last executing test programs: 49.874280248s ago: executing program 2 (id=1433): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r4, &(0x7f00000066c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000000000000290000010492bd0000080085b0fdf4f6e9bc794c3da7bfe51d614922f2f048ad"], 0x18}}], 0x1, 0x40c0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f0000000080)=0xa40, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000100)=0xba1, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000000)=0xffffff80, 0x4) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000034780)=""/102391, &(0x7f00000001c0)=0x18ff7) r6 = socket$kcm(0x2, 0x99db794bb2db6afe, 0x2) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000030000005041000002009f39c651e8203ffccf3694000006800000", @ANYRES32=0x1, @ANYBLOB="ce00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000000000000020000000900000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="3af54737def7dfb2"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2002, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="05000000000000007b113000000000008510000002000000850000000500000095003300000000009500a5050000000075b1a40e0a69845ee00938d59803"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"/395], 0x18c}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d75a3d0000b110000000000000000000000000000000000ff0200000000000000090000000000014f1c4e20"], 0xd6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r8, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r9 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7}, {0x2000000000000}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x2b}, 0x0, @in=@remote, 0x3500, 0x0, 0x0, 0xfd, 0x40000}}, 0xe8) sendmmsg(r9, &(0x7f0000000480), 0x21, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x400, 0x20000, 0x0, {0x0, 0x0, 0x0, r2, {0x4}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_atm={0x8}, @TCA_RATE={0x6, 0x5, {0x2, 0x36}}]}, 0x34}}, 0x0) 49.483714886s ago: executing program 2 (id=1440): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f00000001c0)={0x2, 0x0, @local, 0x18}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000340)={0x2, 0x7e, @multicast1=0x7f000001}, 0x3b) 39.970307932s ago: executing program 2 (id=1440): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f00000001c0)={0x2, 0x0, @local, 0x18}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000340)={0x2, 0x7e, @multicast1=0x7f000001}, 0x3b) 29.957350596s ago: executing program 2 (id=1440): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f00000001c0)={0x2, 0x0, @local, 0x18}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000340)={0x2, 0x7e, @multicast1=0x7f000001}, 0x3b) 19.048624918s ago: executing program 2 (id=1440): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f00000001c0)={0x2, 0x0, @local, 0x18}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000340)={0x2, 0x7e, @multicast1=0x7f000001}, 0x3b) 6.88956642s ago: executing program 2 (id=1440): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f00000001c0)={0x2, 0x0, @local, 0x18}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000340)={0x2, 0x7e, @multicast1=0x7f000001}, 0x3b) 2.6824771s ago: executing program 4 (id=1855): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073118c00210000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)=r0}, 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x4010, r5, 0xd9b63000) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1c, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xb}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x5}, @exit, @ldst={0x3, 0x3, 0x4, 0x5, 0x2, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x1, 0x7, 0x0, 0x2, 0x10, 0x10}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xa}]}, &(0x7f0000000240)='GPL\x00', 0x5, 0xc0, &(0x7f0000000280)=""/192, 0x41000, 0x1, '\x00', r3, 0x25, r5, 0x8, &(0x7f0000000340)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x2a2, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000400)=[r6, r7], &(0x7f0000000500)=[{0x0, 0x2, 0x10, 0x6}, {0x3, 0x3, 0xa, 0x3}], 0x10, 0x3, @void, @value}, 0x94) 1.793275199s ago: executing program 4 (id=1864): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.697548514s ago: executing program 4 (id=1865): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, r0, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2000000}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x57f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x11}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x101]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x7}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4c00}, 0x4008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000007f00000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r3, 0x0, 0x0}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xf}, {0xe, 0xc}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x34}}, 0x4804) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20004080) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r8, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r5, 0x1}, 0x20) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'veth0_to_hsr\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x6, 0x9, "5fe957bc4a59c34a1f"}}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, r0, 0x103, 0x0, 0xfffffffc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 1.696820818s ago: executing program 3 (id=1866): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x59, &(0x7f0000000480)={@link_local, @random="a21428c6c085", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "bcc1d7", 0x23, 0x6c, 0xff, @private0, @loopback, {[], "a6b9a8b8a37b540b161080c9ca97ad771c202a259e471ff2e0e560e677c9c904ee9556"}}}}}, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000200), 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000500)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="c3959e09db213225e3eee83636011144577dee99dc93085fa22c7614bbff9babace5d995f6d703fd36cec2d8a8e01ac260a15264448298de4119c60ea9912b07470f08d870603ab52296178e99958a5b434a5d6e2d62fae7b06a253241e9b3bf8976eb4ca9956ae196a5cf6182056166a4f61d3f3cc57c9ab30afc74597ec86f91bfac39d2821354ff6879c1a79977d4ab"], 0x18}, 0x0) socket$kcm(0x21, 0x2, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0xffffffc9, &(0x7f0000000040)=[{&(0x7f0000000000), 0x1}], 0x1}, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd2c, 0x0, {}, [@RTA_DPORT={0x6, 0x1d, 0xfffe}, @RTA_SPORT={0x6, 0x1c, 0x4e24}]}, 0x2c}}, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/54, 0x36}, 0x40) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r2) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000880) 1.615018954s ago: executing program 3 (id=1867): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r2, &(0x7f0000000140)={&(0x7f0000000380)={0xa, 0x4e20, 0x1000000080000, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, 0xfffffffc}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x1}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r0, 0x303, 0xfffffffd, 0x0, {0x3d}}, 0x14}}, 0x804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='E\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r5, @ANYBLOB="04005b000600650040000000"], 0x28}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe, 0x0, &(0x7f0000000080)="0000ffffffffa02f726c41d4fac1", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0xb2, 0xb8, &(0x7f0000000180)="2b5979d38e2b7e85ae64729627ddc548d32b1e734cf55cdb39efb689fbd7baf596ca099befa217d9aae7f465577d0c4b2344c651aff3dd3e21e558a335a45f95c10215e61d0ea2aebefbd38a4a2dacfd3396be0958ab780f622cc631d3aa23f699e9b08cea5b59657047e362891bb812184d024761480e2519f765aa9727b4dde6ac7595bfddc0e870a05f4ada259b9bc45972ad24ad693913b612d4def62951e42e58da694fd41087a1f356be898141fa09", &(0x7f0000000280)=""/184, 0x5, 0x0, 0xd5, 0xd2, &(0x7f00000003c0)="6432c9ebce779f6f87d0a10532b031373718b2c78d8f8b66bb70066c6297dccac185a339e8d6410ca781e9afd46337d84680e4c5382f1b2d1cbb7acdf230ad4b0315ad7296046ba2995f3c13279f2c725d21be33fd38e1b6246fc831466403ef26351c78e0040cf9f7bba6b07d8c511e266d3d630e8d298b6e67aa68aa1567e9a4483a0db7e7a6b4fb68ac360af60d5de4d7ab3a360042fdd79d38b1af9306eb6287dc20e70f44eec47ae524e489d1fcf3782f1f00831e14dccc33866ff994c960741a8b66efd376cbcca453953f6670b3b8c3493f", &(0x7f00000004c0)="8c425edb87ea12111ed1fc3bef612a3859e85c2a2de4fa7d5ec7a27782885cb3b9a7bc483086de50599f8a0ae42943b0e58fa8c54c4035df39e18967f48247751ee213896fe714167356dd3ce61150608d55f50bf30a1df91cd72a95f8cc667df753e492b2f1c25fb9fe0e1d54962a77669279a2cda4cb088d3ae39c6f7bc9423385fb003d826f853010af79d66d0948528230a7f8ccb47054d9b34b7f77c42627c089acd3bcd623b298f936a8c2770e6292176090bc128bf9783b28d8fe50274bfa38f8f3697ca3117a8ad793b0d3d02955", 0x2, 0x0, 0x7}, 0x50) 1.477079509s ago: executing program 4 (id=1870): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r2, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) unshare(0x22020600) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000001100000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r7, r6, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0xc3ff}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500007c0000000000069078ac1414bbac1414aa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a400000090780000010100020405009940eb739563a3c52b43aee4b2052600000009ffffff4c0000c40000081312625fbe96fc9782524d8a397b7b0000000000"], 0x0) r8 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_int(r8, 0x0, 0x2, &(0x7f0000000000)=0xb2, 0x4) setsockopt$inet_opts(r8, 0x0, 0x4, 0x0, 0x0) sendmmsg$sock(r8, &(0x7f0000001740)=[{{&(0x7f0000000140)=@nl=@unspec, 0x80, 0x0}}], 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x40, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x2}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x240480c4}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x1ff) sendmsg$nl_route(r9, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 1.448607352s ago: executing program 1 (id=1871): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB], 0x8c}, 0x1, 0x0, 0x0, 0xbca735d4abb36529}, 0x24040840) 1.341333853s ago: executing program 3 (id=1872): socket$netlink(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000000)="93", 0x1}], 0x1}, 0x4040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="942a000004000600140012800900010076657468000000000400028008001300", @ANYRES32=0x0, @ANYBLOB="0800250002000000"], 0x44}}, 0x4008040) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000004040)={0x0, 0x0, @start={0x0, 0x0, "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", "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"}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000402d00000000404000000000200002000a00000000000000fc010000000000000000000000000000000000000d0001007564703a73"], 0x6c}}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r5, &(0x7f0000003e00)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000002680)=[{&(0x7f0000000100)=""/227, 0xe3}, {&(0x7f0000000200)=""/210, 0xd2}, {&(0x7f0000003a80)=""/183, 0xb7}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4094, 0xffe}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/136, 0x88}, {&(0x7f0000002540)=""/157, 0x9d}, {&(0x7f0000002600)=""/101, 0x65}], 0x9, &(0x7f0000003f40)=""/249, 0xf9}}, {{&(0x7f0000002840)=@tipc=@name, 0x80, &(0x7f0000002940), 0x0, &(0x7f0000002740)=""/193, 0xc1}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/253, 0xfd}, {&(0x7f0000003b80)=""/215, 0xd7}, {&(0x7f0000003c80)=""/166, 0xa6}], 0x4, &(0x7f0000003ec0)=""/91, 0x5b}}], 0x3, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0xb99f6767a1f35891}, 0x4000) recvmmsg(r8, &(0x7f0000000200), 0x0, 0x2000, 0x0) recvmmsg(r8, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000002900)=""/122, 0x7a}, {&(0x7f00000013c0)=""/96, 0x60}], 0x3}, 0x5}], 0x1, 0x100, 0x0) ioctl$sock_SIOCOUTQ(r7, 0x5411, &(0x7f00000000c0)) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="90000000", @ANYRES16=r10, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000000000000040007800c000800000000000000000008000100007fff"], 0x90}}, 0x0) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) 1.222137316s ago: executing program 4 (id=1874): unshare(0x42000000) mmap(&(0x7f0000164000/0x2000)=nil, 0x2000, 0x1000005, 0x30, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x769f00b363895638, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) unshare(0x62040200) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000010000000000000a20000000000a03000000000000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050800) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r2], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='contention_end\x00', r3}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="fe1c438c64a534d2915080a450b2ede7319cdb2549416665", 0x18}], 0x1, &(0x7f0000000a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}, 0x2000) recvmmsg(r2, &(0x7f000001b900)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/8, 0x8}, {&(0x7f0000000900)=""/194, 0xc2}], 0x2}, 0x1}], 0x1, 0x0, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000040)=0x13, 0x4) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe71) socket$l2tp6(0xa, 0x2, 0x73) r8 = socket(0x1a, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f00000008c0), 0x4) 1.173412833s ago: executing program 0 (id=1875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6800000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000200000900020073797a30000000001c0007800c000280080001400a0101010c000180080001400000000005000500020000000500010006"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c000280080007400000000c0500020000000000080003400000004a08000640000000010800044000000002"], 0x94}}, 0x0) 1.11350871s ago: executing program 1 (id=1876): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r3, 0x0, 0xe, 0x1000, &(0x7f00000000c0)="4ba01d564d7e8eee526e480949b0", &(0x7f00000007c0)=""/4096, 0xd, 0x0, 0xfc, 0xaa, &(0x7f0000000280)="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", &(0x7f0000000640)="48a8f0ffa6f24dd834d5a53d8e6a76408c61bd0103493575387f4fdcdd895818f8b188e1256e0739328ac985261e8db32327b163c8f5cf9ba7085b769371a629477d64cde646757afe0537ebf35c6eec6d0b0a82d7c59e30cedc4560b2d5077d653dddd3994e4cf1e12ab2e2e831aefda856181fd9ed03dfdca309aa89de4ab0ffa25223a075cd4840fa597207eef1cd890e671ae4b7bae7ca1ec6ecb08b6322603946f27c802d07ce6c", 0x3, 0x0, 0xffffffff}, 0x50) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x100}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xfc}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x20}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000088fe508a8500000004000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) (async) connect$can_bcm(r4, &(0x7f0000000080), 0x10) (async) r6 = socket$tipc(0x1e, 0x5, 0x0) (async) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) (async) bind$tipc(r6, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x8000002}}, 0x10) (async) r9 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r9, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) (async) sendmsg$can_bcm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000780)=ANY=[@ANYBLOB="0500000008"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) (async) sendmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 1.023904101s ago: executing program 4 (id=1877): socket$nl_route(0x10, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) socket$inet6(0xa, 0x6, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01d90000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x3c, 0x10, 0xf11, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.021249563s ago: executing program 0 (id=1878): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'vlan0\x00'}) 799.552221ms ago: executing program 0 (id=1879): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x34}}, 0x0) 794.664853ms ago: executing program 1 (id=1880): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a40)={0x38, r1, 0x1, 0x70bd26, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 696.661046ms ago: executing program 0 (id=1881): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000700)=@base={0x10, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f00000005c0)="dc9b709847", &(0x7f00000003c0)=""/79}, 0x20) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100040000000000001f28000000180001801400020067656e65766530"], 0x2c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008000500012000000800010000000000080029007e6b0000080028"], 0x104}}, 0x0) 662.178523ms ago: executing program 1 (id=1882): unshare(0x22020600) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0xa, [{0x100}]}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0xf, 0x2, 0x100}]}]}}, &(0x7f0000000f40)=""/4080, 0x46, 0xff0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x14, 0x4, 0x4, 0x448, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, 0x0, &(0x7f00000000c0)=""/193}, 0x20) 485.731997ms ago: executing program 1 (id=1883): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b40500000000000061107800000000c8dc000000000000009500000000000000a54c968449c5f8a4d814a8541f55bb51263c2b5a8e8fbfc237c0aaeb56e34cc51c8bcf17d128490b8cc89c1a4cb8cf4f83bf705349ea28aec344ff24a21d66f3f4be0a03dad78626938eda726611b8463221e4bed85d62b0cb5f7c0d9dde881dff204d1fb9d6dda8d221ccd6af1b8f40e5745d7712ab3f07c32a54472b60241e667668db"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000080)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="61f55d70bbd10675d2e71bc67a6f69f55dfc0e02291c872d7b53b6d410c0d162d883f821aa5ebaef20dfb703928097c1305e2bd6c719b66f92a6ebfa9ea117269cbfd21d21f1c39b73927aee3c51afac03d1e5aa419982b0842679bb4054d7fd158ccb369a7a5ca56395c7a883c1d2d0b629efdc8451298e146869d68f4fb1053ddbc6ab053fff7369de795256dbf7853f151a75bf", 0x95}, {&(0x7f00000001c0)="eea3b1243c9f7f68c4c40cc1a97925a227da446c7f279a5774eee36020f66ea5e7c9f4b1d2710c9ed35b80e7e02f5b74c673ac0966bf98ad581ebd7162f3980958db0344b3b4f471e566d6651ec490bc8529fd35d8ac97bb0c108a49c4b4dc4bef4e8157f228e5e903364dba11858f448bb227eb8dc276c0f762055f776c8b6a6b", 0x81}], 0x2}, 0x1) 410.050811ms ago: executing program 0 (id=1884): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x225, 0x68020}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) (async) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000040)="127ec4fba146c4fd9331fddc4c92d5e006c58bb6cbf622bbf302bda643a285783b5da85978e172049312fdb0c9b0c9", 