last executing test programs: 2.434397811s ago: executing program 4 (id=4801): r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @rand_addr=0x1}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000080)="441f0803000000a8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) getsockopt$inet_opts(r2, 0x0, 0x4, 0x0, &(0x7f0000000180)) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd0700100000004000400060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRESDEC], 0xffe) 2.028295563s ago: executing program 3 (id=4808): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=r0, @ANYRES16=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x1, 0x70bd27, 0x25dfd3fb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.999376592s ago: executing program 0 (id=4809): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010004200000000000000b0000000c000580040001"], 0x20}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2004c011, &(0x7f0000000080)={0xa, 0x4e24, 0xd502, @empty, 0x8000}, 0x1c) r2 = socket$alg(0x26, 0x5, 0x0) unshare(0x22020400) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r3, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a85009a10d943a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff81, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x64) bind$alg(r2, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff03c}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) socketpair(0x1d, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b140)=@delchain={0x2c, 0x66, 0x8, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8}]}, 0x2c}}, 0x0) r13 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r13, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) sendmsg$nl_route_sched_retired(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x70bd2a}, 0x24}}, 0x8000) 1.940226927s ago: executing program 1 (id=4810): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a0000000000007b118800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xf, 0x0, 0x1, [@typed={0x8, 0x91, 0x0, 0x0, @str='-.&\x00'}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800f000057051d0028"], 0x50) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000140)) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) 1.721031163s ago: executing program 3 (id=4812): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x7}}, @filter_kind_options=@f_fw={{0x7}, {0xfffffffffffffc8a}}]}, 0x38}, 0x1, 0x0, 0x0, 0xe8728ce82d5df8ab}, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xd1, 0x35}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd0c}, 0x64) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x22, 0x4, 0x7fff) close(0x3) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r6, 0x84, 0x80, &(0x7f00000001c0)="0000000000000000db9da7f192ff8724d083190bcd92c6c9318c77c18cea85c5e95098e05c7acb00730f2f7448cd7ab9a4cbed543ead0952211c028014b65d8378a88c07b36d3990", 0x48) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @local}], 0x1c) sendmsg$inet(r6, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000380)='Y', 0x1}], 0x1}, 0x1) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f0000000100)={0x0, @in={{0x2, 0x4f23, @broadcast}}}, 0x84) socket$kcm(0x10, 0x400000002, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x7}}, @filter_kind_options=@f_fw={{0x7}, {0xfffffffffffffc8a}}]}, 0x38}, 0x1, 0x0, 0x0, 0xe8728ce82d5df8ab}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xd1, 0x35}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd0c}, 0x64) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket(0x22, 0x4, 0x7fff) (async) close(0x3) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) setsockopt(r6, 0x84, 0x80, &(0x7f00000001c0)="0000000000000000db9da7f192ff8724d083190bcd92c6c9318c77c18cea85c5e95098e05c7acb00730f2f7448cd7ab9a4cbed543ead0952211c028014b65d8378a88c07b36d3990", 0x48) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @local}], 0x1c) (async) sendmsg$inet(r6, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000380)='Y', 0x1}], 0x1}, 0x1) (async) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f0000000100)={0x0, @in={{0x2, 0x4f23, @broadcast}}}, 0x84) (async) 1.697253122s ago: executing program 2 (id=4813): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x115004}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x50, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0xffff}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x1) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) sendfile(r3, r3, 0x0, 0x9) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv4_newrule={0x34, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x14}, [@FRA_SRC={0x8, 0x2, @multicast2}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e24}}, @FRA_FLOW={0x8}]}, 0x34}}, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x3c, r4, 0x1, 0x10000, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x3c}}, 0x0) sendfile(r3, r3, &(0x7f0000000240)=0x80000001, 0x4) (async) unshare(0x80) 1.576764673s ago: executing program 0 (id=4814): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$igmp(0x2, 0x3, 0x2) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0xfd79) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000b80)="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", 0x180, 0x8001, 0x0, 0x0) recvmsg(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000440)=""/242, 0xf2}, {&(0x7f00000022c0)=""/144, 0x90}], 0x2}, 0x40) 1.540660213s ago: executing program 2 (id=4815): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0xc, 0xb, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) getsockname$qrtr(r3, &(0x7f0000000040), &(0x7f00000000c0)=0xc) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r5 = socket$inet(0x2, 0x3, 0x2) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000002ac1414aa", @ANYRES32, @ANYRES32=r6], 0x1c) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x3c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 1.529741027s ago: executing program 0 (id=4816): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_emit_ethernet(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaa8aaaa88a800008100000086dd6076cd8a0028000020010000000000000000000000000000fe8000000000000000000000000000000004000000000000071800000000040000d604"], 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaa8aaaa88a800008100000086dd6076cd8a0028000020010000000000000000000000000000fe8000000000000000000000000000000004000000000000071800000000040000d604"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x41, &(0x7f0000000100)=r3, 0x8) setsockopt$sock_attach_bpf(r2, 0x1, 0x25, &(0x7f0000000100)=r1, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0xde}]}}}]}, 0x3c}}, 0x0) 1.460202742s ago: executing program 1 (id=4817): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720a06fef8ffffff71a400fe0000000071106e00000000001d300200000000004704000001ed03040f030000000000001d440000000000006b0a04fe0000000072030000000a0000b500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (async) 1.330687943s ago: executing program 4 (id=4818): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000071117700000000008510000002000000850000005600000095000000000000009500a50500000000eefd02f7e4c7ef6bfd6b7e160d5a59898098d03978903a3ecb0443b5069f63b76ffe38996114079c34e953ab2fc1f800c7ff9cdad0b490700b4586082326cabc459587bf937e83c29ff4e4a47e30f1b31c886030af93d6bfa6aa21216810d61d6e970aa4c96e0f77e00ff165"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000002c0)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000000)=""/137, &(0x7f0000695ffc)=0xbf) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000500)={[0xfe9]}, 0x8) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r5, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000380)={{0x3b, @multicast1, 0x4e24, 0x4, 'sh\x00', 0x31, 0x9, 0x6f}, {@private=0xa010101, 0x4e24, 0x4, 0xfffffffc, 0xfffffff7, 0xbb8}}, 0x44) 1.317040687s ago: executing program 1 (id=4819): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000000)={0x3, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) bind$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r4, &(0x7f0000007140)=[{{0x0, 0x0, &(0x7f0000006780)=[{&(0x7f00000046c0)="11", 0x1}], 0x1}}], 0x1, 0x0) accept4$llc(r0, 0x0, 0x0, 0x80800) r5 = socket(0x1e, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000040)={r0}) syz_emit_ethernet(0x149, &(0x7f0000000400)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '$s\x00', 0x113, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2, {[@mptcp=@generic={0x47, 0x8, "336c9be14df1"}, @md5sig={0x13, 0x12, "dc5f7bd1e01eee060a451456eb1c2a3e"}, @fastopen={0x22, 0x9, "50506d8b7915bd"}, @generic={0x5, 0xd, "7cdbd76fd6e5ad59094169"}, @fastopen={0x22, 0x3, "cc"}, @nop, @eol, @fastopen={0x22, 0x7, "c630351368"}]}}, {"a5cc4b22f580b28d2730c87a86e4ef75dc51625635d21626a0e5044042ef3a48b700000000b54a826b8a578fcae48ef11dc2060e938cd5aa31d451568e42b96a131c092081d693aae3b9954e31fa3494ae124aba2f6cc1345f85d392dde3eef9d027a5cf64d44bef5e0d632fc8b0b292c58398d854d0d131f2c931c6383b91dbf37595bf4f6cb03c226d19677326fc37358543c72d5fe53fbb129120046c7ac85e5d52def39d092334f19f2450c962c9e2cd47fdb17cd7b0809fab372e323af12ff1c8"}}}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0x4, &(0x7f0000000000), 0x4) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r9, @ANYBLOB="0800c300741300000800c40001000000"], 0x30}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, 0x0, 0x0) 1.216775853s ago: executing program 0 (id=4820): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002140)=ANY=[@ANYBLOB="1c000800", @ANYRES16=0x0, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10000000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000002040)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x3d66, @local, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000980)="dc", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x13a, @remote, 0x1}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000400)="e52b4a55a20fde2d94d5a162618eaad44fe97504789c4fdaa6f6436ebf7e25a56a9a107757b26f99d5579d0a11f8c4f744eaf04893c73848878d082bd320c54998efcc1deef21143f51303606b0dbda33f16e8fa13fb0e225e4e5b86e0b38bacc355c0b1e4a732f0e8f1b7ab1624a1bd6a1c3df7dcb7d2c94532e3e8bde291ce8dbd66a1ed85d88550663ba4185d55d8e82a83ed84116c2b1ee6a44f5cc809414f3f68232ddd472cb60d", 0xaa}, {&(0x7f00000004c0)="579a4d9869d629958a1755e798ea575d82f56211e884d073cc955aceee3b2c48709f28d43d726b83adbdfad3e29b2099ab87835ce9e99764a30ad2ecd8cddb67b71062d1f5079e11423389d1c905ec69587798ecaa4b45d004e8536e5b3ee55f757f4b277197ae5675f0e37262341299d4043403aafbb07d58", 0x79}, {&(0x7f0000000540)="3280fe2ec169eb9851efea4eaf1b324ddfcbff555c2edd0c1f3afc0bef640efc20236f51fde34a8483240971e719dafdf4ec55c62cebafa9d9865c7626a5b7e531d262f94e589fa5858c525425ce9b0b2b94a26d64cf0a6385413f7a0a16705c7f03279be656c86bd2e2bb47ba24aa748cf731f425ca442d0c655c69a34a91756f4d42e53cf0a300b38590d981a348a8d17ed7cff7eedbabb21e0fee1b3a", 0x9e}, {&(0x7f0000000600)="65a4d8a05ffe7feee425c4216d0c13b49ff5648e34bd7c513eea49daa40b01ded47076c39db5e5f308dcfdbe2d75c383008e4618211bd51a432b12db69163db4124e6d93514175cb2c0cf8de9c52c62218e34ac4b94820af8200228eb37f5933a62b22791fd1d27b5cc0515cd39da8b52d6e9c7ebbd2148c432c4ba7c1357b8fc60e9a85", 0x84}, {&(0x7f00000006c0)="7eefff7dcd7dc8b9e45f7ebd1aa7c875ced8c7195015adb09f574de470003b981eddfef8c5014bae29a091e01ef3c33ab5fce404c4bea4f2a836a59b315c14f454", 0x41}], 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="480000000000000029000000390000001506000900000000fe8000000000000000000000000000aa00000000000000000000ffff0000000000000000aa1400000000000000290000000b000000000000000000000088000000000000002900000004000000000d000000000000072000000000064d000002000000000000000400000000000000ffffff7f0000000004010204010707400f0000010e09060003000000000000000000000000000000000000000000000002000000000000000200000000000000b9000000000000000200"/232], 0xe8}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x7724, @local, 0x6}, 0x1c, &(0x7f00000009c0)=[{&(0x7f00000008c0)="bbbc13c0645c2fc07675919525ade18dc81c2a546e7f3093ff807c3067121eee448dc3c0036620eb24f7c9bef43d66cf3a0c7c2f3d0a338710e4b1f022e8a504e594ce5b5786f39f7e2f27ce53490a8b14299f4b9320f60b83bea88c02c90f68332e50d9c36cc14fbe22d4fcd52aabb471dc4162b9c733fb0faacd", 0x7b}, {&(0x7f0000000940)="6072e3e0727d9ffd2facdab133ef7b4e108d398413ba8f06a67db7ce02eaf9cc7b18de39282405dc3140", 0x2a}], 0x2}}, {{&(0x7f0000000a00)={0xa, 0x4e23, 0xe5a, @mcast1, 0x61f}, 0x1c, &(0x7f0000001cc0)=[{&(0x7f0000000a40)="e7136c2a2205a17bdff0b75c8d93b501052071d4bd116da3ba32f4f15d3ed613cbe410306176510e1e60c1469a4d20e1f8b3ef89a668dfc47d64e052ea8964", 0x3f}, {&(0x7f0000000a80)="037560e36fc498107e91d1f2437604d7ae47c8b6a80b483d30d7956e4711ceeac4b85393b9709abc9fa0b8e70d3ddb1482ad85867fbc0d9fbdf0898dbab60fd46a41b97880415420b72b239b55ab9dc44d0f1c1e175855ebf25555729b4acc4311046350e7232ecea640357b331da092167df321824aa35ab2ce75e39a66f8b1259065f890c0df6a43a048ddd57a43140e6f124a433669187e4dab9826ee749d1c56e0706cac0d30d7587a30a5aa40606b38cae912b0704f318bea069439ccbffea62758ab31c7b41f", 0xc9}, {&(0x7f0000000b80)="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", 0x1000}, {&(0x7f0000001b80)="e02cd45cd6233c35d8cb85089438fe2ccd6fe7b24d8b966f5e96a1167e8fbad3a992aa94ca8ce43ab98646b590a0c0d389c637743ae1041546e9d03f3f734347a0d0613f836591d32385c3651f6c0cfb8875cfcf06", 0x55}, {&(0x7f0000001c00)="3c3ea1b62722e6ea39c90d3c697ac69ec0b3e3f6620b0e7403a540d110ebe84d57eacf44b176bcbe6984ef0eeab50e6c5c21380091943647b3ce0c8319244766686643731fa3492d43aa79ffb1e2829ab6655392d0a91b9b01e818defd8204305fb9c93d67d32c4c9121902a98211162281ec6d66b24c642b10af38b9d696d432cf755981bb7", 0x86}], 0x5, &(0x7f0000001d40)=[@rthdrdstopts={{0x150, 0x29, 0x37, {0x88, 0x26, '\x00', [@enc_lim={0x4, 0x1, 0xb}, @calipso={0x7, 0x48, {0x1, 0x10, 0x40, 0x7ff, [0xfe, 0x471759f2, 0x7fffffff, 0x0, 0xe82, 0xc, 0x3, 0x8]}}, @jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0x8}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0x9, [0x5c1, 0x5]}}, @generic={0x3, 0xc2, "fa1e2afd49d3bc3e1b05e2796b3676dfe5e14e27849f3d28ef25e8c089642b79ae996b2a8fc1c9f7448f7481a8bbc6f3ce178f4742ce41dbd5a3086e1d74ebd08696debccc9dc22c151ddc0386c5bac3c4d08778a6fae414e93d06a2b4244538af183c0b5a232094809ed7becd33d1e7e5f19b1dc6b067c5293d0d6fb4540f697a23e36f13e51e8ffebee3b95bd6234b6502af5e25a5bf769c85a2b2dfc22babbe343fe168e906178e4dff933ec593e6d1484b1a233052f203b41268f858017d47c2"}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x1d, 0x3, '\x00', [@pad1, @calipso={0x7, 0x10, {0x2, 0x2, 0x2, 0x2, [0x2b0d]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x4}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}, @rthdrdstopts={{0x90, 0x29, 0x37, {0x8, 0xe, '\x00', [@jumbo={0xc2, 0x4, 0x200}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @calipso={0x7, 0x40, {0x2, 0xe, 0xa7, 0xe, [0x1, 0x7, 0x1a, 0x10001, 0x0, 0x9, 0x7fff]}}, @pad1, @enc_lim={0x4, 0x1, 0x9}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ra, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x3c, 0x8, 0x1, 0x48, 0x0, [@remote, @mcast2, @mcast1, @loopback]}}}, @dstopts={{0x60, 0x29, 0x37, {0x86, 0x8, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0x0, 0x4, [0x8, 0x5, 0x7, 0xfffffffffffff001, 0xfe, 0x0, 0x4]}}, @pad1]}}}], 0x300}}], 0x4, 0x931766f6319eed40) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0xfa, 0x81, 0x8, 0x7, 0x2d, 0xb8, 0x5, 0x8, 0x9, 0x3, 0x3, 0xa, 0x6, 0xe}, 0xe) write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="610602ff040201161440b36b7ca2f6cc3ca91999835c4902013ff22508"], 0x1d) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000300)=0x2, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="06ff03076844babeb89e14f00806", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x7fff, 0x1000, 0x3a}, 0x1c) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x4, 0xc8, r8}, [@IFA_FLAGS={0x8, 0x8, 0x408}, @IFA_LOCAL={0x14, 0x2, @remote}]}, 0x34}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r12, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) close(r5) 1.203645379s ago: executing program 3 (id=4821): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) accept$inet6(r0, 0x0, &(0x7f0000000280)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r3], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000000000000000a2c000000180a01080000000000000000020000050c00054000000000000000020900010073797a3000000000140000001100010000000000000000000a00000aaa2429c5eb40a57c6700c8753c050d3fc62f306f403764b5e41fb97f880b2aaee9d72fe2d42acf28635e1c361bcf33fcdd87e063e713ba365e2426fd8f45f4291939068f665dff528d7c478b4781a000"/163], 0x54}, 0x1, 0x0, 0x0, 0x28008000}, 0x20000800) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f00000005c0)=""/229, 0x0, 0xe5, 0x1, 0x81, 0x10000, @value=r5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028005000300000000000800014000000001080002400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) 1.193446081s ago: executing program 2 (id=4822): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$pptp(r0, &(0x7f00000018c0)={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x53}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 1.070753022s ago: executing program 4 (id=4823): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r2, 0x101, 0x70bd29, 0x25dfdbfa, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x81}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000611082000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r3, &(0x7f00000002c0)="82e5ca6e8e36f461e424e65a38f010090a520b40bb62ce515dd333b9f6d7332b311111ddf41ba773f240ad8f088c10bc26b7d3d9", &(0x7f0000000300)=""/72}, 0x20) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000f80)=@broute={'broute\x00', 0x20, 0x6, 0x90, [0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x2000000005c0], 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000004000000ffffffff00"/144]}, 0x108) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000180)={r0, r0, 0x5, 0xaf, &(0x7f00000000c0)="d6eae71e382fe2fa02081480d62cea4c072a8d448a1e912c135dbe04735ff700a9d40ea371167c280ecda27d9dc6fe756614d2a9fd92d417a49ad64f64a456467aa339e6ef9476368cfb2d7aa9eaec8b1d96778e424f4821ec7f613a524a51906d276f517a00e1b3a5d6f322d73b8e046f8cc841eb4f3a9a1feae57505f8edbc1531b9369cad083a9809e1a955ff57b4842b098cd7b4228797e9a4c0a6488811619f591b2cdd4c6903feced436ada0", 0xf, 0x5, 0x5, 0x7, 0x1, 0x1, 0xa, 'syz1\x00'}) 1.055788424s ago: executing program 2 (id=4824): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x6, 0x1a, 0x0, 0x20000000) setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f00000000c0)=0x3ff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000200000085100000010000009500007b0000000085000000080000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x9b, &(0x7f0000000300)=""/155}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000200000085100000010000009500007b0000000085000000080000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x9b, &(0x7f0000000300)=""/155}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) write(r2, &(0x7f0000000080)="0b000300010001", 0x7) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r4) (async) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4002a2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x259fdbfd, {0x0, 0x0, 0x0, r8, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x259fdbfd, {0x0, 0x0, 