last executing test programs: 6.545628845s ago: executing program 0 (id=958): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00a3000000000000300012800b0001006d616373656300002000028005000900010000000c0001000001000000000000050003000800000008000500", @ANYRES32=r1, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) 6.399418136s ago: executing program 0 (id=960): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r3, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2, 0x2}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="e31723d7c6012cc217028c19caeec9129ea45298e758b4d5c8a3e85d7f5ddcaf1f67e776ce1ae951", 0x28}], 0x1}, 0x388) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a1401"], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x2, 0x3, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x33}, @NFQA_CFG_CMD={0x8, 0x1, {0x2e5a4721778e1455, 0x0, 0xf}}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x4000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8) ioctl$TUNSETOFFLOAD(r8, 0x400454d0, 0x13) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0x10500, 0x0) sendmsg$tipc(r9, &(0x7f0000000480)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x1}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="5689318ec78d2c0e956d19a415ed22ee1b9f220e7c3118286f7bdf40957dcfe21119d1055587134bbd07560e91dace04659ad00f4726bfe973361a9e56ae8684fb806f50a8b1913779c7cd52e97c9af9c98cc627aacc6fa929ddc5752a667db0bcbff7a61db428b22a4a4603bb47662036a173", 0x73}, {&(0x7f0000000080)="0e80d73a8b2959", 0x7}, {&(0x7f0000000380)="e186b14c82ea013af5aa6cd8db53cba69201301b2dc485ff7eb747eebb918749ed575f276de4ad969dba57718d59644e9760775fe5976dcd67d78b95eac056398b29e9cfbb728f7bcfeaa239f01572dbe374f1b28ad441adcd455a2302d3175d9e389851fb8737a86a59cf717c409d5405b76b44e6f0cd8f988253bc018e9b15ee2a4fa24e7ef5ab4ddf405fb37289a39be907dd0ce84b8e63c1c535022bee7b6bed576d0408b3f58965bad0430704a70f1beb21f859c8c0aceb04201759e4190b034376c37fc205d9a47abcca19223e2e72e474421a773078b614df00eba481ff0c8218afd4861efceb348fed5c508f744c2609", 0xf4}], 0x3, &(0x7f0000000280)="59d685ffdedb70bf312ad3ec13aa9cce1ead1ebdd0f21f7d818cf8d2757f428d2a4da1d94fff06e913cf96637ea944b757af8edb98cde91c5ca961b54ec4eb9b40983293669071005d72b85467d8559d7d5eea46cfd6485197f74c2cea508fe6393f609497e08499df8211b11e53755287dd412384dc80a0a75c03d8cb9f4fdfab35a12bf51004b206b08ca7396dbdeefc", 0x91, 0x4}, 0x4002) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a00), &(0x7f0000000ac0), 0x8, r7}, 0x38) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)={0x3c, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdbe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4020}, 0x8094) 5.697667423s ago: executing program 2 (id=965): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x5000, &(0x7f0000000180)={&(0x7f0000000000)={0x38, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x5}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 5.445686951s ago: executing program 2 (id=972): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) unshare(0x22020600) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) r1 = accept4(r0, &(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x80, 0x800) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x1409, 0x100, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x4800) 5.444919882s ago: executing program 0 (id=973): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f", 0x85}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x1df}, {&(0x7f0000001b00)="1791613d45501cb6a8d8eaeb96ee68b2d8daad34b8c528b97ead9f051e427e309b714d3d12d8d401ee42a68183b0e95a5b22ea526737b1", 0x37}], 0x2}}], 0x2, 0x2090) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x20000080) r1 = socket(0x2, 0x5, 0x3) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYBLOB="7800000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000480012800b0001006772657461700000380002800400120008001500d570020005001300000000000800050000000000050008000900010005000a000000000008000400ff0300000800b5a5", @ANYRES32, @ANYRESOCT=r2, @ANYRES32=r3], 0x78}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newlink={0x78, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x505}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @gre={{0x8}, {0xffffffffffffffbf, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @local}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_TTL={0x5, 0x8, 0x2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4f21}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}]}}}]}, 0x78}}, 0x800) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0xb, @loopback, 0x9}, 0x1c) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x40}}}, 0x10, &(0x7f0000000440), 0x0, &(0x7f00000004c0)="1bb36672bb4e68a2a17a787aff14ba3f66b4f1cef3a6a2e82f", 0x19}, 0x20000885) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="070000000000000000000200000082ff0180080006001600000100000000000000aa"], 0x28}}, 0x0) 5.148896581s ago: executing program 2 (id=976): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r0, &(0x7f0000001640), 0x0, 0x840, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) listen(0xffffffffffffffff, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newsa={0xf0, 0x10, 0x413, 0x0, 0x0, {{@in6=@local, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x2, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x0, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x200, 0x7, 0x0, 0x4, 0xffffffffffffffff, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0x2, 0x0, 0x1}}, 0xf0}}, 0x804) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) pselect6(0x40, &(0x7f0000000080)={0xf3, 0x40, 0x5800000008000, 0x9, 0x1, 0xfffffffeffffffff, 0xa, 0x240000000000000}, 0x0, 0x0, 0x0, 0x0) unshare(0x6a040000) r4 = socket$netlink(0x10, 0x3, 0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x800) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, 0x0, 0x20000010) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x50, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x19}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0xc009}, 0x2000c004) 4.469676183s ago: executing program 0 (id=982): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x38, 0x40, 0xfd, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x5}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 4.241487622s ago: executing program 0 (id=985): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x38, r3, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x38}, 0x1, 0x0, 0x0, 0x9d26f8fcf5795660}, 0x4040000) (async) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000210029bd700000000000030000001400018011"], 0x28}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r4, 0x80286722, &(0x7f00000001c0)={&(0x7f0000000240)=""/178, 0xb2, 0x5, 0x9}) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200080}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x2, 0x2, 0x5, 0x0, 0x0, {0xc, 0x0, 0x3}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7ff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xa3b}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004001}, 0xc0) 3.987894198s ago: executing program 0 (id=987): socket(0x6, 0x800, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x18, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) ioctl$sock_proto_private(r2, 0x891d, &(0x7f0000000100)="70e89cdae43a") syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYRES64=r4, @ANYRESHEX=r0, @ANYRES32], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[], 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) getpeername(r3, &(0x7f00000001c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r6, 0x1, 0x70bd27, 0x2, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x144}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=0x1, @ANYRES32=r9, @ANYBLOB='.\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac"], 0x20) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r10, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) ioctl$sock_inet_SIOCDELRT(r10, 0x890c, 0x0) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000040)={0x4, @dev={0xac, 0x14, 0x14, 0x2e}, 0x4e24, 0x0, 'ovf\x00', 0x4, 0xffffffff, 0x56}, 0x2c) 2.751143233s ago: executing program 3 (id=994): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2c, r0, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) 2.412647357s ago: executing program 3 (id=997): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'syz_tun\x00', &(0x7f0000000340)=@ethtool_gstrings={0x1b, 0x5, 0x4, "59f9afda"}}) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'syz_tun\x00', &(0x7f0000000340)=@ethtool_gstrings={0x1b, 0x5, 0x4, "59f9afda"}}) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x2c0, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x40000, 0x1ffffe, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x70}, [@algo_crypt={0x1ce, 0x2, {{'cbc(cast5)\x00'}, 0xc30, "48b83ffd581311b8ecde1df086073241e199485ccc77d0c479d0b2b213dea7afaa5c73aad8a061c2a5178a6b5fdd75a3e46ca3dc0e1221dfa50e7c3f476879f638cc2591efa1872c502e282e77f8f0fdbb3aaccf6502f00f756afd6c1ec6d2156c047586884b8eece7386741621efd74413ecd4d6c4773e184b335f9da90d7a90e102ffb6235991f7475f27e3815d7be70ad825baf778cd87f366a3daa9ce34d1193ff56f97243efe277f54ec9c3ef664a37459d7eedcc0bda9e0819f022912ecfbc1393cdfca677f52888c39cec79deac32b6a9b49d5ced72b375ce24bba3c695259507cd57e9ef3b750de8891a2ac887c1cacb38d13ccc789100e8e6a03cd1facf4b0bb1645b745eca4f60a3de5627d5bc1bba5453f0280c20fba92988e8843187cef76d1096c24c064001935ef436afb65fcedf6acbab26af6167ff0f169c99d2004288a1a359312a7354a36f975fc236ec70fd175df1242bf5a3d4d7c64876c72da66878f106086b614c159e06157f7e733efc220265e048cf6b3a045534aa67038d20b8"}}]}, 0x2c0}}, 0x0) 2.257901879s ago: executing program 3 (id=1000): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc250}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x52800, 0x4400}}}}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x5, &(0x7f0000000140)=ANY=[@ANYRES64], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0xe76b, 0x7f, 0xc, 0x101, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r5, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) recvmmsg(r5, &(0x7f0000000900)=[{{0x0, 0xfffffffffffffca1, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}, {{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)=""/231}, {&(0x7f0000000180)=""/28}, {&(0x7f00000001c0)=""/29}, {&(0x7f00000003c0)=""/184}, {&(0x7f0000000480)=""/170}, {&(0x7f0000000540)=""/193}, {&(0x7f0000000640)=""/236}, {&(0x7f0000000740)=""/69}], 0x0, &(0x7f0000000840)=""/191}, 0x3}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd1, &(0x7f0000000000)=0x5f5e0ff, 0x4) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x6}, 0xc) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) 2.093248899s ago: executing program 1 (id=1001): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf250501f2800f0018007d3a2e9c5bc85c23277d0000140001"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000140)={0x5b8, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x5a4, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xe2, 0x0, "1400645e44f14a179bb461241e457aa183da56b3224220ddd142951016c190ac6a02f0c3f3c055216361bdd762ccb52f55270c81c8e6d85eec1df78ec34d8fa07ba58248f7e1da37c8b502cc0cb3b0d90db7bf11d8050aad48a6919cd5d6e60294c5923f86fe95c80fae1768ddd1e41ce5009d1bc83aefbe2b1b5f2cda8fd0e3f53babb618493703837a1ffbe3e613d84d922e040880b47074b57b71bd5bdf3c7d54fcdb9d729c5e83acfd9724c647193aedf22b9d3c506750866c5a14028fe5d6c4c12b5b4c24d6c3f6f983ff9cc9589eb9ecd45f0b9256330c6b700b88"}, @NL80211_BAND_5GHZ={0x4bc, 0x1, "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"}]}]}, 0x5b8}, 0x1, 0x0, 0x0, 0x24000845}, 0x40) r1 = socket$kcm(0x21, 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000700)={'gretap0\x00', 0x0, 0x8000, 0x7, 0x1, 0xea, {{0x3d, 0x4, 0x0, 0x3, 0xf4, 0x64, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010100, @broadcast, {[@ssrr={0x89, 0x13, 0xb3, [@empty, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x32}]}, @timestamp_addr={0x44, 0x3c, 0x2b, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@multicast2, 0xff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd1d9}, {@remote, 0x200}, {@broadcast, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd8}]}, @timestamp_prespec={0x44, 0x34, 0x7a, 0x3, 0x5, [{@rand_addr=0x64010101, 0xf}, {@multicast2, 0x9}, {@rand_addr=0x64010102}, {@remote}, {@dev={0xac, 0x14, 0x14, 0xa}}, {@multicast1, 0x9}]}, @ssrr={0x89, 0x7, 0x51, [@multicast1]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0x55, 0x0, 0x5, [0xf0a7, 0x7, 0x1000, 0xfffffff5]}, @end, @timestamp_addr={0x44, 0x2c, 0x23, 0x1, 0x6, [{@loopback, 0x2}, {@local, 0x5}, {@multicast2, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}]}, @generic={0x88, 0x10, "94a47b382640331e8b74110a4b6c"}]}}}}}) sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast2, @empty}}}, @ip_retopts={{0x14, 0x110, 0xc, {[@timestamp_addr={0x44, 0x4}]}}}], 0x38}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x1e23}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private0}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf250501f2800f0018007d3a2e9c5bc85c23277d0000140001"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000140)={0x5b8, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x5a4, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xe2, 0x0, "1400645e44f14a179bb461241e457aa183da56b3224220ddd142951016c190ac6a02f0c3f3c055216361bdd762ccb52f55270c81c8e6d85eec1df78ec34d8fa07ba58248f7e1da37c8b502cc0cb3b0d90db7bf11d8050aad48a6919cd5d6e60294c5923f86fe95c80fae1768ddd1e41ce5009d1bc83aefbe2b1b5f2cda8fd0e3f53babb618493703837a1ffbe3e613d84d922e040880b47074b57b71bd5bdf3c7d54fcdb9d729c5e83acfd9724c647193aedf22b9d3c506750866c5a14028fe5d6c4c12b5b4c24d6c3f6f983ff9cc9589eb9ecd45f0b9256330c6b700b88"}, @NL80211_BAND_5GHZ={0x4bc, 0x1, "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"}]}]}, 0x5b8}, 0x1, 0x0, 0x0, 0x24000845}, 0x40) (async) socket$kcm(0x21, 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000700)={'gretap0\x00', 0x0, 0x8000, 0x7, 0x1, 0xea, {{0x3d, 0x4, 0x0, 0x3, 0xf4, 0x64, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010100, @broadcast, {[@ssrr={0x89, 0x13, 0xb3, [@empty, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x32}]}, @timestamp_addr={0x44, 0x3c, 0x2b, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@multicast2, 0xff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd1d9}, {@remote, 0x200}, {@broadcast, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd8}]}, @timestamp_prespec={0x44, 0x34, 0x7a, 0x3, 0x5, [{@rand_addr=0x64010101, 0xf}, {@multicast2, 0x9}, {@rand_addr=0x64010102}, {@remote}, {@dev={0xac, 0x14, 0x14, 0xa}}, {@multicast1, 0x9}]}, @ssrr={0x89, 0x7, 0x51, [@multicast1]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0x55, 0x0, 0x5, [0xf0a7, 0x7, 0x1000, 0xfffffff5]}, @end, @timestamp_addr={0x44, 0x2c, 0x23, 0x1, 0x6, [{@loopback, 0x2}, {@local, 0x5}, {@multicast2, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}]}, @generic={0x88, 0x10, "94a47b382640331e8b74110a4b6c"}]}}}}}) (async) sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast2, @empty}}}, @ip_retopts={{0x14, 0x110, 0xc, {[@timestamp_addr={0x44, 0x4}]}}}], 0x38}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x1e23}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private0}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 1.698637279s ago: executing program 1 (id=1003): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8930, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_addrs=@ethernet={0x6, @multicast}}) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r10, 0x1, 0xd8, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1fb, 0x4, 0x0, 0x5, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0x6, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x50, 0xffffffffffffffff, 0xd3663000) sendto$packet(r2, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r5, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x6) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) 1.597127902s ago: executing program 3 (id=1004): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0xfffffffe, @loopback, 0x8000}, 0x1c) listen(r3, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x8f, 0x8}]}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xf}, {0xffff, 0xffff}, {0x8, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x11, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x8, 0x1, 0x73a0, 0x2}, {0x6, 0x1, 0x3, 0x2, 0x7, 0x9}, 0xdd, 0x5, 0x1e8c}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa668cd67f58edc68}, @TCA_TBF_BURST={0x8, 0x6, 0x2}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e000000000000000100000005"], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r1}, 0xc) 1.432969348s ago: executing program 3 (id=1005): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x9, 0x7}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r6}}, 0x40) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004740), &(0x7f0000004780)=0xc) getgid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000047c0)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004800)={{{@in=@broadcast, @in6=@private2}}, {{@in6=@private2}, 0x0, @in6=@private0}}, &(0x7f0000004900)=0xe8) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004d40), &(0x7f0000004d80)=0xc) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x24, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r8}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}]}, 0x24}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0x53) sendmmsg$unix(r9, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}], 0x20, 0x40844}}], 0x1, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000004dc0)={0xffffffffffffffff, r1, 0x25, 0x10, @void}, 0x10) r13 = getpid() r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r15, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r13}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004e00)) 1.187616803s ago: executing program 4 (id=1006): socket$can_bcm(0x1d, 0x2, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x2, 