0x2f}, {&(0x7f0000000180)="3b29bb1f821ceae799c8c77803d08f4847ac9036f0fde75210349b5e34ebf6242c4c6759a8fd750fa1b4a33ec093f2e795aeea14f9100832b94624d913e490e6fbb7bd650ef2d7a59173bd44b2ddc286f7047ab64a64f1b42f52c07fd48761510d90255a197e30107f2b476646cf8c1356f72005906c3003f03b26f9bf376153efc251d820ee2059ba0f48e55bdfff66411428d83e8e375993e57fd987446604d0d8029156206103c5cd31ade2907ba9b59f1760f00cb70402cab99e72774ae815c1a9a61fd309607d8f21f8ff0ba8057512991cc397ed68055fa0ab3912d13f33ff6bb2c43ddcfa", 0xe8}, {&(0x7f00000000c0)="ac631be4da967392d5efb7602041a43fce357a53edfb41646ba3fb8ecd7c64a58855399f6167ea93142323875cc2277bb24774dedbff6a5995781966bece21c21a1c7d3cb197a6075b1f5d5304816bf4aa4b727494d86257aeb7ab3be3d3", 0x5e}, {&(0x7f0000001400)="2eb012e0adec08f153998f09bf602234116df3c1864582494c8bc5310949fdde0e33593ed92e01938dbd4c64621d1a1d1bc012d52c8bff046031a482edbf9b22dd1af391a55a0e2fc55574ade12960ed03904dba873f2ae0a375a05941379e898c5695d74e3529f0bbd695f02b1ca6fdfede3e6feb8ff42d954500d61c74c97e1dc761ae3963e75effea123e5e53786f8c06c15eacd8e27eb6a678cb5022d800e290a190dc4f18e13c714e2eed6105d1fec2a869f1699b0bd68824c2b8dff380c92f0c05d2f134d4bbd79268d7cab99cd31b9fc70d1f4b16fc03d0c63e96c9ece15af3a3d6a0b11d", 0xe8}, {&(0x7f0000000380)="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", 0x1000}], 0x5}, 0x0) 354.015084ms ago: executing program 3 (id=1885): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a40)={0x30, r0, 0x1, 0x70bd26, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 273.790458ms ago: executing program 1 (id=1886): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="7000028038000100240001006e6f746966795f7065657273"], 0x8c}, 0x1, 0x0, 0x0, 0xbca735d4abb36529}, 0x24040840) 246.072408ms ago: executing program 3 (id=1887): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x20, 0x80, 0x7f, 0x1, {{0x1b, 0x4, 0x1, 0x34, 0x6c, 0x64, 0x0, 0x0, 0x29, 0x0, @loopback, @empty, {[@lsrr={0x83, 0x2b, 0x64, [@multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x3e}, @multicast2, @dev={0xac, 0x14, 0x14, 0x2f}, @rand_addr=0x64010100, @rand_addr=0x64010100, @loopback, @loopback, @loopback]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x18, 0x9e, 0x0, 0x0, [0x6, 0x1, 0xfffffff9, 0x5, 0x6]}, @generic={0x44, 0xe, "52cb7298593dc9161d30c5fb"}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x8, 0xa, 0x7, {{0x14, 0x4, 0x2, 0x1f, 0x50, 0x65, 0x0, 0x9d, 0x0, 0x0, @empty, @private=0xa010101, {[@ra={0x94, 0x4}, @end, @cipso={0x86, 0x37, 0x0, [{0x5, 0x6, "1320a1a6"}, {0x2, 0x7, "49cf543bae"}, {0x6, 0xd, "e637fd7d7d27e2991101ae"}, {0x1, 0xa, "46a82a586b8b0c3e"}, {0x7, 0xd, "85c87e528135633aa993ad"}]}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa08d7d1a66e734e2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xac, r1, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xac}}, 0x0) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r0) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f00000003c0)="1e705007e53b75b7c4bbba50c65d7291122ee0eb9e44edcee832249cb91a0dd079044a60efc357ed5c21cb3a1a50e33e6709663225fcad5243382be9cc9a06f9c860b2e0c2cb86612afa8c3ba6170e3c4fb6d7ef402431ef9b7ffa1f9de266654978f0a156000b7d15e96a88f8b0bd5adce46d8b699164c89ee74855e4030c44d305eaff22aadbf852284ac336b7b4ec50a05ee2177ff05d379ec9cd8efc1df982b15e13f8c2211c53b25c646fd78f2b791b92d0b202ccb74109e38bcbd6fd3dad960cf523833a2c1f3f64773213393d081c8926229aab37b5f0bb3bd7c9319d952a8a81", 0xe4, 0x20000c00, &(0x7f00000004c0)={0x11, 0xf5, r3, 0x1, 0x7, 0x6, @remote}, 0x14) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', r2, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000580), &(0x7f00000005c0)='%pI4 \x00'}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) (async) setsockopt(r4, 0x7, 0xfffffffb, &(0x7f0000000680)="056dfa4e7db9564df27c50933b", 0xd) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f00000006c0)={@broadcast, @broadcast, @empty}, 0xc) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000700)) (async) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000740)={'pim6reg1\x00'}) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000002a40)={0x0, 0x0}, &(0x7f0000002a80)=0xc) (async) r9 = getgid() ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000002ac0)=0x0) r11 = getgid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002b00)={0x0}, &(0x7f0000002b40)=0xc) (async) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000002b80)={0x0, 0x0, 0x0}, &(0x7f0000002bc0)=0xc) (async) r14 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$netlink(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000780)={0xf4, 0x2d, 0x400, 0x70bd27, 0x25dfdbfe, "", [@nested={0xc, 0x100, 0x0, 0x1, [@nested={0x4, 0xf0}, @nested={0x4, 0x11}]}, @generic="de516cdfb841c5ad121c042dd1ee478e5c6b18b4d1ab80eac081af0c348b4df0141e8128d21324e4c3232753fa393f40a92ccb64a3a45f778adf7ea1f85f3086d09152f785799a75a54d2aba3f7d7c7ca3b04cd6bd41cb6c2bcf0ab2bf3e87a9", @typed={0x8, 0x8, 0x0, 0x0, @ipv4=@remote}, @generic="6c6a75736b9f66dc68c676e5d3a59e4a583fe5d9faef3781a630bef021d51b7a7149a7c860b7d4547dce82b7d9975d03eedf06447dca97b3a5642ff6041d02832dcbf9bb86e6ba8844c4e2d95b64e04cfa3f08496079d006e6b4d6945f9ec06638ad3add0468d84bfdec07e32e", @generic]}, 0xf4}, {&(0x7f0000000880)={0x1010, 0x3d, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@generic="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"]}, 0x1010}, {&(0x7f00000018c0)={0x1120, 0x1d, 0x2, 0x70bd28, 0x25dfdbfd, "", [@generic="3eea83927815b38bc61819a5464a6b00c420ab9827e8792c6d8d2a2156f58745d3398d944c3e5b315efa4c42bf6c35968b7c51fdf7dd6561a6a6927b5364edbc49a38da04421f002e504b7c76534def457f5c7b87301fab962b7cdeddfbd506caa14f76e9c26927bae833ee7f1ac84a0716d8248c7732096dda77b93f4ce277f9eac96ca853e7ae947f2cb3da69a87874f2ddcb04c20db2abbe4c045f60abb490c1428784eafb1ef5aa25819a59d6b870834b5031501859e96bb5692d0b96ef2debcf8f304c27c28b5e07459fea0cb961719f6c0ee6f9076c32daed8abe9f4b9d4bcbe977ef1fbcfd1852713a6eb2e4c5c377184f650", @typed={0x14, 0x6d, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x1004, 0x27, 0x0, 0x0, @binary="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"}]}, 0x1120}], 0x3, &(0x7f0000002c00)=[@cred={{0x1c, 0x1, 0x2, {0x0, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, 0x0, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xee01, r13}}}, @rights={{0x30, 0x1, 0x1, [r6, r6, r7, r6, r6, r7, r4, r14]}}], 0x90, 0x24000000}, 0x20000040) (async) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r15, &(0x7f0000002d00)={0xa, 0x4e20, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) r16 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r16, 0x84, 0x16, &(0x7f0000002d40)={0x6, [0x2, 0x1000, 0xa, 0x101, 0x3, 0x7]}, &(0x7f0000002d80)=0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000002dc0)={'veth1_to_bridge\x00', 0x800}) 219.406303ms ago: executing program 0 (id=1888): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="3103c00e0000fbdbdf250b0000f1070003"], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2d92960a", @ANYRES16=r1, @ANYBLOB="00012dbd7000fbdbdf250600000008003a00ff0700000500300001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x40044805) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2d92960a", @ANYRES16=r1, @ANYBLOB="00012dbd7000fbdbdf250600000008003a00ff0700000500300001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x40044805) socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000063000000660000000000000016100000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff4e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000001c0)={'vlan0\x00', {0x2, 0x4e23, @local}}) recvmmsg(r2, &(0x7f0000006a40)=[{{&(0x7f0000000200)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/65, 0x41}, {&(0x7f0000000340)=""/184, 0xb8}, {&(0x7f0000000400)=""/97, 0x61}], 0x3, &(0x7f0000000500)=""/106, 0x6a}, 0x6}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000640)=""/154, 0x9a}, {&(0x7f0000000700)=""/170, 0xaa}, {&(0x7f00000007c0)=""/194, 0xc2}, {&(0x7f00000008c0)=""/213, 0xd5}], 0x4, &(0x7f0000000a00)=""/241, 0xf1}, 0x7fffffff}, {{&(0x7f0000000b00)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)}, {&(0x7f0000001bc0)=""/175, 0xaf}, {&(0x7f0000001c80)=""/113, 0x71}, {&(0x7f0000001d00)=""/18, 0x12}, {&(0x7f0000001d40)=""/230, 0xe6}, {&(0x7f0000001e40)=""/192, 0xc0}], 0x7, &(0x7f0000001f80)=""/246, 0xf6}, 0xedf4cf1}, {{&(0x7f0000002080)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002100)=""/141, 0x8d}, {&(0x7f00000021c0)=""/201, 0xc9}, {&(0x7f00000022c0)=""/227, 0xe3}], 0x3, &(0x7f0000002400)=""/154, 0x9a}}, {{&(0x7f00000024c0)=@alg, 0x80, &(0x7f0000003800)=[{&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/233, 0xe9}, {&(0x7f0000003640)=""/136, 0x88}, {&(0x7f0000003700)=""/102, 0x66}, {&(0x7f0000003780)=""/69, 0x45}], 0x5}, 0x7}, {{&(0x7f0000003880)=@alg, 0x80, &(0x7f0000003d80)=[{&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000003900)=""/242, 0xf2}, {&(0x7f0000003a00)=""/30, 0x1e}, {&(0x7f0000003a40)=""/115, 0x73}, {&(0x7f0000003ac0)=""/243, 0xf3}, {&(0x7f0000003bc0)=""/67, 0x43}, {&(0x7f0000003c40)}, {&(0x7f0000003c80)=""/211, 0xd3}, {&(0x7f0000005380)=""/4096, 0x1000}], 0x9, &(0x7f0000003e40)=""/171, 0xab}, 0x3ff}, {{&(0x7f0000003f00)=@vsock, 0x80, &(0x7f0000004040)=[{&(0x7f0000003f80)=""/104, 0x68}, {&(0x7f0000004000)=""/41, 0x29}], 0x2, &(0x7f0000004080)=""/113, 0x71}}, {{&(0x7f0000004100)=@ax25={{0x3, @netrom}, [@null, @bcast, @default, @rose, @rose, @bcast, @default, @default]}, 0x80, &(0x7f0000004240)=[{&(0x7f0000004180)=""/73, 0x49}, {&(0x7f0000004200)=""/44, 0x2c}], 0x2, &(0x7f0000006380)=""/254, 0xfe}, 0x400}, {{&(0x7f0000004280)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000006540)=[{&(0x7f0000004300)=""/26, 0x1a}, {&(0x7f0000006480)=""/181, 0xb5}], 0x2, &(0x7f0000006580)=""/172, 0xac}, 0x1}, {{0x0, 0x0, &(0x7f0000006900)=[{&(0x7f0000006640)=""/130, 0x82}, {&(0x7f0000006700)=""/252, 0xfc}, {&(0x7f0000006800)=""/76, 0x4c}, {&(0x7f0000006880)=""/96, 0x60}], 0x4, &(0x7f0000006940)=""/248, 0xf8}, 0x8}], 0xa, 0x40000180, &(0x7f0000006cc0)) sendmmsg$inet(r2, &(0x7f0000000580)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000480)='\x00v$', 0x3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c042) 0s ago: executing program 3 (id=1889): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000ebff1100000008000300", @ANYRES32=r5, @ANYBLOB="0a00060008021100000100000c0081000500020080000000"], 0x34}, 0x1, 0x0, 0x0, 0x4045}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r6, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) kernel console output (not intermixed with test programs): ressed [ 133.307306][ T8559] netlink: 16 bytes leftover after parsing attributes in process `syz.0.745'. [ 133.386996][ T8559] netlink: 16 bytes leftover after parsing attributes in process `syz.0.745'. [ 133.427555][ T8563] ip6tnl2: entered promiscuous mode [ 133.432817][ T8563] ip6tnl2: entered allmulticast mode [ 133.505772][ T8563] team0: Device ip6tnl2 is up. Set it down before adding it as a team port [ 134.231123][ T8605] set match dimension is over the limit! [ 134.241172][ T8605] netlink: 'syz.1.760': attribute type 10 has an invalid length. [ 134.347759][ T8607] netlink: 64 bytes leftover after parsing attributes in process `syz.3.761'. [ 134.634795][ T8600] lo speed is unknown, defaulting to 1000 [ 134.727523][ T8601] ip6gretap0: entered promiscuous mode [ 134.748366][ T8601] batadv_slave_0: entered promiscuous mode [ 134.766872][ T8621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'. [ 134.787127][ T8618] macsec1: entered promiscuous mode [ 134.792387][ T8618] macsec1: entered allmulticast mode [ 135.024254][ T8625] netlink: 144 bytes leftover after parsing attributes in process `syz.1.765'. [ 135.444382][ T8637] xt_TCPMSS: Only works on TCP SYN packets [ 135.734686][ T8637] lo speed is unknown, defaulting to 1000 [ 135.822751][ T8653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.772'. [ 135.961174][ T8658] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma? [ 136.000958][ T8659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.774'. [ 136.025128][ T8659] vlan4: entered promiscuous mode [ 136.027278][ T8661] netlink: 'syz.0.776': attribute type 2 has an invalid length. [ 136.030179][ T8659] dummy0: entered promiscuous mode [ 136.052248][ T8659] dummy0: left promiscuous mode [ 136.064536][ T8662] netlink: 'syz.0.776': attribute type 2 has an invalid length. [ 136.117429][ T8661] netlink: 'syz.0.776': attribute type 5 has an invalid length. [ 136.125359][ T8663] netlink: 'syz.0.776': attribute type 5 has an invalid length. [ 136.553197][ T8676] netlink: 'syz.3.779': attribute type 1 has an invalid length. [ 136.661407][ T8674] syz.4.778 (8674) used greatest stack depth: 17712 bytes left [ 136.824166][ T8676] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.868892][ T8671] lo speed is unknown, defaulting to 1000 [ 136.877358][ T8688] tun0: tun_chr_ioctl cmd 21731 [ 137.335530][ T8700] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 137.464503][ T8701] dccp_invalid_packet: P.Data Offset(0) too small [ 138.052472][ T8711] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.316362][ T8703] bridge0: port 2(syz_tun) entered disabled state [ 139.105238][ T8703] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.124162][ T8703] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.134280][ T8703] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.153956][ T8703] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.185457][ T8703] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 139.270164][ T8703] bond0: left allmulticast mode [ 139.283653][ T8703] bond0: left promiscuous mode [ 139.294703][ T8703] macvlan2: left promiscuous mode [ 139.308047][ T8703] macvlan2: left allmulticast mode [ 139.342209][ T8703] macsec1: left promiscuous mode [ 139.351724][ T8703] macsec1: left allmulticast mode [ 139.377987][ T5881] lo speed is unknown, defaulting to 1000 [ 139.378418][ T8704] bridge0: port 3(gretap0) entered blocking state [ 139.400993][ T8704] bridge0: port 3(gretap0) entered disabled state [ 139.422785][ T8704] gretap0: entered allmulticast mode [ 139.429331][ T8726] netlink: 596 bytes leftover after parsing attributes in process `syz.2.791'. [ 139.439732][ T8704] gretap0: entered promiscuous mode [ 139.455936][ T8705] gretap0: left allmulticast mode [ 139.461008][ T8705] gretap0: left promiscuous mode [ 139.466902][ T8705] bridge0: port 3(gretap0) entered disabled state [ 139.648313][ T5944] lo speed is unknown, defaulting to 1000 [ 139.847760][ T8734] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 139.925097][ T8743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.795'. [ 139.927182][ T8744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.795'. [ 139.954287][ T8744] netlink: 24 bytes leftover after parsing attributes in process `syz.1.795'. [ 139.979133][ T8743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.795'. [ 140.225381][ T8750] netlink: 'syz.1.797': attribute type 33 has an invalid length. [ 140.243493][ T8750] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.797'. [ 140.439205][ T8661] Set syz1 is full, maxelem 65536 reached [ 140.998016][ T8778] lo speed is unknown, defaulting to 1000 [ 141.117381][ T8797] team0: Port device gtp0 added [ 141.224770][ T8802] sch_tbf: burst 955 is lower than device lo mtu (65550) ! [ 141.240452][ T8805] x_tables: duplicate underflow at hook 2 [ 141.343381][ T8814] macvlan0: entered promiscuous mode [ 141.352801][ T8814] netlink: 'syz.0.813': attribute type 1 has an invalid length. [ 141.362947][ T8814] netlink: 'syz.0.813': attribute type 2 has an invalid length. [ 141.492832][ T5883] hid-generic 0005:0458:0009.0001: unknown main item tag 0x0 [ 141.549507][ T5883] hid-generic 0005:0458:0009.0001: unknown main item tag 0x0 [ 141.577686][ T5883] hid-generic 0005:0458:0009.0001: unknown main item tag 0x0 [ 141.592613][ T8822] hsr0: entered promiscuous mode [ 141.606110][ T8822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.817'. [ 141.627336][ T5883] hid-generic 0005:0458:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 141.642906][ T8824] xt_hashlimit: size too large, truncated to 1048576 [ 141.672516][ T8822] hsr_slave_0: left promiscuous mode [ 141.690002][ T8822] hsr_slave_1: left promiscuous mode [ 141.726054][ T8822] hsr0 (unregistering): left promiscuous mode [ 141.741729][ T8830] : renamed from bond0 [ 141.929294][ T8839] netlink: 21 bytes leftover after parsing attributes in process `syz.3.820'. [ 141.953824][ T8839] bridge0: port 3(gretap0) entered disabled state [ 142.036571][ T8843] syzkaller1: entered promiscuous mode [ 142.043426][ T8843] syzkaller1: entered allmulticast mode [ 142.181790][ T8847] netlink: 20 bytes leftover after parsing attributes in process `syz.3.822'. [ 142.361413][ T8865] Illegal XDP return value 1046418879 on prog (id 466) dev N/A, expect packet loss! [ 142.543951][ T8877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.832'. [ 142.679123][ T8888] netlink: 'syz.1.835': attribute type 6 has an invalid length. [ 142.893530][ T5840] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 142.893690][ T5150] Bluetooth: hci0: command 0x0401 tx timeout [ 143.559833][ T8907] lo speed is unknown, defaulting to 1000 [ 143.843823][ T8928] netlink: 'syz.3.847': attribute type 2 has an invalid length. [ 143.990093][ T8928] : entered promiscuous mode [ 144.001154][ T8934] IPv6: syztnl0: Disabled Multicast RS [ 144.133718][ T8935] IPVS: set_ctl: invalid protocol: 1 172.20.20.47:19997 [ 144.433721][ T8945] Bluetooth: MGMT ver 1.23 [ 144.490871][ T8920] lo speed is unknown, defaulting to 1000 [ 144.517393][ T8945] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 144.545214][ T8945] macvtap1: entered promiscuous mode [ 144.561379][ T8945] macvtap1: entered allmulticast mode [ 144.569696][ T8945] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 144.599299][ T8945] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 144.609889][ T8945] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 144.744626][ T8918] lo speed is unknown, defaulting to 1000 [ 144.874299][ T8955] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.898017][ T8951] __nla_validate_parse: 5 callbacks suppressed [ 144.898036][ T8951] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.852'. [ 144.916452][ T8951] openvswitch: netlink: Flow actions attr not present in new flow. [ 145.152831][ T8966] sctp: [Deprecated]: syz.3.854 (pid 8966) Use