last executing test programs: 3.081791764s ago: executing program 3 (id=1039): r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000003c0)="2c6626c892b6bc43639c910d72041b0242eae35f18f88db485827c6741912aaf4dfe93023bae59f364a372bda988468c368004cdf943bdd34b6b7b6ac12931db41c636f590bcae9d712c170fefa497caa9e11c4da8c3fb05ce3b3dd2b632c7", 0x1) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x6) syz_emit_ethernet(0x42, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450e0034005f846400000706b078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80106071907800e6080a00000003000000010000"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r8, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r7, 0xc6e9f000) mmap(&(0x7f0000066000/0x4000)=nil, 0x4000, 0x1, 0x80010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0xffffe000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000280)={0x42, 0x1, 0x1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r8, 0x2000) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYRES32=0x0, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="3107000000002000000038000000080001007063690011000200303030305630303a31302e30000000000800730002000000"], 0x38}, 0x1, 0x2}, 0x0) 2.089397825s ago: executing program 3 (id=1056): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x8, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async, rerun: 64) r5 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) r6 = socket$kcm(0x11, 0x3, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x11840525}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x74, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x400}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040008}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x2f}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x4) 1.974682597s ago: executing program 4 (id=1057): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) unshare(0x24010000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80800) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x3, 0x7, 0x101, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x84) sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001800090400150000000000002d"], 0x1c}}, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) unshare(0x6020400) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r8, 0x0, 0x0}, 0x20) close(r5) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000006c0)={{r3, 0x2bac, 0xfffffffffffffff7, 0x3, 0x7, 0xffff, 0x2, 0x0, 0x1, 0x1, 0x8, 0xc48b, 0xd4a9, 0x8001, 0x7}}) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x1e, 0x0, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x48) connect$rose(r0, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, [@null, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast]}, 0x40) 1.654941657s ago: executing program 3 (id=1063): r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x3, 0xec, &(0x7f00000002c0)="f173ae7d171564c4bc437852b1a386a69da317ac3fac9a39e9229d2f597ee321eafcd92e433b8135541c2c427aedcef1158ae99f9bde459f84d7bbd0a44531dd4a21e748069af738c43ff2c5e55205f0db934fddf396791db39d6e714bea77bfbaaea01573b5edbe36794a6c7cc6d90ec5b4456159f74d87c12d50cd808ac667dc9b50e5a9b8c0a433cad6370a532e6184b8ac07386d8e97af798127ef713dd0ba40e7a1e96e398c19d425a756a319fa05542e2437250ad0bdd322b05db761783e4653183ae77956715fe0273cfd0709a754c4ce1a6d1ee40902a8cdb554501b171a8cf18940c140104a54f4", 0x1}]}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000001ac0), 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="580000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB="08002800988da8"], 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff05"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) syz_emit_ethernet(0x82, &(0x7f00000004c0)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9a0d00", 0x4c, 0x2f, 0xff, @private1, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x0, [0x1, 0x0]}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], '\x00\x00\x00\x00'}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x2}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x32}}}}}}}}}, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dc, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'gre0\x00', &(0x7f0000000580)={'gretap0\x00', 0x0, 0x7800, 0x8, 0x14000000, 0x8, {{0x35, 0x4, 0x2, 0x1f, 0xd4, 0x67, 0x0, 0x6, 0x29, 0x0, @empty, @loopback, {[@lsrr={0x83, 0xf, 0xdf, [@private=0xa010100, @multicast1, @broadcast]}, @timestamp_addr={0x44, 0x44, 0xb, 0x1, 0x0, [{@local, 0x10000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@multicast1, 0xa0000000}, {@rand_addr=0x64010100, 0x5b}, {@multicast1, 0x3}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x5b5}, {@rand_addr=0x64010101, 0xc1}]}, @cipso={0x86, 0x5c, 0x3, [{0x1, 0x10, "3c243db83dc159067a34057da1b8"}, {0x0, 0x7, "b81ab5fe55"}, {0x7, 0x2}, {0x6, 0xd, "cc50c33b599fba7ad632a5"}, {0x0, 0x6, "c444c7e8"}, {0x1, 0xc, "282460656befdeb4b992"}, {0x6, 0x7, "300f63f393"}, {0x7, 0xc, "374860b3b2af6818cca3"}, {0x6, 0xb, "93224fb6cea26e8f25"}]}, @lsrr={0x83, 0xf, 0xbd, [@remote, @private=0xa010100, @rand_addr=0x64010102]}, @end, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000680)={'tunl0\x00', 0x0, 0x80, 0x1, 0x6, 0x76c8c392, {{0x6, 0x4, 0x0, 0x3c, 0x18, 0x65, 0x0, 0x5, 0x0, 0x0, @local, @local, {[@ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000880)={'sit0\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x40, 0x7, 0x5, 0x6cd6851c, {{0x24, 0x4, 0x3, 0x28, 0x90, 0x67, 0x0, 0x80, 0x0, 0x0, @empty, @loopback, {[@generic={0x94, 0x10, "7c9725614f68da945ffe568b0a02"}, @end, @timestamp_addr={0x44, 0x3c, 0xf5, 0x1, 0x7, [{@private=0xa010102, 0x7}, {@loopback, 0x3b32}, {@multicast1, 0x9}, {@local, 0x4}, {@remote, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x2}, {@multicast1, 0xf9ce}]}, @end, @ssrr={0x89, 0xb, 0x67, [@private=0xa010101, @loopback]}, @cipso={0x86, 0x22, 0x7a95f8b7760611af, [{0x7, 0x3, "fa"}, {0x6, 0x7, "3cf1c5e4d9"}, {0x7, 0xa, "6d3006de34633d53"}, {0x7, 0x8, "284f6572ca2f"}]}, @noop]}}}}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f00000009c0)={&(0x7f0000000200), 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x88, r5, 0x408, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe74d}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}, {0x6, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x2, 0x5}, {0xf, 0x6}, {0xc, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) mkdirat$cgroup(r1, &(0x7f0000000000)='syz0\x00', 0x1ff) 1.481192538s ago: executing program 2 (id=1065): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000000)=0x4, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x1) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x800000, 0x11, r1, 0x100000000) connect$inet6(r0, &(0x7f0000000e00)={0xa, 0x4e22, 0xde, @mcast1, 0x91}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="ceffffff0101010300000000000000000000fffe0000018000000280000001002f00000000000340000100000000034000000000000003400002000280000001003a0000000000034000000000000002800000010001000000000003400000000004000280000000"], 0x24}, 0x1, 0x0, 0x0, 0x200440f0}, 0x0) 1.377436795s ago: executing program 3 (id=1067): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={0x0, 0xa8}}, 0x10000000) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, &(0x7f0000000140)=0x38) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) socket$rxrpc(0x21, 0x2, 0x2) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{&(0x7f0000000000)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000001540)="4aac10b534a94fdb6587549d3f3bb8a480b1f2cb858b2fb9c711", 0x1a}], 0x1, &(0x7f00000002c0)=[{0xd0, 0x11, 0x3, "5d0b28ba8083a1c635359409d99c26457274edbe1aac090aecf8d119a939b3035efe553eacb71c576631c61d61714fd3e0c6ad21109683e5e4ddf3d69b042cc8659ff300b595ca105306610a3224cd2047248ec1406681ee0c37e4cbb317cd0f58e2904f2290481a8bdf96b3adcc97189dab2b44a46e2b7aed858d8cf1430942101f2d6076eda6cfe354b4357789243dd7c507b9ea4c334013b7a68c3b137ee2c3570cdcc5f203ec693b6cddad801a3e4aab097583fe0db391b2fc680b77"}, {0xd0, 0x117, 0x602, "b02268540bb9df61a2839bc93758e9f622d7855ef61d0db79fbbd255503d21f465d58f8be9b292a5cc4266d937695a3f2ab20ad36bd95bb923645c8a2574eecabddbe31a0dda4e2c182f9bdb09f9ec509128177198ddcabeb5028c742dc7b3eac636430c9cfcbad46a81fc2344f2ebce80ab082f346baea48a7567337dd9e5b7e64162e0489f273bed0ba9b39537d426e14f639f0f7df069b4581bda35d62159f56929c3dce5a1e9af52c9e90967d759e505777e87d58240b259c9d5ad"}, {0x1010, 0x109, 0xb, "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"}, {0x78, 0x0, 0x4, "26e2752059a4afaf4801c1a1b0f78b8cf694dea98eddfbf37aeb30d33b289cc08b31371223928a4b8b4e6a9af479de809ad56f6436831f15a3341b94a6e29a1e5106d6f0e7b3da9a2ffc7355178d32628ac535cdc3a00ee90c197472c0e0f4c5d20d7352244aa225"}], 0x1228}}], 0x1, 0x20008899) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x29, 0x803, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002e80), r5) sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000840) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1b, 0x1f}}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) ioctl$TUNSETTXFILTER(r10, 0x400454d1, &(0x7f0000000080)={0x1, 0x2aaaaaaaaaaaaba7}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r8, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0xc000800) 1.295731727s ago: executing program 2 (id=1068): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 1.243559925s ago: executing program 4 (id=1070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) 1.100298417s ago: executing program 2 (id=1072): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="6e5b76fc7c6f85f6f1bcee85c7406aee000000007a428ce9a3f29f7a47773dbb1cc3d7c7c70fb79cda6c4111fe95be45b25f20176e62d712854d003a32d52a4049b41a3d1a12542b621fceb7cf3f490c0653b529e6dbc4fc3df3b7bc04b28e4f00def32322dff26c610e3b31ba4ea353dda5c708a29fb14344635ab631b8eb66d7", @ANYRES16=r1, @ANYBLOB="8b300000000000000000150000000c009900040000000000000010001d800c00008008000d8004000300"], 0x30}}, 0x0) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x7, 0x10, 0x4, 0x4, {{0x23, 0x4, 0x3, 0x3, 0x8c, 0x65, 0x0, 0x3, 0x29, 0x0, @broadcast, @private=0xa010100, {[@end, @timestamp_prespec={0x44, 0x44, 0x59, 0x3, 0x0, [{@multicast2, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@rand_addr=0x64010100}, {@broadcast, 0x4}, {@broadcast, 0x7ff}, {@empty, 0x2}, {@local, 0x10}, {@broadcast, 0x8}]}, @timestamp_prespec={0x44, 0xc, 0xb8, 0x3, 0xf, [{@local, 0x18}]}, @timestamp_addr={0x44, 0x1c, 0xfa, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x43}, 0x1}, {@remote, 0x84}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x1}]}, @rr={0x7, 0xb, 0x1b, [@multicast1, @multicast2]}]}}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000940)={0x8, {{0x2, 0x4e20, @local}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}}, 0x108) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000680)={'syztnl1\x00', r3, 0x700, 0x700, 0x9e7, 0x5, {{0x26, 0x4, 0x1, 0x7, 0x98, 0x67, 0x0, 0xa, 0x4, 0x0, @remote, @loopback, {[@lsrr={0x83, 0x17, 0xbc, [@local, @local, @dev={0xac, 0x14, 0x14, 0x1c}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x3c, 0xd8, 0x3, 0xc, [{@multicast1}, {@multicast2, 0xd9}, {@multicast2, 0x5}, {@rand_addr=0x64010100, 0x10001}, {@broadcast, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000001}, {@remote, 0xee}]}, @noop, @lsrr={0x83, 0x13, 0x3b, [@broadcast, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010101, @multicast2]}, @cipso={0x86, 0x17, 0x3, [{0x0, 0x11, "d37c9d05cae808ce03f0973ab24e6e"}]}, @ra={0x94, 0x4}, @end]}}}}}) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newchain={0x0, 0x64, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xb, 0x6}, {0x4}, {0xb, 0x7}}, [@TCA_RATE={0x0, 0x5, {0x1, 0xc}}]}, 0x68}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x7, 0x7) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r7, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x2, 0x8000, 0x100, 0x4, 0x1, 0x361, 0x81, {0x0, @in6={{0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}, 0xd924, 0x1d6, 0x6, 0x7, 0x5}}, &(0x7f0000000100)=0xb0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000d4c993430218d4cb431517eba2731632875b6870b419f2fcb8ee2825826058313cfad157c4ba6e19fcf800c3d514ddd75006a23c9eefe5902958fba6aa83e33ff4", @ANYRES16=r11, @ANYBLOB="000426bd7000fcdbdf25080000000c0016000900000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008) recvfrom$packet(r2, &(0x7f0000000080)=""/127, 0x7f, 0x2000, &(0x7f0000000280)={0x11, 0xf7, r3, 0x1, 0xe}, 0x14) 1.084482871s ago: executing program 4 (id=1073): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, @in={0x2, 0x0, @multicast2}], 0x2c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000001480)={0x0, 0x1c, &(0x7f00000012c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f00000014c0)=0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r5], 0x20}}, 0x0) socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000040), 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="01002dbd7000fbdbdf250100000000000000014100000018001700000009fffffff97564703a73797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x200000c1}, 0x4000) 897.884751ms ago: executing program 4 (id=1077): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5, r3}, 0x38) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x7, 0xb, &(0x7f0000000200)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000440)='syzkaller\x00'}, 0x90) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000200)=0x2, 0x4) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) recvmmsg(r0, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@vsock, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000100)=""/48, 0x30}, 0x100}, {{&(0x7f0000000280)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000300)=""/245, 0xf5}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/99, 0x63}, {&(0x7f0000000480)=""/155, 0x9b}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000600)=""/80, 0x50}], 0x7, &(0x7f0000000700)=""/28, 0x1c}, 0xe1eb}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000740)=""/231, 0xe7}, {&(0x7f0000003ec0)=""/4102, 0x1006}], 0x2, &(0x7f0000002dc0)=""/235, 0xeb}, 0x3ff}, {{&(0x7f0000000980)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000a00)=""/113, 0x71}], 0x10000000000000f9, &(0x7f0000002cc0)=""/209, 0xd1}, 0x80000001}], 0x4, 0x20a3, &(0x7f0000000ac0)={0x0, 0x989680}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r5, 0x1, 0x4}, &(0x7f00000000c0)=0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r7, r8, 0x26, 0x0, @void}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r10, 0x4) close(r9) sendmsg$nl_route_sched(r6, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=@newtaction={0x11c, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x108, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xfffffffffffffd21, 0x8, {0x2}}}}, @m_sample={0xb8, 0x2, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x0, 0x2, {0x3, 0xd, 0x10000000, 0x0, 0x3}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x100008, 0x4d82, 0xffffffffffffffff, 0x7ff, 0x4}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfff, 0x88, 0x6, 0x3, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffffffff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x9e07, 