0x80805, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x80ffffffff, 0x10000007, 0x4, 0xffffffffffffffff, 0x1, 0x800}, 0x0, &(0x7f00000002c0)={0x3ff, 0x400000, 0x8, 0x8000000000009, 0x0, 0x203, 0x7fffffff, 0xfffffffffffffffe}, 0x0, 0x0) shutdown(r0, 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) accept$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c) socket$can_bcm(0x1d, 0x2, 0x2) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x80ffffffff, 0x10000007, 0x4, 0xffffffffffffffff, 0x1, 0x800}, 0x0, &(0x7f00000002c0)={0x3ff, 0x400000, 0x8, 0x8000000000009, 0x0, 0x203, 0x7fffffff, 0xfffffffffffffffe}, 0x0, 0x0) (async) shutdown(r0, 0x1) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) accept$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c) (async) 1.048829845s ago: executing program 1 (id=1007): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x2}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x2e}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) socket$rds(0x15, 0x5, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) socket(0x10, 0x2, 0x3) (async) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1843, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) socket$inet(0x2, 0x2, 0x84) socket$inet(0x2, 0x80001, 0x851) (async) socket$unix(0x1, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x5) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r2], 0x0, 0xfffffe47, 0x0, 0x1, 0x0, 0x10000, @value=r0}, 0x28) (async) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2cc00000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0xfffffffffffffe85, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socket$igmp6(0xa, 0x3, 0x2) (async) r4 = socket$packet(0x11, 0x3, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)) (async) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket(0x2, 0x80805, 0x0) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 977.587483ms ago: executing program 1 (id=1008): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0xfffc, 0x2, 0x5, 0x5, r3}, 0x10) (async) socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000007c0)={r3, 0x64, &(0x7f0000000740)=[@in6={0xa, 0x4e20, 0x9, @private2, 0x48000}, @in={0x2, 0x4e21, @private=0xa010102}, @in6={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x2}, @in6={0xa, 0x4e23, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f0000000800)=0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r5 = socket$inet6(0xa, 0x2, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, 0x2, 0x1, 0x3, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x88c}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10050}, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r7}, 0x14) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r8, 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4, 0xffffffffffffffff}, &(0x7f00000002c0), 0x0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000e40)=ANY=[@ANYBLOB="18473091f44878e62f769479e200000000800000", @ANYRES32=r4, @ANYBLOB="003ae7728f87dfe64752000000ac97b4da32af28503f38224326000000009500000000000000", @ANYRES64=r8, @ANYRESHEX=r1], &(0x7f0000000e00)='syzkaller\x00', 0x95ae, 0xe2, &(0x7f0000000d00)=""/226, 0x41100, 0x32, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x2, 0x9, 0x80000000, 0x1}, 0x10, r8, 0x0, 0x8, &(0x7f0000000480)=[r4, r1, r9, r4, r4, r4, r4], &(0x7f00000004c0)=[{0x2, 0x4, 0x3, 0x5}, {0x0, 0x2, 0xf, 0x1}, {0x5, 0x4, 0x8}, {0x4, 0x3, 0xe, 0x9}, {0x1, 0x4, 0x9, 0xc}, {0x1, 0x5, 0x1, 0x8}, {0x2, 0x5, 0x10, 0x2}, {0x400, 0x2, 0x4, 0x1}], 0x10, 0x40}, 0x94) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x1, 'vlan0\x00', {}, 0x7fff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) (async) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r10, {0x2, 0x1, @remote}, 0xa}}, 0x26) (async) r12 = socket$igmp(0x2, 0x3, 0x2) (async) r13 = socket$unix(0x1, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe0000000071107d00000000001d300200000000004704000001ed030407030000060000001d440000000000006b0a20fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'macsec0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r12, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x8, 0xbc, 0x0, @vifc_lcl_ifindex=r14, @remote}, 0x10) (async) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f00000000c0)={r3, 0x6}, 0x8) 952.907218ms ago: executing program 2 (id=1009): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40800000000000073114200000049705b2b626e777302e9171500008510000002000000b7000000000000009500c20000000000950000481583b5e6a5"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2000000000000022, 0x2, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f00000001c0)=0xfffffffc, 0x4) (async) r2 = epoll_create1(0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) close(r3) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x210403, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="08009f000600000008002600b409000005005201"], 0x3c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) (async, rerun: 32) sendmsg$NL80211_CMD_ASSOCIATE(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r5, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0xf}}}}, [@NL80211_ATTR_FILS_KEK={0xb, 0xf2, "0207395cadd2df"}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x3800000, {0x6, 0x1, 0x9, 0xa52}}}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc, {0x3ff, 0x4, 0x1000, 0xdde}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4048850}, 0x800) (rerun: 32) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000002c0)={0x80000005}) 905.561548ms ago: executing program 4 (id=1010): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071120f000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x24}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1000000029db4da9c276b285"], 0x10}}], 0x1, 0x4000000) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) socketpair(0x6, 0x1, 0x800, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000000240)={r3, 0x6, 0x7, "d99c15d96756a1e8bf65fd14a7feddf461d66f4b674a872a451a7528b7171472f47176d89500743f6e5fa6c9fecbfcc75fc437fe53e7ae1fe6b7d7bb6690acb167f364edb10b6e81a4568cfe94800b1ec25f4bf83dbe5e0cc40827b69c95df2a35a33e07ecfb6edcf1460523ae118f977d9ec6c371f21b3148fb3f2a9da12c32e3da160b49381b4f3c5de5ca3571e2daf95d305f5579403ace87"}) r6 = getpid() ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f00000000c0)=r6) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x1000) 791.689987ms ago: executing program 4 (id=1011): socket(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x50) (async) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 773.465938ms ago: executing program 1 (id=1012): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x38, 0x40, 0x1, 0x7fffc, 0x4, {0x1, 0x0, 0x50}, [@nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x5}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 572.946513ms ago: executing program 4 (id=1013): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001c40)={@cgroup, 0xffffffffffffffff, 0x18, 0x29}, 0x20) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "000000000002040000000000000b00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmmsg(r0, &(0x7f0000005d80)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000000)="bf", 0x1}], 0x1, &(0x7f0000000680)=ANY=[], 0xc}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a80)="cb", 0x1}, {&(0x7f0000000240)="edff10cc0442e181a2f838fdf7ae89f17391d5829d0f0e009756bd031764f7a1264100697516206b4a1eb8862e8c5fbaf9bb96aacc6e34574295ef3166da4255d5b35af54615bb27be2a5ce6db6553053edbaa6d2d065eef2223329e2e7234ede6de70c70be902f5fce3dee17f38f42a582758ea7d5ec51807a95112f3619f536d35afb22cc315f0f8ab228bfc1a5de763fa7dd65e82e54be7905712689a2a24139aabe491b29d866c632d2b8617a9853a1589ccaea89b74856d48f34a3bf8d10996f9211a44ce08fa63", 0xca}], 0x2, &(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRESDEC=r1, @ANYRES16=r4], 0x10}}], 0x2, 0x4044044) 572.579493ms ago: executing program 1 (id=1014): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) accept4(r0, 0x0, 0x0, 0x0) (async, rerun: 64) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2, 0x0}}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}, 0x48) (rerun: 64) 545.993623ms ago: executing program 2 (id=1015): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair(0x29, 0x2, 0x0, &(0x7f0000000140)) close(0x3) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000)=0x800000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000300)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f0000000500)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) unshare(0x28000600) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r5, 0x1, 0x42, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) getsockopt$sock_timeval(r3, 0x1, 0x42, 0x0, &(0x7f00000002c0)) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000240)={{0x5e, @multicast2, 0x4e23, 0x1, 'lblc\x00', 0x28, 0x4, 0xb}, {@rand_addr=0x64010100, 0x4e23, 0x0, 0x6, 0x5, 0x7}}, 0x44) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) socket$caif_stream(0x25, 0x1, 0x1) 314.242047ms ago: executing program 3 (id=1016): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001200010a000000008b0007008000d6f5"], 0x26}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x62, &(0x7f0000000000)=[{0x401, 0x4, 0x87, 0x101}]}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r3, &(0x7f0000000140), 0x0}, 0x20) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 261.341506ms ago: executing program 4 (id=1017): socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$kcm(0xa, 0x3, 0x73) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(0x0, 0x0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) socket$netlink(0x10, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000003c0)) socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 39.959563ms ago: executing program 4 (id=1018): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @rand_addr=0x64010101}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYRES32], 0x40}, 0x20008024) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f7461"], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0xc4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x98, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x70, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x45, 0x3, "cd4b6abe42031763d02899c77f963d140d7a9d3ac869f3a860917523679abf4579f9cd6564e64066681fb945bfe585ab6933a6f6514a0eebad4e3537b11b37357f"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x0) 0s ago: executing program 2 (id=1019): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dvmrp1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r2 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r5 = gettid() r6 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r4, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x34, r9, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x96c}]]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x4c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000010) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x7a, &(0x7f0000000340)={r11, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={r12, 0x86}, &(0x7f0000000180)=0x8) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r14, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x0, 0xde47, 0xc, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x7, 0x4, 0x3}}) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r13) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r13, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="200028bde800fcdbdf251e0000000c00060002000000020000000c00060003000000000000000c000600020000000000000008000300e5815713262482be83280524784e0e24fad8c34939854c57f657a4d4c9b810037fd3c8b8185c644618558144ea4b2452830393d7b5e2062738ebff3a776ac7c82a1d1e8283704926bcb87c968ea2ec46fb2d7bcf23ba27d617408c4a59705a9f17d36ed4ea43984fd3", @ANYRES32=r16, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x48}, 0x1) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.224' (ED25519) to the list of known hosts. [ 80.176831][ T5807] cgroup: Unknown subsys name 'net' [ 80.346676][ T5807] cgroup: Unknown subsys name 'cpuset' [ 80.355760][ T5807] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.908069][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.012246][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.022998][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.030808][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.048187][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.055950][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.091978][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.100067][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.108164][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.132034][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.142097][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.164971][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.183710][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.192265][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.207035][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.214759][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.223058][ T5141] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.231911][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.240414][ T5141] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.248058][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.255353][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.264047][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.279093][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.290476][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.302402][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.309956][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.759646][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 84.838715][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 84.925888][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 85.013417][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 85.123990][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 85.198609][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.206049][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.218382][ T5829] bridge_slave_0: entered allmulticast mode [ 85.226764][ T5829] bridge_slave_0: entered promiscuous mode [ 85.235539][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.242834][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.250053][ T5819] bridge_slave_0: entered allmulticast mode [ 85.258144][ T5819] bridge_slave_0: entered promiscuous mode [ 85.293001][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.300185][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.307578][ T5824] bridge_slave_0: entered allmulticast mode [ 85.315028][ T5824] bridge_slave_0: entered promiscuous mode [ 85.325359][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.334230][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.341551][ T5829] bridge_slave_1: entered allmulticast mode [ 85.349807][ T5829] bridge_slave_1: entered promiscuous mode [ 85.358328][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.365801][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.373241][ T5819] bridge_slave_1: entered allmulticast mode [ 85.380464][ T5819] bridge_slave_1: entered promiscuous mode [ 85.418604][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.425919][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.433407][ T5824] bridge_slave_1: entered allmulticast mode [ 85.440595][ T5824] bridge_slave_1: entered promiscuous mode [ 85.474977][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.482387][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.489544][ T5831] bridge_slave_0: entered allmulticast mode [ 85.496951][ T5831] bridge_slave_0: entered promiscuous mode [ 85.541374][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.548746][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.556605][ T5831] bridge_slave_1: entered allmulticast mode [ 85.564024][ T5831] bridge_slave_1: entered promiscuous mode [ 85.583593][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.595146][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.622744][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.634331][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.655442][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.685446][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.725514][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.747668][ T5829] team0: Port device team_slave_0 added [ 85.763648][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.770850][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.778276][ T5828] bridge_slave_0: entered allmulticast mode [ 85.785876][ T5828] bridge_slave_0: entered promiscuous mode [ 85.795679][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.827131][ T5829] team0: Port device team_slave_1 added [ 85.844863][ T5819] team0: Port device team_slave_0 added [ 85.850706][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.858374][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.865616][ T5828] bridge_slave_1: entered allmulticast mode [ 85.873417][ T5828] bridge_slave_1: entered promiscuous mode [ 85.890885][ T5824] team0: Port device team_slave_0 added [ 85.907470][ T5819] team0: Port device team_slave_1 added [ 85.933983][ T5824] team0: Port device team_slave_1 added [ 85.941528][ T5831] team0: Port device team_slave_0 added [ 85.949392][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.956647][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.982912][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.027903][ T5831] team0: Port device team_slave_1 added [ 86.034177][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.041131][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.067436][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.090361][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.126526][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.133683][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.160098][ T5833] Bluetooth: hci0: command tx timeout [ 86.161875][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.178634][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.188259][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.195512][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.222053][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.242156][ T5833] Bluetooth: hci1: command tx timeout [ 86.249737][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.256822][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.282869][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.295801][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.302802][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.328914][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.329050][ T5833] Bluetooth: hci2: command tx timeout [ 86.340218][ T5826] Bluetooth: hci3: command tx timeout [ 86.352491][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.359488][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.386171][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.396808][ T5826] Bluetooth: hci4: command tx timeout [ 86.429179][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.436359][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.463023][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.516650][ T5828] team0: Port device team_slave_0 added [ 86.536536][ T5828] team0: Port device team_slave_1 added [ 86.556811][ T5819] hsr_slave_0: entered promiscuous mode [ 86.565762][ T5819] hsr_slave_1: entered promiscuous mode [ 86.607921][ T5829] hsr_slave_0: entered promiscuous mode [ 86.614325][ T5829] hsr_slave_1: entered promiscuous mode [ 86.620606][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 86.626668][ T5829] Cannot create hsr debugfs directory [ 86.662638][ T5824] hsr_slave_0: entered promiscuous mode [ 86.669070][ T5824] hsr_slave_1: entered promiscuous mode [ 86.692485][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 86.698244][ T5824] Cannot create hsr debugfs directory [ 86.762356][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.769358][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.795571][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.828476][ T5831] hsr_slave_0: entered promiscuous mode [ 86.836178][ T5831] hsr_slave_1: entered promiscuous mode [ 86.842743][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 86.848515][ T5831] Cannot create hsr debugfs directory [ 86.884347][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.891449][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.917959][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.176090][ T5828] hsr_slave_0: entered promiscuous mode [ 87.182760][ T5828] hsr_slave_1: entered promiscuous mode [ 87.188788][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 87.194797][ T5828] Cannot create hsr debugfs directory [ 87.499998][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.513853][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.532630][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.542688][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.593075][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.617739][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.628046][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.638370][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.714091][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.728298][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.743316][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.755774][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.835345][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.846495][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.856658][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.874014][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.950500][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.975382][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.994772][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.005255][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.027779][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.064961][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.083475][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.129411][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.136754][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.160127][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.167261][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.189738][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.208567][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.232291][ T5826] Bluetooth: hci0: command tx timeout [ 88.233390][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.255615][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.262780][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.274157][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.281269][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.311777][ T5826] Bluetooth: hci1: command tx timeout [ 88.319197][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.326310][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.338055][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.345168][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.392521][ T5826] Bluetooth: hci3: command tx timeout [ 88.397955][ T5826] Bluetooth: hci2: command tx timeout [ 88.433463][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.472663][ T5826] Bluetooth: hci4: command tx timeout [ 88.507796][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.548004][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.574416][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.581661][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.605439][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.612701][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.680594][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.754779][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.761958][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.794153][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.801370][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.862318][ T5829] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.882840][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.986721][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.000039][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.025150][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.169306][ T5819] veth0_vlan: entered promiscuous mode [ 89.221520][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.238388][ T5819] veth1_vlan: entered promiscuous mode [ 89.277930][ T5831] veth0_vlan: entered promiscuous mode [ 89.291091][ T5824] veth0_vlan: entered promiscuous mode [ 89.324728][ T5819] veth0_macvtap: entered promiscuous mode [ 89.335473][ T5831] veth1_vlan: entered promiscuous mode [ 89.349330][ T5824] veth1_vlan: entered promiscuous mode [ 89.359981][ T5819] veth1_macvtap: entered promiscuous mode [ 89.424352][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.436809][ T5829] veth0_vlan: entered promiscuous mode [ 89.452704][ T5829] veth1_vlan: entered promiscuous mode [ 89.468722][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.486983][ T5824] veth0_macvtap: entered promiscuous mode [ 89.499406][ T5831] veth0_macvtap: entered promiscuous mode [ 89.515905][ T5824] veth1_macvtap: entered promiscuous mode [ 89.534500][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.553141][ T1337] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.562952][ T1337] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.592162][ T5831] veth1_macvtap: entered promiscuous mode [ 89.601317][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.611509][ T1337] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.640995][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.652214][ T1337] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.668175][ T5829] veth0_macvtap: entered promiscuous mode [ 89.706360][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.716779][ T3497] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.735528][ T3497] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.753985][ T5829] veth1_macvtap: entered promiscuous mode [ 89.786499][ T3497] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.797053][ T3497] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.809606][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.860956][ T70] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.870825][ T70] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.918289][ T70] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.928778][ T70] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.968996][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.982279][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.029875][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.095834][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.104876][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.117640][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.167893][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.188741][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.223180][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.241866][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.264369][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.274512][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.284089][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.293747][ T3547] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.303089][ T5828] veth0_vlan: entered promiscuous mode [ 90.312000][ T5826] Bluetooth: hci0: command tx timeout [ 90.339777][ T5819] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.347966][ T3547] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.391242][ T3547] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.397969][ T5826] Bluetooth: hci1: command tx timeout [ 90.440561][ T5828] veth1_vlan: entered promiscuous mode [ 90.465673][ T3547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.474173][ T5826] Bluetooth: hci2: command tx timeout [ 90.479641][ T5826] Bluetooth: hci3: command tx timeout [ 90.490586][ T3547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.552020][ T5826] Bluetooth: hci4: command tx timeout [ 90.628683][ T5940] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 90.653538][ T5828] veth0_macvtap: entered promiscuous mode [ 90.706660][ T5828] veth1_macvtap: entered promiscuous mode [ 90.739911][ T3547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.771074][ T3547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.850730][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.885076][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.896556][ T5948] syzkaller0: entered promiscuous mode [ 90.903310][ T5948] syzkaller0: entered allmulticast mode [ 90.911424][ T3547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.946670][ T3497] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.960834][ T5948] 0: reclassify loop, rule prio 0, protocol 800 [ 90.962171][ T3547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.981487][ T5948] IPv6: Can't replace route, no match found [ 91.089128][ T3497] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.118579][ T3497] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.148467][ T3497] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.296562][ T5963] netlink: 'syz.0.9': attribute type 3 has an invalid length. [ 91.313209][ T5963] netlink: 666 bytes leftover after parsing attributes in process `syz.0.9'. [ 91.588617][ T3547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.623808][ T3547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.736800][ T5983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15'. [ 91.757060][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'. [ 91.769579][ T5979] IPv6: NLM_F_CREATE should be specified when creating new route [ 91.804593][ T106] cfg80211: failed to load regulatory.db [ 91.999308][ T5979] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 92.029586][ T5988] warning: `syz.2.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 92.041324][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.057210][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.167046][ T5993] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.19'. [ 92.367478][ T5997] bridge0: port 3(syz_tun) entered blocking state [ 92.387875][ T5997] bridge0: port 3(syz_tun) entered disabled state [ 92.396482][ T5826] Bluetooth: hci0: command tx timeout [ 92.412391][ T5997] syz_tun: entered allmulticast mode [ 92.434462][ T6003] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 92.454187][ T5997] syz_tun: entered promiscuous mode [ 92.460056][ T5997] bridge0: port 3(syz_tun) entered blocking state [ 92.466813][ T5997] bridge0: port 3(syz_tun) entered forwarding state [ 92.476900][ T5826] Bluetooth: hci1: command tx timeout [ 92.566019][ T5826] Bluetooth: hci2: command tx timeout [ 92.566032][ T5833] Bluetooth: hci3: command tx timeout [ 92.632840][ T5826] Bluetooth: hci4: command tx timeout [ 92.734646][ T6012] netlink: 144 bytes leftover after parsing attributes in process `syz.3.24'. [ 92.940721][ T6031] tipc: Started in network mode [ 92.965237][ T6031] tipc: Node identity fabed073b54e, cluster identity 4711 [ 92.994652][ T6031] tipc: Enabled bearer , priority 0 [ 93.036980][ T6028] delete_channel: no stack [ 93.043975][ T6028] netlink: 776 bytes leftover after parsing attributes in process `syz.0.29'. [ 93.094321][ T6031] tipc: Disabling bearer [ 93.305007][ T6048] netlink: 'syz.4.33': attribute type 1 has an invalid length. [ 93.313018][ T6049] netlink: 'syz.4.33': attribute type 1 has an invalid length. [ 93.365357][ T6048] xfrm1: entered promiscuous mode [ 93.426940][ T6049] netlink: 100 bytes leftover after parsing attributes in process `syz.4.33'. [ 93.448849][ T6053] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.886488][ T6077] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 93.991366][ T6079] can: request_module (can-proto-0) failed. [ 94.155038][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.47'. [ 94.240676][ T6099] netlink: 100 bytes leftover after parsing attributes in process `syz.0.48'. [ 94.387848][ T6106] netem: change failed [ 94.893429][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.54'. [ 94.943653][ T6130] netlink: 'syz.0.55': attribute type 1 has an invalid length. [ 95.180914][ T6139] syzkaller0: entered promiscuous mode [ 95.190457][ T6139] syzkaller0: entered allmulticast mode [ 95.206341][ T6144] macsec1: entered promiscuous mode [ 95.238488][ T6141] Zero length message leads to an empty skb [ 95.653220][ T6166] netlink: 'syz.0.61': attribute type 5 has an invalid length. [ 95.718817][ T6169] Driver unsupported XDP return value 0 on prog (id 40) dev N/A, expect packet loss! [ 98.892983][ T6202] ip6gretap1: entered promiscuous mode [ 99.121949][ T6217] netlink: 'syz.3.73': attribute type 1 has an invalid length. [ 99.351491][ T6226] dvmrp6: entered allmulticast mode [ 99.802087][ T6255] netlink: 'syz.0.80': attribute type 1 has an invalid length. [ 100.404513][ T6255] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.541129][ T6261] geneve2: entered promiscuous mode [ 100.551042][ T6261] geneve2: entered allmulticast mode [ 100.829484][ T6302] block nbd2: not configured, cannot reconfigure [ 100.891852][ T6302] block nbd2: not configured, cannot reconfigure [ 100.909760][ T6307] __nla_validate_parse: 1 callbacks suppressed [ 100.909778][ T6307] netlink: 44 bytes leftover after parsing attributes in process `syz.0.87'. [ 100.936547][ T6308] netlink: 16 bytes leftover after parsing attributes in process `syz.3.88'. [ 101.105718][ T6322] geneve2: entered promiscuous mode [ 101.154338][ T70] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 60459 - 0 [ 101.180070][ T70] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 60459 - 0 [ 101.190870][ T6329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.224481][ T70] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 60459 - 0 [ 101.253494][ T6329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.272007][ T70] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 60459 - 0 [ 101.304526][ T6329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.372944][ T6333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.465868][ T6329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.503230][ T6329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.521081][ T6329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.562812][ T6288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.83'. [ 101.599331][ T6329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.646143][ T6329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.656463][ T6344] netlink: 24 bytes leftover after parsing attributes in process `syz.2.94'. [ 101.787031][ T6333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.806131][ T6333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.888863][ T6288] hsr_slave_1 (unregistering): left promiscuous mode [ 102.013193][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.97'. [ 102.166137][ T6358] netlink: 'syz.2.100': attribute type 2 has an invalid length. [ 102.225711][ T6358] : entered promiscuous mode [ 102.304422][ T6368] netlink: 24 bytes leftover after parsing attributes in process `syz.4.103'. [ 102.469130][ T6368] syz.4.103 (6368) used greatest stack depth: 17312 bytes left [ 102.640671][ T6383] netlink: 'syz.4.109': attribute type 1 has an invalid length. [ 102.709726][ T6383] macvlan2: entered promiscuous mode [ 102.728707][ T6383] macvlan2: entered allmulticast mode [ 102.742400][ T6383] vlan1: entered allmulticast mode [ 102.768060][ T6383] veth0_vlan: entered allmulticast mode [ 102.781215][ T6383] vlan1: entered promiscuous mode [ 102.808967][ T6383] team0: Port device