last executing test programs: 4.781860462s ago: executing program 4 (id=3551): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6(0xa, 0x800, 0xd8df) r3 = socket(0x1e, 0x2, 0x9) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000140)={{r3}, r4, 0x18, @inherit={0x58, &(0x7f00000000c0)={0x0, 0x2, 0x1, 0x3d90, {0x2, 0x7fffffff, 0x1, 0x8000000000000000, 0xc}, [0x8, 0x3b2]}}, @subvolid=0x7}) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000001140)={0x6, {{0x2, 0x4e24, @private=0xa010102}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001280)={0x0, 0x4, 0x18}, 0xc) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001480)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001640)={r1, 0x20, &(0x7f0000001600)={&(0x7f0000001540)=""/18, 0x12, 0x0, &(0x7f0000001580)=""/107, 0x6b}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x17, 0x15, &(0x7f00000012c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}, @alu={0x4, 0x1, 0x6, 0x8, 0xf, 0x8, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x3}, @jmp={0x5, 0x1, 0x0, 0x7, 0x4, 0xfffffffffffffff8, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000001380)='GPL\x00', 0x8000, 0xb5, &(0x7f00000013c0)=""/181, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, r6, 0x8, &(0x7f00000014c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001500)={0x4, 0x0, 0x4, 0x9}, 0x10, r7, r0, 0x9, 0x0, &(0x7f0000001680)=[{0x5, 0x2, 0x6, 0xc}, {0x5, 0x3, 0x2, 0x4}, {0x0, 0x5, 0x1}, {0x0, 0x5, 0xf, 0xa}, {0x2, 0x5, 0x2, 0x4}, {0x5, 0x1, 0xa, 0xb}, {0x5, 0x5, 0xf, 0xb}, {0x0, 0x1, 0xf, 0x8}, {0x0, 0x4, 0x6, 0x2}], 0x10, 0xfffffff7}, 0x94) openat$cgroup_type(r0, &(0x7f0000001800), 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r5, 0x80089419, &(0x7f0000001840)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000001880)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000018c0)=0x20) socket$isdn_base(0x22, 0x3, 0x0) unshare(0xc010000) sendmsg$xdp(r3, &(0x7f0000001c00)={&(0x7f0000001900)={0x2c, 0x8, 0x0, 0xd}, 0x10, &(0x7f0000001b80)=[{&(0x7f0000001940)="aec1214ed0e662d17624c2e497781d4cd21e331c3d82f98d68decc0e5124ca0c3c5f960132dd724213f9a449849d222447", 0x31}, {&(0x7f0000001980)="b3ebed67d89c9093fba5510272e7b105181ffe3633f6f8d66064021ff38e43666664738aa705a94ecdf6c42d030ac2371b71e6e474d8da5c836a6464516c8314d7e7dba72dd1194b69e9d657449f216df4ed33fae4295ad3031ebf2953f1a2922fbf4d1ee7ca01981936469d45e51e6988118467dc61ac1922b5fd89aee2274157631238a2125539a617736dc0ba4443e3fc0f72c166630e43c835d6137781c14e1284e06b40ed7a0cd30922a4", 0xad}, {&(0x7f0000001a40)="8fbca126d040a4c0888edbb8", 0xc}, {&(0x7f0000001a80)="ebba7243bfecca50a43d8c2616d18a", 0xf}, {&(0x7f0000001ac0)="3421772f3d750fec5c093a6a48b146b4c1e5864826f9b69b690d31913925f87d618a0bb3fd1dcab7f1a8f86f675a8c7544dd3ab0d98f148a91084a5828e4fceab7a45bfab576969dddd7fe67f86525b75422c8c4e7edc803", 0x58}, {&(0x7f0000001b40)="cb789d8f", 0x4}], 0x6, 0x0, 0x0, 0x20000001}, 0x20000800) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000001c40)={0x0, 0x3, 0x12}, &(0x7f0000001c80)=0x8) r10 = openat$cgroup(r0, &(0x7f0000001cc0)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r10, &(0x7f0000001d00)='memory.high\x00', 0x2, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000002080)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000004280)={'tunl0\x00', &(0x7f0000004200)={'gretap0\x00', 0x0, 0x7, 0x8, 0x5, 0x9, {{0x9, 0x4, 0x1, 0x2d, 0x24, 0x66, 0x0, 0x5, 0x2f, 0x0, @multicast1, @local, {[@noop, @timestamp={0x44, 0xc, 0xcb, 0x0, 0x0, [0x9, 0x0]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000004540)={'gretap0\x00', &(0x7f0000004480)={'sit0\x00', 0x0, 0x40, 0x8, 0x7, 0x401, {{0x22, 0x4, 0x1, 0x5, 0x88, 0x68, 0x0, 0x4, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x36}, {[@timestamp_prespec={0x44, 0x4c, 0x42, 0x3, 0x9, [{@broadcast, 0x8}, {@private=0x7, 0xf}, {@loopback, 0x7}, {@remote, 0x8001}, {@rand_addr=0x64010100, 0x6}, {@local, 0x5}, {@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x2}, {@broadcast}]}, @ra={0x94, 0x4, 0xff}, @lsrr={0x83, 0x23, 0xab, [@multicast1, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @empty, @broadcast, @multicast1]}, @noop]}}}}}) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f0000006a00)=0x0, &(0x7f0000006a40)=0x4) sendmmsg$inet6(r11, &(0x7f0000006c40)=[{{&(0x7f0000001d40)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc65d}, 0x1c, &(0x7f0000001f00)=[{&(0x7f0000001d80)="1ad1ad0bf37e39fed7998678cbe6d7c170a2f903f11d34f6c7e378e99ea7213e4cb5ebe25d1953edb43476412e4b991d456a79d9b2aaed6ef3f9a00fc83f", 0x3e}, {&(0x7f0000001dc0)="b3ec", 0x2}, {&(0x7f0000001e00)="728df03265379bfce65cebf8cfa53710f7d8ac065b1a3f85b5aa1f990eeef14b67db5da6db3049cf36a7dcafb33f3b54124df0d23971340e86bf8946360b1a2698ed86cc844120e51323fe95da1232a4b8658ddce5ce0c74d3febd816fe095979b938972c03f1637798773d1", 0x6c}, {&(0x7f0000001e80)="9d0bb756da0cc8d7b5b71dcb6ae3955c5f6da594780b239a74f8df6a3c3116e25789f75bd67c6754a1b705ce7e051aac83f3a0fc754c6c5725ff83380886fef0197afb7a6fdb5c009aa0b386b6807a762359c8cdb703f0a837dec0e0ac006c58", 0x60}], 0x4}}, {{&(0x7f0000001f40)={0xa, 0x4e21, 0x5, @loopback, 0x6}, 0x1c, &(0x7f0000002040)=[{&(0x7f0000001f80)="5504658e0d4ef496bb6642edda8db59b0c5362894e76e8246c53d1013c68459e53e3bdc302fe68ed", 0x28}, {&(0x7f0000001fc0)="6a3f3841bda1f306f8888c465ee0387d6d8eeaf5f8f116b90b548132b138312b02e3675760a0c1c79908e861b38350c2ffbe967b6e79ce71d0fbf7f1a16fbfe63c68ee4e51774c49f6123c9c3e58b6825893d67704e43a584af6b4becf4774239efd51486190a26c70bbf929bc97c12dec77eaa0d61daf83f122", 0x7a}], 0x2, &(0x7f00000020c0)=[@hopopts={{0xb0, 0x29, 0x36, {0x2c, 0x12, '\x00', [@hao={0xc9, 0x10, @loopback}, @generic={0x3, 0x69, "18578b0518e3fdf3c83742d1a15aa246681cdb9e695f9f59392311d17bbb310adfc10d9df68ea137b4057efc14a9b426c0fb728c4f57f5fa5eb48b921cce4f4ac4eeb272fe2770b97573a7889fca8a4f7a125ea5d4c7dcfedd49b37da37f9b1ef8e0d8b6181de9c800"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x7d, 0x6, [0x3, 0x3]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r12}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}], 0xf0}}, {{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f00000021c0)="4e217749630f86d5e7aa7b825db30864632e5ff24b7403eb35ae6344189c4a4d941605bcdd72d35c2cae04d46739e8ff25aaa51affcf46217f086c5220b0f64e3b098793665eabf92696a7f6b9fc3d5f5013aa20179e9c8a76c13e05570ba8ed1fcea63371d42457d1f185b8b1b136f13ddaf28f9cde809719e1acf45356db583dc2359b1a66ce43595480706191710821cc", 0x92}, {&(0x7f0000002280)="afe9cceed9c9f0bda9ff26d94220c52ed953c928be44f1aca34b4e7eef7687aa112cecdb811551397c9399161a724fb41318b7897c860b6068439b454f650856949282d2d4bd1ab5d82808e2a5ed1efebda1744bd65febc10a83d3a411f78922233d55e71b9cccd9f4e14856ece1da3f30f8adbf44df7079b85bdfffa2", 0x7d}, {&(0x7f0000002300)="cc552528cb683f855b1bf63c15a9ca3184b5c08c28b45bcda4e3a92dcd94724ac767cb4e43680f28e86b9a3757d6a7fe6626a6c240d0065a0811aad28bcc8752fcd91a72f50777f2b1eedece0ffae78805edee01c30a351894a8e645d651fec7474b293c0b4ad0af66700638b1fe918cee27e128bb4e1daf4c7f98f0feef22130406a46109d7", 0x86}, {&(0x7f00000023c0)="49972c755fb2ee2212880c5f57c365060f683f30cd26dd11d746915f001592064592b79bcb15f10ab18625fe92e7cdf5ae9e78d828104642b4506b8ffa8220091c6a5b40c2f157ae8a8ce186605036832873cdd0575f1d252e5ae9be7de78a8b94d24eb76f9d5dea003c3230ce196f598f004036c497f25d19c1ad1424ce3df1a4e2764ff59763d0c069029680d30f7bd7bde3eb61aaac3ca3ce", 0x9a}, {&(0x7f0000002480)}], 0x5, &(0x7f0000002540)=[@rthdr={{0x38, 0x29, 0x39, {0x3b, 0x4, 0x2, 0x6d, 0x0, [@empty, @private1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @hopopts={{0x78, 0x29, 0x36, {0x11, 0xb, '\x00', [@jumbo={0xc2, 0x4, 0x7f}, @pad1, @calipso={0x7, 0x50, {0x3, 0x12, 0x4, 0x100, [0x8000000000000000, 0x4, 0xffffffffffffff21, 0x7, 0x1, 0x2, 0x170, 0x9a0, 0xd6e]}}]}}}], 0xc8}}, {{&(0x7f0000002640)={0xa, 0x4e24, 0x8, @mcast1, 0x3}, 0x1c, &(0x7f0000002940)=[{&(0x7f0000002680)="b2c7c8f7826da92a67f472a2ca68d2f2e53ea94eeb60ae", 0x17}, {&(0x7f00000026c0)="14860da4ecff5c1491123e36b0b340a0417a7966aa761ef935aa01b5ed95863970ef56182db0298bd6d913c2c43f1aaf8ad7dbbd4882089603f2a61bb38678aa0b14a33e341f8437808ce932dc574b2cf553933ebfb036ac3783ba63d0095f684eb0efa59f8a80beda1bf36ff65f0cad06cd409a9e59", 0x76}, {&(0x7f0000002740)="23d9de1afffca9e3bed85b0419e6cad3f49a02bec25bfcecfefb8c2c2dfdc047f25167b7f833ca114c7d4b51c0d5c8b50b0f0a91bdddf6d866f2bb404f089b75329dec8785cb64867ad1e7bb9b6878de506d476effe4535ad870224280f2425cafc8a9a4bd1f7c3e79ae4c55817c4377f4390589e32b86462ba5b481e7c61837ce30346b3bb7561c54cb86b6efa232be413fea50d087487db8e7177c5d92f65d283eb49563a263b2c987d8bd6ddc24099ee9318214739811b680b519424230d06991ae8eda30256010fcda50304ffd44a26b7e43c3ccbb5f5b803238b63f", 0xde}, {&(0x7f0000002840)="e72af5ceaffab78234199f0fe6bad4aa518abb30268596a899ad2287150b53ad69aade93bdf6ae42ff7069b8c84292df640fa3b2f159c2a56cec7fd256d76eb66aeaf856252cbd5500910d003c789805d53cc862a56f6de08d1c0a05171c161409e5f31b85554f57687fcb4f4ce31e676bc2a90070db7d9d9e7a53ce147d143e1bb61c9f96bd261b9d5d99a7aced58aebcf6abea19ab6d611613547853df25b4f18498b854c52bbf03e59334f05e7ecd800e01699b8a65c33e619426bd48cd79e2b77ba7504546aaf3f0170ecb62eff7d3154a0cb42d0f3c13d23c6c3dea1839d6ce95c10f7601b9ee98cd", 0xeb}], 0x4, &(0x7f0000002980)=[@rthdrdstopts={{0x78, 0x29, 0x37, {0x3a, 0xb, '\x00', [@ra={0x5, 0x2, 0x6}, @calipso={0x7, 0x38, {0x0, 0xc, 0xb1, 0x9, [0x4, 0x401, 0x4, 0x6, 0xb2e2, 0xffffffff]}}, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x100}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts={{0x58, 0x29, 0x37, {0x0, 0x7, '\x00', [@jumbo={0xc2, 0x4, 0x4da}, @calipso={0x7, 0x18, {0x0, 0x4, 0x2, 0x4, [0x0, 0x6]}}, @jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @padn={0x1, 0x1, [0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @dstopts={{0x140, 0x29, 0x37, {0x17, 0x25, '\x00', [@hao={0xc9, 0x10, @local}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @ra={0x5, 0x2, 0x468}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x40, 0x96, "68f4dfa91574eedeb52af8ebad67d3294009ea34be834175ae2c2b1e7b44359ccf66901cba0794cccd220536aafafdfd9e9c983ac051b660fbaa1eb6cc357109502812b7a178d26a89f2a6be886854b9b0b4de523e5fb2c04856a2a76e707f93e441da58884276904cebf794b02fbf6f682d398b1a53e979cfb79929847dcac48a28fade46b7fb809821bafc08a74d6ce212bb4d07e2"}, @ra={0x5, 0x2, 0x9}, @calipso={0x7, 0x28, {0x0, 0x8, 0xb, 0x2, [0x5c, 0x7, 0x9, 0xc860]}}, @calipso={0x7, 0x30, {0x2, 0xa, 0x4, 0xfffd, [0x1, 0x5, 0x5, 0x3bf, 0x3]}}]}}}], 0x228}}, {{&(0x7f0000002bc0)={0xa, 0x4e20, 0xfffffffb, @private0, 0xffff7fff}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002c00)="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", 0x1000}, {&(0x7f0000003c00)="ae2023f79ce80c95266da75183e15dc0d9e5bf353d52b35039d348c8d6d773063db3f4536346dda3b0298637f9248ca8afb02819b58cabae0d895cdf25b0d3e3e3a4d6b0e727bd33708db195f88c5cfc82ed3d66b86b785e7d3b6d446c9195ff31384993843a98d34c0427721176d9aa2030229a7e801c1a5fef1dc0bd91ef4c64024d90ca9833513b8bf4d07edcf718f430d0ecddf002a45ebde4e7325b277875fd16734bc4d0c3c063c72687e572a89584d45d0d1a6d510b009f277c14a9764414e66e64bc48f63af07522cbeb7c99df2d8d0536e8a9d37153931bb41d", 0xde}, {&(0x7f0000003d00)="e90a3650223f717b6f4cc452549eec5fe7e765212e3f0dbd91cfcba823a78adde7503506befb637d58bf009a7b6b20f17c3080101f67b8dd4b5772f5cfadd02eb5270279405b42ba0b1a1331c5878a431af176b31961be5e60e3687d9715159d9f1f6ec440b13326e65e2abd18aff384e9cb0c1f3005b7dff08201206213e1dbddbc3826d420d0587d31f5174551ea36010065db74483ae68eac5f039a9d9773c7f8a43c328f1f71f96c83693faa1b830a68662fa9abcec1d606d64483468aa11f10f91fd6eba1d3c23f35fd0b004b066d3b1899a1a7b3661bb27b5460dd95d8913c0e277e4b02ca4ffa5fedb9", 0xed}, {&(0x7f0000003e00)="86b933f903de680230b8df864f168044adac41f3cb0774d96e30391a8cbb4fdb757fb867c9504dc0370f31ef4a30f3e5568707763ac26c58ffd6b1948cb6d575b9ad27ea8c8f67bbcf69d41169b54d372817fa11e92f7573ac006d7c71c5b29169974d0fae661b5978eabef8df007863947f8c56444d86029c23f4036b1adad4f94fac1dcc30ee24b2a3670402f65d14a8e068f52cc62c25864205e27e23ecc79b12f98bd9255aa4a14507cd8a4c8e9e2a5463abb917f9636cc6a6838f424d489ce0ae31e7e09ca8cdd892333d238dc05abb4f8eecdc1b5b736b", 0xda}, {&(0x7f0000003f00)="7fc977de85c965973469dd4106abc6920a31834f01bf533175f4b88e8ec4f22d0bfdc5fa2cbb8f4498abf1e80fb8f1dd068a12271783cc2d5519f3f70136bb7e680ab114998a31f6706532bd5663944105304df2e8cb7c378d11b0875d971662f2c678bab49421e48bce6cf82752c53e02faea5b2812e43382ca5831f135bf8e03957ac42d4de2bbbca1c806c8b48baa61b29c9b9fe7704f20e18ba53d3c1296cc", 0xa1}, {&(0x7f0000003fc0)="f9a0ba96520a18d167cc17abf6f8c2252e556b1930ae47e3b33ee37023e8da4529f1875ce5a4777df838d5904f52a1ee9d8b39e71cdf65beb476cd55158fa890a1077c0d77765a47d5443d", 0x4b}, {&(0x7f0000004040)="ec670aa5eee31b078307f896aae331a8778b67da8094a3bb0cdd748c6175825aa73417ac9e85678de60e361ef1187d403383b4dc339b6b5b8364ed925e90c57ec5be9f68ed1f6309a45e6b78f89bf88a947b8e462c77fb16f0facd45b90208092ac10eb8601d98442772f3536f958d0b9e880a826d24ebf42d6303b1f7f3f7ca58b5c8db136de6561d6758140ceb4edc81a38f2215c29b85fa10107885d50e474227062119ea30960ff940e24046fa3d271b5307b1c19ce0199ad72d86438ab1b7e7526fda7c02ab09ee82fc59ce806bb26f4c19e1fb80eb7eb1b8c5a799bd5a", 0xe0}, {&(0x7f0000004140)="3adab7d1585078ea75a99a43e0bc393cac3aa00375574f7cac56cecd7824271cf84cc9937a127e3bd8af587479d93c1427721fd23fba276ffc98a140455057", 0x3f}], 0x8, &(0x7f00000042c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2, r13}}}, @hoplimit={{0x14}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x11, 0xa, 0x0, 0x7, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2e}, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x37}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}], 0xc0}}, {{&(0x7f0000004380)={0xa, 0x4e20, 0x497587e7, @private1, 0xffffe187}, 0x1c, &(0x7f0000004440)=[{&(0x7f00000043c0)="9e07927f41a2ce19236d65526dbc891b8b79497bb9ecea38463b87b9e85ad803389345668aa2a245cae2a2e359bdce4eac0d8f636d0d", 0x36}, {&(0x7f0000004400)="9d8d480bc781ca75254b5bb36bd63f13cf139b82e6c3", 0x16}], 0x2, &(0x7f0000004580)=[@rthdr={{0x88, 0x29, 0x39, {0x21, 0xe, 0x2, 0x5, 0x0, [@private2, @mcast1, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, @private2, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x3c, 0x0, '\x00', [@pad1]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x87, 0x1, '\x00', [@ra={0x5, 0x2, 0x4}, @pad1, @ra={0x5, 0x2, 0xb}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r14}}}], 0xf8}}, {{&(0x7f0000004680)={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xaf}, 0x1c, &(0x7f0000006980)=[{&(0x7f00000046c0)="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", 0x1000}, {&(0x7f00000056c0)="d805f9bf294d095cbda47c66e7bfd747b6fad29ef873", 0x16}, {&(0x7f0000005700)="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", 0x1000}, {&(0x7f0000006700)="a19ae9d89fc9f2901d7b6e9096eae6f4cc093e294fbd50219c0ba5ee462cece338cb8a164c8edddd7995b7b192c9c351200336101d85dafa25de7b7c0342e926c39dc6f77958565fdce42e17d5f2c38a1a4a42f084312ad867bd1aedba5366d3a9b8cef9b2bfa390c23eeb", 0x6b}, {&(0x7f0000006780)="48315c1981ab30644d94b240fecbd10ebb05656ac236a30c26d46331b1089e9ddd176352fcae3d3f7d9898296291c898cbd29cf66a9832cc79e3182e5394db87bb1a73e0c6a82d1f3b6d0606e8bfdd3e25bd3aba71c1d15ba86a3aa25e83bdec69c58026c8e27254576b9327b6bb65a9c00e89bcaae110fdb4fe4732c48198f8ed35ea58d182985f89388ee11c7bf3b1c853e106122eefd5a0145e6d34e470a92e72f863d8c8515d0db661c0b5cc11b129498fbacfa57e57f8ba70", 0xbb}, {&(0x7f0000006840)="fcccbdb2133a96a2fa0a0f2856eafebc0870a72e7dc368fb2f7038e7e66b8a7ea982dc7547d3adda8746c3735af8386bdd812558fa0ce258310e5d11114e5ea1d065093b9f074968e499f673b60dbef5525076ada0bba81917e3df4dccd48923cc3afa38887e2f6231c3d28daf6e7c35bb09cc0f8c2bcf28", 0x78}, {&(0x7f00000068c0)="5eb614f540ffb3ab3124370288e5abc73ad31247538db5b2ca0b494ee0ebe3e9add465c8567ce686b05ebde5e776a92c87a4b1456ed33a66ae3f0625cd976f4410cb864cc0ccfefb213af099ff515ae0d15fbf0a21b8d5aa3ff898f0710d34b09bdf20dcfae22285c6ba5cab822bc503b4d8c3794bbf18570ec6b1d1a30ba7a7a11991e47d7a46d1d43177760b9bb91055248148dfd7d531e8099b9104317eb9e0183eb246dd49fbc7e3", 0xaa}], 0x7, &(0x7f0000006a80)=[@dstopts={{0x30, 0x29, 0x37, {0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @empty}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x0, 0x8, 0x2, 0xb7, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @mcast2]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @flowinfo={{0x14, 0x29, 0xb, 0xb8}}, @dstopts={{0x20, 0x29, 0x37, {0x2839d5beb1d9c725, 0x0, '\x00', [@pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r15}}}, @hoplimit={{0x14, 0x29, 0x34, 0x8000}}], 0x118}}, {{&(0x7f0000006bc0)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80}, 0x1c, &(0x7f0000006c00)}}], 0x8, 0x4000000) getsockname$packet(r2, &(0x7f0000006e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000006e80)=0x14) socket$nl_generic(0x10, 0x3, 0x10) 3.766846446s ago: executing program 2 (id=3566): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x20000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x3f, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f00000002c0)=0x7, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x40004}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @empty, 0x7fff}, 0x1c) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000000000000850000009300000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.766368526s ago: executing program 4 (id=3567): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r3}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000001580)=0x4, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRES16], 0x38}}, 0x40) r9 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r9, &(0x7f0000000480)={0x2c, 0x0, r3, 0x15, r4}, 0x10) bind$can_raw(r2, &(0x7f0000000080), 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r7) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r7, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r10, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x8081) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x44840) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x25dfdbfc, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 3.761121792s ago: executing program 0 (id=3568): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000880)={'wpan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="08e9e6ad6e45296448d457fb0738492847b0742c634e4e8658a3c8a9555e7dff1ed37420668c8e641a8a0b262bfeaec10e244ee0ad51d68de1aa46e1c24dd9524aa848e5bbb4f6173be4266dac4c807a86045ac1577828cce7825fcfce444b408e00a41902e4d7bfbe203fea658af107644e2e9e4a195b0d5a6354bd84966c7cece53963eca62ee882cb700c7bbce8e1536fcd6c08d7d94cc1bd7f90986d024922e2abd0de2a68bafc8901f6f9e4385c0f72360df1e7c60b416d131438720080800c74eb11f4b0d3ddc23a5782c5dc73cf9f4503a8798d51f91782a22e571224d902de1792f1067b89dc43db3a78cf2431638f7bf822a8c8aaee7fee5b14b628f89b2ae6f582d3f2d701f2841c63c3aa7865079a32912d3e8d106e182f5cede1319bb9fe7549744c60d5212661c81ea1b658db1a8a4f928212f78a949934aec80a0870f7235159c5843a4b933dc7bff86b233bf1473bb7ea07b2c04419d3b996a74f26355be3784d179cea4a241507ef280f1d938f70ce90ded6b6b83ca0ef53ff29dc57a3ceeb4bb69eb23c5f94b481c93e6b2a05db2088957da9a59e3a332b6585419a8c5b91fc46ef3b408327c2c0401a446da9198e3033159a81650b56016e216ae7cb4564cd3332ac2566807812f302553867d7def9fa5fdfddffcbb4ad39b486ed7531e1b20d27af4d42520e8807c2831407b5de30a3d035cac5ee651bad453a88803256322ddf3a89c044eeea9648fd36f8a1a21b854058e92df2c5c4ba8445cf16745d07615f7e4943ee8107a5d815ecfeccc2fe201045a928078c041cdca8a29c56eaa1c12370c5539e084b02e165bb3b89175500829c527c43dfc7e152d0a93771a0ffbf5faec87c62fb01471b7b8a84a96ad1f0df4540a8a11525c39c2f83201dd4e81aeafce2b7eb62fd784e0989a9795bccf6fc7f758a38e7ff2a112326dffbf25c6dbbeb56f21eb4ba30bf479812b428787ea6be0a84cf6850c0e433465181d94c507300ff0b5712ba509cc0b4012753be3087f031bcd3fd64f72d6641df95c061c56b6c5a99e7ad071c06208fc44e7ea2708cb848bb449c316bb293623f7070dbb9a4c62faefd4b758ee4522b6f463e98a041f472fcc1c46ff60b340f2ba97580ddc098daaf0a6694640088ee48a4c6571ee301aca056125b0944efa7de04484bdb63ec7f21f82cbd68ab58a0c4451e958f4112ccda0ac600e62cc75b3e0f7bef56f207b9b63fee572de9ec023b65b02e102d78dd2469442d9c001af1d3f8f5caa71105a609c742cc7e9eb6bad3b2a0e6e0a47f961665b46c06e9462ddb033ee0074290bc3c4a30532266036b6296e6fa0e2dff0429acb55b0956f5a27c8b02401569f0e3208bbf9060de77c3b62011b823062c3ca0faaa12e32cf46383ec72095ce3c44fc57155c6a263576c1dff1e55de6f110a94cd13128d5ea0adeb554ac492abcc3c6f7d04dc4baf1f3c7ccda0a3f054262c3a05feb997f8cc1e71d31371cb4c675ef374d4b8724c439be709a36fdfbc9d97a663b79f49eaedfd1f2a56d37fcd3143feafdf00800000f75dbc35eb1b112eb16e8714da03a234d8d31b784b74cacad310c8f45c49e463c0fde12a012faedc34ab7b04a8dc73b80277986c118e8e76bccca570e905b1ec18bd95f716dbecba2eae96cb5fa826415310bd53610a506ad2341fb1b74e6ca481b6f2583f63a3940cff1b1111a5f30f3bdc0396a559bdf67c6725adfc7785e0794ce65cf31f5aaa988435b1832d8f6197e18a092ba31fe8e32802f82361edb69edcdfb96906dc584f87ad707fd8c58936680f5b8b11c9c50328488743d1d4f7b36213cec96a50b6500bd7cdc5c07ff671be551af117f05331834dbf4e5657adcd46c59244f9bb7d232df0d8cbe5d88e2231a86a68db4b17367e536bd4a66a79b24c9ecdc6603715ec889be04bccb0ee9867cd97ef90e140ddafb9fda2bf56cea41e11b4188d683cc694d438eb687df48e69726107c1c7898c3e121068a8646101a73ef08af48f3a1712de007a2ef459ca1d05e1d279c76cdc27da54340a00c705992e52e3a21c1c45ddfb1f98e316c7e39032e1ae326a5d4b4ced733ffa92f64aa08c32a6d3d19b1ae6ab5249fc9276b47241b103042501b35fc7012f22e44a354a8171e9d022b6ff49dc6fff0ca71a91a11bbfc0ab96a39499b70093e6dc30eccd4e096ab911ceeeafdea4919ac676733e6454e3325a33d6dccb682ea33842ad91cf0d3df7442df42c2e60a27b4aba31b9b9ceef27be0b439482b67b2e3d45ab2250fd49d7ec56ac039265f8324717640897625f722c74856a8c772bfbeced6b6607718743b60e7ae2ae72949b8b75407732828065f4c22f3b688caa37ab19db980ce241c45e5e2ff0f6b159529661812bfd126f5826d339c7f2f81e0687ebb68652f0fce3a779da643bb557d73fd99a21117ac7ad6def2d0dd158687c47d6c5c4bb34115d0f9f08c6509650b2b3956de30c9dc034498d67c0579557fbe9aa344a69578defbf54af4a2b26aa5663385bf39ee27c3a3bf5eb1ffb94bd6bb128d184f95a226440a299b0abc9a586f5170df064f36327af8d36145cda1c167b3fc25a9a57743ddcf3b80c8d4e96be05d023379afbb15de02755f62551c19032e996107222d5cb800d92f004028f40b874adbb7ddb0f129def7ef58bd536cc29fa7978d660cdb0287d805c385238abf15eabc081f8887896e891c8a1fdc8eb4858bb050a767c3be217f01f13347283c5ce4b830375be8ddc95dd825ccb58c3cc48ae1ff8c472a66e135bd4a73dc5cff51f52831e4180de2385289362dd74aea6e3f8abd62a0730ea33840146bdc0e671d53f3725c3f5d8e69bde1bd7b93fb414b43cacd39792506f61a045c1d1c34c54b3c7392b3bd1545c9c7b8a9e6031ab1d69d28a468185985680d2e63f9377d33394b90466a88c8dc18bef8724eac4377c40b89a220ac734c2ca74e166a6d7ae8d2fb1040c9d5c993f9053800dbd717a083a1aa5a9"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r6 = accept4$unix(r4, 0x0, 0x0, 0x80800) recvmmsg(r6, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x807}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)=""/240, 0xf0}], 0x2c}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r6, &(0x7f00000008c0)=""/239, 0xf9, 0x42, 0x0, 0x4b) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf2515000000050029000100000008002a000500000004002b8008002c000900000008000300", @ANYRES32=r3, @ANYBLOB="20002b800800010001"], 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x40) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021500000000c0a01030000000000000000070000090900020073797a31000000000900010073797a300000000024000380200000800800034000000001"], 0xd4}}, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r7) sendmsg$IEEE802154_ASSOCIATE_REQ(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={0x2c, r9, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xa}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r9, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x61}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x16}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x9}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x4}, @IEEE802154_ATTR_DURATION={0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x4}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x10}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @rand_addr=0x64010102}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 3.679798631s ago: executing program 2 (id=3569): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x28, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x4, 0x800}, @nested={0x10, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @generic="a1fcd70d"]}]}, 0x28}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, 0x0, &(0x7f0000000080)) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000000c0)=0x6, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x18000000000002a0, 0xe, 0x26f9, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x14000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @broadcast}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0xb0, 0x0, 0x0, 0xfc, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "54b267caeb9f92d605d0e139de800ec4e833386486343d4204a558ba3acf4ee4", "4ebd2abcd7f11f894cb7aaa047dade58a45c05adae23945d9d02c86c83b95ff6f954c1c8a1d922199fc51eac21e76a30", "0b5ecba15d26ee0eb65b889052610563b3938f576620c7939d0fd063", {"3a20d5da0d8f06f3ee12d2605fa82460", "8a4eb61afaac0ba781cdac6b251e040a"}}}}}}}, 0x0) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x97}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5ff0920000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c000480280001800a0001006d617463680000001800028008fa000065636e000400030008000240000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xc8}}, 0x0) 3.316012976s ago: executing program 3 (id=3570): r0 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@rc, &(0x7f0000000040)=0x80, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40200000000000061113000f8ffffff850000e524d113000000000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xb0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000740)=""/165, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x30, 0x3f, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0xc}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@perf_event={0xa}}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x44}, 0x4000) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r7, 0x4) sendto$inet6(r3, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0xfffd, 0x0, @loopback, 0x81}, 0x1c) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x4e21, 0xfffffffc, @mcast1, 0x3}}}, 0x32) connect$inet6(r3, &(0x7f0000000500)={0xa, 0x4e21, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8ce3}, 0x1c) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x8}, 0x94) 1.636588328s ago: executing program 2 (id=3571): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) socket$l2tp(0x2, 0x2, 0x73) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000080)=0xfffffff7, 0x4) sendmmsg$inet6(r2, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="24000000000000002900000032000000ff"], 0x28, 0x7ffffff7}}], 0x1, 0x40080) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc1400", 0x8, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) 1.582517365s ago: executing program 0 (id=3572): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) readv(r0, &(0x7f0000001840)=[{&(0x7f0000000200)=""/24, 0x18}], 0x1) 1.582219526s ago: executing program 4 (id=3573): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000003f000701feffffff00070000017c000010004280040008800600dd00800a00000a00018006000600800a0000180002"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x22, 0xa, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000306010200000000008000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 1.484519376s ago: executing program 4 (id=3575): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb000008000a1006c0012800b00010062726964676500005c00028008000500010000000c002e000100"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) 1.423151077s ago: executing program 2 (id=3576): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x437, 0x0, 0x30, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_FLAGS={0x8, 0xd, 0x401}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x24008000) 1.182018019s ago: executing program 2 (id=3579): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000050a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000021140000001100", @ANYRESDEC], 0xd8}}, 0x8090) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.126932451s ago: executing program 0 (id=3580): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000200)=@newtaction={0x134, 0x30, 0x53b, 0x70bd2c, 0x0, {}, [{0x120, 0x1, [@m_sample={0x11c, 0x18, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8a7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x7fffffff, 0x0, 0x7, 0x7}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x78b6, 0x9d6, 0x5, 0xfffffff7, 0x7}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x0, 0x7, 0x2, 0x57a6}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xea6c, 0x8, 0x20000003, 0x1000, 0x81}}]}, {0x75, 0x6, "822df1316078376323d71f7a5cf4d96dd0b49e11fb624bd993e6b1b9ebffc9bdaa5d4a057aa17fb71235cd3274283d15032e3ac0bf9867ac0a456fce4e98cbf2adaf9e74d3b95378201294c954b8d92b0c95da4682e9c6a401eeaecd92397e842c2d5ce50578ecb0d186277a9740207c57"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4064040}, 0x2000405) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000ed4af521"], 0x14}, 0x1, 0x0, 0x0, 0x48001}, 0x40048c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x20, 0x1, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0xfffffffffffffe25, 0x1, 0x1, 0x0, 0x8aea}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="04704e7974201a65f9a388c7ec4909f8d9d2a9f950af6e0acb1341e2d8cc7118c2a62539905c0000fb0cde6e6f8e550385229b86f08194703e477500ab21d72f47618b2a4f13f673b3198c7608feb8d2a7f617a30a13901cb4c854c4d6ff11e57d3bbd543a2b36c20c38a08c52f8acc36ce61fd5b68a4f6b0d50995a3e126da4731976e488c4e991c11f6ccb86528c239be3883252b0688654f399c0a307f6c13e81971608d4cbead93b3a00b6f18285b80f8a9eb80e1cb5f2973d78a5a60972dec409b3848794e7cb09f89d9dd1d45ed5f8c915785bae02e44c019c0256", @ANYRES16=0x0, @ANYBLOB="00032abd7000fedbdf2508000000050004003200000008000a00040000000500070002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4844}, 0x2400c081) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.108806316s ago: executing program 1 (id=3581): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x2, 0xa, 0x9a807f839144420f, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x40) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000b40)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf252000000008000300", @ANYRES32=r2, @ANYBLOB="24002d000180000000000000080002a00300000008000300810001000500040001000000239276b15bb6cc55fe02be73ccd19d"], 0x40}, 0x1, 0x0, 0x0, 0x20008894}, 0x44010) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008", @ANYRESHEX=r0, @ANYRESOCT=r0], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r5], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r7, @ANYRESHEX=r6], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000040)={r8, 0xffffffff9c16feb3, 0x2, 0x1}) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f00000001c0)={r11, 0x6}, &(0x7f0000000200)=0x8) (async) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000340)={r7, 0x8b, 0xf, 0xffffffffffff0000}) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000118}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x8c, r13, 0x708, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hald_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x20040000) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x13, 0x6, 0x0, 0x54e44051, 0x3119c, r7, 0x84, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x12, &(0x7f00000001c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @call={0x85, 0x0, 0x0, 0x6f}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @map_fd={0x18, 0x2, 0x1, 0x0, r6}], &(0x7f0000000080)='GPL\x00', 0x6, 0xa9, &(0x7f0000000280)=""/169, 0x41100, 0x54, '\x00', 0x0, 0x0, r12, 0x8, &(0x7f0000000380)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xd, 0x8, 0x5d200000}, 0x10, 0xbfec, r6, 0x8, &(0x7f0000000480)=[r6, r14, r6, r5, r6, r7, r7], &(0x7f0000000500)=[{0x5, 0x1, 0x4, 0x4}, {0x1, 0x3, 0x8, 0x4}, {0x0, 0x4, 0x3, 0xa}, {0x2, 0x1, 0xe, 0xf}, {0x5, 0x3, 0x4, 0xb}, {0x2, 0x4, 0x6, 0x5}, {0x2, 0x4, 0x2, 0xc}, {0x2, 0x3, 0x6, 0x7}], 0x10, 0x3}, 0x94) 1.010586114s ago: executing program 2 (id=3582): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) setsockopt$MRT6_TABLE(r1, 0x29, 0xcf, &(0x7f00000000c0), 0x4) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0xffffffffffff8000, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) socket$rds(0x15, 0x5, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) 919.513569ms ago: executing program 1 (id=3583): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r1, 0x0, 0x240080d0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'veth0\x00', &(0x7f0000000000)=@ethtool_test={0x1a, 0x1ff, 0x200}}) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000100)=@req3={0x7fffffff, 0x0, 0x0, 0x5, 0x5, 0x6}, 0x1c) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x7}]}}}]}, 0x44}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r4, r5, 0x26, 0x0, @void}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r6, 0x0, 0x0}, 0x10) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000000), &(0x7f0000000040)=0x4) accept$ax25(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r0}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 855.76533ms ago: executing program 4 (id=3584): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x40480c0) listen(r0, 0xfffffffd) r2 = accept4(r0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) recvmmsg(r2, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) setsockopt$inet6_buf(r3, 0x29, 0x4, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000003590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 806.238932ms ago: executing program 0 (id=3585): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x40600, 0x0) readv(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000001c0)=""/250, 0xfa}], 0x2) (async) readv(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000001c0)=""/250, 0xfa}], 0x2) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b40000007f"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x4, 0x5}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0x3, 0xe8}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000240)=0x3, 0x4) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) (async) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r7 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) close(0x3) (async) close(0x3) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x8, 0x3, 0x12d8, 0x1130, 0xffffffff, 0xffffffff, 0x1130, 0xffffffff, 0x1208, 0xffffffff, 0xffffffff, 0x1208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @dev={0xfe, 0x80, '\x00', 0x2b}, [0x0, 0x0, 0x0, 0xff000000], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1100, 0x1130, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x0, './cgroup/syz1\x00', 0x58, {0x8}}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x3, 0x4}, {0x4, 0x4, 0x1}, 0xf2, 0x7}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0xca2, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1338) (async) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x8, 0x3, 0x12d8, 0x1130, 0xffffffff, 0xffffffff, 0x1130, 0xffffffff, 0x1208, 0xffffffff, 0xffffffff, 0x1208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @dev={0xfe, 0x80, '\x00', 0x2b}, [0x0, 0x0, 0x0, 0xff000000], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1100, 0x1130, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x0, './cgroup/syz1\x00', 0x58, {0x8}}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x3, 0x4}, {0x4, 0x4, 0x1}, 0xf2, 0x7}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0xca2, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1338) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r4}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r4}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="00000000000000006100ed0000000000180000000000000000000000000000009500000000000000b50a00000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x900}, 0x94) 789.63969ms ago: executing program 3 (id=3586): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x54}}, 0x0) 701.449725ms ago: executing program 3 (id=3587): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$inet(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000d40)="896b6bb38cf1b52353635304f9c9ceeccb7d09fa1c18ca6b3990bbbd0ace0d65ab59dd3198dcdc0c19d95fa6987e7d2232a213387e955785c6a6c9ad9b40de6cac8000832025aae7f263c0cd1199e09ee31f98c4bf2cfa1ee78cbfdca17e4d7f93ca727cbcaa97e8b155a92ac13350cc3ab6c20935cfaaec9cca3f6603641f1bedf1ad3fe6f5a152c9f7fe73771bb453325c7a41cb8d29398244da1f9e1d26f5a22a23fb76391b2619850c29ec2af0f1bd9a71d07dca6ee069c9ee10fd1f2b3db5a8d9bed329f20d99414b9208346605b94b3b0da3a53d107b6b172c0041a8c4e7098cc5b9a74fd4c330aa3990a1dadd6d70e765d008aedde7209e330ea38c10eb8be72248f3c68616dfcf55733344253756ec1bb87a30eb18afc83cde008b3f277371ac1b2b0876bfc140dfb2d47491ee2741992927a62f2fc7454a507bd49a7a63c376fec5c7e4b3896cc808ecf145ef4f7c0bf9d3b551fa2ee6b0e46fc90aa664d63519ba7ad3dc5386b4155617c8a97e22e3975bdb4e61da16a59510ce92927ab0efe08866663f79abba6dd56d0e1480cdf11796113fade57062a931faf339b338d33e1e8c8ae62073b793f538f5c40b6b3f281dd4378e14528acc9dac5cbc973b0fa62ee101e9c3a5d0a9913a50404b0ed589e1e7f13037e4902b11cef0d1329f2854f6a68bec39d071dcbf4ce9189d7bf46b58e715b2eb2ab70c1678c40cea2af9b5343cfaf3f5e0270958cdd21bb61462912df70b5c12d3234b5c57543fc96ea787094e5c07f38bf309441e14a3bac70eff5d3407df39c6a3869ea2acb75321eefbb1e48606104207648a00d42fff3ae6103b764bba1a579a20728d7bb05b0208fdaff709b44e32df79b25c9587af5ef34ee426b3649811908323bcc32287afbabf7367f427c180ae2312330034a5b32f85380e2d0c092646fa4c42198f1504ed16c27d03a26eb381fc89d0dd12d277f700393d7316a6fc1435e174cbbf378728e9c005868d373e13bd1c6ae7127ea070df511b7ecb282aa934c9ad2842ed8bf4cb2b34b0e92faa5babdf64004c4c736ab57e2f29cfc6586e8e02b5ee143c98f22e867f009abe1416e2fc07365f7ebba8c42415a6c4e106de463496827af474e78c843a904ca8a4db58b161119f7bd7114dc419c9c81f208b35b208061d2f7f81b54e31f8388a725645617c101d9fb9f1f7aa8fcba7a44450aaf09aec5f172183d9d6c28c2b8a6fcace6497c5d19d77bb832d9b10b87c8a11e004f28408f95c7a1e575be574a577c464f8b5abea6421d8e265a297bc6c0bd12af8adad64f81bb2f54c1cc2b778d22e32eb9131690b21fec1cc137831891e97f1c5947642e90891b27a0d1ac79c5b116b4da91d4ae11a1e84c50e6760a4dcd3248caffc62c36e80f946b75bf777e2977fa1d7c2a810dea28bdc6be1965991548da5d39db48520b28941081649427dec63c7f77af97f7bc10f03be0d14ed49e1b48f59c4ce9a8d62d7a625fe696ab1af6f8085d6ce88cafec873756bc73038d0ec26a232433fa32c07f45006039990fc4b819c21a39824eada9c63e4e463427e6cbe2689fa48996f2633a582c187cb4da978c3b6a2747ab2b0d0e11f9ffeaebb2626b9d78e3f45fec5d18aa204436f9455ff19953ed0075bd8535e3b1f3a48fe6207a56cfe0c531c8ac6eba8a8fe74705b2bccdcac9fde2cee6b98d7dd0e13f3a1bf67428c6c141eadb9d5c7c66469984a4d5b1c26a1dc5676d92d72b2d82dde352710cca5f99bd992ecba3628e152ffe6578ce4a215f2f4b80874c3651ebddce3c1bb67d8adfdf56409df0d5049db8ede5e83e6702c7d20ebc6b51fbd4657b3ced892b6b180a86581158a4b45520106fe1f766c436e0b6db3f224f1269414e6781ca8c7c4597d9529fd245f9a728ce3af5027ee7eb7a958aa371d1fcd5c081ffe0170b05d3c8b5370599dfea3f87a247b74f48507b5f15d933bda6964c76511823ffa3dab165b0637eb612ec743d9076d88375952665192c3df9b53c224cfa4475e0536c5bd52bca90a4b97c592908e5fdf17c20bb8fe4ac71992924cec4f1f61f5172cf3ce22b802b0f8c4624cd9e258388438df0328984c48ca8e4451754a9c3cd16415821bfbadd2bfa2172a9c92d7ead3fb31c6d27e3f358376a334b27df79305f1dcbdc8e741d5ca2b3c374defc874f22473f9abbfc2788111976ee1cc5472d5c6cf78be309bf8e07cbb1858c20077f5dd97cc9f2d2b907cebef22262692ad1bd82fb2ef05b46a4d1b68092b938750de51d7a3fc097194debab82cc7198983eedb749e6a339ab34e67624a496be6f57b6a30d9fd9a572f67b2ebecda2eb4d439c21f9517c803b93a44d41577d5920716c8c67515247aad56295eff13c62e0fbb7b98f592598613e59fec52211b26e380a9cfe9a82c590dee2ffa0811fd4c8668110aa427247e6c9b531a183af89724abbaa06d81d388e4cf97c210070008110f13782402ed6ad7ebcfd2b4e6cb49b6d20f341cddf44e0c0ddedc6029ff997c56d1", 0x700}, {&(0x7f0000001d40)="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", 0x3f5}], 0x2, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x19}, @remote}}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x50}, 0x20008000) 642.866119ms ago: executing program 3 (id=3588): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180700000000000000000000000000007110be000000000095"], &(0x7f0000000100)='GPL\x00', 0x4}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="911007000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRES32, @ANYRESHEX=r0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x28, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x19}}}}}, 0x28}}, 0x4000054) 518.446731ms ago: executing program 4 (id=3589): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0b000000b9000000010001000900000001"], 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x800}}, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x50, &(0x7f0000000100), 0x48) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x40000000) r4 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x61d8, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001940)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x25dfdbfc, {{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x1e}, 0x0, 0x0, 0x81e, 0x4, 0x0, 0x20, 0x80, 0x21}, {@in=@multicast1, 0x0, 0x33}, @in=@loopback, {0x401, 0x0, 0x8, 0x0, 0xffffffff, 0x3, 0x0, 0x8000000}, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0x80000001}, {0x0, 0x1, 0xfffffffc}, 0x2, 0x0, 0xa, 0x4, 0x1, 0x40}}, 0xf0}, 0x1, 0x0, 0x0, 0x24040021}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r1, &(0x7f00000000c0), &(0x7f0000000280)=""/239}, 0x20) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r5, 0x112, 0x9, 0x0, &(0x7f0000000500)) r6 = socket(0x11, 0x3, 0x0) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x1, 0x100, 0x100, 0x100, 0x0, 0x4}, 0x1c) pselect6(0x40, &(0x7f00000001c0)={0x1bec, 0x401, 0x4, 0x8001, 0x10001, 0xfed36e5, 0x6, 0x8}, &(0x7f0000000240)={0xddd, 0x5, 0x9, 0x81, 0x0, 0x1, 0x6, 0xe7}, &(0x7f0000000380)={0x5, 0x7, 0x4, 0x4aa5, 0xfffffffffffffff8, 0x7, 0x1, 0x1}, &(0x7f0000000480)={0x77359400}, &(0x7f00000005c0)={&(0x7f0000000580)={[0x8000000000000000]}, 0x8}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0x20, &(0x7f0000000cc0)={&(0x7f0000000bc0)=""/178, 0xb2, 0x0, &(0x7f0000000c80)=""/3, 0x3}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x1, 0x5, &(0x7f0000000600)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ldst={0x3, 0x0, 0x1, 0xb, 0x5, 0xfffffffffffffff4, 0xfffffffffffffffc}], &(0x7f0000000780)='GPL\x00', 0xf6, 0x71, &(0x7f00000007c0)=""/113, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000b80)={0x0, 0x3, 0x7, 0x6}, 0x10, r7, r0, 0x8, &(0x7f0000000d40)=[0x1], &(0x7f0000000d80)=[{0x3, 0x5, 0xc, 0x3}, {0x3, 0x2, 0xe, 0x1}, {0x1, 0x5, 0x9, 0xb}, {0x5, 0x4, 0x2, 0xc}, {0x3, 0x1, 0x4, 0x7}, {0x4, 0x5, 0x2, 0x9}, {0x0, 0x2, 0x4, 0x2}, {0x5, 0x4, 0x4, 0x3}]}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) unshare(0x22020600) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10d00, 0xf) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e2fa08", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 475.468917ms ago: executing program 1 (id=3590): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x11, &(0x7f00000002c0)=0x100000001, 0x4) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x1a, "8b2ca5e36521e64963d26751110b53b3d216fbed780dc69d2839"}, &(0x7f0000000080)=0x22) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000200)={r3, 0x0, 0x20}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, @in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xbac5}], 0x38) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, @in6={0xa, 0x4e23, 0x6, @empty, 0x3}, @in6={0xa, 0x4e20, 0x5, @empty, 0x20000000}, @in={0x2, 0x4e24, @multicast1}], 0x64) socket$netlink(0x10, 0x3, 0x14) socket$key(0xf, 0x3, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f00000000001400", @ANYRES64=r6], 0x38}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@ipmr_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x90, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x11}}, @RTA_DST={0x8, 0x1, @multicast2}]}, 0x30}}, 0x0) 429.631442ms ago: executing program 0 (id=3591): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="449d060721b9e6bb51f207000000", 0x0, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2}, 0x50) 350.360996ms ago: executing program 3 (id=3592): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xffffa2b8, 0x0, 0xfffff362}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) (async) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2c, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYRES32=r1], &(0x7f0000000380), 0x46, 0x0, 0x1, 0x2}, 0x28) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500000100000000000000000a0000000800ff00", @ANYRES32, @ANYBLOB="657342941bc67c6e56ee000057db43ea5f"], 0x1c}}, 0x20000080) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000003ebfa4653981b67a5a95000701feffffff00000000017c0000040042800c00018006000600800a00000800028004001280"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002bc0)=@delchain={0x4c, 0x65, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x0, 0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x4}, @TCA_BPF_FD={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x1d8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x884}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x4000000, 0x0, 0x0) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) unshare(0x8040600) (async) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r8, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) (async) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r9, 0x80) (async) connect$unix(r7, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r6, 0x2000012, 0x100e, 0x7ffe, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 273.220444ms ago: executing program 1 (id=3593): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) shutdown(r0, 0x1) (async) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xfffffffffffffe5d, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x4040000) r3 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000000)=0x200111, 0x7) sendto$inet(r3, 0x0, 0x0, 0x24001810, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) (async) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x6, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x1d, 0x14, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, @generic={0x7, 0x6, 0x9, 0x81, 0x1}, @generic={0x7, 0x9, 0x7, 0x0, 0x87d4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x24, &(0x7f00000002c0)=""/36, 0x41000, 0x40, '\x00', 0x0, 0x1b, r5, 0x8, &(0x7f00000003c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0xd, 0x3, 0x4}, 0x10, r6, 0x0, 0x2, &(0x7f0000000540)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x3, 0x4, 0x4, 0xa}, {0x3, 0x2, 0x0, 0x3}], 0x10, 0x73d}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="1000"/14, 0x0, 0x1ff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) (async) recvmmsg$unix(r5, &(0x7f0000002ec0)=[{{&(0x7f0000000740)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/172, 0xac}], 0x2}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000680)}, {&(0x7f0000001980)=""/176, 0xb0}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/210, 0xd2}], 0x4, &(0x7f0000002b40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000002bc0)=@abs, 0x6e, &(0x7f0000002e00)=[{&(0x7f00000008c0)=""/5, 0x5}, {&(0x7f0000002c40)=""/43, 0x2b}, {&(0x7f0000002c80)=""/123, 0x7b}, {&(0x7f0000002d00)=""/233, 0xe9}], 0x4, &(0x7f0000002e40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}], 0x3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e22, 0x1081, @private1, 0x3}}, 0x1b6, 0x6}, &(0x7f0000000340)=0x90) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x9}, 0x8) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) 231.904098ms ago: executing program 0 (id=3594): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb000008000ffa16c0012800b00010062726964676500005c00028008000500010000000c002e000100"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) 94.398199ms ago: executing program 1 (id=3595): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/237, 0xed}], 0x1}, 0x0) close(r0) r2 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendmsg$nl_route(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)=@delneigh={0x48, 0x1d, 0x10, 0x70bd26, 0x25dfdbfe, {0x1e, 0x0, 0x0, r3, 0x80, 0xc, 0x1}, [@NDA_SRC_VNI={0x8, 0xb, 0x2b24}, @NDA_VNI={0x8, 0x7, 0x9}, @NDA_DST_MAC={0xa, 0x1, @remote}, @NDA_SRC_VNI={0x8}, @NDA_DST_IPV4={0x8, 0x1, @loopback}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) 65.843967ms ago: executing program 3 (id=3596): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async) r1 = socket(0x15, 0x5, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt(r1, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) (async) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x4, @multicast, 'veth0_to_hsr\x00'}}, 0x1e) 0s ago: executing program 1 (id=3597): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x62}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f0000001600)=[{&(0x7f00000005c0)="ea", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0xe22, 0x4, @remote, 0x40}, 0x1c, &(0x7f0000000b00)}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x200, @dev={0xfe, 0x80, '\x00', 0x29}, 0x8001}, 0x1c, &(0x7f0000000940), 0x0, &(0x7f0000000000)=[@dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x2c, 0x4, 0x2, 0x5, 0x0, [@private1, @remote]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x2e, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x10000}]}}}, @tclass={{0x14, 0x29, 0x43, 0x9}}], 0x88}}], 0x3, 0x24000045) kernel console output (not intermixed with test programs): tive for active-backup mode [ 349.031492][T15980] bond3: (slave vcan1): making interface the new active one [ 349.041465][T15980] bond3: (slave vcan1): Enslaving as an active interface with an up link [ 349.096881][T15977] bond3: (slave vcan2): The slave device specified does not support setting the MAC address [ 349.114400][T15977] bond3: (slave vcan2): Enslaving as a backup interface with an up link [ 349.126068][T15982] 8021q: adding VLAN 0 to HW filter on device bond3 [ 349.599032][T15999] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2541'. [ 350.039180][T16013] tipc: Enabled bearer , priority 10 [ 350.113293][T16015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2542'. [ 350.137786][T16015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2542'. [ 350.293284][T16025] netlink: 'syz.3.2545': attribute type 1 has an invalid length. [ 350.305363][T16026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2547'. [ 350.457511][T16028] bond4: (slave geneve2): making interface the new active one [ 350.488570][T16028] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 350.520310][ T6776] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 350.530984][T16031] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2549'. [ 350.571144][T16034] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2548'. [ 350.580453][ T6776] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 350.608470][T16031] lo speed is unknown, defaulting to 1000 [ 350.616432][T16031] lo speed is unknown, defaulting to 1000 [ 350.831902][ T6776] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 350.847126][T16038] lo speed is unknown, defaulting to 1000 [ 350.878139][T16038] lo speed is unknown, defaulting to 1000 [ 350.913753][ T6776] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 351.153757][T13180] tipc: Node number set to 1359362315 [ 351.341458][T16069] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2559'. [ 351.422383][T16066] lo: entered allmulticast mode [ 351.433772][T16066] lo: left allmulticast mode [ 351.587915][T16079] netlink: 'syz.0.2562': attribute type 1 has an invalid length. [ 351.626564][T16079] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2562'. [ 351.680065][T16081] lo speed is unknown, defaulting to 1000 [ 351.708691][T16079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2562'. [ 351.720436][T16081] lo speed is unknown, defaulting to 1000 [ 352.172184][T16111] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 352.423349][T16120] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2570'. [ 352.435310][T16118] lo speed is unknown, defaulting to 1000 [ 352.505839][T16122] netlink: 'syz.2.2572': attribute type 16 has an invalid length. [ 352.533035][T16122] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2572'. [ 352.589816][T16118] lo speed is unknown, defaulting to 1000 [ 352.984307][T16128] lo speed is unknown, defaulting to 1000 [ 353.072169][T16128] lo speed is unknown, defaulting to 1000 [ 353.342714][T16138] Bluetooth: MGMT ver 1.23 [ 354.268304][T16173] lo speed is unknown, defaulting to 1000 [ 354.319089][T16173] lo speed is unknown, defaulting to 1000 [ 354.329964][T16176] netlink: 'syz.1.2587': attribute type 13 has an invalid length. [ 354.610481][T16185] lo speed is unknown, defaulting to 1000 [ 354.847858][T16194] vlan1: entered promiscuous mode [ 354.857176][T16194] veth0: entered promiscuous mode [ 355.028821][T16185] lo speed is unknown, defaulting to 1000 [ 355.240353][T16215] __nla_validate_parse: 6 callbacks suppressed [ 355.240380][T16215] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2599'. [ 355.320273][T16217] netlink: 'syz.1.2600': attribute type 1 has an invalid length. [ 355.408154][T16215] lo speed is unknown, defaulting to 1000 [ 355.486625][T16226] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2601'. [ 355.618939][T16233] SET target dimension over the limit! [ 355.761645][T16215] lo speed is unknown, defaulting to 1000 [ 355.761923][T16237] bond0: option mode: unable to set because the bond device has slaves [ 355.796581][T16239] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2606'. [ 356.241507][T16245] lo speed is unknown, defaulting to 1000 [ 356.264454][T16245] lo speed is unknown, defaulting to 1000 [ 356.652911][T16258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.665282][T16258] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 356.728931][T16255] lo speed is unknown, defaulting to 1000 [ 356.760187][T16255] lo speed is unknown, defaulting to 1000 [ 357.247560][T16288] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2620'. [ 357.417747][T16292] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2621'. [ 357.523440][T16295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2623'. [ 357.630650][T16290] lo speed is unknown, defaulting to 1000 [ 357.679388][T16290] lo speed is unknown, defaulting to 1000 [ 357.823949][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.453741][T16317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2629'. [ 358.473841][T16317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2629'. [ 358.513442][T16317] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 358.863878][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.999937][T16334] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2632'. [ 359.036104][T16323] Bluetooth: MGMT ver 1.23 [ 359.394217][T16338] bridge4: entered promiscuous mode [ 359.399467][T16338] bridge4: entered allmulticast mode [ 359.890620][T16348] lo speed is unknown, defaulting to 1000 [ 359.898408][T16348] lo speed is unknown, defaulting to 1000 [ 359.903904][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.992385][T16361] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2638'. [ 360.132378][T16362] lo speed is unknown, defaulting to 1000 [ 360.185464][T16361] nbd: socks must be embedded in a SOCK_ITEM attr [ 360.314740][T16362] lo speed is unknown, defaulting to 1000 [ 360.686088][T16376] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2643'. [ 360.847436][T16383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2645'. [ 360.922540][T16383] macsec0: entered allmulticast mode [ 360.942588][T16383] bridge0: entered allmulticast mode [ 360.943926][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.958097][T16383] bridge0: port 1(macsec0) entered blocking state [ 360.975106][T16383] bridge0: port 1(macsec0) entered disabled state [ 361.013096][T16383] bridge0: left allmulticast mode [ 361.126422][T16380] lo speed is unknown, defaulting to 1000 [ 361.140348][T16380] lo speed is unknown, defaulting to 1000 [ 361.251681][T16401] netlink: 'syz.3.2648': attribute type 1 has an invalid length. [ 361.288321][T16399] tipc: Enabling of bearer rejected, already enabled [ 361.934703][T16429] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2656'. [ 361.976919][T16427] syzkaller0: entered promiscuous mode [ 361.982440][T16427] syzkaller0: entered allmulticast mode [ 361.983802][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.239799][T16438] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2659'. [ 362.267556][T16439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2657'. [ 362.309004][T16439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2657'. [ 362.373430][T16446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2660'. [ 362.906123][T16459] netlink: 'syz.2.2663': attribute type 12 has an invalid length. [ 362.914897][T16459] netlink: 'syz.2.2663': attribute type 29 has an invalid length. [ 362.922935][T16459] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2663'. [ 363.023785][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.184340][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.390304][T16472] lo speed is unknown, defaulting to 1000 [ 363.398148][T16472] lo speed is unknown, defaulting to 1000 [ 363.537337][T16486] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2669'. [ 363.809171][T16494] tc_dump_action: action bad kind [ 363.989794][T16507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2675'. [ 364.063864][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.696448][T16547] sctp: [Deprecated]: syz.2.2684 (pid 16547) Use of struct sctp_assoc_value in delayed_ack socket option. [ 364.696448][T16547] Use struct sctp_sack_info instead [ 364.698862][T16542] lo speed is unknown, defaulting to 1000 [ 364.738097][T16545] lo speed is unknown, defaulting to 1000 [ 364.746339][T16545] lo speed is unknown, defaulting to 1000 [ 364.795179][T16546] lo speed is unknown, defaulting to 1000 [ 364.943366][T16562] netlink: 'syz.1.2689': attribute type 1 has an invalid length. [ 364.987608][T16562] 8021q: adding VLAN 0 to HW filter on device bond5 [ 365.023791][T16542] lo speed is unknown, defaulting to 1000 [ 365.103779][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.211629][T16566] 8021q: adding VLAN 0 to HW filter on device bond5 [ 365.227844][T16566] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 365.256198][T16566] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 365.336273][T16562] veth1: entered promiscuous mode [ 365.345478][T16562] bond5: (slave veth1): Enslaving as an active interface with a down link [ 365.367364][T16546] lo speed is unknown, defaulting to 1000 [ 366.107275][T16593] __nla_validate_parse: 3 callbacks suppressed [ 366.107293][T16593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2695'. [ 366.143813][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.505283][T16600] lo speed is unknown, defaulting to 1000 [ 366.531431][T16600] lo speed is unknown, defaulting to 1000 [ 366.721698][T16616] netlink: 'syz.4.2700': attribute type 2 has an invalid length. [ 366.729893][T16616] netlink: 1244 bytes leftover after parsing attributes in process `syz.4.2700'. [ 367.183736][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.687557][T16631] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2705'. [ 367.700204][T16631] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2705'. [ 367.711630][T16633] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2706'. [ 367.729132][T16631] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2705'. [ 367.738823][T16631] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2705'. [ 368.069187][T16650] lo speed is unknown, defaulting to 1000 [ 368.088654][T16650] lo speed is unknown, defaulting to 1000 [ 368.147023][T16638] lo speed is unknown, defaulting to 1000 [ 368.174550][T16656] netlink: 'syz.1.2710': attribute type 4 has an invalid length. [ 368.223684][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.372773][T16661] lo speed is unknown, defaulting to 1000 [ 368.391163][T16638] lo speed is unknown, defaulting to 1000 [ 368.446744][T16664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2714'. [ 368.479234][T16664] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2714'. [ 368.498951][T16664] tipc: Enabled bearer , priority 0 [ 368.507700][T16664] syzkaller0: entered promiscuous mode [ 368.513189][T16664] syzkaller0: entered allmulticast mode [ 368.551204][T16664] tipc: Resetting bearer [ 368.572461][T16663] tipc: Resetting bearer [ 368.601637][T16663] tipc: Disabling bearer [ 368.631422][T16672] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 368.773328][T16661] lo speed is unknown, defaulting to 1000 [ 368.864360][T16678] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2717'. [ 369.015337][T16674] lo speed is unknown, defaulting to 1000 [ 369.102419][T16682] netlink: 'syz.1.2720': attribute type 15 has an invalid length. [ 369.154708][T16674] lo speed is unknown, defaulting to 1000 [ 369.263704][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.303691][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.322062][T16702] lo speed is unknown, defaulting to 1000 [ 370.376861][T16702] lo speed is unknown, defaulting to 1000 [ 370.618277][T16711] bridge_slave_0: entered allmulticast mode [ 370.805726][T16714] lo speed is unknown, defaulting to 1000 [ 370.893763][T16714] lo speed is unknown, defaulting to 1000 [ 370.930265][T16717] vlan1: entered promiscuous mode [ 370.959602][T16717] vlan1: entered allmulticast mode [ 370.977495][T16717] hsr_slave_1: entered allmulticast mode [ 371.212299][T16725] __nla_validate_parse: 5 callbacks suppressed [ 371.212318][T16725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2727'. [ 371.343682][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.910484][T16742] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2730'. [ 372.005182][T16741] lo speed is unknown, defaulting to 1000 [ 372.037696][T16741] lo speed is unknown, defaulting to 1000 [ 372.383690][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.554837][T16750] lo speed is unknown, defaulting to 1000 [ 372.616075][T16759] netlink: 1264 bytes leftover after parsing attributes in process `syz.2.2736'. [ 372.625610][T16750] lo speed is unknown, defaulting to 1000 [ 372.635000][T16759] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2736'. [ 