last executing test programs: 4.45146028s ago: executing program 0 (id=2098): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800010000001d0000000000020000000b03000900ec5918bf256ef1f2592cd5d6a375dc00000006001500040000001400168010"], 0x38}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 4.250437581s ago: executing program 0 (id=2103): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e004b05000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r0], 0x28}}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r5, 0x801, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x0) sendmmsg$inet(r2, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="680000002c0000020000020000940d0b000000000000"], 0x68}}, 0x20000000) 4.092132919s ago: executing program 0 (id=2109): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000080000000500000001000013020000000e0000000500000009c63c75000000612e2e5f"], 0x0, 0x38}, 0x20) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4d, 0xfffffff9, 0x6, 0x7, 0x7f, 0xb2, 0x7, 0xf9, 0x68, 0x6, [0x3, 0x9, 0xffff7fff, 0x4, 0x8, 0x80, 0x8000]}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffffffffffffff45, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d00210000000000000000000400008008000c"], 0x1c}], 0x1}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) (async) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) (async) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b80)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ffffff1f0800084000000001"], 0xa0}}, 0x0) (async) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)) 3.997951816s ago: executing program 4 (id=2112): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="660a00000000000061117100000000009500"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x6}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x8, 0x2}]}}}}}}}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0x15}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}, @IFLA_MTU={0x8}]}, 0x44}, 0x9}, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0xa0, 0x4, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9000}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9200}]}, 0xa0}}, 0x0) 3.826174977s ago: executing program 3 (id=2113): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000084070605df050000000000000000000700000105000100070000000900020073797ad497"], 0x28}, 0x1, 0x0, 0x0, 0xc04808c}, 0x4000004) syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) listen(r0, 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa5a86dd60f900f500280600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0020080907800001ead9d87115e6f1f4c65ad208a75d65325c593e9000000"], 0x0) 3.73637983s ago: executing program 3 (id=2115): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1) syz_emit_ethernet(0x52, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xc, 0x0, 0x0, {[@generic={0x4, 0x7, "5eee37d22a"}]}}}}}}}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4c000000, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800060000000401a800080008000a400400000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 3.654122272s ago: executing program 0 (id=2116): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) poll(&(0x7f0000000040)=[{}], 0x1, 0x800) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000200)=@ccm_128={{0x304}, "76131e58a256d4af", "4448076cc60af592e807e038c4797041", "8076e30e", "f79d7fbbf3985dbb"}, 0x28) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000200)=ANY=[], 0x14) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000000001010400f84f0000000000020000002400018014000180080001000000000008000200ac1414000c0002800500010000000000240002800c0002800500eb6b3bb5fef5d397e00b0100000000001400018008000100e000000208000200e000000208000740000000001800068008000200ac1414000400"], 0x7c}}, 0x0) 3.650090577s ago: executing program 2 (id=2117): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x1287, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0x300}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r6, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r7, 0x1, 0x48, 0x0, &(0x7f00000003c0)) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3e}}}, 0x4, 0x80, 0x3c68, 0x6, 0xa}, &(0x7f00000000c0)=0x98) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3e}}}, 0x4, 0x80, 0x3c68, 0x6, 0xa}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r8, 0x84, 0x19, &(0x7f0000000100)={r9, 0x7}, 0x8) connect$inet(r0, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) socket$alg(0x26, 0x5, 0x0) (async) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r7) sendmsg$NL80211_CMD_GET_POWER_SAVE(r7, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r11, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x14}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="17", 0x1}, {&(0x7f0000002a40)="0d5ebfd6dfe98a01b2fb5b0eb19a417353a0833d961a98422333bb10a75289", 0x1f}], 0x2, &(0x7f0000003840)=ANY=[@ANYBLOB='@'], 0x40}}], 0x1, 0x715076165a76ad26) recvmmsg(0xffffffffffffffff, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000005c0)=""/4080, 0xff0}], 0x1}, 0x4}], 0x1, 0x2120, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000005c0)=""/4080, 0xff0}], 0x1}, 0x4}], 0x1, 0x2120, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x4, 'nq\x00', 0x7, 0x1004, 0x62}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x4, 'nq\x00', 0x7, 0x1004, 0x62}, 0x2c) 3.649030751s ago: executing program 4 (id=2118): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYBLOB="7361a500fb959e6757f2fb54c9ff2c002aefd54d1ec16a84ca4f46fc38449122e34aa0b2d6160e1ef51c9cfe9c1b54861802153487b64135b43dafc47f395abb014a968e9e148066f13f80494d1ac9f89c0f88c8ac536b22c423df169d14636e3a23f43b27c562e99287cfb7fac041b8df58302c6d6c6b8c556bb69fce9b41be2c826f67054191faced9c3a9ce5d8d084ac9c4aaf5dd3a75f6576b8269c81dead0571baea6925dc6a30f9ea75600dc6470f0576a00d1fef9150f60bb42e27bffeb6ba338af4c2c19c3d2c4c6a66c88ae067412d945ae69ae325ab5e5f00e7e"], 0x0, 0x46}, 0x28) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080), 0xfffffffffffffef0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000007000000ff0f00000700000000000000e4142e1b02a075b4665919a144e79fba43195035ba9e70f6eddff0f1ebf797f6e663671e6b9ff438a26c52c4dcee"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4}, &(0x7f00000007c0), &(0x7f0000000640)=r3}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r4, 0x0, 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, r7, 0x615, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}]}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0xc040) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r9 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r9, 0x11, 0xb, &(0x7f0000000140)=0x4, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) write(r0, &(0x7f0000000000)="3b000200010001", 0x7) 3.541719403s ago: executing program 1 (id=2119): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28, 0x0, 0x0, 0xeffff034}, {0x16}]}, 0x10) (async) sendmsg$inet(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="ed8769cb", 0x4}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111b8000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) 3.525997639s ago: executing program 3 (id=2120): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000000c0)=0x100000, 0x4) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x0, 0x110, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000000), {[{{@arp={@broadcast, @rand_addr=0x64010100, 0x0, 0xff000000, 0x9, 0x9, {@mac, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0xa, 0x3, 0x7, 0x7fff, 0x3, 0xfff, 'ip6_vti0\x00', 'bond_slave_1\x00', {0xff}, {0xff}, 0x0, 0x296}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @remote, @private=0xa010100, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @rand_addr=0x64010101, @broadcast, 0xf}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x44}, @remote, 0x0, 0xffffffff, 0xe, 0x8, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@broadcast, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x8, 0x88e3, 0x1, 0x1000, 0x1, 0xeb, 'wlan1\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x5}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0xf, 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x40047459, 0x0) 3.406160741s ago: executing program 0 (id=2121): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000002971d460057d904b60af03aad5216a62e69afe3f48fdd56f95f22be0f7ccb3548bee2cbc1f0d96e6be25e50d07b4cb1cc62b7c3b69f46179431d2d3c2d285c0de4e0689bf96dde2b5a9f52905f10fa1d523a50f6563f65a53e0f3b94898c240364d892cbf716ff88fd0bcc0330173c7df5e83aa62a28eff970c30891982fd7199184edc406b10ee61d980477cc8375e77fdf49fb7d6858ebbce450d2463c47009f12f7893c2616fd0fa1bd5c46009f4a272f25b69d8710c519480e6f0b0155c6e4f61de41af8328bafa0e97295f4a6d20a13c230cc"], 0x48) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x890c, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x10, 0x803, 0x2) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000004c0)=@gcm_256={{}, "a6d1cd27ebdc5fb0", "8d88c2e207fab863c9ee232c2d42e363bed288138ee777efdacfe7351438d58c", "56df6e26", "fa9ccbfb433ad58f"}, 0x38) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r3, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xffffffff}) ioctl(r5, 0x8b20, &(0x7f0000000040)) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@bridge_dellink={0x34, 0x11, 0x100, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, r4, 0x30800, 0x40}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x50e1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r6, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004000) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000300)="9e", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) recvfrom(r2, 0x0, 0x0, 0x40000000, &(0x7f0000000140)=@caif, 0x80) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x800005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 3.310394503s ago: executing program 1 (id=2122): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x2, 0x2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x38}}, 0x0) 3.250779871s ago: executing program 2 (id=2123): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x118, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x105, 0xdb, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x20}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823f9f3cb639cfb05bc48c26c0a26237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf1374875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x118}], 0x1}, 0x0) 3.170276189s ago: executing program 3 (id=2124): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000009c0)=ANY=[@ANYBLOB="b8010000160011040000000000000000ffffffff000000000000000000000000ffffffff0000000000000000000000000000000000000000000000003b000000", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="fe8000000000000000000000000000aa0000000033000000ac14141a000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/158, @ANYRES32=r3, @ANYBLOB="00000000ac0007"], 0x1b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00@\x00', @ANYRES32=r2, @ANYBLOB="01000043918555d945d1ec8515140000001800"/31], 0x44}}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket(0x2, 0x3, 0xff) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000240)={0x5, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e23, @rand_addr=0x64010102}}}, 0x108) (async) r8 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r8, 0x180000000) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r6, 0xc0189436, &(0x7f0000000000)) (async) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) r9 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r9, 0x29, 0x1d, &(0x7f0000000200)={@empty}, 0x14) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x891) (async) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10) sendmsg$kcm(r10, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 3.103806144s ago: executing program 1 (id=2125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x14, 0x1, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x6c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x304, 0xb, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1c}, @NFTA_SET_DESC={0x1b4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xac, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd974}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4f89}]}]}, @NFTA_SET_DESC_CONCAT={0xb4, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x71}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe431}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8ce}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xef82}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_SET_ID={0x8}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @flow_offload={{0x11}, @void}}, @NFTA_SET_ID={0x8}, @NFTA_SET_USERDATA={0x104, 0xd, 0x1, 0x0, "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"}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELRULE={0x2dc, 0x8, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x94, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x58, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x95}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x8b}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xc7}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xb2}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x46}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_USERDATA={0x71, 0x7, 0x1, 0x0, "52448784295bd78096fc8eeed6245368ee0a6301269ebcc033bcc3ae54e7f40b602cc7b30998a7e5ec5cb3451d3a92e5acc8c4512ec01f12d2bde8d91b0412bc2ed7f4b55911a0b9e6d3c4358ac1b6b342e467e671bfc84b3064630a0dcd4fcaf3fdf69d4ef1cb3c075e89f254"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x7f, 0x7, 0x1, 0x0, "f57a6775b198e8bc78f1b177bbd3b90f1afbe5271b5d964dad01eadf082a5864b744682891d0055ec07af18e07ad2570039a3910cb327044f5f8586c044d41d31b166600bff9a7c6dc5b0a4552c39f299c8102618a2d2bcf2a5d70232dfb8a33aec67cfe141b5e0aabb022436eb45a0bbfa509d0a4044ed5e8a7be"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0xf6, 0x7, 0x1, 0x0, "330e93e5af32ef605edf19abbc1126843bf6685e645cbe01eac377a265b1f498f8a93946e171791ca7bc21dd44a646c02eb2de036695f8de199f7ab9facc0d8de4a38a0a7ac527b75884bfd81b17bdae3effdde9426067de027597dbfdf9ecff7f4a6b297df925eee828b9c504bfce25553830578b77abad8b6a58b0729e5a696a3385bc11f2db0c5133ef40fc406d4a54d139865f59141336112b5ae54a36d90b693c46dd5a2db5e30df3a0ef2dccbf513106ae1a76ece48b13dc50dc2dca1e514646bb9c4a43c945db81cb09997cfa1832756017190a890dc78016fbb524a45c558e37061dbd9577fe3df412cf592d0715"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x674}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) (async) socket$nl_generic(0x10, 0x3, 0x10) 3.058635347s ago: executing program 4 (id=2126): r0 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)=r1) (async) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)=r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x5, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r3, 0x6, 0x5, &(0x7f0000000000), 0x4) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r5 = socket(0xa, 0x3, 0x87) sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0xf, 0x6, 0x0, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x24000011}, 0x44) (async) sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0xf, 0x6, 0x0, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x24000011}, 0x44) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ipvlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) (async) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="2c385aa3d49108bc436a", 0x20) close(r7) socket$netlink(0x10, 0x3, 0xe) (async) socket$netlink(0x10, 0x3, 0xe) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x18, r6}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x3, 0x7, 0x0, 0x9]}}) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r9) sendmsg$IEEE802154_LLSEC_DEL_KEY(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r11, 0x201, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4002080}, 0x4000) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x8916, &(0x7f0000000000)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x40, 0x8000, 0x7, 0x2, {{0x19, 0x4, 0x2, 0x4, 0x64, 0x67, 0x0, 0x2f, 0x29, 0x0, @local, @multicast2, {[@ra={0x94, 0x4}, @noop, @cipso={0x86, 0x30, 0x3, [{0x0, 0x4, "76f0"}, {0x5, 0x9, "3d0b3191da84dd"}, {0x2, 0x6, "8855305b"}, {0x2, 0xb, "015817de39b37ee8d3"}, {0x7, 0xc, "141062f8d71098db15b7"}]}, @lsrr={0x83, 0x1b, 0xd9, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x19}, @multicast1]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x40, 0x8000, 0x7, 0x2, {{0x19, 0x4, 0x2, 0x4, 0x64, 0x67, 0x0, 0x2f, 0x29, 0x0, @local, @multicast2, {[@ra={0x94, 0x4}, @noop, @cipso={0x86, 0x30, 0x3, [{0x0, 0x4, "76f0"}, {0x5, 0x9, "3d0b3191da84dd"}, {0x2, 0x6, "8855305b"}, {0x2, 0xb, "015817de39b37ee8d3"}, {0x7, 0xc, "141062f8d71098db15b7"}]}, @lsrr={0x83, 0x1b, 0xd9, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x19}, @multicast1]}]}}}}}) recvfrom$llc(r5, &(0x7f0000000400)=""/80, 0x50, 0x2, &(0x7f0000000480)={0x1a, 0x101, 0x4, 0xfc, 0xf, 0xfc, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)=@deltclass={0x38, 0x29, 0x10, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xfff1, 0xd}, {0x0, 0xa}, {0x8, 0xffff}}, [@tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_netem={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 2.998297569s ago: executing program 2 (id=2127): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x10001}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x34}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) accept(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r4, @ANYRES32=r4, @ANYRES32], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xaa, 0xa, 0x10, 0x0, 0x1ff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040081}, 0x4000004) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x6, 0xfff1}, {0xe, 0xd}}}, 0x24}}, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000000080), 0x72a, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r1], 0xa0}}, 0x40880) 2.997783449s ago: executing program 3 (id=2128): syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000040)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="05000000810400000100000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="030000c0010000000200004000010000a81075394a52921690784cced4bdbebcc7d227bdadda3bbd"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4044) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r4, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x15, 0x5, @l2={'ib', 0x3a, 'dummy0\x00'}}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0xc041}, 