of int in max_burst socket option. [ 145.152831][ T8966] Use struct sctp_assoc_value instead [ 145.188667][ T8968] trusted_key: syz.1.855 sent an empty control message without MSG_MORE. [ 145.812719][ T8977] netlink: 'syz.4.857': attribute type 10 has an invalid length. [ 145.821019][ T8977] team0: Device hsr_slave_0 is of different type [ 145.912505][ T8979] netlink: 'syz.4.858': attribute type 21 has an invalid length. [ 146.042768][ T8981] tipc: Started in network mode [ 146.053796][ T8981] tipc: Node identity 080211000001, cluster identity 4711 [ 146.061717][ T8981] tipc: Enabled bearer , priority 0 [ 146.092597][ T8981] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 146.113430][ T8981] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 146.121497][ T8981] tipc: Resetting bearer [ 146.151303][ T8985] netlink: 'syz.2.860': attribute type 1 has an invalid length. [ 146.294087][ T8994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.863'. [ 146.383478][ T8998] veth1_virt_wifi: entered promiscuous mode [ 146.399780][ T8998] veth1_virt_wifi: entered allmulticast mode [ 146.429267][ T8998] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 146.474713][ T9003] netlink: 68 bytes leftover after parsing attributes in process `syz.3.867'. [ 146.583247][ T8987] lo speed is unknown, defaulting to 1000 [ 146.714294][ T3465] tipc: Resetting bearer [ 146.919840][ T9033] x_tables: duplicate underflow at hook 2 [ 147.145653][ T80] tipc: Node number set to 134418688 [ 147.264121][ T9047] bridge0: port 4(ipvlan0) entered blocking state [ 147.270761][ T9047] bridge0: port 4(ipvlan0) entered disabled state [ 147.285912][ T9047] ipvlan0: entered allmulticast mode [ 147.304724][ T9047] bridge0: entered allmulticast mode [ 147.329206][ T9047] ipvlan0: left allmulticast mode [ 147.353671][ T9047] bridge0: left allmulticast mode [ 147.467823][ T9055] netlink: 28 bytes leftover after parsing attributes in process `syz.4.880'. [ 147.576392][ T9061] Cannot find add_set index 3 as target [ 147.653726][ T8987] lo speed is unknown, defaulting to 1000 [ 147.784251][ T9074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.883'. [ 147.800256][ T9070] netlink: 'syz.4.884': attribute type 1 has an invalid length. [ 147.813603][ T9069] hsr0: entered promiscuous mode [ 147.823054][ T9070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.842008][ T9074] hsr_slave_0: left promiscuous mode [ 147.844971][ T9070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.884'. [ 147.850767][ T9077] netlink: 36 bytes leftover after parsing attributes in process `syz.3.886'. [ 147.860541][ T9070] netlink: 'syz.4.884': attribute type 3 has an invalid length. [ 147.893415][ T9074] hsr_slave_1: left promiscuous mode [ 147.899117][ T9077] netlink: 16 bytes leftover after parsing attributes in process `syz.3.886'. [ 147.918829][ T9077] netlink: 36 bytes leftover after parsing attributes in process `syz.3.886'. [ 147.938015][ T9077] netlink: 36 bytes leftover after parsing attributes in process `syz.3.886'. [ 147.957639][ T9074] hsr0 (unregistering): left promiscuous mode [ 147.975396][ T9070] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.985540][ T9070] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.994399][ T9070] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.003118][ T9070] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.211492][ T9088] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.324038][ T9088] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.387259][ T9081] lo speed is unknown, defaulting to 1000 [ 148.477016][ T9088] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.575852][ T9088] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.687757][ T9088] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.706463][ T9088] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.722717][ T9088] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.738734][ T9088] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.437191][ T9139] tipc: Failed to obtain node identity [ 149.442796][ T9139] tipc: Enabling of bearer rejected, failed to enable media [ 149.698485][ T9147] netlink: 'syz.4.905': attribute type 10 has an invalid length. [ 149.728732][ T9146] netlink: 'syz.4.905': attribute type 10 has an invalid length. [ 149.765752][ T9147] team0: Device bridge0 is of different type [ 149.885351][ T9146] team0: Device bridge0 is of different type [ 150.249775][ T9167] __nla_validate_parse: 1 callbacks suppressed [ 150.249792][ T9167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.912'. [ 150.651960][ T9162] lo speed is unknown, defaulting to 1000 [ 150.669478][ T9186] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 150.842399][ T9194] vlan0: entered promiscuous mode [ 150.926920][ T9202] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 1, id = 0 [ 151.022820][ T9206] nbd: must specify a device to reconfigure [ 151.117340][ T9211] netlink: 'syz.2.924': attribute type 1 has an invalid length. [ 151.198367][ T9211] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.336006][ T9216] bond2: (slave ip6gretap1): making interface the new active one [ 151.366670][ T9216] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 151.396791][ T9216] syz.2.924 (9216) used greatest stack depth: 16880 bytes left [ 151.559233][ T9229] netlink: 'syz.2.928': attribute type 1 has an invalid length. [ 151.689018][ T9235] bond3: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 151.701970][ T9229] 8021q: adding VLAN 0 to HW filter on device bond3 [ 151.709204][ T3465] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 151.752559][ T9235] veth3: entered promiscuous mode [ 151.763836][ T9235] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 151.834131][ T76] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 151.984569][ T9243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.932'. [ 152.050268][ T9243] netlink: 'syz.2.932': attribute type 1 has an invalid length. [ 152.135706][ T9248] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.144517][ T9248] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.153220][ T9248] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.162231][ T9248] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.190460][ T9245] netlink: 24 bytes leftover after parsing attributes in process `syz.4.933'. [ 152.220345][ T9251] ip6erspan0: entered promiscuous mode [ 152.249371][ T9240] lo speed is unknown, defaulting to 1000 [ 152.555072][ T9269] macsec2: entered promiscuous mode [ 152.584366][ T9269] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 152.607457][ T9269] macsec2: entered allmulticast mode [ 152.611531][ T9275] netlink: 'syz.3.940': attribute type 1 has an invalid length. [ 152.612773][ T9269] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 152.709207][ T9275] 8021q: adding VLAN 0 to HW filter on device bond4 [ 152.724416][ T9269] netlink: 'syz.4.942': attribute type 1 has an invalid length. [ 152.794563][ T9288] netlink: 76 bytes leftover after parsing attributes in process `syz.0.944'. [ 152.846379][ T9275] tipc: Enabling of bearer rejected, failed to enable media [ 152.970302][ T9272] lo speed is unknown, defaulting to 1000 [ 153.491762][ T9303] netlink: 256 bytes leftover after parsing attributes in process `syz.3.949'. [ 153.511930][ T9303] netlink: 'syz.3.949': attribute type 9 has an invalid length. [ 153.643610][ T9311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.951'. [ 153.825724][ T9241] lo speed is unknown, defaulting to 1000 [ 153.843630][ T9319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.953'. [ 153.878743][ T9319] netlink: 'syz.4.953': attribute type 11 has an invalid length. [ 154.394314][ T9324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.955'. [ 154.581116][ T9309] lo speed is unknown, defaulting to 1000 [ 154.648593][ T9340] netlink: 'syz.0.958': attribute type 1 has an invalid length. [ 155.185871][ T9355] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 155.638508][ T9373] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 155.695196][ T9370] batadv_slave_1: entered promiscuous mode [ 155.900996][ T9366] lo speed is unknown, defaulting to 1000 [ 155.969093][ T9383] netlink: 24 bytes leftover after parsing attributes in process `syz.4.970'. [ 156.123037][ T9388] netlink: 'syz.1.971': attribute type 1 has an invalid length. [ 156.155422][ T9383] netlink: 24 bytes leftover after parsing attributes in process `syz.4.970'. [ 156.316527][ T9383] netlink: 24 bytes leftover after parsing attributes in process `syz.4.970'. [ 156.359323][ T9363] batadv_slave_1: left promiscuous mode [ 156.417016][ T9383] netlink: 24 bytes leftover after parsing attributes in process `syz.4.970'. [ 156.492460][ T9383] netlink: 24 bytes leftover after parsing attributes in process `syz.4.970'. [ 156.573646][ T9383] netlink: 24 bytes leftover after parsing attributes in process `syz.4.970'. [ 156.574514][ T9390] lo speed is unknown, defaulting to 1000 [ 156.586095][ T9383] netlink: 24 bytes leftover after parsing attributes in process `syz.4.970'. [ 156.593545][ T9406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'. [ 156.627623][ T9383] netlink: 24 bytes leftover after parsing attributes in process `syz.4.970'. [ 156.633989][ T9406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'. [ 157.177685][ T9427] xt_CT: No such helper "snmp" [ 157.401602][ T9439] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 157.409399][ T9439] IPv6: NLM_F_CREATE should be set when creating new route [ 157.416841][ T9439] IPv6: NLM_F_CREATE should be set when creating new route [ 157.424122][ T9439] IPv6: NLM_F_CREATE should be set when creating new route [ 157.470963][ T9444] nbd: illegal input index -381222912 [ 157.598789][ T9447] batadv_slave_1: entered promiscuous mode [ 157.616169][ T9422] netlink: 'syz.2.980': attribute type 13 has an invalid length. [ 157.630421][ T9447] macsec3: entered allmulticast mode [ 157.643686][ T9447] ip6gretap0: entered allmulticast mode [ 157.782089][ T9414] lo speed is unknown, defaulting to 1000 [ 158.141793][ T9413] lo speed is unknown, defaulting to 1000 [ 158.264330][ T9460] netlink: 'syz.3.990': attribute type 3 has an invalid length. [ 158.299400][ T9420] lo speed is unknown, defaulting to 1000 [ 158.383691][ T9445] batadv_slave_1: left promiscuous mode [ 158.418360][ T9446] lo speed is unknown, defaulting to 1000 [ 158.538963][ T9441] lo speed is unknown, defaulting to 1000 [ 159.858171][ T9486] batadv_slave_1: entered promiscuous mode [ 159.943127][ T9491] netlink: 'syz.0.996': attribute type 10 has an invalid length. [ 159.986288][ T9491] veth1_vlan: left promiscuous mode [ 160.022725][ T9483] netlink: 'syz.0.996': attribute type 58 has an invalid length. [ 160.026052][ T9491] team0: Device veth1_vlan failed to register rx_handler [ 160.152751][ T9493] sit0: left promiscuous mode [ 160.158637][ T9493] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 160.254991][ T76] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 160.266017][ T9498] tipc: Can't bind to reserved service type 1 [ 160.284267][ T9479] lo speed is unknown, defaulting to 1000 [ 160.620688][ T9482] batadv_slave_1: left promiscuous mode [ 160.734020][ T9514] netlink: 'syz.1.1004': attribute type 1 has an invalid length. [ 160.867651][ T9514] 8021q: adding VLAN 0 to HW filter on device bond3 [ 160.948954][ T9523] bond3: (slave gretap2): making interface the new active one [ 161.009009][ T9523] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 161.172547][ T9523] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 161.294791][ T9529] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 161.434730][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 161.694552][ T9543] __nla_validate_parse: 129 callbacks suppressed [ 161.694572][ T9543] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1012'. [ 161.745266][ T9548] bridge_slave_0: left allmulticast mode [ 161.752891][ T9548] bridge_slave_0: left promiscuous mode [ 161.758842][ T9548] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.779020][ T9548] bridge_slave_1: left allmulticast mode [ 161.785488][ T9548] bridge_slave_1: left promiscuous mode [ 161.791265][ T9548] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.848439][ T9548] bond0: (slave bond_slave_0): Releasing backup interface [ 161.901945][ T9548] bond0: (slave bond_slave_1): Releasing backup interface [ 161.921982][ T9548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.933372][ T9548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.969450][ T9548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.977457][ T9548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.992108][ T9548] bond2: (slave ip6gretap1): Releasing active interface [ 162.004747][ T9548] bond3: (slave ip6gretap2): Removing an active aggregator [ 162.012755][ T9548] bond3: (slave ip6gretap2): Releasing backup interface [ 162.025548][ T9548] bond3: (slave ip6gretap2): the permanent HWaddr of slave - 96:2d:a5:0c:2d:d2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 162.048474][ T9548] bond3: (slave veth3): Releasing backup interface [ 162.065931][ T9538] lo speed is unknown, defaulting to 1000 [ 162.535242][ T9570] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.544605][ T9570] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.553819][ T9570] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.562703][ T9570] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.676115][ T9570] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.698399][ T9570] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 162.942836][ T9561] lo speed is unknown, defaulting to 1000 [ 163.236944][ T9590] dvmrp5: entered allmulticast mode [ 163.264908][ T9590] openvswitch: netlink: Actions may not be safe on all matching packets [ 163.291938][ T9589] dvmrp5: left allmulticast mode [ 163.430906][ T9577] lo speed is unknown, defaulting to 1000 [ 163.553092][ T9594] batadv_slave_1: entered promiscuous mode [ 163.751815][ T9608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1028'. [ 163.761421][ T9608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1028'. [ 163.780477][ T9608] netlink: 'syz.0.1028': attribute type 13 has an invalid length. [ 163.791575][ T9608] netlink: 'syz.0.1028': attribute type 11 has an invalid length. [ 163.937804][ T9576] batadv_slave_1: left promiscuous mode [ 164.260104][ T9617] xt_hashlimit: size too large, truncated to 1048576 [ 164.784041][ T9629] lo speed is unknown, defaulting to 1000 [ 164.912598][ T9650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1043'. [ 164.940720][ T9650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1043'. [ 164.962216][ T9652] bridge0: port 1(gretap0) entered blocking state [ 164.996961][ T9652] bridge0: port 1(gretap0) entered disabled state [ 165.027460][ T9652] gretap0: entered allmulticast mode [ 165.065665][ T9652] gretap0: entered promiscuous mode [ 165.093760][ T9653] gretap0: left allmulticast mode [ 165.104684][ T9653] gretap0: left promiscuous mode [ 165.109838][ T9653] bridge0: port 1(gretap0) entered disabled state [ 165.392808][ T9667] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1048'. [ 165.556884][ T9677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1049'. [ 165.660831][ T9684] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1051'. [ 165.692794][ T9684] netlink: 'syz.2.1051': attribute type 1 has an invalid length. [ 165.693728][ T3483] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 165.703876][ T9684] netlink: 16179 bytes leftover after parsing attributes in process `syz.2.1051'. [ 165.725905][ T9689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1052'. [ 166.201103][ T9714] pimreg: entered allmulticast mode [ 166.231066][ T9716] pimreg: left allmulticast mode [ 166.251694][ T9716] dvmrp5: left allmulticast mode [ 166.317401][ T9724] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 166.665196][ T9741] netlink: 'syz.0.1068': attribute type 4 has an invalid length. [ 166.925751][ T9764] netlink: 'syz.2.1075': attribute type 1 has an invalid length. [ 166.994458][ T9768] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.002716][ T9768] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.054063][ T9768] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.062300][ T9768] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.098070][ T9768] geneve2: entered promiscuous mode [ 167.108064][ T9768] geneve2: entered allmulticast mode [ 167.136472][ T9768] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.150485][ T9768] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.160791][ T9768] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.174866][ T9768] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.215672][ T9753] __nla_validate_parse: 2 callbacks suppressed [ 167.215690][ T9753] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1069'. [ 167.235414][ T9753] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1069'. [ 167.250169][ T9753] netlink: 'syz.3.1069': attribute type 5 has an invalid length. [ 167.258226][ T9746] lo speed is unknown, defaulting to 1000 [ 167.290249][ T9753] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1069'. [ 167.380041][ T9777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1079'. [ 167.426658][ T9779] 8021q: adding VLAN 0 to HW filter on device bond2 [ 167.457171][ T9786] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1079'. [ 167.475973][ T9766] IPv6: NLM_F_REPLACE set, but no existing node found! [ 167.502067][ T9770] lo speed is unknown, defaulting to 1000 [ 167.928446][ T9812] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 167.991528][ T9816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1090'. [ 168.221093][ T9829] netlink: 'syz.2.1091': attribute type 3 has an invalid length. [ 168.844239][ T9825] lo speed is unknown, defaulting to 1000 [ 168.994065][ T9828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1092'. [ 169.005268][ T9847] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 169.432512][ T9855] vlan1: entered promiscuous mode [ 169.729067][ T9875] sctp: [Deprecated]: syz.3.1107 (pid 9875) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.729067][ T9875] Use struct sctp_sack_info instead [ 169.949008][ T9869] syz.4.1106: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 169.977011][ T9877] netlink: 'syz.3.1108': attribute type 39 has an invalid length. [ 169.985619][ T9869] CPU: 1 UID: 