last executing test programs: 4.801980843s ago: executing program 0 (id=4073): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x400, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008080}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) poll(&(0x7f0000000040), 0x55, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2, 0xffffffff}}, {{0xa, 0x4e21, 0x400, @ipv4={'\x00', '\xff\xff', @local}, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x190) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x50}}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) 4.690884554s ago: executing program 0 (id=4076): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000002040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002540)={0x20, r2, 0xde4ca39d43ddf0bf, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000801}, 0x14) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r5 = socket$kcm(0x2, 0xa, 0x2) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x48, r6, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x5dbe15b57e6f2572}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008081}, 0x40800) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0xffffffffffffffe6}, 0x1, 0x0, 0x0, 0x20040054}, 0x40) (async) r9 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r9, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x18}}], 0x2, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r7, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008010}, 0x20000001) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f00000002c0)={@val={0x0, 0x88f7}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x2, 0x14, 0x64, 0x0, 0xf9, 0x1, 0x0, @private=0xa010101, @multicast2}}}}}}, 0x26) 4.326837989s ago: executing program 0 (id=4079): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001080)='memory.events\x00', 0x275a, 0x0) 4.326307592s ago: executing program 0 (id=4081): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x4, 0x2c, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@end]}}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x3a) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a800000800feff", @ANYRES32, @ANYBLOB="08000500", @ANYRES16=r5], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 4.324589191s ago: executing program 0 (id=4082): r0 = socket$netlink(0x10, 0x3, 0x14) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x2cb}, 0x0) r1 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e3, &(0x7f0000000000)={r1}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 2.125860246s ago: executing program 3 (id=4115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800024000000012080004400000001705000300000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a66e33bf3b112ff0baeaebed01472fcd0ce109786c678f4787729cd1763", @ANYRES64=r0, @ANYRES64], 0x5c}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000340)=ANY=[], 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$BTRFS_IOC_DEFRAG(r4, 0x50009402, 0x0) close(r1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240000000840800034000000002080004400000000f08000140000000001c000580090001006d657461000000000c000280080002402000000d0900010073797a30000000000900020073797a32"], 0xa8}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000380)="3b2ba35e4cc72b682c0388d207bdc7a38e793207ffeadcd179cd2cfa6b6d9445b436cb47b793de807ce9bc22303b727fae7c309d8d9f849f375033f25bba1a8c8f71d35e057727d77b93f18c11fe315f79b0bca52c1caad813f41af48f8572f8b3fae7fc73367ebd66d8f2f85ee319d9800e3c39e8cf4909f2fc4ff84779", 0x7e}, {&(0x7f00000005c0)="d4b074dce04dacfc34b0df567ecfed866259d45c2934ef2c160e46b7de3d250b695d30385459ad5439afb657b0acf1d76d1984a582c28c67abadf8943d4ccdfc9bc2d2d331ea2837e9b4aa6ed91fcdab943b1bae1d5b567c1c891ca70615dadf59f8c92aa689be0d6902be056ae9d56a2bf8050e583e1a1309e21371805289904dda16f9a9b1fa705a4197cdf29c6c07212f361feda16d1f4c13f709c648f97a60d41ca6", 0xa4}, {&(0x7f0000000940)="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", 0x1000}], 0x3, 0x1) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) socket$inet(0x2, 0x6, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000200)=0x7) getsockopt$MRT(r7, 0x0, 0xd0, &(0x7f0000000140), &(0x7f00000001c0)=0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r7, &(0x7f0000000440)="2b6c5ff610893bb11b3e731e4f", &(0x7f0000000480)=@buf="9cab554dc1deb234d020f7a4f9a78148b96569d9fbaf3f342003223921f194e2b21d78b8bd4d62596405ea5ed48d85db841a0d03b819f0b30508fc46cefabf1083e1c5a3723d3f80a966a326fd51909a8b99d6db1486a38110c221e0aa8b146c463a8ef9e039141cf01e650c06e47a22bfa31c756a6941a8c12a2de1c0ec3c4aba47990620f2bd6d51739642c584cdc47d72be9e8d62c8244d94cb1eb29ec29dffbf8a97ac1936327f22a3c32ad0aba7824b223a3d8dbf322d08722c16980fb2e46c395d1f37a551c392e049e507b1ac3007b8", 0x4}, 0x20) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0xc4}}, 0x40080) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 1.608465214s ago: executing program 3 (id=4124): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @initdev}, &(0x7f0000000100)=0xc) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0001000c000000090050c96a0200000e0000000000000903000000005f5f6e610061610014ff07a77f8b4b9982d87ac8d2425e3e787845b949c967"], &(0x7f0000000180)=""/121, 0x2d, 0x79, 0x0, 0x2}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xcb6f, '\x00', r1, r2, 0x5, 0x2, 0x1}, 0x50) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @initdev}, &(0x7f0000000100)=0xc) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0001000c000000090050c96a0200000e0000000000000903000000005f5f6e610061610014ff07a77f8b4b9982d87ac8d2425e3e787845b949c967"], &(0x7f0000000180)=""/121, 0x2d, 0x79, 0x0, 0x2}, 0x28) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xcb6f, '\x00', r1, r2, 0x5, 0x2, 0x1}, 0x50) (async) socket$nl_route(0x10, 0x3, 0x0) (async) 1.460922895s ago: executing program 2 (id=4127): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180400000000000000000000000000007110a0000000000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0xf}, 0x90) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) syz_genetlink_get_family_id$ethtool(0x0, r8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NL80211_CMD_DEL_TX_TS(r8, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r6, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x56}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x200108c0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r8, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="ea013dd6700540acbea514cff2b65d09fb91fd05bbf5012d18218c2064439d2ab883a23c413f77ee"], 0x14}, 0x1, 0x0, 0x0, 0x4041}, 0x4008010) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d80)={0x30, r6, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, 'K/'}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x3c}}, 0x20008000) 1.457408121s ago: executing program 3 (id=4128): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0x4, 0x0, 0x1, [{0x4}]}]}, 0x44}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @IFLA_BR_GROUP_FWD_MASK={0x6}]}}}]}, 0x48}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {0x3, 0x3, 0x6, 0xa, 0x5, 0xfe00, 0xa1}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.349159368s ago: executing program 1 (id=4129): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@remote}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x20}}, {}, {@multicast2}, {@local}, {@local}, {@multicast1}]}]}}}}}}}, 0x0) (async) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x7, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x4, 0xc9, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000400)={'syztnl1\x00', r3, 0x80, 0x7, 0x2, 0x6, {{0x39, 0x4, 0x3, 0x15, 0xe4, 0x65, 0x0, 0x6, 0x29, 0x0, @private=0xa010100, @remote, {[@cipso={0x86, 0x4a, 0x3, [{0x2, 0x11, "4e736c251246921008e6db32d0f539"}, {0x2, 0x12, "568371ead9d3f05e89aa03f8074b1e61"}, {0x0, 0x2}, {0x2, 0xe, "9de9dc8ac53d60e49a46a25a"}, {0x6, 0xf, "faac72a91505812a2620c4cd4d"}, {0xa991d546c928dfff, 0x2}]}, @timestamp={0x44, 0x10, 0xec, 0x0, 0x0, [0x0, 0x3ff, 0x0]}, @timestamp_addr={0x44, 0x54, 0xe7, 0x1, 0x1, [{@broadcast, 0x8}, {@multicast1, 0x5}, {@multicast1, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0xb}, {@private=0xa010102, 0x131}, {@broadcast, 0x2d9}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x3}, {@rand_addr=0x64010100, 0x7c23}, {@local, 0x9}, {@multicast2, 0x6}]}, @noop, @generic={0x7, 0xa, "6d40847f530f698b"}, @rr={0x7, 0x17, 0x2a, [@rand_addr=0x64010102, @empty, @loopback, @loopback, @remote]}]}}}}}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010865}, 0x4008000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0xb) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd9, 0x6, @random="98c8ca7122df"}, 0x14) (async) socket$nl_route(0x10, 0x3, 0x0) 1.243492904s ago: executing program 4 (id=4131): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000030000000100000080"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000003000000040122000b00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000e6ef0e09358d19bc0059843aa09937c4a43f7b31c8bbfe37921f386895000049c937bf"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x2, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r1, &(0x7f00000000c0)="3338c671e1b3729c8ed6b424a0788ccc75908781fc4365c63315232dca33d9efa88c44e77f3e", &(0x7f0000000740)=""/225}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000100), &(0x7f0000000140)='%pB \x00'}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="190300000000000000004a0000000e0002"], 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@ifindex, 0x37, 0x1, 0x7ff, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000440)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0xa8, 0x24, 0x200, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r10, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x9}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x400c850}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x4}, 0x80, 0x0}, 0x20000002) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000014"], 0xb8}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000006680), r7) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000006780)={0x0, 0x0, &(0x7f0000006740)={&(0x7f0000000000)=ANY=[@ANYBLOB='JC)p', @ANYRES16=r2, @ANYBLOB="01002fbd7000fedbdf25250000000a0001007770616e3100000005002a000b000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008005}, 0x48000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.233709676s ago: executing program 2 (id=4132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x9c, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x5, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x100d87, 0x6}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0xfffc}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8880}, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40040040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) 1.175211551s ago: executing program 3 (id=4133): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, r1, 0x804, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008054}, 0x20000001) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) accept(r5, 0x0, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="1c005a8018000180140003000600bebe"], 0x38}}, 0x0) (async, rerun: 64) r6 = socket(0x10, 0x80002, 0x0) (async, rerun: 32) r7 = socket(0x11, 0x800000003, 0x0) (async, rerun: 32) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$IPSET_CMD_SWAP(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, 0x6, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x24000000) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'}) (async) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r11, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) setsockopt$inet_mreq(r10, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (async, rerun: 64) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x1, 0x34, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@timestamp={0x44, 0x4, 0xb3, 0x0, 0x4}]}}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @multicast1}}}}}}, 0x0) (async, rerun: 64) setsockopt$MRT_ADD_MFC_PROXY(r11, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r6) 1.016508998s ago: executing program 3 (id=4134): r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x1d78, 0x4, 0x7}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x50}}, 0x8c000) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x2, 0x3, 0xffff}, 0x20) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x8, 0x7, 0x7, 0x7f3, 0x94, 0x23a, 0x3}, &(0x7f0000000080)=0x9c) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={r4, 0x1074a000, 0x7, 0x5}, &(0x7f0000000180)=0x10) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2, 0x12, 0x6, 0x9, 0x2, 0x0, 0x70bd25, 0x25dfdbff}, 0x10}}, 0x40010) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x0, 0x0, 0x200}, 0x20) 995.69037ms ago: executing program 4 (id=4135): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f00000005c0)="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", 0x0, 0x2}, 0xfffffffffffffed3) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb005}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x13, 0x9, 0x3, 0xa, 0x0, 0x0, 0x25dfdbff, [@sadb_key={0x1, 0x9}, @sadb_x_filter={0x5, 0x1a, @in=@broadcast, @in6=@loopback, 0x1f, 0x4, 0x14}, @sadb_x_sa2={0x2, 0x13, 0x4, 0x0, 0x0, 0x70bd2b}]}, 0x50}, 0x1, 0x7}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x48}, [@ldst={0x3, 0x3, 0x3, 0x1c10a1, 0x0, 0x98}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x139, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x48) bind$packet(r5, &(0x7f0000000040)={0x10, 0x9}, 0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000000010104000000000000000002000005240001801400018008000100e000000108000200000000000c0002800500010000000000240002801400018008000100e000000108000200ac1e00010c00028005000100000000000800074000000000100016"], 0x74}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'macvtap0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r4, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0], 0x0, 0xd, &(0x7f0000000500)=[{}], 0x8, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xad, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(r8, &(0x7f0000000a40)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)={0x178, r9, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5e76d46ca8626d94}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x178}}, 0x4040884) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xe, &(0x7f0000000000)=0x1662cd33, 0x4) sendto$packet(r2, &(0x7f0000000180)="0b031407e0ff640f020047540f68a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) 895.837889ms ago: executing program 1 (id=4136): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xc, 0x4, 0x4, 0x8, 0x0, r5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r6}, 0x48) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000200)={@dev, @private, 0x0}, &(0x7f00000002c0)=0xc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x1a, &(0x7f00000004c0)=@raw=[@generic={0x0, 0x8, 0x9, 0x8001}, @map_fd={0x18, 0x9, 0x1, 0x0, r4}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6f0}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffa}, @map_val={0x18, 0x1, 0x2, 0x0, r6}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], &(0x7f0000000180)='syzkaller\x00', 0xd, 0x0, 0x0, 0x40f00, 0x44, '\x00', r7, 0x25, r8, 0x8, &(0x7f0000000300)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0xb, 0x7fffffff}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[{0x2, 0x4, 0xb, 0x1}, {0x2, 0x1, 0x8, 0x2}, {0x4, 0x2, 0xb, 0x9}], 0x10, 0x2}, 0x94) bind$rxrpc(r3, &(0x7f0000000040)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) close(r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000095", @ANYRES16=r1, @ANYBLOB="170e0000000000000000010000600500070000000000080009000000000014001f0000000000000000000000ffffac14140008000a00000000000600020000000000080018007f000001"], 0x50}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000700)=0xb, 0x4) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002c35810000dbdf25170000001c000680150003000ebfd61996044fb4249989f65f4e7f3ee70000001334692ad100dc27d90151087d5136ca31597ef072b0a861443254a5acb13c5c525494fedfea71a2b5b8587465509e3ef447af3dbc381d23cbdfdac43ec661f7b3ac7757375bbba756a32f8db49c71c85ff83d75b2c0699c1dd0c5b5787dbbc57c20befa"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 895.444162ms ago: executing program 2 (id=4137): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0xd1383000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r2, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x2000) mmap(&(0x7f0000c37000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0x6fb35000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 867.538927ms ago: executing program 3 (id=4138): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24048000, &(0x7f00000001c0)={0xa, 0x4e21, 0x2, @loopback, 0xfdf}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000003b, &(0x7f0000000040)=0x1, 0x4) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112de000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x2020) 764.99372ms ago: executing program 1 (id=4139): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=@ipv6_deladdr={0x5c, 0x15, 0x4, 0x70bd29, 0x25dfdbff, {0xa, 0x40, 0x1a, 0xfe}, [@IFA_FLAGS={0x8, 0x8, 0x1}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x5773ae07, 0x1, 0x10000}}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x7, 0x6, 0x8}}, @IFA_CACHEINFO={0x14, 0x6, {0x98, 0x1, 0x6, 0x4}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4009880) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000004c00)={0x24, r3, 0xb97534d5fe9704cf, 0x2, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x24}}, 0x4000004) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000180)={0x1, 0x8}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0x10}]}}, 0x0, 0x26}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000002c0)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r1, @ANYRES16=r6, @ANYBLOB="050300000000000000000700000008000380", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24044080) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r6, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) 683.516434ms ago: executing program 2 (id=4140): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c3000000000000000000000800", @ANYRES32, @ANYBLOB="0000d40000000000a5"], 0x2c}}, 0x0) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, r1, 0x25, 0x0, @val=@iter={0x0}}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7f}, 