last executing test programs: 4m13.654225963s ago: executing program 2 (id=4283): r0 = socket(0x11, 0x800000003, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000003140)={'bond_slave_1\x00', &(0x7f00000030c0)=@ethtool_perm_addr={0x20, 0x6, "12a70e6ddb0a"}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000a00)=ANY=[@ANYBLOB="ffffffffff004500002440000000032f90780a0101010d0000000000000000109078020d00008000"/54], 0x36) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = accept4$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r8, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042dbd7000ffdbdf250a00000005002e000000000008403100b1000000826db0bb0400000021fe7c94221585d4f71bafa491f5960cc6f8f8ecda7ee04032cfb1c152"], 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x8040800) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f80)=@deltaction={0x14, 0x31, 0x0, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendto$packet(r5, &(0x7f0000000340)="1d487d0f5c7b8ab863c43f1bf360224702c6a7d8f54bcf228a585b46e18c570871222597e743dc2f10061939c9e6976eae503a7bdc7ab445e6130e58731677f30ed1995fe49303ce6f7abdac9df096c0f0197f", 0x53, 0x800, &(0x7f0000000200)={0x11, 0x2, r9, 0x1, 0x9, 0x6, @local}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000000300592113bef5b0020000000000005dd8000000000000000a0000000000000c000000000000"], 0x0, 0x4a}, 0x28) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@deltfilter={0xa4, 0x2d, 0x1, 0x78bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xffff, 0x3}, {0xfff3, 0xffff}, {0x4, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x55}, @TCA_U32_POLICE={0x5c, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffd}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x2, 0x7b222427, 0x8, 0x2, {0x0, 0x1, 0x65f, 0xb, 0xfff7, 0x5}, {0xb1, 0x2, 0x19c, 0x6, 0x5, 0x3}, 0xffffffd5, 0x40, 0x9}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xbf}]}, @TCA_U32_LINK={0x8, 0x3, 0x200000}, @TCA_U32_HASH={0x8, 0x2, 0x2}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4c014}, 0x20044000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r13 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'xfrm0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6daa354b000000000000081d000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) 4m12.388559648s ago: executing program 4 (id=4293): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000240)=@gcm_128={{0x303}, "4354289191316cd1", "00000000000056040000ffffffffffff", 'j0\bZ', "1ec5573dc17e41be"}, 0x28) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x13, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000007000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000fa000000000025f4b95f00000000"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r3, &(0x7f00000002c0), &(0x7f0000000580)=@tcp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000080)="a3", &(0x7f0000000180)=@tcp6, 0x2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x3f, &(0x7f0000000540)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001340)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r6], 0x54}}, 0x800) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x7, [@float={0xa, 0x0, 0x0, 0x10, 0x6}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x49, 0x0, 0x45, 0x3}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x8, 0x3}, {0xb, 0x2}, {0x5, 0x5}, {0x1, 0x1}]}, @typedef={0x7, 0x0, 0x0, 0x8, 0x1}, @struct={0xd, 0x2, 0x0, 0x4, 0x0, 0x9, [{0x6, 0x4}, {0xe, 0x0, 0x4}]}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xd}]}, {0x0, [0x61, 0x30, 0x30, 0x2e, 0x0]}}, &(0x7f0000000340)=""/218, 0xa7, 0xda, 0x1, 0x800}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x6, 0x0}, 0x8) pipe(&(0x7f0000000500)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6a, 0x0, 0x0, 0x0, 0x7eb}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6fd1}}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}]}, &(0x7f0000000240)='syzkaller\x00', 0x3, 0x0, 0x0, 0x1e00, 0x2c, '\x00', r6, @fallback=0x1b, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x4, 0x9, 0x2, 0x800}, 0x10, r9, r10, 0x2, &(0x7f0000000540), &(0x7f0000000580)=[{0x0, 0x4, 0x2}, {0x0, 0x3, 0x4, 0x8}], 0x10, 0x4}, 0x94) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000006, 0x4010, r2, 0xafa1e000) 4m12.132616145s ago: executing program 2 (id=4295): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) pipe(0x0) (async) sendmsg$nl_route(r1, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) (async) sendmsg$nl_route(r0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0xfffd, 0x2, 0x3, 0xfff, 0x6, 0x401, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x40}}, 0x0) (async) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) connect$inet(r6, &(0x7f0000000040)={0x2, 0xbffe, @loopback}, 0x10) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e23, @empty}}) setsockopt(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0), 0x4) 4m11.961174118s ago: executing program 0 (id=4296): getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) r0 = socket$igmp6(0xa, 0x3, 0x2) recvmmsg(r0, &(0x7f0000003f80)=[{{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000000080)=""/174, 0xae}, {&(0x7f0000000140)=""/153, 0x99}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/7, 0x7}, {&(0x7f0000001240)=""/4096, 0x1000}], 0x5}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f00000022c0)=""/244, 0xf4}, {&(0x7f00000023c0)=""/204, 0xcc}, {&(0x7f00000024c0)=""/86, 0x56}, {&(0x7f0000002540)}, {&(0x7f0000002580)=""/40, 0x28}, {&(0x7f00000025c0)=""/212, 0xd4}, {&(0x7f00000026c0)=""/192, 0xc0}, {&(0x7f0000002780)=""/226, 0xe2}, {&(0x7f0000002880)=""/252, 0xfc}], 0x9, &(0x7f0000002a40)=""/115, 0x73}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002ac0)=""/146, 0x92}, {&(0x7f0000002b80)=""/211, 0xd3}, {&(0x7f0000002c80)=""/120, 0x78}, {&(0x7f0000002d00)=""/185, 0xb9}], 0x4, &(0x7f0000002e00)=""/240, 0xf0}, 0x7}, {{&(0x7f0000002f00)=@nl=@unspec, 0x80, &(0x7f0000003280)=[{&(0x7f0000002f80)=""/26, 0x1a}, {&(0x7f0000002fc0)=""/4, 0x4}, {&(0x7f0000003000)=""/100, 0x64}, {&(0x7f0000003080)=""/239, 0xef}, {&(0x7f0000003180)=""/204, 0xcc}], 0x5, &(0x7f0000003300)=""/102, 0x66}, 0x40}, {{&(0x7f0000003380)=@rc, 0x80, &(0x7f0000003440)=[{&(0x7f0000003400)=""/22, 0x16}], 0x1, &(0x7f0000003480)=""/8, 0x8}, 0xff}, {{&(0x7f00000034c0)=@isdn, 0x80, &(0x7f0000003600)=[{&(0x7f0000003540)=""/139, 0x8b}], 0x1, &(0x7f0000003640)=""/191, 0xbf}, 0x2}, {{&(0x7f0000003700)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000003780)=""/139, 0x8b}, {&(0x7f0000003840)=""/228, 0xe4}, {&(0x7f0000003940)=""/182, 0xb6}, {&(0x7f0000003a00)=""/246, 0xf6}, {&(0x7f0000003b00)=""/101, 0x65}, {&(0x7f0000003b80)=""/80, 0x50}, {&(0x7f0000003c00)=""/244, 0xf4}, {&(0x7f0000003d00)=""/72, 0x48}, {&(0x7f0000003d80)=""/15, 0xf}], 0x9, &(0x7f0000003e80)=""/236, 0xec}, 0xd9b1}], 0x7, 0x120, &(0x7f0000004140)={0x0, 0x989680}) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000004180)=0x81, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000041c0)={0x0, @adiantum, 0x0, @desc2}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000004240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000004300)={&(0x7f0000004200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000042c0)={&(0x7f0000004280)={0x1c, r2, 0x800, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x20000045) r3 = socket(0x2, 0x80000, 0x68fd88c) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004380), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000004440)={&(0x7f0000004340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004400)={&(0x7f00000043c0)={0x1c, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000004480), 0x4) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f00000044c0)=0x4, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000004500)={0x0, r0}, 0x8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000004540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000004840)={&(0x7f0000004580)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x4}}, 0x10, &(0x7f0000004740)=[{&(0x7f00000045c0)="83a08bdc0d6d8a3bdc8f4191d7b2c291016f43b950db60bf3cc47b62f27d4ede06aa82ab08a68e4f214e965be24dc6fcce96b3548f7fc2c9efdc1a99ac930e58b8e4da91df9cc7d04e292558ee43613aab3cdc6610264696bdc9503dc499b9937ee68febb58984019350afe1d4cc2c1535c703f75a62b8f355375ee304381273cb7cecef7e385dd41d1a1c973131a283d34082487975137b29fe6abd070003cd6b84b3af75f388e512e881e49bbfbb7b8d9dcaf562c6", 0xb6}, {&(0x7f0000004680)="c7fa2097c7072631b770f454820955f19bd9b8de9f069117ee5b61dd9b", 0x1d}, {&(0x7f00000046c0)="d081245e9e192ccf0c94ede46701d6c1d3fc045cf5570ee6b7794d508db2e1d85ff5fb0d0ef59a37635269240ea9d32db53e3324ec8d7dcb80475f67ba2e465ac309fe98ee99f0da133644e8de0d68c70d499b9f7bdb685f18d586d7c040fd9548dd98f3058c14", 0x67}], 0x3, &(0x7f0000004780)="7ad9e12cfcd2cb9cb82ae3436c6eb569a97b774340c5785c793d30de8e39c9613ae31a0e684617bd3c0b1e9de5a12c400592903f94bee0265606640b9dcbc9ab99c44fc9b87d31566ec9dfef1a0e9fa94afd068f39516d6ead5d1363ff66a2b59276dad29af506fcb815961d4351fe9efbf0a7af5b8ac77bace4870c28002b3b2f9f", 0x82, 0x24001800}, 0x1) accept$netrom(r3, &(0x7f0000004880)={{0x3, @null}, [@remote, @default, @remote, @remote, @bcast, @remote, @null, @rose]}, &(0x7f0000004900)=0x48) r6 = socket(0xa, 0xa, 0x80) r7 = epoll_create(0x8a2) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000004a00)={&(0x7f0000004940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000049c0)={&(0x7f0000004980)={0x24, 0x1, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000004b00)={&(0x7f0000004a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004ac0)={&(0x7f0000004a80)={0x24, r4, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1a}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r8, &(0x7f0000004c40)={&(0x7f0000004b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004c00)={&(0x7f0000004b80)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xe2c}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'erspan0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4020080) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000004c80)={'veth1\x00', 0x800}) sendmsg$nl_route_sched(r3, &(0x7f0000004e00)={&(0x7f0000004cc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004dc0)={&(0x7f0000004d00)=@newqdisc={0x84, 0x24, 0x4, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0xffff}, {0x13, 0xfff1}, {0x12, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x10}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1f}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x401}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000005}, 0x44800) r9 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000004e40)={{0x0, 0x401, 0x2, 0xb, 0x3, 0x6, 0x0, 0xfffffffe, 0x80000000, 0x5, 0x0, 0x1ff, 0xfffffffffffeffff, 0x8e16, 0x5}}) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f0000005e40)={{r10, 0x7, 0x5, 0x200, 0x8000000000000000, 0x7c, 0x0, 0xa, 0x10001, 0x5, 0x13, 0x401, 0x9, 0x1, 0x3}}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r7, 0x4018f514, &(0x7f0000006e40)={0x9f5f, 0x40, 0x1}) setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000006e80), 0x4) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000008300)=@filter={'filter\x00', 0xe, 0x7, 0x13d2, [0x0, 0x200000006f00, 0x20000000701e, 0x20000000737a], 0x0, &(0x7f0000006ec0), &(0x7f0000006f00)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x9, 0x1, 0x8, 'team_slave_1\x00', 'macvlan1\x00', 'dvmrp0\x00', 'veth0_macvtap\x00', @multicast, [0x0, 0xff, 0xff, 0xff, 0xff], @random="6b026cd461c7", [0x0, 0x0, 0x0, 0xff], 0x6e, 0xa6, 0xee, [], [@common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xfffffffffffffffc}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x8, 0x6, {0x9}}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{0x9, 0x60, 0x18, 'batadv_slave_0\x00', 'ipvlan1\x00', 'bridge_slave_1\x00', 'bond0\x00', @remote, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], 0x116, 0x116, 0x18e, [@ip6={{'ip6\x00', 0x0, 0x50}, {{@private0, @dev={0xfe, 0x80, '\x00', 0x28}, [0x0, 0x3e2c178ca58ba490, 0xffffff00, 0xff000000], [0x0, 0xff, 0x0, 0xffffff00], 0x6, 0x2, 0x20, 0x24, 0x4e22, 0x4e23, 0x4e24, 0x4e24}}}, @vlan={{'vlan\x00', 0x0, 0x8}, {{0x0, 0x5, 0x1c, 0x5}}}], [], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x8, 0x2d99, 0x2, 0x1, 0x0, "7c1c2e5d00f00b129305bf2fcbe2a8d7564c79f994ff09d02248eca0a5fd1cee1b5614d7f2481c5264eb6fd15db58e8088b175548165c5565f6bf37b2461bc19"}}}}, {0x11, 0x34, 0x8863, 'veth1_to_bond\x00', 'lo\x00', 'veth1_to_team\x00', 'bond_slave_1\x00', @remote, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff], 0x6e, 0x6e, 0x19e, [], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x6, 'system_u:object_r:login_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x2, [{0x5, 0x0, 0x8906, 'wg1\x00', 'wlan1\x00', 'wlan1\x00', 'netdevsim0\x00', @broadcast, [0x302920ffad3a2b35, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0x0, 0xff, 0x0, 0xff], 0xde, 0x156, 0x1a6, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'tunl0\x00', 'erspan0\x00', 0x10, 0x1, 0xfffffff9, 0x1, 0x7, 0x8, {0x1}, {0x7ff}}}}], [@common=@nflog={'nflog\x00', 0x50, {{0x36, 0xffff, 0x1, 0x0, 0x0, "55c7b9b4f157f387ca04ed3a173122d8b0019673cb86ed488519ff2db61148968694b1e466cc3c71a07a99137175f9b503c13346a9a28e3fd038712b2d8e7626"}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x4, {0x19}}}}}, {0x5, 0x43, 0x892f, 'veth1_to_bridge\x00', 'veth0_virt_wifi\x00', 'lo\x00', 'veth0\x00', @empty, [0xff, 0xff, 0x0, 0xff, 0xff], @local, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0xa6, 0xa6, 0x1d6, [@realm={{'realm\x00', 0x0, 0x10}, {{0x580000, 0x3, 0x1}}}], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0xfffffc00, 'system_u:object_r:dhcpc_state_t:s0\x00'}}}}]}, {0x0, '\x00', 0x5, 0x40b70493303ac55e, 0x2, [{0x11, 0x1, 0x9000, 'bond_slave_0\x00', 'veth1_vlan\x00', 'ipvlan1\x00', 'team_slave_1\x00', @broadcast, [0x0, 0x0, 0xff, 0xff], @multicast, [0xff, 0xff, 0x0, 0x101, 0x0, 0xff], 0x8a6, 0x8a6, 0x9d6, [@u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x3, 0x1}, {0xa3, 0x2}, {0x4, 0x2}, {0x0, 0x1}, {0x3ff, 0x3}, {0x7}, {0x9, 0x1}, {0x7}, {0x1, 0x3}, {0x2, 0x3}, {0x8001, 0x1}], [{0x8001, 0x80}, {0x7d91, 0x8}, {0x9, 0x5}, {0x4, 0x5}, {0x80000001, 0x5}, {0xff, 0x1000}, {0x4, 0x2}, {0x2, 0x8}, {0xc832, 0x9}, {0x0, 0x24}, {0x5, 0x1}], 0x9, 0x2}, {[{0x6, 0x3}, {0x8c1}, {0xb6e6}, {}, {0x5}, {0x5, 0x1cb808ccbb153ae4}, {0x3}, {0x6, 0x2}, {0x10, 0x2}, {0xf6, 0x1}, {0x5, 0x3}], [{0x401, 0x7fff}, {0x7, 0x81}, {0x8, 0x7}, {0x299, 0x100}, {0xcc1a, 0x5}, {0x7, 0x7}, {0xa63, 0x6}, {0x7, 0x10000}, {0xffffffff, 0x8}, {0x3, 0x3}, {0x9}], 0x8, 0x7}, {[{0x3, 0x1}, {0x401, 0x1}, {0x80000001, 0x3}, {0x2, 0x3}, {0x0, 0x1}, {0x7fff, 0x3}, {0x8}, {0x10, 0x2}, {0x5bff, 0x1}, {0x2, 0x1}, {0x6, 0x3}], [{0x5, 0x3}, {0xd, 0x9}, {0x0, 0x8}, {0x5, 0x6}, {0x3}, {0x9, 0x479}, {0x1, 0x2}, {0x0, 0xb10}, {0xf487, 0x6}, {0xc3b0, 0x4}, {0xf4, 0x5}], 0xa, 0x7}, {[{0xe}, {0x7f, 0x2}, {0x33, 0x2}, {0x75d8, 0x1}, {0x4}, {0x0, 0x3}, {0xbe0, 0x2}, {0x4, 0x2}, {0x1ff, 0x2}, {0x4, 0x3}, {0x60000000, 0x2}], [{0xe0000}, {0x5, 0x7}, {0x1, 0x6}, {0x40, 0x800}, {0x0, 0x3}, {0x6, 0x7eb8d7b2}, {0x7fff, 0x800}, {0x80, 0x7}, {0x100, 0x1}, {0x81}, {0xfff, 0x7}], 0xa, 0x9}, {[{0x401, 0x3}, {0x1}, {0x1, 0x2}, {0x3, 0x3}, {0x100, 0x2}, {0x1, 0x3}, {0x2}, {0x5b3, 0x3}, {0x0, 0x1}, {0x40, 0x3}, {0x7, 0x3}], [{0x401, 0x10000000}, {0x5}, {0x0, 0x1}, {0x6, 0x7fffffff}, {0x8, 0x97ad7fe4}, {0x3ff, 0x8}, {0xde, 0x3}, {0x0, 0x8}, {0x7, 0xccf}, {0x400, 0x10001}, {0x40, 0xe}], 0x5, 0x9}, {[{0x9}, {0xffffffff, 0x3}, {0x4, 0x3}, {0x0, 0x1}, {0xa, 0x3}, {0xd, 0x3}, {0x2, 0x1}, {0x3}, {0x9}, {0x85a4}, {0x3, 0x3}], [{0x10000, 0x4}, {0x3, 0x5}, {0x1, 0x1}, {0x1ff, 0x480}, {0x2, 0xbbc}, {0x7de4, 0x1}, {0x81, 0x6}, {0x0, 0x5}, {0x7ff, 0x5f06}, {0x4, 0xfffffffe}, {0x4, 0x622}], 0x7, 0x3}, {[{0x5}, {0x1, 0x1}, {0x8, 0x2}, {0x7, 0x3}, {0xfff, 0x2}, {0x3, 0x3}, {0x2, 0x1}, {0x7, 0x3}, {0x7fff}, {0x7}, {0x4}], [{0xb, 0x7}, {0x1, 0xc4c}, {0x4, 0xfffffffb}, {0x0, 0x9}, {0x9, 0x8}, {0x1, 0xefe6}, {0x7ff}, {0x2, 0x64}, {0x8, 0x7ff}, {0x2, 0x1}, {0x2}], 0x8, 0x4}, {[{0x2a}, {0x60c1, 0x3}, {0x7fffffff, 0x106443f8e559b98f}, {0x7a}, {0x3, 0x3}, {0x8, 0x2}, {0x3, 0x2}, {0x3, 0x1}, {0x7, 0x2}, {0x3, 0x2}, {0x8}], [{0x7, 0x4}, {0x2fb51782, 0x3}, {0x7f, 0x3}, {0xffff, 0xb7}, {0x2, 0x47}, {0x3, 0x5}, {0x200, 0x4}, {0x0, 0x4}, {0x7, 0x7ff}, {0xc, 0x7}, {0x2, 0x3}], 0x1, 0x6}, {[{0x5, 0x1}, {0x8, 0x1}, {0x1, 0x2}, {0x0, 0x1}, {0x3}, {0x0, 0x3}, {0x9, 0x3}, {0x9, 0x2}, {0x9}, {0x0, 0x3}, {0x5, 0x1}], [{0x30000, 0x9}, {0xd74f, 0x2}, {0x5a72, 0x4}, {0xa7}, {0xe7e, 0x542}, {0x1000, 0x2}, {0x4, 0x7}, {0xfffffff7}, {0x7}, {0x0, 0xa}, {0x81}], 0x2, 0xa}, {[{0x55}, {0xb0f, 0x3}, {0x2, 0x1}, {0x3, 0x3}, {0x7440}, {0xc, 0x2}, {0x2, 0x1}, {0x9, 0x2}, {0xd75b, 0x2}, {0x10001}, {0x1}], [{0x80000001, 0xfffffffb}, {0x8001, 0x5bdd}, {0x1ff, 0x5}, {0x9}, {0x401, 0x1}, {0x8, 0x3}, {0x2, 0x10}, {0x0, 0xfffffff8}, {0x10001, 0x8}, {0x8, 0x4}, {0x0, 0x3}], 0x6, 0x8}, {[{0x5}, {0x9e}, {0x67d8, 0x539bbd60792763db}, {0xcf, 0x1}, {0x5, 0x3}, {0x9, 0x3}, {0x0, 0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x8b, 0x1}, {0x1000}], [{0xfab, 0xe1}, {0x3ff, 0xbd3}, {0x401, 0xffffff32}, {0x3, 0x9}, {0xb, 0xfffeffff}, {0x9a744b7f, 0x5}, {0x1, 0x9}, {0xc7, 0x4}, {0x8, 0x3b}, {0xfff, 0xe8d}, {0xb6b, 0x7}], 0x3, 0x5}], 0x7}}}, @nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz0\x00', 0x4}}}], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x7, 'system_u:object_r:unconfined_exec_t:s0\x00'}}}}, {0x0, 0x1, 0x88ca, 'sit0\x00', 'bridge0\x00', 'syz_tun\x00', 'hsr0\x00', @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @remote, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0x12e, 0x176, 0x1a6, [@ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv6=@empty, [0xff, 0x0, 0xffffff00, 0xffffff00], 0x4e23, 0xff, 0x5, 0x4e22, 0x8, 0x20}}}, @stp={{'stp\x00', 0x0, 0x48}, {{0x5, {0xba, 0x3, 0x341, @broadcast, [0x1fe, 0xff, 0xff, 0xff, 0xff], 0x2, 0x7, 0x4, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0xff, 0x0, 0xff], 0x4e20, 0x4e24, 0x8, 0x8001, 0x7, 0x822, 0x6, 0x7, 0x9, 0xe}, 0x18, 0x800}}}], [@common=@ERROR={'ERROR\x00', 0x20, {"935df0343ca7c69707075d9ce1f35a111bdd878c38abcd93a30ac1eafcd4"}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x80000000}}}}]}]}, 0x144a) 4m11.839567719s ago: executing program 3 (id=4297): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x38, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x38}}, 0x0) 4m11.678763786s ago: executing program 2 (id=4298): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x33, 0x263, @loopback, 0x800}}}, 0x84) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x4, [@bcast, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket(0x10, 0x80003, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="8f", 0x1) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=ANY=[], 0x28}}, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x7, [@restrict={0x8, 0x0, 0x0, 0xb, 0x1}, @enum={0x5, 0x3, 0x0, 0x6, 0x4, [{0x9, 0x4}, {0x2, 0x8}, {0xe, 0x5}]}, @typedef={0x4, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x30, 0x5f, 0x61, 0x0, 0x30]}}, &(0x7f00000004c0)=""/232, 0x5b, 0xe8, 0x0, 0xc8000000, 0x10000, @value=r9}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x210c, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000157a82810d000000000018c0000072019f0000000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0xf, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe62}, 0x94) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x3, @loopback, 0x101}}, 0x0, 0x0, 0x48, 0x0, "8e4ed5b6cd6e3a3be2da5590ede383d2d7ac8deb4a44299f9f0cf768192aed7631289c5d29a3aa7c5c772f383a909e691eb2eddd4322253d1e303a96c995b3e2189cf625a0720ad0fdf0917e7d9e57d5"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(r11, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) setsockopt$inet6_tcp_int(r11, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r11, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f0000001840), 0x4) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff070000140003002e000000000000d700000000000000001800128008000100707070000c00028008000100", @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90224fc60", 0x14}], 0x1}, 0x0) 4m11.507243537s ago: executing program 3 (id=4299): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000043a15cc500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], &(0x7f0000000200)='GPL\x00', 0xfffffffa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r0, 0x36, 0x0, 