0x44044) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036677265000030000280140007002001000000000000000000000000000014000600fc020000000000000000000000000000040012000800280070cf00000c0019800500060014000000080004"], 0x8c}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x20, r7, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x18, r5, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8050}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x40044) r9 = socket(0x10, 0x2, 0x0) write(r9, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r9, 0x84, 0x4, 0x0, 0x0) close(0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100), 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0xfe33) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000200)=""/157, 0x9d}], 0x4}, 0x0) 2.954883965s ago: executing program 1 (id=2129): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000000), 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000000000001c141280090001007866726d003190070000000c0002800800010000000000140003007866726d300000000000000000"], 0x50}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000200)={'ip6tnl0\x00', @multicast}) socket$inet6_udp(0xa, 0x2, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) (async) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) r10 = accept(r9, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000000)=0x80) getsockopt$inet_mtu(r10, 0x0, 0xa, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) setsockopt$inet6_udp_int(r9, 0x11, 0xb, &(0x7f0000000080)=0x5, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r11, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r11, 0x0) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x25, &(0x7f0000000140)=0x10cc, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bond0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004880)=[{0x0}, {0x0}, {&(0x7f0000004300)=""/214, 0xd6}], 0x3}, 0x4}], 0x1, 0x23, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004880)=[{0x0}, {0x0}, {&(0x7f0000004300)=""/214, 0xd6}], 0x3}, 0x4}], 0x1, 0x23, 0x0) socket(0x10, 0x3, 0x0) 2.802267897s ago: executing program 2 (id=2130): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="0403950c", @ANYRESOCT=r0, @ANYRESHEX=r2, @ANYRES32=r2, @ANYBLOB="0800050008000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) r3 = accept4(r0, 0x0, &(0x7f00000000c0), 0x80800) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r1], 0x1c}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000fedbdf250300df000800040002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0244e6d4af13f827990000000000000002100100"/32], 0x20}}, 0x0) ioctl$sock_bt_hci(r4, 0x800448d2, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="0403950c", @ANYRESOCT=r0, @ANYRESHEX=r2, @ANYRES32=r2, @ANYBLOB="0800050008000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) (async) accept4(r0, 0x0, &(0x7f00000000c0), 0x80800) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r1], 0x1c}}, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r5) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000fedbdf250300df000800040002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r7, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0244e6d4af13f827990000000000000002100100"/32], 0x20}}, 0x0) (async) ioctl$sock_bt_hci(r4, 0x800448d2, &(0x7f0000000100)) (async) 2.758110824s ago: executing program 4 (id=2131): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000000b010400000000000000000a00000308000340000000010800024064e98b1684a95006ca60ba5b754f01400003"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x76, &(0x7f0000001100)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b33883", 0x3c, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "74cd7b", 0x0, 0x88, 0x0, @private1, @mcast1, [], "c6214c55d1055a616515f5a7"}}}}}}}, 0x0) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xf}}}, 0x24}}, 0x40000) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) unshare(0x4000400) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newtfilter={0x58, 0x2c, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xd, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7f0, 0x7, 0x4005}, {{0x2}, {0x2, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x8051) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f0000000380), 0x4) setsockopt$RDS_FREE_MR(r8, 0x114, 0x3, &(0x7f00000007c0), 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r7) r10 = socket(0x2a, 0x2, 0x0) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYRES32=r0, @ANYRESHEX=r3, @ANYRES16=r3, @ANYRES32=r11, @ANYBLOB="140002006272696467655f736c6176655f103cc573ab6ca162ff1468fea989dc3100005e7b4bc866ac21fd04ed81822e35b13a10f243266b915f881ca2cf60d7d89c7f8637a99c754ae9b15bb97c67b5b5763925b4d990c84b113f878079f208c61673db859fcdb9bf9033d8b12ae082aed68189594b26a27d4d30aa4a961de4ecfe79152a6456a5b45b2fa5630fb74f0d2dba38dc177e512cbced3825f10e7a9c51f1792e65a83b19e23460a61e2fd1eb316c35840ef893bc15bbd80661c65948d93e2c743b018ecd1dc3cd5e312c29b1c5e532f5ac445c8d751b684f021abd9f14693f60c00b26ce02d432fc6cebf9229a7ec5d4918567e0db26126ebf7be7917ab13d5397a9384d35e7d530f8c1d34c5409e58c581017d060e1104001123305728dac0f40829592cae39261bb11f12877c2d6619f97"], 0x34}, 0x1, 0x0, 0x0, 0x10008890}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES8=r9, @ANYRES8=r4, @ANYBLOB="0000000000000000240012800b00ca0065727370616e000014000280050016000000000006000e0011"], 0x44}}, 0x4000400) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="05c65e9875da5e637cfa5c7ef50fb5f0e449f4b4ae3a6f5cc34d51ff4dbf5f7a05d9f8491e4ba2ab3d22ee61c45807a6264561e44b9e360ed9d9514d5352c0937d42f0534c177d1b9efa19e7ff3e6a283a9706949b6d63d45faf34f1098f02856396910750851715f2aa450779bde9df1d68ce23e4abbe3e1dce", @ANYRES16=r13, @ANYBLOB="010000000000000000000c0000001800058007000100696200000c00028008000400ff000000"], 0x2c}}, 0x0) 2.543580714s ago: executing program 1 (id=2132): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@dev={0xac, 0x14, 0x14, 0x17}, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x1}, {{@in=@local, 0x9, 0x6c}, 0x0, @in6=@loopback, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0xffe0, 0xb}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xa6, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_simple={0x0, 0xe, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x0, 0x3, '()*\x00'}, @TCA_DEF_PARMS={0x0, 0x2, {0x8, 0x40, 0x8, 0x5, 0x7fffffff}}, @TCA_DEF_PARMS={0x0, 0x2, {0x6, 0x1, 0x8, 0x8, 0x2}}, @TCA_DEF_PARMS={0x0, 0x2, {0x81, 0x59, 0xffffffffffffffff, 0x7, 0x8}}, @TCA_DEF_PARMS={0x0, 0x2, {0x2, 0x7, 0x20000000, 0xff, 0xc7}}, @TCA_DEF_PARMS={0x0, 0x2, {0x40000000, 0x1, 0x8, 0x2a9, 0x4}}, @TCA_DEF_PARMS={0x0, 0x2, {0x10001, 0x3, 0x5, 0x7, 0x8}}, @TCA_DEF_PARMS={0x0, 0x2, {0x9, 0x8, 0x4, 0x3}}, @TCA_DEF_DATA={0x0, 0x3, '\x00'}, @TCA_DEF_PARMS={0x0, 0x2, {0x578, 0x81, 0x6, 0x7, 0xfffff0c7}}]}, {0x0, 0x6, "2e64345a6a139f1fd8bcef355535b78ea458a961cb5d0ab642495d1f9986d9af007873cde1bb4214119eeddfc8a0f5111a846ba699a7e8903e3e2c62f95747bc51bce1a76a90b4a881ea7b5d6b7873b430c3c28fd6d764edabc937a9164f4d5347ed10af01"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x401, 0x7, 0x9, 0x5, 0x9, 0xd, 0xffffffff, {r4, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x5, 0x8, 0x6}}, &(0x7f00000002c0)=0xb0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x8004) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4) syz_emit_ethernet(0xe80, &(0x7f0000001180)=ANY=[@ANYBLOB="ffffffffffff28923b688ffe080046e9ff"], 0x0) bind$packet(r0, &(0x7f0000000140)={0x11, 0x9, r6, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, 0x14) r9 = socket$inet6(0xa, 0x3, 0x87) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in=@private, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f00000005c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r10}, {0x0, 0x4, 0x800000000001, 0x0, 0x2000000000, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in=@empty, 0x1, 0x2b}, 0xb, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) sendto$inet6(r5, &(0x7f00000000c0)="2c1cb994f39fce3630c42e7cb8", 0xd, 0x4010, 0x0, 0x0) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r11, 0x84, 0x17, &(0x7f0000001f80)=ANY=[@ANYRES32=r12], 0x1008) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.522336659s ago: executing program 2 (id=2133): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x200, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010020bd7000fbdbdf2526000000180001801400020064756d6d7930"], 0x2c}}, 0x20000000) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x3, r0}, 0x38) 2.426493137s ago: executing program 4 (id=2134): r0 = socket(0x8, 0x802, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000080)=0xf685, 0x4) (async) r1 = socket$netlink(0x10, 0x3, 0x2) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x8, 0x0, 0x4) 2.371061448s ago: executing program 2 (id=2135): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x80000001}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000fe0000000000000008000f00fd000000", 0x24) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00 \x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={r6}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r3, 0x5, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r7 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r7, &(0x7f0000000280)={0x1d, r1, 0x2, {0x0, 0xf0}, 0x2}, 0x18) syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaa551247dcaaaaaaaaaa86dd6000000000400600fe8000000000000001000000000000bbfe800000000000000000aa00004e220000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="04c20000907800001e0401a11e0c07400b6df4f5c06e887cfe07f989519f7e13127224407c80fe8a3616b4bf3400006cc8000000"], 0x0) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x80000001}, 0x10) (async) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000fe0000000000000008000f00fd000000", 0x24) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00 \x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x17) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={r6}, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r3, 0x5, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) socket(0x1d, 0x2, 0x6) (async) bind$can_j1939(r7, &(0x7f0000000280)={0x1d, r1, 0x2, {0x0, 0xf0}, 0x2}, 0x18) (async) syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaa551247dcaaaaaaaaaa86dd6000000000400600fe8000000000000001000000000000bbfe800000000000000000aa00004e220000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="04c20000907800001e0401a11e0c07400b6df4f5c06e887cfe07f989519f7e13127224407c80fe8a3616b4bf3400006cc8000000"], 0x0) (async) 2.350214517s ago: executing program 0 (id=2136): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xc8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x98, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xe5}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x5}]}}]}, 0xc8}}, 0x0) 2.270476572s ago: executing program 4 (id=2137): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) ppoll(&(0x7f0000000240)=[{r0}], 0x1, &(0x7f0000000640), 0x0, 0x0) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 5.623081ms ago: executing program 1 (id=2138): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) (async) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) (async) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan0\x00'}) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x5c}, 0x1, 0x0, 0x0, 0x14008815}, 0x24) (async, rerun: 64) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r12, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) 0s ago: executing program 3 (id=2139): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001200)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000076000907000000000000000007020000", @ANYRES32=0x0, @ANYBLOB="0c000d800800030000bd"], 0x24}, 0x1, 0x5502000000000000}, 0x0) kernel console output (not intermixed with test programs): 35] bridge_slave_0: entered allmulticast mode [ 76.822469][ T5835] bridge_slave_0: entered promiscuous mode [ 76.859570][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 76.881604][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.889314][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.896598][ T5835] bridge_slave_1: entered allmulticast mode [ 76.903823][ T5835] bridge_slave_1: entered promiscuous mode [ 76.980541][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 77.041384][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.054127][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.105725][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.115187][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.122752][ T5843] bridge_slave_0: entered allmulticast mode [ 77.130877][ T5843] bridge_slave_0: entered promiscuous mode [ 77.176668][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.183987][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.191565][ T5843] bridge_slave_1: entered allmulticast mode [ 77.198953][ T5843] bridge_slave_1: entered promiscuous mode [ 77.239028][ T5835] team0: Port device team_slave_0 added [ 77.245148][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.252790][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.260329][ T5838] bridge_slave_0: entered allmulticast mode [ 77.268394][ T5838] bridge_slave_0: entered promiscuous mode [ 77.315182][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.323538][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.331178][ T5844] bridge_slave_0: entered allmulticast mode [ 77.340439][ T5844] bridge_slave_0: entered promiscuous mode [ 77.354018][ T5835] team0: Port device team_slave_1 added [ 77.372187][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.379500][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.386761][ T5838] bridge_slave_1: entered allmulticast mode [ 77.394130][ T5838] bridge_slave_1: entered promiscuous mode [ 77.403625][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.413371][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.421012][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.428301][ T5844] bridge_slave_1: entered allmulticast mode [ 77.435352][ T5844] bridge_slave_1: entered promiscuous mode [ 77.486577][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.531724][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.539490][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.566140][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.580303][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.587444][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.613966][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.628354][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.662087][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.669872][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.677336][ T5836] bridge_slave_0: entered allmulticast mode [ 77.684421][ T5836] bridge_slave_0: entered promiscuous mode [ 77.694145][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.701558][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.709388][ T5836] bridge_slave_1: entered allmulticast mode [ 77.717953][ T5836] bridge_slave_1: entered promiscuous mode [ 77.734114][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.775782][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.811986][ T5843] team0: Port device team_slave_0 added [ 77.820614][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.871934][ T5838] team0: Port device team_slave_0 added [ 77.881011][ T5838] team0: Port device team_slave_1 added [ 77.889664][ T5843] team0: Port device team_slave_1 added [ 77.920096][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.932688][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.977990][ T5851] Bluetooth: hci0: command tx timeout [ 77.985921][ T5844] team0: Port device team_slave_0 added [ 77.992364][ T51] Bluetooth: hci3: command tx timeout [ 77.997814][ T5851] Bluetooth: hci2: command tx timeout [ 78.021655][ T5835] hsr_slave_0: entered promiscuous mode [ 78.028948][ T5835] hsr_slave_1: entered promiscuous mode [ 78.045806][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.053988][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.080973][ T5851] Bluetooth: hci4: command tx timeout [ 78.081399][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.097351][ T5851] Bluetooth: hci1: command tx timeout [ 78.105048][ T5844] team0: Port device team_slave_1 added [ 78.127317][ T5836] team0: Port device team_slave_0 added [ 78.135054][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.143015][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.170178][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.182109][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.189522][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.215845][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.254920][ T5836] team0: Port device team_slave_1 added [ 78.261690][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.268802][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.296534][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.325976][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.333491][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.360833][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.374359][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.382305][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.408843][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.521554][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.528807][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.556271][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.569529][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.576633][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.603715][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.647699][ T5843] hsr_slave_0: entered promiscuous mode [ 78.654175][ T5843] hsr_slave_1: entered promiscuous mode [ 78.661483][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 78.667531][ T5843] Cannot create hsr debugfs directory [ 78.710567][ T5838] hsr_slave_0: entered promiscuous mode [ 78.717097][ T5838] hsr_slave_1: entered promiscuous mode [ 78.723141][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 78.728959][ T5838] Cannot create hsr debugfs directory [ 78.759911][ T5844] hsr_slave_0: entered promiscuous mode [ 78.767220][ T5844] hsr_slave_1: entered promiscuous mode [ 78.773545][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 78.779437][ T5844] Cannot create hsr debugfs directory [ 78.946752][ T5836] hsr_slave_0: entered promiscuous mode [ 78.953273][ T5836] hsr_slave_1: entered promiscuous mode [ 78.959793][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 78.965582][ T5836] Cannot create hsr debugfs directory [ 