0x0, r8, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000000180)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x3c}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000280)="cb41f9576c07f5cf4b55f53cbc4f248b8c86ceebf8e1c3cfa343a2f6fcdd75a01933988b6cad4b6b12c056e2ec83818f7d338d854663258016bbd0a5feea0079c05d6463138ac16f70687b7b67afbfd71b8890b5d1c2a8724b866b22a3805ab8dfb8e1efaeab1673cf0936e47ae6", 0x6e}, {&(0x7f0000000480)="edfff884c64220342f2f936ba1cfd5e4109004f243c80fe1e4d37a440f90735518afeff19c6382d47f7a0993e26cbf9df7e246d12f078f1a014045d0d2726a4312db48bd1b4a8754ba0eab83e9c5d875f96e464299b81ba5f466a3d9570b867690e5d09b7d856235ca398081ded5811ea73f1438cff33504fc7655764fc9435baf6c851df0738b7da1e4206017b1c3f0da27c9e4ab0fc495ec065fbec09a42427c43fa264aa160882197f51132c35953dd9c60460e5c23aae3673c0680521f7b659ba83c116161c916c777b2d0cadc6236f5776a5c86e7eb29bb98ca92cc", 0xde}, {&(0x7f00000005c0)="3996e6fea77e93e2d4960761c7bc4a21abaf5d584dcc3155749d6bc7cb0d581581eaac79f2d78b65839f109fccbbf7551860c92c011b843698ef02bb6d1f93dd518aff1c7a887cdad4052829dc9754ff75ef06a5e89a77b61a5e8d7c0e625f0d8befcb2dc60b52795c981d25ad4ed99090e31417376791", 0x77}, {&(0x7f0000000640)="93b8233802bc954478964d4e320e17d70e7e02f8f9ec38ba9a419d7dc85deb5a08c710fcfea552405fef21da7e6c881f51a9e7035a84b133ee01f12d6580a3c771f46bd2a023d6eb0a8cecba5336ea41864072f4a2650394b12bd7a39bc5f77d23e0c05945d54863dec71a839b737914ea3561e97cdc591e0eaf207265e97db1964b4f64d9ac082d3225cb99bd7f5176c33d0198ebd3cea69ddbcdf3d4891f90e62bec5343180da3902128f010d34b707be167e440f0a1ee97f7e50498e1487022922f49ef84db5ec4efad17d755dc97da03342e7cf84165", 0xd8}, {&(0x7f0000000740)="ebf0f7563bb4e800f820e4b547b1af173420e2d8bddee835ee1a41fd399ae2a19615885dd67f45008c3bd98814aa56386c96c0228d7a638e084893c0878840a52f3205895ce69ef15811a8db2957fdc472fc43677f3d7487adf3e0ec246f677f3cdbbeb159f1c4142a1535cd6f4f388846e7742c27b136cce0cb0f691984c2a892afb9d9c49892c7e98588", 0x8b}, {&(0x7f0000000000)="378d0d6ed445785bf862df0185ea8032d1fd", 0x12}], 0x6}, 0x80) (async) sendmsg$kcm(r6, &(0x7f0000000180)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x3c}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000280)="cb41f9576c07f5cf4b55f53cbc4f248b8c86ceebf8e1c3cfa343a2f6fcdd75a01933988b6cad4b6b12c056e2ec83818f7d338d854663258016bbd0a5feea0079c05d6463138ac16f70687b7b67afbfd71b8890b5d1c2a8724b866b22a3805ab8dfb8e1efaeab1673cf0936e47ae6", 0x6e}, {&(0x7f0000000480)="edfff884c64220342f2f936ba1cfd5e4109004f243c80fe1e4d37a440f90735518afeff19c6382d47f7a0993e26cbf9df7e246d12f078f1a014045d0d2726a4312db48bd1b4a8754ba0eab83e9c5d875f96e464299b81ba5f466a3d9570b867690e5d09b7d856235ca398081ded5811ea73f1438cff33504fc7655764fc9435baf6c851df0738b7da1e4206017b1c3f0da27c9e4ab0fc495ec065fbec09a42427c43fa264aa160882197f51132c35953dd9c60460e5c23aae3673c0680521f7b659ba83c116161c916c777b2d0cadc6236f5776a5c86e7eb29bb98ca92cc", 0xde}, {&(0x7f00000005c0)="3996e6fea77e93e2d4960761c7bc4a21abaf5d584dcc3155749d6bc7cb0d581581eaac79f2d78b65839f109fccbbf7551860c92c011b843698ef02bb6d1f93dd518aff1c7a887cdad4052829dc9754ff75ef06a5e89a77b61a5e8d7c0e625f0d8befcb2dc60b52795c981d25ad4ed99090e31417376791", 0x77}, {&(0x7f0000000640)="93b8233802bc954478964d4e320e17d70e7e02f8f9ec38ba9a419d7dc85deb5a08c710fcfea552405fef21da7e6c881f51a9e7035a84b133ee01f12d6580a3c771f46bd2a023d6eb0a8cecba5336ea41864072f4a2650394b12bd7a39bc5f77d23e0c05945d54863dec71a839b737914ea3561e97cdc591e0eaf207265e97db1964b4f64d9ac082d3225cb99bd7f5176c33d0198ebd3cea69ddbcdf3d4891f90e62bec5343180da3902128f010d34b707be167e440f0a1ee97f7e50498e1487022922f49ef84db5ec4efad17d755dc97da03342e7cf84165", 0xd8}, {&(0x7f0000000740)="ebf0f7563bb4e800f820e4b547b1af173420e2d8bddee835ee1a41fd399ae2a19615885dd67f45008c3bd98814aa56386c96c0228d7a638e084893c0878840a52f3205895ce69ef15811a8db2957fdc472fc43677f3d7487adf3e0ec246f677f3cdbbeb159f1c4142a1535cd6f4f388846e7742c27b136cce0cb0f691984c2a892afb9d9c49892c7e98588", 0x8b}, {&(0x7f0000000000)="378d0d6ed445785bf862df0185ea8032d1fd", 0x12}], 0x6}, 0x80) 901.200627ms ago: executing program 4 (id=4825): r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x541b, 0x0) 896.677979ms ago: executing program 1 (id=4826): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = getuid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000740)={0x3d0, 0x2, 0x4, 0x70bd2d, 0x25dfdbff, {0x1d}, [@nested={0x57, 0x91, 0x0, 0x1, [@nested={0x4, 0x20e5}, @generic="52046ec86b5608c93edc26ac643bff39e5db56941c71214ea1c171efb85aa236cabeaf29402e44cf96499a2ed18a6def7a1c30d54969483f1bd06301e4b72da97102783354fd21c93daa93fedbd51d"]}, @typed={0x4, 0x118}, @generic, @generic="73f228ffca5e3a0ef1721c0344fd0914719b8a72be237a967576371050b1eb12a19c1c5a5d5122eddd6353c1c11493cf17ec51bab9f392a787d5e90d1d0056d9ea6623482664d3175c8d3d099cc40fb2a9abc7fd649f064e91e536eb321de4e9182b3c80c4164adfeab4f652186c910c7945e98364f4a35cfde1bb1a66fde065", @nested={0xe8, 0x45, 0x0, 0x1, [@typed={0x8, 0x33, 0x0, 0x0, @uid=r3}, @typed={0xd0, 0xa1, 0x0, 0x0, @binary="55b4c97a070000ae905c16f4bf91ab4a2680a9ff411330f5b2699a26381abbd4288ae557b88f06edf24d6370b26220df444d67d1badd7eab21d2c295f3b3f623f9e12b353066a6e384f303c733dc0bd390018993756b240eafd57b3685f1582a7997542e5e2bc9bdd5077bc52a5c4147f64ed69b9ed9408460fcbc263a8fa5c3b02fa520ac30cc52c5f834d397bd57260c634e52f202a4859e6e521cecebdfe1c1a9902b3115506902664a2fc60d43ea21f38d32e6a113d9f050f9c769a7a7fbc0ba3068a9bda5b9499260c7"}, @nested={0x4, 0x112}, @typed={0x8, 0x65, 0x0, 0x0, @fd=r2}]}, @generic="c4c128148ed53983e2c8c3ebc62bd10a5a9d19a2e6057bf371ce7c0007b08b295b80a72f3f703c9f8266425828771cc09d276816c8116de86b6e2c2d58d62ded6246187fec70167b5ed2dd582acf4a13f2d4d0376a657dcd4b4f239d0a3d317d3a9e2e11398dbc42a35988700e903b6f6fcb004080d0241df7f6e011851cce1fed0e550aec1ad7120fc58a13d2633e51b7ceae89eda83bd8f69e908a7aded8162324642050e6c2727e2abb32fb29b5f848ee7de2d39cde612d6df77b3eb4812debb06df5e97659732f906c7df81366a9352a9e1ded62eb833a28ca229135316779f96e90cceb2e7c219ab882b6f3d200d60606", @nested={0x103, 0x110, 0x0, 0x1, [@typed={0x8, 0x2f, 0x0, 0x0, @u32=0x7}, @typed={0x8, 0xa5, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x9c}, @generic="f165817c73ec393bb9b52522e75ae5b52658d8da0424487b4959cc7dabdcda9c63ee0f1c5a2b77ad2f28d491c76b07f0e9f15280e4a76878b01291deb91b7952d3b8387e3b4cbf6e4f817bd44fa4aff0b88f7d829fc1b2aa1af65c37b2cb089c6b7386aef4fc47574f8a8a742fa4cf603935f82e357ad05cb03e2f8bedc18a6ba613097dc908e81454aef54e89fe4c3485bd2b636cfd2cb74fd263528598711392e3df59b56d43fd653c84d070d762cccfae048275aefe1aaa882512dfeb7b513756dd97454b338800bfc63978c1c5e50546c5027b8ca4c87e38845fa3b466", @typed={0xc, 0xe3, 0x0, 0x0, @u64=0x7}]}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x44000}, 0x400d0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x4) 893.303047ms ago: executing program 3 (id=4827): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000011c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0xc554}]}}}]}, 0x3c}, 0x1, 0xba01, 0x0, 0x44844}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000019"], 0x60}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000000)={0x5c, 0x2, 0x0, 0x10001, 0x0, 0xf0}) 804.391999ms ago: executing program 4 (id=4828): r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f00000002c0), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000440)={@broadcast, @empty, @void, {@can={0xc, {{0x4, 0x0, 0x1}, 0x3, 0x3, 0x0, 0x0, "34511defadb9eb0e"}}}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x7d, &(0x7f00000009c0)=@assoc_value={r3, 0x3}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 615.366798ms ago: executing program 2 (id=4829): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x63f, &(0x7f0000000e40)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x8, 0x6, "2afa27", 0x609, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @mcast1, {[@hopopts={0x5c, 0x3, '\x00', [@pad1, @calipso={0x7, 0x18, {0x1, 0x4, 0x0, 0x1, [0x7fff, 0x25]}}]}, @hopopts={0x2f, 0x0, '\x00', [@pad1, @ra={0x5, 0x2, 0xfff7}]}, @routing={0x88, 0x12, 0x0, 0x8, 0x0, [@private0, @ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x26}, @empty, @private2={0xfc, 0x2, '\x00', 0x6}, @dev={0xfe, 0x80, '\x00', 0x20}, @empty, @remote, @remote]}, @dstopts={0x11, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0x4}, @calipso={0x7, 0x10, {0x2, 0x2, 0x9, 0x1ff, [0x3]}}]}, @srh={0x8, 0xe, 0x4, 0x7, 0x29, 0x30, 0xf, [@dev={0xfe, 0x80, '\x00', 0x37}, @mcast2, @mcast1, @dev={0xfe, 0x80, '\x00', 0x19}, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @private1]}, @dstopts={0x2c, 0x36, '\x00', [@ra={0x5, 0x2, 0x8}, @hao={0xc9, 0x10, @empty}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0x3b}, @generic={0xe, 0xf1, "8a10512a713f13a523b167c9068a8d4b9c14c532ff7dbd7f7089e7991eb129dd09a119d5090bb24616d55e7c2d9ba532f48de9623f70c5b3b6836ff847e9ac2182f22e6781409d102a076e4c216005add01180056ff9151e009d15360726ca2784e0aad87ab5c56425ca69f8f5f5169e7d0af740976ad90461fd0b172871fb7eea8a5789dbf98f2547d4b6d7505df1b83e1838e13efbf53198cb599c610aff3e9e53e12d5091427ff031935cc7fbd5fa0fb666fa1482372fc9b29a68fd9ff68442c307975eb81740caf59c218fda7040a9806b345b2601b7c2316a36df962b04b105ca380c4de318d45af21bfd43306804"}, @generic={0x71, 0x6d, "82b7d1fde0898c078268a080bcc10d6335300f2838dc4a965019c8763d81d2972607f22f9dfaaf19553a5efab811d843fa7254b6a751cee8166bb81bbefbae732207be286fa37c94cd2f28fc59f6bf23b8e9b4f1278cb12b5050ddbe6597a23d8b0e37e618b29e1e79de1ec134"}, @hao={0xc9, 0x10, @loopback}]}, @srh={0xff, 0xe, 0x4, 0x7, 0x1c, 0x30, 0xc, [@dev={0xfe, 0x80, '\x00', 0x34}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @loopback, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @fragment={0x1d, 0x0, 0xf8, 0x1, 0x0, 0x0, 0x68}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x78, 0x3, [], "afad3cb819cdfc56a1d60b0958b375717cb179e85c53c2d682c5e39039f69ea63e74f70a741a8b0be0d3eef437651005745bf5b0cce03b862f04fe12794ffd60ae0b1304076916b8cc1c2a56c72736352b30581886cf1de64420a4a134ff23b7efbb1e6bcce98947a9efcae7437bae6b990215023b86d374"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "f2f587f0e7dd9af30d48a4847928d6464f58939ee66aec23d6f9a16c59e69be4"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "e7bdd15cc0764f8c7bb25cfccbff78a26582958ed5fa5edb1957eb1a6b77512f3a9694fcd81ca98b2817476f0328a903dfe6968f39a0d90bb4345780d5157e92804f603de9f2732494ebc7cef7f7d7d62cdbd75e4cc18a4003167ccf0b69f8e174f962957ed5b404ea46232d4920a5148a96570f22eb9c8ce543e80a5666ae1aab631b7af4641b30077eb4d8dd74c7c9a700091aa6e621b00db39530cb8834414259c91405b9a83ecdfb9d315a46f76ec70c7b5d8528a2808a2ec6dd741379c535641f017a24265666b5b4fd47e786692037c16d0764c2e0d6deb3ec4fbca82258e47c9077500bab1cd8e1ed871a4d2fc0"}, {0x8, 0x88be, 0x0, {{0x7, 0x1, 0x16, 0x1, 0x0, 0x1, 0x3, 0xb}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x0, {{0x6, 0x2, 0x80, 0x3, 0x1, 0x3, 0x3, 0xd}, 0x2, {0x7, 0x0, 0x3, 0x1f, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "845bd5686dd266a8998dfe014cdfc8bf6f044bfe23feec232f95da552475065f19d617fc88f8bb170c48a53d04e5bb2bb61cd6db3c6d215d3493cf00856c65d18196e89008756f7e662bed7988d5bae530003d00542b54792e04faa896917d243e2a83bf30df0a2da5da2285e7d97a716b4bae5e942b4fbe0ee1113e0a094d2b432ee6ab2968d789f8884b07"}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006d0001000000000000000000003c0000", @ANYRES32=r0, @ANYBLOB="000000000000000018003480140035"], 0x38}}, 0x0) 530.748775ms ago: executing program 3 (id=4830): socketpair(0x11, 0x1, 0x9, &(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x28, r4, 0xf01, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x4f}}}}}, 0x28}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @union]}}, &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0xa}, 0x20) (async) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x800) (async) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xb}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048013}, 0x4048080) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000001b40)=@raw={'raw\x00', 0x4001, 0x3, 0x308, 0x0, 0x0, 0x148, 0x0, 0x148, 0x270, 0x240, 0x240, 0x270, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x1, 0xe, [0x4e21, 0x4e20, 0x4e20, 0x4e20, 0x4e22, 0x4e22, 0x4e22, 0x4e22, 0x4e23, 0x4e1f, 0x4e22, 0x4e24, 0x4e22, 0xb07, 0x4e20], [0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0x1, 0x1, 0xfe]}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x7, [0x3a, 0x4, 0x2c, 0x1f, 0x1f, 0x3c, 0x0, 0x17, 0x3a, 0x20, 0x19, 0x6, 0x2c, 0xd, 0x10, 0x34], 0x0, 0x1, 0x10}}}, {{@ip={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x0, 'ip6erspan0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@inet=@socket1={{0x28}, 0x1}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) 464.097726ms ago: executing program 4 (id=4831): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c0001"], 0xd4}}, 0x4000010) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @empty}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x7c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0xfffffffffffffffe, @default, 0x8449, @void, @void, @void, @val={0x4, 0x6, {0x34, 0x92, 0x1000, 0x40}}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x5, 0x43, 0x24}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x171}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HIDDEN_SSID={0x8}]}, 0x7c}}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x98, r7, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffff0, 0x3e}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "bd997306a62388147b39c0fc7f39515e"}, @NL80211_ATTR_PMK={0x14, 0xfe, "2e83c31e94d6e496b6a61711ba3e3d7d"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000084}, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r11, 0x109, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x200000d4) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000400)={0x2e4, r11, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x64a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1e8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg1\x00'}}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3c}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'team0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}]}, @TIPC_NLA_NODE={0x1a8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "7ec6c1258ca9226a98e825b7e534fb668798dfa90d5accf0ed89190bde4150"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "1bacd36fe059b01a9971b1c0d78e1541d3d589bd3a39445f37078d789d2a5d"}}, @TIPC_NLA_NODE_ID={0xfa, 0x3, "d460f7f267ded91b19c314035c960c1a221fef18e640d025a13627736ccf0bdf15f3092736523b6840d708dedefd2b3b23ba21fac1eec3b00cf32753f1bab0fb1556dd8dc800aa2f2a049795f845a033a395cddf4048060eaad2bc5813215c58efde9ec2650a94cfedc17fe45f146909231780d9d3f9cfa28ff74dbb456c1359b8327d8fc935ed072e17ddb29dd69b196a926cf4cd551539fb094291347825a879b2da31accfd485243fc8cddbca30894836ab071477042ffdb596c3f1217442e5501da1f1ce0144fecf187d5172a11d73e9cd48cb8c164be25b50ef05d54a2b2642c73dbaf6e54aea61fbb0c030ad1f94d8e7a50028"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x20000100}, 0x0) 454.658777ms ago: executing program 0 (id=4832): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, r1}, 0x94) socketpair(0x21, 0x4, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000080)={0xffffffffffffffff, r2}) 452.773579ms ago: executing program 1 (id=4833): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x46a296f1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x23, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x7, 0x1, 0x4, 0x6, 0x1, 0x4, 0x16b73bdc325bbb48}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xd}, @exit, @func, @map_idx={0x18, 0x7, 0x5, 0x0, 0xa}, @map_fd={0x18, 0x2}, @alu={0x7, 0x0, 0x6, 0xb, 0x8, 0x18, 0x8}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x4}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x800}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x94) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x6a, &(0x7f00000006c0)="3e8a4f2ed594100661d53904c8142a2a6840508c69534f2252f4de4d76d1b7f9f1d078080021d90b7692dfb43d330857886ca14d033bcd55471b53b1e7e7e0e16ef665096826730354a5e2be211cdd87e49650a9c7e6dd5847734790ab44556585662d33300ea3488f72", 0x9, 0x1, 0xc49, 0x1012, 0xc3, 0x1, 0x7, 'syz0\x00'}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x20000814) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000008680), r2) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r2) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f0000000180)={0x24, r5, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c011}, 0x800) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000540)={&(0x7f0000000200), 0xc, &(0x7f00000004c0)={&(0x7f0000000ac0)={0x158, r4, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x10c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x64, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xf5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x91}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x400}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000000}, @NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffe}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x400}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xe}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x373e}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x158}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000008800)={0x0, 0x0, &(0x7f00000087c0)={&(0x7f0000008740)={0x30, r3, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, r2) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000180)=0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000500)={0xf127, 0x1, 0x4, 0xffff, r10}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x20, 0x3, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x20054810) 243.346164ms ago: executing program 0 (id=4834): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001840)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000001880)='cpuacct.stat\x00', 0x0, 0x0) read$nci(r3, &(0x7f0000001bc0)=""/73, 0x49) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20008001) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r8 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000000600)={0x0, 0xea60}, 0x10) recvmsg$kcm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x1, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) sendmsg$nl_generic(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x10, 0x300, 0x70bd27, 0x25dfdbfb, {0x5}, [@typed={0x8, 0x110, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x91efdd4a003c93ce) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r9, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) connect$rose(r9, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @default]}, 0x40) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000900)="ba", 0x1}], 0x1, &(0x7f00000005c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x68b1}}], 0x18}}], 0x1, 0x80) 83.708234ms ago: executing program 3 (id=4835): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, 0x0, &(0x7f00000004c0)=0x29) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x40}]}}}]}, 0x3c}}, 0x0) 1.122393ms ago: executing program 2 (id=4836): close(0xffffffffffffffff) (async, rerun: 64) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) close(0x3) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 1 (id=4837): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0xd, 0x133, 0x0, 0x0, @str='@}\'!)