0x94) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x3, 0x6) r4 = socket(0x1d, 0x2, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x3, {0x0, 0x1, 0x4}, 0xfd}, 0x18) (async) setsockopt$llc_int(r4, 0x6a, 0x6, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r1) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000780)={0xb4, r6, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc79}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x2b}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x28008010) (async) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000055003d0902000000fcdbdf2507000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010301000700000000000000000000000000000008"], 0x38}}, 0x4000000) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x11, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x2000000, 0x10000}}, @TCA_ACT_BPF_FD={0x8, 0x5, r8}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}}, 0x8080) (async) r9 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000740)={&(0x7f0000001340)=@hci={0x1f, 0xd04, 0xe}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f8bebc2086d14d212bc7a52e14ea4745d282481b1442918e5541d2da9cfb4fe3e94241f83bd19748e9241c31b64dfccfbbfbb74193f4211fcde0c141cd27400b91f6e003c5bd355cb051266a617a124d1099401aa20e305f54260854e4b8871731ea8164e8adca633ae46a69a0e9d2a2", 0x70}, {&(0x7f0000000080)="e0e23d114b3c2b5810", 0x9}], 0x2}, 0x2002c001) 683.032836ms ago: executing program 4 (id=4141): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_buf(r2, 0x1, 0x13, 0x0, &(0x7f0000000100)) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'fo\x00', 0x15, 0x3240, 0x3a}, {@empty, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 631.898087ms ago: executing program 1 (id=4142): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_BLACKHOLE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4, {0x2}}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x70}}, 0x0) ioctl$sock_netrom_SIOCDELRT(r3, 0x890c, &(0x7f0000000200)={0x1, @bcast, @bpq0, 0x5, 'syz0\x00', @default, 0xbb4, 0x5, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r2, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r6, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1818000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 597.380864ms ago: executing program 2 (id=4143): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'vlan0\x00', 0x2}) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x61, 0x4, 0xfff, 0xe661, 0x9, 0x9, 0x40, {0x0, @in6={{0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}, 0x60000000, 0x1ff, 0xc47d, 0x8, 0x1}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x8, 0x2, 0x1, 0xd, r2}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e21, @local}, 0x20, 0x0, 0x0, 0x0, 0xe, &(0x7f00000001c0)='wlan0\x00', 0x3, 0x9, 0x1}) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000280)={0x2, {{0xa, 0x4e20, 0x22, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, {{0xa, 0x4e22, 0x3, @private0, 0xffff}}}, 0x108) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_buf(r5, 0x0, 0x23, &(0x7f00000003c0)="55c4b35d0c56e6720406ec5bbad53fee276b6ab87053709ce025febd0e4cbaf183f422191bc3e60ada0a7c374ea0c87c4a99247f465bd51e2ec309af1e6fab", 0x3f) socket$inet_icmp(0x2, 0x2, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000002900)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000028c0)={&(0x7f0000000440)={0x245c, 0x3b, 0x20, 0x70bd28, 0x25dfdbfb, {0x1c}, [@generic="d5adfaf0a16aac5d19a08a225c290685c07a4339e0f8ca67f5bafec7fc4987acaa9802e5c40814c2fb5b8035415f0738274219c1f921b944fc947dcf391d5d3188767d1329812ab068e49c2830fb0d5dfc962c8d6797a172f806ec80b642e6259588863044f701bc6cb034640496a3b6fda8b38ada", @nested={0x11a8, 0xa6, 0x0, 0x1, [@typed={0xc, 0x13d, 0x0, 0x0, @u64=0x8}, @generic="692b9f75767cd7d5117d9f3024c34904b08be73b4f730370e72ccd84541d0751bbb5fb3d0fc939f77eb0fd607bf6a8c6f6c4a8ac4ee7d63952c348c2543f68f87fd3e9c4b756ea2329f7c66e03948199ce380a6e07442ab545c5c3b2d3f6f70c7d687d118a52c12812150a118263bede740924e969de60c9bdc4170a1a1ef066da9ff6810c49ed9535ee057fbdda1f80a1a1bc77fc248b1c893af71366dc746810b8dc943d8f88e6fbc580eabeb7bdbfe96d6d1ed04643307e8475a2eb741d8cf883d4e5eed610ee8326cc3e716505098c44cdfbb56bc083335851dae9f9c3b174b58af21ef91133a306defb9b9fc5adc0c4511029a1a2", @generic="686d060197d53006f0f336aa6977af50f2b7abdf6f1918562fac86c42721773e187eb5563ef30835bd4b25e4313292bd6cdcacd615493bbb6dda08e4899fb8fdd580b028c1b4f3777d553e145844621fed33ad94942cacdce040ab295af11084b29badf1bbec0487a85edfa4254fb303d3106dc479eb2f978341f8952dcba44a64aadaffae5703f44f80be880d23d36ce387b5d17ef94b08a0", @typed={0x8, 0x109, 0x0, 0x0, @ipv4=@loopback}, @generic="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"]}, @generic="342255a1fd1bc8e314b8ae65fd4cf372394390fa49b560632931fae43c35531b9d91baa512125da5837b63e3aac5a2bea393374f6bb4d4bed91757ac1b02d145045db8b87c6ce5e3f5ba0a642bd70bf2f42020461f7fbd5c468a7cdc6a15f68277974ad0947cfe8dcc0cea21d3367971c09ae682ae15f9669c1728cbbc58a6856d18e15906220d1f867f33", @generic="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", @nested={0xf6, 0xc3, 0x0, 0x1, [@nested={0x4, 0x2b}, @generic="3bef5291f010212001322db74fa7f99f59d0a5bffb3e580ffa41d681a9d773a544ee29d228e3a1988d31b5c461c1e30bf59eb40893c92953d0414368feb11f96e7fde5cf48b8f05bf217fc041aab381a5c467deea9c8475e8da2a706260dfa5d4c4fac4b9f2089a24f8428ca232cfc043f004a71f708da5c0cd3ee964152cf68b24a8416bc04530b5d390b944c2c7802c3b84227718f3c8d4ea6391f4b3e9209a40c25d428ad9cd398b991dc3d074bcf939e747cfc17133b1bb05139d63bd02e0bda15b63c0c2cd49d442d8531cba0488f", @generic="0513e85b9840a7fef45454ddf6487775ff8db6d2af", @typed={0x8, 0x99, 0x0, 0x0, @u32=0xa8c5}]}, @generic="c398f3ef65cb8764cd81977c721078efab612d4af87de3995bf1e8f4c2cacfd7c5bbb4bf95ba126f7a40503479c0cdfd267febffbceb2237c00fe38470676baaa16cda5f426619232cc4068a5455f0a990b3cf36a37c58ef514cc6a6ab56e8d73a865905daf6e7100fa1113acad055edb0cd75824a47ae864967df2e1a20b0ca2420b7aa373b2aa455101651c7d80cc24d958bb5d2d1f9a76ecab70fe10e", @typed={0x5, 0x2d, 0x0, 0x0, @str='\x00'}]}, 0x245c}, 0x1, 0x0, 0x0, 0x8008001}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000002940), &(0x7f0000002980)=0x40) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002a40)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002a80)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002ac0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002b00)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000002c00)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b40)={0x4c, r7, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040045}, 0x4045) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, &(0x7f0000002c40)={'bond_slave_1\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x30}}}) gettid() r12 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r12, 0x84, 0x9, &(0x7f0000002c80)={r1, @in6={{0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8001}}, 0x10001, 0x2, 0xffff659d, 0x40, 0x23, 0xc569, 0xe}, &(0x7f0000002d40)=0x9c) socketpair(0x2a, 0x80000, 0x2, &(0x7f0000002d80)={0xffffffffffffffff}) sendmsg$AUDIT_SET_FEATURE(r13, &(0x7f0000002e80)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x20, 0x3fa, 0x2, 0x70bd28, 0x25dfdbfe, {0x1, 0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r14, &(0x7f0000002fc0)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x88400008}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f40)={0x14, r15, 0x200, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x8855) bpf$LINK_DETACH(0x22, &(0x7f0000003040), 0x4) 485.593318ms ago: executing program 4 (id=4144): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x90, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6182a6b9fc5d049a}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x504, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000300)=0x0) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000340)=0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=@bridge_dellink={0x84, 0x11, 0x400, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x600, 0x45040}, [@IFLA_CARRIER={0x5, 0x21, 0x2}, @IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_IFALIAS={0x14, 0x14, 'veth0\x00'}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_EVENT={0x8}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x9}]}, @IFLA_NET_NS_PID={0x8, 0x13, r4}]}, 0x84}, 0x1, 0x0, 0x0, 0xc0}, 0x1000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000004c0)) (async, rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) (rerun: 32) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000540)={'bond0\x00', @remote}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x881020}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r6, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_macvtap\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r7, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x81) (async, rerun: 32) r8 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 32) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000840)={0x41, 0x2, 0x1}, 0x10) (async) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000f80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f40)={&(0x7f00000008c0)={0x66c, 0xa, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_EXPRESSIONS={0x98, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0xf1}, @NFTA_OSF_TTL={0x5, 0x2, 0xc}, @NFTA_OSF_TTL={0x5, 0x2, 0x82}]}}}, {0x4c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xc2}]}}}]}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_DESC={0x584, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xc0, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x408}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbfa8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x138f}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x65}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc36e}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x721}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1bc1}, @NFTA_SET_DESC_CONCAT={0xa4, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9b9b}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x84e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3cd2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_CONCAT={0xac, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf9bb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x32}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x87c8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0x70, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4b6259ee}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2c2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xad}, @NFTA_SET_DESC_CONCAT={0x138, 0x2, 0x0, 0x1, [{0x4}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x14a}]}]}, @NFTA_SET_DESC_CONCAT={0x160, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe7a7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xae5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2131}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1b26000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3a85}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x542}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x83f}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbfc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x90}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x72}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}]}]}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x58fb}]}, 0x66c}, 0x1, 0x0, 0x0, 0x4000}, 0x44040810) r9 = socket$packet(0x11, 0x0, 0x300) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001040), r0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x74, r11, 0x10, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb5a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6955}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7ff, @loopback, 0xfff}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000800}, 0x20040000) (async) sendmsg$NL80211_CMD_TDLS_OPER(r10, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x24, r7, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x48000) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r10, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x18282000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000013c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x40, r7, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xfffffffb, 0x1e}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040010}, 0x2000c000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'batadv_slave_0\x00'}) r13 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r13, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001500)="223487610021fda392f2883ffd2363d66f043ed9d83cef5468b7fd2b499599f9589345168c47585685f04143a32ecae6732028485ddec516823b75e936e51c224d527ead4e96d18e1b1b", 0x4a}, {&(0x7f0000001580)="ae92f3b3cdd3cf1e5eccacdba9fc0cfae321a3f5e762e689c77b52217c9bb9724003bc541da5c2163ca1d4fea53073953263bdab7c6c487089a0e3b794e254349a6c8732dda560353d3ea78182be36fd1958d0c9a203a18793a39a74d161015d2b299364d8b8a381278fb0cd42439e601a9cccedfca56dc46d9fc2a9a8d6e3a41ec24c4e4b34324fac633bf7aa4e1916072d80ef9f9cf01b1d2cb4a6a761dfb39f40a179bc4f93ba73b1fa4d421a684273bdd39e7444c1293019bd1f937509a3e27c506e18444af4d436e94151d9dd2d82a58fc36b87ef902fc17e2c6be2f41c4ed8bea0", 0xe4}], 0x2, &(0x7f00000016c0)=[{0x1010, 0x0, 0x1ff, "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"}, {0xb0, 0x115, 0xef2, "1de4b7d39def6b4adfd0258f96957adee7d671d84314472ece1127a62deaba18800d663655b60cdeb1c85ba2e0593a47fb1063dca05f0ce47589fe9f6c74dc37d98ae8066369a68546de1e0d05a51ed2038d6b560b62de068bbdba078d6638832e43e7bf822aae1a8ae5b6368ef6504129a451cc3b6dd65bf71c4d62579c0b0cf5c48b7feff74b8a002500cb27753030dafd332f140f5062f19d"}, {0x30, 0x84, 0x6, "98d9ddab6bdad15f005adb90351d3a11efa1972cdb7d17d6de7200e579b468"}, {0x70, 0x0, 0x7f, "3550562af4db8d2c740e64146ee4460f5beb0910d68e90f8abe4c72e9a02c93a6e1c61a12cc84f13fe895518098cd671c8c9a5ae877d02a332dc48119055dffeaf3f9e0bbd1b903781e6b16178468784e5cf3774b1ea5a3f52f997fb3c08f8"}, {0x28, 0x0, 0x100, "0cf40bd9a7837e5b90a4f218a7b72f5f00c1d4e0c566"}, {0x98, 0x0, 0x0, "9f3b0c2b58714c781bb1a8b493487774782525ed3bb0aeab347ebe3472877c2b69f9e0126c546a4eb7afbb1f50df7a9ae63ce33bd2f63c4fd61fd15dc7c9bc6121cb6224fe405b8a70af108a30a4d8a7e9b9447b1fecd4b38f892fe176261d43460e79dd8b327a8bf08f56959e2c5d5e0e737e6173759a2342e353dc2128eff9346cdefd"}], 0x1220}, 0x92cad916b6be7cc0) 483.638598ms ago: executing program 1 (id=4145): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x5}, 0x14}}, 0x8081) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x0, 0x1, 0x70bd22, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0xc890) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0xfffffffd, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x280}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x9}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r4, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x0, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0x402, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x800}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}}, 0x48195) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) bind$netlink(r6, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2f, 0x1ffffffc, {0x0, 0x0, 0x0, r8, 0x40046, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x2000c000) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000014001100010080000000000009000000080002"], 0x1c}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r8, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) 483.268504ms ago: executing program 2 (id=4146): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d544af6e8dafe09013f97c7d79fc98437bb9b249fc88653aa43d55d647f"], 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000006c0)=[{{&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, 0x0}, 0x2}], 0x1, 0x10000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 195.699276ms ago: executing program 0 (id=4147): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r1, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r4, 0x917, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r5}]}, 0x3c}, 0x1, 0x620b}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r6, &(0x7f0000000180)="a40141ad", 0x4, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x20000, @mcast2, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f00000000c0)) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r12, &(0x7f0000001b00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x28, r10, 0x11, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r7, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x800) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)}, 0x40002000) 190.686373ms ago: executing program 4 (id=4148): syz_emit_ethernet(0x5e, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_redir={0xa1, 0x0, 0x0, '\x00', @private2, @private0}}}}}}, 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_redir={0xa1, 0x0, 0x0, '\x00', @private2, @private0}}}}}}, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'wg0\x00', {}, 0x4}) 109.813471ms ago: executing program 4 (id=4149): r0 = socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r2, 0xff06, 0x0) write$tun(r2, &(0x7f00000000c0)={@void, @val={0x1, 0x3, 0x5, 0xd, 0xda65, 0x8}, @x25={0x0, 0xf9, 0x1, "6ae79aac380f0dba25046660c6aefe9787deeafeb47a92ee47abd6a13a8f2797cd9dcf70b9bf46ace992331026048bae795d420a4d95a58e1ec890d966876a2b8ef10d78c95108e1d25c30d2373961ad78"}}, 0x5e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x6a, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) 0s ago: executing program 1 (id=4150): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) syz_emit_ethernet(0x7f, &(0x7f00000000c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x49, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0x49, 0x0, @opaque="1a60e2350a4f36e745d2d82fc69104a3d0238ec36469ccd09cf0fb460ae35b623d28c7a16736b31a9ddef1784507db1c6ccd93d3cb68d8e2c3dea92a0db5046f96"}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x555b9eb7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) kernel console output (not intermixed with test programs): ] bond6: option lacp_rate: mode dependency failed, not supported in mode balance-alb(6) [ 293.285686][T15009] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 293.323180][T15009] netlink: 'syz.0.2664': attribute type 2 has an invalid length. [ 293.348012][T15012] netlink: 'syz.3.2665': attribute type 1 has an invalid length. [ 295.448602][T15161] netlink: 