last executing test programs: 2.334529597s ago: executing program 0 (id=5281): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000140)=@raw=[@generic={0x4, 0x2, 0x8, 0x3, 0x1}, @alu={0x4, 0x0, 0xd, 0x1, 0x5, 0x4, 0x10}, @call={0x85, 0x0, 0x0, 0x53}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x959d6f127aa944c0}}, @alu={0x7, 0x0, 0xc, 0x1, 0xa, 0xc, 0x4}], &(0x7f0000000000)='GPL\x00', 0x7ff, 0x58, &(0x7f00000001c0)=""/88, 0x41100, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x4, 0x6, 0x6, 0x9}, 0x10, 0x1c831, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0x1], 0x0, 0x10, 0x2}, 0x94) (async) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000140)=@raw=[@generic={0x4, 0x2, 0x8, 0x3, 0x1}, @alu={0x4, 0x0, 0xd, 0x1, 0x5, 0x4, 0x10}, @call={0x85, 0x0, 0x0, 0x53}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x959d6f127aa944c0}}, @alu={0x7, 0x0, 0xc, 0x1, 0xa, 0xc, 0x4}], &(0x7f0000000000)='GPL\x00', 0x7ff, 0x58, &(0x7f00000001c0)=""/88, 0x41100, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x4, 0x6, 0x6, 0x9}, 0x10, 0x1c831, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0x1], 0x0, 0x10, 0x2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="2b0376f0212002001c0012800900626f6e64000000000c000280080007000000040014003500626f6e643000"/54], 0x50}, 0x1, 0x0, 0x0, 0x24048800}, 0x0) getpeername$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x200002f3, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000004c0)="76389ee8f8d9776159aa63668d3114", 0x0, 0xfc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000004c0)="76389ee8f8d9776159aa63668d3114", 0x0, 0xfc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$tipc(0x1e, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) (async) listen(0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0xe6aa0a9f27214269) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0xe6aa0a9f27214269) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r3, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000540)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x52, &(0x7f0000000600)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xc6, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="a581e4cba1fdaaaaaaaaaa1488f7534b4e6d8fd2829d67bebabb93ef271f0a191e7038843785b00d573455aba96a3c133649aa47d2f6226759b0355b4da975a5548b2557339746d6d4d243e4fb85e81c9748edd526f519b496b39d52f2129bc9f507b22ae4aba9ff086da109e190671b84042b4c7459cfa2776241eeb79c937154fd5ee33e3b29eeff31a980d2fc11383e12d7485e9fbc52e89d3d065d1a58f53f2425279bc8ccc87fab2d2462000478cf38cd24572794fafc337f6e3b"], 0x0) ioctl$SIOCGETNODEID(r5, 0x89e1, &(0x7f0000000500)={0x1}) (async) ioctl$SIOCGETNODEID(r5, 0x89e1, &(0x7f0000000500)={0x1}) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.200537876s ago: executing program 0 (id=5285): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close(r1) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x1, 0x0, 0x9}, 0x8}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, {}, {}, {0x0, 0x40000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x2, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {0x15d}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000}, {0x0, 0x0, 0x4000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff, 0x8}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x81, 0x0, 0x400}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff24}, {}, {0x0, 0x0, 0x2000000}, {0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff, 0x800}, {}, {}, {}, {0x0, 0x0, 0xd}, {0xfff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x0, 0x0, 0x2, 0x0, 0x0, 0xa}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x20040804) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000080)="accd41a9b9859f82eb828c7f10f050b2a5a948a496042fe3a7689d5a2be0f1da0647e8962aee24a135cf7dd1c337d8b65373d1831200a024b557838aede06cbbf9c1f0330720619b0a6d6e75f8af993a88a9ada8d64c08705612de698ccbfa4293f8cf5f1595298173", &(0x7f0000000100)=@tcp=r3, 0x1}, 0x20) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x303}, "c43cf3f93d83225a", "b4f6757f3dca139728ecd2e88b7fc0b0", "4ae1a5fd", "b9e13446520c6328"}, 0x28) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000000)) 2.070204467s ago: executing program 0 (id=5288): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000000)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r3 = socket$kcm(0x2, 0xd, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010023010000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x8894}, 0x0) write$nci(r2, &(0x7f0000001440)=ANY=[@ANYBLOB="0e0307050402070614c00257e421e1d6973cd60e42a98c0865c703cee501"], 0x1e) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x20, 0x4) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000000940)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}], 0x1, 0x14) shutdown(r7, 0x1) getsockopt$bt_hci(r7, 0x84, 0x6c, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) listen(r1, 0xfffffffd) close(r1) 1.917402191s ago: executing program 3 (id=5291): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x32600) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, 0x0, &(0x7f00000000c0)) 1.816583353s ago: executing program 3 (id=5293): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r1) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf25110000000800150002000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x71eff8d2059dfe60}, 0xc004) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x417, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x40000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a010400000000000000000200000048000480440001800a0001006d61746368000000340002800900010074696d65000000001c00030007682c020b7b37f27f5101007f51010049f4e34e860200eb08000240000000000900010073797a30000000000900020073797a32"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) 1.668344576s ago: executing program 4 (id=5298): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r0, 0x0, 0x12, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, 0x0, &(0x7f0000000080)) r2 = socket$inet6_sctp(0xa, 0x3, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) setsockopt(r2, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x5}, &(0x7f0000000180)=0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002000800000000000000000000003000000000200000002"], 0x0, 0x4e}, 0x28) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r6) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="f5af24bd7000000000000e00000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r8, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfd}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004884}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c000180140003"], 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x0) accept4(r2, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r10, 0x84, 0x77, &(0x7f0000000140)={r3, 0x40, 0x1, [0x6]}, &(0x7f0000000240)=0xa) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES16=r4, @ANYRES32=0x0, @ANYBLOB="04000200a24624469b492f3a03af9bf1e422137f"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1.453205266s ago: executing program 1 (id=5303): r0 = socket$inet6(0x10, 0x2, 0x6) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r4, 0x25, 0x0, @void}, 0x10) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) (async, rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async, rerun: 32) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) syz_emit_ethernet(0xe7, &(0x7f0000000300)={@link_local, @link_local, @void, {@ipv4={0x800, @generic={{0x26, 0x4, 0x3, 0x5, 0xd9, 0x64, 0x0, 0x5, 0x6, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x15}, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x53, 0x0, 0xb, [0x9, 0x2]}, @rr={0x7, 0x13, 0xf4, [@empty, @multicast1, @multicast1, @rand_addr=0x64010100]}, @end, @timestamp={0x44, 0x18, 0xb2, 0x0, 0x6, [0x1edd3d0c, 0x41, 0x2, 0xd9, 0x7]}, @timestamp={0x44, 0x20, 0x83, 0x0, 0x5, [0x9, 0x9, 0xfffffffd, 0x3, 0x4, 0xee3, 0x9]}, @cipso={0x86, 0x9, 0xffffffffffffffff, [{0x2, 0x3, '@'}]}, @timestamp={0x44, 0x4, 0xd0, 0x0, 0x7}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0xe4, 0x1, 0x2, [{@rand_addr=0x64010101, 0x1}, {@rand_addr=0x64010102, 0xf}]}]}}, "07416a0449fc124bb1fd8570a4e7d90978aac0b51a6b9b11e96a41250146a81e0215e5482cfe090a04bce9484b3421042643da2fc567ef728d03222204a8441f23"}}}}, 0x0) close(r6) (async) socket(0x23, 0x5, 0x0) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x2a) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async, rerun: 64) sendto$inet6(r0, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) (rerun: 64) 1.233795073s ago: executing program 1 (id=5304): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r2 = socket$unix(0x1, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (async, rerun: 32) r5 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000300), &(0x7f0000000380)=0x14) (async) r6 = socket$unix(0x1, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x140c, 0x200, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) 1.076111266s ago: executing program 3 (id=5305): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write(r0, &(0x7f0000002480)="58432883c72df18c10d9aa59d287b6f3596b95c6222d2ce9b4c087c0cc0c9a1fc4636a38111c27c8c16ad5db1c03a1fe0a1fd6fb8c8d1e012e21a4022ebd4342129f98cac076fb2a8a9e3be062ffdb58a359bdcd2beb151caa1160aae646d6533e3307d322cf3fa2c610f168a510a24a6bce749674e644b8fab9fe009ce6febb4febf9190a9388c333500d7ff60a66b740916246861403c78851935281d6818925e1c6d44dc8763c99920b29107f0ef2ce0002078c48ea69bedafe371822ad50c3585ce0c00e2866a77eb382a4a94c8140eade00e7cce81a18b01e2824860a08682d5f098ff2025c279a91ded1c2e68d0f765dcc0feeb118f7b2c4d0ac243f214ba6102d1f7e5855d204d3f5f533b590af39177b29e264935d637660ffda56415f003705bac18326fd036ca5866b3774d53bc948ec177f94ad43fa7654e56fd5df799454c24aa5bbcbade05473b27357093cdff40a8f1df11e951fe9c1d4cbd2afcaec315a61538511429be3ac1d5c96c49dae7fc3383d5696f81865daf7cc4fed6628e40b4b9bed2a56a1058b6bfb2213749014375e577b9ec4ead515d6ffcf06ecf73490e8e54ea3c5519765aad9f6ca082198f88d63910ecaf1442789de4fec5af0e5eabcc8cdcc4a2cd6d348c53a7fc4fc84b7a57fad068114c0c2135f9e5b7b5cc693fb7ee2d4a9eeeefcd5bbe1e04d2e79b0b565669cb708fed60dbd04cc4e5970bd688080a20d70426025404797b769225215dfa01e116625e3358c670bad99250553ff83abf0a9a9cabe2f6316b039faf317717c84358f1dfddfb4d50d1133b5d1a458dc57a536675d288a3461a5ff621ac55fa9ed7127baa0893fcb9b32c0a621fb1c2ecbc9eef27077c8253e44900e5f864a0845990268ef473c21fa2ed5bf9ceb00ffc06cd435687bf5d66fc462b4722a4dc90fce58d0c3ceae0dc1ac3e518a3388e21adaa54cd4f12fa328c3ba221fa604905f046f37de3bfe1829d1db4367373029a100339754c9d4491e60f065cb2e75c387cb4bc8bdd204142679dd07173f68b3fd1401", 0x2eb) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x1200) 1.075270535s ago: executing program 4 (id=5306): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a320007800800134000000000051005000a000000050001000600000011000300686173683a69702c6d61726b000000000000000000"], 0x58}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/uts\x00') r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x1, 0x0, 0x1}, 0x20) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000100)="831fe52d5fc7beea976640da55b159281f9f4cfee96b67bddfe2f63402a88f5b19a1f91be1781a43ef2d6e281664140a46c2db90fe263af6e2", 0x39, 0x4000, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000000, 0x0, 0x1, 0xa}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x74953000) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40080) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, 0x0, 0x0) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="0a008847bbbbbbbbbbbbaaaaaaaa8c1f86dd6d"], 0x42) writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608", 0xc1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) 1.075012602s ago: executing program 0 (id=5307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) close(r3) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x0, 0x40, 0x7fff}, @NL80211_ATTR_TXQ_LIMIT={0x0, 0x10a, 0x8}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x5}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xe7}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001340)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r7], 0x54}}, 0x800) 962.16954ms ago: executing program 1 (id=5309): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket(0x22, 0x2, 0x3) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) 879.082645ms ago: executing program 1 (id=5310): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/13, @ANYRES64], 0x0}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b22, &(0x7f0000000040)) connect$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x3ff, @mcast2, 0xf4, 0x1}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="8c000000150000082cbd7000fedbdf250a1f40c8", @ANYRES32=0x0, @ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x24044150}, 0x4000004) 835.891037ms ago: executing program 0 (id=5311): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write(r0, &(0x7f0000000640)="58432883c72df18c10d9aa59d287b6f3596b95c6222d2ce9b4c087c0cc0c9a1fc4636a38111c27c8c16ad5db1c03a1fe0a1fd6fb8c8d1e012e21a4022ebd4342129f98cac076fb2a8a9e3be062ffdb58a359bdcd2b37563ae3a39239bf46d6533e3307d322cf3fa2c610f168a510a24a6bce749674e644b87ab9fe009ce6febb4febf9190a9388c333500d7ff60a66b740916246861403c78851935281d6818925e1c6d44dc8763c99920b29107f0ef2ce0002078c48ea69bedafe371822ad50c3585ce0c00e2866a77eb382a4a94c8140eade00e7cce81a18b01e2824860a08682d5f098ff2025c279a91ded1c2e68d0f765dcc0feeb118f7b2c4d0ac243f214ba6102d1f7e5855d204d3f5f533b590af39177b29e264935d637660ffda56415f003705bac18326fd036ca5866b3774d53bc948ec177f94ad43fa7654e56fd5df799454c24aa5bbcbade05473b27357093cdff40a8f1df11e951fe9c1d4cbd2afcaec315a61538511429be3ac1d5c96c49dae7fc3383d5696f81865daf7cc4fed6628e40b4b9bed2a56a1058b6bfb2213749014375e577b9ec4ead515b6ffcf06ecf73490e8e54ea3c5519765feffffffffffffff8d63910ecaf1442789de4fec5af0e5eabcc8cdcc4a2cd6d348c53a7fc4fc84b7a57fad068114c0c2135f9e5b7b5cc693fb7ee2d4a9eeeefcd5bbe1e04d2e79b0b565669cb708fed60dbd04cc4e5970bd688080a20d70426025404797b769225215dfa01e116625e3358c670bad99250553ff83abf0a9a9cabe2f6316b039faf317717c84358f1dfddfb4d50d1133b5d1a458dc57a536675d288a3461a5ff621ac55fa9ed7127baa0893fcb9b32c0a621fb1c2ecbc9eef27077c8253e44900e5f864a0845990268ef473c21fa2ed5bf9ceb00ffc06cd435687bf5d66fc45e2963855c32b262b4722a4dc90fce58d0c3ceae0dc1ac3e518a3388e21adaa54cd4f12fa328c3ba221fa604905f046f37de3bfe1829d1db4367373029a100339754c9d4491e60f065cb2e75c387cb4bc8bdd204142679dd07173f68b3fd14015f498e99f473a65984c84ae1ade95e73cbe515859375ddf48ec5467353683d82575d46e1a9ed14ac45c408915a2bbcf8ca3c8dbc6342b6f845413063fcf35bcfeace024dadd723a1d4597c85a060209f1203cc23a88d13be5724a1da8dbd777d895efa1d876010ade630124b72e4b7e39d8d5b2304cbcb98904582fad479260861bb7da4fc8dd4a14c6e56df3b7754e8b723acd81d3c6778f6f4f1a5716a32f2948a82a722", 0x397) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 776.491113ms ago: executing program 1 (id=5312): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x101, 0xd20, 0x1}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) r6 = socket(0x11, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000200)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000300)=0xe8) r10 = socket(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r12) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r13, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {}, {0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x2f}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=@can_newroute={0x90, 0x18, 0x1, 0x70bd2c, 0x25dfdbff, {0x1d, 0x1, 0x2}, [@CGW_MOD_OR={0x15, 0x2, {{{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "cb7dd96e1dffd461"}, 0x2}}, @CGW_LIM_HOPS={0x5, 0xd, 0x72}, @CGW_MOD_SET={0x15, 0x4, {{{0x1}, 0x8, 0x1, 0x0, 0x0, "94c188e2a3a0f77a"}, 0xcb31bb1453b6f0a}}, @CGW_MOD_AND={0x15, 0x1, {{{0x0, 0x0, 0x1}, 0x3, 0x3, 0x0, 0x0, "18f4ea55ff4ff782"}, 0x3}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffffa, 0x2, 0xa}}, @CGW_DST_IF={0x8, 0xa, r5}, @CGW_FILTER={0xc, 0xb, {{0x0, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}}, @CGW_DST_IF={0x8, 0xa, r8}, @CGW_MOD_UID={0x8, 0xe, r9}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000a0}, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r14, {0x0, 0xa}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xf, [0x10, 0xe, 0x5, 0xf, 0xc, 0x3, 0x1, 0xe, 0x7, 0x0, 0xf, 0x3, 0x2, 0x8, 0x9, 0xb], 0x0, [0x0, 0x4, 0x1, 0x0, 0x9a5, 0x7, 0x26, 0xbf, 0x7, 0x0, 0x7f, 0x5, 0x800, 0x2, 0x7, 0x4], [0x3, 0x6, 0x5, 0x1, 0xfff, 0x5, 0xfffb, 0xcb, 0x37a, 0x73, 0x6, 0x9, 0x8, 0x4, 0x9, 0xbdd5]}}]}}]}, 0x8c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='workqueue_execute_end\x00', r1, 0x0, 0x4}, 0x18) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 756.366599ms ago: executing program 2 (id=5313): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x4001, 0x3, 0x2e8, 0x250, 0x0, 0x148, 0x0, 0x148, 0x250, 0x240, 0x240, 0x250, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'bridge0\x00', 'macvlan0\x00', {}, {}, 0x21}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_macvtap\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}, {0x4, 0x0, [0x0, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e24], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x4}, {0x2, 0x1}, {0x4, 0x4, 0x4}, 0x3, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 691.911829ms ago: executing program 0 (id=5314): r0 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x86, &(0x7f0000000440), 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x38, r3, 0x731, 0x0, 0x20, {0x38}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73, 0x2}}}]}, 0x38}, 0x1, 0x2}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f00070100000000fcdbdf25047c0000040000000c00018008000f"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req={0x7, 0x10001, 0x9, 0x3e}, 0x10) recvmmsg$unix(r4, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}], 0x2, 0x400122a0, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @address_reply={0x12, 0x0, 0x0, 0x400}}}}}, 0x0) recvmmsg$unix(r4, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1}}], 0x1, 0x40000100, 0x0) 633.682489ms ago: executing program 2 (id=5315): ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f00000000c0)={0x1, 0x2a5, 0x1000, &(0x7f0000001080)=""/4096}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000080)={'pim6reg1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xc}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000011) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000140)="bad330fbc9b55400040000ea0756", 0xe, 0x40040, &(0x7f00000001c0)={0x11, 0x17, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 633.183418ms ago: executing program 4 (id=5316): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 572.398971ms ago: executing program 1 (id=5317): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc81100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x20044881) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x8}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0x1c}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newtaction={0xf58, 0x30, 0x25, 0x0, 0x0, {}, [{0xf44, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x17, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf58}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=@delqdisc={0x84, 0x25, 0x200, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x15, 0x8}, {0x3, 0x5}, {0x6, 0x10}}, [@TCA_STAB={0x4}, @TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x3, 0x8000, 0xf, 0x3b20265f7ef6dc4f, 0x9, 0x4e0, 0x6}}, {0x10, 0x2, [0xfb8, 0x7, 0x6a, 0x0, 0x0, 0x304]}}, {{0x1c, 0x1, {0x48, 0x8, 0x9, 0xba, 0x2, 0x1, 0x1, 0x5}}, {0xe, 0x2, [0x2, 0x2, 0x6, 0x8, 0x10]}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4048081}, 0x48080) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f00000001c0)={r7, @in6={{0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x82e}}}, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={r7, 0xbe2b}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x20000815, &(0x7f0000b63fe4)={0xa, 0x2, 0x5, @private0}, 0x1c) 563.470335ms ago: executing program 4 (id=5318): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003bc0)=ANY=[@ANYBLOB="180000001600f1fff8ffffffffff00000a000003"], 0x18}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x4, [@enum64={0x1, 0x8, 0x0, 0x13, 0x1, 0x9, [{0x10, 0x1000, 0x5}, {0x9, 0xfffffc6b, 0x4b792f90}, {0x2, 0x8, 0xd}, {0x2, 0x7, 0xf7}, {0x3, 0xb02, 0xfffffff8}, {0x4, 0x9, 0x101}, {0xe, 0xdc35, 0xd}, {0xc, 0x3, 0x8}]}, @typedef={0x2, 0x0, 0x0, 0x8, 0x4}, @typedef={0xf, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x5f, 0x0]}}, &(0x7f00000002c0)=""/213, 0xa0, 0xd5, 0x1, 0xbb, 0x10000}, 0x28) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r2, 0x0, 