0xbd4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x3c, r4, 0x3c1ef5685f8d0157, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8}]}, 0x3c}}, 0x0) (async) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x3c, r4, 0x3c1ef5685f8d0157, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8}]}, 0x3c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r5, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r5, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r6}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@fallback=r1, r1, 0x20, 0x21, r1, @void, @void, @void, @value=r6, r2}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@fallback=r1, r1, 0x20, 0x21, r1, @void, @void, @void, @value=r6, r2}, 0x20) 4m11.387742602s ago: executing program 1 (id=4300): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001f00), r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0xffffe000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r4, 0x2000) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000100)=""/146, &(0x7f00000001c0)=0x92) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000815, &(0x7f0000b63fe4)={0xa, 0x2, 0x5}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xb9}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000000)=ANY=[@ANYBLOB="2cde4b60df321c", @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf25150000000c002b8008000100020000000c0006000100000001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) 4m11.245485633s ago: executing program 4 (id=4301): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f27f51010054d4077549f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f00000000c0)=0x100000001, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x20, 0x40, 0x4d, 0xe, {{0x10, 0x4, 0x3, 0x6, 0x40, 0x65, 0x0, 0x6, 0x2f, 0x0, @multicast1, @empty, {[@end, @ra={0x94, 0x4, 0x1}, @end, @rr={0x7, 0x23, 0xa1, [@remote, @private=0xa010100, @broadcast, @broadcast, @remote, @remote, @multicast1, @loopback]}]}}}}}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e22, 0x3, 'sh\x00', 0x1a, 0x60000000, 0x4c}, {@remote, 0x4e21, 0x12002, 0xf, 0xe1b2, 0x9}}, 0x44) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@newtclass={0x84, 0x28, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0x5}, {0xf, 0xb}, {0x10, 0xd}}, [@c_atm={{0x8}, {0x58, 0x2, [@TCA_ATM_HDR={0x2b, 0x3, "2d062732856ae7b19f9107dff7c7f8da380fa777b08ae685e8575d65a964d7d46789da6cefd157"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff3, 0xe}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x6}}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff2, 0xd}}, @TCA_ATM_FD={0x8, 0x1, r0}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x60000091}, 0x840) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) 4m11.023736651s ago: executing program 3 (id=4302): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x10448) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x1, 0x1001}, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x9) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800400120005001600010000000800150000c422"], 0x48}}, 0x0) 4m10.943826444s ago: executing program 1 (id=4303): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10, 0x1411, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002e80), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB='=\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fedbdf250200000008000100ffffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000840) 4m10.942228726s ago: executing program 2 (id=4304): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0xf]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xa4}}, 0x48004) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r3, 0xe) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) bind$l2tp(r4, &(0x7f0000000080)={0x2, 0x0, @broadcast, 0x2}, 0x10) 4m10.871923735s ago: executing program 0 (id=4305): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='F\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000280000001800018014000200766574683000"/38], 0x2c}}, 0x0) (async, rerun: 32) r3 = socket(0x10, 0x803, 0x0) (async, rerun: 32) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f00000005c0)=@assoc_value={0x0}, &(0x7f0000000580)=0x8) (async, rerun: 32) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) (async, rerun: 64) ioctl$INCFS_IOC_PERMIT_FILL(r7, 0x40046721, &(0x7f0000000300)={r6}) (async, rerun: 64) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000280)={r5, 0x4, 0x8}, 0x8) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x4, 0xfff, 0x20, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, 0x20, 0x8, 0x1b, 0x6}}) connect$netrom(r0, &(0x7f0000000000)={{0x6, @default}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000040d755974000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) close(r0) 4m10.683395902s ago: executing program 1 (id=4306): r0 = socket(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="199cb5ee1ca074e83157", 0xa}, {&(0x7f0000000080)="451b4cad42de6b3feee56cc65b95cb74c28ad196407f3f5f3cc0afcb9a5c7cd7e5e8fa294e05f2da7a25842554a8bed70e1772fef31e1f84b53069ccc047b5cc4a", 0x41}], 0x2}, 0x20004000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/13, 0xd}, {&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x9}}], 0x1, 0x2080, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 4m10.430501089s ago: executing program 0 (id=4307): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)='.\x00\x00\x00', 0x4}], 0x1}, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)="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", 0x57d}], 0x1, &(0x7f0000001600)}}], 0x1, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x3f0, 0xffffffff, 0x278, 0x0, 0x118, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "4dd4", 0x1}}, @common=@hbh={{0x48}, {0x6043, 0x2, 0x1, [0x2, 0x4, 0x4f, 0x0, 0x3, 0x5, 0x7ff, 0x1, 0x6, 0x401, 0x9, 0x7, 0x3ff, 0x3, 0x0, 0x800], 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=0xffffffffffffffff, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x18) (async) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, 0x0, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x800) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x800) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) (async) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) socket$netlink(0x10, 0x3, 0x10) (async) r9 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000018821840a6bc43f5000000000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000ddbedb687cc8c935a093c454f8630ce1e8de30e91c10bafd20c12485607b5de1ae916c9a9893", @ANYRESDEC=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000030000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$AUTOFS_IOC_EXPIRE(r8, 0x810c9365, &(0x7f00000000c0)={{0x42, 0x1}, 0x100, './file0\x00'}) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r10 = socket(0x25, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffe0, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffe0, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r9, 0x10e, 0x8, &(0x7f0000000080)=0x6, 0x4) 4m10.427559111s ago: executing program 4 (id=4308): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000000480)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x3, 0x0, 0x5, 0x9, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={r1, 0xffff, 0x2d, "722ae2e11e97b647fda06e8a2a130953f31bf1a55c588d4b07137a574a62284024ccee88a0f514f84e3d6ea739"}, 0x35) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(r2, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) connect$vsock_stream(r2, 0x0, 0x0) (async) connect$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x2711, @hyper}, 0x10) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}}, 0x1c}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 4m10.322109064s ago: executing program 3 (id=4309): sendto$netrom(0xffffffffffffffff, &(0x7f0000000500)="22e7752d03a2ee3b4e6f71d1c52cfc66d235716ebc639c2958e882ba1705def1a34c88c595af0e5ae41d0b8be473f71952a749846cdf53c15c0ac30713f6b2575d2301f0760f6c742ee2bff4e9266b3f508f6e20c123a6bd371cc2767cc28fd18dec272799d6b29e14cbce9b37702520e6f9feb1aedf2e7d44fe34", 0x7b, 0x40821, &(0x7f0000000740)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x20, 0x140d, 0x1, 0x70bd28, 0x4, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}]}, 0x52}, 0x1, 0x0, 0x0, 0x10}, 0x0) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/111, 0x6f}, {&(0x7f0000000180)=""/206, 0xce}, {&(0x7f0000000280)=""/72, 0x48}], 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000150001032dbd7000000000000c1600000800040001"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x1ff) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000dc0)={0x2, 'ip6tnl0\x00', 0x3}, 0x18) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x2000000, '\x00', 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x4}, {0x6, 0x1}, {0x7, 0x3}, {0x81}], "a6e53da70a0a1274"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8c0}, 0x20000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b400000000000000791090000000000063000000000000009500000000000000b8a164aed91d3d5b664c4ca806f01293f84f25209077b1bb4ab4cf447b29fad55603aa97715b6f60e53760e0565b07dd0f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5c38b46af21a0", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="fd", 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0xd, 0x10, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRESHEX=r4, @ANYBLOB="0000000002000000b7383d000800000085a000008f0000009535ae7696d1c8cd778c78a8dc0d23ccdce9a24e2a36a0b165defa443a3e9e2000255c69a4444dfe0e8d958c4cde2ef0780fb1257175b172bde0c7bcc0"], &(0x7f0000000300)='GPL\x00'}, 0x94) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'syztnl0\x00', &(0x7f0000000840)={'syztnl2\x00', 0x0, 0x2f, 0x17, 0x7, 0x6, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, 0x8000, 0x8, 0x8658, 0x5}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000d80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d40)={&(0x7f0000001240)={0x43c, r6, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x3f4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_MASK={0x45, 0x5, "6b0c7c839d22641e8e68881098fce69f28c733f0722ff56aded1718381b11f94fde29d3a2249a4aa9e000f786b07d729b82f32c41e5e65ee197f7887fdba193c20"}, @ETHTOOL_A_BITSET_MASK={0x49, 0x5, "b460c49d8aca8d71dff8d151653e8a51e10ddebbd4c242656c003e9cac5fa1dabfd1ab0a67e64c5e61fb49917c5ce81e01cdf3a70b6e2796e3b68ea04b01fd7f837f13dff8"}, @ETHTOOL_A_BITSET_MASK={0xba, 0x5, "ba7fb8012924160f0f583b85ce877718595a3f4bacba7d0503aa54b793003dd57a261216ada1559ac548bbff3929d7091a80f5e3f70a6da45ea6c3f2c05cbc0e98175d9e3caca0ad7eaa96b682e412f92c06df523a3d7658183f1dd21672191e1a14f024d3e5595419420c45819fff98a1d48add5f53198317ff686eef604c7d80deaf46c3d5d744efc1793efbddc94d37b8667b0e65445fab1f74a568abbf65620883d347ad269da8697765b749753452193a4b6108"}, @ETHTOOL_A_BITSET_BITS={0x19c, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '-#!$\'%-+\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-:\x00'}]}, {0x4}, {0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\\x80)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x35, 0x2, '\x00M\xa4{\xfe\x0f\xfe\xaf~\x8d\xc2\xdf\x1bk7(\xba\xffE:\xd0\xc6\xbe\xfd\xe2k\x87\x85\xd0\x05\xf4Q\xcc\x11\xfb\xe5\xf3i\x15j\x1f\xa9*\xc2\x1d\xd4\xd2\xae\xa9'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '}*}-^..)&#*\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0xfffffdb9, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd70}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '}[)\xb5:%.\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xa8]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x6b9a}, @ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, 'ip6tnl0\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xde, 0x4, "c3eb2daf1c2ffba7ebde4256a35902b9b1d9a967ffb86eeaa69f5ffa3bc1967292598a095c2b1e6873e965d56a3f1d9c7af692bc94499883c2ffc6fd42ea0a65d40d6348bbe929343f6d20ae5d69d293b90130102ddf009a14f37dd0ed1b76a94162dc48b25e7d805feaf2aaa2891e09d686d647b549638b83d9d34d8c4cd761511074eb18cd7ccec1eec32cd8b824ae30e18da826aa844ed39a2fa37aac9e02218652fab010a16a69334564a8d70f8e3a4302eec25f3f088e1faf91f6601b73d5e1675845549679137ebc8d8c13368c9c9948d748ef794d099b"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x43c}, 0x1, 0x0, 0x0, 0x48041}, 0x41) 4m10.131396358s ago: executing program 1 (id=4310): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00038008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="74000000100003050000000000000a1a90e30000", @ANYRES32=0x0, @ANYBLOB="00000000010000004c0012800c0001006d6163766c616e003c00028008000100100000001c00058018000400aaaaaaaaaabb000002000400d8928a2ced1fe60008000300030000000a000400aa"], 0x74}}, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x40, 0x0, 0x824, 0x70bd26, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3c}]}, 0x40}}, 0x40) 4m10.071111452s ago: executing program 2 (id=4311): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000001080)={'gretap0\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x10, 0x0, 0xe, 0x71, {{0x3a, 0x4, 0x1, 0x8, 0xe8, 0x65, 0x0, 0xcf, 0x29, 0x0, @rand_addr=0x64010102, @loopback, {[@rr={0x7, 0xb, 0x71, [@rand_addr=0x64010102, @multicast2]}, @generic={0x94, 0x12, "ceca913458168a7c03d400fb1583412f"}, @timestamp={0x44, 0x10, 0xba, 0x0, 0x0, [0x2, 0x2, 0x5]}, @cipso={0x86, 0x2c, 0x0, [{0x1, 0x9, "1d8b6a62d3e60b"}, {0x0, 0x3, '\n'}, {0x6, 0x8, "a471f167dc8c"}, {0x6, 0x10, "5d85302f4d0bc7710a20e6fa2b57"}, {0x2, 0x2}]}, @lsrr={0x83, 0x23, 0xe5, [@multicast1, @empty, @local, @multicast1, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101]}, @generic={0x83, 0x11, "2151ae94b973829156cd615eef0fc2"}, @end, @rr={0x7, 0x17, 0x83, [@empty, @local, @local, @dev={0xac, 0x14, 0x14, 0x1f}, @private=0xa010100]}, @rr={0x7, 0x2b, 0xef, [@multicast2, @empty, @broadcast, @multicast1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x19}, @local]}, @end]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES16=r3, @ANYRES8=r1, @ANYRES64=r4, @ANYRES16, @ANYRESDEC, @ANYRES32=r1, @ANYBLOB="a7ee35", @ANYRES8=r5], 0x50) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {0x23}}, 0x14}}, 0x400c0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000d40)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x20}) r6 = socket(0x11, 0x3, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c200000086dd6000000200503a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0802907800000000600008100000160000000000000000000000dcff00000000fc02000000000000000000000000000000000000000000000001000000000000fb36eeca6fad50b375a22a584d16ca55"], 0x0) socket$kcm(0x21, 0x2, 0xa) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x20) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000001140)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local}, 0x14) socket$kcm(0x10, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000001180)=@newtaction={0x84, 0x30, 0x101, 0x0, 0x0, {}, [{0x70, 0x1, [@m_connmark={0x6c, 0x1, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x9}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x2, 0x20000000, 0xfffffff7, 0xc02}, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 4m10.041266725s ago: executing program 4 (id=4312): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x1}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e26, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x845) 4m9.932818273s ago: executing program 0 (id=4313): syz_init_net_socket$ax25(0x3, 0x2, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xb, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000000c0)) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=ANY=[@ANYBLOB="1801aa1d7249010000000000ffdbdf25ac0f000000000014000a0000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b8100a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd0400e900000000", @ANYRES32=r2, @ANYBLOB="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"], 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x24, 0x18, 0x1, 0x70bd2c, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x24}}, 0x20000080) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000280)=0xa, 0x4) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c20000000180c200000e86dd60010100001611fffe800000000000000000000000000037fe8000000000000000000000000000aa00000e9000169078020300000000000030b00ae98e79"], 0x0) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r8, &(0x7f0000000100)='reno\x00', 0x5) write$tcp_congestion(r8, &(0x7f0000000300)='reno\x00', 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) socket(0x22, 0x6, 0x40) 4m9.767850093s ago: executing program 3 (id=4314): unshare(0x20000400) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'dh\x00', 0x20, 0xfffffffe, 0x8000007f}, 0x2c) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f00000004c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) r2 = socket(0x23, 0x805, 0x0) connect$vsock_stream(r2, 0x0, 0x0) 4m9.671305398s ago: executing program 4 (id=4315): shutdown(0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/cgroup\x00') pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x8, 0x0, 0x8000) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x88, @dev={0xac, 0x14, 0x14, 0x4}, 0x0, 0x0, 'dh\x00', 0x0, 0x8000}, 0x2c) syz_emit_ethernet(0x46, &(0x7f0000001340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@llc_tr={0x11, {@llc={0xd4, 0xe, "e7", "ac68fde51e1a59c78ff0e1cb982845a8fd0d0553498470c07d1301c95980451255a2a4a43dc8cf2b4e9276392316af19890ac51175"}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r2, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @empty}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e22, 0x3ff, @empty, 0x6}}, 0x7d, 0x0, 0x40, 0x5, 0x0, 0x4, 0x1}, &(0x7f00000002c0)=0x9c) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfd}, [@RTA_PREF={0x5, 0x14, 0x4}]}, 0x24}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r3, 0x8954, &(0x7f0000000040)={{0x2, 0x0, @loopback}, {0x6, @random="996386d83c53"}, 0x6, {0x2, 0x4e23, @empty}, 'lo\x00'}) shutdown(0xffffffffffffffff, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/cgroup\x00') (async) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket(0x8, 0x0, 0x8000) (async) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x88, @dev={0xac, 0x14, 0x14, 0x4}, 0x0, 0x0, 'dh\x00', 0x0, 0x8000}, 0x2c) (async) syz_emit_ethernet(0x46, &(0x7f0000001340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@llc_tr={0x11, {@llc={0xd4, 0xe, "e7", "ac68fde51e1a59c78ff0e1cb982845a8fd0d0553498470c07d1301c95980451255a2a4a43dc8cf2b4e9276392316af19890ac51175"}}}}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x1, 0x8010000000000084) (async) sendmmsg$inet6(r2, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) (async) shutdown(r2, 0x1) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @empty}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e22, 0x3ff, @empty, 0x6}}, 0x7d, 0x0, 0x40, 0x5, 0x0, 0x4, 0x1}, &(0x7f00000002c0)=0x9c) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfd}, [@RTA_PREF={0x5, 0x14, 0x4}]}, 0x24}}, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_SIOCSARP(r3, 0x8954, &(0x7f0000000040)={{0x2, 0x0, @loopback}, {0x6, @random="996386d83c53"}, 0x6, {0x2, 0x4e23, @empty}, 'lo\x00'}) (async) 4m9.55137449s ago: executing program 1 (id=4316): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'lo\x00', 0x2}, 0x18) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000040)=""/38, &(0x7f0000000180)=0x26) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000100)={{0x2, 0x4e22, @multicast2}, {0x6, @remote}, 0x49, {0x2, 0x4e22, @private=0xa010101}, 'wg0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}]}}}]}, 0x40}}, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newnexthop={0x24, 0x68, 0x109, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x24}}, 0x0) 4m9.45972411s ago: executing program 0 (id=4317): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xc}, &(0x7f00000000c0)=0x8) r1 = socket(0x10, 0x3, 0x0) getpeername$packet(r1, 0x0, 0x0) write(r1, &(0x7f0000000080)="240000001a007f0214f9f4070009040802000000000000050002000008000f40fe00000e", 0x24) getsockopt$bt_hci(r0, 0x84, 0x3, &(0x7f0000001140)=""/4121, &(0x7f0000000000)=0x1019) 4m9.458809498s ago: executing program 2 (id=4318): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf251800000008000300", @ANYRES32=r2, @ANYBLOB="0a001a0008021100000000000a000600080211004ca27958"], 0x34}}, 0x24004054) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, 0x0, 0x4) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, 