0 PID: 9869 Comm: syz.4.1106 Not tainted 6.14.0-rc4-syzkaller-00859-gf77f12010f67 #0 [ 169.985644][ T9869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 169.985657][ T9869] Call Trace: [ 169.985666][ T9869] [ 169.985673][ T9869] dump_stack_lvl+0x241/0x360 [ 169.985704][ T9869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.985720][ T9869] ? __pfx__printk+0x10/0x10 [ 169.985738][ T9869] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 169.985758][ T9869] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 169.985780][ T9869] warn_alloc+0x278/0x410 [ 169.985802][ T9869] ? __pfx_warn_alloc+0x10/0x10 [ 169.985825][ T9869] ? hash_ipmark_create+0x410/0x1190 [ 169.985847][ T9869] ? __get_vm_area_node+0x1c8/0x2d0 [ 169.985868][ T9869] ? __get_vm_area_node+0x25c/0x2d0 [ 169.985896][ T9869] __vmalloc_node_range_noprof+0x62f/0x1380 [ 169.985948][ T9869] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 169.985971][ T9869] ? rcu_is_watching+0x15/0xb0 [ 169.985989][ T9869] ? trace_kmalloc+0x1f/0xd0 [ 169.986007][ T9869] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 169.986026][ T9869] ? __kvmalloc_node_noprof+0x72/0x190 [ 169.986052][ T9869] __kvmalloc_node_noprof+0x142/0x190 [ 169.986074][ T9869] ? hash_ipmark_create+0x410/0x1190 [ 169.986097][ T9869] hash_ipmark_create+0x410/0x1190 [ 169.986127][ T9869] ? __nla_parse+0x40/0x60 [ 169.986145][ T9869] ? __pfx_hash_ipmark_create+0x10/0x10 [ 169.986168][ T9869] ip_set_create+0xa78/0x1960 [ 169.986192][ T9869] ? ip_set_create+0x48a/0x1960 [ 169.986218][ T9869] ? __pfx_ip_set_create+0x10/0x10 [ 169.986271][ T9869] ? nfnetlink_rcv_msg+0x225/0x1180 [ 169.986293][ T9869] nfnetlink_rcv_msg+0xbec/0x1180 [ 169.986314][ T9869] ? nfnetlink_rcv_msg+0x225/0x1180 [ 169.986357][ T9869] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 169.986424][ T9869] netlink_rcv_skb+0x206/0x480 [ 169.986444][ T9869] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 169.986467][ T9869] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 169.986498][ T9869] ? apparmor_capable+0x13b/0x1b0 [ 169.986517][ T9869] ? bpf_lsm_capable+0x9/0x10 [ 169.986538][ T9869] ? security_capable+0x7e/0x2d0 [ 169.986566][ T9869] nfnetlink_rcv+0x297/0x2ab0 [ 169.986593][ T9869] ? __pfx_validate_chain+0x10/0x10 [ 169.986624][ T9869] ? mark_lock+0x9a/0x360 [ 169.986638][ T9869] ? __pfx_validate_chain+0x10/0x10 [ 169.986657][ T9869] ? __lock_acquire+0x1397/0x2100 [ 169.986686][ T9869] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 169.986712][ T9869] ? mark_lock+0x9a/0x360 [ 169.986731][ T9869] ? __lock_acquire+0x1397/0x2100 [ 169.986785][ T9869] ? __pfx_lock_release+0x10/0x10 [ 169.986806][ T9869] ? netlink_deliver_tap+0x2e/0x1b0 [ 169.986824][ T9869] ? __pfx_lock_release+0x10/0x10 [ 169.986859][ T9869] ? netlink_deliver_tap+0x2e/0x1b0 [ 169.986879][ T9869] netlink_unicast+0x7f6/0x990 [ 169.986905][ T9869] ? __pfx_netlink_unicast+0x10/0x10 [ 169.986918][ T9869] ? __virt_addr_valid+0x45f/0x530 [ 169.986935][ T9869] ? __phys_addr_symbol+0x2f/0x70 [ 169.986956][ T9869] ? __check_object_size+0x47a/0x730 [ 169.986981][ T9869] netlink_sendmsg+0x8de/0xcb0 [ 169.987012][ T9869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.987034][ T9869] ? aa_sock_msg_perm+0x91/0x160 [ 169.987062][ T9869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.987078][ T9869] __sock_sendmsg+0x221/0x270 [ 169.987100][ T9869] ____sys_sendmsg+0x53a/0x860 [ 169.987132][ T9869] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.987152][ T9869] ? __fget_files+0x2a/0x410 [ 169.987176][ T9869] ? __fget_files+0x2a/0x410 [ 169.987205][ T9869] __sys_sendmsg+0x269/0x350 [ 169.987233][ T9869] ? __pfx___sys_sendmsg+0x10/0x10 [ 169.987299][ T9869] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 169.987322][ T9869] ? do_syscall_64+0x100/0x230 [ 169.987348][ T9869] ? do_syscall_64+0xb6/0x230 [ 169.987372][ T9869] do_syscall_64+0xf3/0x230 [ 169.987393][ T9869] ? clear_bhb_loop+0x35/0x90 [ 169.987417][ T9869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.987437][ T9869] RIP: 0033:0x7f44dd58d169 [ 169.987456][ T9869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.987469][ T9869] RSP: 002b:00007f44de392038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.987487][ T9869] RAX: ffffffffffffffda RBX: 00007f44dd7a6080 RCX: 00007f44dd58d169 [ 169.987498][ T9869] RDX: 0000000000000084 RSI: 0000400000000040 RDI: 0000000000000007 [ 169.987508][ T9869] RBP: 00007f44dd60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 169.987517][ T9869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.987527][ T9869] R13: 0000000000000000 R14: 00007f44dd7a6080 R15: 00007ffeece502c8 [ 169.987554][ T9869] [ 169.987560][ T9869] Mem-Info: [ 170.444417][ T9869] active_anon:6812 inactive_anon:0 isolated_anon:0 [ 170.444417][ T9869] active_file:1430 inactive_file:38339 isolated_file:0 [ 170.444417][ T9869] unevictable:768 dirty:141 writeback:0 [ 170.444417][ T9869] slab_reclaimable:11395 slab_unreclaimable:106675 [ 170.444417][ T9869] mapped:31308 shmem:4306 pagetables:839 [ 170.444417][ T9869] sec_pagetables:0 bounce:0 [ 170.444417][ T9869] kernel_misc_reclaimable:0 [ 170.444417][ T9869] free:1331045 free_pcp:2635 free_cma:0 [ 170.489654][ T9869] Node 0 active_anon:27248kB inactive_anon:0kB active_file:5720kB inactive_file:153276kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125232kB dirty:564kB writeback:0kB shmem:15688kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11492kB pagetables:3356kB sec_pagetables:0kB all_unreclaimable? no [ 170.525078][ T9869] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 170.580854][ T9869] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 170.636687][ T9869] lowmem_reserve[]: 0 2490 2490 0 0 [ 170.642090][ T9869] Node 0 DMA32 free:1407976kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:22012kB inactive_anon:0kB active_file:5720kB inactive_file:152960kB unevictable:1536kB writepending:564kB present:3129332kB managed:2549820kB mlocked:0kB bounce:0kB free_pcp:9036kB local_pcp:1892kB free_cma:0kB [ 170.677704][ T9869] lowmem_reserve[]: 0 0 0 0 0 [ 170.683744][ T9869] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 170.704500][ T9900] vlan2: left allmulticast mode [ 170.720410][ T9900] bridge0: port 1(vlan2) entered disabled state [ 170.733638][ T9869] lowmem_reserve[]: 0 0 0 0 0 [ 170.738433][ T9869] Node 1 Normal free:3908520kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 170.783434][ T9869] lowmem_reserve[]: 0 0 0 0 0 [ 170.788421][ T9869] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 170.803381][ T9869] Node 0 DMA32: 379*4kB (UE) 104*8kB (UME) 188*16kB (UME) 342*32kB (UME) 149*64kB (UME) 59*128kB (UM) 24*256kB (UME) 10*512kB (UE) 13*1024kB (UM) 9*2048kB (UME) 325*4096kB (UM) = 1407596kB [ 170.826604][ T9900] bond3: (slave gretap2): Releasing active interface [ 170.834922][ T9869] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 170.838072][ T9905] netlink: 'syz.2.1114': attribute type 29 has an invalid length. [ 170.848999][ T9869] Node 1 Normal: 197*4kB (UE) 62*8kB (UME) 45*16kB (UME) 220*32kB (UME) 100*64kB (UME) 31*128kB (UME) 16*256kB (UME) 6*512kB (UM) 3*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3908564kB [ 170.884137][ T9900] vlan3: entered allmulticast mode [ 170.894798][ T9869] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 170.958124][ T9869] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 170.970362][ T9869] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 170.984960][ T9869] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 170.991911][ T9911] ip6gretap3: entered promiscuous mode [ 170.996645][ T9869] 41225 total pagecache pages [ 171.003493][ T9911] ip6gretap3: entered allmulticast mode [ 171.006881][ T9869] 0 pages in swap cache [ 171.054406][ T9869] Free swap = 124996kB [ 171.060849][ T9869] Total swap = 124996kB [ 171.073369][ T9869] 2097051 pages RAM [ 171.077210][ T9869] 0 pages HighMem/MovableOnly [ 171.081889][ T9869] 427874 pages reserved [ 171.107455][ T9869] 0 pages cma reserved [ 171.329462][ T9933] netlink: 'syz.1.1121': attribute type 2 has an invalid length. [ 171.383425][ T9933] netlink: 'syz.1.1121': attribute type 9 has an invalid length. [ 171.391214][ T9933] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1121'. [ 171.504885][ T9944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1124'. [ 171.570825][ T9945] netlink: 'syz.4.1124': attribute type 10 has an invalid length. [ 171.652679][ T9944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1124'. [ 171.715442][ T9944] syz_tun: left allmulticast mode [ 171.720526][ T9944] syz_tun: left promiscuous mode [ 171.744861][ T9944] bridge0: port 2(syz_tun) entered disabled state [ 171.752521][ T9944] vlan3: left promiscuous mode [ 171.762715][ T9944] vlan3: left allmulticast mode [ 171.768878][ T9944] bridge0: port 1(vlan3) entered disabled state [ 171.858083][ T9964] team0: Device gtp0 is of different type [ 172.010796][ T9977] netlink: 'syz.3.1133': attribute type 2 has an invalid length. [ 172.056110][ T9978] nbd: must specify at least one socket [ 172.100330][ T9978] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.248732][ T9974] lo speed is unknown, defaulting to 1000 [ 172.310360][ T9997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1139'. [ 172.347995][ T9997] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 172.383486][ T9997] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 172.413587][ T9997] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 172.431849][ T9997] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 172.655065][T10007] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1143'. [ 172.674562][T10012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1145'. [ 172.685581][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1144'. [ 172.708784][T10012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1145'. [ 172.728174][T10012] netlink: 'syz.4.1145': attribute type 11 has an invalid length. [ 172.808837][T10019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1147'. [ 172.850252][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1147'. [ 172.893687][ T9972] ip6gre1: entered promiscuous mode [ 173.159732][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1151'. [ 173.821898][T10043] lo speed is unknown, defaulting to 1000 [ 174.164997][T10063] macsec3: entered promiscuous mode [ 174.170374][T10063] macsec3: entered allmulticast mode [ 174.268035][T10065] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 174.962792][T10067] lo speed is unknown, defaulting to 1000 [ 174.989858][T10082] tipc: Started in network mode [ 175.000515][T10082] tipc: Node identity 725eadaa2593, cluster identity 4711 [ 175.026032][T10082] tipc: Enabled bearer , priority 0 [ 175.426859][T10100] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:20000 [ 175.637967][T10110] netlink: 'syz.0.1171': attribute type 1 has an invalid length. [ 175.847831][T10115] netlink: 'syz.2.1172': attribute type 1 has an invalid length. [ 175.944986][T10120] netlink: 'syz.1.1173': attribute type 3 has an invalid length. [ 175.958556][T10120] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1173'. [ 175.978023][T10120] netlink: 'syz.1.1173': attribute type 15 has an invalid length. [ 176.082590][T10124] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1175'. [ 176.143447][ T5912] tipc: Node number set to 1473097130 [ 176.182367][T10131] netlink: 'syz.1.1177': attribute type 6 has an invalid length. [ 176.572317][T10152] netlink: 'syz.2.1184': attribute type 1 has an invalid length. [ 176.782151][T10166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.809247][T10168] pimreg: entered allmulticast mode [ 177.236599][T10160] lo speed is unknown, defaulting to 1000 [ 177.419209][T10191] dccp_invalid_packet: P.type (CLOSEREQ) not Data || [Data]Ack, while P.X == 0 [ 177.583024][T10198] xt_nfacct: accounting object `syz1' does not exists [ 178.236350][T10226] __nla_validate_parse: 7 callbacks suppressed [ 178.236368][T10226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1206'. [ 178.283881][T10226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1206'. [ 178.427598][T10239] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1209'. [ 178.662088][T10250] pim6reg: entered allmulticast mode [ 178.762767][T10255] lo: entered allmulticast mode [ 178.768295][T10255] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.091612][T10260] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 179.163215][T10263] syzkaller1: entered promiscuous mode [ 179.169115][T10263] syzkaller1: entered allmulticast mode [ 179.187181][T10263] Cannot find del_set index 4 as target [ 179.362544][T10278] x_tables: duplicate underflow at hook 2 [ 179.602114][T10298] netlink: 'syz.3.1225': attribute type 2 has an invalid length. [ 179.646661][T10298] netlink: 'syz.3.1225': attribute type 4 has an invalid length. [ 180.043409][T10325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.058924][T10328] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1232'. [ 180.141482][T10327] netlink: 'syz.0.1235': attribute type 9 has an invalid length. [ 180.174220][T10327] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1235'. [ 180.345176][T10343] SET target dimension over the limit! [ 180.366586][T10331] lo speed is unknown, defaulting to 1000 [ 180.574107][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 180.988683][T10361] netlink: 'syz.2.1246': attribute type 1 has an invalid length. [ 181.019010][T10361] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1246'. [ 181.159358][T10367] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1248'. [ 181.177253][T10367] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1248'. [ 181.214277][T10367] syz_tun: entered promiscuous mode [ 181.237933][T10367] batadv_slave_1: entered promiscuous mode [ 181.254532][T10367] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 181.267295][T10367] Cannot create hsr debugfs directory [ 181.272981][T10367] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 181.290761][T10374] netlink: zone id is out of range [ 181.296357][T10367] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.323589][T10369] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1248'. [ 181.555619][T10381] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1253'. [ 181.585193][T10381] netlink: 'syz.2.1253': attribute type 1 has an invalid length. [ 181.941576][T10408] netlink: 'syz.1.1261': attribute type 1 has an invalid length. [ 182.305794][T10426] openvswitch: netlink: Flow key attr not present in new flow. [ 182.326677][T10424] IPv6: Can't replace route, no match found [ 182.888947][T10447] tipc: Enabling of bearer rejected, failed to enable media [ 183.132988][T10457] netlink: 'syz.0.1276': attribute type 10 has an invalid length. [ 183.341564][T10469] lo speed is unknown, defaulting to 1000 [ 183.440393][T10472] netpci0: tun_chr_ioctl cmd 1074025677 [ 183.447874][T10472] netpci0: linktype set to 773 [ 183.497738][T10475] __nla_validate_parse: 6 callbacks suppressed [ 183.497756][T10475] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1280'. [ 183.596217][T10481] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20000 [ 183.699755][T10488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1285'. [ 183.711007][T10486] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1284'. [ 183.723250][T10486] ieee802154 phy0 wpan0: encryption failed: -22 [ 183.966198][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880594df800: rx timeout, send abort [ 183.975292][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880594df800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 184.567894][T10519] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.608771][T10519] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 184.630097][T10523] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1295'. [ 184.690526][T10519] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.728686][T10519] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 184.761825][T10522] sch_tbf: burst 3631 is lower than device lo mtu (65550) ! [ 184.778456][T10528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1298'. [ 184.795535][T10519] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.806667][T10519] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 184.847714][T10519] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.864614][T10519] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 184.902080][T10531] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1299'. [ 184.985839][T10519] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 185.028194][T10519] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 185.071143][T10519] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 185.097923][T10519] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 185.123487][T10519] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 185.166777][T10519] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 185.193114][T10519] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 185.201948][T10519] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 185.255699][T10552] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1305'. [ 186.082441][T10592] netlink: 'syz.3.1315': attribute type 12 has an invalid length. [ 186.167931][T10594] tipc: Started in network mode [ 186.172841][T10594] tipc: Node identity 9676f56c703, cluster identity 4711 [ 186.181803][T10594] tipc: Enabled bearer , priority 0 [ 186.256580][T10599] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1318'. [ 186.284447][T10600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1317'. [ 186.298968][T10594] syzkaller0: entered promiscuous mode [ 186.303580][T10599] netlink: 'syz.3.1318': attribute type 1 has an invalid length. [ 186.342098][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 186.353452][T10594] syzkaller0: entered allmulticast mode [ 186.366258][T10594] tipc: Resetting bearer [ 186.375130][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 186.376893][T10604] netlink: 'syz.3.1318': attribute type 1 has an invalid length. [ 186.381183][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 186.408337][T10604] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1318'. [ 186.459183][T10603] bridge3: entered promiscuous mode [ 186.472009][T10593] tipc: Resetting bearer [ 187.064597][T10630] xt_nfacct: accounting object `syz1' does not exists [ 187.174011][ T5881] tipc: Node number set to 3863410028 [ 188.284349][T10593] tipc: Disabling bearer [ 188.326475][T10627] syz_tun (unregistering): left promiscuous mode [ 188.696518][T10662] __nla_validate_parse: 1 callbacks suppressed [ 188.696539][T10662] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1332'. [ 189.132876][T10691] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1343'. [ 189.145398][T10691] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1343'. [ 189.303251][T10699] netlink: 'syz.3.1345': attribute type 2 has an invalid length. [ 189.316708][T10699] fþ: entered promiscuous mode [ 189.322815][T10701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1339'. [ 189.335958][T10701] netlink: 'syz.1.1339': attribute type 7 has an invalid length. [ 189.363455][T10701] netlink: 'syz.1.1339': attribute type 8 has an invalid length. [ 189.628181][T10713] netlink: 'syz.0.1349': attribute type 10 has an invalid length. [ 189.644027][T10713] team0: Port device netdevsim0 added [ 190.004299][T10716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1351'. [ 190.013886][T10715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1351'. [ 190.035360][T10718] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1350'. [ 190.129336][T10723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1353'. [ 190.151846][T10723] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1353'. [ 190.167833][T10727] xt_nfacct: accounting object `syz1' does not exists [ 190.184077][T10723] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 190.194872][T10723] gretap1: entered promiscuous mode [ 190.571610][T10755] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1359'. [ 190.701852][T10760] veth0_to_batadv: left allmulticast mode [ 190.708817][T10760] vlan1: left allmulticast mode [ 190.727564][T10760] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 190.752193][T10760] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 190.771825][T10760] macsec2: left promiscuous mode [ 190.784084][T10760] macsec2: left allmulticast mode [ 190.811264][T10760] ip6gre1: left promiscuous mode [ 190.820841][T10760] macsec3: left promiscuous mode [ 190.829466][T10760] macsec3: left allmulticast mode [ 190.864757][T10740] lo speed is unknown, defaulting to 1000 [ 190.901579][T10770] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 190.931739][T10770] CPU: 0 UID: 0 PID: 10770 Comm: syz.0.1364 Not tainted 6.14.0-rc4-syzkaller-00859-gf77f12010f67 #0 [ 190.931766][T10770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 190.931776][T10770] Call Trace: [ 190.931783][T10770] [ 190.931791][T10770] dump_stack_lvl+0x241/0x360 [ 190.931830][T10770] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.931849][T10770] ? __pfx__printk+0x10/0x10 [ 190.931873][T10770] ? __kmalloc_cache_noprof+0x243/0x390 [ 190.931895][T10770] ? sysfs_warn_dup+0x51/0xa0 [ 190.931919][T10770] sysfs_warn_dup+0x8e/0xa0 [ 190.931940][T10770] sysfs_do_create_link_sd+0xbe/0x110 [ 190.931962][T10770] device_add_class_symlinks+0x1c5/0x250 [ 190.931990][T10770] device_add+0x553/0xbf0 [ 190.932019][T10770] wiphy_register+0x1922/0x2650 [ 190.932050][T10770] ? __pfx_wiphy_register+0x10/0x10 [ 190.932065][T10770] ? minstrel_ht_alloc+0x84b/0x940 [ 190.932089][T10770] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 190.932114][T10770] ieee80211_register_hw+0x35d9/0x42e0 [ 190.932149][T10770] ? ieee80211_register_hw+0x1681/0x42e0 [ 190.932179][T10770] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 190.932209][T10770] ? __asan_memset+0x23/0x50 [ 190.932224][T10770] ? __hrtimer_init+0x170/0x250 [ 190.932246][T10770] mac80211_hwsim_new_radio+0x2ae8/0x4a40 [ 190.932297][T10770] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 190.932316][T10770] ? trace_kmalloc+0x1f/0xd0 [ 190.932335][T10770] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 190.932358][T10770] ? kstrndup+0xbb/0x150 [ 190.932392][T10770] hwsim_new_radio_nl+0xece/0x2290 [ 190.932424][T10770] ? __pfx___nla_validate_parse+0x10/0x10 [ 190.932455][T10770] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 190.932511][T10770] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 190.932545][T10770] genl_rcv_msg+0xb1f/0xec0 [ 190.932578][T10770] ? __pfx_genl_rcv_msg+0x10/0x10 [ 190.932632][T10770] ? __pfx_lock_acquire+0x10/0x10 [ 190.932656][T10770] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 190.932676][T10770] ? __pfx___might_resched+0x10/0x10 [ 190.932709][T10770] netlink_rcv_skb+0x206/0x480 [ 190.932729][T10770] ? __pfx_genl_rcv_msg+0x10/0x10 [ 190.932754][T10770] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 190.932807][T10770] genl_rcv+0x28/0x40 [ 190.932828][T10770] netlink_unicast+0x7f6/0x990 [ 190.932855][T10770] ? __pfx_netlink_unicast+0x10/0x10 [ 190.932870][T10770] ? __virt_addr_valid+0x45f/0x530 [ 190.932888][T10770] ? __phys_addr_symbol+0x2f/0x70 [ 190.932911][T10770] ? __check_object_size+0x47a/0x730 [ 190.932937][T10770] netlink_sendmsg+0x8de/0xcb0 [ 190.932971][T10770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.932996][T10770] ? aa_sock_msg_perm+0x91/0x160 [ 190.933026][T10770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.933044][T10770] __sock_sendmsg+0x221/0x270 [ 190.933068][T10770] ____sys_sendmsg+0x53a/0x860 [ 190.933103][T10770] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.933126][T10770] ? __fget_files+0x2a/0x410 [ 190.933152][T10770] ? __fget_files+0x2a/0x410 [ 190.933185][T10770] __sys_sendmsg+0x269/0x350 [ 190.933215][T10770] ? __pfx___sys_sendmsg+0x10/0x10 [ 190.933289][T10770] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 190.933314][T10770] ? do_syscall_64+0x100/0x230 [ 190.933341][T10770] ? do_syscall_64+0xb6/0x230 [ 190.933366][T10770] do_syscall_64+0xf3/0x230 [ 190.933388][T10770] ? clear_bhb_loop+0x35/0x90 [ 190.933413][T10770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.933433][T10770] RIP: 0033:0x7f0b1578d169 [ 190.933464][T10770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.933479][T10770] RSP: 002b:00007f0b16560038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.933507][T10770] RAX: ffffffffffffffda RBX: 00007f0b159a6160 RCX: 00007f0b1578d169 [ 190.933520][T10770] RDX: 0000000000000800 RSI: 0000400000000100 RDI: 0000000000000005 [ 190.933532][T10770] RBP: 00007f0b1580e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 190.933542][T10770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.933552][T10770] R13: 0000000000000000 R14: 00007f0b159a6160 R15: 00007ffdd495ad58 [ 190.933582][T10770] [ 191.217239][T10769] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 191.313423][T10766] syzkaller1: entered promiscuous mode [ 191.363415][T10766] syzkaller1: entered allmulticast mode [ 191.453617][ T5150] Bluetooth: hci4: command 0x0405 tx timeout [ 191.732739][T10774] lo speed is unknown, defaulting to 1000 [ 191.839549][T10763] lo speed is unknown, defaulting to 1000 [ 192.139188][T10801] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 192.850538][T10829] netlink: 'syz.3.1378': attribute type 30 has an invalid length. [ 193.030808][T10838] Bluetooth: MGMT ver 1.23 [ 193.036490][T10838] netlink: 'syz.2.1382': attribute type 1 has an invalid length. [ 193.044445][T10838] netlink: 'syz.2.1382': attribute type 3 has an invalid length. [ 193.114669][T10842] tipc: Enabling of bearer rejected, failed to enable media [ 193.317441][T10852] sctp: [Deprecated]: syz.0.1386 (pid 10852) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.317441][T10852] Use struct sctp_sack_info instead [ 194.065529][T10876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.127875][T10877] __nla_validate_parse: 10 callbacks suppressed [ 194.127894][T10877] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1392'. [ 194.430495][T10886] netlink: 'syz.3.1397': attribute type 2 has an invalid length. [ 194.440235][T10886] netlink: 'syz.3.1397': attribute type 1 has an invalid length. [ 194.510086][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.618944][T10891] bond_slave_1: entered promiscuous mode [ 195.060895][T10916] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 195.117952][T10920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1409'. [ 195.176119][T10920] nbd: illegal input index -381222912 [ 195.184523][T10920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1409'. [ 195.198266][T10920] nbd: illegal input index -381222912 [ 195.205202][T10920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1409'. [ 195.208671][T10925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1410'. [ 195.223484][T10920] nbd: illegal input index -381222912 [ 195.229002][T10920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1409'. [ 195.238209][T10925] openvswitch: netlink: Tunnel attr 9 has unexpected len 5032 expected 2 [ 195.258441][T10920] nbd: illegal input index -381222912 [ 195.294259][T10920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1409'. [ 195.343449][T10920] nbd: illegal input index -381222912 [ 195.361197][T10920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1409'. [ 195.390577][T10920] nbd: illegal input index -381222912 [ 195.403090][T10920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1409'. [ 195.412841][T10920] nbd: illegal input index -381222912 [ 195.419366][T10920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1409'. [ 195.428698][T10920] nbd: illegal input index -381222912 [ 195.434402][T10920] nbd: illegal input index -381222912 [ 195.440194][T10920] nbd: illegal input index -381222912 [ 195.446016][T10920] nbd: illegal input index -381222912 [ 195.451775][T10920] nbd: illegal input index -381222912 [ 195.553187][T10920] nbd: illegal input index -381222912 [ 195.579517][T10920] nbd: illegal input index -381222912 [ 195.616783][T10920] nbd: illegal input index -381222912 [ 195.697368][T10920] nbd: illegal input index -381222912 [ 195.747010][T10920] nbd: illegal input index -381222912 [ 195.764687][T10920] nbd: illegal input index -381222912 [ 195.809680][T10920] nbd: illegal input index -381222912 [ 195.823573][T10920] nbd: illegal input index -381222912 [ 195.830317][T10920] nbd: illegal input index -381222912 [ 195.836461][T10920] nbd: illegal input index -381222912 [ 195.843232][T10920] nbd: illegal input index -381222912 [ 195.852251][T10920] nbd: illegal input index -381222912 [ 195.869385][T10920] nbd: illegal input index -381222912 [ 195.882440][T10920] nbd: illegal input index -381222912 [ 195.899646][T10920] nbd: illegal input index -381222912 [ 195.913715][T10920] nbd: illegal input index -381222912 [ 196.530185][T10988] netlink: 'syz.1.1422': attribute type 7 has an invalid length. [ 196.924322][T10997] vlan2: entered allmulticast mode [ 196.940228][T10997] ip6gretap0: entered allmulticast mode [ 197.711287][T11037] xt_time: unknown flags 0x4 [ 197.918762][ T3456] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 197.937535][ T3456] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 198.092177][ T3456] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 198.118247][ T3456] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 198.231914][ T3456] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 198.252195][ T3456] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 198.341567][ T3456] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 198.357310][ T3456] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 198.648106][ T5150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 198.666711][ T5150] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 198.677049][ T5150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 198.687787][ T5150] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 198.696650][ T5150] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 198.705342][ T5150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 199.180269][T11095] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.242441][T11097] __nla_validate_parse: 33 callbacks suppressed [ 199.242462][T11097] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1460'. [ 199.536989][ T3456] tipc: Disabling bearer [ 199.954997][ T3456] bond0 (unregistering): Released all slaves [ 200.087745][ T3456] bond1 (unregistering): Released all slaves [ 200.198585][ T3456] bond2 (unregistering): Released all slaves [ 200.312403][ T3456] bond3 (unregistering): Released all slaves [ 200.462856][ T3456] tipc: Left network mode [ 200.487608][T11073] lo speed is unknown, defaulting to 1000 [ 200.510065][ T3456] IPVS: stopping backup sync thread 9202 ... [ 200.575523][T11105] tipc: Started in network mode [ 200.584474][T11105] tipc: Node identity 7, cluster identity 4711 [ 200.590688][T11105] tipc: Node number set to 7 [ 200.639868][T11105] tipc: Cannot configure node identity twice [ 200.733923][ T5838] Bluetooth: hci4: command tx timeout [ 200.839149][T11088] lo speed is unknown, defaulting to 1000 [ 200.996241][T11118] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.131373][T11123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1471'. [ 201.249540][T11073] chnl_net:caif_netlink_parms(): no params data found [ 201.275086][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1473'. [ 201.669419][ T3456] veth1_macvtap: left promiscuous mode [ 201.676892][ T3456] veth0_macvtap: left promiscuous mode [ 201.682649][ T3456] veth1_vlan: left promiscuous mode [ 201.694765][ T3456] veth0_vlan: left promiscuous mode [ 201.827906][ T3456] pimreg (unregistering): left allmulticast mode [ 202.527194][T11137] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 202.737381][T11073] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.777967][T11073] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.802547][T11073] bridge_slave_0: entered allmulticast mode [ 202.826025][ T5150] Bluetooth: hci4: command tx timeout [ 202.842881][T11156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1486'. [ 202.857960][T11073] bridge_slave_0: entered promiscuous mode [ 202.894684][T11073] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.905630][T11073] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.912808][T11073] bridge_slave_1: entered allmulticast mode [ 202.956754][T11073] bridge_slave_1: entered promiscuous mode [ 203.031522][T11073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.077035][T11073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.097639][T11163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1489'. [ 203.186196][T11073] team0: Port device team_slave_0 added [ 203.224262][T11073] team0: Port device team_slave_1 added [ 203.320016][T11073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.327291][T11073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.374170][T11073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.387782][T11073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.401378][T11073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.428182][T11073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.648066][T11073] hsr_slave_0: entered promiscuous mode [ 203.664734][T11073] hsr_slave_1: entered promiscuous mode [ 203.670880][T11073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.708956][T11073] Cannot create hsr debugfs directory [ 203.740148][ T3456] IPVS: stop unused estimator thread 0... [ 203.770626][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1501'. [ 203.800074][T11193] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1501'. [ 203.826469][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1501'. [ 203.851071][T11197] netlink: zone id is out of range [ 203.856781][T11197] netlink: zone id is out of range [ 203.874772][T11197] netlink: zone id is out of range [ 203.883540][T11197] netlink: zone id is out of range [ 203.893528][T11197] netlink: zone id is out of range [ 203.905586][T11197] netlink: zone id is out of range [ 203.915742][T11197] netlink: zone id is out of range [ 203.931111][T11197] netlink: zone id is out of range [ 203.937176][T11197] netlink: del zone limit has 4 unknown bytes [ 203.959323][T11199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1504'. [ 204.411473][T11073] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 204.465988][T11073] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 204.481277][T11073] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 204.508932][T11073] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 204.756171][T11073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.807874][T11073] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.827435][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.834599][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.882824][T11245] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1527'. [ 204.894011][ T5838] Bluetooth: hci4: command tx timeout [ 204.915786][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.922937][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.404130][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1538'. [ 205.413046][T11278] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1538'. [ 205.431960][T11073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.545019][T11073] veth0_vlan: entered promiscuous mode [ 205.587995][T11073] veth1_vlan: entered promiscuous mode [ 205.662133][T11073] veth0_macvtap: entered promiscuous mode [ 205.676763][T11073] veth1_macvtap: entered promiscuous mode [ 205.721269][T11073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.759750][T11073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.764433][T11291] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1544'. [ 205.784363][T11073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.805898][T11073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.816646][T11073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.828784][T11073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.872840][T11073] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.899884][T11301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1549'. [ 205.937042][T11304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1551'. [ 205.939031][T11073] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.959837][T11305] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1548'. [ 205.978950][T11073] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.987886][T11073] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.212958][ T3512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.234108][ T3512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.252799][T11314] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1554'. [ 