0x5, 0x3, 0x9}}]}, {0x22, 0x6, "b993a266d04d68c578a189161d7b3605ae1ad871dbd78a555343b82aff5a"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x11c}}, 0x0) 651.01003ms ago: executing program 4 (id=1078): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x34}}, 0x0) 554.79178ms ago: executing program 4 (id=1083): r0 = socket$inet6(0xa, 0x802, 0x0) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x7, 0x0, 0x0, [0x0, 0x0]}]}}}], 0x38}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x18, 0x0, &(0x7f0000000800)) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) unshare(0x22020400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7}, 0xc) ioctl$int_in(r5, 0x5452, &(0x7f0000000140)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r5, 0x400084, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000480)="b7028d7a89a1a9e34b7acba3d9bff1ab77e1", 0x12}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r10, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000180)=0x101) bind$alg(r11, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000420000000e0001006e657464658073696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500850000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20044885}, 0x2040) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="000000a0ae01ee071dd6ca10f2eae36538df0707ac9a51640e1063900ebfcc4a534abab7", @ANYRES16=r2, @ANYBLOB="00032abd7000feffffff060000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000120000008000b000010000006001600940700000500120000000000"], 0x54}, 0x1, 0x0, 0x0, 0x448d5}, 0x24008004) 530.998787ms ago: executing program 1 (id=1084): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010003b150c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="eec8a33ba2409306fea38d40b74177f039b904cc4a78e12df78d64e9dc5661d9da9e7e3acc14a62abca0936da6f9dc48534870c6252c7e1af052254f04b2f47e4104f6ac2904a1fd9e1a194855f1766db668c0b562d8508414c7cd2f4d557f7119befb79b571fb052cb108d0f5f6f574685565af0620e8f9b3839d3f950e917fc7b233c84cec6bbe6a61abdb1adf14f8ba3654b8bb4034510406cb360e036aed02be6ca8bf30b2e7875b293535f03b6bcd4ec08d70182731d4f178e0530443834bce8531ef628ed3f87bf5afe232c4da4b4daa1392ad3324d76288d07d5110939faa4d784903ff2a3f3c1e15dfbd6d627f4e1877c210130e356a72"], 0x40}}, 0x48010) 510.981674ms ago: executing program 0 (id=1085): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x3, 0x9, 0xfffd, 0x4}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf0200000000000085000000cc000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0xa8, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x78, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x68, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x50, 0x3, "cd4b6abe42031763d02899c77f99ff5fe87a9d3ac869f3a860917523679a5eb46131471826390d810593448ba1ecbf4579f9cd6564e64066681fb945bfe585ab6933a6f6514a0eebad4e3537"}, @NFTA_TARGET_NAME={0xa, 0x1, 'NFLOG\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 406.792645ms ago: executing program 0 (id=1086): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200), 0x8) sendto$inet(r0, &(0x7f0000000440)="785ab72b0380f9ec63788132fa8342dd066bdfa0bcc5a6dc6067509d1e918f5cf8b4e1d9b9d8f4959f67a80c58ef7ad9223d1ea8b2c6dccfae5ecdded739589a30b4d6cdc4e226366f4a4be8e7005be067df9794fb85ed3f746aff0348c922bcad7d54e4c69887ef73b9337d2b8f8d7514a67dd0cea9dc7f907ee4ef6244ba2246af3a54c6d4488e6b6177362a617a4de90bfc7cd9c5bbb9b610e8e3c5a14565fa1a88634872b3cf38be59f519edefb941", 0xb1, 0x24004011, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000700)="ab12bb69", 0x4, 0x840, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000500), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r4}, &(0x7f0000000a00), &(0x7f0000000a40)=r3}, 0x20) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x4, 0x8, 0x3, 0x20, 0x0, 0x0, 0x0, [@sadb_key={0x1e, 0x8, 0x730, 0x0, "636472ddfef22bede770be34024ae2d95d499eefd4b5975d12387696107b1b9c3a90d89d7a3ad624c9ff58bc310e25d1709bf5e8131cbd1e86b38b3d01f1f1768a7b3063a25a213e7ae880d9cb27e5388c3486e8bbcac9d5e8eeb89900d72b96b4380c5f334dd73399870debd9a8cadf8b366f9417216f5fe623eb9b95baf17e8d2fde41152ae5b0e50343c294a0962b4e73c154c198e180f1a49a1ead3818fa1e7bae87e5450623432dfdd6886438bb3be7b6e0c02133a6b4a24bedfedf141c1e153b5aa9ca8eeb4c59c36042123fb182c2c6f78a3a3cbfce7ed81e8229ed4336ba63369fff"}]}, 0x100}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r6, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x44000) write$cgroup_int(r3, &(0x7f00000001c0)=0xfffffffffffffff8, 0x12) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8, @ANYBLOB="0a0001"], 0x48}}, 0x0) 389.807622ms ago: executing program 1 (id=1087): socket$isdn(0x22, 0x2, 0x11) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1f, 0x0, 0x0, 0x8000, 0x6723, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2b}, 0x94) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xc, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x4008040, &(0x7f00000000c0)={0x11, 0xe56930649afa540, r4, 0x1, 0xd8}, 0x14) (async) socket$vsock_stream(0x28, 0x1, 0x0) socket$kcm(0x10, 0x0, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x20004080) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r6, &(0x7f0000000140)={0x1d, r8}, 0x10) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0xb, 0x6}, {0x3, 0xfff9}, {0x2, 0x3}}}, 0x24}}, 0x0) (async) sendmsg$can_bcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x4, 0x0, 0x2, {}, {}, {0x3, 0x0, 0x1}, 0x1, @can={{0x0, 0x1, 0x1}, 0x2, 0x3}}, 0x48}, 0x1, 0x0, 0x0, 0x20000051}, 0x44000) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) 356.187279ms ago: executing program 3 (id=1088): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 275.04673ms ago: executing program 0 (id=1089): ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x5411, &(0x7f0000000100)) 274.085712ms ago: executing program 3 (id=1090): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000900)={0x1d, r1, 0x1}, 0x18) sendmmsg$unix(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="ea79b62f6a25e289", 0x8}], 0x1, 0x0, 0x0, 0x48c4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x38, 0x1}}], 0x2, 0x1d3) (async) sendmmsg$unix(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="ea79b62f6a25e289", 0x8}], 0x1, 0x0, 0x0, 0x48c4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x38, 0x1}}], 0x2, 0x1d3) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x200, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb05009800000000000000240000002400000003008000000000000000000903000000010000000000001200000000000000000000000202000000005f00"], 0x0, 0x3f}, 0x20) 256.670032ms ago: executing program 0 (id=1091): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e00050002800800070000000000"], 0x3c}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e00050002800800070000000000"], 0x3c}}, 0x0) (async) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000000)) (async) 239.070356ms ago: executing program 1 (id=1092): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x5}, 0x94) 162.720858ms ago: executing program 0 (id=1093): sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="bacf528ec34576d5bf2406835a847810ba350e553ddd99f27e7b9e122d6cf4588f65a9099f9d34858feb9eb467b7227e1ca1c7b72829ad9442a1570147700cb93ec394dc7a140241b5c0ca32f676ba62fa060c989baa1e69ecf2e7bb06a624127533ffc77b7a8c6f0a505ced6a", 0x6d, 0x20048890, &(0x7f0000000080)={0x11, 0x1}, 0x14) (async) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/197, 0xc5, 0x0, &(0x7f0000000200)=""/251, 0xfb}, &(0x7f0000000340)=0x40) r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000000480)={&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000400)=""/17, 0x11}], 0x1}, 0x40000002) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f00000004c0)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000500)=0x28) (async) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) (async) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000540)={'nicvf0\x00', 0x63800000}) (async) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f0000000580)={0x5f, "d1f55cbbe3e404100aa936b9471d069bf59fe2b6abd9042868a245d4cbf7ed479143bf2255168b70bbb2fc3977762980b6df63448574ec2219118945d27f8c94d261929327292a41e8ad9449fd011c1bfec92e970d54e28fa9502d5703b2a7ca721c920be50c9a5186d88ecc7d643960d2e65e438e96186d08b195d13b904765"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000640)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000001640)={{r2, 0xb39, 0x4, 0x9, 0x8, 0x5, 0x7, 0x8, 0x4, 0x1, 0x9, 0x5, 0x7, 0x3, 0x6}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001700)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000001740)={0x1d, r4, 0x0, {0x2, 0xf0, 0x4}, 0xfd}, 0x18) (async) bind$inet(r1, &(0x7f0000001780)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) (async) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f00000017c0), &(0x7f0000001800)=0x4) (async) setsockopt$llc_int(r1, 0x10c, 0x4, &(0x7f0000001840)=0x2, 0x4) (async) socket$l2tp(0x2, 0x2, 0x73) r5 = accept$packet(r1, 0x0, &(0x7f0000001880)) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f00000018c0)={0x1, 'veth0_to_bond\x00', {}, 0x8}) r6 = accept4$x25(0xffffffffffffffff, &(0x7f0000001900)={0x9, @remote}, &(0x7f0000001940)=0x12, 0x80800) ioctl$sock_x25_SIOCADDRT(r6, 0x890b, &(0x7f0000001980)={@null, 0x8, 'veth1_to_team\x00'}) (async) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000001a80)={r4, 0x1, 0x6, @local}, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), r1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000001f40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001f00)={&(0x7f0000001b80)={0x328, r7, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IE={0x16b, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x56}, 0xfd, 0x5, @device_b, 0x4, 0x7, 0x9}}, @perr={0x84, 0xbb, {0x33, 0xb, [{{0x0, 0x1}, @device_b, 0x8, @value=@device_b, 0x24}, {{}, @broadcast, 0x10000, @void, 0x1b}, {{}, @device_a, 0x7ff, @void, 0x42}, {{0x0, 0x1}, @broadcast, 0x3, @value, 0x29}, {{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0x35}, {{0x0, 0x1}, @device_b, 0x7, @value, 0x28}, {{}, @device_b, 0x4, @void, 0x1e}, {{0x0, 0x1}, @broadcast, 0xc, @value=@device_b, 0x21}, {{}, @device_b, 0x10000, @void, 0x26}, {{0x0, 0x1}, @device_b, 0xe, @value=@device_b, 0x25}, {{0x0, 0x1}, @device_a, 0x9, @value, 0x22}]}}, @channel_switch={0x25, 0x3, {0x1, 0x9d, 0x6}}, @mesh_id={0x72, 0x6}, @rann={0x7e, 0x15, {{0x1, 0x7d}, 0x5, 0xd5, @device_a, 0x3, 0x4, 0x1}}, @preq={0x82, 0x6d, {{0x1, 0x0, 0x0, 0x0, 0x1}, 0x7, 0x8, 0x5, @broadcast, 0x2, @value, 0x9, 0x9, 0x7, [{{0x0, 0x0, 0x1}, @device_a, 0xe091}, {{0x1}, @device_a, 0x7}, {{0x0, 0x0, 0x1}, @device_a, 0x6}, {{0x1}, @broadcast, 0xfffffff8}, {{0x1, 0x0, 0x1}, @broadcast, 0x1}, {{0x1}, @broadcast, 0x9}, {{0x1}, @device_b, 0x4}]}}]}, @NL80211_ATTR_IE={0x19f, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @ext_channel_switch={0x3c, 0x4, {0x5, 0x0, 0xb7, 0xd6}}, @tim={0x5, 0x87, {0x7, 0x9f, 0xc, "ea8a193e5d3df5fba1c8db2d3a4dd1937326f71b5ff4f8e7cd6f9c0e0a18d7788c7724bc836012b55f95f88a3452095e98fe871ae7de770a494a95757622efc8b0e25dbe6d27deddb923dd9ac2e8c4197fbd995f5b85f2865092f466c11b8db14cbb8d2711f953875d12ab413357bcef7603ee6c1aa45af12040fbf7efe785d027877d25"}}, @perr={0x84, 0x7b, {0x4d, 0x7, [{{0x0, 0x1}, @device_a, 0x7, @value=@device_b, 0x9}, {{}, @device_b, 0x8, @void, 0x13}, {{0x0, 0x1}, @device_b, 0x400, @value=@device_b, 0x2b}, {{0x0, 0x1}, @device_b, 0xffffffff, @value, 0x11}, {{0x0, 0x1}, @device_a, 0xa1b4, @value=@broadcast, 0x16}, {{0x0, 0x1}, @broadcast, 0xff, @value=@device_b, 0x27}, {{}, @device_a, 0x6, @void, 0x10}]}}, @link_id={0x65, 0x12, {@initial, @device_a, @broadcast}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x6, 0x1, @device_a, 0x7, @value, 0x2, 0x7, @broadcast, 0x40}}, @ssid={0x0, 0x13, @random="7a23761dc13b65c6d24a59d9a51eb7790fbd9b"}, @ht={0x2d, 0x1a, {0xc, 0x0, 0x0, 0x0, {0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x8, 0xfffffffd}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x0, 0xa, 0xb4}}, @mic={0x8c, 0x18, {0xe41, "dd7688ccb6d3", @long="e30a48fbb9ac679e5625581c57c959dc"}}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000001f80)=0x3, &(0x7f0000001fc0)=0x2) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x68, 0xe, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000010}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002140)={'batadv_slave_1\x00'}) 161.688035ms ago: executing program 2 (id=1094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) r1 = socket$inet6(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20) (async, rerun: 64) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x1, 0x1}, 0x20) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) (async, rerun: 32) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async, rerun: 32) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000000)=0x0) socket$kcm(0x25, 0x1, 0x0) (async, rerun: 64) bind$nfc_llcp(r6, &(0x7f0000001040)={0x27, r8, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) (rerun: 64) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x70, 0x0, 0x800, 0x8, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_FIRMWARE_NAME={0x11, 0x14, '(:\xbc{%+::\'(%+X'}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, ':[.*'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_FIRMWARE_NAME={0x11, 0x14, '(:\xbc{%+::\'(%+X'}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, ':%%!'