79.325400][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.355615][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.369390][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.397793][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.482135][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.492178][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.524559][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.536847][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.603265][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.630258][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.642116][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.655364][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.795918][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.803135][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.816578][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.830760][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.851473][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.935788][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.972101][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.008100][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.015485][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.024536][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.036108][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.048124][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.057839][ T51] Bluetooth: hci2: command tx timeout [ 80.058221][ T5842] Bluetooth: hci3: command tx timeout [ 80.063714][ T5851] Bluetooth: hci0: command tx timeout [ 80.091232][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.105201][ T3021] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.112495][ T3021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.137430][ T5851] Bluetooth: hci1: command tx timeout [ 80.137462][ T5842] Bluetooth: hci4: command tx timeout [ 80.151456][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.210228][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.217540][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.226721][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.233983][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.290646][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.353435][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.375526][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.400205][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.407486][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.494568][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.501966][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.532299][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.652596][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.692769][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.700060][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.747251][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.754503][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.825464][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.902315][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.909714][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.949444][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.979634][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.019414][ T3021] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.026573][ T3021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.230977][ T5835] veth0_vlan: entered promiscuous mode [ 81.283952][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.300500][ T5835] veth1_vlan: entered promiscuous mode [ 81.435687][ T5835] veth0_macvtap: entered promiscuous mode [ 81.462537][ T5835] veth1_macvtap: entered promiscuous mode [ 81.548603][ T5838] veth0_vlan: entered promiscuous mode [ 81.558561][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.579600][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.594628][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.620516][ T5838] veth1_vlan: entered promiscuous mode [ 81.655658][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.680356][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.706606][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.715734][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.843103][ T5838] veth0_macvtap: entered promiscuous mode [ 81.874283][ T5838] veth1_macvtap: entered promiscuous mode [ 81.922065][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.983214][ T5843] veth0_vlan: entered promiscuous mode [ 81.990367][ T5844] veth0_vlan: entered promiscuous mode [ 82.015439][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.022892][ T5844] veth1_vlan: entered promiscuous mode [ 82.035065][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.043007][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.065575][ T5843] veth1_vlan: entered promiscuous mode [ 82.086641][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.139777][ T5842] Bluetooth: hci0: command tx timeout [ 82.140027][ T5851] Bluetooth: hci2: command tx timeout [ 82.145412][ T5842] Bluetooth: hci3: command tx timeout [ 82.167188][ T2992] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.206290][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.215780][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.233295][ T3021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.237402][ T5851] Bluetooth: hci4: command tx timeout [ 82.246812][ T5842] Bluetooth: hci1: command tx timeout [ 82.258099][ T3021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.270224][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.294559][ T5844] veth0_macvtap: entered promiscuous mode [ 82.348960][ T5844] veth1_macvtap: entered promiscuous mode [ 82.399929][ T5836] veth0_vlan: entered promiscuous mode [ 82.423880][ T5836] veth1_vlan: entered promiscuous mode [ 82.440619][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.462215][ T5843] veth0_macvtap: entered promiscuous mode [ 82.506044][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.529938][ T5843] veth1_macvtap: entered promiscuous mode [ 82.542835][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.568676][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.625461][ T5836] veth0_macvtap: entered promiscuous mode [ 82.677686][ T5960] block nbd0: Unsupported socket: shutdown callout must be supported. [ 82.682393][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.702218][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.713274][ T5961] block nbd1: Unsupported socket: shutdown callout must be supported. [ 82.760852][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.788166][ T5836] veth1_macvtap: entered promiscuous mode [ 82.812169][ T2992] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.822968][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.835587][ T2992] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.846880][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.859559][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.873680][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.956632][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.976494][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.046150][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.072545][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.110115][ T5969] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2'. [ 83.143658][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.178552][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.229868][ T3021] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.294711][ T3021] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.313807][ T3021] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.353255][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.370815][ T5974] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9'. [ 83.388805][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.416064][ T3021] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.518650][ T3021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.530567][ T3021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.554129][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.563100][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.625237][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.634047][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.756063][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.783239][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.796762][ T5993] netlink: 'syz.0.13': attribute type 10 has an invalid length. [ 83.835582][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.843962][ T5993] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.873908][ T5993] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.881682][ T5993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.889767][ T5993] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.897024][ T5993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.920834][ T5993] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 83.944604][ T5991] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 84.002973][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.051020][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.066504][ T5998] netlink: 'syz.1.15': attribute type 10 has an invalid length. [ 84.149928][ T5998] team0: Device veth1_macvtap failed to register rx_handler [ 84.219814][ T5842] Bluetooth: hci2: command tx timeout [ 84.225578][ T5842] Bluetooth: hci0: command tx timeout [ 84.231614][ T5851] Bluetooth: hci3: command tx timeout [ 84.297606][ T5851] Bluetooth: hci1: command tx timeout [ 84.303120][ T5842] Bluetooth: hci4: command tx timeout [ 84.303223][ T6010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.634344][ T6021] netlink: 'syz.3.20': attribute type 1 has an invalid length. [ 84.671390][ T6017] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 84.680652][ T6021] netlink: 'syz.3.20': attribute type 2 has an invalid length. [ 84.709404][ T6020] syz.0.21 (6020) used greatest stack depth: 19496 bytes left [ 84.853597][ T6027] vlan2: entered allmulticast mode [ 84.899802][ T6027] bond0: entered allmulticast mode [ 84.918601][ T6027] bond_slave_0: entered allmulticast mode [ 84.953397][ T6027] bond_slave_1: entered allmulticast mode [ 85.404760][ T5892] IPVS: starting estimator thread 0... [ 85.492068][ T6067] trusted_key: syz.4.38 sent an empty control message without MSG_MORE. [ 85.538042][ T6062] IPVS: using max 29 ests per chain, 69600 per kthread [ 85.911719][ T6083] netlink: 24 bytes leftover after parsing attributes in process `syz.3.41'. [ 85.954499][ T6090] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.43'. [ 85.971563][ T6091] delete_channel: no stack [ 85.988885][ T6090] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.43'. [ 86.104145][ T6098] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.133918][ T6093] delete_channel: no stack [ 86.288407][ T6107] netlink: 'syz.0.47': attribute type 1 has an invalid length. [ 86.379646][ T6111] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.402946][ T6111] syz.3.48 uses obsolete (PF_INET,SOCK_PACKET) [ 86.430330][ T6109] syzkaller1: entered promiscuous mode [ 86.442018][ T6109] syzkaller1: entered allmulticast mode [ 86.475622][ T6109] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 86.762519][ T6124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.54'. [ 86.833753][ T6124] netlink: 36 bytes leftover after parsing attributes in process `syz.4.54'. [ 86.843944][ T6124] netlink: 16 bytes leftover after parsing attributes in process `syz.4.54'. [ 86.872223][ T10] cfg80211: failed to load regulatory.db [ 86.894770][ T6124] netlink: 36 bytes leftover after parsing attributes in process `syz.4.54'. [ 86.956799][ T6124] netlink: 36 bytes leftover after parsing attributes in process `syz.4.54'. [ 87.524711][ T6172] tipc: Enabling of bearer rejected, failed to enable media [ 87.586776][ T6172] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 87.680568][ T6173] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.202060][ T6195] __nla_validate_parse: 8 callbacks suppressed [ 88.202078][ T6195] netlink: 28 bytes leftover after parsing attributes in process `syz.0.77'. [ 88.295687][ T6201] netlink: 32 bytes leftover after parsing attributes in process `syz.2.78'. [ 88.319311][ T6178] Zero length message leads to an empty skb [ 88.356056][ T6204] netlink: 32 bytes leftover after parsing attributes in process `syz.2.78'. [ 88.457796][ T6207] netlink: 'syz.0.80': attribute type 10 has an invalid length. [ 88.541730][ T6207] veth0_macvtap: left promiscuous mode [ 88.628710][ T6211] netlink: 165 bytes leftover after parsing attributes in process `syz.1.81'. [ 88.658071][ T6215] syz.2.83 uses old SIOCAX25GETINFO [ 88.681115][ T6215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.83'. [ 88.736363][ T6218] netlink: zone id is out of range [ 88.814349][ T6221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.137904][ T6239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.92'. [ 89.179755][ T6239] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 89.207947][ T6239] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 89.346764][ T1164] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.390082][ T1164] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.427593][ T1164] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.461797][ T3021] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.511512][ T6267] netlink: 'syz.0.100': attribute type 3 has an invalid length. [ 89.519410][ T6267] netlink: 224 bytes leftover after parsing attributes in process `syz.0.100'. [ 89.594414][ T6269] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 89.879274][ T6289] netlink: 104 bytes leftover after parsing attributes in process `syz.1.106'. [ 90.124956][ T6302] netlink: 'syz.4.111': attribute type 1 has an invalid length. [ 90.191737][ T6302] vlan3: entered promiscuous mode [ 90.211069][ T6302] vlan3: entered allmulticast mode [ 90.216232][ T6302] veth1_vlan: entered allmulticast mode [ 90.255272][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.110'. [ 90.456202][ T6316] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 90.980751][ T6357] geneve2: entered promiscuous mode [ 90.992681][ T6357] geneve2: entered allmulticast mode [ 91.127277][ T6362] netlink: 'syz.1.126': attribute type 21 has an invalid length. [ 91.137468][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.126'. [ 91.882525][ T6401] netlink: 'syz.3.138': attribute type 4 has an invalid length. [ 91.919042][ T6401] : renamed from bond0 (while UP) [ 92.323648][ T6417] tipc: Started in network mode [ 92.338086][ T6417] tipc: Node identity ac1414bb, cluster identity 4711 [ 92.345478][ T6417] tipc: New replicast peer: 255.255.255.255 [ 92.368180][ T6417] tipc: Enabled bearer , priority 10 [ 92.375689][ T6419] warning: `syz.1.143' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 92.484745][ T6423] dummy0: entered promiscuous mode [ 92.499324][ T6423] batadv_slave_1: entered promiscuous mode [ 92.934958][ T6456] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 93.050158][ T6459] netlink: 'syz.3.158': attribute type 3 has an invalid length. [ 93.125434][ T6463] netlink: 'syz.2.160': attribute type 1 has an invalid length. [ 93.149900][ T6462] veth0: entered promiscuous mode [ 93.193899][ T6460] veth0: left promiscuous mode [ 93.398521][ T6477] bond0: (slave bridge0): Releasing backup interface [ 93.434969][ T6477] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.442593][ T6477] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.488960][ T55] tipc: Node number set to 2886997179 [ 93.528466][ T6477] bridge_slave_0: left allmulticast mode [ 93.534288][ T6477] bridge_slave_0: left promiscuous mode [ 93.541585][ T6477] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.552919][ T6477] bridge_slave_1: left allmulticast mode [ 93.559154][ T6477] bridge_slave_1: left promiscuous mode [ 93.565004][ T6477] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.583952][ T6477] bond0: (slave bond_slave_0): Releasing backup interface [ 93.594399][ T6477] bond0: (slave bond_slave_1): Releasing backup interface [ 93.611692][ T6477] team0: Port device team_slave_0 removed [ 93.622857][ T6477] team0: Port device team_slave_1 removed [ 93.631171][ T6477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.639452][ T6477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.649609][ T6477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.659590][ T6477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.690070][ T6486] __nla_validate_parse: 51 callbacks suppressed [ 93.690090][ T6486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.167'. [ 93.914244][ T6493] syzkaller0: entered promiscuous mode [ 93.935887][ T6493] syzkaller0: entered allmulticast mode [ 94.359795][ T6515] syzkaller1: entered promiscuous mode [ 94.365320][ T6515] syzkaller1: entered allmulticast mode [ 94.448476][ T6521] netlink: 68 bytes leftover after parsing attributes in process `syz.1.177'. [ 94.457181][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 94.543490][ T6525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.179'. [ 94.686337][ T6527] netlink: 'syz.1.181': attribute type 13 has an invalid length. [ 94.775968][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 94.918229][ T6531] netlink: 44 bytes leftover after parsing attributes in process `syz.1.181'. [ 94.967711][ T6527] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.985767][ T6546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.187'. [ 94.999570][ T6546] netlink: 60 bytes leftover after parsing attributes in process `syz.0.187'. [ 95.013941][ T6546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.187'. [ 95.028370][ T6546] netlink: 60 bytes leftover after parsing attributes in process `syz.0.187'. [ 95.052651][ T6546] netlink: 104 bytes leftover after parsing attributes in process `syz.0.187'. [ 95.368250][ T6561] netem: incorrect gi model size [ 95.380689][ T6561] netem: change failed [ 95.466859][ T6568] netlink: 'syz.4.193': attribute type 1 has an invalid length. [ 95.557621][ T6571] netlink: 'syz.0.195': attribute type 1 has an invalid length. [ 95.677934][ T6576] netlink: 'syz.3.194': attribute type 1 has an invalid length. [ 95.763497][ T6582] bond1: (slave bridge1): making interface the new active one [ 95.871668][ T6582] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 96.729897][ T6637] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.073049][ T6661] tipc: Enabling of bearer rejected, failed to enable media [ 97.279518][ T6682] netlink: 'syz.4.219': attribute type 21 has an invalid length. [ 97.340103][ T6654] netlink: 'syz.3.215': attribute type 2 has an invalid length. [ 97.386227][ T6654] netlink: 'syz.3.215': attribute type 8 has an invalid length. [ 97.914650][ T6718] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20003 [ 98.039410][ T6730] netlink: 'syz.0.234': attribute type 4 has an invalid length. [ 98.247699][ T6711] "syz.3.231" (6711) uses obsolete ecb(arc4) skcipher [ 98.294482][ T6744] syz_tun: entered allmulticast mode [ 98.522807][ T6760] netlink: 'syz.1.241': attribute type 11 has an invalid length. [ 98.578382][ T6761] netlink: 'syz.4.243': attribute type 1 has an invalid length. [ 98.656726][ T6771] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 98.709800][ T6760] netlink: 'syz.1.241': attribute type 11 has an invalid length. [ 98.709888][ T6767] syzkaller1: entered promiscuous mode [ 98.723534][ T6760] __nla_validate_parse: 24 callbacks suppressed [ 98.723552][ T6760] netlink: 224 bytes leftover after parsing attributes in process `syz.1.241'. [ 98.732463][ T6767] syzkaller1: entered allmulticast mode [ 98.753991][ T6775] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 98.775214][ T6760] netlink: 'syz.1.241': attribute type 11 has an invalid length. [ 98.805997][ T6760] netlink: 224 bytes leftover after parsing attributes in process `syz.1.241'. [ 98.849191][ T6760] netlink: 'syz.1.241': attribute type 11 has an invalid length. [ 98.884343][ T6760] netlink: 224 bytes leftover after parsing attributes in process `syz.1.241'. [ 98.922546][ T6760] netlink: 'syz.1.241': attribute type 11 has an invalid length. [ 98.940538][ T6783] openvswitch: netlink: Actions may not be safe on all matching packets [ 98.949286][ T6760] netlink: 224 bytes leftover after parsing attributes in process `syz.1.241'. [ 98.966667][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 98.970692][ T6760] netlink: 'syz.1.241': attribute type 11 has an invalid length. [ 98.980943][ T6760] netlink: 224 bytes leftover after parsing attributes in process `syz.1.241'. [ 98.997246][ T6783] delete_channel: no stack [ 99.060289][ T6760] netlink: 'syz.1.241': attribute type 11 has an invalid length. [ 99.095961][ T6760] netlink: 224 bytes leftover after parsing attributes in process `syz.1.241'. [ 99.143986][ T6760] netlink: 'syz.1.241': attribute type 11 has an invalid length. [ 99.155941][ T6760] netlink: 224 bytes leftover after parsing attributes in process `syz.1.241'. [ 99.175838][ T6760] netlink: 'syz.1.241': attribute type 11 has an invalid length. [ 99.195697][ T6760] netlink: 224 bytes leftover after parsing attributes in process `syz.1.241'. [ 99.205280][ T6760] netlink: 'syz.1.241': attribute type 11 has an invalid length. [ 99.221419][ T6760] netlink: 224 bytes leftover after parsing attributes in process `syz.1.241'. [ 99.231189][ T6785] netlink: 'syz.0.251': attribute type 6 has an invalid length. [ 99.299711][ T6760] netlink: 224 bytes leftover after parsing attributes in process `syz.1.241'. [ 99.559798][ T6801] sctp: [Deprecated]: syz.1.256 (pid 6801) Use of int in maxseg socket option. [ 99.559798][ T6801] Use struct sctp_assoc_value instead [ 99.616532][ T6798] lo: entered promiscuous mode [ 99.674490][ T6798] lo: entered allmulticast mode [ 99.696286][ T6807] NCSI netlink: No device for ifindex 0 [ 99.714744][ T6798] tunl0: entered promiscuous mode [ 99.746638][ T6798] tunl0: entered allmulticast mode [ 99.757999][ T6811] validate_nla: 1 callbacks suppressed [ 99.758014][ T6811] netlink: 'syz.4.254': attribute type 10 has an invalid length. [ 99.810028][ T6813] netlink: 'syz.1.260': attribute type 8 has an invalid length. [ 99.810763][ T6798] gre0: entered promiscuous mode [ 99.835155][ T6798] gre0: entered allmulticast mode [ 99.873971][ T6798] gretap0: entered promiscuous mode [ 99.882428][ T6798] gretap0: entered allmulticast mode [ 99.892939][ T6798] gretap0: refused to change device tx_queue_len [ 99.904057][ T6798] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 99.984127][ T6811] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 100.014240][ T6820] netlink: 'syz.3.261': attribute type 39 has an invalid length. [ 100.028806][ T6811] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 100.469588][ T6840] netlink: 'syz.0.269': attribute type 14 has an invalid length. [ 100.479343][ T6840] netlink: 'syz.0.269': attribute type 14 has an invalid length. [ 101.049654][ T6866] netlink: 'syz.3.274': attribute type 23 has an invalid length. [ 101.654549][ T6902] tipc: Started in network mode [ 101.677113][ T6902] tipc: Node identity ee2cb60e1f9d, cluster identity 4711 [ 101.717382][ T6902] tipc: Enabled bearer , priority 0 [ 101.746232][ T6908] syzkaller0: entered promiscuous mode [ 101.784214][ T6908] syzkaller0: entered allmulticast mode [ 101.796589][ T6902] vlan1: mtu less than device minimum [ 101.838242][ T6900] tipc: Resetting bearer [ 101.884380][ T6900] tipc: Disabling bearer [ 102.518246][ T6950] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 102.527990][ T1225] IPVS: starting estimator thread 0... [ 102.627024][ T6919] netlink: 'syz.1.289': attribute type 1 has an invalid length. [ 102.627067][ T6952] IPVS: using max 33 ests per chain, 79200 per kthread [ 102.987528][ T6972] netlink: 'syz.4.304': attribute type 10 has an invalid length. [ 103.095456][ T6967] netlink: 'syz.1.305': attribute type 1 has an invalid length. [ 103.170061][ T6982] netlink: 'syz.2.310': attribute type 1 has an invalid length. [ 103.953732][ T7028] __nla_validate_parse: 45 callbacks suppressed [ 103.953751][ T7028] netlink: 28 bytes leftover after parsing attributes in process `syz.2.323'. [ 104.003858][ T7028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'. [ 104.022738][ T7033] netlink: 84 bytes leftover after parsing attributes in process `syz.2.323'. [ 104.262159][ T7044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.293316][ T7044] : (slave batadv0): Enslaving as an active interface with an up link [ 104.488512][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.333'. [ 104.928546][ T7070] sctp: [Deprecated]: syz.2.338 (pid 7070) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.928546][ T7070] Use struct sctp_sack_info instead [ 105.079587][ T7077] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.091033][ T7091] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 105.137237][ T7085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.343'. [ 105.284384][ T7092] syzkaller1: entered promiscuous mode [ 105.324349][ T7092] syzkaller1: entered allmulticast mode [ 105.591919][ T7116] validate_nla: 8 callbacks suppressed [ 105.591936][ T7116] netlink: 'syz.1.351': attribute type 1 has an invalid length. [ 105.625686][ T7116] netlink: 224 bytes leftover after parsing attributes in process `syz.1.351'. [ 105.680150][ T7125] team_slave_0: mtu greater than device maximum [ 105.709952][ T7115] netlink: 'syz.1.351': attribute type 1 has an invalid length. [ 105.723388][ T7130] netlink: 104 bytes leftover after parsing attributes in process `syz.0.354'. [ 105.736110][ T7115] netlink: 224 bytes leftover after parsing attributes in process `syz.1.351'. [ 105.777579][ T7121] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 105.999915][ T7138] netlink: 20 bytes leftover after parsing attributes in process `syz.0.356'. [ 106.462260][ T7166] netlink: 40 bytes leftover after parsing attributes in process `syz.1.362'. [ 106.989069][ T7178] team0 (unregistering): Port device team_slave_0 removed [ 107.004235][ T7178] team0 (unregistering): Port device team_slave_1 removed [ 108.119609][ T7239] Bluetooth: MGMT ver 1.23 [ 108.375272][ T7255] tipc: Started in network mode [ 108.380538][ T7255] tipc: Node identity 7, cluster identity 4711 [ 108.395419][ T7255] tipc: Node number set to 7 [ 108.684283][ T7261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.045068][ T7276] smc: net device erspan0 applied user defined pnetid SYZ0 [ 109.325180][ T7291] __nla_validate_parse: 10 callbacks suppressed [ 109.325491][ T7291] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.399'. [ 109.351765][ T7293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.400'. [ 109.352226][ T7291] netlink: 'syz.0.399': attribute type 4 has an invalid length. [ 109.372519][ T7291] netlink: 17 bytes leftover after parsing attributes in process `syz.0.399'. [ 110.185468][ T7341] macvlan0: entered promiscuous mode [ 110.210318][ T7341] macvlan0: entered allmulticast mode [ 110.382669][ T7355] netlink: 'syz.1.420': attribute type 7 has an invalid length. [ 110.795685][ T7368] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 111.148970][ T7375] tipc: Enabled bearer , priority 0 [ 111.159150][ T7373] tipc: Resetting bearer [ 111.216508][ T7376] syzkaller0: entered promiscuous mode [ 111.246887][ T7376] syzkaller0: entered allmulticast mode [ 111.523090][ T7403] netlink: 'syz.4.433': attribute type 32 has an invalid length. [ 111.533547][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.433'. [ 111.542905][ T7386] syzkaller1: entered promiscuous mode [ 111.542928][ T7386] syzkaller1: entered allmulticast mode [ 111.632130][ T7403] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 111.713992][ T7369] tipc: Resetting bearer [ 111.747556][ T7369] tipc: Disabling bearer [ 111.817836][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.142157][ T7432] netlink: 'syz.0.441': attribute type 10 has an invalid length. [ 112.170206][ T7432] netlink: 40 bytes leftover after parsing attributes in process `syz.0.441'. [ 112.225423][ T7438] netlink: 'syz.0.441': attribute type 10 has an invalid length. [ 112.245649][ T7438] netlink: 40 bytes leftover after parsing attributes in process `syz.0.441'. [ 112.319126][ T7432] team0: Port device geneve0 added [ 112.619422][ T7453] netlink: 'syz.0.446': attribute type 39 has an invalid length. [ 112.657740][ T7455] netlink: 12 bytes leftover after parsing attributes in process `syz.4.447'. [ 113.110132][ T7495] netlink: 'syz.2.457': attribute type 39 has an invalid length. [ 113.131658][ T7492] netlink: 24 bytes leftover after parsing attributes in process `syz.3.455'. [ 113.175673][ T7497] pim6reg527: entered allmulticast mode [ 113.194009][ T7492] netlink: 24 bytes leftover after parsing attributes in process `syz.3.455'. [ 113.218765][ T7492] netlink: 24 bytes leftover after parsing attributes in process `syz.3.455'. [ 113.243795][ T2992] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 113.244713][ T7498] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 113.354331][ T7501] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 113.542182][ T7515] veth0: entered promiscuous mode [ 113.582349][ T7514] veth0: left promiscuous mode [ 113.770192][ T7528] netlink: 'syz.0.465': attribute type 1 has an invalid length. [ 113.798526][ T7528] netlink: 'syz.0.465': attribute type 10 has an invalid length. [ 113.815387][ T7528] netlink: 'syz.0.465': attribute type 4 has an invalid length. [ 114.359431][ T7547] __nla_validate_parse: 68 callbacks suppressed [ 114.359449][ T7547] netlink: 16 bytes leftover after parsing attributes in process `syz.1.472'. [ 114.681201][ T7561] netlink: 'syz.1.476': attribute type 10 has an invalid length. [ 114.721838][ T7561] team0: Device hsr_slave_0 failed to register rx_handler [ 114.737428][ T7566] netlink: 104 bytes leftover after parsing attributes in process `syz.1.476'. [ 114.815830][ T7568] netlink: 28 bytes leftover after parsing attributes in process `syz.0.479'. [ 114.894209][ T7573] sit1: entered promiscuous mode [ 114.899644][ T7573] sit1: entered allmulticast mode [ 115.066668][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.484'. [ 115.141945][ T7587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.485'. [ 115.190472][ T7591] netlink: 248 bytes leftover after parsing attributes in process `syz.0.483'. [ 115.336175][ T7600] netlink: 'syz.4.486': attribute type 2 has an invalid length. [ 115.462736][ T7609] netlink: 48 bytes leftover after parsing attributes in process `syz.1.488'. [ 115.551109][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.489'. [ 115.846554][ T7631] netlink: 124 bytes leftover after parsing attributes in process `syz.1.493'. [ 115.912321][ T7634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.495'. [ 116.207703][ T7652] tipc: Can't bind to reserved service type 1 [ 116.672968][ T7654] team_slave_0: entered promiscuous mode [ 116.679001][ T7654] team_slave_1: entered promiscuous mode [ 116.708741][ T7654] macsec1: entered allmulticast mode [ 116.717203][ T7654] team0: entered allmulticast mode [ 116.750291][ T7654] team_slave_0: entered allmulticast mode [ 116.767114][ T7654] team_slave_1: entered allmulticast mode [ 116.854435][ T7654] team0: left allmulticast mode [ 116.868032][ T7654] team_slave_0: left allmulticast mode [ 116.884541][ T7654] team_slave_1: left allmulticast mode [ 116.907223][ T7654] team_slave_0: left promiscuous mode [ 116.912841][ T7654] team_slave_1: left promiscuous mode [ 117.017194][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 117.292709][ T7695] syzkaller0: entered promiscuous mode [ 117.301190][ T7695] syzkaller0: entered allmulticast mode [ 117.326466][ T7713] netlink: 'syz.3.510': attribute type 15 has an invalid length. [ 119.146742][ T7750] netlink: 'syz.2.521': attribute type 2 has an invalid length. [ 119.181966][ T7750] netlink: 'syz.2.521': attribute type 1 has an invalid length. [ 119.617389][ T7779] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 119.700506][ T7785] tipc: Enabled bearer , priority 0 [ 119.723278][ T7785] syzkaller0: entered promiscuous mode [ 119.751017][ T7785] syzkaller0: entered allmulticast mode [ 119.798754][ T7785] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 119.895477][ T7780] tipc: Resetting bearer [ 119.948062][ T7780] tipc: Disabling bearer [ 120.066004][ T7805] __nla_validate_parse: 2 callbacks suppressed [ 120.066021][ T7805] netlink: 28 bytes leftover after parsing attributes in process `syz.4.536'. [ 120.368895][ T7821] netlink: 277 bytes leftover after parsing attributes in process `syz.0.538'. [ 120.743818][ T7836] netlink: 'syz.1.544': attribute type 6 has an invalid length. [ 121.344338][ T7866] netlink: 'syz.3.551': attribute type 6 has an invalid length. [ 121.382689][ T7866] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.551'. [ 121.406018][ T7813] infiniband syz0: set down [ 121.439510][ T7813] infiniband syz0: added bond_slave_1 [ 121.462931][ T7813] syz0: rxe_create_cq: returned err = -12 [ 121.478261][ T7870] nla_validate_range_unsigned: 23 callbacks suppressed [ 121.478278][ T7870] netlink: 'syz.2.552': attribute type 11 has an invalid length. [ 121.513589][ T7813] infiniband syz0: Couldn't create ib_mad CQ [ 121.514146][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.553'. [ 121.520053][ T7870] netlink: 228 bytes leftover after parsing attributes in process `syz.2.552'. [ 121.546167][ T7813] infiniband syz0: Couldn't open port 1 [ 121.569029][ T7882] tipc: Enabled bearer , priority 10 [ 121.651930][ T7878] netlink: 40 bytes leftover after parsing attributes in process `syz.1.554'. [ 121.673240][ T7813] RDS/IB: syz0: added [ 121.711186][ T7813] smc: adding ib device syz0 with port count 1 [ 121.747345][ T7813] smc: ib device syz0 port 1 has pnetid [ 121.863890][ T7890] tipc: Enabled bearer , priority 0 [ 121.892755][ T7890] syzkaller0: entered promiscuous mode [ 121.914075][ T7890] syzkaller0: entered allmulticast mode [ 121.965482][ T7896] pim6reg: entered allmulticast mode [ 122.021549][ T7901] sctp: [Deprecated]: syz.1.559 (pid 7901) Use of int in max_burst socket option. [ 122.021549][ T7901] Use struct sctp_assoc_value instead [ 122.093719][ T7890] tipc: Resetting bearer [ 122.149117][ T7888] tipc: Resetting bearer [ 122.231991][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.561'. [ 122.257742][ T7888] tipc: Disabling bearer [ 122.271761][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.561'. [ 122.303574][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.561'. [ 122.566182][ T7923] netlink: 16 bytes leftover after parsing attributes in process `syz.2.564'. [ 122.584522][ T5915] tipc: Node number set to 4054955534 [ 123.375038][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a96e000: rx timeout, send abort [ 123.884231][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a96e000: abort rx timeout. Force session deactivation [ 124.743121][ T8017] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 125.097840][ T8038] __nla_validate_parse: 6 callbacks suppressed [ 125.097857][ T8038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.592'. [ 125.102534][ T8039] netlink: 'syz.1.589': attribute type 10 has an invalid length. [ 125.106221][ T8037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.592'. [ 125.156172][ T8039] veth0_vlan: entered allmulticast mode [ 125.175998][ T8039] veth0_vlan: left promiscuous mode [ 125.184910][ T8039] veth0_vlan: entered promiscuous mode [ 125.203017][ T8039] team0: Device veth0_vlan failed to register rx_handler [ 125.244267][ T8035] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 125.257194][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 125.954443][ T8068] netlink: 'syz.0.601': attribute type 4 has an invalid length. [ 125.964781][ T8070] netlink: 'syz.3.600': attribute type 21 has an invalid length. [ 126.079062][ T8076] bridge_slave_0: default FDB implementation only supports local addresses [ 126.094947][ T8079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.604'. [ 126.256503][ T8083] tipc: Started in network mode [ 126.276641][ T8083] tipc: Node identity 0a2e593fdbda, cluster identity 4711 [ 126.284721][ T8083] tipc: Enabled bearer , priority 0 [ 126.299646][ T8085] team0: Device vti0 is of different type [ 126.434296][ T8083] syzkaller0: entered promiscuous mode [ 126.440782][ T8083] syzkaller0: entered allmulticast mode [ 126.461619][ T8082] tipc: Resetting bearer [ 126.489592][ T8082] tipc: Disabling bearer [ 126.526478][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.608'. [ 126.645892][ T8103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.611'. [ 126.662297][ T8103] netlink: 'syz.3.611': attribute type 24 has an invalid length. [ 127.012638][ T8121] netlink: 216 bytes leftover after parsing attributes in process `syz.3.617'. [ 127.109955][ T8123] sctp: [Deprecated]: syz.1.618 (pid 8123) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.109955][ T8123] Use struct sctp_sack_info instead [ 127.133180][ T8123] netlink: 16 bytes leftover after parsing attributes in process `syz.1.618'. [ 127.146033][ T8123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.218200][ T8128] netlink: 'syz.4.620': attribute type 10 has an invalid length. [ 127.501560][ T8143] netlink: 16 bytes leftover after parsing attributes in process `syz.4.625'. [ 127.831912][ T8169] netlink: 'syz.3.631': attribute type 2 has an invalid length. [ 128.500811][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.634'. [ 