^{*\x00'}]}, @typed={0x4, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="d800000019008111e0020f060d8107040a600200640f040b067c55a12a00090008000699e3ffffff14000500fe8081780c000567b8b7b940020000090a0016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a290457f0189b316277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b83ece0b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x4c, r5, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0xffffffffffffff23, 0xb, 0x9}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) recvmsg(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/20, 0x14}], 0x1}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r7, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x34040040) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c7fffffff500"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) close(r0) kernel console output (not intermixed with test programs): 14518] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.246707][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.263874][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.301009][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.308895][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.383785][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3044'. [ 410.630523][ T5847] Bluetooth: hci0: command tx timeout [ 412.709483][ T5847] Bluetooth: hci0: command tx timeout [ 434.754833][T17160] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3086'. [ 434.784857][T17165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3087'. [ 434.846533][T17165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3087'. [ 434.992824][T17172] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 435.286887][T17180] bond1: Removing last ns target with arp_interval on [ 435.348003][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 435.358393][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 435.367178][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 435.378207][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 435.386477][T14518] veth0_to_bridge: left allmulticast mode [ 435.394652][T14518] veth0_to_bridge: left promiscuous mode [ 435.401639][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 435.461272][T14518] bridge0: port 3(veth0_to_bridge) entered disabled state [ 435.537051][T14518] bridge_slave_1: left allmulticast mode [ 435.571210][T14518] bridge_slave_1: left promiscuous mode [ 435.577477][T14518] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.615376][T14518] bridge_slave_0: left allmulticast mode [ 435.627003][T14518] bridge_slave_0: left promiscuous mode [ 435.642701][T14518] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.696398][T17208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3094'. [ 435.842508][T17216] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3096'. [ 435.935132][T14518] ip6gretap0 (unregistering): left promiscuous mode [ 435.954432][T14518] bond8 (unregistering): (slave ip6gretap1): Releasing active interface [ 436.204491][T14518] bond7 (unregistering): (slave gretap1): Releasing active interface [ 436.257109][T14518] bond11 (unregistering): (slave geneve4): Releasing active interface [ 436.723550][T14518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.736327][T14518] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 436.747431][T14518] bond0 (unregistering): Released all slaves [ 436.765220][T14518] bond1 (unregistering): Released all slaves [ 436.782355][T14518] bond2 (unregistering): Released all slaves [ 436.915456][T14518] bond3 (unregistering): Released all slaves [ 437.045841][T14518] bond4 (unregistering): Released all slaves [ 437.063253][T14518] bond5 (unregistering): (slave veth5): Releasing active interface [ 437.074153][T14518] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 437.085343][T14518] bond5 (unregistering): Released all slaves [ 437.215599][T14518] bond6 (unregistering): Released all slaves [ 437.333481][T14518] bond7 (unregistering): Released all slaves [ 437.348355][T14518] bond8 (unregistering): Released all slaves [ 437.364293][T14518] bond9 (unregistering): Released all slaves [ 437.381494][T14518] bond10 (unregistering): Released all slaves [ 437.515593][ T5835] Bluetooth: hci3: command tx timeout [ 437.535559][T14518] bond11 (unregistering): Released all slaves [ 437.551555][T14518] bond12 (unregistering): Released all slaves [ 437.775831][T14518] tipc: Left network mode [ 438.003460][T17230] syzkaller0: entered promiscuous mode [ 438.019387][T17230] syzkaller0: entered allmulticast mode [ 438.030265][T14641] syzkaller0: tun_net_xmit 48 [ 438.299988][T17246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3105'. [ 438.740711][T17248] x_tables: duplicate underflow at hook 4 [ 438.751887][T17249] x_tables: duplicate underflow at hook 4 [ 439.589966][ T5835] Bluetooth: hci3: command tx timeout [ 440.320622][T17265] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 440.359495][T17269] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.3111'. [ 440.477519][T17273] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.3112'. [ 440.518874][T17273] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.3112'. [ 440.619064][T17281] Cannot find add_set index 65532 as target [ 440.678834][T14518] hsr_slave_1: left promiscuous mode [ 440.785835][T14518] veth1_macvtap: left promiscuous mode [ 440.805211][T14518] veth1_vlan: left promiscuous mode [ 440.811797][T14518] veth0_vlan: left promiscuous mode [ 441.181919][T14518] pimreg (unregistering): left allmulticast mode [ 441.420888][T17317] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3120'. [ 441.670296][ T5835] Bluetooth: hci3: command tx timeout [ 442.167707][T17318] ip6_vti0 speed is unknown, defaulting to 1000 [ 442.196267][T17318] ip6_vti0 speed is unknown, defaulting to 1000 [ 442.250872][T17185] chnl_net:caif_netlink_parms(): no params data found [ 442.295929][T17318] ip6_vti0 speed is unknown, defaulting to 1000 [ 442.688712][T17344] netlink: 'syz.3.3125': attribute type 11 has an invalid length. [ 442.728315][T17344] netlink: 199788 bytes leftover after parsing attributes in process `syz.3.3125'. [ 442.743864][T17345] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3123'. [ 442.771119][T17344] tipc: New replicast peer: 255.255.255.255 [ 442.777832][T17344] tipc: Enabled bearer , priority 10 [ 442.814699][T17185] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.831540][T17185] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.850153][T17185] bridge_slave_0: entered allmulticast mode [ 442.873813][T17185] bridge_slave_0: entered promiscuous mode [ 442.907954][T14518] IPVS: stop unused estimator thread 0... [ 443.009886][T17185] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.028609][T17185] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.069965][T17185] bridge_slave_1: entered allmulticast mode [ 443.078737][T17185] bridge_slave_1: entered promiscuous mode [ 443.095476][T17360] netlink: 'syz.3.3127': attribute type 1 has an invalid length. [ 443.108427][T17318] infiniband syz2: set active [ 443.134001][T17318] infiniband syz2: added ip6_vti0 [ 443.223996][ T5836] ip6_vti0 speed is unknown, defaulting to 1000 [ 443.258267][T17185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.308258][T17366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3128'. [ 443.323137][T17318] RDS/IB: syz2: added [ 443.328004][T17318] smc: adding ib device syz2 with port count 1 [ 443.335056][T17318] smc: ib device syz2 port 1 has no pnetid [ 443.344406][ T5836] ip6_vti0 speed is unknown, defaulting to 1000 [ 443.376206][T17185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.428425][T17373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3128'. [ 443.470132][T17318] ip6_vti0 speed is unknown, defaulting to 1000 [ 443.567276][T17375] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3130'. [ 443.647360][T14518] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.680721][T17381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3131'. [ 443.698990][T14518] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.750699][ T5835] Bluetooth: hci3: command tx timeout [ 443.795385][T17185] team0: Port device team_slave_0 added [ 443.818736][T17185] team0: Port device team_slave_1 added [ 443.960600][ T9137] tipc: Node number set to 2224669177 [ 444.053204][T14518] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.082059][T14518] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.122017][T17185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.137774][T17185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.165932][T17185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.178389][T17318] ip6_vti0 speed is unknown, defaulting to 1000 [ 444.372300][T14518] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.438219][T14518] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.531713][T17185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.539111][T17185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.679937][T17185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.813876][T14518] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.852531][T14518] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.099469][T17185] hsr_slave_0: entered promiscuous mode [ 445.106495][T17185] hsr_slave_1: entered promiscuous mode [ 445.140353][T17185] debugfs: 'hsr0' already exists in 'hsr' [ 445.146173][T17185] Cannot create hsr debugfs directory [ 445.229425][T17318] ip6_vti0 speed is unknown, defaulting to 1000 [ 445.275046][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.953802][T17464] __nla_validate_parse: 2 callbacks suppressed [ 445.953826][T17464] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3147'. [ 446.039203][T17459] team0: Port device dummy0 removed [ 446.226633][T17318] ip6_vti0 speed is unknown, defaulting to 1000 [ 446.373364][T17479] Bluetooth: MGMT ver 1.23 [ 446.686914][T17490] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3152'. [ 447.396078][T14518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.407762][T14518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.419141][T14518] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 447.432125][T14518] bond0 (unregistering): Released all slaves [ 447.455205][T14518] bond1 (unregistering): Released all slaves [ 447.471526][T14518] bond2 (unregistering): Released all slaves [ 447.487810][T14518] bond3 (unregistering): (slave veth5): Releasing active interface [ 447.507033][T14518] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 447.519130][T14518] bond3 (unregistering): Released all slaves [ 447.533706][T14518] bond4 (unregistering): Released all slaves [ 447.552475][T14518] bond5 (unregistering): Released all slaves [ 447.669553][T14518] bond6 (unregistering): Released all slaves [ 447.685354][T14518] bond7 (unregistering): Released all slaves [ 447.700656][T14518] bond8 (unregistering): Released all slaves [ 447.715456][T14518] bond9 (unregistering): Released all slaves [ 447.732484][T14518] bond10 (unregistering): Released all slaves [ 447.793982][T17481] bridge0: port 3(batadv2) entered blocking state [ 447.820080][T17481] bridge0: port 3(batadv2) entered disabled state [ 447.826759][T17481] batadv2: entered allmulticast mode [ 447.864392][T17481] batadv2: entered promiscuous mode [ 447.875233][T17318] ip6_vti0 speed is unknown, defaulting to 1000 [ 447.962136][T14518] tipc: Disabling bearer [ 447.967379][T14518] tipc: Disabling bearer [ 448.044408][T14518] tipc: Left network mode [ 448.289699][ T1091] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 448.300332][ T1091] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 448.325145][T17513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3157'. [ 448.548447][T17519] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3158'. [ 448.611806][T17527] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3158'. [ 448.900239][T17318] ip6_vti0 speed is unknown, defaulting to 1000 [ 448.912715][T17536] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3160'. [ 448.925780][T17535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3161'. [ 449.438936][T17553] netlink: 'syz.3.3163': attribute type 16 has an invalid length. [ 449.508295][T17553] netlink: 'syz.3.3163': attribute type 17 has an invalid length. [ 449.578464][T17543] syzkaller0: entered promiscuous mode [ 449.588192][T17543] syzkaller0: entered allmulticast mode [ 449.723697][T17553] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 449.812136][T17565] IPv6: sit1: Disabled Multicast RS [ 452.259454][T17318] ip6_vti0 speed is unknown, defaulting to 1000 [ 452.275121][T17596] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 452.437083][T17185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 452.531422][T17633] netlink: 'syz.1.3172': attribute type 21 has an invalid length. [ 452.545894][T17627] dvmrp0: entered allmulticast mode [ 452.558428][T17185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 452.609885][T17636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3172'. [ 452.662115][T17633] bond2: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 452.689076][T17633] bond2 (unregistering): Released all slaves [ 452.723812][T17185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 452.771564][T17185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 452.883830][T17645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3173'. [ 452.902122][T17645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3173'. [ 452.922382][T17645] netlink: 'syz.3.3173': attribute type 3 has an invalid length. [ 452.953296][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.962193][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.997470][T17648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.006441][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.057005][T17650] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3175'. [ 453.162372][T17648] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3173'. [ 453.173437][T17648] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3173'. [ 453.316305][T17661] Bluetooth: MGMT ver 1.23 [ 453.338486][T14518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.369413][T14518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.512221][T14518] veth1_macvtap: left promiscuous mode [ 453.519050][T14518] veth0_macvtap: left promiscuous mode [ 453.560799][T14518] veth1_vlan: left promiscuous mode [ 453.596980][ T1152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.606233][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.760751][T17678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3181'. [ 454.328131][T14518] team0 (unregistering): Port device team_slave_1 removed [ 454.381005][T14518] team0 (unregistering): Port device team_slave_0 removed [ 454.890681][T17667] syzkaller1: entered promiscuous mode [ 454.896253][T17667] syzkaller1: entered allmulticast mode [ 455.088342][T17695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3185'. [ 455.272674][T17701] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3187'. [ 455.304012][T17701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3187'. [ 455.317055][T17185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.389026][T17185] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.427703][ T6787] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.434960][ T6787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.499580][ T6787] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.506797][ T6787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.556816][T17713] netlink: 'syz.3.3190': attribute type 2 has an invalid length. [ 455.576412][T17713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.585574][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.631299][T17713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.640115][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.659493][T17713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.668184][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.925885][T17725] syz_tun (unregistering): left allmulticast mode [ 456.019028][T14518] IPVS: stop unused estimator thread 0... [ 456.336909][T17755] netlink: 'syz.1.3196': attribute type 17 has an invalid length. [ 456.431218][T17755] erspan0: entered promiscuous mode [ 456.479082][T17755] erspan0: left promiscuous mode [ 456.508707][T17757] bridge_slave_0: left allmulticast mode [ 456.515582][T17757] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.528528][T17757] bridge_slave_1: left allmulticast mode [ 456.555216][T17757] bridge_slave_1: left promiscuous mode [ 456.562880][T17757] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.612302][T17757] team0: Port device team_slave_0 removed [ 456.638308][T17757] team0: Port device team_slave_1 removed [ 456.648045][T17757] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 456.680309][T17764] tipc: Enabled bearer , priority 0 [ 456.722573][T17770] syzkaller0: entered promiscuous mode [ 456.732329][T17770] syzkaller0: entered allmulticast mode [ 456.755997][T17185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.830502][T17763] tipc: Resetting bearer [ 456.881086][T17761] tipc: Resetting bearer [ 456.902307][T17761] tipc: Disabling bearer [ 457.026997][T17185] veth0_vlan: entered promiscuous mode [ 457.073915][T17777] bond8: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 457.093164][T17777] bond8 (unregistering): Released all slaves [ 457.146210][T17185] veth1_vlan: entered promiscuous mode [ 457.228211][T17185] veth0_macvtap: entered promiscuous mode [ 457.282059][T17185] veth1_macvtap: entered promiscuous mode [ 457.318269][T17185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.346041][T17185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.400745][ T3500] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.452495][ T3500] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.494800][ T3500] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.547364][ T3500] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.586915][T17800] veth1_macvtap: left promiscuous mode [ 457.914562][ T3500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.951944][ T3500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.049714][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.070333][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.302473][T17831] sit3: entered promiscuous mode [ 458.307634][T17831] sit3: entered allmulticast mode [ 458.358722][T17838] __nla_validate_parse: 9 callbacks suppressed [ 458.358746][T17838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3221'. [ 458.406966][T17831] netlink: 'syz.2.3220': attribute type 15 has an invalid length. [ 458.438688][T17832] netlink: 'syz.2.3220': attribute type 15 has an invalid length. [ 458.487516][T17832] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3220'. [ 458.552402][T17831] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3220'. [ 458.713942][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.722470][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.835205][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 458.846475][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 458.874610][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 458.900244][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 458.908402][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 459.135515][T17863] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3224'. [ 459.160095][T17856] ip6_vti0 speed is unknown, defaulting to 1000 [ 