0x30, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000600)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) select(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, &(0x7f0000000100)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a0500f434b9eaafdc0a00e9bfde908990817b364e51afe9c01a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9453c0eeba864400000000000000d8e5b1dc91c5499bea097700400000000000000000000000000000000000002819788d86205d947db7ad62b6e98f722ec61dc101adbfa8d0d057e307342511e1e33c25fead122ddacd0aaff826821627a99e8e9c65c5086bcb1df5ea822fb450ef904aed1c6822f05b7604ec9691e8d0c471fba901bf90dea634b2edea2e25c09fbae059aca9ace1b3baf1baf1f0a4f5f1386cd30b9f7019527f91379c1662dcb8"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x0, 0xd00, 0xf20c0000, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x57}, @val={0x8, 0x3, r8}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x10) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1401ee40b0231ddab22b0000007402c3e4c1036a0af3fa"], 0x114}], 0x1}, 0x0) 419.327615ms ago: executing program 2 (id=5319): syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000a8bc002806fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a002000090780000011187d5c9ed7eed4e6de58079eef72628000020"], 0x0) 276.478655ms ago: executing program 2 (id=5320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a000005", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50006464c1f1c51a41141a9397c6f79d970000"], 0x0) 274.8608ms ago: executing program 4 (id=5321): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x32, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004200000008001b0000000000"], 0x30}}, 0x0) 234.701762ms ago: executing program 2 (id=5322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) close(r3) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) 230.745047ms ago: executing program 4 (id=5323): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xfd, 0x3, 0x0, @loopback}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206050000000000000000000700fffe11000300686173683a69702c01000000000000000900020073797a30000000000500040000000000050005000200000005000100060000000c00078008001740000000f6"], 0x58}}, 0x0) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @multicast2}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000100)="80ff6fd9b65d8a3be56316", 0xb}, {&(0x7f0000000140)="987e24f56d36160f5e1cf9a317099dcd66d592e30214b4988af6956b9df8c0e748e1", 0x22}, {&(0x7f0000000180)="f55ee297f0936ecd378c079d843a9617236a2432d0902cb2c4de7d4eaaa45988ac2855d6a99954ff7e9307e50e3b51932604ca0d8f89b7e9d03fa5808b73f1ca74f0e37dca0cf84d54a78a3924e1004803873dc3d6104ee3a371a9522e8910f4f5753fa56899147feb2e51c5935e7ee714a521afd38bc0dee459f7433bc76a25afc08dd6250762", 0x87}, {&(0x7f0000000240)}, {&(0x7f0000000340)="7cd665bdce476d508dfb1ec2545d257cba34b24cd06a564d1593cdf72408c8b165c026cd65c080afdeb1225f1824c891d015175dc7ff7801f5847ec69597aa59cb0ced5ac672ff254a4be98c65ae08e7114e602c00c185262c19d703ef2d7d2014f233f6b58794a110", 0x69}], 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/848], 0x350}, 0x20000085) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x9}, 0x8) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000240)="c61db9181247998c26803a293ea8a58dee17abe09000a95528baa80320744e6bdd22473f44a673a62d0d3f42b3bcbf9a27ec849387207541ab5cfcbe51b133f4", 0x40}, {&(0x7f0000000440)="4aef49e08eff8dc062ddc3cdf228b5e63818970499c7535cf99798230eaff6dc04fb30c4547ea8c2e4005f22d3245ab465ba04bd9043ef1137352e76b85d1ef7d89e18ac46d695a8a7bb2705c1293ac94d17311cfc792ba05996944859c37573cbb6da5e", 0x64}, {&(0x7f00000004c0)="f6666552a69ff8d7a7cf7c4ec491d46b90e914cca16e87c0f0d15b372b651cbf1d89c455d0af89b3cb299671ba72f06e704aea907e35ebd4bc1112d5d603dd6e6c0853d8735cca9c65b7dd8d94cf35c7169d7fe490d3c37ae9545b6cb1fc9d80047ba91b5225fd19145baca3ffc3cd888ec9c53b1e99528aeca9217583cf4d67d23764594b893f115672b483d171c2971890f7975110876096bcc13991c48b45df232c9db62a20a30cbbb9b30e48be0c9688ab4f70dcadb5bb2b2d75a6f2ff53c75eba372a2378da28583a0a1bf35ce37bd9802b6f7812be27191347b7a6315dbd4b20dfe1ba3d", 0xe7}, {&(0x7f00000005c0)="3d31fb241051e66e95357a2e58790d484641beb78c77332e93962eb00b179d7103546eff4c6909c4481be1827460aa95facd7952", 0x34}], 0x4, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4006001}], 0x1, 0x8001) accept$ax25(r3, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"/3910], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r6, r7, 0x5, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r8, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r8, r6, 0x4, r6}, 0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r5, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r9}, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000800)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000007c0)='GPL\x00'}, 0x30) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r9}, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000780)={r4, r10}) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$inet6(0xa, 0x3, 0xff) sendto(r12, 0x0, 0xa00, 0x810, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0x80fe}, 0x80) sendmsg$netlink(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 126.532956ms ago: executing program 3 (id=5324): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000000}, 0x40) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 125.740034ms ago: executing program 2 (id=5325): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000140)={0x5c, @local, 0x4e20, 0x4, 'dh\x00', 0x6, 0x800, 0x10}, 0x2c) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@deltaction={0xac, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0xac}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000004b40)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x3, @private2, 0x8}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000016c0)="99", 0x1}], 0x1}}], 0x1, 0x4000090) shutdown(r3, 0x1) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)) sendmmsg(r3, &(0x7f0000000500)=[{{&(0x7f0000001b80)=@vsock, 0x80, &(0x7f0000000240)=[{&(0x7f0000000040)="39d859434a1e7f535c5cbd84a4fd38374407e15e2609f00b13f3141a21f864d309c6827897dc26e2404b2d5e5a2ccb2de1c43d0c540d89", 0x37}], 0x1, &(0x7f0000000840)=[{0xd8, 0x0, 0xafb, "f8c62d2bfa74a445b82d2a32ea067b47ba96379b4595b78a502295ccaebcb8f639c3888ffc70adac7bbd4998c804e59a57d365297436145aba3828a80a0f010a636fd559f25d8c99f1fa59f0e57069f1c7ef1b441ce17a9475560ad3a410f5531af74fb75fb7636ca7dca74067c81f9a2d6c215493baef5471f2f1209d6e4284b7c2cd6d43412abb53541ad72e86345b5a8a0ada4814aa4250dfa072bdcefb73fbd465f9d52ac990b4d3be8a50f1a68cb81527a15405cf535a98d58a0ed63721e47fa2bc3838f6"}, {0xe0, 0x3a, 0x40, "1af5608cf02b50972c36d3d22ed2e1a6ad2c821248bd9eb8b6390dea4f34a7d850e7bb1ed7b7840a6fb2ec01199eb68177a475d24a939ff258810a216033682c5f5cfdb52a23d84fe089eb5f8e544d9f9745d4d7cd49b48591fa373cb74587c2c796634e539cbca6aadc66d61aaea2326335c4464b37118703bba1fb955a22e06ef75033372cd30fad8d9daa9f588c29a477a7f12388e03a0dce8edf532e3e398ee4c963d136c489e0d5f297d5ec6d92c359e5843b7716b1ab2fa426d9f93e9a2d77cde0222a4c8db8ec"}], 0x1b8}}, {{&(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @local}, 0x4, 0x1, 0x1, 0x3}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000a80)="0be03f570a836bf935a3a08974bc8f25b1045a36ec6f2bb9ae0692db6ba14862bab93d38abd61037fd29d75e1ef791b42022c22e7c3461f9b3fee9ef573d6646a13bcc838dcb9fbd438e8868f35b884edae39c96ec655706fab308e564368f286e3a2e3242451eade9ca86841816b7cd35ff9176df8f7f5d52e4bb8deea9529706fa6e3f3f739fbebcbb30ae8a48ce978d8b0366d11c843c722955d3ab3e6ea9741500dea222d1e1cb6bb28015d8426e9307910f5af493171d2a83cf098dddf2126c37d2b1cc1f9ebf9dddd329f72e7fe5a87c0a217562b8d0d8a87186b14ce7f51d94d0428e6e24915bcaa5f34cb903414cd16da356a87bdcbdda20cf0c9d745014ef2eb65cca4491b013d3a54316633544d6aa95e329e317ee1e286cfa87a91a12904a623c0658ef82d9c1ae4c47f58e3ccb85f6498fc6710a142692c5d0e19cdb4199e5003fd0ac9f00038e0dbedeeb170e17172cbdf83f4dafe89c5c88e7aad898c6bac4b5378fe5139639b1d6276d4212fb7bf6caafa720073ecaa0d87e64984ee5129c362a39b8bad63b91dbb6cdcb40b97650faa37a5db6c509ad283d8fdebe3b93a42b31ca10d3f52b386712201c072467835ddfb05a4a05af5312d1535d6b62461f7e74ed0fc159bb761fa04bf7f1724ac77dcbcd63c4b6cc67925cf6b2889e346d021ba4b2bdf8c4eb0a806e3f4a609751b5c9e0bd56ac99ab800931e4fee95a7a0b0ade1199fbdb6d8b4fbcce53c95c347efadfe0224834b7e57db58412f7f276857b572d1a456a79a79193a8043f1814109326217a5114b7b869fe6b2b4e70e7d55bfa04210b9c65c1df017637048ea08419ac5e60c377360acabe2a6f189a8326f29bdfd724a52b823aec040f8435e57e643e22c17e38821390e1ab7abdd28c2dc7d97e7e26365c55f8a126c6ca1a7396e92922a81214a2d87df1994fcd84160e3e3103c6aa2191fb02212b75aba0ebaa26e5d2f5382cbb61d64c4f4e496a853046a937df631c662148d0e5d34bf1c67cd058a99cb0020e0e269ab93730e6e9863a87fe124ffe9bff20e7fa1959bab8aa7444fa85693632947f966f1eed8369338135933e6b85dc1a1411c2f459deee92283562e0a288b8609dbbf3a104957cd33e97bcb34c406336ca25328e336c542e5654009ea0f6b7619daf277947cd8738a1eff1c76e9ecebafab5cfd9cea51862b219d424f0183ad911f3f1a5ee6058e415cac03205078e993f0e95d504fcc4663ee1ba08431e2dd59d4c7c4f71c13c3e6de618e46fcb8078a2ccac30700661529ed2eda511ec063df1d4e2c0accb5944428929263720d280c394ffb067fa410e4d8ce1ec6306aa79a6dbb9f12f7055223a0cf8692fea02e2cf195e4bca403535d867b175aa03f4e585e01fcae6e727f0b5891380d841dec4dbf2db72ad80e08d01983dc41cfc26d98effa535adfee6ea748518f0b1a29e45b59b9d948570e148e3db7f98edbf97ad6d727d253a795c628038f6bb9c19a859ab95ac66ebcc1247a1a25c7280b3d3bf2d7daed0c3a06e70d30912f8628b0038d0dcf98811998250195f459d60191fd7ecdfb4b83349b02341c3b2cf005ea38a95e046ba0123df53c4f5ed0967bdec0c4fc3208cc77b823fbd6bfbff73bdc5be684650bb6785d2d0648f606af82784ea760ef8fba158dcbd4da3f3f94276ade53f670ce74f4c4f73f0a0e9ed9d6e2a9c3eee03184bea2134aa2d6305928e89e465abea3e2715eeba615dcd77a2b1fe93c37a941c1d566dfd0e57e5d7ab0658ed86aca7e9e45a7d1119d83225947b195bb57442a8f7c48f1ebf045fe8e6adf729fab97451d698a90dcf477a511c6c03749204eae7fe0ba128f21bbae3b453e0df7e5246c81601f52dbb2ad5a6bdaa27cef365ccdd4cd5524dce9fb4ab701bb2f3a62897078b7c4be3b5cd8e7b2e94207fcf40fbe70c7bcc0485ac9db0233c3333e9aed30e9621dcd959a3a35558b9be414689824b507df61deb81a93a4acaf4b731815253f81caad994be099cf52b1f626d90bf9889eebe73bf5657ce08c6e27f9f45e8c7a0b9ba8ed621c8e4127d50bfd8310cfa47a831643eb1d2eff42c0769aad3c308140f505f156435a724bf642630e2fa5bff63535ba07a413d422229a06070ab05237fa90ccffcfcf7c3b24449c1696d54b43d9ec09a42fe6a4566fcddefb525a9a338d3dcaaa0f0c2ef90279e04b3aba3c12cbbe419c8b1a93b1f4ed38df14fb4273340798fa39165e6a93966c09d1d2caf3ef1abb7ceaaaee89b6e03c1ced87a5d2c6253e50c64d0a797f440f24c5d44067266bf68cdbe3f1dcdd9d51b6dd48057edc4b0df05458b70baeaa1a666d30e87f3845c124f5f3f6e00126ad7f3ef6e1862c597c047f329ed1d8a2234e05216f4678c7de2a6b66c27f664f03f6718d1310c3fd7d305f4b7e8279ece5e54fe1c1051ddfc5289f1c942b507e5a01fec0e1e27fbf65a2bba39ade038572dcb608b83974f0eca1063a965ea7ecd6c819d61e1d133b8eb00e43a64c70c9faf586c4c5dff3cf6b0c2f63f6d709784b1ce50bca104b18e60842f9cd86f033accf3ce7093c46c7d090ea6825178758c49eff1d2b8afe61d41e73f535a39b3124d210d6d0b95314fd1747b3c6b3f96bf12688601862d500b83eaf43f2902f724780477cf3fec4b215844f44a7e9fc0effa679e33ddaf7f3607e21fdaac21416bda0554d38cf815b6cb9ae8f9df509a68f4ec2eea0f7d203f87e7f61de996cf06d0a4d03b436aaf943774f36445a011304acce7dd92404a414b7121e501477633303b4e244cfe10c58471b617f41b5b877d3163943eec2b36a0f5df498201f74e6e226b3c8b1445e67704660404a19769d87f1f58a72d70e3ccd4ac59d4844dec5d2b1a27509f45f30e42cfed014646ace597200c06188e131878a608bcbd306fb6bec99865d368ef40337424c8e0d9ae0e90fbe380e42481e13fb6cb42b59ea66f434af1360c0b86978325827684da1382f92630ecb5a2004bce6b3eeeb08958297fbc3b3f25edeb4e82543aa525e0e6d99dad1b0812c9f6c24806e4dba53dc5a2a50a5f5f999499feb88c5afafaf5cf5c29b97c07cc72a45a5cffcea318b75b061119de290028d70e3196deb9589990d4a91e2e68a6be95a09b459bfb3ae1037da711ee50f900b20f09b13fb2db1d91a005bca61210aeefcac9fd26d2dfbd02ee503fea87c2493d86ff354e49946cce415e90839f51ac052e6b2e53228ec3cc4a2a9513bf33aa52898340d44f39758d5476fd4b33907719f803fab7159f15a401e3b3305ee414e09d0a42e9bec4a3d08ea2cce7bf60c9c31bfa6d2104003706796e1b7e7acff3ee9245e81bb5c0820a270da52cc269c4f6867cbd8a498224896cee45842f29ac52c3420dd9af86343a27793c5e3ff1b34e6f7e1e2daaa960acd9a70e41e07590d30569cb575c503287b49478c30f46b6d5803e0ce794ad0c42f06a97c511381c4319d6996b0e3ad8c9c38d13a00c7a0cacc10270bfe1b07c11944c795e1bb3c817d995e6c43abc29db6b1bdbee9ed03007952ee45d61f447f796f5d9489f27c77a89b2c3dc776c48b1ee1c3b4f67a701d0257d1d1ee4199b3c721299d4ee4fe5e37a21d073f433bf0e98310828540a75f6c3ab68421bc56ca6c8a39a494a4355fc8aae1befd3712792d66477f11d891bb5d57c53c4eab51212f2f9df58fc054641c781ff71c39b6a108699c7c3abebb2bfc33f9ebda002addf364234f5cb085dd3395669bed08f2f09218cfb4c9cbe3cc4cb694aca97dff5eaf9f012a131a8e0f382e4a2e70e83576e3dd48b8e2604f77212bb340d0cfbf6a2caff85aecf1acc4e58a5c0826b6ec08f3c179a837ab43967118514881b9793014980c853c5fa655a2e163c16e5c19755af42688170e4aa8a5fe07ac16a7881cc81767b3b8832692ec02189de5756c3a4205071e01512cc22d7898167f52ec74ec308fb6550907f0f02bb5cd6767ea970e69140017aace4857fbfbcccaed5373db5aa20582254bd84ff74eb1b1d39560dab8449ac5af9331fc687d4edce907315e3164fffb467c7a2b50aca9d5957845470837d7ea9a90a75acf6d522ff8668b43a1cad86f6563d3c430414edf6158f0155338e6785432155d6330d7e5ee63430ecd4bc5930b19edacf0d53088e3baf848dc5d8d102fa6bfceeef05a6e7468ad1dd5953055d19f389b7fbd7e9ce8f061eaf702b4818941153ca162f09058ff72d7e829bcaad2607fcaa1f5fc30f4fd1ba7b86de08447949d5d84d44e6bf456e70fdbd8448f601b8b0f42b38d6129dff3561fa398a813e08e96ccc081d8c6499b30eb81583193156e5f871f48fa1cef78bdbd6a808df5c3c4112737b3d86f2903ebc5fef5cb542c3be1b6584f788d7b0a2599198be28525b52b2e3d14c0f6530ed0284cde9d42174bdd28a644b5a164261321f65b7a7b538ed1fd229afb6f493f66709576bce8e8d84967c69c955bf9401e6434401916b4c01e7ab4630b362bb58a4f07dd8abdb40ac03f122e1ef85780a9564c6dae34c66745623d23ebea14da27e6c1ed4d7493c337dee61c8425156106aa41cfff010d8b6c956b877ec7c6e3c61e366f75175674aa933d40099349918b979ce3788eaebd366f4e9f6a3053acbaa8d280fb1256dcbb97b34526a17b4ab45884baa4ded73ca6b283945d1093fca35e7a809a44d8c618f2c4e748b4df4d5cba93b90375299686a0dfa0f2734d0410ba42a6e0245b66a574e8961fe1d48408124e060415fcd239e9527ee6f0aa43218d4cc21f091801b743bc229a3d209513d7365e2fba0444c4654f15a792265056a2e84b54727c53aa97ba8a02e60647988a80bd217b3140c445249179e8cfc4aab069b66554ef04c76d2c76369096f67dcee9dd7d1dffa0633d8dff172629b5b20e4647b41abee1c7f20c02b9542f6be25fcebc87de1bee8295210604fab06912c172b13562e4d1bbadd44ae8d7c7dc470ef4bec3a73ca3e7eb7b232e6cd6586ed75d3ffe927c4bbe0b9fd77325289c891825f2a0a1d215cbabf211c98f4e89205998ea9c340772bc5421208d4d828ee3a6030c19eb6a15677bf365304837a72586673e9b63e4e4387c9d0095ff9ee4bc7e9ad6fe74b1b8fb89c3549a76c8e46fd056dd761f90fc14fd76c398b6f40052c525e4e5ff97bede77d594e8e3d86180952f67e1352863cbd3ae4922871ad40dc123664118368d7ad25b82f93be9f21d87704c015db713072c849d1ef4f2f55db44c5c4b8b0a0a32f481fd6c999f672eca9d772f9459ccd9098243908b4c4ce7a869b0b3079990deea9d0772028395dc87d67ba570a665465931b6620e4acecd47118bc7fa23034c7000df71149d422b5eec7f7c77a1fce2fa198a1b85fd7faebb450b64b4f9b1adeb3f7bb197ff50835af57367446509f4b1b87646def05533721987eba9cf641817ebafe84431489d2a057813605014a8a4cc0cf879d9b33eb269efcd3a211b43870c0740e9ac499d9f0f95e945516d40aecee9f615b18d4ce49afbac5d5c47bea881c3e43ca3a75ecd55c039bec5a0b1a35f1e49b821251c145e32dd1adbaf049b84a0bc6f8b3b8e5068139aac8eec0263786b74cdcfe2046b9d74520e2ff10c699b7b9db93824729a865b65639cc15dff172c3a9d2ea34e5528cd3123e91e22181f29e5b6db92efcff3be332f6b442889749fed885a2c105d34f7f6d6b17aba7aeabbaf31c2e57f36fd86d0a6feea6078f64760181b0b11053c699d6c28153a70e920a0453baf8df", 0x1000}, {&(0x7f0000000640)="62396c1b3b9fdf8cfd0f3e1b042077d418322f7af15c7cd70f7480326b6235eead07b8b11ec52c487a020885781d8d92f401447f023c7ea79ced2389a9be268723975df26e35e8f2c79862551b381a037bb6b1d1932c0887944aee1d6d5df373fa3c0089befc91f0166bb975d51c96faba3d43d1ca5089f66716f46ab8352e9a6c1ff041ba1ac2a904b5447aa292756884", 0x91}, {&(0x7f0000002780)="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", 0x1000}, {&(0x7f0000001a80)="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", 0xfe}, {&(0x7f0000000700)="e94a434a90ff11f78febe561759366e95ed9e6af5bf91d8812362b6af4e5a6e03d3f17f901489456348ac53666af6c8c055aa6bc550dfc1d20a1c51f8314b76d47b76f0a52cfde0553b5c77b4c259a256c1b4e61a73508f2176f7265401f80b602414c63fd65de8b65d8f217b16b532bebf5b0233cdbdb4849e62dc26ea90ac0fe97", 0x82}], 0x5, &(0x7f0000001f00)=[{0x88, 0x107, 0x0, "b541364154d4b6bfb5eb2540478a6daf062471cb7bd467e617566e6bc2267c0010867e9481948ff3e796347615d30099e782d52a4eb0343d12b76a1ef542262aea00f64f6e86b0600ecf6039186963748fb281619ebb8f5f179afa5b8c770b82938dab398b39dd6df0bc730999a14fdff830e8f483f1"}, {0x50, 0x118, 0x0, "061202a8d9b2bd92948a1695eec14e4fff4287e4fd173ce2168f122444b366c8f5db6936d4c42316fad79549f427b6253c4019fe520982e9b3b4dabd2b"}, {0xf0, 0x10a, 0x8001, "67ff6052dadb2646b7f264cc225349ff4bdf2c45407d434a354b77d4336d688884da9aef3da1b56d9331213a861cd0a824097580ab14538c73af18881c2cabbfac23dc331a0a35d5c1325135b6966b5d5aa31664a274a6daca34d6c47b7fa8114303e4fc04ceb0c67ec6f7e3f548a55b92b6311f396010a05dace5854f3b18be545a856a84498c089834d12a3dd2881aec213800a2f07b20fec8a540995482235ac40fdda4d7286511fb12d9e73b82444b56d4577fb9d64d9de71af6f1bf74f9d9476528ead090cf40d1de7751df25b299e8e11d958c059092b8e3d1334c43"}, {0x98, 0x118, 0x7, "d19be11b481cab37e6d27066b4b486e748b195045fc9b7a2388c9e6358ee1b037463c273814647e7a7e4e5178679e8c9a03da817b3535bf7dbcb11a7b610aa3394245e848e6686119710c55a32875c4ed1703934886465fe58933bb711c3c0197909be457239a7ddccc4a2529d1fed4209e9c04009664a62ad58dee0ee9940ff374f2525"}, {0x100, 0x11, 0x7, "307c80084347f2ae83e6f78e2337ebcb63cb49a296a88c16f3079e41b22cf2f397c996cb748c8a0dc033323e996ec5e7dfd540ffe7946d0b42d945e950242e45d86c366cde55bca2685ba2c53f1aa536d75d2366ae77854f68e0707bdc3ebdd129b6c3a709c5021462c55152ff13d7b22f7b93af6698b89aa32d99883e94a6d955a17e2dd4be8838d81e408073c046ace46fdbcba2c0f9e810a017549278a15e011dab4d167f0615d05e7d96a5336786bb70ad9e54e5facae36d1c1f7e7870abeb136a68e9819a883e1c5a8c387b7f6fc8754d2479bb1d3c193fbc83918f82d0fb78176cb86a3e51a1a63e1f9f"}], 0x360}}], 0x2, 0x40) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write(r0, &(0x7f0000002480)="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", 0x2eb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200", 0x5e, 0x0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x800, 0x0, 0x7}, 0x20) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2, @mcast1, 0x5, 0x3}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000a40)="f4000900062b2c25fe80000000000000dc8b66cc00000000000000000000000000000000e4986919", 0x28}], 0x1}, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 28.539653ms ago: executing program 3 (id=5326): setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1, 0x0, r2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='page_pool_state_hold\x00', r3}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='page_pool_state_hold\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0010000000000000f4ffffff800006aa00040000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0xfe, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffff7f}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}, @sadb_x_nat_t_type={0x1, 0x14, 0x35}]}, 0x68}, 0x1, 0x7}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r7, 0x8040942d, &(0x7f0000000080)) 0s ago: executing program 3 (id=5327): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x18, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x4000810) (async) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x18, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x4000810) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x5d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000287110bf000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, r1, 0x2, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x24004004) (async) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, r1, 0x2, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x24004004) kernel console output (not intermixed with test programs): mode [ 350.875452][T17114] veth1_macvtap: entered allmulticast mode [ 350.884424][T17114] macsec0: left promiscuous mode [ 350.893650][T17114] macsec0: left allmulticast mode [ 350.902024][T17116] netlink: 'syz.3.3190': attribute type 83 has an invalid length. [ 350.916256][T17114] veth1_macvtap: left allmulticast mode [ 350.967100][ T5989] tipc: Node number set to 2886997007 [ 351.077959][T17130] __nla_validate_parse: 6 callbacks suppressed [ 351.077977][T17130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3196'. [ 351.341511][ T5989] IPVS: starting estimator thread 0... [ 351.486271][T17145] IPVS: using max 36 ests per chain, 86400 per kthread [ 351.509705][T17157] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3201'. [ 351.629310][T17166] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3204'. [ 351.658402][T17166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3204'. [ 351.681675][T17169] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3205'. [ 