'syz.3.2705': attribute type 4 has an invalid length. [ 295.478687][T15161] netlink: 'syz.3.2705': attribute type 4 has an invalid length. [ 295.739034][T15161] netlink: 'syz.3.2705': attribute type 3 has an invalid length. [ 296.244694][T15191] __nla_validate_parse: 25 callbacks suppressed [ 296.244712][T15191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2720'. [ 296.290206][T15197] netlink: 'syz.1.2721': attribute type 21 has an invalid length. [ 296.335459][T15197] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2721'. [ 296.371002][T15203] xt_hashlimit: size too large, truncated to 1048576 [ 296.378691][T15197] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2721'. [ 296.537344][T15212] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2726'. [ 296.568707][T15212] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2726'. [ 296.595898][T15219] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2726'. [ 296.612030][T15219] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2726'. [ 296.746627][T15224] sctp: [Deprecated]: syz.1.2731 (pid 15224) Use of struct sctp_assoc_value in delayed_ack socket option. [ 296.746627][T15224] Use struct sctp_sack_info instead [ 296.753959][T15228] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2734'. [ 296.828686][T15232] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2732'. [ 296.878347][T15232] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2732'. [ 296.883565][T15236] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 297.189576][T15256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.227091][T15258] validate_nla: 2 callbacks suppressed [ 297.227109][T15258] netlink: 'syz.2.2742': attribute type 4 has an invalid length. [ 297.291303][T15263] netlink: 'syz.1.2744': attribute type 7 has an invalid length. [ 297.292228][T15265] IPVS: set_ctl: invalid protocol: 29 127.0.0.1:20002 [ 297.395548][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 297.439207][T15276] syzkaller1: entered promiscuous mode [ 297.449455][T15276] syzkaller1: entered allmulticast mode [ 297.900854][T15309] vlan2: entered promiscuous mode [ 297.907119][T15309] bridge0: entered promiscuous mode [ 298.200543][T15330] syzkaller0: left promiscuous mode [ 298.206390][T15330] syzkaller0: left allmulticast mode [ 298.217686][T15332] openvswitch: netlink: Unknown nsh attribute 0 [ 298.359264][T15338] dvmrp1: entered allmulticast mode [ 298.578220][T15357] netlink: 'syz.0.2768': attribute type 5 has an invalid length. [ 298.594489][T15354] bond14: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 298.608765][T15354] bond14 (unregistering): Released all slaves [ 299.131831][T15391] tipc: Enabling of bearer rejected, failed to enable media [ 299.144894][T15336] dvmrp1: left allmulticast mode [ 299.193804][T15395] bond0: (slave macvlan2): Opening slave failed [ 299.575763][T15415] x_tables: duplicate underflow at hook 1 [ 300.079842][T15433] netlink: 'syz.4.2792': attribute type 1 has an invalid length. [ 300.089686][T15434] netlink: 'syz.4.2792': attribute type 1 has an invalid length. [ 300.101668][T15436] ip6gre2: entered promiscuous mode [ 300.115418][T15436] ip6gre2: entered allmulticast mode [ 300.123499][ T3025] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 300.123628][T15436] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 300.142900][ T3025] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 300.151845][ T6012] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 300.365084][T15450] warn_alloc: 1 callbacks suppressed [ 300.365100][T15450] syz.1.2799: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 300.368354][ T30] audit: type=1107 audit(1765784416.060:3): pid=15451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''&fùsÌv9P!‡¸5â±¾]·^T>Þì]Ž6Ûù|–¬K<«Þ_|Žwðˆ ”£üW|®»ì.Ê„YÛ¬4RósļŠ>ò$8©dšO°×Xqþ´ÀÒ:-Kt— I#4ëª`X‹÷ É}•Yæ<Ú€O¿ó­½!õÑêY§‚' [ 300.378710][T15450] ,cpuset=/,mems_allowed=0-1 [ 300.421750][T15450] CPU: 0 UID: 0 PID: 15450 Comm: syz.1.2799 Not tainted syzkaller #0 PREEMPT(full) [ 300.421773][T15450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 300.421783][T15450] Call Trace: [ 300.421790][T15450] [ 300.421798][T15450] dump_stack_lvl+0x189/0x250 [ 300.421824][T15450] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 300.421851][T15450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.421870][T15450] ? __pfx__printk+0x10/0x10 [ 300.421893][T15450] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 300.421919][T15450] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 300.421951][T15450] warn_alloc+0x214/0x310 [ 300.421974][T15450] ? stack_depot_save_flags+0x40/0x850 [ 300.421999][T15450] ? __pfx_warn_alloc+0x10/0x10 [ 300.422023][T15450] ? kasan_save_track+0x3e/0x80 [ 300.422043][T15450] ? __kasan_kmalloc+0x93/0xb0 [ 300.422065][T15450] ? xsk_setsockopt+0x4dc/0x8d0 [ 300.422082][T15450] ? do_sock_setsockopt+0x17c/0x1b0 [ 300.422108][T15450] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 300.422130][T15450] ? do_syscall_64+0xfa/0xf80 [ 300.422151][T15450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.422179][T15450] __vmalloc_node_range_noprof+0x125/0x12d0 [ 300.422231][T15450] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 300.422257][T15450] ? __kasan_kmalloc+0x93/0xb0 [ 300.422284][T15450] vmalloc_user_noprof+0xad/0xf0 [ 300.422305][T15450] ? xskq_create+0xbf/0x170 [ 300.422326][T15450] xskq_create+0xbf/0x170 [ 300.422348][T15450] xsk_init_queue+0xb0/0x110 [ 300.422370][T15450] xsk_setsockopt+0x4dc/0x8d0 [ 300.422391][T15450] ? __pfx_xsk_setsockopt+0x10/0x10 [ 300.422412][T15450] ? __pfx_aa_sk_perm+0x10/0x10 [ 300.422438][T15450] ? aa_sock_opt_perm+0xff/0x1a0 [ 300.422458][T15450] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 300.422479][T15450] ? __pfx_xsk_setsockopt+0x10/0x10 [ 300.422498][T15450] do_sock_setsockopt+0x17c/0x1b0 [ 300.422527][T15450] __x64_sys_setsockopt+0x13f/0x1b0 [ 300.422556][T15450] do_syscall_64+0xfa/0xf80 [ 300.422578][T15450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.422603][T15450] ? clear_bhb_loop+0x60/0xb0 [ 300.422625][T15450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.422641][T15450] RIP: 0033:0x7f549858f749 [ 300.422657][T15450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.422673][T15450] RSP: 002b:00007f54994c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 300.422691][T15450] RAX: ffffffffffffffda RBX: 00007f54987e5fa0 RCX: 00007f549858f749 [ 300.422704][T15450] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 300.422715][T15450] RBP: 00007f5498613f91 R08: 0000000000000004 R09: 0000000000000000 [ 300.422726][T15450] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.422737][T15450] R13: 00007f54987e6038 R14: 00007f54987e5fa0 R15: 00007fff95d90ca8 [ 300.422769][T15450] [ 300.422965][T15450] Mem-Info: [ 300.725902][T15450] active_anon:4742 inactive_anon:0 isolated_anon:0 [ 300.725902][T15450] active_file:2637 inactive_file:39945 isolated_file:0 [ 300.725902][T15450] unevictable:768 dirty:100 writeback:0 [ 300.725902][T15450] slab_reclaimable:11767 slab_unreclaimable:108541 [ 300.725902][T15450] mapped:28976 shmem:1393 pagetables:1235 [ 300.725902][T15450] sec_pagetables:0 bounce:0 [ 300.725902][T15450] kernel_misc_reclaimable:0 [ 300.725902][T15450] free:1316892 free_pcp:15532 free_cma:0 [ 300.815813][T15450] Node 0 active_anon:19668kB inactive_anon:0kB active_file:10548kB inactive_file:159576kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116504kB dirty:400kB writeback:0kB shmem:4636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14388kB pagetables:4480kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 300.835934][ T6012] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 300.866541][T15450] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 300.972353][T15464] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 300.995790][T15450] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 301.032353][T15464] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 301.053466][T15464] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.084462][T15450] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 301.118549][T15450] Node 0 DMA32 free:1360824kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23920kB inactive_anon:0kB active_file:10548kB inactive_file:159576kB unevictable:1536kB writepending:428kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:43064kB local_pcp:20952kB free_cma:0kB [ 301.155569][ T6012] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 301.207765][T15450] lowmem_reserve[]: 0 0 0 0 0 [ 301.213488][T15450] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 301.263952][T15450] lowmem_reserve[]: 0 0 0 0 0 [ 301.269146][T15450] Node 1 Normal free:3887916kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18024kB local_pcp:8624kB free_cma:0kB [ 301.305792][T15450] lowmem_reserve[]: 0 0 0 0 0 [ 301.310571][T15450] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 301.338936][T15450] Node 0 DMA32: 2*4kB (ME) 364*8kB (UM) 558*16kB (UME) 475*32kB (UM) 526*64kB (UME) 189*128kB (UME) 107*256kB (UM) 46*512kB (UM) 20*1024kB (UM) [ 301.360552][T15464] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 301.387656][T15450] 4*2048kB (UM) 292*4096kB (UM) = 1360552kB [ 301.398621][T15464] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 301.403918][T15450] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 301.420120][T15464] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.451713][T15450] Node 1 Normal: 187*4kB (UE) 42*8kB (UME) 49*16kB (UME) 89*32kB (UME) 23*64kB (UME) 8*128kB (UME) 3*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3887916kB [ 301.515496][T15450] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 301.535831][T15450] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 301.558130][T15450] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 301.584334][T15450] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 301.638490][T15450] 46677 total pagecache pages [ 301.656446][T15450] 0 pages in swap cache [ 301.660631][T15450] Free swap = 124996kB [ 301.664781][T15450] Total swap = 124996kB [ 301.669345][T15450] 2097051 pages RAM [ 301.673179][T15450] 0 pages HighMem/MovableOnly [ 301.684544][T15450] 424280 pages reserved [ 301.688985][T15450] 0 pages cma reserved [ 301.712959][T15464] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 301.764916][T15464] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 301.803551][T15464] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.894311][T15510] __nla_validate_parse: 21 callbacks suppressed [ 301.894329][T15510] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2815'. [ 301.938719][T15464] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 301.977564][T15464] bond0: (slave netdevsim0): Releasing backup interface [ 301.990496][T15464] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 302.004952][T15464] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 302.016599][T15464] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 302.027424][T15464] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.234660][T11357] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.245864][T15529] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2822'. [ 302.254952][T15530] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2822'. [ 302.259155][T11357] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 302.285127][T11357] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.356197][ T7644] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.365139][ T7644] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 302.367596][T15540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2823'. [ 302.374643][ T7644] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.427214][ T3646] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.451381][ T3646] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 302.462702][ T3646] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.497532][ T3646] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.546452][ T3646] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 302.554578][ T3646] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.564589][T15549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2827'. [ 302.580004][T15553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2827'. [ 302.600876][T15557] nbd: socks must be embedded in a SOCK_ITEM attr [ 302.692894][T15563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2832'. [ 302.722322][T15567] netlink: 'syz.3.2831': attribute type 9 has an invalid length. [ 302.760646][T15567] netlink: 'syz.3.2831': attribute type 11 has an invalid length. [ 302.775861][T15567] netlink: 'syz.3.2831': attribute type 12 has an invalid length. [ 302.784110][T15567] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.2831'. [ 302.873062][T15576] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 302.956431][T15581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2836'. [ 302.965967][T15581] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2836'. [ 303.576704][T15594] netlink: 'syz.2.2840': attribute type 13 has an invalid length. [ 303.614592][T15601] sctp: [Deprecated]: syz.1.2842 (pid 15601) Use of int in max_burst socket option. [ 303.614592][T15601] Use struct sctp_assoc_value instead [ 303.857538][T15607] bond5: Unable to set up delay as MII monitoring is disabled [ 303.888010][T15607] bond5 (unregistering): Released all slaves [ 303.920685][T15620] netlink: 'syz.3.2844': attribute type 1 has an invalid length. [ 303.974252][T15626] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 303.984656][T15620] netlink: 'syz.3.2844': attribute type 2 has an invalid length. [ 304.001567][T15612] syzkaller1: entered promiscuous mode [ 304.007747][T15612] syzkaller1: entered allmulticast mode [ 304.195384][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 304.253824][T15643] bond0: option ad_select: unable to set because the bond device is up [ 304.764444][T15677] netlink: 'syz.4.2857': attribute type 29 has an invalid length. [ 304.922364][T15682] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 304.932879][T15682] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 305.208665][T15708] xt_hashlimit: invalid interval [ 305.216746][T15708] netlink: 'syz.2.2869': attribute type 1 has an invalid length. [ 305.334496][T15717] netlink: 'syz.2.2871': attribute type 1 has an invalid length. [ 305.344775][T15717] netlink: 'syz.2.2871': attribute type 1 has an invalid length. [ 306.154560][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 306.164893][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 306.174434][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 306.183447][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 306.191885][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 306.204400][T15758] team1: entered promiscuous mode [ 306.211044][T15758] team1: entered allmulticast mode [ 306.745900][T15756] chnl_net:caif_netlink_parms(): no params data found [ 306.950450][T15802] 8021q: adding VLAN 0 to HW filter on device bond5 [ 307.007876][T15812] 8021q: adding VLAN 0 to HW filter on device bond5 [ 307.015042][T15812] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 307.027548][T15812] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 307.119212][T15802] veth11: entered promiscuous mode [ 307.129325][T15802] bond5: (slave veth11): Enslaving as an active interface with a down link [ 307.131428][T15830] __nla_validate_parse: 13 callbacks suppressed [ 307.131442][T15830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2902'. [ 307.199128][T15821] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.211196][T15821] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 307.222816][T15821] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.272820][T15756] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.287633][T15756] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.295144][T15756] bridge_slave_0: entered allmulticast mode [ 307.320757][T15756] bridge_slave_0: entered promiscuous mode [ 307.329702][T15756] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.337516][T15756] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.344928][T15756] bridge_slave_1: entered allmulticast mode [ 307.353208][T15756] bridge_slave_1: entered promiscuous mode [ 307.402277][T15821] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.414165][T15821] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 307.424967][T15821] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.487232][T15846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2907'. [ 307.498024][T15846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2907'. [ 307.513446][T15756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.562334][T15821] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.573620][T15821] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 307.584273][T15821] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.602368][T15756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.695032][T15821] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.717147][T15821] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 307.734540][T15821] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.768307][T15858] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2912'. [ 307.771194][T15860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2911'. [ 307.780817][T15756] team0: Port device team_slave_0 added [ 307.815624][T15860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2911'. [ 307.848978][T15756] team0: Port device team_slave_1 added [ 307.973428][T15756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.982002][T15756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.012607][T15869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2915'. [ 308.023610][T15756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.110953][T15756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.128609][T15756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.158671][T15756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.187030][T15881] xt_bpf: check failed: parse error [ 308.227678][ T7644] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.245925][ T7644] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 308.259132][ T7644] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.275814][ T5849] Bluetooth: hci5: command tx timeout [ 308.303665][ T4604] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.325562][ T4604] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 308.346427][ T4604] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.426596][ T4604] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.436463][ T4604] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 308.448501][ T4604] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.459523][T15889] validate_nla: 2 callbacks suppressed [ 308.459539][T15889] netlink: 'syz.2.2922': attribute type 16 has an invalid length. [ 308.463883][T15756] hsr_slave_0: entered promiscuous mode [ 308.465026][T15889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2922'. [ 308.506582][T15756] hsr_slave_1: entered promiscuous mode [ 308.518607][T15756] debugfs: 'hsr0' already exists in 'hsr' [ 308.524422][T15756] Cannot create hsr debugfs directory [ 308.530521][ T4604] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.540199][ T4604] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 308.548724][ T4604] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.638531][T15902] netem: unknown loss type 0 [ 308.644297][T15902] netem: change failed [ 308.862942][T15917] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2928'. [ 308.888108][T15756] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.904059][T15756] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.919761][T15756] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 308.992255][T15925] vcan0: tx drop: invalid sa for name 0x0040000000000000 [ 309.027159][T15756] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.039048][T15756] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.049694][T15756] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 309.077941][T15932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2931'. [ 309.151487][T15756] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.165112][T15756] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.177913][T15756] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 309.249703][T15756] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.268967][T15756] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.280154][T15756] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 309.312416][T15941] netlink: 'syz.2.2935': attribute type 2 has an invalid length. [ 309.326167][T15942] netlink: 'syz.2.2935': attribute type 2 has an invalid length. [ 309.594433][T15756] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 309.609892][T15756] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 309.643773][T15756] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 309.660477][T15756] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 309.821834][T15756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.845791][T15756] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.859117][ T4526] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.866300][ T4526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.901223][ T4604] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.902923][T15985] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 309.908439][ T4604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.097457][T15994] syzkaller0: entered promiscuous mode [ 310.125401][T15994] syzkaller0: entered allmulticast mode [ 310.282286][T15756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.310834][T16005] x_tables: duplicate underflow at hook 3 [ 310.355634][ T5849] Bluetooth: hci5: command tx timeout [ 310.782617][T16039] bond13: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 310.796959][T16039] bond13 (unregistering): Released all slaves [ 310.889076][T16043] tap0: tun_chr_ioctl cmd 2148553947 [ 310.902024][T15756] veth0_vlan: entered promiscuous mode [ 310.954003][T15756] veth1_vlan: entered promiscuous mode [ 311.053674][T15756] veth0_macvtap: entered promiscuous mode [ 311.113133][T15756] veth1_macvtap: entered promiscuous mode [ 311.139331][T15756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.161148][T15756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.201043][ T1136] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.226677][ T1136] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.243249][ T1136] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.257336][ T1136] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.416659][ T4526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.424508][ T4526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.492014][ T4604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.509393][ T4604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.776491][T16098] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 311.790987][T16100] tipc: Enabled bearer , priority 0 [ 311.814732][T16100] mac80211_hwsim hwsim14 syzkaller0: entered promiscuous mode [ 311.837256][T16100] mac80211_hwsim hwsim14 syzkaller0: entered allmulticast mode [ 311.857416][T16100] tipc: Resetting bearer [ 311.878142][T16100] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 312.038203][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 312.289117][T16122] netlink: 'syz.0.2986': attribute type 10 has an invalid length. [ 312.300137][T16125] netlink: 'syz.0.2986': attribute type 10 has an invalid length. [ 312.315695][T16124] __nla_validate_parse: 23 callbacks suppressed [ 312.315712][T16124] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2987'. [ 312.318062][ T6012] IPVS: starting estimator thread 0... [ 312.396250][T16131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2990'. [ 312.436567][ T5849] Bluetooth: hci5: command tx timeout [ 312.465368][T16126] IPVS: using max 33 ests per chain, 79200 per kthread [ 312.484745][T16136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2990'. [ 312.496331][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 312.506294][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 312.514037][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 312.524359][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 312.534726][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 312.730766][T16149] x_tables: duplicate underflow at hook 2 [ 312.752354][T16148] netlink: 212324 bytes leftover after parsing attributes in process `syz.0.2994'. [ 312.772264][T16149] x_tables: duplicate underflow at hook 2 [ 312.778957][T16149] x_tables: duplicate underflow at hook 2 [ 312.784839][T16149] x_tables: duplicate underflow at hook 2 [ 312.790853][T16149] x_tables: duplicate underflow at hook 2 [ 312.799759][T16149] x_tables: duplicate underflow at hook 2 [ 312.805767][T16149] x_tables: duplicate underflow at hook 2 [ 312.811643][T16149] x_tables: duplicate underflow at hook 2 [ 312.817688][T16149] x_tables: duplicate underflow at hook 2 [ 312.833483][ T61] tipc: Resetting bearer [ 312.849761][T16154] net veth1_virt_wifi .: renamed from virt_wifi0 [ 312.933527][T16159] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2998'. [ 312.987070][T16161] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2998'. [ 313.034565][T16132] chnl_net:caif_netlink_parms(): no params data found [ 313.360485][T16132] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.371500][T16132] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.407664][T16132] bridge_slave_0: entered allmulticast mode [ 313.431435][T16132] bridge_slave_0: entered promiscuous mode [ 314.262386][T16132] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.271169][T16132] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.300898][T16132] bridge_slave_1: entered allmulticast mode [ 314.314370][T16132] bridge_slave_1: entered promiscuous mode [ 314.488655][T16132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.510581][T16207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3011'. [ 314.528972][ T5849] Bluetooth: hci5: command tx timeout [ 314.534823][T16132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.572486][T16207] geneve3: entered promiscuous mode [ 314.596566][ T5849] Bluetooth: hci1: command tx timeout [ 314.659267][T16132] team0: Port device team_slave_0 added [ 314.689753][T16132] team0: Port device team_slave_1 added [ 314.789234][T16228] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 314.796518][T16228] IPv6: NLM_F_CREATE should be set when creating new route [ 314.803904][T16228] IPv6: NLM_F_CREATE should be set when creating new route [ 314.811141][T16228] IPv6: NLM_F_CREATE should be set when creating new route [ 314.818470][T16230] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 314.829000][T16132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.839079][T16132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.865997][T16228] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 314.873948][T16132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.885573][T16230] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 314.906200][T16132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.916268][T16132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.929447][T16237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3020'. [ 314.954720][T16229] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3018'. [ 314.971223][T16132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.057155][T16242] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3021'. [ 315.218640][T16132] hsr_slave_0: entered promiscuous mode [ 315.225689][T16132] hsr_slave_1: entered promiscuous mode [ 315.232030][T16132] debugfs: 'hsr0' already exists in 'hsr' [ 315.255773][T16132] Cannot create hsr debugfs directory [ 315.370425][T16262] openvswitch: netlink: IP tunnel dst address not specified [ 315.380608][T16259] tipc: Enabling of bearer rejected, already enabled [ 315.499380][T16269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.608724][T16281] netlink: 'syz.4.3031': attribute type 5 has an invalid length. [ 315.659788][T16132] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.698136][T16132] netdevsim netdevsim3 eth3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 315.722160][T16132] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.808119][T16132] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.831229][T16132] netdevsim netdevsim3 eth2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 315.841616][T16132] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.863208][T16298] netlink: 'syz.1.3037': attribute type 1 has an invalid length. [ 315.924477][T16132] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.934785][T16132] netdevsim netdevsim3 eth1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 315.945535][T16132] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.042874][T16132] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.058788][T16132] netdevsim netdevsim3 eth0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 316.079641][T16132] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.127708][T16305] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 316.163124][T16305] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 316.175495][T16305] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 316.217677][T16305] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 316.243739][T16305] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 316.273632][T16305] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 316.314279][T16305] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 316.366147][T16305] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 316.398108][T16132] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 316.417379][T16132] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 316.429709][T16132] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 316.462907][T16132] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 316.671884][T16132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.685434][ T5849] Bluetooth: hci1: command tx timeout [ 316.726676][T16132] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.741615][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.748813][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.774654][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.781888][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.828839][T16347] ÿÿÿÿÿÿ¤lòo¾k‰÷: renamed from lo (while UP) [ 317.248344][T16379] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 317.460964][T16132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.548351][T16132] veth0_vlan: entered promiscuous mode [ 317.556807][T16396] __nla_validate_parse: 6 callbacks suppressed [ 317.556824][T16396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3067'. [ 317.583027][T16396] chnl_net:caif_netlink_parms(): no params data found [ 317.585743][T16404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.633535][T16132] veth1_vlan: entered promiscuous mode [ 317.636973][T16404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.732615][T16132] veth0_macvtap: entered promiscuous mode [ 317.743536][T16132] veth1_macvtap: entered promiscuous mode [ 317.800740][T16132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.833082][T16132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.856959][ T61] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.868605][ T61] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.886927][ T61] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.914900][T16421] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3072'. [ 317.927914][ T61] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.091677][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.099963][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.128975][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.137919][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.227294][T16431] erspan0: entered promiscuous mode [ 318.251711][T16437] nbd: nbd1 already in use [ 318.349920][T16445] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3078'. [ 318.538545][T16449] dvmrp6: entered allmulticast mode [ 318.632863][T16453] bond1: option mode: invalid value (133) [ 318.684791][T16453] bond1 (unregistering): Released all slaves [ 318.755697][ T5849] Bluetooth: hci1: command tx timeout [ 318.883196][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 318.897283][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 318.899556][T16462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3083'. [ 318.920738][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 318.937815][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 318.946444][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 318.989552][T16464] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3084'. [ 318.998835][T16464] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3084'. [ 319.009010][T16464] netlink: 'syz.0.3084': attribute type 5 has an invalid length. [ 319.017496][T16464] netlink: 'syz.0.3084': attribute type 6 has an invalid length. [ 319.026214][T16464] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3084'. [ 319.074322][T16462] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3083'. [ 319.306230][ T4604] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.420209][ T4604] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.599588][ T4604] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.652691][T16508] Cannot find add_set index 0 as target [ 319.818805][ T4604] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.969807][T16529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3101'. [ 319.980870][T16529] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3101'. [ 320.111943][T16540] netlink: 'syz.2.3105': attribute type 1 has an invalid length. [ 320.133767][T16541] netlink: 'syz.3.3104': attribute type 29 has an invalid length. [ 320.142854][T16460] chnl_net:caif_netlink_parms(): no params data found [ 320.514735][ T4604] ip6gretap0 (unregistering): left promiscuous mode [ 320.538662][ T4604] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 320.548024][ T4604] ip6gretap1 (unregistering): left allmulticast mode [ 320.759291][ T4604] bond2 (unregistering): (slave gretap1): Releasing active interface [ 320.777926][T16578] block nbd4: Unsupported socket: should be TCP or UNIX. [ 320.787725][ T4604] bond7 (unregistering): (slave gretap2): Releasing active interface [ 320.835947][ T5848] Bluetooth: hci1: command tx timeout [ 320.852322][ T4604] dvmrp6 (unregistering): left allmulticast mode [ 320.873365][ T4604] bond8 (unregistering): (slave geneve2): Releasing active interface [ 320.997211][ T5848] Bluetooth: hci4: command tx timeout [ 321.245160][ T4604] bond10 (unregistering): (slave bridge7): Releasing backup interface [ 321.254091][ T4604] bridge7 (unregistering): left promiscuous mode [ 321.408329][ T4604] bond0 (unregistering): left promiscuous mode [ 321.420120][ T4604] bond0 (unregistering): Released all slaves [ 321.432736][ T4604] bond1 (unregistering): Released all slaves [ 321.526606][ T4604] bond2 (unregistering): Released all slaves [ 321.617932][ T4604] bond3 (unregistering): (slave veth3): Releasing active interface [ 321.628265][ T4604] bond3 (unregistering): (slave vlan0): Releasing active interface [ 321.637198][ T4604] bond3 (unregistering): Released all slaves [ 321.651406][ T4604] bond4 (unregistering): Released all slaves [ 321.740888][ T4604] bond5 (unregistering): Released all slaves [ 321.753880][ T4604] bond6 (unregistering): Released all slaves [ 321.848813][ T4604] bond7 (unregistering): Released all slaves [ 321.938570][ T4604] bond8 (unregistering): Released all slaves [ 321.952167][ T4604] bond9 (unregistering): Released all slaves [ 322.053133][ T4604] bond10 (unregistering): Released all slaves [ 322.140710][ T4604] bond11 (unregistering): Released all slaves [ 322.154098][ T4604] bond12 (unregistering): Released all slaves [ 322.242914][ T4604] bond13 (unregistering): Released all slaves [ 322.482811][ T4604] tipc: Disabling bearer [ 322.511158][T16460] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.518695][ T4604] tipc: Left network mode [ 322.525605][T16460] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.533034][T16460] bridge_slave_0: entered allmulticast mode [ 322.557722][T16460] bridge_slave_0: entered promiscuous mode [ 322.608360][T16460] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.615887][T16460] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.623424][T16460] bridge_slave_1: entered allmulticast mode [ 322.633424][T16460] bridge_slave_1: entered promiscuous mode [ 322.719258][T16460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.745175][T16460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.777600][T16607] __nla_validate_parse: 9 callbacks suppressed [ 322.777617][T16607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3123'. [ 