459.193277][T17865] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3224'. [ 459.359701][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.459854][T17881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3226'. [ 459.704247][ T5495] veth1_macvtap: entered promiscuous mode [ 459.790232][T17892] xt_addrtype: ipv6 does not support BROADCAST matching [ 459.857598][T17896] netlink: 'syz.4.3231': attribute type 1 has an invalid length. [ 459.933083][T17901] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3233'. [ 460.032404][T17902] bond1: (slave geneve2): making interface the new active one [ 460.064858][T17902] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 460.098296][ T13] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 460.127939][ T13] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 460.165585][ T13] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 460.212608][ T13] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 460.406004][T17919] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3236'. [ 460.548493][T17924] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3237'. [ 460.882896][T17937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3239'. [ 460.960839][ T5847] Bluetooth: hci4: command tx timeout [ 461.102749][T17937] 8021q: adding VLAN 0 to HW filter on device bond10 [ 461.189133][T17941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.224932][T17941] bond10: (slave bond0): Enslaving as an active interface with an up link [ 461.266855][T17856] chnl_net:caif_netlink_parms(): no params data found [ 461.706585][T17937] bond10 (unregistering): (slave bond0): Releasing backup interface [ 461.734249][T17937] bond10 (unregistering): Released all slaves [ 462.259133][T17980] bond2: Removing last arp target with arp_interval on [ 462.317726][T17995] net_ratelimit: 1 callbacks suppressed [ 462.317746][T17995] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 462.451291][T17856] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.461270][T17856] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.481193][T17856] bridge_slave_0: entered allmulticast mode [ 462.496658][T17856] bridge_slave_0: entered promiscuous mode [ 462.515263][T17856] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.524458][T17856] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.534518][T17856] bridge_slave_1: entered allmulticast mode [ 462.543420][T17856] bridge_slave_1: entered promiscuous mode [ 462.666711][T17856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.696099][T17856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.846911][T17856] team0: Port device team_slave_0 added [ 462.886527][T17856] team0: Port device team_slave_1 added [ 463.030363][ T5847] Bluetooth: hci4: command tx timeout [ 463.131608][T17856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.162121][T17856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.255387][T17856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.349865][T17856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.368265][T17856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.462584][T17856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.760486][T17856] hsr_slave_0: entered promiscuous mode [ 463.762296][T18053] sctp: [Deprecated]: syz.2.3262 (pid 18053) Use of int in maxseg socket option. [ 463.762296][T18053] Use struct sctp_assoc_value instead [ 463.780530][T17856] hsr_slave_1: entered promiscuous mode [ 463.782751][T17856] debugfs: 'hsr0' already exists in 'hsr' [ 463.803594][T18059] netlink: 'syz.0.3263': attribute type 13 has an invalid length. [ 463.812299][T17856] Cannot create hsr debugfs directory [ 464.124370][T18071] openvswitch: netlink: IP tunnel dst address not specified [ 464.138381][T18074] __nla_validate_parse: 69 callbacks suppressed [ 464.138402][T18074] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3268'. [ 464.161972][T18069] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 464.176449][T18069] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 464.440379][T18086] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3271'. [ 464.471288][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.479764][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.491426][T18086] gretap0: entered promiscuous mode [ 464.688879][T17856] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.886279][T17856] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.040016][T18118] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3279'. [ 465.085225][T17856] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.114106][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.122750][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.132776][ T5847] Bluetooth: hci4: command tx timeout [ 465.276660][T17856] batman_adv: batadv0: Removing interface: netdevsim0 [ 465.287584][T17856] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.604818][T18142] netlink: 'syz.0.3284': attribute type 39 has an invalid length. [ 465.692544][T18148] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3286'. [ 465.720830][T18148] netlink: 'syz.4.3286': attribute type 13 has an invalid length. [ 465.734963][T18148] netlink: 'syz.4.3286': attribute type 10 has an invalid length. [ 465.774300][T18148] team0: Device veth1_macvtap failed to register rx_handler [ 465.788082][T18151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3286'. [ 465.816032][T18151] ksmbd: Unknown IPC event: 0, ignore. [ 465.966468][T17856] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 466.068225][T17856] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 466.146709][T17856] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 466.186284][T18175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.227528][T17856] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 466.317212][T18178] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3288'. [ 467.045829][T18218] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3295'. [ 467.071960][T18218] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3295'. [ 467.111246][ T30] audit: type=1800 audit(1768773601.247:6): pid=18223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3296" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=339 res=0 errno=0 [ 467.190201][ T5847] Bluetooth: hci4: command tx timeout [ 467.312576][T18231] netlink: 'syz.0.3298': attribute type 39 has an invalid length. [ 467.321086][T17856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.365416][T18234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3299'. [ 467.399578][T18234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3299'. [ 467.414082][T17856] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.457180][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.464498][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.561884][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.569515][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.820524][T18253] openvswitch: netlink: Multiple metadata blocks provided [ 467.908829][T18259] netlink: 'syz.1.3306': attribute type 1 has an invalid length. [ 468.044988][T18266] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.087613][T18266] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.364774][T18281] netlink: 'syz.4.3308': attribute type 1 has an invalid length. [ 468.412539][T18266] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.464062][T18266] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.611608][T18266] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.622569][T18266] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.704299][T17856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.897347][T18266] netdevsim netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.920877][T18266] netdevsim netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.961958][T18311] vxcan2: entered allmulticast mode [ 469.085546][ T148] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.102912][ T148] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.154554][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.164671][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.182473][T18319] __nla_validate_parse: 7 callbacks suppressed [ 469.182493][T18319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3319'. [ 469.214367][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.223469][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.241651][T18323] 8021q: VLANs not supported on sit0 [ 469.251730][T17856] veth0_vlan: entered promiscuous mode [ 469.288297][ T994] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.297772][ T994] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.337642][T17856] veth1_vlan: entered promiscuous mode [ 469.424220][T17856] veth0_macvtap: entered promiscuous mode [ 469.494516][T17856] veth1_macvtap: entered promiscuous mode [ 469.510678][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.519149][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.562970][T17856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.617923][T17856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.683636][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.721023][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.749097][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.778677][ T994] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.841151][ T5847] Bluetooth: hci4: command tx timeout [ 470.036191][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.054488][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.175655][T18345] ip6_vti0 speed is unknown, defaulting to 1000 [ 470.210685][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.218796][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.273980][T18356] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3328'. [ 470.648639][T18372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3331'. [ 470.873642][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.882373][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.387753][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 471.398812][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 471.414163][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 471.437092][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 471.447338][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 471.663995][T18386] ip6_vti0 speed is unknown, defaulting to 1000 [ 471.842796][T18399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3338'. [ 471.868839][T18403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3339'. [ 471.889913][T18403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3339'. [ 472.132254][T18409] xt_HMARK: spi-set and port-set can't be combined [ 472.310185][T18412] netlink: 'syz.0.3342': attribute type 10 has an invalid length. [ 472.318084][T18412] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 472.497534][T18419] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3344'. [ 473.046352][T18442] netlink: 'syz.4.3349': attribute type 12 has an invalid length. [ 473.144777][T18442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.235667][T18442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.288719][T18448] erspan0: entered promiscuous mode [ 473.302004][T18448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3349'. [ 473.343431][T18450] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3351'. [ 473.509566][ T52] Bluetooth: hci2: command tx timeout [ 473.746426][T18386] chnl_net:caif_netlink_parms(): no params data found [ 474.078366][T18489] openvswitch: netlink: Key type 31 is not supported [ 474.366338][T18386] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.409691][T18386] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.433541][T18507] openvswitch: netlink: IP tunnel dst address not specified [ 474.450426][T18386] bridge_slave_0: entered allmulticast mode [ 474.471603][T18386] bridge_slave_0: entered promiscuous mode [ 474.501246][T18386] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.516381][T18386] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.529978][T18386] bridge_slave_1: entered allmulticast mode [ 474.547034][T18386] bridge_slave_1: entered promiscuous mode [ 474.582046][T18516] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3365'. [ 474.675866][T18524] Cannot find add_set index 2 as target [ 474.714679][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.723614][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.812416][T18386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.863449][T18386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.910113][T18530] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3370'. [ 474.936328][T18530] openvswitch: netlink: Flow key attr not present in new flow. [ 475.084896][T18530] netlink: 332 bytes leftover after parsing attributes in process `syz.3.3370'. [ 475.136377][T18540] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 475.152350][T18386] team0: Port device team_slave_0 added [ 475.182638][T18386] team0: Port device team_slave_1 added [ 475.325027][T18386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.355750][T18386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.388066][T18556] netlink: 'syz.0.3374': attribute type 5 has an invalid length. [ 475.396692][T18386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.410690][T18386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.418014][T18386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.454479][T18386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.592589][ T52] Bluetooth: hci2: command tx timeout [ 475.613074][T18553] syzkaller0: entered promiscuous mode [ 475.618853][T18553] syzkaller0: entered allmulticast mode [ 475.766072][T18569] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3380'. [ 476.630980][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.640035][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.681042][ T52] Bluetooth: hci2: command tx timeout [ 477.824066][T18386] hsr_slave_0: entered promiscuous mode [ 477.841775][T18386] hsr_slave_1: entered promiscuous mode [ 477.848282][T18386] debugfs: 'hsr0' already exists in 'hsr' [ 477.870270][T18386] Cannot create hsr debugfs directory [ 477.940275][T18590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3386'. [ 477.970574][T18590] netlink: 'syz.1.3386': attribute type 7 has an invalid length. [ 477.985012][T18590] netlink: 'syz.1.3386': attribute type 8 has an invalid length. [ 477.995171][T18590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3386'. [ 478.016390][T18594] netlink: 'syz.3.3388': attribute type 23 has an invalid length. [ 478.391965][T18608] bond0: option ad_select: unable to set because the bond device is up [ 478.414688][T18607] ip6_vti0 speed is unknown, defaulting to 1000 [ 478.656447][T18622] netlink: 408 bytes leftover after parsing attributes in process `syz.1.3395'. [ 478.669121][T18386] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.694800][T18386] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.799061][T18386] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.828714][T18386] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.937709][T18628] bond1: ARP target 1.0.0.0 is already present [ 478.945805][T18628] bond1: option arp_ip_target: invalid value (1) [ 478.970801][T18628] bond1 (unregistering): Released all slaves [ 479.101693][T18386] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.112102][ T5836] IPVS: starting estimator thread 0... [ 479.149762][T18386] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.229657][T18639] IPVS: using max 28 ests per chain, 67200 per kthread [ 479.238606][T18646] netlink: 'syz.3.3402': attribute type 1 has an invalid length. [ 479.384204][T18635] bond2: option mode: invalid value (133) [ 479.417100][T18635] bond2 (unregistering): Released all slaves [ 479.498648][T18386] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.519517][T18386] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.749902][T14518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.750010][ T52] Bluetooth: hci2: command tx timeout [ 479.758809][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.126742][T18659] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 480.161937][T18660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3406'. [ 480.184557][T18659] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 480.222943][T18667] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3407'. [ 480.426148][T18671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 480.443877][T18386] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 480.485705][T18386] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 480.517034][T18386] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 481.799550][T18386] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 481.847609][T18681] s5: renamed from vlan1 (while UP) [ 481.865253][T18682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3412'. [ 481.899979][T18681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3412'. [ 481.928245][T18681] team0: Cannot enslave team device to itself [ 482.037871][T18693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3414'. [ 482.057662][T18693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3414'. [ 482.141130][T18386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.155260][T18699] netlink: zone id is out of range [ 482.173206][T18699] netlink: zone id is out of range [ 482.178497][T18699] netlink: zone id is out of range [ 482.205184][T18386] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.225231][T18699] netlink: zone id is out of range [ 482.233916][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.241174][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.253994][T18699] netlink: zone id is out of range [ 482.254485][T18707] netlink: zone id is out of range [ 482.267162][T18707] netlink: zone id is out of range [ 482.294419][ T994] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.301783][ T994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.468255][T18386] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 483.032312][T18386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.217801][T18386] veth0_vlan: entered promiscuous mode [ 483.252021][T18386] veth1_vlan: entered promiscuous mode [ 483.466669][T18386] veth0_macvtap: entered promiscuous mode [ 483.550156][T18386] veth1_macvtap: entered promiscuous mode [ 483.592337][T18777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3434'. [ 483.605849][T18779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3434'. [ 483.707273][T18386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.745160][T18783] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 483.811690][T18386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.843000][T18790] netlink: 'syz.1.3437': attribute type 64 has an invalid length. [ 483.857527][T18795] netlink: 'syz.1.3437': attribute type 64 has an invalid length. [ 483.871535][T18790] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3437'. [ 483.883836][T18795] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3437'. [ 