351.739584][T17072] chnl_net:caif_netlink_parms(): no params data found [ 351.814854][T17176] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3207'. [ 351.856902][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 351.864152][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 351.923188][T17072] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.930942][T17072] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.940760][T17072] bridge_slave_0: entered allmulticast mode [ 351.949255][T17072] bridge_slave_0: entered promiscuous mode [ 351.958957][T17072] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.966436][T17072] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.973704][T17072] bridge_slave_1: entered allmulticast mode [ 351.981649][T17072] bridge_slave_1: entered promiscuous mode [ 352.040635][T17072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.062781][T17072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.082967][T17188] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 352.090990][T17188] team0: Device macvtap2 is already an upper device of the team interface [ 352.145021][T17072] team0: Port device team_slave_0 added [ 352.155605][T17072] team0: Port device team_slave_1 added [ 352.212450][T17191] netlink: 'syz.1.3212': attribute type 8 has an invalid length. [ 352.241431][T17072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.249080][T17072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.275734][T17072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.302243][T17072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.309894][T17072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.341871][ T5832] Bluetooth: hci1: command tx timeout [ 352.350317][T17072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.462822][T17201] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3215'. [ 352.473962][T17072] hsr_slave_0: entered promiscuous mode [ 352.492446][T17072] hsr_slave_1: entered promiscuous mode [ 352.504854][T17072] debugfs: 'hsr0' already exists in 'hsr' [ 352.523298][T17072] Cannot create hsr debugfs directory [ 352.589691][T17210] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3218'. [ 352.620111][T17206] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3217'. [ 353.032225][T17236] netlink: 'syz.4.3227': attribute type 1 has an invalid length. [ 353.110366][T17239] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3228'. [ 353.171017][T17244] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 353.397470][T17255] netlink: 'syz.1.3234': attribute type 29 has an invalid length. [ 353.494223][T17255] netlink: 'syz.1.3234': attribute type 29 has an invalid length. [ 353.524262][T17265] : renamed from hsr0 (while UP) [ 354.410269][ T5832] Bluetooth: hci1: command 0x041b tx timeout [ 355.334245][T17072] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 355.369043][T12736] IPVS: ip_vs_send_async error -101 [ 355.400066][T17072] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 355.450264][T17072] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 355.481429][T17308] SET target dimension over the limit! [ 355.488221][T17072] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 355.762671][T17072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.793909][T17072] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.823647][ T1344] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.830890][ T1344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.855452][ T1344] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.862668][ T1344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.144538][T17350] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 356.409715][T17072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.417886][T17366] netlink: 'syz.1.3262': attribute type 3 has an invalid length. [ 356.440932][T17366] netlink: 'syz.1.3262': attribute type 1 has an invalid length. [ 356.455460][T17366] __nla_validate_parse: 7 callbacks suppressed [ 356.455476][T17366] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3262'. [ 356.489424][ T5832] Bluetooth: hci1: command 0x041b tx timeout [ 356.564387][T17072] veth0_vlan: entered promiscuous mode [ 356.592231][T17072] veth1_vlan: entered promiscuous mode [ 356.624680][T17072] veth0_macvtap: entered promiscuous mode [ 356.635142][T17072] veth1_macvtap: entered promiscuous mode [ 356.685858][T17376] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3267'. [ 356.699896][T17072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.749290][T17072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.787567][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.809473][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.862776][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.874597][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.043860][ T1344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.070084][ T1344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.176321][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.188429][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.225837][T17399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3274'. [ 357.496920][T17413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3277'. [ 357.590954][T17413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.598864][T17413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.609307][T17421] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3277'. [ 357.648684][T17413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.676700][T17413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.831939][T17429] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3281'. [ 357.902122][T17428] bond6: ARP target 1.0.0.0 is already present [ 357.954930][T17428] bond6: option arp_ip_target: invalid value (1) [ 357.982998][T17428] bond6 (unregistering): Released all slaves [ 358.046464][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 358.060867][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 358.086477][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 358.099730][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 358.121025][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 358.223321][ T1344] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.236870][T17449] sctp: [Deprecated]: syz.1.3284 (pid 17449) Use of int in maxseg socket option. [ 358.236870][T17449] Use struct sctp_assoc_value instead [ 358.252790][ T1344] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.431899][ T1344] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.449172][ T1344] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.462081][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3290'. [ 358.477358][T17465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3289'. [ 358.481857][T17434] lo speed is unknown, defaulting to 1000 [ 358.496603][T17465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3289'. [ 358.538339][ T1344] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.561474][T17469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3292'. [ 358.561887][ T1344] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.583234][ T5832] Bluetooth: hci1: command 0x041b tx timeout [ 358.750170][ T1344] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.773849][ T1344] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.818526][T17476] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 358.857591][T17480] netlink: 'syz.3.3295': attribute type 13 has an invalid length. [ 358.891889][T17480] netlink: 'syz.3.3295': attribute type 58 has an invalid length. [ 359.169621][T17487] netlink: 'syz.3.3297': attribute type 2 has an invalid length. [ 359.376255][T17496] netlink: 'syz.2.3301': attribute type 1 has an invalid length. [ 359.522524][ T56] IPVS: starting estimator thread 0... [ 359.616180][T17506] IPVS: using max 35 ests per chain, 84000 per kthread [ 359.665668][ T1344] bond5 (unregistering): (slave gretap2): Releasing active interface [ 359.688391][ T1344] bond6 (unregistering): (slave gretap3): Releasing active interface [ 359.720957][ T1344] bond1 (unregistering): (slave gre1): Releasing backup interface [ 359.729719][ T1344] gre1 (unregistering): left promiscuous mode [ 359.781712][ T1344] $H (unregistering): (slave geneve1): Releasing backup interface [ 359.794527][ T1344] geneve1 (unregistering): left promiscuous mode [ 359.813009][ T1344] team0: Port device geneve0 removed [ 360.168097][ T5832] Bluetooth: hci2: command tx timeout [ 360.461556][ T1344] $H (unregistering): Released all slaves [ 360.553432][ T1344] bond1 (unregistering): Released all slaves [ 360.646484][ T5832] Bluetooth: hci1: command 0x041b tx timeout [ 360.654840][ T1344] bond0 (unregistering): Released all slaves [ 360.750196][ T1344] bond2 (unregistering): Released all slaves [ 360.842059][ T1344] bond3 (unregistering): Released all slaves [ 360.934119][ T1344] bond4 (unregistering): Released all slaves [ 360.946532][ T1344] bond5 (unregistering): Released all slaves [ 361.041952][ T1344] bond6 (unregistering): Released all slaves [ 361.234968][ T7079] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.267053][T17525] ksmbd: Unknown IPC event: 3, ignore. [ 361.312042][ T7079] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.322778][ T7079] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.362178][ T7079] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.454048][T17534] gre1: entered promiscuous mode [ 361.470299][T17534] gre1: entered allmulticast mode [ 361.495196][T17434] chnl_net:caif_netlink_parms(): no params data found [ 361.631517][T17548] bond1: Unable to set down delay as MII monitoring is disabled [ 361.642222][T17548] bond1 (unregistering): Released all slaves [ 361.665477][T17551] __nla_validate_parse: 5 callbacks suppressed [ 361.665493][T17551] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3312'. [ 361.721674][T17434] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.729797][T17434] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.739182][T17434] bridge_slave_0: entered allmulticast mode [ 361.743878][T17551] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3312'. [ 361.748680][T17434] bridge_slave_0: entered promiscuous mode [ 361.767283][T17434] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.774994][T17434] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.782922][T17434] bridge_slave_1: entered allmulticast mode [ 361.791305][T17434] bridge_slave_1: entered promiscuous mode [ 361.869590][T17434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.884233][T17434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.951658][T17434] team0: Port device team_slave_0 added [ 361.963202][T17434] team0: Port device team_slave_1 added [ 362.001575][T17563] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3317'. [ 362.018263][T17434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.025593][T17434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.053784][T17434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.071068][T17434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.078659][T17434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.104891][T17434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.180360][T17569] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3318'. [ 362.180749][T17434] hsr_slave_0: entered promiscuous mode [ 362.196842][T17434] hsr_slave_1: entered promiscuous mode [ 362.203087][T17434] debugfs: 'hsr0' already exists in 'hsr' [ 362.209002][T17434] Cannot create hsr debugfs directory [ 362.247594][ T5832] Bluetooth: hci2: command tx timeout [ 362.254594][T17543] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3310'. [ 362.454527][T17577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3319'. [ 362.496331][T17577] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3319'. [ 362.505570][T17577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3319'. [ 362.515131][T17577] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3319'. [ 362.544592][T17577] netlink: 'syz.2.3319': attribute type 2 has an invalid length. [ 362.584284][T17577] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3319'. [ 362.589886][T17582] lo speed is unknown, defaulting to 1000 [ 362.689771][ T1344] : left promiscuous mode [ 362.750772][ T1344] tipc: Disabling bearer [ 362.757611][ T1344] tipc: Left network mode [ 362.780468][T17590] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 363.681884][T17434] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 363.940617][T17434] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 363.982671][T17434] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 364.055579][T17434] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 364.328082][ T5832] Bluetooth: hci2: command tx timeout [ 364.501253][T17434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.625214][T17434] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.720352][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.727599][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.814377][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.821602][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.958165][T17661] sctp: [Deprecated]: syz.3.3346 (pid 17661) Use of int in max_burst socket option deprecated. [ 364.958165][T17661] Use struct sctp_assoc_value instead [ 365.019647][ T1344] hsr_slave_0: left promiscuous mode [ 365.036420][ T1344] hsr_slave_1: left promiscuous mode [ 365.075264][ T1344] veth1_macvtap: left promiscuous mode [ 365.091268][ T1344] veth0_macvtap: left promiscuous mode [ 365.206289][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 365.257737][ T1344] pimreg (unregistering): left allmulticast mode [ 365.502348][T17683] netlink: 'syz.0.3351': attribute type 8 has an invalid length. [ 365.578428][ T36] smc: removing ib device sy [ 366.233875][ T43] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.245731][ T43] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.407342][ T5832] Bluetooth: hci2: command tx timeout [ 366.720750][T17434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.088264][T17729] netlink: 'syz.3.3364': attribute type 4 has an invalid length. [ 367.169453][T17729] netlink: 'syz.3.3364': attribute type 4 has an invalid length. [ 367.490157][T17708] infiniband syz2: set active [ 367.516068][T17708] infiniband syz2: added syz_tun [ 367.522240][T17708] syz2: rxe_create_cq: returned err = -12 [ 367.536517][T17708] infiniband syz2: Couldn't create ib_mad CQ [ 367.551999][T17708] infiniband syz2: Couldn't open port 1 [ 367.563378][T17732] bridge0: port 2(syz_tun) entered disabled state [ 367.670735][T17708] RDS/IB: syz2: added [ 367.689985][T17708] smc: adding ib device syz2 with port count 1 [ 367.719693][T17708] smc: ib device syz2 port 1 has no pnetid [ 368.003868][T17732] veth0_macvtap: left allmulticast mode [ 368.177158][ T7079] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.216817][ T7079] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.225743][ T7079] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.266126][ T7082] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.350551][T17434] veth0_vlan: entered promiscuous mode [ 368.378514][T17434] veth1_vlan: entered promiscuous mode [ 368.458493][T17434] veth0_macvtap: entered promiscuous mode [ 368.487854][T17434] veth1_macvtap: entered promiscuous mode [ 368.530780][T17434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.557289][T17434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.588076][ T7082] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.607916][ T7082] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.623681][ T7082] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.656681][ T7082] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.707831][ T1344] IPVS: stop unused estimator thread 0... [ 368.882755][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.902956][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.982068][ T6679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.993295][ T6679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.394501][T17791] netlink: 'syz.4.3379': attribute type 29 has an invalid length. [ 369.521074][T17796] tipc: Started in network mode [ 369.536889][T17796] tipc: Node identity 4, cluster identity 4711 [ 369.554648][T17796] tipc: Node number set to 4 [ 369.679242][T17800] __nla_validate_parse: 8 callbacks suppressed [ 369.679261][T17800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3381'. [ 369.758641][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 369.775577][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 369.776506][ T5824] syz_tun (unregistering): left allmulticast mode [ 369.784164][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 369.797455][ T5824] syz_tun (unregistering): left promiscuous mode [ 369.804282][ T5824] bridge0: port 2(syz_tun) entered disabled state [ 369.812712][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 369.820807][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 369.849358][T17800] geneve2: entered promiscuous mode [ 370.279683][T17803] lo speed is unknown, defaulting to 1000 [ 370.363024][T17806] netlink: 696 bytes leftover after parsing attributes in process `syz.4.3382'. [ 370.373987][T17806] IPVS: set_ctl: invalid protocol: 135 172.20.20.48:20001 [ 370.517767][T17810] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3384'. [ 370.831418][T17827] IPVS: length: 238 != 8 [ 371.339216][T17848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3394'. [ 371.635558][T17861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3400'. [ 371.733284][T17803] chnl_net:caif_netlink_parms(): no params data found [ 371.847153][ T5838] Bluetooth: hci0: command tx timeout [ 371.941726][T17880] netlink: 'syz.1.3404': attribute type 32 has an invalid length. [ 371.950329][T17880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3404'. [ 371.954018][T17877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3403'. [ 371.968723][T17877] netlink: 'syz.2.3403': attribute type 30 has an invalid length. [ 371.974445][T17875] syzkaller1: entered promiscuous mode [ 371.976610][T17877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3403'. [ 371.984406][T17875] syzkaller1: entered allmulticast mode [ 372.002098][T17875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3405'. [ 372.023642][T17880] bond1: option coupled_control: invalid value (52) [ 372.032611][T17880] bond1 (unregistering): Released all slaves [ 372.066911][T17884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3405'. [ 372.125693][T17803] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.151017][T17803] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.171544][T17803] bridge_slave_0: entered allmulticast mode [ 372.186916][T17803] bridge_slave_0: entered promiscuous mode [ 372.247978][ T55] block nbd0: Possible stuck request ffff888024a70000: control (read@0,1024B). Runtime 210 seconds [ 372.259020][ T55] block nbd0: Possible stuck request ffff888024a701c0: control (read@1024,1024B). Runtime 210 seconds [ 372.270144][ T55] block nbd0: Possible stuck request ffff888024a70380: control (read@2048,1024B). Runtime 210 seconds [ 372.282814][ T55] block nbd0: Possible stuck request ffff888024a70540: control (read@3072,1024B). Runtime 210 seconds [ 372.314417][T17803] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.332768][T17803] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.344871][T17803] bridge_slave_1: entered allmulticast mode [ 372.354414][T17803] bridge_slave_1: entered promiscuous mode [ 372.528021][T17803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.541956][T17803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.640491][T17803] team0: Port device team_slave_0 added [ 372.658233][T17803] team0: Port device team_slave_1 added [ 372.707501][T17919] netlink: 'syz.4.3413': attribute type 3 has an invalid length. [ 372.784749][T17803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.794381][T17803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.823327][T17803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.917391][T17803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.926638][T17803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.962893][T17803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.199858][T17803] hsr_slave_0: entered promiscuous mode [ 373.213605][T17803] hsr_slave_1: entered promiscuous mode [ 373.223374][T17803] debugfs: 'hsr0' already exists in 'hsr' [ 373.229201][T17803] Cannot create hsr debugfs directory [ 373.427614][T17940] xfrm1: entered allmulticast mode [ 373.635432][T17959] netlink: 'syz.0.3427': attribute type 4 has an invalid length. [ 373.783826][T17965] bond1: option resend_igmp: invalid value (32767) [ 373.791519][T17965] bond1: option resend_igmp: allowed values 0 - 255 [ 373.801690][T17965] bond1 (unregistering): Released all slaves [ 373.928278][ T5838] Bluetooth: hci0: command tx timeout [ 374.139062][T17803] bond0: (slave netdevsim0): Releasing backup interface [ 374.184991][T17992] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 374.224137][T17985] tipc: Started in network mode [ 374.252145][T17985] tipc: Node identity 1e64084d1a24, cluster identity 4711 [ 374.261790][T17985] tipc: Enabled bearer , priority 0 [ 374.382593][T17985] syzkaller0: entered promiscuous mode [ 374.388310][T17985] syzkaller0: entered allmulticast mode [ 374.394649][T17985] tipc: Resetting bearer [ 374.498194][T18008] netlink: 'syz.1.3442': attribute type 15 has an invalid length. [ 374.573088][ T7078] tipc: Resetting bearer [ 374.662303][T17981] tipc: Resetting bearer [ 375.969443][T17981] tipc: Disabling bearer [ 375.978934][T17803] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 375.999820][T18021] __nla_validate_parse: 11 callbacks suppressed [ 375.999837][T18021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3445'. [ 376.006405][ T5838] Bluetooth: hci0: command tx timeout [ 376.023763][T10711] tipc: Node number set to 71305293 [ 376.041997][T17803] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 376.074416][T17803] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 376.138354][T17803] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 376.147877][T18032] netlink: 'syz.0.3450': attribute type 1 has an invalid length. [ 376.160627][T18030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.233143][T18045] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3449'. [ 376.299978][T18041] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 376.314874][T18041] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 376.443221][T18032] gretap1: entered promiscuous mode [ 376.524482][T18041] macvlan2: entered promiscuous mode [ 376.530729][T18041] macvlan2: entered allmulticast mode [ 376.563072][T18058] vlan2: entered promiscuous mode [ 376.579100][T18058] vlan2: entered allmulticast mode [ 376.584253][T18058] hsr_slave_1: entered allmulticast mode [ 376.644112][T18058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3454'. [ 376.712675][T17803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.729004][T18060] lo speed is unknown, defaulting to 1000 [ 376.775591][T18064] sctp: [Deprecated]: syz.0.3456 (pid 18064) Use of int in maxseg socket option. [ 376.775591][T18064] Use struct sctp_assoc_value instead [ 376.794798][T17803] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.827743][ T7078] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.834933][ T7078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.908340][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.915501][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.144226][T18069] lo speed is unknown, defaulting to 1000 [ 377.234414][T18087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3461'. [ 377.252735][T18089] netlink: 'syz.1.3462': attribute type 1 has an invalid length. [ 377.263187][T18089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3462'. [ 377.273932][T18087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3461'. [ 377.343771][T18091] IPv6: NLM_F_CREATE should be specified when creating new route [ 377.559573][T18097] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 377.607003][T17803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.670866][T18101] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3466'. [ 377.685049][T18101] nbd: socks must be embedded in a SOCK_ITEM attr [ 377.807299][T17803] veth0_vlan: entered promiscuous mode [ 377.827529][T17803] veth1_vlan: entered promiscuous mode [ 377.870241][T17803] veth0_macvtap: entered promiscuous mode [ 377.883221][T17803] veth1_macvtap: entered promiscuous mode [ 377.904546][T17803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.920280][T17803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.996718][ T7082] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.021288][ T7082] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.043463][ T7082] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.054829][ T7082] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.086864][ T5838] Bluetooth: hci0: command tx timeout [ 378.291827][ T7077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.300411][ T7077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.441656][ T7077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.451129][ T7077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.556291][T18111] xt_cluster: node mask cannot exceed total number of nodes [ 378.581941][T18113] netlink: 'syz.3.3377': attribute type 1 has an invalid length. [ 378.749158][T18120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3469'. [ 379.120190][T18135] netlink: 'syz.2.3476': attribute type 5 has an invalid length. [ 379.293121][T18147] netlink: 'syz.1.3480': attribute type 18 has an invalid length. [ 379.441324][T18155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3478'. [ 379.685766][T18159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3482'. [ 379.729527][T18173] xfrm1: entered promiscuous mode [ 379.734599][T18173] xfrm1: entered allmulticast mode [ 379.912924][T18184] : entered promiscuous mode [ 380.279518][T18210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.329723][T18202] xt_CT: No such helper "snmp_trap" [ 380.412134][T18210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.521211][T18220] tipc: Started in network mode [ 380.539952][T18220] tipc: Node identity ac14140f, cluster identity 4711 [ 380.556805][T18220] tipc: Enabling of bearer rejected, failed to enable media [ 380.583463][T18229] bridge_slave_1: left allmulticast mode [ 380.604447][T18229] bridge_slave_1: left promiscuous mode [ 380.613424][T18229] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.632436][T18229] bridge_slave_0: left allmulticast mode [ 380.644900][T18229] bridge_slave_0: left promiscuous mode [ 380.665690][T18229] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.066736][T18264] ip6t_srh: unknown srh invflags 4000 [ 381.092815][T18266] netlink: 'syz.0.3517': attribute type 75 has an invalid length. [ 381.146661][T18264] nbd: device at index 3 is going down [ 381.245227][T18278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.262479][T18276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.447299][T18292] netlink: 'syz.0.3523': attribute type 1 has an invalid length. [ 381.447737][T18294] __nla_validate_parse: 11 callbacks suppressed [ 381.447752][T18294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3524'. [ 381.487939][ T7928] udevd[7928]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 381.554982][T18292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3523'. [ 381.778765][T18307] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 382.055494][T18336] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3533'. [ 382.122637][T18338] sctp: [Deprecated]: syz.1.3534 (pid 18338) Use of struct sctp_assoc_value in delayed_ack socket option. [ 382.122637][T18338] Use struct sctp_sack_info instead [ 382.153100][T18342] netlink: 'syz.4.3536': attribute type 1 has an invalid length. [ 382.177811][T18343] veth3: entered allmulticast mode [ 382.203567][T18347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.245965][T18352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3537'. [ 382.337007][T18360] netlink: 'syz.4.3540': attribute type 1 has an invalid length. [ 382.345534][T18360] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 382.483798][T18375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3544'. [ 382.711212][T18370] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 382.729895][T18369] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 382.874036][T18386] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3547'. [ 382.932286][T18395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3551'. [ 383.182625][T18415] netlink: 'syz.2.3559': attribute type 1 has an invalid length. [ 383.202409][T18418] netlink: 'syz.1.3558': attribute type 10 has an invalid length. [ 383.232496][T18415] 8021q: adding VLAN 0 to HW filter on device bond1 [ 383.247702][T18420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3559'. [ 383.315634][T18418] team0: Device veth1_macvtap failed to register rx_handler [ 383.423624][T18433] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3561'. [ 383.457137][T18433] netlink: 'syz.3.3561': attribute type 11 has an invalid length. [ 383.484554][T18439] tipc: Enabled bearer , priority 0 [ 383.492527][T18442] tipc: Enabling of bearer rejected, already enabled [ 383.521289][T18439] syzkaller0: entered promiscuous mode [ 383.527035][T18439] syzkaller0: entered allmulticast mode [ 383.574959][T18439] tipc: Resetting bearer [ 383.586107][T18438] tipc: Resetting bearer [ 383.628781][T18438] tipc: Disabling bearer [ 383.683285][T18451] netlink: 'syz.4.3570': attribute type 3 has an invalid length. [ 383.706939][T18451] netlink: 'syz.4.3570': attribute type 3 has an invalid length. [ 383.812016][T18457] nbd: must specify at least one socket [ 383.941361][T18462] netlink: 'syz.0.3575': attribute type 1 has an invalid length. [ 384.431916][T18491] ip6gre1: entered promiscuous mode [ 384.449628][T18491] ip6gre1: entered allmulticast mode [ 384.612497][T18505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3589'. [ 384.742586][T18516] xt_NFQUEUE: number of total queues is 0 [ 385.278527][T18547] bond3 (unregistering): Released all slaves [ 385.383245][T18560] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 385.601150][T18573] netlink: 'syz.3.3609': attribute type 13 has an invalid length. [ 385.626985][T18573] netlink: 'syz.3.3609': attribute type 58 has an invalid length. [ 385.636338][T18575] macvtap1: entered promiscuous mode [ 385.646817][T18575] macvtap1: entered allmulticast mode [ 385.694367][T18573] netlink: 'syz.3.3609': attribute type 11 has an invalid length. [ 386.349588][T18631] bond0: (slave bond_slave_1): Releasing backup interface [ 386.641454][T18652] __nla_validate_parse: 13 callbacks suppressed [ 386.641471][T18652] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3632'. [ 386.747168][T18658] netlink: 'syz.0.3633': attribute type 17 has an invalid length. [ 386.762218][T18658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3633'. [ 386.784080][T18658] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3633'. [ 386.792506][T18660] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3634'. [ 386.804090][T18660] block nbd0: reconnected socket [ 386.832284][T18662] netlink: zone id is out of range [ 386.837636][T18660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3634'. [ 386.843855][ T5838] block nbd0: Receive control failed (result -32) [ 386.849818][T18662] netlink: zone id is out of range [ 386.860611][T18662] netlink: zone id is out of range [ 386.865760][T18662] netlink: get zone limit has 4 unknown bytes [ 387.025864][T18672] Bluetooth: MGMT ver 1.23 [ 388.210688][ T7077] bridge_slave_0: left allmulticast mode [ 388.239046][ T7077] bridge_slave_0: left promiscuous mode [ 388.244836][ T7077] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.536396][T18699] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3643'. [ 388.753633][T18702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.996779][ T7077] bond4 (unregistering): (slave gretap2): Releasing active interface [ 389.091397][ T7077] dvmrp0 (unregistering): left allmulticast mode [ 390.001424][ T7077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.011121][ T7077] bond0 (unregistering): Released all slaves [ 390.111512][ T7077] bond1 (unregistering): (slave veth5): Releasing active interface [ 390.120807][ T7077] bond1 (unregistering): (slave veth7): Releasing active interface [ 390.129648][ T7077] bond1 (unregistering): Released all slaves [ 390.233072][ T7077] bond2 (unregistering): Released all slaves [ 390.245439][ T7077] bond3 (unregistering): Released all slaves [ 390.258081][ T7077] bond4 (unregistering): Released all slaves [ 390.357604][ T7077] bond5 (unregistering): (slave veth11): Releasing active interface [ 390.367048][ T7077] bond5 (unregistering): (slave veth13): Releasing active interface [ 390.375802][ T7077] bond5 (unregistering): Released all slaves [ 390.388021][T18686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.395414][T18686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.436328][T18699] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.451300][T18699] bridge_slave_1: left allmulticast mode [ 390.458456][T18699] bridge_slave_1: left promiscuous mode [ 390.464363][T18699] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.483175][T18699] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 390.573710][T18691] lo speed is unknown, defaulting to 1000 [ 390.579548][ T7077] : left promiscuous mode [ 390.667821][T18721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3650'. [ 390.721678][T18722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3651'. [ 390.731518][ T7077] tipc: Disabling bearer [ 390.739656][ T7077] tipc: Left network mode [ 390.761508][ T7077] IPVS: stopping master sync thread 12736 ... [ 390.811605][T18725] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3652'. [ 390.851654][T18725] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3652'. [ 390.864078][T18728] Cannot find add_set index 1 as target [ 390.920007][T18734] netlink: 'syz.1.3656': attribute type 7 has an invalid length. [ 390.930179][T18734] netlink: 'syz.1.3656': attribute type 8 has an invalid length. [ 390.962684][T18734] gretap0: entered promiscuous mode [ 390.987449][T18734] batadv_slave_1: entered promiscuous mode [ 391.001338][T18734] gretap0: left promiscuous mode [ 391.026071][T18734] batadv_slave_1: left promiscuous mode [ 391.034459][T18740] netlink: 'syz.0.3657': attribute type 3 has an invalid length. [ 391.141604][T18743] macvtap1: entered promiscuous mode [ 391.156122][T18743] macvtap1: entered allmulticast mode [ 391.531120][T18764] netlink: 'syz.1.3664': attribute type 1 has an invalid length. [ 391.547218][T18752] syzkaller1: entered promiscuous mode [ 391.552761][T18752] syzkaller1: entered allmulticast mode [ 391.610889][T18764] 8021q: adding VLAN 0 to HW filter on device bond1 [ 391.683987][T18762] bond1: entered allmulticast mode [ 392.050322][T18783] xt_hashlimit: size too large, truncated to 1048576 [ 392.266624][T18793] __nla_validate_parse: 3 callbacks suppressed [ 392.266645][T18793] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3672'. [ 392.517250][T18806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3674'. [ 392.616042][ T7077] hsr_slave_0: left promiscuous mode [ 392.622957][ T7077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.705669][T18813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3677'. [ 392.725718][T18816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3678'. [ 392.738966][T18817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3678'. [ 392.796260][T18815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3678'. [ 393.280566][ T7077] team0 (unregistering): Port device team_slave_1 removed [ 393.341518][ T7077] team0 (unregistering): Port device team_slave_0 removed [ 393.490148][T18843] netlink: 'syz.0.3682': attribute type 11 has an invalid length. [ 394.042628][T18865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3690'. [ 395.567514][T18876] netlink: 'syz.1.3689': attribute type 12 has an invalid length. [ 395.703323][T18895] vcan0: entered allmulticast mode [ 395.737873][T18900] netlink: 'syz.2.3694': attribute type 1 has an invalid length. [ 395.763864][T18904] netlink: 'syz.2.3694': attribute type 1 has an invalid length. [ 395.976605][T18918] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3697'. [ 396.002364][T18918] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3697'. [ 396.058965][T18925] tipc: Enabled bearer , priority 2 [ 396.080019][T18925] tipc: Enabling of bearer rejected, already enabled [ 396.162252][T18934] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3702'. [ 396.763717][T18972] netlink: 'syz.1.3715': attribute type 4 has an invalid length. [ 396.825635][T18972] netlink: 'syz.1.3715': attribute type 4 has an invalid length. [ 397.350741][T19013] __nla_validate_parse: 7 callbacks suppressed [ 397.350760][T19013] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3728'. [ 397.375231][ T7077] IPVS: stop unused estimator thread 0... [ 397.451644][T19023] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 397.576935][T19033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3733'. [ 397.825559][T19053] netlink: 'syz.2.3740': attribute type 1 has an invalid length. [ 397.839195][T19053] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3740'. [ 397.995505][T19059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3743'. [ 398.029995][T19059] vxcan2: entered allmulticast mode [ 398.102411][T19067] tipc: Enabled bearer , priority 0 [ 398.151027][T19068] bridge: RTM_NEWNEIGH with invalid ether address [ 398.187174][T19059] syzkaller0: entered promiscuous mode [ 398.234981][T19059] syzkaller0: entered allmulticast mode [ 398.295054][T19058] tipc: Resetting bearer [ 398.329525][T19058] tipc: Disabling bearer [ 398.427059][T19079] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 398.456440][T19084] netlink: 'syz.0.3748': attribute type 4 has an invalid length. [ 398.628787][T19092] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 398.634105][T19094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3753'. [ 398.678778][T19092] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3752'. [ 398.900305][T19115] netlink: 'syz.4.3757': attribute type 1 has an invalid length. [ 398.933340][T19115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3757'. [ 399.036367][T19122] bond0: entered promiscuous mode [ 399.041455][T19122] bond_slave_0: entered promiscuous mode [ 399.047722][T19122] bond_slave_1: entered promiscuous mode [ 399.055684][T19122] batadv0: entered promiscuous mode [ 399.070609][T19122] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 399.295421][T19140] netlink: 'syz.4.3764': attribute type 1 has an invalid length. [ 399.354101][T19144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3767'. [ 399.523900][T19158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3771'. [ 399.537050][T19158] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3771'. [ 399.664743][T19173] tap0: tun_chr_ioctl cmd 1074025673 [ 399.671416][T19171] tap0: tun_chr_ioctl cmd 1074025677 [ 399.677950][T19171] tap0: linktype set to 65534 [ 399.744728][T19177] Cannot find add_set index 0 as target [ 399.758168][T19174] openvswitch: netlink: Message has 8 unknown bytes. [ 399.769925][T19174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.397495][T19223] gretap2: entered promiscuous mode [ 400.440333][T19223] gretap2: entered allmulticast mode [ 400.495142][T19228] team0: Device vti0 is of different type [ 400.813341][T19244] netlink: 'syz.1.3795': attribute type 39 has an invalid length. [ 401.076288][T19264] sctp: [Deprecated]: syz.0.3802 (pid 19264) Use of int in max_burst socket option. [ 401.076288][T19264] Use struct sctp_assoc_value instead [ 401.120631][T19268] netlink: 'syz.1.3804': attribute type 58 has an invalid length. [ 401.383032][T19285] x_tables: duplicate underflow at hook 2 [ 401.454994][T19283] can: request_module (can-proto-0) failed. [ 401.529473][T19292] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 401.576626][T19302] tipc: Enabled bearer , priority 0 [ 401.596915][T19301] tipc: Disabling bearer [ 402.055498][T19337] netlink: 'syz.2.3825': attribute type 13 has an invalid length. [ 402.326721][ T55] block nbd0: Possible stuck request ffff888024a70000: control (read@0,1024B). Runtime 240 seconds [ 402.339713][ T55] block nbd0: Possible stuck request ffff888024a701c0: control (read@1024,1024B). Runtime 240 seconds [ 402.351333][ T55] block nbd0: Possible stuck request ffff888024a70380: control (read@2048,1024B). Runtime 240 seconds [ 402.363254][ T11] block nbd0: Dead connection, failed to find a fallback [ 402.371982][ T11] block nbd0: shutting down sockets [ 402.378446][ T11] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 402.388637][ T55] block nbd0: Possible stuck request ffff888024a70540: control (read@3072,1024B). Runtime 240 seconds [ 402.400703][ T11] Buffer I/O error on dev nbd0, logical block 1, async page read [ 402.409218][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 402.418352][ T11] Buffer I/O error on dev nbd0, logical block 0, async page read [ 402.426302][ T11] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 402.435435][ T11] Buffer I/O error on dev nbd0, logical block 3, async page read [ 402.443661][ T11] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 402.453073][ T11] Buffer I/O error on dev nbd0, logical block 2, async page read [ 402.463669][ T7905] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 402.477078][ T7905] Buffer I/O error on dev nbd0, logical block 0, async page read [ 402.486804][ T7905] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 402.514365][ T7905] Buffer I/O error on dev nbd0, logical block 1, async page read [ 402.530368][ T7905] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 402.562086][ T7905] Buffer I/O error on dev nbd0, logical block 2, async page read [ 402.570731][ T7905] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 402.581215][ T7905] Buffer I/O error on dev nbd0, logical block 3, async page read [ 402.590257][ T7905] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 402.599590][ T7905] Buffer I/O error on dev nbd0, logical block 0, async page read [ 402.608947][ T7905] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 402.620034][ T7905] Buffer I/O error on dev nbd0, logical block 1, async page read [ 402.622896][T19337] 8021q: adding VLAN 0 to HW filter on device bond2 [ 402.632404][ T7905] ldm_validate_partition_table(): Disk read failed. [ 402.655903][ T7905] Dev nbd0: unable to read RDB block 0 [ 402.673291][ T7905] nbd0: unable to read partition table [ 402.713630][ T7905] ldm_validate_partition_table(): Disk read failed. [ 402.748531][ T7905] Dev nbd0: unable to read RDB block 0 [ 402.786629][ T7905] nbd0: unable to read partition table [ 402.800308][T19363] __nla_validate_parse: 22 callbacks suppressed [ 402.800327][T19363] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3832'. [ 402.823361][T19365] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3835'. [ 402.832955][ T7905] udevd[7905]: failed to send result of seq 13567 to main daemon: Connection refused [ 402.854285][T19369] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3833'. [ 402.864342][T19367] IPv6: NLM_F_REPLACE set, but no existing node found! [ 402.984767][T19377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3837'. [ 403.340475][T19394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3843'. [ 403.877714][T19420] netlink: 'syz.1.3848': attribute type 10 has an invalid length. [ 403.946516][T19424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.947602][T19420] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.969935][T19424] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3849'. [ 403.989239][T19420] bond0: (slave team0): Enslaving as an active interface with an up link [ 404.016096][T19425] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 404.124738][T19427] syzkaller0: entered promiscuous mode [ 404.130675][T19427] syzkaller0: entered allmulticast mode [ 404.163791][T19431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3852'. [ 404.256733][T19429] can: request_module (can-proto-0) failed. [ 404.352936][T19429] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3851'. [ 404.362929][T19429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3851'. [ 404.633240][T19445] ip6gre3: entered allmulticast mode [ 404.644846][T19448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3858'. [ 404.722742][T19449] syzkaller0: entered promiscuous mode [ 404.738354][T19449] syzkaller0: entered allmulticast mode [ 405.159739][T19451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.175764][T19451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.204869][T19451] bond0 (unregistering): (slave team0): Releasing backup interface [ 405.222699][T19451] bond0 (unregistering): Released all slaves [ 406.034706][T19498] bridge_slave_1: left allmulticast mode [ 406.070689][T19498] bridge_slave_1: left promiscuous mode [ 406.092612][T19498] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.218193][T19498] bridge_slave_0: left allmulticast mode [ 406.224039][T19498] bridge_slave_0: left promiscuous mode [ 406.241779][T19498] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.261695][T19508] netlink: 'syz.1.3877': attribute type 1 has an invalid length. [ 406.270033][T19508] netlink: 'syz.1.3877': attribute type 4 has an invalid length. [ 406.468885][T19506] IPv6: sit1: Disabled Multicast RS [ 407.474488][T19367] Set syz1 is full, maxelem 65536 reached [ 407.680078][T19559] netlink: 'syz.0.3890': attribute type 11 has an invalid length. [ 408.298068][T19606] __nla_validate_parse: 17 callbacks suppressed [ 408.298088][T19606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3904'. [ 408.403830][T19610] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 408.528677][T19626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3910'. [ 408.538449][T19626] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3910'. [ 408.562250][T19628] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 408.567560][T19626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3910'. [ 409.413310][T19674] netlink: 'syz.0.3930': attribute type 21 has an invalid length. [ 409.449632][T19674] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3930'. [ 409.466407][T19678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3932'. [ 409.501740][T19674] netlink: 'syz.0.3930': attribute type 5 has an invalid length. [ 409.541596][T19674] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3930'. [ 409.571234][T19678] vcan0 (unregistering): left allmulticast mode [ 409.826128][T19704] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3938'. [ 409.847603][T19703] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3940'. [ 410.000342][T10713] IPVS: starting estimator thread 0... [ 410.119609][T19716] IPVS: using max 36 ests per chain, 86400 per kthread [ 410.202609][T19726] macvtap1: entered promiscuous mode [ 410.226437][T19726] vlan0: entered promiscuous mode [ 410.247975][T19726] macvtap1: entered allmulticast mode [ 410.260516][T19726] vlan0: entered allmulticast mode [ 410.274777][T19726] veth0_vlan: entered allmulticast mode [ 410.308767][T19733] bridge8: entered promiscuous mode [ 410.314069][T19733] bridge8: entered allmulticast mode [ 410.405588][T19735] macvtap2: entered promiscuous mode [ 410.423544][T19735] macvtap2: entered allmulticast mode [ 410.455606][T19739] bridge8: entered promiscuous mode [ 410.477241][T19739] bridge8: entered allmulticast mode [ 410.554704][T19732] lo speed is unknown, defaulting to 1000 [ 410.942588][T19767] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 412.186418][T19825] netlink: 'syz.1.3974': attribute type 1 has an invalid length. [ 412.204556][T19825] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3974'. [ 412.638607][T19862] IPv6: sit1: Disabled Multicast RS [ 412.644753][T19862] sit1: entered allmulticast mode [ 413.041111][T19887] vlan2: entered promiscuous mode [ 413.059017][T19887] bridge0: entered promiscuous mode [ 413.167287][T19896] tipc: Enabling of bearer rejected, failed to enable media [ 413.428203][T19917] __nla_validate_parse: 2 callbacks suppressed [ 413.428222][T19917] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4002'. [ 413.528338][T19927] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 413.671630][T19932] 8021q: adding VLAN 0 to HW filter on device bond2 [ 413.801717][T19944] netlink: 'syz.1.4009': attribute type 13 has an invalid length. [ 413.870190][T19948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4012'. [ 414.630228][T19956] netlink: 'syz.2.4016': attribute type 1 has an invalid length. [ 414.716884][T19952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4014'. [ 414.816554][T19968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4020'. [ 414.827525][T19957] bond3: (slave gretap1): making interface the new active one [ 414.840973][T19957] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 415.002709][T19976] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4024'. [ 415.099414][T19982] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4026'. [ 415.288125][T19992] netlink: 'syz.4.4028': attribute type 1 has an invalid length. [ 415.310088][T19992] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 415.433534][T20006] netlink: 'syz.4.4032': attribute type 10 has an invalid length. [ 415.455922][T20009] netlink: 'syz.4.4032': attribute type 10 has an invalid length. [ 415.485601][T20006] team0: Port device dummy0 added [ 415.506590][T20009] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 415.540464][T20009] team0: Failed to send options change via netlink (err -105) [ 415.549285][T20009] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 415.561269][T20009] team0: Port device dummy0 removed [ 415.577864][T20009] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 415.697389][T20037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4041'. [ 415.791803][T20039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4042'. [ 415.811632][T20039] netlink: 'syz.0.4042': attribute type 30 has an invalid length. [ 415.820552][T20039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4042'. [ 415.895560][T20049] wg2: entered promiscuous mode [ 415.907992][T20049] wg2: entered allmulticast mode [ 415.917543][T20054] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4045'. [ 416.549336][T20096] tc_dump_action: action bad kind [ 416.595108][T20089] lo speed is unknown, defaulting to 1000 [ 416.820491][T20105] syzkaller0: entered promiscuous mode [ 416.826327][T20105] syzkaller0: entered allmulticast mode [ 439.969793][T20117] __nla_validate_parse: 7 callbacks suppressed [ 439.969811][T20117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4065'. [ 439.992778][T20119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4064'. [ 440.004210][T20118] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4066'. [ 440.028731][T20118] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 440.040469][T20110] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4062'. [ 440.054776][T20120] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4062'. [ 440.107177][T20117] FAULT_INJECTION: forcing a failure. [ 440.107177][T20117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.122316][T20119] pimreg3: entered allmulticast mode [ 440.152827][T20117] CPU: 1 UID: 0 PID: 20117 Comm: syz.3.4065 Not tainted syzkaller #0 PREEMPT(full) [ 440.152851][T20117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 440.152866][T20117] Call Trace: [ 440.152873][T20117] [ 440.152881][T20117] dump_stack_lvl+0x189/0x250 [ 440.152918][T20117] ? __pfx____ratelimit+0x10/0x10 [ 440.152939][T20117] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.152959][T20117] ? __pfx__printk+0x10/0x10 [ 440.152977][T20117] ? __might_fault+0xb0/0x130 [ 440.153013][T20117] should_fail_ex+0x414/0x560 [ 440.153043][T20117] _copy_from_user+0x2d/0xb0 [ 440.153065][T20117] kstrtouint_from_user+0xc4/0x170 [ 440.153087][T20117] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 440.153123][T20117] proc_fail_nth_write+0x88/0x200 [ 440.153146][T20117] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 440.153173][T20117] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 440.153196][T20117] vfs_write+0x27e/0xb30 [ 440.153227][T20117] ? __pfx_vfs_write+0x10/0x10 [ 440.153251][T20117] ? __fget_files+0x2a/0x420 [ 440.153272][T20117] ? __fget_files+0x3a0/0x420 [ 440.153286][T20117] ? __fget_files+0x2a/0x420 [ 440.153310][T20117] ksys_write+0x145/0x250 [ 440.153333][T20117] ? __pfx_ksys_write+0x10/0x10 [ 440.153359][T20117] ? do_syscall_64+0xbe/0xfa0 [ 440.153385][T20117] do_syscall_64+0xfa/0xfa0 [ 440.153404][T20117] ? lockdep_hardirqs_on+0x9c/0x150 [ 440.153425][T20117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.153442][T20117] ? clear_bhb_loop+0x60/0xb0 [ 440.153462][T20117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.153483][T20117] RIP: 0033:0x7fb5a6f8e17f [ 440.153500][T20117] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 440.153514][T20117] RSP: 002b:00007fb5a7eb7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 440.153533][T20117] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb5a6f8e17f [ 440.153546][T20117] RDX: 0000000000000001 RSI: 00007fb5a7eb70a0 RDI: 0000000000000006 [ 440.153556][T20117] RBP: 00007fb5a7eb7090 R08: 0000000000000000 R09: 0000000000000014 [ 440.153567][T20117] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 440.153578][T20117] R13: 00007fb5a71e6038 R14: 00007fb5a71e5fa0 R15: 00007ffdb03c9b38 [ 440.153607][T20117] [ 440.629481][T20136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4071'. [ 442.050794][T20142] dvmrp0: entered allmulticast mode [ 442.058462][T20144] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 442.185412][T20158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4076'. [ 442.207124][T20161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4077'. [ 442.239026][T20164] C: renamed from lo (while UP) [ 442.256989][T20164] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 442.269174][T20166] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4077'. [ 442.854063][T20214] tipc: Enabled bearer , priority 0 [ 442.865030][T20214] syzkaller0: entered promiscuous mode [ 442.870695][T20214] syzkaller0: entered allmulticast mode [ 443.064086][T20229] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20001 [ 443.330603][T20235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4096'. [ 443.402481][T20227] tipc: Resetting bearer [ 443.450700][T20213] tipc: Resetting bearer [ 443.492037][T20213] tipc: Disabling bearer [ 443.552707][T20242] netlink: 'syz.1.4098': attribute type 4 has an invalid length. [ 443.701391][T20246] IPVS: persistence engine module ip_vs_pe_ not found [ 443.835731][T20260] netlink: 'syz.2.4102': attribute type 27 has an invalid length. [ 444.000110][T20268] netlink: 'syz.4.4105': attribute type 9 has an invalid length. [ 444.015545][T20268] netlink: 'syz.4.4105': attribute type 11 has an invalid length. [ 444.046533][T20268] netlink: 'syz.4.4105': attribute type 12 has an invalid length. [ 444.059085][T20268] openvswitch: netlink: Message has 4 unknown bytes. [ 444.145358][T20277] syzkaller0: entered promiscuous mode [ 444.167196][T20277] syzkaller0: entered allmulticast mode [ 444.461753][T20294] : renamed from vlan0 (while UP) [ 444.491378][ T5838] block nbd4: Receive control failed (result -32) [ 444.601394][T20301] syzkaller0: entered promiscuous mode [ 444.607470][T20301] syzkaller0: entered allmulticast mode [ 444.647204][T20301] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 444.894219][T20324] sctp: [Deprecated]: syz.2.4122 (pid 20324) Use of struct sctp_assoc_value in delayed_ack socket option. [ 444.894219][T20324] Use struct sctp_sack_info instead [ 445.364769][T20329] __nla_validate_parse: 73 callbacks suppressed [ 445.364787][T20329] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4123'. [ 445.380919][T20329] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4123'. [ 445.390722][T20329] netlink: 'syz.2.4123': attribute type 5 has an invalid length. [ 445.398831][T20329] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4123'. [ 446.573528][T20334] netlink: 'syz.0.4124': attribute type 13 has an invalid length. [ 446.605316][T20329] team0 (unregistering): Port device team_slave_0 removed [ 446.617970][T20329] team0 (unregistering): Port device team_slave_1 removed [ 446.821470][T20358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4130'. [ 446.894060][T20362] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4131'. [ 446.922206][T20334] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 447.059182][T20368] netlink: 'syz.1.4132': attribute type 83 has an invalid length. [ 447.155088][T20374] lo speed is unknown, defaulting to 1000 [ 447.814841][T20416] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4149'. [ 447.830651][T20418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4148'. [ 447.934624][T20418] netlink: 'syz.0.4148': attribute type 1 has an invalid length. [ 447.951783][T20422] team0: Device wireguard0 is of different type [ 447.976695][T20424] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4150'. [ 448.099114][T20432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4153'. [ 448.187171][T20432] team0: Port device dummy0 removed [ 448.308712][T20438] ip6gre2: entered allmulticast mode [ 448.723189][T20456] IPVS: set_ctl: invalid protocol: 21187 172.20.20.35:21 [ 449.086770][T20470] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4166'. [ 449.099379][T20471] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 449.418884][T20502] netlink: 'syz.1.4176': attribute type 48 has an invalid length. [ 450.315188][T20558] IPVS: Error connecting to the multicast addr [ 450.349234][T20561] tipc: Enabled bearer , priority 0 [ 450.404072][T20565] netlink: 'syz.2.4192': attribute type 62 has an invalid length. [ 450.413018][T20561] syzkaller0: entered promiscuous mode [ 450.419854][T20567] __nla_validate_parse: 3 callbacks suppressed [ 450.419870][T20567] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4193'. [ 450.429026][T20561] syzkaller0: entered allmulticast mode [ 450.568516][T20574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4197'. [ 450.583076][T20559] tipc: Resetting bearer [ 450.617968][T20559] tipc: Disabling bearer [ 450.843692][T20592] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4201'. [ 450.923083][T20599] netlink: 'syz.2.4203': attribute type 1 has an invalid length. [ 450.934732][T20592] netlink: 'syz.4.4201': attribute type 13 has an invalid length. [ 451.087699][T20592] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 451.274285][T20623] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4210'. [ 451.302188][T20618] netlink: 196 bytes leftover after parsing attributes in process `syz.1.4208'. [ 451.325166][T20626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4211'. [ 451.356526][T20626] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4211'. [ 451.566157][T20641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4217'. [ 451.611024][T20643] Bluetooth: MGMT ver 1.23 [ 451.648436][T20648] xt_HMARK: spi-set and port-set can't be combined [ 451.670862][T20648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4220'. [ 451.777689][T20657] IPv6: NLM_F_REPLACE set, but no existing node found! [ 451.809382][T20647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4219'. [ 452.407685][ T5832] Bluetooth: hci5: command 0x0406 tx timeout [ 453.565247][T20688] : renamed from wg2 (while UP) [ 453.692709][ T5838] Bluetooth: hci0: command tx timeout [ 453.699380][ T6679] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.736820][T20704] netlink: 'syz.3.4240': attribute type 1 has an invalid length. [ 453.809481][T20704] 8021q: adding VLAN 0 to HW filter on device bond1 [ 453.839791][T20711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.988981][T20704] 8021q: adding VLAN 0 to HW filter on device bond1 [ 454.005391][T20704] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 454.022019][T20704] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 454.035427][T20718] netlink: 'syz.3.4240': attribute type 26 has an invalid length. [ 454.108926][T20718] netlink: 'syz.3.4240': attribute type 26 has an invalid length. [ 454.144772][T20724] vlan2: entered allmulticast mode [ 454.151456][T20724] bond1: entered allmulticast mode [ 455.072671][T20783] netlink: 'syz.2.4258': attribute type 21 has an invalid length. [ 455.081827][T20783] netlink: 'syz.2.4258': attribute type 4 has an invalid length. [ 455.094787][T20783] netlink: 'syz.2.4258': attribute type 5 has an invalid length. [ 455.123239][T20782] netlink: 'syz.2.4258': attribute type 21 has an invalid length. [ 455.133855][T20786] netlink: 'syz.2.4258': attribute type 21 has an invalid length. [ 455.145242][T20782] netlink: 'syz.2.4258': attribute type 4 has an invalid length. [ 455.153380][T20782] netlink: 'syz.2.4258': attribute type 5 has an invalid length. [ 455.169051][T20786] netlink: 'syz.2.4258': attribute type 4 has an invalid length. [ 455.177240][T20786] netlink: 'syz.2.4258': attribute type 5 has an invalid length. [ 455.275658][T20798] x_tables: duplicate underflow at hook 2 [ 455.373443][T20804] ip6gre1: entered promiscuous mode [ 455.379052][T20804] ip6gre1: entered allmulticast mode [ 455.395283][T20804] syzkaller1: entered promiscuous mode [ 455.422893][T20804] syzkaller1: entered allmulticast mode [ 455.667813][T20815] __nla_validate_parse: 25 callbacks suppressed [ 455.667830][T20815] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4271'. [ 455.711254][T20822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.736614][T20822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4274'. [ 455.874570][T20815] bond3 (unregistering): Released all slaves [ 456.161653][T20852] netlink: 596 bytes leftover after parsing attributes in process `syz.1.4280'. [ 456.214916][ T6033] IPVS: starting estimator thread 0... [ 456.218656][T20852] netlink: 