322.854099][T16460] team0: Port device team_slave_0 added [ 322.862583][T16460] team0: Port device team_slave_1 added [ 322.940555][T16460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.948622][T16460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.976464][T16460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.996240][T16460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.003394][T16460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.029784][T16460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.075555][ T5849] Bluetooth: hci4: command tx timeout [ 323.133443][T16460] hsr_slave_0: entered promiscuous mode [ 323.141274][T16460] hsr_slave_1: entered promiscuous mode [ 323.147782][T16460] debugfs: 'hsr0' already exists in 'hsr' [ 323.153520][T16460] Cannot create hsr debugfs directory [ 323.171098][ T4604] hsr_slave_0: left promiscuous mode [ 323.179243][ T4604] hsr_slave_1: left promiscuous mode [ 323.188900][ T4604] veth1_macvtap: left promiscuous mode [ 323.194623][ T4604] veth0_macvtap: left promiscuous mode [ 323.419298][T16618] net_ratelimit: 58 callbacks suppressed [ 323.419317][T16618] openvswitch: netlink: IP tunnel dst address not specified [ 323.474627][T16622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3129'. [ 324.028290][T16613] netlink: 'syz.2.3126': attribute type 1 has an invalid length. [ 324.052870][T16619] syzkaller1: entered promiscuous mode [ 324.060205][T16619] syzkaller1: entered allmulticast mode [ 324.078963][T16633] ip6gre1: entered allmulticast mode [ 324.220900][T16638] netlink: 'syz.2.3133': attribute type 1 has an invalid length. [ 324.360925][T16645] bond13: (slave geneve3): making interface the new active one [ 324.370791][T16651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3134'. [ 324.389815][T16645] bond13: (slave geneve3): Enslaving as an active interface with an up link [ 324.439384][T15170] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 324.524689][T15170] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 324.553044][T15170] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 324.605598][T15170] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 324.633186][T16662] netlink: 'syz.0.3138': attribute type 10 has an invalid length. [ 324.668429][T16662] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 324.842367][ T4604] IPVS: stop unused estimator thread 0... [ 324.892215][T16686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3143'. [ 324.932490][T16686] ipt_REJECT: TCP_RESET invalid for non-tcp [ 325.078184][T16704] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3143'. [ 325.156142][ T5849] Bluetooth: hci4: command 0x040f tx timeout [ 325.697382][T16460] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 325.732044][T16460] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 325.808224][T16460] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 325.840795][T16460] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 325.912990][T16723] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3151'. [ 326.075104][T16460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.102959][T16460] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.119316][ T7644] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.126555][ T7644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.153514][ T7644] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.160723][ T7644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.865085][T16460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.946520][T16799] Cannot find add_set index 0 as target [ 327.027677][T16460] veth0_vlan: entered promiscuous mode [ 327.146696][T16460] veth1_vlan: entered promiscuous mode [ 327.221273][T16460] veth0_macvtap: entered promiscuous mode [ 327.237850][ T5848] Bluetooth: hci4: command 0x040f tx timeout [ 327.251123][T16460] veth1_macvtap: entered promiscuous mode [ 327.251574][T16817] netlink: 'syz.0.3174': attribute type 63 has an invalid length. [ 327.271436][T16460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.293223][T16460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.307473][T16815] netlink: 'syz.0.3174': attribute type 63 has an invalid length. [ 327.330016][ T4604] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.381757][ T4604] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.435110][ T4604] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.465983][ T4604] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.577802][T16833] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3179'. [ 327.769990][T16849] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3183'. [ 327.789679][T16846] can: request_module (can-proto-4) failed. [ 327.852857][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.895944][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.963599][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.007220][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.017883][T16859] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3185'. [ 328.043339][T16862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3187'. [ 328.066310][T16863] wlan0 speed is unknown, defaulting to 1000 [ 328.072706][T16863] wlan0 speed is unknown, defaulting to 1000 [ 328.115039][T16862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3187'. [ 328.131909][T16863] wlan0 speed is unknown, defaulting to 1000 [ 328.166441][T16863] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 328.211703][T16870] netlink: 'syz.4.3190': attribute type 2 has an invalid length. [ 328.231985][T16872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3079'. [ 328.256496][T16863] wlan0 speed is unknown, defaulting to 1000 [ 328.279248][T16863] wlan0 speed is unknown, defaulting to 1000 [ 328.303270][T16863] wlan0 speed is unknown, defaulting to 1000 [ 328.311915][T16863] wlan0 speed is unknown, defaulting to 1000 [ 328.320347][T16863] wlan0 speed is unknown, defaulting to 1000 [ 328.368496][T16863] wlan0 speed is unknown, defaulting to 1000 [ 328.406058][T16863] wlan0 speed is unknown, defaulting to 1000 [ 328.654158][T16893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3196'. [ 328.798648][T16898] netlink: 'syz.1.3199': attribute type 33 has an invalid length. [ 329.052275][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 329.072233][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 329.080623][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 329.097552][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 329.107946][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 329.147962][T16909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3202'. [ 329.158046][T16909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3202'. [ 329.192068][T16906] wlan0 speed is unknown, defaulting to 1000 [ 329.199388][T16909] syz_tun: entered allmulticast mode [ 329.206033][T16908] syz_tun: left allmulticast mode [ 329.258776][T16915] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3205'. [ 329.289543][ T5888] IPVS: starting estimator thread 0... [ 329.295122][T16911] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 329.315482][ T5849] Bluetooth: hci4: command 0x040f tx timeout [ 329.321985][T16917] netlink: 'syz.3.3204': attribute type 3 has an invalid length. [ 329.342170][T16920] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3205'. [ 329.352395][T16911] IPv6: addrconf: prefix option has invalid lifetime [ 329.407238][T16918] IPVS: using max 27 ests per chain, 64800 per kthread [ 329.480283][T16932] sctp: [Deprecated]: syz.3.3209 (pid 16932) Use of struct sctp_assoc_value in delayed_ack socket option. [ 329.480283][T16932] Use struct sctp_sack_info instead [ 329.493128][T16929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3207'. [ 329.549323][T16936] netlink: 'syz.1.3210': attribute type 1 has an invalid length. [ 329.570559][T16906] chnl_net:caif_netlink_parms(): no params data found [ 329.716833][T16945] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 329.898110][T16906] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.926336][T16906] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.939933][T16906] bridge_slave_0: entered allmulticast mode [ 329.959453][T16906] bridge_slave_0: entered promiscuous mode [ 329.999621][T16906] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.014095][T16906] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.031097][T16906] bridge_slave_1: entered allmulticast mode [ 330.064236][T16906] bridge_slave_1: entered promiscuous mode [ 330.111346][T16906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.127456][T16906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.203869][T16906] team0: Port device team_slave_0 added [ 330.213432][T16906] team0: Port device team_slave_1 added [ 330.290168][T16906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.299746][T16906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.326275][T16906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.345039][T16906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.352144][T16906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.380349][T16906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.391574][T16984] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 330.420206][T16986] syzkaller0: entered promiscuous mode [ 330.428324][T16986] syzkaller0: entered allmulticast mode [ 330.490897][T16906] hsr_slave_0: entered promiscuous mode [ 330.506342][T16906] hsr_slave_1: entered promiscuous mode [ 330.512988][T16906] debugfs: 'hsr0' already exists in 'hsr' [ 330.520526][T16906] Cannot create hsr debugfs directory [ 330.810966][T16906] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.822670][T16906] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.835354][T16906] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 330.847636][T16906] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 331.012911][T17009] xt_l2tp: invalid flags combination: 0 [ 331.030217][T16906] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.055533][T16906] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.068428][T16906] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 331.079788][T16906] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 331.090878][T17014] openvswitch: netlink: Message has -2 unknown bytes. [ 331.157992][ T5848] Bluetooth: hci3: command tx timeout [ 331.223066][T16906] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.259018][T17019] netlink: 'syz.3.3234': attribute type 11 has an invalid length. [ 331.261184][T16906] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.303556][T16906] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 331.324721][T16906] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 331.480891][T16906] bond0: (slave netdevsim0): Releasing backup interface [ 331.513055][T16906] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.531975][T16906] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.550009][T16906] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 331.562289][T16906] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 331.603491][ T5837] syz1: Port: 1 Link DOWN [ 331.871087][T17058] netlink: 'syz.3.3244': attribute type 7 has an invalid length. [ 331.876952][T17053] pimreg: entered allmulticast mode [ 331.911698][T16906] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 331.949877][T16906] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 332.005976][T16906] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 332.060622][T16906] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 332.183856][T17084] netlink: 'syz.0.3247': attribute type 4 has an invalid length. [ 332.375556][T16906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.426997][T16906] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.452336][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.459538][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.489271][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.496535][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.527675][T17097] netlink: 'syz.4.3252': attribute type 10 has an invalid length. [ 332.561190][T17106] netlink: 'syz.0.3255': attribute type 1 has an invalid length. [ 332.572631][T17097] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.582183][T17097] bridge_slave_1: left allmulticast mode [ 332.588372][T17097] bridge_slave_1: left promiscuous mode [ 332.594133][T17097] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.608330][T17097] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 332.688563][T17106] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 332.930040][T17133] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.952990][T17133] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.960072][T17135] netlink: 'syz.1.3260': attribute type 16 has an invalid length. [ 332.968138][T17135] netlink: 'syz.1.3260': attribute type 17 has an invalid length. [ 333.039186][T17136] __nla_validate_parse: 18 callbacks suppressed [ 333.039205][T17136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3262'. [ 333.054705][T17135] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.066854][T17135] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 333.149415][ T4526] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.176382][ T4526] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.185137][ T4526] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.194897][T17136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3262'. [ 333.227932][T16906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.236685][ T5848] Bluetooth: hci3: command 0x041b tx timeout [ 333.243659][ T4526] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.401142][T17162] xt_CT: You must specify a L4 protocol and not use inversions on it [ 333.405133][T17162] xt_CT: You must specify a L4 protocol and not use inversions on it [ 333.439518][T16906] veth0_vlan: entered promiscuous mode [ 333.456504][T17162] xt_CT: You must specify a L4 protocol and not use inversions on it [ 333.457034][T17162] xt_CT: You must specify a L4 protocol and not use inversions on it [ 333.467871][T17162] xt_CT: You must specify a L4 protocol and not use inversions on it [ 333.484898][T16906] veth1_vlan: entered promiscuous mode [ 333.507806][T17162] xt_CT: You must specify a L4 protocol and not use inversions on it [ 333.509582][T17162] xt_CT: You must specify a L4 protocol and not use inversions on it [ 333.534168][T17162] xt_CT: You must specify a L4 protocol and not use inversions on it [ 333.578943][T16906] veth0_macvtap: entered promiscuous mode [ 333.596138][T17162] xt_CT: You must specify a L4 protocol and not use inversions on it [ 333.596975][T17162] xt_CT: You must specify a L4 protocol and not use inversions on it [ 333.616214][T16906] veth1_macvtap: entered promiscuous mode [ 333.691363][T16906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.739792][T16906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.759953][ T4526] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.781426][ T4526] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.819231][ T4526] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.840822][ T4526] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.920004][ T3025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.940619][ T3025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.992857][ T3025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.999696][T17180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3277'. [ 334.001323][ T3025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.053319][T17189] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3277'. [ 334.087578][T17194] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3281'. [ 334.308128][T17209] netlink: 'syz.4.3286': attribute type 28 has an invalid length. [ 334.372866][T17213] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3286'. [ 334.405682][T17209] netlink: 'syz.4.3286': attribute type 3 has an invalid length. [ 334.486021][T17209] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3286'. [ 334.603252][T17220] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3288'. [ 334.655055][T17217] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3288'. [ 334.676038][T17220] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3288'. [ 334.770663][T17224] netlink: 'syz.4.3290': attribute type 1 has an invalid length. [ 334.924506][T17228] netlink: 'syz.4.3292': attribute type 9 has an invalid length. [ 334.978911][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 334.991227][T17231] xt_CT: You must specify a L4 protocol and not use inversions on it [ 335.000152][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 335.015768][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 335.032270][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 335.040076][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 335.316381][ T5849] Bluetooth: hci3: command 0x041b tx timeout [ 335.443295][T17242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.455080][T17242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.467646][T17242] bond0 (unregistering): Released all slaves [ 335.550623][ T7644] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.563301][ T7644] netdevsim netdevsim0 eth3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 335.579025][ T7644] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.607576][T17232] wlan0 speed is unknown, defaulting to 1000 [ 335.644469][ T7644] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.664432][ T7644] netdevsim netdevsim0 eth2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 335.678209][ T7644] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.733511][ T7644] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.748666][ T7644] netdevsim netdevsim0 eth1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 335.761847][ T7644] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.851584][ T7644] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.868432][ T7644] netdevsim netdevsim0 eth0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 335.883233][ T7644] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.970396][T17274] bridge1: entered promiscuous mode [ 335.988113][T17283] netlink: 'syz.1.3308': attribute type 1 has an invalid length. [ 335.994485][T17274] bridge1: entered allmulticast mode [ 336.059549][T17283] bond0: entered promiscuous mode [ 336.065148][T17283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.128297][T17289] syz.4.3310: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 336.138993][T17283] bond0: (slave bridge1): making interface the new active one [ 336.150890][T17283] bridge1: entered promiscuous mode [ 336.151960][T17289] CPU: 1 UID: 0 PID: 17289 Comm: syz.4.3310 Not tainted syzkaller #0 PREEMPT(full) [ 336.151984][T17289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 336.151996][T17289] Call Trace: [ 336.152003][T17289] [ 336.152010][T17289] dump_stack_lvl+0x189/0x250 [ 336.152039][T17289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.152059][T17289] ? __pfx__printk+0x10/0x10 [ 336.152081][T17289] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 336.152107][T17289] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 336.152133][T17289] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 336.152160][T17289] warn_alloc+0x214/0x310 [ 336.152182][T17289] ? stack_depot_save_flags+0x40/0x850 [ 336.152206][T17289] ? __pfx_warn_alloc+0x10/0x10 [ 336.152228][T17289] ? kasan_save_track+0x3e/0x80 [ 336.152248][T17289] ? __kasan_kmalloc+0x93/0xb0 [ 336.152269][T17289] ? xsk_setsockopt+0x4dc/0x8d0 [ 336.152285][T17289] ? do_sock_setsockopt+0x17c/0x1b0 [ 336.152307][T17289] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 336.152329][T17289] ? do_syscall_64+0xfa/0xf80 [ 336.152349][T17289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.152374][T17289] __vmalloc_node_range_noprof+0x125/0x12d0 [ 336.152425][T17289] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 336.152450][T17289] ? __kasan_kmalloc+0x93/0xb0 [ 336.152476][T17289] vmalloc_user_noprof+0xad/0xf0 [ 336.152497][T17289] ? xskq_create+0xbf/0x170 [ 336.152516][T17289] xskq_create+0xbf/0x170 [ 336.152537][T17289] xsk_init_queue+0xb0/0x110 [ 336.152558][T17289] xsk_setsockopt+0x4dc/0x8d0 [ 336.152578][T17289] ? __pfx_xsk_setsockopt+0x10/0x10 [ 336.152598][T17289] ? __pfx_aa_sk_perm+0x10/0x10 [ 336.152625][T17289] ? aa_sock_opt_perm+0xff/0x1a0 [ 336.152645][T17289] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 336.152665][T17289] ? __pfx_xsk_setsockopt+0x10/0x10 [ 336.152683][T17289] do_sock_setsockopt+0x17c/0x1b0 [ 336.152711][T17289] __x64_sys_setsockopt+0x13f/0x1b0 [ 336.152740][T17289] do_syscall_64+0xfa/0xf80 [ 336.152769][T17289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.152785][T17289] ? clear_bhb_loop+0x60/0xb0 [ 336.152807][T17289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.152823][T17289] RIP: 0033:0x7fef0c18f749 [ 336.152839][T17289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.152854][T17289] RSP: 002b:00007fef0d022038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 336.152871][T17289] RAX: ffffffffffffffda RBX: 00007fef0c3e5fa0 RCX: 00007fef0c18f749 [ 336.152883][T17289] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 336.152893][T17289] RBP: 00007fef0c213f91 R08: 0000000000000004 R09: 0000000000000000 [ 336.152904][T17289] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.152915][T17289] R13: 00007fef0c3e6038 R14: 00007fef0c3e5fa0 R15: 00007ffc67a1eab8 [ 336.152945][T17289] [ 336.152952][T17289] Mem-Info: [ 336.158817][T17283] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 336.175552][T17289] active_anon:4623 inactive_anon:0 isolated_anon:0 [ 336.175552][T17289] active_file:2637 inactive_file:39969 isolated_file:0 [ 336.175552][T17289] unevictable:768 dirty:84 writeback:0 [ 336.175552][T17289] slab_reclaimable:12375 slab_unreclaimable:132943 [ 336.175552][T17289] mapped:28931 shmem:1357 pagetables:1087 [ 336.175552][T17289] sec_pagetables:0 bounce:0 [ 336.175552][T17289] kernel_misc_reclaimable:0 [ 336.175552][T17289] free:1289076 free_pcp:16383 free_cma:0 [ 336.219919][T17282] syzkaller0: entered promiscuous mode [ 336.226604][T17289] Node 0 active_anon:18492kB inactive_anon:0kB active_file:10548kB inactive_file:159672kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115724kB dirty:336kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14952kB pagetables:4188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 336.231364][T17282] syzkaller0: entered allmulticast mode [ 336.236524][T17289] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 336.616578][T17289] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 336.659087][T17289] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 336.672447][ T7644] tipc: Resetting bearer [ 336.722105][T17289] Node 0 DMA32 free:1253276kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18392kB inactive_anon:0kB active_file:10548kB inactive_file:159672kB unevictable:1536kB writepending:336kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:46812kB local_pcp:18464kB free_cma:0kB [ 336.767425][T17289] lowmem_reserve[]: 0 0 0 0 0 [ 336.772392][T17289] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 336.804641][T17289] lowmem_reserve[]: 0 0 0 0 0 [ 336.810053][T17289] Node 1 Normal free:3887684kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18288kB local_pcp:9388kB free_cma:0kB [ 336.891619][T17289] lowmem_reserve[]: 0 0 0 0 0 [ 336.904925][T17289] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 336.918737][T17289] Node 0 DMA32: 381*4kB (UM) 52*8kB (UM) 26*16kB (UME) 48*32kB (UME) 86*64kB (UME) 60*128kB (UME) 36*256kB (UM) 114*512kB (UM) 33*1024kB (UM) 6*2048kB (UE) 275*4096kB (UM) = 1257140kB [ 336.940630][T17289] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 336.952624][T17289] Node 1 Normal: 121*4kB (UE) 42*8kB (UME) 51*16kB (UME) 89*32kB (UME) 23*64kB (UME) 8*128kB (UME) 3*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3887684kB [ 336.973828][T17289] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 336.989802][T17289] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 337.003622][T17289] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 337.014164][T17289] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 337.023948][T17289] 43961 total pagecache pages [ 337.029718][T17289] 0 pages in swap cache [ 337.034049][T17289] Free swap = 124996kB [ 337.034431][ T7644] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 337.038475][T17289] Total swap = 124996kB [ 337.038490][T17289] 2097051 pages RAM [ 337.038496][T17289] 0 pages HighMem/MovableOnly [ 337.038504][T17289] 424280 pages reserved [ 337.038542][T17289] 0 pages cma reserved [ 337.085491][ T5849] Bluetooth: hci2: command tx timeout [ 337.094033][ T7644] bond7 (unregistering): (slave ip6gretap2): Releasing active interface [ 337.340297][ T7644] dvmrp6 (unregistering): left allmulticast mode [ 337.377354][ T7644] bond6 (unregistering): (slave geneve2): Releasing active interface [ 337.395863][ T5849] Bluetooth: hci3: command 0x041b tx timeout [ 337.548663][ T7644] tipc: Disabling bearer [ 337.606451][ T7644] bond10 (unregistering): (slave bridge3): Releasing backup interface [ 337.615800][ T7644] bridge3 (unregistering): left promiscuous mode [ 337.622169][ T7644] bridge3 (unregistering): left allmulticast mode [ 338.035709][ T7644] ` (unregistering): Released all slaves [ 338.049973][ T7644] bond1 (unregistering): Released all slaves [ 338.138678][ T7644] bond2 (unregistering): Released all slaves [ 338.231239][ T7644] bond3 (unregistering): Released all slaves [ 338.243699][ T7644] bond4 (unregistering): Released all slaves [ 338.337157][ T7644] bond5 (unregistering): Released all slaves [ 338.419816][ T7644] bond6 (unregistering): Released all slaves [ 338.434874][ T7644] bond7 (unregistering): Released all slaves [ 338.448549][ T7644] bond8 (unregistering): Released all slaves [ 338.460969][ T7644] bond9 (unregistering): Released all slaves [ 338.554498][ T7644] bond10 (unregistering): Released all slaves [ 338.641920][ T7644] bond11 (unregistering): Released all slaves [ 338.654067][ T7644] bond12 (unregistering): Released all slaves [ 338.743942][ T7644] bond13 (unregistering): Released all slaves [ 338.830202][ T7644] bond0 (unregistering): Released all slaves [ 338.927162][ T7644] bond14 (unregistering): Released all slaves [ 338.950561][T17306] netlink: 'syz.1.3313': attribute type 6 has an invalid length. [ 339.001451][T17314] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 339.034725][T17314] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 339.056027][T17314] gretap1: entered promiscuous mode [ 339.070256][T17314] gretap1: entered allmulticast mode [ 339.137395][T17232] chnl_net:caif_netlink_parms(): no params data found [ 339.154476][ T7644] : left promiscuous mode [ 339.155300][ T5849] Bluetooth: hci2: command tx timeout [ 339.363201][T17331] __nla_validate_parse: 10 callbacks suppressed [ 339.363219][T17331] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3322'. [ 339.388701][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3323'. [ 339.421509][ T7644] tipc: Disabling bearer [ 339.440568][ T7644] tipc: Left network mode [ 339.446504][T17339] netlink: 'syz.3.3325': attribute type 4 has an invalid length. [ 339.454521][T17340] netlink: 'syz.4.3323': attribute type 12 has an invalid length. [ 339.471211][T17335] veth0_to_bond: entered allmulticast mode [ 339.475850][ T5849] Bluetooth: hci3: command 0x041b tx timeout [ 339.502617][ T7644] IPVS: stopping master sync thread 7472 ... [ 339.506010][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3323'. [ 339.550201][T17340] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 339.632297][T17346] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 339.698656][T17356] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3328'. [ 339.717223][T17356] netlink: 'syz.4.3328': attribute type 2 has an invalid length. [ 339.809636][T17362] tunl0: entered promiscuous mode [ 339.820413][T17362] netlink: 'syz.3.3329': attribute type 3 has an invalid length. [ 339.831702][T17362] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3329'. [ 339.926877][T17232] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.939360][T17367] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3330'. [ 339.945579][T17232] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.962216][T17232] bridge_slave_0: entered allmulticast mode [ 339.977099][T17232] bridge_slave_0: entered promiscuous mode [ 339.988689][T17232] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.996236][T17232] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.003571][T17232] bridge_slave_1: entered allmulticast mode [ 340.011746][T17232] bridge_slave_1: entered promiscuous mode [ 340.180677][T17232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.230885][T17232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.449441][T17392] tipc: Started in network mode [ 340.454473][T17392] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 340.462485][T17392] tipc: Enabled bearer , priority 10 [ 340.469178][T17388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3336'. [ 340.512833][T17393] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3336'. [ 340.513604][T17232] team0: Port device team_slave_0 added [ 340.544535][T17232] team0: Port device team_slave_1 added [ 340.562993][T17398] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 340.572147][T17398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.682981][ T7644] hsr_slave_0: left promiscuous mode [ 340.816771][ T7644] hsr_slave_1: left promiscuous mode [ 340.822980][T17410] netlink: 'syz.1.3342': attribute type 1 has an invalid length. [ 340.878910][ T7644] veth1_macvtap: left promiscuous mode [ 340.891751][ T7644] veth0_macvtap: left promiscuous mode [ 341.235857][ T5849] Bluetooth: hci2: command tx timeout [ 341.657776][ T7644] smc: removing net device team0 with user defined pnetid SYZ2 [ 341.714303][T17232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.734096][T17232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.762289][T17232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.781848][T17410] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 341.869618][T17425] tipc: Started in network mode [ 341.885779][T17425] tipc: Node identity be1e19380e03, cluster identity 4711 [ 341.893909][T17425] tipc: Enabled bearer , priority 0 [ 341.901279][ T6012] tipc: Node number set to 10005162 [ 341.924528][T17444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3346'. [ 341.929808][T17424] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 341.935885][T17442] syzkaller1: entered promiscuous mode [ 341.948592][T17442] syzkaller1: entered allmulticast mode [ 341.955778][T17426] syzkaller0: entered promiscuous mode [ 341.974566][T17426] syzkaller0: entered allmulticast mode [ 341.992128][T17232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.010773][T17232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.039676][T17232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.058941][T17423] tipc: Resetting bearer [ 342.096411][T17422] tipc: Resetting bearer [ 342.143223][T17422] tipc: Disabling bearer [ 342.266249][T17451] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3348'. [ 342.301031][T17232] hsr_slave_0: entered promiscuous mode [ 342.326522][T17232] hsr_slave_1: entered promiscuous mode [ 342.363518][T17461] netlink: 'syz.3.3349': attribute type 32 has an invalid length. [ 342.454221][ T7644] IPVS: stop unused estimator thread 0... [ 342.474335][T17468] netlink: 'syz.1.3352': attribute type 11 has an invalid length. [ 342.481040][T17471] xt_check_table_hooks: 24 callbacks suppressed [ 342.481058][T17471] x_tables: duplicate underflow at hook 1 [ 342.492094][T17461] bond1: option coupled_control: invalid value (119) [ 342.519449][T17468] netlink: 'syz.1.3352': attribute type 1 has an invalid length. [ 342.521025][T17461] bond1 (unregistering): Released all slaves [ 342.656277][T17475] bond1 (unregistering): Released all slaves [ 342.690544][T17471] tipc: Enabling of bearer rejected, media not registered [ 342.858360][T17484] nbd: socks must be embedded in a SOCK_ITEM attr [ 343.317407][ T5849] Bluetooth: hci2: command tx timeout [ 343.468860][T17518] syzkaller1: entered allmulticast mode [ 343.710176][T17232] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 343.731078][T17232] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 343.747597][T17232] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 343.766312][T17232] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 343.893789][T17232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.919696][T17232] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.943100][ T3025] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.950381][ T3025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.981066][ T3025] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.988288][ T3025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.219372][T17551] bond1: Invalid ad_actor_system MAC address. [ 344.256632][T17551] bond1: option ad_actor_system: invalid value (1) [ 344.273162][T17551] bond1 (unregistering): Released all slaves [ 344.306200][T17557] netlink: 'syz.2.3376': attribute type 1 has an invalid length. [ 344.317053][T17564] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20003 [ 344.563196][T17232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.802215][T17594] __nla_validate_parse: 47 callbacks suppressed [ 344.802231][T17594] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3386'. [ 344.819838][T17594] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3386'. [ 344.843264][T17596] macsec1: entered promiscuous mode [ 344.911955][T17603] syzkaller1: entered promiscuous mode [ 344.921110][T17603] syzkaller1: entered allmulticast mode [ 344.931414][T17232] veth0_vlan: entered promiscuous mode [ 344.951764][T17232] veth1_vlan: entered promiscuous mode [ 344.993804][T17607] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 345.007059][T17607] bond1 (unregistering): Released all slaves [ 345.080966][T17232] veth0_macvtap: entered promiscuous mode [ 345.100780][T17232] veth1_macvtap: entered promiscuous mode [ 345.123284][T17232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.146739][T17232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.170065][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.275994][T17610] team0 (unregistering): Port device team_slave_0 removed [ 345.287637][T17610] team0 (unregistering): Port device team_slave_1 removed [ 345.312081][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.322079][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.333995][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.429335][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.437691][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.459247][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.468388][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.522864][T17616] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3283'. [ 345.533479][T17616] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3283'. [ 382.936304][T17633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3395'. [ 382.947486][T17635] netlink: 284 bytes leftover after parsing attributes in process `syz.2.3394'. [ 382.989895][T17633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3395'. [ 383.013058][ T7379] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.038366][ T7379] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.081739][ T7379] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.092953][ T7379] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.119609][T17644] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 383.207166][T17653] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3398'. [ 383.241414][T17657] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 384.869769][T17682] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 384.878438][T17687] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 384.886331][T17683] netlink: 'syz.2.3410': attribute type 1 has an invalid length. [ 384.958814][T17683] bond1: entered promiscuous mode [ 384.964154][T17683] 8021q: adding VLAN 0 to HW filter on device bond1 [ 384.977488][T17697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3413'. [ 385.268662][T17720] netem: change failed [ 385.341242][T17724] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3421'. [ 385.355079][T17730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3422'. [ 385.379472][T17728] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3420'. [ 385.391054][T17731] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3419'. [ 385.406284][T17730] veth0_macvtap: left promiscuous mode [ 385.461208][T17722] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3419'. [ 385.774313][T17754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.963925][T17763] syzkaller0: entered promiscuous mode [ 385.969834][T17763] syzkaller0: entered allmulticast mode [ 386.085660][T17772] 8021q: adding