128.648329][ T8189] openvswitch: netlink: Duplicate or invalid key (type 0). [ 128.663794][ T8189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.742998][ T8194] netlink: 'syz.2.637': attribute type 1 has an invalid length. [ 128.776185][ T8194] netlink: 172 bytes leftover after parsing attributes in process `syz.2.637'. [ 128.831496][ T8189] netlink: 'syz.1.635': attribute type 36 has an invalid length. [ 129.907563][ T8245] netlink: 'syz.2.651': attribute type 5 has an invalid length. [ 130.062706][ T8258] dvmrp1: entered allmulticast mode [ 130.151359][ T8268] __nla_validate_parse: 5 callbacks suppressed [ 130.151376][ T8268] netlink: 48 bytes leftover after parsing attributes in process `syz.2.656'. [ 130.191556][ T8268] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 130.270788][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.656'. [ 130.469717][ T8285] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.664'. [ 130.500553][ T8285] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 130.514693][ T8285] openvswitch: netlink: Duplicate key (type 0). [ 130.648353][ T8295] IPVS: set_ctl: invalid protocol: 12336 48.48.48.48:12336 [ 130.809215][ T8298] netlink: 'syz.0.668': attribute type 21 has an invalid length. [ 130.836068][ T8298] netlink: 152 bytes leftover after parsing attributes in process `syz.0.668'. [ 130.872413][ T8303] netlink: 36 bytes leftover after parsing attributes in process `syz.3.669'. [ 130.908049][ T8305] netlink: 'syz.2.670': attribute type 10 has an invalid length. [ 130.941720][ T8305] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.950502][ T8305] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.984756][ T8305] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.992062][ T8305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.999643][ T8305] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.007002][ T8305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.023822][ T8305] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 131.096826][ T8316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.673'. [ 131.132308][ T8314] netlink: 32 bytes leftover after parsing attributes in process `syz.3.673'. [ 131.728211][ T8348] netlink: 24 bytes leftover after parsing attributes in process `syz.1.684'. [ 131.836904][ T8349] syzkaller1: entered promiscuous mode [ 131.877935][ T8349] syzkaller1: entered allmulticast mode [ 132.009185][ T8360] block nbd0: Unsupported socket: shutdown callout must be supported. [ 132.043346][ T8361] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 132.074319][ T8361] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 132.091188][ T8360] netlink: 'syz.3.686': attribute type 1 has an invalid length. [ 132.107058][ T8360] netlink: 'syz.3.686': attribute type 11 has an invalid length. [ 132.141394][ T8360] netlink: 224 bytes leftover after parsing attributes in process `syz.3.686'. [ 132.226392][ T8367] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.689'. [ 132.343195][ T8374] sock: sock_set_timeout: `syz.0.692' (pid 8374) tries to set negative timeout [ 132.349949][ T8370] bond0: entered promiscuous mode [ 132.363354][ T8370] bond0: entered allmulticast mode [ 132.371088][ T8370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.391553][ T8374] netlink: 'syz.0.692': attribute type 4 has an invalid length. [ 132.419866][ T8378] netlink: 'syz.2.693': attribute type 21 has an invalid length. [ 132.803858][ T8388] netlink: 'syz.3.697': attribute type 16 has an invalid length. [ 132.957490][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.963849][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.255403][ T8423] netlink: 'syz.0.711': attribute type 1 has an invalid length. [ 133.442176][ T8443] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 133.515723][ T8449] macvlan0: left promiscuous mode [ 133.521260][ T8449] macvlan0: left allmulticast mode [ 133.526580][ T8449] netlink: 'syz.2.716': attribute type 2 has an invalid length. [ 133.745460][ T8463] sctp: [Deprecated]: syz.1.720 (pid 8463) Use of int in max_burst socket option deprecated. [ 133.745460][ T8463] Use struct sctp_assoc_value instead [ 133.960939][ T8475] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 134.042371][ T8480] sctp: [Deprecated]: syz.2.723 (pid 8480) Use of int in max_burst socket option. [ 134.042371][ T8480] Use struct sctp_assoc_value instead [ 134.286456][ T8488] tipc: Started in network mode [ 134.301927][ T8488] tipc: Node identity 9ec085760f03, cluster identity 4711 [ 134.302020][ T8492] netlink: 'syz.2.728': attribute type 1 has an invalid length. [ 134.313372][ T8488] tipc: Enabled bearer , priority 0 [ 134.332802][ T8488] syzkaller0: entered promiscuous mode [ 134.345337][ T8488] syzkaller0: entered allmulticast mode [ 134.401649][ T8491] tipc: Enabled bearer , priority 0 [ 134.539566][ T8491] syzkaller0: entered promiscuous mode [ 134.545213][ T8491] syzkaller0: entered allmulticast mode [ 134.552404][ T8491] tipc: Resetting bearer [ 134.565350][ T8498] IPv6: sit1: Disabled Multicast RS [ 134.587604][ T8489] tipc: Resetting bearer [ 135.430969][ T5892] tipc: Node number set to 2445510006 [ 135.437509][ T5892] tipc: Node number set to 3522451775 [ 136.023362][ T8489] tipc: Disabling bearer [ 136.042484][ T8513] tipc: Resetting bearer [ 136.056231][ T8517] gretap0: entered promiscuous mode [ 136.062298][ T8517] vlan2: entered promiscuous mode [ 136.129764][ T8487] tipc: Resetting bearer [ 136.241995][ T8487] tipc: Disabling bearer [ 136.659367][ T8559] validate_nla: 2 callbacks suppressed [ 136.659383][ T8559] netlink: 'syz.0.748': attribute type 9 has an invalid length. [ 136.754902][ T8566] netlink: 'syz.0.748': attribute type 9 has an invalid length. [ 136.814996][ T8567] __nla_validate_parse: 12 callbacks suppressed [ 136.815015][ T8567] netlink: 20 bytes leftover after parsing attributes in process `syz.3.749'. [ 136.896101][ T8560] netlink: 48 bytes leftover after parsing attributes in process `syz.4.747'. [ 137.013032][ T8576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.751'. [ 137.078583][ T8576] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.133356][ T8591] netlink: 'syz.3.754': attribute type 1 has an invalid length. [ 137.177446][ T8576] bridge_slave_1 (unregistering): left allmulticast mode [ 137.184699][ T8576] bridge_slave_1 (unregistering): left promiscuous mode [ 137.211246][ T8576] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.481257][ T8586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.552200][ T8618] tipc: Enabled bearer , priority 0 [ 137.583430][ T8595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.702827][ T8618] syzkaller0: entered promiscuous mode [ 137.712792][ T8618] syzkaller0: entered allmulticast mode [ 137.719178][ T8624] netlink: 'syz.4.760': attribute type 10 has an invalid length. [ 137.727134][ T8624] netlink: 40 bytes leftover after parsing attributes in process `syz.4.760'. [ 137.910245][ T8584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.035096][ T8639] netlink: 'syz.2.763': attribute type 1 has an invalid length. [ 138.223229][ T8646] netlink: 60 bytes leftover after parsing attributes in process `syz.2.763'. [ 138.457622][ T8651] openvswitch: netlink: Actions may not be safe on all matching packets [ 139.100781][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 139.391637][ T8624] team0: Port device geneve0 added [ 139.401075][ T8610] tipc: Resetting bearer [ 139.471057][ T8639] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.488435][ T8640] vlan2: entered promiscuous mode [ 139.493782][ T8640] bond1: entered promiscuous mode [ 139.499825][ T8640] vlan2: entered allmulticast mode [ 139.507885][ T8640] bond1: entered allmulticast mode [ 139.521199][ T8608] tipc: Resetting bearer [ 139.546593][ T8608] tipc: Disabling bearer [ 139.614954][ T8651] team_slave_0: entered promiscuous mode [ 139.620917][ T8651] team_slave_1: entered promiscuous mode [ 139.639431][ T8651] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 139.664350][ T8651] team0: Device macvtap1 is already an upper device of the team interface [ 139.722318][ T8651] team_slave_0: left promiscuous mode [ 139.727943][ T8651] team_slave_1: left promiscuous mode [ 139.736845][ T8667] netlink: 'syz.4.768': attribute type 11 has an invalid length. [ 139.907851][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.772'. [ 139.910732][ T8678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.772'. [ 140.252034][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.779'. [ 140.424995][ T8718] netlink: 36 bytes leftover after parsing attributes in process `syz.2.781'. [ 140.480338][ T8720] netlink: 'syz.2.781': attribute type 5 has an invalid length. [ 140.617179][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.617208][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 140.939244][ T8728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.960348][ T8727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.092821][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.788'. [ 141.234278][ T8742] pim6reg: entered allmulticast mode [ 141.392806][ T8745] pim6reg: left allmulticast mode [ 141.419054][ T8758] block nbd0: server does not support multiple connections per device. [ 141.431525][ T8758] block nbd0: shutting down sockets [ 141.901462][ T8778] netlink: 'syz.1.799': attribute type 83 has an invalid length. [ 141.985739][ T8778] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 142.057597][ T8787] netlink: 'syz.1.799': attribute type 83 has an invalid length. [ 142.073337][ T8790] __nla_validate_parse: 1 callbacks suppressed [ 142.073353][ T8790] netlink: 20 bytes leftover after parsing attributes in process `syz.0.803'. [ 142.338937][ T8809] netlink: 'syz.3.807': attribute type 6 has an invalid length. [ 142.344684][ T8808] netlink: 'syz.4.808': attribute type 21 has an invalid length. [ 142.813148][ T8833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.816'. [ 143.030459][ T8841] netlink: 'syz.2.819': attribute type 1 has an invalid length. [ 143.265073][ T8851] netlink: 165 bytes leftover after parsing attributes in process `syz.1.822'. [ 143.346007][ T8855] netlink: 80 bytes leftover after parsing attributes in process `syz.0.823'. [ 143.587604][ T8863] netlink: 'syz.1.827': attribute type 11 has an invalid length. [ 143.594051][ T8865] netlink: 'syz.2.828': attribute type 1 has an invalid length. [ 143.628375][ T8865] netlink: 224 bytes leftover after parsing attributes in process `syz.2.828'. [ 143.644306][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.827'. [ 143.657635][ T8865] bond0: entered allmulticast mode [ 143.663539][ T8865] bond_slave_0: entered allmulticast mode [ 143.674586][ T8865] bond_slave_1: entered allmulticast mode [ 143.693127][ T8865] bridge0: entered allmulticast mode [ 143.901303][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.830'. [ 144.079458][ T8889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.836'. [ 144.221595][ T8896] IPVS: set_ctl: invalid protocol: 43 172.30.0.3:20000 [ 144.644462][ T8917] tipc: Enabling of bearer rejected, failed to enable media [ 145.291269][ T8953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.853'. [ 145.369669][ T8953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.853'. [ 145.417046][ T5851] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 145.417658][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 145.910088][ T8981] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 145.943212][ T8981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.184350][ T8991] sch_fq: defrate 0 ignored. [ 146.283650][ T8993] syzkaller0: entered promiscuous mode [ 146.307142][ T8993] syzkaller0: entered allmulticast mode [ 146.684387][ T9012] netlink: 'syz.1.874': attribute type 10 has an invalid length. [ 146.756279][ T9012] batman_adv: batadv0: Adding interface: team0 [ 146.767259][ T9012] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.822864][ T9012] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 146.976726][ T9022] netlink: 'syz.3.879': attribute type 11 has an invalid length. [ 147.272516][ T9040] netlink: 67 bytes leftover after parsing attributes in process `syz.3.883'. [ 147.315521][ T9034] tipc: Enabled bearer , priority 0 [ 147.372993][ T9039] netlink: 67 bytes leftover after parsing attributes in process `syz.3.883'. [ 147.444365][ T9050] netlink: 'syz.4.885': attribute type 1 has an invalid length. [ 147.507532][ T9033] syzkaller0: entered promiscuous mode [ 147.513309][ T9033] syzkaller0: entered allmulticast mode [ 147.520415][ T9033] tipc: Resetting bearer [ 147.674151][ T9060] netlink: 64 bytes leftover after parsing attributes in process `syz.2.888'. [ 147.721914][ T12] tipc: Resetting bearer [ 147.740105][ T9033] tipc: Resetting bearer [ 149.121571][ T9033] tipc: Disabling bearer [ 149.389095][ T9093] tipc: Enabled bearer , priority 0 [ 149.424605][ T9093] syzkaller0: entered promiscuous mode [ 149.444319][ T9093] syzkaller0: entered allmulticast mode [ 149.526713][ T9093] tipc: Resetting bearer [ 149.626733][ T9092] tipc: Resetting bearer [ 149.675434][ T9092] tipc: Disabling bearer [ 149.883952][ T10] hid-generic 0005:16C0:5507.0001: hidraw0: BLUETOOTH HID v0.8d Device [syz0] on aa:aa:aa:aa:aa:aa [ 149.954898][ T9131] netlink: 28 bytes leftover after parsing attributes in process `syz.2.907'. [ 150.220399][ T9143] netlink: 14 bytes leftover after parsing attributes in process `syz.2.911'. [ 150.266565][ T9134] fido_id[9134]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 150.415812][ T9156] netlink: 'syz.3.913': attribute type 83 has an invalid length. [ 150.623339][ T9143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.634098][ T9170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.917'. [ 150.645407][ T9143] bond_slave_0: left allmulticast mode [ 150.656836][ T9143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.668060][ T9143] bond_slave_1: left allmulticast mode [ 150.676473][ T9143] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 150.686095][ T9143] bridge0: left allmulticast mode [ 150.688468][ T9171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.917'. [ 150.698403][ T9143] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.713028][ T9143] bond0 (unregistering): Released all slaves [ 150.901855][ T9175] netlink: 'syz.3.918': attribute type 1 has an invalid length. [ 150.982946][ T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d [ 151.579321][ T9215] netlink: 'syz.2.927': attribute type 1 has an invalid length. [ 151.758401][ T9218] netlink: 'syz.0.929': attribute type 29 has an invalid length. [ 152.066891][ T9238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.935'. [ 152.089389][ T9238] netlink: 'syz.3.935': attribute type 5 has an invalid length. [ 152.102172][ T9225] netlink: 'syz.2.931': attribute type 10 has an invalid length. [ 152.117627][ T9238] netlink: 20 bytes leftover after parsing attributes in process `syz.3.935'. [ 152.149957][ T9238] geneve3: entered promiscuous mode [ 152.180162][ T9238] geneve3: entered allmulticast mode [ 152.211865][ T9247] netlink: 'syz.1.938': attribute type 1 has an invalid length. [ 152.221277][ T49] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 152.241679][ T9249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.939'. [ 152.256053][ T49] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 152.322652][ T9248] bond2 (unregistering): Released all slaves [ 152.342114][ T49] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 152.351414][ T49] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 152.361797][ T9255] hsr0: entered promiscuous mode [ 152.366891][ T9255] hsr0: entered allmulticast mode [ 152.372941][ T9255] hsr_slave_0: entered allmulticast mode [ 152.379324][ T9255] hsr_slave_1: entered allmulticast mode [ 152.605028][ T9264] __nla_validate_parse: 1 callbacks suppressed [ 152.605047][ T9264] netlink: 32 bytes leftover after parsing attributes in process `syz.4.943'. [ 152.670402][ T9273] netlink: 16 bytes leftover after parsing attributes in process `syz.3.945'. [ 152.861827][ T9274] netlink: 'syz.1.946': attribute type 13 has an invalid length. [ 152.932937][ T9274] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.939842][ T9289] netlink: 'syz.2.950': attribute type 21 has an invalid length. [ 152.952170][ T9274] batman_adv: batadv0: Interface activated: team0 [ 152.966650][ T9274] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.143481][ T9302] netlink: 28 bytes leftover after parsing attributes in process `syz.1.955'. [ 153.500229][ T9324] openvswitch: netlink: IPv6 tunnel dst address is zero [ 153.776099][ T9343] netlink: 'syz.0.968': attribute type 10 has an invalid length. [ 153.949084][ T9353] netlink: 24 bytes leftover after parsing attributes in process `syz.3.972'. [ 153.971077][ T9343] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 154.073633][ T9362] netlink: 'syz.2.971': attribute type 12 has an invalid length. [ 154.108025][ T9362] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 154.232322][ T9367] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 154.252123][ T9369] netlink: 28 bytes leftover after parsing attributes in process `syz.4.975'. [ 154.276470][ T9370] netlink: 40 bytes leftover after parsing attributes in process `syz.1.973'. [ 154.304669][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'. [ 154.811858][ T9401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.987'. [ 154.901748][ T9409] tipc: Enabling of bearer rejected, already enabled [ 154.940458][ T9410] tipc: Enabling of bearer rejected, already enabled [ 155.190356][ T9435] tipc: Enabled bearer , priority 0 [ 155.202794][ T9435] tipc: Resetting bearer [ 155.232931][ T9447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.995'. [ 155.237432][ T9440] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_rx_wq": -EINTR [ 155.320198][ T9434] tipc: Disabling bearer [ 155.431155][ T9455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.477832][ T9455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.567051][ T9455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.600438][ T9455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.611123][ T9467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1000'. [ 155.677589][ T9455] : (slave batadv0): Releasing backup interface [ 155.723731][ T9454] macvlan0: entered allmulticast mode [ 155.733813][ T9454] veth1_vlan: entered allmulticast mode [ 155.796831][ T9460] veth1_vlan: left allmulticast mode [ 155.825905][ T9460] macvlan0 (unregistering): left allmulticast mode [ 155.831591][ T9466] netlink: 'syz.2.999': attribute type 21 has an invalid length. [ 155.854762][ T9479] Illegal XDP return value 4294967274 on prog (id 222) dev N/A, expect