710 [ 142.868222][ T7920] ? __x64_sys_setsockopt+0x1ee/0x280 [ 142.868251][ T7920] ? do_syscall_64+0xf3/0x230 [ 142.868270][ T7920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.868302][ T7920] __vmalloc_node_range_noprof+0x128/0x1390 [ 142.868356][ T7920] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 142.868383][ T7920] ? __kasan_kmalloc+0x9d/0xb0 [ 142.868414][ T7920] vmalloc_user_noprof+0x74/0x80 [ 142.868435][ T7920] ? xskq_create+0xb6/0x170 [ 142.868464][ T7920] xskq_create+0xb6/0x170 [ 142.868498][ T7920] xsk_init_queue+0xa1/0x100 [ 142.868533][ T7920] xsk_setsockopt+0x449/0x840 [ 142.868566][ T7920] ? __pfx_xsk_setsockopt+0x10/0x10 [ 142.868595][ T7920] ? __lock_acquire+0xad5/0xd80 [ 142.868617][ T7920] ? __pfx_aa_sk_perm+0x10/0x10 [ 142.868649][ T7920] ? aa_sock_opt_perm+0x79/0x120 [ 142.868684][ T7920] ? __pfx_xsk_setsockopt+0x10/0x10 [ 142.868722][ T7920] do_sock_setsockopt+0x3b1/0x710 [ 142.868762][ T7920] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 142.868791][ T7920] ? __fget_files+0x2a/0x420 [ 142.868816][ T7920] ? __fget_files+0x39d/0x420 [ 142.868833][ T7920] ? __fget_files+0x2a/0x420 [ 142.868862][ T7920] __x64_sys_setsockopt+0x1ee/0x280 [ 142.868902][ T7920] do_syscall_64+0xf3/0x230 [ 142.868925][ T7920] ? clear_bhb_loop+0x45/0xa0 [ 142.868952][ T7920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.868973][ T7920] RIP: 0033:0x7fcae5b8d169 [ 142.868992][ T7920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.869010][ T7920] RSP: 002b:00007fcae69f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 142.869032][ T7920] RAX: ffffffffffffffda RBX: 00007fcae5da5fa0 RCX: 00007fcae5b8d169 [ 142.869049][ T7920] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 142.869063][ T7920] RBP: 00007fcae5c0e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 142.869076][ T7920] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.869089][ T7920] R13: 0000000000000000 R14: 00007fcae5da5fa0 R15: 00007ffcf133b4f8 [ 142.869123][ T7920] [ 142.869132][ T7920] Mem-Info: [ 143.265854][ T7920] active_anon:4775 inactive_anon:0 isolated_anon:0 [ 143.265854][ T7920] active_file:1290 inactive_file:38318 isolated_file:0 [ 143.265854][ T7920] unevictable:768 dirty:122 writeback:0 [ 143.265854][ T7920] slab_reclaimable:9878 slab_unreclaimable:99612 [ 143.265854][ T7920] mapped:29635 shmem:1435 pagetables:874 [ 143.265854][ T7920] sec_pagetables:0 bounce:0 [ 143.265854][ T7920] kernel_misc_reclaimable:0 [ 143.265854][ T7920] free:1338101 free_pcp:519 free_cma:0 [ 143.363022][ T7920] Node 0 active_anon:19100kB inactive_anon:0kB active_file:5160kB inactive_file:153196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118340kB dirty:488kB writeback:0kB shmem:4204kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11148kB pagetables:3596kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 143.443947][ T2150] IPVS: starting estimator thread 0... [ 143.529261][ T7920] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 143.602799][ T7948] IPVS: using max 28 ests per chain, 67200 per kthread [ 143.623039][ T7920] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 143.668459][ T7920] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 143.739930][ T7920] Node 0 DMA32 free:1431592kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:22492kB inactive_anon:0kB active_file:5160kB inactive_file:153096kB unevictable:1536kB writepending:488kB present:3129332kB managed:2547292kB mlocked:0kB bounce:0kB free_pcp:2588kB local_pcp:1256kB free_cma:0kB [ 143.865417][ T7920] lowmem_reserve[]: 0 0 0 0 0 [ 143.878074][ T7920] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 143.924171][ T7920] lowmem_reserve[]: 0 0 0 0 0 [ 143.929094][ T7920] Node 1 Normal free:3902760kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 143.964581][ T7920] lowmem_reserve[]: 0 0 0 0 0 [ 143.969553][ T7920] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 143.986558][ T7920] Node 0 DMA32: 2*4kB (UE) 214*8kB (UE) 355*16kB (U) 91*32kB (UME) 153*64kB (UME) 101*128kB (UME) 30*256kB (UME) 12*512kB (UME) 16*1024kB (UME) 8*2048kB (UME) 329*4096kB (M) = 1427208kB [ 144.015766][ T7964] netlink: 48 bytes leftover after parsing attributes in process `syz.3.608'. [ 144.042751][ T7920] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 144.072225][ T7920] Node 1 Normal: 250*4kB (UME) 62*8kB (UME) 59*16kB (UME) 223*32kB (UME) 105*64kB (UME) 35*128kB (UME) 18*256kB (UME) 13*512kB (UME) 4*1024kB (UME) 4*2048kB (UE) 942*4096kB (M) = 3902760kB [ 144.153016][ T7920] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 144.192733][ T7920] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 144.218202][ T7920] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 144.232342][ T7920] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 144.255702][ T7920] 43897 total pagecache pages [ 144.260463][ T7920] 0 pages in swap cache [ 144.265217][ T7920] Free swap = 124996kB [ 144.286707][ T7920] Total swap = 124996kB [ 144.291023][ T7920] 2097051 pages RAM [ 144.296415][ T7920] 0 pages HighMem/MovableOnly [ 144.301644][ T7920] 428570 pages reserved [ 144.306153][ T7920] 0 pages cma reserved [ 144.768442][ T7996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.617'. [ 144.976648][ T8003] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 145.027191][ T8009] bridge0: port 3(batadv1) entered blocking state [ 145.039237][ T8009] bridge0: port 3(batadv1) entered disabled state [ 145.051638][ T8009] batadv1: entered allmulticast mode [ 145.072193][ T8009] batadv1: entered promiscuous mode [ 145.240145][ T8021] sctp: [Deprecated]: syz.0.624 (pid 8021) Use of int in maxseg socket option. [ 145.240145][ T8021] Use struct sctp_assoc_value instead [ 145.260301][ T8021] tunl0: entered promiscuous mode [ 145.288869][ T8021] netlink: 'syz.0.624': attribute type 3 has an invalid length. [ 145.298794][ T8021] netlink: 9 bytes leftover after parsing attributes in process `syz.0.624'. [ 145.330420][ T8023] netlink: 64 bytes leftover after parsing attributes in process `syz.4.625'. [ 145.419923][ T8026] netlink: 'syz.0.626': attribute type 39 has an invalid length. [ 145.534932][ T83] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 145.544695][ T83] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 145.909737][ T8041] netlink: 'syz.1.630': attribute type 13 has an invalid length. [ 145.928619][ T8041] netlink: 40 bytes leftover after parsing attributes in process `syz.1.630'. [ 145.956822][ T8041] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 146.260021][ T8056] netlink: 2 bytes leftover after parsing attributes in process `syz.1.634'. [ 146.573011][ T8072] net veth1_virt_wifi : renamed from virt_wifi0 (while UP) [ 147.205457][ T5152] Bluetooth: hci4: link tx timeout [ 147.210872][ T5152] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.291154][ T5846] Bluetooth: hci4: link tx timeout [ 147.296744][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.314681][ T5846] Bluetooth: hci4: link tx timeout [ 147.320448][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.616484][ T5846] Bluetooth: hci4: link tx timeout [ 147.621674][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.635608][ T5846] Bluetooth: hci4: link tx timeout [ 147.640870][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.669076][ T8118] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.646'. [ 147.767187][ T8124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.647'. [ 147.894841][ T8124] netlink: 24 bytes leftover after parsing attributes in process `syz.1.647'. [ 148.004404][ T8137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.650'. [ 148.189255][ T8147] nbd: must specify at least one socket [ 148.219462][ T8147] nbd: must specify at least one socket [ 148.629573][ T8175] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 148.633613][ T5846] Bluetooth: hci4: link tx timeout [ 148.643702][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 148.658931][ T8175] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 148.817908][ T5846] Bluetooth: hci4: link tx timeout [ 148.823729][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 148.865768][ T8183] bridge0: port 3(gretap0) entered blocking state [ 148.872969][ T8183] bridge0: port 3(gretap0) entered disabled state [ 148.880916][ T5846] Bluetooth: hci4: link tx timeout [ 148.886371][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 148.894581][ T8183] gretap0: entered allmulticast mode [ 148.902450][ T8183] gretap0: entered promiscuous mode [ 148.909814][ T8183] bridge0: port 3(gretap0) entered blocking state [ 148.917324][ T8183] bridge0: port 3(gretap0) entered forwarding state [ 149.115339][ T8188] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.148693][ T8188] bond2: entered promiscuous mode [ 149.160785][ T8188] bond0: (slave bond2): Enslaving as an active interface with an up link [ 149.263130][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 149.304454][ T5846] Bluetooth: hci4: link tx timeout [ 149.956459][ T8218] ip6gre1: entered allmulticast mode [ 150.450918][ T8233] __nla_validate_parse: 4 callbacks suppressed [ 150.450934][ T8233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.676'. [ 150.579554][ T8216] dccp_close: ABORT with 32 bytes unread [ 150.755462][ T8238] delete_channel: no stack [ 151.361943][ T8252] netlink: 192 bytes leftover after parsing attributes in process `syz.0.681'. [ 152.282484][ T8277] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 152.436083][ T8286] netlink: 'syz.4.692': attribute type 11 has an invalid length. [ 152.475946][ T8286] netlink: 20 bytes leftover after parsing attributes in process `syz.4.692'. [ 153.091273][ T8332] openvswitch: netlink: Missing key (keys=40, expected=80) [ 153.145418][ T8336] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = 1, id = 0 [ 153.334012][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.708'. [ 153.355150][ T8341] netlink: 20 bytes leftover after parsing attributes in process `syz.3.707'. [ 154.173784][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.720'. [ 154.193071][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.720'. [ 154.289747][ T5897] IPVS: starting estimator thread 0... [ 154.423159][ T8387] IPVS: using max 28 ests per chain, 67200 per kthread [ 154.765771][ T8405] vlan2: entered promiscuous mode [ 154.792092][ T8405] vlan2: entered allmulticast mode [ 154.792367][ T8410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.728'. [ 154.864580][ T8410] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.050806][ T8410] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.422552][ T8431] xt_hashlimit: size too large, truncated to 1048576 [ 155.517086][ T8436] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 155.566897][ T8431] syz.2.734: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 155.652291][ T8431] CPU: 0 UID: 0 PID: 8431 Comm: syz.2.734 Not tainted 6.14.0-syzkaller-12504-g8bc251e5d874 #0 PREEMPT(full) [ 155.652321][ T8431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 155.652333][ T8431] Call Trace: [ 155.652341][ T8431] [ 155.652350][ T8431] dump_stack_lvl+0x241/0x360 [ 155.652388][ T8431] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.652417][ T8431] ? __pfx__printk+0x10/0x10 [ 155.652445][ T8431] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 155.652476][ T8431] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 155.652503][ T8431] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 155.652536][ T8431] warn_alloc+0x27c/0x410 [ 155.652564][ T8431] ? __pfx_warn_alloc+0x10/0x10 [ 155.652593][ T8431] ? htable_create+0x10c/0x890 [ 155.652620][ T8431] ? __get_vm_area_node+0x1c8/0x2d0 [ 155.652653][ T8431] ? __get_vm_area_node+0x25c/0x2d0 [ 155.652689][ T8431] __vmalloc_node_range_noprof+0x634/0x1390 [ 155.652742][ T8431] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 155.652763][ T8431] ? __kasan_kmalloc_large+0x1a/0xa0 [ 155.652797][ T8431] ? htable_create+0x10c/0x890 [ 155.652827][ T8431] __kvmalloc_node_noprof+0x3b2/0x5a0 [ 155.652859][ T8431] ? htable_create+0x10c/0x890 [ 155.652886][ T8431] ? htable_create+0x10c/0x890 [ 155.652914][ T8431] ? hashlimit_pernet+0x23/0x240 [ 155.652948][ T8431] htable_create+0x10c/0x890 [ 155.652985][ T8431] hashlimit_mt_check_common+0x763/0xa50 [ 155.653033][ T8431] hashlimit_mt_check_v1+0x2ec/0x550 [ 155.653066][ T8431] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 155.653099][ T8431] ? xt_find_match+0x1e5/0x240 [ 155.653130][ T8431] ? __mutex_unlock_slowpath+0x229/0x800 [ 155.653158][ T8431] xt_check_match+0x36a/0xa40 [ 155.653189][ T8431] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 155.653213][ T8431] ? __pfx_xt_check_match+0x10/0x10 [ 155.653256][ T8431] ? xt_find_match+0x1e5/0x240 [ 155.653292][ T8431] translate_table+0x1721/0x24b0 [ 155.653317][ T8431] ? __x64_sys_setsockopt+0x1ee/0x280 [ 155.653346][ T8431] ? do_syscall_64+0xf3/0x230 [ 155.653366][ T8431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.653418][ T8431] ? __pfx_translate_table+0x10/0x10 [ 155.653474][ T8431] ? copy_from_sockptr_offset+0x60/0xb0 [ 155.653504][ T8431] do_ip6t_set_ctl+0xe53/0x1270 [ 155.653537][ T8431] ? __pfx___mutex_trylock_common+0x10/0x10 [ 155.653567][ T8431] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 155.653611][ T8431] ? __mutex_unlock_slowpath+0x229/0x800 [ 155.653645][ T8431] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 155.653672][ T8431] ? futex_wake+0x525/0x5d0 [ 155.653704][ T8431] nf_setsockopt+0x295/0x2c0 [ 155.653740][ T8431] rawv6_setsockopt+0x2b3/0x6d0 [ 155.653773][ T8431] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 155.653804][ T8431] ? aa_sock_opt_perm+0x79/0x120 [ 155.653832][ T8431] ? sock_common_setsockopt+0x37/0xc0 [ 155.653862][ T8431] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 155.653888][ T8431] do_sock_setsockopt+0x3b1/0x710 [ 155.653927][ T8431] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 155.653956][ T8431] ? __fget_files+0x2a/0x420 [ 155.653979][ T8431] ? __fget_files+0x39d/0x420 [ 155.653997][ T8431] ? __fget_files+0x2a/0x420 [ 155.654033][ T8431] __x64_sys_setsockopt+0x1ee/0x280 [ 155.654073][ T8431] do_syscall_64+0xf3/0x230 [ 155.654096][ T8431] ? clear_bhb_loop+0x45/0xa0 [ 155.654120][ T8431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.654140][ T8431] RIP: 0033:0x7f2ca678d169 [ 155.654159][ T8431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.654176][ T8431] RSP: 002b:00007f2ca758f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 155.654198][ T8431] RAX: ffffffffffffffda RBX: 00007f2ca69a5fa0 RCX: 00007f2ca678d169 [ 155.654213][ T8431] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 155.654226][ T8431] RBP: 00007f2ca680e2a0 R08: 00000000000004c0 R09: 0000000000000000 [ 155.654239][ T8431] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 155.654252][ T8431] R13: 0000000000000000 R14: 00007f2ca69a5fa0 R15: 00007ffc1ed68a78 [ 155.654284][ T8431] [ 156.124188][ T8431] Mem-Info: [ 156.127366][ T8431] active_anon:4797 inactive_anon:0 isolated_anon:0 [ 156.127366][ T8431] active_file:1290 inactive_file:38324 isolated_file:0 [ 156.127366][ T8431] unevictable:768 dirty:15 writeback:0 [ 156.127366][ T8431] slab_reclaimable:9953 slab_unreclaimable:100194 [ 156.127366][ T8431] mapped:29585 shmem:1442 pagetables:824 [ 156.127366][ T8431] sec_pagetables:0 bounce:0 [ 156.127366][ T8431] kernel_misc_reclaimable:0 [ 156.127366][ T8431] free:1327204 free_pcp:8662 free_cma:0 [ 156.276986][ T8431] Node 0 active_anon:19048kB inactive_anon:0kB active_file:5160kB inactive_file:153232kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114044kB dirty:100kB writeback:0kB shmem:4232kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10984kB pagetables:3288kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 156.311710][ T8431] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 156.344605][ T8431] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 156.371921][ T8431] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 156.378516][ T8431] Node 0 DMA32 free:1424184kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:18940kB inactive_anon:0kB active_file:5160kB inactive_file:153132kB unevictable:1536kB writepending:100kB present:3129332kB managed:2547292kB mlocked:0kB bounce:0kB free_pcp:8420kB local_pcp:872kB free_cma:0kB [ 156.409156][ T8431] lowmem_reserve[]: 0 0 0 0 0 [ 156.416647][ T8431] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 156.443475][ T8431] lowmem_reserve[]: 0 0 0 0 0 [ 156.448894][ T8431] Node 1 Normal free:3902760kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 156.478851][ T8431] lowmem_reserve[]: 0 0 0 0 0 [ 156.483832][ T8431] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 156.496797][ T8431] Node 0 DMA32: 864*4kB (UM) 357*8kB (UME) 426*16kB (UME) 272*32kB (UME) 94*64kB (UM) 143*128kB (UME) 41*256kB (UME) 20*512kB (UME) 12*1024kB (UME) 4*2048kB (ME) 328*4096kB (M) = 1430856kB [ 156.584184][ T8431] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 156.612984][ T8431] Node 1 Normal: 250*4kB (UME) 62*8kB (UME) 59*16kB (UME) 223*32kB (UME) 105*64kB (UME) 35*128kB (UME) 18*256kB (UME) 13*512kB (UME) 4*1024kB (UME) 4*2048kB (UE) 942*4096kB (M) = 3902760kB [ 156.662860][ T8431] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 156.730298][ T8431] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 156.790287][ T8431] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 156.801388][ T8473] xt_HMARK: proto mask must be zero with L3 mode [ 156.822583][ T8476] bridge0: port 3(gretap0) entered blocking state [ 156.835224][ T8431] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 156.853470][ T8476] bridge0: port 3(gretap0) entered disabled state [ 156.870920][ T8431] 41059 total pagecache pages [ 156.883246][ T8476] gretap0: entered allmulticast mode [ 156.893027][ T8431] 0 pages in swap cache [ 156.897229][ T8431] Free swap = 124996kB [ 156.901412][ T8431] Total swap = 124996kB [ 156.917160][ T8476] gretap0: entered promiscuous mode [ 156.943330][ T8476] bridge0: port 3(gretap0) entered blocking state [ 156.949901][ T8476] bridge0: port 3(gretap0) entered listening state [ 156.961751][ T8431] 2097051 pages RAM [ 156.970822][ T8431] 0 pages HighMem/MovableOnly [ 156.979803][ T8431] 428570 pages reserved [ 156.984111][ T8431] 0 pages cma reserved [ 157.284098][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.752'. [ 157.320513][ T8497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.752'. [ 157.496401][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.755'. [ 158.272574][ T8551] netlink: 48 bytes leftover after parsing attributes in process `syz.4.766'. [ 158.278370][ T8554] netlink: 'syz.0.765': attribute type 4 has an invalid length. [ 158.301426][ T8551] netlink: 'syz.4.766': attribute type 1 has an invalid length. [ 158.346881][ T8551] netlink: 'syz.4.766': attribute type 4 has an invalid length. [ 158.384468][ T8551] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.766'. [ 159.171188][ T8591] netlink: zone id is out of range [ 159.209833][ T8591] netlink: del zone limit has 4 unknown bytes [ 159.326535][ T8591] netlink: 'syz.0.777': attribute type 1 has an invalid length. [ 159.521764][ T8609] IPVS: set_ctl: invalid protocol: 98 10.1.1.2:20003 [ 159.807088][ T8630] netlink: 16 bytes leftover after parsing attributes in process `syz.0.783'. [ 159.923527][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.783'. [ 159.941763][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034635800: rx timeout, send abort [ 160.352272][ T8656] xt_HMARK: proto mask must be zero with L3 mode [ 160.382492][ T8655] openvswitch: netlink: Key type 30 is not supported [ 160.441871][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034634400: rx timeout, send abort [ 160.450512][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034635800: abort rx timeout. Force session deactivation [ 160.547129][ T8662] netlink: 4368 bytes leftover after parsing attributes in process `syz.0.791'. [ 160.612578][ T8661] netlink: 4368 bytes leftover after parsing attributes in process `syz.0.791'. [ 160.950236][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034634400: abort rx timeout. Force session deactivation [ 161.046322][ T8686] tipc: New replicast peer: 255.255.255.255 [ 161.075641][ T8686] tipc: Enabled bearer , priority 10 [ 161.104731][ T8686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.797'. [ 161.131728][ T8686] tipc: Disabling bearer [ 161.132434][ T8691] IPVS: length: 76 != 24 [ 161.150501][ T8686] netlink: 'syz.2.797': attribute type 2 has an invalid length. [ 161.586766][ T8714] sctp: [Deprecated]: syz.1.805 (pid 8714) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.586766][ T8714] Use struct sctp_sack_info instead [ 161.753907][ T8722] x_tables: duplicate underflow at hook 1 [ 161.995366][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.023456][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.278867][ T8748] vlan3: entered allmulticast mode [ 162.300183][ T8748] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 162.617819][ T8765] __nla_validate_parse: 5 callbacks suppressed [ 162.617840][ T8765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.826'. [ 162.687994][ T8768] netlink: 'syz.1.826': attribute type 29 has an invalid length. [ 162.714986][ T8768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.826'. [ 163.141079][ T8791] netlink: 16 bytes leftover after parsing attributes in process `syz.2.833'. [ 163.211173][ T8793] netlink: 'syz.4.832': attribute type 1 has an invalid length. [ 163.230023][ T8793] netlink: 224 bytes leftover after parsing attributes in process `syz.4.832'. [ 163.392487][ T8759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.872443][ T8821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.841'. [ 164.313117][ T8842] netlink: 76 bytes leftover after parsing attributes in process `syz.2.846'. [ 