macvlan2 added [ 102.884297][ T6386] netlink: 24 bytes leftover after parsing attributes in process `syz.1.110'. [ 102.962060][ T6396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.111'. [ 103.003777][ T6392] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 103.037381][ T6396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.111'. [ 103.136439][ T6392] bond2 (unregistering): Released all slaves [ 103.173203][ T6404] netlink: 'syz.2.113': attribute type 11 has an invalid length. [ 103.194687][ T6404] netlink: 199788 bytes leftover after parsing attributes in process `syz.2.113'. [ 103.748951][ T6421] tipc: Started in network mode [ 103.761684][ T6421] tipc: Node identity 9abde3e09406, cluster identity 4711 [ 103.768988][ T6421] tipc: Enabled bearer , priority 0 [ 103.836018][ T24] IPVS: starting estimator thread 0... [ 103.941738][ T6428] IPVS: using max 34 ests per chain, 81600 per kthread [ 104.343275][ T6417] tipc: Resetting bearer [ 104.343945][ T6443] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 104.371891][ T6431] netlink: 'syz.1.120': attribute type 3 has an invalid length. [ 104.398563][ T6422] syzkaller0: entered promiscuous mode [ 104.415805][ T6443] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 104.423975][ T6422] syzkaller0: entered allmulticast mode [ 104.560419][ T6408] tipc: Resetting bearer [ 106.345501][ T6408] tipc: Disabling bearer [ 106.363730][ T6441] syz_tun: entered allmulticast mode [ 106.385011][ T6431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 106.418340][ T6445] __nla_validate_parse: 2 callbacks suppressed [ 106.418363][ T6445] netlink: 44 bytes leftover after parsing attributes in process `syz.4.122'. [ 106.471125][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.122'. [ 106.490400][ T6445] netlink: 28 bytes leftover after parsing attributes in process `syz.4.122'. [ 106.503589][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.122'. [ 106.513889][ T6445] netlink: 2 bytes leftover after parsing attributes in process `syz.4.122'. [ 106.525117][ T6445] netlink: 28 bytes leftover after parsing attributes in process `syz.4.122'. [ 106.535495][ T6445] netlink: 24 bytes leftover after parsing attributes in process `syz.4.122'. [ 106.586544][ T106] tipc: Node number set to 247194592 [ 106.663246][ T6442] syz_tun: left allmulticast mode [ 106.717577][ T6457] netlink: 'syz.2.125': attribute type 1 has an invalid length. [ 106.796719][ T6463] netlink: 28 bytes leftover after parsing attributes in process `syz.0.127'. [ 106.812763][ T6463] netlink: 32 bytes leftover after parsing attributes in process `syz.0.127'. [ 106.828854][ T6463] netlink: 28 bytes leftover after parsing attributes in process `syz.0.127'. [ 107.004951][ T6475] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 107.176874][ T6480] netlink: 'syz.0.131': attribute type 1 has an invalid length. [ 107.208907][ T6480] netlink: 'syz.0.131': attribute type 1 has an invalid length. [ 107.267257][ T6484] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 107.309635][ T6484] bond1 (unregistering): Released all slaves [ 107.351046][ T6489] vlan2: entered allmulticast mode [ 107.356284][ T6489] bond2: entered allmulticast mode [ 107.380469][ T6488] tipc: Enabling of bearer rejected, failed to enable media [ 107.810954][ T6497] IPVS: set_ctl: invalid protocol: 247 172.20.20.187:21 [ 108.063758][ T6516] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 108.165343][ T6519] netlink: 'syz.4.142': attribute type 3 has an invalid length. [ 108.223308][ T6522] netlink: 'syz.0.143': attribute type 1 has an invalid length. [ 108.326694][ T6522] 8021q: adding VLAN 0 to HW filter on device bond3 [ 108.510676][ T6539] netlink: 'syz.0.147': attribute type 1 has an invalid length. [ 108.573184][ T6541] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.809224][ T6549] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.149909][ T6567] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 109.166069][ T6567] bond1 (unregistering): Released all slaves [ 109.446125][ T6586] gretap1: entered promiscuous mode [ 109.453815][ T6586] batman_adv: batadv0: Adding interface: gretap1 [ 109.464768][ T6586] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 109.491749][ T6586] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 110.096011][ T6626] syz_tun: entered allmulticast mode [ 110.238948][ T6625] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.307389][ T6639] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.315368][ T6639] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.336953][ T151] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x9c [ 110.392617][ T6639] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 110.410417][ T6639] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 110.423869][ T6639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.438118][ T6639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.603599][ T6625] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.636485][ T6637] bond1: option lacp_rate: invalid value (3) [ 110.645877][ T6637] bond1 (unregistering): Released all slaves [ 110.667713][ T10] syz0: Port: 1 Link DOWN [ 110.667718][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.681666][ T151] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.690578][ T3497] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.700592][ T6624] syz_tun: left allmulticast mode [ 110.757197][ T6625] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.805557][ T3497] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.914038][ T6625] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.049647][ T3497] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.060454][ T6657] netlink: 'syz.1.179': attribute type 1 has an invalid length. [ 111.073963][ T6657] netlink: 'syz.1.179': attribute type 2 has an invalid length. [ 111.089007][ T3497] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.134238][ T3497] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.201083][ T3497] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.300193][ T6661] netlink: 'syz.1.183': attribute type 32 has an invalid length. [ 111.311030][ T6659] tipc: Started in network mode [ 111.337730][ T6659] tipc: Node identity da3fa9105028, cluster identity 4711 [ 111.372036][ T6659] tipc: Enabled bearer , priority 0 [ 111.468755][ T6671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.495388][ T6661] bond1: Setting coupled_control to off (0) [ 111.507315][ T6667] syzkaller0: entered promiscuous mode [ 111.554001][ T6667] syzkaller0: entered allmulticast mode [ 111.623923][ T6675] __nla_validate_parse: 16 callbacks suppressed [ 111.623943][ T6675] netlink: 24 bytes leftover after parsing attributes in process `syz.4.185'. [ 111.915888][ T6658] tipc: Resetting bearer [ 111.981190][ T6691] netlink: 'syz.2.189': attribute type 4 has an invalid length. [ 112.016951][ T6658] tipc: Disabling bearer [ 112.035249][ T6697] netlink: 'syz.2.189': attribute type 4 has an invalid length. [ 112.555698][ T6703] netlink: 'syz.4.192': attribute type 10 has an invalid length. [ 112.575915][ T6703] netlink: 2 bytes leftover after parsing attributes in process `syz.4.192'. [ 112.626951][ T6703] hsr0: entered promiscuous mode [ 112.649235][ T6703] bridge0: port 3(hsr0) entered blocking state [ 112.671176][ T6703] bridge0: port 3(hsr0) entered disabled state [ 112.704852][ T6703] hsr0: entered allmulticast mode [ 112.737785][ T6703] hsr_slave_0: entered allmulticast mode [ 112.761519][ T6703] bridge0: port 3(hsr0) entered blocking state [ 112.767954][ T6703] bridge0: port 3(hsr0) entered forwarding state [ 112.833983][ T6717] netlink: 5 bytes leftover after parsing attributes in process `syz.1.197'. [ 113.256602][ T6738] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.605822][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'. [ 113.616375][ T6759] netlink: 28 bytes leftover after parsing attributes in process `syz.1.209'. [ 113.625781][ T6759] netlink: 32 bytes leftover after parsing attributes in process `syz.1.209'. [ 113.635210][ T6759] netlink: 28 bytes leftover after parsing attributes in process `syz.1.209'. [ 113.652847][ T6759] netlink: 32 bytes leftover after parsing attributes in process `syz.1.209'. [ 113.770015][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.210'. [ 113.779257][ T6763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.210'. [ 113.938772][ T6768] netlink: 'syz.1.212': attribute type 1 has an invalid length. [ 113.990638][ T6770] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.021291][ T6770] bridge_slave_1: left allmulticast mode [ 114.042625][ T6770] bridge_slave_1: left promiscuous mode [ 114.048557][ T6770] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.146244][ T6778] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 114.154212][ T6778] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 114.423516][ T6792] netlink: 'syz.4.217': attribute type 1 has an invalid length. [ 114.551979][ T6800] netlink: 'syz.0.221': attribute type 29 has an invalid length. [ 114.567601][ T6800] netlink: 'syz.0.221': attribute type 29 has an invalid length. [ 114.584784][ T6800] Bluetooth: MGMT ver 1.23 [ 114.853692][ T6811] syzkaller0: entered promiscuous mode [ 114.859486][ T6811] syzkaller0: entered allmulticast mode [ 117.324626][ T6812] tipc: Enabled bearer , priority 0 [ 117.376401][ T6814] tipc: Resetting bearer [ 117.476892][ T6810] tipc: Resetting bearer [ 117.517141][ T6810] tipc: Disabling bearer [ 117.578825][ T6824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 117.866708][ T6845] tipc: Started in network mode [ 117.884533][ T6845] tipc: Node identity 0a4e3849baab, cluster identity 4711 [ 117.902314][ T6845] tipc: Enabled bearer , priority 0 [ 117.918429][ T6854] syzkaller0: entered promiscuous mode [ 117.931959][ T6854] syzkaller0: entered allmulticast mode [ 118.062256][ T6845] __nla_validate_parse: 4 callbacks suppressed [ 118.062278][ T6845] netlink: 44 bytes leftover after parsing attributes in process `syz.3.231'. [ 118.097806][ T6845] tipc: Resetting bearer [ 118.136327][ T6843] tipc: Resetting bearer [ 118.167548][ T6843] tipc: Disabling bearer [ 118.189847][ T6860] netlink: 'syz.2.234': attribute type 1 has an invalid length. [ 118.199804][ T6860] netlink: 20 bytes leftover after parsing attributes in process `syz.2.234'. [ 118.376577][ T5820] udevd[5820]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 118.424809][ T5820] udevd[5820]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 119.219636][ T6897] netlink: 24 bytes leftover after parsing attributes in process `syz.3.243'. [ 119.314411][ T6902] netlink: 44 bytes leftover after parsing attributes in process `syz.3.243'. [ 120.032486][ T6919] netlink: 'syz.4.249': attribute type 4 has an invalid length. [ 120.137815][ T6919] netlink: 'syz.4.249': attribute type 4 has an invalid length. [ 120.422232][ T6937] nbd0: detected capacity change from 0 to 127 [ 120.475979][ T5826] block nbd0: Receive control failed (result -104) [ 120.768170][ T6960] sctp: [Deprecated]: syz.3.259 (pid 6960) Use of int in maxseg socket option. [ 120.768170][ T6960] Use struct sctp_assoc_value instead [ 120.788205][ T6959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.800754][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.267'. [ 121.809795][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.267'. [ 121.835285][ T6986] netlink: 'syz.4.267': attribute type 12 has an invalid length. [ 121.923950][ T151] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.929637][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.267'. [ 121.942248][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.267'. [ 121.951992][ T6986] netlink: 'syz.4.267': attribute type 12 has an invalid length. [ 121.990879][ T6995] netlink: 'syz.2.270': attribute type 1 has an invalid length. [ 122.167397][ T6995] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.227907][ T151] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.271763][ T151] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.301413][ T7000] tipc: Enabled bearer , priority 0 [ 122.483175][ T151] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.492351][ T7001] syzkaller0: entered promiscuous mode [ 122.497844][ T7001] syzkaller0: entered allmulticast mode [ 122.506889][ T7000] tipc: Resetting bearer [ 122.559408][ T6991] tipc: Resetting bearer [ 122.639583][ T6991] tipc: Disabling bearer [ 122.651808][ T7012] netlink: 36 bytes leftover after parsing attributes in process `syz.4.272'. [ 122.673162][ T7011] pimreg: entered allmulticast mode [ 122.762176][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.273'. [ 122.820240][ T7014] xt_connbytes: Forcing CT accounting to be enabled [ 123.332198][ T7034] syzkaller0: entered promiscuous mode [ 123.372052][ T7034] syzkaller0: entered allmulticast mode [ 123.400840][ T6841] Set syz1 is full, maxelem 65536 reached [ 123.448651][ T7034] tipc: Enabled bearer , priority 0 [ 123.476076][ T7039] netlink: 52 bytes leftover after parsing attributes in process `syz.2.280'. [ 123.494356][ T7033] tipc: Resetting bearer [ 123.498552][ T7039] nbd: must specify at least one socket [ 123.537862][ T7042] netlink: 52 bytes leftover after parsing attributes in process `syz.2.280'. [ 123.561148][ T7033] tipc: Disabling bearer [ 123.567377][ T7042] nbd: must specify at least one socket [ 123.643741][ T7042] syz.2.280: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 123.676449][ T7042] CPU: 1 UID: 0 PID: 7042 Comm: syz.2.280 Not tainted syzkaller #0 PREEMPT(full) [ 123.676480][ T7042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 123.676501][ T7042] Call Trace: [ 123.676510][ T7042] [ 123.676519][ T7042] dump_stack_lvl+0xe8/0x150 [ 123.676561][ T7042] warn_alloc+0x249/0x340 [ 123.676586][ T7042] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 123.676635][ T7042] ? __pfx_warn_alloc+0x10/0x10 [ 123.676664][ T7042] ? kasan_save_track+0x4f/0x80 [ 123.676680][ T7042] ? kasan_save_track+0x3e/0x80 [ 123.676696][ T7042] ? __kasan_kmalloc+0x93/0xb0 [ 123.676714][ T7042] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 123.676731][ T7042] ? xskq_create+0x56/0x170 [ 123.676753][ T7042] ? xsk_setsockopt+0x54c/0x990 [ 123.676772][ T7042] ? do_sock_setsockopt+0x17c/0x1b0 [ 123.676796][ T7042] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 123.676819][ T7042] ? do_syscall_64+0xe2/0xf80 [ 123.676848][ T7042] __vmalloc_node_range_noprof+0x132/0x1730 [ 123.676899][ T7042] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 123.676926][ T7042] ? __kasan_kmalloc+0x93/0xb0 [ 123.676950][ T7042] vmalloc_user_noprof+0xad/0xe0 [ 123.676970][ T7042] ? xskq_create+0xbf/0x170 [ 123.676993][ T7042] xskq_create+0xbf/0x170 [ 123.677019][ T7042] xsk_init_queue+0xad/0x110 [ 123.677043][ T7042] xsk_setsockopt+0x54c/0x990 [ 123.677067][ T7042] ? __pfx_xsk_setsockopt+0x10/0x10 [ 123.677090][ T7042] ? __pfx_aa_sk_perm+0x10/0x10 [ 123.677116][ T7042] ? aa_sock_opt_perm+0xff/0x1a0 [ 123.677143][ T7042] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 123.677164][ T7042] ? __pfx_xsk_setsockopt+0x10/0x10 [ 123.677187][ T7042] do_sock_setsockopt+0x17c/0x1b0 [ 123.677218][ T7042] __x64_sys_setsockopt+0x13d/0x1b0 [ 123.677249][ T7042] do_syscall_64+0xe2/0xf80 [ 123.677275][ T7042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.677293][ T7042] ? trace_irq_disable+0x37/0x100 [ 123.677311][ T7042] ? clear_bhb_loop+0x60/0xb0 [ 123.677334][ T7042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.677352][ T7042] RIP: 0033:0x7f2e93f9aeb9 [ 123.677378][ T7042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.677394][ T7042] RSP: 002b:00007f2e94e74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 123.677418][ T7042] RAX: ffffffffffffffda RBX: 00007f2e94216090 RCX: 00007f2e93f9aeb9 [ 123.677432][ T7042] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 123.677443][ T7042] RBP: 00007f2e94008c1f R08: 0000000000000004 R09: 0000000000000000 [ 123.677454][ T7042] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.677465][ T7042] R13: 00007f2e94216128 R14: 00007f2e94216090 R15: 00007fffa7f88ee8 [ 123.677495][ T7042] [ 123.679832][ T7042] Mem-Info: [ 123.774263][ T11] block nbd0: Connection timed out, retrying (0/1 alive) [ 123.900629][ T7042] active_anon:5748 inactive_anon:0 isolated_anon:0 [ 123.900629][ T7042] active_file:3160 inactive_file:39945 isolated_file:0 [ 123.900629][ T7042] unevictable:768 dirty:135 writeback:0 [ 123.900629][ T7042] slab_reclaimable:10611 slab_unreclaimable:99020 [ 123.900629][ T7042] mapped:29296 shmem:1356 pagetables:1221 [ 123.900629][ T7042] sec_pagetables:0 bounce:0 [ 123.900629][ T7042] kernel_misc_reclaimable:0 [ 123.900629][ T7042] free:1324800 free_pcp:16445 free_cma:0 [ 123.913504][ T11] block nbd0: Connection timed out, retrying (0/1 alive) [ 124.020776][ T11] block nbd0: Connection timed out, retrying (0/1 alive) [ 124.028228][ T125] block nbd0: Dead connection, failed to find a fallback [ 124.037177][ T125] block nbd0: shutting down sockets [ 124.043726][ T125] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 124.054717][ T11] block nbd0: Connection timed out, retrying (0/1 alive) [ 124.062650][ T125] Buffer I/O error on dev nbd0, logical block 1, async page read [ 124.070461][ T125] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 124.080442][ T125] Buffer I/O error on dev nbd0, logical block 0, async page read [ 124.088304][ T125] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 124.097854][ T125] Buffer I/O error on dev nbd0, logical block 3, async page read [ 124.105669][ T125] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 124.115203][ T125] Buffer I/O error on dev nbd0, logical block 2, async page read [ 124.124453][ T5820] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 124.131016][ T7042] Node 0 active_anon:22992kB inactive_anon:0kB active_file:12640kB inactive_file:159576kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121184kB dirty:536kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12272kB pagetables:4660kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 124.136103][ T5820] Buffer