483.908322][T14518] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.930051][T14518] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.955893][T14518] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.985378][T14518] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.088096][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.108644][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.182282][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.198205][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.316448][T18809] netlink: 'syz.2.3334': attribute type 33 has an invalid length. [ 484.422161][T18812] syzkaller0: entered promiscuous mode [ 484.428155][T18812] syzkaller0: entered allmulticast mode [ 484.465144][T18811] tipc: Started in network mode [ 484.471409][T18811] tipc: Node identity 624ae6a70eb, cluster identity 4711 [ 484.479157][T18811] tipc: Enabled bearer , priority 0 [ 484.540185][T18811] tipc: Resetting bearer [ 484.574679][T18811] tipc: Disabling bearer [ 485.114208][ T3500] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.184642][ T3500] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.230203][ T3500] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.253322][ T3500] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.597428][ T1109] net_ratelimit: 50 callbacks suppressed [ 485.597483][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.612078][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.466940][T18919] __nla_validate_parse: 6 callbacks suppressed [ 486.466960][T18919] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3475'. [ 486.497226][ T43] IPVS: starting estimator thread 0... [ 486.508002][T18919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3475'. [ 486.517758][T18920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3476'. [ 486.589465][T18924] IPVS: using max 28 ests per chain, 67200 per kthread [ 486.691068][T18930] IPVS: set_ctl: invalid protocol: 47 100.1.1.0:20000 [ 487.197442][T18962] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3494'. [ 487.286816][T18964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3496'. [ 487.388983][ T43] ip6_vti0 speed is unknown, defaulting to 1000 [ 487.402191][T18964] netlink: 'syz.1.3496': attribute type 1 has an invalid length. [ 487.414443][T18977] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.423315][T18977] netlink: 'syz.4.3498': attribute type 1 has an invalid length. [ 487.434083][T18964] netlink: 'syz.1.3496': attribute type 3 has an invalid length. [ 487.451044][T18964] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3496'. [ 487.476357][T18964] NCSI netlink: No device for ifindex 813332851 [ 487.485659][T18979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3499'. [ 487.571262][T18983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3500'. [ 487.584487][T18983] netlink: 'syz.4.3500': attribute type 39 has an invalid length. [ 487.995523][T19005] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3507'. [ 488.010610][T19005] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3507'. [ 488.153346][T14641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.163216][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.202324][T19008] openvswitch: netlink: IP tunnel dst address not specified [ 488.210896][ T43] IPVS: starting estimator thread 0... [ 488.299398][T19011] IPVS: using max 37 ests per chain, 88800 per kthread [ 488.450966][T19021] netlink: 'syz.3.3513': attribute type 10 has an invalid length. [ 488.484652][T19021] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 488.522436][T19024] netlink: 'syz.4.3514': attribute type 10 has an invalid length. [ 488.547802][T19024] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 488.679781][T19029] wireguard0: entered promiscuous mode [ 488.695306][T19029] wireguard0: entered allmulticast mode [ 488.732997][T19029] team0: Device wireguard0 is of different type [ 488.757907][T19033] netlink: 'syz.0.3517': attribute type 1 has an invalid length. [ 488.825594][T19033] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 488.970212][T19041] nbd: must specify a size in bytes for the device [ 489.014582][T19042] nbd: must specify a size in bytes for the device [ 489.184488][T19047] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 489.214538][T19047] only policy match revision 0 supported [ 489.214561][T19047] unable to load match [ 489.504295][T19062] netlink: 'syz.3.3526': attribute type 11 has an invalid length. [ 489.513364][ T52] Bluetooth: hci2: command tx timeout [ 490.714139][T19128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 490.793167][T19131] netlink: 'syz.2.3547': attribute type 1 has an invalid length. [ 490.812488][T19132] netlink: 'syz.2.3547': attribute type 1 has an invalid length. [ 491.071027][T19146] netlink: 'syz.0.3553': attribute type 1 has an invalid length. [ 491.188761][T19153] netlink: 'syz.3.3552': attribute type 39 has an invalid length. [ 491.269178][T19156] netlink: 'syz.2.3556': attribute type 1 has an invalid length. [ 491.331357][T19159] vcan0: entered allmulticast mode [ 491.365780][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.374772][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.978679][T19182] __nla_validate_parse: 15 callbacks suppressed [ 491.978702][T19182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3561'. [ 492.403064][ T12] bond0 (unregistering): Released all slaves [ 492.418147][ T12] bond1 (unregistering): Released all slaves [ 492.539481][ T12] bond2 (unregistering): Released all slaves [ 492.675409][ T12] bond3 (unregistering): Released all slaves [ 492.694430][ T12] bond4 (unregistering): Released all slaves [ 492.712122][ T12] bond5 (unregistering): Released all slaves [ 492.880867][ T12] bond6 (unregistering): Released all slaves [ 492.899865][ T12] bond7 (unregistering): Released all slaves [ 493.034923][ T12] bond8 (unregistering): Released all slaves [ 493.059494][T19169] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3559'. [ 493.268670][T19200] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 493.301647][ T12] 9: left promiscuous mode [ 493.530308][ T12] tipc: Disabling bearer [ 493.564729][ T12] tipc: Left network mode [ 493.586125][T19219] netlink: 'syz.1.3570': attribute type 1 has an invalid length. [ 493.754730][ T12] IPVS: stopping master sync thread 14132 ... [ 493.791558][T19219] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 493.829265][T19227] gretap0: entered promiscuous mode [ 493.899731][T19227] vlan2: entered promiscuous mode [ 493.913301][ T3500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.921801][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.941842][T19237] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3574'. [ 494.072433][T19244] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3574'. [ 494.814895][T19273] tipc: Started in network mode [ 494.823698][T19273] tipc: Node identity ac14140f, cluster identity 4711 [ 494.843173][T19273] tipc: New replicast peer: 255.255.255.255 [ 494.866703][T19273] tipc: Enabled bearer , priority 10 [ 495.048813][T19286] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3585'. [ 495.139001][T19288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3587'. [ 495.197457][T19288] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3587'. [ 495.302917][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.306201][T19288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3587'. [ 495.325669][T19291] openvswitch: netlink: IP tunnel dst address not specified [ 495.356167][T19288] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3587'. [ 495.410705][ T12] veth1_macvtap: left promiscuous mode [ 495.416592][ T12] veth1_vlan: left promiscuous mode [ 495.446344][T19299] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3591'. [ 495.583213][T19306] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 495.592017][T19306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.515527][ T12] smc: removing net device team0 with user defined pnetid SYZ2 [ 496.558016][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.567162][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.579166][T19299] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 496.581896][T19304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 496.630548][ T9178] tipc: Node number set to 2886997007 [ 496.638254][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.819772][T19322] netlink: 'syz.1.3600': attribute type 10 has an invalid length. [ 497.061949][T19338] netlink: 'syz.1.3604': attribute type 1 has an invalid length. [ 497.071965][T19338] netlink: 'syz.1.3604': attribute type 4 has an invalid length. [ 497.081310][T19338] __nla_validate_parse: 10 callbacks suppressed [ 497.081330][T19338] netlink: 9422 bytes leftover after parsing attributes in process `syz.1.3604'. [ 497.113472][T14518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.122378][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.398603][T19354] netlink: 'syz.2.3611': attribute type 1 has an invalid length. [ 497.494968][T19360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3609'. [ 497.548206][ T12] IPVS: stop unused estimator thread 0... [ 497.630963][T19363] 8021q: adding VLAN 0 to HW filter on device bond2 [ 497.657253][T19363] bond1: (slave bond2): making interface the new active one [ 497.686883][T19376] nbd: must specify an index to disconnect [ 497.705918][T19363] bond1: (slave bond2): Enslaving as an active interface with an up link [ 497.722757][T19376] netlink: 'syz.0.3613': attribute type 21 has an invalid length. [ 497.770640][T19354] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 497.786935][T19354] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 497.877153][T19376] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 497.891495][T19376] bond1 (unregistering): Released all slaves [ 498.040271][T19387] lo: entered promiscuous mode [ 498.063663][T19387] netlink: 'syz.2.3619': attribute type 2 has an invalid length. [ 498.077368][T19387] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 498.105536][T19395] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 498.160349][T19387] dvmrp6: entered allmulticast mode [ 498.224241][T19400] syzkaller1: entered promiscuous mode [ 498.230451][T19400] syzkaller1: entered allmulticast mode [ 498.241216][T19400] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3622'. [ 498.575084][T19426] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3627'. [ 498.632570][T19430] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 498.865116][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3630'. [ 498.888646][T19438] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3630'. [ 498.898844][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3630'. [ 498.911780][T19438] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3630'. [ 498.925130][T19442] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3631'. [ 499.031143][ T6787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.039890][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.161114][T19450] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3635'. [ 499.428085][T19467] netlink: 'syz.0.3641': attribute type 1 has an invalid length. [ 499.475583][T19473] netlink: 'syz.1.3643': attribute type 1 has an invalid length. [ 499.520399][T19470] netem: change failed [ 499.751187][T19479] bond3: (slave bridge2): making interface the new active one [ 499.904836][T19479] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 500.581156][T19467] veth5: entered promiscuous mode [ 500.751030][T19467] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 501.490410][T19489] sit1: entered promiscuous mode [ 501.503639][T19489] sit1: entered allmulticast mode [ 501.827304][T19511] chnl_net:caif_netlink_parms(): no params data found [ 502.138563][T19529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.218396][T19534] xt_CT: You must specify a L4 protocol and not use inversions on it [ 502.248851][T19537] syzkaller0: entered promiscuous mode [ 502.280766][T19537] syzkaller0: entered allmulticast mode [ 502.420303][T19545] netlink: 'syz.4.3662': attribute type 21 has an invalid length. [ 502.494281][T19544] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 502.531968][T19544] bond2 (unregistering): Released all slaves [ 502.617128][T19545] __nla_validate_parse: 3 callbacks suppressed [ 502.617148][T19545] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3662'. [ 502.674729][T19552] tunl0: entered promiscuous mode [ 502.684252][T19552] netlink: 'syz.3.3664': attribute type 3 has an invalid length. [ 502.703515][T19552] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3664'. [ 502.744229][T19561] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3664'. [ 502.875267][T14518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.883979][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.892925][T19569] netlink: 'syz.4.3667': attribute type 1 has an invalid length. [ 502.961080][T19569] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 503.003465][T19576] netlink: 'syz.1.3670': attribute type 1 has an invalid length. [ 503.034365][T19578] netlink: zone id is out of range [ 503.047549][T19578] netlink: del zone limit has 4 unknown bytes [ 503.121531][T19576] 8021q: adding VLAN 0 to HW filter on device bond4 [ 503.173309][T19585] macvlan2: entered promiscuous mode [ 503.179478][T19585] macvlan2: entered allmulticast mode [ 503.186438][T19585] bond4: entered allmulticast mode [ 503.192257][T19585] bond4: entered promiscuous mode [ 503.198419][T19585] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 503.208425][T19585] team0: Port device macvlan2 added [ 503.327197][T19592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3674'. [ 503.376885][T19592] vcan0 (unregistering): left allmulticast mode [ 503.766243][T19621] can: request_module (can-proto-0) failed. [ 503.897439][T19631] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 503.984730][T19636] netlink: 'syz.1.3684': attribute type 1 has an invalid length. [ 504.055845][T19639] netlink: 'syz.0.3686': attribute type 1 has an invalid length. [ 504.065950][T19639] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3686'. [ 504.104478][T19639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3686'. [ 504.158867][ T148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.167921][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.270837][T19645] tipc: Enabling not permitted [ 504.276761][T19645] tipc: Enabling of bearer rejected, failed to enable media [ 504.618609][T19666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3694'. [ 504.675088][T19666] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3694'. [ 504.687841][T19666] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 504.719453][T19666] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 504.728217][T19666] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 504.798378][T19680] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3698'. [ 504.814595][T19669] xt_ipcomp: unknown flags 1D [ 504.851756][T19683] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3699'. [ 505.036446][T19688] netlink: 'syz.1.3702': attribute type 16 has an invalid length. [ 505.063893][T19688] netlink: 'syz.1.3702': attribute type 17 has an invalid length. [ 505.108426][T19688] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 505.501649][T19707] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 506.950568][T19770] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 507.323489][T19793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.370809][T19799] xt_CT: You must specify a L4 protocol and not use inversions on it [ 507.372843][T19798] xt_CT: You must specify a L4 protocol and not use inversions on it [ 507.971551][T19822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.004799][T19822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.218522][T19822] bond4: left allmulticast mode [ 508.224206][T19822] bond4: left promiscuous mode [ 508.237976][T19836] veth0: entered promiscuous mode [ 508.256781][ T3500] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.287547][ T3500] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.302461][ T3500] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.315350][ T3500] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.347127][T19835] veth0: left promiscuous mode [ 508.502292][T19854] __nla_validate_parse: 8 callbacks suppressed [ 508.502313][T19854] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3746'. [ 508.535105][T19845] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 508.545921][T19855] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3747'. [ 508.578900][T19858] netlink: 'syz.1.3749': attribute type 10 has an invalid length. [ 508.623471][T19854] openvswitch: netlink: Message has 592 unknown bytes. [ 508.630719][T19854] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.633900][T14518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.640677][T19858] bridge_slave_1: left allmulticast mode [ 508.648897][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.679051][T19858] bridge_slave_1: left promiscuous mode [ 508.721842][T19858] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.772537][T19858] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 508.842723][T19867] openvswitch: netlink: EtherType 50a is less than min 600 [ 508.921592][T19863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3750'. [ 508.966862][T19877] openvswitch: netlink: EtherType 0 is less than min 600 [ 508.975078][T19878] netlink: 'syz.4.3754': attribute type 1 has an invalid length. [ 509.021828][T19881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3756'. [ 509.069515][T19885] netlink: 'syz.0.3755': attribute type 13 has an invalid length. [ 509.077684][T19885] netlink: 'syz.0.3755': attribute type 17 has an invalid length. [ 509.185310][T19863] bond0: (slave bond_slave_1): Releasing backup interface [ 509.288596][T19897] netlink: zone id is out of range [ 509.301869][T19897] netlink: zone id is out of range [ 509.307777][T19897] netlink: zone id is out of range [ 509.319015][T19897] netlink: zone id is out of range [ 509.604006][T19912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3762'. [ 509.787940][T19923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3767'. [ 509.964071][T19933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3770'. [ 509.973431][T19933] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3770'. [ 509.985230][T19933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3770'. [ 509.994861][T19933] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3770'. [ 510.228096][T19943] bond0: (slave veth1_to_hsr): Error: Device can not be enslaved while up [ 510.327211][T19945] netlink: 'syz.4.3775': attribute type 1 has an invalid length. [ 510.415547][T19945] bond2: entered promiscuous mode [ 510.427541][T19945] bond2: entered allmulticast mode [ 510.725978][T19968] bridge4: port 1(veth0_to_bond) entered blocking state [ 510.740173][T19968] bridge4: port 1(veth0_to_bond) entered disabled state [ 510.747681][T19968] veth0_to_bond: entered allmulticast mode [ 510.776586][T19968] veth0_to_bond: entered promiscuous mode [ 511.424316][T20004] netlink: 'syz.1.3792': attribute type 10 has an invalid length. [ 511.977172][T20053] netlink: 'syz.4.3806': attribute type 10 has an invalid length. [ 511.998080][T20053] team0: Port device dummy0 added [ 512.093229][T20055] netlink: 'syz.1.3807': attribute type 1 has an invalid length. [ 512.674262][T20079] erspan0: entered allmulticast mode [ 512.811650][T20084] netlink: 