0x0, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r5 = syz_genetlink_get_family_id$mptcp(0x0, r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x34048084) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f00000007c0)='nr0\x00') r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000011140143bcaf6c426a531625080003000100000008004b000000000008004b001300000008004a000000000008000100"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, 0x0, 0x4008040) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0xf09828cd218a8e58}, 0x8801) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x4004010) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xc, 0x7}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x18, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xd89}, @TCA_TBF_RATE64={0xc, 0x4, 0xe3c996fce18f90bb}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000828bd7000ffdbdf250100000048000680060001000200000008000700", @ANYRES32=r10, @ANYBLOB="060005004e2200000f2dde6be24615f714000400fe80000000000000000000000000002d050002000500000008000600040000000800030008000000050005002600000008000400090000000800040000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x2000004}, 0x4040) socket$netlink(0x10, 0x3, 0x14) 4m9.278539657s ago: executing program 3 (id=4319): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x54, 0xa, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_EXPRESSIONS={0x40, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 4m9.226561882s ago: executing program 4 (id=4320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001340)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r2], 0x54}}, 0x800) 4m9.119298442s ago: executing program 1 (id=4321): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="04"], 0x48}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x5b, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESDEC=r0], 0x128}}, 0x20000010) 2m55.675914915s ago: executing program 0 (id=4322): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x2, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0xfff1, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x10}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) socket$nl_route(0x10, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='l', 0x1}], 0x1, &(0x7f0000000380)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x9}}, @sndrcv={0x30, 0x84, 0x1, {0x3, 0x7fff, 0x200, 0x3, 0x7, 0x9, 0x6, 0xffffffff}}], 0x48, 0x2000}, 0x6) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 0s ago: executing program 32 (id=4321): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="04"], 0x48}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x5b, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESDEC=r0], 0x128}}, 0x20000010) kernel console output (not intermixed with test programs): 0: port 1(bridge_slave_0) entered disabled state [ 303.890012][T16231] bridge10: entered promiscuous mode [ 303.895460][T16231] bridge10: entered allmulticast mode [ 304.213416][T16257] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 304.229728][T16257] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.251821][T16254] tipc: Enabled bearer , priority 0 [ 304.261794][T16245] infiniband !yz!: set down [ 304.267386][T16245] infiniband !yz!: added team_slave_0 [ 304.310143][T16254] syzkaller0: entered promiscuous mode [ 304.317846][T16245] RDS/IB: !yz!: added [ 304.318535][T16254] syzkaller0: entered allmulticast mode [ 304.322966][T16245] smc: adding ib device !yz! with port count 1 [ 304.335016][T16245] smc: ib device !yz! port 1 has no pnetid [ 304.342005][T16254] tipc: Resetting bearer [ 304.356993][T16252] tipc: Resetting bearer [ 304.464754][T16265] __nla_validate_parse: 77 callbacks suppressed [ 304.464775][T16265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2900'. [ 305.919967][T16252] tipc: Disabling bearer [ 306.106163][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 306.114282][ C0] lec:lec_tx_timeout: lec0 [ 306.118992][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 306.136785][T16276] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2903'. [ 306.420138][T16296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2911'. [ 306.450197][T16296] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2911'. [ 306.475402][T16296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2911'. [ 306.528998][T16296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2911'. [ 306.919737][T16321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2921'. [ 306.934945][T16322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2918'. [ 306.981589][T16319] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2920'. [ 307.168389][T16331] bond0: Caught tx_queue_len zero misconfig [ 307.370712][T16345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2929'. [ 308.220137][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 308.229407][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 308.240478][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 308.253341][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 308.263198][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 308.305054][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 308.319036][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 308.346820][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 308.369642][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 308.382565][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 308.485551][ T3506] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.511964][ T3506] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.626513][T16392] 8021q: adding VLAN 0 to HW filter on device bond12 [ 308.789411][ T3506] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.816757][ T3506] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.858683][T16382] lo speed is unknown, defaulting to 1000 [ 308.868610][T16382] wlan0 speed is unknown, defaulting to 1000 [ 308.928568][ T3506] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.950485][ T3506] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.149237][ T3506] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.177762][ T3506] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.398703][T16438] chnl_net:caif_netlink_parms(): no params data found [ 309.490178][T16430] syzkaller1: entered allmulticast mode [ 309.587096][T16444] dvmrp0: entered allmulticast mode [ 309.651271][T16447] dvmrp0: left allmulticast mode [ 309.667771][T16447] dvmrp6: left allmulticast mode [ 309.788937][ T3506] bridge_slave_1: left allmulticast mode [ 309.795291][ T3506] bridge_slave_1: left promiscuous mode [ 309.811263][ T3506] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.827726][ T3506] bridge_slave_0: left allmulticast mode [ 309.833497][ T3506] bridge_slave_0: left promiscuous mode [ 309.840172][ T3506] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.993579][T16474] __nla_validate_parse: 9 callbacks suppressed [ 309.993599][T16474] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2959'. [ 310.011034][T16474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2959'. [ 310.069582][ T3506] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 310.079396][ T3506] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 310.090297][ T3506] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 26:d2:67:55:cd:9c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 310.475850][ T52] Bluetooth: hci0: command tx timeout [ 310.586501][ T3506] bond0 (unregistering): (slave bridge5): Releasing backup interface [ 310.594668][ T3506] bridge5 (unregistering): left promiscuous mode [ 310.824387][ T3506] bond1 (unregistering): (slave veth3): Releasing backup interface [ 310.834097][ T3506] bond1 (unregistering): Released all slaves [ 310.931903][ T3506] bond2 (unregistering): (slave veth7): Releasing backup interface [ 310.941471][ T3506] bond2 (unregistering): Released all slaves [ 311.042991][ T3506] bond3 (unregistering): Released all slaves [ 311.125701][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 311.133741][ C0] lec:lec_tx_timeout: lec0 [ 311.139355][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 311.152807][ T3506] bond4 (unregistering): Released all slaves [ 311.242192][ T3506] bond0 (unregistering): Released all slaves [ 311.254409][ T3506] bond5 (unregistering): Released all slaves [ 311.432743][ T3506] : left promiscuous mode [ 311.511950][T16480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2961'. [ 311.531206][T16480] netlink: 50 bytes leftover after parsing attributes in process `syz.0.2961'. [ 311.541661][T16480] netlink: 50 bytes leftover after parsing attributes in process `syz.0.2961'. [ 311.582780][ T3506] tipc: Disabling bearer [ 311.612864][ T3506] tipc: Disabling bearer [ 311.635765][ T3506] tipc: Left network mode [ 311.641787][T16488] pim6reg: entered allmulticast mode [ 311.718586][ T3506] IPVS: stopping backup sync thread 13299 ... [ 311.737790][T16488] pim6reg: left allmulticast mode [ 312.046953][T16382] chnl_net:caif_netlink_parms(): no params data found [ 312.287166][T16541] warn_alloc: 1 callbacks suppressed [ 312.287184][T16541] syz.0.2977: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 312.310223][T16541] CPU: 0 UID: 0 PID: 16541 Comm: syz.0.2977 Not tainted syzkaller #0 PREEMPT(full) [ 312.310250][T16541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 312.310265][T16541] Call Trace: [ 312.310273][T16541] [ 312.310283][T16541] dump_stack_lvl+0x189/0x250 [ 312.310319][T16541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.310348][T16541] ? __pfx__printk+0x10/0x10 [ 312.310370][T16541] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 312.310399][T16541] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 312.310430][T16541] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 312.310470][T16541] warn_alloc+0x214/0x310 [ 312.310501][T16541] ? stack_depot_save_flags+0x40/0x860 [ 312.310537][T16541] ? __pfx_warn_alloc+0x10/0x10 [ 312.310568][T16541] ? kasan_save_track+0x3e/0x80 [ 312.310595][T16541] ? __kasan_kmalloc+0x93/0xb0 [ 312.310625][T16541] ? xsk_setsockopt+0x4dc/0x8d0 [ 312.310648][T16541] ? do_sock_setsockopt+0x17c/0x1b0 [ 312.310668][T16541] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 312.310687][T16541] ? do_syscall_64+0xfa/0xfa0 [ 312.310713][T16541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.310744][T16541] __vmalloc_node_range_noprof+0x125/0x12d0 [ 312.310806][T16541] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 312.310841][T16541] ? __kasan_kmalloc+0x93/0xb0 [ 312.310877][T16541] vmalloc_user_noprof+0xad/0xf0 [ 312.310907][T16541] ? xskq_create+0xbf/0x170 [ 312.310935][T16541] xskq_create+0xbf/0x170 [ 312.310965][T16541] xsk_init_queue+0xb0/0x110 [ 312.310995][T16541] xsk_setsockopt+0x4dc/0x8d0 [ 312.311024][T16541] ? __pfx_xsk_setsockopt+0x10/0x10 [ 312.311053][T16541] ? __pfx_aa_sk_perm+0x10/0x10 [ 312.311084][T16541] ? aa_sock_opt_perm+0xff/0x1b0 [ 312.311119][T16541] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 312.311138][T16541] ? __pfx_xsk_setsockopt+0x10/0x10 [ 312.311166][T16541] do_sock_setsockopt+0x17c/0x1b0 [ 312.311192][T16541] __x64_sys_setsockopt+0x13f/0x1b0 [ 312.311220][T16541] do_syscall_64+0xfa/0xfa0 [ 312.311247][T16541] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.311276][T16541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.311296][T16541] ? clear_bhb_loop+0x60/0xb0 [ 312.311321][T16541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.311342][T16541] RIP: 0033:0x7f986798f749 [ 312.311361][T16541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.311379][T16541] RSP: 002b:00007f9868904038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 312.311401][T16541] RAX: ffffffffffffffda RBX: 00007f9867be5fa0 RCX: 00007f986798f749 [ 312.311417][T16541] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 312.311429][T16541] RBP: 00007f9867a13f91 R08: 0000000000000004 R09: 0000000000000000 [ 312.311442][T16541] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.311462][T16541] R13: 00007f9867be6038 R14: 00007f9867be5fa0 R15: 00007fff93896668 [ 312.311499][T16541] [ 312.311507][T16541] Mem-Info: [ 312.379765][T16542] xt_CT: You must specify a L4 protocol and not use inversions on it [ 312.385089][T16541] active_anon:4868 inactive_anon:0 isolated_anon:0 [ 312.385089][T16541] active_file:2761 inactive_file:39966 isolated_file:0 [ 312.385089][T16541] unevictable:768 dirty:116 writeback:0 [ 312.385089][T16541] slab_reclaimable:12707 slab_unreclaimable:165067 [ 312.385089][T16541] mapped:29059 shmem:1364 pagetables:1106 [ 312.385089][T16541] sec_pagetables:0 bounce:0 [ 312.385089][T16541] kernel_misc_reclaimable:0 [ 312.385089][T16541] free:1262585 free_pcp:15694 free_cma:0 [ 312.421571][T16542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2976'. [ 312.422622][T16541] Node 0 active_anon:19472kB inactive_anon:0kB active_file:11044kB inactive_file:159664kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116236kB dirty:464kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14124kB pagetables:4268kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 312.559184][ T52] Bluetooth: hci0: command tx timeout [ 312.717264][T16541] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 312.747928][T16541] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 312.778898][T16541] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 312.784696][T16541] Node 0 DMA32 free:1149736kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19572kB inactive_anon:0kB active_file:11044kB inactive_file:159664kB unevictable:1536kB writepending:464kB zspages:0kB present:3129332kB managed:2565152kB mlocked:0kB bounce:0kB free_pcp:40176kB local_pcp:18452kB free_cma:0kB [ 312.819136][T16541] lowmem_reserve[]: 0 0 0 0 0 [ 312.823968][T16541] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 312.854228][T16541] lowmem_reserve[]: 0 0 0 0 0 [ 312.860030][T16541] Node 1 Normal free:3885704kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22488kB local_pcp:9080kB free_cma:0kB [ 312.875647][T16546] vlan2: entered promiscuous mode [ 312.899832][T16541] lowmem_reserve[]: 0 0 0 0 0 [ 312.904652][T16546] bridge0: entered promiscuous mode [ 312.904809][T16541] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 312.949845][T16541] Node 0 DMA32: 672*4kB (ME) 481*8kB (ME) 161*16kB (UME) 189*32kB (UM) 131*64kB (UME) 64*128kB (UME) 26*256kB (UM) 18*512kB (UME) 8*1024kB (UME) 8*2048kB (UM) 263*4096kB (UM) = 1149432kB [ 312.972035][T16541] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 312.992985][T16382] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.001766][T16382] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.026097][T16382] bridge_slave_0: entered allmulticast mode [ 313.056911][T16382] bridge_slave_0: entered promiscuous mode [ 313.069177][T16541] Node 1 Normal: 116*4kB (UE) 43*8kB (UME) 34*16kB (UME) 64*32kB (UME) 23*64kB (UME) 9*128kB (UME) 5*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 945*4096kB (M) = 3885704kB [ 313.073044][T16382] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.110754][T16560] Bluetooth: MGMT ver 1.23 [ 313.119116][T16541] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 313.131146][T16382] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.139478][T16382] bridge_slave_1: entered allmulticast mode [ 313.146112][T16541] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 313.151749][T16382] bridge_slave_1: entered promiscuous mode [ 313.157600][T16541] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 313.171561][T16564] netlink: 'syz.3.2982': attribute type 5 has an invalid length. [ 313.171901][T16541] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 313.190646][T16541] 44087 total pagecache pages [ 313.195496][T16541] 0 pages in swap cache [ 313.215844][T16541] Free swap = 124996kB [ 313.220052][T16541] Total swap = 124996kB [ 313.226871][T16541] 2097051 pages RAM [ 313.230813][T16541] 0 pages HighMem/MovableOnly [ 313.240218][T16541] 424121 pages reserved [ 313.245456][T16541] 0 pages cma reserved [ 313.328874][T16573] netlink: 'syz.3.2983': attribute type 1 has an invalid length. [ 313.481043][T16382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.494377][T16382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.522225][T16585] xt_CT: You must specify a L4 protocol and not use inversions on it [ 313.677493][T16589] openvswitch: netlink: IP tunnel dst address not specified [ 313.794941][T16382] team0: Port device team_slave_0 added [ 313.833713][T16382] team0: Port device team_slave_1 added [ 313.989613][ T3506] hsr_slave_0: left promiscuous mode [ 314.007861][T16606] netlink: 'syz.3.2991': attribute type 4 has an invalid length. [ 314.015878][ T3506] hsr_slave_1: left promiscuous mode [ 314.024282][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.033185][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.044730][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.053894][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.061972][T16608] netlink: 'syz.3.2991': attribute type 4 has an invalid length. [ 314.094613][ T3506] vlan0: left allmulticast mode [ 314.102014][ T3506] vlan0: left promiscuous mode [ 314.116301][ T3506] veth0_macvtap: left promiscuous mode [ 314.122468][ T3506] veth1_vlan: left promiscuous mode [ 314.142801][T16584] infiniband syû: set down [ 314.146886][ T3506] veth0_vlan: left promiscuous mode [ 314.148212][T16584] infiniband syû: added bond_slave_0 [ 314.229693][T16584] RDS/IB: syû: added [ 314.244949][T16584] smc: adding ib device syû with port count 1 [ 314.255062][T16584] smc: ib device syû port 1 has no pnetid [ 314.473466][ T3506] team0 (unregistering): Port device veth1_macvtap removed [ 314.519639][ T3506] vlan1 (unregistering): left allmulticast mode [ 314.526304][ T3506] veth0_vlan (unregistering): left allmulticast mode [ 314.639049][ T52] Bluetooth: hci0: command tx timeout [ 314.785530][ T3506] team0 (unregistering): Port device team_slave_1 removed [ 314.826891][ T3506] team0 (unregistering): Port device team_slave_0 removed [ 315.204989][T16382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.212803][T16382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.239477][T16382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.255415][T16382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.274716][T16382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.310693][T16382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.324720][T16607] tipc: Enabled bearer , priority 0 [ 315.348814][T16609] syzkaller0: entered promiscuous mode [ 315.373771][T16609] syzkaller0: entered allmulticast mode [ 315.387201][T11248] lo speed is unknown, defaulting to 1000 [ 315.392997][T11248] syz2: Port: 1 Link DOWN [ 315.397614][T16618] tipc: Resetting bearer [ 315.442390][T16616] tipc: Resetting bearer [ 315.506644][T16616] tipc: Disabling bearer [ 315.513092][T16627] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2994'. [ 315.555746][T16627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2994'. [ 315.581366][T16629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.647315][T16382] hsr_slave_0: entered promiscuous mode [ 315.664602][T16382] hsr_slave_1: entered promiscuous mode [ 316.716886][ T52] Bluetooth: hci0: command tx timeout [ 317.053308][T16657] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3001'. [ 317.196405][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6060 ms [ 317.204466][ C0] lec:lec_tx_timeout: lec0 [ 317.215248][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 317.584596][T16669] tipc: Can't bind to reserved service type 0 [ 317.592534][T16669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3006'. [ 317.729271][T16676] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.870853][T16671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3005'. [ 318.185249][T16700] dvmrp0: entered allmulticast mode [ 318.218355][T16700] dvmrp0: left allmulticast mode [ 318.262949][T16703] vlan2: entered promiscuous mode [ 318.268626][T16703] vlan2: entered allmulticast mode [ 318.273802][T16703] hsr_slave_1: entered allmulticast mode [ 318.291709][T16382] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 318.304417][T16709] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 318.355374][T16382] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 318.370780][T16382] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 318.390862][T16382] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 318.580272][T16736] IPVS: sync thread started: state = BACKUP, mcast_ifn = syzkaller0, syncid = 4, id = 0 [ 318.610864][T16737] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3020'. [ 318.635806][T16739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3019'. [ 318.650343][T16382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.722797][T16382] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.764345][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.771658][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.794729][T16744] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3023'. [ 318.858694][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.866037][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.229350][T16769] wlan0 speed is unknown, defaulting to 1000 [ 319.402117][T16777] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3034'. [ 319.431472][T16779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3032'. [ 319.483625][ T3506] IPVS: stop unused estimator thread 0... [ 319.608600][T16788] netlink: 'syz.3.3035': attribute type 1 has an invalid length. [ 319.692333][T16793] x_tables: duplicate underflow at hook 1 [ 319.714248][T16788] 8021q: adding VLAN 0 to HW filter on device bond10 [ 319.864291][T16792] bond10: (slave veth15): Enslaving as an active interface with a down link [ 319.898003][T16794] A link change request failed with some changes committed already. Interface bond10 may have been left with an inconsistent configuration, please check. [ 319.998703][T16382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.160773][T16808] netlink: 'syz.2.3040': attribute type 1 has an invalid length. [ 320.260871][T16813] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 320.268546][T16813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.314032][T16815] geneve2: entered promiscuous mode [ 320.320072][T16815] geneve2: entered allmulticast mode [ 320.363983][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.381258][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.426004][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.455267][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.571312][T16829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.600247][T16824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.705427][T16831] tipc: Enabled bearer , priority 0 [ 320.761400][T16826] syzkaller0: entered promiscuous mode [ 320.768833][T16826] syzkaller0: entered allmulticast mode [ 320.803205][T16826] tipc: Resetting bearer [ 320.829154][T16825] tipc: Resetting bearer [ 320.834686][ T7069] hid-generic 0005:0C49:1012.0002: unknown main item tag 0x1 [ 320.851320][ T7069] hid-generic 0005:0C49:1012.0002: ignoring exceeding usage max [ 320.860426][ T7069] hid-generic 0005:0C49:1012.0002: unknown main item tag 0x4 [ 320.868891][ T7069] hid-generic 0005:0C49:1012.0002: unknown main item tag 0x5 [ 320.876994][ T7069] hid-generic 0005:0C49:1012.0002: reserved main item tag 0xd [ 320.886695][ T7069] hid-generic 0005:0C49:1012.0002: item fetching failed at offset 31/77 [ 320.896045][ T7069] hid-generic 0005:0C49:1012.0002: probe with driver hid-generic failed with error -22 [ 320.909021][T16841] netlink: 'syz.1.3049': attribute type 1 has an invalid length. [ 320.917907][T16825] tipc: Disabling bearer [ 320.964768][T16843] x_tables: duplicate underflow at hook 2 [ 320.995224][T16382] veth0_vlan: entered promiscuous mode [ 321.067614][T16382] veth1_vlan: entered promiscuous mode [ 321.251486][T16382] veth0_macvtap: entered promiscuous mode [ 321.262187][T16382] veth1_macvtap: entered promiscuous mode [ 321.299622][T16382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.366451][T16382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.401495][ T7226] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.426161][ T7226] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.454073][ T7226] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.486284][ T7226] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.654290][ T3506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.692332][ T3506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.782740][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.799766][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.969345][T16889] __nla_validate_parse: 7 callbacks suppressed [ 321.969368][T16889] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3066'. [ 322.125093][T16896] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3069'. [ 322.269679][T16906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3073'. [ 322.610429][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 322.622045][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 322.632130][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 322.645458][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 322.655508][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 322.753618][T16923] wlan0 speed is unknown, defaulting to 1000 [ 322.955599][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 322.963677][ C0] lec:lec_tx_timeout: lec0 [ 322.999977][T16940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3080'. [ 323.026094][T16940] netlink: 'syz.2.3080': attribute type 22 has an invalid length. [ 323.059005][T16942] netlink: 'syz.4.3081': attribute type 10 has an invalid length. [ 323.062580][T16940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3080'. [ 323.067806][T16942] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3081'. [ 323.094324][T16942] dummy0: entered promiscuous mode [ 323.111639][T16942] bridge0: port 3(dummy0) entered blocking state [ 323.140706][T16942] bridge0: port 3(dummy0) entered disabled state [ 323.161519][T16942] dummy0: entered allmulticast mode [ 323.175961][T16942] bridge0: port 3(dummy0) entered blocking state [ 323.182530][T16942] bridge0: port 3(dummy0) entered forwarding state [ 323.209825][T16940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3080'. [ 323.230534][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.239975][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.250035][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.286034][T16940] netlink: 'syz.2.3080': attribute type 22 has an invalid length. [ 323.295343][T16940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3080'. [ 323.331450][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.698999][T16954] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 323.769048][T16973] netlink: 'syz.1.3088': attribute type 14 has an invalid length. [ 323.797807][T16973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3088'. [ 323.862209][T16978] netlink: 'syz.4.3091': attribute type 1 has an invalid length. [ 323.900045][T16978] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 324.313602][T16923] chnl_net:caif_netlink_parms(): no params data found [ 324.327140][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 324.353318][T17007] IPv6: sit3: Disabled Multicast RS [ 324.361496][T17007] sit3: entered allmulticast mode [ 324.432621][T17012] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3102'. [ 324.629655][T16923] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.647253][T16923] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.654560][T16923] bridge_slave_0: entered allmulticast mode [ 324.663239][T16923] bridge_slave_0: entered promiscuous mode [ 324.685279][T16923] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.695050][T16923] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.703394][T16923] bridge_slave_1: entered allmulticast mode [ 324.711745][T16923] bridge_slave_1: entered promiscuous mode [ 324.718990][ T52] Bluetooth: hci5: command tx timeout [ 324.842147][T16923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.875424][T16923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.946813][T16923] team0: Port device team_slave_0 added [ 325.024882][T16923] team0: Port device team_slave_1 added [ 325.153156][T16923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.163127][T16923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.191849][T16923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.207843][T16923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.214997][T16923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.244230][T16923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.329579][T16923] hsr_slave_0: entered promiscuous mode [ 325.351975][T16923] hsr_slave_1: entered promiscuous mode [ 325.368540][T16923] debugfs: 'hsr0' already exists in 'hsr' [ 325.384637][T16923] Cannot create hsr debugfs directory [ 325.937303][T17102] netlink: 'syz.1.3124': attribute type 10 has an invalid length. [ 325.988780][T17102] team0: Port device geneve0 added [ 326.406871][T17125] nbd: couldn't find a device at index 0 [ 326.447825][T17127] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 326.460582][T17127] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 326.473598][T16923] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 326.487255][T17127] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 326.500989][T16923] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 326.520808][T17127] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 326.536078][T16923] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 326.580428][T16923] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 326.796923][ T52] Bluetooth: hci5: command tx timeout [ 326.878000][T16923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.908211][T16923] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.928872][T17155] netlink: 'syz.2.3139': attribute type 10 has an invalid length. [ 326.933762][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.943904][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.954650][T17155] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 326.983837][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.991099][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.075683][ T30] audit: type=1107 audit(1763909714.952:6): pid=17161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 327.191743][T17172] __nla_validate_parse: 71 callbacks suppressed [ 327.191765][T17172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3143'. [ 327.391166][T17182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3146'. [ 327.495513][T16923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.621375][T17192] tipc: Enabling of bearer rejected, failed to enable media [ 327.658410][T16923] veth0_vlan: entered promiscuous mode [ 327.721499][T16923] veth1_vlan: entered promiscuous mode [ 327.820633][T16923] veth0_macvtap: entered promiscuous mode [ 327.865149][T16923] veth1_macvtap: entered promiscuous mode [ 327.930673][T17202] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3151'. [ 327.949146][T17205] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.965247][T17203] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 327.978497][T17205] netlink: 'syz.4.3152': attribute type 1 has an invalid length. [ 327.991564][T16923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.065420][T17205] bond1 (unregistering): Released all slaves [ 328.074296][T17199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3150'. [ 328.137272][T16923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.170642][ T1150] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.190651][ T1150] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.200127][ T1150] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.220246][ T1150] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.415068][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.427809][T17222] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 328.442739][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.510437][T17226] IPVS: length: 24 != 16106127384 [ 328.519067][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.546405][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.656656][T17228] netlink: 'syz.0.3160': attribute type 1 has an invalid length. [ 328.679762][T17230] netlink: 'syz.2.3161': attribute type 10 has an invalid length. [ 328.859189][T17239] wlan0 speed is unknown, defaulting to 1000 [ 328.876628][ T52] Bluetooth: hci5: command tx timeout [ 328.898573][T17246] tap0: tun_chr_ioctl cmd 1074025676 [ 328.903913][T17246] tap0: owner set to 0 [ 328.921245][T17246] tap0: tun_chr_ioctl cmd 35108 [ 328.967920][T17251] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3068'. [ 328.997059][T17253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3166'. [ 329.033747][T17253] netlink: 'syz.1.3166': attribute type 5 has an invalid length. [ 329.046793][T17253] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3166'. [ 329.293964][T17256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3167'. [ 329.398639][T17261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3169'. [ 329.412847][T17266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3170'. [ 329.438452][T17261] tipc: Disabling bearer [ 329.592322][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 329.603467][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 329.612580][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 329.622819][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 329.633431][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 329.808145][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.839187][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.908350][T17268] wlan0 speed is unknown, defaulting to 1000 [ 330.002621][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.015107][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.174643][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.201860][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.368356][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.384568][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.450293][T17299] netlink: 'syz.0.3179': attribute type 10 has an invalid length. [ 330.459657][T17299] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 330.478134][T17299] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 330.662560][T17313] netlink: 'syz.1.3182': attribute type 2 has an invalid length. [ 330.956296][ T52] Bluetooth: hci5: command tx timeout [ 331.323237][ T50] dvmrp6 (unregistering): left allmulticast mode [ 331.410620][ T50] team0: Port device geneve0 removed [ 331.447498][ T50] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 331.455791][ T50] bridge1 (unregistering): left promiscuous mode [ 331.462139][ T50] bridge1 (unregistering): left allmulticast mode [ 331.686305][ T52] Bluetooth: hci2: command tx timeout [ 331.980132][ T50] bond0 (unregistering): left promiscuous mode [ 331.987074][ T50] bond_slave_0: left promiscuous mode [ 331.992595][ T50] bond_slave_1: left promiscuous mode [ 332.000141][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.010356][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.021435][ T50] bond0 (unregistering): Released all slaves [ 332.123824][ T50] bond1 (unregistering): Released all slaves [ 332.229653][ T50] bond2 (unregistering): Released all slaves [ 332.335202][ T50] bond3 (unregistering): Released all slaves [ 332.452937][ T50] bond4 (unregistering): Released all slaves [ 332.558753][ T50] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 332.574063][ T50] bond5 (unregistering): (slave veth3): Releasing active interface [ 332.583686][ T50] bond5 (unregistering): Released all slaves [ 332.686257][ T50] bond6 (unregistering): (slave veth5): Releasing active interface [ 332.695494][ T50] bond6 (unregistering): Released all slaves [ 332.810158][ T50] bond7 (unregistering): Released all slaves [ 332.915384][ T50] bond8 (unregistering): (slave veth7): Releasing active interface [ 332.925249][ T50] bond8 (unregistering): Released all slaves [ 333.025178][ T50] bond9 (unregistering): Released all slaves [ 333.125095][ T50] bond10 (unregistering): Released all slaves [ 333.197755][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 333.241769][ T50] bond11 (unregistering): Released all slaves [ 333.335216][ T50] bond12 (unregistering): Released all slaves [ 333.473539][T17331] x_tables: duplicate underflow at hook 1 [ 333.610741][T17341] netlink: 'syz.1.3188': attribute type 1 has an invalid length. [ 333.620441][T17341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.757000][ T52] Bluetooth: hci2: command tx timeout [ 333.856883][T17354] __nla_validate_parse: 3 callbacks suppressed [ 333.856902][T17354] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3193'. [ 333.927874][T17354] xt_TPROXY: Can be used only with -p tcp or -p udp [ 333.942254][T17354] xt_hashlimit: overflow, try lower: 3/0 [ 334.037580][T17268] chnl_net:caif_netlink_parms(): no params data found [ 334.216058][T11242] IPVS: starting estimator thread 0... [ 334.243199][T17369] tipc: Started in network mode [ 334.248586][T17369] tipc: Node identity ac1414aa, cluster identity 4711 [ 334.257766][T17369] tipc: Enabled bearer , priority 10 [ 334.335726][T17374] IPVS: using max 28 ests per chain, 67200 per kthread [ 334.392239][T17268] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.399483][T17381] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3198'. [ 334.411946][T17268] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.413087][T17381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3198'. [ 334.421099][T17268] bridge_slave_0: entered allmulticast mode [ 334.438340][T17268] bridge_slave_0: entered promiscuous mode [ 334.454634][T17268] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.463076][T17268] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.472957][T17268] bridge_slave_1: entered allmulticast mode [ 334.490170][T17268] bridge_slave_1: entered promiscuous mode [ 334.511314][T17389] netlink: 'syz.1.3201': attribute type 13 has an invalid length. [ 334.532590][T17385] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3200'. [ 334.553984][T17389] tunl0: left promiscuous mode [ 334.563789][T17389] bond0: left promiscuous mode [ 334.572624][T17389] bond0: left allmulticast mode [ 334.581438][T17389] veth0_to_bridge: left promiscuous mode [ 334.602455][T17389] macvlan0: left allmulticast mode [ 334.609911][T17394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3200'. [ 334.658077][T17389] gtp0: left promiscuous mode [ 334.667532][T17389] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 334.677157][T17389] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 334.685481][T17389] veth7: left promiscuous mode [ 334.722079][T17389] vlan2: left promiscuous mode [ 334.727451][T17389] bridge0: left promiscuous mode [ 334.764787][T17268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.774551][T17393] tipc: Enabling not permitted [ 334.780553][T17393] tipc: Enabling of bearer rejected, failed to enable media [ 334.797843][T17392] batman_adv: batadv0: Adding interface: vlan2 [ 334.804044][T17392] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.831674][T17392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.842704][T17392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.853110][T17392] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 334.869495][T17268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.933055][T17268] team0: Port device team_slave_0 added [ 334.960287][T17268] team0: Port device team_slave_1 added [ 335.040467][T17268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.059697][T17268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.102838][T17408] netlink: 'syz.1.3206': attribute type 3 has an invalid length. [ 335.108948][T17268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.114838][T17408] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3206'. [ 335.130554][T17268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.138487][T17268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.166987][T17268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.255099][T17268] hsr_slave_0: entered promiscuous mode [ 335.277189][T17268] hsr_slave_1: entered promiscuous mode [ 335.287216][T17268] debugfs: 'hsr0' already exists in 'hsr' [ 335.293056][T17268] Cannot create hsr debugfs directory [ 335.299266][ T50] : left promiscuous mode [ 335.309826][T11242] tipc: Node number set to 2886997162 [ 335.379953][ T50] tipc: Left network mode [ 335.837882][ T52] Bluetooth: hci2: command tx timeout [ 335.865028][T17451] netlink: 'syz.4.3219': attribute type 1 has an invalid length. [ 336.001804][T17451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 336.021825][T17455] bond1: (slave gretap2): making interface the new active one [ 336.031951][T17455] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 