VLAN 0 to HW filter on device bond1 [ 386.104307][T17777] xt_ecn: cannot match TCP bits for non-tcp packets [ 386.177071][T17772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.216591][T17772] bond1: (slave bond0): making interface the new active one [ 386.217921][T17784] netlink: 'syz.4.3433': attribute type 10 has an invalid length. [ 386.226245][T17772] bond1: (slave bond0): Enslaving as an active interface with an up link [ 386.302303][T17784] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.343084][T17784] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.350371][T17784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.372733][T17784] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 386.792856][ T67] syzkaller0: tun_net_xmit 76 [ 386.801227][T17824] syzkaller0: create flow: hash 1053196976 index 1 [ 386.802916][ T67] syzkaller0: tun_net_xmit 48 [ 386.816655][ T5944] syzkaller0: tun_net_xmit 76 [ 386.994951][T17823] syzkaller0: delete flow: hash 1053196976 index 1 [ 388.461847][T17861] __nla_validate_parse: 9 callbacks suppressed [ 388.461864][T17861] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3462'. [ 388.523651][T17864] pim6reg1: entered promiscuous mode [ 388.538825][T17864] pim6reg1: entered allmulticast mode [ 388.550412][T17868] netlink: 'syz.0.3464': attribute type 12 has an invalid length. [ 388.571864][T17868] netlink: 'syz.0.3464': attribute type 29 has an invalid length. [ 388.580553][T17868] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3464'. [ 388.591587][T17868] netlink: 59 bytes leftover after parsing attributes in process `syz.0.3464'. [ 388.625450][T17876] netlink: 'syz.4.3463': attribute type 29 has an invalid length. [ 388.633476][T17876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3463'. [ 389.075620][T17897] bond2: entered promiscuous mode [ 389.080822][T17897] bond2: entered allmulticast mode [ 389.091353][T17897] 8021q: adding VLAN 0 to HW filter on device bond2 [ 389.106654][ T5914] IPVS: starting estimator thread 0... [ 389.196637][T17904] IPVS: using max 31 ests per chain, 74400 per kthread [ 389.367392][T17913] dvmrp6: entered allmulticast mode [ 389.546096][T17924] af_packet: tpacket_rcv: packet too big, clamped from 92 to 4294967272. macoff=96 [ 389.567552][T17924] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3477'. [ 389.747524][T17937] syzkaller0: entered promiscuous mode [ 389.770094][T17937] syzkaller0: entered allmulticast mode [ 389.836235][T17937] netlink: 'syz.3.3482': attribute type 1 has an invalid length. [ 389.883140][T17942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3485'. [ 390.397618][T17971] xt_TCPMSS: Only works on TCP SYN packets [ 390.403589][T17971] xt_TCPMSS: Only works on TCP SYN packets [ 390.454751][T17971] xt_TCPMSS: Only works on TCP SYN packets [ 390.471392][T17971] xt_TCPMSS: Only works on TCP SYN packets [ 390.488466][T17971] xt_TCPMSS: Only works on TCP SYN packets [ 390.502288][T17974] netlink: 'syz.3.3490': attribute type 39 has an invalid length. [ 390.509176][T17968] syzkaller0: entered promiscuous mode [ 390.535853][T17968] syzkaller0: entered allmulticast mode [ 390.636084][T17989] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 390.750562][T18001] netlink: 'syz.2.3491': attribute type 42 has an invalid length. [ 390.793833][T18001] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3491'. [ 391.278096][T18023] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3496'. [ 392.435749][T18030] syzkaller0: entered promiscuous mode [ 392.444792][T18030] syzkaller0: entered allmulticast mode [ 392.681088][T18054] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3506'. [ 392.702979][T18057] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3507'. [ 392.750659][T18057] netlink: 'syz.0.3507': attribute type 1 has an invalid length. [ 392.785027][T18061] sctp: [Deprecated]: syz.4.3509 (pid 18061) Use of int in max_burst socket option. [ 392.785027][T18061] Use struct sctp_assoc_value instead [ 392.883749][T18057] 8021q: adding VLAN 0 to HW filter on device bond1 [ 392.934177][T18068] gre1: entered promiscuous mode [ 392.940912][T18070] netlink: 'syz.4.3512': attribute type 1 has an invalid length. [ 392.952064][T18074] netlink: 'syz.4.3512': attribute type 1 has an invalid length. [ 392.953626][T18068] gre1: entered allmulticast mode [ 393.113350][T18070] 8021q: adding VLAN 0 to HW filter on device bond3 [ 393.169053][T18076] bond3: (slave geneve2): making interface the new active one [ 393.183295][T18076] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 393.210651][T18083] ip6t_rpfilter: unknown options [ 393.363407][T18092] netlink: 'syz.4.3516': attribute type 3 has an invalid length. [ 393.695008][T15170] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 393.719948][T15170] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 393.795138][T18105] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 393.873207][T18132] syzkaller0: entered promiscuous mode [ 393.923043][T18132] syzkaller0: entered allmulticast mode [ 394.543896][T18168] __nla_validate_parse: 5 callbacks suppressed [ 394.543913][T18168] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3536'. [ 394.587882][T18168] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3536'. [ 394.589386][T18173] netlink: 'syz.0.3535': attribute type 7 has an invalid length. [ 394.681008][ T61] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.693206][ T61] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.702157][ T61] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.711085][ T61] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.884313][T18178] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 394.975985][T18189] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3543'. [ 395.005825][ T6012] IPVS: starting estimator thread 0... [ 395.125802][T18190] IPVS: using max 33 ests per chain, 79200 per kthread [ 395.179148][T18199] syzkaller0: entered promiscuous mode [ 395.205073][T18199] syzkaller0: entered allmulticast mode [ 395.246944][T18199] tipc: Started in network mode [ 395.250423][T18211] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3549'. [ 395.282365][T18199] tipc: Node identity 82c4f9d82aa9, cluster identity 4711 [ 395.290328][T18199] tipc: Enabled bearer , priority 0 [ 395.300172][T18211] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.301567][T18214] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3548'. [ 395.307992][T18211] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.370034][T18198] tipc: Resetting bearer [ 395.470504][T18198] tipc: Disabling bearer [ 395.509753][T18222] netlink: 22 bytes leftover after parsing attributes in process `syz.4.3550'. [ 395.568850][T18224] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3551'. [ 395.620778][T18226] netlink: 'syz.0.3552': attribute type 30 has an invalid length. [ 395.698844][T18226] bond2: option arp_missed_max: invalid value (0) [ 395.746842][T18226] bond2: option arp_missed_max: allowed values 1 - 255 [ 395.758605][T18239] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3555'. [ 395.793253][T18226] bond2 (unregistering): Released all slaves [ 395.812548][T18239] netlink: 'syz.3.3555': attribute type 7 has an invalid length. [ 395.850664][T18239] netlink: 'syz.3.3555': attribute type 8 has an invalid length. [ 395.870275][T18239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3555'. [ 395.957055][T18249] openvswitch: netlink: Flow actions attr not present in new flow. [ 396.112670][T18257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3560'. [ 396.221047][T18263] netlink: 'syz.1.3561': attribute type 1 has an invalid length. [ 396.267222][T18263] 8021q: adding VLAN 0 to HW filter on device bond2 [ 396.330372][T18269] syzkaller0: entered promiscuous mode [ 396.347679][T18269] syzkaller0: entered allmulticast mode [ 396.433201][T18284] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 396.611991][T18288] netlink: 'syz.2.3568': attribute type 1 has an invalid length. [ 396.615582][T18294] team_slave_0: entered promiscuous mode [ 396.625745][T18294] team_slave_1: entered promiscuous mode [ 396.637997][T18294] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 396.648997][T18288] veth0_to_bond: entered allmulticast mode [ 396.722709][T18301] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 396.794900][T18304] ip6gre1: entered promiscuous mode [ 396.802580][T18304] ip6gre1: entered allmulticast mode [ 396.820381][T18307] tipc: Enabled bearer , priority 0 [ 396.871899][T18307] syzkaller0: entered promiscuous mode [ 396.877785][T18307] syzkaller0: entered allmulticast mode [ 396.884767][T18307] tipc: Resetting bearer [ 396.908394][T18306] tipc: Resetting bearer [ 397.149491][ T5849] block nbd4: Receive control failed (result -107) [ 398.307797][T18306] tipc: Disabling bearer [ 398.328316][T18320] tipc: Enabling of bearer rejected, failed to enable media [ 398.368611][ T6012] tipc: Node number set to 2825779672 [ 398.488072][T18333] xt_CONNSECMARK: invalid mode: 0 [ 398.826691][T18352] netlink: 'syz.4.3588': attribute type 1 has an invalid length. [ 398.837088][T18352] NCSI netlink: No device for ifindex 0 [ 398.873116][T18355] geneve2: entered promiscuous mode [ 398.896510][T18355] geneve2: entered allmulticast mode [ 398.967197][T18352] netlink: 'syz.4.3588': attribute type 1 has an invalid length. [ 398.978065][T18352] NCSI netlink: No device for ifindex 0 [ 399.254800][T18395] tipc: Enabling of bearer rejected, failed to enable media [ 399.287254][T18395] syzkaller0: entered promiscuous mode [ 399.292771][T18395] syzkaller0: entered allmulticast mode [ 399.342966][T18400] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 399.432567][T18390] vxcan2: entered allmulticast mode [ 399.561017][T18414] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 399.677275][ T3025] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 399.746666][T18433] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.797080][T18436] __nla_validate_parse: 18 callbacks suppressed [ 399.797098][T18436] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3607'. [ 399.856164][T18439] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3606'. [ 399.967433][T18451] netlink: 'syz.3.3612': attribute type 32 has an invalid length. [ 399.979375][T18451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3612'. [ 400.002788][T18451] bond1: Setting coupled_control to off (0) [ 400.011832][T18454] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3608'. [ 400.021558][T18454] openvswitch: netlink: Flow key attr not present in new flow. [ 400.162094][T18465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3616'. [ 400.172775][T18465] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.180465][T18465] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.219882][T18470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.577388][T18479] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3621'. [ 400.644882][T18486] xt_CT: No such helper "syz1" [ 400.686149][T18492] netlink: 'syz.1.3619': attribute type 10 has an invalid length. [ 400.726621][T18492] team0: Port device dummy0 added [ 400.804638][T18498] pim6reg: entered allmulticast mode [ 400.822987][T18498] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3626'. [ 400.958668][T18512] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3631'. [ 401.006880][T18515] netlink: 'syz.4.3632': attribute type 1 has an invalid length. [ 401.027308][T18515] netlink: 212 bytes leftover after parsing attributes in process `syz.4.3632'. [ 401.044867][T18515] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3632'. [ 401.344038][T18539] netlink: 'syz.0.3640': attribute type 2 has an invalid length. [ 401.351615][T18541] netlink: 'syz.2.3639': attribute type 11 has an invalid length. [ 401.363428][T18542] syzkaller0: entered promiscuous mode [ 401.372721][T18542] syzkaller0: entered allmulticast mode [ 401.421326][T18544] netlink: 'syz.4.3642': attribute type 1 has an invalid length. [ 401.481582][T18544] bond4: entered promiscuous mode [ 401.488744][T18544] 8021q: adding VLAN 0 to HW filter on device bond4 [ 402.096532][T18589] team0: Port device team_slave_0 removed [ 402.108683][T18593] netlink: 'syz.1.3659': attribute type 8 has an invalid length. [ 402.157258][T18597] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 402.180686][T18597] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 402.273089][T18610] veth1_to_bond: entered allmulticast mode [ 402.324644][T18610] bond0: (slave bond_slave_1): Releasing backup interface [ 402.419164][T18610] veth1_to_bond (unregistering): left allmulticast mode [ 402.431878][T18622] netlink: zone id is out of range [ 402.438608][T18622] netlink: zone id is out of range [ 402.443885][T18622] netlink: zone id is out of range [ 402.450769][T18622] netlink: zone id is out of range [ 402.458626][T18622] netlink: zone id is out of range [ 402.463815][T18622] netlink: zone id is out of range [ 402.471953][T18622] netlink: zone id is out of range [ 402.922681][T18664] x_tables: duplicate underflow at hook 1 [ 402.933386][T18665] veth0_to_batadv: entered promiscuous mode [ 403.110211][T18672] tipc: Can't bind to reserved service type 0 [ 404.298935][T18747] syzkaller0: entered promiscuous mode [ 404.304426][T18747] syzkaller0: entered allmulticast mode [ 404.614341][T18761] sock: sock_timestamping_bind_phc: sock not bind to device [ 406.246042][T18756] syzkaller0: entered promiscuous mode [ 406.251552][T18756] syzkaller0: entered allmulticast mode [ 406.471868][T18795] veth0: entered promiscuous mode [ 406.625967][T18795] __nla_validate_parse: 18 callbacks suppressed [ 406.625985][T18795] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3724'. [ 406.673602][T18794] veth0: left promiscuous mode [ 406.747158][T18816] 8021q: adding VLAN 0 to HW filter on device bond3 [ 406.766844][T18819] netlink: 'syz.1.3729': attribute type 58 has an invalid length. [ 406.799931][T18819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3729'. [ 406.936373][T18833] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3734'. [ 406.998256][T18838] netlink: 'syz.4.3736': attribute type 7 has an invalid length. [ 407.008080][T18838] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3736'. [ 407.013983][T18844] x_tables: duplicate underflow at hook 1 [ 407.033876][T18844] x_tables: duplicate underflow at hook 1 [ 407.082580][ T7644] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 407.110272][T18851] veth0: entered promiscuous mode [ 407.189823][T18852] veth0: left promiscuous mode [ 407.221805][T18855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3740'. [ 407.386339][T18872] netlink: 16146 bytes leftover after parsing attributes in process `syz.4.3743'. [ 407.474175][T18876] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3744'. [ 407.716833][T18891] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3748'. [ 407.726611][T18890] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3748'. [ 408.141240][T18911] tunl0: left promiscuous mode [ 408.142164][T18919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3756'. [ 408.154512][T18911] tipc: Started in network mode [ 408.160805][T18911] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 408.171733][T18911] tipc: Enabling of bearer rejected, failed to enable media [ 408.348878][T18927] º: renamed from veth1_vlan (while UP) [ 408.461332][T18943] netlink: 'syz.3.3766': attribute type 11 has an invalid length. [ 408.758007][T18954] net_ratelimit: 58 callbacks suppressed [ 408.758026][T18954] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 408.774661][ T5837] IPVS: starting estimator thread 0... [ 408.777068][T18965] netlink: 'syz.4.3772': attribute type 1 has an invalid length. [ 408.836244][ T7379] wlan0: Trigger new scan to find an IBSS to join [ 408.879167][T18966] IPVS: using max 32 ests per chain, 76800 per kthread [ 409.003681][T18982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.063931][T18987] syzkaller0: entered promiscuous mode [ 409.073661][T18987] syzkaller0: entered allmulticast mode [ 409.099748][T18987] 0: reclassify loop, rule prio 0, protocol 800 [ 409.278542][T19001] bond3: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 409.295960][T19001] bond3 (unregistering): Released all slaves [ 409.384680][T19015] batman_adv: batadv0: Adding interface: dummy0 [ 409.432679][T19015] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.456747][T19024] sctp: [Deprecated]: syz.4.3787 (pid 19024) Use of struct sctp_assoc_value in delayed_ack socket option. [ 409.456747][T19024] Use struct sctp_sack_info instead [ 409.469539][T19015] batman_adv: batadv0: Interface activated: dummy0 [ 409.614502][T19036] sctp: [Deprecated]: syz.0.3793 (pid 19036) Use of int in maxseg socket option. [ 409.614502][T19036] Use struct sctp_assoc_value instead [ 409.633645][T19016] syzkaller0: entered promiscuous mode [ 409.639574][T19016] syzkaller0: entered allmulticast mode [ 409.778091][T19047] netlink: 'syz.1.3794': attribute type 39 has an invalid length. [ 411.222979][T19051] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.236663][T19051] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.390860][T19051] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.410397][T19051] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.575142][T19051] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.587642][T19051] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.710182][T19051] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.745838][T19051] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.775923][T19100] __nla_validate_parse: 13 callbacks suppressed [ 411.775940][T19100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3810'. [ 411.887767][ T7643] wlan0: Trigger new scan to find an IBSS to join [ 411.896823][T19107] netlink: 'syz.1.3810': attribute type 9 has an invalid length. [ 411.904637][T19107] netlink: 'syz.1.3810': attribute type 11 has an invalid length. [ 411.918332][T19108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3812'. [ 411.925353][T19107] netlink: 204124 bytes leftover after parsing attributes in process `syz.1.3810'. [ 411.970819][T19106] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3812'. [ 412.009252][T19108] 8021q: adding VLAN 0 to HW filter on device bond4 [ 412.044660][T19051] Failed to register nexthop notifier [ 412.149121][T19115] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3813'. [ 412.155698][T19114] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3813'. [ 412.247089][T19121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3816'. [ 