packet loss! [ 155.947265][ T9483] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 155.954076][ T9483] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 155.973837][ T9483] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 155.980600][ T9483] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 155.984541][ T9471] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 156.005315][ T9471] bond2: (slave vcan1): Error -95 calling set_mac_address [ 156.052980][ T9466] netlink: 'syz.2.999': attribute type 1 has an invalid length. [ 156.211516][ T9495] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 156.245753][ T9499] syz_tun: left allmulticast mode [ 156.320191][ T9503] Bluetooth: MGMT ver 1.23 [ 156.606329][ T9517] netlink: 'syz.3.1015': attribute type 21 has an invalid length. [ 157.279492][ T9546] bond2: entered promiscuous mode [ 157.300656][ T9546] bond2: entered allmulticast mode [ 157.335527][ T9546] 8021q: adding VLAN 0 to HW filter on device bond2 [ 157.636349][ T9564] netem: change failed [ 158.162585][ T9598] __nla_validate_parse: 6 callbacks suppressed [ 158.162605][ T9598] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1038'. [ 158.255973][ T9607] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1038'. [ 158.275163][ T9607] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1038'. [ 158.634660][ T9629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1046'. [ 158.758470][ T9631] netlink: 'syz.1.1048': attribute type 1 has an invalid length. [ 158.766852][ T9631] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1048'. [ 158.946643][ T9643] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1050'. [ 158.962587][ T9636] can: request_module (can-proto-0) failed. [ 159.073736][ T9645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1051'. [ 159.082986][ T9645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1051'. [ 159.172707][ T9654] sctp: [Deprecated]: syz.4.1054 (pid 9654) Use of int in maxseg socket option. [ 159.172707][ T9654] Use struct sctp_assoc_value instead [ 159.205304][ T9648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.230112][ T9659] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 159.249183][ T9648] bond0: (slave rose0): Enslaving as an active interface with an up link [ 159.297173][ T9660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1055'. [ 159.328839][ T9660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1055'. [ 160.085135][ T9708] netlink: 'syz.1.1067': attribute type 1 has an invalid length. [ 160.642344][ T9725] netlink: 'syz.0.1075': attribute type 5 has an invalid length. [ 160.820331][ T9736] netlink: 'syz.4.1077': attribute type 83 has an invalid length. [ 160.872885][ T9736] ip6gre1: entered allmulticast mode [ 161.125304][ T9751] veth1_macvtap: left promiscuous mode [ 161.131226][ T9751] macsec0: entered promiscuous mode [ 161.136703][ T9751] macsec0: entered allmulticast mode [ 161.214519][ T9749] only policy match revision 0 supported [ 161.214541][ T9749] unable to load match [ 161.226775][ T9748] veth1_macvtap: entered promiscuous mode [ 161.244574][ T9748] veth1_macvtap: entered allmulticast mode [ 161.268184][ T9748] macsec0: left promiscuous mode [ 161.286290][ T9748] macsec0: left allmulticast mode [ 161.306621][ T9748] veth1_macvtap: left allmulticast mode [ 161.501862][ T9769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.533210][ T9770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.696524][ T9775] raw_sendmsg: syz.1.1086 forgot to set AF_INET. Fix it! [ 161.801025][ T9789] batadv_slave_0: entered promiscuous mode [ 162.084519][ T9807] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 162.103620][ T9809] C: renamed from lo (while UP) [ 163.767434][ T9825] netlink: 'syz.0.1098': attribute type 6 has an invalid length. [ 163.831691][ T9825] __nla_validate_parse: 7 callbacks suppressed [ 163.831717][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1098'. [ 163.996437][ T9872] veth0: entered promiscuous mode [ 164.012631][ T9872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1110'. [ 164.339288][ T9898] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1117'. [ 164.407641][ T9900] netlink: 'syz.2.1116': attribute type 10 has an invalid length. [ 164.561908][ T9906] netlink: 'syz.3.1120': attribute type 10 has an invalid length. [ 164.689844][ T9906] bridge0: port 3(team0) entered blocking state [ 164.696328][ T9906] bridge0: port 3(team0) entered disabled state [ 164.706479][ T9906] team0: entered allmulticast mode [ 164.720328][ T9906] team_slave_0: entered allmulticast mode [ 164.726740][ T9906] team_slave_1: entered allmulticast mode [ 164.760608][ T9906] team0: entered promiscuous mode [ 164.760902][ T9920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1122'. [ 164.775889][ T9906] team_slave_0: entered promiscuous mode [ 164.789740][ T9921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1122'. [ 164.804570][ T9906] team_slave_1: entered promiscuous mode [ 164.818072][ T9906] bridge0: port 3(team0) entered blocking state [ 164.824764][ T9906] bridge0: port 3(team0) entered forwarding state [ 164.870656][ T9915] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1121'. [ 165.094861][ T9937] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1125'. [ 165.115728][ T9937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1125'. [ 165.139037][ T9937] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1125'. [ 165.314497][ T9943] tc_dump_action: action bad kind [ 165.329192][ T9944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1128'. [ 165.365740][ T9944] dummy0: entered promiscuous mode [ 165.384205][ T9944] batadv_slave_1: entered promiscuous mode [ 165.407564][ T9944] debugfs: 'hsr1' already exists in 'hsr' [ 165.413474][ T9944] Cannot create hsr debugfs directory [ 165.432815][ T9947] batman_adv: batadv0: Interface deactivated: team0 [ 165.571117][ T9952] netlink: 'syz.2.1130': attribute type 10 has an invalid length. [ 165.621352][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805abe1400: rx timeout, send abort [ 165.630035][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805abe2c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 165.822999][ T9947] batman_adv: batadv0: Removing interface: team0 [ 165.855482][ T9947] team0 (unregistering): Port device team_slave_0 removed [ 165.884406][ T9947] team0 (unregistering): Port device team_slave_1 removed [ 166.129718][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805abe1400: abort rx timeout. Force session deactivation [ 166.292297][ T9974] block nbd0: server does not support multiple connections per device. [ 166.316582][ T9974] block nbd0: shutting down sockets [ 166.619947][ T9982] tipc: Enabled bearer , priority 0 [ 166.627896][ T9982] syzkaller0: entered promiscuous mode [ 166.633410][ T9982] syzkaller0: entered allmulticast mode [ 166.706594][ T9981] tipc: Resetting bearer [ 166.772274][ T9981] tipc: Disabling bearer [ 166.816070][ T9996] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 166.841136][ T9996] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 167.253894][T10021] IPVS: length: 156 != 24 [ 167.520247][T10032] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 167.793812][T10049] syz_tun: entered allmulticast mode [ 167.841815][T10049] syz_tun: left allmulticast mode [ 167.991936][T10064] openvswitch: netlink: Message has 4 unknown bytes. [ 168.199969][T10083] netlink: 'syz.3.1174': attribute type 1 has an invalid length. [ 168.344151][T10091] openvswitch: netlink: IP tunnel dst address not specified [ 168.351526][T10093] netlink: 'syz.3.1178': attribute type 12 has an invalid length. [ 168.377422][T10093] netlink: 'syz.3.1178': attribute type 11 has an invalid length. [ 168.793131][T10128] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 169.062028][T10140] IPVS: length: 199 != 24 [ 169.423140][T10153] netlink: 'syz.1.1196': attribute type 1 has an invalid length. [ 169.434231][T10153] __nla_validate_parse: 9 callbacks suppressed [ 169.434248][T10153] netlink: 202 bytes leftover after parsing attributes in process `syz.1.1196'. [ 169.480881][T10162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1198'. [ 169.576090][T10162] tipc: Enabled bearer , priority 0 [ 169.585496][T10162] syzkaller0: entered promiscuous mode [ 169.591579][T10162] syzkaller0: entered allmulticast mode [ 169.624281][T10162] tipc: Resetting bearer [ 169.635611][T10161] tipc: Resetting bearer [ 169.662648][T10161] tipc: Disabling bearer [ 169.686379][T10176] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1201'. [ 170.041394][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1207'. [ 170.311610][T10207] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1211'. [ 170.362106][T10209] openvswitch: netlink: EtherType 257 is less than min 600 [ 170.510419][T10213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.528170][T10216] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1215'. [ 170.765530][T10228] bridge1: entered promiscuous mode [ 170.780458][T10228] bridge1: entered allmulticast mode [ 170.839568][T10237] netlink: 'syz.3.1219': attribute type 39 has an invalid length. [ 170.928969][T10239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1223'. [ 170.933429][T10237] veth0_macvtap: left promiscuous mode [ 171.056590][T10234] netlink: 'syz.3.1219': attribute type 1 has an invalid length. [ 171.271872][T10256] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.280731][T10256] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.448704][T10268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1232'. [ 171.481728][T10268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1232'. [ 171.977231][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 172.006058][T10291] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1241'. [ 172.404900][T10315] netlink: 'syz.3.1252': attribute type 21 has an invalid length. [ 172.429369][T10315] netlink: 'syz.3.1252': attribute type 22 has an invalid length. [ 172.445780][T10315] netlink: 'syz.3.1252': attribute type 23 has an invalid length. [ 172.460768][T10315] netlink: 'syz.3.1252': attribute type 25 has an invalid length. [ 172.480913][T10315] netlink: 'syz.3.1252': attribute type 26 has an invalid length. [ 172.586637][T10327] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 172.680072][T10327] netlink: 'syz.1.1256': attribute type 1 has an invalid length. [ 172.702070][T10340] netlink: 'syz.4.1260': attribute type 1 has an invalid length. [ 172.705602][T10327] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.717286][T10327] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.731383][T10327] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.738549][T10327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.746087][T10327] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.753320][T10327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.777520][T10327] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.784812][T10327] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.840286][T10341] bond3: (slave gretap1): making interface the new active one [ 172.849095][T10341] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 173.092325][T10349] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 173.116799][T10354] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 173.131046][T10355] gretap0: entered promiscuous mode [ 173.590870][T10379] tipc: Enabled bearer , priority 0 [ 173.611309][T10384] sctp: [Deprecated]: syz.3.1273 (pid 10384) Use of struct sctp_assoc_value in delayed_ack socket option. [ 173.611309][T10384] Use struct sctp_sack_info instead [ 173.629885][T10379] syzkaller0: entered promiscuous mode [ 173.635389][T10379] syzkaller0: entered allmulticast mode [ 173.658883][T10379] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 173.751639][T10389] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.759078][T10389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.774407][T10389] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 173.802883][T10379] tipc: Resetting bearer [ 173.837577][T10394] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 173.874892][T10378] tipc: Resetting bearer [ 173.892312][T10378] tipc: Disabling bearer [ 173.902013][T10402] tipc: Enabled bearer , priority 0 [ 173.926559][T10393] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 173.934535][T10393] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 173.971360][T10393] tipc: Resetting bearer [ 174.809708][T10459] validate_nla: 11 callbacks suppressed [ 174.809727][T10459] netlink: 'syz.1.1293': attribute type 8 has an invalid length. [ 174.832731][T10461] __nla_validate_parse: 12 callbacks suppressed [ 174.832750][T10461] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1291'. [ 175.016725][T10469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.093215][T10526] bond0: (slave bridge_slave_1): Releasing backup interface [ 176.121187][T10530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1310'. [ 176.208727][T10526] team0: Port device geneve0 removed [ 176.242581][T10526] bond1: (slave bridge1): Releasing active interface [ 176.284439][T10542] team0: Mode changed to "activebackup" [ 176.324925][T10526] vlan0: entered promiscuous mode [ 176.386238][T10526] team0: Port device vlan0 added [ 176.387718][T10532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1309'. [ 176.450998][T10526] tipc: Enabled bearer , priority 0 [ 176.611581][T10561] syzkaller1: entered promiscuous mode [ 176.619725][T10561] syzkaller1: entered allmulticast mode [ 176.788565][T10567] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 176.891396][T10571] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 176.903677][T10571] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 177.429127][T10601] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1326'. [ 177.491219][T10607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1329'. [ 177.592278][T10616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1331'. [ 177.681167][T10622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1333'. [ 177.697199][T10622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.118400][T10642] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1338'. [ 178.668259][T10681] netlink: 'syz.4.1348': attribute type 33 has an invalid length. [ 179.210866][T10711] tipc: New replicast peer: 255.255.255.255 [ 179.242690][T10711] tipc: Enabled bearer , priority 10 [ 179.264664][T10715] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1355'. [ 179.479440][T10723] sctp: [Deprecated]: syz.3.1357 (pid 10723) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.479440][T10723] Use struct sctp_sack_info instead [ 179.771534][T10740] netlink: 'syz.4.1361': attribute type 6 has an invalid length. [ 180.129738][T10762] netlink: 852 bytes leftover after parsing attributes in process `syz.4.1365'. [ 180.285106][T10770] TCP: TCP_TX_DELAY enabled [ 180.446749][T10783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1371'. [ 180.467743][T10783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1371'. [ 180.472605][T10786] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1373'. [ 180.744234][T10808] netlink: 'syz.4.1377': attribute type 1 has an invalid length. [ 180.813055][T10811] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1377'. [ 181.159131][T10833] netlink: 'syz.0.1383': attribute type 1 has an invalid length. [ 181.184483][T10833] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.1383'. [ 181.207165][T10833] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1383'. [ 181.262057][T10840] netlink: 'syz.1.1386': attribute type 1 has an invalid length. [ 181.277488][T10837] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1384'. [ 181.302905][T10837] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1384'. [ 181.557468][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1390'. [ 181.761470][T10871] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 181.769080][T10871] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 182.691017][T10930] ipvlan0: entered promiscuous mode [ 182.737501][T10930] ipvlan0: entered allmulticast mode [ 182.757998][T10930] veth0_vlan: entered allmulticast mode [ 183.102750][T10948] veth1_macvtap: left promiscuous mode [ 183.138184][T10948] macsec0: entered allmulticast mode [ 183.279327][T10960] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 183.803229][T10990] netlink: 'syz.0.1424': attribute type 1 has an invalid length. [ 183.824685][T10989] syzkaller1: entered promiscuous mode [ 183.849916][T10989] syzkaller1: entered allmulticast mode [ 183.901536][T10999] openvswitch: netlink: Actions may not be safe on all matching packets [ 183.944239][T10990] 8021q: adding VLAN 0 to HW filter on device bond3 [ 183.954565][T10992] netlink: 'syz.3.1422': attribute type 1 has an invalid length. [ 184.049385][T10993] 8021q: adding VLAN 0 to HW filter on device bond3 [ 184.076144][T10993] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 184.111185][T10993] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 184.206835][T11000] veth3: entered promiscuous mode [ 184.231930][T11000] bond3: (slave veth3): Enslaving as an active interface with a down link [ 184.262194][T10990] 8021q: adding VLAN 0 to HW filter on device bond3 [ 184.313663][T11019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.513417][T11030] netlink: 'syz.2.1429': attribute type 1 has an invalid length. [ 184.592850][T11030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.756693][T11031] bond0: (slave veth5): Enslaving as an active interface with a down link [ 184.791435][T11030] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 185.175709][T11074] netlink: 'syz.2.1440': attribute type 24 has an invalid length. [ 185.265573][T11079] __nla_validate_parse: 17 callbacks suppressed [ 185.265592][T11079] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1442'. [ 185.485543][T11092] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1445'. [ 185.752245][T11109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1447'. [ 185.871276][T11123] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1454'. [ 185.957980][T11129] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 186.022043][T11130] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1453'. [ 186.060168][T11132] netlink: 'syz.2.1458': attribute type 1 has an invalid length. [ 186.080762][T11121] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1453'. [ 186.251367][T11152] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1463'. [ 186.913381][T11189] IPVS: ip_vs_add_dest(): server weight less than zero [ 187.100726][T11197] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1476'. [ 187.216397][T11202] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1477'. [ 