336.140241][T17454] netlink: 'syz.0.3214': attribute type 3 has an invalid length. [ 336.160862][T17454] netlink: 'syz.0.3214': attribute type 1 has an invalid length. [ 336.179547][T17454] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3214'. [ 337.270257][ T50] batadv0: left promiscuous mode [ 337.298074][ T50] hsr_slave_0: left promiscuous mode [ 337.314405][ T50] hsr_slave_1: left promiscuous mode [ 337.323927][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.337410][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.348045][ T50] batman_adv: batadv0: Interface deactivated: dummy0 [ 337.354930][ T50] batman_adv: batadv0: Removing interface: dummy0 [ 337.369667][ T50] vlan0: left allmulticast mode [ 337.374585][ T50] veth0_vlan: left allmulticast mode [ 337.381238][ T50] vlan0: left promiscuous mode [ 337.800390][ T50] team0 (unregistering): Port device team_slave_1 removed [ 337.845192][ T50] team0 (unregistering): Port device team_slave_0 removed [ 337.916640][ T52] Bluetooth: hci2: command tx timeout [ 338.558148][T17519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3240'. [ 338.581516][T17523] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3241'. [ 338.602599][T17517] bond0: entered promiscuous mode [ 338.609474][T17517] bond_slave_0: entered promiscuous mode [ 338.615451][T17517] bond_slave_1: entered promiscuous mode [ 338.751886][T17531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3243'. [ 338.891719][ T50] IPVS: stop unused estimator thread 0... [ 338.898792][T17268] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 338.930392][T17268] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 338.955384][T17268] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 338.981988][T17268] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 339.158291][T17553] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20003 [ 339.206498][T17555] __nla_validate_parse: 3 callbacks suppressed [ 339.206517][T17555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3251'. [ 339.230708][T17268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.320913][T17268] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.391912][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.399115][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.462039][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.469278][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.511689][T17567] pim6reg1: entered promiscuous mode [ 339.528907][T17567] pim6reg1: entered allmulticast mode [ 339.559211][T17565] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 339.569843][T17565] bond1 (unregistering): Released all slaves [ 339.741984][T17573] veth0: entered promiscuous mode [ 339.812501][T17588] nbd: must specify at least one socket [ 339.919511][T17595] netlink: 'syz.1.3262': attribute type 16 has an invalid length. [ 339.944387][T17595] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3262'. [ 340.003820][T17598] pim6reg: entered allmulticast mode [ 340.026878][T17572] veth0: left promiscuous mode [ 340.311345][T17268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.334304][ T6479] lec:lec_start_xmit: lec0:No lecd attached [ 340.418596][T17614] lo: entered allmulticast mode [ 340.425797][T17622] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3268'. [ 340.443998][T17623] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3268'. [ 340.601767][T17629] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 340.611812][T17629] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 340.638948][T17627] tipc: Enabled bearer , priority 0 [ 340.680460][T17268] veth0_vlan: entered promiscuous mode [ 340.682727][T17633] netlink: 'syz.0.3271': attribute type 3 has an invalid length. [ 340.692268][T17627] tipc: Resetting bearer [ 340.719207][T17268] veth1_vlan: entered promiscuous mode [ 340.769531][T17268] veth0_macvtap: entered promiscuous mode [ 340.780683][T17268] veth1_macvtap: entered promiscuous mode [ 340.799527][T17268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.815248][T17268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.832633][ T7231] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.843500][ T7231] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.854326][ T7231] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.864285][ T7231] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.935342][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.944912][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.970090][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.978766][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.945230][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802fd88000: rx timeout, send abort [ 343.048083][T17656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3277'. [ 343.446453][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802fd88400: rx timeout, send abort [ 343.455080][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802fd88000: abort rx timeout. Force session deactivation [ 343.532494][T17679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3280'. [ 343.670415][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 343.705609][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 343.721881][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 343.747336][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 343.755314][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 343.830101][T17690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3282'. [ 343.841066][T17690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3282'. [ 343.876830][T17690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3282'. [ 343.920024][T17690] netlink: 186 bytes leftover after parsing attributes in process `syz.2.3282'. [ 343.954836][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802fd88400: abort rx timeout. Force session deactivation [ 343.993628][T17698] netlink: 'syz.1.3284': attribute type 1 has an invalid length. [ 344.080265][T17698] nbd1: detected capacity change from 0 to 127 [ 344.106041][T17701] nbd: couldn't find a device at index 0 [ 344.112963][T17702] netlink: 'syz.2.3285': attribute type 1 has an invalid length. [ 344.157690][ T52] block nbd1: Receive control failed (result -32) [ 344.278272][T17709] netlink: 'syz.1.3289': attribute type 4 has an invalid length. [ 344.299641][T17710] tipc: Started in network mode [ 344.304691][T17710] tipc: Node identity 02f12ae71258, cluster identity 4711 [ 344.316823][T17710] tipc: Enabled bearer , priority 0 [ 344.335236][T17709] __nla_validate_parse: 2 callbacks suppressed [ 344.335257][T17709] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3289'. [ 344.336520][T17710] syzkaller0: entered promiscuous mode [ 344.365377][T17710] syzkaller0: entered allmulticast mode [ 344.372685][T17714] netlink: 284 bytes leftover after parsing attributes in process `syz.3.3290'. [ 344.451392][T17711] tipc: Resetting bearer [ 344.483766][T17716] 8021q: VLANs not supported on ip_vti0 [ 344.504346][T17708] tipc: Resetting bearer [ 344.561469][T17708] tipc: Disabling bearer [ 344.740280][T17723] netlink: 'syz.1.3294': attribute type 1 has an invalid length. [ 345.066883][T17742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3299'. [ 345.474881][T17763] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3303'. [ 345.494874][T17765] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3304'. [ 345.756345][T17776] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3308'. [ 345.829281][T17686] chnl_net:caif_netlink_parms(): no params data found [ 345.837178][ T52] Bluetooth: hci1: command tx timeout [ 345.915646][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5580 ms [ 345.923832][ C0] lec:lec_tx_timeout: lec0 [ 346.084445][T17792] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3311'. [ 346.098531][T17792] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3311'. [ 346.098630][T17789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3312'. [ 346.143302][T17790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3313'. [ 346.154715][T17789] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 346.179226][T17789] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 346.189015][T17789] gretap1: entered promiscuous mode [ 346.194357][T17789] gretap1: entered allmulticast mode [ 346.203354][T17686] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.211420][T17686] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.219385][T17686] bridge_slave_0: entered allmulticast mode [ 346.228767][T17686] bridge_slave_0: entered promiscuous mode [ 346.240230][T17795] netlink: 'syz.1.3314': attribute type 4 has an invalid length. [ 346.287122][T17686] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.295121][T17686] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.324992][T17802] netlink: 'syz.3.3316': attribute type 32 has an invalid length. [ 346.333994][T17686] bridge_slave_1: entered allmulticast mode [ 346.342840][T17686] bridge_slave_1: entered promiscuous mode [ 346.443621][T17816] netlink: 'syz.2.3319': attribute type 23 has an invalid length. [ 346.502439][T17686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.542548][T17686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.678066][T17686] team0: Port device team_slave_0 added [ 346.724305][T17686] team0: Port device team_slave_1 added [ 346.845132][T17686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.854845][T17686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.868046][T17840] xt_SECMARK: invalid mode: 9 [ 346.884259][T17686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.908336][T17686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.915535][T17686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.944212][T17686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.957228][T17842] tc_dump_action: action bad kind [ 346.962839][T17837] syzkaller0: entered promiscuous mode [ 346.980394][T17837] syzkaller0: entered allmulticast mode [ 347.033570][T17836] vlan3: entered promiscuous mode [ 347.045078][T17836] geneve1: entered promiscuous mode [ 347.054010][T17836] vlan3: entered allmulticast mode [ 347.065879][T17836] geneve1: entered allmulticast mode [ 347.184618][T17686] hsr_slave_0: entered promiscuous mode [ 347.193878][T17686] hsr_slave_1: entered promiscuous mode [ 347.203338][T17686] debugfs: 'hsr0' already exists in 'hsr' [ 347.213461][T17686] Cannot create hsr debugfs directory [ 347.579436][T17862] tipc: Enabled bearer , priority 0 [ 347.634963][T17686] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.768130][T17686] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.878118][T17892] netlink: 'syz.1.3338': attribute type 1 has an invalid length. [ 347.919334][ T52] Bluetooth: hci1: command tx timeout [ 347.992117][T17892] bond4: (slave veth9): Enslaving as an active interface with a down link [ 348.080324][T17686] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.118889][T17897] 8021q: adding VLAN 0 to HW filter on device bond4 [ 348.217895][T17686] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.478616][T17686] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 348.492350][T17686] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 348.512356][T17686] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 348.529715][T17686] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 348.640219][T17686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.661925][T17686] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.674237][ T7231] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.681432][ T7231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.700094][ T7226] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.707238][ T7226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.715275][ T5911] tipc: Node number set to 279522023 [ 349.024203][T17686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.110364][T17949] SET target dimension over the limit! [ 349.153360][T17686] veth0_vlan: entered promiscuous mode [ 349.184652][T17686] veth1_vlan: entered promiscuous mode [ 349.193067][T17955] team0: No ports can be present during mode change [ 349.247550][T17956] netlink: 'syz.4.3355': attribute type 1 has an invalid length. [ 349.315091][T17961] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.343427][T17956] bond2: (slave bridge1): making interface the new active one [ 349.353212][T17956] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 349.382417][T17686] veth0_macvtap: entered promiscuous mode [ 349.403967][T17961] __nla_validate_parse: 3 callbacks suppressed [ 349.403988][T17961] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3356'. [ 349.408256][T17686] veth1_macvtap: entered promiscuous mode [ 349.442433][T17686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.457105][T17686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.494509][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.523021][T17966] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.530301][T17966] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.549399][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.569394][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.600062][T17973] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.3360'. [ 349.627309][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.728486][ T7231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.748032][ T7231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.808425][T17979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3364'. [ 349.835510][T17979] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.846476][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 349.882302][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.906523][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.998712][ T52] Bluetooth: hci1: command tx timeout [ 350.217008][T18004] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 350.326465][T18006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3373'. [ 350.347205][T18006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3373'. [ 350.437124][T18011] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3374'. [ 350.542712][T18017] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3377'. [ 350.566726][T18016] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3377'. [ 350.607040][T18014] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3378'. [ 350.790903][T18023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3381'. [ 350.803185][T18023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.837686][T18023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.875161][T18023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.909346][T18023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.229992][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 351.243424][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 351.252419][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 351.264395][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 351.296935][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 351.661746][T18055] netlink: 'syz.2.3391': attribute type 1 has an invalid length. [ 351.817810][T18055] bond1: entered promiscuous mode [ 351.861688][T18055] 8021q: adding VLAN 0 to HW filter on device bond1 [ 351.952904][T11253] IPVS: starting estimator thread 0... [ 352.048629][T18075] IPVS: using max 31 ests per chain, 74400 per kthread [ 352.076461][ T52] Bluetooth: hci1: command tx timeout [ 352.154180][T18078] netlink: 'syz.3.3396': attribute type 1 has an invalid length. [ 352.441652][T18089] netlink: 'syz.4.3400': attribute type 10 has an invalid length. [ 352.459317][T18089] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.467287][T18089] bridge_slave_1: left allmulticast mode [ 352.473071][T18089] bridge_slave_1: left promiscuous mode [ 352.481777][T18089] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.493104][T18089] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 352.782627][T18106] tipc: Enabling of bearer rejected, already enabled [ 352.805325][T18039] chnl_net:caif_netlink_parms(): no params data found [ 352.957029][T18114] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 352.994076][T18114] syzkaller0: entered promiscuous mode [ 353.000907][T18114] syzkaller0: entered allmulticast mode [ 353.003310][T18118] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 353.044194][T18039] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.053381][T18039] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.062448][T18039] bridge_slave_0: entered allmulticast mode [ 353.071625][T18039] bridge_slave_0: entered promiscuous mode [ 353.122636][T18122] xt_limit: Overflow, try lower: 271964/0 [ 353.131723][T18039] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.146330][T18039] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.158757][T18039] bridge_slave_1: entered allmulticast mode [ 353.167251][T18039] bridge_slave_1: entered promiscuous mode [ 353.188188][T18127] netlink: 'syz.2.3410': attribute type 3 has an invalid length. [ 353.188776][T18131] netlink: 'syz.3.3411': attribute type 1 has an invalid length. [ 353.352326][T18133] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 353.368056][ T52] Bluetooth: hci4: command tx timeout [ 353.368831][T18133] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 353.418310][T18133] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 353.468344][T18145] openvswitch: netlink: Duplicate key (type 1). [ 353.470598][T18039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.494941][T18039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.687215][T18039] team0: Port device team_slave_0 added [ 353.709026][T18039] team0: Port device team_slave_1 added [ 353.886714][T18039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.893782][T18039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.944048][T18039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.960022][T18039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.972112][T18039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.042805][T18039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.192153][T18039] hsr_slave_0: entered promiscuous mode [ 354.229441][T18039] hsr_slave_1: entered promiscuous mode [ 354.240072][T18039] debugfs: 'hsr0' already exists in 'hsr' [ 354.251543][T18039] Cannot create hsr debugfs directory [ 354.267195][T18184] team0: Device gtp0 is of different type [ 354.494494][T18196] xt_l2tp: missing protocol rule (udp|l2tpip) [ 354.546030][T18200] IPVS: set_ctl: invalid protocol: 22 172.20.20.187:20000 [ 354.647820][T18039] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.680873][T18039] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.779593][T18039] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.818213][T18039] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.845868][T18212] IPVS: Unknown mcast interface: nicvf0 [ 354.887658][T18218] dvmrp6: entered allmulticast mode [ 354.932689][T18039] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.945444][T18039] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.972821][T18212] v: renamed from vlan0 (while UP) [ 355.040569][T18039] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.064846][T18039] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.111190][T18230] __nla_validate_parse: 14 callbacks suppressed [ 355.111209][T18230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3442'. [ 355.111406][T18232] openvswitch: netlink: IP tunnel dst address not specified [ 355.328534][T18039] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 355.347749][T18039] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 355.368243][T18243] netem: unknown loss type 0 [ 355.380524][T18243] netem: change failed [ 355.390960][T18039] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 355.423550][T18039] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 355.447153][ T52] Bluetooth: hci4: command tx timeout [ 355.561580][T18261] xt_l2tp: v2 tid > 0xffff: 1114244 [ 355.660585][T18264] team_slave_0: entered promiscuous mode [ 355.666738][T18264] team_slave_1: entered promiscuous mode [ 355.675383][T18264] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 355.691972][T18264] team0: Device macvtap1 is already an upper device of the team interface [ 355.707416][T18264] team_slave_0: left promiscuous mode [ 355.712961][T18264] team_slave_1: left promiscuous mode [ 355.778427][T18039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.855107][T18039] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.889829][T18276] netlink: 