412.288047][T19121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3816'. [ 412.398604][T19132] netlink: 'syz.3.3820': attribute type 39 has an invalid length. [ 412.431158][T19136] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3819'. [ 412.451324][T19136] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3819'. [ 412.472608][T19136] netlink: 'syz.0.3819': attribute type 5 has an invalid length. [ 412.496107][T19141] nbd: nbd4 already in use [ 412.497389][T19130] netlink: 'syz.1.3818': attribute type 13 has an invalid length. [ 412.501018][T19141] nbd: must specify an index to disconnect [ 412.584756][T19143] netlink: 'syz.0.3822': attribute type 10 has an invalid length. [ 412.897868][T19153] netlink: 'syz.0.3825': attribute type 13 has an invalid length. [ 412.920787][T19153] netlink: 'syz.0.3825': attribute type 13 has an invalid length. [ 413.200235][T19179] IPv6: addrconf: prefix option has invalid lifetime [ 413.237026][T19179] : entered promiscuous mode [ 413.507570][T19210] team0: No ports can be present during mode change [ 413.725716][T19228] netlink: 'syz.0.3846': attribute type 1 has an invalid length. [ 413.801448][T19236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.838922][T19237] xt_hashlimit: overflow, rate too high: 0 [ 414.008757][T19254] netlink: 'syz.3.3855': attribute type 2 has an invalid length. [ 414.916039][T15176] wlan0: Trigger new scan to find an IBSS to join [ 414.958519][ T67] bond13 (unregistering): (slave geneve3): Releasing active interface [ 415.430989][ T67] bond0 (unregistering): Released all slaves [ 415.581926][ T67] bond1 (unregistering): Released all slaves [ 415.590851][T19311] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 415.601085][ T67] bond2 (unregistering): Released all slaves [ 415.613864][ T67] bond3 (unregistering): Released all slaves [ 415.711835][ T67] bond4 (unregistering): Released all slaves [ 415.808354][ T67] bond5 (unregistering): Released all slaves [ 415.836272][ T4526] wlan0: Creating new IBSS network, BSSID 0a:71:c6:65:ed:10 [ 415.910724][ T67] bond6 (unregistering): Released all slaves [ 415.923080][ T67] bond7 (unregistering): Released all slaves [ 416.019869][ T67] bond8 (unregistering): (slave veth5): Releasing active interface [ 416.029701][ T67] bond8 (unregistering): Released all slaves [ 416.121738][ T67] bond9 (unregistering): Released all slaves [ 416.134215][ T67] bond10 (unregistering): Released all slaves [ 416.147999][ T67] bond11 (unregistering): Released all slaves [ 416.162029][ T67] bond12 (unregistering): Released all slaves [ 416.177245][ T67] bond13 (unregistering): Released all slaves [ 416.371832][ T67] : left promiscuous mode [ 416.533656][ T67] tipc: Disabling bearer [ 416.605560][ T67] tipc: Left network mode [ 416.757242][ T67] IPVS: stopping backup sync thread 12917 ... [ 416.771879][ T30] audit: type=1800 audit(1765784532.470:4): pid=19335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3885" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=558 res=0 errno=0 [ 416.979603][T19352] gretap1: entered promiscuous mode [ 417.068833][T19358] __nla_validate_parse: 23 callbacks suppressed [ 417.068852][T19358] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3890'. [ 417.267051][T19371] validate_nla: 3 callbacks suppressed [ 417.267071][T19371] netlink: 'syz.3.3893': attribute type 32 has an invalid length. [ 417.324847][T19376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3894'. [ 417.335508][T19371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3893'. [ 417.474974][T19371] bond3: option coupled_control: invalid value (11) [ 417.501004][T19371] bond3 (unregistering): Released all slaves [ 417.814256][T19402] netlink: 'syz.2.3902': attribute type 3 has an invalid length. [ 417.835625][ T67] batadv_slave_1: left promiscuous mode [ 417.845883][T19402] netlink: 'syz.2.3902': attribute type 5 has an invalid length. [ 417.972509][ T67] hsr_slave_0: left promiscuous mode [ 417.987813][ T67] hsr_slave_1: left promiscuous mode [ 417.994960][T19426] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3905'. [ 418.073502][ T67] veth1_macvtap: left promiscuous mode [ 418.103757][ T67] veth1_vlan: left promiscuous mode [ 418.440818][T19443] openvswitch: netlink: Flow key attr not present in new flow. [ 418.458580][T19443] netlink: 'syz.0.3909': attribute type 24 has an invalid length. [ 418.940152][ T67] vcan0 (unregistering): left allmulticast mode [ 419.358011][T19467] netlink: 'syz.2.3916': attribute type 1 has an invalid length. [ 419.384031][ T67] IPVS: stop unused estimator thread 0... [ 419.542901][T19475] netlink: 'syz.0.3919': attribute type 142 has an invalid length. [ 419.608706][T19482] syzkaller1: entered promiscuous mode [ 419.657337][T19482] syzkaller1: entered allmulticast mode [ 419.667564][T19475] netlink: 'syz.0.3919': attribute type 7 has an invalid length. [ 419.733010][T19486] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3921'. [ 419.744442][T19488] netlink: 'syz.1.3922': attribute type 39 has an invalid length. [ 419.880007][T19493] netlink: 'syz.1.3924': attribute type 4 has an invalid length. [ 420.007425][T19498] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 420.020567][T19498] netlink: 'syz.1.3926': attribute type 12 has an invalid length. [ 420.033550][T19498] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3926'. [ 420.048332][T19498] netlink: 59 bytes leftover after parsing attributes in process `syz.1.3926'. [ 420.237274][T19513] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3931'. [ 420.291870][T19506] 8021q: adding VLAN 0 to HW filter on device bond4 [ 420.320059][T19516] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3932'. [ 420.321306][T19506] bond3: (slave bond4): making interface the new active one [ 420.341946][T19517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3930'. [ 420.361254][T19506] bond3: (slave bond4): Enslaving as an active interface with an up link [ 420.385152][T19514] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 420.421147][T19517] 8021q: adding VLAN 0 to HW filter on device bond3 [ 420.605021][T19535] x_tables: duplicate underflow at hook 1 [ 421.335622][T19593] openvswitch: netlink: Flow key attr not present in new flow. [ 421.587633][ T5849] Bluetooth: hci2: link tx timeout [ 421.593291][ T5849] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 421.604287][ T5849] Bluetooth: hci2: link tx timeout [ 421.612264][ T5849] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 421.679291][T19614] bond6: (slave gre0): Device is not bonding slave [ 421.698031][T19614] bond6: option active_slave: invalid value (gre0) [ 421.708809][T19614] bond6 (unregistering): Released all slaves [ 422.171412][T19653] delete_channel: no stack [ 422.247316][T19659] xt_TCPMSS: Only works on TCP SYN packets [ 422.391911][T19670] tipc: Enabled bearer , priority 0 [ 422.417237][T19676] syzkaller0: entered promiscuous mode [ 422.419569][T19674] __nla_validate_parse: 16 callbacks suppressed [ 422.419585][T19674] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3979'. [ 422.424964][T19676] syzkaller0: entered allmulticast mode [ 422.546942][T19675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3980'. [ 422.563707][T19670] tipc: Resetting bearer [ 422.599108][T19675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3980'. [ 422.618565][T19670] tipc: Disabling bearer [ 422.686365][T19675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3980'. [ 422.696084][T19675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3980'. [ 422.859003][T19702] validate_nla: 6 callbacks suppressed [ 422.859019][T19702] netlink: 'syz.2.3985': attribute type 3 has an invalid length. [ 422.890232][T19707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3989'. [ 423.023145][T19711] bridge0: port 3(ipvlan2) entered blocking state [ 423.034435][T19711] bridge0: port 3(ipvlan2) entered disabled state [ 423.042779][T19711] ipvlan2: entered allmulticast mode [ 423.067033][T19711] bridge0: entered allmulticast mode [ 423.089447][T19711] ipvlan2: left allmulticast mode [ 423.103241][T19711] bridge0: left allmulticast mode [ 423.374776][T19730] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3994'. [ 423.479437][T19738] netlink: 'syz.3.3995': attribute type 3 has an invalid length. [ 423.513573][T19739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3996'. [ 423.567264][T19739] bond0: entered promiscuous mode [ 423.572400][T19739] bond_slave_0: entered promiscuous mode [ 423.584219][T19743] x_tables: duplicate underflow at hook 2 [ 423.585957][T19739] bond_slave_1: entered promiscuous mode [ 423.614062][T19739] ip6gretap0: entered promiscuous mode [ 423.635586][ T5849] Bluetooth: hci2: command 0x0405 tx timeout [ 423.648189][T19752] vxcan1: tx address claim with dest, not broadcast [ 423.662413][T19739] hsr1: entered promiscuous mode [ 423.798505][T19761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4004'. [ 423.861069][ T30] audit: type=1107 audit(1765784539.560:5): pid=19763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 423.866041][T19764] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4006'. [ 424.032227][T19773] x_tables: duplicate underflow at hook 2 [ 424.221972][T19791] syz_tun: entered allmulticast mode [ 424.282026][T19790] syz_tun: left allmulticast mode [ 424.727432][T19831] 8021q: VLANs not supported on pim6reg [ 424.734295][T19830] netlink: 'syz.2.4025': attribute type 14 has an invalid length. [ 425.725618][ T5849] Bluetooth: hci2: command 0x0405 tx timeout [ 426.269035][T19848] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.282326][T19848] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.289567][T19848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.302115][T19852] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 426.413434][T19850] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.477698][T19869] netlink: 'syz.4.4038': attribute type 4 has an invalid length. [ 426.520968][T19870] netlink: 'syz.4.4038': attribute type 4 has an invalid length. [ 426.579817][T19866] netlink: 'syz.0.4039': attribute type 1 has an invalid length. [ 426.719310][T19850] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.882674][T19850] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.062089][T19850] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.082327][T19896] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 427.253759][T19916] bond1: option mode: unable to set because the bond device has slaves [ 427.359500][ T7644] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.406974][ T1148] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.460025][ T1148] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.465629][T19939] __nla_validate_parse: 7 callbacks suppressed [ 427.465647][T19939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4058'. [ 427.515723][ T1148] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.575973][T19941] block nbd5: server does not support multiple connections per device. [ 427.584669][T19941] block nbd5: shutting down sockets [ 427.782109][T19953] syzkaller0: entered promiscuous mode [ 427.790520][T19924] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4054'. [ 427.792277][T19953] syzkaller0: entered allmulticast mode [ 427.815352][ T5848] Bluetooth: hci2: command 0x0405 tx timeout [ 428.753109][T19965] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 428.825799][T19970] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4067'. [ 428.943646][T19981] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4072'. [ 428.968071][T19983] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4071'. [ 429.083005][T19993] netlink: 'syz.4.4075': attribute type 2 has an invalid length. [ 429.097696][T19998] netlink: 'syz.4.4075': attribute type 2 has an invalid length. [ 429.106690][T19993] netlink: 'syz.4.4075': attribute type 8 has an invalid length. [ 429.114538][T19998] netlink: 'syz.4.4075': attribute type 8 has an invalid length. [ 429.122942][T19993] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4075'. [ 429.133666][T19998] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4075'. [ 429.227956][T20002] Bluetooth: MGMT ver 1.23 [ 429.234796][T20002] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4077'. [ 429.394906][T20004] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 429.499357][T20022] netlink: 'syz.2.4083': attribute type 10 has an invalid length. [ 429.507860][T20022] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4083'. [ 429.556732][T20025] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4084'. [ 429.643436][T20018] infiniband !yz!: set active [ 429.650651][T20018] infiniband !yz!: added team_slave_0 [ 429.744407][T20018] RDS/IB: !yz!: added [ 429.761240][T20018] smc: adding ib device !yz! with port count 1 [ 429.777230][T20035] netlink: 'syz.4.4087': attribute type 10 has an invalid length. [ 429.784662][T20037] vlan0: entered promiscuous mode [ 429.791440][T20037] vlan0: entered allmulticast mode [ 429.811191][T20018] smc: ib device !yz! port 1 has no pnetid [ 429.811983][T20037] veth0_vlan: entered allmulticast mode [ 430.463468][T20066] netlink: 'syz.4.4098': attribute type 1 has an invalid length. [ 430.568908][T20073] gre1: entered promiscuous mode [ 430.574402][T20073] gre1: entered allmulticast mode [ 430.658739][T20079] syzkaller0: entered promiscuous mode [ 430.664223][T20079] syzkaller0: entered allmulticast mode [ 430.701344][T20075] tipc: Enabled bearer , priority 0 [ 430.734154][T20078] tipc: Resetting bearer [ 430.751697][T20074] tipc: Resetting bearer [ 430.836360][T20074] tipc: Disabling bearer [ 431.208157][T20103] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 431.236249][ T5849] Bluetooth: hci2: command 0x0405 tx timeout [ 431.242342][ T5848] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 431.641586][T20133] netlink: 'syz.4.4114': attribute type 1 has an invalid length. [ 431.654489][T20133] tipc: Enabling of bearer rejected, failed to enable media [ 431.875735][ T5848] Bluetooth: hci5: command 0x0406 tx timeout [ 432.311712][T20171] netlink: 'syz.4.4126': attribute type 8 has an invalid length. [ 432.493920][T20181] syzkaller0: entered promiscuous mode [ 432.526261][T20181] syzkaller0: entered allmulticast mode [ 432.569276][T20187] __nla_validate_parse: 12 callbacks suppressed [ 432.569297][T20187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4131'. [ 432.586447][T20187] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4131'. [ 432.617629][T20187] geneve3: entered promiscuous mode [ 432.625506][T20187] geneve3: entered allmulticast mode [ 432.653563][T20193] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4131'. [ 432.718420][T20200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4132'. [ 433.213855][T20229] vlan0: MTU too low for tipc bearer [ 433.225298][T20229] tipc: Disabling bearer [ 433.411251][T20239] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4145'. [ 433.480852][T20236] bond3 (unregistering): Released all slaves [ 433.531881][T20239] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4145'. [ 433.616201][T20247] 8021q: VLANs not supported on wg0 [ 433.770265][T20257] [ 433.772883][T20257] ============================= [ 433.778016][T20257] WARNING: suspicious RCU usage [ 433.782906][T20257] syzkaller #0 Not tainted [ 433.786472][T20258] xt_hashlimit: overflow, rate too high: 0 [ 433.788341][T20257] ----------------------------- [ 433.798398][T20257] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 433.807626][T20257] [ 433.807626][T20257] other info that might help us debug this: [ 433.807626][T20257] [ 433.818576][T20257] [ 433.818576][T20257] rcu_scheduler_active = 2, debug_locks = 1 [ 433.826974][T20257] 1 lock held by syz.1.4150/20257: [ 433.832087][T20257] #0: ffffffff8df41ea0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80 [ 433.842781][T20257] [ 433.842781][T20257] stack backtrace: [ 433.849851][T20257] CPU: 1 UID: 0 PID: 20257 Comm: syz.1.4150 Not tainted syzkaller #0 PREEMPT(full) [ 433.849877][T20257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 433.849893][T20257] Call Trace: [ 433.849903][T20257] [ 433.849911][T20257] dump_stack_lvl+0x189/0x250 [ 433.849938][T20257] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.849958][T20257] ? __pfx__printk+0x10/0x10 [ 433.849977][T20257] ? __lock_acquire+0x6b6/0x2cf0 [ 433.850006][T20257] lockdep_rcu_suspicious+0x140/0x1d0 [ 433.850029][T20257] get_callchain_entry+0x2b6/0x3c0 [ 433.850052][T20257] get_perf_callchain+0xb3/0x820 [ 433.850078][T20257] ? __pfx_get_perf_callchain+0x10/0x10 [ 433.850099][T20257] ? futex_unqueue+0x22/0x240 [ 433.850121][T20257] ? futex_unqueue+0x22/0x240 [ 433.850160][T20257] ? futex_unqueue+0x22/0x240 [ 433.850186][T20257] __bpf_get_stack+0x45b/0xaa0 [ 433.850214][T20257] ? __pfx___bpf_get_stack+0x10/0x10 [ 433.850243][T20257] bpf_get_stack+0x33/0x50 [ 433.850259][T20257] ? bpf_prog_e8e6327ccf46c9a7+0x46/0x4e [ 433.850284][T20257] bpf_get_stack_raw_tp+0x1a9/0x220 [ 433.850309][T20257] bpf_prog_e8e6327ccf46c9a7+0x46/0x4e [ 433.850326][T20257] bpf_prog_run_pin_on_cpu+0x143/0x480 [ 433.850351][T20257] bpf_prog_test_run_syscall+0x312/0x4b0 [ 433.850373][T20257] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 433.850391][T20257] ? __fget_files+0x2a/0x420 [ 433.850413][T20257] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 433.850433][T20257] bpf_prog_test_run+0x2c7/0x340 [ 433.850459][T20257] __sys_bpf+0x562/0x860 [ 433.850481][T20257] ? __pfx___sys_bpf+0x10/0x10 [ 433.850519][T20257] ? __pfx___se_sys_futex+0x10/0x10 [ 433.850547][T20257] __x64_sys_bpf+0x7c/0x90 [ 433.850566][T20257] do_syscall_64+0xfa/0xf80 [ 433.850589][T20257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.850606][T20257] ? clear_bhb_loop+0x60/0xb0 [ 433.850627][T20257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.850644][T20257] RIP: 0033:0x7f717e38f749 [ 433.850659][T20257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.850674][T20257] RSP: 002b:00007f717f217038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 433.850693][T20257] RAX: ffffffffffffffda RBX: 00007f717e5e5fa0 RCX: 00007f717e38f749 [ 433.850706][T20257] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 433.850717][T20257] RBP: 00007f717e413f91 R08: 0000000000000000 R09: 0000000000000000 [ 433.850728][T20257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.850739][T20257] R13: 00007f717e5e6038 R14: 00007f717e5e5fa0 R15: 00007ffde2bb7b48 [ 433.850771][T20257] [ 437.006039][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 442.116119][ T5848] Bluetooth: hci4: command 0x040f tx timeout