'syz.2.3817': attribute type 1 has an invalid length. [ 512.831139][T20084] netlink: 'syz.2.3817': attribute type 11 has an invalid length. [ 513.520038][T20116] __nla_validate_parse: 16 callbacks suppressed [ 513.520060][T20116] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3826'. [ 513.744429][T20119] bond1 (unregistering): Released all slaves [ 513.981054][T19684] udevd[19684]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 514.402210][ T994] net_ratelimit: 12 callbacks suppressed [ 514.402233][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.416646][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.553500][T20154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3835'. [ 514.633402][T20171] validate_nla: 1 callbacks suppressed [ 514.633424][T20171] netlink: 'syz.2.3839': attribute type 19 has an invalid length. [ 514.659025][T20173] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 514.672923][T20166] IPVS: stopping master sync thread 20173 ... [ 514.709076][T20166] xt_socket: unknown flags 0x50 [ 514.908473][T20184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3843'. [ 514.937069][T20183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3843'. [ 515.032022][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.040744][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.257640][T20184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.384764][T20191] netlink: 404 bytes leftover after parsing attributes in process `syz.1.3843'. [ 515.422626][T20184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3843'. [ 515.423808][T20191] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3843'. [ 515.472676][T20191] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3843'. [ 515.483259][T20191] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3843'. [ 515.494092][T20184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3843'. [ 515.605866][T20210] xt_CT: You must specify a L4 protocol and not use inversions on it [ 515.944831][T20234] netlink: 'syz.4.3855': attribute type 10 has an invalid length. [ 515.954851][T20234] dummy0: entered promiscuous mode [ 515.988080][T20234] team0: Port device dummy0 removed [ 516.000795][T20234] bridge0: port 3(dummy0) entered blocking state [ 516.010501][T20234] bridge0: port 3(dummy0) entered disabled state [ 516.017165][T20234] dummy0: entered allmulticast mode [ 516.050707][T20238] gre0: entered promiscuous mode [ 516.304729][T20252] batadv_slave_1: entered promiscuous mode [ 516.420460][T20261] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 516.754482][T20245] batadv_slave_1: left promiscuous mode [ 516.789450][T20266] netlink: 'syz.0.3866': attribute type 29 has an invalid length. [ 516.813754][T20267] netlink: 'syz.0.3866': attribute type 29 has an invalid length. [ 516.921994][T20272] netlink: 'syz.1.3868': attribute type 4 has an invalid length. [ 516.949587][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.958163][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.966517][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.976213][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.985119][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.987922][T20272] netlink: 'syz.1.3868': attribute type 4 has an invalid length. [ 517.761520][T20312] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20004 [ 518.240835][T20340] netlink: 'syz.3.3890': attribute type 2 has an invalid length. [ 518.310865][T20340] 9: entered promiscuous mode [ 518.558237][T20355] __nla_validate_parse: 102 callbacks suppressed [ 518.558266][T20355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3895'. [ 519.005855][T20380] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3902'. [ 519.030224][ T5835] Bluetooth: hci5: command 0x0406 tx timeout [ 519.669611][T20421] net_ratelimit: 3 callbacks suppressed [ 519.669635][T20421] openvswitch: netlink: Missing key (keys=40, expected=80) [ 519.818968][T20421] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 519.860671][T20430] netlink: 'syz.4.3915': attribute type 10 has an invalid length. [ 520.063754][T20446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3921'. [ 520.083278][T20446] openvswitch: netlink: Missing key (keys=40, expected=80) [ 520.156372][ T1091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.165219][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.627995][T20471] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.661797][T20471] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.754508][T20475] netlink: 'syz.3.3930': attribute type 4 has an invalid length. [ 520.794871][ T3651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.803448][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.091540][T20485] 8021q: adding VLAN 0 to HW filter on device bond4 [ 521.500242][T20505] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 521.580295][T20512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3938'. [ 521.996813][T20536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3946'. [ 522.116969][T20543] xfrm1: entered allmulticast mode [ 522.154045][T20536] ip6_vti0 speed is unknown, defaulting to 1000 [ 522.435463][T20559] bond0: (slave gre0): Error: Device type is different from other slaves [ 522.459010][T20557] nbd: must specify an index to disconnect [ 522.494301][T20559] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 522.661868][ T52] Bluetooth: hci2: link tx timeout [ 522.669074][ T52] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 522.681781][T20571] Bluetooth: hci2: link tx timeout [ 522.687182][T20571] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 522.696029][T20571] Bluetooth: hci2: link tx timeout [ 522.710715][T20571] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 522.884594][T20576] tipc: Enabled bearer , priority 0 [ 522.972212][T20582] openvswitch: netlink: Geneve opt len 17 is not a multiple of 4. [ 523.011495][T20584] tipc: Started in network mode [ 523.016504][T20584] tipc: Node identity ac14140f, cluster identity 4711 [ 523.037408][T20584] tipc: New replicast peer: 255.255.255.255 [ 523.050379][T20584] tipc: Enabled bearer , priority 10 [ 523.080119][T20574] tipc: Disabling bearer [ 523.393907][T20594] tipc: Enabling of bearer rejected, failed to enable media [ 523.441939][T20607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 523.602247][T20616] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3970'. [ 524.172473][ T912] tipc: Node number set to 2886997007 [ 524.412408][T20656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3981'. [ 524.524891][T20662] netlink: 'syz.4.3983': attribute type 1 has an invalid length. [ 524.614694][T20662] 8021q: adding VLAN 0 to HW filter on device bond5 [ 524.673828][T20664] bond5: (slave geneve3): making interface the new active one [ 524.689357][T20664] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 524.715976][ T52] Bluetooth: hci2: command 0x0405 tx timeout [ 524.737991][T20668] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 524.853800][T20666] openvswitch: netlink: IP tunnel dst address not specified [ 524.961276][T20682] netlink: 'syz.4.3991': attribute type 13 has an invalid length. [ 524.972178][T20683] netlink: 'syz.4.3991': attribute type 13 has an invalid length. [ 524.985423][T20682] netlink: 360 bytes leftover after parsing attributes in process `syz.4.3991'. [ 525.019271][T20683] netlink: 360 bytes leftover after parsing attributes in process `syz.4.3991'. [ 525.271449][ T3500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.280436][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.914785][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.923316][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.230941][T20697] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3993'. [ 527.331907][T20701] netlink: 'syz.1.3997': attribute type 11 has an invalid length. [ 527.808665][T20727] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4002'. [ 528.036516][T20741] netlink: 'syz.1.4006': attribute type 3 has an invalid length. [ 528.073605][T20741] netlink: 766 bytes leftover after parsing attributes in process `syz.1.4006'. [ 528.467612][T20755] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4011'. [ 528.481155][T20755] netlink: 'syz.4.4011': attribute type 7 has an invalid length. [ 528.489080][T20755] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4011'. [ 528.567715][ T1091] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.762366][T20760] SET target dimension over the limit! [ 528.956463][T20780] netlink: 'syz.4.4018': attribute type 10 has an invalid length. [ 529.005009][T20780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4018'. [ 529.181363][T20790] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4024'. [ 529.202388][T20790] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4024'. [ 529.252156][T20796] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 529.269505][T20571] Bluetooth: hci0: command 0x0406 tx timeout [ 529.549747][T20812] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4031'. [ 529.569960][T20812] 0{X: renamed from gretap0 (while UP) [ 529.585675][T20812] 0{X: entered allmulticast mode [ 529.599611][T20812] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 529.622277][T20812] tipc: Enabling of bearer rejected, media not registered [ 529.655621][T20820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4033'. [ 529.699739][T20820] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4033'. [ 529.737340][T20820] geneve2: entered promiscuous mode [ 529.743252][T20820] geneve2: entered allmulticast mode [ 529.777180][T20827] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4036'. [ 529.808833][T20830] netlink: 'syz.1.4035': attribute type 1 has an invalid length. [ 529.830826][T20832] netlink: 'syz.0.4037': attribute type 1 has an invalid length. [ 530.010111][T20841] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4039'. [ 530.308163][T20869] xt_TPROXY: Can be used only with -p tcp or -p udp [ 530.322209][ T1152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.330888][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.647991][T20889] netlink: 'syz.3.4053': attribute type 10 has an invalid length. [ 530.674119][T20889] team0: Port device dummy0 added [ 530.741114][T20886] wireguard0: entered promiscuous mode [ 530.747284][T20886] wireguard0: entered allmulticast mode [ 530.756300][T20886] team0: Device wireguard0 is of different type [ 530.773617][T20887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4052'. [ 530.849964][T20896] netlink: 'syz.3.4055': attribute type 1 has an invalid length. [ 530.914971][T20898] xt_hashlimit: max too large, truncated to 1048576 [ 531.032141][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.040939][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.631941][T20931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4066'. [ 531.678614][T20937] netlink: 'syz.1.4068': attribute type 3 has an invalid length. [ 531.912007][T20954] syzkaller0: entered promiscuous mode [ 531.928287][T20954] syzkaller0: entered allmulticast mode [ 532.833006][T21018] ip6_vti0 speed is unknown, defaulting to 1000 [ 533.297629][T21039] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 533.336973][T21039] syzkaller0: entered promiscuous mode [ 533.369363][T21039] syzkaller0: entered allmulticast mode [ 534.282534][T21066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.341434][T21067] geneve4: entered promiscuous mode [ 534.359047][T21067] geneve4: entered allmulticast mode [ 534.666555][T21080] netlink: 'syz.4.4112': attribute type 1 has an invalid length. [ 534.737456][T21080] 8021q: adding VLAN 0 to HW filter on device bond6 [ 534.890116][T21096] __nla_validate_parse: 7 callbacks suppressed [ 534.890141][T21096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4116'. [ 534.951546][T21096] xfrm1: entered promiscuous mode [ 534.967936][T21096] xfrm1: entered allmulticast mode [ 535.032015][T21096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4116'. [ 535.211509][T21110] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4120'. [ 535.511343][ T3500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.520163][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.570820][T21131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4125'. [ 535.591581][T21131] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4125'. [ 535.691751][T21131] geneve3: entered promiscuous mode [ 535.711056][T21138] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4126'. [ 535.730588][T21131] geneve3: entered allmulticast mode [ 535.821863][T21147] netlink: 'syz.0.4127': attribute type 1 has an invalid length. [ 535.924277][T21150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4130'. [ 535.963168][T21150] vxcan2: entered allmulticast mode [ 536.406856][T21175] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.4140'. [ 536.434130][T21175] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.4140'. [ 536.599451][T21188] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4143'. [ 536.790286][T14641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.802845][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.213813][T21226] sctp: [Deprecated]: syz.0.4151 (pid 21226) Use of int in max_burst socket option deprecated. [ 537.213813][T21226] Use struct sctp_assoc_value instead [ 537.683329][T21252] netlink: 'syz.1.4157': attribute type 3 has an invalid length. [ 537.824185][T21260] netlink: 'syz.4.4158': attribute type 1 has an invalid length. [ 537.855328][T21258] netlink: 'syz.4.4158': attribute type 1 has an invalid length. [ 537.923955][T21258] 8021q: adding VLAN 0 to HW filter on device bond7 [ 538.218937][T21276] netlink: 'syz.0.4162': attribute type 1 has an invalid length. [ 538.257332][T21278] syz.2.4163: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 538.275128][T21278] CPU: 0 UID: 0 PID: 21278 Comm: syz.2.4163 Not tainted syzkaller #0 PREEMPT(full) [ 538.275162][T21278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 538.275177][T21278] Call Trace: [ 538.275186][T21278] [ 538.275196][T21278] dump_stack_lvl+0xe8/0x150 [ 538.275234][T21278] warn_alloc+0x214/0x310 [ 538.275259][T21278] ? stack_trace_save+0x9c/0xe0 [ 538.275298][T21278] ? __pfx_warn_alloc+0x10/0x10 [ 538.275330][T21278] ? kasan_save_track+0x4f/0x80 [ 538.275351][T21278] ? kasan_save_track+0x3e/0x80 [ 538.275371][T21278] ? __kasan_kmalloc+0x93/0xb0 [ 538.275393][T21278] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 538.275413][T21278] ? xskq_create+0x56/0x170 [ 538.275433][T21278] ? xsk_setsockopt+0x4dc/0x8d0 [ 538.275463][T21278] ? do_sock_setsockopt+0x17c/0x1b0 [ 538.275489][T21278] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 538.275514][T21278] ? do_syscall_64+0xec/0xf80 [ 538.275544][T21278] __vmalloc_node_range_noprof+0x134/0x16a0 [ 538.275606][T21278] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 538.275638][T21278] ? __kasan_kmalloc+0x93/0xb0 [ 538.275671][T21278] vmalloc_user_noprof+0xad/0xf0 [ 538.275694][T21278] ? xskq_create+0xbf/0x170 [ 538.275727][T21278] xskq_create+0xbf/0x170 [ 538.275752][T21278] xsk_init_queue+0xb0/0x110 [ 538.275790][T21278] xsk_setsockopt+0x4dc/0x8d0 [ 538.275828][T21278] ? __pfx_xsk_setsockopt+0x10/0x10 [ 538.275862][T21278] ? __pfx_aa_sk_perm+0x10/0x10 [ 538.275896][T21278] ? aa_sock_opt_perm+0xff/0x1a0 [ 538.275931][T21278] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 538.275952][T21278] ? __pfx_xsk_setsockopt+0x10/0x10 [ 538.275988][T21278] do_sock_setsockopt+0x17c/0x1b0 [ 538.276021][T21278] __x64_sys_setsockopt+0x13f/0x1b0 [ 538.276056][T21278] do_syscall_64+0xec/0xf80 [ 538.276081][T21278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.276103][T21278] ? trace_irq_disable+0x37/0x100 [ 538.276133][T21278] ? clear_bhb_loop+0x60/0xb0 [ 538.276162][T21278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.276184][T21278] RIP: 0033:0x7fd3ba18f749 [ 538.276206][T21278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.276225][T21278] RSP: 002b:00007fd3bb03d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 538.276249][T21278] RAX: ffffffffffffffda RBX: 00007fd3ba3e5fa0 RCX: 00007fd3ba18f749 [ 538.276266][T21278] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 538.276280][T21278] RBP: 00007fd3ba213f91 R08: 0000000000000004 R09: 0000000000000000 [ 538.276295][T21278] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.276309][T21278] R13: 00007fd3ba3e6038 R14: 00007fd3ba3e5fa0 R15: 00007ffd8e4d1388 [ 538.276347][T21278] [ 538.276394][T21278] Mem-Info: [ 538.307867][T21276] netlink: 'syz.0.4162': attribute type 4 has an invalid length. [ 538.311527][T21278] active_anon:5323 inactive_anon:0 isolated_anon:0 [ 538.311527][T21278] active_file:3279 inactive_file:40038 isolated_file:0 [ 538.311527][T21278] unevictable:768 dirty:39 writeback:0 [ 538.311527][T21278] slab_reclaimable:12179 slab_unreclaimable:120958 [ 538.311527][T21278] mapped:29235 shmem:1413 pagetables:1167 [ 538.311527][T21278] sec_pagetables:0 bounce:0 [ 538.311527][T21278] kernel_misc_reclaimable:0 [ 538.311527][T21278] free:1293704 free_pcp:14429 free_cma:0 [ 538.624759][T21278] Node 0 active_anon:21492kB inactive_anon:0kB active_file:13116kB inactive_file:159952kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120840kB dirty:156kB writeback:0kB shmem:4116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14280kB pagetables:4544kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 538.699539][T21278] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 538.736447][T21278] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 538.815443][T21278] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 538.831911][T21278] Node 0 DMA32 free:1262880kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21492kB inactive_anon:0kB active_file:13116kB inactive_file:159952kB unevictable:1536kB writepending:156kB zspages:0kB present:3129332kB managed:2559484kB mlocked:0kB bounce:0kB free_pcp:39740kB local_pcp:21184kB free_cma:0kB [ 538.882426][T21278] lowmem_reserve[]: 0 0 1 1 1 [ 538.888508][T21278] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 538.923563][T21278] lowmem_reserve[]: 0 0 0 0 0 [ 538.928628][T21278] Node 1 Normal free:3895904kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18404kB local_pcp:5348kB free_cma:0kB [ 538.965709][T21278] lowmem_reserve[]: 0 0 0 0 0 [ 538.976499][T21278] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 538.999602][T21278] Node 0 DMA32: 6192*4kB (UM) 4332*8kB (UME) 1700*16kB (UM) 576*32kB (UM) 370*64kB (UME) 391*128kB (UME) 437*256kB (UME) 273*512kB (UM) 179*1024kB (UM) 49*2048kB (UME) 134*4096kB (UM) = 1262944kB [ 539.021757][T21278] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 539.039556][T21278] Node 1 Normal: 204*4kB (UE) 62*8kB (UME) 46*16kB (UME) 109*32kB (UME) 37*64kB (UME) 9*128kB (UME) 3*256kB (UM) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3895904kB [ 539.059535][T21280] ip6_vti0 speed is unknown, defaulting to 1000 [ 539.059562][T21278] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 539.075860][T21278] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 539.089378][T21278] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 539.099136][T21278] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 539.110405][T21278] 44676 total pagecache pages [ 539.115228][T21278] 0 pages in swap cache [ 539.119770][T21278] Free swap = 124996kB [ 539.124496][T21278] Total swap = 124996kB [ 539.128790][T21278] 2097051 pages RAM [ 539.144610][T21278] 0 pages HighMem/MovableOnly [ 539.160356][T21278] 425090 pages reserved [ 539.164840][T21278] 0 pages cma reserved [ 539.352443][ T52] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 539.354071][T20571] Bluetooth: hci0: command 0x0406 tx timeout [ 539.651917][T21322] veth0: entered promiscuous mode [ 539.857515][T21323] team0 (unregistering): Port device team_slave_0 removed [ 539.877260][T21323] team0 (unregistering): Port device team_slave_1 removed [ 540.198122][T21348] __nla_validate_parse: 12 callbacks suppressed [ 540.198144][T21348] netlink: 165 bytes leftover after parsing attributes in process `syz.4.4179'. [ 540.593017][T21360] netlink: 300 bytes leftover after parsing attributes in process `syz.3.4182'. [ 540.729912][T21370] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4184'. [ 540.783986][T21370] netlink: 464 bytes leftover after parsing attributes in process `syz.4.4184'. [ 540.957497][T21376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.979878][T21378] netlink: 'syz.1.4188': attribute type 2 has an invalid length. [ 540.996548][T21378] netlink: 'syz.1.4188': attribute type 1 has an invalid length. [ 541.020620][T21380] Cannot find del_set index 4 as target [ 541.071046][T21388] xt_TCPMSS: Only works on TCP SYN packets [ 541.276145][ T1152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.285192][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.295727][T21393] 8021q: VLANs not supported on ip6_vti0 [ 541.303455][T21393] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4193'. [ 541.328135][T21396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4194'. [ 541.334228][T21393] x_tables: duplicate underflow at hook 1 [ 541.636582][T21413] tipc: Enabling of bearer rejected, failed to enable media [ 541.813468][T21426] tipc: Enabled bearer , priority 0 [ 541.826739][T21426] syzkaller0: entered promiscuous mode [ 541.833845][T21426] syzkaller0: entered allmulticast mode [ 541.853876][T21428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4203'. [ 541.901248][T21426] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4202'. [ 541.943527][T21434] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 542.070212][T21426] veth9: entered allmulticast mode [ 542.178774][T21429] tipc: Resetting bearer [ 542.197681][T21450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4209'. [ 542.221096][T21450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4209'. [ 542.221138][T21448] netlink: 'syz.4.4208': attribute type 1 has an invalid length. [ 542.242455][T21425] tipc: Resetting bearer [ 542.333209][T21425] tipc: Disabling bearer [ 542.385715][T21448] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 542.557627][T14641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.575771][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.637456][T21471] atomic_op ffff8880348bd198 conn xmit_atomic 0000000000000000 [ 542.737489][T21482] IPv6: NLM_F_CREATE should be specified when creating new route [ 542.928206][T21489] netlink: 'syz.1.4221': attribute type 1 has an invalid length. [ 543.063185][T21496] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 543.108267][T21497] netlink: 'syz.0.4223': attribute type 1 has an invalid length. [ 543.388969][T21523] netlink: 'syz.4.4229': attribute type 1 has an invalid length. [ 543.421754][T21523] netlink: 'syz.4.4229': attribute type 2 has an invalid length. [ 544.017358][T21551] geneve5: entered promiscuous mode [ 544.023461][T21551] geneve5: entered allmulticast mode [ 544.725458][T21582] netlink: 'syz.0.4244': attribute type 29 has an invalid length. [ 544.744098][T21582] netlink: 'syz.0.4244': attribute type 29 has an invalid length. [ 544.877969][T21604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 545.027678][T21608] bond0: entered promiscuous mode [ 545.033955][T21608] bond_slave_0: entered promiscuous mode [ 545.041046][T21608] mac80211_hwsim hwsim34 wlan1: entered promiscuous mode [ 545.065108][T21608] bond0: left promiscuous mode [ 545.083602][T21608] bond_slave_0: left promiscuous mode [ 545.089675][T21608] mac80211_hwsim hwsim34 wlan1: left promiscuous mode [ 545.366301][T21632] netlink: 'syz.3.4256': attribute type 1 has an invalid length. [ 545.401377][T21632] 8021q: adding VLAN 0 to HW filter on device bond1 [ 545.432181][T21632] bond1: (slave veth1): Enslaving as an active interface with a down link [ 545.450546][T21632] vlan2: entered allmulticast mode [ 545.455866][T21632] veth1: entered allmulticast mode [ 545.465353][T21632] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 545.693035][T21642] __nla_validate_parse: 11 callbacks suppressed [ 545.693056][T21642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4260'. [ 545.728772][T21644] openvswitch: netlink: IP tunnel dst address not specified [ 545.999753][T21661] netlink: 'syz.1.4265': attribute type 1 has an invalid length. [ 546.027247][T21661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.048056][T21663] xt_hashlimit: invalid interval [ 546.320555][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.329142][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.424072][T21685] netlink: 'syz.1.4272': attribute type 1 has an invalid length. [ 546.438992][T21685] netlink: 16179 bytes leftover after parsing attributes in process `syz.1.4272'. [ 546.857821][T21702] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 547.240096][T21728] netlink: 146820 bytes leftover after parsing attributes in process `syz.2.4283'. [ 547.274678][T21730] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4282'. [ 547.680702][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.689294][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.722701][T21766] xt_hashlimit: overflow, try lower: 3/0 [ 548.025874][T21781] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4298'. [ 548.098897][T21789] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4301'. [ 548.182181][T21792] netlink: 'syz.0.4302': attribute type 2 has an invalid length. [ 548.191997][T21792] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4302'. [ 548.208014][T21794] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4303'. [ 548.438784][T21803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4307'. [ 548.471334][T21803] block nbd2: Unsupported socket: should be TCP or UNIX. [ 548.592699][T21809] ip6_vti0 speed is unknown, defaulting to 1000 [ 549.300696][T21841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4317'. [ 549.610762][T21851] netlink: 'syz.2.4318': attribute type 10 has an invalid length. [ 549.665437][T21851] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.699788][T21851] bridge_slave_1: left allmulticast mode [ 549.715989][T21851] bridge_slave_1: left promiscuous mode [ 549.734678][T21851] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.794650][T21851] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 549.910301][ T5835] Bluetooth: hci2: command 0x0405 tx timeout [ 549.986463][T21870] netlink: 'syz.2.4325': attribute type 13 has an invalid length. [ 550.056138][T21870] veth0_macvtap: left promiscuous mode [ 550.064590][T21870] macvtap0: entered allmulticast mode [ 550.088948][T21870] macvtap0: refused to change device tx_queue_len [ 550.679136][T21905] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 550.722515][T21905] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 550.746498][T21905] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 550.775847][T21905] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 551.097628][T21916] syzkaller0: entered promiscuous mode [ 551.104082][T21916] syzkaller0: entered allmulticast mode [ 551.177175][T21922] __nla_validate_parse: 4 callbacks suppressed [ 551.177197][T21922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4341'. [ 551.476245][T21937] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4345'. [ 551.506328][T21938] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4345'. [ 551.748340][T21950] gre1: entered promiscuous mode [ 551.767034][T21950] gre1: entered allmulticast mode [ 551.773461][T21955] sctp: [Deprecated]: syz.2.4354 (pid 21955) Use of struct sctp_assoc_value in delayed_ack socket option. [ 551.773461][T21955] Use struct sctp_sack_info instead [ 552.157243][T14641] net_ratelimit: 61 callbacks suppressed [ 552.157268][T14641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.171832][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.592763][T22005] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4370'. [ 552.659843][T22012] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4370'. [ 552.682145][T22011] xt_socket: unknown flags 0x50 [ 552.795539][T22015] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4370'. [ 553.070199][T22035] netlink: 'syz.1.4375': attribute type 1 has an invalid length. [ 553.078542][T22035] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4375'. [ 553.172537][T22039] netlink: 'syz.0.4377': attribute type 3 has an invalid length. [ 553.343667][T22052] netlink: 'syz.3.4380': attribute type 9 has an invalid length. [ 553.355385][T22052] netlink: 'syz.3.4380': attribute type 11 has an invalid length. [ 553.367041][T22052] netlink: 'syz.3.4380': attribute type 12 has an invalid length. [ 553.377644][T22052] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.4380'. [ 553.431841][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.440276][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.585826][T22069] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4381'. [ 553.882663][T22091] netlink: 'syz.2.4391': attribute type 83 has an invalid length. [ 553.913003][T22092] netlink: 'syz.2.4391': attribute type 83 has an invalid length. [ 554.126841][T22118] netlink: 348 bytes leftover after parsing attributes in process `syz.4.4392'. [ 554.537428][T22123] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 554.903537][T22144] bond8: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 554.941565][T22144] bond8 (unregistering): Released all slaves [ 555.316676][T22155] syzkaller0: entered promiscuous mode [ 555.335505][T22155] syzkaller0: entered allmulticast mode [ 555.703389][T22190] delete_channel: no stack [ 555.866504][T22198] syzkaller0: entered promiscuous mode [ 555.886624][T22198] syzkaller0: entered allmulticast mode [ 555.911975][T22196] tipc: Enabled bearer , priority 0 [ 555.990041][T22196] tipc: Resetting bearer [ 556.091943][T22196] tipc: Disabling bearer [ 556.475582][T22241] __nla_validate_parse: 2 callbacks suppressed [ 556.475606][T22241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4424'. [ 556.776089][T22248] netlink: 'syz.4.4426': attribute type 29 has an invalid length. [ 557.571745][T22310] netlink: 'syz.3.4441': attribute type 30 has an invalid length. [ 557.603869][T22313] bond0: entered promiscuous mode [ 557.609163][T22313] bond_slave_0: entered promiscuous mode [ 557.618189][T22313] bond_slave_1: entered promiscuous mode [ 557.624837][T22313] syz_tun: entered promiscuous mode [ 557.918253][T22112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.927294][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.977518][T22333] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4447'. [ 558.013105][T22330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4448'. [ 558.226247][T22342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4451'. [ 558.305096][T22330] hsr_slave_0 (unregistering): left promiscuous mode [ 558.584534][T22359] ip6_vti0 speed is unknown, defaulting to 1000 [ 558.679959][T22366] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4457'. [ 559.024350][T22374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4461'. [ 559.475313][T22400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4469'. [ 559.527507][T22404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4469'. [ 559.579861][T22400] chnl_net:caif_netlink_parms(): no params data found [ 559.777915][T22404] chnl_net:caif_netlink_parms(): no params data found [ 559.807403][T22416] netlink: 'syz.2.4474': attribute type 10 has an invalid length. [ 559.815969][T22416] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4474'. [ 559.878402][T22416] dummy0: entered promiscuous mode [ 559.887026][T22416] bridge0: port 2(dummy0) entered blocking state [ 559.897658][T22416] bridge0: port 2(dummy0) entered disabled state [ 559.905870][T22416] dummy0: entered allmulticast mode [ 559.920256][T22416] bridge0: port 2(dummy0) entered blocking state [ 559.927118][T22416] bridge0: port 2(dummy0) entered forwarding state [ 559.995112][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 560.122557][T22429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4479'. [ 560.415713][T22440] syzkaller1: entered promiscuous mode [ 560.434774][T22440] syzkaller1: entered allmulticast mode [ 560.456079][T22440] syzkaller1: left promiscuous mode [ 560.468045][T22440] syzkaller1: left allmulticast mode [ 560.483265][T22111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.491852][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.584735][T22450] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 560.800336][T22462] xt_ecn: cannot match TCP bits for non-tcp packets [ 561.036420][T22478] netlink: 'syz.0.4495': attribute type 29 has an invalid length. [ 561.062786][T22478] netlink: 'syz.0.4495': attribute type 29 has an invalid length. [ 561.123094][T22484] netlink: 'syz.2.4496': attribute type 1 has an invalid length. [ 561.136965][T22484] netlink: 'syz.2.4496': attribute type 2 has an invalid length. [ 561.478066][T22504] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000 [ 561.488972][T22507] __nla_validate_parse: 4 callbacks suppressed [ 561.488995][T22507] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4502'. [ 561.646516][T22511] bridge_slave_0: left allmulticast mode [ 561.653817][T22510] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4504'. [ 561.653994][T22511] bridge_slave_0: left promiscuous mode [ 561.669658][T22511] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.695177][T22511] bridge_slave_1: left allmulticast mode [ 561.710189][T22511] bridge_slave_1: left promiscuous mode [ 561.716335][T22511] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.732153][T22514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4504'. [ 561.742572][T22511] bond0: (slave bond_slave_0): Releasing backup interface [ 561.761307][T22511] bond0: (slave bond_slave_1): Releasing backup interface [ 561.796305][T22511] team0: Port device team_slave_0 removed [ 561.832061][T22511] team0: Port device team_slave_1 removed [ 561.842751][T22511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.850487][T22511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.861733][T22511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.869790][T22511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.880133][T22511] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 562.150271][T22531] syzkaller0: entered promiscuous mode [ 562.199332][T22531] syzkaller0: entered allmulticast mode [ 562.213321][T22529] tipc: Enabled bearer , priority 0 [ 562.366078][T22529] tipc: Resetting bearer [ 562.375062][T22542] netlink: 'syz.0.4512': attribute type 1 has an invalid length. [ 562.429003][T22542] netlink: 236 bytes leftover after parsing attributes in process `syz.0.4512'. [ 562.461872][T22529] tipc: Disabling bearer [ 563.573207][T22594] netlink: 'syz.1.4525': attribute type 3 has an invalid length. [ 563.679668][T22101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.688294][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.771120][T22602] netlink: 'syz.4.4528': attribute type 1 has an invalid length. [ 563.778951][T22602] netlink: 'syz.4.4528': attribute type 2 has an invalid length. [ 563.815336][T22609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4530'. [ 563.829419][T22607] netlink: 'syz.0.4529': attribute type 2 has an invalid length. [ 563.847776][T22607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4529'. [ 563.860265][T22607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4529'. [ 563.913760][T22609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4530'. [ 564.084296][T22627] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4534'. [ 564.146344][T22627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4534'. [ 564.365795][T22646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.828462][T22677] validate_nla: 2 callbacks suppressed [ 564.828484][T22677] netlink: 'syz.1.4550': attribute type 7 has an invalid length. [ 564.859380][T22677] netlink: 'syz.1.4550': attribute type 8 has an invalid length. [ 564.966419][ T5930] IPVS: starting estimator thread 0... [ 565.004531][T22681] veth0: entered promiscuous mode [ 565.069976][T22688] IPVS: using max 23 ests per chain, 55200 per kthread [ 565.359044][T22709] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.648803][T22726] netlink: 'syz.4.4566': attribute type 7 has an invalid length. [ 565.657516][T22726] netlink: 'syz.4.4566': attribute type 8 has an invalid length. [ 566.233753][ T148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.242344][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.631427][T22785] __nla_validate_parse: 12 callbacks suppressed [ 566.631455][T22785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4584'. [ 566.720580][T22785] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 566.801378][T22785] team1: entered promiscuous mode [ 566.819480][T22785] team1: entered allmulticast mode [ 566.842895][T22796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4589'. [ 567.080362][T22809] netlink: 'syz.2.4596': attribute type 30 has an invalid length. [ 567.154524][T22819] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4594'. [ 567.264948][T22810] netlink: 'syz.2.4596': attribute type 30 has an invalid length. [ 567.468151][T22832] gre1: entered promiscuous mode [ 567.479419][T22832] gre1: entered allmulticast mode [ 567.706427][T22845] macvtap1: entered allmulticast mode [ 567.721906][T22845] veth0_macvtap: entered allmulticast mode [ 567.983238][T22863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4607'. [ 568.160753][ T5847] block nbd0: Receive control failed (result -104) [ 568.324608][T22882] netlink: 'syz.0.4614': attribute type 1 has an invalid length. [ 568.332405][T22879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4613'. [ 568.392241][T22882] 8021q: adding VLAN 0 to HW filter on device bond4 [ 568.428068][T22887] bond4: (slave geneve2): making interface the new active one [ 568.438423][T22887] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 568.463702][T22888] x_tables: duplicate underflow at hook 1 [ 568.535505][T22882] veth9: entered promiscuous mode [ 568.548119][T22882] bond4: (slave veth9): Enslaving as an active interface with a down link [ 568.602583][T22895] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 568.813022][T22904] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4618'. [ 568.829999][T22904] netlink: 'syz.0.4618': attribute type 10 has an invalid length. [ 568.838085][T22904] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4618'. [ 568.871108][T22904] dummy0: entered promiscuous mode [ 568.880380][T22904] bridge0: port 1(dummy0) entered blocking state [ 568.887866][T22904] bridge0: port 1(dummy0) entered disabled state [ 568.898507][T22904] dummy0: entered allmulticast