206.270259][ T3512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.274980][T11314] netlink: 'syz.1.1554': attribute type 1 has an invalid length. [ 206.283320][ T3512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.295742][T11314] netlink: 'syz.1.1554': attribute type 2 has an invalid length. [ 206.490679][T11326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1558'. [ 206.763594][T11340] netlink: 'syz.0.1565': attribute type 10 has an invalid length. [ 206.776875][T11340] team0: Port device batadv0 removed [ 206.784023][T11340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.791890][T11340] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 206.804210][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1565'. [ 206.813213][T11340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.821239][T11340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.845156][T11340] bond0: (slave batadv0): Releasing backup interface [ 207.397270][ T3512] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.563101][T11369] netlink: 'syz.1.1575': attribute type 1 has an invalid length. [ 207.610162][T11369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.652097][T11369] netlink: 'syz.1.1575': attribute type 3 has an invalid length. [ 207.796698][T11377] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.832049][ T5150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 207.841492][ T5150] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 207.850885][ T5150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 207.860522][ T5150] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 207.869003][ T5150] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 207.876913][ T5150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 208.108827][T11387] lo speed is unknown, defaulting to 1000 [ 208.309634][ T3512] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.440070][T11382] lo speed is unknown, defaulting to 1000 [ 208.506036][ T3512] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.669248][ T3512] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.879001][ T3512] bridge_slave_1: left allmulticast mode [ 208.888504][ T3512] bridge_slave_1: left promiscuous mode [ 208.897497][ T3512] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.910355][ T3512] bridge_slave_0: left allmulticast mode [ 208.917567][ T3512] bridge_slave_0: left promiscuous mode [ 208.923702][ T3512] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.277182][ T3512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.292387][ T3512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.305897][ T3512] bond0 (unregistering): Released all slaves [ 209.447293][T11436] openvswitch: netlink: Actions may not be safe on all matching packets [ 209.498899][T11434] netlink: 'syz.4.1594': attribute type 7 has an invalid length. [ 209.512441][T11382] chnl_net:caif_netlink_parms(): no params data found [ 209.816279][T11445] vlan3: entered promiscuous mode [ 209.862337][T11382] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.878501][T11382] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.893839][T11382] bridge_slave_0: entered allmulticast mode [ 209.901458][T11382] bridge_slave_0: entered promiscuous mode [ 209.910901][T11382] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.918287][T11382] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.926784][T11382] bridge_slave_1: entered allmulticast mode [ 209.933786][ T5150] Bluetooth: hci4: command tx timeout [ 209.942128][T11382] bridge_slave_1: entered promiscuous mode [ 210.094635][T11382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.137788][T11382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.164900][T11464] __nla_validate_parse: 7 callbacks suppressed [ 210.164919][T11464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1599'. [ 210.501454][T11473] netlink: 34 bytes leftover after parsing attributes in process `syz.4.1604'. [ 210.528407][T11382] team0: Port device team_slave_0 added [ 210.613776][ T3512] hsr_slave_0: left promiscuous mode [ 210.627689][ T3512] hsr_slave_1: left promiscuous mode [ 210.646241][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.669653][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.688516][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.713441][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.789779][ T3512] veth1_macvtap: left promiscuous mode [ 210.801794][ T3512] veth0_macvtap: left promiscuous mode [ 210.833548][ T3512] veth1_vlan: left promiscuous mode [ 210.840171][ T3512] veth0_vlan: left promiscuous mode [ 211.392134][T11488] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1608'. [ 211.441193][T11488] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1608'. [ 211.714013][ T3512] team0 (unregistering): Port device team_slave_1 removed [ 211.782174][ T3512] team0 (unregistering): Port device team_slave_0 removed [ 212.018640][ T5150] Bluetooth: hci4: command tx timeout [ 212.495800][T11382] team0: Port device team_slave_1 added [ 212.521920][T11458] Set syz1 is full, maxelem 65536 reached [ 212.582489][T11488] team_slave_0: entered promiscuous mode [ 212.606772][T11488] veth0_to_team: entered promiscuous mode [ 212.614790][T11488] hsr2: Slave A (team_slave_0) is not up; please bring it up to get a fully working HSR network [ 212.643804][T11488] hsr2: Slave B (veth0_to_team) is not up; please bring it up to get a fully working HSR network [ 212.699263][T11495] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1610'. [ 212.713916][T11382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.723731][T11382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.765112][T11382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.810905][T11466] lo speed is unknown, defaulting to 1000 [ 212.812113][T11382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.873588][T11382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.919306][T11382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.936267][T11500] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 213.108635][T11382] hsr_slave_0: entered promiscuous mode [ 213.115437][T11382] hsr_slave_1: entered promiscuous mode [ 213.121580][T11382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.129619][T11382] Cannot create hsr debugfs directory [ 213.136201][T11505] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1612'. [ 214.080672][T11534] Unsupported ieee802154 address type: 0 [ 214.093991][ T5150] Bluetooth: hci4: command tx timeout [ 214.209330][T11382] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 214.237585][T11382] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 214.260731][T11541] lo: left allmulticast mode [ 214.272997][T11541] tipc: Resetting bearer [ 214.295624][T11546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1626'. [ 214.301399][T11541] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 214.305122][T11546] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1626'. [ 214.317215][T11541] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 214.339534][T11541] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.348082][T11541] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.356578][T11541] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.365276][T11541] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.436611][T11541] mac80211_hwsim hwsim9 wlan0: left allmulticast mode [ 214.452694][T11541] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 214.470514][T11541] macsec2: left promiscuous mode [ 214.478582][T11541] macsec2: left allmulticast mode [ 214.492788][T11541] ip6gretap0: left allmulticast mode [ 214.499424][T11541] macsec3: left allmulticast mode [ 214.527725][T11541] gretap1: left promiscuous mode [ 214.544622][T11382] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 214.572562][T11382] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 214.655147][T11382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.678321][T11382] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.690339][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.697514][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.731308][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.738458][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.759573][T11562] lo speed is unknown, defaulting to 1000 [ 214.963507][T11382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.025142][T11382] veth0_vlan: entered promiscuous mode [ 215.039052][T11382] veth1_vlan: entered promiscuous mode [ 215.225121][T11382] veth0_macvtap: entered promiscuous mode [ 215.257145][T11382] veth1_macvtap: entered promiscuous mode [ 215.302139][T11382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.320164][T11382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.334114][T11382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.359756][T11382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.387657][T11382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.401600][T11382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.428208][T11382] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.469196][T11382] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.501924][T11382] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.518190][T11382] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.697411][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.707433][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.758050][T11592] openvswitch: netlink: Actions may not be safe on all matching packets [ 215.801055][T11414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.810275][T11414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.055334][T11596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1638'. [ 216.192317][T11605] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1640'. [ 216.211934][T11605] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1640'. [ 216.228870][T11603] lo speed is unknown, defaulting to 1000 [ 216.235120][T11605] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1640'. [ 216.257105][T11605] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1640'. [ 216.501549][T11609] netlink: 'syz.3.1641': attribute type 1 has an invalid length. [ 216.512968][T11609] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1641'. [ 216.538175][T11611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1642'. [ 216.550948][T11609] netlink: 'syz.3.1641': attribute type 1 has an invalid length. [ 216.709080][T11620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1643'. [ 216.729130][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1643'. [ 216.999191][T11629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1648'. [ 217.617782][T11627] lo speed is unknown, defaulting to 1000 [ 217.733967][ T3483] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.750059][T11640] netlink: 'syz.0.1650': attribute type 10 has an invalid length. [ 218.169538][T11631] warn_alloc: 2 callbacks suppressed [ 218.169556][T11631] syz.1.1647: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 218.227758][T11631] CPU: 0 UID: 0 PID: 11631 Comm: syz.1.1647 Not tainted 6.14.0-rc4-syzkaller-00859-gf77f12010f67 #0 [ 218.227784][T11631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 218.227795][T11631] Call Trace: [ 218.227801][T11631] [ 218.227808][T11631] dump_stack_lvl+0x241/0x360 [ 218.227835][T11631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.227856][T11631] ? __pfx__printk+0x10/0x10 [ 218.227877][T11631] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 218.227899][T11631] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 218.227921][T11631] warn_alloc+0x278/0x410 [ 218.227944][T11631] ? __pfx_warn_alloc+0x10/0x10 [ 218.227967][T11631] ? hash_ipport4_resize+0x1e0/0x1af0 [ 218.227986][T11631] ? __get_vm_area_node+0x1c8/0x2d0 [ 218.228008][T11631] ? __get_vm_area_node+0x25c/0x2d0 [ 218.228037][T11631] __vmalloc_node_range_noprof+0x62f/0x1380 [ 218.228063][T11631] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 218.228107][T11631] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 218.228131][T11631] ? rcu_is_watching+0x15/0xb0 [ 218.228151][T11631] ? trace_kmalloc+0x1f/0xd0 [ 218.228170][T11631] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 218.228190][T11631] ? __kvmalloc_node_noprof+0x72/0x190 [ 218.228218][T11631] __kvmalloc_node_noprof+0x142/0x190 [ 218.228240][T11631] ? hash_ipport4_resize+0x1e0/0x1af0 [ 218.228256][T11631] hash_ipport4_resize+0x1e0/0x1af0 [ 218.228278][T11631] ? __pfx_hash_ipport4_add+0x10/0x10 [ 218.228297][T11631] ? __pfx_hash_ipport4_uadt+0x10/0x10 [ 218.228326][T11631] ? call_ad+0x182/0xa70 [ 218.228354][T11631] call_ad+0x38b/0xa70 [ 218.228385][T11631] ? __pfx_call_ad+0x10/0x10 [ 218.228420][T11631] ? __nla_parse+0x40/0x60 [ 218.228440][T11631] ip_set_ad+0x7e0/0x990 [ 218.228471][T11631] ? __pfx_ip_set_ad+0x10/0x10 [ 218.228491][T11631] ? trace_contention_end+0x3c/0x120 [ 218.228542][T11631] ? nfnetlink_rcv_msg+0x225/0x1180 [ 218.228567][T11631] nfnetlink_rcv_msg+0xbec/0x1180 [ 218.228591][T11631] ? nfnetlink_rcv_msg+0x225/0x1180 [ 218.228644][T11631] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 218.228712][T11631] netlink_rcv_skb+0x206/0x480 [ 218.228732][T11631] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 218.228755][T11631] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 218.228787][T11631] ? apparmor_capable+0x13b/0x1b0 [ 218.228805][T11631] ? bpf_lsm_capable+0x9/0x10 [ 218.228826][T11631] ? security_capable+0x7e/0x2d0 [ 218.228852][T11631] nfnetlink_rcv+0x297/0x2ab0 [ 218.228874][T11631] ? __pfx_validate_chain+0x10/0x10 [ 218.228904][T11631] ? mark_lock+0x9a/0x360 [ 218.228917][T11631] ? __pfx_validate_chain+0x10/0x10 [ 218.228937][T11631] ? __lock_acquire+0x1397/0x2100 [ 218.228967][T11631] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 218.228993][T11631] ? mark_lock+0x9a/0x360 [ 218.229012][T11631] ? __lock_acquire+0x1397/0x2100 [ 218.229064][T11631] ? __pfx_lock_release+0x10/0x10 [ 218.229086][T11631] ? netlink_deliver_tap+0x2e/0x1b0 [ 218.229105][T11631] ? __pfx_lock_release+0x10/0x10 [ 218.229140][T11631] ? netlink_deliver_tap+0x2e/0x1b0 [ 218.229161][T11631] netlink_unicast+0x7f6/0x990 [ 218.229187][T11631] ? __pfx_netlink_unicast+0x10/0x10 [ 218.229202][T11631] ? __virt_addr_valid+0x45f/0x530 [ 218.229219][T11631] ? __phys_addr_symbol+0x2f/0x70 [ 218.229242][T11631] ? __check_object_size+0x47a/0x730 [ 218.229269][T11631] netlink_sendmsg+0x8de/0xcb0 [ 218.229300][T11631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.229324][T11631] ? aa_sock_msg_perm+0x91/0x160 [ 218.229353][T11631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.229370][T11631] __sock_sendmsg+0x221/0x270 [ 218.229394][T11631] ____sys_sendmsg+0x53a/0x860 [ 218.229427][T11631] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.229449][T11631] ? __fget_files+0x2a/0x410 [ 218.229475][T11631] ? __fget_files+0x2a/0x410 [ 218.229505][T11631] __sys_sendmsg+0x269/0x350 [ 218.229528][T11631] ? __pfx_futex_wake+0x10/0x10 [ 218.229553][T11631] ? __pfx___sys_sendmsg+0x10/0x10 [ 218.229625][T11631] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 218.229648][T11631] ? do_syscall_64+0x100/0x230 [ 218.229674][T11631] ? do_syscall_64+0xb6/0x230 [ 218.229700][T11631] do_syscall_64+0xf3/0x230 [ 218.229723][T11631] ? clear_bhb_loop+0x35/0x90 [ 218.229749][T11631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.229770][T11631] RIP: 0033:0x7fe0b278d169 [ 218.229785][T11631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.229800][T11631] RSP: 002b:00007fe0b364f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.229819][T11631] RAX: ffffffffffffffda RBX: 00007fe0b29a6160 RCX: 00007fe0b278d169 [ 218.229831][T11631] RDX: 0000000000000080 RSI: 00004000000003c0 RDI: 0000000000000008 [ 218.229841][T11631] RBP: 00007fe0b280e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 218.229851][T11631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.229861][T11631] R13: 0000000000000000 R14: 00007fe0b29a6160 R15: 00007ffd5dea6ca8 [ 218.229888][T11631] [ 218.230426][T11631] Mem-Info: [ 218.388800][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.428107][T11631] active_anon:6858 inactive_anon:0 isolated_anon:0 [ 218.428107][T11631] active_file:1511 inactive_file:38365 isolated_file:0 [ 218.428107][T11631] unevictable:3832 dirty:122 writeback:0 [ 218.428107][T11631] slab_reclaimable:11462 slab_unreclaimable:111335 [ 218.428107][T11631] mapped:30492 shmem:1436 pagetables:740 [ 218.428107][T11631] sec_pagetables:0 bounce:0 [ 218.428107][T11631] kernel_misc_reclaimable:0 [ 218.428107][T11631] free:1318153 free_pcp:3899 free_cma:0 [ 218.434525][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.458802][T11631] Node 0 active_anon:27532kB inactive_anon:0kB active_file:6044kB inactive_file:153380kB unevictable:13792kB isolated(anon):0kB isolated(file):0kB mapped:121968kB dirty:488kB writeback:0kB shmem:4208kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11584kB pagetables:2960kB sec_pagetables:0kB all_unreclaimable? no [ 218.464538][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.578389][T11631] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 218.679754][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.829567][T11631] Node 0 [ 218.863626][ T5838] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 218.877220][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 218.908244][T11631] DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 218.934818][T11631] lowmem_reserve[]: 0 2490 2490 0 0 [ 218.945251][T11631] Node 0 DMA32 free:1375348kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:23296kB inactive_anon:0kB active_file:6044kB inactive_file:153064kB unevictable:3692kB writepending:484kB present:3129332kB managed:2549820kB mlocked:2180kB bounce:0kB free_pcp:8120kB local_pcp:3400kB free_cma:0kB [ 218.980421][T11651] 8021q: adding VLAN 0 to HW filter on device bond3 [ 218.987716][T11631] lowmem_reserve[]: 0 0 0 0 0 [ 219.003206][T11651] bond0: (slave bond3): Enslaving as an active interface with a down link [ 219.022437][T11631] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:4kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 219.052187][T11631] lowmem_reserve[]: 0 0 0 0 0 [ 219.073453][T11631] Node 1 Normal free:3908612kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 219.154741][T11631] lowmem_reserve[]: 