596 bytes leftover after parsing attributes in process `syz.1.4280'. [ 456.224671][T20848] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 456.326336][T20854] IPVS: using max 28 ests per chain, 67200 per kthread [ 456.410046][T20869] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4286'. [ 456.452731][T20870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4284'. [ 456.607863][T20875] 8021q: adding VLAN 0 to HW filter on device bond4 [ 456.887689][T20889] bond5: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 456.987354][T20901] openvswitch: netlink: Flow actions attr not present in new flow. [ 457.060862][T20907] netlink: 'syz.0.4298': attribute type 3 has an invalid length. [ 457.084073][T20907] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4298'. [ 457.236314][T20912] nbd5: detected capacity change from 0 to 127 [ 457.257650][T20911] tipc: Started in network mode [ 457.259723][ T5838] block nbd5: Receive control failed (result -32) [ 457.262537][T20911] tipc: Node identity e0000001, cluster identity 4711 [ 457.293359][T20911] tipc: Enabling of bearer rejected, failed to enable media [ 457.324960][T20913] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4300'. [ 457.713435][T20952] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 457.752086][T20954] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 457.911355][T20968] netlink: 184 bytes leftover after parsing attributes in process `syz.0.4314'. [ 457.922176][T20968] NCSI netlink: No device for ifindex 131092 [ 457.941432][T20968] syzkaller0: entered promiscuous mode [ 457.947820][T20968] syzkaller0: entered allmulticast mode [ 458.213728][T20981] SET target dimension over the limit! [ 458.343420][T20985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4322'. [ 458.626664][T20995] bond2: Unable to set down delay as MII monitoring is disabled [ 458.637688][T20995] bond2 (unregistering): Released all slaves [ 458.834157][T21008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 459.543706][T21047] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 459.551031][T21047] IPv6: NLM_F_CREATE should be set when creating new route [ 459.783951][T21059] team0: entered allmulticast mode [ 459.789343][T21059] team_slave_0: entered allmulticast mode [ 459.795425][T21059] team_slave_1: entered allmulticast mode [ 459.851376][T21060] tipc: Enabled bearer , priority 0 [ 459.867833][T21060] syzkaller0: entered promiscuous mode [ 459.887473][T21060] syzkaller0: entered allmulticast mode [ 459.898562][T21060] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 459.978061][T21060] tipc: Resetting bearer [ 460.052651][T21075] syzkaller0: entered promiscuous mode [ 460.058315][T21075] syzkaller0: entered allmulticast mode [ 460.116735][T21073] tipc: Resetting bearer [ 460.179120][T21073] tipc: Disabling bearer [ 460.462861][T21100] syzkaller1: entered promiscuous mode [ 460.476022][T21100] syzkaller1: entered allmulticast mode [ 460.525459][T21100] ipt_REJECT: ECHOREPLY no longer supported. [ 460.552457][T21112] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 461.112219][T21139] __nla_validate_parse: 12 callbacks suppressed [ 461.112239][T21139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4374'. [ 461.207591][T21136] team_slave_0 (unregistering): left allmulticast mode [ 461.217942][T21136] team0: Port device team_slave_0 removed [ 461.456465][T21158] IPVS: set_ctl: invalid protocol: 60 10.1.1.2:20001 [ 461.624171][T21169] IPVS: ip_vs_add_dest(): server weight less than zero [ 461.775524][T21177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.868759][T21181] bond0: option lp_interval: invalid value (0) [ 461.875483][T21181] bond0: option lp_interval: allowed values 1 - 2147483647 [ 461.888228][T21181] bond0 (unregistering): Released all slaves [ 462.015354][T21179] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.096719][T21193] bond0: entered allmulticast mode [ 462.170650][T21179] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.351268][T21179] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.527086][T21179] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.564009][T21219] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 462.758947][T21229] netlink: 'syz.0.4403': attribute type 11 has an invalid length. [ 462.769189][T21229] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4403'. [ 462.805730][ T1344] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.831886][ T1344] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.879103][ T7082] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.910267][ T7082] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.060217][T21247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4409'. [ 463.362051][T21259] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4414'. [ 463.376557][T21259] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4414'. [ 463.396123][T21259] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4414'. [ 463.897139][T21307] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 464.053704][T21312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4429'. [ 464.069914][T21319] syzkaller0: entered promiscuous mode [ 464.086529][T21319] syzkaller0: entered allmulticast mode [ 464.244109][T21336] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 464.429889][T21346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4438'. [ 464.917527][T21390] 8021q: adding VLAN 0 to HW filter on device bond3 [ 464.925766][T21390] bond0: (slave bond3): Enslaving as an active interface with a down link [ 464.981648][T21393] validate_nla: 63 callbacks suppressed [ 464.981668][T21393] netlink: 'syz.4.4451': attribute type 13 has an invalid length. [ 465.174245][T21396] lo: Caught tx_queue_len zero misconfig [ 465.690702][T21414] syz_tun: entered allmulticast mode [ 465.921091][T21432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4463'. [ 465.960465][T21419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4459'. [ 466.141307][T21414] pimreg: entered allmulticast mode [ 466.151313][T21419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.176199][T21419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.198967][T21419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.208103][T21419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.271981][T21447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4467'. [ 466.334029][T21449] netlink: 'syz.3.4468': attribute type 11 has an invalid length. [ 466.501023][T21413] syz_tun: left allmulticast mode [ 466.743849][T21485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4480'. [ 466.755450][T21485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4480'. [ 466.765858][T21485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4480'. [ 466.777177][T21485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4480'. [ 466.786327][T21485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4480'. [ 466.798035][T21486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4478'. [ 466.800087][T21485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4480'. [ 466.808003][T21486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4478'. [ 466.816649][T21485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4480'. [ 467.024089][T21502] netlink: 'syz.1.4483': attribute type 4 has an invalid length. [ 467.191314][T21506] bond2: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 467.203264][T21506] bond2 (unregistering): Released all slaves [ 467.617111][T21510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.896192][T21525] syzkaller0: entered promiscuous mode [ 467.902009][T21525] syzkaller0: entered allmulticast mode [ 469.502355][T21540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 469.814270][T21555] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.834540][T21564] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 469.859158][ T30] audit: type=1804 audit(1763021565.716:3): pid=21564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4499" name="/newroot/189/cgroup.controllers" dev="tmpfs" ino=977 res=1 errno=0 [ 469.895769][ T30] audit: type=1800 audit(1763021565.726:4): pid=21564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4499" name="cgroup.controllers" dev="tmpfs" ino=977 res=0 errno=0 [ 470.028026][T21555] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.194596][T21555] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.253392][T21585] syzkaller0: entered promiscuous mode [ 470.268129][T21585] syzkaller0: entered allmulticast mode [ 470.285317][T21585] netlink: 'syz.2.4509': attribute type 1 has an invalid length. [ 470.320836][T21555] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.324381][T21585] netlink: 'syz.2.4509': attribute type 3 has an invalid length. [ 470.453532][T21600] lo: entered allmulticast mode [ 470.534749][ T7079] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.584615][ T6679] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.633593][ T7079] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.700287][ T7079] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.051931][T21632] x_tables: unsorted entry at hook 2 [ 471.063668][T21631] x_tables: unsorted entry at hook 2 [ 471.119964][T21636] netlink: 'syz.3.4522': attribute type 39 has an invalid length. [ 471.157275][T21640] netlink: 'syz.2.4523': attribute type 10 has an invalid length. [ 471.564183][T21668] __nla_validate_parse: 14 callbacks suppressed [ 471.564200][T21668] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4532'. [ 471.586423][T21668] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4532'. [ 471.787682][T21685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4537'. [ 471.860111][T21689] netlink: 'syz.3.4539': attribute type 1 has an invalid length. [ 471.947164][T21689] bond2: (slave gretap2): making interface the new active one [ 471.955734][T21689] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 471.989842][T21689] netlink: 'syz.3.4539': attribute type 21 has an invalid length. [ 472.022652][T21689] IPv6: NLM_F_CREATE should be specified when creating new route [ 472.038845][T21706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.039198][T21689] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 472.055112][T21689] IPv6: NLM_F_CREATE should be set when creating new route [ 472.062917][T21689] IPv6: NLM_F_CREATE should be set when creating new route [ 472.070288][T21689] IPv6: NLM_F_CREATE should be set when creating new route [ 472.187743][T21710] ip6gre0: Master is either lo or non-ether device [ 472.205598][T21710] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 472.269972][T21714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4547'. [ 472.271635][T21717] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 472.319750][T21721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4549'. [ 472.369506][T21723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4550'. [ 472.886858][ T5832] Bluetooth: hci1: command 0x041b tx timeout [ 478.006277][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 481.052955][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.126176][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 497.067815][T21738] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 497.080658][T21734] vlan2: entered promiscuous mode [ 497.090171][T21734] vlan2: entered allmulticast mode [ 497.095331][T21734] hsr_slave_1: entered allmulticast mode [ 497.141086][T21730] Z7nz>RA: renamed from lo (while UP) [ 497.181411][T21742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4553'. [ 497.470759][T21767] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4563'. [ 497.479237][T21763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4561'. [ 497.482959][T21767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4563'. [ 497.510109][T21767] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4563'. [ 498.213739][T21793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4569'. [ 498.334170][T21799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4570'. [ 498.367358][T21799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4570'. [ 499.142305][T21795] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 499.485283][T21848] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4584'. [ 499.507847][T21848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4584'. [ 499.690465][T21859] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.785353][T21872] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 500.215852][T21919] netlink: 'syz.0.4605': attribute type 2 has an invalid length. [ 500.664485][T21951] xt_l2tp: wrong L2TP version: 0 [ 500.714224][T21954] netlink: 'syz.1.4618': attribute type 1 has an invalid length. [ 500.923273][T21967] C: Caught tx_queue_len zero misconfig [ 501.065079][T21982] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 501.201050][T21989] openvswitch: netlink: IP tunnel dst address not specified [ 501.208156][T21990] netlink: 'syz.4.4631': attribute type 6 has an invalid length. [ 501.342246][T21995] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20000 [ 501.350868][T22007] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20000 [ 501.379188][T22005] macvtap1: entered promiscuous mode [ 501.384614][T22005] macvtap1: entered allmulticast mode [ 501.787889][T22033] team0: Port device team_slave_0 removed [ 501.905337][T22038] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20000 [ 502.288915][T22063] netlink: 'syz.0.4651': attribute type 1 has an invalid length. [ 502.297566][T22063] __nla_validate_parse: 16 callbacks suppressed [ 502.297586][T22063] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4651'. [ 502.321552][T22063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4651'. [ 502.331088][T22063] netlink: 'syz.0.4651': attribute type 7 has an invalid length. [ 502.339525][T22063] netlink: 'syz.0.4651': attribute type 8 has an invalid length. [ 502.347659][T22063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4651'. [ 502.375724][T22071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4654'. [ 502.390521][T22071] netlink: 'syz.2.4654': attribute type 10 has an invalid length. [ 502.401125][T22071] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4654'. [ 502.422731][T22071] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 502.535498][T22084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4656'. [ 502.620919][T22090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4658'. [ 502.652095][T22093] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 3, id = 0 [ 502.735896][T22098] tipc: Enabled bearer , priority 0 [ 502.782634][T22097] tipc: Disabling bearer [ 502.843055][T22109] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4662'. [ 502.852393][T22109] ip6tnl0: Caught tx_queue_len zero misconfig [ 502.925237][T22112] netlink: 'syz.4.4664': attribute type 8 has an invalid length. [ 502.933143][T22112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4664'. [ 502.948349][T22112] bond0: entered promiscuous mode [ 502.953414][T22112] bond_slave_0: entered promiscuous mode [ 502.959578][T22112] bond_slave_1: entered promiscuous mode [ 502.965432][T22112] dummy0: entered promiscuous mode [ 502.971590][T22112] bond3: entered promiscuous mode [ 502.979849][T22112] gretap0: entered promiscuous mode [ 502.986523][T22112] veth0_to_batadv: entered promiscuous mode [ 502.993360][T22112] debugfs: 'hsr1' already exists in 'hsr' [ 502.999260][T22112] Cannot create hsr debugfs directory [ 503.004712][T22112] hsr1: entered promiscuous mode [ 503.019599][T22118] netlink: 'syz.2.4665': attribute type 8 has an invalid length. [ 503.063923][T22121] xt_ecn: cannot match TCP bits for non-tcp packets [ 503.153317][T22126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4667'. [ 503.371583][T22144] netlink: 'syz.2.4670': attribute type 12 has an invalid length. [ 505.510518][T22189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.992397][T22224] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 506.295185][T22237] netlink: 'syz.3.4704': attribute type 1 has an invalid length. [ 506.304437][T22237] netlink: 'syz.3.4704': attribute type 2 has an invalid length. [ 506.557913][T22244] bond0: (slave dummy0): Releasing backup interface [ 506.571056][T22244] dummy0: left promiscuous mode [ 506.585067][T22244] batman_adv: batadv0: Adding interface: dummy0 [ 506.636758][T22244] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.758409][T22244] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 506.881122][T22255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.930387][T22255] netlink: 'syz.2.4710': attribute type 13 has an invalid length. [ 506.970252][ T1344] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.970392][T22255] netlink: 'syz.2.4710': attribute type 13 has an invalid length. [ 507.009041][ T1344] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.046691][ T1344] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.075034][T22268] tipc: Enabled bearer , priority 0 [ 507.101842][T22269] syzkaller0: entered promiscuous mode [ 507.117771][T22269] syzkaller0: entered allmulticast mode [ 507.151308][ T1344] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.188153][T22251] tipc: Resetting bearer [ 507.279777][T22251] tipc: Disabling bearer [ 507.351577][T22281] x_tables: duplicate underflow at hook 1 [ 507.440709][T22283] __nla_validate_parse: 8 callbacks suppressed [ 507.440727][T22283] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4717'. [ 507.543638][T22289] x_tables: duplicate underflow at hook 1 [ 507.634439][T22292] netlink: 'syz.0.4721': attribute type 83 has an invalid length. [ 507.645692][T22292] xt_connbytes: Forcing CT accounting to be enabled [ 507.865896][T22315] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4725'. [ 507.876704][T22317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4727'. [ 507.916183][T22318] netlink: 'syz.0.4728': attribute type 2 has an invalid length. [ 507.917772][T22312] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4726'. [ 507.953787][T22318] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4728'. [ 508.097330][T22315] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.111577][T22315] bond0 (unregistering): Released all slaves [ 508.440498][T22350] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4736'. [ 508.524150][T22356] netlink: 'syz.1.4737': attribute type 1 has an invalid length. [ 508.537523][T22356] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4737'. [ 508.642433][T22361] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4738'. [ 508.789387][T22369] bond2: entered allmulticast mode [ 508.796077][T22369] 8021q: adding VLAN 0 to HW filter on device bond2 [ 508.804513][T22369] bridge0: port 3(bond2) entered blocking state [ 508.811873][T22369] bridge0: port 3(bond2) entered disabled state [ 508.821898][T22369] bond2: entered promiscuous mode [ 508.830844][T22369] bridge0: port 3(bond2) entered blocking state [ 508.837502][T22369] bridge0: port 3(bond2) entered forwarding state [ 509.211043][T22399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4749'. [ 509.437512][ T5838] block nbd6: Receive control failed (result -32) [ 509.480703][ T1344] bridge0: port 3(bond2) entered disabled state [ 509.521258][T22420] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4755'. [ 509.656296][T22423] netlink: 'syz.0.4756': attribute type 63 has an invalid length. [ 509.773862][T22438] netlink: 'syz.2.4762': attribute type 1 has an invalid length. [ 510.034628][T22462] netlink: 'syz.2.4771': attribute type 1 has an invalid length. [ 510.109523][T22462] 8021q: adding VLAN 0 to HW filter on device bond6 [ 510.429108][T22471] bond6: (slave veth0_to_bond): making interface the new active one [ 510.478923][T22471] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 510.673746][T22500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 510.832639][T22515] xt_l2tp: missing protocol rule (udp|l2tpip) [ 511.182448][T22537] x_tables: duplicate underflow at hook 2 [ 511.292199][T22534] batadv_slave_0: entered promiscuous mode [ 511.315238][T22547] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 511.315781][T22534] batadv_slave_0: left promiscuous mode [ 511.345386][T22547] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 512.133918][T22606] validate_nla: 1 callbacks suppressed [ 512.133942][T22606] netlink: 'syz.4.4816': attribute type 1 has an invalid length. [ 512.177995][T22606] 8021q: adding VLAN 0 to HW filter on device bond4 [ 512.192959][ T5838] Bluetooth: hci0: link tx timeout [ 512.200032][ T5838] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 512.210725][ T5832] Bluetooth: hci0: link tx timeout [ 512.216302][ T5832] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 512.916889][T22631] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 512.937955][ C1] vcan0: j1939_tp_rxtimer: 0xffff888020b05400: rx timeout, send abort [ 512.947996][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888020b05400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 512.964920][T22631] __nla_validate_parse: 11 callbacks suppressed [ 512.964939][T22631] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4822'. [ 513.080564][T22639] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4825'. [ 513.187371][T22643] tipc: Enabled bearer , priority 0 [ 513.205320][T22645] netlink: 'syz.3.4828': attribute type 12 has an invalid length. [ 513.227168][T22643] syzkaller0: entered promiscuous mode [ 513.232670][T22643] syzkaller0: entered allmulticast mode [ 513.239901][T22647] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 513.247666][T22645] netlink: 'syz.3.4828': attribute type 12 has an invalid length. [ 513.340925][T22643] tipc: Resetting bearer [ 513.374350][T22642] tipc: Resetting bearer [ 513.506846][T22642] tipc: Disabling bearer [ 513.508478][T22669] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4835'. [ 513.622544][T22671] sit2: entered promiscuous mode [ 513.641383][T22671] sit2: entered allmulticast mode [ 513.668838][T22680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.918053][T22697] netlink: 'syz.4.4844': attribute type 1 has an invalid length. [ 513.932149][T22698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4846'. [ 514.000361][T22704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4848'. [ 514.026574][T22697] bond5: entered promiscuous mode [ 514.044531][T22697] bond5: entered allmulticast mode [ 514.070094][T22697] 8021q: adding VLAN 0 to HW filter on device bond5 [ 514.094491][T22704] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 514.115053][T22715] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4849'. [ 514.141456][T22709] vlan3: entered promiscuous mode [ 514.146670][T22709] bridge0: entered promiscuous mode [ 514.153852][T22715] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4849'. [ 514.165278][T22709] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4849'. [ 514.248037][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 514.434804][T22744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4857'. [ 514.639319][T22757] bond7: entered allmulticast mode [ 514.645007][T22757] 8021q: adding VLAN 0 to HW filter on device bond7 [ 514.654175][T22757] bridge0: port 2(bond7) entered blocking state [ 514.661010][T22757] bridge0: port 2(bond7) entered disabled state [ 514.677146][T22757] bond7: entered promiscuous mode [ 514.682919][T22757] bridge0: port 2(bond7) entered blocking state [ 514.689354][T22757] bridge0: port 2(bond7) entered forwarding state [ 514.802871][T22754] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4860'. [ 514.865344][T22780] netlink: 'syz.1.4864': attribute type 1 has an invalid length. [ 514.916834][ T1344] bridge0: port 2(bond7) entered disabled state [ 515.014771][T22784] xt_hashlimit: size too large, truncated to 1048576 [ 515.075849][T22790] macvtap1: entered promiscuous mode [ 515.098184][T22790] macvtap1: entered allmulticast mode [ 515.117473][T22788] netlink: 'syz.3.4867': attribute type 1 has an invalid length. [ 515.145126][T22788] netlink: 'syz.3.4867': attribute type 1 has an invalid length. [ 515.303030][T22811] wlan0 speed is unknown, defaulting to 1000 [ 515.332576][T22811] wlan0 speed is unknown, defaulting to 1000 [ 515.359815][T22811] wlan0 speed is unknown, defaulting to 1000 [ 515.380770][T22811] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 515.431413][T22820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.437852][T22811] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 515.560419][T22817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.823001][T22811] wlan0 speed is unknown, defaulting to 1000 [ 515.832237][T22811] wlan0 speed is unknown, defaulting to 1000 [ 515.840386][T22811] wlan0 speed is unknown, defaulting to 1000 [ 515.848758][T22811] wlan0 speed is unknown, defaulting to 1000 [ 515.856792][T22811] wlan0 speed is unknown, defaulting to 1000 [ 515.864895][T22811] wlan0 speed is unknown, defaulting to 1000 [ 516.114843][T22839] netlink: 'syz.2.4881': attribute type 4 has an invalid length. [ 516.224999][T22849] netlink: 'syz.1.4886': attribute type 30 has an invalid length. [ 516.253093][T22853] netlink: 'syz.4.4884': attribute type 1 has an invalid length. [ 516.295203][T22853] bond6: entered promiscuous mode [ 516.313592][T22853] 8021q: adding VLAN 0 to HW filter on device bond6 [ 516.366989][T22860] bond6: (slave bridge11): making interface the new active one [ 516.374735][T22860] bridge11: entered promiscuous mode [ 516.381644][T22860] bond6: (slave bridge11): Enslaving as an active interface with an up link [ 516.573578][T22876] team0: Caught tx_queue_len zero misconfig [ 516.607251][T22878] : renamed from wg2 (while UP) [ 516.910425][T22897] lo speed is unknown, defaulting to 1000 [ 517.144236][T22922] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 517.196173][T22924] sock: sock_timestamping_bind_phc: sock not bind to device [ 517.686985][T22951] netlink: 'syz.0.4915': attribute type 3 has an invalid length. [ 517.874048][T22897] wlan0 speed is unknown, defaulting to 1000 [ 518.226738][T22985] __nla_validate_parse: 13 callbacks suppressed [ 518.226755][T22985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4925'. [ 518.258274][T22988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.265786][T22986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4925'. [ 518.287857][T22990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4927'. [ 518.408508][T22999] netlink: 'syz.0.4929': attribute type 3 has an invalid length. [ 518.433649][T22999] netlink: 'syz.0.4929': attribute type 1 has an invalid length. [ 518.458561][T22999] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4929'. [ 519.257164][T23044] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4942'. [ 519.339646][T23044] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4942'. [ 519.359735][T23044] syzkaller0: entered promiscuous mode [ 519.365228][T23044] syzkaller0: entered allmulticast mode [ 519.393340][T23044] tipc: Enabled bearer , priority 0 [ 519.415751][T23042] tipc: Resetting bearer [ 519.462923][T23042] tipc: Disabling bearer [ 519.484048][T23062] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4946'. [ 519.498427][T23066] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4946'. [ 519.509419][T23062] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4946'. [ 519.625542][T23074] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20000 [ 519.944740][T23103] atomic_op ffff8880291c8998 conn xmit_atomic 0000000000000000 [ 520.281376][T23119] tipc: Enabled bearer , priority 0 [ 520.289535][T23119] syzkaller0: entered promiscuous mode [ 520.295114][T23119] syzkaller0: entered allmulticast mode [ 520.368493][T23118] tipc: Resetting bearer [ 520.427756][T23118] tipc: Disabling bearer [ 520.700409][T23152] netlink: 'syz.0.4968': attribute type 2 has an invalid length. [ 520.855656][T23161] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4970'. [ 520.881722][T23165] netlink: 'syz.1.4971': attribute type 1 has an invalid length. [ 520.888256][T23167] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 520.971317][T23165] 8021q: adding VLAN 0 to HW filter on device bond3 [ 521.058113][T23181] netlink: 'syz.2.4973': attribute type 1 has an invalid length. [ 521.072185][T23181] netlink: 'syz.2.4973': attribute type 7 has an invalid length. [ 521.085130][T23181] netlink: 'syz.2.4973': attribute type 8 has an invalid length. [ 521.093627][T23181] NCSI netlink: No device for ifindex 65584 [ 521.176127][T23187] netlink: 'syz.1.4978': attribute type 29 has an invalid length. [ 521.323076][T23195] bond5: down delay (1) is not a multiple of miimon (48), value rounded to 0 ms [ 521.337351][T23195] bond5 (unregistering): Released all slaves [ 521.680908][T23216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.957794][T23254] xt_hashlimit: size too large, truncated to 1048576 [ 522.040509][T23254] syz.1.4998: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 522.064565][T23265] SET target dimension over the limit! [ 522.080969][T23258] team0: Device wireguard0 is of different type [ 522.083781][T23254] CPU: 0 UID: 0 PID: 23254 Comm: syz.1.4998 Not tainted syzkaller #0 PREEMPT(full) [ 522.083805][T23254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 522.083815][T23254] Call Trace: [ 522.083822][T23254] [ 522.083829][T23254] dump_stack_lvl+0x189/0x250 [ 522.083859][T23254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 522.083880][T23254] ? __pfx__printk+0x10/0x10 [ 522.083898][T23254] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 522.083929][T23254] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 522.083953][T23254] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 522.083978][T23254] warn_alloc+0x214/0x310 [ 522.084008][T23254] ? __pfx_warn_alloc+0x10/0x10 [ 522.084040][T23254] ? __get_vm_area_node+0x28f/0x300 [ 522.084062][T23254] ? htable_create+0x101/0x7a0 [ 522.084087][T23254] __vmalloc_node_range_noprof+0x690/0x12d0 [ 522.084135][T23254] ? alloc_pages_mpol+0x3cd/0x4a0 [ 522.084154][T23254] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 522.084180][T23254] ? rcu_is_watching+0x15/0xb0 [ 522.084199][T23254] ? htable_create+0x101/0x7a0 [ 522.084220][T23254] __kvmalloc_node_noprof+0x674/0x910 [ 522.084243][T23254] ? htable_create+0x101/0x7a0 [ 522.084261][T23254] ? hashlimit_pernet+0x23/0x240 [ 522.084280][T23254] ? hashlimit_pernet+0x23/0x240 [ 522.084299][T23254] ? hashlimit_pernet+0x23/0x240 [ 522.084326][T23254] htable_create+0x101/0x7a0 [ 522.084353][T23254] hashlimit_mt_check_common+0x719/0xa10 [ 522.084383][T23254] xt_check_match+0x3d1/0xab0 [ 522.084408][T23254] ? __pfx_xt_check_match+0x10/0x10 [ 522.084431][T23254] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 522.084464][T23254] ? xt_find_match+0x1f7/0x250 [ 522.084491][T23254] translate_table+0x1553/0x2040 [ 522.084537][T23254] ? __pfx_translate_table+0x10/0x10 [ 522.084561][T23254] ? __might_fault+0xb0/0x130 [ 522.084603][T23254] ? _copy_from_user+0x94/0xb0 [ 522.084629][T23254] do_ip6t_set_ctl+0x970/0xce0 [ 522.084660][T23254] ? rcu_is_watching+0x15/0xb0 [ 522.084679][T23254] ? trace_contention_end+0x39/0x120 [ 522.084699][T23254] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 522.084745][T23254] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 522.084774][T23254] ? file_init_path+0x3b/0x590 [ 522.084796][T23254] ? __lock_acquire+0xab9/0xd20 [ 522.084817][T23254] nf_setsockopt+0x26f/0x290 [ 522.084843][T23254] rawv6_setsockopt+0x23b/0x5b0 [ 522.084864][T23254] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 522.084880][T23254] ? aa_sock_opt_perm+0xff/0x1b0 [ 522.084905][T23254] ? sock_common_setsockopt+0x36/0xc0 [ 522.084928][T23254] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 522.084952][T23254] do_sock_setsockopt+0x17c/0x1b0 [ 522.084974][T23254] __x64_sys_setsockopt+0x13f/0x1b0 [ 522.084997][T23254] do_syscall_64+0xfa/0xfa0 [ 522.085018][T23254] ? lockdep_hardirqs_on+0x9c/0x150 [ 522.085039][T23254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.085056][T23254] ? clear_bhb_loop+0x60/0xb0 [ 522.085076][T23254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.085092][T23254] RIP: 0033:0x7fee2e18f6c9 [ 522.085108][T23254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.085121][T23254] RSP: 002b:00007fee2f0c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 522.085139][T23254] RAX: ffffffffffffffda RBX: 00007fee2e3e6090 RCX: 00007fee2e18f6c9 [ 522.085151][T23254] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 522.085161][T23254] RBP: 00007fee2e211f91 R08: 0000000000000528 R09: 0000000000000000 [ 522.085172][T23254] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000000 [ 522.085182][T23254] R13: 00007fee2e3e6128 R14: 00007fee2e3e6090 R15: 00007fff1b790618 [ 522.085213][T23254] [ 522.085232][T23254] Mem-Info: [ 522.218816][T23273] netlink: 'syz.0.5002': attribute type 1 has an invalid length. [ 522.222150][T23254] active_anon:3963 inactive_anon:0 isolated_anon:0 [ 522.222150][T23254] active_file:3206 inactive_file:40044 isolated_file:0 [ 522.222150][T23254] unevictable:768 dirty:91 writeback:0 [ 522.222150][T23254] slab_reclaimable:12057 slab_unreclaimable:187379 [ 522.222150][T23254] mapped:30144 shmem:1353 pagetables:1004 [ 522.222150][T23254] sec_pagetables:0 bounce:0 [ 522.222150][T23254] kernel_misc_reclaimable:0 [ 522.222150][T23254] free:1240895 free_pcp:15078 free_cma:0 [ 522.523708][T23254] Node 0 active_anon:15952kB inactive_anon:0kB active_file:12824kB inactive_file:159976kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136976kB dirty:364kB writeback:0kB shmem:3876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13216kB pagetables:4280kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 522.557330][T23254] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 522.588367][T23254] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 522.640967][T23254] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 522.661368][T23254] Node 0 DMA32 free:1061556kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16052kB inactive_anon:0kB active_file:12824kB inactive_file:159976kB unevictable:1536kB writepending:364kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:36760kB local_pcp:20172kB free_cma:0kB [ 522.714812][T23254] lowmem_reserve[]: 0 0 0 0 0 [ 522.720262][T23254] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 522.722678][T23278] tipc: Enabled bearer , priority 0 [ 522.766932][T23279] syzkaller0: entered promiscuous mode [ 522.772225][T23254] lowmem_reserve[]: 0 0 0 0 0 [ 522.782519][T23254] Node 1 Normal free:3886664kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21776kB local_pcp:8792kB free_cma:0kB [ 522.823787][T23279] syzkaller0: entered allmulticast mode [ 522.838755][T23275] tipc: Resetting bearer [ 522.845871][T23270] netlink: 'syz.4.5001': attribute type 3 has an invalid length. [ 522.854859][T23254] lowmem_reserve[]: 0 0 0 0 0 [ 522.861133][T23254] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 522.876068][T23254] Node 0 DMA32: 1447*4kB (UM) 212*8kB (M) 140*16kB (UME) 496*32kB (UME) 207*64kB (UME) 72*128kB (UM) 94*256kB (UME) 74*512kB (UM) 53*1024kB (UM) 10*2048kB (UME) 214*4096kB (UM) = 1061308kB [ 522.898556][T23254] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 522.911569][T23269] tipc: Resetting bearer [ 522.945301][T23254] Node 1 Normal: 216*4kB (UE) 53*8kB (UME) 44*16kB (UME) 70*32kB (UME) 27*64kB (UME) 8*128kB (UME) 5*256kB (UM) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 945*4096kB (M) = 3886664kB [ 522.964579][T23269] tipc: Disabling bearer [ 522.966538][T23254] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 522.996024][T23254] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 523.015795][T23254] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 523.067491][T23254] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 523.088196][T23254] 44602 total pagecache pages [ 523.097889][T23254] 0 pages in swap cache [ 523.108435][T23254] Free swap = 124996kB [ 523.125385][T23254] Total swap = 124996kB [ 523.130744][T23254] 2097051 pages RAM [ 523.134566][T23254] 0 pages HighMem/MovableOnly [ 523.168683][T23254] 424119 pages reserved [ 523.173167][T23254] 0 pages cma reserved [ 523.255388][T23314] __nla_validate_parse: 13 callbacks suppressed [ 523.255405][T23314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5009'. [ 523.281127][T23312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5010'. [ 523.297076][T23314] bond0: Device is already in use. [ 523.406405][T23321] x_tables: duplicate underflow at hook 1 [ 523.804585][T23347] netlink: 240 bytes leftover after parsing attributes in process `syz.1.5017'. [ 524.033117][T23354] tipc: Enabling of bearer rejected, failed to enable media [ 524.181248][T23373] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5025'. [ 524.344244][T23383] syzkaller0: entered promiscuous mode [ 524.360960][T23383] syzkaller0: entered allmulticast mode [ 524.461963][T23397] xt_TCPMSS: Only works on TCP SYN packets [ 524.492424][T23399] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5029'. [ 524.672424][T23397] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 524.712794][T23397] bond7: (slave lo): Enslaving as a backup interface with an up link [ 524.741363][T23410] netlink: 'syz.3.5031': attribute type 13 has an invalid length. [ 524.762533][T23397] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 524.787885][T23410] veth0_macvtap: left promiscuous mode [ 524.808342][T23410] macvtap0: entered allmulticast mode [ 524.821522][T23410] macvtap0: refused to change device tx_queue_len [ 524.871120][T23410] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5031'. [ 525.001274][T23425] netlink: 'syz.1.5038': attribute type 2 has an invalid length. [ 525.099036][T23436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5040'. [ 525.671782][T23478] set match dimension is over the limit! [ 525.792566][T23486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5052'. [ 525.968424][T23492] bond8: option mode: invalid value (133) [ 525.986695][T23492] bond8 (unregistering): Released all slaves [ 526.321426][T23498] vlan0 (unregistering): left allmulticast mode [ 526.329225][T23498] veth0_vlan (unregistering): left allmulticast mode [ 526.336436][T23498] vlan0 (unregistering): left promiscuous mode [ 526.427019][T23517] tipc: Enabled bearer , priority 0 [ 526.439561][T23520] syzkaller0: entered promiscuous mode [ 526.445589][T23520] syzkaller0: entered allmulticast mode [ 526.479305][T23512] tipc: Resetting bearer [ 526.490948][T23512] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5058'. [ 526.522305][T23511] tipc: Resetting bearer [ 526.584588][T23523] netlink: 'syz.3.5062': attribute type 23 has an invalid length. [ 526.604328][T23511] tipc: Disabling bearer [ 526.628385][T23527] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 526.641092][T23525] delete_channel: no stack [ 526.646815][ T30] audit: type=1107 audit(1763021622.506:5): pid=23528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0;ltݕ/ 6򊨊' [ 526.656472][T23527] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 526.718361][T23535] netlink: 300 bytes leftover after parsing attributes in process `syz.1.5064'. [ 526.760113][T23521] delete_channel: no stack [ 526.991668][T23548] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 527.052877][T23556] block nbd7: Unsupported socket: should be TCP or UNIX. [ 527.164632][T23562] netlink: 'syz.0.5074': attribute type 27 has an invalid length. [ 527.191093][T23563] veth1_to_team: entered promiscuous mode [ 527.208807][T23563] macvtap1: entered promiscuous mode [ 527.214972][T23563] macvtap1: entered allmulticast mode [ 527.233723][T23563] veth1_to_team: entered allmulticast mode [ 527.408127][T23579] xt_nat: multiple ranges no longer supported [ 527.420010][T23579] xt_l2tp: wrong L2TP version: 0 [ 527.425853][T23580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 527.554471][T23585] netlink: 'syz.2.5083': attribute type 4 has an invalid length. [ 527.767832][T23602] bond4: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 527.782844][T23602] bond4 (unregistering): Released all slaves [ 527.800378][T23605] netlink: 'syz.3.5088': attribute type 1 has an invalid length. [ 527.840859][T23605] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 527.878414][T23605] xt_hashlimit: overflow, rate too high: 0 [ 528.002494][T23621] syzkaller0: entered promiscuous mode [ 528.016155][T23621] syzkaller0: entered allmulticast mode [ 528.398122][T23655] netlink: 'syz.3.5103': attribute type 29 has an invalid length. [ 528.440021][T23659] netlink: 'syz.3.5103': attribute type 29 has an invalid length. [ 528.492692][T23655] __nla_validate_parse: 8 callbacks suppressed [ 528.492709][T23655] netlink: 548 bytes leftover after parsing attributes in process `syz.3.5103'. [ 528.836151][T23678] atomic_op ffff888050056998 conn xmit_atomic 0000000000000000 [ 528.839434][T23682] xt_hashlimit: size too large, truncated to 1048576 [ 529.158703][T23699] pim6reg1: entered promiscuous mode [ 529.184315][T23699] pim6reg1: entered allmulticast mode [ 529.281256][T23705] netlink: 368 bytes leftover after parsing attributes in process `syz.2.5117'. [ 529.551776][T23725] syzkaller1: entered promiscuous mode [ 529.573589][T23725] syzkaller1: entered allmulticast mode [ 529.599362][T23725] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5123'. [ 529.710681][T23731] netlink: 192 bytes leftover after parsing attributes in process `syz.0.5125'. [ 529.750199][T23729] openvswitch: netlink: nsh attr 0 has unexpected len 12 expected 0 [ 529.760006][T23729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.774633][T23739] bond0: entered allmulticast mode [ 530.489760][T23780] netlink: 'syz.0.5140': attribute type 3 has an invalid length. [ 530.525118][T23780] netlink: 'syz.0.5140': attribute type 3 has an invalid length. [ 530.553551][T23782] openvswitch: netlink: Message has 536 unknown bytes. [ 530.586789][T23782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.732054][T23792] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5145'. [ 530.993105][T23813] tipc: Enabled bearer , priority 0 [ 531.017943][T23813] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 531.068112][T23812] tipc: Disabling bearer [ 531.093417][T23817] netlink: 'syz.2.5154': attribute type 1 has an invalid length. [ 531.105046][T23817] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5154'. [ 531.114476][T23817] netlink: 'syz.2.5154': attribute type 1 has an invalid length. [ 531.125317][T23819] "syz.0.5155" (23819) uses obsolete ecb(arc4) skcipher [ 531.419454][T23837] netlink: 388 bytes leftover after parsing attributes in process `syz.1.5162'. [ 531.470367][T23839] netlink: 'syz.4.5159': attribute type 1 has an invalid length. [ 531.545994][T23842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5162'. [ 531.591240][T23846] bond8: (slave geneve2): making interface the new active one [ 531.617409][T23846] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 531.627127][ T6679] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 531.635697][ T6679] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 531.654434][ T6679] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 531.684048][ T6679] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 531.721827][T23850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5164'. [ 531.908715][T23858] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5166'. [ 531.981060][T23861] bridge13: entered promiscuous mode [ 531.996108][T23861] bridge13: entered allmulticast mode [ 532.033263][ T30] audit: type=1800 audit(1763021627.896:6): pid=23863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5170" name="memory.events" dev="tmpfs" ino=1633 res=0 errno=0 [ 532.583561][T23900] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 532.648715][T23907] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 532.801466][T23918] syzkaller0: entered promiscuous mode [ 532.813754][T23918] syzkaller0: entered allmulticast mode [ 533.109304][T23924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.134418][T23923] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 533.251303][T23930] A link change request failed with some changes committed already. Interface Z7nz>RA may have been left with an inconsistent configuration, please check. [ 533.463581][T23948] 0: reclassify loop, rule prio 0, protocol 800 [ 533.644415][T23957] netlink: 'syz.4.5201': attribute type 63 has an invalid length. [ 533.661905][T23961] SET target dimension over the limit! [ 533.666149][T23957] netlink: 'syz.4.5201': attribute type 63 has an invalid length. [ 533.670264][T23961] __nla_validate_parse: 7 callbacks suppressed [ 533.670280][T23961] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5202'. [ 533.724048][T23963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5203'. [ 533.745448][T23961] syzkaller0: entered promiscuous mode [ 533.751121][T23961] syzkaller0: entered allmulticast mode [ 533.860561][T23975] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 533.885276][T23975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5206'. [ 533.935101][T23975] 8021q: adding VLAN 0 to HW filter on device bond4 [ 533.956431][T23978] net veth1_virt_wifi .: renamed from virt_wifi0 [ 534.026772][T23988] xt_hashlimit: size too large, truncated to 1048576 [ 534.188843][ T5838] block nbd7: Receive control failed (result -32) [ 534.273425][T24007] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5215'. [ 534.381494][T24014] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5218'. [ 534.521122][T24019] bridge11: entered promiscuous mode [ 534.533795][T24019] bridge11: entered allmulticast mode [ 534.624126][T24032] netlink: 'syz.3.5224': attribute type 21 has an invalid length. [ 534.632906][T24032] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 534.655733][T24036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5227'. [ 534.667995][T24031] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 535.479611][T24105] tipc: Enabled bearer , priority 0 [ 535.495775][T24106] bridge0: Caught tx_queue_len zero misconfig [ 535.514625][T24109] netlink: 'syz.0.5246': attribute type 8 has an invalid length. [ 535.523874][T24105] syzkaller0: entered promiscuous mode [ 535.529664][T24105] syzkaller0: entered allmulticast mode [ 535.578610][T24118] tipc: Resetting bearer [ 535.658111][T24102] tipc: Resetting bearer [ 535.716413][T24102] tipc: Disabling bearer [ 535.732525][T24128] netlink: 'syz.1.5250': attribute type 1 has an invalid length. [ 535.750741][T24128] netlink: 'syz.1.5250': attribute type 3 has an invalid length. [ 535.766159][T24128] netlink: 'syz.1.5250': attribute type 7 has an invalid length. [ 535.791075][T24128] netlink: 'syz.1.5250': attribute type 8 has an invalid length. [ 535.799347][T24128] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5250'. [ 535.811239][T24128] NCSI netlink: No device for ifindex 131092 [ 536.158679][T24158] netlink: 'syz.2.5261': attribute type 5 has an invalid length. [ 536.202605][T24159] bond5: option arp_all_targets: invalid value (18446744073709551613) [ 536.212490][T24159] bond5 (unregistering): Released all slaves [ 536.267656][T24165] netlink: 'syz.1.5264': attribute type 10 has an invalid length. [ 536.279227][T24165] veth0_virt_wifi: entered allmulticast mode [ 536.311071][T24165] team0: Port device veth0_virt_wifi added [ 536.568572][T24188] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5272'. [ 536.662785][T24188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5272'. [ 536.673344][T24188] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5272'. [ 536.834938][T24204] wg1: entered promiscuous mode [ 536.840141][T24204] wg1: entered allmulticast mode [ 538.582817][T24329] team0: Port device dummy0 added [ 538.685284][T24340] syzkaller0: entered promiscuous mode [ 538.694681][T24340] syzkaller0: entered allmulticast mode [ 538.799399][T24347] __nla_validate_parse: 44 callbacks suppressed [ 538.799417][T24347] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5317'. [ 538.815811][T24347] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5317'. [ 538.825093][T24347] netlink: 19 bytes leftover after parsing attributes in process `syz.1.5317'. [ 538.972576][T24357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5320'. [ 539.173454][T24368] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:20000 [ 539.263821][T24368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.275153][T24368] [ 539.277502][T24368] ====================================================== [ 539.284519][T24368] WARNING: possible circular locking dependency detected [ 539.291531][T24368] syzkaller #0 Not tainted [ 539.295928][T24368] ------------------------------------------------------ [ 539.303043][T24368] syz.2.5325/24368 is trying to acquire lock: [ 539.309084][T24368] ffff888023edaa18 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x22b7/0x3b50 [ 539.321255][T24368] [ 539.321255][T24368] but task is already holding lock: [ 539.328605][T24368] ffff88802ca1fd58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 539.338431][T24368] [ 539.338431][T24368] which lock already depends on the new lock. [ 539.338431][T24368] [ 539.348819][T24368] [ 539.348819][T24368] the existing dependency chain (in reverse order) is: [ 539.357814][T24368] [ 539.357814][T24368] -> #1 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}: [ 539.366054][T24368] lock_acquire+0x120/0x360 [ 539.371062][T24368] _raw_spin_lock+0x2e/0x40 [ 539.376069][T24368] sch_direct_xmit+0x153/0x4b0 [ 539.381347][T24368] __dev_queue_xmit+0x1857/0x3b50 [ 539.386879][T24368] ip6_finish_output2+0xfb3/0x1480 [ 539.392500][T24368] ip6_output+0x340/0x550 [ 539.397331][T24368] NF_HOOK+0x9e/0x380 [ 539.401816][T24368] mld_sendpack+0x8d4/0xe60 [ 539.406827][T24368] mld_ifc_work+0x83e/0xd60 [ 539.411838][T24368] process_scheduled_works+0xae1/0x17b0 [ 539.417886][T24368] worker_thread+0x8a0/0xda0 [ 539.422984][T24368] kthread+0x711/0x8a0 [ 539.427565][T24368] ret_from_fork+0x4bc/0x870 [ 539.432660][T24368] ret_from_fork_asm+0x1a/0x30 [ 539.438268][T24368] [ 539.438268][T24368] -> #0 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}: [ 539.448680][T24368] validate_chain+0xb9b/0x2140 [ 539.453947][T24368] __lock_acquire+0xab9/0xd20 [ 539.459145][T24368] lock_acquire+0x120/0x360 [ 539.464150][T24368] _raw_spin_lock+0x2e/0x40 [ 539.469159][T24368] __dev_queue_xmit+0x22b7/0x3b50 [ 539.474685][T24368] ip6_finish_output2+0xfb3/0x1480 [ 539.480309][T24368] ip6_output+0x340/0x550 [ 539.485152][T24368] ndisc_send_skb+0xbce/0x1510 [ 539.490419][T24368] ndisc_solicit+0x444/0x610 [ 539.495603][T24368] __neigh_event_send+0xf70/0x1560 [ 539.501215][T24368] neigh_resolve_output+0x198/0x750 [ 539.506934][T24368] ip6_finish_output2+0xfb3/0x1480 [ 539.512551][T24368] ip6_output+0x340/0x550 [ 539.517387][T24368] ip6_send_skb+0x1d5/0x390 [ 539.522397][T24368] icmp6_send+0x12c6/0x1940 [ 539.527409][T24368] ip6_link_failure+0x3b/0x4c0 [ 539.533284][T24368] ip_tunnel_xmit+0x175b/0x2390 [ 539.538651][T24368] __gre_xmit+0x19a/0x240 [ 539.543483][T24368] erspan_xmit+0xa04/0x1220 [ 539.548525][T24368] dev_hard_start_xmit+0x2d7/0x830 [ 539.554141][T24368] sch_direct_xmit+0x241/0x4b0 [ 539.559409][T24368] __qdisc_run+0xaa0/0x1540 [ 539.564414][T24368] __dev_queue_xmit+0x1056/0x3b50 [ 539.569937][T24368] ip6_finish_output2+0xfb3/0x1480 [ 539.575554][T24368] ip6_output+0x340/0x550 [ 539.580398][T24368] ip6_mr_output+0x4e9/0x1100 [ 539.585670][T24368] rawv6_send_hdrinc+0xe16/0x17a0 [ 539.591191][T24368] rawv6_sendmsg+0x12ee/0x1830 [ 539.596456][T24368] __sock_sendmsg+0x19c/0x270 [ 539.601982][T24368] ____sys_sendmsg+0x505/0x830 [ 539.607250][T24368] ___sys_sendmsg+0x21f/0x2a0 [ 539.612427][T24368] __x64_sys_sendmsg+0x19b/0x260 [ 539.617865][T24368] do_syscall_64+0xfa/0xfa0 [ 539.622871][T24368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.629265][T24368] [ 539.629265][T24368] other info that might help us debug this: [ 539.629265][T24368] [ 539.639473][T24368] Possible unsafe locking scenario: [ 539.639473][T24368] [ 539.646904][T24368] CPU0 CPU1 [ 539.652244][T24368] ---- ---- [ 539.657585][T24368] lock(&qdisc_xmit_lock_key#4); [ 539.662600][T24368] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 539.672214][T24368] lock(&qdisc_xmit_lock_key#4); [ 539.679745][T24368] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 539.686843][T24368] [ 539.686843][T24368] *** DEADLOCK *** [ 539.686843][T24368] [ 539.694964][T24368] 12 locks held by syz.2.5325/24368: [ 539.700251][T24368] #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: rawv6_send_hdrinc+0xc9f/0x17a0 [ 539.709982][T24368] #1: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: ip6_mr_output+0x1ca/0x1100 [ 539.719381][T24368] #2: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 539.728432][T24368] #3: ffffffff8df3d6c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 539.738343][T24368] #4: ffff88802ca1fd58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 539.748602][T24368] #5: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: icmp6_send+0x1e9/0x1940 [ 539.757728][T24368] #6: ffff88802ee80a20 (k-slock-AF_INET6){+.-.}-{3:3}, at: icmp6_send+0xc5c/0x1940 [ 539.767107][T24368] #7: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: ip6_send_skb+0x10f/0x390 [ 539.776315][T24368] #8: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 539.785380][T24368] #9: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x1e4/0x1510 [ 539.794853][T24368] #10: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 539.803975][T24368] #11: ffffffff8df3d6c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 539.813987][T24368] [ 539.813987][T24368] stack backtrace: [ 539.819861][T24368] CPU: 1 UID: 0 PID: 24368 Comm: syz.2.5325 Not tainted syzkaller #0 PREEMPT(full) [ 539.819894][T24368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 539.819910][T24368] Call Trace: [ 539.819921][T24368] [ 539.819932][T24368] dump_stack_lvl+0x189/0x250 [ 539.819970][T24368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 539.819998][T24368] ? __pfx__printk+0x10/0x10 [ 539.820012][T24368] ? print_lock_name+0xde/0x100 [ 539.820027][T24368] print_circular_bug+0x2ee/0x310 [ 539.820045][T24368] check_noncircular+0x134/0x160 [ 539.820064][T24368] validate_chain+0xb9b/0x2140 [ 539.820088][T24368] __lock_acquire+0xab9/0xd20 [ 539.820103][T24368] ? __dev_queue_xmit+0x22b7/0x3b50 [ 539.820118][T24368] lock_acquire+0x120/0x360 [ 539.820130][T24368] ? __dev_queue_xmit+0x22b7/0x3b50 [ 539.820147][T24368] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 539.820163][T24368] ? check_noncircular+0xe0/0x160 [ 539.820180][T24368] _raw_spin_lock+0x2e/0x40 [ 539.820196][T24368] ? __dev_queue_xmit+0x22b7/0x3b50 [ 539.820211][T24368] __dev_queue_xmit+0x22b7/0x3b50 [ 539.820230][T24368] ? __dev_queue_xmit+0x27b/0x3b50 [ 539.820253][T24368] ? neigh_resolve_output+0x438/0x750 [ 539.820272][T24368] ? __pfx___dev_queue_xmit+0x10/0x10 [ 539.820288][T24368] ? read_seqbegin+0x122/0x250 [ 539.820304][T24368] ? neigh_resolve_output+0x438/0x750 [ 539.820322][T24368] ? lockdep_hardirqs_on+0x9c/0x150 [ 539.820340][T24368] ? read_seqbegin+0x1ac/0x250 [ 539.820357][T24368] ? __pfx_read_seqbegin+0x10/0x10 [ 539.820374][T24368] ? __local_bh_enable_ip+0x12d/0x1c0 [ 539.820388][T24368] ? eth_header+0x11b/0x200 [ 539.820402][T24368] ? __asan_memcpy+0x40/0x70 [ 539.820428][T24368] ip6_finish_output2+0xfb3/0x1480 [ 539.820452][T24368] ? __pfx_ip6_finish_output2+0x10/0x10 [ 539.820471][T24368] ? ip6_mtu+0x7d/0x490 [ 539.820487][T24368] ? ip6_mtu+0x38c/0x490 [ 539.820503][T24368] ? ip6_finish_output+0x2ef/0x4e0 [ 539.820520][T24368] ? ip6_output+0x126/0x550 [ 539.820536][T24368] ip6_output+0x340/0x550 [ 539.820554][T24368] ndisc_send_skb+0xbce/0x1510 [ 539.820568][T24368] ? ndisc_send_skb+0x1e4/0x1510 [ 539.820585][T24368] ? __pfx_ndisc_send_skb+0x10/0x10 [ 539.820599][T24368] ? __pfx_dst_output+0x10/0x10 [ 539.820616][T24368] ? ipv6_get_lladdr+0x2b/0x3f0 [ 539.820629][T24368] ? ipv6_get_lladdr+0x2b/0x3f0 [ 539.820641][T24368] ? ipv6_get_lladdr+0x2b/0x3f0 [ 539.820654][T24368] ? ipv6_get_lladdr+0x378/0x3f0 [ 539.820666][T24368] ? ipv6_get_lladdr+0x2b/0x3f0 [ 539.820680][T24368] ndisc_solicit+0x444/0x610 [ 539.820698][T24368] ? __pfx_ndisc_solicit+0x10/0x10 [ 539.820715][T24368] ? __neigh_event_send+0xf08/0x1560 [ 539.820733][T24368] ? __pfx_ndisc_solicit+0x10/0x10 [ 539.820748][T24368] __neigh_event_send+0xf70/0x1560 [ 539.820768][T24368] ? ___neigh_create+0x1c83/0x2260 [ 539.820787][T24368] neigh_resolve_output+0x198/0x750 [ 539.820811][T24368] ip6_finish_output2+0xfb3/0x1480 [ 539.820833][T24368] ? __pfx_ip6_finish_output2+0x10/0x10 [ 539.820852][T24368] ? ip6_mtu+0x7d/0x490 [ 539.820866][T24368] ? ip6_mtu+0x38c/0x490 [ 539.820882][T24368] ? ip6_finish_output+0x2ef/0x4e0 [ 539.820898][T24368] ? ip6_output+0x126/0x550 [ 539.820914][T24368] ip6_output+0x340/0x550 [ 539.820930][T24368] ? ip6_send_skb+0x10f/0x390 [ 539.820948][T24368] ip6_send_skb+0x1d5/0x390 [ 539.820966][T24368] icmp6_send+0x12c6/0x1940 [ 539.820980][T24368] ? icmp6_send+0x1e9/0x1940 [ 539.821000][T24368] ? __pfx_icmp6_send+0x10/0x10 [ 539.821014][T24368] ? __lock_acquire+0xab9/0xd20 [ 539.821032][T24368] ? ip6_neigh_lookup+0x14e/0x470 [ 539.821048][T24368] ? ip6_neigh_lookup+0x14e/0x470 [ 539.821061][T24368] ? ip6_neigh_lookup+0x397/0x470 [ 539.821074][T24368] ? ip6_neigh_lookup+0x14e/0x470 [ 539.821088][T24368] ? __pfx_ip6_neigh_lookup+0x10/0x10 [ 539.821104][T24368] ip6_link_failure+0x3b/0x4c0 [ 539.821120][T24368] ip_tunnel_xmit+0x175b/0x2390 [ 539.821140][T24368] ? desc_read+0x1b8/0x3f0 [ 539.821154][T24368] ? ip_tunnel_xmit+0x110/0x2390 [ 539.821172][T24368] ? _prb_read_valid+0xa07/0xa90 [ 539.821185][T24368] ? console_flush_all+0x13a/0xb10 [ 539.821204][T24368] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 539.821221][T24368] ? gre_build_header+0x31c/0xa40 [ 539.821245][T24368] ? __pfx_gre_build_header+0x10/0x10 [ 539.821260][T24368] ? __console_unlock+0x14c/0x1a0 [ 539.821276][T24368] ? __pfx___console_unlock+0x10/0x10 [ 539.821292][T24368] ? __pfx_skb_network_protocol+0x10/0x10 [ 539.821308][T24368] __gre_xmit+0x19a/0x240 [ 539.821325][T24368] ? __pfx___gre_xmit+0x10/0x10 [ 539.821341][T24368] ? __asan_memset+0x22/0x50 [ 539.821356][T24368] ? erspan_build_header+0x19c/0x370 [ 539.821375][T24368] erspan_xmit+0xa04/0x1220 [ 539.821397][T24368] ? __pfx_erspan_xmit+0x10/0x10 [ 539.821414][T24368] ? __lock_acquire+0xab9/0xd20 [ 539.821429][T24368] dev_hard_start_xmit+0x2d7/0x830 [ 539.821449][T24368] sch_direct_xmit+0x241/0x4b0 [ 539.821469][T24368] ? __pfx_sch_direct_xmit+0x10/0x10 [ 539.821486][T24368] ? gred_dequeue+0x4a6/0x680 [ 539.821505][T24368] __qdisc_run+0xaa0/0x1540 [ 539.821528][T24368] __dev_queue_xmit+0x1056/0x3b50 [ 539.821543][T24368] ? register_lock_class+0x51/0x320 [ 539.821559][T24368] ? __dev_queue_xmit+0x27b/0x3b50 [ 539.821579][T24368] ? __pfx___dev_queue_xmit+0x10/0x10 [ 539.821594][T24368] ? read_seqbegin+0x122/0x250 [ 539.821611][T24368] ? neigh_resolve_output+0x438/0x750 [ 539.821627][T24368] ? lockdep_hardirqs_on+0x9c/0x150 [ 539.821644][T24368] ? read_seqbegin+0x1ac/0x250 [ 539.821661][T24368] ? __pfx_read_seqbegin+0x10/0x10 [ 539.821677][T24368] ? __local_bh_enable_ip+0x12d/0x1c0 [ 539.821690][T24368] ? eth_header+0x11b/0x200 [ 539.821704][T24368] ? __asan_memcpy+0x40/0x70 [ 539.821729][T24368] ip6_finish_output2+0xfb3/0x1480 [ 539.821751][T24368] ? __pfx_ip6_finish_output2+0x10/0x10 [ 539.821770][T24368] ? ip6_mtu+0x7d/0x490 [ 539.821784][T24368] ? ip6_mtu+0x38c/0x490 [ 539.821801][T24368] ? ip6_finish_output+0x2ef/0x4e0 [ 539.821817][T24368] ? ip6_output+0x126/0x550 [ 539.821833][T24368] ip6_output+0x340/0x550 [ 539.821850][T24368] ip6_mr_output+0x4e9/0x1100 [ 539.821871][T24368] ? ip6_mr_output+0x1ca/0x1100 [ 539.821891][T24368] ? __pfx_ip6_mr_output+0x10/0x10 [ 539.821912][T24368] ? ip6t_do_table+0x1db/0x1560 [ 539.821931][T24368] ? __pfx_ip6t_do_table+0x10/0x10 [ 539.821955][T24368] ? skb_dst+0x4f/0xd0 [ 539.821968][T24368] ? dst_output+0x17b/0x1c0 [ 539.821981][T24368] ? rawv6_send_hdrinc+0xc9f/0x17a0 [ 539.821997][T24368] rawv6_send_hdrinc+0xe16/0x17a0 [ 539.822016][T24368] ? __pfx_rawv6_send_hdrinc+0x10/0x10 [ 539.822028][T24368] ? txopt_get+0x335/0x3f0 [ 539.822041][T24368] ? __pfx_dst_output+0x10/0x10 [ 539.822054][T24368] ? __pfx_txopt_get+0x10/0x10 [ 539.822069][T24368] rawv6_sendmsg+0x12ee/0x1830 [ 539.822089][T24368] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 539.822111][T24368] ? __pfx_aa_sk_perm+0x10/0x10 [ 539.822129][T24368] ? sock_rps_record_flow+0x19/0x410 [ 539.822149][T24368] ? inet_sendmsg+0x2f4/0x370 [ 539.822160][T24368] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 539.822174][T24368] __sock_sendmsg+0x19c/0x270 [ 539.822192][T24368] ____sys_sendmsg+0x505/0x830 [ 539.822208][T24368] ? __pfx_____sys_sendmsg+0x10/0x10 [ 539.822225][T24368] ? import_iovec+0x74/0xa0 [ 539.822246][T24368] ___sys_sendmsg+0x21f/0x2a0 [ 539.822262][T24368] ? __pfx____sys_sendmsg+0x10/0x10 [ 539.822288][T24368] ? __fget_files+0x2a/0x420 [ 539.822300][T24368] ? __fget_files+0x3a0/0x420 [ 539.822316][T24368] __x64_sys_sendmsg+0x19b/0x260 [ 539.822330][T24368] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 539.822350][T24368] ? do_syscall_64+0xbe/0xfa0 [ 539.822370][T24368] do_syscall_64+0xfa/0xfa0 [ 539.822388][T24368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.822401][T24368] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 539.822415][T24368] ? clear_bhb_loop+0x60/0xb0 [ 539.822430][T24368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.822443][T24368] RIP: 0033:0x7fee9cb8f6c9 [ 539.822456][T24368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.822468][T24368] RSP: 002b:00007fee9d98a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 539.822483][T24368] RAX: ffffffffffffffda RBX: 00007fee9cde5fa0 RCX: 00007fee9cb8f6c9 [ 539.822493][T24368] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 539.822502][T24368] RBP: 00007fee9cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 539.822511][T24368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.822520][T24368] R13: 00007fee9cde6038 R14: 00007fee9cde5fa0 R15: 00007fff188e0dc8 [ 539.822536][T24368] [ 540.638962][T24368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.647793][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.686337][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog