last executing test programs: 2.968661854s ago: executing program 4 (id=5042): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="390979fd459c"}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xc}, {}, {0xfff1, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0x0, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1}}], 0x14, 0x0, 0x0) 2.514753522s ago: executing program 0 (id=5049): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="0800340001000000"], 0x24}}, 0x0) 2.442482884s ago: executing program 4 (id=5051): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb", 0x60}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000080)={0x3, @bcast}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-neonbs\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x0, 0x3}, 0x94) r3 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000040)) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x6, 0xb6, &(0x7f0000000200)=""/182, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000)=r5, 0x40) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c00b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) r6 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9", 0x10}, {&(0x7f0000000780)="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", 0xff}], 0x2, 0x0, 0x0, 0x20043}], 0x1, 0x485c) recvmmsg(r6, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001040)=""/187, 0xbb}, {&(0x7f0000000600)=""/83, 0x53}], 0x2}, 0x400}], 0x1, 0x22, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000040)={0x11, @dev={0xac, 0x14, 0x14, 0x27}, 0x4e23, 0x3, 'nq\x00', 0x8, 0x1b0e, 0xa}, 0x2c) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f00000003c0)={r8, @in={{0x2, 0x4e21, @multicast2}}, [0xfffffffffffffff9, 0xd, 0x1, 0x5, 0x1, 0x7, 0x0, 0x2, 0x29, 0xfffffffffffffffe, 0x700, 0x8000000000000000, 0x19c, 0x9, 0x100000000000]}, &(0x7f0000000100)=0x100) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={r8, 0x6}, 0x8) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x8) 2.381983055s ago: executing program 0 (id=5052): syz_emit_ethernet(0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="0fdd6a1da1d8001a0601fe80000000000000000000000000000afe8000000000000000000000000000bb0000000000000000000000000000000300004e2100004e2400"/80], 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) 2.346484909s ago: executing program 1 (id=5053): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001e40)=@newtaction={0xdc, 0x30, 0x10, 0x0, 0x0, {}, [{0xc8, 0x1, [@m_ctinfo={0xc4, 0x1b, 0x0, 0x0, {{0xb}, {0x4}, {0x95, 0x6, "242b3c8a5d16ae30a07b392e61aa54eb6313b576c5ca51004d7fb9c75149c995f9bf1f004543903855081a8abfbca3626b1dfc22571e35aca97f7242359b3bb4a8017732bc66576f672933e01ee8e538432c5e002e6c8224f5c40074e5f1bd03ed33e7564c50aa9bf30581a681e5227c6812452b8eaea0d962b5e037eb5d23bc30a28b98b688a07bc18c8757e52d8507dd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x2}}}}]}]}, 0xdc}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000034c0)=[{0x0}], 0x1}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) 2.231625417s ago: executing program 1 (id=5055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$isdn(0x22, 0x3, 0x22) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f00000000c0)=0x28) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 2.228821492s ago: executing program 0 (id=5056): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x22, 0x0, &(0x7f0000000100)) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x3c, r4, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x5}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) r7 = socket(0x22, 0x2, 0x2) sendmsg$ETHTOOL_MSG_DEBUG_GET(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x14}}, 0x0) recvmsg$unix(r7, &(0x7f00000022c0)={&(0x7f0000000540), 0x6e, &(0x7f0000002200)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/105, 0x69}], 0x2, &(0x7f0000002240)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}, 0x100) r8 = socket$kcm(0xa, 0x2, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f00000007c0)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000840)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba650596000000004000000300000000000000", 0x35}], 0x1}, 0x4004) pwritev(r8, 0x0, 0x0, 0x9, 0xbb) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r10, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8001, 0xe}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="44c77f3b3c7e"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "8610b453b18cd3c19ffd24aab05a7f1b"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="aa6318f48aab"}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r12, 0x0, 0x2a, &(0x7f00000002c0)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000700)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="ee00000000000000280012800b0001006d61637365630000180002800c0004000300000100c28000080005000100008008000500968362ae2ebe86082cb3ccb52f280ed227f060cb0768523efc14c49ce3a165ef448343e92b461cc23f4b8fb890ebfc708b712705074afcc6bf8d3995b65eda006cf629fe16b99682b86a3ce7c4282a4039c0e46d90e78bac1c4b24d3e82981fc449001bf8cd4611827d8849a34094334eaa3471cdfc84854a1", @ANYRES32=r11, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.21525171s ago: executing program 4 (id=5057): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @empty, 0x5}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, "4506000000927650", "0bf70000000000000000061000000001", '\x00', "ba0200"}, 0x28) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, 0x0, &(0x7f0000000080)) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "768fda296ddb6117", "efc565ef4fe19db196c49f248cdba071", 'EH7g', "03db28081af96463"}, 0x28) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) (async) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r5, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) (async) r6 = socket$inet6(0xa, 0x2, 0x0) read(r6, &(0x7f0000000080)=""/58, 0x3a) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000000), 0x3) 2.076554408s ago: executing program 1 (id=5059): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005d090100000000007b0000000000000018010000646c6c25feff0000002020207b1af8fb00000000bfa100000000000007010000f8ffffffb702000008000000b703000068030000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.002265771s ago: executing program 1 (id=5061): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom}, [@null, @null, @rose, @default, @default, @default, @bcast, @netrom]}, &(0x7f0000000080)=0x48, 0x80800) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f00000000c0)=0xfffffffd, 0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000100)) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000140)=0x800, &(0x7f0000000180)=0x4) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)={r0}) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000300)={r0, &(0x7f0000000200)='+\x00', 0x2e0101, &(0x7f0000000240)={@_ha_fsid={[0x4, 0x42137e5f]}, {0xb5, 0x6, 0x5}}, 0x1ff, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x1}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x6, 0x80, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, 0x7800, 0x8, 0x8, 0x2}}) sendmsg$nl_route_sched_retired(r3, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)=@delqdisc={0x134, 0x25, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x7, 0x9}, {0x0, 0xfff2}, {0xfff1, 0xd}}, [@q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x22}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9e50}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x1be6c1acd91fd3fd}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x15}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9b}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x7}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x200}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000600)) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), r2) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x5c, r5, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6b}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffff06}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x12}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8b92}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x44801) getpeername$l2tp6(r3, &(0x7f00000007c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000800)=0x20) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xf8, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x6, 0x36}}}}, [@NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x9, 0x3}, {0xc, 0x7}, {0x3, 0x2}, {0x7, 0x4}, {0x3, 0x56}, {0x6, 0x2}, {0x7, 0x2}, {0x2, 0x6}, {0x5, 0x4}, {0x4, 0x2}, {0x7, 0x3}, {0x8, 0x7}, {0x5}, {0x1}, {0x93, 0x7}, {0x3, 0x2}, {0x3, 0x3}, {0x5, 0x2}, {0x7, 0x6}, {0x9, 0x1}, {0x15, 0x7}], "2ce713088ede8658"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x3, 0x2}, {0xf8}, {0x1, 0x1}, {0x3, 0x4}, {0x5}, {0xff, 0x3}], "68ea0dafd4fe67fb"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x5, 0x1}, {0x2, 0x5}, {0x7, 0x2}, {0x6, 0x3}, {0xb, 0x3}, {0xf7, 0x5}, {0xfe, 0x3}, {0xd, 0x6}, {0x2, 0x6}, {0x81, 0x4}, {0x3, 0x2}, {0xfa, 0x7}, {0x6}, {0x80, 0x6}, {0xa, 0x7}], "81cd6cd387906ae3"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x2, 0x1}, {0xff, 0x6}, {0xf9, 0x6}, {0x1, 0x5}, {0x9, 0x4}, {0xc, 0x7}], "fe9cee257f3d3ddf"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x6, 0x6}, {0x8, 0x7}, {0x80, 0x5}, {0x4}], "c91092fc78975374"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x20, 0x6}, {0x67, 0x4}, {0x1, 0x1}, {0x4, 0x4}, {0x6, 0x6}, {0x2, 0x3}, {0x9}, {0x4, 0x4}, {0x0, 0x3}, {0x80, 0x2}, {0x0, 0x7}, {0xd, 0x7}, {0x3, 0x5}, {0xa, 0x6}], "57af4c4ec0809e10"}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$AUDIT_TRIM(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x10, 0x3f6, 0x8, 0x70bd25, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x68000) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000b40), &(0x7f0000000b80)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000bc0)={0x0}, &(0x7f0000000c00)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000c40)={r8, 0x4, 0x7, 0x2, 0xfff, 0x8}, 0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x38, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x38}}, 0x80) ioctl$OCFS2_IOC_REFLINK(r1, 0x40186f04, &(0x7f0000000e00)={&(0x7f0000000d80)='\x00', &(0x7f0000000dc0)='wlan1\x00', 0x1}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r3) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000001380)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001340)={&(0x7f0000000ec0)={0x470, r9, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x5e}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3ff, 0x2e}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x108, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xe8, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x37}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0xdc, 0x6, "ce6a0a1acb9c11137d53c715aeee6529205c1127f0698441b61556302b1d56f737f13ca0d35a132679ec79d1ba6efc224153173db1e12c3295505ff8fd280b93efe84ca6157b5a32013fb7a8ee115a840399581ddf3536975767a6dc3e45f7dcdcf33883cfe9e731f6b2219052f72c46e86d549f3e31e9ab74bfaca216f171928b3d9d0574495fab4f313bef3baecb34ee5b293b861853138f8b12bac7374bbf5dc301ca101df8305f9d11e8b3885768f36d73d7cb0c9fff6c2451ea186bf401378c2a59db831dab3ea09bafb53634316c7c6379fa5d4941"}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xb4, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xa8, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0xfddb}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x8}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @device_b}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @loopback}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x7f, 0xb, "162f9e27b7d40597f6c80d9a6217a444d9426afcabdba5028840b4bcfa7190a37b55e89c635a0f87e2237d6e102d4c5938e128ffde80c3ff1914a51fa5764d7278ae2b876ff814bbc17b9e720adeaf91b3daccf8e5813a72ba2ec60a8de545e3d8afd3747624bf38a51515f8c5ed80168209794b066ca5352753f4"}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x270, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x260, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @broadcast}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x7d, 0xb, "95898aeba0cf7064abcda9dccbff7f187de153ce8fffd4053b6b4d6010f4a7dda9c56d3812ce481d85c5b2d120e7cefa3f70fdf039e2f670bcb24feb21921017dc0a70cfceda6f710ecca6553818df26f0f02c7ad9ef853abce35b480fc4580a37a7f70ab8b9cce9c79bb8129bad9fcb89d9970fda786c4c00"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x4, 0xd41, 0x6}}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x34, 0xb, "6479fef7a1406177fa52462470a7c7e1f14746df975774037d39135bd38a15c8030b48c6d25e9a6917b0c9250d6bebec"}, @NL80211_WOWLAN_TCP_WAKE_MASK={0xef, 0xb, "318735df1f5e6eb443759cc32dce385c208a9000a70c751f31a33e218cb5d6ccbd9785d37d07ac5cde15644fa942ee0d198a27de38c3b184b7cfdda3d239c911fc6573721d978191f5fdc4d523b36dd3b7bc123d7903be80a7525cbef39c3245e31d0fcce46100840dc1747d060e42f836c6885004c86e092a83ea9baa7e5611e2ec2769002d77805ac254febd2c8652febcfccc794513d624d44e4f4947518364132b14b5f65a67987dd2ec44082a03448436e0513b42aacdb59c48b1843870f281f72cf77e380b25687b423731eca33a5410763a44bc36fdf7b59cc19deba07f1ff8b6437c8c13c94901"}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @multicast2}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x8d, 0xb, "35bf6463d1ea370c42e88d3891cf85cfbd0433f887fc0c0d86a92e9c83e1bbc461f6f4f8319734be72b4b20826f45ab7945742ae114f4ed80f0eade59763534107c57083340ac5f6b566bb451297d64d7e73005541e78281ca7decc85d58f457093cc0bb0852bb699646838b318861393c6496bd4b22ab73b3b44f5c681539899727d701e6b3d2ba0b"}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x14, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}]}, 0x470}, 0x1, 0x0, 0x0, 0x4000040}, 0x20044000) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x70, r5, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001600)={&(0x7f0000001540)={0x88, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x10000}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3f7e}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2b}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x885}, 0x8004) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000001680)=""/88) accept4$inet6(r2, &(0x7f0000001700)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000001740)=0x1c, 0x800) 1.46489515s ago: executing program 3 (id=5070): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x190) 1.432774659s ago: executing program 2 (id=5071): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005d090100000000007b0000000000000018010000646c6c2504000400002020207b1af8fb00000000bfa100000000000007010000f8ffffffb702000008000000b703000068030000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.350069262s ago: executing program 3 (id=5072): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r0, 0x1, 0x3, &(0x7f0000000340)=""/66, &(0x7f0000000080)=0x42) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xeb, 0xeb, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0xffff7fff}}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x1, 0x3}, {0xc}, {0xd, 0x1}, {0xb, 0x4}]}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x73}, @typedef={0x0, 0x0, 0x0, 0x8, 0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x1}, @restrict={0xa, 0x0, 0x0, 0xb, 0x4}, @var={0xf, 0x0, 0x0, 0xe, 0x2, 0x1}, @enum64={0xe, 0x1, 0x0, 0x13, 0x1, 0xd, [{0x5, 0x95d, 0xb}]}, @datasec={0xf, 0x5, 0x0, 0xf, 0x3, [{0x3, 0x600, 0x4}, {0x5, 0x0, 0x9}, {0x4, 0x1, 0x6}, {0x1}, {0x2, 0x7fff, 0x7}], "33be9c"}]}, {0x0, [0x30, 0x61, 0x0]}}, &(0x7f0000000a40)=""/47, 0x109, 0x2f, 0x1, 0xd, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="05000000000000006b113600000000008510000002000000850000000500000095000000000000009500a50500000000719837a62ecba6b4aca926e6c8a1e509afe04e27090b613f59968cc4b88b4ecb814f46ebe3d5e393478f148c05cb001274b4a292d599", @ANYRES32=r0, @ANYRES16=r0, @ANYRESHEX=r1, @ANYRESOCT=0x0, @ANYBLOB="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", @ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x6}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) getsockopt(r0, 0x1, 0x3, &(0x7f0000000340)=""/66, &(0x7f0000000080)=0x42) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xeb, 0xeb, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0xffff7fff}}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x1, 0x3}, {0xc}, {0xd, 0x1}, {0xb, 0x4}]}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x73}, @typedef={0x0, 0x0, 0x0, 0x8, 0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x1}, @restrict={0xa, 0x0, 0x0, 0xb, 0x4}, @var={0xf, 0x0, 0x0, 0xe, 0x2, 0x1}, @enum64={0xe, 0x1, 0x0, 0x13, 0x1, 0xd, [{0x5, 0x95d, 0xb}]}, @datasec={0xf, 0x5, 0x0, 0xf, 0x3, [{0x3, 0x600, 0x4}, {0x5, 0x0, 0x9}, {0x4, 0x1, 0x6}, {0x1}, {0x2, 0x7fff, 0x7}], "33be9c"}]}, {0x0, [0x30, 0x61, 0x0]}}, &(0x7f0000000a40)=""/47, 0x109, 0x2f, 0x1, 0xd, 0x10000}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="05000000000000006b113600000000008510000002000000850000000500000095000000000000009500a50500000000719837a62ecba6b4aca926e6c8a1e509afe04e27090b613f59968cc4b88b4ecb814f46ebe3d5e393478f148c05cb001274b4a292d599", @ANYRES32=r0, @ANYRES16=r0, @ANYRESHEX=r1, @ANYRESOCT=0x0, @ANYBLOB="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", @ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x6}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async) 1.349244542s ago: executing program 2 (id=5073): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x523, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112ce000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@ipv6_newrule={0x1c, 0x20, 0x100, 0x60bd29, 0x25dfdbfb, {0xa, 0x20, 0x14, 0x40, 0x7d}}, 0x1c}}, 0x40800) 1.284299529s ago: executing program 0 (id=5074): socket$unix(0x1, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x11, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@private1, @in=@loopback}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) socket$unix(0x1, 0x5, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x11, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@private1, @in=@loopback}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) (async) 1.27763125s ago: executing program 3 (id=5075): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @empty}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r1, &(0x7f0000004880)=[{{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000002480)="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", 0x589}], 0x1, &(0x7f0000004940)=ANY=[], 0x12d8}}], 0x1, 0x0) 1.218682332s ago: executing program 4 (id=5076): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x18, 0x3, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYRESHEX=r2, @ANYRESHEX=r2, @ANYRESOCT=0x0, @ANYRESOCT=r2, @ANYBLOB="aa3d0e9daf84dea4387268cf73e0cd5f1c15c1d92c7d76f099cae4ed2f3e144c0db0d19cfe77cd21b73be7de3f380719f60828c02ea0674bca3dbff621a163fdd145566e658f387aa5852d72590c8901814e578dc47b2940fd7f226b93c2d832091ec8440289390d51a28f3fcddb2064019857e3516d4a066cc5d63b357241affe403dc36f1bdf62b2f54d419dc6aae07c8334c7bf69209fda71376f10ea5ed0ad0a72012a2624a024e8f027bc0523cfda0b3f3baa472bf21062b3c5d6a4869010f9a1168b5892a86623d3346585fc2481a5dc175cc345b371161e6c844db09c584fef29", @ANYRESHEX=r1, @ANYRES32=r2, @ANYRESOCT=r1], 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040800) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYRESHEX=r2, @ANYRESHEX=r2, @ANYRESOCT=0x0, @ANYRESOCT=r2, @ANYBLOB="aa3d0e9daf84dea4387268cf73e0cd5f1c15c1d92c7d76f099cae4ed2f3e144c0db0d19cfe77cd21b73be7de3f380719f60828c02ea0674bca3dbff621a163fdd145566e658f387aa5852d72590c8901814e578dc47b2940fd7f226b93c2d832091ec8440289390d51a28f3fcddb2064019857e3516d4a066cc5d63b357241affe403dc36f1bdf62b2f54d419dc6aae07c8334c7bf69209fda71376f10ea5ed0ad0a72012a2624a024e8f027bc0523cfda0b3f3baa472bf21062b3c5d6a4869010f9a1168b5892a86623d3346585fc2481a5dc175cc345b371161e6c844db09c584fef29", @ANYRESHEX=r1, @ANYRES32=r2, @ANYRESOCT=r1], 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040800) 1.194518812s ago: executing program 2 (id=5077): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xbc, 0x8, 0x8, 0x8000, 0x8}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000002e40)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002b40)={0x284, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffe000}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x45, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x98e}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x40}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8000}, {0x6}, {0x8, 0x15, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1b75}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x7c6}}]}, 0x284}, 0x1, 0x0, 0x0, 0x48880}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000c00000000000000100000008c04010004000000180100002020642500000000002020207b1af8ff00000000bfa10000000000000701c1af078fb7763e0000f8ffffffb702000008000000b7030000030000008500000006000000185300000d0000000000000000000000950000000000000018410000f8ffffff0000000000000000956bb9257463587182c99276af73200d0d676bd3d576542322a070728f5a26d3bbc0fd7270164686534636bd501904faf70cb2db6dc6c98ea5ea94db28316d"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xf, 0x85da, 0xc51b}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x94) (async) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) (async) sendmmsg$inet6(r4, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000800)={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x101}, 0x1c, 0x0}}], 0x2, 0x4001c00) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000380)=r3, 0x4) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r6 = socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000002f00)={'syztnl1\x00', &(0x7f0000002e80)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0xfff, 0xf, {{0x11, 0x4, 0x3, 0x4, 0x44, 0x64, 0x0, 0x0, 0x29, 0x0, @remote, @broadcast, {[@timestamp={0x44, 0x10, 0x39, 0x0, 0x5, [0x800, 0xa79, 0xff]}, @end, @cipso={0x86, 0x1c, 0x1, [{0x1, 0xa, "9ab871613391e27c"}, {0x2, 0xc, "6605fd21d44aaded1fa8"}]}]}}}}}) setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xcb, &(0x7f0000002f40)={0x0, 0x1, 0x5, r7, 0x6}, 0xc) (async) sendmmsg$inet6(r5, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}], 0x1, 0x0) (async) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x8}, 0x8) pipe(&(0x7f0000000840)) (async) sendmsg$sock(r2, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x80) (async) recvmmsg(r2, &(0x7f0000002940)=[{{&(0x7f00000000c0)=@un=@abs, 0x80, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/27, 0x1b}], 0x1, &(0x7f0000000540)=""/132, 0x84}, 0x2}, {{&(0x7f0000000600)=@caif=@rfm, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000680)=""/126, 0x7e}, {&(0x7f0000000700)=""/17, 0x11}, {&(0x7f00000007c0)=""/102, 0x66}, {&(0x7f0000000d80)=""/18, 0x12}, {&(0x7f0000000880)=""/144, 0x90}, {&(0x7f0000000940)=""/180, 0xb4}, {&(0x7f0000000a00)=""/16, 0x10}], 0x7, &(0x7f0000000ac0)=""/227, 0xe3}, 0x8001}, {{&(0x7f0000000bc0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000c40)=""/56, 0x38}], 0x1, &(0x7f0000000cc0)=""/5, 0x5}, 0x3}, {{&(0x7f0000000d00)=@nfc, 0x80, &(0x7f0000001e80)=[{&(0x7f0000000d80)}, {&(0x7f0000000dc0)=""/149, 0x95}, {&(0x7f0000000e80)=""/4096, 0x1000}], 0x3, &(0x7f0000001ec0)=""/74, 0x4a}, 0x1}, {{&(0x7f0000001f40)=@un=@abs, 0x80, &(0x7f0000002000)=[{&(0x7f0000001fc0)=""/17, 0x11}], 0x1, &(0x7f0000002040)=""/166, 0xa6}, 0xe10d}, {{&(0x7f0000002100)=@hci, 0x80, &(0x7f00000022c0)=[{&(0x7f0000002180)=""/51, 0x33}, {&(0x7f00000021c0)=""/104, 0x68}, {&(0x7f0000002240)=""/114, 0x72}], 0x3}, 0x5}, {{&(0x7f0000002300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002800)=[{&(0x7f0000002380)=""/171, 0xab}, {&(0x7f0000002440)=""/154, 0x9a}, {&(0x7f0000002500)=""/251, 0xfb}, {&(0x7f0000002600)=""/72, 0x48}, {&(0x7f0000002680)=""/139, 0x8b}, {&(0x7f0000002740)=""/149, 0x95}], 0x6, &(0x7f0000002880)=""/188, 0xbc}, 0xb74}], 0x7, 0x2040, &(0x7f0000002b00)={0x77359400}) setsockopt$inet6_int(r2, 0x29, 0x17, &(0x7f0000000080)=0x7, 0x4) 1.126803508s ago: executing program 3 (id=5078): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004500090000000000000100f102000000080002"], 0x1c}}, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90224fc60", 0x14}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r3) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r5, 0x205, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x20000004) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ipvlan1\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x8, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014, 0x402}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_INTERVAL={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r8, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff7bdb}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x40000) (async) openat$cgroup_procs(r7, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r10, &(0x7f0000000240), &(0x7f0000000080)=@tcp}, 0x20) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r11, 0x1, 0x46, &(0x7f0000000100)=0x8, 0x4) (async) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000046000701fefffffffcdbdf25047c00000800018004"], 0x1c}}, 0xc000) 1.066584112s ago: executing program 4 (id=5079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724", 0x2}], 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x10, 0x20, 0x1, 0x0, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r3}}}}]}, 0x38}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c0000800800c7b2fabf00022c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a3100000000140000001100010000bbc3d17a1e15066e3d96a2000000000000000100000a"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.065205743s ago: executing program 1 (id=5080): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010006030000000044000500fe880000000000000000000000000101000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}}, 0x0) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) pipe(&(0x7f0000002740)) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$kcm(r4, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3, 0x3}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1}, 0x41) r6 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r6, 0x2) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) 956.820908ms ago: executing program 2 (id=5081): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r6, @ANYBLOB="75054244cf636fd508c3a3e0af1890d144d0"], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x7fff) (async, rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, 0x0) (async) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0xee) (async) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) (async) listen(r8, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 944.974207ms ago: executing program 3 (id=5082): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async, rerun: 64) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40000000000000061110a000000000016000000000000009500740000000000a8c9c5eb1760fa4539957d002ae718b9212fec7dfbdc410fa090107fec3ff8c63ad775a687134d07bcc7ee752556094689c5f86edc8d1f216b3d90b050424af2dcc9ed931502de6e7d51f96a715c8efee73a4cc0180d55b3fcfb442ae4cc35d1009fc4848c923460db24d3d8a336fbe22269caf153886f9e16e91930cbfca3c6bf5cb005dd10ef4915bcbf0a11bec4b2874ace36185c5ffe1398704b469a29f906b6843b0800b6aae0091f383f191839e5b1db91fb873bb9e620"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async, rerun: 32) socketpair(0x25, 0x3, 0x6, &(0x7f0000000100)) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0), 0x4) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) 943.931264ms ago: executing program 0 (id=5083): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000002c0)=0x10401, 0x4) recvfrom$l2tp6(r0, &(0x7f0000000000)=""/4, 0x4, 0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff02000000000000000000000000000100000e22009c90"], 0x0) 886.744341ms ago: executing program 1 (id=5084): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="89e7ee0c7cdad9b4b47380c988cafb", 0x2a}, {&(0x7f0000000340)="448b7cff000000000000", 0xa}, {&(0x7f0000000100)="301ed9f9a338ef93c403155b88695211f0", 0x11}], 0x3) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x4, 0x70bd2a, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 790.811492ms ago: executing program 4 (id=5085): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) r2 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x4040004) socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x0, {{0x2}, {@void, @void}}}, 0x14}}, 0x0) 720.782645ms ago: executing program 3 (id=5086): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r0, &(0x7f0000000040)=""/4, 0x4, 0x40000040, &(0x7f0000000100)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) r6 = socket(0x2a, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40080}, 0xa, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0100000001901800000000000000000a00000234000f800800014000000005080001400000af4408000140fffffffc080001400000008108000240000000020800014000000002c8000d80080002000a010101140005002001000000000000000000000000000214000400fe88000000000000000000000000010114000000000000000014000400fe88000000000000000000000000000114000380060001004e220000060002004e24000014000400fe8000000000000000000000000000bb440003800600020000650000060002004e220000060001004e210000060002004e200000060001004e210000060001004e210000060002004e240000060001004e210000080015400000000308001a4000000101060012400002000008000840000040370c00188008000340000000ff00"/316], 0x13c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x28, r5, 0x533, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0xc081}, 0x4000) setsockopt$sock_attach_bpf(r3, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x31, &(0x7f0000000640)=r2, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x31, &(0x7f0000000100), 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xe70, 0x30, 0x25, 0x0, 0x0, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x6}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {0x4}, {}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4000}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe70}}, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r7, 0x5411, &(0x7f0000000180)) r8 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt(r8, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)={0x788, 0x29, 0x10, 0x70bd2b, 0x25dfdbfc, {0x11}, [@typed={0x8, 0x12b, 0x0, 0x0, @u32=0xe}, @generic="5f4775053b3ac2fb63fe846390a9dd9691d0ae4e", @generic="7c499f02af0edb680f43ec483dd0444a850bf6e36cd86d3c64e0fe82acc30eb3c940dc21db014bd268a38fcc2a7c62e0f33872e1686e17e6d0b84032494eb4baf6817ecb93a3739f6dd6cda94b72e6d3d772e953fd9870a4e2c5a4b59155dad4e04abdd30b7f626d21a16c2fd03e1aea77028ed95942ed536697e42b70da31e8f54a6cbb891ba262469b2c265201f7c785173f776e797de117f026eddf74b567e44a1946edfd587bfa03c7fc60f3ba939ef1dc9528fc9c9ed7cc2dbdb472a8825266ff005905c1d8197f3b9e288a4d02457b4424f8dde41d0878e23fe2ab6f1aae45a75e0b9b1fb733f12ae3bfff2d5f946fe83eda6f30a42ad8a73f8951efc437ae02f9fa0d8c51018953ef22077c95478c96580b5de1deee77e74166477edabaed21a3a85fe3217bbb40232205353805bd23503d6751d8feec26d86c966692e4689c39d47806157f0bd89a2edbc79a6f371142f594a64de2d5d115b07ea28db1ebf47128e30968a31fa6471688df4d95d1b3228c402f781b0b66a05fe103b355462fd10042726ac8caafdf8b135d4b3f93c1986cfa5f98ddea30e7e2fabe7b8b6d02d5395855001ce1106a79af4a754493bf6f5c02165bd0db58e5bda002ac87e5030c8f9caade14f6ce6b0558cd5baa0607fe7d057ddc572c65adc540cb1d9ef32ffb1bfa98a9d8d7b3ea731e52181c5879f396babfe754b7160606218173f11a06ab92a2faca95a7f3616a0ea07046448040184e043b1db9c4e9967d5df2125f4ecb396379b52c80b769d1a4050c4d608c91659098f04691a70a480f51563a0f6b67e8ce40653746622b13a75862f5e2ed00c97e559ca64fba277c789844e30f39c150d1fcb690ce1d0ee5f4c92799a7ce6149961f6d48a2a1520a253ba88e71f28f23d713981cabd7901cc2c2f7ecc82798401728432208fcf82e40ce54cdbe5e543cdf9acd6fab947c5ac8cd95ee74c1ff6daafd37c5c197a1bf54832bc00167caefbe7037fc3c0a2824d88b7aae16bf5c4e7cf01176f8213f453740c2a617c291192067c3788353b7afbc075034de6b9e7599dcaf9afec4935e28863662359f67f1ef36baeb1cb376f9c0b52064ceb02ea82e41d297c364a7d41390f2d64545da45da271ebb5957ed74e37fa36e568347a91e80822d0ec0991540bfb451f4bf972c8547cbe27074660a756ee6c5224e45d718726a3ede86eb7d026c9011f8dce70d56cf5625fa3edc2ff90edfd17a67441e32afeb2d7810835564cf8415bb4b76c02db89b2989c5c4573f5d4165b1c230f674af1284428344278254a65f8801fb10462da74efba32bd4f6da3e8bde0054e9e22c7da340c044fafc567f81e3e6eae27712a0576c08ae299fa119fc7323f30b1f378b4362dc6a0a278be1c0dee7bf9fc1e7b8dc25d8ad52a383805667af2e8c79b944aea86b35b26d3892be37b4a5f7cb99f891aa683e42a89ecaca21a5fb6a084a069543017117fc6c3c0667db3fcb520d55c8652e6a00a16e3af8de43c3dfc2b77e4a20061d2d3f011e979e529f4142c75859e1f833b86758db0ccbe85652ec6d9c82f9767b888ce96001cbcde0e8d1e308123140f1f91d72b2d49138f5361292ed10eae3d55a8deb203e1f46a0a898e7db6be5e1e1285b701de4a14db106581efe2cd0940ed3a9959751d119aaff37dae758e66d96ec7fe44a894c89cb7a65e2d4f708231fa36c3abd4dc59f5126e599bc4bc14fa639c424ef264f442f8102e45b42f8bf12d36547308bef0347ca1eb753371af3f92ccc1e77a9e77627d6c7040ac1d91e07ed21f8503fb5bceb0d264729ef4224c5fe800327077f37224ff4035fb9284c2893c6d35ecc31ec94b9db404743a06c2649a3761b52c5c429bbbb64834deaa473a141641551ba6f5de346862f029ed8b5da358f36fd023cc8381ef261561e75575c3f9ebb11ac33d94588a659b83670703b3dad4d2fb1f9750f29a37acb76d914048a0f48f81a6b7ecf5d304d4667d758b9d9305a76c167efbf281a15ea2b7ff722e70fc212a43979364e24006ea1379f83428f5abaa017f0c371a119c5dfd2eb985810f5436534962149bc08ce36e55218b14c0c38b40abe84d5d0c6355c45a50b084839ab72c6045d399e0ee508bd165231a7ade14d1ff9bb7a303b95ba5e1a7c81737e00abe3876d046f53056404f2fdc85f832e4009a5ce39a3ea6ab0871fc254ff850aed6a1a9962955acbc2d675c735dfd0d2ef24f7b3f06683a9200a764dd48436f93a8463eba37440a92697f71724c1ba7d01e8fbd79d8b35d76ed38b2312c74d6db1a73394d116830bbf5db7fffa0a68dcb7a79de2908e3c9dbaa7876ca87ab3b50af0c4c81c7e6ce0f9e0d9b673c408273cdd4b4186dc7b6e4d840597baf8c8f8c961a932868174f7e35f385e7ac31c8dfafa8b66a4eba7fae51cc02b6ca390268781ffc2a77ab34b05d0cc080b0be5877b5a6ba9b337ccf3b10b3fe004d18b2c7e55b2576cb13cab173e6e007b262ddbf823cd5d7b37cade7a1690c0e8c9f87ffaf81e309661892203504a9960cbfccb89765ded50d8675c2984a75f3886ac48ce922f8b67f6efabb957c0e3e64325d54f1deb1c7ebdd8538ad5aadb0f656abfd537ef166b449e9d9c1937436c4c2e1e6f615b2bf0ad36"]}, 0x788}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r9, &(0x7f0000000f40)={{0x6, @rose}, [@default, @bcast, @netrom, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x8c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}]}]}, 0x8c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 658.405382ms ago: executing program 2 (id=5087): r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) (async) shutdown(r0, 0x0) (async) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, 0x0, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000800)={0x0, 0x6}, &(0x7f0000000840)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000880)={r4, @in6={{0xa, 0x1, 0xa2ef, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffffd25f}}}, &(0x7f0000000940)=0x84) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000980)={0x0, r2}, 0x8) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x10, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7748}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_query, @ldst={0x3, 0x1, 0x1, 0x2, 0x0, 0x50, 0xffffffffffffffff}, @tail_call]}, &(0x7f00000005c0)='syzkaller\x00', 0x4, 0x2b, &(0x7f0000000600)=""/43, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000640)=[0x1, 0x1, r2, 0x1], &(0x7f0000000680)=[{0x4, 0x5, 0x6, 0x2}], 0x10, 0x7fffffff}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x200, 0x9377b5336e15b955}}}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}]}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x64}}, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4c0, 0x98, 0x138, 0x428, 0x0, 0x0, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, 0x0, {[{{@ip={@remote, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x9}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@private=0xa010100, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x32}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x9, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x3, 0x8}, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) 594.966423ms ago: executing program 2 (id=5088): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0xf, 0x6, 0x8, 0x56}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x85}, 0xc0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x70bd27, 0x25dfdbfc, {0x1}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001600156f00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="140003"], 0x2c}}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x54, &(0x7f0000000240)=[@in6={0xa, 0x4, 0xb4, @rand_addr=' \x01\x00', 0xc17}, @in6={0xa, 0x4e24, 0x10000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80}, @in6={0xa, 0x4e22, 0x5, @mcast2, 0x401}]}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000400)={r4, 0xdd}, &(0x7f0000000440)=0x8) 0s ago: executing program 0 (id=5089): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvfrom(r2, 0x0, 0x0, 0x40002062, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0xa0, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_NEWDST={0x84, 0x13, [{0x8, 0x0, 0x1}, {0x48}, {0x999f}, {}, {0xa67}, {0x9}, {0xa7}, {0x831}, {0x2}, {0x6, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x2}, {0xc}, {0x4, 0x0, 0x1}, {0xffb6b, 0x0, 0x1}, {0x5}, {0x101}, {}, {0x7}, {0x208}, {0x3, 0x0, 0x1}, {0x8}, {0x7}, {0xb, 0x0, 0x1}, {0x2}, {0x7f, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x8f, 0x0, 0x1}, {0xd4}, {0x6, 0x0, 0x1}]}]}, 0xa0}}, 0x4000) bind$unix(r3, &(0x7f00000000c0)=@abs={0x1, 0x5c}, 0x6e) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, 0x20010, r4, 0x2186d000) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000080)={'veth1_to_bridge\x00', &(0x7f00000000c0)=@ethtool_rxfh_indir={0x38, 0x5, [0x2, 0x6caa80, 0xfffffff8, 0x10, 0x3]}}) kernel console output (not intermixed with test programs): ich could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.528992][T18070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.600583][T18070] hsr_slave_0: entered promiscuous mode [ 529.607585][T18070] hsr_slave_1: entered promiscuous mode [ 529.614219][T18070] debugfs: 'hsr0' already exists in 'hsr' [ 529.620346][T18070] Cannot create hsr debugfs directory [ 529.773481][T18070] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.783713][T18070] netdevsim netdevsim0 eth3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 529.794241][T18070] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 529.804970][T18070] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 529.977157][T18070] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.989309][T18070] netdevsim netdevsim0 eth2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 529.999593][T18070] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 530.010146][T18070] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 530.044361][T18137] netlink: 'syz.2.3235': attribute type 11 has an invalid length. [ 530.068046][T18140] openvswitch: netlink: Key type 270 is out of range max 32 [ 530.127919][T18135] ip6gre0: Caught tx_queue_len zero misconfig [ 530.158024][ T50] Bluetooth: hci2: command tx timeout [ 530.229359][T18070] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.241374][T18070] netdevsim netdevsim0 eth1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 530.283077][T18070] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 530.293414][T18070] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 530.417155][T18070] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.429928][T18070] netdevsim netdevsim0 