0 0 0 0 0 [ 219.162479][T11631] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 219.177671][T11645] lo speed is unknown, defaulting to 1000 [ 219.217011][T11631] Node 0 DMA32: 17*4kB (UME) 87*8kB (UME) 66*16kB (UME) 84*32kB (ME) 73*64kB (UME) 44*128kB (ME) 15*256kB (UME) 13*512kB (UME) 15*1024kB (UME) 4*2048kB (UM) 324*4096kB (UME) = 1375964kB [ 219.268696][ T3483] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.273474][T11631] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 219.323482][T11631] Node 1 Normal: 199*4kB (UE) 63*8kB (UME) 45*16kB (UME) 219*32kB (UME) 99*64kB (UME) 32*128kB (UME) 16*256kB (UME) 6*512kB (UM) 3*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3908612kB [ 219.364804][T11631] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 219.393560][T11631] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 219.413249][T11631] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 219.463600][ T3483] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.473861][T11631] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 219.473884][T11631] 42162 total pagecache pages [ 219.473893][T11631] 0 pages in swap cache [ 219.473900][T11631] Free swap = 124996kB [ 219.473908][T11631] Total swap = 124996kB [ 219.473917][T11631] 2097051 pages RAM [ 219.473925][T11631] 0 pages HighMem/MovableOnly [ 219.473932][T11631] 427874 pages reserved [ 219.473940][T11631] 0 pages cma reserved [ 219.885920][ T3483] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.190219][T11690] netlink: 'syz.0.1660': attribute type 10 has an invalid length. [ 220.220269][T11690] bond0: entered promiscuous mode [ 220.235829][T11690] bond_slave_0: entered promiscuous mode [ 220.249433][T11690] bond_slave_1: entered promiscuous mode [ 220.270579][T11690] bond0: entered allmulticast mode [ 220.279544][T11690] bond_slave_0: entered allmulticast mode [ 220.285569][T11690] bond_slave_1: entered allmulticast mode [ 220.292231][T11690] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 220.369105][T11692] siw: device registration error -23 [ 220.600769][T11698] netlink: 'syz.0.1661': attribute type 4 has an invalid length. [ 220.627961][T11645] chnl_net:caif_netlink_parms(): no params data found [ 220.667438][ T3483] bridge_slave_1: left allmulticast mode [ 220.683822][ T3483] bridge_slave_1: left promiscuous mode [ 220.689700][ T3483] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.727155][ T3483] bridge_slave_0: left allmulticast mode [ 220.732851][ T3483] bridge_slave_0: left promiscuous mode [ 220.755752][ T3483] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.989567][ T5150] Bluetooth: hci4: command tx timeout [ 221.177894][ T3483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.189393][ T3483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.200384][ T3483] bond0 (unregistering): Released all slaves [ 221.371837][T11707] team0 (unregistering): Port device gtp0 removed [ 221.490709][T11724] xt_TCPMSS: Only works on TCP SYN packets [ 221.630445][T11731] set match dimension is over the limit! [ 221.662580][T11645] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.671207][T11645] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.680568][T11645] bridge_slave_0: entered allmulticast mode [ 221.689941][T11645] bridge_slave_0: entered promiscuous mode [ 221.719670][T11733] __nla_validate_parse: 3 callbacks suppressed [ 221.719688][T11733] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1672'. [ 221.735337][T11645] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.742454][T11645] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.766618][T11645] bridge_slave_1: entered allmulticast mode [ 221.781992][T11645] bridge_slave_1: entered promiscuous mode [ 222.026924][T11645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.049230][T11645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.191339][T11645] team0: Port device team_slave_0 added [ 222.209776][ T3483] hsr_slave_0: left promiscuous mode [ 222.216335][ T3483] hsr_slave_1: left promiscuous mode [ 222.222077][ T3483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.234658][ T3483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.242978][ T3483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.252307][ T3483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.297105][ T3483] veth1_macvtap: left promiscuous mode [ 222.302664][ T3483] veth0_macvtap: left promiscuous mode [ 222.309339][ T3483] veth1_vlan: left promiscuous mode [ 222.315362][ T3483] veth0_vlan: left promiscuous mode [ 222.620880][T11755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1678'. [ 222.631731][T11755] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1678'. [ 222.950012][ T3483] team0 (unregistering): Port device team_slave_1 removed [ 222.999240][ T3483] team0 (unregistering): Port device team_slave_0 removed [ 223.057327][ T5150] Bluetooth: hci4: command tx timeout [ 223.222560][T11758] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1679'. [ 223.241371][T11758] netlink: 'syz.1.1679': attribute type 3 has an invalid length. [ 223.260226][T11758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1679'. [ 223.519867][T11645] team0: Port device team_slave_1 added [ 223.546483][T11758] gretap3: entered promiscuous mode [ 223.573356][T11758] gretap3: entered allmulticast mode [ 223.672946][T11762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1681'. [ 223.695131][T11645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.702111][T11645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.753549][T11765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1682'. [ 223.791162][T11645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.837074][T11645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.863683][T11771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1683'. [ 223.892761][T11771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1683'. [ 223.893076][T11645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.933655][T11645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.974667][T11771] : entered promiscuous mode [ 223.984446][T11771] : left promiscuous mode [ 224.290997][T11788] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 224.327091][T11645] hsr_slave_0: entered promiscuous mode [ 224.336424][T11791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1692'. [ 224.346180][T11645] hsr_slave_1: entered promiscuous mode [ 224.352295][T11645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.377918][T11645] Cannot create hsr debugfs directory [ 224.573758][T11802] tipc: Invalid UDP bearer configuration [ 224.573814][T11802] tipc: Enabling of bearer rejected, failed to enable media [ 224.710219][T11810] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 224.813232][T11813] vlan3: entered allmulticast mode [ 224.829355][T11813] macvlan1: entered allmulticast mode [ 224.849001][T11813] macvlan1: left allmulticast mode [ 224.922756][T11817] openvswitch: netlink: IP tunnel dst address not specified [ 224.939280][T11816] smc: removing ib device syz0 [ 225.050585][T11806] team0: Failed to send options change via netlink (err -105) [ 225.079543][T11806] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 225.117931][T11806] team0: Port device netdevsim0 removed [ 225.144044][ T5150] Bluetooth: hci4: command tx timeout [ 225.206544][T11830] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 225.246539][T11830] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 225.622258][T11645] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 225.679032][T11645] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 225.707109][T11645] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 225.739460][T11645] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 225.886357][T11847] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0001 with DS=0xf [ 225.937079][T11645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.004597][T11645] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.030641][ T3483] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.037815][ T3483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.074435][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.081624][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.371783][T11645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.439739][T11645] veth0_vlan: entered promiscuous mode [ 226.458899][T11645] veth1_vlan: entered promiscuous mode [ 226.502549][T11645] veth0_macvtap: entered promiscuous mode [ 226.512771][T11645] veth1_macvtap: entered promiscuous mode [ 226.536748][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.547818][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.559734][T11645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.573032][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.584405][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.600162][T11645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.615736][T11645] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.627330][T11645] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.637077][T11645] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.646200][T11645] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.722581][ T3465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.743393][ T3465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.767336][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.784612][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.154036][T11870] __nla_validate_parse: 8 callbacks suppressed [ 227.154052][T11870] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1716'. [ 227.203611][T11870] 0ªX¹¦À: renamed from caif0 [ 227.225324][T11870] 0ªX¹¦À: entered allmulticast mode [ 227.240478][T11870] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 227.458996][T11887] netlink: 'syz.1.1719': attribute type 22 has an invalid length. [ 227.470782][T11886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1720'. [ 227.546494][T11888] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1720'. [ 228.388696][ T3512] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.369653][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 229.381704][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 229.391186][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 229.399325][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 229.408368][ T5838] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 229.416010][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 229.518232][ T3512] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.726528][ T3512] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.776443][T11903] mac80211_hwsim hwsim3 : renamed from wlan1 [ 229.888634][ T3512] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.917717][T11924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1730'. [ 230.194993][ T3512] bridge_slave_1: left allmulticast mode [ 230.200692][ T3512] bridge_slave_1: left promiscuous mode [ 230.223857][ T3512] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.296633][ T3512] bridge_slave_0: left allmulticast mode [ 230.302559][ T3512] bridge_slave_0: left promiscuous mode [ 230.335613][ T3512] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.635260][T11951] netlink: 'syz.3.1736': attribute type 2 has an invalid length. [ 230.888881][ T3512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.899675][ T3512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.911064][ T3512] bond0 (unregistering): Released all slaves [ 231.085821][T11964] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1740'. [ 231.132313][T11964] netlink: 'syz.4.1740': attribute type 10 has an invalid length. [ 231.230726][T11909] chnl_net:caif_netlink_parms(): no params data found [ 231.455043][ T5838] Bluetooth: hci4: command tx timeout [ 231.513119][T11974] pim6reg1: entered promiscuous mode [ 231.552430][T11974] pim6reg1: entered allmulticast mode [ 231.747805][ T3512] hsr_slave_0: left promiscuous mode [ 231.761914][ T3512] hsr_slave_1: left promiscuous mode [ 231.770236][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.779995][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.791973][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.808278][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.877267][ T3512] veth1_macvtap: left promiscuous mode [ 231.882833][ T3512] veth0_macvtap: left promiscuous mode [ 231.893180][ T3512] veth1_vlan: left promiscuous mode [ 231.900355][ T3512] veth0_vlan: left promiscuous mode [ 232.013224][T11996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1748'. [ 232.186587][T12004] netlink: 212776 bytes leftover after parsing attributes in process `syz.4.1747'. [ 232.461176][ T3512] team0 (unregistering): Port device team_slave_1 removed [ 232.502906][ T3512] team0 (unregistering): Port device team_slave_0 removed [ 233.021496][T11909] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.030130][T11909] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.050250][T11909] bridge_slave_0: entered allmulticast mode [ 233.073157][T11909] bridge_slave_0: entered promiscuous mode [ 233.097948][T11909] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.113090][T11909] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.139467][T11909] bridge_slave_1: entered allmulticast mode [ 233.159003][T11909] bridge_slave_1: entered promiscuous mode [ 233.261834][T12013] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 233.270320][T12013] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 233.283338][T12013] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 233.301859][T12013] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 233.361857][T11909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.388585][T11909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.533696][ T5838] Bluetooth: hci4: command tx timeout [ 233.552455][T11909] team0: Port device team_slave_0 added [ 233.615825][T11909] team0: Port device team_slave_1 added [ 233.791972][T12034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1758'. [ 233.803883][T11909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.821690][T11909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.883474][T11909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.896125][T11909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.903095][T11909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.962086][T11909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.035674][T12048] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1754'. [ 234.069836][T11909] hsr_slave_0: entered promiscuous mode [ 234.076535][T11909] hsr_slave_1: entered promiscuous mode [ 234.086337][T11909] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.118122][T11909] Cannot create hsr debugfs directory [ 234.908338][T11909] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 234.929680][T11909] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 234.968382][T12068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1766'. [ 235.127530][T11909] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 235.233159][T11909] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 235.319623][T12076] pim6reg: entered allmulticast mode [ 235.538973][T11909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.617606][ T5838] Bluetooth: hci4: command tx timeout [ 235.626033][T11909] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.655425][T10960] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.662536][T10960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.727183][T12101] netlink: 'syz.4.1778': attribute type 1 has an invalid length. [ 235.750026][T12107] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1779'. [ 235.793651][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.800824][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.812148][T12108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1778'. [ 235.922991][T12113] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 235.957830][T12112] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 236.130393][T12124] FAULT_INJECTION: forcing a failure. [ 236.130393][T12124] name failslab, interval 1, probability 0, space 0, times 1 [ 236.161296][T12124] CPU: 1 UID: 0 PID: 12124 Comm: syz.3.1784 Not tainted 6.14.0-rc4-syzkaller-00859-gf77f12010f67 #0 [ 236.161323][T12124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 236.161334][T12124] Call Trace: [ 236.161340][T12124] [ 236.161348][T12124] dump_stack_lvl+0x241/0x360 [ 236.161375][T12124] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.161392][T12124] ? __pfx__printk+0x10/0x10 [ 236.161410][T12124] ? __kmalloc_noprof+0xb5/0x4c0 [ 236.161430][T12124] ? __pfx___might_resched+0x10/0x10 [ 236.161448][T12124] ? aa_get_newest_label+0xff/0x6f0 [ 236.161475][T12124] should_fail_ex+0x40a/0x550 [ 236.161501][T12124] should_failslab+0xac/0x100 [ 236.161521][T12124] __kmalloc_noprof+0xdd/0x4c0 [ 236.161540][T12124] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 236.161562][T12124] ? apparmor_capable+0x13b/0x1b0 [ 236.161582][T12124] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 236.161610][T12124] genl_rcv_msg+0x80b/0xec0 [ 236.161641][T12124] ? __pfx_genl_rcv_msg+0x10/0x10 [ 236.161690][T12124] ? __pfx_lock_acquire+0x10/0x10 [ 236.161711][T12124] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 236.161728][T12124] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 236.161746][T12124] ? __pfx_nl80211_post_doit+0x10/0x10 [ 236.161764][T12124] ? __pfx___might_resched+0x10/0x10 [ 236.161793][T12124] netlink_rcv_skb+0x206/0x480 [ 236.161812][T12124] ? __pfx_genl_rcv_msg+0x10/0x10 [ 236.161835][T12124] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 236.161865][T12124] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 236.161898][T12124] genl_rcv+0x28/0x40 [ 236.161918][T12124] netlink_unicast+0x7f6/0x990 [ 236.161942][T12124] ? __pfx_netlink_unicast+0x10/0x10 [ 236.161957][T12124] ? __virt_addr_valid+0x45f/0x530 [ 236.161973][T12124] ? __phys_addr_symbol+0x2f/0x70 [ 236.161994][T12124] ? __check_object_size+0x47a/0x730 [ 236.162019][T12124] netlink_sendmsg+0x8de/0xcb0 [ 236.162050][T12124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.162082][T12124] ? aa_sock_msg_perm+0x91/0x160 [ 236.162107][T12124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.162123][T12124] __sock_sendmsg+0x221/0x270 [ 