'syz.2.3456': attribute type 6 has an invalid length. [ 355.889829][T18275] netlink: 'syz.2.3456': attribute type 6 has an invalid length. [ 355.893616][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.912594][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.966469][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.973665][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.235477][T18293] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3462'. [ 356.403927][T18310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3465'. [ 356.532838][T18313] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3467'. [ 356.759667][T18326] bond3: option miimon: invalid value (18446744073709551585) [ 356.781626][T18326] bond3: option miimon: allowed values 0 - 2147483647 [ 356.792115][T18326] bond3 (unregistering): Released all slaves [ 356.859828][T18039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.968398][T18334] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 356.968774][T18336] netlink: 'syz.0.3474': attribute type 21 has an invalid length. [ 356.983367][T18039] veth0_vlan: entered promiscuous mode [ 357.006590][T18336] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3474'. [ 357.030275][T18039] veth1_vlan: entered promiscuous mode [ 357.074629][T18338] tipc: Started in network mode [ 357.083926][T18338] tipc: Node identity , cluster identity 4711 [ 357.091336][T18338] tipc: Failed to obtain node identity [ 357.098133][T18338] tipc: Enabling of bearer rejected, failed to enable media [ 357.177494][T18338] syzkaller0: entered promiscuous mode [ 357.183115][T18338] syzkaller0: entered allmulticast mode [ 357.215827][T18347] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3477'. [ 357.245092][T18039] veth0_macvtap: entered promiscuous mode [ 357.521869][ T52] Bluetooth: hci4: command tx timeout [ 359.041224][ T50] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.071860][T18039] veth1_macvtap: entered promiscuous mode [ 359.200260][T18039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.230225][T18039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.266922][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.286809][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.299274][T18367] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3485'. [ 359.335662][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.354718][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.461440][T18376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3488'. [ 359.530300][T18376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3488'. [ 359.562291][T18384] Cannot find add_set index 0 as target [ 359.586705][ T7231] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.595511][ T7231] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.607129][ T52] Bluetooth: hci4: command tx timeout [ 359.748245][ T7231] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.789567][ T7231] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.884189][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.901794][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.918914][T18399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3493'. [ 359.941790][T18399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.969040][T18399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.990479][T18399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.003555][T18399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.063872][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.088933][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.150342][T18415] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3497'. [ 360.298345][T18418] erspan0: entered promiscuous mode [ 360.314658][T18418] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3499'. [ 360.333280][T18420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3376'. [ 360.348909][T18418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3499'. [ 360.368903][T18418] netlink: 31 bytes leftover after parsing attributes in process `syz.0.3499'. [ 360.390210][T18418] netlink: 'syz.0.3499': attribute type 2 has an invalid length. [ 360.418278][T18418] netlink: 31 bytes leftover after parsing attributes in process `syz.0.3499'. [ 360.645023][T18431] bond1: entered allmulticast mode [ 360.658638][T18431] 8021q: adding VLAN 0 to HW filter on device bond1 [ 360.680541][T18431] bridge0: port 3(bond1) entered blocking state [ 360.691228][T18431] bridge0: port 3(bond1) entered disabled state [ 360.699182][T18441] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3504'. [ 360.712524][T18431] bond1: entered promiscuous mode [ 360.751378][T18431] bridge0: port 3(bond1) entered blocking state [ 360.757886][T18431] bridge0: port 3(bond1) entered forwarding state [ 360.819087][T18442] bond1: option arp_all_targets: invalid value (18446744073709551613) [ 360.831093][T18442] bond1 (unregistering): Released all slaves [ 360.888186][T18441] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3504'. [ 361.122989][ T3506] bridge0: port 3(bond1) entered disabled state [ 361.371648][T18479] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3515'. [ 361.400496][T18480] netlink: 'syz.2.3514': attribute type 1 has an invalid length. [ 361.456874][T18482] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3515'. [ 361.489570][T18482] netlink: 'syz.3.3515': attribute type 10 has an invalid length. [ 361.566173][T18493] netlink: 'syz.3.3515': attribute type 9 has an invalid length. [ 361.748313][T18479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.761951][T18479] bond_slave_0: left promiscuous mode [ 361.774417][T18479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.784856][T18479] bond_slave_1: left promiscuous mode [ 361.794211][T18479] bond0 (unregistering): Released all slaves [ 361.899334][T18491] bond2: (slave bridge1): making interface the new active one [ 361.908124][T18491] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 362.035068][T18516] ip6gre1: entered allmulticast mode [ 362.160934][T18521] netlink: 'syz.2.3526': attribute type 6 has an invalid length. [ 362.269461][T18526] netlink: 'syz.4.3523': attribute type 4 has an invalid length. [ 362.330155][T18529] netlink: 'syz.4.3523': attribute type 4 has an invalid length. [ 362.533585][T18526] bridge0: port 3(dummy0) entered disabled state [ 362.712253][T18526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.753834][T18526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.910390][ T7231] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.923493][ T7231] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.957866][ T7231] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.989380][ T7231] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.102333][T18570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.092241][T18605] tipc: Started in network mode [ 364.100274][T18605] tipc: Node identity ac14140f, cluster identity 4711 [ 364.111229][T18605] tipc: New replicast peer: 255.255.255.255 [ 364.119580][T18605] tipc: Enabled bearer , priority 10 [ 364.263555][T18618] netlink: 'syz.0.3557': attribute type 1 has an invalid length. [ 364.316311][T18618] bond2: (slave bridge1): making interface the new active one [ 364.324754][T18618] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 364.580503][T18635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.583372][T18634] tipc: Started in network mode [ 364.615716][T18634] tipc: Node identity 520cf3ef6295, cluster identity 4711 [ 364.624140][T18634] tipc: Enabled bearer , priority 0 [ 364.646211][T18638] syzkaller0: entered promiscuous mode [ 364.656621][T18638] syzkaller0: entered allmulticast mode [ 364.717990][T18634] tipc: Resetting bearer [ 364.754761][T18634] tipc: Disabling bearer [ 365.045385][T18664] openvswitch: netlink: Message has -2 unknown bytes. [ 365.249120][T11251] tipc: Node number set to 2886997007 [ 365.307721][T18682] __nla_validate_parse: 9 callbacks suppressed [ 365.307742][T18682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3577'. [ 365.363467][T18682] geneve2: entered promiscuous mode [ 365.370035][T18682] geneve2: entered allmulticast mode [ 365.411648][T18686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3579'. [ 365.454229][ T30] audit: type=1800 audit(1763909753.342:7): pid=18688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3581" name="memory.events" dev="tmpfs" ino=394 res=0 errno=0 [ 365.488134][T18686] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.503326][ T30] audit: type=1804 audit(1763909753.342:8): pid=18688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3581" name="/newroot/74/memory.events" dev="tmpfs" ino=394 res=1 errno=0 [ 365.555406][T18686] bridge_slave_1 (unregistering): left allmulticast mode [ 365.566912][T18686] bridge_slave_1 (unregistering): left promiscuous mode [ 365.574018][T18686] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.703692][T18698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3584'. [ 366.311225][T18737] netlink: 'syz.0.3598': attribute type 1 has an invalid length. [ 366.321109][T18737] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3598'. [ 366.602526][T18756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3604'. [ 366.641935][T18759] bridge0: port 2(veth0_to_bridge) entered blocking state [ 366.650597][T18759] bridge0: port 2(veth0_to_bridge) entered disabled state [ 366.658529][T18759] veth0_to_bridge: entered allmulticast mode [ 366.669668][T18759] veth0_to_bridge: entered promiscuous mode [ 366.676246][T18759] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 366.932799][T18770] vlan2: entered allmulticast mode [ 367.196624][T18787] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3616'. [ 367.254102][T18794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3613'. [ 367.383364][T18796] pimreg: entered allmulticast mode [ 367.449207][T18796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3618'. [ 367.459145][T18799] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 367.462681][T11248] IPVS: starting estimator thread 0... [ 367.568499][T18804] IPVS: using max 33 ests per chain, 79200 per kthread [ 367.689927][T18816] pim6reg: entered allmulticast mode [ 367.712430][T18818] netlink: 'syz.0.3626': attribute type 2 has an invalid length. [ 367.733340][T18818] vcan0: entered allmulticast mode [ 367.780631][T18821] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 367.812026][T18825] pim6reg: left allmulticast mode [ 367.979594][T18834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3629'. [ 368.171453][T18844] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 368.303770][T18853] syzkaller1: entered promiscuous mode [ 368.330026][T18853] syzkaller1: entered allmulticast mode [ 368.489702][T18866] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 368.550787][T18870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3640'. [ 368.616312][T18877] netlink: 'syz.2.3641': attribute type 5 has an invalid length. [ 368.625244][T18877] netlink: 'syz.2.3641': attribute type 6 has an invalid length. [ 368.946602][T18902] netlink: 'syz.2.3647': attribute type 33 has an invalid length. [ 369.039400][T18909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.053499][T18902] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 369.083248][T18902] bond3 (unregistering): Released all slaves [ 369.118188][T18851] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 369.141969][T18915] ip6gre0: Master is either lo or non-ether device [ 369.680504][T18950] sctp: [Deprecated]: syz.3.3662 (pid 18950) Use of struct sctp_assoc_value in delayed_ack socket option. [ 369.680504][T18950] Use struct sctp_sack_info instead [ 370.579280][T19013] netlink: 'syz.0.3676': attribute type 4 has an invalid length. [ 370.840166][T19033] __nla_validate_parse: 11 callbacks suppressed [ 370.840185][T19033] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.3684'. [ 370.907410][T19033] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 371.030444][T19046] tun0: tun_chr_ioctl cmd 1074025675 [ 371.057802][T19046] tun0: persist disabled [ 371.186883][T19057] netlink: 'syz.2.3695': attribute type 1 has an invalid length. [ 371.377826][T19070] netlink: 'syz.3.3697': attribute type 1 has an invalid length. [ 371.461577][T19070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.585377][T19084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 371.590163][T19087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3703'. [ 371.653386][T19086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3703'. [ 371.741417][T19095] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3706'. [ 371.799606][T19101] netlink: 'syz.2.3707': attribute type 13 has an invalid length. [ 371.834909][T19095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3706'. [ 371.844892][T19095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3706'. [ 371.856511][T19095] netlink: 'syz.0.3706': attribute type 15 has an invalid length. [ 372.015276][T19104] geneve2: entered promiscuous mode [ 372.027856][T19104] geneve2: entered allmulticast mode [ 372.040148][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.051070][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.112293][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.125154][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.135835][T11251] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 372.186136][T19110] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 372.219834][T19110] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 372.292461][T19122] netlink: 'syz.4.3714': attribute type 1 has an invalid length. [ 372.390438][T19128] syz.2.3716: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 372.441256][T19128] CPU: 0 UID: 0 PID: 19128 Comm: syz.2.3716 Not tainted syzkaller #0 PREEMPT(full) [ 372.441300][T19128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 372.441321][T19128] Call Trace: [ 372.441329][T19128] [ 372.441337][T19128] dump_stack_lvl+0x189/0x250 [ 372.441372][T19128] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.441397][T19128] ? __pfx__printk+0x10/0x10 [ 372.441414][T19128] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 372.441439][T19128] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 372.441466][T19128] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 372.441494][T19128] warn_alloc+0x214/0x310 [ 372.441526][T19128] ? __pfx_warn_alloc+0x10/0x10 [ 372.441581][T19128] ? __get_vm_area_node+0x28f/0x300 [ 372.441607][T19128] ? htable_create+0x101/0x7a0 [ 372.441635][T19128] __vmalloc_node_range_noprof+0x690/0x12d0 [ 372.441687][T19128] ? alloc_pages_mpol+0x3cd/0x4a0 [ 372.441710][T19128] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 372.441742][T19128] ? rcu_is_watching+0x15/0xb0 [ 372.441765][T19128] ? htable_create+0x101/0x7a0 [ 372.441797][T19128] __kvmalloc_node_noprof+0x674/0x910 [ 372.441828][T19128] ? htable_create+0x101/0x7a0 [ 372.441850][T19128] ? hashlimit_pernet+0x23/0x240 [ 372.441873][T19128] ? hashlimit_pernet+0x23/0x240 [ 372.441894][T19128] ? hashlimit_pernet+0x23/0x240 [ 372.441922][T19128] htable_create+0x101/0x7a0 [ 372.441953][T19128] hashlimit_mt_check_common+0x719/0xa10 [ 372.441984][T19128] hashlimit_mt_check_v1+0x221/0x360 [ 372.442012][T19128] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 372.442042][T19128] ? xt_find_match+0x1f7/0x250 [ 372.442073][T19128] xt_check_match+0x3d1/0xab0 [ 372.442103][T19128] ? __pfx_xt_check_match+0x10/0x10 [ 372.442129][T19128] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 372.442166][T19128] ? xt_find_match+0x1f7/0x250 [ 372.442194][T19128] translate_table+0x150b/0x2000 [ 372.442241][T19128] ? __pfx_translate_table+0x10/0x10 [ 372.442271][T19128] ? __might_fault+0xb0/0x130 [ 372.442320][T19128] ? _copy_from_user+0x94/0xb0 [ 372.442353][T19128] do_ipt_set_ctl+0x967/0xcd0 [ 372.442381][T19128] ? rcu_is_watching+0x15/0xb0 [ 372.442404][T19128] ? trace_contention_end+0x39/0x120 [ 372.442429][T19128] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 372.442477][T19128] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 372.442520][T19128] ? __pfx_aa_sk_perm+0x10/0x10 [ 372.442554][T19128] nf_setsockopt+0x26f/0x290 [ 372.442581][T19128] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 372.442613][T19128] do_sock_setsockopt+0x17c/0x1b0 [ 372.442640][T19128] __x64_sys_setsockopt+0x13f/0x1b0 [ 372.442667][T19128] do_syscall_64+0xfa/0xfa0 [ 372.442694][T19128] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.442722][T19128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.442742][T19128] ? clear_bhb_loop+0x60/0xb0 [ 372.442767][T19128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.442799][T19128] RIP: 0033:0x7f483fd8f749 [ 372.442817][T19128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.442835][T19128] RSP: 002b:00007f4840c1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 372.442857][T19128] RAX: ffffffffffffffda RBX: 00007f483ffe6090 RCX: 00007f483fd8f749 [ 372.442872][T19128] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 372.442885][T19128] RBP: 00007f483fe13f91 R08: 0000000000000448 R09: 0000000000000000 [ 372.442898][T19128] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 372.442910][T19128] R13: 00007f483ffe6128 R14: 00007f483ffe6090 R15: 00007ffc5b3bf808 [ 372.442945][T19128] [ 372.445248][T19128] Mem-Info: [ 372.560766][T19135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3720'. [ 372.605918][T11248] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 372.658211][T19128] active_anon:4856 inactive_anon:0 isolated_anon:0 [ 372.658211][T19128] active_file:2761 inactive_file:40000 isolated_file:0 [ 372.658211][T19128] unevictable:768 dirty:56 writeback:0 [ 372.658211][T19128] slab_reclaimable:12764 slab_unreclaimable:179905 [ 372.658211][T19128] mapped:29090 shmem:1365 pagetables:1147 [ 372.658211][T19128] sec_pagetables:0 bounce:0 [ 372.658211][T19128] kernel_misc_reclaimable:0 [ 372.658211][T19128] free:1243804 free_pcp:15444 free_cma:0 [ 372.870467][T19141] validate_nla: 2 callbacks suppressed [ 372.870488][T19141] netlink: 'syz.1.3720': attribute type 8 has an invalid length. [ 372.910431][T19135] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 372.926803][T19128] Node 0 active_anon:19400kB inactive_anon:0kB active_file:11044kB inactive_file:159800kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116300kB dirty:224kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15396kB pagetables:4628kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 372.978886][T19153] openvswitch: netlink: Message has 592 unknown bytes. [ 372.979701][T19128] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 372.987118][T19153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.019483][T19128] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 373.106222][T19128] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 373.120731][T19128] Node 0 DMA32 free:1071668kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19480kB inactive_anon:0kB active_file:11044kB inactive_file:159800kB unevictable:1536kB writepending:232kB zspages:0kB present:3129332kB managed:2565152kB mlocked:0kB bounce:0kB free_pcp:39516kB local_pcp:20592kB free_cma:0kB [ 373.186958][T19128] lowmem_reserve[]: 0 0 0 0 0 [ 373.191918][T19128] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 373.286648][T19128] lowmem_reserve[]: 0 0 0 0 0 [ 373.291448][T19128] Node 1 Normal free:3887040kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21088kB local_pcp:8256kB free_cma:0kB [ 373.331998][T19128] lowmem_reserve[]: 0 0 0 0 0 [ 373.362147][T19128] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 373.378067][T19128] Node 0 DMA32: 328*4kB (UME) 93*8kB (UME) 27*16kB (M) 42*32kB (ME) 68*64kB (UME) 44*128kB (UM) 32*256kB (UME) 17*512kB (UME) 5*1024kB (UM) 3*2048kB (M) 251*4096kB (UM) = 1070072kB [ 373.412052][T19128] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 373.443203][T19128] Node 1 Normal: 173*4kB (UE) 43*8kB (UME) 34*16kB (UME) 91*32kB (UME) 28*64kB (UME) 9*128kB (UME) 5*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 945*4096kB (M) = 3887116kB [ 373.487822][T19128] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 373.543831][T19128] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 373.556818][T19128] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 373.568549][T19128] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 373.578941][T19128] 44122 total pagecache pages [ 373.583653][T19128] 0 pages in swap cache [ 