eth0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 530.444564][T18070] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 530.456905][T18070] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 530.924975][T18170] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 530.953545][T18169] ipt_REJECT: TCP_RESET invalid for non-tcp [ 531.020834][T18168] __nla_validate_parse: 3 callbacks suppressed [ 531.020850][T18168] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3245'. [ 531.207645][T18179] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3247'. [ 531.239907][T18070] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 531.251841][T18070] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 531.261695][T18181] netlink: 'syz.4.3248': attribute type 12 has an invalid length. [ 531.287503][T18181] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3248'. [ 531.315058][T18070] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 531.342925][T18070] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 531.406963][T18070] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 531.422875][T18070] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 531.461948][T18070] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 531.474938][T18186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.497206][T18070] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 531.538335][T18186] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3251'. [ 531.584980][T18186] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3251'. [ 531.611557][T18186] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3251'. [ 531.862521][T18070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.941263][T18070] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.979318][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.986614][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.003004][T18214] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3258'. [ 532.052698][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.060453][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.098753][T18215] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3258'. [ 532.226416][ T50] Bluetooth: hci2: command tx timeout [ 532.349233][T18228] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3261'. [ 532.397283][T18228] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3261'. [ 532.758664][T18070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.941228][T18249] GUP no longer grows the stack in syz.2.3268 (18249): 200000003000-20000000a000 (200000001000) [ 532.962211][T18248] netlink: 'syz.4.3269': attribute type 4 has an invalid length. [ 532.972778][T18070] veth0_vlan: entered promiscuous mode [ 532.988615][T18249] CPU: 1 UID: 0 PID: 18249 Comm: syz.2.3268 Not tainted syzkaller #0 PREEMPT(full) [ 532.988644][T18249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 532.988656][T18249] Call Trace: [ 532.988664][T18249] [ 532.988673][T18249] dump_stack_lvl+0xe8/0x150 [ 532.988719][T18249] __get_user_pages+0x2453/0x29d0 [ 532.988768][T18249] ? __gup_longterm_locked+0xc4e/0x1630 [ 532.988794][T18249] ? down_read_killable+0x1bb/0x340 [ 532.988822][T18249] ? try_get_folio+0xec/0x650 [ 532.988852][T18249] __gup_longterm_locked+0xdcf/0x1630 [ 532.988908][T18249] gup_fast_fallback+0x1d82/0x22e0 [ 532.988966][T18249] ? __pfx_gup_fast_fallback+0x10/0x10 [ 532.988994][T18249] ? is_valid_gup_args+0x11f/0x200 [ 532.989020][T18249] ? get_user_pages_fast+0x4d/0xb0 [ 532.989047][T18249] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 532.989077][T18249] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 532.989112][T18249] iov_iter_get_pages2+0x5e/0xa0 [ 532.989135][T18249] __se_sys_vmsplice+0x7b3/0x1490 [ 532.989190][T18249] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 532.989219][T18249] ? __pfx_futex_wait+0x10/0x10 [ 532.989306][T18249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.989329][T18249] do_syscall_64+0x15f/0xf80 [ 532.989353][T18249] ? trace_irq_disable+0x3b/0x140 [ 532.989374][T18249] ? clear_bhb_loop+0x40/0x90 [ 532.989399][T18249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.989418][T18249] RIP: 0033:0x7f0e2f39c819 [ 532.989438][T18249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.989456][T18249] RSP: 002b:00007f0e30323028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 532.989477][T18249] RAX: ffffffffffffffda RBX: 00007f0e2f616090 RCX: 00007f0e2f39c819 [ 532.989492][T18249] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007 [ 532.989504][T18249] RBP: 00007f0e2f432c91 R08: 0000000000000000 R09: 0000000000000000 [ 532.989516][T18249] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 532.989527][T18249] R13: 00007f0e2f616128 R14: 00007f0e2f616090 R15: 00007ffc6017b768 [ 532.989560][T18249] [ 533.283581][T18070] veth1_vlan: entered promiscuous mode [ 533.297313][T18250] netlink: 'syz.4.3269': attribute type 4 has an invalid length. [ 533.327430][T18070] veth0_macvtap: entered promiscuous mode [ 533.359408][T18070] veth1_macvtap: entered promiscuous mode [ 533.369210][T18248] netlink: 'syz.4.3269': attribute type 4 has an invalid length. [ 533.395665][T18070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.442662][T18070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.488274][ T1106] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.500366][T18257] netlink: 'syz.2.3271': attribute type 1 has an invalid length. [ 533.515830][ T1106] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.553091][ T1106] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.564145][ T1106] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.789440][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.810775][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.888928][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.900072][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.089037][T18269] can: request_module (can-proto-4) failed. [ 534.306639][ T50] Bluetooth: hci2: command tx timeout [ 534.379320][T18283] lo: entered promiscuous mode [ 534.390630][T18283] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 534.983228][T18304] netlink: 'syz.0.3286': attribute type 12 has an invalid length. [ 535.200158][T18319] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 535.296690][T17114] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 535.312106][T17114] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 535.333502][T17114] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 535.343409][T17114] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 535.375498][T17114] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 535.619921][T18332] 8021q: adding VLAN 0 to HW filter on device bond1 [ 535.628139][T18332] bridge0: port 3(bond1) entered blocking state [ 535.634974][T18332] bridge0: port 3(bond1) entered disabled state [ 535.642739][T18332] bond1: entered allmulticast mode [ 535.651148][T18332] bond1: entered promiscuous mode [ 535.657047][T18332] bridge0: port 3(bond1) entered blocking state [ 535.663578][T18332] bridge0: port 3(bond1) entered forwarding state [ 535.675540][T18326] vxcan1 speed is unknown, defaulting to 1000 [ 536.042838][T18355] ±ÿ: renamed from team_slave_1 (while UP) [ 536.076183][ T128] bridge0: port 3(bond1) entered disabled state [ 536.158305][T18361] __nla_validate_parse: 8 callbacks suppressed [ 536.158327][T18361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3303'. [ 536.208327][T18364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3303'. [ 536.264605][T18363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3304'. [ 536.294004][T18361] netlink: 'syz.0.3303': attribute type 3 has an invalid length. [ 536.302480][T18361] netlink: 766 bytes leftover after parsing attributes in process `syz.0.3303'. [ 536.370070][T18363] syzkaller0: entered promiscuous mode [ 536.377463][T18363] syzkaller0: entered allmulticast mode [ 536.385610][ T50] Bluetooth: hci2: command tx timeout [ 536.999532][T18394] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3308'. [ 537.428912][ T50] Bluetooth: hci1: command tx timeout [ 539.508109][ T50] Bluetooth: hci1: command tx timeout [ 539.704406][ T12] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.730088][ T12] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.754933][ T12] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 539.837856][T18417] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3312'. [ 539.906455][ T12] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.949623][ T12] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.992168][ T12] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 540.076800][T18326] chnl_net:caif_netlink_parms(): no params data found [ 540.147832][ T12] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.178477][ T12] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.194308][ T12] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 540.300753][T18429] bond1 (unregistering): Released all slaves [ 540.431193][T18422] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 540.470799][ T12] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.485932][ T12] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.496621][ T12] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 540.676221][T18446] syzkaller0: entered promiscuous mode [ 540.690930][T18451] netlink: 'syz.3.3320': attribute type 2 has an invalid length. [ 540.698939][T18446] syzkaller0: entered allmulticast mode [ 540.749968][T18451] vþ: entered promiscuous mode [ 540.815148][T18326] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.830782][T18326] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.841554][T18326] bridge_slave_0: entered allmulticast mode [ 540.850308][T18326] bridge_slave_0: entered promiscuous mode [ 540.874675][T18326] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.906730][T18326] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.938337][T18326] bridge_slave_1: entered allmulticast mode [ 540.974047][T18326] bridge_slave_1: entered promiscuous mode [ 541.071423][T18468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3323'. [ 541.127907][T18470] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3326'. [ 541.138258][T18326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.169127][T18470] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3326'. [ 541.187280][T18470] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3326'. [ 541.211283][T18326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.397777][T18326] team0: Port device team_slave_0 added [ 541.436209][ T12] bond1: left allmulticast mode [ 541.451578][ T12] bond1: left promiscuous mode [ 541.466964][ T12] bridge0: port 3(bond1) entered disabled state [ 541.519222][T18483] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3329'. [ 541.560033][ T12] vlan1: left allmulticast mode [ 541.571201][ T12] veth0_vlan: left allmulticast mode [ 541.586812][ T50] Bluetooth: hci1: command tx timeout [ 541.598581][T18479] netlink: 'syz.3.3329': attribute type 10 has an invalid length. [ 541.793399][T18491] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3333'. [ 541.824181][ T12] bond14 (unregistering): (slave ip6gre1): Releasing backup interface [ 541.834231][ T12] ip6gre1 (unregistering): left promiscuous mode [ 541.858865][T18492] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3333'. [ 541.917225][ T12] bond8 (unregistering): (slave xfrm1): Releasing backup interface [ 541.952320][ T12] erspan0 (unregistering): left promiscuous mode [ 541.986926][ T12] gretap0 (unregistering): left promiscuous mode [ 542.080065][ T12] bond12 (unregistering): (slave geneve3): Releasing active interface [ 542.088810][ T12] geneve3 (unregistering): left allmulticast mode [ 542.102744][ T12] bond4 (unregistering): (slave geneve2): Releasing active interface [ 542.224488][ T12] bond9 (unregistering): (slave bridge2): Releasing backup interface [ 542.251338][ T12] bond15 (unregistering): (slave bridge3): Releasing active interface [ 542.331688][ T12] bond17 (unregistering): (slave bridge5): Releasing backup interface [ 542.340951][ T12] bridge5 (unregistering): left promiscuous mode [ 542.391538][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.403054][ T12] bond_slave_1: left allmulticast mode [ 542.411310][ T12] bond0 (unregistering): Released all slaves [ 542.423430][ T12] bond1 (unregistering): Released all slaves [ 542.444610][ T12] bond2 (unregistering): Released all slaves [ 542.462596][ T12] bond3 (unregistering): Released all slaves [ 542.480017][ T12] bond4 (unregistering): Released all slaves [ 542.496416][ T12] bond5 (unregistering): Released all slaves [ 542.527157][ T12] bond6 (unregistering): Released all slaves [ 542.551688][ T12] bond7 (unregistering): Released all slaves [ 542.569938][ T12] bond8 (unregistering): Released all slaves [ 542.589179][ T12] bond9 (unregistering): Released all slaves [ 542.605037][ T12] bond10 (unregistering): Released all slaves [ 542.631679][ T12] bond11 (unregistering): Released all slaves [ 542.655122][ T12] bond12 (unregistering): Released all slaves [ 542.672511][ T12] bond13 (unregistering): Released all slaves [ 542.691034][ T12] bond14 (unregistering): Released all slaves [ 542.716019][ T12] bond15 (unregistering): Released all slaves [ 542.733060][ T12] bond16 (unregistering): Released all slaves [ 542.749818][ T12] bond17 (unregistering): Released all slaves [ 542.768962][ T12] bond18 (unregistering): Released all slaves [ 542.787707][T18326] team0: Port device team_slave_1 added [ 542.894803][T18479] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 542.975014][T18489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 543.047721][T18326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.076816][T18326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.119667][T18326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.158123][ T12] tipc: Left network mode [ 543.204396][T18326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.225590][T18326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.291268][T18326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.321016][T18497] netlink: 'syz.4.3336': attribute type 1 has an invalid length. [ 543.373785][T18503] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3336'. [ 543.620909][T18326] hsr_slave_0: entered promiscuous mode [ 543.656613][T18326] hsr_slave_1: entered promiscuous mode [ 543.667755][ T50] Bluetooth: hci1: command tx timeout [ 543.683370][T18326] debugfs: 'hsr0' already exists in 'hsr' [ 543.709490][T18326] Cannot create hsr debugfs directory [ 544.999085][T18536] syzkaller0: entered promiscuous mode [ 545.017015][T18536] syzkaller0: entered allmulticast mode [ 545.150864][ T5488] 8021q: adding VLAN 0 to HW filter on device eth1 [ 548.967934][T18558] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 549.126154][ T12] hsr_slave_0: left promiscuous mode [ 549.144287][ T12] veth0_macvtap: left promiscuous mode [ 549.154509][ T12] veth1_vlan: left promiscuous mode [ 549.161175][ T12] veth0_vlan: left promiscuous mode [ 549.361917][T18576] sctp: [Deprecated]: syz.0.3354 (pid 18576) Use of int in maxseg socket option. [ 549.361917][T18576] Use struct sctp_assoc_value instead [ 549.751957][ T128] smc: removing ib device syz2 [ 550.129759][ T24] vxcan1 speed is unknown, defaulting to 1000 [ 550.136136][ T24] syz2: Port: 1 Link DOWN [ 550.345402][T18593] Cannot find add_set index 0 as target [ 550.994247][T18603] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 551.019344][T18603] bond2 (unregistering): Released all slaves [ 551.861371][T18636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3373'. [ 551.894309][T18636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3373'. [ 551.915949][T18636] netlink: 'syz.4.3373': attribute type 15 has an invalid length. [ 551.934148][T18641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3375'. [ 552.131595][T18636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3373'. [ 552.158991][T18636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3373'. [ 552.185469][T18636] netlink: 'syz.4.3373': attribute type 15 has an invalid length. [ 552.234356][T18652] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3377'. [ 552.323633][ T9504] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 552.358299][ T9504] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 552.461427][ T9504] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 552.509087][ T9504] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 552.555746][T18647] syzkaller1: entered promiscuous mode [ 552.576734][T18647] syzkaller1: entered allmulticast mode [ 552.893039][T18326] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 552.950970][T18326] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 552.981203][T18326] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 553.043257][T18326] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 553.309307][T18326] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 553.354652][T18326] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 553.385904][T18683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3384'. [ 553.400217][T18326] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 553.457990][T18326] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 554.055508][T18684] syzkaller0: entered promiscuous mode [ 554.082613][T18684] syzkaller0: entered allmulticast mode [ 558.565518][T18748] netlink: 'syz.0.3394': attribute type 1 has an invalid length. [ 558.653856][T18748] 8021q: adding VLAN 0 to HW filter on device bond1 [ 558.676475][T18750] 8021q: adding VLAN 0 to HW filter on device bond1 [ 558.683767][T18750] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 558.700621][T18750] bond1: (slave vcan1): Error -95 calling set_mac_address [ 558.817065][ T12] IPVS: stop unused estimator thread 0... [ 558.829154][T18326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.902708][T18326] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.932654][T18760] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 559.011385][ T9504] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.020858][ T9504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.063978][ T9504] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.071880][ T9504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.494007][T18326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.551834][T18326] veth0_vlan: entered promiscuous mode [ 559.565009][T18326] veth1_vlan: entered promiscuous mode [ 559.601366][T18326] veth0_macvtap: entered promiscuous mode [ 559.612586][T18326] veth1_macvtap: entered promiscuous mode [ 559.636488][T18326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.657682][T18326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.675598][ T1158] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.684696][ T1158] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.696400][ T1158] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.706253][ T1158] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.812796][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.821384][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.857604][ T9504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.871672][ T9504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.442565][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 563.448951][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 568.455363][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 568.463621][ C1] lec:lec_tx_timeout: lec0 [ 575.504378][T18787] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.3405'. [ 575.522245][T18781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3406'. [ 575.534321][T18780] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3403'. [ 575.543513][T18787] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 575.556051][T18781] openvswitch: netlink: Duplicate or invalid key (type 0). [ 575.568519][T18791] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.3405'. [ 575.581044][T18781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 575.592402][T18781] netlink: 'syz.4.3406': attribute type 1 has an invalid length. [ 575.600892][T18781] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3406'. [ 575.619013][T18791] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 575.627450][T18781] netlink: 'syz.4.3406': attribute type 1 has an invalid length. [ 575.651159][T18781] netlink: 'syz.4.3406': attribute type 8 has an invalid length. [ 575.669594][T18781] netlink: 606 bytes leftover after parsing attributes in process `syz.4.3406'. [ 575.724441][T18781] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3406'. [ 575.761330][T18795] Cannot find set identified by id 65534 to match [ 575.858197][T18799] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3409'. [ 575.972267][ T8455] lec:lec_start_xmit: lec0:No lecd attached [ 576.209983][T18815] netlink: 'syz.4.3414': attribute type 1 has an invalid length. [ 576.243999][T18817] xt_CONNSECMARK: invalid mode: 0 [ 576.266548][T18824] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 576.314054][T18815] bond2: entered promiscuous mode [ 576.338784][T18815] bond2: entered allmulticast mode [ 576.353079][T18815] 8021q: adding VLAN 0 to HW filter on device bond2 [ 576.450095][T18825] macvlan2: entered promiscuous mode [ 576.468113][T18825] macvlan2: entered allmulticast mode [ 576.480007][T18825] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 576.634024][T18826] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 576.677308][ T50] block nbd0: Receive control failed (result -32) [ 576.688515][T18838] bridge0: port 1(bridge_slave_0) entered learning state [ 576.782347][T18845] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20003 [ 577.044990][T18856] syzkaller0: entered promiscuous mode [ 577.062191][T18856] syzkaller0: entered allmulticast mode [ 577.094332][T18854] xt_hashlimit: size too large, truncated to 1048576 [ 577.506333][T18874] netlink: 'syz.1.3432': attribute type 21 has an invalid length. [ 577.536961][T18874] netlink: 'syz.1.3432': attribute type 1 has an invalid length. [ 577.549448][T18869] netlink: 'syz.2.3431': attribute type 16 has an invalid length. [ 577.568502][T18869] netlink: 'syz.2.3431': attribute type 17 has an invalid length. [ 577.583285][T18874] netlink: 'syz.1.3432': attribute type 4 has an invalid length. [ 577.635433][T18877] netlink: 'syz.1.3432': attribute type 4 has an invalid length. [ 577.661182][T18869] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.668806][T18869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.676621][T18869] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.683968][T18869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.719204][T18880] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3434'. [ 577.741626][T18869] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 577.850050][T18879] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.890442][T18879] bridge_slave_1: left allmulticast mode [ 577.906469][T18879] bridge_slave_1: left promiscuous mode [ 577.923985][T18879] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.960739][T18879] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 578.129033][T18892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3438'. [ 578.264886][T18892] veth0_to_bond: entered allmulticast mode [ 578.447016][T18908] xt_l2tp: v2 tid > 0xffff: 1114244 [ 578.642481][ T128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.670474][ T128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.355941][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5370 ms [ 581.364396][ C1] lec:lec_tx_timeout: lec0 [ 582.661244][T18968] __nla_validate_parse: 6 callbacks suppressed [ 582.661264][T18968] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3455'. [ 582.995979][T18987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3463'. [ 583.007667][T18982] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 583.214074][T18991] syzkaller0: entered promiscuous mode [ 583.230897][T18991] syzkaller0: entered allmulticast mode [ 587.536203][T19040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3474'. [ 587.551947][T19046] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.3476'. [ 587.570650][T19046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3476'. [ 587.922074][T19058] validate_nla: 7 callbacks suppressed [ 587.922094][T19058] netlink: 'syz.4.3481': attribute type 1 has an invalid length. [ 588.037716][T19058] bond3: entered promiscuous mode [ 588.071373][T19058] 8021q: adding VLAN 0 to HW filter on device bond3 [ 588.138743][T19069] 8021q: adding VLAN 0 to HW filter on device bond3 [ 588.166035][T19069] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 588.191861][T19069] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 588.208566][T19069] bond3: (slave vti0): making interface the new active one [ 588.217054][T19069] vti0: entered promiscuous mode [ 588.224117][T19069] bond3: (slave vti0): Enslaving as an active interface with an up link [ 588.257244][T19058] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3481'. [ 588.646340][T19104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3493'. [ 588.658920][T19106] syzkaller0: entered promiscuous mode [ 588.666553][T19104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3493'. [ 588.681784][T19106] syzkaller0: entered allmulticast mode [ 588.694439][T19107] vcan0: tx address claim with dest, not broadcast [ 588.720815][T19105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3492'. [ 588.731505][T19105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3492'. [ 588.769155][T19095] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 588.776593][ T795] IPVS: starting estimator thread 0... [ 588.830428][ T50] Bluetooth: hci1: link tx timeout [ 588.841706][ T50] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 588.905806][T19110] IPVS: using max 25 ests per chain, 60000 per kthread [ 588.982843][T19117] veth0: entered promiscuous mode [ 589.650023][T19111] veth0: left promiscuous mode [ 590.865766][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 591.335028][T19084] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 591.576749][T19125] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3499'. [ 591.605734][T19126] netlink: 'syz.4.3498': attribute type 1 has an invalid length. [ 591.635524][T19126] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.819022][T19126] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.902394][ T42] IPVS: starting estimator thread 0... [ 592.007019][T19141] IPVS: using max 27 ests per chain, 64800 per kthread [ 592.055624][T19149] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3507'. [ 592.380992][T19167] xt_hashlimit: overflow, rate too high: 0 [ 592.403982][T19167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3512'. [ 592.427391][T19167] netlink: 'syz.0.3512': attribute type 1 has an invalid length. [ 592.442509][T19167] netlink: 'syz.0.3512': attribute type 2 has an invalid length. [ 592.581340][T19179] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3516'. [ 592.620103][T19179] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3516'. [ 593.135853][T19204] netlink: 'syz.3.3525': attribute type 1 has an invalid length. [ 593.189997][T19209] Unsupported ieee802154 address type: 0 [ 593.217863][T19211] Unsupported ieee802154 address type: 0 [ 593.296208][T19204] bond2: entered promiscuous mode [ 593.307771][T19204] 8021q: adding VLAN 0 to HW filter on device bond2 [ 593.472100][T19219] bond2: (slave bridge3): making interface the new active one [ 593.482541][T19219] bridge3: entered promiscuous mode [ 593.491408][T19219] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 593.774981][T19239] __nla_validate_parse: 34 callbacks suppressed [ 593.775008][T19239] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3530'. [ 593.820918][T19239] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3530'. [ 593.836412][T19239] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3530'. [ 593.856776][T19239] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3530'. [ 594.062204][T19251] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3535'. [ 594.476543][T19282] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3545'. [ 594.868973][T19295] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3548'. [ 594.907938][T19295] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3548'. [ 595.047513][T19310] netlink: 'syz.0.3554': attribute type 2 has an invalid length. [ 595.087663][T19310] netlink: 'syz.0.3554': attribute type 5 has an invalid length. [ 595.342130][T19334] netlink: 'syz.1.3560': attribute type 21 has an invalid length. [ 595.374878][T19334] netlink: 'syz.1.3560': attribute type 6 has an invalid length. [ 595.396965][T19334] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3560'. [ 595.583782][T19349] sctp: [Deprecated]: syz.3.3565 (pid 19349) Use of struct sctp_assoc_value in delayed_ack socket option. [ 595.583782][T19349] Use struct sctp_sack_info instead [ 595.677649][T19352] ipt_REJECT: TCP_RESET invalid for non-tcp [ 595.687108][T19349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3565'. [ 595.707669][T19352] ipt_REJECT: TCP_RESET invalid for non-tcp [ 595.725610][T19352] ipt_REJECT: TCP_RESET invalid for non-tcp [ 596.153990][T19380] openvswitch: netlink: Message has 592 unknown bytes. [ 596.175083][T19380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 596.737328][T19401] netlink: 'syz.4.3583': attribute type 9 has an invalid length. [ 596.809983][T19405] x_tables: ip_tables: ah match: only valid for protocol 51 [ 597.059007][T19411] team1: entered promiscuous mode [ 597.070275][T19411] team1: entered allmulticast mode [ 597.664662][T19443] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 598.622242][T19484] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 598.711458][T19486] netlink: 'syz.1.3608': attribute type 2 has an invalid length. [ 598.779243][T19489] netlink: 'syz.3.3610': attribute type 1 has an invalid length. [ 598.862445][T19489] bond3: entered promiscuous mode [ 598.875121][T19489] 8021q: adding VLAN 0 to HW filter on device bond3 [ 598.916104][T19489] ipvlan2: entered allmulticast mode [ 598.921549][T19489] bond3: entered allmulticast mode [ 598.938502][T19489] ipvlan3: entered allmulticast mode [ 598.995173][T19489] bond3: (slave bridge4): making interface the new active one [ 599.013496][T19489] bridge4: entered promiscuous mode [ 599.038951][T19489] bridge4: entered allmulticast mode [ 599.068976][T19489] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 599.190886][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.793426][T19542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 600.017821][T19556] mac80211_hwsim hwsim48 wlan0: entered promiscuous mode [ 600.226005][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.267551][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.305754][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.742277][T19542] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 602.971459][T19599] tipc: Enabling of bearer rejected, media not registered [ 603.088202][T19602] IPv6: sit1: Disabled Multicast RS [ 603.123500][T19602] sit1: entered allmulticast mode [ 603.293041][T19614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 603.346204][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.555981][T19629] __nla_validate_parse: 11 callbacks suppressed [ 603.556002][T19629] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3651'. [ 603.580608][T19629] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3651'. [ 603.622455][T19626] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3649'. [ 603.754504][T19635] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3654'. [ 604.096659][T19647] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3658'. [ 604.115061][T19651] netlink: 'syz.2.3660': attribute type 10 has an invalid length. [ 604.140431][T19636] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3655'. [ 604.187467][T19652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3659'. [ 604.222054][T19654] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3661'. [ 604.387289][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.412319][T19666] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3666'. [ 604.439708][T19660] syzkaller0: entered promiscuous mode [ 604.446407][T19660] syzkaller0: entered allmulticast mode [ 604.464113][T19666] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3666'. [ 605.037032][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.220518][T19663] delete_channel: no stack [ 605.430644][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.465583][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.516019][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.152031][T19681] hsr_slave_1 (unregistering): left promiscuous mode [ 608.418319][T19704] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 608.450691][T19704] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 608.546478][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.612801][T19714] __nla_validate_parse: 3 callbacks suppressed [ 608.612827][T19714] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3675'. [ 608.976101][T19738] netlink: 'syz.4.3681': attribute type 1 has an invalid length. [ 608.999762][T19738] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3681'. [ 609.029551][T19738] netlink: 'syz.4.3681': attribute type 1 has an invalid length. [ 609.065536][T19738] netlink: 'syz.4.3681': attribute type 8 has an invalid length. [ 609.088711][T19738] netlink: 606 bytes leftover after parsing attributes in process `syz.4.3681'. [ 609.146400][T19733] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 609.179114][T19742] bond4: Unable to set down delay as MII monitoring is disabled [ 609.197567][T19742] bond4 (unregistering): Released all slaves [ 609.268777][T19752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3685'. [ 609.586503][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.626639][T19763] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.3689'. [ 609.647400][T19767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3690'. [ 609.700965][T19767] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 609.735110][T19767] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 609.743447][T19767] gretap1: entered promiscuous mode [ 609.750644][T19767] gretap1: entered allmulticast mode [ 610.042806][T19789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3699'. [ 610.063155][T19788] tipc: Started in network mode [ 610.082633][T19791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3699'. [ 610.091811][T19788] tipc: Node identity ac14140f, cluster identity 4711 [ 610.114745][T19788] tipc: New replicast peer: 255.255.255.255 [ 610.137080][T19788] tipc: Enabled bearer , priority 10 [ 610.143803][T19790] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 610.181014][T19798] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 610.280927][T19798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3700'. [ 610.625573][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.787952][ T5883] IPVS: starting estimator thread 0... [ 610.915386][T19842] IPVS: using max 28 ests per chain, 67200 per kthread [ 611.022287][T19839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3711'. [ 611.083341][T19839] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 611.136137][ T42] tipc: Node number set to 2886997007 [ 611.240239][T19859] netlink: 'syz.1.3716': attribute type 12 has an invalid length. [ 611.669548][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.140027][T19909] netlink: 'syz.2.3734': attribute type 21 has an invalid length. [ 612.182687][T19909] netlink: 'syz.2.3734': attribute type 32 has an invalid length. [ 612.278683][T19909] netlink: 'syz.2.3734': attribute type 25 has an invalid length. [ 612.296339][T19913] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 612.328523][T19913] team0: Device macvlan2 is already an upper device of the team interface [ 612.466992][T19929] sctp: [Deprecated]: syz.2.3740 (pid 19929) Use of struct sctp_assoc_value in delayed_ack socket option. [ 612.466992][T19929] Use struct sctp_sack_info instead [ 612.707712][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.745082][T19945] netlink: 'syz.4.3746': attribute type 1 has an invalid length. [ 612.867694][T19945] 8021q: adding VLAN 0 to HW filter on device bond4 [ 612.950075][T19947] vlan1: entered promiscuous mode [ 612.955976][T19947] bond4: entered promiscuous mode [ 612.961584][T19947] vlan1: entered allmulticast mode [ 612.968242][T19947] bond4: entered allmulticast mode [ 613.025070][T19945] bond4: (slave gretap1): making interface the new active one [ 613.045453][T19945] gretap1: entered promiscuous mode [ 613.054661][T19945] gretap1: entered allmulticast mode [ 613.099393][T19945] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 613.193766][T19959] netlink: 'syz.2.3748': attribute type 26 has an invalid length. [ 613.229791][T19959] netlink: 'syz.2.3748': attribute type 26 has an invalid length. [ 613.398980][T19965] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 613.666225][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.747849][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.914242][T19991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.925554][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.138433][T20000] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 614.298984][T20011] x_tables: duplicate underflow at hook 1 [ 614.422595][T20014] __nla_validate_parse: 14 callbacks suppressed [ 614.422624][T20014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3763'. [ 614.640670][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.706062][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.729473][T20019] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3766'. [ 614.734595][T20021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3765'. [ 614.785626][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.823177][T20026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3768'. [ 614.894308][T20019] netlink: 'syz.2.3766': attribute type 4 has an invalid length. [ 615.010226][T20026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3768'. [ 615.160416][T20036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3770'. [ 615.206305][T20036] tipc: Enabling of bearer rejected, media not registered [ 615.244842][T20039] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3772'. [ 615.278683][T20039] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3772'. [ 615.599839][T20056] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 615.897448][T20073] netlink: 'syz.4.3780': attribute type 21 has an invalid length. [ 615.920855][T20073] netlink: 'syz.4.3780': attribute type 6 has an invalid length. [ 615.959190][T20073] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3780'. [ 616.122782][T20087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3783'. [ 616.788718][ T795] net_ratelimit: 3 callbacks suppressed [ 616.788742][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.867311][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.151126][ T24] IPVS: starting estimator thread 0... [ 617.238587][T20143] netlink: 'syz.0.3799': attribute type 1 has an invalid length. [ 617.255475][T20145] IPVS: using max 30 ests per chain, 72000 per kthread [ 617.274947][T20146] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 617.292620][T20143] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:20003 [ 617.326083][T20146] syzkaller0: entered promiscuous mode [ 617.352681][T20146] syzkaller0: entered allmulticast mode [ 617.459694][T20156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.664051][T20166] netlink: 'syz.4.3805': attribute type 1 has an invalid