I/O error on dev nbd0, logical block 0, async page read [ 124.174269][ T5820] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 124.183829][ T5820] Buffer I/O error on dev nbd0, logical block 1, async page read [ 124.191699][ T5820] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 124.201198][ T5820] Buffer I/O error on dev nbd0, logical block 2, async page read [ 124.209317][ T5820] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 124.218855][ T5820] Buffer I/O error on dev nbd0, logical block 3, async page read [ 124.259759][ T5820] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 124.273691][ T5820] Buffer I/O error on dev nbd0, logical block 0, async page read [ 124.282411][ T5820] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 124.292420][ T5820] Buffer I/O error on dev nbd0, logical block 1, async page read [ 124.300866][ T5820] ldm_validate_partition_table(): Disk read failed. [ 124.308649][ T5820] Dev nbd0: unable to read RDB block 0 [ 124.316156][ T5820] nbd0: unable to read partition table [ 124.329034][ T7042] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 124.335804][ T5820] ldm_validate_partition_table(): Disk read failed. [ 124.372250][ T5820] Dev nbd0: unable to read RDB block 0 [ 124.379679][ T5820] nbd0: unable to read partition table [ 124.424654][ T7042] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 124.459600][ T7042] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 124.495657][ T7042] Node 0 DMA32 free:1407532kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22892kB inactive_anon:0kB active_file:12640kB inactive_file:159576kB unevictable:1536kB writepending:536kB zspages:0kB present:3129332kB managed:2554036kB mlocked:0kB bounce:0kB free_pcp:39720kB local_pcp:16368kB free_cma:0kB [ 124.584005][ T7042] lowmem_reserve[]: 0 0 1 1 1 [ 124.588901][ T7042] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 124.668780][ T7042] lowmem_reserve[]: 0 0 0 0 0 [ 124.682382][ T7042] Node 1 Normal free:3891408kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20096kB local_pcp:13440kB free_cma:0kB [ 124.745957][ T7042] lowmem_reserve[]: 0 0 0 0 0 [ 124.757227][ T7042] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 124.759345][ T7076] netlink: 'syz.3.289': attribute type 11 has an invalid length. [ 124.806388][ T7042] Node 0 DMA32: 266*4kB (UM) 196*8kB (UME) 63*16kB (UME) 47*32kB (UM) 130*64kB (UM) 61*128kB (UM) 33*256kB (UM) 16*512kB (UM) 11*1024kB (UM) 3*2048kB (ME) 330*4096kB (UM) = 1407000kB [ 124.850520][ T7042] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 124.863727][ T7076] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.289'. [ 124.877309][ T7082] pim6reg1: entered promiscuous mode [ 124.883128][ T7082] pim6reg1: entered allmulticast mode [ 124.889266][ T7042] Node 1 Normal: 218*4kB (UME) 51*8kB (UME) 57*16kB (UME) 74*32kB (UME) 24*64kB (UME) 4*128kB (UME) 3*256kB (ME) 4*512kB (UM) 1*1024kB (M) 1*2048kB (E) 947*4096kB (M) = 3891408kB [ 124.923947][ T7042] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 124.956984][ T7042] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 124.981822][ T7042] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 125.001821][ T7042] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 125.022246][ T7042] 44461 total pagecache pages [ 125.028638][ T7042] 0 pages in swap cache [ 125.034106][ T7042] Free swap = 124996kB [ 125.038312][ T7042] Total swap = 124996kB [ 125.043255][ T7042] 2097051 pages RAM [ 125.047232][ T7042] 0 pages HighMem/MovableOnly [ 125.053933][ T7042] 426644 pages reserved [ 125.058269][ T7042] 0 pages cma reserved [ 125.252546][ T7097] netlink: 'syz.4.292': attribute type 11 has an invalid length. [ 125.299150][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.294'. [ 125.316063][ T7102] netlink: 'syz.3.294': attribute type 1 has an invalid length. [ 125.468879][ T7102] veth3: entered promiscuous mode [ 125.478213][ T7102] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 125.490036][ T7102] netlink: 28 bytes leftover after parsing attributes in process `syz.3.294'. [ 125.548214][ T7104] bond1: (slave ip6gretap3): Enslaving as a backup interface with an up link [ 125.558834][ T7113] netlink: 'syz.4.297': attribute type 6 has an invalid length. [ 125.590965][ T151] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 125.593292][ T7102] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.663177][ T7116] openvswitch: netlink: Invalid VLAN frame [ 125.730155][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.300'. [ 125.742337][ T6297] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 125.769060][ T7120] netlink: 'syz.2.299': attribute type 1 has an invalid length. [ 125.922808][ T7120] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.016549][ T7127] bond2: (slave geneve3): making interface the new active one [ 126.038080][ T7127] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 126.327736][ T7155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.309'. [ 126.352979][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.362332][ T7155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.309'. [ 126.371299][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.384345][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.432047][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.520742][ T7165] netlink: 52 bytes leftover after parsing attributes in process `syz.2.312'. [ 126.552799][ T7165] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 126.572761][ T7163] netlink: 'syz.4.311': attribute type 1 has an invalid length. [ 126.593090][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.311'. [ 128.675524][ T7259] __nla_validate_parse: 8 callbacks suppressed [ 128.675542][ T7259] netlink: 84 bytes leftover after parsing attributes in process `syz.3.331'. [ 128.925985][ T7274] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 128.956723][ T7274] bond1 (unregistering): Released all slaves [ 129.054115][ T7275] bridge1: entered allmulticast mode [ 129.303161][ T7291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.339'. [ 129.309010][ T7296] netlink: 'syz.2.340': attribute type 5 has an invalid length. [ 129.373205][ T7296] ip6erspan0: entered promiscuous mode [ 129.486811][ T7300] netlink: 20 bytes leftover after parsing attributes in process `syz.3.341'. [ 129.610629][ T7304] netlink: 'syz.0.343': attribute type 4 has an invalid length. [ 129.628164][ T7304] netlink: 'syz.0.343': attribute type 4 has an invalid length. [ 129.644990][ T7305] netlink: 'syz.0.343': attribute type 4 has an invalid length. [ 129.708267][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.344'. [ 129.720254][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.344'. [ 129.779755][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.344'. [ 129.816936][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.344'. [ 129.846468][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.344'. [ 129.874188][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.344'. [ 129.899563][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.344'. [ 129.946401][ T7309] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.257647][ T7356] netlink: 'syz.1.355': attribute type 89 has an invalid length. [ 131.648202][ T7365] netlink: 'syz.4.358': attribute type 1 has an invalid length. [ 131.855780][ T7369] netlink: 'syz.4.360': attribute type 1 has an invalid length. [ 131.925006][ T7369] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.936946][ T7369] bond1: (slave bond2): making interface the new active one [ 131.945426][ T7369] bond1: (slave bond2): Enslaving as an active interface with an up link [ 131.976685][ T7369] bond1: (slave gretap2): Enslaving as a backup interface with an up link [ 131.995400][ T7369] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.136506][ T7377] netlink: 'syz.4.361': attribute type 1 has an invalid length. [ 132.195759][ T7379] netlink: 'syz.4.362': attribute type 1 has an invalid length. [ 132.220908][ T7379] 8021q: adding VLAN 0 to HW filter on device bond3 [ 132.232968][ T7379] bond3: entered allmulticast mode [ 132.258428][ T7379] bond3: (slave dummy0): making interface the new active one [ 132.267230][ T7379] dummy0: entered allmulticast mode [ 132.274512][ T7379] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 132.284966][ T7381] netlink: 'syz.4.362': attribute type 1 has an invalid length. [ 132.715131][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.721812][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.084572][ T7326] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.368920][ T7411] pim6reg: entered allmulticast mode [ 133.407636][ T7412] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 133.552661][ T7403] pim6reg: left allmulticast mode [ 133.602564][ T7422] netlink: Unknown conntrack attr (type=2304, max=9) [ 133.799135][ T7435] __nla_validate_parse: 21 callbacks suppressed [ 133.799154][ T7435] netlink: 32 bytes leftover after parsing attributes in process `syz.1.376'. [ 133.848013][ T7435] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 134.152901][ T7455] delete_channel: no stack [ 134.308140][ T7464] bond4: option ad_user_port_key: invalid value (65535) [ 134.338918][ T7464] bond4: option ad_user_port_key: allowed values 0 - 1023 [ 134.364656][ T7471] netlink: 'syz.3.385': attribute type 9 has an invalid length. [ 134.374161][ T7471] netlink: 'syz.3.385': attribute type 11 has an invalid length. [ 134.382963][ T7471] netlink: 'syz.3.385': attribute type 12 has an invalid length. [ 134.390898][ T7471] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.385'. [ 134.401119][ T7464] bond4 (unregistering): Released all slaves [ 134.422090][ T7471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.385'. [ 134.659285][ T7482] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.389'. [ 135.009971][ T7498] netlink: 'syz.0.393': attribute type 1 has an invalid length. [ 135.079055][ T7501] netlink: 28 bytes leftover after parsing attributes in process `syz.0.393'. [ 135.207444][ T7501] 8021q: adding VLAN 0 to HW filter on device bond4 [ 135.244354][ T7507] 8021q: adding VLAN 0 to HW filter on device bond4 [ 135.263474][ T7507] bond4: (slave geneve3): making interface the new active one [ 135.272470][ T7507] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 135.300352][ T50] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 135.332144][ T50] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 135.361494][ T1337] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 135.374286][ T1337] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 135.644903][ T7525] bridge0: entered promiscuous mode [ 135.676161][ T7525] bridge0: port 4(macvlan3) entered blocking state [ 135.694799][ T7525] bridge0: port 4(macvlan3) entered disabled state [ 135.705801][ T7525] macvlan3: entered allmulticast mode [ 135.711472][ T7525] bridge0: entered allmulticast mode [ 135.772866][ T7531] netlink: 20 bytes leftover after parsing attributes in process `syz.0.403'. [ 135.774403][ T7525] macvlan3: left allmulticast mode [ 135.787297][ T7525] bridge0: left allmulticast mode [ 135.795223][ T7525] bridge0: left promiscuous mode [ 135.818765][ T7532] netlink: 24 bytes leftover after parsing attributes in process `syz.2.405'. [ 135.975871][ T7537] batadv_slave_1: entered promiscuous mode [ 136.012162][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.406'. [ 136.088107][ T7537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.176692][ T7537] batadv_slave_1 (unregistering): left promiscuous mode [ 136.185915][ T7537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.329450][ T7547] netlink: 'syz.3.410': attribute type 83 has an invalid length. [ 136.364170][ T7549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.411'. [ 136.470104][ T7552] netlink: 'syz.1.413': attribute type 2 has an invalid length. [ 136.478523][ T7552] netlink: 36 bytes leftover after parsing attributes in process `syz.1.413'. [ 136.493940][ T7551] netlink: 'syz.1.413': attribute type 3 has an invalid length. [ 136.875149][ T7566] bond2: option mode: invalid value (254) [ 136.923448][ T7566] bond2 (unregistering): Released all slaves [ 137.570761][ T7605] xfrm1: entered allmulticast mode [ 137.803704][ T7628] netlink: 'syz.2.431': attribute type 1 has an invalid length. [ 138.664480][ T7666] bond4: option lacp_active: invalid value (8) [ 138.685083][ T7676] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 138.705496][ T7666] bond4 (unregistering): Released all slaves [ 139.008453][ T7693] __nla_validate_parse: 8 callbacks suppressed [ 139.008473][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'. [ 139.233465][ T7671] netlink: 60 bytes leftover after parsing attributes in process `syz.3.441'. [ 139.249282][ T7671] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.257996][ T7671] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.284812][ T7695] netlink: 76 bytes leftover after parsing attributes in process `syz.3.441'. [ 139.355977][ T7695] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.363348][ T7695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.370874][ T7695] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.378074][ T7695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.414779][ T7695] netlink: 60 bytes leftover after parsing attributes in process `syz.3.441'. [ 139.448811][ T7695] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.456311][ T7695] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.476355][ T7702] netlink: 24 bytes leftover after parsing attributes in process `syz.0.447'. [ 139.592336][ T5826] Bluetooth: hci4: command 0x0405 tx timeout [ 139.608523][ T7702] netlink: 48 bytes leftover after parsing attributes in process `syz.0.447'. [ 139.826408][ T7717] netlink: 'syz.4.452': attribute type 4 has an invalid length. [ 139.853020][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.454'. [ 139.877833][ T7723] netlink: 'syz.4.452': attribute type 4 has an invalid length. [ 139.891066][ T7724] netlink: 60 bytes leftover after parsing attributes in process `syz.1.453'. [ 139.902001][ T7724] netlink: 60 bytes leftover after parsing attributes in process `syz.1.453'. [ 139.945570][ T7724] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 139.957952][ T7724] pim6reg0: persist disabled [ 140.790919][ T7754] netlink: 20 bytes leftover after parsing attributes in process `syz.1.463'. [ 141.531518][ T7743] vlan2: entered promiscuous mode [ 141.537392][ T7743] bridge0: entered promiscuous mode [ 141.808950][ T7769] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 142.078049][ T7788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.803603][ T7836] netlink: 'syz.2.484': attribute type 10 has an invalid length. [ 142.922077][ T7839] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.082935][ T7870] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 144.366530][ T7890] __nla_validate_parse: 6 callbacks suppressed [ 144.366550][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.498'. [ 144.397106][ T7893] netlink: 16 bytes leftover after parsing attributes in process `syz.1.499'. [ 144.411736][ T7893] netlink: 48 bytes leftover after parsing attributes in process `syz.1.499'. [ 144.481129][ T7897] netlink: 'syz.0.500': attribute type 22 has an invalid length. [ 144.567694][ T7901] netlink: 584 bytes leftover after parsing attributes in process `syz.4.497'. [ 144.835913][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.503'. [ 144.946573][ T7916] netlink: 'syz.2.503': attribute type 62 has an invalid length. [ 145.606903][ T7926] netlink: 'syz.4.507': attribute type 1 has an invalid length. [ 145.628923][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.505'. [ 145.778989][ T7926] bond4: entered promiscuous mode [ 145.786912][ T7926] 8021q: adding VLAN 0 to HW filter on device bond4 [ 145.822002][ T7938] 8021q: VLANs not supported on ip6gre0 [ 145.940001][ T7952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.504'. [ 146.546900][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.517'. [ 146.759741][ T7989] netlink: 'syz.1.521': attribute type 1 has an invalid length. [ 146.879449][ T7981] bridge0: port 3(syz_tun) entered disabled state [ 146.907644][ T7981] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.915477][ T7981] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.925706][ T7996] netlink: 20 bytes leftover after parsing attributes in process `syz.1.521'. [ 147.152949][ T7981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.175603][ T7981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.543133][ T7993] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 147.554443][ T7993] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 147.661076][ T7996] bond2: (slave bridge4): Enslaving as an active interface with a down link [ 147.686963][ T70] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.696446][ T70] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 147.708437][ T70] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.717839][ T70] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 147.760283][ T8005] 8021q: adding VLAN 0 to HW filter on device bond5 [ 147.771428][ T8005] team0: Port device bond5 added [ 147.779509][ T70] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.780260][ T8009] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 147.798976][ T8009] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 147.819023][ T8009] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 147.822756][ T70] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 147.859083][ T70] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.893060][ T70] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 148.005818][ T8021] netlink: 80 bytes leftover after parsing attributes in process `syz.3.527'. [ 148.195064][ T8025] bridge0: port 3(syz_tun) entered blocking state [ 148.201704][ T8025] bridge0: port 3(syz_tun) entered forwarding state [ 148.240049][ T8029] openvswitch: netlink: Message has 2 unknown bytes. [ 148.247630][ T8029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.273610][ T8025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.313137][ T8025] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.360557][ T8025] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 148.858876][ T8049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.913669][ T8049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.089915][ T8061] tipc: Enabled bearer , priority 0 [ 149.100004][ T8061] syzkaller0: entered promiscuous mode [ 149.105568][ T8061] syzkaller0: entered allmulticast mode [ 149.215470][ T8061] tipc: Resetting bearer [ 149.269747][ T8060] tipc: Resetting bearer [ 149.355386][ T8060] tipc: Disabling bearer [ 149.431217][ T8073] __nla_validate_parse: 5 callbacks suppressed [ 149.431236][ T8073] netlink: 104 bytes leftover after parsing attributes in process `syz.2.543'. [ 149.849993][ T8089] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.547'. [ 150.354832][ T8113] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.553'. [ 150.419300][ T8115] netlink: 'syz.0.554': attribute type 6 has an invalid length. [ 150.481709][ T8115] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.554'. [ 150.523693][ T8115] netlink: Unknown conntrack attr (0) [ 150.541820][ T8117] Bluetooth: MGMT ver 1.23 [ 150.569874][ T8120] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 150.706535][ T8127] netlink: 'syz.2.558': attribute type 1 has an invalid length. [ 150.723411][ T8122] bond0: entered promiscuous mode [ 150.728591][ T8122] bond_slave_0: entered promiscuous mode [ 150.751947][ T8122] bond_slave_1: entered promiscuous mode [ 150.779636][ T8122] batadv0: entered promiscuous mode [ 150.804572][ T8122] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 150.827259][ T8122] bond0: left promiscuous mode [ 150.833241][ T8130] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 150.839944][ T8122] bond_slave_0: left promiscuous mode [ 150.853422][ T8122] bond_slave_1: left promiscuous mode [ 150.865203][ T8122] batadv0: left promiscuous mode [ 150.902065][ T8127] bond3: entered promiscuous mode [ 150.911941][ T8127] 8021q: adding VLAN 0 to HW filter on device bond3 [ 150.977393][ T8137] netlink: set zone limit has 4 unknown bytes [ 150.980364][ T8131] bond3: (slave bridge2): making interface the new active one [ 150.993928][ T8131] bridge2: entered promiscuous mode [ 151.001744][ T8131] bridge2: left promiscuous mode [ 151.492645][ T8160] netlink: 16 bytes leftover after parsing attributes in process `syz.1.568'. [ 151.690015][ T8175] netlink: 59 bytes leftover after parsing attributes in process `syz.0.572'. [ 151.779309][ T8179] netlink: 1440 bytes leftover after parsing attributes in process `syz.1.575'. [ 151.826294][ T8179] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 152.300826][ T8199] netlink: 16 bytes leftover after parsing attributes in process `syz.3.580'. [ 152.434307][ T8217] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 152.494199][ T8217] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 153.046685][ T8237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.587'. [ 153.102613][ T8242] netlink: 'syz.3.589': attribute type 1 has an invalid length. [ 153.124154][ T8242] xt_CT: You must specify a L4 protocol and not use inversions on it [ 153.333002][ T8249] tipc: Enabled bearer , priority 0 [ 153.480407][ T8249] syzkaller0: entered promiscuous mode [ 153.523110][ T8249] syzkaller0: entered allmulticast mode [ 153.565774][ T8249] tipc: Resetting bearer [ 153.599878][ T8263] netlink: 3 bytes leftover after parsing attributes in process `syz.4.595'. [ 153.646646][ T8248] tipc: Resetting bearer [ 154.837682][ T8248] tipc: Disabling bearer [ 154.856156][ T8288] __nla_validate_parse: 1 callbacks suppressed [ 154.856174][ T8288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.599'. [ 154.872316][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.598'. [ 155.024774][ T8295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'. [ 155.049524][ T8296] sch_tbf: burst 2 is lower than device tunl0 mtu (1480) ! [ 155.259667][ T8313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.606'. [ 155.288742][ T8315] : entered promiscuous mode [ 155.405105][ T8315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.515370][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.609'. [ 155.542502][ T8332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.612'. [ 155.551381][ T8332] bridge_slave_0: left allmulticast mode [ 155.560871][ T8332] bridge_slave_0: left promiscuous mode [ 155.567944][ T8332] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.712277][ T8321] netlink: 'syz.1.609': attribute type 1 has an invalid length. [ 155.739460][ T8321] netlink: 'syz.1.609': attribute type 2 has an invalid length. [ 155.861203][ T8340] C: renamed from team_slave_0 (while UP) [ 155.886322][ T8340] netlink: 'syz.4.614': attribute type 2 has an invalid length. [ 155.907678][ T8340] netlink: 128 bytes leftover after parsing attributes in process `syz.4.614'. [ 155.933219][ T8340] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 156.014220][ T8344] netlink: 'syz.1.615': attribute type 1 has an invalid length. [ 156.159822][ T8354] openvswitch: netlink: Duplicate or invalid key (type 0). [ 156.167407][ T8354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.178168][ T8332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.612'. [ 156.189066][ T8332] netlink: 336 bytes leftover after parsing attributes in process `syz.2.612'. [ 156.198831][ T8332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.612'. [ 156.395847][ T8363] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 156.646677][ T8372] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 156.707110][ T8375] bridge0: port 3(syz_tun) entered disabled state [ 156.720595][ T8375] syz_tun: refused to change device tx_queue_len [ 157.184499][ T8398] tipc: Started in network mode [ 157.189439][ T8398] tipc: Node identity 22872b2fb51e, cluster identity 4711 [ 157.208087][ T8398] tipc: Enabled bearer , priority 0 [ 157.278369][ T8391] syzkaller0: entered promiscuous mode [ 157.284918][ T8391] syzkaller0: entered allmulticast mode [ 157.292630][ T8395] syzkaller0: entered promiscuous mode [ 157.298279][ T8395] syzkaller0: entered allmulticast mode [ 157.331290][ T8395] tipc: Resetting bearer [ 157.346684][ T8393] tipc: Resetting bearer [ 157.368357][ T8393] tipc: Disabling bearer [ 158.715281][ T8423] netlink: 'syz.0.633': attribute type 1 has an invalid length. [ 158.845078][ T8423] 8021q: adding VLAN 0 to HW filter on device bond6 [ 158.940429][ T8435] bond6: (slave ip6gretap1): making interface the new active one [ 159.000482][ T8435] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 159.146107][ T8438] erspan0: entered allmulticast mode [ 159.164884][ T8438] bond6: (slave erspan0): Enslaving as an active interface with an up link [ 159.165909][ T5895] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 159.414073][ T70] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 159.874035][ T8478] __nla_validate_parse: 9 callbacks suppressed [ 159.874055][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.644'. [ 160.013693][ T8478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.188206][ T8501] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.235027][ T5909] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 160.323861][ T8507] netlink: 'syz.1.651': attribute type 1 has an invalid length. [ 160.362084][ T8507] nbd: error processing sock list [ 160.423769][ T30] audit: type=1107 audit(1770515702.162:2): pid=8511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 160.472455][ T70] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 160.499577][ T30] audit: type=1107 audit(1770515702.212:3): pid=8511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 160.501410][ T8522] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 160.534485][ T70] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 160.724868][ T8531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.656'. [ 160.766391][ T8531] netlink: 20 bytes leftover after parsing attributes in process `syz.0.656'. [ 160.769874][ T8535] sctp: [Deprecated]: syz.1.657 (pid 8535) Use of struct sctp_assoc_value in delayed_ack socket option. [ 160.769874][ T8535] Use struct sctp_sack_info instead [ 160.819040][ T8532] tipc: Enabling of bearer rejected, failed to enable media [ 160.831771][ T5875] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 161.036101][ T8549] netlink: 164348 bytes leftover after parsing attributes in process `syz.4.660'. [ 161.524543][ T8528] infiniband syz1: set active [ 161.554778][ T8528] infiniband syz1: added bond0 [ 161.620425][ T8528] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 161.635197][ T8528] infiniband syz1: Couldn't open port 1 [ 161.745144][ T8528] RDS/IB: syz1: added [ 161.750208][ T8581] netlink: 24 bytes leftover after parsing attributes in process `syz.3.665'. [ 161.770212][ T8584] netlink: 'syz.1.667': attribute type 21 has an invalid length. [ 161.778911][ T8528] smc: adding ib device syz1 with port count 1 [ 161.794271][ T8528] smc: ib device syz1 port 1 has no pnetid [ 161.808903][ T8584] netlink: 'syz.1.667': attribute type 6 has an invalid length. [ 161.823574][ T8584] netlink: 132 bytes leftover after parsing attributes in process `syz.1.667'. [ 162.285106][ T8603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.671'. [ 162.428970][ T8611] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 162.772499][ T8632] netlink: 'syz.3.676': attribute type 49 has an invalid length. [ 162.960691][ T5826] block nbd1: Receive control failed (result -32) [ 163.164019][ T8647] netlink: 60 bytes leftover after parsing attributes in process `syz.1.678'. [ 163.229289][ T8642] netlink: 20 bytes leftover after parsing attributes in process `syz.3.677'. [ 163.597712][ T8659] netlink: 'syz.3.681': attribute type 10 has an invalid length. [ 163.605843][ T8660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.682'. [ 163.827294][ T8659] bond0: entered promiscuous mode [ 163.836089][ T8659] bond_slave_0: entered promiscuous mode [ 163.854933][ T8659] bond_slave_1: entered promiscuous mode [ 163.875597][ T8659] bridge0: port 3(bond0) entered blocking state [ 163.891806][ T8659] bridge0: port 3(bond0) entered disabled state [ 163.914422][ T8659] bond0: entered allmulticast mode [ 163.924352][ T8659] bond_slave_0: entered allmulticast mode [ 163.947138][ T8659] bond_slave_1: entered allmulticast mode [ 164.175415][ T8680] netlink: 'syz.3.686': attribute type 1 has an invalid length. [ 164.743808][ T8701] openvswitch: netlink: Flow actions attr not present in new flow. [ 164.791940][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 165.111750][ T8716] geneve3: entered promiscuous mode [ 165.133645][ T8716] geneve3: entered allmulticast mode [ 165.674453][ T8739] __nla_validate_parse: 1 callbacks suppressed [ 165.674473][ T8739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.697'. [ 165.957850][ T8755] netlink: 20 bytes leftover after parsing attributes in process `syz.1.702'. [ 165.991835][ T8755] netlink: 20 bytes leftover after parsing attributes in process `syz.1.702'. [ 166.041817][ T8760] netlink: 'syz.2.703': attribute type 10 has an invalid length. [ 166.099108][ T8760] netlink: 40 bytes leftover after parsing attributes in process `syz.2.703'. [ 166.247088][ T8760] team0: Port device geneve0 added [ 166.457800][ T8775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.707'. [ 166.508249][ T8775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.538705][ T8784] netlink: 'syz.1.710': attribute type 1 has an invalid length. [ 166.623559][ T8775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.788074][ T8784] bond4: entered promiscuous mode [ 166.793748][ T8784] 8021q: adding VLAN 0 to HW filter on device bond4 [ 166.825997][ T8789] bond4: (slave bridge6): making interface the new active one [ 166.838393][ T8789] bridge6: entered promiscuous mode [ 166.847068][ T8789] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 167.022130][ T5895] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 167.053930][ T8806] netlink: 44 bytes leftover after parsing attributes in process `syz.3.713'. [ 167.064226][ T8806] netlink: 44 bytes leftover after parsing attributes in process `syz.3.713'. [ 167.201895][ T5909] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 167.222534][ T8813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.712'. [ 167.570118][ T8831] netlink: 24 bytes leftover after parsing attributes in process `syz.4.718'. [ 167.922342][ T5895] IPVS: starting estimator thread 0... [ 168.032835][ T8855] IPVS: using max 25 ests per chain, 60000 per kthread [ 168.131360][ T8862] tipc: Enabled bearer , priority 0 [ 168.177397][ T8861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.726'. [ 168.213951][ T8860] tipc: Disabling bearer [ 169.487916][ T8911] tipc: Enabled bearer , priority 0 [ 169.623227][ T8911] tipc: Disabling bearer [ 170.327801][ T8943] syzkaller0: entered promiscuous mode [ 170.340849][ T8943] syzkaller0: entered allmulticast mode [ 170.696153][ T8951] netlink: 'syz.3.746': attribute type 15 has an invalid length. [ 170.994452][ T8967] __nla_validate_parse: 1 callbacks suppressed [ 170.994468][ T8967] netlink: 112 bytes leftover after parsing attributes in process `syz.2.750'. [ 171.286807][ T8979] erspan0: left allmulticast mode [ 171.354836][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.752'. [ 171.388400][ T8980] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.443214][ T8981] ip6_vti0 speed is unknown, defaulting to 1000 [ 171.452707][ T50] bond6: (slave erspan0): link status definitely down, disabling slave [ 171.487394][ T50] ip6gretap1: entered promiscuous mode [ 171.526069][ T8981] ip6_vti0 speed is unknown, defaulting to 1000 [ 171.570746][ T8981] ip6_vti0 speed is unknown, defaulting to 1000 [ 171.770478][ T8980] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.956746][ T8980] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.042141][ T9021] netlink: 76 bytes leftover after parsing attributes in process `syz.4.760'. [ 172.155675][ T8980] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.286286][ T8981] infiniband syz2: set down [ 172.290979][ T5895] ip6_vti0 speed is unknown, defaulting to 1000 [ 172.298381][ T8981] infiniband syz2: added ip6_vti0 [ 172.317548][ T8981] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 172.325304][ T8981] infiniband syz2: Couldn't open port 1 [ 172.385949][ T8981] RDS/IB: syz2: added [ 172.393550][ T8981] smc: adding ib device syz2 with port count 1 [ 172.399857][ T1337] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.409112][ T8981] smc: ib device syz2 port 1 has no pnetid [ 172.437802][ T1337] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.444104][ T5895] ip6_vti0 speed is unknown, defaulting to 1000 [ 172.478185][ T8981] ip6_vti0 speed is unknown, defaulting to 1000 [ 172.478201][ T1337] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.499445][ T1337] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.808247][ T9034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.763'. [ 172.831123][ T9034] netlink: 60 bytes leftover after parsing attributes in process `syz.2.763'. [ 172.904024][ T9034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.763'. [ 173.005172][ T8981] ip6_vti0 speed is unknown, defaulting to 1000 [ 173.031888][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 173.238731][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.766'. [ 173.508452][ T8981] ip6_vti0 speed is unknown, defaulting to 1000 [ 173.841258][ T9038] ip6_vti0 speed is unknown, defaulting to 1000 [ 174.154643][ T8981] ip6_vti0 speed is unknown, defaulting to 1000 [ 174.494569][ T9042] ip6_vti0 speed is unknown, defaulting to 1000 [ 174.711027][ T8981] ip6_vti0 speed is unknown, defaulting to 1000 [ 174.798913][ T9057] veth3: entered promiscuous mode [ 175.425749][ T9076] ip6gre1: entered promiscuous mode [ 175.431114][ T9076] ip6gre1: entered allmulticast mode [ 175.608237][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.617681][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.638883][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.656275][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.710214][ T9084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.926296][ T9097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.777'. [ 175.950716][ T9089] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 176.084996][ T9101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.780'. [ 176.115813][ T9101] xfrm2: entered promiscuous mode [ 176.120879][ T9101] xfrm2: entered allmulticast mode [ 176.127862][ T9101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.780'. [ 176.387268][ T9093] ip6_vti0 speed is unknown, defaulting to 1000 [ 176.603171][ T9115] netlink: 'syz.3.785': attribute type 3 has an invalid length. [ 176.789659][ T9132] netlink: 88 bytes leftover after parsing attributes in process `syz.2.787'. [ 176.874051][ T9138] netlink: 36 bytes leftover after parsing attributes in process `syz.1.790'. [ 176.891659][ T9139] netlink: 'syz.3.788': attribute type 13 has an invalid length. [ 176.901900][ T9139] netlink: 14589 bytes leftover after parsing attributes in process `syz.3.788'. [ 177.129185][ T9145] netlink: 28 bytes leftover after parsing attributes in process `syz.3.791'. [ 177.273982][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.793'. [ 177.299582][ T9149] netlink: 'syz.3.793': attribute type 29 has an invalid length. [ 177.322000][ T9149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.793'. [ 177.338008][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.793'. [ 177.368671][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.794'. [ 177.498023][ T9154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.518118][ T9154] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.542048][ T9154] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.565365][ T9130] ip6_vti0 speed is unknown, defaulting to 1000 [ 178.008009][ T9137] ip6_vti0 speed is unknown, defaulting to 1000 [ 178.343685][ T9178] veth5: entered promiscuous mode [ 178.435834][ T9169] ip6_vti0 speed is unknown, defaulting to 1000 [ 178.947391][ T9186] trusted_key: syz.1.805 sent an empty control message without MSG_MORE. [ 182.702061][ T6295] ip6gretap1: left promiscuous mode [ 189.032485][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 194.154854][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.161266][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.471776][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 206.471824][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 206.485082][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 220.391809][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 240.109289][ T9199] syz_tun: entered allmulticast mode [ 240.124552][ T9199] __nla_validate_parse: 2 callbacks suppressed [ 240.124570][ T9199] netlink: 16 bytes leftover after parsing attributes in process `syz.2.808'. [ 240.195917][ T9204] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 240.210384][ T9204] bond5 (unregistering): Released all slaves [ 240.221484][ T9211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.811'. [ 240.227142][ T9212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.812'. [ 240.241210][ T9212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.812'. [ 240.383336][ T9211] 8021q: adding VLAN 0 to HW filter on device bond7 [ 240.404366][ T9217] bond7: option miimon: invalid value (18446744071562067968) [ 240.421292][ T9217] bond7: option miimon: allowed values 0 - 2147483647 [ 240.430733][ T9195] syz_tun: left allmulticast mode [ 240.449799][ T9224] siw: device registration error -23 [ 240.675882][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.816'. [ 240.688127][ T9233] netlink: 36 bytes leftover after parsing attributes in process `syz.2.816'. [ 240.854917][ T9242] netlink: 28 bytes leftover after parsing attributes in process `syz.4.814'. [ 241.043325][ T9254] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.820'. [ 241.300771][ T9271] netlink: 52 bytes leftover after parsing attributes in process `syz.4.826'. [ 241.395184][ T9271] netlink: 'syz.4.826': attribute type 11 has an invalid length. [ 241.411577][ T9271] netlink: 199788 bytes leftover after parsing attributes in process `syz.4.826'. [ 241.558889][ T9264] ip6_vti0 speed is unknown, defaulting to 1000 [ 241.844859][ T9283] geneve4: entered promiscuous mode [ 241.873320][ T9283] geneve4: entered allmulticast mode [ 241.899255][ T9287] sctp: [Deprecated]: syz.0.830 (pid 9287) Use of struct sctp_assoc_value in delayed_ack socket option. [ 241.899255][ T9287] Use struct sctp_sack_info instead [ 242.609013][ T9321] netlink: 'syz.3.841': attribute type 32 has an invalid length. [ 242.919289][ T9330] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 242.934865][ T9331] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 243.103388][ T9347] netlink: 'syz.1.850': attribute type 9 has an invalid length. [ 243.135062][ T9347] netlink: 'syz.1.850': attribute type 11 has an invalid length. [ 243.159687][ T9347] netlink: 'syz.1.850': attribute type 12 has an invalid length. [ 243.504077][ T9361] vlan2: entered promiscuous mode [ 243.509243][ T9361] geneve1: entered promiscuous mode [ 244.869703][ T9409] ip6_vti0 speed is unknown, defaulting to 1000 [ 245.388313][ T9423] __nla_validate_parse: 16 callbacks suppressed [ 245.388332][ T9423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.868'. [ 245.420951][ T9423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.868'. [ 246.986642][ T9384] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 246.996348][ T9395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.863'. [ 247.316293][ T9449] netlink: 36 bytes leftover after parsing attributes in process `syz.4.875'. [ 247.340329][ T9449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.875'. [ 247.349485][ T9451] xt_hashlimit: size too large, truncated to 1048576 [ 247.470211][ T9438] netlink: 'syz.1.872': attribute type 1 has an invalid length. [ 247.593844][ T9461] netlink: 'syz.4.879': attribute type 1 has an invalid length. [ 248.315495][ T9497] FAULT_INJECTION: forcing a failure. [ 248.315495][ T9497] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 248.366838][ T9497] CPU: 1 UID: 0 PID: 9497 Comm: syz.2.889 Not tainted syzkaller #0 PREEMPT(full) [ 248.366865][ T9497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 248.366892][ T9497] Call Trace: [ 248.366899][ T9497] [ 248.366907][ T9497] dump_stack_lvl+0xe8/0x150 [ 248.366938][ T9497] should_fail_ex+0x412/0x560 [ 248.366967][ T9497] _copy_from_user+0x2d/0xb0 [ 248.366996][ T9497] ___sys_sendmsg+0x1c6/0x360 [ 248.367029][ T9497] ? __lock_acquire+0x6b5/0x2cf0 [ 248.367059][ T9497] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.367119][ T9497] ? __fget_files+0x2a/0x420 [ 248.367140][ T9497] ? __fget_files+0x3a0/0x420 [ 248.367172][ T9497] __x64_sys_sendmsg+0x1bd/0x2a0 [ 248.367200][ T9497] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 248.367252][ T9497] ? __pfx_ksys_write+0x10/0x10 [ 248.367294][ T9497] do_syscall_64+0xe2/0xf80 [ 248.367322][ T9497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.367339][ T9497] ? trace_irq_disable+0x37/0x100 [ 248.367359][ T9497] ? clear_bhb_loop+0x60/0xb0 [ 248.367382][ T9497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.367401][ T9497] RIP: 0033:0x7f2e93f9aeb9 [ 248.367419][ T9497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.367434][ T9497] RSP: 002b:00007f2e94e95028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.367455][ T9497] RAX: ffffffffffffffda RBX: 00007f2e94215fa0 RCX: 00007f2e93f9aeb9 [ 248.367468][ T9497] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003 [ 248.367481][ T9497] RBP: 00007f2e94e95090 R08: 0000000000000000 R09: 0000000000000000 [ 248.367491][ T9497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.367500][ T9497] R13: 00007f2e94216038 R14: 00007f2e94215fa0 R15: 00007fffa7f88ee8 [ 248.367530][ T9497] [ 248.764738][ T9517] netlink: 156 bytes leftover after parsing attributes in process `syz.1.895'. [ 248.863283][ T9521] netlink: 16 bytes leftover after parsing attributes in process `syz.2.896'. [ 248.896889][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.898'. [ 248.952586][ T9531] workqueue: name exceeds WQ_NAME_LEN. Truncating to: π,xb)% ]3DL̥ [ 249.383641][ T9553] netlink: 120 bytes leftover after parsing attributes in process `syz.3.902'. [ 249.431239][ T9553] Cannot find add_set index 0 as target [ 249.520056][ T9508] ip6_vti0 speed is unknown, defaulting to 1000 [ 249.684344][ T9568] FAULT_INJECTION: forcing a failure. [ 249.684344][ T9568] name failslab, interval 1, probability 0, space 0, times 1 [ 249.737302][ T9572] netlink: 'syz.0.907': attribute type 1 has an invalid length. [ 249.758370][ T9568] CPU: 0 UID: 0 PID: 9568 Comm: syz.3.906 Not tainted syzkaller #0 PREEMPT(full) [ 249.758399][ T9568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 249.758412][ T9568] Call Trace: [ 249.758421][ T9568] [ 249.758430][ T9568] dump_stack_lvl+0xe8/0x150 [ 249.758463][ T9568] should_fail_ex+0x412/0x560 [ 249.758494][ T9568] should_failslab+0xa8/0x100 [ 249.758520][ T9568] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 249.758553][ T9568] ? __alloc_skb+0x186/0x7d0 [ 249.758577][ T9568] ? __alloc_skb+0x1d0/0x7d0 [ 249.758600][ T9568] ? __local_bh_enable_ip+0xd0/0x130 [ 249.758625][ T9568] __alloc_skb+0x1d0/0x7d0 [ 249.758656][ T9568] netlink_sendmsg+0x5d4/0xb40 [ 249.758691][ T9568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.758719][ T9568] ? aa_sock_msg_perm+0xf1/0x1b0 [ 249.758747][ T9568] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 249.758771][ T9568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.758794][ T9568] ____sys_sendmsg+0xa68/0xad0 [ 249.758823][ T9568] ? __might_fault+0xaf/0x130 [ 249.758860][ T9568] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.758906][ T9568] ? import_iovec+0x73/0xa0 [ 249.758941][ T9568] ___sys_sendmsg+0x2a5/0x360 [ 249.758969][ T9568] ? __lock_acquire+0x6b5/0x2cf0 [ 249.759003][ T9568] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.759071][ T9568] ? __fget_files+0x2a/0x420 [ 249.759093][ T9568] ? __fget_files+0x3a0/0x420 [ 249.759126][ T9568] __x64_sys_sendmsg+0x1bd/0x2a0 [ 249.759160][ T9568] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 249.759199][ T9568] ? __pfx_ksys_write+0x10/0x10 [ 249.759242][ T9568] do_syscall_64+0xe2/0xf80 [ 249.759271][ T9568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.759290][ T9568] ? trace_irq_disable+0x37/0x100 [ 249.759309][ T9568] ? clear_bhb_loop+0x60/0xb0 [ 249.759334][ T9568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.759354][ T9568] RIP: 0033:0x7faa4759aeb9 [ 249.759378][ T9568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.759395][ T9568] RSP: 002b:00007faa4851b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.759416][ T9568] RAX: ffffffffffffffda RBX: 00007faa47815fa0 RCX: 00007faa4759aeb9 [ 249.759431][ T9568] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003 [ 249.759444][ T9568] RBP: 00007faa4851b090 R08: 0000000000000000 R09: 0000000000000000 [ 249.759457][ T9568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.759468][ T9568] R13: 00007faa47816038 R14: 00007faa47815fa0 R15: 00007fff20b3acf8 [ 249.759503][ T9568] [ 250.012971][ T9572] netlink: 'syz.0.907': attribute type 2 has an invalid length. [ 250.185588][ T9579] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 251.101366][ T9622] netlink: 'syz.0.920': attribute type 33 has an invalid length. [ 251.129670][ T9627] netlink: 104 bytes leftover after parsing attributes in process `syz.2.921'. [ 251.173851][ T9622] netlink: 100 bytes leftover after parsing attributes in process `syz.0.920'. [ 251.188691][ T9625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.922'. [ 251.226793][ T9625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.922'. [ 251.390812][ T9636] netlink: 256 bytes leftover after parsing attributes in process `syz.2.925'. [ 251.466368][ T9636] pim6reg: entered allmulticast mode [ 251.493693][ T9636] pim6reg: left allmulticast mode [ 251.711038][ T9652] FAULT_INJECTION: forcing a failure. [ 251.711038][ T9652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.725312][ T9652] CPU: 0 UID: 0 PID: 9652 Comm: syz.0.931 Not tainted syzkaller #0 PREEMPT(full) [ 251.725339][ T9652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 251.725352][ T9652] Call Trace: [ 251.725359][ T9652] [ 251.725368][ T9652] dump_stack_lvl+0xe8/0x150 [ 251.725398][ T9652] should_fail_ex+0x412/0x560 [ 251.725428][ T9652] _copy_from_iter+0x1d3/0x1670 [ 251.725478][ T9652] ? rcu_is_watching+0x15/0xb0 [ 251.725500][ T9652] ? __pfx__copy_from_iter+0x10/0x10 [ 251.725524][ T9652] ? kmem_cache_alloc_node_noprof+0x473/0x6f0 [ 251.725573][ T9652] ? netlink_sendmsg+0x650/0xb40 [ 251.725596][ T9652] ? skb_put+0x11b/0x210 [ 251.725625][ T9652] netlink_sendmsg+0x6c0/0xb40 [ 251.725658][ T9652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.725685][ T9652] ? aa_sock_msg_perm+0xf1/0x1b0 [ 251.725712][ T9652] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 251.725746][ T9652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.725768][ T9652] ____sys_sendmsg+0xa68/0xad0 [ 251.725794][ T9652] ? __might_fault+0xaf/0x130 [ 251.725827][ T9652] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.725862][ T9652] ? import_iovec+0x73/0xa0 [ 251.725893][ T9652] ___sys_sendmsg+0x2a5/0x360 [ 251.725918][ T9652] ? __lock_acquire+0x6b5/0x2cf0 [ 251.725948][ T9652] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.726008][ T9652] ? __fget_files+0x2a/0x420 [ 251.726029][ T9652] ? __fget_files+0x3a0/0x420 [ 251.726059][ T9652] __x64_sys_sendmsg+0x1bd/0x2a0 [ 251.726089][ T9652] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 251.726124][ T9652] ? __pfx_ksys_write+0x10/0x10 [ 251.726163][ T9652] do_syscall_64+0xe2/0xf80 [ 251.726190][ T9652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.726207][ T9652] ? trace_irq_disable+0x37/0x100 [ 251.726225][ T9652] ? clear_bhb_loop+0x60/0xb0 [ 251.726248][ T9652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.726266][ T9652] RIP: 0033:0x7fa5a6f9aeb9 [ 251.726283][ T9652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.726298][ T9652] RSP: 002b:00007fa5a7e9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.726318][ T9652] RAX: ffffffffffffffda RBX: 00007fa5a7215fa0 RCX: 00007fa5a6f9aeb9 [ 251.726331][ T9652] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003 [ 251.726344][ T9652] RBP: 00007fa5a7e9c090 R08: 0000000000000000 R09: 0000000000000000 [ 251.726355][ T9652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.726366][ T9652] R13: 00007fa5a7216038 R14: 00007fa5a7215fa0 R15: 00007ffc44906fe8 [ 251.726396][ T9652] [ 252.382153][ T9699] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 252.566784][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.941'. [ 252.576941][ T9710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.941'. [ 252.593914][ T9659] ip6_vti0 speed is unknown, defaulting to 1000 [ 252.596493][ T9710] netlink: 'syz.0.941': attribute type 14 has an invalid length. [ 252.632007][ T9715] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 252.637676][ T9710] netlink: 'syz.0.941': attribute type 11 has an invalid length. [ 252.781663][ T9720] netlink: 72 bytes leftover after parsing attributes in process `syz.3.943'. [ 252.815128][ T9720] x_tables: duplicate underflow at hook 1 [ 252.912578][ T9725] FAULT_INJECTION: forcing a failure. [ 252.912578][ T9725] name failslab, interval 1, probability 0, space 0, times 0 [ 252.950939][ T9725] CPU: 0 UID: 0 PID: 9725 Comm: syz.4.945 Not tainted syzkaller #0 PREEMPT(full) [ 252.950962][ T9725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 252.950971][ T9725] Call Trace: [ 252.950977][ T9725] [ 252.950984][ T9725] dump_stack_lvl+0xe8/0x150 [ 252.951010][ T9725] should_fail_ex+0x412/0x560 [ 252.951037][ T9725] should_failslab+0xa8/0x100 [ 252.951059][ T9725] kmem_cache_alloc_noprof+0x87/0x6e0 [ 252.951102][ T9725] ? __netlink_lookup+0xc6/0x8b0 [ 252.951128][ T9725] ? skb_clone+0x212/0x3a0 [ 252.951162][ T9725] skb_clone+0x212/0x3a0 [ 252.951196][ T9725] __netlink_deliver_tap+0x404/0x850 [ 252.951233][ T9725] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.951257][ T9725] netlink_deliver_tap+0x19c/0x1b0 [ 252.951282][ T9725] netlink_unicast+0x7e3/0x9b0 [ 252.951312][ T9725] ? __pfx_netlink_unicast+0x10/0x10 [ 252.951335][ T9725] ? netlink_sendmsg+0x650/0xb40 [ 252.951356][ T9725] ? skb_put+0x11b/0x210 [ 252.951386][ T9725] netlink_sendmsg+0x813/0xb40 [ 252.951421][ T9725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.951449][ T9725] ? aa_sock_msg_perm+0xf1/0x1b0 [ 252.951476][ T9725] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 252.951504][ T9725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.951527][ T9725] ____sys_sendmsg+0xa68/0xad0 [ 252.951555][ T9725] ? __might_fault+0xaf/0x130 [ 252.951593][ T9725] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.951641][ T9725] ? import_iovec+0x73/0xa0 [ 252.951677][ T9725] ___sys_sendmsg+0x2a5/0x360 [ 252.951704][ T9725] ? __lock_acquire+0x6b5/0x2cf0 [ 252.951738][ T9725] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.951806][ T9725] ? __fget_files+0x2a/0x420 [ 252.951828][ T9725] ? __fget_files+0x3a0/0x420 [ 252.951863][ T9725] __x64_sys_sendmsg+0x1bd/0x2a0 [ 252.951897][ T9725] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 252.951935][ T9725] ? __pfx_ksys_write+0x10/0x10 [ 252.951979][ T9725] do_syscall_64+0xe2/0xf80 [ 252.952009][ T9725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.952029][ T9725] ? trace_irq_disable+0x37/0x100 [ 252.952050][ T9725] ? clear_bhb_loop+0x60/0xb0 [ 252.952075][ T9725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.952095][ T9725] RIP: 0033:0x7f4c3cb9aeb9 [ 252.952113][ T9725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.952129][ T9725] RSP: 002b:00007f4c3da72028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.952151][ T9725] RAX: ffffffffffffffda RBX: 00007f4c3ce15fa0 RCX: 00007f4c3cb9aeb9 [ 252.952165][ T9725] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003 [ 252.952178][ T9725] RBP: 00007f4c3da72090 R08: 0000000000000000 R09: 0000000000000000 [ 252.952203][ T9725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.952214][ T9725] R13: 00007f4c3ce16038 R14: 00007f4c3ce15fa0 R15: 00007ffcc8189368 [ 252.952248][ T9725] [ 253.034070][ T9732] netlink: 16 bytes leftover after parsing attributes in process `syz.2.947'. [ 253.500572][ T9745] syzkaller1: entered promiscuous mode [ 253.508196][ T9745] syzkaller1: entered allmulticast mode [ 253.641829][ T9752] netlink: 28 bytes leftover after parsing attributes in process `syz.2.952'. [ 253.681043][ T9745] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 253.700823][ T9745] bond4 (unregistering): Released all slaves [ 253.783341][ T9752] tipc: Enabling of bearer rejected, failed to enable media [ 253.961934][ T9757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.043347][ T9757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.156519][ T9757] xt_CT: No such helper "pptp" [ 254.168605][ T9756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.169784][ T9762] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 254.213343][ T9767] macsec1: entered promiscuous mode [ 254.218821][ T9767] macsec1: entered allmulticast mode [ 254.380187][ T9776] FAULT_INJECTION: forcing a failure. [ 254.380187][ T9776] name failslab, interval 1, probability 0, space 0, times 0 [ 254.398561][ T9776] CPU: 1 UID: 0 PID: 9776 Comm: syz.1.962 Not tainted syzkaller #0 PREEMPT(full) [ 254.398596][ T9776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 254.398607][ T9776] Call Trace: [ 254.398614][ T9776] [ 254.398622][ T9776] dump_stack_lvl+0xe8/0x150 [ 254.398668][ T9776] should_fail_ex+0x412/0x560 [ 254.398695][ T9776] should_failslab+0xa8/0x100 [ 254.398716][ T9776] kmem_cache_alloc_noprof+0x87/0x6e0 [ 254.398744][ T9776] ? ovs_flow_alloc+0x24/0x1f0 [ 254.398773][ T9776] ovs_flow_alloc+0x24/0x1f0 [ 254.398792][ T9776] ovs_flow_cmd_new+0x2b9/0xe80 [ 254.398813][ T9776] ? stack_depot_save_flags+0x33/0x810 [ 254.398841][ T9776] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 254.398900][ T9776] ? rcu_is_watching+0x15/0xb0 [ 254.398920][ T9776] ? __nla_parse+0x40/0x60 [ 254.398946][ T9776] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 254.398979][ T9776] genl_family_rcv_msg_doit+0x22a/0x330 [ 254.399009][ T9776] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 254.399043][ T9776] ? bpf_lsm_capable+0x9/0x20 [ 254.399065][ T9776] ? security_capable+0x7e/0x2c0 [ 254.399111][ T9776] genl_rcv_msg+0x61c/0x7a0 [ 254.399141][ T9776] ? __pfx_genl_rcv_msg+0x10/0x10 [ 254.399166][ T9776] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 254.399212][ T9776] netlink_rcv_skb+0x232/0x4b0 [ 254.399232][ T9776] ? __pfx_genl_rcv_msg+0x10/0x10 [ 254.399265][ T9776] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 254.399283][ T9776] ? genl_rcv+0x19/0x40 [ 254.399325][ T9776] ? down_read+0x272/0x2e0 [ 254.399340][ T9776] ? genl_rcv+0xd/0x40 [ 254.399367][ T9776] genl_rcv+0x28/0x40 [ 254.399391][ T9776] netlink_unicast+0x80f/0x9b0 [ 254.399419][ T9776] ? __pfx_netlink_unicast+0x10/0x10 [ 254.399439][ T9776] ? netlink_sendmsg+0x650/0xb40 [ 254.399458][ T9776] ? skb_put+0x11b/0x210 [ 254.399506][ T9776] netlink_sendmsg+0x813/0xb40 [ 254.399550][ T9776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.399576][ T9776] ? aa_sock_msg_perm+0xf1/0x1b0 [ 254.399600][ T9776] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 254.399621][ T9776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.399642][ T9776] ____sys_sendmsg+0xa68/0xad0 [ 254.399668][ T9776] ? __might_fault+0xaf/0x130 [ 254.399702][ T9776] ? __pfx_____sys_sendmsg+0x10/0x10 [ 254.399736][ T9776] ? import_iovec+0x73/0xa0 [ 254.399768][ T9776] ___sys_sendmsg+0x2a5/0x360 [ 254.399793][ T9776] ? __lock_acquire+0x6b5/0x2cf0 [ 254.399823][ T9776] ? __pfx____sys_sendmsg+0x10/0x10 [ 254.399885][ T9776] ? __fget_files+0x2a/0x420 [ 254.399905][ T9776] ? __fget_files+0x3a0/0x420 [ 254.399935][ T9776] __x64_sys_sendmsg+0x1bd/0x2a0 [ 254.399964][ T9776] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 254.400000][ T9776] ? __pfx_ksys_write+0x10/0x10 [ 254.400039][ T9776] do_syscall_64+0xe2/0xf80 [ 254.400063][ T9776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.400080][ T9776] ? trace_irq_disable+0x37/0x100 [ 254.400097][ T9776] ? clear_bhb_loop+0x60/0xb0 [ 254.400119][ T9776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.400136][ T9776] RIP: 0033:0x7fcf9519aeb9 [ 254.400153][ T9776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.400168][ T9776] RSP: 002b:00007fcf960d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.400188][ T9776] RAX: ffffffffffffffda RBX: 00007fcf95415fa0 RCX: 00007fcf9519aeb9 [ 254.400201][ T9776] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003 [ 254.400213][ T9776] RBP: 00007fcf960d6090 R08: 0000000000000000 R09: 0000000000000000 [ 254.400224][ T9776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.400234][ T9776] R13: 00007fcf95416038 R14: 00007fcf95415fa0 R15: 00007fff9acd2fe8 [ 254.400271][ T9776] [ 254.823166][ T9772] tipc: MTU too low for tipc bearer [ 254.858837][ T9781] veth7: entered promiscuous mode [ 254.965194][ T9696] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 255.319133][ T50] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 255.427359][ T9811] netlink: 'syz.3.975': attribute type 4 has an invalid length. [ 255.452454][ T9810] gretap1: entered promiscuous mode [ 255.543272][ T9696] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 255.597550][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.607644][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.661596][ T50] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.700848][ T50] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.737798][ T50] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.794176][ T50] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.862596][ T9828] xt_l2tp: unknown flags: 51 [ 256.008695][ T9820] ip6_vti0 speed is unknown, defaulting to 1000 [ 256.246166][ T9836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.281297][ T9836] bridge0: port 3(bond0) entered blocking state [ 256.287822][ T9836] bridge0: port 3(bond0) entered forwarding state [ 256.294870][ T9836] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.302064][ T9836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.309610][ T9836] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.316780][ T9836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.340906][ T9840] netlink: 'syz.4.983': attribute type 13 has an invalid length. [ 256.461167][ T9848] netlink: 'syz.0.985': attribute type 1 has an invalid length. [ 256.607396][ T9859] IPVS: set_ctl: invalid protocol: 29 172.20.20.60:20004 [ 256.619760][ T50] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 256.629588][ T50] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 257.001739][ T9696] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 257.108873][ T9864] IPVS: set_ctl: invalid protocol: 4 172.20.20.46:20004 [ 257.385593][ T9818] ip6_vti0 speed is unknown, defaulting to 1000 [ 257.742973][ T9887] tipc: Enabling of bearer rejected, failed to enable media [ 257.769840][ T9887] __nla_validate_parse: 11 callbacks suppressed [ 257.769856][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.993'. [ 257.829685][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.990'. [ 257.843630][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 257.856076][ C1] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected! [ 258.201043][ T9892] Cannot find add_set index 2 as target [ 258.520235][ T9908] ip6gretap0: entered promiscuous mode [ 258.531857][ T9908] macsec1: entered promiscuous mode [ 258.561821][ T9908] macsec1: entered allmulticast mode [ 258.567181][ T9908] ip6gretap0: entered allmulticast mode [ 258.612121][ T9912] netlink: 'syz.1.1001': attribute type 1 has an invalid length. [ 258.631094][ T9908] ip6gretap0: left allmulticast mode [ 258.648111][ T9908] ip6gretap0: left promiscuous mode [ 258.688698][ T9912] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1001'. [ 258.705562][ T9912] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1001'. [ 258.800640][ T9909] pim6reg99999999: entered allmulticast mode [ 259.110015][ T9922] syzkaller0: entered promiscuous mode [ 259.124393][ T9922] syzkaller0: entered allmulticast mode [ 259.148357][ T9920] netlink: 87 bytes leftover after parsing attributes in process `syz.4.1002'. [ 259.161592][ T9924] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1004'. [ 259.171030][ T9924] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1004'. [ 259.281672][ T9922] syzkaller1: entered promiscuous mode [ 259.289266][ T9922] syzkaller1: entered allmulticast mode [ 259.492602][ T9933] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.586175][ T9933] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.675602][ T9933] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.782247][ T9933] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.827178][ T9947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1009'. [ 259.882106][ T9947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1009'. [ 259.897097][ T9947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1009'. [ 260.033910][ T50] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.077281][ T70] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.140849][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.187252][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.219889][ T9964] lo: Caught tx_queue_len zero misconfig [ 260.282844][ T9968] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20003 [ 260.561976][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 260.590105][ T9973] batadv0: entered promiscuous mode [ 260.597094][ T9973] bridge0: entered promiscuous mode [ 260.712597][ C0] [ 260.715063][ C0] ============================================ [ 260.721228][ C0] WARNING: possible recursive locking detected [ 260.727408][ C0] syzkaller #0 Not tainted [ 260.731836][ C0] -------------------------------------------- [ 260.738007][ C0] syz-executor/5829 is trying to acquire lock: [ 260.744173][ C0] ffff88807b6f0f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 260.753266][ C0] [ 260.753266][ C0] but task is already holding lock: [ 260.760646][ C0] ffff88807dec0f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 260.770972][ C0] [ 260.770972][ C0] other info that might help us debug this: [ 260.779059][ C0] Possible unsafe locking scenario: [ 260.779059][ C0] [ 260.786528][ C0] CPU0 [ 260.789858][ C0] ---- [ 260.793176][ C0] lock(&hsr->seqnr_lock); [ 260.797727][ C0] lock(&hsr->seqnr_lock); [ 260.802268][ C0] [ 260.802268][ C0] *** DEADLOCK *** [ 260.802268][ C0] [ 260.810424][ C0] May be due to missing lock nesting notation [ 260.810424][ C0] [ 260.818765][ C0] 15 locks held by syz-executor/5829: [ 260.824151][ C0] #0: ffffffff8e624530 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x130/0x4b0 [ 260.832899][ C0] #1: ffff888079867180 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x153/0x1bb0 [ 260.841992][ C0] #2: ffff88807e92f180 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x233/0x1bb0 [ 260.851275][ C0] #3: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: ___pte_offset_map+0x29/0x240 [ 260.860912][ C0] #4: ffff88807ab33f18 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: __pte_offset_map_lock+0x13d/0x210 [ 260.871631][ C0] #5: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: ___pte_offset_map+0x29/0x240 [ 260.881276][ C0] #6: ffff888031c50918 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6e8/0x8030 [ 260.891635][ C0] #7: ffffc90000007ce0 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x5a0 [ 260.901728][ C0] #8: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x89/0x370 [ 260.910925][ C0] #9: ffff88807dec0f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 260.921680][ C0] #10: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb3/0x2860 [ 260.931314][ C0] #11: ffffffff8e55a3c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x3850 [ 260.941385][ C0] #12: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1920 [ 260.950749][ C0] #13: ffffffff8e55a3c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x3850 [ 260.960823][ C0] #14: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 260.970141][ C0] [ 260.970141][ C0] stack backtrace: [ 260.976026][ C0] CPU: 0 UID: 0 PID: 5829 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 260.976043][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 260.976052][ C0] Call Trace: [ 260.976057][ C0] [ 260.976062][ C0] dump_stack_lvl+0xe8/0x150 [ 260.976081][ C0] print_deadlock_bug+0x279/0x290 [ 260.976096][ C0] __lock_acquire+0x253f/0x2cf0 [ 260.976119][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 260.976138][ C0] ? lock_release+0x4b/0x3a0 [ 260.976158][ C0] ? hsr_dev_xmit+0x237/0x360 [ 260.976170][ C0] lock_acquire+0x106/0x330 [ 260.976187][ C0] ? hsr_dev_xmit+0x237/0x360 [ 260.976204][ C0] ? hsr_dev_xmit+0x237/0x360 [ 260.976216][ C0] _raw_spin_lock_bh+0x36/0x50 [ 260.976232][ C0] ? hsr_dev_xmit+0x237/0x360 [ 260.976245][ C0] hsr_dev_xmit+0x237/0x360 [ 260.976257][ C0] ? hsr_dev_xmit+0x2d/0x360 [ 260.976270][ C0] dev_hard_start_xmit+0x2cd/0x7f0 [ 260.976297][ C0] __dev_queue_xmit+0x168f/0x3850 [ 260.976320][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 260.976333][ C0] ? __dev_queue_xmit+0x274/0x3850 [ 260.976352][ C0] ? ebt_do_table+0x2665/0x2830 [ 260.976368][ C0] ? ebt_do_table+0x2665/0x2830 [ 260.976385][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 260.976413][ C0] ? br_nf_post_routing+0x219/0xfe0 [ 260.976427][ C0] ? lock_acquire+0x106/0x330 [ 260.976448][ C0] br_dev_queue_push_xmit+0x370/0x4a0 [ 260.976462][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 260.976476][ C0] NF_HOOK+0x360/0x3f0 [ 260.976489][ C0] ? NF_HOOK+0xa2/0x3f0 [ 260.976500][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 260.976513][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 260.976525][ C0] ? lock_acquire+0x106/0x330 [ 260.976546][ C0] br_forward_finish+0xd3/0x130 [ 260.976558][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 260.976570][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 260.976582][ C0] NF_HOOK+0x360/0x3f0 [ 260.976596][ C0] ? NF_HOOK+0xa2/0x3f0 [ 260.976606][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 260.976619][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 260.976632][ C0] ? __skb_clone+0x483/0x7a0 [ 260.976650][ C0] ? br_handle_vlan+0x61/0x530 [ 260.976670][ C0] __br_forward+0x397/0x540 [ 260.976682][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 260.976700][ C0] br_flood+0x6ee/0xb80 [ 260.976717][ C0] ? br_dev_xmit+0x193/0x1920 [ 260.976733][ C0] br_dev_xmit+0x127a/0x1920 [ 260.976749][ C0] ? br_dev_xmit+0x193/0x1920 [ 260.976767][ C0] ? __pfx_br_dev_xmit+0x10/0x10 [ 260.976782][ C0] ? __skb_get_hash_net+0x13f/0x2e0 [ 260.976801][ C0] ? __pfx___skb_get_hash_net+0x10/0x10 [ 260.976821][ C0] ? skb_network_protocol+0x234/0x3f0 [ 260.976840][ C0] ? __pfx_passthru_features_check+0x10/0x10 [ 260.976862][ C0] dev_hard_start_xmit+0x2cd/0x7f0 [ 260.976904][ C0] __dev_queue_xmit+0x168f/0x3850 [ 260.976925][ C0] ? handle_softirqs+0x22a/0x7c0 [ 260.976939][ C0] ? copy_page_range+0xb8d/0x11c0 [ 260.976958][ C0] ? __dev_queue_xmit+0x274/0x3850 [ 260.976983][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 260.977007][ C0] ? __copy_skb_header+0xa3/0x4a0 [ 260.977031][ C0] ? hsr_addr_subst_dest+0x30d/0xa90 [ 260.977047][ C0] ? skb_clone+0x246/0x3a0 [ 260.977068][ C0] hsr_forward_skb+0x157b/0x2860 [ 260.977089][ C0] ? hsr_forward_skb+0xb3/0x2860 [ 260.977106][ C0] ? __pfx_hsr_forward_skb+0x10/0x10 [ 260.977122][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 260.977140][ C0] ? __asan_memset+0x22/0x50 [ 260.977160][ C0] ? __skb_pad+0x405/0x610 [ 260.977193][ C0] send_hsr_supervision_frame+0x731/0xcb0 [ 260.977212][ C0] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 260.977228][ C0] hsr_announce+0x1db/0x370 [ 260.977241][ C0] ? hsr_announce+0x89/0x370 [ 260.977254][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 260.977266][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 260.977284][ C0] call_timer_fn+0x192/0x5a0 [ 260.977305][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 260.977317][ C0] ? call_timer_fn+0xd4/0x5a0 [ 260.977336][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 260.977359][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 260.977375][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 260.977388][ C0] __run_timer_base+0x652/0x8b0 [ 260.977406][ C0] ? ktime_get+0x45/0x200 [ 260.977425][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 260.977445][ C0] ? sched_clock_cpu+0x74/0x440 [ 260.977467][ C0] run_timer_softirq+0xb7/0x170 [ 260.977486][ C0] handle_softirqs+0x22a/0x7c0 [ 260.977501][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 260.977515][ C0] __irq_exit_rcu+0x5f/0x150 [ 260.977527][ C0] irq_exit_rcu+0x9/0x30 [ 260.977537][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 260.977555][ C0] [ 260.977559][ C0] [ 260.977564][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 260.977579][ C0] RIP: 0010:copy_pmd_range+0x2426/0x8030 [ 260.977600][ C0] Code: 24 58 e9 33 2b 00 00 e8 98 a2 b0 ff 48 89 5c 24 78 48 8b 5c 24 78 4c 8b b4 24 b0 00 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 <74> 08 4c 89 f7 e8 70 f3 18 00 49 89 1e 48 8b 84 24 a0 00 00 00 42 [ 260.977612][ C0] RSP: 0018:ffffc9000423f3e0 EFLAGS: 00000246 [ 260.977624][ C0] RAX: 1ffff11006635194 RBX: 840000007fe79805 RCX: 0000000080000002 [ 260.977634][ C0] RDX: 0000000000000007 RSI: ffffffff8df3cfc3 RDI: ffff888032733d00 [ 260.977643][ C0] RBP: ffffc9000423f670 R08: ffff88801e67861b R09: 1ffff11003ccf0c3 [ 260.977653][ C0] R10: dffffc0000000000 R11: ffffed1003ccf0c4 R12: dffffc0000000000 [ 260.977663][ C0] R13: 1ffffd40003ff3c9 R14: ffff8880331a8ca0 R15: 00007f2e94194000 [ 260.977694][ C0] ? kasan_save_track+0x4f/0x80 [ 260.977705][ C0] ? kasan_save_track+0x3e/0x80 [ 260.977718][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 260.977740][ C0] ? copy_page_range+0x270/0x11c0 [ 260.977755][ C0] ? copy_page_range+0x270/0x11c0 [ 260.977774][ C0] copy_page_range+0xb8d/0x11c0 [ 260.977796][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 260.977814][ C0] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 260.977832][ C0] dup_mmap+0xf70/0x1bb0 [ 260.977868][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 260.977881][ C0] ? copy_mm+0x130/0x4b0 [ 260.977901][ C0] copy_mm+0x13b/0x4b0 [ 260.977916][ C0] copy_process+0x166e/0x3980 [ 260.977935][ C0] ? copy_process+0x91f/0x3980 [ 260.977952][ C0] ? __pfx_copy_process+0x10/0x10 [ 260.977969][ C0] kernel_clone+0x248/0x870 [ 260.977986][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 260.978008][ C0] __x64_sys_clone+0x1b6/0x230 [ 260.978025][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 260.978047][ C0] ? do_user_addr_fault+0xc7c/0x1360 [ 260.978072][ C0] do_syscall_64+0xe2/0xf80 [ 260.978103][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.978116][ C0] ? trace_irq_disable+0x37/0x100 [ 260.978129][ C0] ? clear_bhb_loop+0x60/0xb0 [ 260.978143][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.978156][ C0] RIP: 0033:0x7f2e93fc3952 [ 260.978168][ C0] Code: 89 e7 e8 f1 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 260.978179][ C0] RSP: 002b:00007fffa7f89100 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 260.978192][ C0] RAX: ffffffffffffffda RBX: 00007fffa7f89100 RCX: 00007f2e93fc3952 [ 260.978201][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 260.978209][ C0] RBP: 00007fffa7f8928c R08: 0000000000000000 R09: 0000000000000001 [ 260.978218][ C0] R10: 000055557c14a7d0 R11: 0000000000000246 R12: 0000000000000001 [ 260.978226][ C0] R13: 00000000000927c0 R14: 000000000003f930 R15: 00007fffa7f892e0 [ 260.978241][ C0] [ 262.212469][ T5485] veth0_macvtap: left promiscuous mode [ 269.031713][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!