373.424674][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.448825][T16768] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2739'. [ 373.712769][T16770] lo speed is unknown, defaulting to 1000 [ 373.732826][T16770] lo speed is unknown, defaulting to 1000 [ 373.887082][T16774] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 374.348012][T16781] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2742'. [ 374.432505][T16780] lo speed is unknown, defaulting to 1000 [ 374.465214][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.484173][T16780] lo speed is unknown, defaulting to 1000 [ 375.220111][T16795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2745'. [ 375.265121][T16795] macsec0: left allmulticast mode [ 375.282256][T16795] veth1_macvtap: left allmulticast mode [ 375.310143][T16795] macsec0: left promiscuous mode [ 375.325430][T16795] bridge0: port 4(macsec0) entered disabled state [ 375.503672][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.579561][T16800] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2747'. [ 375.758503][T16807] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2749'. [ 375.773255][T16807] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2749'. [ 375.832397][T16806] lo speed is unknown, defaulting to 1000 [ 375.840849][T16806] lo speed is unknown, defaulting to 1000 [ 376.245579][T16696] Set syz1 is full, maxelem 65536 reached [ 376.543751][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.638928][T16838] tipc: Enabling of bearer rejected, already enabled [ 376.727315][T16843] syzkaller0: create flow: hash 42672853 index 2 [ 376.783292][T16836] netlink: 'syz.3.2755': attribute type 12 has an invalid length. [ 376.915691][ T12] syzkaller0: tun_net_xmit 76 [ 376.922317][ T12] syzkaller0: tun_net_xmit 48 [ 376.930696][T16837] syzkaller0: delete flow: hash 42672853 index 2 [ 377.583785][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.847695][T16856] netlink: 'syz.4.2763': attribute type 303 has an invalid length. [ 377.858254][T16856] __nla_validate_parse: 1 callbacks suppressed [ 377.858273][T16856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2763'. [ 378.627540][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.736978][T16856] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 378.775039][T16856] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 378.800354][T16856] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 378.821096][T16860] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 378.841878][T16858] nbd: couldn't find device at index 536870912 [ 378.905185][T16858] nbd: couldn't find device at index 536870912 [ 378.919206][T16870] netlink: 'syz.2.2764': attribute type 13 has an invalid length. [ 378.928183][T16870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2764'. [ 379.010329][T16858] nbd: couldn't find device at index 536870912 [ 379.011626][T16862] lo speed is unknown, defaulting to 1000 [ 379.027947][T16858] nbd: couldn't find device at index 536870912 [ 379.041117][T16862] lo speed is unknown, defaulting to 1000 [ 379.060170][T16858] nbd: couldn't find device at index 536870912 [ 379.106428][T16858] nbd: couldn't find device at index 536870912 [ 379.113886][T16873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2769'. [ 379.134514][T16873] netlink: 'syz.0.2769': attribute type 5 has an invalid length. [ 379.143421][T16858] nbd: couldn't find device at index 536870912 [ 379.153455][T16873] netlink: 'syz.0.2769': attribute type 8 has an invalid length. [ 379.157754][T16858] nbd: couldn't find device at index 536870912 [ 379.167208][T16873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2769'. [ 379.174354][T16858] nbd: couldn't find device at index 536870912 [ 379.183364][T16858] nbd: couldn't find device at index 536870912 [ 379.191718][T16858] nbd: couldn't find device at index 536870912 [ 379.223116][T16858] nbd: couldn't find device at index 536870912 [ 379.225017][T16873] geneve0: entered promiscuous mode [ 379.257406][T16858] nbd: couldn't find device at index 536870912 [ 379.262166][T16873] geneve0: entered allmulticast mode [ 379.287450][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 379.296559][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 379.305558][T16858] nbd: couldn't find device at index 536870912 [ 379.305708][T16858] nbd: couldn't find device at index 536870912 [ 379.305955][T16858] nbd: couldn't find device at index 536870912 [ 379.306091][T16858] nbd: couldn't find device at index 536870912 [ 379.306459][T16858] nbd: couldn't find device at index 536870912 [ 379.306589][T16858] nbd: couldn't find device at index 536870912 [ 379.320082][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 379.339827][T16858] nbd: couldn't find device at index 536870912 [ 379.381800][T16858] nbd: couldn't find device at index 536870912 [ 379.402200][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 379.419221][T16858] nbd: couldn't find device at index 536870912 [ 379.446056][T16858] nbd: couldn't find device at index 536870912 [ 379.462920][T16858] nbd: couldn't find device at index 536870912 [ 379.483502][T16858] nbd: couldn't find device at index 536870912 [ 379.501216][T16858] nbd: couldn't find device at index 536870912 [ 379.521778][T16858] nbd: couldn't find device at index 536870912 [ 379.524868][T16889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2772'. [ 379.539378][T16858] nbd: couldn't find device at index 536870912 [ 379.558434][T16858] nbd: couldn't find device at index 536870912 [ 379.578586][T16858] nbd: couldn't find device at index 536870912 [ 379.586693][T16858] nbd: couldn't find device at index 536870912 [ 379.634367][T16858] nbd: couldn't find device at index 536870912 [ 379.663746][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.783510][T16894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2774'. [ 379.860464][T16896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2773'. [ 379.962490][T16898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2775'. [ 380.339025][T16909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2777'. [ 380.703791][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.778890][T16915] netlink: 'syz.1.2780': attribute type 10 has an invalid length. [ 380.813838][T16915] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2780'. [ 380.882051][T16915] bridge0: port 1(dummy0) entered blocking state [ 380.922599][T16915] bridge0: port 1(dummy0) entered disabled state [ 380.965600][T16915] dummy0: entered allmulticast mode [ 380.973792][T16915] dummy0: left allmulticast mode [ 380.979130][T16915] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 381.057160][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 381.067048][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 381.087286][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 381.095651][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 381.103386][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 381.175762][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 381.189739][T16933] lo speed is unknown, defaulting to 1000 [ 381.202770][T16933] lo speed is unknown, defaulting to 1000 [ 381.210472][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 381.218407][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 381.228704][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 381.236595][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 381.349189][ T1097] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.383920][ T1097] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 381.489940][ T1097] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.506740][ T1097] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 381.534901][T16924] lo speed is unknown, defaulting to 1000 [ 381.572866][T16924] lo speed is unknown, defaulting to 1000 [ 381.606491][ T1097] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.621150][ T1097] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 381.693243][ T1097] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.718528][ T1097] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 381.743684][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.251783][ T30] audit: type=1800 audit(1760509283.032:5): pid=16978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2796" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=2897 res=0 errno=0 [ 382.356694][ T1097] ip6gretap0 (unregistering): left promiscuous mode [ 382.683127][ T1097] bond6 (unregistering): (slave geneve2): Releasing active interface [ 382.783742][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.070358][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.080388][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.089901][ T1097] bond0 (unregistering): Released all slaves [ 383.103048][ T1097] bond1 (unregistering): Released all slaves [ 383.213301][ T1097] bond2 (unregistering): Released all slaves [ 383.226535][ T1097] bond3 (unregistering): Released all slaves [ 383.239408][ T1097] bond4 (unregistering): Released all slaves [ 383.266885][ T5835] Bluetooth: hci0: command tx timeout [ 383.365808][ T1097] bond5 (unregistering): Released all slaves [ 383.378445][ T1097] bond6 (unregistering): Released all slaves [ 383.477265][ T1097] bond7 (unregistering): Released all slaves [ 383.490369][ T1097] bond8 (unregistering): Released all slaves [ 383.590685][ T1097] bond9 (unregistering): Released all slaves [ 383.602896][ T1097] bond10 (unregistering): Released all slaves [ 383.615363][ T1097] bond11 (unregistering): Released all slaves [ 383.628393][ T1097] bond12 (unregistering): Released all slaves [ 383.726965][ T1097] bond13 (unregistering): (slave bond14): Releasing backup interface [ 383.735669][ T1097] bond14 (unregistering): left promiscuous mode [ 383.742125][ T1097] bond13 (unregistering): Released all slaves [ 383.826644][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.844085][ T1097] bond14 (unregistering): Released all slaves [ 383.856882][ T1097] bond15 (unregistering): Released all slaves [ 383.958298][T16988] lo speed is unknown, defaulting to 1000 [ 383.988648][T16988] lo speed is unknown, defaulting to 1000 [ 384.136003][ T1097] : left promiscuous mode [ 384.249045][T17005] __nla_validate_parse: 8 callbacks suppressed [ 384.249064][T17005] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2801'. [ 384.263651][ T1097] .N: left promiscuous mode [ 384.401556][ T1097] tipc: Disabling bearer [ 384.408486][ T1097] tipc: Left network mode [ 384.414625][T17008] lo speed is unknown, defaulting to 1000 [ 384.474854][T16924] chnl_net:caif_netlink_parms(): no params data found [ 384.678818][T17008] lo speed is unknown, defaulting to 1000 [ 384.863780][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.072672][T16924] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.081189][T16924] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.088882][T16924] bridge_slave_0: entered allmulticast mode [ 385.096296][T16924] bridge_slave_0: entered promiscuous mode [ 385.105719][T16924] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.112848][T16924] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.120233][T16924] bridge_slave_1: entered allmulticast mode [ 385.127985][T16924] bridge_slave_1: entered promiscuous mode [ 385.135367][T17033] lo speed is unknown, defaulting to 1000 [ 385.142890][T17033] lo speed is unknown, defaulting to 1000 [ 385.231998][T16924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.246093][T16924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.296588][T16924] team0: Port device team_slave_0 added [ 385.306222][T16924] team0: Port device team_slave_1 added [ 385.353027][T16924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.353816][ T5835] Bluetooth: hci0: command tx timeout [ 385.360227][T16924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.392330][T16924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.413289][T17035] lo speed is unknown, defaulting to 1000 [ 385.418595][T16924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.427262][T16924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.454304][T16924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.499306][T17035] lo speed is unknown, defaulting to 1000 [ 385.676797][T16924] hsr_slave_0: entered promiscuous mode [ 385.694421][T16924] hsr_slave_1: entered promiscuous mode [ 385.700849][T16924] debugfs: 'hsr0' already exists in 'hsr' [ 385.710480][T16924] Cannot create hsr debugfs directory [ 385.903677][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.527110][T17068] bond6: entered allmulticast mode [ 386.532644][T17068] 8021q: adding VLAN 0 to HW filter on device bond6 [ 386.561931][ T1097] hsr_slave_0: left promiscuous mode [ 386.612522][ T1097] hsr_slave_1: left promiscuous mode [ 386.943695][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.018533][ T1097] batadv_slave_1 (unregistering): left allmulticast mode [ 387.334907][ T6776] smc: removing ib device syz0 [ 387.423773][ T5835] Bluetooth: hci0: command tx timeout [ 387.434615][ T982] lo speed is unknown, defaulting to 1000 [ 387.477427][ T982] syz0: Port: 1 Link DOWN [ 387.877363][T17094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2821'. [ 387.989616][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.023235][T16924] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 388.090729][T16924] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 388.135333][T16924] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 388.179578][T17099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2822'. [ 388.190965][T17099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2822'. [ 388.211416][T16924] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 388.284620][T17096] lo speed is unknown, defaulting to 1000 [ 388.892859][T17120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2826'. [ 389.023807][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.090661][T16924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.118239][T17124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2828'. [ 389.150670][T16924] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.168524][T17124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2828'. [ 389.186551][ T6960] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.193771][ T6960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.254897][ T6960] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.262094][ T6960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.513754][ T5835] Bluetooth: hci0: command tx timeout [ 389.781131][T17141] netlink: 'syz.2.2831': attribute type 298 has an invalid length. [ 390.021705][T16924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.063880][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.112642][T16924] veth0_vlan: entered promiscuous mode [ 390.160287][T16924] veth1_vlan: entered promiscuous mode [ 390.191462][T17148] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2832'. [ 390.216743][T17150] lo speed is unknown, defaulting to 1000 [ 390.289439][T16924] veth0_macvtap: entered promiscuous mode [ 390.322011][T16924] veth1_macvtap: entered promiscuous mode [ 390.351151][T17153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2833'. [ 390.377066][T16924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.407553][T16924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.462665][ T151] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.494506][ T151] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.503261][ T151] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.521770][ T1097] IPVS: stop unused estimator thread 0... [ 390.524670][ T151] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.621136][T17160] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 391.007294][T17174] pim6reg: entered allmulticast mode [ 391.102030][T17177] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 391.117809][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.144705][T17182] pim6reg: left allmulticast mode [ 391.316796][T17186] macsec2: entered promiscuous mode [ 391.324130][T17186] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode [ 391.331452][T17186] macsec2: entered allmulticast mode [ 391.339280][T17186] mac80211_hwsim hwsim19 wlan0: entered allmulticast mode [ 391.382682][ T6960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.404420][ T6960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.486282][ T6960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.514399][ T6960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.522604][T17193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2846'. [ 391.647616][T17198] lo speed is unknown, defaulting to 1000 [ 391.659185][T17192] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2844'. [ 391.995122][T17229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2849'. [ 392.032572][T17229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2849'. [ 392.086585][T17230] lo speed is unknown, defaulting to 1000 [ 392.143895][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.248727][T17234] lo speed is unknown, defaulting to 1000 [ 392.433925][T17233] lo speed is unknown, defaulting to 1000 [ 392.714137][T17255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2858'. [ 393.183680][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.352450][T17266] lo speed is unknown, defaulting to 1000 [ 393.869100][T17280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2864'. [ 393.906623][T17280] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2864'. [ 393.916158][T17280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2864'. [ 393.925701][T17280] netlink: 'syz.4.2864': attribute type 6 has an invalid length. [ 394.219762][T17287] netlink: 'syz.2.2866': attribute type 1 has an invalid length. [ 394.223697][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.267320][T17288] lo speed is unknown, defaulting to 1000 [ 394.822701][T17317] netlink: 'syz.3.2872': attribute type 8 has an invalid length. [ 394.920595][T17316] wg1 speed is unknown, defaulting to 1000 [ 394.933111][T17316] wg1 speed is unknown, defaulting to 1000 [ 394.967111][T17308] syzkaller0: entered promiscuous mode [ 394.973000][T17308] syzkaller0: entered allmulticast mode [ 395.021997][T17316] wg1 speed is unknown, defaulting to 1000 [ 395.055734][T17316] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 395.087531][T17316] wg1 speed is unknown, defaulting to 1000 [ 395.095980][T17316] wg1 speed is unknown, defaulting to 1000 [ 395.103953][T17316] wg1 speed is unknown, defaulting to 1000 [ 395.113012][T17316] wg1 speed is unknown, defaulting to 1000 [ 395.121485][T17316] wg1 speed is unknown, defaulting to 1000 [ 395.129816][T17316] wg1 speed is unknown, defaulting to 1000 [ 395.263794][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.393342][T17343] __nla_validate_parse: 4 callbacks suppressed [ 395.393362][T17343] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2878'. [ 395.433120][T17343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2878'. [ 395.572746][T17348] dvmrp1: entered allmulticast mode [ 395.582772][T17348] dvmrp1: left allmulticast mode [ 395.643479][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2883'. [ 395.660748][T17353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2884'. [ 395.672402][T17353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2884'. [ 395.699179][T17353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2884'. [ 396.248569][T17383] lo speed is unknown, defaulting to 1000 [ 396.256108][T17383] wg1 speed is unknown, defaulting to 1000 [ 396.303850][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.323097][T17388] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 396.466653][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 396.479653][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 396.488510][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 396.498520][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 396.520024][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 396.634626][T17399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2895'. [ 396.668480][T17390] lo speed is unknown, defaulting to 1000 [ 396.685478][T17390] wg1 speed is unknown, defaulting to 1000 [ 396.761061][T17411] netlink: 'syz.2.2900': attribute type 1 has an invalid length. [ 396.817238][T17411] bond10: (slave vxcan9): The slave device specified does not support setting the MAC address [ 396.830709][T17411] bond10: (slave vxcan9): Error -95 calling set_mac_address [ 396.862352][T17417] tipc: Started in network mode [ 396.868122][T17417] tipc: Node identity c6d264c29c23, cluster identity 4711 [ 396.879181][T17417] tipc: Enabled bearer , priority 0 [ 396.915216][T17418] bond10: (slave bridge6): Enslaving as an active interface with a down link [ 396.926042][T17409] syzkaller0: entered promiscuous mode [ 396.931541][T17409] syzkaller0: entered allmulticast mode [ 