length. [ 617.829645][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.906476][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.937374][T20171] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 617.949668][T20171] bond5: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 617.961337][T20183] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 617.966086][T20171] bond5: (slave vxcan3): making interface the new active one [ 617.985142][T20171] bond5: (slave vxcan3): Enslaving as an active interface with an up link [ 618.233562][T20197] : renamed from hsr0 (while UP) [ 618.327812][T20201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 618.549152][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.865569][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.904049][T20224] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 619.026928][T20229] syzkaller0: entered allmulticast mode [ 619.816849][T20263] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 619.848615][T20263] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.121826][T20263] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 620.135395][T20263] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.149474][T20293] __nla_validate_parse: 15 callbacks suppressed [ 620.149495][T20293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3845'. [ 620.173228][T20293] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3845'. [ 620.183406][T20293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3845'. [ 620.319290][T20299] netlink: 'syz.3.3848': attribute type 11 has an invalid length. [ 620.330541][T20299] netlink: 'syz.3.3848': attribute type 11 has an invalid length. [ 620.342480][T20299] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3848'. [ 620.406048][T20304] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3850'. [ 620.417696][T20263] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 620.445793][T20263] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.563104][T20263] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 620.574278][T20263] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.738260][T20310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3851'. [ 620.763268][T20310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 620.845805][T20310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.171174][T20340] netlink: 596 bytes leftover after parsing attributes in process `syz.3.3858'. [ 621.285635][ T48] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 256 - 0 [ 621.320232][ T48] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.417297][T20352] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3858'. [ 621.462258][T20354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3862'. [ 621.491246][ T148] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 256 - 0 [ 621.520169][ T148] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.597638][T20363] netlink: 'syz.1.3863': attribute type 1 has an invalid length. [ 621.606096][T20363] netlink: 'syz.1.3863': attribute type 1 has an invalid length. [ 621.734586][ T148] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 256 - 0 [ 621.772179][ T148] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.870971][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 256 - 0 [ 621.911869][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.987830][ T5827] net_ratelimit: 9 callbacks suppressed [ 621.987853][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.067434][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.113322][T20383] netlink: 'syz.1.3867': attribute type 1 has an invalid length. [ 622.147237][T20383] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3867'. [ 622.187653][T20389] netlink: 'syz.1.3867': attribute type 1 has an invalid length. [ 622.211620][T20389] netlink: 'syz.1.3867': attribute type 3 has an invalid length. [ 622.223198][T20391] veth0: entered promiscuous mode [ 622.313817][T20390] veth0: left promiscuous mode [ 622.433703][T20401] netlink: 'syz.4.3873': attribute type 3 has an invalid length. [ 622.468930][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.628145][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.949104][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.062922][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.108069][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.268890][T20440] netlink: 'syz.2.3883': attribute type 39 has an invalid length. [ 623.667764][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.700076][T20453] Cannot find del_set index 4 as target [ 624.148703][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.227226][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.878047][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 624.884884][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 625.211384][T20541] __nla_validate_parse: 13 callbacks suppressed [ 625.211405][T20541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3906'. [ 625.309042][T20541] vlan2: entered allmulticast mode [ 625.315395][T20541] bridge2: entered allmulticast mode [ 625.433944][T20555] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3909'. [ 625.566464][T20560] syz_tun: entered allmulticast mode [ 625.608597][T20561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3911'. [ 625.630774][T20561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3911'. [ 625.962887][T20580] bond6: (slave bond_slave_1): Device is not our slave [ 625.970222][T20580] bond6: option active_slave: invalid value (bond_slave_1) [ 625.986528][T20580] bond6 (unregistering): Released all slaves [ 626.150322][T20590] syzkaller0: entered promiscuous mode [ 626.312779][T20604] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3923'. [ 626.350574][T20604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3923'. [ 626.479051][T20609] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3923'. [ 627.073549][T20639] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.3932'. [ 627.266884][ T795] net_ratelimit: 16 callbacks suppressed [ 627.266905][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.320859][T20657] netlink: 'syz.4.3937': attribute type 1 has an invalid length. [ 627.428636][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.604223][T20674] netlink: 796 bytes leftover after parsing attributes in process `syz.0.3941'. [ 627.677964][T20678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3942'. [ 627.824415][T20678] syzkaller0: entered promiscuous mode [ 627.829029][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.833468][T20685] sctp: [Deprecated]: syz.4.3946 (pid 20685) Use of struct sctp_assoc_value in delayed_ack socket option. [ 627.833468][T20685] Use struct sctp_sack_info instead [ 627.856971][T20678] syzkaller0: entered allmulticast mode [ 628.102731][T20700] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 628.184171][T20695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.196722][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.241032][T20695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.249756][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.306829][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.412037][T20711] syzkaller0: entered promiscuous mode [ 628.427125][T20711] syzkaller0: entered allmulticast mode [ 628.880150][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.205419][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.395570][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5520 ms [ 630.404266][ C1] lec:lec_tx_timeout: lec0 [ 632.466139][ T5883] net_ratelimit: 11 callbacks suppressed [ 632.466161][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.548986][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.619570][T20753] openvswitch: netlink: IP tunnel dst address not specified [ 632.628496][T20752] __nla_validate_parse: 2 callbacks suppressed [ 632.628515][T20752] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3959'. [ 632.957390][T20767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.966375][T20767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.994125][T20767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.004738][T20767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.015499][T20767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.031347][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.043454][T20768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3963'. [ 633.069788][T20768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3963'. [ 633.099777][T20767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.487012][T20779] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3965'. [ 636.529258][T20779] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3965'. [ 636.568439][T20788] syz.2.3966 uses old SIOCAX25GETINFO [ 636.650833][T20789] netlink: 'syz.4.3968': attribute type 12 has an invalid length. [ 636.697008][T20787] xt_TPROXY: Can be used only with -p tcp or -p udp [ 636.918747][T20795] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3970'. [ 637.034699][T20795] netlink: 'syz.0.3970': attribute type 1 has an invalid length. [ 637.187879][T20818] 8021q: VLANs not supported on vcan0 [ 637.417587][T20833] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.3978'. [ 637.637824][T20844] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3982'. [ 637.667681][ T5883] net_ratelimit: 23 callbacks suppressed [ 637.667703][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.690657][T20844] gretap2: entered promiscuous mode [ 637.708036][T20844] gretap2: entered allmulticast mode [ 637.723728][T20847] netlink: 'syz.4.3979': attribute type 64 has an invalid length. [ 637.774139][T20847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3979'. [ 637.802923][T20853] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3983'. [ 638.194249][T20866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3987'. [ 638.204603][T20869] netlink: 'syz.0.3989': attribute type 28 has an invalid length. [ 638.227109][T20869] netlink: 'syz.0.3989': attribute type 3 has an invalid length. [ 638.235435][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.236740][T20869] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3989'. [ 638.277252][T20874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.296455][T20875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.606300][T20895] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 638.659361][T20897] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3998'. [ 638.700279][T20897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.712143][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.724600][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.746610][T20897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.760642][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.840811][T20902] netlink: 'syz.1.3999': attribute type 1 has an invalid length. [ 639.114348][T20906] syzkaller0: entered promiscuous mode [ 639.121093][T20906] syzkaller0: entered allmulticast mode [ 639.132840][T20918] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 639.151737][T20918] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 640.948444][ T8455] lec:lec_start_xmit: lec0:No lecd attached [ 642.867803][ T10] net_ratelimit: 19 callbacks suppressed [ 642.867826][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.402426][T20928] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 643.410129][T20928] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 643.428109][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.430436][T20928] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 643.466770][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.664234][T20945] syzkaller0: entered promiscuous mode [ 643.683230][T20945] syzkaller0: entered allmulticast mode [ 643.727381][T20945] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4011'. [ 643.906437][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.960573][T20958] can: request_module (can-proto-0) failed. [ 644.157464][T20966] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4020'. [ 644.185415][T20966] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4020'. [ 644.202058][T20980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4023'. [ 644.223483][T20980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4023'. [ 644.241873][T20966] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4020'. [ 644.256228][T20980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4023'. [ 644.468121][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.842328][T21011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4032'. [ 644.927356][T21016] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4035'. [ 644.946270][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.066221][T21022] netlink: 'syz.4.4036': attribute type 1 has an invalid length. [ 645.121573][T21026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4036'. [ 645.210586][T21022] bond6: entered promiscuous mode [ 645.219968][T21022] 8021q: adding VLAN 0 to HW filter on device bond6 [ 645.346439][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.427579][T21034] netlink: 'syz.4.4038': attribute type 2 has an invalid length. [ 645.444390][T21034] 9: entered promiscuous mode [ 645.507327][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.515606][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.554712][T20942] udevd[20942]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 646.128188][T21072] netlink: 'syz.1.4047': attribute type 3 has an invalid length. [ 646.292566][T21071] syzkaller0: entered promiscuous mode [ 646.298545][T21071] syzkaller0: entered allmulticast mode [ 646.385325][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5440 ms [ 646.393449][ C1] lec:lec_tx_timeout: lec0 [ 646.894960][T21111] IPv6: NLM_F_REPLACE set, but no existing node found! [ 647.905965][ T35] net_ratelimit: 6 callbacks suppressed [ 647.905985][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.932036][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.071142][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.555939][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.628456][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.120635][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.675985][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.825928][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.836717][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.107009][T21133] Bluetooth: MGMT ver 1.23 [ 650.124838][T21134] __nla_validate_parse: 5 callbacks suppressed [ 650.124858][T21134] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4062'. [ 650.156897][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.620290][T21163] netlink: 'syz.3.4070': attribute type 11 has an invalid length. [ 650.643364][T21163] netlink: 'syz.3.4070': attribute type 2 has an invalid length. [ 650.674721][T21163] netlink: 'syz.3.4070': attribute type 2 has an invalid length. [ 650.910070][T21177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4075'. [ 651.251771][T21198] xt_ecn: cannot match TCP bits for non-tcp packets [ 651.276922][T21198] netlink: 'syz.1.4082': attribute type 1 has an invalid length. [ 651.433334][T21198] 8021q: adding VLAN 0 to HW filter on device bond4 [ 651.479481][T21209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4082'. [ 651.535498][T21198] netlink: 27 bytes leftover after parsing attributes in process `syz.1.4082'. [ 651.660817][T21198] bond4: (slave geneve2): making interface the new active one [ 651.672346][T21220] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4085'. [ 651.711756][T21198] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 651.786606][ T148] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 651.834705][ T148] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 652.023162][ T148] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 652.048255][ T148] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 652.301131][T21251] vlan3: entered allmulticast mode [ 652.307513][T21251] bond0: entered allmulticast mode [ 652.312910][T21251] bond_slave_0: entered allmulticast mode [ 652.319130][T21251] bond_slave_1: entered allmulticast mode [ 652.330563][T21251] bridge_slave_1: entered allmulticast mode [ 652.344955][T21251] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4093'. [ 652.391707][T21258] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4095'. [ 652.411129][T21260] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4095'. [ 652.454355][T21251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.489956][T21251] bond_slave_0: left allmulticast mode [ 652.512290][T21251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.529145][T21251] bond_slave_1: left allmulticast mode [ 652.539376][T21251] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 652.548907][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 652.561585][T21251] bridge_slave_1: left allmulticast mode [ 652.589302][T21251] bond0 (unregistering): Released all slaves [ 653.196175][T21308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4109'. [ 653.266536][ T10] net_ratelimit: 13 callbacks suppressed [ 653.266565][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.391939][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880486fc000: rx timeout, send abort [ 653.531083][T21333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 653.534445][T21292] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 653.666318][ T1158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.675649][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.792953][T21341] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4115'. [ 653.892488][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058fa1c00: rx timeout, send abort [ 653.903898][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880486fc000: abort rx timeout. Force session deactivation [ 653.931633][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.312665][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.391523][T21360] tipc: Started in network mode [ 654.401994][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058fa1c00: abort rx timeout. Force session deactivation [ 654.436622][T21360] tipc: Node identity 3a1d9e730584, cluster identity 4711 [ 654.444290][T21360] tipc: Enabled bearer , priority 0 [ 654.625759][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.643072][T21374] netlink: 'syz.1.4124': attribute type 3 has an invalid length. [ 654.684546][T21364] syzkaller0: entered promiscuous mode [ 654.698128][T21364] syzkaller0: entered allmulticast mode [ 654.722055][T21364] tipc: Resetting bearer [ 654.806730][T21359] tipc: Resetting bearer [ 654.828871][T21379] x_tables: duplicate underflow at hook 1 [ 654.950620][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.361373][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.996014][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.474015][ T10] net_ratelimit: 6 callbacks suppressed [ 658.474041][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.508872][ T1158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.540142][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.594860][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.810117][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.819037][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.919295][T21359] tipc: Disabling bearer [ 658.970158][ T5883] tipc: Node number set to 1067032179 [ 659.125611][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.254704][T21411] macvlan0: entered promiscuous mode [ 659.308933][T21424] __nla_validate_parse: 4 callbacks suppressed [ 659.308954][T21424] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4132'. [ 659.333577][T21411] netlink: 'syz.0.4133': attribute type 10 has an invalid length. [ 659.344393][T21421] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4135'. [ 