373.587375][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 373.589979][T19128] Free swap = 124996kB [ 373.604254][T19128] Total swap = 124996kB [ 373.609404][T19128] 2097051 pages RAM [ 373.613224][T19128] 0 pages HighMem/MovableOnly [ 373.621683][T19128] 424121 pages reserved [ 373.626718][T19128] 0 pages cma reserved [ 373.764229][T19166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3727'. [ 373.798432][T19164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3728'. [ 373.901465][T19164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.000604][T19164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.365833][T19206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3735'. [ 374.437205][T19206] netlink: 'syz.3.3735': attribute type 3 has an invalid length. [ 374.636786][ T7226] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 374.650819][T19224] netlink: 'syz.4.3744': attribute type 16 has an invalid length. [ 374.667618][ T7226] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 374.676693][T19224] netlink: 'syz.4.3744': attribute type 17 has an invalid length. [ 374.697563][T19224] netlink: 'syz.4.3744': attribute type 27 has an invalid length. [ 374.760225][T19234] tipc: Enabled bearer , priority 0 [ 374.768102][T19235] tipc: Enabling of bearer rejected, already enabled [ 374.779061][T19234] syzkaller0: entered promiscuous mode [ 374.784937][T19234] syzkaller0: entered allmulticast mode [ 374.810319][T19235] syzkaller0: mtu less than device minimum [ 374.817869][T19234] syzkaller0: mtu less than device minimum [ 374.878846][T19232] tipc: Resetting bearer [ 374.931809][T19232] tipc: Disabling bearer [ 375.019121][T19246] tipc: Enabling of bearer rejected, already enabled [ 375.206960][ T7072] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 375.265790][T19261] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 375.408368][T19269] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 375.754506][T19296] syzkaller1: entered promiscuous mode [ 375.777045][T19296] syzkaller1: entered allmulticast mode [ 375.814537][T19296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.851802][T19299] netlink: 'syz.3.3767': attribute type 13 has an invalid length. [ 376.096824][T19317] x_tables: duplicate entry at hook 3 [ 376.113347][T19299] mac80211_hwsim hwsim35 syzkaller0: left promiscuous mode [ 376.121829][T19299] mac80211_hwsim hwsim35 syzkaller0: left allmulticast mode [ 376.132410][T19299] gretap1: left promiscuous mode [ 376.138634][T19299] gretap1: left allmulticast mode [ 376.270165][T19320] __nla_validate_parse: 6 callbacks suppressed [ 376.270185][T19320] netlink: 300 bytes leftover after parsing attributes in process `syz.1.3773'. [ 376.490132][T19325] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3775'. [ 376.518610][T19327] netlink: 'syz.2.3776': attribute type 2 has an invalid length. [ 376.800463][T19340] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3781'. [ 376.816629][T19340] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3781'. [ 376.954726][T19343] pimreg: entered allmulticast mode [ 377.058092][T19351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3785'. [ 377.443482][T19367] tipc: Enabled bearer , priority 0 [ 377.590710][T19367] syzkaller0: entered promiscuous mode [ 377.597273][T19367] syzkaller0: entered allmulticast mode [ 377.603798][T19367] tipc: Resetting bearer [ 377.622229][T19366] tipc: Resetting bearer [ 377.794309][T19393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3797'. [ 378.545046][T19389] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 378.641819][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 378.875978][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 378.888999][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.479152][T19366] tipc: Disabling bearer [ 379.488888][T19393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3797'. [ 379.518947][T19397] bridge1: entered promiscuous mode [ 379.524172][T19397] bridge1: entered allmulticast mode [ 379.826984][T19409] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 380.058942][T19437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3808'. [ 380.111942][T19436] syzkaller0: entered promiscuous mode [ 380.128316][T19436] syzkaller0: entered allmulticast mode [ 380.137099][T19429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3808'. [ 380.455175][T19459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3817'. [ 381.051011][T19500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 381.087968][T19506] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 381.113181][T19505] tipc: Enabled bearer , priority 0 [ 381.123744][T19508] veth0: entered promiscuous mode [ 381.147335][T19507] veth0: left promiscuous mode [ 381.168662][T19504] tipc: Disabling bearer [ 381.255054][T19514] netlink: 'syz.4.3836': attribute type 64 has an invalid length. [ 381.380246][T19520] __nla_validate_parse: 2 callbacks suppressed [ 381.380268][T19520] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3839'. [ 381.402205][T19518] wlan0 speed is unknown, defaulting to 1000 [ 381.430663][T19518] wlan0 speed is unknown, defaulting to 1000 [ 381.449910][T19518] wlan0 speed is unknown, defaulting to 1000 [ 381.496591][T19526] netlink: 'syz.1.3841': attribute type 9 has an invalid length. [ 381.548330][T19518] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 381.620583][T19518] wlan0 speed is unknown, defaulting to 1000 [ 381.638071][T19518] wlan0 speed is unknown, defaulting to 1000 [ 381.655199][T19518] wlan0 speed is unknown, defaulting to 1000 [ 381.696527][T19518] wlan0 speed is unknown, defaulting to 1000 [ 381.711280][T19518] wlan0 speed is unknown, defaulting to 1000 [ 381.724972][T19518] wlan0 speed is unknown, defaulting to 1000 [ 381.733687][T19518] wlan0 speed is unknown, defaulting to 1000 [ 381.744159][T19518] wlan0 speed is unknown, defaulting to 1000 [ 381.858615][T19543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3846'. [ 381.917347][T19543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3846'. [ 381.936030][T19543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3846'. [ 381.945218][T19543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3846'. [ 382.024242][T19557] netem: change failed [ 382.327173][T19583] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 382.366464][T19578] tipc: Enabled bearer , priority 0 [ 382.374359][T19578] syzkaller0: entered promiscuous mode [ 382.382706][T19578] syzkaller0: entered allmulticast mode [ 382.392704][T19578] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 382.437583][T19578] tipc: Resetting bearer [ 382.522573][T19592] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3863'. [ 382.622741][T19602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.632940][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.667022][T19604] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3865'. [ 382.781077][T19609] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3867'. [ 382.845522][T19613] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3870'. [ 382.899595][T19577] tipc: Resetting bearer [ 382.976926][ T52] Bluetooth: hci4: command tx timeout [ 383.010278][T19577] tipc: Disabling bearer [ 383.024969][ T7072] IPVS: starting estimator thread 0... [ 383.046806][T19621] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3874'. [ 383.047831][T19617] netlink: 'syz.2.3871': attribute type 1 has an invalid length. [ 383.145679][T19622] IPVS: using max 30 ests per chain, 72000 per kthread [ 383.198697][T19629] netlink: 'syz.4.3876': attribute type 1 has an invalid length. [ 383.205071][T19617] 8021q: adding VLAN 0 to HW filter on device bond3 [ 383.314751][T19637] bond3 (unregistering): Released all slaves [ 383.388142][T19626] bond3: (slave geneve3): making interface the new active one [ 383.400740][T19626] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 383.420816][T19643] ip6tnl1: entered promiscuous mode [ 383.428039][T19643] ip6tnl1: entered allmulticast mode [ 383.631681][T19654] bond1 (unregistering): Released all slaves [ 383.925840][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5280 ms [ 383.933919][ C0] lec:lec_tx_timeout: lec0 [ 384.033179][T19675] veth0_to_bridge: mtu less than device minimum [ 385.054872][T19722] netlink: 'syz.1.3897': attribute type 3 has an invalid length. [ 385.169010][T19729] netlink: 'syz.3.3901': attribute type 10 has an invalid length. [ 385.205265][T19733] netlink: 'syz.2.3902': attribute type 10 has an invalid length. [ 385.215928][T19729] dummy0: entered promiscuous mode [ 385.229505][T19729] bridge0: port 3(dummy0) entered blocking state [ 385.237472][T19729] bridge0: port 3(dummy0) entered disabled state [ 385.244129][T19729] dummy0: entered allmulticast mode [ 385.284292][T19733] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 385.390697][T19725] netlink: 'syz.4.3900': attribute type 32 has an invalid length. [ 385.471386][T19725] bond3: option coupled_control: invalid value (52) [ 385.491617][T19725] bond3 (unregistering): Released all slaves [ 385.610141][T19752] netlink: 'syz.0.3906': attribute type 33 has an invalid length. [ 386.292889][T19792] bond2: entered allmulticast mode [ 386.309853][T19792] 8021q: adding VLAN 0 to HW filter on device bond2 [ 386.412057][T19801] syz_tun: entered allmulticast mode [ 386.422585][T19801] netlink: 'syz.3.3922': attribute type 6 has an invalid length. [ 386.433804][T19800] syz_tun: left allmulticast mode [ 386.552240][T19807] __nla_validate_parse: 15 callbacks suppressed [ 386.552261][T19807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3923'. [ 386.623623][T19808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3926'. [ 386.711948][T19817] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 386.723911][T19817] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 386.762724][T19820] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3927'. [ 387.258122][T19854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3936'. [ 387.264098][T19856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3937'. [ 387.340469][T19854] netlink: 'syz.1.3936': attribute type 9 has an invalid length. [ 387.354917][T19854] netlink: 'syz.1.3936': attribute type 11 has an invalid length. [ 387.369878][T19854] netlink: 'syz.1.3936': attribute type 12 has an invalid length. [ 387.383683][T19854] netlink: 210060 bytes leftover after parsing attributes in process `syz.1.3936'. [ 387.394475][T19854] openvswitch: netlink: Message has 4 unknown bytes. [ 387.408021][T19858] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3938'. [ 387.418113][T19858] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3938'. [ 387.581473][T19869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.595958][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 387.607026][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.615682][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.626983][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.714642][T19876] lo: Caught tx_queue_len zero misconfig [ 387.773463][T19875] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3943'. [ 387.787930][T19880] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3944'. [ 387.972807][T19884] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 388.026243][T19884] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 388.035486][T19892] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 388.187604][T19900] xt_CT: You must specify a L4 protocol and not use inversions on it [ 388.208236][T19902] netlink: 'syz.3.3953': attribute type 6 has an invalid length. [ 388.229100][T19902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.481969][T19918] netlink: 'syz.3.3956': attribute type 1 has an invalid length. [ 388.742430][T19929] bond4: option mode: invalid value (7) [ 388.767951][T19929] bond4 (unregistering): Released all slaves [ 389.022392][T19938] netlink: 'syz.0.3962': attribute type 13 has an invalid length. [ 389.488917][T19957] netlink: 'syz.2.3964': attribute type 9 has an invalid length. [ 389.497154][T19957] netlink: 'syz.2.3964': attribute type 11 has an invalid length. [ 389.506271][T19957] netlink: 'syz.2.3964': attribute type 12 has an invalid length. [ 389.514201][T19957] openvswitch: netlink: Message has 4 unknown bytes. [ 390.326415][T19997] x_tables: duplicate underflow at hook 2 [ 390.332669][T19999] x_tables: duplicate underflow at hook 2 [ 390.353970][T20000] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 390.710312][T20022] nbd: must specify a size in bytes for the device [ 391.239171][T20051] bond3: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 391.274030][T20051] bond3 (unregistering): Released all slaves [ 391.444920][T20067] netem: incorrect ge model size [ 391.456354][T20067] netem: change failed [ 391.472152][T20067] validate_nla: 4 callbacks suppressed [ 391.472170][T20067] netlink: 'syz.4.3996': attribute type 1 has an invalid length. [ 391.606589][T20075] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 391.641923][T20075] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 391.710994][T20083] __nla_validate_parse: 13 callbacks suppressed [ 391.711013][T20083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4001'. [ 391.842724][T20089] macvtap1: entered promiscuous mode [ 391.851435][T20089] vlan0: entered promiscuous mode [ 391.860955][T20089] macvtap1: entered allmulticast mode [ 391.870324][T20089] vlan0: entered allmulticast mode [ 391.877621][T20089] veth0_vlan: entered allmulticast mode [ 391.884139][T20100] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4004'. [ 391.892099][T20094] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4004'. [ 392.084322][T20111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.084322][T20112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.415288][T20140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4019'. [ 392.427782][T20141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4019'. [ 392.438215][T20141] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4019'. [ 392.451320][T20141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4019'. [ 392.463609][T20141] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4019'. [ 392.481599][T20141] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4019'. [ 392.494358][T20143] x_tables: duplicate underflow at hook 1 [ 392.592832][T20150] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 392.614614][T20149] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 393.008052][T20183] syzkaller0: entered promiscuous mode [ 393.021130][T20183] syzkaller0: entered allmulticast mode [ 393.101723][T20190] netlink: 'syz.1.4031': attribute type 29 has an invalid length. [ 393.110673][T20190] netlink: 'syz.1.4031': attribute type 29 has an invalid length. [ 393.119681][T20190] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4031'. [ 403.707403][ T6479] lec:lec_start_xmit: lec0:No lecd attached [ 404.876029][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 408.955828][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5250 ms [ 408.963877][ C0] lec:lec_tx_timeout: lec0 [ 414.964228][T20238] __nla_validate_parse: 1 callbacks suppressed [ 414.964248][T20238] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4043'. [ 414.983871][T20238] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4043'. [ 415.021603][T20238] gretap1: entered promiscuous mode [ 415.033742][T20238] gretap1: entered allmulticast mode [ 415.101407][T20246] IPv6: NLM_F_CREATE should be specified when creating new route [ 415.139627][T20251] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4048'. [ 415.356580][T20265] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4052'. [ 415.366349][T20265] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4052'. [ 415.407150][T20269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4054'. [ 415.418491][T20269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4054'. [ 415.692214][T20282] nbd: nbd1 already in use [ 415.905098][T20294] bridge0: port 4(veth0_to_bridge) entered blocking state [ 415.913489][T20294] bridge0: port 4(veth0_to_bridge) entered disabled state [ 415.927835][T20294] veth0_to_bridge: entered allmulticast mode [ 415.939484][T20294] veth0_to_bridge: entered promiscuous mode [ 416.014241][T20309] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4067'. [ 416.288701][T20318] netlink: 'syz.1.4070': attribute type 4 has an invalid length. [ 416.301153][T20320] netlink: 'syz.0.4072': attribute type 83 has an invalid length. [ 416.324094][T20318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4070'. [ 416.341605][T20322] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4071'. [ 416.380104][T11251] hid-generic 0005:0002:5508.0003: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 416.404829][T20318] netlink: 'syz.1.4070': attribute type 4 has an invalid length. [ 416.924388][T11238] wlan0 speed is unknown, defaulting to 1000 [ 416.931889][T11238] syz0: Port: 1 Link DOWN [ 417.253438][T20371] netlink: 'syz.2.4084': attribute type 11 has an invalid length. [ 417.323880][T20373] syzkaller1: entered promiscuous mode [ 417.329641][T20373] syzkaller1: entered allmulticast mode [ 417.609185][T20387] netlink: 'syz.4.4090': attribute type 58 has an invalid length. [ 417.671937][ T52] block nbd3: Receive control failed (result -32) [ 418.158199][T20420] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:0 [ 418.294993][T20424] syzkaller0: entered promiscuous mode [ 418.302061][T20424] syzkaller0: entered allmulticast mode [ 418.310146][T20422] syzkaller1: entered promiscuous mode [ 418.316731][T20422] syzkaller1: entered allmulticast mode [ 418.465011][T20440] netlink: 'syz.0.4106': attribute type 1 has an invalid length. [ 418.584761][T20447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.348040][T20460] block nbd4: not configured, cannot reconfigure [ 420.553690][T20440] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 421.508438][T20527] tipc: Enabled bearer , priority 0 [ 421.590535][T20537] syzkaller0: entered promiscuous mode [ 421.597296][T20537] syzkaller0: entered allmulticast mode [ 421.645434][T20527] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 421.762351][T20538] tipc: Enabling of bearer rejected, failed to enable media [ 421.978442][T20563] netem: incorrect gi model size [ 421.994626][T20563] netem: change failed [ 422.201196][T20526] tipc: Resetting bearer [ 422.248473][T20526] tipc: Disabling bearer [ 422.522975][T20591] __nla_validate_parse: 19 callbacks suppressed [ 422.523013][T20591] netlink: 216 bytes leftover after parsing attributes in process `syz.1.4145'. [ 422.757305][T20591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4145'. [ 422.801700][T20591] netlink: 'syz.1.4145': attribute type 18 has an invalid length. [ 422.822203][T20591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4145'. [ 422.925454][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.958193][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.982974][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.145841][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.564695][T20652] mac80211_hwsim hwsim40 syzkaller0: entered promiscuous mode [ 423.575186][T20652] mac80211_hwsim hwsim40 syzkaller0: entered allmulticast mode [ 423.756549][T20662] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4160'. [ 423.876416][T20667] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4162'. [ 423.889863][T20665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4161'. [ 423.962611][T20665] vcan0 (unregistering): left allmulticast mode [ 424.117671][T20680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4168'. [ 424.134393][T20680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4168'. [ 424.161913][T20684] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4166'. [ 424.185416][T20684] 8021q: VLANs not supported on gre0 [ 424.364423][T20690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4172'. [ 424.416315][T20690] netlink: 'syz.2.4172': attribute type 7 has an invalid length. [ 424.434740][T20690] netlink: 'syz.2.4172': attribute type 8 has an invalid length. [ 424.604576][T20701] bond3 (unregistering): Released all slaves [ 424.645049][T20696] bond0: (slave rose0): Error: Device can not be enslaved while up [ 425.126308][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 425.465990][T11251] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 425.518630][T20769] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 425.546854][ T7066] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 