396.960665][T17411] macvlan4: entered promiscuous mode [ 396.973291][T17411] macvlan4: entered allmulticast mode [ 396.984543][T17411] bond10: entered promiscuous mode [ 396.990579][T17411] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 397.001062][T17411] bond10: left promiscuous mode [ 397.052277][T17409] tipc: Resetting bearer [ 397.058926][T17422] syzkaller1: entered promiscuous mode [ 397.064747][T17422] syzkaller1: entered allmulticast mode [ 397.091800][T17408] tipc: Resetting bearer [ 397.124617][T17408] tipc: Disabling bearer [ 397.307335][T17431] lo speed is unknown, defaulting to 1000 [ 397.316194][T17390] chnl_net:caif_netlink_parms(): no params data found [ 397.329415][T17431] wg1 speed is unknown, defaulting to 1000 [ 397.343777][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.382452][T17435] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2907'. [ 397.568183][T17390] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.585681][T17390] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.610690][T17390] bridge_slave_0: entered allmulticast mode [ 397.628328][T17390] bridge_slave_0: entered promiscuous mode [ 397.638405][T17390] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.646840][T17390] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.654396][T17390] bridge_slave_1: entered allmulticast mode [ 397.664879][T17390] bridge_slave_1: entered promiscuous mode [ 397.877304][T17390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.958017][T17390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.075705][T17390] team0: Port device team_slave_0 added [ 398.098090][T17390] team0: Port device team_slave_1 added [ 398.127492][T17445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2910'. [ 398.215367][T17390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.222344][T17390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.253727][T17390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.267642][T17390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.277848][T17390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.314478][T17390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.326727][T17452] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2913'. [ 398.353846][T17452] hsr_slave_0: left promiscuous mode [ 398.363911][T17452] hsr_slave_1: left promiscuous mode [ 398.388232][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.544063][ T5835] Bluetooth: hci2: command tx timeout [ 398.557068][T17390] hsr_slave_0: entered promiscuous mode [ 398.579855][T17390] hsr_slave_1: entered promiscuous mode [ 398.594688][T17390] debugfs: 'hsr0' already exists in 'hsr' [ 398.609439][T17390] Cannot create hsr debugfs directory [ 398.806913][T17479] netlink: 'syz.0.2920': attribute type 1 has an invalid length. [ 399.178349][T17500] netlink: 'syz.4.2927': attribute type 10 has an invalid length. [ 399.191920][T17390] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 399.207543][T17495] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 399.245077][T17500] netlink: 'syz.4.2927': attribute type 21 has an invalid length. [ 399.253028][T17500] netlink: 'syz.4.2927': attribute type 1 has an invalid length. [ 399.299112][T17390] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 399.386820][T17390] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 399.423675][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.439529][T17516] IPv6: addrconf: prefix option has invalid lifetime [ 399.449965][ C0] IPv6: addrconf: prefix option has invalid lifetime [ 399.458565][ C0] IPv6: addrconf: prefix option has invalid lifetime [ 399.751116][T17390] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 400.033159][T17390] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 400.077019][T17390] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 400.131213][T17390] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 400.174626][T17553] tipc: Enabled bearer , priority 0 [ 400.187524][T17390] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 400.362197][T17556] bridge0: port 3(syz_tun) entered disabled state [ 400.378454][T17556] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.386259][T17556] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.418772][T17556] team_slave_0: left promiscuous mode [ 400.424822][T17556] team_slave_1: left promiscuous mode [ 400.431609][T17556] dummy0: left promiscuous mode [ 400.463770][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.562996][T17556] veth0_to_team: left promiscuous mode [ 400.590410][T17556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.623981][ T5835] Bluetooth: hci2: command tx timeout [ 400.713390][T17556] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 400.746240][T17556] gre1: left allmulticast mode [ 400.759497][T17556] bond4: left promiscuous mode [ 400.764755][T17556] bond4: left allmulticast mode [ 400.803232][T17556] macvlan1: left promiscuous mode [ 400.808609][T17556] macvlan1: left allmulticast mode [ 400.855818][T17556] geneve3: left promiscuous mode [ 400.861615][T17556] geneve3: left allmulticast mode [ 400.870110][T17556] vlan3: left allmulticast mode [ 400.875556][T17556] dummy0: left allmulticast mode [ 400.896750][T17553] syzkaller0: entered promiscuous mode [ 400.902251][T17553] syzkaller0: entered allmulticast mode [ 400.992976][T17564] tipc: Resetting bearer [ 401.013081][ T5953] wg1 speed is unknown, defaulting to 1000 [ 401.018990][ T1097] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.019022][ T1097] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 401.019046][ T1097] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 401.019069][ T1097] netdevsim netdevsim2 eth0: unset [1, 2] type 2 family 0 port 256 - 0 [ 401.019138][ T1097] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.019162][ T1097] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 401.019187][ T1097] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 401.019210][ T1097] netdevsim netdevsim2 eth1: unset [1, 2] type 2 family 0 port 256 - 0 [ 401.038072][ T5953] syz0: Port: 1 Link DOWN [ 401.114287][T17552] tipc: Resetting bearer [ 401.140714][T17552] tipc: Disabling bearer [ 401.170028][ T1097] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.179725][ T1097] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 401.190091][ T1097] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 401.216264][ T1097] netdevsim netdevsim2 eth2: unset [1, 2] type 2 family 0 port 256 - 0 [ 401.239198][ T1097] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.253895][ T1097] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 401.262419][ T1097] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 401.279322][ T1097] netdevsim netdevsim2 eth3: unset [1, 2] type 2 family 0 port 256 - 0 [ 401.418520][T17390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.477975][T17592] netlink: 'syz.2.2949': attribute type 1 has an invalid length. [ 401.494115][T17592] __nla_validate_parse: 8 callbacks suppressed [ 401.494145][T17592] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2949'. [ 401.556637][T17390] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.595432][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.602590][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.625569][ T6776] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.632762][ T6776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.734418][T17604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2951'. [ 401.765553][T17604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2951'. [ 401.782631][T17603] tipc: Enabling of bearer rejected, already enabled [ 401.783316][T17600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2953'. [ 402.262916][T17390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.288603][T17639] netlink: 'syz.2.2961': attribute type 1 has an invalid length. [ 402.304388][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.313452][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.322089][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.330747][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.411066][T17639] 8021q: adding VLAN 0 to HW filter on device bond11 [ 402.451143][T17390] veth0_vlan: entered promiscuous mode [ 402.559651][T17640] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.567109][T17640] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.656973][T17640] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.681182][T17640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.705528][ T5835] Bluetooth: hci2: command tx timeout [ 402.835584][T17390] veth1_vlan: entered promiscuous mode [ 402.850482][T17664] tipc: Enabling of bearer rejected, already enabled [ 402.859382][ T1172] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.875587][ T1172] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.889888][ T1172] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.901876][ T1172] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.965826][T17390] veth0_macvtap: entered promiscuous mode [ 402.982325][T17390] veth1_macvtap: entered promiscuous mode [ 403.015558][T17390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.041273][T17390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.082139][T17672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2966'. [ 403.095193][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.114209][T17672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2966'. [ 403.135152][T17672] netlink: 'syz.2.2966': attribute type 14 has an invalid length. [ 403.142989][T17672] netlink: 'syz.2.2966': attribute type 11 has an invalid length. [ 403.151832][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.208253][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.228376][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.244469][T17677] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2966'. [ 403.255102][T17677] netlink: 245 bytes leftover after parsing attributes in process `syz.2.2966'. [ 403.266712][T17677] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2966'. [ 403.311794][T17679] netdevsim netdevsim0: Direct firmware load for þ failed with error -2 [ 403.347171][T17679] netdevsim netdevsim0: Falling back to sysfs fallback for: þ [ 403.417107][T17686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2969'. [ 403.494881][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.502922][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.547042][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.555660][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.678561][T17694] lo speed is unknown, defaulting to 1000 [ 403.692925][T17694] wg1 speed is unknown, defaulting to 1000 [ 403.843416][T17702] lo speed is unknown, defaulting to 1000 [ 403.858003][T17702] wg1 speed is unknown, defaulting to 1000 [ 404.059701][T17714] 8021q: VLANs not supported on ip6_vti0 [ 404.111683][T17711] lo speed is unknown, defaulting to 1000 [ 404.206013][T17711] wg1 speed is unknown, defaulting to 1000 [ 404.350747][T17722] tipc: Started in network mode [ 404.383898][T17722] tipc: Node identity 7a45b3dd4e8a, cluster identity 4711 [ 404.404160][T17722] tipc: Enabled bearer , priority 0 [ 404.461388][T17722] syzkaller0: entered promiscuous mode [ 404.492105][T17722] syzkaller0: entered allmulticast mode [ 404.683154][T17722] tipc: Resetting bearer [ 404.732335][T17721] tipc: Resetting bearer [ 404.791206][T17721] tipc: Disabling bearer [ 404.797230][ T5837] Bluetooth: hci2: command tx timeout [ 405.312391][T17741] lo speed is unknown, defaulting to 1000 [ 405.605484][T17741] wg1 speed is unknown, defaulting to 1000 [ 405.836661][T17763] net_ratelimit: 17 callbacks suppressed [ 405.836680][T17763] openvswitch: netlink: IP tunnel TTL not specified. [ 405.908016][T15152] IPVS: starting estimator thread 0... [ 405.915856][T17755] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 406.017203][T17773] FAULT_INJECTION: forcing a failure. [ 406.017203][T17773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.043818][T17766] IPVS: using max 32 ests per chain, 76800 per kthread [ 406.075739][T17773] CPU: 1 UID: 0 PID: 17773 Comm: syz.4.2988 Not tainted syzkaller #0 PREEMPT(full) [ 406.075775][T17773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 406.075791][T17773] Call Trace: [ 406.075799][T17773] [ 406.075808][T17773] dump_stack_lvl+0x189/0x250 [ 406.075834][T17773] ? __pfx____ratelimit+0x10/0x10 [ 406.075859][T17773] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.075879][T17773] ? __pfx__printk+0x10/0x10 [ 406.075909][T17773] should_fail_ex+0x414/0x560 [ 406.075937][T17773] _copy_to_user+0x31/0xb0 [ 406.075957][T17773] simple_read_from_buffer+0xe1/0x170 [ 406.075990][T17773] proc_fail_nth_read+0x1b3/0x220 [ 406.076016][T17773] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 406.076041][T17773] ? rw_verify_area+0x2a6/0x4d0 [ 406.076065][T17773] ? __lock_acquire+0xab9/0xd20 [ 406.076081][T17773] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 406.076106][T17773] vfs_read+0x200/0xa30 [ 406.076131][T17773] ? fdget_pos+0x247/0x320 [ 406.076152][T17773] ? __pfx___mutex_lock+0x10/0x10 [ 406.076178][T17773] ? __pfx_vfs_read+0x10/0x10 [ 406.076205][T17773] ? __fget_files+0x2a/0x420 [ 406.076228][T17773] ? __fget_files+0x3a0/0x420 [ 406.076244][T17773] ? __fget_files+0x2a/0x420 [ 406.076271][T17773] ksys_read+0x145/0x250 [ 406.076300][T17773] ? __pfx_ksys_read+0x10/0x10 [ 406.076330][T17773] ? do_syscall_64+0xbe/0xfa0 [ 406.076359][T17773] do_syscall_64+0xfa/0xfa0 [ 406.076379][T17773] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.076401][T17773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.076420][T17773] ? clear_bhb_loop+0x60/0xb0 [ 406.076444][T17773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.076468][T17773] RIP: 0033:0x7f4e4b78d8dc [ 406.076487][T17773] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 406.076505][T17773] RSP: 002b:00007f4e4c58e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 406.076526][T17773] RAX: ffffffffffffffda RBX: 00007f4e4b9e5fa0 RCX: 00007f4e4b78d8dc [ 406.076542][T17773] RDX: 000000000000000f RSI: 00007f4e4c58e0a0 RDI: 0000000000000005 [ 406.076554][T17773] RBP: 00007f4e4c58e090 R08: 0000000000000000 R09: 0000000000000000 [ 406.076566][T17773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.076578][T17773] R13: 00007f4e4b9e6038 R14: 00007f4e4b9e5fa0 R15: 00007ffd68e81b38 [ 406.076613][T17773] [ 406.528890][T17784] __nla_validate_parse: 5 callbacks suppressed [ 406.528911][T17784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2992'. [ 406.544776][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.545313][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.562265][T17793] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2994'. [ 406.604268][T17793] netlink: 'syz.4.2994': attribute type 1 has an invalid length. [ 406.728227][T17798] netlink: 'syz.1.2998': attribute type 13 has an invalid length. [ 406.838080][T17805] xt_NFQUEUE: number of queues (1024) out of range (got 66558) [ 406.907720][T17810] Cannot find set identified by id 3 to match [ 407.194809][T17821] netlink: 'syz.4.3002': attribute type 6 has an invalid length. [ 407.355371][ T5833] syz_tun (unregistering): left allmulticast mode [ 407.367520][ T5833] syz_tun (unregistering): left promiscuous mode [ 407.382927][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 407.384600][ T5833] bridge0: port 3(syz_tun) entered disabled state [ 407.398012][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 407.406592][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 407.415918][T17833] netlink: 'syz.1.3003': attribute type 10 has an invalid length. [ 407.427956][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 407.429430][T17832] netlink: 'syz.0.3004': attribute type 10 has an invalid length. [ 407.448503][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 407.479484][T17832] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.496206][T17832] bond0: (slave team0): Enslaving as an active interface with an up link [ 407.539074][T17826] netlink: 'syz.1.3003': attribute type 1 has an invalid length. [ 407.687640][T17828] lo speed is unknown, defaulting to 1000 [ 407.719741][T17828] wg1 speed is unknown, defaulting to 1000 [ 407.774830][T17851] netlink: 'syz.0.3011': attribute type 1 has an invalid length. [ 407.791538][T17851] netlink: 'syz.0.3011': attribute type 2 has an invalid length. [ 407.812055][T17851] netlink: 'syz.0.3011': attribute type 1 has an invalid length. [ 407.816993][T17856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3012'. [ 407.832154][T17851] netlink: 'syz.0.3011': attribute type 2 has an invalid length. [ 407.996322][T17865] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3016'. [ 408.139798][T17872] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3016'. [ 408.167439][ T1172] bridge_slave_1: left allmulticast mode [ 408.174059][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.212106][T17878] tls_set_device_offload_rx: netdev not found [ 408.220358][ T1172] bridge_slave_0: left allmulticast mode [ 408.233915][ T1172] bridge_slave_0: left promiscuous mode [ 408.243833][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.266254][ T1172] vlan0: left allmulticast mode [ 408.271151][ T1172] veth1: left allmulticast mode [ 408.284864][ T1172] vlan0: left promiscuous mode [ 408.285893][T17880] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3021'. [ 408.289684][ T1172] veth1: left promiscuous mode [ 408.312183][ T1172] bridge3: port 3(vlan0) entered disabled state [ 408.335063][ T1172] veth0_to_bond: left allmulticast mode [ 408.340657][ T1172] veth0_to_bond: left promiscuous mode [ 408.351312][ T1172] bridge3: port 2(veth0_to_bond) entered disabled state [ 408.363406][ T1172] veth7: left allmulticast mode [ 408.369254][ T1172] veth7: left promiscuous mode [ 408.374450][ T1172] bridge3: port 1(veth7) entered disabled state [ 408.381525][T17885] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3021'. [ 408.692064][ T1172] bond5 (unregistering): (slave gretap1): Releasing active interface [ 408.820565][ T1172] bond6 (unregistering): (slave geneve2): Releasing active interface [ 409.184540][ T1172] bond10 (unregistering): (slave bridge6): Releasing active interface [ 409.326803][ T1172] bond0 (unregistering): left promiscuous mode [ 409.332982][ T1172] bond_slave_0: left promiscuous mode [ 409.338858][ T1172] bond_slave_1: left promiscuous mode [ 409.345798][ T1172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.355821][ T1172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.365123][ T1172] bond0 (unregistering): Released all slaves [ 409.378077][ T1172] bond1 (unregistering): Released all slaves [ 409.474353][ T1172] bond2 (unregistering): Released all slaves [ 409.504060][ T5837] Bluetooth: hci3: command tx timeout [ 409.584287][ T1172] bond3 (unregistering): Released all slaves [ 409.664163][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.672723][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.681334][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.711846][ T1172] bond4 (unregistering): Released all slaves [ 409.728190][ T1172] bond5 (unregistering): Released all slaves [ 409.740353][ T1172] bond6 (unregistering): Released all slaves [ 409.744159][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.843029][ T1172] bond7 (unregistering): Released all slaves [ 409.935537][ T1172] bond8 (unregistering): Released all slaves [ 409.948139][ T1172] bond9 (unregistering): Released all slaves [ 409.961434][ T1172] bond10 (unregistering): Released all slaves [ 410.055044][ T1172] bond11 (unregistering): Released all slaves [ 410.084161][T17878] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 410.214923][T17901] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3024'. [ 410.278779][T17828] chnl_net:caif_netlink_parms(): no params data found [ 410.393117][ T1172] tipc: Disabling bearer [ 410.403978][ T1172] tipc: Left network mode [ 410.552113][T17916] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3028'. [ 410.673498][T17828] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.690619][T17828] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.708978][T17920] delete_channel: no stack [ 410.713953][T17828] bridge_slave_0: entered allmulticast mode [ 410.722081][T17828] bridge_slave_0: entered promiscuous mode [ 410.748232][T17828] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.755629][T17828] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.762871][T17828] bridge_slave_1: entered allmulticast mode [ 410.780116][T17828] bridge_slave_1: entered promiscuous mode [ 410.867936][T17937] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.917581][T17940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3034'. [ 410.998622][T17828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.031482][T17828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.183096][T17828] team0: Port device team_slave_0 added [ 411.204834][T17828] team0: Port device team_slave_1 added [ 411.235451][T17951] bond0: Caught tx_queue_len zero misconfig [ 411.363514][T17828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.376445][T17828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.420748][T17828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.450030][T17828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.463700][T17828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.498791][T17828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.538375][T17969] lo speed is unknown, defaulting to 1000 [ 411.559110][T17969] wg1 speed is unknown, defaulting to 1000 [ 411.585153][ T5837] Bluetooth: hci3: command tx timeout [ 411.593448][T17973] ip6erspan0: entered promiscuous mode [ 411.644346][T17971] __nla_validate_parse: 2 callbacks suppressed [ 411.644364][T17971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3044'. [ 411.650072][T17828] hsr_slave_0: entered promiscuous mode [ 411.666387][T17828] hsr_slave_1: entered promiscuous mode [ 411.673233][T17828] debugfs: 'hsr0' already exists in 'hsr' [ 411.679436][T17828] Cannot create hsr debugfs directory [ 411.831178][T17975] lo speed is unknown, defaulting to 1000 [ 411.937617][T17975] wg1 speed is unknown, defaulting to 1000 [ 412.094577][T17979] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3045'. [ 412.440824][ T1172] batadv0: left promiscuous mode [ 412.457625][ T1172] hsr_slave_0: left promiscuous mode [ 412.475134][ T1172] hsr_slave_1: left promiscuous mode [ 412.485007][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.503808][ T1172] batman_adv: batadv0: Removing interface: virt_wifi0 [ 412.860452][T18008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3054'. [ 413.011054][ T1172] team0 (unregistering): Port device team_slave_1 removed [ 413.070912][ T1172] team0 (unregistering): Port device team_slave_0 removed [ 413.375556][ T1172] team0 (unregistering): Port device dummy0 removed [ 413.530459][T18009] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 413.664451][ T5837] Bluetooth: hci3: command tx timeout [ 413.856894][T18031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3056'. [ 414.065318][ T1172] IPVS: stop unused estimator thread 0... [ 414.163843][T18041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3059'. [ 414.250065][T18051] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3062'. [ 414.374179][T18048] lo speed is unknown, defaulting to 1000 [ 414.461911][T18062] Bluetooth: MGMT ver 1.23 [ 414.538360][T18060] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3065'. [ 414.577182][T17828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 414.721060][T17828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 414.745395][T18066] lo speed is unknown, defaulting to 1000 [ 414.760750][T17828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 414.782750][T17828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 415.152567][ T1097] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 415.440480][T17828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.480986][T18120] bond0: (slave rose0): Enslaving as an active interface with an up link [ 415.502981][T17828] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.576054][ T6960] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.583192][ T6960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.604365][T18122] netlink: 20824 bytes leftover after parsing attributes in process `syz.4.3075'. [ 415.616968][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.624283][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.660820][T18124] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 415.744339][ T5835] Bluetooth: hci3: command tx timeout [ 415.772670][T18129] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3077'. [ 415.836776][T18089] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 416.134336][T17828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.167535][T18145] validate_nla: 1 callbacks suppressed [ 416.167553][T18145] netlink: 'syz.4.3081': attribute type 1 has an invalid length. [ 416.226815][T18147] syzkaller0: Caught tx_queue_len zero misconfig [ 416.339272][T17828] veth0_vlan: entered promiscuous mode [ 416.589554][T17828] veth1_vlan: entered promiscuous mode [ 416.624353][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 416.633867][ T5837] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 416.770370][T17828] veth0_macvtap: entered promiscuous mode [ 416.801099][T17828] veth1_macvtap: entered promiscuous mode [ 417.003700][T17828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.022470][T18180] bridge0: entered promiscuous mode [ 417.042910][T18178] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 417.062420][T17828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.081357][ T6960] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.096882][ T6960] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.115271][T18183] netlink: 'syz.0.3091': attribute type 51 has an invalid length. [ 417.123414][ T6960] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.141132][ T6960] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.187441][T18186] dvmrp8: entered allmulticast mode [ 417.281070][T18186] lo speed is unknown, defaulting to 1000 [ 417.362488][T18191] netlink: 'syz.1.3092': attribute type 23 has an invalid length. [ 417.430458][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.447111][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.477689][T18197] netlink: 'syz.3.3095': attribute type 13 has an invalid length. [ 417.494130][T18197] netlink: 'syz.3.3095': attribute type 17 has an invalid length. [ 417.631955][T18197] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 417.670500][T18185] dvmrp8: left allmulticast mode [ 417.735352][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.754684][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.764554][T18198] lo speed is unknown, defaulting to 1000 [ 418.009939][T18208] lo speed is unknown, defaulting to 1000 [ 418.060833][T18216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3101'. [ 418.124454][T18217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3101'. [ 418.349443][T18225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3103'. [ 418.390927][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 418.399324][T18229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3103'. [ 418.408772][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 418.421259][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 418.466691][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 418.481540][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 418.812264][T18226] lo speed is unknown, defaulting to 1000 [ 419.056114][T18253] pim6reg99999999: entered allmulticast mode [ 419.218472][T18262] netlink: 4660 bytes leftover after parsing attributes in process `syz.3.3113'. [ 419.245062][T18260] syzkaller1: entered promiscuous mode [ 419.257922][T18262] openvswitch: netlink: Flow key attr not present in new flow. [ 419.257979][T18260] syzkaller1: entered allmulticast mode [ 419.296087][T18226] chnl_net:caif_netlink_parms(): no params data found [ 419.374224][T18268] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3113'. [ 419.519210][T18274] netlink: 'syz.2.3115': attribute type 5 has an invalid length. [ 419.614450][T18226] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.622300][T18226] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.630602][T18226] bridge_slave_0: entered allmulticast mode [ 419.639698][T18226] bridge_slave_0: entered promiscuous mode [ 419.650920][T18226] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.658986][T18226] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.667014][T18226] bridge_slave_1: entered allmulticast mode [ 419.676497][T18226] bridge_slave_1: entered promiscuous mode [ 419.798912][T18226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.837045][T18226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.870814][T18281] netlink: 'syz.0.3118': attribute type 2 has an invalid length. [ 419.894163][T18281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3118'. [ 419.969735][T18226] team0: Port device team_slave_0 added [ 420.022436][T18226] team0: Port device team_slave_1 added [ 420.319262][T18226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.343749][T18226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.403954][T18226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.434170][T18226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.451697][T18226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.519382][T18226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.544293][ T5837] Bluetooth: hci5: command tx timeout [ 420.777719][T18306] syzkaller0: entered promiscuous mode [ 420.791658][T18306] syzkaller0: entered allmulticast mode [ 420.999913][T18226] hsr_slave_0: entered promiscuous mode [ 421.016521][T18226] hsr_slave_1: entered promiscuous mode [ 421.023463][T18226] debugfs: 'hsr0' already exists in 'hsr' [ 421.030628][T18226] Cannot create hsr debugfs directory [ 421.108967][T18319] tipc: Started in network mode [ 421.114197][T18319] tipc: Node identity d2131410d704, cluster identity 4711 [ 421.121555][T18319] tipc: Enabled bearer , priority 0 [ 421.134276][T18319] syzkaller0: entered promiscuous mode [ 421.139905][T18319] syzkaller0: entered allmulticast mode [ 421.188294][T18226] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.256872][T18319] tipc: Resetting bearer [ 421.268662][T18318] tipc: Resetting bearer [ 421.306824][T18318] tipc: Disabling bearer [ 421.339290][T18226] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.465454][T18226] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.544851][T18226] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.575286][T18332] syzkaller1: entered promiscuous mode [ 421.580568][T18335] netlink: 'syz.0.3134': attribute type 10 has an invalid length. [ 421.580814][T18332] syzkaller1: entered allmulticast mode [ 421.612137][T18335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3134'. [ 421.628148][T18335] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3134'. [ 421.648939][T18335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3134'. [ 421.674582][T18340] syzkaller1: entered promiscuous mode [ 421.680279][T18340] syzkaller1: entered allmulticast mode [ 421.696099][T18341] nft_compat: unsupported protocol 1 [ 421.996468][T18226] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 422.304237][T18226] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 422.432449][T18226] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 422.440821][T18367] netlink: 'syz.0.3143': attribute type 17 has an invalid length. [ 422.454912][T18226] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 422.488112][T18367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 422.568362][T18364] lo speed is unknown, defaulting to 1000 [ 422.569987][T18378] netlink: 'syz.3.3144': attribute type 4 has an invalid length. [ 422.624499][ T5837] Bluetooth: hci5: command tx timeout [ 422.898338][T18382] lo speed is unknown, defaulting to 1000 [ 423.027179][T18387] Bluetooth: hci0: invalid length 35, exp 2 for type 16 [ 423.105573][T18387] syzkaller1: entered promiscuous mode [ 423.111264][T18387] syzkaller1: entered allmulticast mode [ 423.232111][T18226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.338542][T18404] __nla_validate_parse: 2 callbacks suppressed [ 423.338559][T18404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3152'. [ 423.363157][T18405] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3152'. [ 423.466179][T18407] netlink: 'syz.3.3151': attribute type 1 has an invalid length. [ 423.474784][T18407] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3151'. [ 423.487837][T18226] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.513333][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.520517][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.541657][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.548841][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.589969][T18412] syzkaller1: entered promiscuous mode [ 423.615510][T18412] syzkaller1: entered allmulticast mode [ 423.710096][T18417] lo speed is unknown, defaulting to 1000 [ 423.954157][T18429] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3157'. [ 424.012028][T18427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3156'. [ 424.105333][T18226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.140228][T18433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3159'. [ 424.160316][T18433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3159'. [ 424.238936][T18226] veth0_vlan: entered promiscuous mode [ 424.272787][T18226] veth1_vlan: entered promiscuous mode [ 424.438736][T18226] veth0_macvtap: entered promiscuous mode [ 424.475525][T18226] veth1_macvtap: entered promiscuous mode [ 424.524963][T18442] lo speed is unknown, defaulting to 1000 [ 424.528027][T18226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.606899][T18226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.608797][T18448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3164'. [ 424.711840][ T5837] Bluetooth: hci5: command tx timeout [ 424.827650][T18450] bridge1: entered promiscuous mode [ 424.834336][T18450] bridge1: entered allmulticast mode [ 424.906268][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.918450][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.952856][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.973721][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.993015][T18458] netlink: 'syz.4.3167': attribute type 1 has an invalid length. [ 425.021435][T18456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3167'. [ 425.080502][T18456] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3167'. [ 425.241558][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.270006][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.503790][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.521648][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.774789][T18483] tipc: Enabled bearer , priority 0 [ 425.789134][T18483] syzkaller0: entered promiscuous mode [ 425.802622][T18483] syzkaller0: entered allmulticast mode [ 425.856879][T18483] tipc: Resetting bearer [ 425.869937][T18482] tipc: Resetting bearer [ 425.916435][T18482] tipc: Disabling bearer [ 426.403830][T18523] netlink: 'syz.3.3185': attribute type 1 has an invalid length. [ 426.451088][T18523] netlink: 'syz.3.3185': attribute type 1 has an invalid length. [ 426.487001][T18524] lo speed is unknown, defaulting to 1000 [ 426.783987][ T5837] Bluetooth: hci5: command tx timeout [ 426.824584][ T5828] syz_tun (unregistering): left allmulticast mode [ 427.033398][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 427.046617][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 427.063290][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 427.072425][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 427.082665][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 427.132536][T18539] lo speed is unknown, defaulting to 1000 [ 427.312572][T18555] bridge_slave_1: left allmulticast mode [ 427.319982][T18555] bridge_slave_1: left promiscuous mode [ 427.327693][T18555] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.339551][T18550] x_tables: duplicate underflow at hook 3 [ 427.340304][T18555] bridge_slave_0: left allmulticast mode [ 427.351281][T18555] bridge_slave_0: left promiscuous mode [ 427.357046][T18555] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.426490][T18562] netlink: 'syz.0.3192': attribute type 10 has an invalid length. [ 427.448106][T18547] lo speed is unknown, defaulting to 1000 [ 427.814855][T18574] batadv0: entered promiscuous mode [ 427.833932][T18574] vlan2: entered promiscuous mode [ 427.948275][T18539] chnl_net:caif_netlink_parms(): no params data found [ 428.076191][T18582] lo speed is unknown, defaulting to 1000 [ 428.466777][T18611] netlink: 'syz.1.3199': attribute type 4 has an invalid length. [ 428.475041][T18611] __nla_validate_parse: 18 callbacks suppressed [ 428.475059][T18611] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.3199'. [ 428.508058][T18605] netlink: 'syz.1.3199': attribute type 1 has an invalid length. [ 428.527551][T18605] netlink: 'syz.1.3199': attribute type 2 has an invalid length. [ 428.551369][T18600] lo speed is unknown, defaulting to 1000 [ 428.669147][T18539] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.691657][T18539] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.708286][T18539] bridge_slave_0: entered allmulticast mode [ 428.729174][T18539] bridge_slave_0: entered promiscuous mode [ 428.799341][T18539] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.811522][T18539] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.826300][T18623] sctp: [Deprecated]: syz.3.3203 (pid 18623) Use of struct sctp_assoc_value in delayed_ack socket option. [ 428.826300][T18623] Use struct sctp_sack_info instead [ 428.831509][T18539] bridge_slave_1: entered allmulticast mode [ 428.876353][T18539] bridge_slave_1: entered promiscuous mode [ 428.956147][T18623] syz_tun: entered allmulticast mode [ 429.085760][T18539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.106090][ T5837] Bluetooth: hci1: command tx timeout [ 429.131856][T18626] dvmrp1: entered allmulticast mode [ 429.156631][T18539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.187522][ T5880] IPVS: starting estimator thread 0... [ 429.247658][T18539] team0: Port device team_slave_0 added [ 429.256981][T18630] lo speed is unknown, defaulting to 1000 [ 429.269695][T18539] team0: Port device team_slave_1 added [ 429.303727][T18636] IPVS: using max 32 ests per chain, 76800 per kthread [ 429.358930][T18637] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3205'. [ 429.372440][T18637] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 429.449971][T18622] syz_tun: left allmulticast mode [ 429.581774][T18539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.592836][T18539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.629908][T18539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.716628][T18539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.729076][T18539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.771750][T18539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.793021][T18643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3209'. [ 429.839554][T18648] batman_adv: batadv0: Adding interface: dummy0 [ 429.848262][T18648] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.879949][T18648] batman_adv: batadv0: Interface activated: dummy0 [ 429.896450][T18648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3208'. [ 429.929123][T18648] batadv0: mtu less than device minimum [ 429.936615][T18648] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 429.948873][T18648] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 429.960844][T18648] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 429.972753][T18648] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 429.984700][T18648] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 429.996613][T18648] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 430.008541][T18648] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 430.020429][T18648] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 430.134265][T18539] hsr_slave_0: entered promiscuous mode [ 430.141363][T18539] hsr_slave_1: entered promiscuous mode [ 430.158358][T18539] debugfs: 'hsr0' already exists in 'hsr' [ 430.166785][T18539] Cannot create hsr debugfs directory [ 430.284975][T18661] syzkaller1: entered promiscuous mode [ 430.290509][T18661] syzkaller1: entered allmulticast mode [ 430.357449][T18659] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 430.370139][T13183] IPVS: starting estimator thread 0... [ 430.463904][T18670] IPVS: using max 28 ests per chain, 67200 per kthread [ 430.669529][T18673] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3214'. [ 430.691776][T18678] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3215'. [ 430.704712][T18680] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3215'. [ 430.949588][T18688] lo speed is unknown, defaulting to 1000 [ 431.077832][T18697] lo speed is unknown, defaulting to 1000 [ 431.191688][ T5837] Bluetooth: hci1: command tx timeout [ 431.251869][T18539] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 431.270197][T18539] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 431.322659][T18539] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 431.356713][T18539] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 431.660214][T18539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.698782][T18539] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.737066][ T6960] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.744283][ T6960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.778651][ T6960] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.785841][ T6960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.809896][T18731] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3228'. [ 431.844879][T18539] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 431.858881][T18539] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 432.196473][T18746] xfrm1: entered allmulticast mode [ 432.223423][T18539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.800066][T18539] veth0_vlan: entered promiscuous mode [ 432.826101][T18539] veth1_vlan: entered promiscuous mode [ 432.841246][T18769] netlink: 'syz.2.3235': attribute type 1 has an invalid length. [ 432.902151][T18539] veth0_macvtap: entered promiscuous mode [ 432.940005][T18539] veth1_macvtap: entered promiscuous mode [ 432.997411][T18539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.078623][T18539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.162138][ T151] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.201957][ T151] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.234865][ T6960] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.264880][ T5837] Bluetooth: hci1: command tx timeout [ 433.310443][ T6960] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.403345][T18777] lo speed is unknown, defaulting to 1000 [ 433.500404][T18786] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 433.542268][T18785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3240'. [ 433.666303][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.692075][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.874172][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.923679][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.010515][T18801] netlink: 7906 bytes leftover after parsing attributes in process `syz.1.3244'. [ 434.036484][T18804] netlink: 'syz.4.3183': attribute type 13 has an invalid length. [ 434.052012][T18804] netlink: 'syz.4.3183': attribute type 17 has an invalid length. [ 434.079728][T18805] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3243'. [ 434.105688][T18805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3243'. [ 434.388408][T18815] tipc: Enabled bearer , priority 0 [ 434.416218][T18801] lo speed is unknown, defaulting to 1000 [ 434.422514][T18815] syzkaller0: entered promiscuous mode [ 434.428615][T18815] syzkaller0: entered allmulticast mode [ 434.615681][T18816] tipc: Resetting bearer [ 434.697944][T18815] veth1_to_hsr: entered promiscuous mode [ 434.707557][T18815] macvtap1: entered promiscuous mode [ 434.713408][T18815] macvtap1: entered allmulticast mode [ 434.720404][T18815] veth1_to_hsr: entered allmulticast mode [ 434.757872][T18816] macvtap2: entered promiscuous mode [ 434.766664][T18816] macvtap2: entered allmulticast mode [ 434.827547][T18821] lo speed is unknown, defaulting to 1000 [ 434.930505][T18814] tipc: Resetting bearer [ 434.958531][T18814] tipc: Disabling bearer [ 434.970568][T18831] netlink: 'syz.0.3251': attribute type 83 has an invalid length. [ 435.068067][T18829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3251'. [ 435.151713][T18829] bond0: (slave bond_slave_1): Releasing backup interface [ 435.175594][T18837] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3254'. [ 435.202843][T18837] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3254'. [ 435.344180][ T5837] Bluetooth: hci1: command tx timeout [ 435.422555][T18838] warn_alloc: 1 callbacks suppressed [ 435.422575][T18838] syz.3.3253: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 435.452904][T18838] CPU: 1 UID: 0 PID: 18838 Comm: syz.3.3253 Not tainted syzkaller #0 PREEMPT(full) [ 435.452929][T18838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 435.452941][T18838] Call Trace: [ 435.452948][T18838] [ 435.452957][T18838] dump_stack_lvl+0x189/0x250 [ 435.452985][T18838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.453004][T18838] ? __pfx__printk+0x10/0x10 [ 435.453024][T18838] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 435.453048][T18838] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 435.453085][T18838] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 435.453114][T18838] warn_alloc+0x214/0x310 [ 435.453149][T18838] ? __pfx_warn_alloc+0x10/0x10 [ 435.453187][T18838] ? __get_vm_area_node+0x28f/0x300 [ 435.453214][T18838] ? xskq_create+0xbf/0x170 [ 435.453241][T18838] __vmalloc_node_range_noprof+0x690/0x12d0 [ 435.453299][T18838] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 435.453332][T18838] ? __kasan_kmalloc+0x93/0xb0 [ 435.453368][T18838] vmalloc_user_noprof+0xad/0xf0 [ 435.453396][T18838] ? xskq_create+0xbf/0x170 [ 435.453419][T18838] xskq_create+0xbf/0x170 [ 435.453444][T18838] xsk_init_queue+0xb0/0x110 [ 435.453465][T18838] xsk_setsockopt+0x57b/0x8d0 [ 435.453485][T18838] ? __pfx_xsk_setsockopt+0x10/0x10 [ 435.453507][T18838] ? __pfx_aa_sk_perm+0x10/0x10 [ 435.453539][T18838] ? aa_sock_opt_perm+0xff/0x1b0 [ 435.453567][T18838] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 435.453584][T18838] ? __pfx_xsk_setsockopt+0x10/0x10 [ 435.453604][T18838] do_sock_setsockopt+0x179/0x1b0 [ 435.453633][T18838] __x64_sys_setsockopt+0x13f/0x1b0 [ 435.453659][T18838] do_syscall_64+0xfa/0xfa0 [ 435.453682][T18838] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.453706][T18838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.453724][T18838] ? clear_bhb_loop+0x60/0xb0 [ 435.453749][T18838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.453767][T18838] RIP: 0033:0x7f756c58eec9 [ 435.453785][T18838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.453802][T18838] RSP: 002b:00007f756d4a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 435.453822][T18838] RAX: ffffffffffffffda RBX: 00007f756c7e6090 RCX: 00007f756c58eec9 [ 435.453836][T18838] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000008 [ 435.453847][T18838] RBP: 00007f756c611f91 R08: 0000000000000004 R09: 0000000000000000 [ 435.453858][T18838] R10: 0000200000001780 R11: 0000000000000246 R12: 0000000000000000 [ 435.453870][T18838] R13: 00007f756c7e6128 R14: 00007f756c7e6090 R15: 00007fff1e57e0c8 [ 435.453903][T18838] [ 435.730178][T18838] Mem-Info: [ 435.730234][T18853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3255'. [ 435.733331][T18838] active_anon:6737 inactive_anon:0 isolated_anon:0 [ 435.733331][T18838] active_file:3433 inactive_file:40035 isolated_file:0 [ 435.733331][T18838] unevictable:768 dirty:243 writeback:0 [ 435.733331][T18838] slab_reclaimable:12587 slab_unreclaimable:150298 [ 435.733331][T18838] mapped:30441 shmem:1356 pagetables:1086 [ 435.733331][T18838] sec_pagetables:0 bounce:0 [ 435.733331][T18838] kernel_misc_reclaimable:0 [ 435.733331][T18838] free:1266128 free_pcp:15464 free_cma:0 [ 435.796595][T18838] Node 0 active_anon:26948kB inactive_anon:0kB active_file:13732kB inactive_file:159940kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125864kB dirty:972kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14640kB pagetables:4280kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 435.836499][T18838] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 435.868078][T18838] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 435.901951][T18838] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 435.908012][T18838] Node 0 DMA32 free:1151504kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26876kB inactive_anon:0kB active_file:13732kB inactive_file:159948kB unevictable:1536kB writepending:984kB zspages:0kB present:3129332kB managed:2561672kB mlocked:0kB bounce:0kB free_pcp:46320kB local_pcp:22752kB free_cma:0kB [ 435.941686][T18838] lowmem_reserve[]: 0 0 1 1 1 [ 435.946600][T18838] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 435.977011][T18838] lowmem_reserve[]: 0 0 0 0 0 [ 435.981764][T18838] Node 1 Normal free:3900048kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13060kB local_pcp:4196kB free_cma:0kB [ 436.019042][T18838] lowmem_reserve[]: 0 0 0 0 0 [ 436.023864][T18838] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 436.042324][T18838] Node 0 DMA32: 740*4kB (UME) 172*8kB (UM) 34*16kB (UM) 92*32kB (UM) 108*64kB (UME) 37*128kB (UME) 52*256kB (UME) 37*512kB (UM) 30*1024kB (UME) 6*2048kB (UM) 258*4096kB (UM) = 1151504kB [ 436.061027][T18838] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 436.073822][T18838] Node 1 Normal: 186*4kB (UE) 41*8kB (UME) 54*16kB (UME) 130*32kB (UME) 31*64kB (UM) 8*128kB (UME) 3*256kB (UM) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 948*4096kB (M) = 3900048kB [ 436.092074][T18838] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 436.103362][T18838] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 436.114892][T18838] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 436.126411][T18838] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 436.136425][T18838] 44823 total pagecache pages [ 436.141284][T18838] 0 pages in swap cache [ 436.149989][T18838] Free swap = 124996kB [ 436.154707][T18838] Total swap = 124996kB [ 436.159031][T18838] 2097051 pages RAM [ 436.162910][T18838] 0 pages HighMem/MovableOnly [ 436.170533][T18838] 424543 pages reserved [ 436.177899][T18838] 0 pages cma reserved [ 436.578531][T18877] lo speed is unknown, defaulting to 1000 [ 436.746582][T18885] lo speed is unknown, defaulting to 1000 [ 436.802607][T18893] lo speed is unknown, defaulting to 1000 [ 437.074632][T18906] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3268'. [ 437.161055][T18900] syzkaller0: entered promiscuous mode [ 437.167633][T18900] syzkaller0: entered allmulticast mode [ 437.179007][T18909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3268'. [ 437.180907][T18899] tipc: Started in network mode [ 437.193362][T18899] tipc: Node identity 62610164ca9a, cluster identity 4711 [ 437.202703][T18899] tipc: Enabled bearer , priority 0 [ 437.343522][T18899] tipc: Resetting bearer [ 437.371460][T18899] tipc: Disabling bearer [ 437.565375][T18916] tipc: Enabled bearer , priority 0 [ 437.634042][T18916] syzkaller0: entered promiscuous mode [ 437.646411][T18916] syzkaller0: entered allmulticast mode [ 437.800511][T18916] tipc: Resetting bearer [ 437.858877][T18914] tipc: Resetting bearer [ 437.901618][T18914] tipc: Disabling bearer [ 437.927198][T18924] lo speed is unknown, defaulting to 1000 [ 438.212514][T18952] kthread_run failed with err -4 [ 438.263153][T18948] lo speed is unknown, defaulting to 1000 [ 438.960017][T18983] __nla_validate_parse: 4 callbacks suppressed [ 438.961318][T18983] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3288'. [ 439.255456][T18993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3294'. [ 439.349568][T19002] FAULT_INJECTION: forcing a failure. [ 439.349568][T19002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.363211][T19002] CPU: 1 UID: 0 PID: 19002 Comm: syz.4.3295 Not tainted syzkaller #0 PREEMPT(full) [ 439.363238][T19002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 439.363249][T19002] Call Trace: [ 439.363255][T19002] [ 439.363263][T19002] dump_stack_lvl+0x189/0x250 [ 439.363289][T19002] ? __pfx____ratelimit+0x10/0x10 [ 439.363312][T19002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.363331][T19002] ? __pfx__printk+0x10/0x10 [ 439.363351][T19002] ? __might_fault+0xb0/0x130 [ 439.363389][T19002] should_fail_ex+0x414/0x560 [ 439.363414][T19002] _copy_from_iter+0x1de/0x1790 [ 439.363473][T19002] ? rcu_is_watching+0x15/0xb0 [ 439.363499][T19002] ? kmalloc_reserve+0xbd/0x290 [ 439.363520][T19002] ? __pfx__copy_from_iter+0x10/0x10 [ 439.363550][T19002] ? __build_skb_around+0x262/0x3f0 [ 439.363572][T19002] ? netlink_sendmsg+0x642/0xb30 [ 439.363590][T19002] ? skb_put+0x11b/0x210 [ 439.363612][T19002] netlink_sendmsg+0x6b2/0xb30 [ 439.363641][T19002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.363666][T19002] ? aa_sock_msg_perm+0xf1/0x1d0 [ 439.363692][T19002] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 439.363709][T19002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.363731][T19002] __sock_sendmsg+0x21c/0x270 [ 439.363760][T19002] ____sys_sendmsg+0x505/0x830 [ 439.363789][T19002] ? __pfx_____sys_sendmsg+0x10/0x10 [ 439.363822][T19002] ? import_iovec+0x74/0xa0 [ 439.363845][T19002] ___sys_sendmsg+0x21f/0x2a0 [ 439.363869][T19002] ? __pfx____sys_sendmsg+0x10/0x10 [ 439.363931][T19002] ? __fget_files+0x2a/0x420 [ 439.363947][T19002] ? __fget_files+0x3a0/0x420 [ 439.363974][T19002] __x64_sys_sendmsg+0x19b/0x260 [ 439.363999][T19002] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 439.364031][T19002] ? __pfx_ksys_write+0x10/0x10 [ 439.364061][T19002] ? do_syscall_64+0xbe/0xfa0 [ 439.364087][T19002] do_syscall_64+0xfa/0xfa0 [ 439.364108][T19002] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.364130][T19002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.364149][T19002] ? clear_bhb_loop+0x60/0xb0 [ 439.364171][T19002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.364188][T19002] RIP: 0033:0x7f48a1d8eec9 [ 439.364205][T19002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.364218][T19002] RSP: 002b:00007f48a2cb1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.364238][T19002] RAX: ffffffffffffffda RBX: 00007f48a1fe5fa0 RCX: 00007f48a1d8eec9 [ 439.364251][T19002] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 439.364263][T19002] RBP: 00007f48a2cb1090 R08: 0000000000000000 R09: 0000000000000000 [ 439.364274][T19002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.364283][T19002] R13: 00007f48a1fe6038 R14: 00007f48a1fe5fa0 R15: 00007ffe44ec0928 [ 439.364316][T19002] [ 439.813144][T18993] lo speed is unknown, defaulting to 1000 [ 439.892449][T19009] lo speed is unknown, defaulting to 1000 [ 439.948551][T19011] netlink: 'syz.1.3298': attribute type 12 has an invalid length. [ 440.159467][T19024] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3302'. [ 440.197138][T19027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3303'. [ 440.346160][T19027] bond0: (slave team0): Releasing backup interface [ 440.355715][T19027] team0 (unregistering): Port device team_slave_0 removed [ 440.365351][T19027] team0 (unregistering): Port device team_slave_1 removed [ 440.429149][T19024] macsec1: entered promiscuous mode [ 440.435672][T19024] macsec1: entered allmulticast mode [ 440.464654][T19022] lo speed is unknown, defaulting to 1000 [ 440.798248][T19055] sctp: [Deprecated]: syz.1.3308 (pid 19055) Use of int in max_burst socket option. [ 440.798248][T19055] Use struct sctp_assoc_value instead [ 440.964842][T19063] netlink: 'syz.2.3309': attribute type 10 has an invalid length. [ 440.985589][T19067] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3311'. [ 440.993614][T19063] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3309'. [ 441.253258][T19083] netlink: 'syz.4.3311': attribute type 4 has an invalid length. [ 441.321548][T19086] netlink: 'syz.4.3311': attribute type 4 has an invalid length. [ 441.332473][T19063] dummy0: entered promiscuous mode [ 441.343030][T19063] bridge0: port 3(dummy0) entered blocking state [ 441.351191][T19063] bridge0: port 3(dummy0) entered disabled state [ 441.358033][T19063] dummy0: entered allmulticast mode [ 441.366295][T19063] bridge0: port 3(dummy0) entered blocking state [ 441.372752][T19063] bridge0: port 3(dummy0) entered forwarding state [ 441.499573][T19089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3316'. [ 441.605569][T19094] netlink: 'syz.2.3317': attribute type 9 has an invalid length. [ 441.620886][T19093] syzkaller1: entered promiscuous mode [ 441.629962][T19093] syzkaller1: entered allmulticast mode [ 441.830769][T19103] netlink: 'syz.1.3322': attribute type 1 has an invalid length. [ 441.840713][T19103] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3322'. [ 441.905679][T19106] netlink: 'syz.1.3322': attribute type 33 has an invalid length. [ 441.913814][T19106] netlink: 'syz.1.3322': attribute type 17 has an invalid length. [ 441.987317][T19106] net_ratelimit: 15 callbacks suppressed [ 441.987335][T19106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 442.454351][T19130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3328'. [ 442.556606][T19134] Cannot find add_set index 0 as target [ 442.575027][T19128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3327'. [ 442.681194][T19128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.148457][T19139] lo speed is unknown, defaulting to 1000 [ 443.542695][T19171] x_tables: ip_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 443.886586][T19192] 8021q: VLANs not supported on vcan0 [ 444.177409][T19214] Cannot find add_set index 0 as target [ 444.249147][T19220] netdevsim netdevsim0: Direct firmware load for þ failed with error -2 [ 444.266311][T19220] netdevsim netdevsim0: Falling back to sysfs fallback for: þ [ 444.282177][T19221] debugfs: 'žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' already exists in 'ieee80211' [ 444.314668][T19224] netlink: 'syz.4.3356': attribute type 13 has an invalid length. [ 444.414375][T19224] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.421853][T19224] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.511339][T19224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.526005][T19224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.802523][T19230] __nla_validate_parse: 5 callbacks suppressed [ 444.802541][T19230] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3357'. [ 444.821642][T19230] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3357'. [ 444.844252][ T1172] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.872599][ T1172] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.887876][ T1172] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.967063][ T1172] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.175866][T19259] netlink: 'syz.0.3362': attribute type 2 has an invalid length. [ 445.194621][T19261] x_tables: duplicate underflow at hook 1 [ 445.466820][T19280] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3371'. [ 445.513159][T19273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3366'. [ 445.558714][T19290] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3373'. [ 445.911073][T19310] netlink: 20824 bytes leftover after parsing attributes in process `syz.3.3376'. [ 446.181292][T19306] netlink: 'syz.3.3376': attribute type 10 has an invalid length. [ 446.224315][T19306] batman_adv: batadv0: Interface deactivated: dummy0 [ 446.252261][T19306] batman_adv: batadv0: Removing interface: dummy0 [ 446.312323][T19306] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 446.575323][T19329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3383'. [ 446.703040][T19329] vlan2: entered allmulticast mode [ 446.718642][T19329] bridge0: entered allmulticast mode [ 446.739290][T19329] bridge1: port 1(vlan2) entered blocking state [ 446.773261][T19329] bridge1: port 1(vlan2) entered disabled state [ 446.808679][T19329] vlan2: entered promiscuous mode [ 446.835614][T19329] bridge0: entered promiscuous mode [ 446.938249][T19329] mac80211_hwsim hwsim45 wlan0: entered allmulticast mode [ 447.117214][T19336] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3384'. [ 447.545361][T19359] lo speed is unknown, defaulting to 1000 [ 447.754303][T19363] xt_TCPMSS: Only works on TCP SYN packets [ 447.999195][T19370] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3393'. [ 448.027988][T19370] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3393'. [ 448.323997][T19383] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 448.377392][T19386] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 448.384716][T19386] IPv6: NLM_F_CREATE should be set when creating new route [ 448.391959][T19386] IPv6: NLM_F_CREATE should be set when creating new route [ 448.629138][T19390] lo speed is unknown, defaulting to 1000 [ 448.990657][T19415] netlink: 'syz.4.3404': attribute type 5 has an invalid length. [ 449.406933][T19433] netlink: 'syz.4.3410': attribute type 16 has an invalid length. [ 449.447089][T19433] netlink: 'syz.4.3410': attribute type 17 has an invalid length. [ 449.568476][T19440] 8021q: adding VLAN 0 to HW filter on device bond1 [ 449.590889][T19440] bond_slave_0: entered promiscuous mode [ 449.596927][T19440] bond_slave_1: entered promiscuous mode [ 449.603948][T19440] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 449.620990][T19440] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 449.645446][T19440] bridge_slave_0: left allmulticast mode [ 449.653676][T19440] bridge_slave_0: left promiscuous mode [ 449.659962][T19440] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.678604][T19440] bridge_slave_1: left allmulticast mode [ 449.690463][T19440] bridge_slave_1: left promiscuous mode [ 449.698217][T19440] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.718936][T19440] bond0: (slave bond_slave_0): Releasing backup interface [ 449.728489][T19440] bond_slave_0: left promiscuous mode [ 449.739529][T19440] bond0: (slave bond_slave_1): Releasing backup interface [ 449.757882][T19440] bond_slave_1: left promiscuous mode [ 449.782003][T19440] team0: Port device team_slave_0 removed [ 449.813431][T19440] team0: Port device team_slave_1 removed [ 449.822208][T19440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.830042][T19440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.839767][T19440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.849461][T19440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.860914][T19440] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 449.977255][ T151] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 449.993257][T19456] sctp: [Deprecated]: syz.0.3416 (pid 19456) Use of struct sctp_assoc_value in delayed_ack socket option. [ 449.993257][T19456] Use struct sctp_sack_info instead [ 450.013893][ T49] bond1: (slave macvlan2): link status up again after 0 ms [ 450.045216][ T1097] bond1: (slave macvlan2): link status definitely down, disabling slave [ 450.137832][T19461] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 450.161756][T19463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 450.379039][T19475] netlink: 'syz.4.3421': attribute type 10 has an invalid length. [ 450.390748][T19475] team0: Port device dummy0 added [ 450.646798][T19490] lo speed is unknown, defaulting to 1000 [ 450.674906][T19497] __nla_validate_parse: 25 callbacks suppressed [ 450.674924][T19497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3427'. [ 450.871535][T19500] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 451.137035][T19495] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 451.177935][T19517] pim6reg1: entered promiscuous mode [ 451.183358][T19517] pim6reg1: entered allmulticast mode [ 451.318630][T19529] tipc: Started in network mode [ 451.326357][T19529] tipc: Node identity 6a8763ecd012, cluster identity 4711 [ 451.363879][T19529] tipc: Enabled bearer , priority 0 [ 451.379628][T19530] syzkaller0: entered promiscuous mode [ 451.401916][T19530] syzkaller0: entered allmulticast mode [ 451.428454][T19530] tipc: Resetting bearer [ 451.449838][T19530] tipc: Disabling bearer [ 451.641022][T19550] af_packet: tpacket_rcv: packet too big, clamped from 56560 to 4294967272. macoff=96 [ 451.654226][T19551] netlink: 'syz.3.3441': attribute type 13 has an invalid length. [ 451.662743][T19551] netlink: 'syz.3.3441': attribute type 17 has an invalid length. [ 451.696291][T19551] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 451.895458][T19565] : renamed from bond_slave_0 [ 451.916801][T19568] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 452.132751][T19575] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 452.310526][T19579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3451'. [ 452.324509][T19599] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3456'. [ 452.448275][T19596] lo speed is unknown, defaulting to 1000 [ 452.983521][T19622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3464'. [ 453.065506][T19636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3462'. [ 453.085516][T19636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3462'. [ 453.210287][ T151] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 453.219222][T19626] lo speed is unknown, defaulting to 1000 [ 453.297273][T19643] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20000 [ 453.319732][T19643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3470'. [ 453.500672][T19655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3473'. [ 453.537840][T19655] team1: entered promiscuous mode [ 453.543021][T19655] team1: entered allmulticast mode [ 453.550293][T19655] 8021q: adding VLAN 0 to HW filter on device team1 [ 453.667462][T19665] netlink: 748 bytes leftover after parsing attributes in process `syz.3.3474'. [ 453.741995][T19663] ipvlan2: entered promiscuous mode [ 453.749382][T19663] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 453.832985][T19664] lo speed is unknown, defaulting to 1000 [ 454.200246][T19689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3484'. [ 454.478595][T19706] lo speed is unknown, defaulting to 1000 [ 454.552217][T19711] bridge0: port 3(gretap0) entered blocking state [ 454.559098][T19711] bridge0: port 3(gretap0) entered disabled state [ 454.566372][T19711] gretap0: entered allmulticast mode [ 454.573412][T19711] gretap0: entered promiscuous mode [ 454.582709][T19711] bridge0: port 3(gretap0) entered blocking state [ 454.589314][T19711] bridge0: port 3(gretap0) entered forwarding state [ 455.520367][T19747] lo speed is unknown, defaulting to 1000 [ 455.844791][T19764] __nla_validate_parse: 7 callbacks suppressed [ 455.844810][T19764] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3504'. [ 456.012758][T19764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3504'. [ 456.330594][T19782] FAULT_INJECTION: forcing a failure. [ 456.330594][T19782] name failslab, interval 1, probability 0, space 0, times 0 [ 456.379175][T19782] CPU: 0 UID: 0 PID: 19782 Comm: syz.4.3511 Not tainted syzkaller #0 PREEMPT(full) [ 456.379202][T19782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 456.379214][T19782] Call Trace: [ 456.379222][T19782] [ 456.379230][T19782] dump_stack_lvl+0x189/0x250 [ 456.379255][T19782] ? __pfx____ratelimit+0x10/0x10 [ 456.379276][T19782] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.379295][T19782] ? __pfx__printk+0x10/0x10 [ 456.379320][T19782] ? __pfx___might_resched+0x10/0x10 [ 456.379340][T19782] ? fs_reclaim_acquire+0x7d/0x100 [ 456.379373][T19782] should_fail_ex+0x414/0x560 [ 456.379402][T19782] should_failslab+0xa8/0x100 [ 456.379422][T19782] __kvmalloc_node_noprof+0x158/0x910 [ 456.379452][T19782] ? alloc_netdev_mqs+0xa6/0x11b0 [ 456.379486][T19782] alloc_netdev_mqs+0xa6/0x11b0 [ 456.379509][T19782] ? __pfx_ip6erspan_tap_setup+0x10/0x10 [ 456.379544][T19782] rtnl_create_link+0x31f/0xd10 [ 456.379578][T19782] rtnl_newlink_create+0x25c/0xb00 [ 456.379604][T19782] ? __lock_acquire+0xab9/0xd20 [ 456.379627][T19782] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 456.379651][T19782] ? __pfx___mutex_lock+0x10/0x10 [ 456.379683][T19782] ? ns_capable+0x8a/0xf0 [ 456.379707][T19782] rtnl_newlink+0x16e4/0x1c80 [ 456.379741][T19782] ? __pfx_rtnl_newlink+0x10/0x10 [ 456.379765][T19782] ? is_bpf_text_address+0x26/0x2b0 [ 456.379791][T19782] ? is_bpf_text_address+0x292/0x2b0 [ 456.379817][T19782] ? is_bpf_text_address+0x26/0x2b0 [ 456.379843][T19782] ? __lock_acquire+0xab9/0xd20 [ 456.379875][T19782] ? __lock_acquire+0xab9/0xd20 [ 456.379917][T19782] ? is_bpf_text_address+0x26/0x2b0 [ 456.379942][T19782] ? is_bpf_text_address+0x292/0x2b0 [ 456.379961][T19782] ? is_bpf_text_address+0x26/0x2b0 [ 456.379992][T19782] ? __lock_acquire+0xab9/0xd20 [ 456.380039][T19782] ? __pfx_rtnl_newlink+0x10/0x10 [ 456.380058][T19782] rtnetlink_rcv_msg+0x7cf/0xb70 [ 456.380075][T19782] ? __lock_acquire+0xab9/0xd20 [ 456.380095][T19782] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 456.380113][T19782] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 456.380152][T19782] netlink_rcv_skb+0x205/0x470 [ 456.380171][T19782] ? __lock_acquire+0xab9/0xd20 [ 456.380190][T19782] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 456.380211][T19782] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 456.380243][T19782] ? netlink_deliver_tap+0x2e/0x1b0 [ 456.380273][T19782] netlink_unicast+0x82f/0x9e0 [ 456.380312][T19782] ? __pfx_netlink_unicast+0x10/0x10 [ 456.380343][T19782] ? netlink_sendmsg+0x642/0xb30 [ 456.380361][T19782] ? skb_put+0x11b/0x210 [ 456.380386][T19782] netlink_sendmsg+0x805/0xb30 [ 456.380418][T19782] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.380442][T19782] ? aa_sock_msg_perm+0xf1/0x1d0 [ 456.380471][T19782] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 456.380489][T19782] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.380511][T19782] __sock_sendmsg+0x21c/0x270 [ 456.380543][T19782] ____sys_sendmsg+0x505/0x830 [ 456.380573][T19782] ? __pfx_____sys_sendmsg+0x10/0x10 [ 456.380607][T19782] ? import_iovec+0x74/0xa0 [ 456.380630][T19782] ___sys_sendmsg+0x21f/0x2a0 [ 456.380656][T19782] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.380721][T19782] ? __fget_files+0x2a/0x420 [ 456.380738][T19782] ? __fget_files+0x3a0/0x420 [ 456.380767][T19782] __x64_sys_sendmsg+0x19b/0x260 [ 456.380794][T19782] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 456.380835][T19782] ? __pfx_ksys_write+0x10/0x10 [ 456.380865][T19782] ? do_syscall_64+0xbe/0xfa0 [ 456.380893][T19782] do_syscall_64+0xfa/0xfa0 [ 456.380914][T19782] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.380937][T19782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.380956][T19782] ? clear_bhb_loop+0x60/0xb0 [ 456.380980][T19782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.380998][T19782] RIP: 0033:0x7f48a1d8eec9 [ 456.381016][T19782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.381033][T19782] RSP: 002b:00007f48a2cb1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.381053][T19782] RAX: ffffffffffffffda RBX: 00007f48a1fe5fa0 RCX: 00007f48a1d8eec9 [ 456.381066][T19782] RDX: 0000000024008000 RSI: 0000200000000140 RDI: 0000000000000003 [ 456.381079][T19782] RBP: 00007f48a2cb1090 R08: 0000000000000000 R09: 0000000000000000 [ 456.381091][T19782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.381102][T19782] R13: 00007f48a1fe6038 R14: 00007f48a1fe5fa0 R15: 00007ffe44ec0928 [ 456.381138][T19782] [ 456.832219][T19790] netlink: 'syz.3.3512': attribute type 25 has an invalid length. [ 456.847007][T19780] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3510'. [ 456.857078][T19788] lo speed is unknown, defaulting to 1000 [ 457.105670][T19794] lo speed is unknown, defaulting to 1000 [ 457.185395][T19797] lo speed is unknown, defaulting to 1000 [ 457.249421][T19801] lo speed is unknown, defaulting to 1000 [ 457.423823][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 457.794821][T19815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3518'. [ 457.904327][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 458.182507][T19842] lo speed is unknown, defaulting to 1000 [ 458.498092][T19854] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3529'. [ 458.621841][T19859] lo speed is unknown, defaulting to 1000 [ 458.954142][T19862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3532'. [ 459.017171][T19878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3532'. [ 459.118665][T19879] lo speed is unknown, defaulting to 1000 [ 459.256577][T19889] scsi_nl_rcv_msg: discarding partial skb [ 459.276513][T19885] lo speed is unknown, defaulting to 1000 [ 459.288621][T19891] lo speed is unknown, defaulting to 1000 [ 459.446826][T19900] pim6reg: entered allmulticast mode [ 459.732441][T19905] 8021q: adding VLAN 0 to HW filter on device bond1 [ 459.745753][T19905] team0: Port device bond1 added [ 459.764081][T19912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3546'. [ 459.852840][T19913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3546'. [ 459.919332][T19907] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 460.091606][T19907] bond2 (unregistering): Released all slaves [ 460.141505][T19925] tipc: Enabling of bearer rejected, failed to enable media [ 460.473341][T19944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3556'. [ 460.854340][T19969] __nla_validate_parse: 2 callbacks suppressed [ 460.854357][T19969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3557'. [ 460.934879][T19949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3557'. [ 461.021929][T19980] tipc: Enabling of bearer rejected, failed to enable media [ 461.089120][T19981] tipc: Enabling of bearer rejected, failed to enable media [ 461.176845][T19993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3569'. [ 461.230279][T19996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3568'. [ 461.259733][T19996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3568'. [ 461.336286][T19996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3568'. [ 461.347167][T19996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3568'. [ 461.561592][T20004] netlink: ct family unspecified [ 461.567525][T20004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.996326][ T1097] bond7 (unregistering): (slave bridge9): Releasing active interface [ 462.326041][ T1097] bond8 (unregistering): (slave macvlan0): Releasing backup interface [ 462.339254][ T1097] bond0 (unregistering): Released all slaves [ 462.451512][ T1097] bond1 (unregistering): Released all slaves [ 462.575331][ T1097] bond2 (unregistering): Released all slaves [ 462.676821][ T1097] bond3 (unregistering): Released all slaves [ 462.768901][ T1097] bond4 (unregistering): Released all slaves [ 462.865467][ T1097] bond5 (unregistering): Released all slaves [ 462.964426][ T1097] bond6 (unregistering): Released all slaves [ 462.976913][ T1097] bond7 (unregistering): Released all slaves [ 463.077129][ T1097] bond8 (unregistering): Released all slaves [ 463.089433][ T1097] bond9 (unregistering): Released all slaves [ 463.101411][T19980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3564'. [ 463.169651][T20004] lo speed is unknown, defaulting to 1000 [ 463.297768][ T1097] : left promiscuous mode [ 463.523258][ T1097] tipc: Disabling bearer [ 463.529502][ T1097] tipc: Left network mode [ 463.534128][T20021] netlink: 'syz.1.3577': attribute type 11 has an invalid length. [ 463.561743][T20028] syzkaller0: entered promiscuous mode [ 463.569062][T20028] syzkaller0: entered allmulticast mode [ 463.574246][T20027] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3575'. [ 463.636211][T20018] lo speed is unknown, defaulting to 1000 [ 463.834158][T20035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3580'. [ 464.082847][T20053] netlink: 'syz.0.3585': attribute type 4 has an invalid length. [ 464.186092][T20047] bond2: option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 464.221460][T20047] bond2 (unregistering): Released all slaves [ 464.524139][T20070] lo speed is unknown, defaulting to 1000 [ 464.712056][ T1097] mac80211_hwsim hwsim19 wlan0: left allmulticast mode [ 464.727483][ T1097] mac80211_hwsim hwsim19 wlan0: left promiscuous mode [ 464.822868][ T1097] ------------[ cut here ]------------ [ 464.829310][ T1097] WARNING: CPU: 1 PID: 1097 at net/wireless/core.c:204 cfg80211_switch_netns+0x58a/0x5b0 [ 464.840039][ T1097] Modules linked in: [ 464.844794][ T1097] CPU: 1 UID: 0 PID: 1097 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 464.854785][ T1097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 464.865479][ T1097] Workqueue: netns cleanup_net [ 464.871268][ T1097] RIP: 0010:cfg80211_switch_netns+0x58a/0x5b0 [ 464.878241][ T1097] Code: e1 07 38 c1 7c 8c 4c 89 e7 e8 e2 57 8b f7 eb 82 e8 3b ba 25 f7 e9 63 fe ff ff e8 31 ba 25 f7 e9 59 fe ff ff e8 27 ba 25 f7 90 <0f> 0b 90 e9 7f fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a1 fa [ 464.898465][ T1097] RSP: 0018:ffffc900040ff840 EFLAGS: 00010293 [ 464.905294][ T1097] RAX: ffffffff8a99d9d9 RBX: ffff88807c248da0 RCX: ffff8880265fbc80 [ 464.913650][ T1097] RDX: 0000000000000000 RSI: 00000000ffffffef RDI: 0000000000000000 [ 464.921648][ T1097] RBP: 00000000ffffffef R08: ffffffff8f9e0f77 R09: 1ffffffff1f3c1ee [ 464.929721][ T1097] R10: dffffc0000000000 R11: fffffbfff1f3c1ef R12: ffff88807c248720 [ 464.937743][ T1097] R13: ffff88807bc26280 R14: dffffc0000000000 R15: ffff88807c248910 [ 464.945951][ T1097] FS: 0000000000000000(0000) GS:ffff888125e0f000(0000) knlGS:0000000000000000 [ 464.954967][ T1097] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 464.961572][ T1097] CR2: 0000001b31724000 CR3: 000000004da92000 CR4: 00000000003526f0 [ 464.969667][ T1097] Call Trace: [ 464.973437][ T1097] [ 464.976816][ T1097] cfg80211_pernet_exit+0xa2/0x140 [ 464.981970][ T1097] ops_undo_list+0x49a/0x990 [ 464.986652][ T1097] ? __pfx_ops_undo_list+0x10/0x10 [ 464.991784][ T1097] ? do_raw_spin_unlock+0x122/0x240 [ 464.997073][ T1097] cleanup_net+0x4d8/0x820 [ 465.001513][ T1097] ? __pfx_cleanup_net+0x10/0x10 [ 465.006554][ T1097] ? _raw_spin_unlock_irq+0x23/0x50 [ 465.011790][ T1097] ? process_scheduled_works+0x9ef/0x17b0 [ 465.017609][ T1097] ? process_scheduled_works+0x9ef/0x17b0 [ 465.023350][ T1097] process_scheduled_works+0xae1/0x17b0 [ 465.029099][ T1097] ? __pfx_process_scheduled_works+0x10/0x10 [ 465.035173][ T1097] worker_thread+0x8a0/0xda0 [ 465.039798][ T1097] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 465.046225][ T1097] ? __kthread_parkme+0x7b/0x200 [ 465.051212][ T1097] kthread+0x711/0x8a0 [ 465.055439][ T1097] ? __pfx_worker_thread+0x10/0x10 [ 465.060569][ T1097] ? __pfx_kthread+0x10/0x10 [ 465.065238][ T1097] ? _raw_spin_unlock_irq+0x23/0x50 [ 465.070459][ T1097] ? lockdep_hardirqs_on+0x9c/0x150 [ 465.076236][ T1097] ? __pfx_kthread+0x10/0x10 [ 465.080863][ T1097] ret_from_fork+0x4bc/0x870 [ 465.085872][ T1097] ? __pfx_ret_from_fork+0x10/0x10 [ 465.091066][ T1097] ? __switch_to_asm+0x39/0x70 [ 465.095896][ T1097] ? __switch_to_asm+0x33/0x70 [ 465.100678][ T1097] ? __pfx_kthread+0x10/0x10 [ 465.105552][ T1097] ret_from_fork_asm+0x1a/0x30 [ 465.110364][ T1097] [ 465.113399][ T1097] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 465.120688][ T1097] CPU: 1 UID: 0 PID: 1097 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 465.130141][ T1097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 465.140191][ T1097] Workqueue: netns cleanup_net [ 465.144962][ T1097] Call Trace: [ 465.148234][ T1097] [ 465.151161][ T1097] dump_stack_lvl+0x99/0x250 [ 465.155746][ T1097] ? __asan_memcpy+0x40/0x70 [ 465.160334][ T1097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 465.165527][ T1097] ? __pfx__printk+0x10/0x10 [ 465.170123][ T1097] vpanic+0x237/0x6d0 [ 465.174103][ T1097] ? __pfx_vpanic+0x10/0x10 [ 465.178661][ T1097] panic+0xb9/0xc0 [ 465.182383][ T1097] ? __pfx_panic+0x10/0x10 [ 465.186812][ T1097] __warn+0x31b/0x4b0 [ 465.190794][ T1097] ? cfg80211_switch_netns+0x58a/0x5b0 [ 465.196254][ T1097] ? cfg80211_switch_netns+0x58a/0x5b0 [ 465.201707][ T1097] report_bug+0x2be/0x4f0 [ 465.206032][ T1097] ? cfg80211_switch_netns+0x58a/0x5b0 [ 465.211485][ T1097] ? cfg80211_switch_netns+0x58a/0x5b0 [ 465.216937][ T1097] ? cfg80211_switch_netns+0x58c/0x5b0 [ 465.222391][ T1097] handle_bug+0x84/0x160 [ 465.226628][ T1097] exc_invalid_op+0x1a/0x50 [ 465.231127][ T1097] asm_exc_invalid_op+0x1a/0x20 [ 465.235967][ T1097] RIP: 0010:cfg80211_switch_netns+0x58a/0x5b0 [ 465.242031][ T1097] Code: e1 07 38 c1 7c 8c 4c 89 e7 e8 e2 57 8b f7 eb 82 e8 3b ba 25 f7 e9 63 fe ff ff e8 31 ba 25 f7 e9 59 fe ff ff e8 27 ba 25 f7 90 <0f> 0b 90 e9 7f fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a1 fa [ 465.261635][ T1097] RSP: 0018:ffffc900040ff840 EFLAGS: 00010293 [ 465.267696][ T1097] RAX: ffffffff8a99d9d9 RBX: ffff88807c248da0 RCX: ffff8880265fbc80 [ 465.275659][ T1097] RDX: 0000000000000000 RSI: 00000000ffffffef RDI: 0000000000000000 [ 465.283622][ T1097] RBP: 00000000ffffffef R08: ffffffff8f9e0f77 R09: 1ffffffff1f3c1ee [ 465.291592][ T1097] R10: dffffc0000000000 R11: fffffbfff1f3c1ef R12: ffff88807c248720 [ 465.299561][ T1097] R13: ffff88807bc26280 R14: dffffc0000000000 R15: ffff88807c248910 [ 465.307533][ T1097] ? cfg80211_switch_netns+0x589/0x5b0 [ 465.313009][ T1097] cfg80211_pernet_exit+0xa2/0x140 [ 465.318124][ T1097] ops_undo_list+0x49a/0x990 [ 465.322801][ T1097] ? __pfx_ops_undo_list+0x10/0x10 [ 465.327909][ T1097] ? do_raw_spin_unlock+0x122/0x240 [ 465.333112][ T1097] cleanup_net+0x4d8/0x820 [ 465.337526][ T1097] ? __pfx_cleanup_net+0x10/0x10 [ 465.342458][ T1097] ? _raw_spin_unlock_irq+0x23/0x50 [ 465.347652][ T1097] ? process_scheduled_works+0x9ef/0x17b0 [ 465.353363][ T1097] ? process_scheduled_works+0x9ef/0x17b0 [ 465.359088][ T1097] process_scheduled_works+0xae1/0x17b0 [ 465.364655][ T1097] ? __pfx_process_scheduled_works+0x10/0x10 [ 465.370644][ T1097] worker_thread+0x8a0/0xda0 [ 465.375233][ T1097] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 465.381559][ T1097] ? __kthread_parkme+0x7b/0x200 [ 465.386503][ T1097] kthread+0x711/0x8a0 [ 465.390581][ T1097] ? __pfx_worker_thread+0x10/0x10 [ 465.395683][ T1097] ? __pfx_kthread+0x10/0x10 [ 465.400277][ T1097] ? _raw_spin_unlock_irq+0x23/0x50 [ 465.405468][ T1097] ? lockdep_hardirqs_on+0x9c/0x150 [ 465.410673][ T1097] ? __pfx_kthread+0x10/0x10 [ 465.415284][ T1097] ret_from_fork+0x4bc/0x870 [ 465.419884][ T1097] ? __pfx_ret_from_fork+0x10/0x10 [ 465.425000][ T1097] ? __switch_to_asm+0x39/0x70 [ 465.429772][ T1097] ? __switch_to_asm+0x33/0x70 [ 465.434549][ T1097] ? __pfx_kthread+0x10/0x10 [ 465.439156][ T1097] ret_from_fork_asm+0x1a/0x30 [ 465.443946][ T1097] [ 465.447225][ T1097] Kernel Offset: disabled [ 465.451532][ T1097] Rebooting in 86400 seconds..