659.436818][T21424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.447388][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.533554][T21435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4135'. [ 659.585080][T21411] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 659.667646][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.676483][T21435] vlan3: entered promiscuous mode [ 659.697731][T21435] bond0: entered promiscuous mode [ 659.717832][T21435] bond_slave_0: entered promiscuous mode [ 659.749639][T21435] bond_slave_1: entered promiscuous mode [ 659.781477][T21435] mac80211_hwsim hwsim46 wlan1: entered promiscuous mode [ 659.901273][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.936016][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.952479][T21451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4139'. [ 660.009604][ T148] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.021770][T21451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4139'. [ 660.036417][ T148] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.074211][ T148] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.083708][ T148] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.292462][T21466] tipc: Started in network mode [ 660.306240][T21466] tipc: Node identity a686576b4087, cluster identity 4711 [ 660.324086][T21466] tipc: Enabled bearer , priority 0 [ 660.404098][T21469] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4144'. [ 660.518715][T21466] syzkaller0: entered promiscuous mode [ 660.544813][T21466] syzkaller0: entered allmulticast mode [ 660.559814][T21466] tipc: Resetting bearer [ 660.612812][T21463] tipc: Resetting bearer [ 660.856911][T21496] netlink: 'syz.2.4150': attribute type 1 has an invalid length. [ 663.753463][ T5942] net_ratelimit: 14 callbacks suppressed [ 663.753488][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.829154][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.920776][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.929817][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.092557][T21463] tipc: Disabling bearer [ 664.108431][T21492] netlink: 'syz.3.4149': attribute type 29 has an invalid length. [ 664.141882][ T5883] tipc: Node number set to 3858847595 [ 664.306290][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.313656][T21508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.326746][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.374151][T21512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4156'. [ 664.462995][T21518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.505925][T21518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.543953][T21518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.692469][T21529] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4161'. [ 664.775627][T21537] xt_l2tp: v2 doesn't support IP mode [ 664.794018][T21534] xt_l2tp: v2 doesn't support IP mode [ 665.008586][T21548] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4166'. [ 665.041834][T21551] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001 [ 665.043787][T21548] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4166'. [ 665.160950][T21559] netlink: 'syz.3.4169': attribute type 25 has an invalid length. [ 665.160973][T21548] netlink: 'syz.4.4166': attribute type 22 has an invalid length. [ 665.160993][T21548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4166'. [ 665.253282][ T13] netdevsim netdevsim4 eth0: set [0, 1] type 1 family 0 port 8472 - 0 [ 665.292995][T21565] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4171'. [ 665.293711][ T13] netdevsim netdevsim4 eth1: set [0, 1] type 1 family 0 port 8472 - 0 [ 665.350471][T21564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4169'. [ 665.401245][T21559] team0: Port device gretap1 added [ 665.411633][T21565] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.449347][ T13] netdevsim netdevsim4 eth2: set [0, 1] type 1 family 0 port 8472 - 0 [ 665.648850][ T13] netdevsim netdevsim4 eth3: set [0, 1] type 1 family 0 port 8472 - 0 [ 665.841099][T21598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4179'. [ 665.954517][T21606] netlink: 'syz.3.4178': attribute type 10 has an invalid length. [ 665.966538][T21606] veth0_macvtap: left promiscuous mode [ 668.570647][T21579] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 668.827564][T21627] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 668.854162][T21628] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4184'. [ 669.028480][ T5883] net_ratelimit: 58 callbacks suppressed [ 669.028499][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.072956][T21642] netlink: 'syz.0.4186': attribute type 10 has an invalid length. [ 669.090602][T21630] netlink: 'syz.4.4181': attribute type 29 has an invalid length. [ 669.131752][T21641] netlink: 'syz.2.4185': attribute type 25 has an invalid length. [ 669.145791][T21641] netlink: 'syz.2.4185': attribute type 28 has an invalid length. [ 669.203704][T21642] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 669.240001][T21618] netlink: 'syz.4.4181': attribute type 29 has an invalid length. [ 669.274059][T21641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4185'. [ 669.302941][T21642] veth1_macvtap: renamed from vlan1 [ 669.322740][T21649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.333582][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.344408][T21649] netlink: 'syz.1.4188': attribute type 4 has an invalid length. [ 669.507067][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.595486][T21660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4191'. [ 669.672862][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.682364][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.828013][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.836598][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.508992][T21712] syzkaller0: entered promiscuous mode [ 670.528361][T21712] syzkaller0: entered allmulticast mode [ 670.546599][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.760357][T21721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4207'. [ 670.820642][T21723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4207'. [ 670.950855][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.139279][T21740] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4211'. [ 671.332302][T21749] netlink: 'syz.0.4213': attribute type 12 has an invalid length. [ 671.392268][T21749] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4213'. [ 671.425697][T21749] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4213'. [ 671.746463][T21771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4220'. [ 671.822088][T21771] netlink: 'syz.1.4220': attribute type 1 has an invalid length. [ 671.858239][T21771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4220'. [ 671.893549][T21771] netlink: 'syz.1.4220': attribute type 1 has an invalid length. [ 671.932483][T21778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4220'. [ 672.084628][T21796] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4225'. [ 672.111551][T21797] syzkaller1: entered promiscuous mode [ 672.136046][T21797] syzkaller1: entered allmulticast mode [ 672.979922][T21847] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 673.509816][T21868] netlink: 'syz.4.4243': attribute type 4 has an invalid length. [ 673.799213][T21877] syzkaller0: entered promiscuous mode [ 673.815644][T21877] syzkaller0: entered allmulticast mode [ 673.879349][T21877] veth0: entered promiscuous mode [ 674.336087][T21886] bond0: entered allmulticast mode [ 674.367414][T21886] bond_slave_0: entered allmulticast mode [ 674.373859][T21886] bond_slave_1: entered allmulticast mode [ 674.385817][T21886] mac80211_hwsim hwsim46 wlan1: entered allmulticast mode [ 674.609592][T21894] bond7: entered promiscuous mode [ 674.614958][T21894] bond7: entered allmulticast mode [ 674.709552][ T795] net_ratelimit: 11 callbacks suppressed [ 674.709576][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.767666][T21904] tc_dump_action: action bad kind [ 674.801820][T21904] netlink: 'syz.4.4256': attribute type 21 has an invalid length. [ 674.843297][T21904] __nla_validate_parse: 6 callbacks suppressed [ 674.843327][T21904] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4256'. [ 674.966361][T21909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4257'. [ 675.044631][T21911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4257'. [ 675.279448][T21911] bond4: option xmit_hash_policy: invalid value (64) [ 675.300551][T21911] bond4 (unregistering): Released all slaves [ 675.426615][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.437737][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.449154][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.460446][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.642022][T21928] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4264'. [ 675.745483][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.823929][T21939] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 675.834924][T21939] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 675.846180][T21939] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 675.907568][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.916316][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.994555][T21943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4268'. [ 676.024462][T21947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4269'. [ 676.046229][T21948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4269'. [ 676.080904][T21951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.091939][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.127690][T21947] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4269'. [ 676.274545][T21964] netlink: 'syz.0.4272': attribute type 9 has an invalid length. [ 676.296699][T21962] netlink: 'syz.0.4272': attribute type 9 has an invalid length. [ 676.588292][T21982] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4280'. [ 676.828209][T21991] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4283'. [ 676.904543][T21998] syzkaller0: entered promiscuous mode [ 676.916963][T21998] syzkaller0: entered allmulticast mode [ 677.064105][ T148] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.095684][ T148] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.126151][ T148] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.150175][ T148] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.782689][T22052] x_tables: duplicate underflow at hook 2 [ 678.327770][T22077] netlink: 'syz.1.4312': attribute type 32 has an invalid length. [ 678.400502][T22077] bond0: Setting coupled_control to off (0) [ 678.431283][T22084] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 678.512006][T22090] syzkaller0: entered promiscuous mode [ 678.528296][T22090] syzkaller0: entered allmulticast mode [ 679.069940][T22115] syzkaller0: entered allmulticast mode [ 679.199753][T22122] netlink: 'syz.3.4326': attribute type 1 has an invalid length. [ 679.209655][T22122] veth0_to_bond: left allmulticast mode [ 679.416599][T22134] netlink: 'syz.2.4328': attribute type 1 has an invalid length. [ 679.521135][T22140] bond4: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 679.532120][T22140] bond4: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 679.546275][T22140] bond4: (slave ip6gre2): making interface the new active one [ 679.555664][T22140] bond4: (slave ip6gre2): Enslaving as an active interface with an up link [ 679.569623][T22134] netlink: 'syz.2.4328': attribute type 12 has an invalid length. [ 679.779092][T22152] syzkaller0: entered promiscuous mode [ 679.796691][T22152] syzkaller0: entered allmulticast mode [ 679.894388][T22156] netem: unknown loss type 0 [ 679.921027][T22156] netem: change failed [ 680.157475][T22166] netlink: 'syz.2.4338': attribute type 1 has an invalid length. [ 680.189821][T22169] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 680.234250][T22169] __nla_validate_parse: 19 callbacks suppressed [ 680.234277][T22169] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4338'. [ 680.446345][T22169] 8021q: adding VLAN 0 to HW filter on device bond5 [ 680.547877][ T5942] net_ratelimit: 7 callbacks suppressed [ 680.547899][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.753642][T22203] bond6: option arp_all_targets: invalid value (18446744073709551613) [ 680.769292][T22203] bond6 (unregistering): Released all slaves [ 681.065847][T22222] syzkaller0: entered promiscuous mode [ 681.071962][T22222] syzkaller0: entered allmulticast mode [ 681.083353][T22220] syzkaller0: entered promiscuous mode [ 681.098385][T22220] syzkaller0: entered allmulticast mode [ 681.197698][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.207005][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.502160][T22238] netlink: 'syz.4.4353': attribute type 5 has an invalid length. [ 681.525952][T22242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.549461][T22242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.578353][T22242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.616877][T22243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.638149][T22243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.655797][T22243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.686854][T22243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.041056][T22268] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4366'. [ 682.447723][T22289] syzkaller0: entered promiscuous mode [ 682.469134][T22289] syzkaller0: entered allmulticast mode [ 682.580478][T22300] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4376'. [ 682.739913][T22306] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4382'. [ 682.855889][T22295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 683.022184][T22295] vlan2: left allmulticast mode [ 683.029436][T22295] bridge2: left allmulticast mode [ 683.082614][T22300] geneve3: entered promiscuous mode [ 683.172746][T22311] vlan3: entered allmulticast mode [ 683.195452][T22311] team0: entered allmulticast mode [ 683.202203][T22311] team_slave_0: entered allmulticast mode [ 683.220678][T22311] team_slave_1: entered allmulticast mode [ 683.245522][T22311] gretap1: entered allmulticast mode [ 683.298469][ T148] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.337933][ T148] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 683.354455][ T148] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.376693][ T148] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 683.397101][ T148] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.424654][ T148] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 683.459675][ T148] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.491931][ T148] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 683.760328][T22345] netlink: 'syz.3.4399': attribute type 1 has an invalid length. [ 684.107853][T22359] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4403'. [ 685.977239][T22427] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 686.314819][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 686.324712][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 686.377181][T22438] syzkaller0: entered promiscuous mode [ 686.408993][T22438] syzkaller0: entered allmulticast mode [ 686.947016][ T12] net_ratelimit: 3 callbacks suppressed [ 686.947040][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.961741][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.058701][T22461] syzkaller0: entered promiscuous mode [ 687.080815][T22461] syzkaller0: entered allmulticast mode [ 687.518307][T22479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4441'. [ 687.814959][T22494] syzkaller0: entered promiscuous mode [ 687.820760][T22494] syzkaller0: entered allmulticast mode [ 687.978998][T22499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4451'. [ 688.122849][T22507] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 688.131307][T22507] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 688.741728][T22536] netlink: 'syz.4.4467': attribute type 21 has an invalid length. [ 688.838940][T22541] rdma_rxe: rxe_newlink: failed to add gre0 [ 688.863236][T22541] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 689.152809][T22548] syzkaller0: entered promiscuous mode [ 689.174415][T22548] syzkaller0: entered allmulticast mode [ 690.064317][T22588] syzkaller0: entered promiscuous mode [ 690.077663][T22588] syzkaller0: entered allmulticast mode [ 690.145890][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.404117][T22601] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4493'. [ 690.794402][T22617] netlink: 'syz.2.4496': attribute type 2 has an invalid length. [ 690.828670][T22617] netlink: 'syz.2.4496': attribute type 8 has an invalid length. [ 690.874173][T22617] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4496'. [ 691.345234][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 691.353354][ C1] lec:lec_tx_timeout: lec0 [ 691.386457][T22632] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4503'. [ 691.620793][T22638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4507'. [ 691.687902][T22641] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4506'. [ 691.787886][T22646] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4510'. [ 692.032619][T22660] netlink: 'syz.3.4515': attribute type 1 has an invalid length. [ 692.056947][T22660] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4515'. [ 692.068448][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.077238][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.222780][T22669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.238481][T22669] IPv4: Oversized IP packet from 127.202.26.0 [ 692.487416][T22680] netlink: 'syz.3.4522': attribute type 6 has an invalid length. [ 692.527886][T22689] netlink: 'syz.4.4523': attribute type 2 has an invalid length. [ 692.555422][T22689] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4523'. [ 692.594692][T22689] syzkaller1: entered promiscuous mode [ 692.603550][T22689] syzkaller1: entered allmulticast mode [ 692.706065][ T1158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.714604][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.894888][T22753] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 693.996439][T22762] netlink: 'syz.2.4548': attribute type 33 has an invalid length. [ 694.122204][T22762] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 694.141553][T22762] bond6 (unregistering): Released all slaves [ 694.449333][T22774] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4553'. [ 694.883971][T22792] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4559'. [ 694.937984][T22792] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4559'. [ 694.956824][T22792] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4559'. [ 694.974284][T22792] netlink: 'syz.1.4559': attribute type 6 has an invalid length. [ 694.988448][T22792] netlink: 'syz.1.4559': attribute type 5 has an invalid length. [ 695.003920][T22792] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4559'. [ 695.018708][T22797] xt_l2tp: v2 doesn't support IP mode [ 695.499369][T22814] netlink: 'syz.0.4567': attribute type 29 has an invalid length. [ 695.523064][T22814] netlink: 'syz.0.4567': attribute type 29 has an invalid length. [ 695.600738][T22819] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.4570'. [ 695.629442][T22819] openvswitch: netlink: Flow key attr not present in new flow. [ 695.664580][T22819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4570'. [ 695.719370][T22821] syzkaller0: entered promiscuous mode [ 695.728993][T22821] syzkaller0: entered allmulticast mode [ 695.838544][T22825] mac80211_hwsim hwsim49 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 696.529105][T22862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4583'. [ 696.598573][T22864] macvlan0: entered promiscuous mode [ 696.749089][T22878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4589'. [ 697.294130][T22905] block nbd1: Unsupported socket: should be TCP or UNIX. [ 697.346373][T22907] validate_nla: 1 callbacks suppressed [ 697.346392][T22907] netlink: 'syz.3.4597': attribute type 4 has an invalid length. [ 697.397552][T22907] netlink: 'syz.3.4597': attribute type 10 has an invalid length. [ 697.425987][T22905] netlink: 'syz.1.4596': attribute type 15 has an invalid length. [ 697.480278][T17114] block nbd1: Receive control failed (result -107) [ 697.503397][T22911] nbd1: detected capacity change from 0 to 65663 [ 697.594716][T21509] block nbd1: Dead connection, failed to find a fallback [ 697.637155][T21509] block nbd1: shutting down sockets [ 697.666617][T21509] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 697.679496][T21509] Buffer I/O error on dev nbd1, logical block 0, async page read [ 697.688391][T21509] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 697.701153][T21509] Buffer I/O error on dev nbd1, logical block 1, async page read [ 697.717183][T21509] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 697.726839][T21509] Buffer I/O error on dev nbd1, logical block 2, async page read [ 697.737078][T21509] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 697.747275][T21509] Buffer I/O error on dev nbd1, logical block 3, async page read [ 697.755777][T21509] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 697.766061][T21509] Buffer I/O error on dev nbd1, logical block 0, async page read [ 697.774403][T21509] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 697.784249][T21509] Buffer I/O error on dev nbd1, logical block 1, async page read [ 697.794391][T21509] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 697.807957][T21509] Buffer I/O error on dev nbd1, logical block 2, async page read [ 697.819798][T21509] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 697.842086][T21509] Buffer I/O error on dev nbd1, logical block 3, async page read [ 697.869915][T21509] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 697.906808][T21509] Buffer I/O error on dev nbd1, logical block 0, async page read [ 697.953588][T21509] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 697.990757][T21509] Buffer I/O error on dev nbd1, logical block 1, async page read [ 698.002259][T22933] netlink: 'syz.0.4605': attribute type 10 has an invalid length. [ 698.041370][T21509] ldm_validate_partition_table(): Disk read failed. [ 698.148689][T21509] Dev nbd1: unable to read RDB block 0 [ 698.230828][T21509] nbd1: unable to read partition table [ 698.252762][T22938] __nla_validate_parse: 5 callbacks suppressed [ 698.252785][T22938] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4607'. [ 698.340579][T21509] ldm_validate_partition_table(): Disk read failed. [ 698.377904][T21509] Dev nbd1: unable to read RDB block 0 [ 698.398934][T22941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4608'. [ 698.419856][T21509] nbd1: unable to read partition table [ 698.469954][ T1106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.478614][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.092288][T22971] H: renamed from dummy0 (while UP) [ 699.104353][T22972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4616'. [ 699.138357][T22972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4616'. [ 699.481321][T22987] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4621'. [ 699.803833][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.637347][T22983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 700.700321][T22983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.357646][T22983] bond2: left promiscuous mode [ 701.373649][T22983] bond2: left allmulticast mode [ 701.387631][T22983] bond3: left promiscuous mode [ 701.396276][T22983] vti0: left promiscuous mode [ 701.429627][T22983] team1: left promiscuous mode [ 701.444861][T22983] team1: left allmulticast mode [ 701.479756][T22983] vlan1: left promiscuous mode [ 701.485749][T22983] bond4: left promiscuous mode [ 701.499884][T22983] gretap1: left promiscuous mode [ 701.511033][T22983] vlan1: left allmulticast mode [ 701.517546][T22983] bond4: left allmulticast mode [ 701.522676][T22983] gretap1: left allmulticast mode [ 701.542249][T22983] bond6: left promiscuous mode [ 701.571101][T22983] bond7: left promiscuous mode [ 701.585282][T22983] bond7: left allmulticast mode [ 701.617790][T22987] geneve2: entered promiscuous mode [ 701.651416][ T12] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 256 - 0 [ 701.708360][ T12] netdevsim netdevsim4 eth0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 701.731526][ T12] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 256 - 0 [ 701.764197][ T12] netdevsim netdevsim4 eth1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 701.798281][ T12] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 256 - 0 [ 701.837196][ T12] netdevsim netdevsim4 eth2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 701.871261][ T12] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 256 - 0 [ 701.900751][T23012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4630'. [ 701.918190][T23015] netlink: 'syz.2.4631': attribute type 1 has an invalid length. [ 701.926197][ T12] netdevsim netdevsim4 eth3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 701.939404][T23012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4630'. [ 702.161256][T23015] bond6: entered promiscuous mode [ 702.207689][T23015] 8021q: adding VLAN 0 to HW filter on device bond6 [ 702.258775][T23030] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.4633'. [ 702.359610][T23018] bond6: (slave bridge2): making interface the new active one [ 702.377114][T23030] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4633'. [ 702.400409][T23018] bridge2: entered promiscuous mode [ 702.421100][T23018] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 702.502279][T23030] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.510314][T23030] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.536812][T23030] bridge0: entered promiscuous mode [ 702.795947][T23047] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4640'. [ 702.869024][T23046] geneve3: left promiscuous mode [ 702.920908][ T148] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.973358][ T148] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.018523][ T148] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.059309][ T148] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.129340][T23055] netlink: 'syz.4.4644': attribute type 62 has an invalid length. [ 703.236701][T23060] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 703.263300][T23061] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 703.993696][T23096] lo: left promiscuous mode [ 704.059767][T23100] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4656'. [ 704.226638][ T1106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.235398][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.255714][T23096] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.266584][T23096] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.601947][T23096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 704.643366][T23096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 704.722342][T23096] macvlan0: left promiscuous mode [ 705.022126][T23096] gretap1: left promiscuous mode [ 705.047602][T23096] gretap1: left allmulticast mode [ 705.109434][T23100] geneve2: entered promiscuous mode [ 705.127897][T23121] netlink: 'syz.2.4664': attribute type 11 has an invalid length. [ 705.154333][T23121] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.4664'. [ 705.641965][T23152] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4671'. [ 705.961006][T23171] netlink: 'syz.0.4678': attribute type 10 has an invalid length. [ 705.990303][T23171] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 706.010434][T23171] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 706.040995][T23176] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4677'. [ 706.063499][T23167] geneve2: left promiscuous mode [ 706.082169][ T148] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.095701][T23171] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4678'. [ 706.109602][ T148] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.143437][ T148] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.157556][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.166920][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.176746][ T148] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.312617][T23181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4682'. [ 706.809683][T23212] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4690'. [ 707.069216][T23227] netlink: 'syz.1.4691': attribute type 11 has an invalid length. [ 707.194354][T23232] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4695'. [ 707.221908][T23231] openvswitch: netlink: Flow key attr not present in new flow. [ 707.594698][T23251] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4702'. [ 707.643153][T23251] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4702'. [ 707.725542][T23258] netlink: 'syz.1.4704': attribute type 1 has an invalid length. [ 707.746442][T23258] netlink: 'syz.1.4704': attribute type 2 has an invalid length. [ 707.789500][T23267] netlink: 'syz.4.4706': attribute type 1 has an invalid length. [ 707.841286][T23267] netlink: 'syz.4.4706': attribute type 2 has an invalid length. [ 707.996493][T23275] syzkaller0: entered promiscuous mode [ 708.013294][T23275] syzkaller0: entered allmulticast mode [ 708.240293][T23290] ip6t_srh: unknown srh match flags 5F28 [ 708.293686][T23284] netlink: 'syz.2.4708': attribute type 178 has an invalid length. [ 708.733878][ T8455] lec:lec_start_xmit: lec0:No lecd attached [ 709.042079][T23290] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 709.309066][T23336] __nla_validate_parse: 3 callbacks suppressed [ 709.309088][T23336] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4721'. [ 709.350513][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.467433][T23333] bridge0: left promiscuous mode [ 709.483621][T23333] bond0: left allmulticast mode [ 709.495602][T23333] bond_slave_0: left allmulticast mode [ 709.508555][T23333] bond_slave_1: left allmulticast mode [ 709.523038][T23333] mac80211_hwsim hwsim46 wlan1: left allmulticast mode [ 709.573002][T23347] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4727'. [ 709.716965][T23354] netlink: 'syz.4.4729': attribute type 1 has an invalid length. [ 709.753379][T23333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 709.781642][T23333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 709.903706][T23333] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 709.947663][T23333] bond2: left promiscuous mode [ 709.952914][T23333] bridge3: left promiscuous mode [ 709.962774][T23333] bond3: left promiscuous mode [ 709.973538][T23333] bridge4: left promiscuous mode [ 709.980686][T23333] ipvlan2: left allmulticast mode [ 709.988226][T23333] ipvlan3: left allmulticast mode [ 709.993813][T23333] bond3: left allmulticast mode [ 709.998490][ T9502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.999906][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.007675][T23333] bridge4: left allmulticast mode [ 710.027517][T23333] vlan3: left allmulticast mode [ 710.032817][T23333] team0: left allmulticast mode [ 710.038879][T23333] team_slave_0: left allmulticast mode [ 710.044590][T23333] team_slave_1: left allmulticast mode [ 710.052156][T23333] gretap1: left allmulticast mode [ 710.076271][T23335] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 710.102627][T23336] geneve2: entered promiscuous mode [ 710.298695][T23361] syzkaller0: entered promiscuous mode [ 710.305755][T17114] Bluetooth: hci1: command 0x0406 tx timeout [ 710.323446][T23361] syzkaller0: entered allmulticast mode [ 710.616369][T23379] netlink: 'syz.1.4735': attribute type 1 has an invalid length. [ 710.764125][T23379] ±ÿ: renamed from team_slave_1 [ 710.821213][T23391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4739'. [ 710.912139][T23391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4739'. [ 710.932878][T23396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4740'. [ 711.098278][T23405] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4741'. [ 711.217954][T23410] netlink: 'syz.4.4745': attribute type 1 has an invalid length. [ 711.261313][T23418] xt_CT: You must specify a L4 protocol and not use inversions on it [ 711.284091][T23420] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4746'. [ 711.640671][T23399] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.648377][T23399] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.170993][T23399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 712.194853][T23399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 712.431533][T23399] macvlan0: left promiscuous mode [ 712.633472][T23399] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 712.733775][T23399] h: left promiscuous mode [ 712.768140][T23399] gretap2: left promiscuous mode [ 712.773418][T23399] gretap2: left allmulticast mode [ 712.804185][T23399] bond6: left promiscuous mode [ 712.811151][T23399] bridge2: left promiscuous mode [ 712.853341][T23407] pimreg: entered allmulticast mode [ 712.876209][T23405] geneve2: entered promiscuous mode [ 712.915957][T23410] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 712.943633][T23453] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:21 [ 712.966075][T23453] IPVS: ip_vs_add_dest(): server weight less than zero [ 712.974387][ T9502] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.013286][ T9502] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.034890][ T9502] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.055441][ T9502] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.202360][T23460] netlink: 'syz.2.4748': attribute type 1 has an invalid length. [ 713.226133][T23460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4748'. [ 713.253588][T23460] netlink: 658 bytes leftover after parsing attributes in process `syz.2.4748'. [ 713.276949][T23460] netlink: 'syz.2.4748': attribute type 1 has an invalid length. [ 713.557841][T23483] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4755'. [ 713.764375][T23498] ksmbd: Unknown IPC event: 3, ignore. [ 714.228829][T23487] geneve2: left promiscuous mode [ 714.379870][T23524] sctp: [Deprecated]: syz.3.4766 (pid 23524) Use of int in maxseg socket option. [ 714.379870][T23524] Use struct sctp_assoc_value instead [ 714.394463][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5650 ms [ 714.394510][ C1] lec:lec_tx_timeout: lec0 [ 714.407323][ T148] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.419796][ T148] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.441746][T23522] __nla_validate_parse: 1 callbacks suppressed [ 714.441776][T23522] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4767'. [ 714.477816][ T148] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.508352][ T148] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.663255][T23536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 714.698469][T23535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4770'. [ 714.860969][T23540] FAULT_INJECTION: forcing a failure. [ 714.860969][T23540] name failslab, interval 1, probability 0, space 0, times 1 [ 714.908932][T23540] CPU: 1 UID: 0 PID: 23540 Comm: syz.1.4772 Not tainted syzkaller #0 PREEMPT(full) [ 714.908968][T23540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 714.908983][T23540] Call Trace: [ 714.908993][T23540] [ 714.909003][T23540] dump_stack_lvl+0xe8/0x150 [ 714.909045][T23540] should_fail_ex+0x412/0x560 [ 714.909084][T23540] should_failslab+0xa8/0x100 [ 714.909110][T23540] __kmalloc_cache_noprof+0x88/0x660 [ 714.909146][T23540] ? sf_setstate+0x578/0xf30 [ 714.909182][T23540] sf_setstate+0x578/0xf30 [ 714.909229][T23540] ip6_mc_add_src+0x9a0/0xf90 [ 714.909261][T23540] ? in6_dev_get+0x1a/0x290 [ 714.909295][T23540] __ipv6_dev_mc_inc+0x360/0xa50 [ 714.909333][T23540] __ipv6_sock_mc_join+0x503/0x750 [ 714.909372][T23540] ipv6_mcast_join_leave+0x1a2/0x240 [ 714.909410][T23540] ? __pfx_ipv6_mcast_join_leave+0x10/0x10 [ 714.909464][T23540] ? do_ipv6_setsockopt+0x851/0x3150 [ 714.909498][T23540] ? __local_bh_enable_ip+0xd0/0x130 [ 714.909534][T23540] do_ipv6_setsockopt+0x190e/0x3150 [ 714.909565][T23540] ? get_pid_task+0x20/0x1f0 [ 714.909596][T23540] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 714.909627][T23540] ? get_pid_task+0x20/0x1f0 [ 714.909647][T23540] ? get_pid_task+0x20/0x1f0 [ 714.909666][T23540] ? get_pid_task+0x20/0x1f0 [ 714.909700][T23540] ? __lock_acquire+0x6b5/0x2cf0 [ 714.909751][T23540] ? aa_sk_perm+0x6d5/0x900 [ 714.909782][T23540] ? __fget_files+0x2a/0x420 [ 714.909816][T23540] ? __pfx_aa_sk_perm+0x10/0x10 [ 714.909846][T23540] ? __fget_files+0x2a/0x420 [ 714.909871][T23540] ? aa_sock_opt_perm+0xff/0x1a0 [ 714.909913][T23540] ipv6_setsockopt+0x59/0x170 [ 714.909944][T23540] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 714.909976][T23540] do_sock_setsockopt+0x17c/0x1b0 [ 714.910015][T23540] __x64_sys_setsockopt+0x13d/0x1b0 [ 714.910050][T23540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.910075][T23540] do_syscall_64+0x15f/0xf80 [ 714.910102][T23540] ? trace_irq_disable+0x3b/0x140 [ 714.910126][T23540] ? clear_bhb_loop+0x40/0x90 [ 714.910163][T23540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.910186][T23540] RIP: 0033:0x7f282c59c819 [ 714.910208][T23540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.910227][T23540] RSP: 002b:00007f282d4db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 714.910254][T23540] RAX: ffffffffffffffda RBX: 00007f282c815fa0 RCX: 00007f282c59c819 [ 714.910270][T23540] RDX: 000000000000002a RSI: 0000000000000029 RDI: 0000000000000004 [ 714.910282][T23540] RBP: 00007f282d4db090 R08: 0000000000000108 R09: 0000000000000000 [ 714.910296][T23540] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 714.910311][T23540] R13: 00007f282c816038 R14: 00007f282c815fa0 R15: 00007ffc72e5d1d8 [ 714.910347][T23540] [ 715.422662][T23548] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4775'. [ 715.450851][T23548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4775'. [ 715.587291][T23550] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4776'. [ 716.120485][T23572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4784'. [ 716.378401][T23590] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4790'. [ 716.790967][T23605] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4797'. [ 716.931446][T23617] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4800'. [ 716.971101][T23617] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.4800'. [ 716.991294][T23617] netlink: Unknown conntrack attr (type=2304, max=9) [ 717.189987][T23631] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 717.226889][T23631] bridge1: entered promiscuous mode [ 717.233399][T23631] bridge1: entered allmulticast mode [ 717.652613][T23654] netlink: 'syz.3.4815': attribute type 9 has an invalid length. [ 717.713365][T23651] netlink: 'syz.4.4813': attribute type 1 has an invalid length. [ 717.728468][T23660] netlink: 'syz.3.4815': attribute type 1 has an invalid length. [ 717.900624][T23660] 8021q: adding VLAN 0 to HW filter on device bond4 [ 718.010524][T23668] bond4: (slave gretap2): making interface the new active one [ 718.030987][T23668] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 718.430974][T23693] netlink: 'syz.1.4827': attribute type 63 has an invalid length. [ 718.468156][T23695] netlink: 'syz.1.4827': attribute type 63 has an invalid length. [ 718.474681][T23697] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20002 [ 718.510315][T23698] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20002 [ 