164.329710][ T8840] tipc: Started in network mode [ 164.336781][ T8842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.846'. [ 164.341050][ T8840] tipc: Node identity 36949dc84d71, cluster identity 4711 [ 164.358023][ T8840] tipc: Enabled bearer , priority 0 [ 164.367347][ T8842] netlink: 'syz.2.846': attribute type 1 has an invalid length. [ 164.375662][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.846'. [ 164.395958][ T8840] tipc: Resetting bearer [ 164.420634][ T8839] tipc: Disabling bearer [ 164.613501][ T8864] netlink: 'syz.0.852': attribute type 10 has an invalid length. [ 164.622349][ T8864] veth0_vlan: entered allmulticast mode [ 164.726554][ T8864] veth0_vlan: left promiscuous mode [ 164.738077][ T8864] veth0_vlan: entered promiscuous mode [ 164.772321][ T8864] team0: Device veth0_vlan failed to register rx_handler [ 165.148091][ T8881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.856'. [ 165.200494][ T8881] netlink: 44 bytes leftover after parsing attributes in process `syz.0.856'. [ 165.209700][ T8882] SET target dimension over the limit! [ 165.234198][ T8881] netlink: 'syz.0.856': attribute type 5 has an invalid length. [ 165.251217][ T8870] netlink: 'syz.3.854': attribute type 1 has an invalid length. [ 165.282368][ T8870] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 165.290074][ T8870] IPv6: NLM_F_CREATE should be set when creating new route [ 165.418808][ T8892] netlink: 'syz.0.860': attribute type 1 has an invalid length. [ 165.605988][ T8892] 8021q: adding VLAN 0 to HW filter on device bond3 [ 166.084416][ T8920] xt_bpf: check failed: parse error [ 166.184019][ T8920] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 166.718158][ T8943] netlink: 'syz.0.876': attribute type 1 has an invalid length. [ 167.138367][ T8956] netlink: 'syz.3.881': attribute type 33 has an invalid length. [ 167.455435][ T8986] bridge0: port 3(gretap0) entered disabled state [ 167.499354][ T8993] 0ªî{X¹¦: renamed from gretap0 [ 167.558329][ T8993] bridge0: port 3(30ªî{X¹¦) entered blocking state [ 167.565294][ T8993] bridge0: port 3(30ªî{X¹¦) entered forwarding state [ 167.580169][ T8993] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 167.778861][ T9008] __nla_validate_parse: 15 callbacks suppressed [ 167.778884][ T9008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.894'. [ 167.815281][ T9008] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 167.969857][ T9019] ieee802154 phy1 wpan1: encryption failed: -22 [ 168.027726][ T9029] netlink: 72 bytes leftover after parsing attributes in process `syz.1.901'. [ 168.040672][ T9024] IPVS: length: 20 != 8 [ 168.273134][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.904'. [ 168.305224][ T9036] veth1_to_hsr: entered promiscuous mode [ 168.516278][ T9052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.907'. [ 168.547283][ T9033] veth1_to_hsr: left promiscuous mode [ 168.632016][ T9063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.910'. [ 168.721854][ T9071] tap0: tun_chr_ioctl cmd 1074025678 [ 168.733504][ T9071] tap0: group set to 0 [ 169.099099][ T9079] netlink: 92 bytes leftover after parsing attributes in process `syz.2.914'. [ 169.113247][ T9079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.914'. [ 169.183165][ T9079] netlink: 20 bytes leftover after parsing attributes in process `syz.2.914'. [ 169.442370][ T9101] netlink: 32 bytes leftover after parsing attributes in process `syz.4.919'. [ 170.007313][ T9120] x_tables: duplicate underflow at hook 3 [ 170.034366][ T9120] netlink: 16 bytes leftover after parsing attributes in process `syz.0.926'. [ 170.324193][ T9137] IPVS: Error connecting to the multicast addr [ 170.605593][ T9155] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 171.041680][ T9174] x_tables: unsorted entry at hook 2 [ 171.425370][ T9190] netlink: 'syz.2.948': attribute type 1 has an invalid length. [ 171.837521][ T9214] IPVS: stopping backup sync thread 9217 ... [ 171.844503][ T9217] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 3, id = 0 [ 172.063631][ C1] bridge0: port 3(gretap0) entered learning state [ 172.783715][ T9252] netlink: 'syz.4.963': attribute type 10 has an invalid length. [ 172.793915][ T9252] veth0_macvtap: left promiscuous mode [ 172.845476][ T9255] ieee802154 phy1 wpan1: encryption failed: -22 [ 173.108206][ T9261] __nla_validate_parse: 6 callbacks suppressed [ 173.108229][ T9261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.966'. [ 173.152835][ T9261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.966'. [ 173.506643][ T9288] netlink: 'syz.4.972': attribute type 4 has an invalid length. [ 173.847800][ T9309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.980'. [ 173.904341][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.982'. [ 173.959808][ T9313] netlink: 60 bytes leftover after parsing attributes in process `syz.1.982'. [ 174.046362][ T9309] team0: Port device team_slave_0 removed [ 174.072203][ T9315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.982'. [ 174.084130][ T9317] netlink: 20 bytes leftover after parsing attributes in process `syz.2.983'. [ 174.096095][ T9315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.982'. [ 174.345605][ T9328] netlink: 152 bytes leftover after parsing attributes in process `syz.1.985'. [ 174.557687][ T9338] Driver unsupported XDP return value 0 on prog (id 204) dev N/A, expect packet loss! [ 174.725727][ T9346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.990'. [ 174.767545][ T9353] netlink: 'syz.4.995': attribute type 1 has an invalid length. [ 174.770085][ T30] audit: type=1800 audit(1743800991.047:2): pid=9354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.994" name=45CB390407251FA4188CC219BFFC053ED5A81F25EF0D0F976994AFB2C8BF6AE44A44659AF5EBC90174AD57D7D2BBF87F229A90AB05087FBD84ADD787AACFFDD153137BF89BCF9532CE96AEF1DC32D611F082D5F13DC317FCCBB8E4DA254609889183436067EABA5B151D313B57CF20567D4E8DC59DEC9EE307C0E373938D3701605066668BF7352A437106179353B938DE1CF93EF57CB6325F48E25527 dev="tmpfs" ino=859 res=0 errno=0 [ 174.861156][ T9353] tipc: Started in network mode [ 174.888011][ T9353] tipc: Node identity , cluster identity 4711 [ 174.901046][ T9353] tipc: Failed to set node id, please configure manually [ 174.916209][ T9353] tipc: Enabling of bearer rejected, failed to enable media [ 175.261869][ T9380] ip6t_srh: unknown srh invflags 5F00 [ 175.572124][ T9398] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 175.937548][ T9419] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 176.525385][ T9456] xt_cgroup: xt_cgroup: no path or classid specified [ 176.657712][ T9463] netlink: 'syz.4.1031': attribute type 2 has an invalid length. [ 176.713696][ T9466] openvswitch: netlink: Message has 3 unknown bytes. [ 176.731757][ T9466] openvswitch: netlink: Actions may not be safe on all matching packets [ 177.030039][ T9480] netlink: 'syz.2.1036': attribute type 1 has an invalid length. [ 177.339186][ T9503] batman_adv: batadv0: Adding interface: dummy0 [ 177.357293][ T9503] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.413056][ T9503] batman_adv: batadv0: Interface activated: dummy0 [ 177.490094][ T9503] batadv0: mtu less than device minimum [ 177.512459][ T9503] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.524904][ T9503] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.536945][ T9503] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.549394][ T9503] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.561478][ T9503] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.573576][ T9503] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.616536][ T9515] sctp: [Deprecated]: syz.2.1045 (pid 9515) Use of int in maxseg socket option. [ 177.616536][ T9515] Use struct sctp_assoc_value instead [ 177.769597][ T9515] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 177.931394][ T9533] x_tables: duplicate underflow at hook 2 [ 178.267600][ T9557] __nla_validate_parse: 14 callbacks suppressed [ 178.267619][ T9557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1054'. [ 178.336246][ T9556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1054'. [ 178.359118][ T9559] netlink: 'syz.4.1055': attribute type 1 has an invalid length. [ 178.400263][ T9559] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1055'. [ 178.639153][ T9578] batman_adv: batadv0: Adding interface: gretap1 [ 178.682248][ T9578] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 178.733339][ T9590] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1063'. [ 178.978925][ T9604] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1066'. [ 179.023941][ T9603] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1066'. [ 179.091115][ T9608] xt_TPROXY: Can be used only with -p tcp or -p udp [ 179.114289][ T9615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1065'. [ 179.279617][ T5899] hid-generic 0005:0C45:0007.0001: item fetching failed at offset 0/1 [ 179.295134][ T5899] hid-generic 0005:0C45:0007.0001: probe with driver hid-generic failed with error -22 [ 179.644717][ T9640] batadv_slave_1: entered allmulticast mode [ 179.689083][ T9642] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1081'. [ 179.988405][ T9654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1086'. [ 180.018929][ T9654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1086'. [ 180.223559][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 180.739667][ T9692] netlink: 'syz.0.1097': attribute type 1 has an invalid length. [ 182.369832][ T5212] udevd[5212]: worker [5895] terminated by signal 33 (Unknown signal 33) [ 182.379242][ T5212] udevd[5212]: worker [5894] terminated by signal 33 (Unknown signal 33) [ 182.390532][ T5212] udevd[5212]: worker [6570] terminated by signal 33 (Unknown signal 33) [ 183.191318][ T9692] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 183.470726][ T5840] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 183.479226][ T9719] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1104'. [ 183.562748][ T5840] CPU: 1 UID: 0 PID: 5840 Comm: syz-executor Not tainted 6.14.0-syzkaller-12504-g8bc251e5d874 #0 PREEMPT(full) [ 183.562780][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 183.562793][ T5840] Call Trace: [ 183.562802][ T5840] [ 183.562811][ T5840] dump_stack_lvl+0x241/0x360 [ 183.562849][ T5840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.562888][ T5840] ? __pfx__printk+0x10/0x10 [ 183.562913][ T5840] ? ___ratelimit+0x4db/0x6a0 [ 183.562941][ T5840] ? __pfx____ratelimit+0x10/0x10 [ 183.562968][ T5840] dump_header+0xdb/0x6e0 [ 183.563000][ T5840] oom_kill_process+0x3b8/0x950 [ 183.563031][ T5840] out_of_memory+0xffe/0x1400 [ 183.563072][ T5840] ? __pfx_out_of_memory+0x10/0x10 [ 183.563110][ T5840] mem_cgroup_out_of_memory+0x266/0x3c0 [ 183.563149][ T5840] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 183.563193][ T5840] ? _raw_spin_unlock+0x28/0x50 [ 183.563222][ T5840] ? memcg1_oom_prepare+0x393/0x460 [ 183.563251][ T5840] try_charge_memcg+0x104a/0x1510 [ 183.563298][ T5840] ? __pfx_try_charge_memcg+0x10/0x10 [ 183.563335][ T5840] ? __lock_acquire+0xad5/0xd80 [ 183.563381][ T5840] charge_memcg+0xa2/0x180 [ 183.563406][ T5840] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 183.563435][ T5840] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 183.563468][ T5840] __read_swap_cache_async+0x330/0x650 [ 183.563508][ T5840] ? __pfx___read_swap_cache_async+0x10/0x10 [ 183.563539][ T5840] ? blk_start_plug+0x70/0x1b0 [ 183.563568][ T5840] swap_cluster_readahead+0x392/0x720 [ 183.563604][ T5840] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 183.563657][ T5840] swapin_readahead+0x1dd/0xd50 [ 183.563682][ T5840] ? filemap_get_entry+0x32a/0x3b0 [ 183.563720][ T5840] ? __pfx_swapin_readahead+0x10/0x10 [ 183.563757][ T5840] ? __filemap_get_folio+0x9d2/0xb40 [ 183.563781][ T5840] ? get_swap_device_info+0x1e/0x2c0 [ 183.563815][ T5840] ? swap_cache_get_folio+0xa5/0x3c0 [ 183.563844][ T5840] do_swap_page+0x5c4/0x5cd0 [ 183.563878][ T5840] ? arch_scale_cpu_capacity+0x16/0xb0 [ 183.563921][ T5840] ? __lock_acquire+0xad5/0xd80 [ 183.563946][ T5840] ? do_swap_page+0x1f0/0x5cd0 [ 183.563972][ T5840] ? __pfx_do_swap_page+0x10/0x10 [ 183.564026][ T5840] ? rcu_is_watching+0x15/0xb0 [ 183.564052][ T5840] ? ___pte_offset_map+0x29a/0x350 [ 183.564085][ T5840] ? __pfx____pte_offset_map+0x10/0x10 [ 183.564115][ T5840] ? __pfx_default_wake_function+0x10/0x10 [ 183.564148][ T5840] ? pte_offset_map_rw_nolock+0xc4/0x140 [ 183.564182][ T5840] handle_pte_fault+0x5b5/0x61c0 [ 183.564214][ T5840] ? __schedule+0x1ba6/0x5240 [ 183.564256][ T5840] ? __pfx_handle_pte_fault+0x10/0x10 [ 183.564276][ T5840] ? debug_object_activate+0x3f6/0x5c0 [ 183.564312][ T5840] ? __lock_acquire+0xad5/0xd80 [ 183.564346][ T5840] ? __free_object+0x54a/0x770 [ 183.564375][ T5840] ? lockdep_hardirqs_on+0x9d/0x150 [ 183.564409][ T5840] ? __pfx___free_object+0x10/0x10 [ 183.564437][ T5840] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 183.564468][ T5840] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 183.564498][ T5840] ? schedule+0x90/0x360 [ 183.564547][ T5840] handle_mm_fault+0x1129/0x1bf0 [ 183.564611][ T5840] ? __pfx_handle_mm_fault+0x10/0x10 [ 183.564642][ T5840] ? lock_vma_under_rcu+0x1f0/0x9a0 [ 183.564697][ T5840] ? exc_page_fault+0x115/0x920 [ 183.564719][ T5840] exc_page_fault+0x45b/0x920 [ 183.564741][ T5840] ? do_syscall_64+0x100/0x230 [ 183.564769][ T5840] asm_exc_page_fault+0x26/0x30 [ 183.564788][ T5840] RIP: 0033:0x7f2ca67bfa28 [ 183.564807][ T5840] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 183.564824][ T5840] RSP: 002b:00007ffc1ed68d90 EFLAGS: 00010293 [ 183.564843][ T5840] RAX: 0000000000000000 RBX: 000000000000026b RCX: 00007f2ca67bfa25 [ 183.564863][ T5840] RDX: 00007ffc1ed68dd0 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.564876][ T5840] RBP: 00007ffc1ed68e3c R08: 0000000000000000 R09: 0000000000000000 [ 183.564888][ T5840] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 183.564901][ T5840] R13: 00000000000927c0 R14: 000000000002c37c R15: 00007ffc1ed68e90 [ 183.564935][ T5840] [ 183.565039][ T5840] memory: usage 305392kB, limit 307200kB, failcnt 362 [ 183.655124][ T9722] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 183.682792][ T5840] memory+swap: usage 302808kB, limit 9007199254740988kB, failcnt 0 [ 184.089677][ T9740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1109'. [ 184.109717][ T5840] kmem: usage 289652kB, limit 9007199254740988kB, failcnt 0 [ 184.120100][ T5840] Memory cgroup stats for /syz2: [ 184.120374][ T5840] cache 0 [ 184.160192][ T5840] rss 0 [ 