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async, rerun: 32) recvmsg$qrtr(r10, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x2) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a01040000000000000000020000003c000480380001800e000100696d6d65646961746500000024000280180002801400028008000340ebffffff07000180fffffffd08000140000000000900010073797a30000000000900020073797a32000000"], 0x90}}, 0x0) 160.682404ms ago: executing program 1 (id=1095): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x47, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x15, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5a0, 0x400, 0x400, 0x240, 0x240, 0x0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x128, 0x150, 0x0, {0x7a00000010000000}, [@common=@srh={{0x30}, {0x2b, 0x0, 0x2, 0xa, 0xda, 0x2880, 0x4000}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4e20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xa}, @dev={0xfe, 0x80, '\x00', 0x2d}, [0xff, 0xff, 0xffffffff, 0xffffff00], [0xf56acaad6a8e9696, 0xffffffff, 0xffffff00, 0xff], 'pimreg0\x00', 'dvmrp0\x00', {}, {}, 0xff, 0xf}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@broadcast, 0x0, 0x34}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91100b000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94) 118.806434ms ago: executing program 0 (id=1096): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0xfffffffffffffea7) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) (async) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003a40)=@newtaction={0x1008, 0x30, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{0x64, 0x1, [@m_ipt={0x60, 0x17, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xadc0}, @TCA_IPT_HOOK={0x8}]}, {0x25, 0x6, "e0bc7743d52057483c234da7396aee1c1620232e9758fc402870746166594df527"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, {0xf90, 0x1, [@m_ipt={0xf8c, 0x17, 0x0, 0x0, {{0x8}, {0x4}, {0xf61, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x1008}, 0x1, 0x0, 0x0, 0x4}, 0x24040001) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f0000000340), 0x12) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x56c, 0x4) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r3, &(0x7f00000003c0)="09000000e700140000007e7bfbf788a83baa9900d6f18f8e950088a80000810049", 0x21, 0x24042801, &(0x7f0000000300)={0x11, 0x8100, r5, 0x1, 0x8, 0x6, @multicast}, 0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES16=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x118, r6, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x55ae}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfce1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf731}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8018}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010102}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x8090}, 0x20) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r7}, 0x10) (async) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001200)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) recvmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) (async) recvfrom$l2tp(r1, &(0x7f0000000980)=""/4096, 0x1000, 0x12163, 0x0, 0x0) 93.747141ms ago: executing program 2 (id=1097): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000000)={0x58, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x3c}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, @multicast2, @private}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000001a80)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', r4, 0x20, 0x20, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x27, 0x0, 0x0, 0x0, 0x0, @private=0xa010101, @empty}}}}) 22.745742ms ago: executing program 1 (id=1098): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in=@loopback, 0x0, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0xfd}, {0x8000000000000000, 0x0, 0x6, 0x0, 0x10000000, 0xfffffffffffffffe}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0x20ae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 4.638962ms ago: executing program 1 (id=1099): r0 = socket$alg(0x26, 0x5, 0x0) bind$netrom(0xffffffffffffffff, &(0x7f00000006c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @bcast, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7"], 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@alg={0xe0, 0x10, 0x1, 0x0, 0x0, {{'drbg_pr_hmac_sha384\x00'}}}, 0xe0}}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x0, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4041}, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r7, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0xffffeb76}], 0x1, 0x20000040, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r8 = accept4(r0, 0x0, 0x0, 0x80000) r9 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25ADDUID(r9, 0x89e1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r8) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000300)="a4eac90f8e3ae7580e2e693731ef6b447fc2057d9a84e61f40c79e10218d131f865d68b23cd7c3f2b681e2205f67f140252abcc3b8015e176881d81a9e61b6a2c92a9d8e1f51861b64e7b61bf9a131e197f5a6c6d4d887d86c79836e81c69e211d2bf4c595b01c94de464ff9aa72b6058fe774c81142bbce9bd0d83f6239362c3347e3daadb292cf3fee4700a2d43cf006a476ce0e4dd221acdcdefcf67733ed2978c2cd564772844077920cf54543db03688079168e36709dbbf84933a2415a32617f7ee4336d89967c2cbcd76a973d88a3c440862bc165e0df6f1cd25f1aa711b721c33703645bcf93b775f1eb28c7640d1b7cbe44b9fc0e55d1a4d8f83b8fd537a231fe", 0x105}], 0x0) 0s ago: executing program 2 (id=1100): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@delchain={0x114, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xd8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xc0, 0x1, [@m_simple={0x60, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x32, 0x6, "b0024569afedec0626fbbc41a7ec997eb30f0b4a8d99c8f21c5bab98069474c0b93e701b06b846aa63eec457ef40"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x5c, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x29, 0x6, "0ef6a460a5bbda16e826eafe044d3376872c48b74a5639bfbc3d91ee00b59133e95b6b3527"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a00590214f9f407000904101f00000000000100000200000800040001000000", 0x24) bind$packet(r0, &(0x7f0000000300)={0x11, 0x6, 0x0, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.144' (ED25519) to the list of known hosts. [ 66.103427][ T5816] cgroup: Unknown subsys name 'net' [ 66.269925][ T5816] cgroup: Unknown subsys name 'cpuset' [ 66.278617][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.698766][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.383009][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.389582][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.856796][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.864517][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.872886][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.880753][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.881768][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.897158][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.905185][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.908300][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.917246][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.921825][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.934302][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.936934][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.949901][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.958076][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.966776][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.967628][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.974742][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.988016][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.991532][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.003438][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.005321][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.018699][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.027086][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.030891][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.042533][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.659810][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 72.761397][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 72.811762][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 72.860269][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 72.924480][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 72.999645][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.006903][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.014306][ T5831] bridge_slave_0: entered allmulticast mode [ 73.022187][ T5831] bridge_slave_0: entered promiscuous mode [ 73.068044][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.075196][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.082915][ T5831] bridge_slave_1: entered allmulticast mode [ 73.090068][ T5831] bridge_slave_1: entered promiscuous mode [ 73.158901][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.166176][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.173386][ T5826] bridge_slave_0: entered allmulticast mode [ 73.181409][ T5826] bridge_slave_0: entered promiscuous mode [ 73.188830][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.195945][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.203315][ T5830] bridge_slave_0: entered allmulticast mode [ 73.210326][ T5830] bridge_slave_0: entered promiscuous mode [ 73.254969][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.262253][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.269500][ T5826] bridge_slave_1: entered allmulticast mode [ 73.277342][ T5826] bridge_slave_1: entered promiscuous mode [ 73.293122][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.300418][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.307870][ T5830] bridge_slave_1: entered allmulticast mode [ 73.314871][ T5830] bridge_slave_1: entered promiscuous mode [ 73.324715][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.348636][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.355769][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.363222][ T5828] bridge_slave_0: entered allmulticast mode [ 73.370558][ T5828] bridge_slave_0: entered promiscuous mode [ 73.401889][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.431948][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.439625][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.447321][ T5828] bridge_slave_1: entered allmulticast mode [ 73.454284][ T5828] bridge_slave_1: entered promiscuous mode [ 73.463457][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.493621][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.500868][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.508246][ T5836] bridge_slave_0: entered allmulticast mode [ 73.515354][ T5836] bridge_slave_0: entered promiscuous mode [ 73.535761][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.547765][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.558720][ T5831] team0: Port device team_slave_0 added [ 73.567172][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.576484][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.583633][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.590928][ T5836] bridge_slave_1: entered allmulticast mode [ 73.598141][ T5836] bridge_slave_1: entered promiscuous mode [ 73.631577][ T5831] team0: Port device team_slave_1 added [ 73.671074][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.707559][ T5830] team0: Port device team_slave_0 added [ 73.725759][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.737718][ T5826] team0: Port device team_slave_0 added [ 73.756529][ T5830] team0: Port device team_slave_1 added [ 73.765111][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.786632][ T5826] team0: Port device team_slave_1 added [ 73.803422][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.810585][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.836765][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.874970][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.895270][ T5828] team0: Port device team_slave_0 added [ 73.902247][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.909300][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.935257][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.947202][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.954148][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.980251][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.017122][ T5150] Bluetooth: hci3: command tx timeout [ 74.028355][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.035323][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.061341][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.074583][ T5828] team0: Port device team_slave_1 added [ 74.089243][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.096353][ T5150] Bluetooth: hci1: command tx timeout [ 74.096667][ T5150] Bluetooth: hci4: command tx timeout [ 74.101966][ T5833] Bluetooth: hci0: command tx timeout [ 74.107795][ T5845] Bluetooth: hci2: command tx timeout [ 74.118076][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.144200][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.156636][ T5836] team0: Port device team_slave_0 added [ 74.163161][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.170156][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.196626][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.237409][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.244392][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.270471][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.283747][ T5836] team0: Port device team_slave_1 added [ 74.336828][ T5831] hsr_slave_0: entered promiscuous mode [ 74.343099][ T5831] hsr_slave_1: entered promiscuous mode [ 74.350447][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.357486][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.383422][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.412243][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.419349][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.445467][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.458510][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.465459][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.491463][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.571742][ T5826] hsr_slave_0: entered promiscuous mode [ 74.578103][ T5826] hsr_slave_1: entered promiscuous mode [ 74.584169][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 74.590663][ T5826] Cannot create hsr debugfs directory [ 74.614090][ T5830] hsr_slave_0: entered promiscuous mode [ 74.620781][ T5830] hsr_slave_1: entered promiscuous mode [ 74.627045][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 74.632777][ T5830] Cannot create hsr debugfs directory [ 74.677168][ T5828] hsr_slave_0: entered promiscuous mode [ 74.683771][ T5828] hsr_slave_1: entered promiscuous mode [ 74.690158][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 74.695884][ T5828] Cannot create hsr debugfs directory [ 74.805905][ T5836] hsr_slave_0: entered promiscuous mode [ 74.812266][ T5836] hsr_slave_1: entered promiscuous mode [ 74.818841][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 74.824566][ T5836] Cannot create hsr debugfs directory [ 75.257129][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.270959][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.281753][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.292172][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.361845][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.373862][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.387464][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.410415][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.465684][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.489325][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.503261][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.531947][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.634265][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.657590][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.664474][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.674864][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.684832][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.733686][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.765352][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.772670][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.839843][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.847372][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.861927][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.872111][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.882488][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.901179][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.908641][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.978471][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.008905][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.016000][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.035560][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.071526][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.078656][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.097276][ T5150] Bluetooth: hci3: command tx timeout [ 76.128719][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.164842][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.172074][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.181093][ T5150] Bluetooth: hci4: command tx timeout [ 76.187545][ T5150] Bluetooth: hci2: command tx timeout [ 76.192951][ T5150] Bluetooth: hci1: command tx timeout [ 76.198536][ T5845] Bluetooth: hci0: command tx timeout [ 76.202629][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.211071][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.373375][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.387820][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.429352][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.507288][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.528116][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.539122][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.546313][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.580316][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.587531][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.618249][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.625421][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.665683][ T3511] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.672892][ T3511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.789334][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.848391][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.018332][ T5826] veth0_vlan: entered promiscuous mode [ 77.047753][ T5826] veth1_vlan: entered promiscuous mode [ 77.111646][ T5830] veth0_vlan: entered promiscuous mode [ 77.199251][ T5830] veth1_vlan: entered promiscuous mode [ 77.231184][ T5826] veth0_macvtap: entered promiscuous mode [ 77.241670][ T5826] veth1_macvtap: entered promiscuous mode [ 77.258837][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.280253][ T5831] veth0_vlan: entered promiscuous mode [ 77.328919][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.339144][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.348442][ T5830] veth0_macvtap: entered promiscuous mode [ 77.365963][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.375355][ T5831] veth1_vlan: entered promiscuous mode [ 77.398723][ T5830] veth1_macvtap: entered promiscuous mode [ 77.424260][ T1165] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.458378][ T1165] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.468335][ T1165] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.496726][ T5828] veth0_vlan: entered promiscuous mode [ 77.502966][ T1165] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.540062][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.560477][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.595248][ T5828] veth1_vlan: entered promiscuous mode [ 77.620297][ T5831] veth0_macvtap: entered promiscuous mode [ 77.643848][ T5831] veth1_macvtap: entered promiscuous mode [ 77.650591][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.665045][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.683998][ T1165] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.697593][ T5836] veth0_vlan: entered promiscuous mode [ 77.722679][ T1165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.732770][ T1165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.762549][ T1165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.780041][ T3511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.789301][ T3511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.790384][ T5836] veth1_vlan: entered promiscuous mode [ 77.811953][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.848622][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.890013][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.899004][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.913137][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.923355][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.941974][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.947947][ T5828] veth0_macvtap: entered promiscuous mode [ 78.000549][ T5828] veth1_macvtap: entered promiscuous mode [ 78.028456][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.051980][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.099063][ T5948] xt_CT: You must specify a L4 protocol and not use inversions on it [ 78.152927][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.164564][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.177289][ T5842] Bluetooth: hci3: command tx timeout [ 78.204071][ T5836] veth0_macvtap: entered promiscuous mode [ 78.210266][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.237988][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.253329][ T5836] veth1_macvtap: entered promiscuous mode [ 78.256894][ T5952] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6'. [ 78.268432][ T5842] Bluetooth: hci1: command tx timeout [ 78.273847][ T5842] Bluetooth: hci2: command tx timeout [ 78.282499][ T5842] Bluetooth: hci4: command tx timeout [ 78.288020][ T5842] Bluetooth: hci0: command tx timeout [ 78.312143][ T5952] gretap0: entered promiscuous mode [ 78.331162][ T5953] netlink: 'syz.3.6': attribute type 29 has an invalid length. [ 78.354760][ T3511] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.378556][ T3511] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.394938][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.417320][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.423644][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.435068][ T3511] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.444381][ T3511] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.455312][ T5952] netlink: 'syz.3.6': attribute type 29 has an invalid length. [ 78.462860][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 78.462914][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 78.541681][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.559950][ T5953] netlink: 'syz.3.6': attribute type 29 has an invalid length. [ 78.578874][ T5953] netlink: 'syz.3.6': attribute type 29 has an invalid length. [ 78.611878][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.624495][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.647874][ T3511] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.671750][ T3511] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.762903][ T3511] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.787036][ T1165] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.814148][ T5965] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.913701][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.927965][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.994868][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.019372][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.175473][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.179297][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.185944][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.211297][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.214978][ T5980] batadv1: entered allmulticast mode [ 79.549060][ T5987] veth0: entered promiscuous mode [ 79.561811][ T5989] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1'. [ 79.603387][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 79.666242][ T5993] warning: `syz.3.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.769088][ T6002] Zero length message leads to an empty skb [ 79.790911][ T6002] netlink: 44 bytes leftover after parsing attributes in process `syz.4.18'. [ 79.865143][ T6004] netlink: 'syz.1.19': attribute type 2 has an invalid length. [ 80.074657][ T6010] sock: sock_set_timeout: `syz.4.22' (pid 6010) tries to set negative timeout [ 80.267077][ T5845] Bluetooth: hci3: command tx timeout [ 80.337705][ T5845] Bluetooth: hci0: command tx timeout [ 80.346190][ T5842] Bluetooth: hci4: command tx timeout [ 80.346206][ T5150] Bluetooth: hci2: command tx timeout [ 80.346238][ T5150] Bluetooth: hci1: command tx timeout [ 80.368080][ T6029] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.584945][ T6039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.30'. [ 80.627479][ T6045] netlink: 28 bytes leftover after parsing attributes in process `syz.3.30'. [ 80.677688][ T6047] netlink: 100 bytes leftover after parsing attributes in process `syz.3.30'. [ 80.742171][ T6049] netlink: 'syz.4.32': attribute type 83 has an invalid length. [ 80.788238][ T6049] dvmrp6: entered allmulticast mode [ 80.993956][ T6059] tipc: Enabling of bearer rejected, failed to enable media [ 81.004482][ T6059] netlink: 16 bytes leftover after parsing attributes in process `syz.3.35'. [ 81.091527][ T6067] trusted_key: syz.1.37 sent an empty control message without MSG_MORE. [ 81.694558][ T6091] bond1 (unregistering): Released all slaves [ 81.736009][ T6093] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 82.386915][ T6131] syzkaller0: entered promiscuous mode [ 82.416715][ T6131] syzkaller0: entered allmulticast mode [ 82.488916][ T6131] tipc: Started in network mode [ 82.494767][ T6131] tipc: Node identity 1a602104fca1, cluster identity 4711 [ 82.539949][ T6131] tipc: Enabled bearer , priority 0 [ 82.610735][ T6130] tipc: Resetting bearer [ 82.652238][ T6130] tipc: Disabling bearer [ 83.067250][ T6168] syz.1.64 uses obsolete (PF_INET,SOCK_PACKET) [ 83.096899][ T6168] netlink: 'syz.1.64': attribute type 5 has an invalid length. [ 83.443245][ T6179] __nla_validate_parse: 12 callbacks suppressed [ 83.443263][ T6179] netlink: 64 bytes leftover after parsing attributes in process `syz.4.70'. [ 83.598977][ T6190] netlink: 132 bytes leftover after parsing attributes in process `syz.4.74'. [ 83.633454][ T6183] netlink: 220 bytes leftover after parsing attributes in process `syz.2.72'. [ 83.677423][ T6183] netlink: 'syz.2.72': attribute type 2 has an invalid length. [ 83.702002][ T6200] netlink: 64 bytes leftover after parsing attributes in process `syz.2.72'. [ 83.729394][ T6199] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20002 [ 83.744779][ T6194] can: request_module (can-proto-5) failed. [ 83.798540][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.76'. [ 83.811652][ T6198] netlink: 2 bytes leftover after parsing attributes in process `syz.1.76'. [ 83.841280][ T6203] netlink: 'syz.4.77': attribute type 4 has an invalid length. [ 83.993291][ T6212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.80'. [ 84.004948][ T6210] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 84.313363][ T6226] bridge_slave_0: left allmulticast mode [ 84.322479][ T6226] bridge_slave_0: left promiscuous mode [ 84.329138][ T6226] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.429310][ T6226] bridge_slave_1: left allmulticast mode [ 84.439217][ T6226] bridge_slave_1: left promiscuous mode [ 84.455584][ T6226] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.505319][ T6226] bond0: (slave bond_slave_0): Releasing backup interface [ 84.524913][ T6226] bond0: (slave bond_slave_1): Releasing backup interface [ 84.550882][ T6226] team0: Port device team_slave_0 removed [ 84.572488][ T6226] team0: Port device team_slave_1 removed [ 84.581473][ T6226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.593805][ T6226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.603180][ T6226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.621483][ T6226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.647620][ T6226] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 84.663851][ T6229] team0: Mode changed to "roundrobin" [ 84.910022][ T6264] IPVS: set_ctl: invalid protocol: 29 10.1.1.0:20001 [ 84.919235][ T6260] tipc: Enabled bearer , priority 0 [ 84.927401][ T6264] netlink: 16 bytes leftover after parsing attributes in process `syz.1.94'. [ 84.940982][ T6260] syzkaller0: entered promiscuous mode [ 84.949307][ T6260] syzkaller0: entered allmulticast mode [ 84.968113][ T6260] tipc: Resetting bearer [ 84.979237][ T6259] tipc: Resetting bearer [ 85.081527][ T6259] tipc: Disabling bearer [ 85.130455][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.97'. [ 85.131178][ T6272] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 85.141146][ T6274] netlink: 44 bytes leftover after parsing attributes in process `syz.3.99'. [ 85.192504][ T60] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.213819][ T60] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.274448][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.302347][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.491608][ T6293] veth1_to_bond: entered allmulticast mode [ 85.533067][ T6289] syzkaller0: entered promiscuous mode [ 85.632257][ T6289] syzkaller0: entered allmulticast mode [ 85.739136][ T6294] veth1_to_bond: left allmulticast mode [ 86.371377][ T6333] xt_l2tp: wrong L2TP version: 10 [ 86.598354][ T6352] netlink: 'syz.2.120': attribute type 5 has an invalid length. [ 86.667179][ T6354] lo: entered allmulticast mode [ 86.694034][ T6359] bridge_slave_1: left allmulticast mode [ 86.726344][ T6359] bridge_slave_1: left promiscuous mode [ 86.735026][ T6359] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.767996][ T984] cfg80211: failed to load regulatory.db [ 86.791478][ T6359] bridge_slave_0: left allmulticast mode [ 86.797724][ T6359] bridge_slave_0: left promiscuous mode [ 86.803641][ T6359] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.031962][ T6379] block nbd0: not configured, cannot reconfigure [ 87.245596][ T6390] 8021q: VLANs not supported on wg1 [ 87.453043][ T6403] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 87.472916][ T6398] team0: No ports can be present during mode change [ 87.692857][ T6409] netlink: 'syz.3.138': attribute type 1 has an invalid length. [ 87.693232][ T6411] netlink: 'syz.1.139': attribute type 13 has an invalid length. [ 87.778479][ T6415] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 87.779612][ T6411] veth0_macvtap: left promiscuous mode [ 87.803270][ T6415] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 87.827530][ T6411] macvtap0: entered allmulticast mode [ 87.840460][ T6411] macvtap0: refused to change device tx_queue_len [ 87.853205][ T6414] syzkaller1: entered promiscuous mode [ 87.862587][ T6414] syzkaller1: entered allmulticast mode [ 88.231704][ T6446] openvswitch: netlink: Message has 536 unknown bytes. [ 88.246276][ T6446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.278952][ T6446] netlink: 'syz.0.150': attribute type 6 has an invalid length. [ 88.328567][ T60] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.328689][ T6446] netlink: 'syz.0.150': attribute type 6 has an invalid length. [ 88.350385][ T60] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.388430][ T60] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.410325][ T6454] netlink: 'syz.1.153': attribute type 2 has an invalid length. [ 88.427503][ T60] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.602543][ T6460] syzkaller0: entered promiscuous mode [ 88.608209][ T6460] syzkaller0: entered allmulticast mode [ 88.912039][ T6479] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 89.126940][ T6490] __nla_validate_parse: 18 callbacks suppressed [ 89.126971][ T6490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.165'. [ 89.260251][ T6498] netlink: 14 bytes leftover after parsing attributes in process `syz.2.166'. [ 89.320272][ T6502] sctp: [Deprecated]: syz.0.168 (pid 6502) Use of int in maxseg socket option. [ 89.320272][ T6502] Use struct sctp_assoc_value instead [ 89.348325][ T6503] netlink: 64 bytes leftover after parsing attributes in process `syz.3.169'. [ 89.374851][ T6503] netlink: 40 bytes leftover after parsing attributes in process `syz.3.169'. [ 89.627675][ T6498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.689362][ T6498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.705366][ T6498] bond0 (unregistering): Released all slaves [ 90.264176][ T6546] ipvlan2: entered promiscuous mode [ 90.289581][ T6546] netlink: zone id is out of range [ 90.321332][ T6546] netlink: set zone limit has 4 unknown bytes [ 90.721322][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'. [ 90.736256][ T6577] netlink: 'syz.0.189': attribute type 3 has an invalid length. [ 90.736745][ T6576] netlink: 20 bytes leftover after parsing attributes in process `syz.2.191'. [ 90.821103][ T6576] syzkaller0: entered allmulticast mode [ 90.839433][ T6577] : renamed from hsr0 (while UP) [ 91.151736][ T6593] bridge0: port 3(syz_tun) entered blocking state [ 91.159555][ T6593] bridge0: port 3(syz_tun) entered disabled state [ 91.175253][ T6593] syz_tun: entered allmulticast mode [ 91.189584][ T6593] syz_tun: entered promiscuous mode [ 91.196045][ T6593] bridge0: port 3(syz_tun) entered blocking state [ 91.202839][ T6593] bridge0: port 3(syz_tun) entered forwarding state [ 91.242909][ T6597] IPv6: sit1: Disabled Multicast RS [ 91.265872][ T6597] sit1: entered allmulticast mode [ 91.655247][ T6630] netlink: 20 bytes leftover after parsing attributes in process `syz.1.209'. [ 91.664729][ T6630] netlink: 20 bytes leftover after parsing attributes in process `syz.1.209'. [ 91.675102][ T6630] netlink: 20 bytes leftover after parsing attributes in process `syz.1.209'. [ 91.684424][ T6630] netlink: 20 bytes leftover after parsing attributes in process `syz.1.209'. [ 91.820358][ T6639] sch_fq: defrate 0 ignored. [ 92.201378][ T6664] tipc: Enabling of bearer rejected, failed to enable media [ 92.222721][ T6662] tipc: Started in network mode [ 92.230561][ T6662] tipc: Node identity 3e207a00f24d, cluster identity 4711 [ 92.239162][ T6662] tipc: Enabled bearer , priority 0 [ 92.293684][ T6661] tipc: Resetting bearer [ 92.328742][ T6674] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 93.312662][ T6713] Bluetooth: MGMT ver 1.23 [ 93.584119][ T6661] tipc: Disabling bearer [ 93.631557][ T43] tipc: Node number set to 3429726720 [ 93.923919][ T6733] netlink: 'syz.0.234': attribute type 20 has an invalid length. [ 94.128540][ T6733] netlink: 'syz.0.234': attribute type 20 has an invalid length. [ 94.139322][ T984] IPVS: starting estimator thread 0... [ 94.145983][ T6751] __nla_validate_parse: 36 callbacks suppressed [ 94.146000][ T6751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'. [ 94.199022][ T6760] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 94.256436][ T6757] IPVS: using max 28 ests per chain, 67200 per kthread [ 94.373566][ T6768] netlink: 'syz.4.243': attribute type 29 has an invalid length. [ 94.401930][ T6765] netlink: 'syz.4.243': attribute type 29 has an invalid length. [ 94.405985][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.245'. [ 94.496290][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.245'. [ 94.505174][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.245'. [ 94.719006][ T6784] syzkaller1: entered promiscuous mode [ 94.724515][ T6784] syzkaller1: entered allmulticast mode [ 94.760263][ T6794] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1, syncid = 4, id = 0 [ 94.843871][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.251'. [ 94.972794][ T6792] bond2: option arp_all_targets: invalid value (18446744073709551613) [ 95.039375][ T6792] bond2 (unregistering): Released all slaves [ 95.052329][ T6811] netlink: 232 bytes leftover after parsing attributes in process `syz.3.255'. [ 95.103192][ T6815] netlink: 20 bytes leftover after parsing attributes in process `syz.2.256'. [ 95.358230][ T6828] netlink: 'syz.2.259': attribute type 10 has an invalid length. [ 95.403763][ T6828] team0: Device ipvlan1 failed to register rx_handler [ 95.545137][ T6839] netlink: 48 bytes leftover after parsing attributes in process `syz.4.264'. [ 95.567866][ T6843] netlink: 36 bytes leftover after parsing attributes in process `syz.1.265'. [ 95.899364][ T6873] netlink: 11 bytes leftover after parsing attributes in process `syz.2.273'. [ 95.914223][ T6863] netlink: 'syz.4.270': attribute type 24 has an invalid length. [ 96.914976][ T6941] dvmrp0: entered allmulticast mode [ 97.361584][ T6963] Bluetooth: MGMT ver 1.23 [ 97.579087][ T6972] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 97.745673][ T6989] gtp0: entered promiscuous mode [ 97.751046][ T6989] gtp0: entered allmulticast mode [ 97.945511][ T6998] syz.3.302: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 97.969370][ T6998] CPU: 1 UID: 0 PID: 6998 Comm: syz.3.302 Not tainted syzkaller #0 PREEMPT(full) [ 97.969401][ T6998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.969416][ T6998] Call Trace: [ 97.969422][ T6998] [ 97.969429][ T6998] dump_stack_lvl+0x189/0x250 [ 97.969465][ T6998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.969486][ T6998] ? __pfx__printk+0x10/0x10 [ 97.969502][ T6998] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 97.969520][ T6998] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 97.969542][ T6998] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 97.969564][ T6998] warn_alloc+0x214/0x310 [ 97.969590][ T6998] ? __pfx_warn_alloc+0x10/0x10 [ 97.969620][ T6998] ? __get_vm_area_node+0x28f/0x300 [ 97.969641][ T6998] ? xskq_create+0xbf/0x170 [ 97.969665][ T6998] __vmalloc_node_range_noprof+0x690/0x12d0 [ 97.969717][ T6998] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 97.969739][ T6998] ? __kasan_kmalloc+0x93/0xb0 [ 97.969767][ T6998] vmalloc_user_noprof+0xad/0xf0 [ 97.969788][ T6998] ? xskq_create+0xbf/0x170 [ 97.969810][ T6998] xskq_create+0xbf/0x170 [ 97.969834][ T6998] xsk_init_queue+0xb0/0x110 [ 97.969857][ T6998] xsk_setsockopt+0x57b/0x8d0 [ 97.969878][ T6998] ? __pfx_xsk_setsockopt+0x10/0x10 [ 97.969900][ T6998] ? __pfx_aa_sk_perm+0x10/0x10 [ 97.969924][ T6998] ? aa_sock_opt_perm+0xff/0x1b0 [ 97.969950][ T6998] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 97.969966][ T6998] ? __pfx_xsk_setsockopt+0x10/0x10 [ 97.969985][ T6998] do_sock_setsockopt+0x17c/0x1b0 [ 97.970007][ T6998] __x64_sys_setsockopt+0x13f/0x1b0 [ 97.970031][ T6998] do_syscall_64+0xfa/0xfa0 [ 97.970052][ T6998] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.970075][ T6998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.970091][ T6998] ? clear_bhb_loop+0x60/0xb0 [ 97.970112][ T6998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.970132][ T6998] RIP: 0033:0x7fc10318f6c9 [ 97.970157][ T6998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.970170][ T6998] RSP: 002b:00007fc10409f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 97.970189][ T6998] RAX: ffffffffffffffda RBX: 00007fc1033e5fa0 RCX: 00007fc10318f6c9 [ 97.970201][ T6998] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 97.970212][ T6998] RBP: 00007fc103211f91 R08: 0000000000000004 R09: 0000000000000000 [ 97.970222][ T6998] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 97.970233][ T6998] R13: 00007fc1033e6038 R14: 00007fc1033e5fa0 R15: 00007ffdd253a0e8 [ 97.970264][ T6998] [ 97.970338][ T6998] Mem-Info: [ 98.239191][ T6998] active_anon:4738 inactive_anon:0 isolated_anon:0 [ 98.239191][ T6998] active_file:2633 inactive_file:39879 isolated_file:0 [ 98.239191][ T6998] unevictable:768 dirty:93 writeback:0 [ 98.239191][ T6998] slab_reclaimable:10702 slab_unreclaimable:94555 [ 98.239191][ T6998] mapped:29040 shmem:1356 pagetables:1142 [ 98.239191][ T6998] sec_pagetables:0 bounce:0 [ 98.239191][ T6998] kernel_misc_reclaimable:0 [ 98.239191][ T6998] free:1327303 free_pcp:20441 free_cma:0 [ 98.345396][ T6998] Node 0 active_anon:19052kB inactive_anon:0kB active_file:10532kB inactive_file:159316kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116160kB dirty:372kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11896kB pagetables:4236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 98.378687][ T6998] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 98.414339][ T6998] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 98.468998][ T6998] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 98.474895][ T6998] Node 0 DMA32 free:1401216kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18952kB inactive_anon:0kB active_file:10532kB inactive_file:159316kB unevictable:1536kB writepending:372kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:61228kB local_pcp:32304kB free_cma:0kB [ 98.527212][ T6998] lowmem_reserve[]: 0 0 0 0 0 [ 98.531974][ T6998] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 98.564980][ T6998] lowmem_reserve[]: 0 0 0 0 0 [ 98.571145][ T6998] Node 1 Normal free:3892636kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21120kB local_pcp:12128kB free_cma:0kB [ 98.605793][ T6998] lowmem_reserve[]: 0 0 0 0 0 [ 98.610598][ T6998] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 98.631488][ T6998] Node 0 DMA32: 741*4kB (UME) 137*8kB (UME) 27*16kB (UM) 328*32kB (UME) 44*64kB (UME) 11*128kB (UME) 10*256kB (UM) 8*512kB (M) 7*1024kB (ME) 6*2048kB (UM) 331*4096kB (M) = 1401100kB [ 98.666208][ T6998] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 98.678913][ T6998] Node 1 Normal: 187*4kB (UME) 60*8kB (UME) 55*16kB (UME) 75*32kB (UME) 26*64kB (UME) 7*128kB (UME) 4*256kB (ME) 3*512kB (ME) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3892636kB [ 98.709869][ T6998] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 98.719824][ T6998] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 98.729486][ T6998] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 98.739656][ T6998] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 98.782315][ T6998] 43864 total pagecache pages [ 98.802790][ T6998] 0 pages in swap cache [ 98.807398][ T6998] Free swap = 124996kB [ 98.822301][ T6998] Total swap = 124996kB [ 98.882536][ T6998] 2097051 pages RAM [ 98.914223][ T6998] 0 pages HighMem/MovableOnly [ 98.933815][ T6998] 424119 pages reserved [ 98.969894][ T6998] 0 pages cma reserved [ 99.250369][ T7048] __nla_validate_parse: 10 callbacks suppressed [ 99.250386][ T7048] netlink: 64 bytes leftover after parsing attributes in process `syz.0.312'. [ 99.482453][ T7072] netlink: 'syz.4.322': attribute type 1 has an invalid length. [ 99.526024][ T7072] netlink: 'syz.4.322': attribute type 1 has an invalid length. [ 99.533966][ T7072] netlink: 'syz.4.322': attribute type 1 has an invalid length. [ 99.556167][ T7072] netlink: 'syz.4.322': attribute type 2 has an invalid length. [ 99.580125][ T7072] netlink: 76 bytes leftover after parsing attributes in process `syz.4.322'. [ 99.615019][ T7080] delete_channel: no stack [ 99.894371][ T7098] syzkaller0: entered promiscuous mode [ 99.910795][ T7098] syzkaller0: entered allmulticast mode [ 100.199205][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.336'. [ 100.237335][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.336'. [ 100.445879][ T7136] 8021q: VLANs not supported on wg0 [ 100.585829][ T7149] netlink: 'syz.0.345': attribute type 1 has an invalid length. [ 100.610885][ T7149] netlink: 224 bytes leftover after parsing attributes in process `syz.0.345'. [ 100.679795][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.345'. [ 100.707666][ T7156] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 100.890997][ T7164] dvmrp6: entered allmulticast mode [ 101.049558][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.354'. [ 101.100972][ T7183] sctp: [Deprecated]: syz.3.355 (pid 7183) Use of int in maxseg socket option. [ 101.100972][ T7183] Use struct sctp_assoc_value instead [ 101.112339][ T7180] bond0: Invalid ad_actor_system MAC address. [ 101.164950][ T7180] bond0: option ad_actor_system: invalid value (1) [ 101.195725][ T7180] bond0 (unregistering): Released all slaves [ 101.255702][ T7201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 101.275938][ T7199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.359'. [ 101.509431][ T7219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 101.620295][ T7225] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.360'. [ 101.718258][ T7231] netlink: 'syz.1.367': attribute type 21 has an invalid length. [ 101.979951][ T7249] x_tables: duplicate underflow at hook 1 [ 102.017085][ T7223] bridge0: port 3(syz_tun) entered disabled state [ 102.056694][ T7223] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.064545][ T7223] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.378620][ T7223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.402835][ T7223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.809492][ T7235] tipc: Enabling of bearer rejected, failed to enable media [ 102.825397][ T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.845491][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.887037][ T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.916816][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.925732][ T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.983214][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.994259][ T7278] netlink: 'syz.3.373': attribute type 1 has an invalid length. [ 103.016519][ T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.026369][ T7278] netlink: 'syz.3.373': attribute type 2 has an invalid length. [ 103.037879][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.045928][ T7278] netlink: 'syz.3.373': attribute type 1 has an invalid length. [ 103.127807][ T7290] netlink: 'syz.4.377': attribute type 83 has an invalid length. [ 103.153421][ T7291] netlink: 'syz.1.375': attribute type 24 has an invalid length. [ 103.415535][ T7309] netlink: del zone limit has 4 unknown bytes [ 103.748746][ T7333] netlink: 'syz.0.389': attribute type 7 has an invalid length. [ 103.752176][ T7332] netlink: 'syz.0.389': attribute type 7 has an invalid length. [ 104.341417][ T7342] netlink: 'syz.0.392': attribute type 1 has an invalid length. [ 104.472364][ T7350] __nla_validate_parse: 7 callbacks suppressed [ 104.472381][ T7350] netlink: 60 bytes leftover after parsing attributes in process `syz.2.394'. [ 104.508443][ T7352] pimreg: entered allmulticast mode [ 104.587283][ T7357] netlink: 'syz.0.397': attribute type 19 has an invalid length. [ 104.646289][ T7362] syzkaller1: entered promiscuous mode [ 104.676982][ T7362] syzkaller1: entered allmulticast mode [ 104.925462][ T7383] ieee802154 phy0 wpan0: encryption failed: -22 [ 105.192935][ T7395] bond1: (slave bridge3): making interface the new active one [ 105.228716][ T7395] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 105.682000][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.417'. [ 105.914757][ T7434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.417'. [ 106.082545][ T7417] bridge0: port 1(syz_tun) entered blocking state [ 106.126276][ T7417] bridge0: port 1(syz_tun) entered disabled state [ 106.206434][ T7417] syz_tun: entered allmulticast mode [ 106.241367][ T7417] syz_tun: entered promiscuous mode [ 106.284462][ T7417] bridge0: port 1(syz_tun) entered blocking state [ 106.291078][ T7417] bridge0: port 1(syz_tun) entered forwarding state [ 106.368520][ T7443] batman_adv: batadv0: Adding interface: dummy0 [ 106.374923][ T7443] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.442720][ T7443] batman_adv: batadv0: Interface activated: dummy0 [ 106.805123][ T7482] bond2: Unable to set down delay as MII monitoring is disabled [ 106.830547][ T7482] bond2 (unregistering): Released all slaves [ 107.020403][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.432'. [ 107.024680][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.434'. [ 107.111174][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'. [ 107.154948][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.436'. [ 107.201472][ T7531] delete_channel: no stack [ 107.635450][ T7562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.447'. [ 107.690954][ T7569] ip6t_srh: unknown srh match flags 5F28 [ 107.991454][ T7591] Illegal XDP return value 1025 on prog (id 136) dev syz_tun, expect packet loss! [ 108.112081][ T7600] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.188253][ T7605] netlink: 10 bytes leftover after parsing attributes in process `syz.2.458'. [ 108.274989][ T7604] validate_nla: 1 callbacks suppressed [ 108.275007][ T7604] netlink: 'syz.1.459': attribute type 58 has an invalid length. [ 108.288928][ T7604] netlink: 20 bytes leftover after parsing attributes in process `syz.1.459'. [ 108.383657][ T7610] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 108.390782][ T7267] IPVS: starting estimator thread 0... [ 108.487772][ T7612] IPVS: using max 32 ests per chain, 76800 per kthread [ 108.556202][ T7620] bond2 (unregistering): Released all slaves [ 108.572805][ T7624] netlink: 'syz.4.462': attribute type 1 has an invalid length. [ 108.616233][ T7624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.720900][ T7629] bridge0: port 3(syz_tun) entered blocking state [ 108.727597][ T7629] bridge0: port 3(syz_tun) entered forwarding state [ 108.765549][ T7629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.776303][ T7629] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.789763][ T7629] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.856005][ T7639] veth1_to_bond: entered allmulticast mode [ 108.885999][ T7639] bond0: (slave bond_slave_1): Releasing backup interface [ 108.912830][ T7639] veth1_to_bond (unregistering): left allmulticast mode [ 109.239473][ T7663] bond1: entered promiscuous mode [ 109.244798][ T7663] bond1: entered allmulticast mode [ 109.250524][ T7663] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.312448][ T7667] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.656604][ T7683] 8021q: adding VLAN 0 to HW filter on device bond2 [ 109.825998][ T7710] __nla_validate_parse: 10 callbacks suppressed [ 109.826016][ T7710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.489'. [ 110.064766][ T7723] netlink: 24 bytes leftover after parsing attributes in process `syz.1.494'. [ 110.094121][ T7723] netlink: 24 bytes leftover after parsing attributes in process `syz.1.494'. [ 110.153858][ T7729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.272710][ T7742] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 110.436739][ T7754] vlan0: entered promiscuous mode [ 110.445824][ T7748] netlink: 'syz.3.501': attribute type 4 has an invalid length. [ 110.520661][ T7754] can: request_module (can-proto-0) failed. [ 110.608254][ T7767] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 110.710611][ T7770] netlink: 44 bytes leftover after parsing attributes in process `syz.4.509'. [ 110.767654][ T7773] tipc: Started in network mode [ 110.777572][ T7773] tipc: Node identity 4, cluster identity 4711 [ 110.800212][ T7773] tipc: Node number set to 4 [ 110.962747][ T7792] delete_channel: no stack [ 111.174178][ T3511] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.181276][ T7817] netlink: 20 bytes leftover after parsing attributes in process `syz.0.522'. [ 111.199899][ T3511] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.214894][ T3511] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.217661][ T7817] netlink: 20 bytes leftover after parsing attributes in process `syz.0.522'. [ 111.314039][ T7804] netlink: 830 bytes leftover after parsing attributes in process `syz.2.519'. [ 111.334178][ T3511] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.371856][ T7827] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 111.381479][ T7827] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 111.835824][ T7864] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20000 [ 112.045704][ T7873] team0: No ports can be present during mode change [ 112.513538][ T7900] bond0: entered promiscuous mode [ 112.519535][ T7900] bond0: entered allmulticast mode [ 112.525228][ T7900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.553851][ T7903] netlink: 40 bytes leftover after parsing attributes in process `syz.3.544'. [ 112.650790][ T7910] netlink: 28 bytes leftover after parsing attributes in process `syz.2.546'. [ 132.819807][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.826318][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.392397][ T7929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.553'. [ 141.529367][ T7936] SET target dimension over the limit! [ 141.591860][ T7938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.557'. [ 141.601557][ T7940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.557'. [ 141.616424][ T7938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.557'. [ 141.662510][ T7940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.557'. [ 141.773218][ T7949] netlink: 4964 bytes leftover after parsing attributes in process `syz.1.560'. [ 141.836451][ T7959] netlink: 'syz.1.560': attribute type 3 has an invalid length. [ 141.847591][ T7949] openvswitch: netlink: Flow key attr not present in new flow. [ 142.233494][ T7988] netlink: 56 bytes leftover after parsing attributes in process `syz.1.568'. [ 142.264892][ T7990] netlink: 'syz.0.572': attribute type 1 has an invalid length. [ 142.476842][ T7996] bond3: (slave geneve2): making interface the new active one [ 142.494372][ T7996] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 142.512297][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 142.546601][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 142.555446][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 142.595505][ T8014] netlink: 16 bytes leftover after parsing attributes in process `syz.1.577'. [ 142.638011][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 142.678613][ T8014] netlink: 'syz.1.577': attribute type 1 has an invalid length. [ 142.812812][ T8027] ip6gre1: entered allmulticast mode [ 142.843850][ T8031] netlink: 16 bytes leftover after parsing attributes in process `syz.2.584'. [ 142.879787][ T8031] netlink: 44 bytes leftover after parsing attributes in process `syz.2.584'. [ 142.924685][ T8035] netlink: 'syz.0.587': attribute type 10 has an invalid length. [ 142.942299][ T8035] bridge0: port 3(syz_tun) entered disabled state [ 142.976660][ T8035] bridge0: port 3(syz_tun) entered blocking state [ 142.983295][ T8035] bridge0: port 3(syz_tun) entered forwarding state [ 143.023589][ T8035] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 143.099398][ T8044] netlink: 'syz.1.590': attribute type 4 has an invalid length. [ 143.246778][ T8047] bridge_slave_1: left allmulticast mode [ 143.252590][ T8047] bridge_slave_1: left promiscuous mode [ 143.266338][ T8047] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.292858][ T8047] bridge_slave_0: left allmulticast mode [ 143.306165][ T8047] bridge_slave_0: left promiscuous mode [ 143.317007][ T8047] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.032159][ T8088] netlink: 'syz.1.605': attribute type 1 has an invalid length. [ 144.295783][ T8100] macvlan2: entered promiscuous mode [ 144.303062][ T8100] macvlan2: entered allmulticast mode [ 144.312604][ T8100] bond4: (slave macvlan2): Opening slave failed [ 144.357068][ T8108] netlink: 'syz.3.611': attribute type 39 has an invalid length. [ 144.711916][ T8121] syzkaller0: entered promiscuous mode [ 144.727698][ T8121] syzkaller0: entered allmulticast mode [ 144.899653][ T8138] netlink: 'syz.0.621': attribute type 8 has an invalid length. [ 145.862461][ T8146] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 145.868341][ T8137] geneve3: entered promiscuous mode [ 145.881955][ T8137] geneve3: entered allmulticast mode [ 145.898850][ T7456] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 145.930944][ T7456] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 145.998893][ T7456] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 146.020894][ T7456] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 146.071721][ T7469] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.086877][ T7469] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.104460][ T7469] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.116669][ T7469] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.599521][ T8220] netlink: 'syz.3.643': attribute type 1 has an invalid length. [ 146.607751][ T8220] netlink: 'syz.3.643': attribute type 1 has an invalid length. [ 146.765241][ T8227] __nla_validate_parse: 14 callbacks suppressed [ 146.765258][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.648'. [ 146.972188][ T8247] syzkaller1: entered promiscuous mode [ 146.980975][ T8247] syzkaller1: entered allmulticast mode [ 147.102210][ T8260] netlink: 'syz.2.655': attribute type 19 has an invalid length. [ 147.181655][ T8263] syz.1.656: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 147.219087][ T8263] CPU: 1 UID: 0 PID: 8263 Comm: syz.1.656 Not tainted syzkaller #0 PREEMPT(full) [ 147.219114][ T8263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 147.219126][ T8263] Call Trace: [ 147.219133][ T8263] [ 147.219142][ T8263] dump_stack_lvl+0x189/0x250 [ 147.219175][ T8263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.219199][ T8263] ? __pfx__printk+0x10/0x10 [ 147.219219][ T8263] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 147.219243][ T8263] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 147.219269][ T8263] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 147.219294][ T8263] warn_alloc+0x214/0x310 [ 147.219320][ T8263] ? stack_depot_save_flags+0x40/0x860 [ 147.219350][ T8263] ? __pfx_warn_alloc+0x10/0x10 [ 147.219378][ T8263] ? kasan_save_track+0x3e/0x80 [ 147.219401][ T8263] ? __kasan_kmalloc+0x93/0xb0 [ 147.219426][ T8263] ? xsk_setsockopt+0x4dc/0x8d0 [ 147.219445][ T8263] ? do_sock_setsockopt+0x17c/0x1b0 [ 147.219463][ T8263] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 147.219479][ T8263] ? do_syscall_64+0xfa/0xfa0 [ 147.219501][ T8263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.219535][ T8263] __vmalloc_node_range_noprof+0x125/0x12d0 [ 147.219593][ T8263] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 147.219622][ T8263] ? __kasan_kmalloc+0x93/0xb0 [ 147.219653][ T8263] vmalloc_user_noprof+0xad/0xf0 [ 147.219678][ T8263] ? xskq_create+0xbf/0x170 [ 147.219701][ T8263] xskq_create+0xbf/0x170 [ 147.219727][ T8263] xsk_init_queue+0xb0/0x110 [ 147.219752][ T8263] xsk_setsockopt+0x4dc/0x8d0 [ 147.219776][ T8263] ? __pfx_xsk_setsockopt+0x10/0x10 [ 147.219801][ T8263] ? __pfx_aa_sk_perm+0x10/0x10 [ 147.219827][ T8263] ? aa_sock_opt_perm+0xff/0x1b0 [ 147.219856][ T8263] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 147.219873][ T8263] ? __pfx_xsk_setsockopt+0x10/0x10 [ 147.219896][ T8263] do_sock_setsockopt+0x17c/0x1b0 [ 147.219919][ T8263] __x64_sys_setsockopt+0x13f/0x1b0 [ 147.219942][ T8263] do_syscall_64+0xfa/0xfa0 [ 147.219963][ T8263] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.219985][ T8263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.220002][ T8263] ? clear_bhb_loop+0x60/0xb0 [ 147.220024][ T8263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.220042][ T8263] RIP: 0033:0x7f5d0d98f6c9 [ 147.220059][ T8263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.220073][ T8263] RSP: 002b:00007f5d0e7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 147.220092][ T8263] RAX: ffffffffffffffda RBX: 00007f5d0dbe5fa0 RCX: 00007f5d0d98f6c9 [ 147.220106][ T8263] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 147.220117][ T8263] RBP: 00007f5d0da11f91 R08: 0000000000000004 R09: 0000000000000000 [ 147.220128][ T8263] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.220140][ T8263] R13: 00007f5d0dbe6038 R14: 00007f5d0dbe5fa0 R15: 00007ffe77b1fba8 [ 147.220171][ T8263] [ 147.220179][ T8263] Mem-Info: [ 147.303557][ T8270] netlink: 'syz.1.656': attribute type 8 has an invalid length. [ 147.345042][ T8263] active_anon:4625 inactive_anon:0 isolated_anon:0 [ 147.345042][ T8263] active_file:2633 inactive_file:39894 isolated_file:0 [ 147.345042][ T8263] unevictable:768 dirty:44 writeback:0 [ 147.345042][ T8263] slab_reclaimable:10606 slab_unreclaimable:95651 [ 147.345042][ T8263] mapped:28963 shmem:1356 pagetables:1081 [ 147.345042][ T8263] sec_pagetables:0 bounce:0 [ 147.345042][ T8263] kernel_misc_reclaimable:0 [ 147.345042][ T8263] free:1331619 free_pcp:15381 free_cma:0 [ 147.416333][ T8272] tipc: Enabling of bearer rejected, failed to enable media [ 147.636219][ T8263] Node 0 active_anon:18800kB inactive_anon:0kB active_file:10532kB inactive_file:159376kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115852kB dirty:172kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12508kB pagetables:4092kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 147.699643][ T8263] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 147.735627][ T8291] netlink: 48 bytes leftover after parsing attributes in process `syz.3.664'. [ 147.752858][ T8263] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 147.753594][ T8292] netlink: 'syz.0.663': attribute type 33 has an invalid length. [ 147.787498][ T8263] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 147.813933][ T8263] Node 0 DMA32 free:1417412kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18400kB inactive_anon:0kB active_file:10532kB inactive_file:159376kB unevictable:1536kB writepending:172kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:42184kB local_pcp:21584kB free_cma:0kB [ 147.848216][ T8263] lowmem_reserve[]: 0 0 0 0 0 [ 147.876103][ T8263] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 147.887157][ T8292] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 147.905706][ T8263] lowmem_reserve[]: 0 0 0 0 0 [ 147.924307][ T8263] Node 1 Normal free:3893404kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20448kB local_pcp:8512kB free_cma:0kB [ 147.957256][ T8263] lowmem_reserve[]: 0 0 0 0 0 [ 147.962222][ T8263] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 147.973204][ T8292] bond5 (unregistering): Released all slaves [ 147.977762][ T8263] Node 0 DMA32: 1692*4kB (UM) 607*8kB (UME) 158*16kB (UME) 1108*32kB (UME) 241*64kB (UME) 48*128kB (UME) 9*256kB (UME) 5*512kB (ME) 6*1024kB (ME) 6*2048kB (UME) 323*4096kB (M) = 1417480kB [ 148.000052][ T8263] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 148.016401][ T8263] Node 1 Normal: 187*4kB (UME) 60*8kB (UME) 55*16kB (UME) 89*32kB (UME) 27*64kB (UME) 9*128kB (UME) 4*256kB (ME) 3*512kB (ME) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3893404kB [ 148.019732][ T8304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.666'. [ 148.036544][ T8263] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 148.053216][ T8263] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 148.062645][ T8263] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 148.079598][ T8263] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 148.090156][ T8263] 43879 total pagecache pages [ 148.094850][ T8263] 0 pages in swap cache [ 148.100497][ T8263] Free swap = 124996kB [ 148.104666][ T8263] Total swap = 124996kB [ 148.136165][ T8263] 2097051 pages RAM [ 148.140076][ T8263] 0 pages HighMem/MovableOnly [ 148.160131][ T8263] 424119 pages reserved [ 148.164335][ T8263] 0 pages cma reserved [ 148.168834][ T8306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.670'. [ 148.185293][ T8310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.669'. [ 148.195530][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.670'. [ 148.235890][ T8306] veth0_macvtap: left promiscuous mode [ 148.428127][ T8327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.675'. [ 148.641727][ T8340] netlink: 'syz.4.679': attribute type 13 has an invalid length. [ 148.667157][ T8340] gretap0: refused to change device tx_queue_len [ 148.673950][ T8340] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 148.701204][ T8347] netlink: 'syz.2.683': attribute type 1 has an invalid length. [ 148.750101][ T8347] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.852296][ T8354] bond1: (slave veth3): Enslaving as an active interface with a down link [ 148.878936][ T8347] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 148.910054][ T8358] netlink: 40 bytes leftover after parsing attributes in process `syz.4.685'. [ 148.960222][ T8364] netlink: 40 bytes leftover after parsing attributes in process `syz.4.685'. [ 148.976975][ T8367] tc_dump_action: action bad kind [ 149.004293][ T8368] tc_dump_action: action bad kind [ 149.069821][ T8372] netlink: 40 bytes leftover after parsing attributes in process `syz.4.688'. [ 149.361734][ T8393] bond1: option mode: invalid value (133) [ 149.386555][ T8393] bond1 (unregistering): Released all slaves [ 149.416773][ T8402] FAULT_INJECTION: forcing a failure. [ 149.416773][ T8402] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 149.430684][ T8402] CPU: 1 UID: 0 PID: 8402 Comm: syz.0.699 Not tainted syzkaller #0 PREEMPT(full) [ 149.430705][ T8402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 149.430714][ T8402] Call Trace: [ 149.430721][ T8402] [ 149.430728][ T8402] dump_stack_lvl+0x189/0x250 [ 149.430753][ T8402] ? __pfx____ratelimit+0x10/0x10 [ 149.430773][ T8402] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.430789][ T8402] ? __pfx__printk+0x10/0x10 [ 149.430804][ T8402] ? __might_fault+0xb0/0x130 [ 149.430835][ T8402] should_fail_ex+0x414/0x560 [ 149.430860][ T8402] _copy_from_user+0x2d/0xb0 [ 149.430877][ T8402] ___sys_sendmsg+0x158/0x2a0 [ 149.430893][ T8402] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.430938][ T8402] ? __fget_files+0x2a/0x420 [ 149.430951][ T8402] ? __fget_files+0x3a0/0x420 [ 149.430975][ T8402] __x64_sys_sendmsg+0x19b/0x260 [ 149.430996][ T8402] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 149.431022][ T8402] ? __pfx_ksys_write+0x10/0x10 [ 149.431046][ T8402] ? do_syscall_64+0xbe/0xfa0 [ 149.431082][ T8402] do_syscall_64+0xfa/0xfa0 [ 149.431103][ T8402] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.431124][ T8402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.431140][ T8402] ? clear_bhb_loop+0x60/0xb0 [ 149.431159][ T8402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.431174][ T8402] RIP: 0033:0x7fad2df8f6c9 [ 149.431189][ T8402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.431202][ T8402] RSP: 002b:00007fad2ee9a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.431219][ T8402] RAX: ffffffffffffffda RBX: 00007fad2e1e5fa0 RCX: 00007fad2df8f6c9 [ 149.431231][ T8402] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 149.431240][ T8402] RBP: 00007fad2ee9a090 R08: 0000000000000000 R09: 0000000000000000 [ 149.431250][ T8402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.431259][ T8402] R13: 00007fad2e1e6038 R14: 00007fad2e1e5fa0 R15: 00007ffcb4be4008 [ 149.431287][ T8402] [ 149.648533][ T8396] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 149.733409][ T8387] delete_channel: no stack [ 149.789059][ T8403] syzkaller1: entered promiscuous mode [ 149.795111][ T8403] syzkaller1: entered allmulticast mode [ 149.848060][ T8414] netlink: 'syz.3.703': attribute type 3 has an invalid length. [ 149.855582][ T8415] af_packet: tpacket_rcv: packet too big, clamped from 104 to 4294967272. macoff=96 [ 150.250759][ T8410] syzkaller0: entered promiscuous mode [ 150.269622][ T8410] syzkaller0: entered allmulticast mode [ 150.552601][ T8464] netlink: 'syz.2.716': attribute type 2 has an invalid length. [ 151.381505][ T8464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.419377][ T8476] sctp: [Deprecated]: syz.3.717 (pid 8476) Use of int in max_burst socket option deprecated. [ 151.419377][ T8476] Use struct sctp_assoc_value instead [ 151.435589][ T8477] sctp: [Deprecated]: syz.3.717 (pid 8477) Use of int in max_burst socket option deprecated. [ 151.435589][ T8477] Use struct sctp_assoc_value instead [ 151.437766][ T8464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.724879][ T8492] netlink: 'syz.1.721': attribute type 1 has an invalid length. [ 151.790085][ T8492] bond1: (slave bridge1): making interface the new active one [ 151.800987][ T8492] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 151.815419][ T8487] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.824040][ T8487] bridge_slave_1: left allmulticast mode [ 151.830866][ T8487] bridge_slave_1: left promiscuous mode [ 151.836881][ T8487] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.850648][ T8487] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 151.930703][ T8500] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 152.229795][ T8522] sctp: [Deprecated]: syz.1.728 (pid 8522) Use of int in maxseg socket option. [ 152.229795][ T8522] Use struct sctp_assoc_value instead [ 152.379760][ T8480] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 152.385967][ T8480] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 152.464203][ T8480] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 152.469013][ T8534] __nla_validate_parse: 6 callbacks suppressed [ 152.469028][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.731'. [ 152.516606][ T8480] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 152.662609][ T8480] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 152.686113][ T8480] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 152.759825][ T8480] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 152.775999][ T8480] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 152.834215][ T8480] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 152.856641][ T8480] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 153.119248][ T8574] netlink: 28 bytes leftover after parsing attributes in process `syz.2.737'. [ 153.256415][ T8582] FAULT_INJECTION: forcing a failure. [ 153.256415][ T8582] name failslab, interval 1, probability 0, space 0, times 1 [ 153.296432][ T8582] CPU: 0 UID: 0 PID: 8582 Comm: syz.1.739 Not tainted syzkaller #0 PREEMPT(full) [ 153.296457][ T8582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 153.296466][ T8582] Call Trace: [ 153.296473][ T8582] [ 153.296481][ T8582] dump_stack_lvl+0x189/0x250 [ 153.296507][ T8582] ? __pfx____ratelimit+0x10/0x10 [ 153.296530][ T8582] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.296551][ T8582] ? __pfx__printk+0x10/0x10 [ 153.296574][ T8582] ? __lock_acquire+0xab9/0xd20 [ 153.296599][ T8582] should_fail_ex+0x414/0x560 [ 153.296628][ T8582] should_failslab+0xa8/0x100 [ 153.296647][ T8582] kmem_cache_alloc_noprof+0x74/0x6e0 [ 153.296670][ T8582] ? skb_clone+0x212/0x3a0 [ 153.296703][ T8582] skb_clone+0x212/0x3a0 [ 153.296726][ T8582] __netlink_deliver_tap+0x404/0x850 [ 153.296756][ T8582] ? netlink_deliver_tap+0x2e/0x1b0 [ 153.296775][ T8582] netlink_deliver_tap+0x19c/0x1b0 [ 153.296793][ T8582] netlink_unicast+0x7fa/0x9e0 [ 153.296825][ T8582] ? __pfx_netlink_unicast+0x10/0x10 [ 153.296850][ T8582] ? netlink_sendmsg+0x642/0xb30 [ 153.296865][ T8582] ? skb_put+0x11b/0x210 [ 153.296885][ T8582] netlink_sendmsg+0x805/0xb30 [ 153.296912][ T8582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.296932][ T8582] ? aa_sock_msg_perm+0xf1/0x1d0 [ 153.296958][ T8582] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 153.296978][ T8582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.296996][ T8582] __sock_sendmsg+0x21c/0x270 [ 153.297022][ T8582] ____sys_sendmsg+0x505/0x830 [ 153.297047][ T8582] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.297075][ T8582] ? import_iovec+0x74/0xa0 [ 153.297100][ T8582] ___sys_sendmsg+0x21f/0x2a0 [ 153.297121][ T8582] ? __pfx____sys_sendmsg+0x10/0x10 [ 153.297178][ T8582] ? __fget_files+0x2a/0x420 [ 153.297193][ T8582] ? __fget_files+0x3a0/0x420 [ 153.297220][ T8582] __x64_sys_sendmsg+0x19b/0x260 [ 153.297241][ T8582] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 153.297270][ T8582] ? __pfx_ksys_write+0x10/0x10 [ 153.297297][ T8582] ? do_syscall_64+0xbe/0xfa0 [ 153.297323][ T8582] do_syscall_64+0xfa/0xfa0 [ 153.297343][ T8582] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.297365][ T8582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.297382][ T8582] ? clear_bhb_loop+0x60/0xb0 [ 153.297404][ T8582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.297420][ T8582] RIP: 0033:0x7f5d0d98f6c9 [ 153.297435][ T8582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.297448][ T8582] RSP: 002b:00007f5d0e7d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.297466][ T8582] RAX: ffffffffffffffda RBX: 00007f5d0dbe5fa0 RCX: 00007f5d0d98f6c9 [ 153.297479][ T8582] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 153.297489][ T8582] RBP: 00007f5d0e7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 153.297500][ T8582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.297509][ T8582] R13: 00007f5d0dbe6038 R14: 00007f5d0dbe5fa0 R15: 00007ffe77b1fba8 [ 153.297541][ T8582] [ 153.633322][ T8586] sctp: [Deprecated]: syz.2.741 (pid 8586) Use of int in max_burst socket option. [ 153.633322][ T8586] Use struct sctp_assoc_value instead [ 153.651526][ T8587] smc: net device vcan0 applied user defined pnetid SYZ1 [ 153.737512][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.742'. [ 153.993935][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.749'. [ 154.161632][ T8626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.751'. [ 154.282821][ T8632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.754'. [ 154.283490][ T8631] netlink: 24 bytes leftover after parsing attributes in process `syz.0.753'. [ 154.364399][ T8636] netlink: 'syz.1.756': attribute type 1 has an invalid length. [ 154.386807][ T8636] netlink: 'syz.1.756': attribute type 4 has an invalid length. [ 154.411535][ T8636] netlink: 9491 bytes leftover after parsing attributes in process `syz.1.756'. [ 154.729818][ T8664] netlink: 'syz.1.763': attribute type 10 has an invalid length. [ 154.749727][ T8667] atomic_op ffff888021389998 conn xmit_atomic 0000000000000000 [ 154.758086][ T8664] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 154.859218][ T8664] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 155.183879][ T8698] bridge3: entered allmulticast mode [ 155.694980][ T8732] netlink: 44 bytes leftover after parsing attributes in process `syz.2.785'. [ 155.751451][ T8740] sctp: [Deprecated]: syz.0.787 (pid 8740) Use of int in max_burst socket option. [ 155.751451][ T8740] Use struct sctp_assoc_value instead [ 155.802170][ T8740] netlink: 36 bytes leftover after parsing attributes in process `syz.0.787'. [ 156.113642][ T8756] syzkaller0: entered promiscuous mode [ 156.120961][ T8756] syzkaller0: entered allmulticast mode [ 156.572223][ T8798] blkio.reset_stats is deprecated [ 156.755023][ T8814] vxcan2: entered allmulticast mode [ 156.852778][ T8818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.049977][ T8829] bond4 (unregistering): Released all slaves [ 157.050378][ T8835] unsupported nlmsg_type 40 [ 157.212506][ T8850] netlink: 'syz.3.825': attribute type 21 has an invalid length. [ 157.724793][ T8892] __nla_validate_parse: 9 callbacks suppressed [ 157.724810][ T8892] netlink: 16 bytes leftover after parsing attributes in process `syz.4.836'. [ 157.749445][ T8892] netlink: 16 bytes leftover after parsing attributes in process `syz.4.836'. [ 157.965945][ T8906] netlink: 'syz.0.843': attribute type 30 has an invalid length. [ 158.005004][ T8906] bond5: option arp_missed_max: invalid value (0) [ 158.012559][ T8906] bond5: option arp_missed_max: allowed values 1 - 255 [ 158.023640][ T8906] bond5 (unregistering): Released all slaves [ 158.169216][ T8921] netlink: 24 bytes leftover after parsing attributes in process `syz.2.847'. [ 158.180010][ T8921] netlink: 16 bytes leftover after parsing attributes in process `syz.2.847'. [ 158.190993][ T8921] netlink: 6 bytes leftover after parsing attributes in process `syz.2.847'. [ 158.255120][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.848'. [ 158.304722][ T8931] netlink: 'syz.1.849': attribute type 1 has an invalid length. [ 158.313757][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.849'. [ 158.368669][ T8936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.849'. [ 158.424196][ T8940] netlink: 112 bytes leftover after parsing attributes in process `syz.3.852'. [ 158.619734][ T8957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.857'. [ 158.810878][ T8965] Cannot find set identified by id 0 to match [ 158.969201][ T8973] pimreg: left allmulticast mode [ 158.974270][ T8973] dvmrp6: left allmulticast mode [ 159.297396][ T8989] xt_hashlimit: size too large, truncated to 1048576 [ 159.308037][ T8990] xt_hashlimit: size too large, truncated to 1048576 [ 159.499178][ T9000] syzkaller0: entered promiscuous mode [ 159.504857][ T9000] syzkaller0: entered allmulticast mode [ 159.533956][ T8999] netlink: 'syz.3.868': attribute type 2 has an invalid length. [ 159.755437][ T9009] xt_CT: You must specify a L4 protocol and not use inversions on it [ 159.775507][ T9007] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 159.904091][ T8980] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -512 0 [ 159.935915][ T9016] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.984599][ T9020] syzkaller0: entered promiscuous mode [ 159.990358][ T9020] syzkaller0: entered allmulticast mode [ 160.207058][ T9031] x_tables: duplicate underflow at hook 1 [ 160.243487][ T9034] sctp: [Deprecated]: syz.0.883 (pid 9034) Use of int in maxseg socket option. [ 160.243487][ T9034] Use struct sctp_assoc_value instead [ 160.363323][ T9047] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 160.513251][ T9054] ieee802154 phy1 wpan1: encryption failed: -22 [ 160.756359][ T9073] 0: reclassify loop, rule prio 0, protocol 800 [ 160.945803][ T9091] netlink: 'syz.2.899': attribute type 1 has an invalid length. [ 160.956850][ T9091] netlink: 'syz.2.899': attribute type 2 has an invalid length. [ 161.625081][ T9148] bond3: entered allmulticast mode [ 161.631223][ T9148] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.638688][ T9148] bridge0: port 2(bond3) entered blocking state [ 161.645141][ T9148] bridge0: port 2(bond3) entered disabled state [ 161.654510][ T9148] bond3: entered promiscuous mode [ 161.661449][ T9148] bridge0: port 2(bond3) entered blocking state [ 161.668090][ T9148] bridge0: port 2(bond3) entered forwarding state [ 161.810527][ T9161] 0: reclassify loop, rule prio 0, protocol 800 [ 161.854072][ T9165] netlink: 'syz.2.922': attribute type 29 has an invalid length. [ 161.884198][ T9165] netlink: 'syz.2.922': attribute type 29 has an invalid length. [ 161.902874][ T9166] vlan3: entered promiscuous mode [ 161.908315][ T9166] bridge0: entered promiscuous mode [ 161.921714][ T9165] unsupported nla_type 58 [ 162.147000][ T9194] tipc: Started in network mode [ 162.154567][ T9194] tipc: Node identity a6b74ba7a378, cluster identity 4711 [ 162.174764][ T9194] tipc: Enabled bearer , priority 0 [ 162.199630][ T9194] syzkaller0: entered promiscuous mode [ 162.215118][ T9194] syzkaller0: entered allmulticast mode [ 162.243961][ T9194] tipc: Resetting bearer [ 162.258992][ T9192] tipc: Resetting bearer [ 162.281836][ T9192] tipc: Disabling bearer [ 162.308797][ T9205] tipc: Started in network mode [ 162.313869][ T9205] tipc: Node identity 3292088a7324, cluster identity 4711 [ 162.321591][ T9205] tipc: Enabled bearer , priority 0 [ 162.328890][ T9204] tipc: Enabling of bearer rejected, already enabled [ 162.342695][ T9203] tipc: Resetting bearer [ 162.356113][ T9202] tipc: Disabling bearer [ 162.504280][ T60] bridge0: port 2(bond3) entered disabled state [ 162.618883][ T9218] syzkaller0: create flow: hash 86286009 index 2 [ 162.693201][ T9226] netlink: 'syz.4.939': attribute type 10 has an invalid length. [ 162.785215][ T9228] syzkaller0: delete flow: hash 86286009 index 2 [ 162.800963][ T9226] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 164.072204][ T9270] openvswitch: netlink: Missing key (keys=40, expected=100) [ 164.188780][ T9275] netlink: 'syz.3.949': attribute type 33 has an invalid length. [ 164.251743][ T9275] __nla_validate_parse: 13 callbacks suppressed [ 164.251760][ T9275] netlink: 152 bytes leftover after parsing attributes in process `syz.3.949'. [ 164.319858][ T9288] netlink: 14 bytes leftover after parsing attributes in process `syz.1.955'. [ 164.475990][ T9299] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 164.552896][ T9294] batman_adv: batadv0: Adding interface: dummy0 [ 164.591524][ T9294] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.624954][ T9294] batman_adv: batadv0: Interface activated: dummy0 [ 164.689911][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.960'. [ 164.749403][ T9328] netlink: 'syz.0.962': attribute type 1 has an invalid length. [ 164.787854][ T9324] tipc: Enabled bearer , priority 0 [ 164.805690][ T9324] syzkaller0: entered promiscuous mode [ 164.811351][ T9324] syzkaller0: entered allmulticast mode [ 164.846811][ T9324] tipc: Resetting bearer [ 164.870324][ T9323] tipc: Resetting bearer [ 164.897911][ T9332] SET target dimension over the limit! [ 164.931904][ T9323] tipc: Disabling bearer [ 165.117476][ T9344] netlink: 'syz.0.969': attribute type 1 has an invalid length. [ 165.121373][ T9348] syz_tun: entered allmulticast mode [ 165.125153][ T9344] netlink: 'syz.0.969': attribute type 2 has an invalid length. [ 165.168203][ T9348] pimreg: entered allmulticast mode [ 165.204999][ T9346] syz_tun: left allmulticast mode [ 165.526421][ T9373] netlink: 'syz.0.977': attribute type 5 has an invalid length. [ 165.560022][ T30] audit: type=1107 audit(1762986417.934:2): pid=9374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' [ 165.560022][ T30] }|;dx]b%cAy$3ddU5ϡc[' [ 165.766682][ T9394] netlink: 388 bytes leftover after parsing attributes in process `syz.3.982'. [ 165.792217][ T9393] netlink: 16 bytes leftover after parsing attributes in process `syz.2.981'. [ 165.927193][ T9404] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.986'. [ 165.985361][ T9404] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 165.988805][ T9412] batadv_slave_0: entered promiscuous mode [ 166.003405][ T9412] batman_adv: batadv0: Adding interface: macsec1 [ 166.016297][ T9412] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.074361][ T9414] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 166.085170][ T9412] batman_adv: The newly added mac address (ee:21:01:10:00:00) already exists on: batadv_slave_0 [ 166.104795][ T9412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.128057][ T9423] netlink: 324 bytes leftover after parsing attributes in process `syz.1.992'. [ 166.140216][ T9412] batman_adv: batadv0: Interface activated: macsec1 [ 166.298797][ T9433] netlink: 20 bytes leftover after parsing attributes in process `syz.0.996'. [ 166.593866][ T9455] openvswitch: netlink: Message has 1 unknown bytes. [ 166.615063][ T9455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.710944][ T9460] bond6: option lacp_rate: invalid value (56) [ 166.722612][ T9460] bond6 (unregistering): Released all slaves [ 166.980389][ T9479] netlink: 'syz.3.1006': attribute type 30 has an invalid length. [ 167.015919][ T9479] bond4: option arp_missed_max: invalid value (0) [ 167.022546][ T9479] bond4: option arp_missed_max: allowed values 1 - 255 [ 167.031789][ T9479] bond4 (unregistering): Released all slaves [ 167.263449][ T9504] netlink: 'syz.4.1014': attribute type 1 has an invalid length. [ 167.299189][ T9504] netlink: 'syz.4.1014': attribute type 1 has an invalid length. [ 167.322226][ T9504] netlink: 'syz.4.1014': attribute type 1 has an invalid length. [ 167.358384][ T9504] netlink: 'syz.4.1014': attribute type 1 has an invalid length. [ 167.615646][ T9532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1021'. [ 167.759601][ T9547] netlink: 'syz.0.1025': attribute type 4 has an invalid length. [ 167.769172][ T9547] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1025'. [ 167.888380][ T9547] `: renamed from bond0 (while UP) [ 167.901868][ T9548] IPVS: set_ctl: invalid protocol: 152 10.1.1.2:20002 [ 167.912533][ T9548] openvswitch: netlink: Flow key attr not present in new flow. [ 168.087804][ T7267] IPVS: starting estimator thread 0... [ 168.177191][ T9573] IPVS: using max 32 ests per chain, 76800 per kthread [ 168.831562][ T9617] team0 (unregistering): Port device team_slave_0 removed [ 168.847245][ T9617] team0 (unregistering): Port device team_slave_1 removed [ 169.533150][ T9647] syzkaller0: entered promiscuous mode [ 169.568729][ T9647] syzkaller0: entered allmulticast mode [ 169.615348][ T9656] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.639156][ T9655] delete_channel: no stack [ 169.898994][ T9667] __nla_validate_parse: 5 callbacks suppressed [ 169.899013][ T9667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1063'. [ 170.084079][ T9673] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1066'. [ 170.104803][ T9673] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1066'. [ 170.301575][ T9685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.318957][ T9685] bond0: (slave rose0): Enslaving as an active interface with an up link [ 170.341810][ T9685] syzkaller0: entered promiscuous mode [ 170.349749][ T9685] syzkaller0: entered allmulticast mode [ 170.674837][ T9711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1077'. [ 170.693764][ T9711] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1077'. [ 170.703627][ T9711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1077'. [ 170.713111][ T9711] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1077'. [ 170.724757][ T9711] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1077'. [ 170.806778][ T9718] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1079'. [ 170.974539][ T9732] team0: Device gtp0 is up. Set it down before adding it as a team port [ 171.059292][ T9736] bridge0: port 4(batadv1) entered blocking state [ 171.066954][ T9736] bridge0: port 4(batadv1) entered disabled state [ 171.074144][ T9736] batadv1: entered allmulticast mode [ 171.097601][ T9736] batadv1: entered promiscuous mode [ 171.209568][ T9739] delete_channel: no stack [ 171.341830][ T9765] ip6t_srh: unknown srh invflags 4000 [ 171.402510][ T9770] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1097'. [ 171.556861][ T60] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 171.566721][ T60] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 171.600422][ T9783] tipc: Enabled bearer , priority 0 [ 171.608557][ T9783] syzkaller0: entered promiscuous mode [ 171.614470][ T9783] syzkaller0: entered allmulticast mode [ 171.631733][ T9786] validate_nla: 1 callbacks suppressed [ 171.631748][ T9785] netlink: 'syz.0.1103': attribute type 1 has an invalid length. [ 171.631749][ T9786] netlink: 'syz.0.1103': attribute type 1 has an invalid length. [ 171.673179][ T9786] bond0: entered promiscuous mode [ 171.678550][ T9786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.696000][ T9788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.702981][ T9788] bond0: (slave gre1): The slave device specified does not support setting the MAC address [ 171.713050][ T9788] bond0: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 171.724777][ T9788] bond0: (slave gre1): making interface the new active one [ 171.733244][ T9788] gre1: entered promiscuous mode [ 171.739760][ T9788] bond0: (slave gre1): Enslaving as an active interface with an up link [ 171.750598][ T9783] tipc: Resetting bearer [ 171.768572][ T9782] tipc: Resetting bearer [ 171.787510][ T7257] skbuff: skb_under_panic: text:ffffffff89d8f087 len:-1826819104 put:-1826819180 head:ffff88807aca7000 data:ffff887fe7ad7d2c tail:0x10c end:0x6c0 dev:bond0 [ 171.812994][ T7257] ------------[ cut here ]------------ [ 171.818826][ T7257] kernel BUG at net/core/skbuff.c:212! [ 171.824503][ T7257] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 171.830750][ T7257] CPU: 1 UID: 0 PID: 7257 Comm: kworker/1:9 Not tainted syzkaller #0 PREEMPT(full) [ 171.840109][ T7257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.850151][ T7257] Workqueue: mld mld_ifc_work [ 171.854822][ T7257] RIP: 0010:skb_panic+0x157/0x160 [ 171.859830][ T7257] Code: c7 e0 bb 6c 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 fe 97 f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 171.879678][ T7257] RSP: 0018:ffffc9001b15f3d8 EFLAGS: 00010286 [ 171.885729][ T7257] RAX: 0000000000000099 RBX: dffffc0000000000 RCX: 60a96aa5da676100 [ 171.893681][ T7257] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 171.901632][ T7257] RBP: 00000000000006c0 R08: 0000000000000003 R09: 0000000000000004 [ 171.909581][ T7257] R10: dffffc0000000000 R11: fffffbfff1bba680 R12: ffff88805b927790 [ 171.917532][ T7257] R13: ffff88807aca7000 R14: ffff887fe7ad7d2c R15: 000000000000010c [ 171.925485][ T7257] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 171.934390][ T7257] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 171.940953][ T7257] CR2: 00007fad2ed156c0 CR3: 0000000075ebc000 CR4: 00000000003526f0 [ 171.948916][ T7257] Call Trace: [ 171.952192][ T7257] [ 171.955113][ T7257] ? ipgre_header+0x67/0x290 [ 171.959697][ T7257] ? ipgre_header+0x67/0x290 [ 171.964272][ T7257] skb_push+0xc3/0xe0 [ 171.968247][ T7257] ipgre_header+0x67/0x290 [ 171.972661][ T7257] ? __pfx_ipgre_header+0x10/0x10 [ 171.977674][ T7257] neigh_connected_output+0x286/0x460 [ 171.983037][ T7257] ip6_finish_output2+0xfb3/0x1480 [ 171.988139][ T7257] ? __pfx_ip6_finish_output2+0x10/0x10 [ 171.993670][ T7257] ? ip6_mtu+0x7d/0x490 [ 171.997810][ T7257] ? ip6_mtu+0x38c/0x490 [ 172.002039][ T7257] ? ip6_finish_output+0x2ef/0x4e0 [ 172.007131][ T7257] ? ip6_output+0x126/0x550 [ 172.011615][ T7257] ip6_output+0x340/0x550 [ 172.015929][ T7257] NF_HOOK+0x9e/0x380 [ 172.019914][ T7257] ? NF_HOOK+0x101/0x380 [ 172.024139][ T7257] ? __pfx_NF_HOOK+0x10/0x10 [ 172.028712][ T7257] ? __pfx_dst_output+0x10/0x10 [ 172.033545][ T7257] ? icmp6_dst_alloc+0x3a5/0x420 [ 172.038466][ T7257] ? icmp6_dst_alloc+0x3a5/0x420 [ 172.043386][ T7257] mld_sendpack+0x8d4/0xe60 [ 172.047877][ T7257] ? mld_sendpack+0x1e7/0xe60 [ 172.052662][ T7257] ? __pfx_mld_sendpack+0x10/0x10 [ 172.057688][ T7257] mld_ifc_work+0x83e/0xd60 [ 172.062188][ T7257] ? _raw_spin_unlock_irq+0x23/0x50 [ 172.067389][ T7257] ? process_scheduled_works+0x9ef/0x17b0 [ 172.073110][ T7257] process_scheduled_works+0xae1/0x17b0 [ 172.078655][ T7257] ? __pfx_process_scheduled_works+0x10/0x10 [ 172.084619][ T7257] worker_thread+0x8a0/0xda0 [ 172.089200][ T7257] ? __kthread_parkme+0x7b/0x200 [ 172.094121][ T7257] kthread+0x711/0x8a0 [ 172.098177][ T7257] ? __pfx_worker_thread+0x10/0x10 [ 172.103274][ T7257] ? __pfx_kthread+0x10/0x10 [ 172.107845][ T7257] ? _raw_spin_unlock_irq+0x23/0x50 [ 172.113024][ T7257] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.118205][ T7257] ? __pfx_kthread+0x10/0x10 [ 172.122775][ T7257] ret_from_fork+0x4bc/0x870 [ 172.127354][ T7257] ? __pfx_ret_from_fork+0x10/0x10 [ 172.132449][ T7257] ? __switch_to_asm+0x39/0x70 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 172.137192][ T7257] ? __switch_to_asm+0x33/0x70 [ 172.141931][ T7257] ? __pfx_kthread+0x10/0x10 [ 172.146502][ T7257] ret_from_fork_asm+0x1a/0x30 [ 172.151248][ T7257] [ 172.154331][ T7257] Modules linked in: [ 172.158994][ T7257] ---[ end trace 0000000000000000 ]--- [ 172.266493][ T7257] RIP: 0010:skb_panic+0x157/0x160 [ 172.271565][ T7257] Code: c7 e0 bb 6c 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 fe 97 f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 172.291871][ T7257] RSP: 0018:ffffc9001b15f3d8 EFLAGS: 00010286 [ 172.298237][ T7257] RAX: 0000000000000099 RBX: dffffc0000000000 RCX: 60a96aa5da676100 [ 172.306328][ T7257] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 172.314309][ T7257] RBP: 00000000000006c0 R08: 0000000000000003 R09: 0000000000000004 [ 172.322578][ T7257] R10: dffffc0000000000 R11: fffffbfff1bba680 R12: ffff88805b927790 [ 172.330833][ T7257] R13: ffff88807aca7000 R14: ffff887fe7ad7d2c R15: 000000000000010c [ 172.338839][ T7257] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 172.348085][ T7257] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 172.354677][ T7257] CR2: 000055e0461dbf40 CR3: 000000007ebb0000 CR4: 00000000003526f0 [ 172.362681][ T7257] Kernel panic - not syncing: Fatal exception [ 172.369095][ T7257] Kernel Offset: disabled [ 172.373405][ T7257] Rebooting in 86400 seconds..