718.681813][T23702] bond0: entered promiscuous mode [ 718.706485][T23702] bond_slave_0: entered promiscuous mode [ 718.755625][T23702] bond_slave_1: entered promiscuous mode [ 718.803740][T23702] mac80211_hwsim hwsim49 wlan1: entered promiscuous mode [ 718.864142][T23439] syz1: Port: 1 Link DOWN [ 719.551132][T23761] __nla_validate_parse: 12 callbacks suppressed [ 719.551152][T23761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4841'. [ 719.745818][T23762] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4840'. [ 723.199333][T23771] netlink: 'syz.4.4842': attribute type 21 has an invalid length. [ 723.621943][T23795] netlink: 'syz.4.4849': attribute type 9 has an invalid length. [ 723.623998][T23794] netlink: 'syz.4.4849': attribute type 9 has an invalid length. [ 723.775618][T23800] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 723.867542][T23802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4852'. [ 723.907006][T23802] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 724.097194][T23817] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4855'. [ 724.132161][T23813] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4854'. [ 727.630739][T23800] tipc: Started in network mode [ 727.635785][T23800] tipc: Node identity ac14140f, cluster identity 4711 [ 727.643628][T23800] tipc: Enabled bearer , priority 10 [ 727.693416][T23817] gretap0: entered promiscuous mode [ 727.714246][T23817] hsr0: entered promiscuous mode [ 727.906922][T23832] netlink: 'syz.3.4858': attribute type 1 has an invalid length. [ 728.087764][T23843] netlink: 'syz.0.4860': attribute type 21 has an invalid length. [ 728.102605][T23843] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4860'. [ 728.114456][T23843] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4860'. [ 728.337423][T23864] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4864'. [ 728.359105][T23857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4862'. [ 728.429813][T23857] 8021q: adding VLAN 0 to HW filter on device bond8 [ 728.461411][T23870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 728.583307][T23875] syzkaller1: entered promiscuous mode [ 728.590975][T23874] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 728.605474][T23875] syzkaller1: entered allmulticast mode [ 728.614979][T23881] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 728.638898][T23875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4866'. [ 728.794766][T23439] tipc: Node number set to 2886997007 [ 728.982159][T23902] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4873'. [ 729.116926][T23918] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4876'. [ 729.193878][T23918] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4876'. [ 729.382642][T23937] netlink: 'syz.2.4880': attribute type 29 has an invalid length. [ 729.397454][T23937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4880'. [ 729.633217][T23944] xt_ecn: cannot match TCP bits for non-tcp packets [ 729.866429][T23905] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 730.152620][T23962] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4885'. [ 730.545631][T17114] Bluetooth: hci1: command 0x0406 tx timeout [ 730.630946][T23996] netlink: 'syz.0.4894': attribute type 1 has an invalid length. [ 730.774582][T23996] bond2: entered promiscuous mode [ 730.782067][T23996] 8021q: adding VLAN 0 to HW filter on device bond2 [ 730.847669][T23996] ipvlan2: entered allmulticast mode [ 730.885007][T23996] bond2: entered allmulticast mode [ 730.959486][T24007] ipvlan3: entered allmulticast mode [ 731.038122][T23996] bond2: (slave bridge2): making interface the new active one [ 731.070911][T23996] bridge2: entered promiscuous mode [ 731.094486][T23996] bridge2: entered allmulticast mode [ 731.126472][T23996] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 731.432601][T24033] IPVS: persistence engine module ip_vs_pe_À not found [ 731.689832][T24051] netlink: 'syz.0.4902': attribute type 1 has an invalid length. [ 732.230810][T24074] netlink: 'syz.1.4910': attribute type 29 has an invalid length. [ 732.250950][T24074] netlink: 'syz.1.4910': attribute type 29 has an invalid length. [ 732.264844][T24074] unsupported nla_type 58 [ 732.453504][T24060] mpoa:mpoad_close: () going down [ 732.625378][T17114] Bluetooth: hci1: command 0x0406 tx timeout [ 732.714559][T24091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 732.733208][T24090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 733.194159][T24120] netlink: 'syz.3.4923': attribute type 2 has an invalid length. [ 733.213294][T24120] tipc: Started in network mode [ 733.219397][T24120] tipc: Node identity 1340008, cluster identity 4711 [ 733.226752][T24120] tipc: Node number set to 20185096 [ 733.520213][T24139] xt_CT: You must specify a L4 protocol and not use inversions on it [ 734.060379][T24175] __nla_validate_parse: 6 callbacks suppressed [ 734.060404][T24175] netlink: 161168 bytes leftover after parsing attributes in process `syz.4.4936'. [ 734.173684][T24180] sctp: [Deprecated]: syz.3.4939 (pid 24180) Use of int in maxseg socket option. [ 734.173684][T24180] Use struct sctp_assoc_value instead [ 734.221794][T24181] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4938'. [ 734.313492][T24188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4941'. [ 734.553345][T24199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 734.754202][T24207] netlink: 'syz.1.4947': attribute type 3 has an invalid length. [ 734.763333][T24207] netlink: 'syz.1.4947': attribute type 1 has an invalid length. [ 734.771804][T24207] netlink: 212 bytes leftover after parsing attributes in process `syz.1.4947'. [ 734.783739][T24207] NCSI netlink: No device for ifindex 813332851 [ 734.808221][T24209] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4948'. [ 734.934781][T24214] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4950'. [ 734.962049][T24214] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4950'. [ 735.681691][T24259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4962'. [ 735.771911][T24280] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4966'. [ 736.063025][T24294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4972'. [ 736.140586][T24302] netlink: 'syz.4.4973': attribute type 10 has an invalid length. [ 736.150781][T24302] bond0: (slave wlan1): Opening slave failed [ 738.554573][T24264] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 738.836539][T24314] hsr_slave_1 (unregistering): left promiscuous mode [ 739.110924][T24339] __nla_validate_parse: 2 callbacks suppressed [ 739.110944][T24339] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4983'. [ 739.409062][T24361] IPv6: NLM_F_CREATE should be specified when creating new route [ 739.512588][T24365] netlink: 'syz.1.4990': attribute type 1 has an invalid length. [ 739.550023][T24367] policy can only be matched on NF_INET_PRE_ROUTING [ 739.550047][T24367] unable to load match [ 739.594761][T24365] netlink: 288 bytes leftover after parsing attributes in process `syz.1.4990'. [ 739.832879][T24380] xt_hashlimit: size too large, truncated to 1048576 [ 739.884302][T24382] –: renamed from vxcan1 [ 740.045752][ T29] audit: type=1800 audit(1776307830.244:7): pid=24391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4995" name="memory.events" dev="tmpfs" ino=1633 res=0 errno=0 [ 740.135476][ T29] audit: type=1804 audit(1776307830.284:8): pid=24391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4995" name="/newroot/318/memory.events" dev="tmpfs" ino=1633 res=1 errno=0 [ 740.199503][T24392] xt_hashlimit: size too large, truncated to 1048576 [ 740.845925][T24428] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5005'. [ 740.905893][T24428] bond5 (unregistering): Released all slaves [ 741.003215][T24445] syzkaller1: entered promiscuous mode [ 741.035303][T24445] syzkaller1: entered allmulticast mode [ 741.187892][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 741.459314][T24470] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5020'. [ 741.784221][T24487] netlink: 'syz.3.5026': attribute type 1 has an invalid length. [ 741.793070][T24488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5027'. [ 741.845727][T24487] 8021q: adding VLAN 0 to HW filter on device bond5 [ 741.878751][T24496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5027'. [ 741.922162][T24496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5027'. [ 741.963892][T24502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5030'. [ 741.995194][T24487] bond5: (slave veth5): Enslaving as an active interface with a down link [ 742.013541][ T9502] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 742.023084][ T9502] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 742.064115][T24500] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 742.115706][T24487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5026'. [ 742.160957][T24502] team0: Port device team_slave_0 removed [ 742.218055][T24506] bond5: (slave veth7): Enslaving as an active interface with a down link [ 742.233132][ T9502] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 742.242754][ T9502] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 742.258790][T24513] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5034'. [ 742.473539][T24529] netlink: 'syz.1.5036': attribute type 39 has an invalid length. [ 742.521163][T24528] tap0: tun_chr_ioctl cmd 1074025672 [ 742.537863][T24528] tap0: ignored: set checksum disabled [ 742.868817][T24553] netlink: 'syz.0.5046': attribute type 64 has an invalid length. [ 743.492309][T24599] nbd: must specify at least one socket [ 744.133161][T24640] vcan1: entered promiscuous mode [ 744.138607][T24640] vcan1: entered allmulticast mode [ 744.720354][T24675] syzkaller0: entered promiscuous mode [ 744.744712][T24675] syzkaller0: entered allmulticast mode [ 744.822314][T24689] xt_SECMARK: invalid mode: 9 [ 747.769076][ T1301] ================================================================== [ 747.777338][ T1301] BUG: KASAN: slab-use-after-free in sock_def_readable+0x1cb/0x550 [ 747.785447][ T1301] Read of size 8 at addr ffff8880929fe0c0 by task aoe_tx0/1301 [ 747.793045][ T1301] [ 747.795560][ T1301] CPU: 1 UID: 0 PID: 1301 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 747.795590][ T1301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 747.795602][ T1301] Call Trace: [ 747.795615][ T1301] [ 747.795626][ T1301] dump_stack_lvl+0xe8/0x150 [ 747.795660][ T1301] print_report+0xba/0x230 [ 747.795682][ T1301] ? sock_def_readable+0x1cb/0x550 [ 747.795703][ T1301] kasan_report+0x117/0x150 [ 747.795724][ T1301] ? sock_def_readable+0x1cb/0x550 [ 747.795746][ T1301] sock_def_readable+0x1cb/0x550 [ 747.795765][ T1301] ? sock_def_readable+0xae/0x550 [ 747.795784][ T1301] ? send_to_lecd+0x26d/0x830 [ 747.795807][ T1301] send_to_lecd+0x3e7/0x830 [ 747.795832][ T1301] lec_start_xmit+0xe52/0x2890 [ 747.795859][ T1301] dev_hard_start_xmit+0x2cd/0x830 [ 747.795886][ T1301] sch_direct_xmit+0x251/0x4c0 [ 747.795915][ T1301] ? __pfx_sch_direct_xmit+0x10/0x10 [ 747.795944][ T1301] __dev_queue_xmit+0x180f/0x3950 [ 747.795968][ T1301] ? __dev_queue_xmit+0x2b6/0x3950 [ 747.795993][ T1301] ? __lock_acquire+0x6b5/0x2cf0 [ 747.796019][ T1301] ? __pfx___dev_queue_xmit+0x10/0x10 [ 747.796058][ T1301] ? _raw_spin_unlock_irq+0x23/0x50 [ 747.796083][ T1301] tx+0x6b/0x190 [ 747.796113][ T1301] ? __pfx_tx+0x10/0x10 [ 747.796138][ T1301] kthread+0x1e0/0x3f0 [ 747.796161][ T1301] ? lock_acquire+0x106/0x350 [ 747.796190][ T1301] ? __pfx_kthread+0x10/0x10 [ 747.796214][ T1301] ? __pfx_default_wake_function+0x10/0x10 [ 747.796243][ T1301] ? __kthread_parkme+0x7a/0x1f0 [ 747.796279][ T1301] kthread+0x388/0x470 [ 747.796299][ T1301] ? __pfx_kthread+0x10/0x10 [ 747.796320][ T1301] ? __pfx_kthread+0x10/0x10 [ 747.796339][ T1301] ret_from_fork+0x514/0xb70 [ 747.796380][ T1301] ? __pfx_ret_from_fork+0x10/0x10 [ 747.796406][ T1301] ? __switch_to+0xc79/0x1410 [ 747.796430][ T1301] ? __pfx_kthread+0x10/0x10 [ 747.796450][ T1301] ret_from_fork_asm+0x1a/0x30 [ 747.796491][ T1301] [ 747.796500][ T1301] [ 747.993067][ T1301] Allocated by task 24062: [ 747.997870][ T1301] kasan_save_track+0x3e/0x80 [ 748.002606][ T1301] __kasan_slab_alloc+0x6c/0x80 [ 748.007501][ T1301] kmem_cache_alloc_lru_noprof+0x2b8/0x640 [ 748.013614][ T1301] sock_alloc_inode+0x2c/0x190 [ 748.018442][ T1301] alloc_inode+0x6a/0x1b0 [ 748.022803][ T1301] __sock_create+0x12d/0x9d0 [ 748.027445][ T1301] __sys_socket+0xd6/0x1b0 [ 748.032106][ T1301] __x64_sys_socket+0x7a/0x90 [ 748.036813][ T1301] do_syscall_64+0x15f/0xf80 [ 748.041649][ T1301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.047913][ T1301] [ 748.050259][ T1301] Freed by task 24060: [ 748.054342][ T1301] kasan_save_track+0x3e/0x80 [ 748.059087][ T1301] kasan_save_free_info+0x46/0x50 [ 748.064185][ T1301] __kasan_slab_free+0x5c/0x80 [ 748.069113][ T1301] kmem_cache_free+0x180/0x630 [ 748.074616][ T1301] rcu_core+0x7cd/0x1070 [ 748.078997][ T1301] handle_softirqs+0x22a/0x840 [ 748.083883][ T1301] __irq_exit_rcu+0xca/0x220 [ 748.088521][ T1301] irq_exit_rcu+0x9/0x30 [ 748.092963][ T1301] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 748.098886][ T1301] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 748.104993][ T1301] [ 748.107537][ T1301] Last potentially related work creation: [ 748.113533][ T1301] kasan_save_stack+0x3e/0x60 [ 748.118247][ T1301] kasan_record_aux_stack+0xbd/0xd0 [ 748.123830][ T1301] call_rcu+0xee/0x890 [ 748.128061][ T1301] evict+0x95b/0xb10 [ 748.131979][ T1301] __dentry_kill+0x1a2/0x5e0 [ 748.136678][ T1301] finish_dput+0xc9/0x480 [ 748.141130][ T1301] __fput+0x691/0xa60 [ 748.145143][ T1301] task_work_run+0x1d9/0x270 [ 748.149771][ T1301] exit_to_user_mode_loop+0xed/0x480 [ 748.155080][ T1301] do_syscall_64+0x33e/0xf80 [ 748.159887][ T1301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.166254][ T1301] [ 748.168608][ T1301] The buggy address belongs to the object at ffff8880929fe000 [ 748.168608][ T1301] which belongs to the cache sock_inode_cache of size 1408 [ 748.184182][ T1301] The buggy address is located 192 bytes inside of [ 748.184182][ T1301] freed 1408-byte region [ffff8880929fe000, ffff8880929fe580) [ 748.198254][ T1301] [ 748.200702][ T1301] The buggy address belongs to the physical page: [ 748.207190][ T1301] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x929f8 [ 748.216164][ T1301] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 748.224958][ T1301] memcg:ffff8880929ffe01 [ 748.229316][ T1301] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 748.237348][ T1301] page_type: f5(slab) [ 748.241472][ T1301] raw: 00fff00000000040 ffff88801f286c80 dead000000000100 dead000000000122 [ 748.250208][ T1301] raw: 0000000000000000 0000000800150015 00000000f5000000 ffff8880929ffe01 [ 748.259174][ T1301] head: 00fff00000000040 ffff88801f286c80 dead000000000100 dead000000000122 [ 748.267958][ T1301] head: 0000000000000000 0000000800150015 00000000f5000000 ffff8880929ffe01 [ 748.277106][ T1301] head: 00fff00000000003 ffffea00024a7e01 00000000ffffffff 00000000ffffffff [ 748.286174][ T1301] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 748.294971][ T1301] page dumped because: kasan: bad access detected [ 748.301610][ T1301] page_owner tracks the page as allocated [ 748.307437][ T1301] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5823, tgid 5823 (syz-executor), ts 490841125351, free_ts 481429452729 [ 748.331087][ T1301] post_alloc_hook+0x231/0x280 [ 748.335893][ T1301] get_page_from_freelist+0x24dc/0x2580 [ 748.341462][ T1301] __alloc_frozen_pages_noprof+0x18d/0x380 [ 748.347295][ T1301] allocate_slab+0x77/0x660 [ 748.351920][ T1301] refill_objects+0x331/0x3c0 [ 748.356967][ T1301] __pcs_replace_empty_main+0x2e6/0x730 [ 748.363038][ T1301] kmem_cache_alloc_lru_noprof+0x37c/0x640 [ 748.368984][ T1301] sock_alloc_inode+0x2c/0x190 [ 748.374503][ T1301] alloc_inode+0x6a/0x1b0 [ 748.379069][ T1301] __sock_create+0x12d/0x9d0 [ 748.383734][ T1301] __sys_socket+0xd6/0x1b0 [ 748.388490][ T1301] __x64_sys_socket+0x7a/0x90 [ 748.393294][ T1301] do_syscall_64+0x15f/0xf80 [ 748.398204][ T1301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.404251][ T1301] page last free pid 16342 tgid 16342 stack trace: [ 748.410989][ T1301] __free_frozen_pages+0xc2b/0xdb0 [ 748.416595][ T1301] __slab_free+0x263/0x2b0 [ 748.421535][ T1301] qlist_free_all+0x97/0x100 [ 748.426344][ T1301] kasan_quarantine_reduce+0x148/0x160 [ 748.431854][ T1301] __kasan_slab_alloc+0x22/0x80 [ 748.436726][ T1301] kmem_cache_alloc_noprof+0x2bc/0x650 [ 748.442482][ T1301] do_getname+0x2e/0x250 [ 748.446844][ T1301] user_path_at+0x2a/0x160 [ 748.451485][ T1301] __x64_sys_umount+0xf6/0x170 [ 748.456468][ T1301] do_syscall_64+0x15f/0xf80 [ 748.461280][ T1301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.467376][ T1301] [ 748.469742][ T1301] Memory state around the buggy address: [ 748.475827][ T1301] ffff8880929fdf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 748.484082][ T1301] ffff8880929fe000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 748.492703][ T1301] >ffff8880929fe080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 748.500802][ T1301] ^ [ 748.507152][ T1301] ffff8880929fe100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 748.515678][ T1301] ffff8880929fe180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 748.523843][ T1301] ================================================================== [ 748.532140][ T1301] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 748.539374][ T1301] CPU: 1 UID: 0 PID: 1301 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 748.548727][ T1301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 748.558899][ T1301] Call Trace: [ 748.562213][ T1301] [ 748.565167][ T1301] vpanic+0x56c/0xa60 [ 748.569200][ T1301] ? __pfx_vpanic+0x10/0x10 [ 748.573837][ T1301] panic+0xc5/0xd0 [ 748.577608][ T1301] ? __pfx_panic+0x10/0x10 [ 748.582516][ T1301] ? sock_def_readable+0x1cb/0x550 [ 748.587676][ T1301] ? rcu_is_watching+0x15/0xb0 [ 748.592588][ T1301] ? sock_def_readable+0x1cb/0x550 [ 748.597921][ T1301] ? sock_def_readable+0x1cb/0x550 [ 748.603241][ T1301] check_panic_on_warn+0x89/0xb0 [ 748.608207][ T1301] ? sock_def_readable+0x1cb/0x550 [ 748.613611][ T1301] end_report+0x73/0x170 [ 748.617964][ T1301] ? sock_def_readable+0x1cb/0x550 [ 748.623120][ T1301] kasan_report+0x128/0x150 [ 748.627646][ T1301] ? sock_def_readable+0x1cb/0x550 [ 748.632879][ T1301] sock_def_readable+0x1cb/0x550 [ 748.638101][ T1301] ? sock_def_readable+0xae/0x550 [ 748.643159][ T1301] ? send_to_lecd+0x26d/0x830 [ 748.647875][ T1301] send_to_lecd+0x3e7/0x830 [ 748.652418][ T1301] lec_start_xmit+0xe52/0x2890 [ 748.657397][ T1301] dev_hard_start_xmit+0x2cd/0x830 [ 748.662647][ T1301] sch_direct_xmit+0x251/0x4c0 [ 748.667536][ T1301] ? __pfx_sch_direct_xmit+0x10/0x10 [ 748.672878][ T1301] __dev_queue_xmit+0x180f/0x3950 [ 748.678135][ T1301] ? __dev_queue_xmit+0x2b6/0x3950 [ 748.683453][ T1301] ? __lock_acquire+0x6b5/0x2cf0 [ 748.688726][ T1301] ? __pfx___dev_queue_xmit+0x10/0x10 [ 748.694349][ T1301] ? _raw_spin_unlock_irq+0x23/0x50 [ 748.699867][ T1301] tx+0x6b/0x190 [ 748.703560][ T1301] ? __pfx_tx+0x10/0x10 [ 748.707787][ T1301] kthread+0x1e0/0x3f0 [ 748.711988][ T1301] ? lock_acquire+0x106/0x350 [ 748.717246][ T1301] ? __pfx_kthread+0x10/0x10 [ 748.722625][ T1301] ? __pfx_default_wake_function+0x10/0x10 [ 748.728576][ T1301] ? __kthread_parkme+0x7a/0x1f0 [ 748.733936][ T1301] kthread+0x388/0x470 [ 748.738228][ T1301] ? __pfx_kthread+0x10/0x10 [ 748.742873][ T1301] ? __pfx_kthread+0x10/0x10 [ 748.747562][ T1301] ret_from_fork+0x514/0xb70 [ 748.752845][ T1301] ? __pfx_ret_from_fork+0x10/0x10 [ 748.758408][ T1301] ? __switch_to+0xc79/0x1410 [ 748.763329][ T1301] ? __pfx_kthread+0x10/0x10 [ 748.768931][ T1301] ret_from_fork_asm+0x1a/0x30 [ 748.774340][ T1301] [ 748.778851][ T1301] Kernel Offset: disabled [ 748.785100][ T1301] Rebooting in 86400 seconds..