184.211345][ T5840] rss_huge 0 [ 184.212192][ T9751] netlink: 'syz.0.1111': attribute type 4 has an invalid length. [ 184.227948][ T5840] shmem 0 [ 184.262954][ T5840] mapped_file 0 [ 184.296454][ T5840] dirty 0 [ 184.325047][ T5840] writeback 0 [ 184.328401][ T5840] workingset_refault_anon 2 [ 184.338099][ T5840] workingset_refault_file 0 [ 184.344603][ T5840] swap 212992 [ 184.347927][ T5840] swapcached 0 [ 184.395325][ T5840] pgpgin 12755 [ 184.398852][ T5840] pgpgout 12755 [ 184.402334][ T5840] pgfault 25965 [ 184.414377][ T9757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1115'. [ 184.432279][ T5840] pgmajfault 4 [ 184.444502][ T5840] inactive_anon 0 [ 184.452930][ T5840] active_anon 0 [ 184.461993][ T5840] inactive_file 0 [ 184.472138][ T5840] active_file 0 [ 184.487557][ T5840] unevictable 0 [ 184.491656][ T5840] hierarchical_memory_limit 314572800 [ 184.500307][ T5840] hierarchical_memsw_limit 9223372036854771712 [ 184.514457][ T5840] total_cache 0 [ 184.563546][ T5840] total_rss 0 [ 184.569228][ T5840] total_rss_huge 0 [ 184.584861][ T5840] total_shmem 0 [ 184.608000][ T5840] total_mapped_file 0 [ 184.630370][ T5840] total_dirty 0 [ 184.645458][ T5840] total_writeback 0 [ 184.662752][ T5840] total_workingset_refault_anon 2 [ 184.682833][ T5840] total_workingset_refault_file 0 [ 184.688020][ T5840] total_swap 212992 [ 184.720430][ T5840] total_swapcached 0 [ 184.729212][ T5840] total_pgpgin 12755 [ 184.739342][ T5840] total_pgpgout 12755 [ 184.749470][ T5840] total_pgfault 25965 [ 184.759597][ T5840] total_pgmajfault 4 [ 184.766311][ T5840] total_inactive_anon 0 [ 184.777088][ T5840] total_active_anon 0 [ 184.792096][ T5840] total_inactive_file 0 [ 184.799907][ T5840] total_active_file 0 [ 184.809219][ T5840] total_unevictable 0 [ 184.818566][ T5840] anon_cost 0 [ 184.822067][ T5840] file_cost 0 [ 184.830411][ T5840] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1095,pid=9677,uid=0 [ 184.853669][ T5840] Memory cgroup out of memory: Killed process 9677 (syz.2.1095) total-vm:101976kB, anon-rss:920kB, file-rss:23016kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 185.143148][ T9778] sock: sock_timestamping_bind_phc: sock not bind to device [ 185.309155][ T9780] netlink: 'syz.1.1124': attribute type 1 has an invalid length. [ 185.730862][ T9795] netlink: 'syz.0.1128': attribute type 1 has an invalid length. [ 185.846536][ T9795] 8021q: adding VLAN 0 to HW filter on device bond4 [ 186.130848][ T9811] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1133'. [ 186.441075][ T9818] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.451580][ T9818] bond0: (slave bond1): Enslaving as an active interface with an up link [ 186.598348][ T9828] net_ratelimit: 14 callbacks suppressed [ 186.598368][ T9828] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 186.744808][ T9834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1139'. [ 186.767791][ T9834] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 186.782522][ T9836] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1141'. [ 186.959203][ T32] oom_reaper: reaped process 9677 (syz.2.1095), now anon-rss:104kB, file-rss:21956kB, shmem-rss:0kB [ 187.048079][ T9845] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.1145'. [ 187.058136][ T9845] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.1145'. [ 187.074650][ T9846] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.1145'. [ 187.092104][ T9846] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.1145'. [ 187.260524][ T9854] netlink: 'syz.4.1148': attribute type 1 has an invalid length. [ 187.269855][ T9855] IPVS: Unknown mcast interface: pim6reg1 [ 187.366838][ T9854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.423593][ C1] bridge0: port 3(gretap0) entered forwarding state [ 187.430274][ C1] bridge0: topology change detected, propagating [ 187.481055][ T9859] bond0: (slave veth3): Enslaving as an active interface with a down link [ 187.605312][ T9860] bond0: (slave veth5): Enslaving as an active interface with a down link [ 188.086728][ T3506] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.197789][ T3506] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.328203][ T9905] netlink: 'syz.2.1161': attribute type 9 has an invalid length. [ 188.364264][ T3506] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.534566][ T3506] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.816899][ T9921] IPVS: set_ctl: invalid protocol: 103 172.30.0.1:20000 [ 189.027293][ T3506] bridge_slave_1: left allmulticast mode [ 189.038453][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 189.051535][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 189.059818][ T3506] bridge_slave_1: left promiscuous mode [ 189.060522][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 189.076901][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 189.086059][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 189.094843][ T3506] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.248152][ T9949] __nla_validate_parse: 4 callbacks suppressed [ 189.248171][ T9949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1175'. [ 189.292358][ T9950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1175'. [ 189.650736][ T9953] sctp: [Deprecated]: syz.2.1176 (pid 9953) Use of int in max_burst socket option deprecated. [ 189.650736][ T9953] Use struct sctp_assoc_value instead [ 189.675339][ T3506] bond1 (unregistering): Released all slaves [ 189.684990][ T9953] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1176'. [ 189.851100][ T9957] xt_bpf: check failed: parse error [ 189.858693][ T3506] tipc: Disabling bearer [ 189.871840][ T3506] tipc: Left network mode [ 189.923457][ T9958] netlink: 'syz.2.1177': attribute type 7 has an invalid length. [ 189.923943][ T9957] netlink: 'syz.0.1178': attribute type 1 has an invalid length. [ 189.955294][ T3506] IPVS: stopping master sync thread 8336 ... [ 190.047462][ T9957] 8021q: adding VLAN 0 to HW filter on device bond5 [ 190.194471][ T9972] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1184'. [ 190.293952][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1184'. [ 190.304482][ T9967] syzkaller0: entered promiscuous mode [ 190.310321][ T9972] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1184'. [ 190.323110][ T9967] syzkaller0: entered allmulticast mode [ 190.372499][ T9976] : renamed from bond0 (while UP) [ 190.719549][ T9989] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1186'. [ 190.859817][ T9993] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 190.994077][T10000] netlink: 'syz.0.1191': attribute type 3 has an invalid length. [ 191.020609][T10000] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 191.045340][T10000] netlink: 'syz.0.1191': attribute type 3 has an invalid length. [ 191.193202][ T5846] Bluetooth: hci3: command tx timeout [ 192.486605][T10014] ip6t_srh: unknown srh invflags A757 [ 192.837990][ T9979] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 192.949150][ T3506] hsr_slave_0: left promiscuous mode [ 192.968541][ T3506] hsr_slave_1: left promiscuous mode [ 192.985676][T10025] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1197'. [ 192.998658][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.011935][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.024095][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.034999][ T3506] [ 193.037383][ T3506] ====================================================== [ 193.044436][ T3506] WARNING: possible circular locking dependency detected [ 193.051489][ T3506] 6.14.0-syzkaller-12504-g8bc251e5d874 #0 Not tainted [ 193.058267][ T3506] ------------------------------------------------------ [ 193.065293][ T3506] kworker/u8:9/3506 is trying to acquire lock: [ 193.071458][ T3506] ffff888027b9e768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 193.082137][ T3506] [ 193.082137][ T3506] but task is already holding lock: [ 193.089516][ T3506] ffff88805cb62d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 193.101121][ T3506] [ 193.101121][ T3506] which lock already depends on the new lock. [ 193.101121][ T3506] [ 193.111528][ T3506] [ 193.111528][ T3506] the existing dependency chain (in reverse order) is: [ 193.120539][ T3506] [ 193.120539][ T3506] -> #3 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 193.128983][ T3506] lock_acquire+0x116/0x2f0 [ 193.134014][ T3506] __mutex_lock+0x1a5/0x10c0 [ 193.139128][ T3506] xsk_bind+0x2fd/0xfb0 [ 193.143812][ T3506] __sys_bind+0x1de/0x290 [ 193.148669][ T3506] __x64_sys_bind+0x7a/0x90 [ 193.153699][ T3506] do_syscall_64+0xf3/0x230 [ 193.158727][ T3506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.165142][ T3506] [ 193.165142][ T3506] -> #2 (&xs->mutex){+.+.}-{4:4}: [ 193.172366][ T3506] lock_acquire+0x116/0x2f0 [ 193.177404][ T3506] __mutex_lock+0x1a5/0x10c0 [ 193.182520][ T3506] xsk_notifier+0xcf/0x230 [ 193.187471][ T3506] notifier_call_chain+0x1a5/0x3f0 [ 193.193117][ T3506] unregister_netdevice_many_notify+0x1572/0x2510 [ 193.200090][ T3506] unregister_netdevice_queue+0x383/0x400 [ 193.206333][ T3506] __tun_detach+0x6d9/0x15d0 [ 193.211457][ T3506] tun_chr_close+0x105/0x1b0 [ 193.216575][ T3506] __fput+0x3e9/0x9f0 [ 193.221080][ T3506] task_work_run+0x251/0x310 [ 193.226205][ T3506] syscall_exit_to_user_mode+0x13f/0x340 [ 193.232362][ T3506] do_syscall_64+0x100/0x230 [ 193.237500][ T3506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.243915][ T3506] [ 193.243915][ T3506] -> #1 (&net->xdp.lock){+.+.}-{4:4}: [ 193.251486][ T3506] lock_acquire+0x116/0x2f0 [ 193.256514][ T3506] __mutex_lock+0x1a5/0x10c0 [ 193.262927][ T3506] xsk_notifier+0x8b/0x230 [ 193.267873][ T3506] notifier_call_chain+0x1a5/0x3f0 [ 193.273507][ T3506] unregister_netdevice_many_notify+0x1572/0x2510 [ 193.280451][ T3506] unregister_netdevice_queue+0x383/0x400 [ 193.286698][ T3506] _cfg80211_unregister_wdev+0x163/0x590 [ 193.292865][ T3506] ieee80211_remove_interfaces+0x4f1/0x700 [ 193.299217][ T3506] ieee80211_unregister_hw+0x5d/0x2c0 [ 193.305123][ T3506] mac80211_hwsim_del_radio+0x2c6/0x4c0 [ 193.311196][ T3506] hwsim_exit_net+0x5c3/0x670 [ 193.316404][ T3506] cleanup_net+0x814/0xd60 [ 193.321350][ T3506] process_scheduled_works+0xac3/0x18e0 [ 193.327429][ T3506] worker_thread+0x870/0xd50 [ 193.332544][ T3506] kthread+0x7b7/0x940 [ 193.337146][ T3506] ret_from_fork+0x4b/0x80 [ 193.342085][ T3506] ret_from_fork_asm+0x1a/0x30 [ 193.347384][ T3506] [ 193.347384][ T3506] -> #0 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 193.355131][ T3506] validate_chain+0xa69/0x24e0 [ 193.360426][ T3506] __lock_acquire+0xad5/0xd80 [ 193.365631][ T3506] lock_acquire+0x116/0x2f0 [ 193.370691][ T3506] __mutex_lock+0x1a5/0x10c0 [ 193.375808][ T3506] cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 193.382408][ T3506] notifier_call_chain+0x1a5/0x3f0 [ 193.388054][ T3506] __dev_close_many+0x15d/0x760 [ 193.393443][ T3506] dev_close_many+0x250/0x4c0 [ 193.398649][ T3506] unregister_netdevice_many_notify+0x628/0x2510 [ 193.405501][ T3506] default_device_exit_batch+0x7ff/0x880 [ 193.411661][ T3506] cleanup_net+0x8af/0xd60 [ 193.416633][ T3506] process_scheduled_works+0xac3/0x18e0 [ 193.422707][ T3506] worker_thread+0x870/0xd50 [ 193.427821][ T3506] kthread+0x7b7/0x940 [ 193.432415][ T3506] ret_from_fork+0x4b/0x80 [ 193.437356][ T3506] ret_from_fork_asm+0x1a/0x30 [ 193.442651][ T3506] [ 193.442651][ T3506] other info that might help us debug this: [ 193.442651][ T3506] [ 193.452882][ T3506] Chain exists of: [ 193.452882][ T3506] &rdev->wiphy.mtx --> &xs->mutex --> &dev_instance_lock_key#3 [ 193.452882][ T3506] [ 193.466378][ T3506] Possible unsafe locking scenario: [ 193.466378][ T3506] [ 193.473847][ T3506] CPU0 CPU1 [ 193.479214][ T3506] ---- ---- [ 193.484587][ T3506] lock(&dev_instance_lock_key#3); [ 193.489830][ T3506] lock(&xs->mutex); [ 193.496338][ T3506] lock(&dev_instance_lock_key#3); [ 193.504075][ T3506] lock(&rdev->wiphy.mtx); [ 193.508607][ T3506] [ 193.508607][ T3506] *** DEADLOCK *** [ 193.508607][ T3506] [ 193.516751][ T3506] 5 locks held by kworker/u8:9/3506: [ 193.522033][ T3506] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 193.532930][ T3506] #1: ffffc9000c397c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 193.543478][ T3506] #2: ffffffff900ef8d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 193.552899][ T3506] #3: ffffffff900fc408 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xde/0x880 [ 193.562950][ T3506] #4: ffff88805cb62d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 193.575003][ T3506] [ 193.575003][ T3506] stack backtrace: [ 193.580895][ T3506] CPU: 0 UID: 0 PID: 3506 Comm: kworker/u8:9 Not tainted 6.14.0-syzkaller-12504-g8bc251e5d874 #0 PREEMPT(full) [ 193.580916][ T3506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 193.580928][ T3506] Workqueue: netns cleanup_net [ 193.580952][ T3506] Call Trace: [ 193.580959][ T3506] [ 193.580967][ T3506] dump_stack_lvl+0x241/0x360 [ 193.580993][ T3506] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.581017][ T3506] ? __pfx__printk+0x10/0x10 [ 193.581040][ T3506] ? print_lock+0x171/0x1a0 [ 193.581062][ T3506] print_circular_bug+0x2e1/0x300 [ 193.581085][ T3506] check_noncircular+0x142/0x160 [ 193.581111][ T3506] validate_chain+0xa69/0x24e0 [ 193.581132][ T3506] ? kvm_sched_clock_read+0x11/0x20 [ 193.581158][ T3506] __lock_acquire+0xad5/0xd80 [ 193.581178][ T3506] lock_acquire+0x116/0x2f0 [ 193.581194][ T3506] ? cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 193.581224][ T3506] __mutex_lock+0x1a5/0x10c0 [ 193.581240][ T3506] ? cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 193.581265][ T3506] ? validate_chain+0x8a7/0x24e0 [ 193.581284][ T3506] ? put_dec_trunc8+0x1fb/0x340 [ 193.581310][ T3506] ? cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 193.581333][ T3506] ? __pfx___mutex_lock+0x10/0x10 [ 193.581364][ T3506] cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 193.581391][ T3506] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 193.581417][ T3506] ? __lock_acquire+0xad5/0xd80 [ 193.581434][ T3506] ? do_raw_spin_lock+0x151/0x370 [ 193.581469][ T3506] ? inetdev_event+0x4fb/0x1740 [ 193.581501][ T3506] ? igmp_netdev_event+0x7c/0x770 [ 193.581532][ T3506] notifier_call_chain+0x1a5/0x3f0 [ 193.581559][ T3506] __dev_close_many+0x15d/0x760 [ 193.581585][ T3506] ? __mutex_lock+0x380/0x10c0 [ 193.581607][ T3506] ? __pfx___dev_close_many+0x10/0x10 [ 193.581638][ T3506] dev_close_many+0x250/0x4c0 [ 193.581662][ T3506] ? __pfx_dev_close_many+0x10/0x10 [ 193.581681][ T3506] ? __lock_acquire+0xad5/0xd80 [ 193.581701][ T3506] unregister_netdevice_many_notify+0x628/0x2510 [ 193.581723][ T3506] ? lockdep_hardirqs_on+0x9d/0x150 [ 193.581740][ T3506] ? __local_bh_enable_ip+0x168/0x200 [ 193.581756][ T3506] ? batadv_tt_local_remove+0x119/0x230 [ 193.581786][ T3506] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 193.581805][ T3506] ? batadv_tt_local_remove+0x119/0x230 [ 193.581834][ T3506] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 193.581864][ T3506] ? unregister_netdevice_queue+0x2c4/0x400 [ 193.581889][ T3506] ? batadv_meshif_destroy_netlink+0x1e6/0x270 [ 193.581912][ T3506] default_device_exit_batch+0x7ff/0x880 [ 193.581940][ T3506] ? __pfx_default_device_exit_batch+0x10/0x10 [ 193.581963][ T3506] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 193.581985][ T3506] ? cfg802154_pernet_exit+0xc3/0xe0 [ 193.582007][ T3506] ? __pfx_default_device_exit_batch+0x10/0x10 [ 193.582031][ T3506] cleanup_net+0x8af/0xd60 [ 193.582056][ T3506] ? __pfx_cleanup_net+0x10/0x10 [ 193.582083][ T3506] ? process_scheduled_works+0x9cb/0x18e0 [ 193.582102][ T3506] process_scheduled_works+0xac3/0x18e0 [ 193.582134][ T3506] ? __pfx_process_scheduled_works+0x10/0x10 [ 193.582157][ T3506] ? assign_work+0x367/0x3d0 [ 193.582176][ T3506] worker_thread+0x870/0xd50 [ 193.582202][ T3506] ? __kthread_parkme+0x1a8/0x200 [ 193.582223][ T3506] ? __pfx_worker_thread+0x10/0x10 [ 193.582242][ T3506] kthread+0x7b7/0x940 [ 193.582266][ T3506] ? __pfx_worker_thread+0x10/0x10 [ 193.582285][ T3506] ? __pfx_kthread+0x10/0x10 [ 193.582306][ T3506] ? __pfx_kthread+0x10/0x10 [ 193.582327][ T3506] ? __pfx_kthread+0x10/0x10 [ 193.582349][ T3506] ? __pfx_kthread+0x10/0x10 [ 193.582378][ T3506] ? _raw_spin_unlock_irq+0x23/0x50 [ 193.582401][ T3506] ? lockdep_hardirqs_on+0x9d/0x150 [ 193.582416][ T3506] ? __pfx_kthread+0x10/0x10 [ 193.582438][ T3506] ret_from_fork+0x4b/0x80 [ 193.582455][ T3506] ? __pfx_kthread+0x10/0x10 [ 193.582477][ T3506] ret_from_fork_asm+0x1a/0x30 [ 193.582500][ T3506] [ 193.592223][ T5846] Bluetooth: hci3: command tx timeout [ 193.976151][ T3506] veth1_macvtap: left promiscuous mode [ 193.981756][ T3506] veth0_macvtap: left promiscuous mode [ 193.987484][ T3506] veth1_vlan: left promiscuous mode [ 193.994215][ T3506] veth0_vlan: left promiscuous mode [ 194.138198][ T3506] batadv_slave_1 (unregistering): left allmulticast mode [ 194.181850][ T3506] team0 (unregistering): Port device team_slave_1 removed [ 194.208305][ T3506] team0 (unregistering): Port device team_slave_0 removed [ 194.451291][ T9938] chnl_net:caif_netlink_parms(): no params data found [ 194.535182][ T9938] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.542334][ T9938] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.550208][ T9938] bridge_slave_0: entered allmulticast mode [ 194.559391][ T9938] bridge_slave_0: entered promiscuous mode [ 194.569014][ T9938] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.576676][ T9938] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.584287][ T9938] bridge_slave_1: entered allmulticast mode [ 194.590996][ T9938] bridge_slave_1: entered promiscuous mode [ 194.614930][ T9938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.626259][ T9938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.650494][ T9938] team0: Port device team_slave_0 added [ 194.658548][ T9938] team0: Port device team_slave_1 added [ 194.679724][ T9938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.687203][ T9938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.714078][ T9938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.725779][ T9938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.733129][ T9938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.759410][ T9938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.793430][ T9938] hsr_slave_0: entered promiscuous mode [ 194.799570][ T9938] hsr_slave_1: entered promiscuous mode [ 194.805681][ T9938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.814424][ T9938] Cannot create hsr debugfs directory [ 195.070433][ T9938] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 195.080542][ T9938] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 195.089685][ T9938] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 195.105179][ T9938] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 195.125206][ T9938] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.132546][ T9938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.140130][ T9938] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.147282][ T9938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.192257][ T9938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.208062][ T6731] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.216587][ T6731] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.229890][ T9938] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.241674][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.248912][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.262225][ T6731] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.269413][ T6731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.306180][ T9938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.411542][ T9938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.449716][ T9938] veth0_vlan: entered promiscuous mode [ 195.460362][ T9938] veth1_vlan: entered promiscuous mode [ 195.483526][ T9938] veth0_macvtap: entered promiscuous mode [ 195.492005][ T9938] veth1_macvtap: entered promiscuous mode [ 195.508648][ T9938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.519514][ T9938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.530720][ T9938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.541709][ T9938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.551776][ T9938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.562286][ T9938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.575677][ T9938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.586544][ T9938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.598303][ T9938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.611670][ T9938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.622334][ T9938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.634873][ T9938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.645422][ T9938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.655804][ T9938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.666421][ T9938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.677309][ T9938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.688502][ T9938] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.697467][ T9938] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.706355][ T9938] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.715569][ T9938] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.748081][ T9938] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht' [ 195.770414][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.772042][ T9938] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' [ 195.778845][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.807346][ T3017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.815461][ T3017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.585568][ T1298] ieee802154 phy1 wpan1: encryption failed: -22