187.250065][T11202] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1477'. [ 187.459877][T11223] IPVS: length: 108 != 24 [ 187.553539][T11226] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒžóúz [ 187.718029][T11232] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 188.110205][T11254] tipc: Enabled bearer , priority 0 [ 188.158801][T11254] batadv0: entered allmulticast mode [ 188.223972][T11254] tipc: Resetting bearer [ 188.285194][T11253] tipc: Disabling bearer [ 188.313922][T11276] netlink: 'syz.2.1499': attribute type 7 has an invalid length. [ 188.328305][T11276] netlink: 'syz.2.1499': attribute type 8 has an invalid length. [ 189.010110][T11314] netlink: 'syz.3.1510': attribute type 1 has an invalid length. [ 189.136153][T11314] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.180341][T11321] bond2: (slave gretap2): making interface the new active one [ 189.189819][T11321] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 189.229846][T11321] syz.3.1510 (11321) used greatest stack depth: 18904 bytes left [ 189.488761][T11345] vlan0: entered allmulticast mode [ 189.676770][ T10] IPVS: starting estimator thread 0... [ 189.770787][T11357] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 189.787225][T11361] IPVS: using max 27 ests per chain, 64800 per kthread [ 190.143038][T11386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.088184][T11434] __nla_validate_parse: 10 callbacks suppressed [ 191.088204][T11434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1538'. [ 191.185302][T11434] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1538'. [ 191.549532][T11449] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1537'. [ 191.657134][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 191.919400][T11471] bridge2: entered promiscuous mode [ 191.924751][T11471] bridge2: entered allmulticast mode [ 192.004819][T11481] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 192.171322][T11489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1550'. [ 192.232291][T11494] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 192.261782][T11492] sit0: entered promiscuous mode [ 192.279821][T11492] netlink: 'syz.3.1552': attribute type 1 has an invalid length. [ 192.300749][T11492] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1552'. [ 192.681524][T11508] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1556'. [ 193.421641][T11530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.488718][T11535] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1563'. [ 193.501913][T11534] sctp: [Deprecated]: syz.4.1564 (pid 11534) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.501913][T11534] Use struct sctp_sack_info instead [ 193.535759][T11535] xfrm1: entered allmulticast mode [ 193.647429][T11534] netlink: 'syz.4.1564': attribute type 4 has an invalid length. [ 193.698755][T11544] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1566'. [ 193.708683][T11534] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1564'. [ 193.923821][T11562] hsr0: entered promiscuous mode [ 193.933221][T11562] hsr0: entered allmulticast mode [ 193.944440][T11562] hsr_slave_0: entered allmulticast mode [ 193.951240][T11562] hsr_slave_1: entered allmulticast mode [ 194.223775][T11580] tipc: Enabling of bearer rejected, failed to enable media [ 194.339632][T11577] bond3: entered promiscuous mode [ 194.383472][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.390061][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.405750][T11577] bond3: entered allmulticast mode [ 194.429925][T11589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1573'. [ 194.433112][T11577] 8021q: adding VLAN 0 to HW filter on device bond3 [ 194.694006][T11577] bond3 (unregistering): Released all slaves [ 194.971931][T11615] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.984716][T11615] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.010675][T11615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.035907][T11615] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.044624][T11626] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 195.476042][T11656] netlink: 'syz.2.1593': attribute type 2 has an invalid length. [ 195.608253][T11662] tipc: Enabled bearer , priority 24 [ 195.835723][T11679] macvtap1: entered promiscuous mode [ 195.855620][T11679] vlan0: entered promiscuous mode [ 195.868204][T11679] macvtap1: entered allmulticast mode [ 195.891988][T11679] vlan0: entered allmulticast mode [ 196.049981][T11692] Bluetooth: MGMT ver 1.23 [ 196.211232][T11701] __nla_validate_parse: 4 callbacks suppressed [ 196.211250][T11701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1609'. [ 196.583108][T11722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1620'. [ 196.641049][T11722] 8021q: VLANs not supported on ip6tnl0 [ 196.751325][T11733] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1622'. [ 197.812401][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1636'. [ 197.865205][T11787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1638'. [ 197.868159][T11788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1636'. [ 197.977441][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 198.011218][T11786] nftables ruleset with unbound chain [ 198.100524][T11797] syz.3.1641: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 198.152881][T11797] CPU: 0 UID: 0 PID: 11797 Comm: syz.3.1641 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 198.152909][T11797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 198.152926][T11797] Call Trace: [ 198.152935][T11797] [ 198.152946][T11797] dump_stack_lvl+0x189/0x250 [ 198.152974][T11797] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.152992][T11797] ? __pfx__printk+0x10/0x10 [ 198.153015][T11797] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 198.153037][T11797] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 198.153059][T11797] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 198.153082][T11797] warn_alloc+0x214/0x310 [ 198.153100][T11797] ? stack_depot_save_flags+0x40/0x900 [ 198.153123][T11797] ? __pfx_warn_alloc+0x10/0x10 [ 198.153143][T11797] ? kasan_save_track+0x4f/0x80 [ 198.153166][T11797] ? xskq_create+0x56/0x170 [ 198.153187][T11797] ? xsk_init_queue+0xb0/0x110 [ 198.153205][T11797] ? xsk_setsockopt+0x4dc/0x8d0 [ 198.153223][T11797] ? do_sock_setsockopt+0x17c/0x1b0 [ 198.153245][T11797] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 198.153260][T11797] ? do_syscall_64+0xfa/0x3b0 [ 198.153283][T11797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.153307][T11797] __vmalloc_node_range_noprof+0x125/0x12f0 [ 198.153358][T11797] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 198.153382][T11797] ? __kasan_kmalloc+0x93/0xb0 [ 198.153408][T11797] vmalloc_user_noprof+0xad/0xf0 [ 198.153423][T11797] ? xskq_create+0xbf/0x170 [ 198.153445][T11797] xskq_create+0xbf/0x170 [ 198.153467][T11797] xsk_init_queue+0xb0/0x110 [ 198.153488][T11797] xsk_setsockopt+0x4dc/0x8d0 [ 198.153511][T11797] ? __pfx_xsk_setsockopt+0x10/0x10 [ 198.153530][T11797] ? __pfx_aa_sk_perm+0x10/0x10 [ 198.153557][T11797] ? aa_sock_opt_perm+0x74/0x110 [ 198.153581][T11797] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 198.153607][T11797] ? __pfx_xsk_setsockopt+0x10/0x10 [ 198.153629][T11797] do_sock_setsockopt+0x17c/0x1b0 [ 198.153652][T11797] __x64_sys_setsockopt+0x13f/0x1b0 [ 198.153676][T11797] do_syscall_64+0xfa/0x3b0 [ 198.153698][T11797] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.153721][T11797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.153737][T11797] ? clear_bhb_loop+0x60/0xb0 [ 198.153759][T11797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.153775][T11797] RIP: 0033:0x7f1c2c18e9a9 [ 198.153797][T11797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.153811][T11797] RSP: 002b:00007f1c2cf14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 198.153831][T11797] RAX: ffffffffffffffda RBX: 00007f1c2c3b5fa0 RCX: 00007f1c2c18e9a9 [ 198.153844][T11797] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 198.153859][T11797] RBP: 00007f1c2c210d69 R08: 0000000000000004 R09: 0000000000000000 [ 198.153870][T11797] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.153880][T11797] R13: 0000000000000000 R14: 00007f1c2c3b5fa0 R15: 00007fff8384cc98 [ 198.153910][T11797] [ 198.153922][T11797] Mem-Info: [ 198.164707][T11801] netlink: 'syz.2.1642': attribute type 27 has an invalid length. [ 198.177818][T11800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1644'. [ 198.218255][T11797] active_anon:6157 inactive_anon:0 isolated_anon:0 [ 198.218255][T11797] active_file:1227 inactive_file:39899 isolated_file:0 [ 198.218255][T11797] unevictable:768 dirty:60 writeback:0 [ 198.218255][T11797] slab_reclaimable:11472 slab_unreclaimable:119355 [ 198.218255][T11797] mapped:29329 shmem:1497 pagetables:1238 [ 198.218255][T11797] sec_pagetables:0 bounce:0 [ 198.218255][T11797] kernel_misc_reclaimable:0 [ 198.218255][T11797] free:1305279 free_pcp:13769 free_cma:0 [ 198.585373][T11797] Node 0 active_anon:27528kB inactive_anon:0kB active_file:4908kB inactive_file:159392kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120016kB dirty:240kB writeback:0kB shmem:7152kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12696kB pagetables:4768kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 198.697526][T11797] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 198.757771][T11797] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 198.841299][T11797] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 198.851548][T11829] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1650'. [ 198.866613][T11797] Node 0 DMA32 free:1306676kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32384kB inactive_anon:0kB active_file:4908kB inactive_file:157560kB unevictable:1536kB writepending:240kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:27440kB local_pcp:15728kB free_cma:0kB [ 198.921035][T11797] lowmem_reserve[]: 0 0 1 1 1 [ 198.938097][T11797] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 198.983158][T11797] lowmem_reserve[]: 0 0 0 0 0 [ 198.997665][T11797] Node 1 Normal free:3898664kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19500kB local_pcp:8456kB free_cma:0kB [ 199.041623][T11797] lowmem_reserve[]: 0 0 0 0 0 [ 199.067844][T11797] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 199.119235][T11797] Node 0 DMA32: 585*4kB (UM) 589*8kB (UME) 92*16kB (UME) 296*32kB (UM) 112*64kB (UM) 29*128kB (UM) 45*256kB (UME) 27*512kB (UME) 19*1024kB (U) 6*2048kB (UME) 298*4096kB (UM) = 1306572kB [ 199.153844][T11797] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 199.167794][T11800] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 199.173133][T11797] Node 1 Normal: 230*4kB (UE) 56*8kB (UME) 53*16kB (UME) 62*32kB (UME) 19*64kB (UME) 6*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3898664kB [ 199.294731][T11797] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 199.295649][T11843] netlink: 'syz.0.1656': attribute type 2 has an invalid length. [ 199.315519][T11797] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 199.341697][T11843] netlink: 'syz.0.1656': attribute type 8 has an invalid length. [ 199.350567][T11843] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1656'. [ 199.356101][T11797] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 199.381403][T11845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1657'. [ 199.390254][T11797] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 199.423632][T11797] 42496 total pagecache pages [ 199.437112][T11797] 0 pages in swap cache [ 199.445070][T11797] Free swap = 124996kB [ 199.464164][T11797] Total swap = 124996kB [ 199.498167][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.498906][T11797] 2097051 pages RAM [ 199.527137][T11797] 0 pages HighMem/MovableOnly [ 199.531947][T11797] 424872 pages reserved [ 199.540517][T11797] 0 pages cma reserved [ 199.561178][T11845] can: request_module (can-proto-0) failed. [ 199.791220][T11857] hsr_slave_1 (unregistering): left promiscuous mode [ 199.816230][T11864] v: renamed from dummy0 (while UP) [ 200.469628][T11902] netlink: 'syz.1.1675': attribute type 1 has an invalid length. [ 201.236150][T11949] 8021q: VLANs not supported on ip_vti0 [ 201.294565][T11956] __nla_validate_parse: 14 callbacks suppressed [ 201.294581][T11956] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1691'. [ 201.346040][T11957] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1692'. [ 201.365584][T11960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1693'. [ 201.384531][T11954] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1692'. [ 201.394803][T11960] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1693'. [ 201.580859][ T5855] Bluetooth: hci2: command 0x0406 tx timeout [ 201.587999][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 201.588011][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 201.588133][T11974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1698'. [ 201.637948][T11974] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1698'. [ 201.928289][T11996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1705'. [ 202.021838][T12002] netlink: 'syz.1.1704': attribute type 6 has an invalid length. [ 202.055651][T12004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.075784][T12007] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1706'. [ 202.185365][T12013] netlink: 'syz.2.1708': attribute type 4 has an invalid length. [ 202.320652][T12019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1711'. [ 203.366862][ T3021] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.379608][ T3021] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.421183][ T3021] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.451596][ T3021] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.620930][T12093] netlink: 'syz.2.1728': attribute type 23 has an invalid length. [ 203.695737][T12097] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 203.704086][T12093] netlink: 'syz.2.1728': attribute type 4 has an invalid length. [ 203.707173][T12097] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 204.021636][T12121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.066655][T12119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.210530][T12137] netlink: 'syz.3.1741': attribute type 1 has an invalid length. [ 204.284161][T12137] 8021q: adding VLAN 0 to HW filter on device bond3 [ 204.470599][T12141] bond3: (slave veth7): Enslaving as an active interface with a down link [ 204.552393][T12137] bond3: (slave veth0_to_bond): making interface the new active one [ 204.573372][T12137] veth0_to_bond: entered promiscuous mode [ 204.581507][T12137] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 204.609148][T12154] vlan2: entered allmulticast mode [ 204.614760][T12154] veth1: entered allmulticast mode [ 204.632095][T12154] veth1: entered promiscuous mode [ 204.650598][T12154] veth1: left promiscuous mode [ 204.672567][T12154] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 205.020168][T12175] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 205.431716][T12202] IPv6: sit2: Disabled Multicast RS [ 205.449981][T12202] sit2: entered allmulticast mode [ 205.580680][T12203] pim6reg1: entered promiscuous mode [ 205.607655][T12203] pim6reg1: entered allmulticast mode [ 206.367878][T12258] pim6reg: entered allmulticast mode [ 206.396395][T12260] __nla_validate_parse: 12 callbacks suppressed [ 206.396412][T12260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1773'. [ 206.490801][T12266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1775'. [ 206.655364][T12280] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1778'. [ 206.869140][T12290] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1781'. [ 206.969273][T12296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1783'. [ 207.067768][T12300] mac80211_hwsim hwsim7 pim6reg0: entered allmulticast mode [ 207.099303][T12296] netlink: 'syz.1.1783': attribute type 2 has an invalid length. [ 207.403148][T12324] team0: Cannot enslave team device to itself [ 207.643847][T12330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1793'. [ 207.697459][T12339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1795'. [ 207.742472][T12343] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1798'. [ 207.766200][T12346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1796'. [ 207.802428][T12346] tipc: Enabled bearer , priority 0 [ 207.964405][T12358] tunl0: left promiscuous mode [ 207.978919][T12358] tunl0: left allmulticast mode [ 208.001735][T12355] syzkaller1: entered promiscuous mode [ 208.018312][T12358] RDS: rds_bind could not find a transport for 1000::ffff:ffff, load rds_tcp or rds_rdma? [ 208.037895][T12355] syzkaller1: entered allmulticast mode [ 208.043126][T12365] openvswitch: netlink: Actions may not be safe on all matching packets [ 208.071324][T12365] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 208.091739][T12365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1803'. [ 208.146554][T12365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.642053][T12393] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 209.308972][T12432] ip6gre1: entered allmulticast mode [ 209.482293][T12445] netlink: 'syz.4.1818': attribute type 1 has an invalid length. [ 209.790706][T12460] netlink: 'syz.3.1825': attribute type 1 has an invalid length. [ 210.203228][T12471] syz.3.1831 (12471) used greatest stack depth: 17864 bytes left [ 210.990222][T12530] sctp: [Deprecated]: syz.2.1847 (pid 12530) Use of int in max_burst socket option. [ 210.990222][T12530] Use struct sctp_assoc_value instead [ 211.730964][T12585] __nla_validate_parse: 13 callbacks suppressed [ 211.730985][T12585] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1861'. [ 211.821060][T12593] netlink: 'syz.2.1864': attribute type 1 has an invalid length. [ 212.003977][T12605] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1868'. [ 212.602191][T12643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1877'. [ 212.616439][T12643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1877'. [ 212.771919][T12652] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1881'. [ 212.879305][T12658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1883'. [ 212.889999][T12651] syzkaller1: entered promiscuous mode [ 212.895694][T12651] syzkaller1: entered allmulticast mode [ 212.952190][T12660] openvswitch: netlink: IPv6 tunnel dst address is zero [ 213.021229][T12665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1885'. [ 213.108343][T12671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1888'. [ 213.155652][T12671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1888'. [ 213.199525][T12675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1885'. [ 213.368672][T12671] macvtap1: entered promiscuous mode [ 213.374213][T12671] vlan0: entered promiscuous mode [ 213.380788][T12671] macvtap1: entered allmulticast mode [ 213.386494][T12671] vlan0: entered allmulticast mode [ 213.405700][T12680] tipc: Enabling not permitted [ 213.419186][T12680] tipc: Enabling of bearer rejected, failed to enable media [ 213.554164][T12696] netlink: zone id is out of range [ 213.563400][T12696] netlink: del zone limit has 4 unknown bytes [ 214.187941][T12726] netlink: 'syz.3.1900': attribute type 1 has an invalid length. [ 214.726486][T12748] veth0: entered promiscuous mode [ 214.922312][T12751] netlink: 'syz.1.1909': attribute type 1 has an invalid length. [ 215.126483][T12760] netlink: 'syz.4.1912': attribute type 1 has an invalid length. [ 215.480312][T12745] veth0: left promiscuous mode [ 215.672917][T12803] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 215.705688][T12805] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 215.730075][ T60] veth0_to_bond: left promiscuous mode [ 215.735833][T12803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.779650][T12805] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.825531][T12811] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 215.827422][T12814] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 215.878158][T12811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.763053][T12861] syzkaller1: entered promiscuous mode [ 216.786170][T12861] syzkaller1: entered allmulticast mode [ 216.901351][T12884] __nla_validate_parse: 17 callbacks suppressed [ 216.901369][T12884] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1942'. [ 216.966001][T12884] 8021q: VLANs not supported on gre0 [ 217.290103][T12902] tipc: Enabling not permitted [ 217.295829][T12902] tipc: Enabling of bearer rejected, failed to enable media [ 217.529082][T12923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1950'. [ 217.551500][T12906] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.604542][T12923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1950'. [ 217.675119][T12927] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1951'. [ 217.732510][T12906] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.852312][T12906] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.972726][T12906] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.194166][T12946] netlink: 'syz.0.1957': attribute type 7 has an invalid length. [ 218.209160][T12940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1955'. [ 218.226249][T12950] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1958'. [ 218.254166][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.319052][T12945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1955'. [ 218.346060][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.418688][T12952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.447860][T12945] batadv_slave_1 (unregistering): left promiscuous mode [ 218.488519][T12957] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1960'. [ 218.536657][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.637310][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.129512][T12991] net_ratelimit: 1 callbacks suppressed [ 219.129529][T12991] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 219.168472][T12990] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1968'. [ 219.309155][T12984] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 219.325813][T12984] syzkaller0: Linktype set failed because interface is up [ 219.338362][ T5892] syzkaller0: tun_net_xmit 76 [ 219.399027][ T10] syzkaller0: tun_net_xmit 76 [ 219.574381][T13013] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1974'. [ 219.781050][T13019] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 219.789489][T13019] openvswitch: netlink: Duplicate key (type 0). [ 221.302697][T13025] netlink: 'syz.0.1977': attribute type 75 has an invalid length. [ 221.837874][T13057] netlink: 'syz.1.1988': attribute type 1 has an invalid length. [ 221.958735][T13057] 8021q: adding VLAN 0 to HW filter on device bond3 [ 222.086701][T13057] bond3: (slave gretap1): making interface the new active one [ 222.105189][T13057] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 222.165215][T13075] __nla_validate_parse: 3 callbacks suppressed [ 222.165232][T13075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1991'. [ 222.202306][T13075] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1991'. [ 222.243268][T13075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1991'. [ 222.290221][T13076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1992'. [ 222.300978][T13076] openvswitch: netlink: Flow actions attr not present in new flow. [ 222.479320][T13089] syzkaller0: entered promiscuous mode [ 222.484841][T13089] syzkaller0: entered allmulticast mode [ 222.904905][T13114] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2002'. [ 222.934059][T13116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2001'. [ 222.953889][T13116] netlink: 212404 bytes leftover after parsing attributes in process `syz.4.2001'. [ 222.976011][T13116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2001'. [ 223.003568][T13116] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 223.034940][T13116] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 223.074591][T13116] gretap2: entered promiscuous mode [ 223.117678][T13116] gretap2: entered allmulticast mode [ 223.510006][T13145] IPVS: ip_vs_add_dest(): server weight less than zero [ 223.532725][T13145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2012'. [ 223.555635][T13149] netlink: 576 bytes leftover after parsing attributes in process `syz.4.2013'. [ 223.654548][T13154] tipc: Enabling of bearer rejected, already enabled [ 223.754441][T13159] netlink: 'syz.3.2017': attribute type 16 has an invalid length. [ 223.768926][T13158] netlink: 'syz.3.2017': attribute type 3 has an invalid length. [ 223.778829][T13159] netlink: 'syz.3.2017': attribute type 3 has an invalid length. [ 224.466031][T13187] dummy0: left promiscuous mode [ 224.548074][T13193] can: request_module (can-proto-4) failed. [ 225.804181][T13281] netlink: 'syz.1.2044': attribute type 1 has an invalid length. [ 225.902764][T13287] netlink: 'syz.1.2045': attribute type 10 has an invalid length. [ 225.912339][T13287] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.919597][T13287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.927310][T13287] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.934498][T13287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.954790][T13287] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.962347][T13287] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.101164][T13297] netlink: 'syz.1.2047': attribute type 9 has an invalid length. [ 226.607662][T13313] netlink: 'syz.3.2051': attribute type 29 has an invalid length. [ 226.618361][T13315] netlink: 'syz.3.2051': attribute type 29 has an invalid length. [ 226.998543][T13341] netlink: 'syz.4.2056': attribute type 7 has an invalid length. [ 227.110766][T13339] syzkaller1: entered promiscuous mode [ 227.116383][T13339] syzkaller1: entered allmulticast mode [ 227.336095][T13365] netlink: 'syz.1.2063': attribute type 2 has an invalid length. [ 227.357316][T13365] __nla_validate_parse: 12 callbacks suppressed [ 227.357334][T13365] netlink: 119 bytes leftover after parsing attributes in process `syz.1.2063'. [ 227.604631][T13382] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2067'. [ 227.886130][T13382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.931799][T13382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.943144][T13402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2072'. [ 227.961187][T13382] bond0 (unregistering): Released all slaves [ 228.201935][T13409] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2073'. [ 228.252028][T13412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2073'. [ 228.411076][T13421] netlink: 'syz.1.2076': attribute type 1 has an invalid length. [ 228.433966][T13412] hsr_slave_1 (unregistering): left promiscuous mode [ 228.484845][T13421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.715984][T13432] tc_dump_action: action bad kind [ 228.878155][T13448] netlink: 'syz.2.2081': attribute type 1 has an invalid length. [ 228.909768][T13448] netlink: 'syz.2.2081': attribute type 16 has an invalid length. [ 228.918631][T13448] netlink: 'syz.2.2081': attribute type 3 has an invalid length. [ 228.928046][T13448] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2081'. [ 229.005300][T13452] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2083'. [ 229.059892][T13452] syzkaller0: entered promiscuous mode [ 229.065447][T13452] syzkaller0: entered allmulticast mode [ 229.077775][T13452] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2083'. [ 229.105696][T13452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2083'. [ 229.246445][T13459] tls_set_device_offload_rx: netdev not found [ 229.294544][T13466] netlink: 'syz.0.2089': attribute type 1 has an invalid length. [ 229.304394][T13466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2089'. [ 229.375591][T13471] vlan0: entered promiscuous mode [ 229.382448][T13471] bridge0: entered promiscuous mode [ 229.391001][T13471] vlan0: entered allmulticast mode [ 229.396365][T13471] bridge0: entered allmulticast mode [ 229.853839][T13496] can: request_module (can-proto-0) failed. [ 229.883254][T13503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.225756][T13526] dvmrp1: left allmulticast mode [ 230.352412][T13537] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 230.398063][T13537] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 230.582625][T13546] netlink: 'syz.3.2115': attribute type 21 has an invalid length. [ 230.596376][T13546] IPv6: NLM_F_CREATE should be specified when creating new route [ 231.116001][T13580] netlink: 'syz.2.2123': attribute type 11 has an invalid length. [ 234.175847][ C0] hrtimer: interrupt took 2185699360 ns [ 235.367882][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 339.236880][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 339.243912][ C1] rcu: 0-...!: (1 ticks this GP) idle=ab64/1/0x4000000000000000 softirq=54066/54066 fqs=0 [ 339.254955][ C1] rcu: (detected by 1, t=10502 jiffies, g=39773, q=1120 ncpus=2) [ 339.263059][ C1] Sending NMI from CPU 1 to CPUs 0: [ 339.263108][ C0] NMI backtrace for cpu 0 [ 339.263126][ C0] CPU: 0 UID: 0 PID: 13642 Comm: syz.2.2135 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 339.263143][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 339.263157][ C0] RIP: 0010:lock_is_held_type+0x11c/0x190 [ 339.263189][ C0] Code: 48 c7 c7 8b 5e b6 8d e8 92 16 00 00 b8 ff ff ff ff 65 0f c1 05 35 73 2a 07 83 f8 01 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b [ 339.263202][ C0] RSP: 0018:ffffc90000007c28 EFLAGS: 00000046 [ 339.263218][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 06f9850805073d00 [ 339.263228][ C0] RDX: ffff888058100000 RSI: ffffffff8db65e8b RDI: ffffffff8be30a00 [ 339.263239][ C0] RBP: 00000000ffffffff R08: 0000000000000003 R09: 0000000000000004 [ 339.263249][ C0] R10: dffffc0000000000 R11: fffff52000000f7c R12: 0000000000000046 [ 339.263260][ C0] R13: ffff888058100000 R14: ffff88807489f300 R15: 0000000000000002 [ 339.263270][ C0] FS: 00007f0dfff546c0(0000) GS:ffff888125c80000(0000) knlGS:0000000000000000 [ 339.263284][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 339.263294][ C0] CR2: 0000001b30420220 CR3: 000000006a7ce000 CR4: 00000000003526f0 [ 339.263307][ C0] Call Trace: [ 339.263316][ C0] [ 339.263327][ C0] advance_sched+0x160/0xc90 [ 339.263343][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 339.263361][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 339.263382][ C0] ? __pfx_advance_sched+0x10/0x10 [ 339.263395][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 339.263424][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 339.263442][ C0] ? read_tsc+0x9/0x20 [ 339.263464][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 339.263495][ C0] __sysvec_apic_timer_interrupt+0x108/0x410 [ 339.263512][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 339.263530][ C0] [ 339.263535][ C0] [ 339.263541][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 339.263557][ C0] RIP: 0010:mutex_spin_on_owner+0x27b/0x360 [ 339.263573][ C0] Code: be 08 00 00 00 e8 a5 e1 85 00 42 80 7c 35 00 00 74 08 4c 89 e7 e8 25 df 85 00 49 f7 04 24 01 00 00 00 0f 85 8c 00 00 00 f3 90 <4c> 89 e7 be 08 00 00 00 e8 78 e1 85 00 42 80 7c 35 00 00 0f 84 90 [ 339.263585][ C0] RSP: 0018:ffffc9001bb671a8 EFLAGS: 00000246 [ 339.263597][ C0] RAX: 1ffff1100b020000 RBX: ffffffff8f508ff0 RCX: ffffffff819cf498 [ 339.263608][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000001 [ 339.263618][ C0] RBP: 1ffffffff1ea11f4 R08: ffffffff8f508fa7 R09: 1ffffffff1ea11f4 [ 339.263629][ C0] R10: dffffc0000000000 R11: fffffbfff1ea11f5 R12: ffffffff8f508fa0 [ 339.263640][ C0] R13: ffffffff8f508ff0 R14: dffffc0000000000 R15: ffff888027ea0000 [ 339.263655][ C0] ? mutex_spin_on_owner+0x288/0x360 [ 339.263672][ C0] ? mutex_spin_on_owner+0x19f/0x360 [ 339.263692][ C0] __mutex_lock+0x311/0x1340 [ 339.263716][ C0] ? rtnl_dumpit+0x92/0x200 [ 339.263737][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 339.263761][ C0] ? __build_skb_around+0x257/0x3e0 [ 339.263780][ C0] ? __pfx_ip6mr_rtm_dumproute+0x10/0x10 [ 339.263800][ C0] rtnl_dumpit+0x92/0x200 [ 339.263821][ C0] netlink_dump+0x6e4/0xe90 [ 339.263845][ C0] ? __pfx_netlink_dump+0x10/0x10 [ 339.263861][ C0] ? __netlink_lookup+0x752/0x810 [ 339.263882][ C0] ? netlink_lookup+0x30/0x200 [ 339.263899][ C0] ? netlink_lookup+0x30/0x200 [ 339.263915][ C0] ? netlink_lookup+0x30/0x200 [ 339.263935][ C0] __netlink_dump_start+0x5cb/0x7e0 [ 339.263957][ C0] rtnetlink_rcv_msg+0x9eb/0xb70 [ 339.263976][ C0] ? __pfx_ip6mr_rtm_dumproute+0x10/0x10 [ 339.263995][ C0] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 339.264012][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 339.264030][ C0] ? ref_tracker_free+0x63a/0x7d0 [ 339.264045][ C0] ? __pfx_rtnl_dumpit+0x10/0x10 [ 339.264063][ C0] ? __pfx_ip6mr_rtm_dumproute+0x10/0x10 [ 339.264087][ C0] netlink_rcv_skb+0x205/0x470 [ 339.264106][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 339.264125][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 339.264149][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 339.264176][ C0] netlink_unicast+0x82c/0x9e0 [ 339.264198][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 339.264216][ C0] ? netlink_sendmsg+0x642/0xb30 [ 339.264233][ C0] ? skb_put+0x11b/0x210 [ 339.264248][ C0] netlink_sendmsg+0x805/0xb30 [ 339.264271][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.264291][ C0] ? aa_sock_msg_perm+0x94/0x160 [ 339.264309][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 339.264326][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.264345][ C0] __sock_sendmsg+0x219/0x270 [ 339.264363][ C0] sock_write_iter+0x258/0x330 [ 339.264382][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 339.264402][ C0] ? bpf_lsm_file_permission+0x9/0x20 [ 339.264418][ C0] ? security_file_permission+0x75/0x290 [ 339.264438][ C0] vfs_write+0x54b/0xa90 [ 339.264459][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 339.264475][ C0] ? __pfx_vfs_write+0x10/0x10 [ 339.264498][ C0] ? __fget_files+0x2a/0x420 [ 339.264516][ C0] ksys_write+0x145/0x250 [ 339.264535][ C0] ? __pfx_ksys_write+0x10/0x10 [ 339.264551][ C0] ? rcu_is_watching+0x15/0xb0 [ 339.264573][ C0] ? do_syscall_64+0xbe/0x3b0 [ 339.264593][ C0] do_syscall_64+0xfa/0x3b0 [ 339.264610][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.264627][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.264641][ C0] ? clear_bhb_loop+0x60/0xb0 [ 339.264657][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.264670][ C0] RIP: 0033:0x7f0dff18e9a9 [ 339.264685][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.264697][ C0] RSP: 002b:00007f0dfff54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 339.264711][ C0] RAX: ffffffffffffffda RBX: 00007f0dff3b5fa0 RCX: 00007f0dff18e9a9 [ 339.264722][ C0] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000005 [ 339.264731][ C0] RBP: 00007f0dff210d69 R08: 0000000000000000 R09: 0000000000000000 [ 339.264740][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.264749][ C0] R13: 0000000000000000 R14: 00007f0dff3b5fa0 R15: 00007fff9ef15818 [ 339.264767][ C0] [ 339.265096][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g39773 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 339.900156][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=15653 [ 339.908062][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g39773 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 339.919564][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 339.929546][ C1] rcu: RCU grace-period kthread stack dump: [ 339.935601][ C1] task:rcu_preempt state:I stack:27128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 339.947706][ C1] Call Trace: [ 339.951181][ C1] [ 339.954216][ C1] __schedule+0x1737/0x4d30 [ 339.958830][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 339.964050][ C1] ? schedule+0x165/0x360 [ 339.968380][ C1] ? __lock_acquire+0xab9/0xd20 [ 339.973405][ C1] ? __pfx___schedule+0x10/0x10 [ 339.978375][ C1] ? schedule+0x91/0x360 [ 339.982621][ C1] schedule+0x165/0x360 [ 339.986783][ C1] schedule_timeout+0x12b/0x270 [ 339.991721][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 339.997352][ C1] ? __pfx_process_timeout+0x10/0x10 [ 340.002639][ C1] ? prepare_to_swait_event+0x341/0x380 [ 340.008362][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 340.013310][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 340.018248][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.023542][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 340.029459][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 340.034688][ C1] ? finish_swait+0xcd/0x1f0 [ 340.039665][ C1] rcu_gp_kthread+0x99/0x390 [ 340.044369][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 340.049678][ C1] ? __kthread_parkme+0x7b/0x200 [ 340.054920][ C1] ? __kthread_parkme+0x1a1/0x200 [ 340.060054][ C1] kthread+0x70e/0x8a0 [ 340.064472][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 340.069759][ C1] ? __pfx_kthread+0x10/0x10 [ 340.074713][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 340.079921][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.085225][ C1] ? __pfx_kthread+0x10/0x10 [ 340.089969][ C1] ret_from_fork+0x3fc/0x770 [ 340.094595][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 340.099760][ C1] ? __switch_to_asm+0x39/0x70 [ 340.104749][ C1] ? __switch_to_asm+0x33/0x70 [ 340.109510][ C1] ? __pfx_kthread+0x10/0x10 [ 340.114240][ C1] ret_from_fork_asm+0x1a/0x30 [ 340.119304][ C1]