mode [ 569.412014][T22942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4632'. [ 569.434526][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.443530][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.502124][T22942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4632'. [ 569.571880][T22942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4632'. [ 569.817682][T22958] vcan0: tx address claim with dest, not broadcast [ 569.868738][T22960] sctp: [Deprecated]: syz.4.4638 (pid 22960) Use of int in max_burst socket option deprecated. [ 569.868738][T22960] Use struct sctp_assoc_value instead [ 570.332234][T22975] bond2: option mode: invalid value (133) [ 570.351586][T22975] bond2 (unregistering): Released all slaves [ 570.458035][T22988] netlink: 'syz.0.4650': attribute type 1 has an invalid length. [ 570.487075][T22991] Cannot find set identified by id 0 to match [ 570.495947][T22991] tipc: Enabling of bearer rejected, failed to enable media [ 570.935951][T23020] veth0: entered promiscuous mode [ 571.003849][T23009] veth0: left promiscuous mode [ 571.195093][T23028] netlink: 'syz.4.4658': attribute type 10 has an invalid length. [ 571.244329][T23028] team0: Device veth1_macvtap failed to register rx_handler [ 571.431681][T23037] tipc: Enabling of bearer rejected, failed to enable media [ 571.774179][T23055] __nla_validate_parse: 18 callbacks suppressed [ 571.774198][T23055] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4667'. [ 571.829236][T23055] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4667'. [ 571.862444][T23055] syzkaller0: entered promiscuous mode [ 571.911125][T23055] syzkaller0: entered allmulticast mode [ 571.921995][T23066] 0: reclassify loop, rule prio 0, protocol 800 [ 571.990228][T22094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.998845][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.124974][T23076] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4672'. [ 572.145588][T23076] syzkaller0: entered promiscuous mode [ 572.153391][T23076] syzkaller0: entered allmulticast mode [ 572.438006][T23092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4680'. [ 572.612114][T23098] netlink: 'syz.0.4677': attribute type 2 has an invalid length. [ 572.672795][T23095] netlink: 'syz.0.4677': attribute type 1 has an invalid length. [ 572.849075][T23116] lo: entered promiscuous mode [ 572.862413][T23116] tunl0: entered promiscuous mode [ 572.898177][T23116] gre0: entered promiscuous mode [ 572.905958][T23116] gretap0: entered promiscuous mode [ 572.912290][T23116] erspan0: entered promiscuous mode [ 572.918999][T23116] ip_vti0: entered promiscuous mode [ 572.971609][T23123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4687'. [ 572.989686][T23120] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4686'. [ 573.027517][T23124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4688'. [ 573.063830][T23127] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4686'. [ 573.197081][T23139] netlink: 'syz.0.4690': attribute type 2 has an invalid length. [ 573.486396][T23135] ip6_vti0 speed is unknown, defaulting to 1000 [ 573.690449][T23161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4695'. [ 573.701464][T23161] bridge: RTM_NEWNEIGH with invalid ether address [ 573.715886][T23161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4695'. [ 573.738419][T23161] bridge: RTM_NEWNEIGH with invalid ether address [ 574.471273][ T3500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.479963][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.453151][T23215] netlink: 'syz.3.4704': attribute type 7 has an invalid length. [ 576.506584][T23223] netlink: 'syz.3.4704': attribute type 9 has an invalid length. [ 576.621910][T23215] netlink: 'syz.3.4704': attribute type 7 has an invalid length. [ 576.997045][T23243] Set syz0 is full, maxelem 0 reached [ 577.032091][T22094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.040781][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.391794][T23262] __nla_validate_parse: 7 callbacks suppressed [ 577.391814][T23262] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4716'. [ 577.898608][T23293] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.4727'. [ 577.908758][T23293] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 578.316654][T23316] xt_TCPMSS: Only works on TCP SYN packets [ 578.404454][T23321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4733'. [ 578.781911][T23345] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4743'. [ 578.795453][T23340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4744'. [ 578.846839][T23352] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4745'. [ 578.943129][T23357] policy can only be matched on NF_INET_PRE_ROUTING [ 578.943153][T23357] unable to load match [ 579.023484][T23361] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4749'. [ 579.054085][T23361] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4749'. [ 579.067430][T23361] netlink: 'syz.4.4749': attribute type 1 has an invalid length. [ 579.401137][T23385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4754'. [ 579.410959][T23385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4754'. [ 579.414720][T23384] netlink: 'syz.4.4756': attribute type 1 has an invalid length. [ 579.421826][T23385] netlink: 'syz.3.4754': attribute type 14 has an invalid length. [ 579.437729][T23385] netlink: 'syz.3.4754': attribute type 13 has an invalid length. [ 579.752864][T23405] SET target dimension over the limit! [ 580.141041][T23430] tipc: Enabled bearer , priority 2 [ 580.321203][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.330424][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.764593][T23464] tipc: Started in network mode [ 580.782898][T23464] tipc: Node identity fae2e3b5780a, cluster identity 4711 [ 580.827334][T23464] tipc: Enabled bearer , priority 0 [ 580.863892][T23475] syzkaller0: entered promiscuous mode [ 580.884044][T23475] syzkaller0: entered allmulticast mode [ 580.907669][T23464] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 580.964984][T23464] tipc: Resetting bearer [ 581.004489][T23463] tipc: Resetting bearer [ 581.052596][T23463] tipc: Disabling bearer [ 581.170783][T23490] syzkaller0: entered promiscuous mode [ 581.182060][T23490] syzkaller0: entered allmulticast mode [ 581.225287][T23490] tipc: Enabled bearer , priority 0 [ 581.246925][T23489] tipc: Resetting bearer [ 581.300853][T23489] tipc: Disabling bearer [ 581.331078][T22618] tipc: Node number set to 1828382375 [ 581.358337][T23497] syzkaller0: entered promiscuous mode [ 581.372099][T23497] syzkaller0: entered allmulticast mode [ 582.020145][T23529] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 582.042595][T23529] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 582.067516][T23529] team0: Failed to send options change via netlink (err -105) [ 582.075996][T23529] team0: Port device batadv1 added [ 582.374546][T23553] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ1 [ 582.397801][T23553] netlink: 'syz.3.4808': attribute type 39 has an invalid length. [ 582.425440][T23557] netlink: 'syz.0.4809': attribute type 1 has an invalid length. [ 582.436468][T23557] __nla_validate_parse: 6 callbacks suppressed [ 582.436493][T23557] netlink: 280 bytes leftover after parsing attributes in process `syz.0.4809'. [ 582.467388][T23559] openvswitch: netlink: IP tunnel dst address not specified [ 582.600964][T23557] can: request_module (can-proto-0) failed. [ 582.697487][T23567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4812'. [ 582.707594][T23567] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4812'. [ 582.741242][T23570] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 582.873454][T22094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.881963][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.920146][T23579] netlink: 'syz.2.4815': attribute type 11 has an invalid length. [ 582.968801][T23584] bond6: option all_slaves_active: invalid value (222) [ 582.978314][T23584] bond6 (unregistering): Released all slaves [ 583.158869][T23594] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 583.190611][T23597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4819'. [ 583.590849][T21307] Bluetooth: hci2: command 0x0405 tx timeout [ 583.661076][T23621] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4827'. [ 583.974084][T23636] netlink: 'syz.4.4831': attribute type 1 has an invalid length. [ 584.066768][T23648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4831'. [ 584.136880][T23636] 8021q: adding VLAN 0 to HW filter on device bond8 [ 584.412477][T23662] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4837'. [ 584.486811][T23665] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4838'. [ 584.519779][T23666] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4837'. [ 584.658623][T23674] netlink: 'syz.1.4837': attribute type 11 has an invalid length. [ 584.753597][T23684] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4843'. [ 586.070109][T22095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.078574][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.634267][T22102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.643121][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.710114][T21307] Bluetooth: hci4: command 0x0406 tx timeout [ 591.830543][T22104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.838950][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.390492][T22104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.399141][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.591221][T22101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.600036][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.509885][ T3500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.518207][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.710141][T22104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.718564][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.631450][T22096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.639969][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.470274][T22111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.478589][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.394097][T22101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.402844][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.235627][T22096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.244109][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.510219][T22102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.518601][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.992332][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.000923][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.270281][ T3500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.278988][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.750162][T22102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.758602][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.029963][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.038382][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.510362][ T3500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.518696][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.790079][T22102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.798477][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.270970][T22095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.279429][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.560549][ T3500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.568830][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.003199][T22111] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 640.248949][T22111] dvmrp0 (unregistering): left allmulticast mode [ 640.389620][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.701454][T22111] bond7 (unregistering): (slave bridge7): Releasing backup interface [ 640.710437][T22111] bridge7 (unregistering): left promiscuous mode [ 640.734413][T22111] bond1 (unregistering): Released all slaves [ 640.750060][T22111] bond0 (unregistering): Released all slaves [ 640.873927][T22111] bond2 (unregistering): Released all slaves [ 641.007335][T22111] bond3 (unregistering): (slave veth5): Releasing active interface [ 641.018043][T22111] bond3 (unregistering): Released all slaves [ 641.140630][T22111] bond4 (unregistering): Released all slaves [ 641.157007][T22111] bond5 (unregistering): Released all slaves [ 641.174045][T22111] bond6 (unregistering): Released all slaves [ 641.296913][T22111] bond7 (unregistering): Released all slaves [ 641.429404][T22111] tipc: Disabling bearer [ 641.429415][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.442762][T22111] tipc: Left network mode [ 641.896320][T22111] hsr_slave_0: left promiscuous mode [ 641.920692][T22111] hsr_slave_1: left promiscuous mode [ 641.949438][T22111] vlan0: left allmulticast mode [ 641.954368][T22111] veth0_vlan: left allmulticast mode [ 641.962566][T22111] vlan0: left promiscuous mode [ 641.967892][T22111] veth1_macvtap: left promiscuous mode [ 641.973762][T22111] veth1_vlan: left promiscuous mode [ 641.979069][T22111] veth0_vlan: left promiscuous mode [ 643.562137][T22111] IPVS: stop unused estimator thread 0... [ 643.643813][T22111] ------------[ cut here ]------------ [ 643.649603][T22111] WARNING: fs/proc/proc_sysctl.c:1558 at retire_sysctl_set+0x48/0x60, CPU#0: kworker/u8:37/22111 [ 643.660434][T22111] Modules linked in: [ 643.664617][T22111] CPU: 0 UID: 0 PID: 22111 Comm: kworker/u8:37 Not tainted syzkaller #0 PREEMPT(full) [ 643.674766][T22111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 643.685166][T22111] Workqueue: netns cleanup_net SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 643.690059][T22111] RIP: 0010:retire_sysctl_set+0x48/0x60 [ 643.695694][T22111] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 c0 ed c4 ff 48 83 3b 00 75 0c e8 c5 ca 5e ff 5b c3 cc cc cc cc cc e8 b9 ca 5e ff 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 [ 643.716653][T22111] RSP: 0018:ffffc90004daf8d0 EFLAGS: 00010293 [ 643.724527][T22111] RAX: ffffffff82622df7 RBX: ffff888031640388 RCX: ffff888069a0db80 [ 643.732833][T22111] RDX: 0000000000000000 RSI: ffffffff8d9774de RDI: ffff888031640328 [ 643.741404][T22111] RBP: ffffc90004daf9b0 R08: ffffffff8f822e77 R09: 1ffffffff1f045ce [ 643.749590][T22111] R10: dffffc0000000000 R11: ffffffff8b1657f0 R12: ffffffff8f622540 [ 643.757724][T22111] R13: 1ffff920009b5f40 R14: ffffffff8f622520 R15: ffff8880316400a8 [ 643.765998][T22111] FS: 0000000000000000(0000) GS:ffff888125e1e000(0000) knlGS:0000000000000000 [ 643.775699][T22111] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 643.783905][T22111] CR2: 0000555ffcfa3168 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 643.792128][T22111] Call Trace: [ 643.795551][T22111] [ 643.798534][T22111] ops_undo_list+0x49a/0x990 [ 643.803761][T22111] ? __pfx_ops_undo_list+0x10/0x10 [ 643.808983][T22111] ? do_raw_spin_unlock+0x122/0x240 [ 643.814349][T22111] cleanup_net+0x4d8/0x7a0 [ 643.818842][T22111] ? __pfx_cleanup_net+0x10/0x10 [ 643.824642][T22111] ? process_scheduled_works+0x9ef/0x1770 [ 643.830916][T22111] ? process_scheduled_works+0x9ef/0x1770 [ 643.837617][T22111] process_scheduled_works+0xad1/0x1770 [ 643.843521][T22111] ? __pfx_process_scheduled_works+0x10/0x10 [ 643.849663][T22111] ? do_raw_spin_lock+0x121/0x290 [ 643.854963][T22111] worker_thread+0x8a0/0xda0 [ 643.860024][T22111] ? __kthread_parkme+0x7b/0x200 [ 643.865118][T22111] kthread+0x711/0x8a0 [ 643.869330][T22111] ? __pfx_worker_thread+0x10/0x10 [ 643.874841][T22111] ? __pfx_kthread+0x10/0x10 [ 643.879786][T22111] ? _raw_spin_unlock_irq+0x23/0x50 [ 643.885047][T22111] ? __pfx_kthread+0x10/0x10 [ 643.890327][T22111] ret_from_fork+0x510/0xa50 [ 643.895085][T22111] ? __pfx_ret_from_fork+0x10/0x10 [ 643.900603][T22111] ? __switch_to+0xc9e/0x1480 [ 643.905352][T22111] ? __pfx_kthread+0x10/0x10 [ 643.910134][T22111] ret_from_fork_asm+0x1a/0x30 [ 643.915130][T22111] [ 643.918386][T22111] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 643.926057][T22111] CPU: 0 UID: 0 PID: 22111 Comm: kworker/u8:37 Not tainted syzkaller #0 PREEMPT(full) [ 643.935736][T22111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 643.945943][T22111] Workqueue: netns cleanup_net [ 643.950818][T22111] Call Trace: [ 643.954138][T22111] [ 643.957106][T22111] vpanic+0x1e0/0x670 [ 643.961198][T22111] panic+0xb9/0xc0 [ 643.965038][T22111] ? __pfx_panic+0x10/0x10 [ 643.969508][T22111] ? ret_from_fork_asm+0x1a/0x30 [ 643.974500][T22111] __warn+0x317/0x4b0 [ 643.978781][T22111] ? retire_sysctl_set+0x48/0x60 [ 643.983777][T22111] ? retire_sysctl_set+0x48/0x60 [ 643.989196][T22111] __report_bug+0x288/0x500 [ 643.993829][T22111] ? ret_from_fork_asm+0x1a/0x30 [ 643.998920][T22111] ? retire_sysctl_set+0x48/0x60 [ 644.003918][T22111] ? __pfx___report_bug+0x10/0x10 [ 644.009023][T22111] ? retire_sysctl_set+0x48/0x60 [ 644.013994][T22111] report_bug+0x16a/0x220 [ 644.018615][T22111] ? retire_sysctl_set+0x48/0x60 [ 644.023584][T22111] ? retire_sysctl_set+0x4a/0x60 [ 644.028554][T22111] handle_bug+0x98/0x200 [ 644.032846][T22111] exc_invalid_op+0x1a/0x50 [ 644.037446][T22111] asm_exc_invalid_op+0x1a/0x20 [ 644.042337][T22111] RIP: 0010:retire_sysctl_set+0x48/0x60 [ 644.047914][T22111] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 c0 ed c4 ff 48 83 3b 00 75 0c e8 c5 ca 5e ff 5b c3 cc cc cc cc cc e8 b9 ca 5e ff 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 [ 644.067549][T22111] RSP: 0018:ffffc90004daf8d0 EFLAGS: 00010293 [ 644.073651][T22111] RAX: ffffffff82622df7 RBX: ffff888031640388 RCX: ffff888069a0db80 [ 644.081658][T22111] RDX: 0000000000000000 RSI: ffffffff8d9774de RDI: ffff888031640328 [ 644.089778][T22111] RBP: ffffc90004daf9b0 R08: ffffffff8f822e77 R09: 1ffffffff1f045ce [ 644.097982][T22111] R10: dffffc0000000000 R11: ffffffff8b1657f0 R12: ffffffff8f622540 [ 644.106788][T22111] R13: 1ffff920009b5f40 R14: ffffffff8f622520 R15: ffff8880316400a8 [ 644.114811][T22111] ? __pfx_sysctl_net_exit+0x10/0x10 [ 644.120172][T22111] ? retire_sysctl_set+0x47/0x60 [ 644.125168][T22111] ops_undo_list+0x49a/0x990 [ 644.129831][T22111] ? __pfx_ops_undo_list+0x10/0x10 [ 644.134986][T22111] ? do_raw_spin_unlock+0x122/0x240 [ 644.140308][T22111] cleanup_net+0x4d8/0x7a0 [ 644.144761][T22111] ? __pfx_cleanup_net+0x10/0x10 [ 644.149731][T22111] ? process_scheduled_works+0x9ef/0x1770 [ 644.155523][T22111] ? process_scheduled_works+0x9ef/0x1770 [ 644.161291][T22111] process_scheduled_works+0xad1/0x1770 [ 644.166949][T22111] ? __pfx_process_scheduled_works+0x10/0x10 [ 644.173002][T22111] ? do_raw_spin_lock+0x121/0x290 [ 644.178175][T22111] worker_thread+0x8a0/0xda0 [ 644.182815][T22111] ? __kthread_parkme+0x7b/0x200 [ 644.187818][T22111] kthread+0x711/0x8a0 [ 644.192449][T22111] ? __pfx_worker_thread+0x10/0x10 [ 644.197683][T22111] ? __pfx_kthread+0x10/0x10 [ 644.202311][T22111] ? _raw_spin_unlock_irq+0x23/0x50 [ 644.207557][T22111] ? __pfx_kthread+0x10/0x10 [ 644.212269][T22111] ret_from_fork+0x510/0xa50 [ 644.217122][T22111] ? __pfx_ret_from_fork+0x10/0x10 [ 644.222268][T22111] ? __switch_to+0xc9e/0x1480 [ 644.226993][T22111] ? __pfx_kthread+0x10/0x10 [ 644.231650][T22111] ret_from_fork_asm+0x1a/0x30 [ 644.236679][T22111] [ 644.240339][T22111] Kernel Offset: disabled [ 644.244774][T22111] Rebooting in 86400 seconds..