236.162146][T12124] ____sys_sendmsg+0x53a/0x860 [ 236.162176][T12124] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.162196][T12124] ? __fget_files+0x2a/0x410 [ 236.162219][T12124] ? __fget_files+0x2a/0x410 [ 236.162248][T12124] __sys_sendmsg+0x269/0x350 [ 236.162275][T12124] ? __pfx___sys_sendmsg+0x10/0x10 [ 236.162309][T12124] ? do_sys_openat2+0x17a/0x1d0 [ 236.162355][T12124] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 236.162378][T12124] ? do_syscall_64+0x100/0x230 [ 236.162401][T12124] ? do_syscall_64+0xb6/0x230 [ 236.162424][T12124] do_syscall_64+0xf3/0x230 [ 236.162445][T12124] ? clear_bhb_loop+0x35/0x90 [ 236.162469][T12124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.162489][T12124] RIP: 0033:0x7f979b78d169 [ 236.162505][T12124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.162519][T12124] RSP: 002b:00007f979c554038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.162537][T12124] RAX: ffffffffffffffda RBX: 00007f979b9a5fa0 RCX: 00007f979b78d169 [ 236.162549][T12124] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 236.162559][T12124] RBP: 00007f979c554090 R08: 0000000000000000 R09: 0000000000000000 [ 236.162569][T12124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.162579][T12124] R13: 0000000000000000 R14: 00007f979b9a5fa0 R15: 00007ffcc08b3018 [ 236.162606][T12124] [ 236.527706][T12130] netlink: 'syz.0.1785': attribute type 29 has an invalid length. [ 236.565603][T12128] xt_l2tp: unknown flags: 10 [ 236.661457][T12137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1790'. [ 236.672115][T11909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.776430][T12130] netlink: 'syz.0.1785': attribute type 29 has an invalid length. [ 236.788562][T12142] netlink: 'syz.4.1791': attribute type 4 has an invalid length. [ 236.813812][T12142] netlink: 'syz.4.1791': attribute type 2 has an invalid length. [ 236.828589][T11909] veth0_vlan: entered promiscuous mode [ 236.839768][T11909] veth1_vlan: entered promiscuous mode [ 236.931614][T11909] veth0_macvtap: entered promiscuous mode [ 236.957054][T11909] veth1_macvtap: entered promiscuous mode [ 237.010687][T11909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.048171][T11909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.072853][T11909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.097321][T12158] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1795'. [ 237.129225][T11909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.144426][T11909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.167829][T11909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.218360][T11909] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.227619][T11909] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.236393][T11909] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.246028][T11909] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.320927][T12161] syzkaller0: entered promiscuous mode [ 237.327829][T12161] syzkaller0: entered allmulticast mode [ 237.436670][T12176] netlink: 'syz.4.1800': attribute type 211 has an invalid length. [ 237.693910][ T5838] Bluetooth: hci4: command tx timeout [ 239.536900][ T3512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.552675][ T3512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.648354][ T3512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.656487][ T3512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.806487][T12197] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 239.951429][T12205] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1808'. [ 239.968726][T12205] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1808'. [ 239.979964][T12205] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1808'. [ 240.009229][T12205] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1808'. [ 240.386732][T12200] netlink: 'syz.1.1808': attribute type 4 has an invalid length. [ 240.486846][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.597692][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.008383][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.124966][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.529877][ T5150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 241.540895][ T5150] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 241.549627][ T5150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 241.557672][ T5150] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 241.565493][ T5150] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 241.573735][ T5150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 241.582784][T12252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1825'. [ 241.597892][ T35] bridge_slave_1: left allmulticast mode [ 241.613553][ T35] bridge_slave_1: left promiscuous mode [ 241.636681][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.660909][ T35] bridge_slave_0: left allmulticast mode [ 241.667236][ T35] bridge_slave_0: left promiscuous mode [ 241.674243][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.068615][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.079369][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.089662][ T35] bond0 (unregistering): Released all slaves [ 242.099148][T12253] netlink: 'syz.1.1823': attribute type 3 has an invalid length. [ 242.108033][T12253] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1823'. [ 242.136364][T12252] 8021q: adding VLAN 0 to HW filter on device bond6 [ 242.571880][T12288] netlink: 424 bytes leftover after parsing attributes in process `syz.1.1833'. [ 242.725124][T12295] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1836'. [ 242.741765][T12294] xt_hashlimit: size too large, truncated to 1048576 [ 242.923831][T12305] netlink: 'syz.3.1840': attribute type 4 has an invalid length. [ 242.931947][ T35] hsr_slave_0: left promiscuous mode [ 242.948407][ T35] hsr_slave_1: left promiscuous mode [ 242.955199][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.963758][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.972084][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.979879][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.014987][ T35] veth1_macvtap: left promiscuous mode [ 243.020670][ T35] veth0_macvtap: left promiscuous mode [ 243.026486][ T35] veth1_vlan: left promiscuous mode [ 243.031859][ T35] veth0_vlan: left promiscuous mode [ 243.141880][T12324] netlink: 'syz.4.1844': attribute type 30 has an invalid length. [ 243.400201][T12329] siw: device registration error -23 [ 243.699352][ T5150] Bluetooth: hci4: command tx timeout [ 243.714421][ T35] team0 (unregistering): Port device team_slave_1 removed [ 243.802818][ T35] team0 (unregistering): Port device team_slave_0 removed [ 244.241800][T12305] veth1_macvtap: left promiscuous mode [ 244.354445][T12246] chnl_net:caif_netlink_parms(): no params data found [ 244.592565][T12361] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1854'. [ 244.602945][T12246] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.627226][T12246] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.666474][T12246] bridge_slave_0: entered allmulticast mode [ 244.692687][ T29] audit: type=1800 audit(1740898972.511:5): pid=12368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1855" name="memory.events" dev="tmpfs" ino=2034 res=0 errno=0 [ 244.699653][T12246] bridge_slave_0: entered promiscuous mode [ 244.750306][T12246] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.762580][T12246] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.772908][T12246] bridge_slave_1: entered allmulticast mode [ 244.784067][T12246] bridge_slave_1: entered promiscuous mode [ 244.854616][T12246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.871864][T12377] netlink: 'syz.0.1859': attribute type 29 has an invalid length. [ 244.882792][T12246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.911204][T12377] netlink: 'syz.0.1859': attribute type 29 has an invalid length. [ 244.920115][T12377] netlink: 508 bytes leftover after parsing attributes in process `syz.0.1859'. [ 244.941685][T12246] team0: Port device team_slave_0 added [ 244.959961][T12246] team0: Port device team_slave_1 added [ 245.006324][T12246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.013383][T12246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.063903][T12246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.119177][T12246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.126604][T12246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.158241][T12246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.184360][T12380] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1860'. [ 245.338586][T12383] netlink: 'syz.0.1861': attribute type 10 has an invalid length. [ 245.380806][T12246] hsr_slave_0: entered promiscuous mode [ 245.393557][T12246] hsr_slave_1: entered promiscuous mode [ 245.400052][T12246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.408181][T12246] Cannot create hsr debugfs directory [ 245.715190][T12401] netlink: 'syz.3.1867': attribute type 10 has an invalid length. [ 245.774138][ T5150] Bluetooth: hci4: command tx timeout [ 245.931218][T12412] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1871'. [ 246.036625][T12416] tipc: Enabling of bearer rejected, failed to enable media [ 246.112020][T12419] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1872'. [ 246.121399][T12419] nbd: illegal input index 16744192 [ 246.374589][T12246] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 246.388301][T12246] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 246.400815][T12246] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 246.426045][ T3465] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 246.446206][T12246] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 246.496294][ T3465] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 246.557235][ T3465] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 246.623902][T12434] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1881'. [ 246.661919][T12246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.696828][ T3465] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 246.762052][T12246] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.789164][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.796379][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.857331][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.864494][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.980410][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 246.991040][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 247.000251][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 247.025592][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 247.033559][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 247.041001][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 247.099074][T12451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1886'. [ 247.162458][T12451] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1886'. [ 247.628062][ T3465] bond0 (unregistering): Error: No native XDP support for the current bonding mode [ 247.637909][ T3465] ------------[ cut here ]------------ [ 247.643575][ T3465] WARNING: CPU: 1 PID: 3465 at net/core/dev.c:10047 unregister_netdevice_many_notify+0x1b5c/0x2070 [ 247.654364][ T3465] Modules linked in: [ 247.658277][ T3465] CPU: 1 UID: 0 PID: 3465 Comm: kworker/u8:8 Not tainted 6.14.0-rc4-syzkaller-00859-gf77f12010f67 #0 [ 247.669190][ T3465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 247.679295][ T3465] Workqueue: netns cleanup_net [ 247.684374][ T3465] RIP: 0010:unregister_netdevice_many_notify+0x1b5c/0x2070 [ 247.691835][ T3465] Code: f4 f7 90 0f 0b 90 e9 49 ff ff ff e8 ce 94 f4 f7 90 0f 0b 90 eb 97 e8 c3 94 f4 f7 90 0f 0b 90 e9 99 f0 ff ff e8 b5 94 f4 f7 90 <0f> 0b 90 e9 09 f2 ff ff e8 a7 94 f4 f7 90 0f 0b 90 e9 71 f3 ff ff [ 247.711778][ T3465] RSP: 0018:ffffc9000c667820 EFLAGS: 00010293 [ 247.717984][ T3465] RAX: ffffffff89cd2a8b RBX: 00000000ffffffa1 RCX: ffff888032719e00 [ 247.726140][ T3465] RDX: 0000000000000000 RSI: 00000000ffffffa1 RDI: 0000000000000000 [ 247.734448][ T3465] RBP: ffffc9000c667a10 R08: ffffffff89cd1c90 R09: fffffbfff1d3a614 [ 247.742451][ T3465] R10: dffffc0000000000 R11: fffffbfff1d3a614 R12: ffffc90005437000 [ 247.750607][ T3465] R13: 1ffff1100bb6c186 R14: ffff88805db60c30 R15: ffff88805db60c28 [ 247.758745][ T3465] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 247.767786][ T3465] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 247.774513][ T3465] CR2: 00007f979c511f98 CR3: 0000000063d62000 CR4: 00000000003526f0 [ 247.782521][ T3465] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 247.791035][ T3465] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 247.799097][ T3465] Call Trace: [ 247.802434][ T3465] [ 247.805456][ T3465] ? __warn+0x165/0x4d0 [ 247.809638][ T3465] ? unregister_netdevice_many_notify+0x1b5c/0x2070 [ 247.816305][ T3465] ? report_bug+0x2b3/0x500 [ 247.821092][ T3465] ? unregister_netdevice_many_notify+0x1b5c/0x2070 [ 247.827976][ T3465] ? handle_bug+0x60/0x90 [ 247.832330][ T3465] ? exc_invalid_op+0x1a/0x50 [ 247.837091][ T3465] ? asm_exc_invalid_op+0x1a/0x20 [ 247.842192][ T3465] ? unregister_netdevice_many_notify+0xd60/0x2070 [ 247.848802][ T3465] ? unregister_netdevice_many_notify+0x1b5b/0x2070 [ 247.854243][ T5150] Bluetooth: hci4: command tx timeout [ 247.855515][ T3465] ? unregister_netdevice_many_notify+0x1b5c/0x2070 [ 247.867533][ T3465] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 247.874463][ T3465] ? unregister_netdevice_queue+0x26b/0x370 [ 247.880390][ T3465] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 247.886746][ T3465] ? nexthop_net_exit_batch_rtnl+0x100/0x150 [ 247.892768][ T3465] cleanup_net+0x76d/0xd60 [ 247.897281][ T3465] ? __pfx_cleanup_net+0x10/0x10 [ 247.902265][ T3465] ? process_scheduled_works+0x9c6/0x18e0 [ 247.908625][ T3465] process_scheduled_works+0xabe/0x18e0 [ 247.914321][ T3465] ? __pfx_process_scheduled_works+0x10/0x10 [ 247.920352][ T3465] ? assign_work+0x364/0x3d0 [ 247.925034][ T3465] worker_thread+0x870/0xd30 [ 247.929659][ T3465] ? __kthread_parkme+0x169/0x1d0 [ 247.934960][ T3465] ? __pfx_worker_thread+0x10/0x10 [ 247.940102][ T3465] kthread+0x7a9/0x920 [ 247.944287][ T3465] ? __pfx_kthread+0x10/0x10 [ 247.948916][ T3465] ? __pfx_worker_thread+0x10/0x10 [ 247.954088][ T3465] ? __pfx_kthread+0x10/0x10 [ 247.958701][ T3465] ? __pfx_kthread+0x10/0x10 [ 247.963382][ T3465] ? __pfx_kthread+0x10/0x10 [ 247.968013][ T3465] ? _raw_spin_unlock_irq+0x23/0x50 [ 247.973250][ T3465] ? lockdep_hardirqs_on+0x99/0x150 [ 247.978613][ T3465] ? __pfx_kthread+0x10/0x10 [ 247.983235][ T3465] ret_from_fork+0x4b/0x80 [ 247.987731][ T3465] ? __pfx_kthread+0x10/0x10 [ 247.992314][ T3465] ret_from_fork_asm+0x1a/0x30 [ 247.997193][ T3465] [ 248.000239][ T3465] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 248.007521][ T3465] CPU: 1 UID: 0 PID: 3465 Comm: kworker/u8:8 Not tainted 6.14.0-rc4-syzkaller-00859-gf77f12010f67 #0 [ 248.018352][ T3465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 248.028397][ T3465] Workqueue: netns cleanup_net [ 248.033155][ T3465] Call Trace: [ 248.036420][ T3465] [ 248.039336][ T3465] dump_stack_lvl+0x241/0x360 [ 248.044013][ T3465] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.049236][ T3465] ? __pfx__printk+0x10/0x10 [ 248.053817][ T3465] ? _printk+0xd5/0x120 [ 248.057974][ T3465] ? __init_begin+0x41000/0x41000 [ 248.062984][ T3465] ? vscnprintf+0x5d/0x90 [ 248.067304][ T3465] panic+0x349/0x880 [ 248.071188][ T3465] ? __warn+0x174/0x4d0 [ 248.075341][ T3465] ? __pfx_panic+0x10/0x10 [ 248.079758][ T3465] ? ret_from_fork_asm+0x1a/0x30 [ 248.084696][ T3465] __warn+0x344/0x4d0 [ 248.088675][ T3465] ? unregister_netdevice_many_notify+0x1b5c/0x2070 [ 248.095261][ T3465] report_bug+0x2b3/0x500 [ 248.099585][ T3465] ? unregister_netdevice_many_notify+0x1b5c/0x2070 [ 248.106170][ T3465] handle_bug+0x60/0x90 [ 248.110320][ T3465] exc_invalid_op+0x1a/0x50 [ 248.114831][ T3465] asm_exc_invalid_op+0x1a/0x20 [ 248.119694][ T3465] RIP: 0010:unregister_netdevice_many_notify+0x1b5c/0x2070 [ 248.126900][ T3465] Code: f4 f7 90 0f 0b 90 e9 49 ff ff ff e8 ce 94 f4 f7 90 0f 0b 90 eb 97 e8 c3 94 f4 f7 90 0f 0b 90 e9 99 f0 ff ff e8 b5 94 f4 f7 90 <0f> 0b 90 e9 09 f2 ff ff e8 a7 94 f4 f7 90 0f 0b 90 e9 71 f3 ff ff [ 248.146508][ T3465] RSP: 0018:ffffc9000c667820 EFLAGS: 00010293 [ 248.152571][ T3465] RAX: ffffffff89cd2a8b RBX: 00000000ffffffa1 RCX: ffff888032719e00 [ 248.160544][ T3465] RDX: 0000000000000000 RSI: 00000000ffffffa1 RDI: 0000000000000000 [ 248.168512][ T3465] RBP: ffffc9000c667a10 R08: ffffffff89cd1c90 R09: fffffbfff1d3a614 [ 248.176478][ T3465] R10: dffffc0000000000 R11: fffffbfff1d3a614 R12: ffffc90005437000 [ 248.184443][ T3465] R13: 1ffff1100bb6c186 R14: ffff88805db60c30 R15: ffff88805db60c28 [ 248.192439][ T3465] ? unregister_netdevice_many_notify+0xd60/0x2070 [ 248.198954][ T3465] ? unregister_netdevice_many_notify+0x1b5b/0x2070 [ 248.205564][ T3465] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 248.212350][ T3465] ? unregister_netdevice_queue+0x26b/0x370 [ 248.218262][ T3465] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 248.224533][ T3465] ? nexthop_net_exit_batch_rtnl+0x100/0x150 [ 248.230529][ T3465] cleanup_net+0x76d/0xd60 [ 248.234956][ T3465] ? __pfx_cleanup_net+0x10/0x10 [ 248.239901][ T3465] ? process_scheduled_works+0x9c6/0x18e0 [ 248.245617][ T3465] process_scheduled_works+0xabe/0x18e0 [ 248.251184][ T3465] ? __pfx_process_scheduled_works+0x10/0x10 [ 248.257170][ T3465] ? assign_work+0x364/0x3d0 [ 248.261759][ T3465] worker_thread+0x870/0xd30 [ 248.266360][ T3465] ? __kthread_parkme+0x169/0x1d0 [ 248.271384][ T3465] ? __pfx_worker_thread+0x10/0x10 [ 248.276500][ T3465] kthread+0x7a9/0x920 [ 248.280563][ T3465] ? __pfx_kthread+0x10/0x10 [ 248.285156][ T3465] ? __pfx_worker_thread+0x10/0x10 [ 248.290262][ T3465] ? __pfx_kthread+0x10/0x10 [ 248.294848][ T3465] ? __pfx_kthread+0x10/0x10 [ 248.299441][ T3465] ? __pfx_kthread+0x10/0x10 [ 248.304026][ T3465] ? _raw_spin_unlock_irq+0x23/0x50 [ 248.309242][ T3465] ? lockdep_hardirqs_on+0x99/0x150 [ 248.314463][ T3465] ? __pfx_kthread+0x10/0x10 [ 248.319067][ T3465] ret_from_fork+0x4b/0x80 [ 248.323487][ T3465] ? __pfx_kthread+0x10/0x10 [ 248.328084][ T3465] ret_from_fork_asm+0x1a/0x30 [ 248.332856][ T3465] [ 248.336108][ T3465] Kernel Offset: disabled [ 248.340489][ T3465] Rebooting in 86400 seconds..