425.606505][ T7072] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 425.656729][ T7072] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 426.129425][T20808] netlink: 'syz.2.4205': attribute type 1 has an invalid length. [ 426.192386][T20816] netlink: 'syz.0.4207': attribute type 10 has an invalid length. [ 426.204664][T20818] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 426.318654][T20816] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.346984][T20816] bond0: (slave team0): Enslaving as an active interface with an up link [ 426.391573][T20808] veth5: entered promiscuous mode [ 426.527429][T20840] netlink: 'syz.3.4214': attribute type 21 has an invalid length. [ 427.198669][T20883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.206565][T20887] xfrm1: entered promiscuous mode [ 427.213050][T20887] xfrm1: entered allmulticast mode [ 427.403017][T20903] xt_TCPMSS: Only works on TCP SYN packets [ 427.733575][T20930] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 427.745636][T20926] __nla_validate_parse: 10 callbacks suppressed [ 427.745657][T20926] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4238'. [ 427.777160][T20928] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 427.797083][T20930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4240'. [ 427.834956][T20938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4240'. [ 427.864703][T20941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4243'. [ 427.887784][T20942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.980803][T20946] netlink: 'syz.3.4245': attribute type 21 has an invalid length. [ 428.007412][T20946] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4245'. [ 428.058415][T20946] netlink: 'syz.3.4245': attribute type 5 has an invalid length. [ 428.066893][T20946] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4245'. [ 428.083623][T20951] tipc: Enabled bearer , priority 0 [ 428.100967][T20951] tipc: Enabling of bearer rejected, already enabled [ 428.189021][T20957] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 428.274154][T20967] tipc: Enabling of bearer rejected, already enabled [ 428.277464][T20966] netlink: 'syz.0.4252': attribute type 1 has an invalid length. [ 428.410804][T20974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4254'. [ 428.426868][T20976] xt_NFQUEUE: number of queues (16) out of range (got 65549) [ 428.564024][T20982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4258'. [ 428.575493][T20986] netlink: 'syz.3.4259': attribute type 29 has an invalid length. [ 428.592001][T20982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.594692][T20980] veth0_to_bridge: entered promiscuous mode [ 428.629380][T20986] netlink: 'syz.3.4259': attribute type 29 has an invalid length. [ 428.639106][T20986] netlink: 'syz.3.4259': attribute type 29 has an invalid length. [ 428.649031][T20986] netlink: 'syz.3.4259': attribute type 29 has an invalid length. [ 428.659039][T20986] netlink: 'syz.3.4259': attribute type 29 has an invalid length. [ 428.669599][T20979] veth0_to_bridge: left promiscuous mode [ 428.688500][T20986] netlink: 'syz.3.4259': attribute type 29 has an invalid length. [ 428.699885][T20986] netlink: 'syz.3.4259': attribute type 29 has an invalid length. [ 428.867320][T20999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4263'. [ 428.972244][T21009] xt_l2tp: missing protocol rule (udp|l2tpip) [ 428.984377][T21011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4268'. [ 429.132094][T11253] tipc: Node number set to 815395823 [ 429.217186][T21021] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 429.413605][T21025] netlink: 'syz.2.4271': attribute type 11 has an invalid length. [ 429.493623][T21028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.600563][ T1150] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.622651][ T1150] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.668964][ T1150] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.712086][ T1150] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.849167][T21038] veth5: entered promiscuous mode [ 429.885154][T21038] veth5: entered allmulticast mode [ 430.029289][T21044] sctp: [Deprecated]: syz.1.4277 (pid 21044) Use of struct sctp_assoc_value in delayed_ack socket option. [ 430.029289][T21044] Use struct sctp_sack_info instead [ 430.154085][T21042] sctp: [Deprecated]: syz.1.4277 (pid 21042) Use of struct sctp_assoc_value in delayed_ack socket option. [ 430.154085][T21042] Use struct sctp_sack_info instead [ 430.236149][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 430.520711][T21041] delete_channel: no stack [ 430.588667][T21062] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 430.982915][T21078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.276828][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 431.514993][T21098] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 431.840553][T21095] dummy0: entered promiscuous mode [ 431.870792][T21095] bridge0: port 2(dummy0) entered blocking state [ 431.883270][T21095] bridge0: port 2(dummy0) entered disabled state [ 431.912059][T21095] dummy0: entered allmulticast mode [ 431.942531][T21095] bridge0: port 2(dummy0) entered blocking state [ 431.949115][T21095] bridge0: port 2(dummy0) entered forwarding state [ 433.229255][T21138] team0: Caught tx_queue_len zero misconfig [ 433.285408][T21144] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 433.985565][ C1] sched: DL replenish lagged too much [ 434.015770][T21172] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6tnl0, syncid = 3, id = 0 [ 434.202008][T21174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.271678][T21174] __nla_validate_parse: 11 callbacks suppressed [ 434.271699][T21174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4310'. [ 434.338346][T21180] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4313'. [ 434.412231][T21183] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 434.679934][T21191] IPVS: Error joining to the multicast group [ 438.161677][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 443.301043][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 448.536144][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 448.958652][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5650 ms [ 448.966740][ C0] lec:lec_tx_timeout: lec0 [ 455.858478][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 486.493109][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 504.794446][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 509.918277][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5120 ms [ 509.926336][ C0] lec:lec_tx_timeout: lec0 [ 511.766512][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 571.434623][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 576.957124][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5520 ms [ 576.965171][ C0] lec:lec_tx_timeout: lec0 [ 626.137041][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 631.922395][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms [ 631.930463][ C0] lec:lec_tx_timeout: lec0 [ 633.690128][ T5149] Bluetooth: hci4: command 0x0405 tx timeout [ 650.007065][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 688.075146][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 693.095528][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 693.103572][ C0] lec:lec_tx_timeout: lec0 [ 737.445419][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 737.452416][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11243/1:b..l [ 737.460927][ C0] rcu: (detected by 0, t=10503 jiffies, g=72829, q=627 ncpus=2) [ 737.468672][ C0] task:kworker/0:26 state:R running task stack:24872 pid:11243 tgid:11243 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 737.483567][ C0] Workqueue: events_power_efficient gc_worker [ 737.489681][ C0] Call Trace: [ 737.492975][ C0] [ 737.496026][ C0] __schedule+0x1798/0x4cc0 [ 737.500560][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 737.505525][ C0] ? __pfx___schedule+0x10/0x10 [ 737.510407][ C0] ? stack_trace_save+0x9c/0xe0 [ 737.515289][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 737.520601][ C0] preempt_schedule_irq+0xb5/0x150 [ 737.525744][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 737.531524][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 737.537353][ C0] irqentry_exit+0x6f/0x90 [ 737.541797][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 737.547801][ C0] RIP: 0010:seqcount_lockdep_reader_access+0x17e/0x1c0 [ 737.554703][ C0] Code: f8 4d 85 e4 75 16 e8 f1 3a 4e f8 eb 15 e8 ea 3a 4e f8 e8 35 b9 d4 01 4d 85 e4 74 ea e8 db 3a 4e f8 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 66 43 c7 44 3e 09 00 00 43 c6 44 3e 0b 00 [ 737.574362][ C0] RSP: 0018:ffffc90003627840 EFLAGS: 00000293 [ 737.580508][ C0] RAX: ffffffff8971c8e5 RBX: 0000000000000000 RCX: ffff88802d745ac0 [ 737.588594][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 737.596591][ C0] RBP: ffffc900036278f0 R08: ffffffff8f7cf277 R09: 1ffffffff1ef9e4e [ 737.604581][ C0] R10: dffffc0000000000 R11: fffffbfff1ef9e4f R12: 0000000000000200 [ 737.612571][ C0] R13: ffff88807d469418 R14: 1ffff920006c4f08 R15: dffffc0000000000 [ 737.620835][ C0] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 737.627201][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 737.633837][ C0] gc_worker+0x308/0x1380 [ 737.638202][ C0] ? gc_worker+0x264/0x1380 [ 737.642743][ C0] ? __pfx_gc_worker+0x10/0x10 [ 737.647627][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 737.652954][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 737.658699][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 737.664454][ C0] process_scheduled_works+0xae1/0x17b0 [ 737.670063][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 737.676086][ C0] worker_thread+0x8a0/0xda0 [ 737.680746][ C0] kthread+0x711/0x8a0 [ 737.684847][ C0] ? __pfx_worker_thread+0x10/0x10 [ 737.689975][ C0] ? __pfx_kthread+0x10/0x10 [ 737.694612][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 737.699846][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 737.705063][ C0] ? __pfx_kthread+0x10/0x10 [ 737.709675][ C0] ret_from_fork+0x4bc/0x870 [ 737.714294][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 737.719426][ C0] ? __switch_to_asm+0x39/0x70 [ 737.724287][ C0] ? __switch_to_asm+0x33/0x70 [ 737.729064][ C0] ? __pfx_kthread+0x10/0x10 [ 737.733677][ C0] ret_from_fork_asm+0x1a/0x30 [ 737.738477][ C0] [ 737.741505][ C0] rcu: rcu_preempt kthread starved for 304 jiffies! g72829 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 737.752532][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 737.762520][ C0] rcu: RCU grace-period kthread stack dump: [ 737.768419][ C0] task:rcu_preempt state:R running task stack:27224 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 737.781935][ C0] Call Trace: [ 737.785229][ C0] [ 737.788171][ C0] __schedule+0x1798/0x4cc0 [ 737.792723][ C0] ? __lock_acquire+0xab9/0xd20 [ 737.797600][ C0] ? __pfx___schedule+0x10/0x10 [ 737.802488][ C0] ? schedule+0x91/0x360 [ 737.806767][ C0] schedule+0x165/0x360 [ 737.810948][ C0] schedule_timeout+0x12b/0x270 [ 737.815824][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 737.821210][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 737.827127][ C0] ? __pfx_process_timeout+0x10/0x10 [ 737.832437][ C0] ? prepare_to_swait_event+0x341/0x380 [ 737.838014][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 737.843009][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 737.848230][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 737.854402][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 737.859702][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 737.864941][ C0] ? finish_swait+0xcd/0x1f0 [ 737.869555][ C0] rcu_gp_kthread+0x99/0x390 [ 737.874161][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 737.879373][ C0] ? __kthread_parkme+0x7b/0x200 [ 737.884327][ C0] ? __kthread_parkme+0x1a1/0x200 [ 737.889374][ C0] kthread+0x711/0x8a0 [ 737.893467][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 737.898674][ C0] ? __pfx_kthread+0x10/0x10 [ 737.903291][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 737.908542][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 737.913822][ C0] ? __pfx_kthread+0x10/0x10 [ 737.918441][ C0] ret_from_fork+0x4bc/0x870 [ 737.923057][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 737.928192][ C0] ? __switch_to_asm+0x39/0x70 [ 737.932970][ C0] ? __switch_to_asm+0x33/0x70 [ 737.937763][ C0] ? __pfx_kthread+0x10/0x10 [ 737.942386][ C0] ret_from_fork_asm+0x1a/0x30 [ 737.947192][ C0] [ 737.950230][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 737.956584][ C0] CPU: 0 UID: 0 PID: 3410 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 737.966326][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 737.976399][ C0] Workqueue: bat_events batadv_tt_purge [ 737.981993][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x2f/0x90 [ 737.988867][ C0] Code: 8b 04 24 65 48 8b 14 25 08 70 6e 92 65 8b 0d 58 69 ae 10 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 7c 16 00 00 00 <74> 52 8b 8a 58 16 00 00 83 f9 03 75 47 48 8b 8a 60 16 00 00 44 8b [ 738.008495][ C0] RSP: 0018:ffffc900000066b8 EFLAGS: 00000246 [ 738.014591][ C0] RAX: ffffffff89fb204d RBX: 0000000000000000 RCX: 0000000000000100 [ 738.022602][ C0] RDX: ffff88802f8d1e40 RSI: 0000000000000000 RDI: 0000000000000000 [ 738.030687][ C0] RBP: ffffc900000069d0 R08: ffffc900000069c0 R09: ffffc900000069d0 [ 738.038674][ C0] R10: ffffc90000006820 R11: fffff52000000d06 R12: ffffc900000069c0 [ 738.046840][ C0] R13: 0000000000000003 R14: 1ffff1100b2d461b R15: ffff8880596a30df [ 738.054831][ C0] FS: 0000000000000000(0000) GS:ffff888126139000(0000) knlGS:0000000000000000 [ 738.063793][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 738.070404][ C0] CR2: 00005555636465c8 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 738.078395][ C0] Call Trace: [ 738.081688][ C0] [ 738.084532][ C0] find_match+0x5d/0xc90 [ 738.088802][ C0] __find_rr_leaf+0x23a/0x6d0 [ 738.093508][ C0] ? __pfx___find_rr_leaf+0x10/0x10 [ 738.098726][ C0] ? __pfx_fib6_node_lookup+0x10/0x10 [ 738.104139][ C0] fib6_table_lookup+0x39f/0xa80 [ 738.109124][ C0] ? __pfx_fib6_table_lookup+0x10/0x10 [ 738.114603][ C0] ? NF_HOOK+0x9e/0x6b0 [ 738.118805][ C0] ? ip6_pol_route+0x162/0x1180 [ 738.123677][ C0] ip6_pol_route+0x222/0x1180 [ 738.128378][ C0] ? __pfx_ip6_pol_route+0x10/0x10 [ 738.133508][ C0] ? net_generic+0x1e/0x240 [ 738.138041][ C0] fib6_rule_lookup+0x52f/0x6f0 [ 738.142936][ C0] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 738.148616][ C0] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 738.154031][ C0] ? do_xdp_generic+0x11a/0x11a0 [ 738.158989][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 738.164906][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 738.170822][ C0] ? NF_HOOK+0x329/0x3c0 [ 738.175085][ C0] ? NF_HOOK+0x9e/0x3c0 [ 738.179258][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 738.183860][ C0] ? net_generic+0x1e/0x240 [ 738.188392][ C0] ip6_route_input+0x6de/0xad0 [ 738.193192][ C0] ? __pfx_ip6_route_input+0x10/0x10 [ 738.198502][ C0] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 738.204818][ C0] ? __lock_acquire+0xab9/0xd20 [ 738.209695][ C0] ? ip6_rcv_finish_core+0x222/0x420 [ 738.215000][ C0] ip6_rcv_finish+0x141/0x2e0 [ 738.219700][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 738.224926][ C0] ip_sabotage_in+0x1e1/0x270 [ 738.229642][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 738.234953][ C0] nf_hook_slow+0xc5/0x220 [ 738.239401][ C0] NF_HOOK+0x206/0x3a0 [ 738.243481][ C0] ? skb_orphan+0xaf/0xd0 [ 738.247824][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 738.253036][ C0] ? NF_HOOK+0x9a/0x3a0 [ 738.257203][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 738.261808][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 738.267026][ C0] __netif_receive_skb+0xd3/0x380 [ 738.272081][ C0] ? netif_receive_skb+0x115/0x790 [ 738.277221][ C0] netif_receive_skb+0x1cb/0x790 [ 738.282192][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 738.287679][ C0] ? br_netif_receive_skb+0x126/0x190 [ 738.293172][ C0] NF_HOOK+0xa0/0x390 [ 738.297174][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 738.302922][ C0] ? NF_HOOK+0x102/0x390 [ 738.307189][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 738.312059][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 738.317801][ C0] ? br_pass_frame_up+0x275/0x420 [ 738.322848][ C0] br_handle_frame_finish+0x15c6/0x1c90 [ 738.328428][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 738.334355][ C0] ? ip6t_do_table+0x1db/0x1560 [ 738.339251][ C0] ? nf_hook_slow+0x176/0x220 [ 738.343947][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 738.349859][ C0] br_nf_hook_thresh+0x3c6/0x4a0 [ 738.354833][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 738.360331][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 738.366253][ C0] ? nf_nat_ipv6_in+0x1fc/0x2b0 [ 738.371227][ C0] br_nf_pre_routing_finish_ipv6+0x999/0xd60 [ 738.377230][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 738.383160][ C0] ? br_nf_pre_routing_ipv6+0x42f/0x6b0 [ 738.388729][ C0] br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 738.394153][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 738.400079][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 738.406606][ C0] ? br_nf_pre_routing+0x720/0x1470 [ 738.411844][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 738.417337][ C0] br_handle_frame+0x96e/0x14f0 [ 738.422238][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 738.427559][ C0] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 738.433754][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 738.439672][ C0] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 738.445510][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 738.450825][ C0] __netif_receive_skb_core+0x10b9/0x4380 [ 738.456582][ C0] ? kmem_cache_free+0x19b/0x690 [ 738.461558][ C0] ? ip6_mc_input+0x8de/0xb70 [ 738.466260][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 738.471298][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 738.477389][ C0] ? ip6_rcv_finish+0x29e/0x2e0 [ 738.482263][ C0] ? NF_HOOK+0x30c/0x3a0 [ 738.486545][ C0] ? skb_orphan+0xaf/0xd0 [ 738.490902][ C0] ? process_backlog+0x2d5/0x14f0 [ 738.495956][ C0] ? process_backlog+0x2d5/0x14f0 [ 738.501009][ C0] __netif_receive_skb+0x72/0x380 [ 738.506059][ C0] ? process_backlog+0x2d5/0x14f0 [ 738.511113][ C0] process_backlog+0x60e/0x14f0 [ 738.516013][ C0] ? __pfx_process_backlog+0x10/0x10 [ 738.521327][ C0] ? do_raw_spin_lock+0x121/0x290 [ 738.526378][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 738.531794][ C0] __napi_poll+0xc7/0x360 [ 738.536238][ C0] ? skb_defer_free_flush+0x229/0x250 [ 738.541637][ C0] net_rx_action+0x5f7/0xdf0 [ 738.546276][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 738.551446][ C0] handle_softirqs+0x286/0x870 [ 738.556224][ C0] ? do_softirq+0xec/0x180 [ 738.560657][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 738.566052][ C0] ? batadv_tt_purge+0x4d1/0x9e0 [ 738.571020][ C0] do_softirq+0xec/0x180 [ 738.575283][ C0] [ 738.578219][ C0] [ 738.581160][ C0] ? __pfx_do_softirq+0x10/0x10 [ 738.586049][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 738.591350][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 738.596598][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 738.602341][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 738.607568][ C0] ? batadv_tt_purge+0x4d1/0x9e0 [ 738.612532][ C0] batadv_tt_purge+0x4d1/0x9e0 [ 738.617338][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 738.623078][ C0] process_scheduled_works+0xae1/0x17b0 [ 738.628667][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 738.634672][ C0] ? assign_work+0x381/0x410 [ 738.639282][ C0] rescuer_thread+0x53c/0xdd0 [ 738.643981][ C0] ? rescuer_thread+0xbb/0xdd0 [ 738.648789][ C0] kthread+0x711/0x8a0 [ 738.652885][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 738.658112][ C0] ? __pfx_kthread+0x10/0x10 [ 738.662723][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 738.667949][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 738.673169][ C0] ? __pfx_kthread+0x10/0x10 [ 738.678027][ C0] ret_from_fork+0x4bc/0x870 [ 738.682664][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 738.687808][ C0] ? __switch_to_asm+0x39/0x70 [ 738.692603][ C0] ? __switch_to_asm+0x33/0x70 [ 738.697381][ C0] ? __pfx_kthread+0x10/0x10 [ 738.701996][ C0] ret_from_fork_asm+0x1a/0x30 [ 738.706792][ C0]